@openclaw/discord 2026.9.1-beta.1 → 2026.9.2

package/dist/{secret-config-contract-B3i6WxV5.js → secret-config-contract-DFu9hfU8.js}

@@ -3,7 +3,7 @@ import { collectNestedChannelFieldAssignments, collectSimpleChannelFieldAssignme
 import { collectNestedChannelTtsAssignments } from "openclaw/plugin-sdk/channel-secret-tts-runtime";
 //#region extensions/discord/src/secret-config-contract.ts
 function createVoiceProviderSecretTarget(params) {
-	const path = `${params.scope === "account" ? "channels.discord.accounts.*" : "channels.discord"}.voice.${params.capability}.providers.*.apiKey`;
+	const path = `${params.scope === "account" ? "channels.discord.accounts.*" : "channels.discord"}.voice.${params.providerPath}.providers.*.apiKey`;
 	return {
 		id: path,
 		targetType: path,
@@ -14,7 +14,7 @@ function createVoiceProviderSecretTarget(params) {
 		includeInPlan: true,
 		includeInConfigure: true,
 		includeInAudit: true,
-		providerIdPathSegmentIndex: params.scope === "account" ? 7 : 5
+		providerIdPathSegmentIndex: path.split(".").length - 2
 	};
 }
 function discordRealtimeVoiceSecretOwnerId(accountId, providerId) {
@@ -47,11 +47,15 @@ const secretTargetRegistryEntries = [
 		includeInAudit: true
 	},
 	createVoiceProviderSecretTarget({
-		capability: "realtime",
+		providerPath: "realtime",
 		scope: "account"
 	}),
 	createVoiceProviderSecretTarget({
-		capability: "tts",
+		providerPath: "tts",
+		scope: "account"
+	}),
+	createVoiceProviderSecretTarget({
+		providerPath: "tts.personas.*",
 		scope: "account"
 	}),
 	{
@@ -77,11 +81,15 @@ const secretTargetRegistryEntries = [
 		includeInAudit: true
 	},
 	createVoiceProviderSecretTarget({
-		capability: "realtime",
+		providerPath: "realtime",
+		scope: "channel"
+	}),
+	createVoiceProviderSecretTarget({
+		providerPath: "tts",
 		scope: "channel"
 	}),
 	createVoiceProviderSecretTarget({
-		capability: "tts",
+		providerPath: "tts.personas.*",
 		scope: "channel"
 	})
 ];

package/dist/secret-contract-api.js

@@ -1,2 +1,2 @@
-import { r as secretTargetRegistryEntries, t as collectRuntimeConfigAssignments } from "./secret-config-contract-B3i6WxV5.js";
+import { r as secretTargetRegistryEntries, t as collectRuntimeConfigAssignments } from "./secret-config-contract-DFu9hfU8.js";
 export { collectRuntimeConfigAssignments, secretTargetRegistryEntries };

package/dist/{security-audit-BfJhAXZp.js → security-audit-DKfK-iPY.js}

@@ -32,12 +32,8 @@ function listBroadMemberTargetPaths(params) {
 }
 function addDiscordNameBasedEntries(params) {
 	if (!Array.isArray(params.values)) return;
-	for (const value of params.values) {
-		if (!isDiscordMutableAllowEntry(String(value))) continue;
-		const text = normalizeOptionalString(String(value)) ?? "";
-		if (!text) continue;
-		params.target.add(`${params.source}:${text}`);
-	}
+	const entries = new Set(params.values.map((value) => String(value).trim()).filter(isDiscordMutableAllowEntry));
+	if (entries.size > 0) params.target.set(params.source, entries.size);
 }
 async function collectDiscordSecurityAuditFindings(params) {
 	const findings = [];
@@ -45,7 +41,7 @@ async function collectDiscordSecurityAuditFindings(params) {
 	const accountId = normalizeOptionalString(params.accountId) ?? params.account.accountId ?? "default";
 	const dangerousNameMatchingEnabled = isDangerousNameMatchingEnabled(discordCfg);
 	const storeAllowFrom = await readChannelAllowFromStore("discord", process.env, accountId).catch(() => []);
-	const discordNameBasedAllowEntries = /* @__PURE__ */ new Set();
+	const discordNameBasedAllowEntries = /* @__PURE__ */ new Map();
 	const discordPathPrefix = params.orderedAccountIds.length > 1 || params.hasExplicitAccountPath ? `channels.discord.accounts.${accountId}` : "channels.discord";
 	if ((discordCfg.groupPolicy ?? params.cfg.channels?.defaults?.groupPolicy ?? "allowlist") === "allowlist") {
 		const broadMemberPaths = listBroadMemberTargetPaths({
@@ -73,7 +69,7 @@ async function collectDiscordSecurityAuditFindings(params) {
 	addDiscordNameBasedEntries({
 		target: discordNameBasedAllowEntries,
 		values: storeAllowFrom,
-		source: "~/.openclaw/credentials/discord-allowFrom.json"
+		source: "Discord pairing store"
 	});
 	const guildEntries = discordCfg.guilds ?? {};
 	for (const [guildKey, guildValue] of Object.entries(guildEntries)) {
@@ -96,13 +92,16 @@ async function collectDiscordSecurityAuditFindings(params) {
 		}
 	}
 	if (discordNameBasedAllowEntries.size > 0) {
-		const examples = Array.from(discordNameBasedAllowEntries).slice(0, 5);
-		const more = discordNameBasedAllowEntries.size > examples.length ? ` (+${discordNameBasedAllowEntries.size - examples.length} more)` : "";
+		const counts = Array.from(discordNameBasedAllowEntries);
+		const entryCount = counts.reduce((total, [, count]) => total + count, 0);
+		const sources = counts.slice(0, 5).map(([source, count]) => `${source} (${count})`);
+		const more = counts.length > sources.length ? ` (+${counts.length - sources.length} more sources)` : "";
+		const summary = `Found ${entryCount} name/tag entries: ${sources.join(", ")}${more}.`;
 		findings.push({
 			checkId: "channels.discord.allowFrom.name_based_entries",
 			severity: dangerousNameMatchingEnabled ? "info" : "warn",
 			title: dangerousNameMatchingEnabled ? "Discord allowlist uses break-glass name/tag matching" : "Discord allowlist contains name or tag entries",
-			detail: dangerousNameMatchingEnabled ? `Discord name/tag allowlist matching is explicitly enabled via dangerouslyAllowNameMatching. This mutable-identity mode is operator-selected break-glass behavior and out-of-scope for vulnerability reports by itself. Found: ${examples.join(", ")}${more}.` : `Discord name/tag allowlist matching uses normalized slugs and can collide across users. Found: ${examples.join(", ")}${more}.`,
+			detail: dangerousNameMatchingEnabled ? "Discord name/tag allowlist matching is explicitly enabled via dangerouslyAllowNameMatching. This mutable-identity mode is operator-selected break-glass behavior and out-of-scope for vulnerability reports by itself. " + summary : "Discord name/tag allowlist matching uses normalized slugs and can collide across users. " + summary,
 			remediation: dangerousNameMatchingEnabled ? "Prefer stable Discord IDs (or <@id>/user:<id>/pk:<id>), then disable dangerouslyAllowNameMatching." : "Prefer stable Discord IDs (or <@id>/user:<id>/pk:<id>) in channels.discord.allowFrom and channels.discord.guilds.*.users, or explicitly opt in with dangerouslyAllowNameMatching=true if you accept the risk."
 		});
 	}

package/dist/security-audit-contract-api.js

@@ -1,2 +1,2 @@
-import { t as collectDiscordSecurityAuditFindings } from "./security-audit-BfJhAXZp.js";
+import { t as collectDiscordSecurityAuditFindings } from "./security-audit-DKfK-iPY.js";
 export { collectDiscordSecurityAuditFindings };

package/dist/{security-audit.runtime-BVKF9VtY.js → security-audit.runtime-sKZyKgpx.js}

@@ -1,2 +1,2 @@
-import { t as collectDiscordSecurityAuditFindings } from "./security-audit-BfJhAXZp.js";
+import { t as collectDiscordSecurityAuditFindings } from "./security-audit-DKfK-iPY.js";
 export { collectDiscordSecurityAuditFindings };

package/dist/{send-C49MFF9j.js → send-CZeWKUiA.js}

@@ -1,8 +1,8 @@
-import { $t as listGuildRoles, At as getChannel, B as readRetryAfter, Bt as addGuildMemberRole, Ct as listMessageReactionUsers, Dt as deleteChannelMessage, Et as deleteChannel, F as DiscordError, Ft as listChannelPins, Gt as createGuildSticker, Ht as createGuildChannel, I as RateLimitError, It as pinChannelMessage, Jt as getGuildMember, Kt as deleteChannelPermission, L as isUnknownDiscordVoiceStateError, Lt as searchGuildMessages, Nt as listChannelArchivedThreads, Ot as editChannel, Pt as listChannelMessages, Qt as listGuildEmojis, R as readDiscordCode, Rt as sendChannelTyping, St as deleteOwnMessageReaction, Tt as createThread, Ut as createGuildEmoji, Vt as createGuildBan, Wt as createGuildScheduledEvent, Xt as listGuildActiveThreads, Yt as getGuildVoiceState, Zt as listGuildChannels, an as timeoutGuildMember, c as createDiscordSendResult, en as listGuildScheduledEvents, i as recordDiscordMessageCreateAmbiguity, in as removeGuildMemberRole, jt as getChannelMessage, kt as editChannelMessage, n as createDiscordRetryRunner, nn as putChannelPermission, on as __exportAll, qt as getGuild, rn as removeGuildMember, t as classifyDiscordDeliveryFailure, tn as moveGuildChannels, xt as createOwnMessageReaction, z as readDiscordMessage, zt as unpinChannelMessage } from "./retry-Cv4jCU5Z.js";
-import { t as parseDiscordRetryAfterBodySeconds } from "./retry-after-DdLPmPoa.js";
-import { C as hasAllGuildPermissionsDiscord, I as resolveDiscordClientAccountContext, K as parseAndResolveChannelRecipient, L as resolveDiscordRest, M as resolveDiscordSuppressEmbeds, N as createDiscordClient, O as createDiscordMessageNonce, R as DISCORD_REST_TIMEOUT_MS, S as fetchMemberGuildPermissionsDiscord, T as hasAnyGuildPermissionDiscord, _ as DiscordSendError, b as canViewDiscordGuildChannel, g as DISCORD_MAX_STICKER_BYTES, h as DISCORD_MAX_EVENT_COVER_BYTES, i as formatReactionEmoji, k as resolveDiscordMessageFlags, l as resolveChannelId, m as DISCORD_MAX_EMOJI_BYTES, n as buildDiscordTextChunks, o as normalizeEmojiName, p as sendDiscordText, r as buildReactionIdentifier, s as normalizeReactionEmoji, t as buildDiscordSendError, v as canManageGuildMemberRoleDiscord, w as hasAnyChannelPermissionDiscord, x as fetchChannelPermissionsDiscord, y as canManageGuildRoleDiscord } from "./send.shared-JjljcV4O.js";
-import { n as sendPollDiscord, o as rewriteDiscordKnownMentions, r as sendStickerDiscord, t as sendMessageDiscord } from "./send.outbound-zam0TrZx.js";
-import { n as DISCORD_ATTACHMENT_TOTAL_TIMEOUT_MS } from "./timeouts-B9cy6RvQ.js";
+import { $t as listGuildEmojis, At as editChannelMessage, B as readDiscordMessage, Bt as unpinChannelMessage, Ct as deleteOwnMessageReaction, Dt as deleteChannel, Et as createThread, Ft as listChannelMessages, Gt as createGuildScheduledEvent, Ht as createGuildBan, I as DiscordError, It as listChannelPins, Jt as getGuild, Kt as createGuildSticker, L as RateLimitError, Lt as pinChannelMessage, Mt as getChannelMessage, Ot as deleteChannelMessage, Pt as listChannelArchivedThreads, Qt as listGuildChannels, R as isUnknownDiscordVoiceStateError, Rt as searchGuildMessages, St as createOwnMessageReaction, Ut as createGuildChannel, V as readRetryAfter, Vt as addGuildMemberRole, Wt as createGuildEmoji, Xt as getGuildVoiceState, Yt as getGuildMember, Zt as listGuildActiveThreads, a as recordDiscordMessageCreateAmbiguity, an as removeGuildMemberRole, c as createDiscordSendReceiptFromResults, en as listGuildRoles, in as removeGuildMember, jt as getChannel, kt as editChannel, l as createDiscordSendResult, n as classifyDiscordDeliveryFailure, nn as moveGuildChannels, o as chunkDiscordTextWithMode, on as timeoutGuildMember, qt as deleteChannelPermission, r as createDiscordRetryRunner, rn as putChannelPermission, sn as __exportAll, tn as listGuildScheduledEvents, wt as listMessageReactionUsers, z as readDiscordCode, zt as sendChannelTyping } from "./retry-DQt1zDgH.js";
+import { t as parseDiscordRetryAfterBodySeconds } from "./retry-after-BrLjLUJi.js";
+import { C as hasAllGuildPermissionsDiscord, I as resolveDiscordClientAccountContext, K as parseAndResolveChannelRecipient, L as resolveDiscordRest, M as resolveDiscordSuppressEmbeds, N as createDiscordClient, O as createDiscordMessageNonce, R as DISCORD_REST_TIMEOUT_MS, S as fetchMemberGuildPermissionsDiscord, T as hasAnyGuildPermissionDiscord, _ as DiscordSendError, b as canViewDiscordGuildChannel, g as DISCORD_MAX_STICKER_BYTES, h as DISCORD_MAX_EVENT_COVER_BYTES, i as formatReactionEmoji, k as resolveDiscordMessageFlags, l as resolveChannelId, m as DISCORD_MAX_EMOJI_BYTES, n as buildDiscordTextChunks, o as normalizeEmojiName, p as sendDiscordText, r as buildReactionIdentifier, s as normalizeReactionEmoji, t as buildDiscordSendError, v as canManageGuildMemberRoleDiscord, w as hasAnyChannelPermissionDiscord, x as fetchChannelPermissionsDiscord, y as canManageGuildRoleDiscord } from "./send.shared-B0n_fWzu.js";
+import { n as sendPollDiscord, o as rewriteDiscordKnownMentions, r as sendStickerDiscord, t as sendMessageDiscord } from "./send.outbound-DHuFUL6W.js";
+import { n as DISCORD_ATTACHMENT_TOTAL_TIMEOUT_MS } from "./timeouts-D86uWLt_.js";
 import fs from "node:fs/promises";
 import { ChannelType } from "discord-api-types/v10";
 import crypto from "node:crypto";
@@ -55,7 +55,8 @@ async function editChannelDiscord(payload, opts) {
 	return await editChannel(rest, payload.channelId, { body });
 }
 async function deleteChannelDiscord(channelId, opts) {
-	await deleteChannel(resolveDiscordRest(opts), channelId);
+	const rest = resolveDiscordRest(opts);
+	await deleteChannel(rest, channelId);
 	return {
 		ok: true,
 		channelId
@@ -80,13 +81,15 @@ async function setChannelPermissionDiscord(payload, opts) {
 	return { ok: true };
 }
 async function removeChannelPermissionDiscord(channelId, targetId, opts) {
-	await deleteChannelPermission(resolveDiscordRest(opts), channelId, targetId);
+	const rest = resolveDiscordRest(opts);
+	await deleteChannelPermission(rest, channelId, targetId);
 	return { ok: true };
 }
 //#endregion
 //#region extensions/discord/src/send.emojis-stickers.ts
 async function listGuildEmojisDiscord(guildId, opts) {
-	return await listGuildEmojis(resolveDiscordRest(opts), guildId);
+	const rest = resolveDiscordRest(opts);
+	return await listGuildEmojis(rest, guildId);
 }
 async function uploadEmojiDiscord(payload, opts) {
 	const rest = resolveDiscordRest(opts);
@@ -133,27 +136,34 @@ async function uploadStickerDiscord(payload, opts) {
 //#endregion
 //#region extensions/discord/src/send.guild.ts
 async function fetchMemberInfoDiscord(guildId, userId, opts) {
-	return await getGuildMember(resolveDiscordRest(opts), guildId, userId);
+	const rest = resolveDiscordRest(opts);
+	return await getGuildMember(rest, guildId, userId);
 }
 async function fetchRoleInfoDiscord(guildId, opts) {
-	return await listGuildRoles(resolveDiscordRest(opts), guildId);
+	const rest = resolveDiscordRest(opts);
+	return await listGuildRoles(rest, guildId);
 }
 async function addRoleDiscord(payload, opts) {
-	await addGuildMemberRole(resolveDiscordRest(opts), payload.guildId, payload.userId, payload.roleId);
+	const rest = resolveDiscordRest(opts);
+	await addGuildMemberRole(rest, payload.guildId, payload.userId, payload.roleId);
 	return { ok: true };
 }
 async function removeRoleDiscord(payload, opts) {
-	await removeGuildMemberRole(resolveDiscordRest(opts), payload.guildId, payload.userId, payload.roleId);
+	const rest = resolveDiscordRest(opts);
+	await removeGuildMemberRole(rest, payload.guildId, payload.userId, payload.roleId);
 	return { ok: true };
 }
 async function fetchChannelInfoDiscord(channelId, opts) {
-	return await getChannel(resolveDiscordRest(opts), channelId);
+	const rest = resolveDiscordRest(opts);
+	return await getChannel(rest, channelId);
 }
 async function fetchGuildInfoDiscord(guildId, opts) {
-	return await getGuild(resolveDiscordRest(opts), guildId);
+	const rest = resolveDiscordRest(opts);
+	return await getGuild(rest, guildId);
 }
 async function listGuildChannelsDiscord(guildId, opts) {
-	return await listGuildChannels(resolveDiscordRest(opts), guildId);
+	const rest = resolveDiscordRest(opts);
+	return await listGuildChannels(rest, guildId);
 }
 async function fetchVoiceStatusDiscord(guildId, userId, opts) {
 	const rest = resolveDiscordRest(opts);
@@ -172,7 +182,8 @@ async function fetchVoiceStatusDiscord(guildId, userId, opts) {
 	}
 }
 async function listScheduledEventsDiscord(guildId, opts) {
-	return await listGuildScheduledEvents(resolveDiscordRest(opts), guildId);
+	const rest = resolveDiscordRest(opts);
+	return await listGuildScheduledEvents(rest, guildId);
 }
 const ALLOWED_EVENT_COVER_TYPES = /* @__PURE__ */ new Set([
 	"image/png",
@@ -187,13 +198,15 @@ async function resolveEventCoverImage(imageUrl, opts) {
 	return `data:${contentType};base64,${media.buffer.toString("base64")}`;
 }
 async function createScheduledEventDiscord(guildId, payload, opts) {
-	return await createGuildScheduledEvent(resolveDiscordRest(opts), guildId, payload);
+	const rest = resolveDiscordRest(opts);
+	return await createGuildScheduledEvent(rest, guildId, payload);
 }
 async function timeoutMemberDiscord(payload, opts) {
 	const rest = resolveDiscordRest(opts);
 	let until = payload.until;
 	if (!until && payload.durationMinutes) {
-		until = timestampMsToIsoString(resolveExpiresAtMsFromDurationMs(payload.durationMinutes * 60 * 1e3));
+		const ms = payload.durationMinutes * 60 * 1e3;
+		until = timestampMsToIsoString(resolveExpiresAtMsFromDurationMs(ms));
 		if (!until) throw new Error("Discord timeout duration is outside the supported Date range");
 	}
 	return await timeoutGuildMember(rest, payload.guildId, payload.userId, {
@@ -202,7 +215,8 @@ async function timeoutMemberDiscord(payload, opts) {
 	});
 }
 async function kickMemberDiscord(payload, opts) {
-	await removeGuildMember(resolveDiscordRest(opts), payload.guildId, payload.userId, { headers: payload.reason ? { "X-Audit-Log-Reason": encodeURIComponent(payload.reason) } : void 0 });
+	const rest = resolveDiscordRest(opts);
+	await removeGuildMember(rest, payload.guildId, payload.userId, { headers: payload.reason ? { "X-Audit-Log-Reason": encodeURIComponent(payload.reason) } : void 0 });
 	return { ok: true };
 }
 async function banMemberDiscord(payload, opts) {
@@ -265,28 +279,34 @@ async function readMessagesDiscord(channelId, query, opts) {
 	return assertDiscordResponseArray(await listChannelMessages(rest, channelId, params), "message read");
 }
 async function fetchMessageDiscord(channelId, messageId, opts) {
-	return await getChannelMessage(resolveDiscordRest(opts), channelId, messageId);
+	const rest = resolveDiscordRest(opts);
+	return await getChannelMessage(rest, channelId, messageId);
 }
 async function editMessageDiscord(channelId, messageId, payload, opts) {
-	return await editChannelMessage(resolveDiscordRest(opts), channelId, messageId, { body: {
+	const rest = resolveDiscordRest(opts);
+	return await editChannelMessage(rest, channelId, messageId, { body: {
 		content: payload.content,
 		...payload.flags !== void 0 ? { flags: payload.flags } : {}
 	} });
 }
 async function deleteMessageDiscord(channelId, messageId, opts) {
-	await deleteChannelMessage(resolveDiscordRest(opts), channelId, messageId);
+	const rest = resolveDiscordRest(opts);
+	await deleteChannelMessage(rest, channelId, messageId);
 	return { ok: true };
 }
 async function pinMessageDiscord(channelId, messageId, opts) {
-	await pinChannelMessage(resolveDiscordRest(opts), channelId, messageId);
+	const rest = resolveDiscordRest(opts);
+	await pinChannelMessage(rest, channelId, messageId);
 	return { ok: true };
 }
 async function unpinMessageDiscord(channelId, messageId, opts) {
-	await unpinChannelMessage(resolveDiscordRest(opts), channelId, messageId);
+	const rest = resolveDiscordRest(opts);
+	await unpinChannelMessage(rest, channelId, messageId);
 	return { ok: true };
 }
 async function listPinsDiscord(channelId, opts) {
-	return await listChannelPins(resolveDiscordRest(opts), channelId);
+	const rest = resolveDiscordRest(opts);
+	return await listChannelPins(rest, channelId);
 }
 async function createThreadDiscord(channelId, payload, opts) {
 	const { rest, request } = createDiscordClient(opts);
@@ -299,7 +319,8 @@ async function createThreadDiscord(channelId, payload, opts) {
 	const archiveDuration = payload.autoArchiveMinutes ?? resolveDefaultThreadAutoArchiveDuration(channel);
 	if (archiveDuration !== void 0) body.auto_archive_duration = archiveDuration;
 	const isForumLike = channel?.type === ChannelType.GuildForum || channel?.type === ChannelType.GuildMedia;
-	const initialMessageChunks = buildDiscordTextChunks(isForumLike ? payload.content?.trim() ? payload.content : payload.name : payload.content?.trim() ? payload.content : "", { maxLinesPerMessage: DISCORD_THREAD_TRANSPORT_ONLY_MAX_LINES });
+	const initialMessageContent = isForumLike ? payload.content?.trim() ? payload.content : payload.name : payload.content?.trim() ? payload.content : "";
+	const initialMessageChunks = buildDiscordTextChunks(initialMessageContent, { maxLinesPerMessage: DISCORD_THREAD_TRANSPORT_ONLY_MAX_LINES });
 	if (isForumLike) {
 		body.message = { content: initialMessageChunks[0] ?? payload.name };
 		if (payload.appliedTags?.length) body.applied_tags = payload.appliedTags;
@@ -381,14 +402,8 @@ async function searchMessagesDiscord(query, opts) {
 }
 //#endregion
 //#region extensions/discord/src/send.webhook.ts
-const DISCORD_WEBHOOK_ERROR_BODY_LIMIT_BYTES = 8 * 1024;
+const DISCORD_WEBHOOK_ERROR_BODY_LIMIT_BYTES = 8192;
 const DISCORD_WEBHOOK_TIMEOUT_MS = DISCORD_REST_TIMEOUT_MS;
-function resolveWebhookExecutionUrl(params) {
-	const baseUrl = new URL(`https://discord.com/api/v10/webhooks/${encodeURIComponent(params.webhookId)}/${encodeURIComponent(params.webhookToken)}`);
-	baseUrl.searchParams.set("wait", params.wait === false ? "false" : "true");
-	if (params.threadId !== void 0 && params.threadId !== null && params.threadId !== "") baseUrl.searchParams.set("thread_id", String(params.threadId));
-	return baseUrl.toString();
-}
 function coerceWebhookErrorBody(raw) {
 	if (!raw) return;
 	try {
@@ -439,62 +454,73 @@ async function sendWebhookMessageDiscord(text, opts) {
 		conversationId: threadConversationId,
 		sourceId: webhookId
 	});
-	const url = resolveWebhookExecutionUrl({
-		webhookId,
-		webhookToken,
-		threadId: opts.threadId,
-		wait: opts.wait
-	});
+	const url = new URL(`https://discord.com/api/v10/webhooks/${encodeURIComponent(webhookId)}/${encodeURIComponent(webhookToken)}`);
+	url.searchParams.set("wait", opts.wait === false ? "false" : "true");
+	if (opts.threadId != null && opts.threadId !== "") url.searchParams.set("thread_id", String(opts.threadId));
 	const deadline = buildTimeoutAbortSignal({
 		timeoutMs: DISCORD_WEBHOOK_TIMEOUT_MS,
 		operation: "discord.webhook.send"
 	});
 	const request = createDiscordRetryRunner({ signal: deadline.signal });
+	const chunks = chunkDiscordTextWithMode(rewrittenText, { maxLines: Number.MAX_SAFE_INTEGER });
+	const results = [];
 	try {
-		const response = await request(async () => {
-			await opts.onPlatformSendDispatch?.();
-			const attemptResponse = await (proxyFetch ?? fetch)(url, {
-				method: "POST",
-				headers: { "content-type": "application/json" },
-				body: JSON.stringify({
-					content: rewrittenText,
-					username: normalizeOptionalString(opts.username),
-					avatar_url: normalizeOptionalString(opts.avatarUrl),
-					...flags ? { flags } : {},
-					...messageReference ? { message_reference: messageReference } : {}
-				}),
-				signal: deadline.signal
+		for (const content of chunks.length ? chunks : [""]) {
+			const response = await request(async () => {
+				await opts.onPlatformSendDispatch?.();
+				opts.assertPlatformSendAuthorized?.();
+				const attemptResponse = await (proxyFetch ?? fetch)(url.toString(), {
+					method: "POST",
+					headers: { "content-type": "application/json" },
+					body: JSON.stringify({
+						content,
+						username: normalizeOptionalString(opts.username),
+						avatar_url: normalizeOptionalString(opts.avatarUrl),
+						...flags ? { flags } : {},
+						...messageReference ? { message_reference: messageReference } : {}
+					}),
+					signal: deadline.signal
+				});
+				if (!attemptResponse.ok) await throwWebhookResponseError(attemptResponse, deadline.signal);
+				return attemptResponse;
+			}, "webhook", { safety: "non-idempotent-create" });
+			const payload = response.status === 204 ? {} : await readProviderJsonResponse(response, "Discord webhook send").catch(() => {
+				throwIfWebhookDeadlineExpired(deadline.signal);
+				return {};
 			});
-			if (!attemptResponse.ok) await throwWebhookResponseError(attemptResponse, deadline.signal);
-			return attemptResponse;
-		}, "webhook", { safety: "non-idempotent-create" });
-		const payload = response.status === 204 ? {} : await readProviderJsonResponse(response, "Discord webhook send").catch(() => {
-			throwIfWebhookDeadlineExpired(deadline.signal);
-			return {};
-		});
-		try {
-			recordChannelActivity({
+			try {
+				recordChannelActivity({
+					channel: "discord",
+					accountId: account.accountId,
+					direction: "outbound"
+				});
+			} catch {}
+			const result = createDiscordSendResult({
+				result: payload,
+				fallbackChannelId: opts.threadId ? String(opts.threadId) : "",
+				kind: "text",
+				...opts.threadId != null ? { threadId: opts.threadId } : {},
+				...replyTo ? { replyToId: replyTo } : {}
+			});
+			const resultConversationId = result.channelId.trim();
+			if (result.messageId && resultConversationId) recordOutboundMessageIdentity({
 				channel: "discord",
 				accountId: account.accountId,
-				direction: "outbound"
+				conversationId: resultConversationId,
+				messageId: result.messageId,
+				sourceId: webhookId
 			});
-		} catch {}
-		const result = createDiscordSendResult({
-			result: payload,
-			fallbackChannelId: opts.threadId ? String(opts.threadId) : "",
-			kind: "text",
-			...opts.threadId != null ? { threadId: opts.threadId } : {},
-			...replyTo ? { replyToId: replyTo } : {}
-		});
-		const resultConversationId = result.channelId.trim();
-		if (result.messageId !== "unknown" && resultConversationId) recordOutboundMessageIdentity({
-			channel: "discord",
-			accountId: account.accountId,
-			conversationId: resultConversationId,
-			messageId: result.messageId,
-			sourceId: webhookId
-		});
-		return result;
+			results.push(result);
+			await opts.onDeliveryResult?.(result);
+		}
+		const last = expectDefined(results.at(-1), "Discord webhook delivery result");
+		return results.length === 1 ? last : {
+			...last,
+			receipt: createDiscordSendReceiptFromResults({ results })
+		};
+	} catch (error) {
+		if (results.length) recordDiscordMessageCreateAmbiguity(error);
+		throw error;
 	} finally {
 		deadline.cleanup();
 	}
@@ -515,7 +541,7 @@ async function sendWebhookMessageDiscord(text, opts) {
 const DISCORD_VOICE_MESSAGE_FLAG = 8192;
 const WAVEFORM_SAMPLES = 256;
 const DISCORD_OPUS_SAMPLE_RATE_HZ = 48e3;
-const DISCORD_VOICE_ERROR_BODY_LIMIT_BYTES = 8 * 1024;
+const DISCORD_VOICE_ERROR_BODY_LIMIT_BYTES = 8192;
 const DISCORD_VOICE_UPLOAD_SSRF_POLICY = {
 	allowRfc2544BenchmarkRange: true,
 	allowIpv6UniqueLocalRange: true
@@ -539,7 +565,7 @@ function createRateLimitError(response, body) {
 */
 async function getAudioDuration(filePath) {
 	try {
-		const duration = parseStrictFiniteNumber(await runFfprobe([
+		const stdout = await runFfprobe([
 			"-v",
 			"error",
 			"-show_entries",
@@ -547,7 +573,8 @@ async function getAudioDuration(filePath) {
 			"-of",
 			"csv=p=0",
 			filePath
-		]));
+		]);
+		const duration = parseStrictFiniteNumber(stdout);
 		if (duration === void 0) throw new Error("Could not parse duration");
 		return Math.round(duration * 100) / 100;
 	} catch (err) {
@@ -635,7 +662,7 @@ async function ensureOggOpus(filePath) {
 	const trimmed = filePath.trim();
 	if (/^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed)) throw new Error(`Voice message conversion requires a local file path; received a URL/protocol source: ${trimmed}`);
 	if (normalizeLowercaseStringOrEmpty(path.extname(filePath)) === ".ogg") try {
-		const { codec, sampleRateHz } = parseFfprobeCodecAndSampleRate(await runFfprobe([
+		const stdout = await runFfprobe([
 			"-v",
 			"error",
 			"-select_streams",
@@ -645,7 +672,8 @@ async function ensureOggOpus(filePath) {
 			"-of",
 			"csv=p=0",
 			filePath
-		]));
+		]);
+		const { codec, sampleRateHz } = parseFfprobeCodecAndSampleRate(stdout);
 		if (codec === "opus" && sampleRateHz === DISCORD_OPUS_SAMPLE_RATE_HZ) return {
 			path: filePath,
 			cleanup: false
@@ -708,20 +736,22 @@ async function createVoiceRequestError(response, fallbackMessage) {
 	return new DiscordError(response, parsed ?? { message: fallbackMessage });
 }
 async function requestVoiceUploadUrl(params) {
-	const { response: res, release } = await fetchWithSsrFGuard({
-		url: `${params.rest.options?.baseUrl ?? "https://discord.com/api"}/channels/${params.channelId}/attachments`,
-		init: {
-			method: "POST",
-			headers: {
-				Authorization: `Bot ${params.botToken}`,
-				"Content-Type": "application/json"
-			},
-			body: JSON.stringify({ files: [{
-				filename: params.filename,
-				file_size: params.fileSize,
-				id: "0"
-			}] })
+	const url = `${params.rest.options?.baseUrl ?? "https://discord.com/api"}/channels/${params.channelId}/attachments`;
+	const uploadUrlInit = {
+		method: "POST",
+		headers: {
+			Authorization: `Bot ${params.botToken}`,
+			"Content-Type": "application/json"
 		},
+		body: JSON.stringify({ files: [{
+			filename: params.filename,
+			file_size: params.fileSize,
+			id: "0"
+		}] })
+	};
+	const { response: res, release } = await fetchWithSsrFGuard({
+		url,
+		init: uploadUrlInit,
 		timeoutMs: params.rest.options.timeout,
 		policy: DISCORD_VOICE_UPLOAD_SSRF_POLICY,
 		auditContext: "discord.voice.upload-url"
@@ -760,7 +790,7 @@ async function uploadVoiceAttachment(params) {
 * 2. Upload the OGG file to the provided URL
 * 3. Send the message with flag 8192 and attachment metadata
 */
-async function sendDiscordVoiceMessage(rest, channelId, audioBuffer, metadata, replyTo, request, silent, token, onPlatformSendDispatch) {
+async function sendDiscordVoiceMessage(rest, channelId, audioBuffer, metadata, replyTo, request, silent, token, onPlatformSendDispatch, assertPlatformSendAuthorized) {
 	const filename = "voice-message.ogg";
 	const fileSize = audioBuffer.byteLength;
 	const botToken = token;
@@ -801,6 +831,7 @@ async function sendDiscordVoiceMessage(rest, channelId, audioBuffer, metadata, r
 	try {
 		return await request(async () => {
 			await onPlatformSendDispatch?.();
+			assertPlatformSendAuthorized?.();
 			try {
 				return await rest.post(`/channels/${channelId}/messages`, { body: messagePayload });
 			} catch (error) {
@@ -872,7 +903,7 @@ async function sendVoiceMessageDiscord(to, audioPath, opts) {
 			oggCleanup = ogg.cleanup;
 			const metadata = await getVoiceMessageMetadata(oggPath);
 			const audioBuffer = await fs.readFile(oggPath);
-			const result = await sendDiscordVoiceMessage(rest, channelId, audioBuffer, metadata, opts.reply?.messageId, request, opts.silent, token, opts.onPlatformSendDispatch);
+			const result = await sendDiscordVoiceMessage(rest, channelId, audioBuffer, metadata, opts.reply?.messageId, request, opts.silent, token, opts.onPlatformSendDispatch, opts.assertPlatformSendAuthorized);
 			recordChannelActivity({
 				channel: "discord",
 				accountId: accountInfo.accountId,
@@ -896,7 +927,8 @@ async function sendVoiceMessageDiscord(to, audioPath, opts) {
 //#endregion
 //#region extensions/discord/src/send.typing.ts
 async function sendTypingDiscord(channelId, opts) {
-	await sendChannelTyping(resolveDiscordRest(opts), channelId);
+	const rest = resolveDiscordRest(opts);
+	await sendChannelTyping(rest, channelId);
 	return {
 		ok: true,
 		channelId