@openclaw/discord 2026.9.4 → 2026.9.5

package/dist/{security-audit-DKfK-iPY.js → .setup/security-audit-s5w50-Ly.mjs}

@@ -1,4 +1,4 @@
-import { t as isDiscordMutableAllowEntry } from "./security-doctor-nGgPm65L.js";
+import { t as isDiscordMutableAllowEntry } from "./security-doctor-nGgPm65L.mjs";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { readChannelAllowFromStore } from "openclaw/plugin-sdk/conversation-runtime";
 import { coerceNativeSetting, normalizeAllowFromList } from "openclaw/plugin-sdk/channel-policy";

package/dist/{security-audit.runtime-sKZyKgpx.js → .setup/security-audit.runtime-DHtYenx9.mjs}

@@ -1,2 +1,2 @@
-import { t as collectDiscordSecurityAuditFindings } from "./security-audit-DKfK-iPY.js";
+import { t as collectDiscordSecurityAuditFindings } from "./security-audit-s5w50-Ly.mjs";
 export { collectDiscordSecurityAuditFindings };

package/dist/{send-CLpzfzJe.js → .setup/send-CKDczUNL.mjs}

@@ -1,17 +1,17 @@
-import { At as getGuildMember, Bt as removeGuildMemberRole, Ct as createGuildBan, Dt as createGuildSticker, Et as createGuildScheduledEvent, Ft as listGuildRoles, Ht as __exportAll, It as listGuildScheduledEvents, Lt as moveGuildChannels, Mt as listGuildActiveThreads, Nt as listGuildChannels, Ot as deleteChannelPermission, Pt as listGuildEmojis, Rt as putChannelPermission, S as readRetryAfter, St as addGuildMemberRole, Tt as createGuildEmoji, Vt as timeoutGuildMember, _ as DiscordError, _t as listChannelPins, at as listMessageReactionUsers, b as readDiscordCode, bt as sendChannelTyping, ct as deleteChannel, dt as editChannelMessage, ft as getChannel, gt as listChannelMessages, ht as listChannelArchivedThreads, it as deleteOwnMessageReaction, jt as getGuildVoiceState, kt as getGuild, lt as deleteChannelMessage, pt as getChannelMessage, rt as createOwnMessageReaction, st as createThread, ut as editChannel, v as RateLimitError, vt as pinChannelMessage, wt as createGuildChannel, x as readDiscordMessage, xt as unpinChannelMessage, y as isUnknownDiscordVoiceStateError, yt as searchGuildMessages, zt as removeGuildMember } from "./discord-CmL3ati-.js";
-import { C as parseDiscordRetryAfterBodySeconds } from "./allow-list-DWEio925.js";
-import { a as recordDiscordMessageCreateAmbiguity, c as createDiscordSendReceiptFromResults, l as createDiscordSendResult, n as classifyDiscordDeliveryFailure, o as chunkDiscordTextWithMode, r as createDiscordRetryRunner } from "./retry-DKeoT7UO.js";
-import { C as hasAllGuildPermissionsDiscord, I as resolveDiscordClientAccountContext, K as parseAndResolveChannelRecipient, L as resolveDiscordRest, M as resolveDiscordSuppressEmbeds, N as createDiscordClient, O as createDiscordMessageNonce, R as DISCORD_REST_TIMEOUT_MS, S as fetchMemberGuildPermissionsDiscord, T as hasAnyGuildPermissionDiscord, _ as DiscordSendError, b as canViewDiscordGuildChannel, g as DISCORD_MAX_STICKER_BYTES, h as DISCORD_MAX_EVENT_COVER_BYTES, i as formatReactionEmoji, k as resolveDiscordMessageFlags, l as resolveChannelId, m as DISCORD_MAX_EMOJI_BYTES, n as buildDiscordTextChunks, o as normalizeEmojiName, p as sendDiscordText, r as buildReactionIdentifier, s as normalizeReactionEmoji, t as buildDiscordSendError, v as canManageGuildMemberRoleDiscord, w as hasAnyChannelPermissionDiscord, x as fetchChannelPermissionsDiscord, y as canManageGuildRoleDiscord } from "./send.shared-BHPM3CSl.js";
-import { i as prepareDiscordOutboundText, n as sendPollDiscord, r as sendStickerDiscord, t as sendMessageDiscord } from "./send.outbound-BVTWrl_4.js";
-import { n as DISCORD_ATTACHMENT_TOTAL_TIMEOUT_MS } from "./timeouts-D86uWLt_.js";
+import { At as getGuild, Bt as removeGuildMember, C as withDiscordRequestAuthority, Ct as addGuildMemberRole, Dt as createGuildScheduledEvent, Et as createGuildEmoji, Ft as listGuildEmojis, Ht as timeoutGuildMember, It as listGuildRoles, Lt as listGuildScheduledEvents, Mt as getGuildVoiceState, Nt as listGuildActiveThreads, Ot as createGuildSticker, Pt as listGuildChannels, Rt as moveGuildChannels, S as readRetryAfter, St as unpinChannelMessage, Tt as createGuildChannel, Ut as __exportAll, Vt as removeGuildMemberRole, _ as DiscordError, _t as listChannelMessages, at as deleteOwnMessageReaction, b as readDiscordCode, bt as searchGuildMessages, ct as createThread, dt as editChannel, ft as editChannelMessage, gt as listChannelArchivedThreads, it as createOwnMessageReaction, jt as getGuildMember, kt as deleteChannelPermission, lt as deleteChannel, mt as getChannelMessage, ot as listMessageReactionUsers, pt as getChannel, ut as deleteChannelMessage, v as RateLimitError, vt as listChannelPins, wt as createGuildBan, x as readDiscordMessage, xt as sendChannelTyping, y as isUnknownDiscordVoiceStateError, yt as pinChannelMessage, zt as putChannelPermission } from "./discord-BXpHW-cu.mjs";
+import { D as resolveDiscordEndpointAttachmentGuard, E as getDiscordEndpointRuntime, w as parseDiscordRetryAfterBodySeconds } from "./channel-type-DKnjV1XW.mjs";
+import { a as recordDiscordMessageCreateAmbiguity, c as createDiscordSendReceiptFromResults, d as createReusableDiscordReplyReference, f as resolveDiscordReplyMessageId, l as createDiscordSendResult, n as classifyDiscordDeliveryFailure, o as chunkDiscordTextWithMode, r as createDiscordRetryRunner } from "./retry-DBfcEgmO.mjs";
+import { C as hasAllGuildPermissionsDiscord, I as resolveDiscordClientAccountContext, K as parseAndResolveChannelRecipient, L as resolveDiscordRest, M as resolveDiscordSuppressEmbeds, N as createDiscordClient, O as createDiscordMessageNonce, R as DISCORD_REST_TIMEOUT_MS, S as fetchMemberGuildPermissionsDiscord, T as hasAnyGuildPermissionDiscord, _ as DiscordSendError, b as canViewDiscordGuildChannel, g as DISCORD_MAX_STICKER_BYTES, h as DISCORD_MAX_EVENT_COVER_BYTES, i as formatReactionEmoji, k as resolveDiscordMessageFlags, l as resolveChannelId, m as DISCORD_MAX_EMOJI_BYTES, n as buildDiscordTextChunks, o as normalizeEmojiName, p as sendDiscordText, r as buildReactionIdentifier, s as normalizeReactionEmoji, t as buildDiscordSendError, v as canManageGuildMemberRoleDiscord, w as hasAnyChannelPermissionDiscord, x as fetchChannelPermissionsDiscord, y as canManageGuildRoleDiscord } from "./send.shared-Zwx6BxQ5.mjs";
+import { i as prepareDiscordOutboundText, n as sendPollDiscord, r as sendStickerDiscord, t as sendMessageDiscord } from "./send.outbound-D0hQ7s50.mjs";
+import { n as DISCORD_ATTACHMENT_TOTAL_TIMEOUT_MS } from "./timeouts-D86uWLt_.mjs";
 import fs from "node:fs/promises";
 import { ChannelType } from "discord-api-types/v10";
 import crypto from "node:crypto";
 import { parseStrictFiniteNumber, resolveExpiresAtMsFromDurationMs, timestampMsToIsoString } from "openclaw/plugin-sdk/number-runtime";
 import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
-import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
-import { readProviderJsonResponse, readResponseTextLimited } from "openclaw/plugin-sdk/provider-http";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
+import { formatErrorMessage as formatErrorMessage$1 } from "openclaw/plugin-sdk/error-runtime";
+import { readProviderJsonResponse, readResponseTextLimited } from "openclaw/plugin-sdk/provider-http";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { recordChannelActivity } from "openclaw/plugin-sdk/channel-activity-runtime";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
@@ -270,7 +270,7 @@ function describeDiscordThreadInitialMessageFailure(delivery) {
 }
 var DiscordThreadInitialMessageError = class extends Error {
 	constructor(thread, error, initialMessageDelivery) {
-		const initialMessageError = formatErrorMessage(error);
+		const initialMessageError = formatErrorMessage$1(error);
 		const initialMessageWarning = describeDiscordThreadInitialMessageFailure(initialMessageDelivery);
 		super(`${initialMessageWarning}: ${initialMessageError}`, { cause: error });
 		this.name = "DiscordThreadInitialMessageError";
@@ -449,19 +449,16 @@ async function sendWebhookMessageDiscord(text, opts) {
 	const webhookId = normalizeOptionalString(opts.webhookId) ?? "";
 	const webhookToken = normalizeOptionalString(opts.webhookToken) ?? "";
 	if (!webhookId || !webhookToken) throw new Error("Discord webhook id/token are required");
-	const replyTo = normalizeOptionalString(opts.replyTo) ?? "";
-	const messageReference = replyTo ? {
-		message_id: replyTo,
-		fail_if_not_exists: false
-	} : void 0;
+	const reply = typeof opts.replyTo === "string" ? createReusableDiscordReplyReference(normalizeOptionalString(opts.replyTo)) : opts.replyTo;
 	const { account, proxyFetch } = resolveDiscordClientAccountContext({
 		cfg: opts.cfg,
 		accountId: opts.accountId
 	});
-	const { textWithMentions } = prepareDiscordOutboundText(text, {
+	const { textWithMentions, textLimit } = prepareDiscordOutboundText(text, {
 		cfg: opts.cfg,
 		account,
-		tableMode: opts.tableMode
+		tableMode: opts.tableMode,
+		textLimit: opts.chunking?.maxChars
 	});
 	const flags = resolveDiscordMessageFlags({ suppressEmbeds: resolveDiscordSuppressEmbeds({ configured: account.config.suppressEmbeds }) });
 	const threadConversationId = opts.threadId == null ? "" : String(opts.threadId).trim();
@@ -471,7 +468,9 @@ async function sendWebhookMessageDiscord(text, opts) {
 		conversationId: threadConversationId,
 		sourceId: webhookId
 	});
-	const url = new URL(`https://discord.com/api/v10/webhooks/${encodeURIComponent(webhookId)}/${encodeURIComponent(webhookToken)}`);
+	const endpoint = getDiscordEndpointRuntime();
+	const restApiBaseUrl = endpoint?.descriptor.restApiBaseUrl ?? "https://discord.com/api/v10";
+	const url = new URL(`${restApiBaseUrl}/webhooks/${encodeURIComponent(webhookId)}/${encodeURIComponent(webhookToken)}`);
 	url.searchParams.set("wait", opts.wait === false ? "false" : "true");
 	if (opts.threadId != null && opts.threadId !== "") url.searchParams.set("thread_id", String(opts.threadId));
 	const deadline = buildTimeoutAbortSignal({
@@ -479,14 +478,22 @@ async function sendWebhookMessageDiscord(text, opts) {
 		operation: "discord.webhook.send"
 	});
 	const request = createDiscordRetryRunner({ signal: deadline.signal });
-	const chunks = chunkDiscordTextWithMode(textWithMentions, { maxLines: Number.MAX_SAFE_INTEGER });
+	const chunks = chunkDiscordTextWithMode(textWithMentions, {
+		maxChars: textLimit,
+		maxLines: opts.chunking ? opts.chunking.maxLines ?? account.config.maxLinesPerMessage : Number.MAX_SAFE_INTEGER
+	});
 	const results = [];
 	try {
 		for (const content of chunks.length ? chunks : [""]) {
+			const replyTo = resolveDiscordReplyMessageId(reply, results.length === 0);
+			const messageReference = replyTo ? {
+				message_id: replyTo,
+				fail_if_not_exists: false
+			} : void 0;
 			const response = await request(async () => {
 				await opts.onPlatformSendDispatch?.();
 				opts.assertPlatformSendAuthorized?.();
-				const attemptResponse = await (proxyFetch ?? fetch)(url.toString(), {
+				const attemptResponse = await (endpoint?.fetch ?? proxyFetch ?? fetch)(url.toString(), {
 					method: "POST",
 					headers: { "content-type": "application/json" },
 					body: JSON.stringify({
@@ -517,7 +524,7 @@ async function sendWebhookMessageDiscord(text, opts) {
 				fallbackChannelId: opts.threadId ? String(opts.threadId) : "",
 				kind: "text",
 				...opts.threadId != null ? { threadId: opts.threadId } : {},
-				...replyTo ? { replyToId: replyTo } : {}
+				reply: createReusableDiscordReplyReference(replyTo)
 			});
 			const resultConversationId = result.channelId.trim();
 			if (result.messageId && resultConversationId) recordOutboundMessageIdentity({
@@ -595,7 +602,7 @@ async function getAudioDuration(filePath) {
 		if (duration === void 0) throw new Error("Could not parse duration");
 		return Math.round(duration * 100) / 100;
 	} catch (err) {
-		const errMessage = formatErrorMessage(err);
+		const errMessage = formatErrorMessage$1(err);
 		throw new Error(`Failed to get audio duration: ${errMessage}`, { cause: err });
 	}
 }
@@ -726,14 +733,18 @@ async function ensureOggOpus(filePath) {
 	};
 }
 /**
-* Get voice message metadata (duration and waveform)
+* Wait for waveform cleanup before callers can release the audio input.
 */
 async function getVoiceMessageMetadata(filePath) {
-	const [durationSecs, waveform] = await Promise.all([getAudioDuration(filePath), generateWaveform(filePath)]);
-	return {
-		durationSecs,
-		waveform
-	};
+	const waveform = generateWaveform(filePath);
+	try {
+		return {
+			durationSecs: await getAudioDuration(filePath),
+			waveform: await waveform
+		};
+	} finally {
+		await waveform;
+	}
 }
 function coerceDiscordErrorBody(raw) {
 	if (!raw) return;
@@ -753,7 +764,8 @@ async function createVoiceRequestError(response, fallbackMessage) {
 	return new DiscordError(response, parsed ?? { message: fallbackMessage });
 }
 async function requestVoiceUploadUrl(params) {
-	const url = `${params.rest.options?.baseUrl ?? "https://discord.com/api"}/channels/${params.channelId}/attachments`;
+	const endpoint = params.endpointRuntime;
+	const url = `${endpoint?.descriptor.restApiBaseUrl ?? params.rest.options?.baseUrl ?? "https://discord.com/api"}/channels/${params.channelId}/attachments`;
 	const uploadUrlInit = {
 		method: "POST",
 		headers: {
@@ -766,7 +778,13 @@ async function requestVoiceUploadUrl(params) {
 			id: "0"
 		}] })
 	};
-	const { response: res, release } = await fetchWithSsrFGuard({
+	const { response: res, release } = endpoint ? {
+		response: await endpoint.fetch(url, {
+			...uploadUrlInit,
+			signal: AbortSignal.timeout(params.rest.options.timeout)
+		}),
+		release: async () => {}
+	} : await fetchWithSsrFGuard({
 		url,
 		init: uploadUrlInit,
 		timeoutMs: params.rest.options.timeout,
@@ -781,6 +799,7 @@ async function requestVoiceUploadUrl(params) {
 	}
 }
 async function uploadVoiceAttachment(params) {
+	const endpointGuard = resolveDiscordEndpointAttachmentGuard(params.uploadUrl, params.endpointRuntime);
 	const { response: uploadResponse, release } = await fetchWithSsrFGuard({
 		url: params.uploadUrl,
 		init: {
@@ -789,7 +808,11 @@ async function uploadVoiceAttachment(params) {
 			body: new Uint8Array(params.audioBuffer)
 		},
 		timeoutMs: DISCORD_ATTACHMENT_TOTAL_TIMEOUT_MS,
-		policy: DISCORD_VOICE_UPLOAD_SSRF_POLICY,
+		policy: endpointGuard?.policy ?? DISCORD_VOICE_UPLOAD_SSRF_POLICY,
+		...endpointGuard ? {
+			maxRedirects: endpointGuard.maxRedirects,
+			requireHttps: endpointGuard.requireHttps
+		} : {},
 		auditContext: "discord.voice.attachment-upload"
 	});
 	try {
@@ -810,11 +833,13 @@ async function uploadVoiceAttachment(params) {
 async function sendDiscordVoiceMessage(rest, channelId, audioBuffer, metadata, replyTo, request, silent, token, onPlatformSendDispatch, assertPlatformSendAuthorized) {
 	const filename = "voice-message.ogg";
 	const fileSize = audioBuffer.byteLength;
+	const endpointRuntime = getDiscordEndpointRuntime() ?? null;
 	const botToken = token;
 	if (!botToken) throw new Error("Discord bot token is required for voice message upload");
 	const { upload_filename } = await request(async () => {
 		const uploadUrlResponse = await requestVoiceUploadUrl({
 			rest,
+			endpointRuntime,
 			channelId,
 			botToken,
 			filename,
@@ -824,7 +849,8 @@ async function sendDiscordVoiceMessage(rest, channelId, audioBuffer, metadata, r
 		const attachment = uploadUrlResponse.attachments[0];
 		await uploadVoiceAttachment({
 			uploadUrl: attachment.upload_url,
-			audioBuffer
+			audioBuffer,
+			endpointRuntime
 		});
 		return attachment;
 	}, "voice-upload");
@@ -897,6 +923,9 @@ async function withMaterializedVoiceMessageInput(mediaUrl, opts, run) {
 * @param opts - Send options
 */
 async function sendVoiceMessageDiscord(to, audioPath, opts) {
+	return await withDiscordRequestAuthority(opts.assertPlatformSendAuthorized, () => sendVoiceMessageDiscordInternal(to, audioPath, opts));
+}
+async function sendVoiceMessageDiscordInternal(to, audioPath, opts) {
 	const cfg = requireRuntimeConfig(opts.cfg, "Discord voice send");
 	return await withMaterializedVoiceMessageInput(audioPath, opts, async (localInputPath) => {
 		let oggPath = null;

package/dist/{send.components-BWnkX4QN.js → .setup/send.components-DWQjXhPV.mjs}

@@ -1,32 +1,34 @@
-import { Ht as __exportAll, dt as editChannelMessage, k as serializePayload, ot as createChannelMessage } from "./discord-CmL3ati-.js";
-import { d as buildDiscordComponentMessage, f as buildDiscordComponentMessageFlags, g as resolveDiscordComponentAttachmentName } from "./components-DBFTIN6P.js";
-import { n as getOptionalDiscordRuntime } from "./runtime-DgnVQ7zW.js";
-import { l as createDiscordSendResult } from "./retry-DKeoT7UO.js";
-import { E as SUPPRESS_NOTIFICATIONS_FLAG, K as parseAndResolveChannelRecipient, N as createDiscordClient, O as createDiscordMessageNonce, l as resolveChannelId, t as buildDiscordSendError, u as resolveDiscordChannel } from "./send.shared-BHPM3CSl.js";
-import { t as sendMessageDiscord } from "./send.outbound-BVTWrl_4.js";
+import { A as serializePayload, C as withDiscordRequestAuthority, Ut as __exportAll, ft as editChannelMessage, st as createChannelMessage } from "./discord-BXpHW-cu.mjs";
+import { d as buildDiscordComponentMessage, f as buildDiscordComponentMessageFlags, g as resolveDiscordComponentAttachmentName } from "./components-MqMWUWnE.mjs";
+import { n as getOptionalDiscordRuntime } from "./runtime-DgnVQ7zW.mjs";
+import { l as createDiscordSendResult } from "./retry-DBfcEgmO.mjs";
+import { E as SUPPRESS_NOTIFICATIONS_FLAG, K as parseAndResolveChannelRecipient, N as createDiscordClient, O as createDiscordMessageNonce, l as resolveChannelId, t as buildDiscordSendError, u as resolveDiscordChannel } from "./send.shared-Zwx6BxQ5.mjs";
+import { t as sendMessageDiscord } from "./send.outbound-D0hQ7s50.mjs";
 import { ChannelType } from "discord-api-types/v10";
 import { asDateTimestampMs, isFutureDateTimestampMs, resolveDateTimestampMs, resolveExpiresAtMsFromDurationMs } from "openclaw/plugin-sdk/number-runtime";
+import { resolveGlobalSingleton } from "openclaw/plugin-sdk/global-singleton";
 import { hasNonEmptyString, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { recordChannelActivity } from "openclaw/plugin-sdk/channel-activity-runtime";
 import { extensionForMime } from "openclaw/plugin-sdk/media-mime";
 import { loadOutboundMediaFromUrl } from "openclaw/plugin-sdk/outbound-media";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { createPluginStateErrorReporter } from "openclaw/plugin-sdk/plugin-state-runtime";
-import { resolveGlobalSingleton } from "openclaw/plugin-sdk/global-singleton";
+import { createAsyncLock } from "openclaw/plugin-sdk/async-lock-runtime";
 //#region extensions/discord/src/components-registry-state.ts
 const discordComponentRegistryState = resolveGlobalSingleton(Symbol.for("openclaw.discord.componentRegistryState"), () => ({
+	withRegistryLock: createAsyncLock(),
 	componentEntries: /* @__PURE__ */ new Map(),
 	modalEntries: /* @__PURE__ */ new Map(),
 	persistentComponentStore: void 0,
 	persistentModalStore: void 0,
 	persistentRegistryDisabled: false
-}), (state) => {
+}), (state) => state.withRegistryLock(async () => {
 	state.componentEntries.clear();
 	state.modalEntries.clear();
 	state.persistentComponentStore = void 0;
 	state.persistentModalStore = void 0;
 	state.persistentRegistryDisabled = false;
-});
+}));
 //#endregion
 //#region extensions/discord/src/components-registry.ts
 const DEFAULT_COMPONENT_TTL_MS = 18e5;
@@ -130,14 +132,13 @@ function pruneUndefinedRegistryValues(value) {
 	}
 	return result;
 }
-function registerEntries(entries, store, params) {
+function normalizeRegistryEntries(entries, params) {
 	const normalizedEntries = [];
 	for (const entry of entries) {
 		const normalized = normalizeEntryTimestamps({
 			...entry,
 			messageId: params.messageId ?? entry.messageId
 		}, params.now, params.ttlMs);
-		store.set(entry.id, normalized);
 		normalizedEntries.push(normalized);
 	}
 	return normalizedEntries;
@@ -156,34 +157,41 @@ function readPersistedRegistryEntry(persisted) {
 	if (persisted?.version !== 1 || typeof persisted.entry?.id !== "string") return null;
 	return persisted.entry;
 }
-function registerPersistentRegistryEntries(params) {
+async function registerPersistentRegistryEntries(params) {
 	if (params.entries.length === 0) return;
 	const store = params.openStore();
 	if (!store) return;
-	for (const entry of params.entries) {
-		const persistedEntry = pruneUndefinedRegistryValues(entry);
-		store.register(entry.id, {
-			version: 1,
-			entry: persistedEntry
-		}, { ttlMs: params.ttlMs }).catch(disablePersistentComponentRegistry);
-	}
-}
-function registerPersistentEntries(params) {
-	registerPersistentRegistryEntries({
+	await Promise.all(params.entries.map(async (entry) => {
+		try {
+			const persistedEntry = pruneUndefinedRegistryValues(entry);
+			await store.register(entry.id, {
+				version: 1,
+				entry: persistedEntry
+			}, { ttlMs: params.ttlMs });
+		} catch (error) {
+			disablePersistentComponentRegistry(error);
+		}
+	}));
+}
+async function registerPersistentEntries(params) {
+	await Promise.all([registerPersistentRegistryEntries({
 		entries: params.entries,
 		ttlMs: params.ttlMs,
 		openStore: getPersistentComponentStore
-	});
-	registerPersistentRegistryEntries({
+	}), registerPersistentRegistryEntries({
 		entries: params.modals,
 		ttlMs: params.ttlMs,
 		openStore: getPersistentModalStore
-	});
+	})]);
 }
-function deletePersistentEntry(params) {
+async function deletePersistentEntry(params) {
 	const store = params.openStore();
 	if (!store) return;
-	store.delete(params.id).catch(disablePersistentComponentRegistry);
+	try {
+		await store.delete(params.id);
+	} catch (error) {
+		disablePersistentComponentRegistry(error);
+	}
 }
 function resolveComponentConsumptionIds(entry) {
 	if (!entry.consumptionGroupId) return [entry.id];
@@ -194,10 +202,11 @@ function deleteComponentConsumptionGroup(entry) {
 	const store = getComponentEntries();
 	for (const id of resolveComponentConsumptionIds(entry)) store.delete(id);
 }
-function deletePersistentComponentConsumptionGroup(entry) {
-	const store = getPersistentComponentStore();
-	if (!store) return;
-	for (const id of resolveComponentConsumptionIds(entry)) store.delete(id).catch(disablePersistentComponentRegistry);
+async function deletePersistentComponentConsumptionGroup(entry) {
+	await Promise.all(resolveComponentConsumptionIds(entry).map((id) => deletePersistentEntry({
+		id,
+		openStore: getPersistentComponentStore
+	})));
 }
 async function resolvePersistentRegistryEntry(params) {
 	const store = params.openStore();
@@ -212,18 +221,24 @@ async function resolvePersistentRegistryEntry(params) {
 function registerDiscordComponentEntries(params) {
 	const now = Date.now();
 	const ttlMs = params.ttlMs ?? DEFAULT_COMPONENT_TTL_MS;
-	registerPersistentEntries({
-		entries: registerEntries(params.entries, getComponentEntries(), {
-			now,
-			ttlMs,
-			messageId: params.messageId
-		}),
-		modals: registerEntries(params.modals, getModalEntries(), {
-			now,
-			ttlMs,
-			messageId: params.messageId
-		}),
-		ttlMs
+	const normalizedEntries = normalizeRegistryEntries(params.entries, {
+		now,
+		ttlMs,
+		messageId: params.messageId
+	});
+	const normalizedModals = normalizeRegistryEntries(params.modals, {
+		now,
+		ttlMs,
+		messageId: params.messageId
+	});
+	return discordComponentRegistryState.withRegistryLock(async () => {
+		for (const entry of normalizedEntries) getComponentEntries().set(entry.id, entry);
+		for (const entry of normalizedModals) getModalEntries().set(entry.id, entry);
+		await registerPersistentEntries({
+			entries: normalizedEntries,
+			modals: normalizedModals,
+			ttlMs
+		});
 	});
 }
 function resolveDiscordComponentEntry(params) {
@@ -232,33 +247,37 @@ function resolveDiscordComponentEntry(params) {
 	return entry;
 }
 async function resolveDiscordComponentEntryWithPersistence(params) {
-	const inMemory = resolveDiscordComponentEntry(params);
-	if (inMemory) {
-		if (params.consume !== false) deletePersistentComponentConsumptionGroup(inMemory);
-		return inMemory;
-	}
-	const persisted = await resolvePersistentRegistryEntry({
-		...params,
-		openStore: getPersistentComponentStore
+	return discordComponentRegistryState.withRegistryLock(async () => {
+		const inMemory = resolveDiscordComponentEntry(params);
+		if (inMemory) {
+			if (params.consume !== false) await deletePersistentComponentConsumptionGroup(inMemory);
+			return inMemory;
+		}
+		const persisted = await resolvePersistentRegistryEntry({
+			...params,
+			openStore: getPersistentComponentStore
+		});
+		if (persisted && params.consume !== false) await deletePersistentComponentConsumptionGroup(persisted);
+		return persisted;
 	});
-	if (persisted && params.consume !== false) deletePersistentComponentConsumptionGroup(persisted);
-	return persisted;
 }
 function resolveDiscordModalEntry(params) {
 	return resolveEntry(getModalEntries(), params);
 }
 async function resolveDiscordModalEntryWithPersistence(params) {
-	const inMemory = resolveDiscordModalEntry(params);
-	if (inMemory) {
-		if (params.consume !== false) deletePersistentEntry({
+	return discordComponentRegistryState.withRegistryLock(async () => {
+		const inMemory = resolveDiscordModalEntry(params);
+		if (inMemory) {
+			if (params.consume !== false) await deletePersistentEntry({
+				...params,
+				openStore: getPersistentModalStore
+			});
+			return inMemory;
+		}
+		return await resolvePersistentRegistryEntry({
 			...params,
 			openStore: getPersistentModalStore
 		});
-		return inMemory;
-	}
-	return await resolvePersistentRegistryEntry({
-		...params,
-		openStore: getPersistentModalStore
 	});
 }
 //#endregion
@@ -304,7 +323,7 @@ function resolveClassicDiscordMessage(spec) {
 	};
 }
 function registerBuiltDiscordComponentMessage(params) {
-	registerDiscordComponentEntries({
+	return registerDiscordComponentEntries({
 		entries: params.buildResult.entries,
 		modals: params.buildResult.modals,
 		messageId: params.messageId,
@@ -368,6 +387,9 @@ async function buildDiscordComponentPayload(params) {
 	};
 }
 async function sendDiscordComponentMessage(to, spec, opts) {
+	return await withDiscordRequestAuthority(opts.assertPlatformSendAuthorized, () => sendDiscordComponentMessageInternal(to, spec, opts));
+}
+async function sendDiscordComponentMessageInternal(to, spec, opts) {
 	const classicMessage = opts.mediaUrl ? resolveClassicDiscordMessage(spec) : void 0;
 	if (classicMessage) return await sendMessageDiscord(to, classicMessage.text, {
 		cfg: opts.cfg,
@@ -432,7 +454,7 @@ async function sendDiscordComponentMessage(to, spec, opts) {
 		...opts.reply ? { reply: opts.reply } : {}
 	});
 	await opts.onDeliveryResult?.(deliveryResult);
-	registerBuiltDiscordComponentMessage({
+	await registerBuiltDiscordComponentMessage({
 		buildResult,
 		messageId: result.id,
 		ttlMs: resolveDiscordComponentRegistryTtlMs(accountInfo.config)
@@ -469,7 +491,7 @@ async function editDiscordComponentMessage(to, messageId, spec, opts) {
 			hasMedia: Boolean(opts.mediaUrl)
 		});
 	}
-	registerBuiltDiscordComponentMessage({
+	await registerBuiltDiscordComponentMessage({
 		buildResult,
 		messageId: result.id ?? messageId,
 		ttlMs: resolveDiscordComponentRegistryTtlMs(accountInfo.config)
@@ -490,4 +512,4 @@ async function editDiscordComponentMessage(to, messageId, spec, opts) {
 	});
 }
 //#endregion
-export { resolveDiscordComponentEntryWithPersistence as a, send_components_exports as i, registerBuiltDiscordComponentMessage as n, resolveDiscordModalEntryWithPersistence as o, sendDiscordComponentMessage as r, editDiscordComponentMessage as t };
+export { registerDiscordComponentEntries as a, send_components_exports as i, registerBuiltDiscordComponentMessage as n, resolveDiscordComponentEntryWithPersistence as o, sendDiscordComponentMessage as r, resolveDiscordModalEntryWithPersistence as s, editDiscordComponentMessage as t };

package/dist/{send.outbound-BVTWrl_4.js → .setup/send.outbound-D0hQ7s50.mjs}

@@ -1,7 +1,7 @@
-import { ot as createChannelMessage, st as createThread } from "./discord-CmL3ati-.js";
-import { i as normalizeDiscordHandleKey, o as resolveDiscordDirectoryUserId } from "./directory-live-C5o1uKlw.js";
-import { c as createDiscordSendReceiptFromResults, d as createReusableDiscordReplyReference, l as createDiscordSendResult } from "./retry-DKeoT7UO.js";
-import { A as resolveDiscordSendComponents, D as buildDiscordMessageRequest, K as parseAndResolveChannelRecipient, M as resolveDiscordSuppressEmbeds, N as createDiscordClient, O as createDiscordMessageNonce, a as normalizeDiscordPollInput, c as normalizeStickerIds, f as sendDiscordMedia, j as resolveDiscordSendEmbeds, k as resolveDiscordMessageFlags, l as resolveChannelId, n as buildDiscordTextChunks, p as sendDiscordText, t as buildDiscordSendError, u as resolveDiscordChannel } from "./send.shared-BHPM3CSl.js";
+import { C as withDiscordRequestAuthority, ct as createThread, st as createChannelMessage } from "./discord-BXpHW-cu.mjs";
+import { i as normalizeDiscordHandleKey, o as resolveDiscordDirectoryUserId } from "./directory-live--EGTH0DC.mjs";
+import { c as createDiscordSendReceiptFromResults, d as createReusableDiscordReplyReference, l as createDiscordSendResult } from "./retry-DBfcEgmO.mjs";
+import { A as resolveDiscordSendComponents, D as buildDiscordMessageRequest, K as parseAndResolveChannelRecipient, M as resolveDiscordSuppressEmbeds, N as createDiscordClient, O as createDiscordMessageNonce, a as normalizeDiscordPollInput, c as normalizeStickerIds, f as sendDiscordMedia, j as resolveDiscordSendEmbeds, k as resolveDiscordMessageFlags, l as resolveChannelId, n as buildDiscordTextChunks, p as sendDiscordText, t as buildDiscordSendError, u as resolveDiscordChannel } from "./send.shared-Zwx6BxQ5.mjs";
 import { ChannelType } from "discord-api-types/v10";
 import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString, normalizeOptionalStringifiedId } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -382,6 +382,7 @@ function prepareDiscordOutboundText(text, params) {
 	}));
 	return {
 		renderedText,
+		textLimit: typeof params.textLimit === "number" && Number.isFinite(params.textLimit) ? Math.max(1, Math.min(Math.floor(params.textLimit), 2e3)) : void 0,
 		textWithMentions: rewriteDiscordKnownMentions(renderedText, {
 			accountId: account.accountId,
 			mentionAliases: account.config.mentionAliases
@@ -447,6 +448,9 @@ async function resolveDiscordSendTarget(to, opts) {
 	};
 }
 async function sendMessageDiscord(to, text, opts) {
+	return await withDiscordRequestAuthority(opts.assertPlatformSendAuthorized, () => sendMessageDiscordInternal(to, text, opts));
+}
+async function sendMessageDiscordInternal(to, text, opts) {
 	const cfg = requireRuntimeConfig(opts.cfg, "Discord send");
 	const { token, rest, request, account: accountInfo } = createDiscordClient({
 		...opts,
@@ -458,12 +462,12 @@ async function sendMessageDiscord(to, text, opts) {
 		configured: accountInfo.config.suppressEmbeds,
 		override: opts.suppressEmbeds
 	});
-	const textLimit = typeof opts.textLimit === "number" && Number.isFinite(opts.textLimit) ? Math.max(1, Math.min(Math.floor(opts.textLimit), 2e3)) : void 0;
 	const mediaMaxBytes = typeof accountInfo.config.mediaMaxMb === "number" ? accountInfo.config.mediaMaxMb * 1024 * 1024 : DEFAULT_DISCORD_MEDIA_MAX_MB * 1024 * 1024;
-	const { renderedText, textWithMentions } = prepareDiscordOutboundText(text ?? "", {
+	const { renderedText, textWithMentions, textLimit } = prepareDiscordOutboundText(text ?? "", {
 		cfg,
 		account: accountInfo,
-		tableMode: opts.tableMode
+		tableMode: opts.tableMode,
+		textLimit: opts.textLimit
 	});
 	const recipient = await parseAndResolveChannelRecipient(to, cfg, accountInfo.accountId);
 	const { channelId } = await resolveChannelId(rest, recipient, request);
@@ -683,6 +687,9 @@ async function sendMessageDiscord(to, text, opts) {
 	};
 }
 async function sendStickerDiscord(to, stickerIds, opts) {
+	return await withDiscordRequestAuthority(opts.assertPlatformSendAuthorized, () => sendStickerDiscordInternal(to, stickerIds, opts));
+}
+async function sendStickerDiscordInternal(to, stickerIds, opts) {
 	const context = await resolveDiscordStructuredSendContext(to, opts);
 	const { rewrittenContent, suppressEmbeds } = context;
 	const stickers = normalizeStickerIds(stickerIds);
@@ -700,6 +707,9 @@ async function sendStickerDiscord(to, stickerIds, opts) {
 	return context.send("sticker", body);
 }
 async function sendPollDiscord(to, poll, opts) {
+	return await withDiscordRequestAuthority(opts.assertPlatformSendAuthorized, () => sendPollDiscordInternal(to, poll, opts));
+}
+async function sendPollDiscordInternal(to, poll, opts) {
 	const context = await resolveDiscordStructuredSendContext(to, opts);
 	const { rewrittenContent, suppressEmbeds } = context;
 	if (poll.durationSeconds !== void 0) throw new Error("Discord polls do not support durationSeconds; use durationHours");

package/dist/{send.shared-BHPM3CSl.js → .setup/send.shared-Zwx6BxQ5.mjs}

@@ -1,15 +1,15 @@
-import { A as Embed, At as getGuildMember, O as hasDiscordV2Components, ft as getChannel, g as RequestClient, k as serializePayload, kt as getGuild, mt as getThreadMember, nt as getCurrentUser, ot as createChannelMessage, tt as createUserDmChannel } from "./discord-CmL3ati-.js";
-import { c as resolveDiscordAccount, m as normalizeDiscordToken, o as mergeDiscordAccountConfig } from "./accounts-CwJQoLjM.js";
-import { f as resolveDiscordReplyMessageId, o as chunkDiscordTextWithMode, r as createDiscordRetryRunner } from "./retry-DKeoT7UO.js";
-import { t as parseAndResolveDiscordTarget } from "./target-resolver-CoFQ7iSX.js";
-import { t as isDiscordThreadChannelType } from "./channel-type-CVLZyGYS.js";
+import { A as serializePayload, At as getGuild, g as RequestClient, ht as getThreadMember, j as Embed, jt as getGuildMember, k as hasDiscordV2Components, nt as createUserDmChannel, pt as getChannel, rt as getCurrentUser, st as createChannelMessage } from "./discord-BXpHW-cu.mjs";
+import { t as isDiscordThreadChannelType } from "./channel-type-DKnjV1XW.mjs";
+import { c as resolveDiscordAccount, m as normalizeDiscordToken, o as mergeDiscordAccountConfig } from "./accounts-CwJQoLjM.mjs";
+import { f as resolveDiscordReplyMessageId, o as chunkDiscordTextWithMode, r as createDiscordRetryRunner } from "./retry-DBfcEgmO.mjs";
+import { t as parseAndResolveDiscordTarget } from "./target-resolver-B6MrxbYv.mjs";
 import { ChannelType, MessageFlags, PermissionFlagsBits } from "discord-api-types/v10";
 import { randomBytes } from "node:crypto";
+import { makeProxyFetch } from "openclaw/plugin-sdk/fetch-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
 import { normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { resolveTextChunksWithFallback } from "openclaw/plugin-sdk/reply-payload";
-import { makeProxyFetch } from "openclaw/plugin-sdk/fetch-runtime";
 import { danger } from "openclaw/plugin-sdk/runtime-env";
 import { PollLayoutType } from "discord-api-types/payloads/v10";
 import { buildOutboundMediaLoadOptions, extensionForMime, normalizePollDurationHours, normalizePollInput } from "openclaw/plugin-sdk/media-runtime";
@@ -474,7 +474,9 @@ async function fetchChannelPermissionsDiscord(channelId, opts) {
 	const channel = await getChannel(rest, channelId);
 	opts.signal?.throwIfAborted();
 	const channelType = "type" in channel ? channel.type : void 0;
-	const guildId = "guild_id" in channel ? channel.guild_id : void 0;
+	const permissionChannel = await resolveChannelPermissionSubject(rest, channel);
+	opts.signal?.throwIfAborted();
+	const guildId = "guild_id" in permissionChannel ? permissionChannel.guild_id : void 0;
 	if (!guildId) return {
 		channelId,
 		permissions: [],
@@ -491,7 +493,7 @@ async function fetchChannelPermissionsDiscord(channelId, opts) {
 		userId: botId,
 		guild,
 		member,
-		channel
+		channel: permissionChannel
 	});
 	return {
 		channelId,
@@ -528,6 +530,9 @@ const DISCORD_CANNOT_DM = 50007;
 const DISCORD_UPLOAD_TOO_LARGE = 40005;
 const DISCORD_UPLOAD_TOO_LARGE_STATUS = 413;
 const DISCORD_UPLOAD_TOO_LARGE_NOTICE = "Attachment skipped: Discord rejected the file as too large.";
+function resolveRequiredDiscordSendPermissions(channelType) {
+	return isDiscordThreadChannelType(channelType) ? ["ViewChannel", "SendMessagesInThreads"] : ["ViewChannel", "SendMessages"];
+}
 function normalizeReactionEmoji(raw) {
 	const trimmed = raw.trim();
 	if (!trimmed) throw new Error("emoji required");
@@ -597,15 +602,13 @@ async function buildDiscordSendError(err, ctx) {
 		});
 		probedChannelType = permissions.channelType;
 		const current = new Set(permissions.permissions);
-		const required = ["ViewChannel", "SendMessages"];
-		if (isDiscordThreadChannelType(probedChannelType)) required.push("SendMessagesInThreads");
+		const required = resolveRequiredDiscordSendPermissions(probedChannelType);
 		if (ctx.hasMedia) required.push("AttachFiles");
 		missing = required.filter((permission) => !current.has(permission));
 	} catch {}
 	const status = getDiscordErrorStatus(err);
 	const apiDetails = [`code=${code}`, status != null ? `status=${status}` : void 0].filter(Boolean).join(" ");
-	const probedPermissions = ["ViewChannel", "SendMessages"];
-	if (isDiscordThreadChannelType(probedChannelType)) probedPermissions.push("SendMessagesInThreads");
+	const probedPermissions = resolveRequiredDiscordSendPermissions(probedChannelType);
 	if (ctx.hasMedia) probedPermissions.push("AttachFiles");
 	const probeSummary = probedPermissions.join("/");
 	return new DiscordSendError(`${missing.length ? `discord missing permissions in channel ${ctx.channelId}: ${missing.join(", ")}` : `discord missing permissions in channel ${ctx.channelId}; permission probe did not identify missing ${probeSummary}`} (${apiDetails}). bot might be blocked by channel/thread overrides, archived thread state, reply target visibility, or app-role position`, {