@xmanrui/dsh-im 4.34.0 → 4.34.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xmanrui/dsh-im",
-  "version": "4.34.0",
+  "version": "4.34.2",
   "icon": "./assets/logo-plugin-message-link-gradient.webp",
   "description": "把微信、飞书、企微、钉钉、QQ、Telegram、WhatsApp、Slack、Discord、Matrix接入DSH。 Connect Telegram, WhatsApp, Slack, Discord, Matrix, WeChat, Feishu, WeCom, DingTalk, and QQ to DSH.",
   "keywords": [

package/plugin-src/client/access-policy-settings.js

@@ -8,6 +8,7 @@ import {
 import { h, localizeText } from './i18n.js';
 
 export const ACCESS_POLICY_ENDPOINT = 'bot.access-policy.set';
+const CONFIRMED_OWNER_CHANNELS = new Set(['weixin', 'feishu', 'qq', 'whatsapp', 'discord']);
 
 export const ACCESS_CHANNEL_DEFINITIONS = Object.freeze({
   weixin: Object.freeze({
@@ -17,9 +18,9 @@ export const ACCESS_CHANNEL_DEFINITIONS = Object.freeze({
   }),
   feishu: Object.freeze({
     directUserLabel: '飞书 Open ID',
-    directPlaceholder: 'ou_xxx',
+    directPlaceholder: '填写使用者的 Open ID（ou_xxx），不是机器人 ID',
     groupUserLabel: '群成员 Open ID',
-    groupPlaceholder: 'ou_xxx',
+    groupPlaceholder: '填写使用者的 Open ID（ou_xxx），不是机器人 ID',
   }),
   dingtalk: Object.freeze({
     directUserLabel: '钉钉用户 ID',
@@ -125,6 +126,8 @@ function ScenePolicyEditor({
   placeholder,
   disabled = false,
   unsupported = false,
+  ownerHelp,
+  identityHelp,
   onChange,
 }) {
   const ownerHelpId = React.useId();
@@ -165,7 +168,7 @@ function ScenePolicyEditor({
           id: ownerHelpId,
           className: 'dim-channelTooltip dim-accessHelpTooltip',
           role: 'tooltip',
-        }, '原所有者或扫码接入者始终可以访问并执行命令；以下设置仅约束其他用户。')))),
+        }, ownerHelp, identityHelp ? h('br') : null, identityHelp)))),
   unsupported
     ? h('div', { className: 'dim-accessUnsupported', role: 'note' },
         h('strong', null, '当前渠道不支持群聊'),
@@ -271,6 +274,12 @@ function ScenePolicyEditor({
 
 export function AccessPolicySettingsPage({ channel, account, rpcCall, onSaved }) {
   const definition = ACCESS_CHANNEL_DEFINITIONS[channel];
+  const ownerHelp = CONFIRMED_OWNER_CHANNELS.has(channel)
+    ? '已由接入流程确认的所有者可以访问并执行命令，不受本页限制。未识别到所有者身份时，按本页访问设置执行。'
+    : '原所有者或扫码接入者始终可以访问并执行命令；以下设置仅约束其他用户。';
+  const identityHelp = channel === 'feishu'
+    ? '白名单请填写使用者的 Open ID，不是机器人的 Open ID。仅保存通配符的接入配置不包含所有者身份。'
+    : null;
   const initialPolicy = normalizeAccessPolicy(account?.accessPolicy);
   const initialKey = JSON.stringify(initialPolicy);
   const [draft, setDraft] = React.useState(() => clonePolicy(
@@ -333,6 +342,8 @@ export function AccessPolicySettingsPage({ channel, account, rpcCall, onSaved })
     policy: draft.direct,
     userLabel: definition.directUserLabel,
     placeholder: definition.directPlaceholder,
+    ownerHelp,
+    identityHelp,
     disabled: saving,
     onChange: (direct) => { setDraft((current) => ({ ...current, direct })); setFeedback(null); },
   }),
@@ -342,6 +353,10 @@ export function AccessPolicySettingsPage({ channel, account, rpcCall, onSaved })
     policy: draft.group,
     userLabel: definition.groupUserLabel ?? definition.directUserLabel,
     placeholder: definition.groupPlaceholder ?? definition.directPlaceholder,
+    ownerHelp,
+    identityHelp: channel === 'qq'
+      ? '扫码获得的是私聊身份，群聊只有匹配已确认的所有者身份时才豁免；其他成员按群聊白名单设置执行。'
+      : identityHelp,
     disabled: saving || definition.groupSupported === false,
     unsupported: definition.groupSupported === false,
     onChange: (group) => { setDraft((current) => ({ ...current, group })); setFeedback(null); },

package/plugin-src/client/bot-settings-tabs.js

@@ -0,0 +1,114 @@
+import * as React from 'react';
+
+import { h } from './i18n.js';
+
+// Scroll only the tab strip: scrollIntoView can also move the host settings page.
+function revealTab(strip, tab) {
+  if (!strip || !tab) return;
+  const viewport = strip.getBoundingClientRect();
+  const bounds = tab.getBoundingClientRect();
+  if (bounds.left < viewport.left) strip.scrollLeft += bounds.left - viewport.left;
+  else if (bounds.right > viewport.right) strip.scrollLeft += bounds.right - viewport.right;
+}
+
+export function BotSettingsTabs({ tabs, activeTabId, onChange }) {
+  const barRef = React.useRef(null);
+  const stripRef = React.useRef(null);
+  const listRef = React.useRef(null);
+  const [scroll, setScroll] = React.useState({ overflow: false, left: false, right: false });
+
+  const measure = React.useCallback(() => {
+    const bar = barRef.current;
+    const strip = stripRef.current;
+    const list = listRef.current;
+    if (!bar || !strip || !list) return;
+    const next = {
+      // Compare against the whole bar, so arrows disappear as soon as all tabs fit.
+      overflow: list.scrollWidth > bar.clientWidth + 1,
+      left: strip.scrollLeft > 1,
+      right: strip.scrollWidth - strip.clientWidth - strip.scrollLeft > 1,
+    };
+    setScroll((previous) => Object.keys(next).every((key) => next[key] === previous[key])
+      ? previous : next);
+  }, []);
+
+  React.useEffect(() => {
+    const strip = stripRef.current;
+    if (!strip) return undefined;
+    const refresh = () => {
+      revealTab(strip, strip.querySelector('[aria-selected="true"]'));
+      measure();
+    };
+    refresh();
+    const view = strip.ownerDocument.defaultView;
+    const observer = view.ResizeObserver ? new view.ResizeObserver(refresh) : null;
+    for (const node of [barRef.current, strip, listRef.current]) observer?.observe(node);
+    view.addEventListener('resize', refresh);
+    return () => {
+      observer?.disconnect();
+      view.removeEventListener('resize', refresh);
+    };
+  }, [tabs, activeTabId, scroll.overflow, measure]);
+
+  const scrollTabs = (direction) => {
+    const strip = stripRef.current;
+    if (!strip) return;
+    strip.scrollLeft += direction * Math.max(80, strip.clientWidth * 0.75);
+    measure();
+  };
+
+  const handleKeyDown = (event, index) => {
+    let next;
+    if (event.key === 'Home') next = 0;
+    else if (event.key === 'End') next = tabs.length - 1;
+    else if (event.key === 'ArrowLeft' || event.key === 'ArrowRight') {
+      next = (index + (event.key === 'ArrowRight' ? 1 : -1) + tabs.length) % tabs.length;
+    }
+    if (next === undefined) return;
+    event.preventDefault();
+    onChange(tabs[next].id);
+    const target = stripRef.current?.querySelectorAll('[role="tab"]')[next];
+    target?.focus({ preventScroll: true });
+    revealTab(stripRef.current, target);
+  };
+
+  const arrow = (direction, label, enabled) => scroll.overflow ? h('button', {
+    type: 'button',
+    className: 'dim-botSettingsScroll',
+    'aria-label': label,
+    title: label,
+    disabled: !enabled,
+    onClick: () => scrollTabs(direction),
+  }, h('svg', { width: 16, height: 16, viewBox: '0 0 16 16', 'aria-hidden': 'true' },
+    h('path', {
+      d: direction < 0 ? 'M10 3 5 8l5 5' : 'm6 3 5 5-5 5',
+      fill: 'none', stroke: 'currentColor', strokeWidth: 1.5,
+      strokeLinecap: 'round', strokeLinejoin: 'round',
+    }))) : null;
+
+  return h('div', { ref: barRef, className: 'dim-botSettingsTabsBar' },
+    arrow(-1, '向左滚动设置页签', scroll.left),
+    h('nav', {
+      ref: stripRef,
+      className: 'dim-botSettingsTabs',
+      role: 'tablist',
+      'aria-label': '机器人设置页签',
+      onScroll: measure,
+    }, h('div', { ref: listRef, className: 'dim-botSettingsTabsList', role: 'presentation' },
+      tabs.map((tab, index) => h('button', {
+        key: tab.id,
+        id: `dim-bot-settings-${tab.id}-tab`,
+        type: 'button',
+        role: 'tab',
+        className: 'dim-botSettingsTab',
+        'aria-selected': tab.id === activeTabId,
+        'aria-controls': `dim-bot-settings-${tab.id}-panel`,
+        tabIndex: tab.id === activeTabId ? 0 : -1,
+        onClick: (event) => {
+          onChange(tab.id);
+          revealTab(stripRef.current, event?.currentTarget);
+        },
+        onKeyDown: (event) => handleKeyDown(event, index),
+      }, tab.label)))),
+    arrow(1, '向右滚动设置页签', scroll.right));
+}

package/plugin-src/client/delivery-settings.js

@@ -1,6 +1,7 @@
 import * as React from 'react';
 
 import { AccessPolicySettingsPage } from './access-policy-settings.js';
+import { BotSettingsTabs } from './bot-settings-tabs.js';
 import { FeishuGroupSettingsPage } from './channels/feishu/group-settings.js';
 import { FeishuVoiceSettingsPage } from './channels/feishu/voice-settings.js';
 import { FeishuSlashPanelSettingsPage } from './channels/feishu/slash-panel-settings.js';
@@ -770,22 +771,7 @@ export function DeliveryTargetSettingsPage({
   },
   h('header', { className: 'dim-deliveryHeader' },
     h(DeliveryButton, { className: 'dim-deliveryBack', onClick: onBack }, '← 返回机器人列表')),
-  h('div', { className: 'dim-botSettingsTabsBar' },
-    h('nav', {
-      className: 'dim-botSettingsTabs',
-      role: 'tablist',
-      'aria-label': '机器人设置页签',
-    }, settingsTabs.map((tab) => h('button', {
-      key: tab.id,
-      id: `dim-bot-settings-${tab.id}-tab`,
-      type: 'button',
-      role: 'tab',
-      className: 'dim-botSettingsTab',
-      'aria-selected': tab.id === activeTab.id,
-      'aria-controls': `dim-bot-settings-${tab.id}-panel`,
-      tabIndex: tab.id === activeTab.id ? 0 : -1,
-      onClick: () => setActiveTabId(tab.id),
-    }, tab.label)))),
+  h(BotSettingsTabs, { tabs: settingsTabs, activeTabId: activeTab.id, onChange: setActiveTabId }),
   h('div', {
     id: activePanelId,
     className: 'dim-botSettingsTabPanel',

package/plugin-src/client/i18n.js

@@ -48,6 +48,8 @@ const EN = Object.freeze({
   'IM 面板加载失败': 'Could not load the IM panel',
   '更多机器人设置': 'More bot settings',
   '更多设置': 'More settings',
+  '向左滚动设置页签': 'Scroll settings tabs left',
+  '向右滚动设置页签': 'Scroll settings tabs right',
   '常用配置': 'Common settings',
   '机器人设置': 'Bot settings',
   '机器人设置页签': 'Bot settings tabs',
@@ -68,6 +70,11 @@ const EN = Object.freeze({
   '尚未添加用户': 'No users added',
   '当前渠道不支持群聊': 'Group chat is not supported by this channel',
   '原所有者或扫码接入者始终可以访问并执行命令；以下设置仅约束其他用户。': 'The original owner or QR-code operator can always access the bot and run commands; the settings below apply only to other users.',
+  '已由接入流程确认的所有者可以访问并执行命令，不受本页限制。未识别到所有者身份时，按本页访问设置执行。': 'Owners confirmed during connection setup can access the bot and run commands regardless of these settings. When no owner has been identified, these access settings apply.',
+  '白名单请填写使用者的 Open ID，不是机器人的 Open ID。仅保存通配符的接入配置不包含所有者身份。': 'Enter the user’s Open ID in the allowlist, not the bot’s Open ID. A connection configured with only a wildcard has no identified owner.',
+  '扫码获得的是私聊身份，群聊只有匹配已确认的所有者身份时才豁免；其他成员按群聊白名单设置执行。': 'QR setup identifies the owner for direct messages. In groups, only a matching confirmed owner identity is exempt; other members follow the group allowlist settings.',
+  '填写使用者的 Open ID（ou_xxx），不是机器人 ID': 'Enter the user’s Open ID (ou_xxx), not the bot ID',
+  '这里需要填写用户的 Open ID，不能填写机器人自己的 Open ID。': 'Enter a user Open ID here, not the bot’s own Open ID.',
   '此区域无需配置，保存私聊设置时会保留现有群聊策略。': 'No setup is needed here. Saving direct-message settings keeps the existing group policy.',
   '访问设置已保存。': 'Access settings saved.',
   '访问设置暂不可用。': 'Access settings are currently unavailable.',

package/plugin-src/client/styles.js

@@ -467,9 +467,14 @@ const CSS = String.raw`
 .dim-moreSettingsChevron { width: 6px; height: 6px; margin-right: 2px; border-right: 1.5px solid currentColor; border-bottom: 1.5px solid currentColor; transform: rotate(-45deg); }
 .dim-deliveryPage { min-width: 0; display: grid; }
 .dim-deliveryHeader { min-width: 0; display: flex; align-items: center; justify-content: space-between; gap: 16px; }
-.dim-botSettingsTabsBar { min-width: 0; margin-top: 10px; border-bottom: 1px solid var(--dsw-alias-border-l2, #dfe1e5); }
-.dim-botSettingsTabs { min-width: 0; display: flex; align-items: flex-end; gap: 24px; overflow-x: auto; scrollbar-width: none; }
+.dim-botSettingsTabsBar { min-width: 0; display: flex; align-items: center; gap: 4px; margin-top: 10px; border-bottom: 1px solid var(--dsw-alias-border-l2, #dfe1e5); }
+.dim-botSettingsTabs { min-width: 0; flex: 1; overflow-x: auto; overscroll-behavior-x: contain; scrollbar-width: none; }
 .dim-botSettingsTabs::-webkit-scrollbar { display: none; }
+.dim-botSettingsTabsList { width: max-content; min-width: 100%; display: flex; align-items: flex-end; gap: 24px; }
+.dim-botSettingsScroll { flex: 0 0 30px; width: 30px; height: 32px; display: inline-flex; align-items: center; justify-content: center; padding: 0; border: 0; border-radius: 6px; background: transparent; color: var(--dsw-alias-label-secondary, #646a73); cursor: pointer; }
+.dim-botSettingsScroll:hover:not(:disabled) { color: var(--dsw-alias-state-business-primary, #3370ff); background: var(--dsw-alias-interactive-bg-hover, #eef0f3); }
+.dim-botSettingsScroll:disabled { opacity: .3; cursor: default; }
+.dim-botSettingsScroll:focus-visible { outline: 2px solid var(--dsw-alias-state-business-primary, #3370ff); outline-offset: -2px; }
 .dim-botSettingsTab { position: relative; min-height: 38px; flex: none; display: inline-flex; align-items: center; justify-content: center; padding: 6px 2px 9px; border: 0; color: var(--dsw-alias-label-secondary, #646a73); background: transparent; font: inherit; font-size: 13px; line-height: 20px; font-weight: 560; white-space: nowrap; cursor: pointer; transition: color .15s ease; }
 .dim-botSettingsTab::after { content: ''; position: absolute; right: 0; bottom: -1px; left: 0; height: 2px; border-radius: 2px 2px 0 0; background: transparent; transform: scaleX(.45); transition: background .15s ease, transform .15s ease; }
 .dim-botSettingsTab:hover:not([aria-selected="true"]) { color: var(--dsw-alias-label-primary, #1f2329); }
@@ -735,7 +740,7 @@ const CSS = String.raw`
   .dim-loopbackRecovery { align-items: stretch; flex-direction: column; gap: 12px; }
   .dim-loopbackRecoveryAction { width: 100%; }
   .dim-deliverySectionHeading { align-items: stretch; flex-direction: column; }
-  .dim-botSettingsTabs { gap: 18px; }
+  .dim-botSettingsTabsList { gap: 18px; }
   .dim-deliveryBotId { grid-template-columns: minmax(0, 1fr) max-content; }
   .dim-deliveryBotId > span { grid-column: 1 / -1; }
   .dim-targetActions .dim-deliveryButton { flex: 1 1 auto; }

package/plugin-src/host/channels/feishu/production.mjs

@@ -1,4 +1,5 @@
 import { getImageInputSettingsStore } from '../../../../src/channels/shared/image-input-settings-store.mjs';
+import { t } from '../../../../src/channels/shared/i18n.mjs';
 import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
 import { unlink } from 'node:fs/promises';
@@ -34,6 +35,7 @@ import { createDeliveryAdapter } from '../../delivery-adapter.mjs';
 import {
   accessPolicyProvider,
   initialAccessPolicyFor,
+  newBotAccessPolicyFor,
 } from '../shared/access-policy-production.mjs';
 
 // The WebSocket agent built here is only used for the Feishu long connection,
@@ -229,7 +231,7 @@ export async function createProductionController(ctx, config = {}, internals = {
       const id = botId ?? botConfig.id ?? botConfig.appId;
       await workspaces.ensure(id, {
         defaultAgentPreset: config.agentPreset,
-        initialAccessPolicy: initialAccessPolicyFor('feishu', botConfig),
+        initialAccessPolicy: newBotAccessPolicyFor('feishu', botConfig),
       });
       const workspaceScope = createBotWorkspaceScope(harness, {
         botId: id, workspaces, state, agentPresetCatalog,
@@ -291,6 +293,16 @@ export async function createProductionController(ctx, config = {}, internals = {
     stateFor: stateForBotId,
     agentPresetCatalog,
     modelCatalog,
+    validateAccessPolicyForBot(botId, policy) {
+      const botOpenId = configStore.getBot(botId)?.botOpenId;
+      if (!botOpenId) return;
+      if ([policy.direct, policy.group].some((scope) => scope.mode === 'allowlist'
+        && scope.allowlist.users.some((user) => user.id === botOpenId))) {
+        const error = new TypeError(t('这里需要填写用户的 Open ID，不能填写机器人自己的 Open ID。'));
+        error.code = 'access-policy-invalid';
+        throw error;
+      }
+    },
   });
 
   const supervisor = createSupervisor({

package/plugin-src/host/channels/qq/production.mjs

@@ -30,6 +30,7 @@ import {
 import {
   accessPolicyProvider,
   initialAccessPolicyFor,
+  newBotAccessPolicyFor,
 } from '../shared/access-policy-production.mjs';
 
 function pluginPaths(config) {
@@ -117,7 +118,7 @@ export async function createProductionController(ctx, config = {}, internals = {
       const state = await stateFor(botId);
       await workspaces.ensure(botId, {
         defaultAgentPreset: config.agentPreset,
-        initialAccessPolicy: initialAccessPolicyFor('qq', botConfig),
+        initialAccessPolicy: newBotAccessPolicyFor('qq', botConfig),
       });
       const workspaceScope = createBotWorkspaceScope(harness, {
         botId, workspaces, state, agentPresetCatalog,

package/plugin-src/host/channels/shared/access-policy-production.mjs

@@ -97,6 +97,19 @@ export function initialAccessPolicyFor(channel, config = {}) {
   throw new TypeError(`Unsupported access-policy channel: ${channel}`);
 }
 
+/**
+ * Seed newly connected bots after startup has migrated existing bots with
+ * initialAccessPolicyFor(). Open Feishu/QQ messages and commands in both chat
+ * types; workspace ensure() preserves any policy already saved.
+ */
+export function newBotAccessPolicyFor(channel, config = {}) {
+  const key = String(channel ?? '').trim().toLowerCase();
+  if (key === 'feishu' || key === 'qq') {
+    return createAccessPolicy({ direct: openScope(), group: openScope() });
+  }
+  return initialAccessPolicyFor(channel, config);
+}
+
 export function privilegedSenderIdsFor(channel, config = {}) {
   const key = String(channel ?? '').trim().toLowerCase();
   if (key === 'weixin') return cleanIds(config.ownerUserId);
@@ -109,6 +122,7 @@ export function privilegedSenderIdsFor(channel, config = {}) {
   }
   if (key === 'qq') return cleanIds(config.ownerUserOpenid).filter((id) => id !== '*');
   if (key === 'whatsapp') return cleanIds(config.accountJid);
+  if (key === 'discord') return cleanIds(config.ownerUserId);
   return [];
 }
 

package/plugin-src/host/channels/shared/workspace-rpc.mjs

@@ -26,6 +26,7 @@ export function publicWorkspaceError(error) {
     'model-selection-unavailable',
     'model-reasoning-unavailable',
     'context-enhancement-invalid',
+    'access-policy-invalid',
   ].includes(error?.code)) return null;
   return { code: error.code, message: error.message };
 }

package/plugin-src/host/modern-harness-api.mjs

@@ -1,6 +1,7 @@
 import { randomUUID } from 'node:crypto';
 
 import { hasActiveHarnessInteractionOwner } from '../../src/channels/shared/harness-client.mjs';
+import { extractConnectionEvidence } from '../../src/channels/shared/connection-error.mjs';
 
 const modernApis = new WeakMap();
 
@@ -25,7 +26,7 @@ function failureOf(error) {
   return {
     code: 'internal',
     message: error instanceof Error ? error.message : String(error),
-    details: {},
+    details: extractConnectionEvidence(error).details,
   };
 }
 

package/src/channels/discord/config-store.mjs

@@ -20,6 +20,26 @@ export function maskDiscordBotId(platformId) {
 
 export class DiscordConfigStore extends TokenBotConfigStore {
   constructor(path) {
-    super(path, { channel: 'Discord', ...IDENTITY_OPTIONS });
+    super(path, {
+      channel: 'Discord',
+      ...IDENTITY_OPTIONS,
+      normalizeBotExtension(value) {
+        if (value.ownerUserId == null) return { ownerUserId: null };
+        const ownerUserId = typeof value.ownerUserId === 'string' ? value.ownerUserId.trim() : '';
+        if (!/^\d{5,30}$/.test(ownerUserId) || ownerUserId === value.platformId?.trim()) return null;
+        return { ownerUserId };
+      },
+    });
+  }
+
+  save(value) {
+    // Shared credential binding rebuilds the base config. Preserve only this
+    // bot's confirmed identity when omitted; explicit null still clears it.
+    return super.save({
+      ...value,
+      ownerUserId: value?.ownerUserId === undefined
+        ? this.get(value?.botId)?.ownerUserId ?? null
+        : value.ownerUserId,
+    });
   }
 }

package/src/channels/discord/discord-api.mjs

@@ -123,6 +123,10 @@ export class DiscordApi {
     return this.#request('users/@me', { ...options, method: 'GET' });
   }
 
+  getCurrentApplication(options = {}) {
+    return this.#request('applications/@me', { ...options, method: 'GET' });
+  }
+
   getGatewayBot(options = {}) {
     return this.#request('gateway/bot', { ...options, method: 'GET' });
   }
@@ -345,3 +349,31 @@ export async function inspectDiscordToken(token, options = {}) {
     username: cleanString(bot.username),
   };
 }
+
+/** Owner lookup is optional metadata, bounded separately from Gateway startup. */
+export async function inspectDiscordOwner(token, {
+  platformId,
+  timeoutMs = 5_000,
+  signal,
+  ...options
+} = {}) {
+  const api = new DiscordApi({ token, ...options });
+  const lookupSignal = requestSignal(signal, positiveTimeout(timeoutMs, 'owner lookup timeout'));
+  const request = { signal: lookupSignal, retry: false };
+  const application = await api.getCurrentApplication(request);
+  const bot = application?.bot ?? await api.getCurrentUser(request);
+  if ((!application?.bot && bot?.bot !== true) || bot?.bot === false
+    || snowflake(bot?.id, 'bot id') !== platformId) {
+    throw new Error('Discord application does not belong to the configured bot');
+  }
+  // A team application belongs to its team owner, not every developer or the
+  // synthetic application owner that Discord can return for team applications.
+  const ownerUserId = snowflake(application?.team != null
+    ? application.team.owner_user_id
+    : application?.owner?.id, 'owner id');
+  if (ownerUserId === platformId || (application?.owner?.bot === true && application?.team == null)) {
+    throw new Error('Discord application owner is not a human identity');
+  }
+  lookupSignal.throwIfAborted();
+  return ownerUserId;
+}

package/src/channels/discord/discord-controller.mjs

@@ -1,16 +1,37 @@
 import { TokenBotController } from '../shared/token-bot-controller.mjs';
 import { deriveDiscordBotIdentity, maskDiscordBotId } from './config-store.mjs';
-import { inspectDiscordToken } from './discord-api.mjs';
+import { inspectDiscordOwner, inspectDiscordToken } from './discord-api.mjs';
 import { DISCORD_DESCRIPTOR } from './discord-bridge.mjs';
 
 export class DiscordController extends TokenBotController {
   constructor(options) {
+    if (typeof options.createRuntime !== 'function') throw new TypeError('Discord runtime factory must be a function');
+    const inspectOwner = options.inspectOwner ?? inspectDiscordOwner;
+    if (typeof inspectOwner !== 'function') throw new TypeError('Discord owner inspector must be a function');
     super({
       ...options,
       descriptor: DISCORD_DESCRIPTOR,
       inspectToken: options.inspectToken ?? inspectDiscordToken,
       deriveIdentity: deriveDiscordBotIdentity,
       maskPlatformId: maskDiscordBotId,
+      createRuntime: async (request) => {
+        // Run inside the parent's existing per-bot transition. The production
+        // callback must receive the committed owner before building its policy.
+        let config = options.configStore.get(request.botId) ?? request.config;
+        try {
+          const ownerUserId = await inspectOwner(request.token, { platformId: config.platformId });
+          if (ownerUserId != null && ownerUserId !== config.ownerUserId) {
+            config = await options.configStore.save({ ...config, ownerUserId });
+          }
+        } catch {
+          // Neither provider errors nor optional metadata writes should break
+          // an otherwise usable bot. Do not log provider responses or user IDs.
+          (options.logger ?? console).warn?.('[dsh-im:discord] owner lookup unavailable; using saved identity', {
+            botId: request.botId,
+          });
+        }
+        return options.createRuntime({ ...request, config });
+      },
     });
   }
 }