lunibee 0.2.3 → 0.3.0

package/dist/managers/member.d.ts

@@ -21,14 +21,21 @@ export declare class GuildMemberManager extends ResourceManager<string, GuildMem
     readonly guildId: string;
     /** @param context Gives fetched members their actions (`member.kick()`...). */
     constructor(guildId: string, rest: REST, context?: () => ResourceContext | undefined);
+    /** Finds members whose username or nickname starts with `query` (up to `limit`, 1-1000, default 1). */
+    search(query: string, limit?: number): Promise<GuildMember[]>;
+    /** Changes the bot's own nickname in this guild (`null` clears it). */
+    editMe(options: {
+        nick?: string | null;
+        reason?: string;
+    }): Promise<GuildMember>;
     /** Kicks a member from the guild. @param reason Audit-log reason. */
     kick(userId: string, reason?: string): Promise<void>;
     /** Bans a user from the guild. */
     ban(userId: string, options?: BanOptions): Promise<void>;
     /** Unbans a user from the guild. @param reason Audit-log reason. */
     unban(userId: string, reason?: string): Promise<void>;
-    /** Edits a guild member (nickname, roles, timeout, mute, deaf). Put the audit-log reason in `options.reason`. @param reason Deprecated: use `options.reason`. Removed in 0.3.0. */
-    edit(userId: string, options: MemberEditOptions, reason?: string): Promise<GuildMember>;
+    /** Edits a guild member (nickname, roles, timeout, mute, deaf). Put the audit-log reason in `options.reason`.*/
+    edit(userId: string, options: MemberEditOptions): Promise<GuildMember>;
     /** Adds a role to a member. @param reason Audit-log reason. */
     addRole(userId: string, roleId: string, reason?: string): Promise<void>;
     /** Removes a role from a member. @param reason Audit-log reason. */

package/dist/managers/message.d.ts

@@ -7,31 +7,26 @@ export interface MessageCacheOptions {
     /** Sliding TTL in ms. Omit for no expiry. */
     ttl?: number;
 }
-import { REST } from "@lunibee/rest";
+import { REST, type RESTFileAttachment } from "@lunibee/rest";
+import type { AllowedMentions, MessageCreateOptions, MessageEditOptions, MessageFile } from "@lunibee/types";
 import { Message, type ResourceContext } from "@lunibee/structures";
-/** A file to upload with a message. */
-export interface MessageFile {
-    name: string;
-    data: Blob | Uint8Array | ArrayBuffer | string;
-    contentType?: string;
-}
-export type MessageCreateOptions = Record<string, unknown> & {
-    content?: string;
-    /** Files to upload; the message is sent as multipart. */
-    files?: MessageFile[];
-};
-export type MessageEditOptions = MessageCreateOptions;
+export type { MessageCreateOptions, MessageEditOptions, MessageFile };
+/** Turns message files into REST uploads, encoding string data as UTF-8. */
+export declare function toAttachments(files: readonly MessageFile[]): RESTFileAttachment[];
 /**
  * Splits `files` out of a message payload into a REST upload, encoding string
  * data as UTF-8. `allowedMentions` is the client's default, applied only when
  * the payload has no `allowed_mentions` of its own.
  */
-export declare function toRequest(options: MessageCreateOptions, allowedMentions?: unknown): unknown;
+export declare function toRequest(options: MessageCreateOptions, allowedMentions?: AllowedMentions): Omit<MessageCreateOptions, "files"> | {
+    body: Omit<MessageCreateOptions, "files">;
+    files: RESTFileAttachment[];
+};
 export declare class MessageManager {
     #private;
     /** Cached messages; always empty unless a message cache is configured. */
     readonly cache: Collection<string, Message>;
-    constructor(rest: REST, context: ResourceContext, channelId: string, cache?: MessageCacheOptions, allowedMentions?: unknown);
+    constructor(rest: REST, context: ResourceContext, channelId: string, cache?: MessageCacheOptions, allowedMentions?: AllowedMentions);
     resolve(messageId: string): Promise<Message>;
     send(options: MessageCreateOptions): Promise<Message>;
     fetch(messageId: string): Promise<Message>;

package/dist/managers/role.d.ts

@@ -1,22 +1,31 @@
 import { REST } from "@lunibee/rest";
 import { Role } from "@lunibee/structures";
 import { ResourceManager } from "./base.js";
-export interface RoleCreateOptions {
-    name: string;
+/** Role fields shared by create and edit. */
+interface RoleStyleOptions {
     permissions?: bigint | number | string;
+    /** A solid colour as a 24-bit integer. Use `colors` for a gradient. */
     color?: number;
+    /** Primary, secondary and tertiary colours: two make a gradient, three the holographic style. */
+    colors?: {
+        primary: number;
+        secondary?: number | null;
+        tertiary?: number | null;
+    };
     hoist?: boolean;
     mentionable?: boolean;
+    /** The role's icon as a data URI (needs the guild's role-icons boost level), or `null` to remove it. */
+    icon?: string | null;
+    /** A unicode emoji as the role icon, or `null` to remove it. */
+    unicodeEmoji?: string | null;
     reason?: string;
 }
-export interface RoleEditOptions {
+export interface RoleCreateOptions extends RoleStyleOptions {
+    name: string;
+}
+export interface RoleEditOptions extends RoleStyleOptions {
     name?: string;
-    permissions?: bigint | number | string;
-    color?: number;
-    hoist?: boolean;
-    mentionable?: boolean;
     position?: number;
-    reason?: string;
 }
 /** Manages Discord guild roles. */
 export declare class RoleManager extends ResourceManager<string, Role> {
@@ -41,6 +50,5 @@ export declare class RoleManager extends ResourceManager<string, Role> {
         id: string;
         position: number;
     }[], reason?: string): Promise<Role[]>;
-    /** @deprecated Use {@link RoleManager.remove}, which also takes an audit-log reason. Removed in 0.3.0. */
-    deleteRole(roleId: string): Promise<void>;
 }
+export {};

package/dist/managers/thread.d.ts

@@ -1,5 +1,28 @@
 import { REST } from "@lunibee/rest";
 import { Channel, type ResourceContext } from "@lunibee/structures";
+import type { APIGuildMember, APIThreadMember, MessageCreateOptions } from "@lunibee/types";
+/** Options shared by every way of starting a thread. */
+export interface ThreadCreateOptions {
+    name: string;
+    /** Minutes of inactivity before it archives: 60, 1440, 4320 or 10080. */
+    autoArchiveDuration?: 60 | 1440 | 4320 | 10080;
+    /** Seconds a member must wait between messages (0-21600). */
+    rateLimitPerUser?: number;
+    reason?: string;
+}
+/** What a thread member lookup may ask Discord to include. */
+export interface ThreadMemberQuery {
+    /** Include each member's guild member object. */
+    withMember?: boolean;
+}
+/** Which archived threads to list. */
+export type ArchivedThreadScope = "public" | "private" | "joined-private";
+/** One page of archived threads. */
+export interface ArchivedThreads {
+    threads: Channel[];
+    members: APIThreadMember[];
+    hasMore: boolean;
+}
 /** Manages thread resources created from a parent channel. */
 export declare class ThreadManager {
     #private;
@@ -11,4 +34,49 @@ export declare class ThreadManager {
         autoArchiveDuration?: 60 | 1440 | 4320 | 10080;
         rateLimitPerUser?: number;
     }): Promise<Channel>;
+    /**
+     * Starts a thread that is not attached to a message: a private thread
+     * (`type: 12`, the default) or a public one (`type: 11`) in a text or
+     * announcement channel.
+     */
+    create(options: ThreadCreateOptions & {
+        /** 11 public, 12 private (default), 10 announcement. */
+        type?: 10 | 11 | 12;
+        /** Whether non-moderators can add other members to a private thread. */
+        invitable?: boolean;
+    }): Promise<Channel>;
+    /**
+     * Posts to a forum or media channel: one request creates the thread and its
+     * first message. `message` takes everything `send()` does, files included.
+     */
+    createForumPost(options: ThreadCreateOptions & {
+        message: MessageCreateOptions;
+        /** IDs of the channel's tags to apply. */
+        appliedTags?: string[];
+    }): Promise<Channel>;
+    /**
+     * Lists archived threads of this channel, newest first. `joined-private`
+     * is the private archived threads the bot is a member of.
+     */
+    fetchArchived(scope: ArchivedThreadScope, options?: {
+        before?: string;
+        limit?: number;
+    }): Promise<ArchivedThreads>;
+    /** Joins a thread as the bot. */
+    join(threadId: string): Promise<void>;
+    /** Leaves a thread as the bot. */
+    leave(threadId: string): Promise<void>;
+    /** Adds a member to a thread. */
+    addMember(threadId: string, userId: string): Promise<void>;
+    /** Removes a member from a thread. */
+    removeMember(threadId: string, userId: string): Promise<void>;
+    /** Fetches one thread member; rejects with a 404 when they have not joined. */
+    fetchMember(threadId: string, userId: string, query?: ThreadMemberQuery): Promise<APIThreadMember & {
+        member?: APIGuildMember;
+    }>;
+    /** Lists thread members (needs the Guild Members intent), one page at a time (`limit` 1-100). */
+    fetchMembers(threadId: string, options?: ThreadMemberQuery & {
+        after?: string;
+        limit?: number;
+    }): Promise<APIThreadMember[]>;
 }

package/dist/managers/user.d.ts

@@ -2,6 +2,17 @@ import { ResourceManager } from "./base.js";
 import { User } from "@lunibee/structures";
 import { type REST } from "@lunibee/rest";
 import type { APIChannel } from "@lunibee/types";
+/** A guild as `GET /users/@me/guilds` lists it. */
+export interface APIPartialGuild {
+    id: string;
+    name: string;
+    icon: string | null;
+    owner: boolean;
+    permissions: string;
+    features: string[];
+    approximate_member_count?: number;
+    approximate_presence_count?: number;
+}
 export interface UserEditOptions {
     username?: string;
     avatar?: string | null;
@@ -13,6 +24,13 @@ export declare class UserManager extends ResourceManager<string, User> {
     fetchMe(): Promise<User>;
     /** Modifies the currently logged-in bot user. */
     editMe(options: UserEditOptions): Promise<User>;
+    /** Lists the guilds the bot is in, one page at a time (`limit` 1-200, `before` / `after` guild-ID cursors). */
+    fetchGuilds(options?: {
+        limit?: number;
+        before?: string;
+        after?: string;
+        withCounts?: boolean;
+    }): Promise<APIPartialGuild[]>;
     /** Leaves a guild. */
     leaveGuild(guildId: string): Promise<void>;
     /** Creates a DM channel with a user. */

package/dist/rest/errors.d.ts

@@ -28,13 +28,20 @@ export type RESTErrorKind =
 export declare function redactPath(path: string): string;
 /** Error thrown when Discord rejects a REST request. */
 export declare class RESTError extends Error {
-    /** Failure category. */ readonly kind: RESTErrorKind;
-    /** HTTP status returned by Discord. */ readonly status: number;
-    /** Discord API error code, when provided. */ readonly code?: number;
-    /** Raw Discord validation/error payload. */ readonly errors?: unknown;
-    /** HTTP method used for the failed request. */ readonly method?: string;
-    /** API path used for the failed request. */ readonly path?: string;
-    /** What to check next, for errors with a common cause (missing access or permissions). */ readonly hint?: string;
+    /** Failure category. */
+    readonly kind: RESTErrorKind;
+    /** HTTP status returned by Discord. */
+    readonly status: number;
+    /** Discord API error code, when provided. */
+    readonly code?: number;
+    /** Raw Discord validation/error payload. */
+    readonly errors?: unknown;
+    /** HTTP method used for the failed request. */
+    readonly method?: string;
+    /** API path used for the failed request. */
+    readonly path?: string;
+    /** What to check next, for errors with a common cause (missing access or permissions). */
+    readonly hint?: string;
     /** Creates a REST error with request context. @param message Error message. @param status HTTP status. @param code Discord error code. @param errors Raw error payload. @param options Request context and cause. */
     constructor(message: string, status: number, code?: number, errors?: unknown, options?: {
         method?: string;

package/dist/rest/index.d.ts

@@ -16,11 +16,16 @@ export interface RESTFileAttachment {
  * `reason`, `auth`) additively without changing that positional default.
  */
 export interface RESTRequestOptions {
-    /** Abort signal used to cancel the request and any queued wait. */ signal?: AbortSignal;
-    /** Query-string appended to the path (`URLSearchParams`, a record, or a raw string). */ query?: RESTQuery;
-    /** Extra request headers merged in (library headers such as `Authorization` win). */ headers?: Record<string, string>;
-    /** Audit-log reason, sent as the `X-Audit-Log-Reason` header. */ reason?: string;
-    /** Set `false` to omit the `Authorization` header for this request. Defaults to `true`. */ auth?: boolean;
+    /** Abort signal used to cancel the request and any queued wait. */
+    signal?: AbortSignal;
+    /** Query-string appended to the path (`URLSearchParams`, a record, or a raw string). */
+    query?: RESTQuery;
+    /** Extra request headers merged in (library headers such as `Authorization` win). */
+    headers?: Record<string, string>;
+    /** Audit-log reason, sent as the `X-Audit-Log-Reason` header. */
+    reason?: string;
+    /** Set `false` to omit the `Authorization` header for this request. Defaults to `true`. */
+    auth?: boolean;
 }
 /**
  * Discord.js-familiar request payload. Superset of {@link RESTRequestOptions} that also
@@ -28,8 +33,10 @@ export interface RESTRequestOptions {
  * additive `method(path, { body })` overloads without breaking the positional signature.
  */
 export interface RequestData extends RESTRequestOptions {
-    /** Request body. Encoded as JSON unless `files` are present (then multipart). */ body?: unknown;
-    /** File attachments; presence upgrades the request to `multipart/form-data`. */ files?: RESTFileAttachment[];
+    /** Request body. Encoded as JSON unless `files` are present (then multipart). */
+    body?: unknown;
+    /** File attachments; presence upgrades the request to `multipart/form-data`. */
+    files?: RESTFileAttachment[];
 }
 /** Context passed to `RESTHooks.onRequest`. */
 export interface RESTRequestContext {
@@ -81,9 +88,12 @@ export interface RESTHooks {
 }
 /** Configures which REST failures may be retried. */
 export interface RetryPolicy {
-    /** Maximum retry attempts. */ maxRetries: number;
-    /** Determines whether a request may be retried. @param method HTTP method. @param status HTTP status, or zero for transport errors. @returns True when retrying is safe under the policy. */ shouldRetry(method: string, status: number): boolean;
-    /** Calculates delay before the next attempt. @param attempt Zero-based retry number. @param retryAfter Server-provided delay, when available. @returns Delay in milliseconds. */ getDelay(attempt: number, retryAfter?: number): number;
+    /** Maximum retry attempts. */
+    maxRetries: number;
+    /** Determines whether a request may be retried. @param method HTTP method. @param status HTTP status, or zero for transport errors. @returns True when retrying is safe under the policy. */
+    shouldRetry(method: string, status: number): boolean;
+    /** Calculates delay before the next attempt. @param attempt Zero-based retry number. @param retryAfter Server-provided delay, when available. @returns Delay in milliseconds. */
+    getDelay(attempt: number, retryAfter?: number): number;
 }
 /** Creates the default conservative REST retry policy. @param maxRetries Maximum retries. @returns Retry policy that retries rate limits and idempotent transient failures. @throws {TypeError} If maxRetries is negative or not finite. */
 export declare function createRetryPolicy(maxRetries?: number): RetryPolicy;
@@ -126,7 +136,8 @@ export declare class REST {
      * @throws {RESTError} If Discord or transport rejects the request.
      */
     request<T>(method: string, path: string, body?: unknown, options?: RequestData): Promise<T>;
-    /** Sends a GET request. @param path API path. @param options Request options (`query`, `headers`, `signal`, …). @returns Decoded response. @throws {RESTError} When the request fails. */ get<T>(path: string, options?: RequestData): Promise<T>;
+    /** Sends a GET request. @param path API path. @param options Request options (`query`, `headers`, `signal`, …). @returns Decoded response. @throws {RESTError} When the request fails. */
+    get<T>(path: string, options?: RequestData): Promise<T>;
     /** Sends a POST request. Accepts a raw body (`post(path, body)`) or a Discord.js-familiar `post(path, { body })`. @param path API path. @param body Optional JSON body, or a `RequestData` wrapper. @param options Request options. @returns Decoded response. @throws {RESTError} When the request fails. */
     post<T>(path: string, options: RequestData): Promise<T>;
     post<T>(path: string, body?: unknown, options?: RequestData): Promise<T>;
@@ -136,7 +147,8 @@ export declare class REST {
     /** Sends a PUT request. Accepts a raw body (`put(path, body)`) or a Discord.js-familiar `put(path, { body })`. @param path API path. @param body Optional JSON body, or a `RequestData` wrapper. @param options Request options. @returns Decoded response. @throws {RESTError} When the request fails. */
     put<T>(path: string, options: RequestData): Promise<T>;
     put<T>(path: string, body?: unknown, options?: RequestData): Promise<T>;
-    /** Sends a DELETE request. @param path API path. @param options Request options (`reason`, `headers`, `signal`, …). @returns Decoded response. @throws {RESTError} When the request fails. */ delete<T>(path: string, options?: RequestData): Promise<T>;
+    /** Sends a DELETE request. @param path API path. @param options Request options (`reason`, `headers`, `signal`, …). @returns Decoded response. @throws {RESTError} When the request fails. */
+    delete<T>(path: string, options?: RequestData): Promise<T>;
     /**
      * Sends a multipart/form-data POST request for file uploads.
      * Attaches a JSON payload as `payload_json` and files as additional fields.

package/dist/rest/index.js

@@ -2,7 +2,7 @@
 // packages/rest/package.json
 var package_default = {
   name: "@lunibee/rest",
-  version: "0.2.3",
+  version: "0.3.0",
   type: "module",
   module: "./src/index.ts",
   types: "./src/index.ts",
@@ -83,7 +83,7 @@ function kindFromStatus(status) {
   return "client";
 }
 function redactPath(path) {
-  return path.replace(/^(\/webhooks\/[^/?]+\/)[^/?]+/, "$1:token").replace(/^(\/interactions\/[^/?]+\/)[^/?]+/, "$1:token");
+  return path.replace(/^(\/webhooks\/[^/?]+\/)[^/?]+/i, "$1:token").replace(/^(\/interactions\/[^/?]+\/)[^/?]+/i, "$1:token");
 }
 var HINTS = {
   50001: "The bot cannot see this resource: check that it is in the guild and has View Channel there.",
@@ -142,19 +142,23 @@ async function abortable(promise, signal, path) {
 }
 
 // packages/rest/src/route.ts
+import { createHash } from "crypto";
 function normalizeRoutePath(path) {
   const queryIndex = path.indexOf("?");
   const routePath = queryIndex === -1 ? path : path.slice(0, queryIndex);
-  return routePath.replace(/\/\d+(?=\/|$)/g, "/:id");
+  return redactPath(routePath).replace(/\/\d+(?=\/|$)/g, "/:id");
 }
 function majorParameter(path) {
-  const match = /^\/(channels|guilds|webhooks)\/(\d+)(?:\/([^/?]+))?/.exec(path);
+  const match = /^\/(channels|guilds|webhooks)\/(\d+)(?:\/([^/?]+))?/i.exec(path);
   if (!match)
     return "@none";
-  if (match[1] === "webhooks" && match[3] !== undefined)
-    return `${match[2]}:${match[3]}`;
+  if (match[1].toLowerCase() === "webhooks" && match[3] !== undefined)
+    return `${match[2]}:${tokenDigest(match[3])}`;
   return match[2];
 }
+function tokenDigest(token) {
+  return createHash("sha256").update(token).digest("hex").slice(0, 16);
+}
 function scopeBucket(hashOrRoute, major) {
   return `${hashOrRoute}|${major}`;
 }
@@ -396,6 +400,9 @@ var Routes = {
   user: () => "/users/@me",
   userById: (userId) => `/users/${snowflake(userId, "User ID")}`,
   guild: (guildId) => `/guilds/${snowflake(guildId, "Guild ID")}`,
+  currentUserGuild: (guildId) => `/users/@me/guilds/${snowflake(guildId, "Guild ID")}`,
+  sticker: (stickerId) => `/stickers/${snowflake(stickerId, "Sticker ID")}`,
+  messageReactionUser: (channelId, messageId, emoji, userId) => `${Routes.messageReactions(channelId, messageId, emoji)}/${snowflake(userId, "User ID")}`,
   guildPreview: (guildId) => `/guilds/${snowflake(guildId, "Guild ID")}/preview`,
   guildActiveThreads: (guildId) => `/guilds/${snowflake(guildId, "Guild ID")}/threads/active`,
   guildWebhooks: (guildId) => `/guilds/${snowflake(guildId, "Guild ID")}/webhooks`,
@@ -412,11 +419,10 @@ var Routes = {
   message: (channelId, messageId) => `/channels/${snowflake(channelId, "Channel ID")}/messages/${snowflake(messageId, "Message ID")}`,
   crosspostMessage: (channelId, messageId) => `${Routes.message(channelId, messageId)}/crosspost`,
   messageReactions: (channelId, messageId, emoji) => `${Routes.message(channelId, messageId)}/reactions/${encodeURIComponent(emoji)}`,
+  messageReactionMe: (channelId, messageId, emoji) => `${Routes.messageReactions(channelId, messageId, emoji)}/@me`,
   messageReactionsAll: (channelId, messageId) => `${Routes.message(channelId, messageId)}/reactions`,
   channelMessagesPins: (channelId) => `/channels/${snowflake(channelId, "Channel ID")}/messages/pins`,
   channelMessagesPin: (channelId, messageId) => `/channels/${snowflake(channelId, "Channel ID")}/messages/pins/${snowflake(messageId, "Message ID")}`,
-  channelPins: (channelId) => `/channels/${snowflake(channelId, "Channel ID")}/pins`,
-  channelPin: (channelId, messageId) => `/channels/${snowflake(channelId, "Channel ID")}/pins/${snowflake(messageId, "Message ID")}`,
   messageThread: (channelId, messageId) => `${Routes.message(channelId, messageId)}/threads`,
   channelBulkDelete: (channelId) => `/channels/${snowflake(channelId, "Channel ID")}/messages/bulk-delete`,
   channelWebhooks: (channelId) => `/channels/${snowflake(channelId, "Channel ID")}/webhooks`,
@@ -431,6 +437,10 @@ var Routes = {
   interactionOriginalResponse: (applicationId, token) => `/webhooks/${snowflake(applicationId, "Application ID")}/${encodeURIComponent(token)}/messages/@original`,
   channelPublicArchivedThreads: (channelId) => `/channels/${snowflake(channelId, "Channel ID")}/threads/archived/public`,
   channelPrivateArchivedThreads: (channelId) => `/channels/${snowflake(channelId, "Channel ID")}/threads/archived/private`,
+  channelJoinedPrivateArchivedThreads: (channelId) => `/channels/${snowflake(channelId, "Channel ID")}/users/@me/threads/archived/private`,
+  threadMember: (threadId, userId) => `/channels/${snowflake(threadId, "Thread ID")}/thread-members/${userOrMe(userId)}`,
+  channelTyping: (channelId) => `/channels/${snowflake(channelId, "Channel ID")}/typing`,
+  channelThreads: (channelId) => `/channels/${snowflake(channelId, "Channel ID")}/threads`,
   threadMembers: (threadId) => `/channels/${snowflake(threadId, "Thread ID")}/thread-members`,
   guildScheduledEvents: (guildId) => `/guilds/${snowflake(guildId, "Guild ID")}/scheduled-events`,
   guildScheduledEvent: (guildId, eventId) => `/guilds/${snowflake(guildId, "Guild ID")}/scheduled-events/${snowflake(eventId, "Event ID")}`,
@@ -443,6 +453,13 @@ var Routes = {
   gatewayBot: () => "/gateway/bot",
   guildAuditLog: (guildId) => `/guilds/${snowflake(guildId, "Guild ID")}/audit-logs`,
   guildMembers: (guildId) => `/guilds/${snowflake(guildId, "Guild ID")}/members`,
+  guildMembersSearch: (guildId) => `/guilds/${snowflake(guildId, "Guild ID")}/members/search`,
+  guildMemberMe: (guildId) => `/guilds/${snowflake(guildId, "Guild ID")}/members/@me`,
+  guildBulkBan: (guildId) => `/guilds/${snowflake(guildId, "Guild ID")}/bulk-ban`,
+  guildVoiceState: (guildId, userId) => `/guilds/${snowflake(guildId, "Guild ID")}/voice-states/${userOrMe(userId)}`,
+  guildIntegration: (guildId, integrationId) => `/guilds/${snowflake(guildId, "Guild ID")}/integrations/${snowflake(integrationId, "Integration ID")}`,
+  userGuilds: () => "/users/@me/guilds",
+  stickerPacks: (packId) => packId ? `/sticker-packs/${snowflake(packId, "Sticker pack ID")}` : "/sticker-packs",
   guildWelcomeScreen: (guildId) => `/guilds/${snowflake(guildId, "Guild ID")}/welcome-screen`,
   guildOnboarding: (guildId) => `/guilds/${snowflake(guildId, "Guild ID")}/onboarding`,
   guildPrune: (guildId) => `/guilds/${snowflake(guildId, "Guild ID")}/prune`,
@@ -463,6 +480,9 @@ var Routes = {
   consumeEntitlement: (applicationId, entitlementId) => `/applications/${snowflake(applicationId, "Application ID")}/entitlements/${snowflake(entitlementId, "Entitlement ID")}/consume`,
   skuSubscription: (skuId, subscriptionId) => subscriptionId ? `/skus/${snowflake(skuId, "SKU ID")}/subscriptions/${snowflake(subscriptionId, "Subscription ID")}` : `/skus/${snowflake(skuId, "SKU ID")}/subscriptions`
 };
+function userOrMe(value) {
+  return value === "@me" ? value : snowflake(value, "User ID");
+}
 function integer(value, field) {
   if (!Number.isInteger(value) || value < 0)
     throw new TypeError(`${field} must be a non-negative integer.`);
@@ -657,7 +677,7 @@ class WebhookClient {
   #rest;
   constructor(options, restOptions) {
     if (options.url) {
-      const match = options.url.match(/discord(?:app)?.com\/api\/webhooks\/(\d+)\/([A-Za-z0-9_-]+)/);
+      const match = options.url.match(/^https:\/\/(?:(?:ptb|canary)\.)?discord(?:app)?\.com\/api(?:\/v\d+)?\/webhooks\/(\d{1,20})\/([A-Za-z0-9_-]+)\/?(?:[?#].*)?$/);
       if (!match)
         throw new Error("Invalid Discord webhook URL format.");
       this.id = match[1];
@@ -672,13 +692,20 @@ class WebhookClient {
   }
   async send(options) {
     const payload = typeof options === "string" ? { content: options } : options;
-    const { thread_id, ...body } = payload;
-    const query = thread_id ? `?thread_id=${thread_id}&wait=true` : `?wait=true`;
+    const { thread_id, files, ...body } = payload;
+    const params = new URLSearchParams({ wait: "true" });
+    if (thread_id)
+      params.set("thread_id", String(thread_id));
+    const query = `?${params}`;
     const formattedEmbeds = body.embeds?.map((e) => ("toJSON" in e) ? e.toJSON() : e);
-    return this.#rest.post(`${Routes.webhook(this.id, this.token)}${query}`, {
+    const formattedComponents = body.components?.map((c) => ("toJSON" in c) ? c.toJSON() : c);
+    const path = `${Routes.webhook(this.id, this.token)}${query}`;
+    const json = {
       ...body,
-      embeds: formattedEmbeds
-    });
+      embeds: formattedEmbeds,
+      components: formattedComponents
+    };
+    return files?.length ? this.#rest.postWithFiles(path, json, files) : this.#rest.post(path, json);
   }
   async editMessage(messageId, options) {
     const payload = typeof options === "string" ? { content: options } : options;
@@ -693,6 +720,22 @@ class WebhookClient {
 var LIBRARY_VERSION = package_default.version;
 var LIBRARY_URL = "https://github.com/Ekretos/lunibee";
 var USER_AGENT = `DiscordBot (${LIBRARY_URL}, ${LIBRARY_VERSION})`;
+function assertSafePath(path) {
+  const end = path.search(/[?#]/);
+  const pathname = end === -1 ? path : path.slice(0, end);
+  if (pathname.includes("\\"))
+    throw new TypeError("REST paths must not contain backslashes.");
+  for (const segment of pathname.split("/")) {
+    let decoded;
+    try {
+      decoded = decodeURIComponent(segment);
+    } catch {
+      throw new TypeError("REST path has malformed percent-encoding.");
+    }
+    if (decoded === "." || decoded === "..")
+      throw new TypeError("REST paths must not contain '.' or '..' segments.");
+  }
+}
 var REQUEST_DATA_KEYS = new Set([
   "body",
   "files",
@@ -753,7 +796,7 @@ class REST {
       timeout: options.timeout
     });
     const store = options.store ?? new MemoryRateLimitStore;
-    this.#concurrentBuckets = (options.concurrentBuckets ?? false) && typeof store.reserve === "function";
+    this.#concurrentBuckets = (options.concurrentBuckets ?? true) && typeof store.reserve === "function";
     this.#limiter = new RateLimiter(store, {
       concurrent: this.#concurrentBuckets
     });
@@ -777,6 +820,7 @@ class REST {
       throw new TypeError("REST method is required.");
     if (!path.startsWith("/"))
       throw new TypeError("REST paths must start with '/'.");
+    assertSafePath(path);
     const route = createRouteKey(method, path);
     const files = options.files;
     if (files && files.length > 0 && !(body instanceof FormData))
@@ -864,13 +908,19 @@ class REST {
   #headers(body, options) {
     const isFormData = typeof FormData !== "undefined" && body instanceof FormData;
     const headers = { ...options.headers };
+    const set = (name, value) => {
+      for (const key of Object.keys(headers))
+        if (key.toLowerCase() === name.toLowerCase())
+          delete headers[key];
+      headers[name] = value;
+    };
     if (options.auth !== false && this.#token)
-      headers["Authorization"] = `Bot ${this.#token}`;
-    headers["User-Agent"] = USER_AGENT;
+      set("Authorization", `Bot ${this.#token}`);
+    set("User-Agent", USER_AGENT);
     if (options.reason !== undefined)
-      headers["X-Audit-Log-Reason"] = encodeURIComponent(options.reason);
+      set("X-Audit-Log-Reason", encodeURIComponent(options.reason));
     if (!isFormData)
-      headers["Content-Type"] = "application/json";
+      set("Content-Type", "application/json");
     return headers;
   }
   #encodeBody(body) {
@@ -949,4 +999,4 @@ export {
   serializeQuery
 };
 
-//# debugId=0345D6D5C65D143C64756E2164756E21
+//# debugId=76878940534439C564756E2164756E21