@zhin.js/adapter-discord 1.1.27 → 1.1.28

package/plugin.js

@@ -1,7 +1,5 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
 import { definePlugin } from 'zhin.js';
-import { permissionHostToken } from '@zhin.js/permission';
-import { checkDiscordPlatformPermit } from "./lib/platform-permit.js";
 import { createDiscordConsoleRpc } from "./lib/console.js";
 export default definePlugin({
     name: 'discord',
@@ -10,12 +8,8 @@ export default definePlugin({
         displayName: 'Discord Gateway Adapter',
     },
     setup(context) {
-        const dispose = context.resources.has(permissionHostToken)
-            ? context.resources.use(permissionHostToken).registerPlatform('discord', checkDiscordPlatformPermit)
-            : undefined;
         return {
             consoleRpc: createDiscordConsoleRpc(() => context.config.get()),
-            ...(dispose ? { dispose } : {}),
         };
     },
 });

package/schema.json

@@ -71,34 +71,6 @@
       "default": "/discord/interactions",
       "description": "POST path on httpHostToken when connection is interactions."
     },
-    "master": {
-      "type": [
-        "string",
-        "number"
-      ],
-      "description": "框架 master（Discord user snowflake；AI/工具权限、endpoint 管理）。endpoints[i].master 可逐项覆盖",
-      "x-i18n": {
-        "en": {
-          "description": "Framework masters (Discord user snowflake; AI/tool permissions and endpoint management). endpoints[i].master can override this value."
-        }
-      }
-    },
-    "trusted": {
-      "type": "array",
-      "items": {
-        "type": [
-          "string",
-          "number"
-        ],
-        "description": "Trusted Discord user snowflake"
-      },
-      "description": "框架 trusted 用户列表（弱于 master）。endpoints[i].trusted 可逐项追加",
-      "x-i18n": {
-        "en": {
-          "description": "Framework trusted users, below master authority. endpoints[i].trusted can add users."
-        }
-      }
-    },
     "endpoints": {
       "type": "array",
       "minItems": 1,
@@ -107,34 +79,6 @@
         "type": "object",
         "additionalProperties": false,
         "properties": {
-          "master": {
-            "type": [
-              "string",
-              "number"
-            ],
-            "description": "本 endpoint 的框架 master（Discord user snowflake）；覆盖顶层 master",
-            "x-i18n": {
-              "en": {
-                "description": "Framework masters for this endpoint (Discord user snowflake), overriding the top-level master list."
-              }
-            }
-          },
-          "trusted": {
-            "type": "array",
-            "items": {
-              "type": [
-                "string",
-                "number"
-              ],
-              "description": "Trusted Discord user snowflake"
-            },
-            "description": "本 endpoint 的 trusted 列表",
-            "x-i18n": {
-              "en": {
-                "description": "Trusted users for this endpoint."
-              }
-            }
-          },
           "token": {
             "type": "string",
             "description": "Discord bot token"

package/src/endpoint.ts

@@ -28,8 +28,11 @@ import {
 } from 'zhin.js/adapter';
 import type { HttpHost, HttpRouteRegistration } from '@zhin.js/host-http';
 import {
+  type ConversationRef,
   type ConversationReference,
   type ConversationResolution,
+  type PlatformStanding,
+  type SelfStandingRequest,
 } from '@zhin.js/im-contract';
 import { formatCompact, getAdapterLogger } from '@zhin.js/logger';
 import type { CapabilityId } from 'zhin.js';
@@ -37,11 +40,11 @@ import {
   connectDiscordGatewayClient,
   discordClientOptions,
   DEFAULT_INTENTS,
-  resolveSenderRole,
   toMessageCreateOptions,
   type DiscordClientTransport,
 } from './gateway.js';
 import {
+  discordChannelOf,
   discordInboundConversation,
   formatButtonContent,
   formatButtonSegments,
@@ -57,6 +60,9 @@ import {
 } from './protocol.js';
 import { registerDiscordInteractionRoutes } from './webhook.js';
 import { receiveDiscordGuildMemberSideEvent } from './side-event-dispatch.js';
+import {
+  discordGuildPermissionNamesFromChannelBitfield, discordPermissionNames, discordSenderStanding, discordStandingFromPermissions,
+} from './sender-standing.js';
 
 const DISCORD_API = 'https://discord.com/api/v10';
 /** 出站 HTTP 调用统一 30s 超时。 */
@@ -202,11 +208,11 @@ export class DiscordGatewayEndpoint extends Client implements Endpoint {
 
   async #sendFramework({ conversation, payload, signal }: EndpointSendRequest): Promise<string> {
     const body = formatOutboundBody(payload);
-    const snowflake = await this.#sendBody({ channelId: conversation.id, body, signal });
+    const snowflake = await this.#sendBody({ channelId: discordChannelOf(conversation), body, signal });
     this.#logger.debug(formatCompact({
       op: 'discord_send',
       endpoint: this.#options.config.id,
-      target: conversation.id,
+      target: discordChannelOf(conversation),
       messageId: snowflake,
     }));
     return snowflake;
@@ -215,7 +221,7 @@ export class DiscordGatewayEndpoint extends Client implements Endpoint {
   async #recallMessage({ message, signal }: EndpointRecallRequest): Promise<void> {
     if (!message.id) return;
     const operation = createEndpointOperation({ signal });
-    const channel = await operation.prepare(() => this.#requireClient().channels.fetch(message.conversation.id));
+    const channel = await operation.prepare(() => this.#requireClient().channels.fetch(discordChannelOf(message.conversation)));
     if (!channel?.isTextBased() || !channel.messages) return;
     const msg = await operation.prepare(() => channel.messages.fetch(message.id));
     await operation.run(() => msg.delete());
@@ -226,6 +232,7 @@ export class DiscordGatewayEndpoint extends Client implements Endpoint {
     if (!this.#open) return;
     if (msg.authorBot) return;
     const conversation = discordInboundConversation(String(this.#options.id), msg);
+    const platform = discordSenderStanding(msg);
     void this[endpointSpec].events.emit('message.receive', {
       conversation,
       event: msg.event,
@@ -236,7 +243,7 @@ export class DiscordGatewayEndpoint extends Client implements Endpoint {
       sender: {
         id: msg.authorId,
         name: senderDisplayName(msg) || undefined,
-        ...(resolveSenderRole(msg) ? { roles: [resolveSenderRole(msg)!] } : {}),
+        ...(platform ? { platform } : {}),
       },
       endpointId: this.#options.config.id,
       ...(msg.mentionedBot ? { mentioned: true } : {}),
@@ -246,7 +253,7 @@ export class DiscordGatewayEndpoint extends Client implements Endpoint {
         userId: msg.authorId,
         guildId: msg.guildId,
         permissions: msg.permissionTokens,
-        role: resolveSenderRole(msg),
+        role: platform?.standing,
       }),
     }).catch((err) => {
       this.#logger.warn(formatCompact({
@@ -285,7 +292,7 @@ export class DiscordGatewayEndpoint extends Client implements Endpoint {
   }
 
   async #addReaction({ message, emoji, hint, signal }: EndpointReactionRequest): Promise<string | null> {
-    const channelId = hint?.channelId ?? message.conversation.id;
+    const channelId = hint?.channelId ?? discordChannelOf(message.conversation);
     if (!channelId || !message.id) return null;
     const operation = createEndpointOperation({ signal });
     const channel = await operation.prepare(() => this.#requireClient().channels.fetch(channelId));
@@ -406,6 +413,9 @@ export class DiscordRestClient {
   }
 }
 
+const APP_PERMISSIONS_TTL_MS = 10 * 60_000;
+const APP_PERMISSIONS_MAX = 1_000;
+
 export class DiscordInteractionsEndpoint extends DiscordRestClient implements Endpoint {
   readonly [endpointSpec]: EndpointSpecification;
   readonly #logger!: ReturnType<typeof getAdapterLogger>;
@@ -415,6 +425,8 @@ export class DiscordInteractionsEndpoint extends DiscordRestClient implements En
   #routeReleases: HttpRouteRegistration[] = [];
   #open = false;
   #started = false;
+  /** Latest interaction `app_permissions` per guild (guild-level names), for the Bot's own standing. */
+  readonly #appPermissions = new Map<string, { readonly names: readonly string[]; readonly at: number }>();
   readonly #control: EndpointControl = Object.freeze<EndpointControl>({
     recall: request => this.#recallMessage(request),
   });
@@ -431,6 +443,12 @@ export class DiscordInteractionsEndpoint extends DiscordRestClient implements En
     this[endpointSpec] = createEndpointSpecification(this, {
       start: () => this.#startFramework(), open: () => this.#openFramework(), close: () => this.#closeFramework(),
       stop: () => this.#stopFramework(), send: request => this.#sendFramework(request), name: options.config.id,
+      // Interactions mode has no gateway session to read the bot's guild member: its own standing
+      // comes from the latest interaction's `app_permissions` in that guild (ADR 0056 §1), reduced
+      // to guild-level names like senders; without a recent interaction it stays unknown.
+      management: Object.freeze<EndpointManagement>({
+        inspectSelfStanding: async ({ conversation }) => this.#selfStandingFromInteractions(conversation),
+      }),
       control: this.#control, content: this.#content,
       profile: createDiscordRestSelfProfile(this, id => this[endpointSpec].reportSelfUserId(id)),
     });
@@ -473,18 +491,40 @@ export class DiscordInteractionsEndpoint extends DiscordRestClient implements En
 
   async #sendFramework({ conversation, payload, signal }: EndpointSendRequest): Promise<string> {
     const body = formatOutboundBody(payload);
-    const data = await this.createMessage({ channelId: conversation.id, body, signal });
+    const data = await this.createMessage({ channelId: discordChannelOf(conversation), body, signal });
     return data.id ?? '';
   }
 
   async #recallMessage({ message, signal }: EndpointRecallRequest): Promise<void> {
     if (!message.id) return;
-    await this.deleteMessage({ channelId: message.conversation.id, messageId: message.id, signal });
+    await this.deleteMessage({ channelId: discordChannelOf(message.conversation), messageId: message.id, signal });
+  }
+
+  #selfStandingFromInteractions(conversation: Pick<ConversationRef, 'kind' | 'parent'>): PlatformStanding | undefined {
+    const guildId = conversation.kind === 'channel' && conversation.parent?.kind === 'channel' ? conversation.parent.id : undefined;
+    const entry = guildId ? this.#appPermissions.get(guildId) : undefined;
+    if (!entry || Date.now() - entry.at > APP_PERMISSIONS_TTL_MS) return undefined;
+    // The guild owner is not visible to an interaction; `administrator` still reads as `admin`.
+    return { standing: discordStandingFromPermissions(entry.names), ...(entry.names.length ? { permissions: entry.names } : {}) };
+  }
+
+  #recordAppPermissions(msg: DiscordInboundMessage): void {
+    const appPermissions = (msg.event as { app_permissions?: unknown } | undefined)?.app_permissions;
+    if (!msg.guildId || appPermissions === undefined) return;
+    this.#appPermissions.delete(msg.guildId);
+    this.#appPermissions.set(msg.guildId, { names: discordGuildPermissionNamesFromChannelBitfield(appPermissions), at: Date.now() });
+    while (this.#appPermissions.size > APP_PERMISSIONS_MAX) {
+      const oldest = this.#appPermissions.keys().next().value;
+      if (oldest === undefined) break;
+      this.#appPermissions.delete(oldest);
+    }
   }
 
   admit(msg: DiscordInboundMessage): void {
     if (!this.#open) return;
+    this.#recordAppPermissions(msg);
     const conversation = discordInboundConversation(String(this.#options.id), msg);
+    const platform = discordSenderStanding(msg);
     void this[endpointSpec].events.emit('message.receive', {
       conversation,
       event: msg.event,
@@ -495,7 +535,7 @@ export class DiscordInteractionsEndpoint extends DiscordRestClient implements En
       sender: {
         id: msg.authorId,
         name: senderDisplayName(msg) || undefined,
-        ...(resolveSenderRole(msg) ? { roles: [resolveSenderRole(msg)!] } : {}),
+        ...(platform ? { platform } : {}),
       },
       endpointId: this.#options.config.id,
       metadata: Object.freeze({
@@ -570,7 +610,7 @@ async function resolveDiscordContent(
   try {
     context.signal.throwIfAborted();
     const response = await fetch(
-      `${DISCORD_API}/channels/${reference.message.conversation.id}/messages/${reference.message.id}`,
+      `${DISCORD_API}/channels/${discordChannelOf(reference.message.conversation)}/messages/${reference.message.id}`,
       { headers: { Authorization: `Bot ${token}` }, signal: context.signal },
     );
     if (response.status === 404) return Object.freeze({ status: 'not_found', code: 'discord_message_not_found' });
@@ -613,6 +653,28 @@ export function createDiscordEndpointManagement(
   requireClient: () => DiscordClientTransport,
 ): EndpointManagement {
   return Object.freeze<EndpointManagement>({
+    /**
+     * ADR 0056 §1: the Bot's own guild member in the conversation's guild — guild owner → `owner`;
+     * `administrator` / `moderate_members` → `admin`; roles and **guild-level** permission names
+     * (`GuildMember.permissions`, as for senders) so `bot-permission:*` and `platform-permission:*`
+     * read the same scope. Channel overwrites are left to the platform at execution time.
+     */
+    async inspectSelfStanding({ conversation, signal }: SelfStandingRequest): Promise<PlatformStanding | undefined> {
+      if (conversation.kind === 'private') return undefined;
+      const operation = createEndpointOperation({ signal });
+      const client = requireClient();
+      const channel = await operation.run(() => client.channels.fetch(conversation.threadId ?? conversation.id));
+      if (!channel || !('guild' in channel) || !client.user) return undefined;
+      const guild = channel.guild;
+      const me = guild.members.me ?? await operation.run(() => guild.members.fetchMe());
+      const permissions = me.permissions;
+      const names = permissions ? discordPermissionNames(bit => permissions.has(bit)) : [];
+      const roles = [...me.roles.cache.values()]
+        .filter(role => role.id !== guild.id)
+        .map(role => (role.name ? { id: String(role.id), name: String(role.name) } : { id: String(role.id) }));
+      const standing = discordStandingFromPermissions(names, guild.ownerId === client.user.id);
+      return { standing, ...(roles.length ? { roles } : {}), ...(names.length ? { permissions: names } : {}) };
+    },
     async listGroups(request: EndpointManagementRequest = {}): Promise<readonly EndpointGroup[]> {
       return createEndpointOperation(request).run(() => {
         const groups: EndpointGroup[] = [];

package/src/gateway.ts

@@ -28,6 +28,7 @@ import {
   type DiscordOutboundBody,
   type ResolvedDiscordGatewayConfig,
 } from './protocol.js';
+import { discordPermissionNames, discordSenderStanding } from './sender-standing.js';
 
 const logger = getLogger('discord');
 
@@ -46,12 +47,15 @@ export function discordClientOptions(intents: readonly number[], gatewayFaultPro
   return { rest: { ...restOptions, retries: 0, rejectOnRateLimit: () => true }, intents: [...intents], partials: [Partials.Channel], ...(gatewayFaultProxyUrl ? { ws: { buildStrategy: manager => new DiscordFaultProxyStrategy(manager, gatewayFaultProxyUrl) } } : {}) };
 }
 
+/** Normalized standing word (`owner` / `admin` / `member`); `undefined` outside a guild. */
 export function resolveSenderRole(msg: DiscordInboundMessage): string | undefined {
-  if (msg.isGuildOwner) return 'owner';
-  const tokens = msg.permissionTokens ?? [];
-  if (tokens.includes('ADMINISTRATOR') || tokens.includes('MODERATE_MEMBERS')) return 'admin';
-  if (msg.guildId) return 'member';
-  return undefined;
+  return discordSenderStanding(msg)?.standing;
+}
+
+/** A discord.js thread channel's parent channel id (threads share their parent's conversation key, ADR 0056 §2). */
+function threadParentOf(channel: unknown): string | undefined {
+  const thread = channel as { isThread?: () => boolean; parentId?: string | null } | null | undefined;
+  return thread && typeof thread.isThread === 'function' && thread.isThread() && thread.parentId ? thread.parentId : undefined;
 }
 
 export function normalizeDiscordMessage(raw: unknown): DiscordInboundMessage | null {
@@ -60,6 +64,8 @@ export function normalizeDiscordMessage(raw: unknown): DiscordInboundMessage | n
   if (!msg.author || !msg.channel) return null;
 
   const permissionTokens: string[] = [];
+  let platformPermissions: string[] = [];
+  let authorRoles: { id: string; name?: string }[] = [];
   let isGuildOwner = false;
   const member = msg.member;
   const guild = msg.guild;
@@ -74,6 +80,13 @@ export function normalizeDiscordMessage(raw: unknown): DiscordInboundMessage | n
     for (const [bit, name] of checks) {
       if (member.permissions.has(bit)) permissionTokens.push(name);
     }
+    platformPermissions = discordPermissionNames(bit => member.permissions.has(bit));
+    const cache = (member.roles as { cache?: { values?: () => Iterable<{ id: string; name?: string }> } } | undefined)?.cache;
+    if (cache && typeof cache.values === 'function') {
+      authorRoles = [...cache.values()]
+        .filter((role) => role && role.id && role.id !== guild.id)
+        .map((role) => (role.name ? { id: String(role.id), name: String(role.name) } : { id: String(role.id) }));
+    }
     if (guild.ownerId === msg.author.id) {
       isGuildOwner = true;
       permissionTokens.push('guild_owner', 'ADMINISTRATOR');
@@ -87,6 +100,7 @@ export function normalizeDiscordMessage(raw: unknown): DiscordInboundMessage | n
     content: msg.content ?? '',
     channelId: msg.channel.id,
     channelKind: resolveChannelKind(msg.channel.type),
+    ...(threadParentOf(msg.channel) ? { threadParentId: threadParentOf(msg.channel)! } : {}),
     authorId: msg.author.id,
     authorName: member?.displayName || msg.author.displayName || msg.author.username,
     authorBot: msg.author.bot,
@@ -94,6 +108,8 @@ export function normalizeDiscordMessage(raw: unknown): DiscordInboundMessage | n
     guildId: guild?.id,
     isGuildOwner,
     permissionTokens,
+    ...(platformPermissions.length ? { platformPermissions } : {}),
+    ...(authorRoles.length ? { authorRoles } : {}),
     attachments: [...msg.attachments.values()].map((a) => ({
       id: a.id,
       name: a.name ?? undefined,
@@ -292,6 +308,7 @@ export async function connectDiscordGatewayClient(
           customId: interaction.customId,
           channelId,
           channelKind: interaction.channel ? resolveChannelKind(interaction.channel.type) : interaction.guildId ? 'channel' : 'private',
+          ...(threadParentOf(interaction.channel) ? { threadParentId: threadParentOf(interaction.channel)! } : {}),
           ...(interaction.guildId ? { guildId: interaction.guildId } : {}),
           userId: interaction.user.id,
           userName: interaction.user.username || interaction.user.displayName || interaction.user.id,

package/src/index.ts

@@ -24,12 +24,7 @@ export {
   type DiscordClientEventMap,
 } from './client.js';
 
-export {
-  checkDiscordPlatformPermit,
-  discordGroupPermitResolver,
-  normalizeDiscordSenderForPermit,
-  platformPermit,
-} from './platform-permit.js';
+export { platformPermit } from './platform-permit.js';
 
 export {
   DiscordGatewayEndpoint,

package/src/platform-permit.ts

@@ -1,57 +1,10 @@
 /**
- * Discord platform permit — Guild 权限位
+ * Discord platform permit helper（ADR 0056 §5）。
+ *
+ * 平台身份由适配器上报到 `sender.platform`，permit 由内置评估器（`@zhin.js/permission`）判断；
+ * 适配器不再导出自有的 permit 解析器或检查函数。
  */
-import type { PermissionSubject } from '@zhin.js/permission';
-
-const ADAPTER = 'discord';
 
 export function platformPermit(perm: string): string {
-  return `platform(${ADAPTER},${perm})`;
-}
-
-const FACTORY_PERM_MAP: Record<string, string> = {
-  scene_admin: 'moderate_members',
-  scene_owner: 'guild_owner',
-};
-
-export function discordGroupPermitResolver(logicalPerm: string): string {
-  return platformPermit(FACTORY_PERM_MAP[logicalPerm] ?? logicalPerm);
-}
-
-export function normalizeDiscordSenderForPermit(input: {
-  isOwner?: boolean;
-  permissions?: string[];
-}): { role?: string; permissions?: string[] } {
-  const permissions = [...(input.permissions ?? [])];
-  if (input.isOwner) {
-    permissions.push('guild_owner', 'ADMINISTRATOR');
-    return { role: 'owner', permissions };
-  }
-  if (permissions.includes('ADMINISTRATOR')) {
-    return { role: 'admin', permissions };
-  }
-  if (permissions.includes('MODERATE_MEMBERS') || permissions.includes('MANAGE_GUILD')) {
-    return { role: 'admin', permissions };
-  }
-  return { role: 'member', permissions };
+  return `platform-permission:${perm}`;
 }
-
-export function checkDiscordPlatformPermit(perm: string, subject: PermissionSubject): boolean {
-  const role = subject.sender?.role?.[0];
-  const permissions = subject.sender?.permissions ?? [];
-  const has = (t: string) => permissions.includes(t);
-
-  switch (perm) {
-    case 'guild_owner':
-      return role === 'owner' || has('guild_owner');
-    case 'moderate_members':
-      return role === 'owner' || role === 'admin' || has('ADMINISTRATOR') || has('MODERATE_MEMBERS');
-    case 'manage_roles':
-      return role === 'owner' || has('ADMINISTRATOR') || has('MANAGE_ROLES');
-    case 'manage_channels':
-      return role === 'owner' || has('ADMINISTRATOR') || has('MANAGE_CHANNELS');
-    default:
-      return false;
-  }
-}
-

package/src/protocol.ts

@@ -4,6 +4,7 @@ import { validateDiscordGatewayFaultProxy } from './gateway-fault-proxy.js';
 
 import { createPublicKey, verify as cryptoVerify } from 'node:crypto';
 import { isMediaRef, type ConversationRef } from '@zhin.js/im-contract';
+import { discordGuildPermissionNamesFromChannelBitfield } from './sender-standing.js';
 import type { Segment } from '@zhin.js/core/runtime';
 import { formatCompact, getLogger } from '@zhin.js/logger';
 
@@ -84,8 +85,14 @@ export interface DiscordInboundMessage {
   readonly authorBot?: boolean;
   readonly createdTimestamp: number;
   readonly guildId?: string;
+  /** The message was sent in a thread: its parent channel (the thread itself is `channelId`). */
+  readonly threadParentId?: string;
   readonly isGuildOwner?: boolean;
   readonly permissionTokens?: readonly string[];
+  /** ADR 0056 §1: guild permission flags as snake_case names (`ban_members`, …). */
+  readonly platformPermissions?: readonly string[];
+  /** ADR 0056 §1: the member's guild roles (`@everyone` excluded). */
+  readonly authorRoles?: readonly { readonly id: string; readonly name?: string }[];
   readonly attachments?: readonly DiscordInboundAttachment[];
   readonly embedTitles?: readonly string[];
   readonly stickerNames?: readonly string[];
@@ -102,6 +109,8 @@ export interface DiscordButtonInbound {
   readonly customId: string;
   readonly channelId: string;
   readonly channelKind: 'private' | 'group' | 'channel';
+  /** Pressed inside a thread: its parent channel. */
+  readonly threadParentId?: string;
   readonly userId: string;
   readonly userName: string;
   readonly sourceMessageId?: string;
@@ -195,6 +204,8 @@ export function resolveChannelKind(channelType: number | string | undefined): 'p
 /**
  * 入站归一化 → ConversationRef：DM → 'private'；GroupDM → 'group'；
  * guild 频道 → 'channel' + guild 容器进 parent（guild 是频道容器，kind 'channel'）。
+ * 线程（thread）：会话 id 是父频道、`threadId` 是线程频道（ConversationRef 的子话题约定），
+ * 所以父频道上的角色 / 功能配置在线程里同样生效（ADR 0056 §2）；出站用 {@link discordChannelOf}。
  * endpoint.adapter = owner PluginId（CapabilityId 以 \0 分隔）。
  */
 export function discordInboundConversation(
@@ -203,18 +214,26 @@ export function discordInboundConversation(
     readonly channelId: string;
     readonly channelKind: 'private' | 'group' | 'channel';
     readonly guildId?: string;
+    readonly threadParentId?: string;
   },
 ): ConversationRef {
+  const thread = msg.channelKind === 'channel' && msg.threadParentId && msg.threadParentId !== msg.channelId;
   return {
     endpoint: { id: endpointKey, adapter: endpointKey.split('\0')[0] ?? endpointKey },
     kind: msg.channelKind,
-    id: msg.channelId,
+    id: thread ? msg.threadParentId! : msg.channelId,
+    ...(thread ? { threadId: msg.channelId } : {}),
     ...(msg.guildId && msg.channelKind === 'channel'
       ? { parent: { kind: 'channel' as const, id: msg.guildId } }
       : {}),
   };
 }
 
+/** The Discord channel a conversation's messages live in: the thread when there is one. */
+export function discordChannelOf(conversation: Pick<ConversationRef, 'id' | 'threadId'>): string {
+  return conversation.threadId ?? conversation.id;
+}
+
 export function senderDisplayName(msg: DiscordInboundMessage): string {
   return msg.authorName || msg.authorId;
 }
@@ -401,6 +420,7 @@ export function formatOutboundBody(payload: unknown): DiscordOutboundBody {
         embeds.push({ title: String(data.title ?? ''), url: String(data.url ?? ''), description: String(data.description ?? data.content ?? ''), ...(data.image ? { image: { url: String(data.image) } } : {}) });
         break;
       case 'embed':
+      case 'discord:embed':
         embeds.push({ ...data });
         break;
       case 'keyboard': {
@@ -506,18 +526,38 @@ export function formatSlashCommandContent(interaction: Record<string, unknown>):
   return parts.join(' ');
 }
 
+/** Thread channel types (announcement / public / private thread) carry `parent_id`, the channel they belong to. */
+const THREAD_CHANNEL_TYPES = new Set([10, 11, 12]);
+
+/** Parent channel of a raw API channel object when it is a thread. */
+export function discordThreadParentOf(channel: unknown): string | undefined {
+  if (!channel || typeof channel !== 'object') return undefined;
+  const raw = channel as { type?: unknown; parent_id?: unknown };
+  return THREAD_CHANNEL_TYPES.has(Number(raw.type)) && typeof raw.parent_id === 'string' && raw.parent_id ? raw.parent_id : undefined;
+}
+
 export function interactionToInboundMessage(interaction: Record<string, unknown>): DiscordInboundMessage {
-  const user = (interaction.member as { user?: Record<string, unknown> } | undefined)?.user
+  const member = interaction.member as { user?: Record<string, unknown>; permissions?: unknown; roles?: unknown } | undefined;
+  const user = member?.user
     ?? (interaction.user as Record<string, unknown> | undefined);
+  const guildId = interaction.guild_id != null ? String(interaction.guild_id) : undefined;
+  // ADR 0056 §1: guild-level names only (the interaction bitfield includes channel overwrites).
+  const platformPermissions = guildId ? discordGuildPermissionNamesFromChannelBitfield(member?.permissions) : [];
+  const authorRoles = guildId && Array.isArray(member?.roles)
+    ? member.roles.map(String).filter((id) => id && id !== guildId).map((id) => ({ id }))
+    : [];
   return {
     event: interaction,
     id: String(interaction.id),
     content: formatSlashCommandContent(interaction),
     channelId: String(interaction.channel_id ?? ''),
     channelKind: interaction.guild_id ? 'channel' : 'private',
+    ...(discordThreadParentOf(interaction.channel) ? { threadParentId: discordThreadParentOf(interaction.channel)! } : {}),
     authorId: String(user?.id ?? ''),
     authorName: String(user?.username ?? user?.id ?? ''),
     createdTimestamp: Date.now(),
-    guildId: interaction.guild_id != null ? String(interaction.guild_id) : undefined,
+    guildId,
+    ...(platformPermissions.length ? { platformPermissions } : {}),
+    ...(authorRoles.length ? { authorRoles } : {}),
   };
 }

package/src/sender-standing.ts

@@ -0,0 +1,91 @@
+/**
+ * ADR 0056 §1: Discord guild member → normalized `sender.platform`.
+ *
+ * - `standing`: guild owner → `owner`; `Administrator` / `ModerateMembers` → `admin`; other members →
+ *   `member`. Direct messages report nothing.
+ * - `roles`: the member's guild roles (`@everyone` excluded), with names when the event carries them.
+ * - `permissions`: the member's **guild-level** permission flags as snake_case names (`ban_members`,
+ *   `manage_roles`, …). Gateway mode reads `GuildMember.permissions` (server-wide, no channel overwrites)
+ *   for senders and the Bot alike. Interactions only carry channel-level bitfields (overwrites applied),
+ *   so they report just the flags that cannot be overwritten per channel (identical at both levels) —
+ *   all flags when the member is an administrator.
+ */
+import { PermissionFlagsBits } from 'discord.js';
+import type { PlatformStanding } from '@zhin.js/im-contract';
+import type { DiscordInboundMessage } from './protocol.js';
+
+const FLAG_ENTRIES = Object.entries(PermissionFlagsBits) as [string, bigint][];
+
+/** `ManageRoles` → `manage_roles`, `SendTTSMessages` → `send_tts_messages`. */
+export function discordPermissionName(flag: string): string {
+  return flag.replace(/([A-Z]+)([A-Z][a-z])/gu, '$1_$2').replace(/([a-z0-9])([A-Z])/gu, '$1_$2').toLowerCase();
+}
+
+/** All permission flag names the predicate grants. */
+export function discordPermissionNames(has: (bit: bigint) => boolean): string[] {
+  const names: string[] = [];
+  for (const [flag, bit] of FLAG_ENTRIES) {
+    try {
+      if (has(bit)) names.push(discordPermissionName(flag));
+    } catch {
+      // A partial permission view cannot answer this bit; leave it out.
+    }
+  }
+  return names;
+}
+
+/** Permission names from an interaction's decimal bitfield string (`member.permissions`). */
+export function discordPermissionNamesFromBitfield(bitfield: unknown): string[] {
+  const value = parseBitfield(bitfield);
+  return value === undefined ? [] : discordPermissionNames(bit => (value & bit) === bit);
+}
+
+function parseBitfield(bitfield: unknown): bigint | undefined {
+  if (typeof bitfield !== 'string' && typeof bitfield !== 'number' && typeof bitfield !== 'bigint') return undefined;
+  try { return BigInt(bitfield); } catch { return undefined; }
+}
+
+/** Flags Discord does not allow in channel overwrites: a channel-level bitfield shows their guild value. */
+const GUILD_ONLY_FLAGS: readonly bigint[] = [
+  PermissionFlagsBits.Administrator, PermissionFlagsBits.KickMembers, PermissionFlagsBits.BanMembers,
+  PermissionFlagsBits.ManageGuild, PermissionFlagsBits.ViewAuditLog, PermissionFlagsBits.ViewGuildInsights,
+  PermissionFlagsBits.ChangeNickname, PermissionFlagsBits.ManageNicknames, PermissionFlagsBits.ManageGuildExpressions,
+  PermissionFlagsBits.ModerateMembers, PermissionFlagsBits.ViewCreatorMonetizationAnalytics,
+  PermissionFlagsBits.CreateGuildExpressions,
+];
+
+/**
+ * Guild-level permission names from a channel-level bitfield (interaction `member.permissions` /
+ * `app_permissions`): an administrator holds every flag server-wide; otherwise only the flags that
+ * channel overwrites cannot change are reported, so a channel overwrite (e.g. "Manage Permissions" in
+ * one channel) never reads as a server-wide `manage_roles`.
+ */
+export function discordGuildPermissionNamesFromChannelBitfield(bitfield: unknown): string[] {
+  const value = parseBitfield(bitfield);
+  if (value === undefined) return [];
+  if ((value & PermissionFlagsBits.Administrator) === PermissionFlagsBits.Administrator) return discordPermissionNames(() => true);
+  return discordPermissionNames(bit => GUILD_ONLY_FLAGS.includes(bit) && (value & bit) === bit);
+}
+
+/** Normalized standing from guild-level permission names (the guild owner is reported separately). */
+export function discordStandingFromPermissions(permissions: readonly string[], isOwner = false): PlatformStanding['standing'] {
+  return isOwner ? 'owner'
+    : permissions.includes('administrator') || permissions.includes('moderate_members') ? 'admin' : 'member';
+}
+
+export function discordSenderStanding(msg: DiscordInboundMessage): PlatformStanding | undefined {
+  if (!msg.guildId) return undefined;
+  const permissions = msg.platformPermissions ?? [];
+  const legacy = msg.permissionTokens ?? [];
+  const standing = msg.isGuildOwner
+    ? 'owner'
+    : permissions.includes('administrator') || permissions.includes('moderate_members')
+      || legacy.includes('ADMINISTRATOR') || legacy.includes('MODERATE_MEMBERS')
+      ? 'admin'
+      : 'member';
+  return {
+    standing,
+    ...(msg.authorRoles?.length ? { roles: msg.authorRoles } : {}),
+    ...(permissions.length ? { permissions } : {}),
+  };
+}