@zhin.js/adapter-kook 1.1.26 → 1.1.27

package/agents/kook/skills/kook/tools/create_role/index.js

@@ -1,21 +1,20 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
 import { messages as t } from "../../../../messages.js";
+import { currentGuild } from "../../../../conversation.js";
 import { defineAgentTool } from '@zhin.js/tool';
 import { z } from 'zod';
-import { platformPermission } from '@zhin.js/permission';
 export default defineAgentTool({
-    description: '在 KOOK 服务器中创建新角色',
+    description: '在当前 KOOK 服务器中创建新角色',
     inputSchema: z.object({
-        guild_id: z.string().describe('服务器 ID'),
         name: z.string().describe('角色名称'),
     }),
     adapter: 'kook',
     scopes: ["channel"],
     tags: ['kook'],
-    permissions: [platformPermission('kook', 'guild_owner')],
-    async execute({ guild_id, name }, context) {
+    permissions: ['platform:owner', 'bot-permission:manage_roles'],
+    async execute({ name }, context) {
         const client = context.$client;
-        const role = await client.pickGuild(guild_id).createRole(name);
+        const role = await client.pickGuild(currentGuild(context)).createRole(name);
         return {
             success: true,
             message: t(context.locale, 'roleCreated', { p0: name }),

package/agents/kook/skills/kook/tools/create_role/index.ts

@@ -1,21 +1,20 @@
 import { messages as t } from "../../../../messages.js";
+import { currentGuild } from "../../../../conversation.js";
 import { defineAgentTool } from '@zhin.js/tool';
 import { z } from 'zod';
-import { platformPermission } from '@zhin.js/permission';
 
-export default defineAgentTool<{ guild_id: string; name: string }>({
-  description: '在 KOOK 服务器中创建新角色',
+export default defineAgentTool<{ name: string }>({
+  description: '在当前 KOOK 服务器中创建新角色',
   inputSchema: z.object({
-    guild_id: z.string().describe('服务器 ID'),
     name: z.string().describe('角色名称'),
   }),
   adapter: 'kook',
   scopes: ["channel"],
   tags: ['kook'],
-  permissions: [platformPermission('kook', 'guild_owner')],
-  async execute({ guild_id, name  }: { guild_id: string; name: string }, context) {
+  permissions: ['platform:owner', 'bot-permission:manage_roles'],
+  async execute({ name }, context) {
     const client = context.$client;
-    const role = await client.pickGuild(guild_id).createRole(name);
+    const role = await client.pickGuild(currentGuild(context)).createRole(name);
     return {
       success: true,
       message: t(context.locale, 'roleCreated', { p0: name }),

package/agents/kook/skills/kook/tools/delete_role/index.js

@@ -1,21 +1,20 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
 import { messages as t } from "../../../../messages.js";
+import { currentGuild } from "../../../../conversation.js";
 import { defineAgentTool } from '@zhin.js/tool';
 import { z } from 'zod';
-import { platformPermission } from '@zhin.js/permission';
 export default defineAgentTool({
-    description: '删除 KOOK 服务器中的角色',
+    description: '删除当前 KOOK 服务器中的角色',
     inputSchema: z.object({
-        guild_id: z.string().describe('服务器 ID'),
         role_id: z.string().describe('角色 ID'),
     }),
     adapter: 'kook',
     scopes: ["channel"],
     tags: ['kook'],
-    permissions: [platformPermission('kook', 'guild_owner')],
-    async execute({ guild_id, role_id }, context) {
+    permissions: ['platform:owner', 'bot-permission:manage_roles'],
+    async execute({ role_id }, context) {
         const client = context.$client;
-        const success = await client.pickGuild(guild_id).deleteRole(role_id);
+        const success = await client.pickGuild(currentGuild(context)).deleteRole(role_id);
         return { success, message: success ? t(context.locale, 'roleDeleted', { p0: role_id }) : t(context.locale, 'roleDeleteFailed') };
     },
 });

package/agents/kook/skills/kook/tools/delete_role/index.ts

@@ -1,21 +1,20 @@
 import { messages as t } from "../../../../messages.js";
+import { currentGuild } from "../../../../conversation.js";
 import { defineAgentTool } from '@zhin.js/tool';
 import { z } from 'zod';
-import { platformPermission } from '@zhin.js/permission';
 
-export default defineAgentTool<{ guild_id: string; role_id: string }>({
-  description: '删除 KOOK 服务器中的角色',
+export default defineAgentTool<{ role_id: string }>({
+  description: '删除当前 KOOK 服务器中的角色',
   inputSchema: z.object({
-    guild_id: z.string().describe('服务器 ID'),
     role_id: z.string().describe('角色 ID'),
   }),
   adapter: 'kook',
   scopes: ["channel"],
   tags: ['kook'],
-  permissions: [platformPermission('kook', 'guild_owner')],
-  async execute({ guild_id, role_id  }: { guild_id: string; role_id: string }, context) {
+  permissions: ['platform:owner', 'bot-permission:manage_roles'],
+  async execute({ role_id }, context) {
     const client = context.$client;
-    const success = await client.pickGuild(guild_id).deleteRole(role_id);
+    const success = await client.pickGuild(currentGuild(context)).deleteRole(role_id);
     return { success, message: success ? t(context.locale, 'roleDeleted', { p0: role_id }) : t(context.locale, 'roleDeleteFailed') };
   },
 });

package/agents/kook/skills/kook/tools/grant_role/index.js

@@ -1,22 +1,24 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
 import { messages as t } from "../../../../messages.js";
+import { currentGuild, requireRoleBelowRequester } from "../../../../conversation.js";
 import { defineAgentTool } from '@zhin.js/tool';
 import { z } from 'zod';
-import { platformPermission } from '@zhin.js/permission';
 export default defineAgentTool({
-    description: '给用户授予 KOOK 服务器角色',
+    description: '在当前 KOOK 服务器给用户授予角色（只能是低于你最高角色的角色）',
     inputSchema: z.object({
-        guild_id: z.string().describe('服务器 ID'),
         user_id: z.string().describe('用户 ID'),
         role_id: z.string().describe('角色 ID'),
     }),
     adapter: 'kook',
     scopes: ["channel"],
     tags: ['kook'],
-    permissions: [platformPermission('kook', 'manage_roles')],
-    async execute({ guild_id, user_id, role_id }, context) {
-        const client = context.$client;
-        const success = await client.pickGuildMember(guild_id, user_id).grant(role_id);
+    permissions: ['platform-permission:manage_roles', 'bot-permission:manage_roles'],
+    async execute({ user_id, role_id }, context) {
+        const guildId = currentGuild(context);
+        const denied = await requireRoleBelowRequester(context, guildId, role_id);
+        if (denied)
+            return { success: false, message: denied };
+        const success = await context.$client.pickGuildMember(guildId, user_id).grant(role_id);
         return { success, message: success ? t(context.locale, 'roleGranted', { p0: user_id, p1: role_id }) : t(context.locale, 'roleGrantFailed') };
     },
 });

package/agents/kook/skills/kook/tools/grant_role/index.ts

@@ -1,22 +1,23 @@
 import { messages as t } from "../../../../messages.js";
+import { currentGuild, requireRoleBelowRequester } from "../../../../conversation.js";
 import { defineAgentTool } from '@zhin.js/tool';
 import { z } from 'zod';
-import { platformPermission } from '@zhin.js/permission';
 
-export default defineAgentTool<{ guild_id: string; user_id: string; role_id: string }>({
-  description: '给用户授予 KOOK 服务器角色',
+export default defineAgentTool<{ user_id: string; role_id: string }>({
+  description: '在当前 KOOK 服务器给用户授予角色（只能是低于你最高角色的角色）',
   inputSchema: z.object({
-    guild_id: z.string().describe('服务器 ID'),
     user_id: z.string().describe('用户 ID'),
     role_id: z.string().describe('角色 ID'),
   }),
   adapter: 'kook',
   scopes: ["channel"],
   tags: ['kook'],
-  permissions: [platformPermission('kook', 'manage_roles')],
-  async execute({ guild_id, user_id, role_id  }: { guild_id: string; user_id: string; role_id: string }, context) {
-    const client = context.$client;
-    const success = await client.pickGuildMember(guild_id, user_id).grant(role_id);
+  permissions: ['platform-permission:manage_roles', 'bot-permission:manage_roles'],
+  async execute({ user_id, role_id }, context) {
+    const guildId = currentGuild(context);
+    const denied = await requireRoleBelowRequester(context, guildId, role_id);
+    if (denied) return { success: false, message: denied };
+    const success = await context.$client.pickGuildMember(guildId, user_id).grant(role_id);
     return { success, message: success ? t(context.locale, 'roleGranted', { p0: user_id, p1: role_id }) : t(context.locale, 'roleGrantFailed') };
   },
 });

package/agents/kook/skills/kook/tools/list_roles/index.js

@@ -1,17 +1,15 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
+import { currentGuild } from "../../../../conversation.js";
 import { defineAgentTool } from '@zhin.js/tool';
 import { z } from 'zod';
 export default defineAgentTool({
-    description: '获取 KOOK 服务器的角色列表',
-    inputSchema: z.object({
-        guild_id: z.string().describe('服务器 ID'),
-    }),
+    description: '获取当前 KOOK 服务器的角色列表（position 越小优先级越高）',
+    inputSchema: z.object({}),
     adapter: 'kook',
     scopes: ["channel"],
     tags: ['kook'],
-    async execute({ guild_id }, context) {
-        const client = context.$client;
-        const roles = await client.pickGuild(guild_id).getRoleList();
+    async execute(_args, context) {
+        const roles = await context.$client.pickGuild(currentGuild(context)).getRoleList();
         return {
             roles: roles.map((r) => ({
                 id: String(r.role_id),

package/agents/kook/skills/kook/tools/list_roles/index.ts

@@ -1,17 +1,15 @@
+import { currentGuild } from "../../../../conversation.js";
 import { defineAgentTool } from '@zhin.js/tool';
 import { z } from 'zod';
 
-export default defineAgentTool<{ guild_id: string }>({
-  description: '获取 KOOK 服务器的角色列表',
-  inputSchema: z.object({
-    guild_id: z.string().describe('服务器 ID'),
-  }),
+export default defineAgentTool<Record<string, never>>({
+  description: '获取当前 KOOK 服务器的角色列表（position 越小优先级越高）',
+  inputSchema: z.object({}),
   adapter: 'kook',
   scopes: ["channel"],
   tags: ['kook'],
-  async execute({ guild_id  }: { guild_id: string }, context) {
-    const client = context.$client;
-    const roles = await client.pickGuild(guild_id).getRoleList();
+  async execute(_args, context) {
+    const roles = await context.$client.pickGuild(currentGuild(context)).getRoleList();
     return {
       roles: roles.map((r) => ({
         id: String(r.role_id),

package/agents/kook/skills/kook/tools/revoke_role/index.js

@@ -1,22 +1,24 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
 import { messages as t } from "../../../../messages.js";
+import { currentGuild, requireRoleBelowRequester } from "../../../../conversation.js";
 import { defineAgentTool } from '@zhin.js/tool';
 import { z } from 'zod';
-import { platformPermission } from '@zhin.js/permission';
 export default defineAgentTool({
-    description: '撤销用户的 KOOK 服务器角色',
+    description: '撤销当前 KOOK 服务器中用户的角色（只能是低于你最高角色的角色）',
     inputSchema: z.object({
-        guild_id: z.string().describe('服务器 ID'),
         user_id: z.string().describe('用户 ID'),
         role_id: z.string().describe('角色 ID'),
     }),
     adapter: 'kook',
     scopes: ["channel"],
     tags: ['kook'],
-    permissions: [platformPermission('kook', 'manage_roles')],
-    async execute({ guild_id, user_id, role_id }, context) {
-        const client = context.$client;
-        const success = await client.pickGuildMember(guild_id, user_id).revoke(role_id);
+    permissions: ['platform-permission:manage_roles', 'bot-permission:manage_roles'],
+    async execute({ user_id, role_id }, context) {
+        const guildId = currentGuild(context);
+        const denied = await requireRoleBelowRequester(context, guildId, role_id);
+        if (denied)
+            return { success: false, message: denied };
+        const success = await context.$client.pickGuildMember(guildId, user_id).revoke(role_id);
         return { success, message: success ? t(context.locale, 'roleRevoked', { p0: user_id, p1: role_id }) : t(context.locale, 'roleRevokeFailed') };
     },
 });

package/agents/kook/skills/kook/tools/revoke_role/index.ts

@@ -1,22 +1,23 @@
 import { messages as t } from "../../../../messages.js";
+import { currentGuild, requireRoleBelowRequester } from "../../../../conversation.js";
 import { defineAgentTool } from '@zhin.js/tool';
 import { z } from 'zod';
-import { platformPermission } from '@zhin.js/permission';
 
-export default defineAgentTool<{ guild_id: string; user_id: string; role_id: string }>({
-  description: '撤销用户的 KOOK 服务器角色',
+export default defineAgentTool<{ user_id: string; role_id: string }>({
+  description: '撤销当前 KOOK 服务器中用户的角色（只能是低于你最高角色的角色）',
   inputSchema: z.object({
-    guild_id: z.string().describe('服务器 ID'),
     user_id: z.string().describe('用户 ID'),
     role_id: z.string().describe('角色 ID'),
   }),
   adapter: 'kook',
   scopes: ["channel"],
   tags: ['kook'],
-  permissions: [platformPermission('kook', 'manage_roles')],
-  async execute({ guild_id, user_id, role_id  }: { guild_id: string; user_id: string; role_id: string }, context) {
-    const client = context.$client;
-    const success = await client.pickGuildMember(guild_id, user_id).revoke(role_id);
+  permissions: ['platform-permission:manage_roles', 'bot-permission:manage_roles'],
+  async execute({ user_id, role_id }, context) {
+    const guildId = currentGuild(context);
+    const denied = await requireRoleBelowRequester(context, guildId, role_id);
+    if (denied) return { success: false, message: denied };
+    const success = await context.$client.pickGuildMember(guildId, user_id).revoke(role_id);
     return { success, message: success ? t(context.locale, 'roleRevoked', { p0: user_id, p1: role_id }) : t(context.locale, 'roleRevokeFailed') };
   },
 });

package/lib/endpoint.d.ts

@@ -7,6 +7,7 @@ import type { HttpHost } from '@zhin.js/host-http';
 import type { CapabilityId } from 'zhin.js';
 import { type KookInboundMessage, type KookWebhookEventData, type ResolvedKookWebhookConfig, type ResolvedKookWebsocketConfig } from './protocol.js';
 import { RuntimeKookClient, type KookClientTransport } from './ws.js';
+import { KookSenderRoleResolver } from './sender-roles.js';
 export interface KookEndpointOptions {
     readonly id: CapabilityId;
     readonly config: ResolvedKookWebsocketConfig;
@@ -45,4 +46,4 @@ export declare class KookWebhookEndpoint extends RuntimeKookClient implements En
  * 数据走 kook-client 的 HTTP API 封装：/api/v3/guild/list、
  * /api/v3/channel/list、/api/v3/guild/user-list（SDK 内部已做分页聚合）。
  */
-export declare function createKookEndpointManagement(requireClient: () => KookClientTransport): EndpointManagement;
+export declare function createKookEndpointManagement(requireClient: () => KookClientTransport, roles?: KookSenderRoleResolver): EndpointManagement;

package/lib/endpoint.js

@@ -11,8 +11,8 @@ import { recallKookMessage, sendKookOutbound } from './outbound.js';
 import { KookSenderRoleResolver } from './sender-roles.js';
 import { receiveKookSideEvent } from './side-event-dispatch.js';
 import { createKookSelfProfile } from './self-profile.js';
-/** 入站 message.receive 载荷：规范角色 owner/admin 进 roles，原始角色 id 进 permissions。 */
-function kookInboundPayload(endpointId, conversation, msg, projection, selfId) {
+/** 入站 message.receive 载荷：发送者平台身份进 `sender.platform`（ADR 0056 §1）。 */
+function kookInboundPayload(endpointId, conversation, msg, platform, selfId) {
     return {
         conversation,
         event: msg.event,
@@ -22,8 +22,7 @@ function kookInboundPayload(endpointId, conversation, msg, projection, selfId) {
         sender: {
             id: msg.authorId,
             name: senderDisplayName(msg) || undefined,
-            ...(projection.role ? { roles: [projection.role] } : {}),
-            ...(projection.permissions.length ? { permissions: [...projection.permissions] } : {}),
+            ...(platform ? { platform } : {}),
         },
         endpointId,
         ...(isKookBotMentioned(msg, selfId) ? { mentioned: true } : {}),
@@ -32,7 +31,6 @@ function kookInboundPayload(endpointId, conversation, msg, projection, selfId) {
             userId: msg.authorId,
             guildId: msg.guildId,
             authorRoleIds: msg.authorRoles,
-            ...(projection.role ? { senderRole: projection.role } : {}),
         }),
     };
 }
@@ -45,7 +43,7 @@ export class KookWebsocketEndpoint extends RuntimeKookClient {
     #open = false;
     #executionSignal;
     #started = false;
-    #management = createKookEndpointManagement(() => this.#requireClient());
+    #management = createKookEndpointManagement(() => this.#requireClient(), this.#roles);
     #control = Object.freeze({
         recall: request => recallKookMessage(this.#requireClient(), request),
     });
@@ -122,9 +120,9 @@ export class KookWebsocketEndpoint extends RuntimeKookClient {
                 return;
             const conversation = kookInboundConversation(String(this.#options.id), msg);
             const selfId = this.self_id != null ? String(this.self_id) : undefined;
-            return this.#roles.resolve(msg).then((projection) => {
+            return this.#roles.resolve(msg).then((platform) => {
                 this.#executionSignal?.throwIfAborted();
-                return this[endpointSpec].events.emit('message.receive', kookInboundPayload(this.#options.config.id, conversation, msg, projection, selfId));
+                return this[endpointSpec].events.emit('message.receive', kookInboundPayload(this.#options.config.id, conversation, msg, platform, selfId));
             }).catch((err) => {
                 this.#logger.warn(formatCompact({
                     op: 'kook_gateway_receive_failed',
@@ -196,7 +194,7 @@ export class KookWebhookEndpoint extends RuntimeKookClient {
     #open = false;
     #executionSignal;
     #started = false;
-    #management = createKookEndpointManagement(() => this.#requireClient());
+    #management = createKookEndpointManagement(() => this.#requireClient(), this.#roles);
     #control = Object.freeze({
         recall: request => recallKookMessage(this.#requireClient(), request),
     });
@@ -306,9 +304,9 @@ export class KookWebhookEndpoint extends RuntimeKookClient {
                 return;
             const conversation = kookInboundConversation(String(this.#options.id), msg);
             const selfId = this.self_id != null ? String(this.self_id) : undefined;
-            return this.#roles.resolve(msg).then((projection) => {
+            return this.#roles.resolve(msg).then((platform) => {
                 this.#executionSignal?.throwIfAborted();
-                return this[endpointSpec].events.emit('message.receive', kookInboundPayload(this.#options.config.id, conversation, msg, projection, selfId));
+                return this[endpointSpec].events.emit('message.receive', kookInboundPayload(this.#options.config.id, conversation, msg, platform, selfId));
             }).catch((err) => {
                 this.#logger.warn(formatCompact({
                     op: 'kook_gateway_receive_failed',
@@ -364,8 +362,25 @@ function isKookTextChannelType(type) {
  * 数据走 kook-client 的 HTTP API 封装：/api/v3/guild/list、
  * /api/v3/channel/list、/api/v3/guild/user-list（SDK 内部已做分页聚合）。
  */
-export function createKookEndpointManagement(requireClient) {
+export function createKookEndpointManagement(requireClient, roles = new KookSenderRoleResolver(requireClient)) {
     return Object.freeze({
+        /**
+         * ADR 0056 §1: the Bot's own standing in the channel's guild (`/v3/user/view` self → its role
+         * ids, then the same guild owner / role-permission resolution as senders).
+         */
+        async inspectSelfStanding({ conversation, signal }) {
+            const guildId = conversation.kind === 'channel' ? conversation.parent?.id : undefined;
+            if (!guildId)
+                return undefined;
+            const operation = createEndpointOperation({ signal });
+            const client = requireClient();
+            const selfId = client.self_id != null ? String(client.self_id) : undefined;
+            if (!selfId)
+                return undefined;
+            const { data } = await operation.run(() => client.request.get('/v3/user/view', { params: { user_id: selfId, guild_id: guildId } }));
+            const held = Array.isArray(data?.roles) ? data.roles.map(Number).filter(Number.isFinite) : [];
+            return roles.resolve({ guildId, authorId: selfId, authorRoles: held });
+        },
         async listGroups(request = {}) {
             const operation = createEndpointOperation(request);
             const guilds = await operation.run(() => requireClient().getGuildList());

package/lib/index.d.ts

@@ -4,4 +4,4 @@ export { registerKookWebhookRoutes, handleKookWebhookRequest, type KookWebhookHa
 export { kookWebsocketClientOptions, kookWebhookClientOptions, normalizeKookMessage, type KookClientTransport, } from './ws.js';
 export { type KookClientEventMap } from './client.js';
 export { KookAdapter } from './adapter.js';
-export { checkKookPlatformPermit, kookGroupPermitResolver, normalizeKookSenderForPermit, platformPermit, type KookSenderInfo, } from './platform-permit.js';
+export { platformPermit } from './platform-permit.js';

package/lib/index.js

@@ -3,4 +3,4 @@ export { KookWebhookEndpoint, KookWebsocketEndpoint, } from './endpoint.js';
 export { registerKookWebhookRoutes, handleKookWebhookRequest, } from './webhook.js';
 export { kookWebsocketClientOptions, kookWebhookClientOptions, normalizeKookMessage, } from './ws.js';
 export { KookAdapter } from './adapter.js';
-export { checkKookPlatformPermit, kookGroupPermitResolver, normalizeKookSenderForPermit, platformPermit, } from './platform-permit.js';
+export { platformPermit } from './platform-permit.js';

package/lib/platform-permit.d.ts

@@ -1,22 +1,7 @@
 /**
- * KOOK platform permit — guild / channel 差异化门禁
+ * KOOK platform permit helper（ADR 0056 §5）。
+ *
+ * 平台身份由适配器上报到 `sender.platform`（见 `sender-roles.ts`），permit 由内置评估器
+ * （`@zhin.js/permission`）判断；适配器不再导出自有的 permit 解析器或检查函数。
  */
-import type { PermissionSubject } from '@zhin.js/permission';
-import { KookPermission } from './protocol.js';
 export declare function platformPermit(perm: string): string;
-export declare function kookGroupPermitResolver(logicalPerm: string): string;
-export interface KookSenderInfo {
-    id: string;
-    name: string;
-    permission?: KookPermission;
-    roles?: number[];
-    isGuildOwner?: boolean;
-    isAdmin?: boolean;
-    role?: string;
-    permissions?: string[];
-}
-export declare function normalizeKookSenderForPermit(info: KookSenderInfo, isChannel: boolean): {
-    role?: string;
-    permissions?: string[];
-};
-export declare function checkKookPlatformPermit(perm: string, subject: PermissionSubject): boolean;

package/lib/platform-permit.js

@@ -1,48 +1,9 @@
-import { KookPermission } from './protocol.js';
-const ADAPTER = 'kook';
+/**
+ * KOOK platform permit helper（ADR 0056 §5）。
+ *
+ * 平台身份由适配器上报到 `sender.platform`（见 `sender-roles.ts`），permit 由内置评估器
+ * （`@zhin.js/permission`）判断；适配器不再导出自有的 permit 解析器或检查函数。
+ */
 export function platformPermit(perm) {
-    return `platform(${ADAPTER},${perm})`;
-}
-const FACTORY_PERM_MAP = {
-    scene_admin: 'guild_admin',
-    scene_owner: 'guild_owner',
-};
-export function kookGroupPermitResolver(logicalPerm) {
-    return platformPermit(FACTORY_PERM_MAP[logicalPerm] ?? logicalPerm);
-}
-export function normalizeKookSenderForPermit(info, isChannel) {
-    const permissions = [];
-    if (info.roles?.length) {
-        permissions.push(...info.roles.map((r) => `role:${r}`));
-    }
-    if (info.isGuildOwner || info.permission === KookPermission.Owner) {
-        permissions.push('guild_owner', 'guild_admin');
-        return { role: 'owner', permissions };
-    }
-    if (info.permission === KookPermission.ChannelAdmin && isChannel) {
-        permissions.push('channel_admin', 'guild_admin');
-        return { role: 'channel_admin', permissions };
-    }
-    if (info.isAdmin || info.permission === KookPermission.Admin) {
-        permissions.push('guild_admin');
-        return { role: 'admin', permissions };
-    }
-    return { role: 'member', permissions };
-}
-export function checkKookPlatformPermit(perm, subject) {
-    const role = subject.sender?.role?.[0];
-    const permissions = subject.sender?.permissions ?? [];
-    const has = (t) => permissions.includes(t);
-    switch (perm) {
-        case 'guild_owner':
-            return role === 'owner' || has('guild_owner');
-        case 'guild_admin':
-            return role === 'owner' || role === 'admin' || role === 'channel_admin' || has('guild_admin') || has('channel_admin');
-        case 'channel_admin':
-            return role === 'owner' || role === 'admin' || role === 'channel_admin' || has('channel_admin') || has('guild_admin');
-        case 'manage_roles':
-            return role === 'owner' || role === 'admin' || has('guild_owner') || has('guild_admin');
-        default:
-            return false;
-    }
+    return `platform-permission:${perm}`;
 }

package/lib/protocol.d.ts

@@ -1,5 +1,4 @@
 import type { EndpointProfileConfiguration } from 'zhin.js/adapter';
-import type { IncomingMessage } from 'node:http';
 import { type ConversationRef } from '@zhin.js/im-contract';
 import type { Locale } from 'zhin.js/i18n';
 export type LogLevel = 'trace' | 'debug' | 'info' | 'warn' | 'error' | 'fatal' | 'mark' | 'off';
@@ -131,10 +130,7 @@ export declare function isKookBotMentioned(msg: KookInboundMessage, selfId?: str
  */
 export declare function formatOutboundKmarkdown(payload: unknown, locale?: Locale): string;
 export declare function normalizeWebhookPath(path: string): string;
-export declare function readTextBody(request: IncomingMessage, options?: {
-    readonly limit?: number;
-}): Promise<string>;
-export declare function readRequestBody(request: IncomingMessage, options?: {
+export declare function readRequestBody(request: Request, options?: {
     readonly limit?: number;
 }): Promise<Buffer>;
 export declare function padKookEncryptKey(key: string): Buffer;

package/lib/protocol.js

@@ -1,6 +1,7 @@
 /** KOOK protocol helpers. Canonicalization is owned by Core. */
 import { createDecipheriv, timingSafeEqual } from 'node:crypto';
 import { inflateSync } from 'node:zlib';
+import { readBodyBytes } from '@zhin.js/host-http';
 import { EndpointDeliveryError, isMediaRef } from '@zhin.js/im-contract';
 import { formatCompact, getLogger } from '@zhin.js/logger';
 import { outboundMessages as t } from './i18n.js';
@@ -192,35 +193,9 @@ export function normalizeWebhookPath(path) {
     const trimmed = path.trim() || '/kook/webhook';
     return trimmed.startsWith('/') ? trimmed : `/${trimmed}`;
 }
-export async function readTextBody(request, options = {}) {
-    const limit = options.limit ?? 1_048_576;
-    const chunks = [];
-    let size = 0;
-    for await (const chunk of request) {
-        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-        size += buffer.length;
-        if (size > limit) {
-            request.destroy();
-            throw new Error(`Request body exceeds ${limit} bytes`);
-        }
-        chunks.push(buffer);
-    }
-    return Buffer.concat(chunks).toString('utf8');
-}
 export async function readRequestBody(request, options = {}) {
-    const limit = options.limit ?? 1_048_576;
-    const chunks = [];
-    let size = 0;
-    for await (const chunk of request) {
-        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-        size += buffer.length;
-        if (size > limit) {
-            request.destroy();
-            throw new Error(`Request body exceeds ${limit} bytes`);
-        }
-        chunks.push(buffer);
-    }
-    return Buffer.concat(chunks);
+    // Oversize bodies throw (the webhook answers its generic OK), as before.
+    return Buffer.from(await readBodyBytes(request, { limit: options.limit ?? 1_048_576 }));
 }
 export function padKookEncryptKey(key) {
     const buf = Buffer.alloc(32, 0);

package/lib/sender-roles.d.ts

@@ -1,9 +1,9 @@
+import type { PlatformStanding } from '@zhin.js/im-contract';
 import type { KookClientTransport } from './ws.js';
-export interface KookSenderRoleProjection {
-    /** 规范角色：owner / admin；普通成员为 undefined。 */
-    readonly role?: 'owner' | 'admin';
-    readonly permissions: readonly string[];
-}
+/** KOOK 角色权限位（按位序，见 KOOK 开发者文档「权限说明」）。 */
+export declare const KOOK_ROLE_PERMISSIONS: readonly string[];
+/** KOOK 权限位 → 权限名；未知位丢弃。 */
+export declare function kookPermissionNames(bits: number): string[];
 export declare class KookSenderRoleResolver {
     #private;
     private readonly getClient;
@@ -12,5 +12,5 @@ export declare class KookSenderRoleResolver {
         readonly guildId?: string;
         readonly authorId: string;
         readonly authorRoles?: readonly number[];
-    }): Promise<KookSenderRoleProjection>;
+    }): Promise<PlatformStanding | undefined>;
 }