@zhin.js/adapter-kook 1.1.26 → 1.1.27

package/lib/sender-roles.js

@@ -1,15 +1,34 @@
 /**
- * KOOK 入站发送者角色投影。
+ * KOOK 入站发送者平台身份（ADR 0056 §1）。
  *
  * 事件只携带数字角色 id，无法直接判断群主 / 管理员；这里按服务器缓存
- * guild.view（群主 id）与 guild-role.list（角色权限位），把发送者投影为
- * 跨平台规范角色 owner / admin。原始角色 id 以 `role:<id>` 形式放入 permissions，
- * 不进入 `sender.roles`。
+ * guild.view（群主 id）与 guild-role.list（角色名与权限位），把发送者归一为
+ * `sender.platform`：
+ * - `standing`：服务器主 → `owner`；持有带「管理员」权限位的角色 → `admin`；否则 `member`。
+ *   查询失败、无法判断时不上报（不猜）。
+ * - `roles`：发送者持有的服务器角色（id + 名称）。
+ * - `permissions`：「全体成员」角色（role_id 0，每个成员都持有、事件里不列出）与这些角色权限位的并集，
+ *   按 KOOK 权限名（snake_case）上报；服务器主与持有「管理员」位的成员拥有全部权限，展开为全部权限名。
+ *   机器人自身身份（`inspectSelfStanding`）走同一套规则。
  */
 import { TtlLookupCache } from 'zhin.js/adapter';
-/** KOOK 角色权限位：0x1 = 管理员。 */
-const KOOK_ROLE_ADMIN_BIT = 1;
 const CACHE_TTL_MS = 60_000;
+/** 「全体成员」：每个成员都持有的基础角色。 */
+const EVERYONE_ROLE_ID = '0';
+/** KOOK 角色权限位（按位序，见 KOOK 开发者文档「权限说明」）。 */
+export const KOOK_ROLE_PERMISSIONS = Object.freeze([
+    'administrator', 'manage_guild', 'view_audit_log', 'create_invite', 'manage_invite', 'manage_channels',
+    'kick_members', 'ban_members', 'manage_emojis', 'change_nickname', 'manage_roles', 'view_channels',
+    'send_messages', 'manage_messages', 'attach_files', 'connect_voice', 'manage_voice', 'mention_everyone',
+    'add_reaction', 'follow_reaction', 'passive_connect_voice', 'push_to_talk_only', 'free_voice_speak', 'speak',
+    'deafen_members', 'mute_members', 'manage_nicknames', 'play_music',
+]);
+/** KOOK 权限位 → 权限名；未知位丢弃。 */
+export function kookPermissionNames(bits) {
+    if (!Number.isFinite(bits) || bits <= 0)
+        return [];
+    return KOOK_ROLE_PERMISSIONS.filter((_, index) => Math.floor(bits / 2 ** index) % 2 === 1);
+}
 export class KookSenderRoleResolver {
     getClient;
     #guilds = new TtlLookupCache({ ttlMs: CACHE_TTL_MS });
@@ -17,18 +36,30 @@ export class KookSenderRoleResolver {
         this.getClient = getClient;
     }
     async resolve(input) {
-        const roleIds = (input.authorRoles ?? []).map(String);
-        const permissions = roleIds.map((id) => `role:${id}`);
         if (!input.guildId)
-            return { permissions };
+            return undefined;
+        const roleIds = [...new Set((input.authorRoles ?? []).map(String))];
         const snapshot = await this.#snapshot(input.guildId);
-        if (snapshot?.ownerId !== undefined && snapshot.ownerId === input.authorId) {
-            return { role: 'owner', permissions: [...permissions, 'guild_owner', 'guild_admin'] };
-        }
-        if (snapshot && roleIds.some((id) => snapshot.adminRoleIds.has(id))) {
-            return { role: 'admin', permissions: [...permissions, 'guild_admin'] };
-        }
-        return { permissions };
+        if (!snapshot)
+            return undefined;
+        const held = roleIds.filter((id) => id !== EVERYONE_ROLE_ID).map((id) => ({ id, role: snapshot.roles?.get(id) }));
+        const everyone = snapshot.roles?.get(EVERYONE_ROLE_ID)?.permissions ?? 0;
+        const bits = held.reduce((sum, { role }) => sum | (role?.permissions ?? 0), everyone);
+        const roles = held.map(({ id, role }) => (role?.name ? { id, name: role.name } : { id }));
+        const isOwner = snapshot.ownerId !== undefined && snapshot.ownerId === input.authorId;
+        const isAdmin = kookPermissionNames(bits).includes('administrator');
+        // The server owner and administrators hold every permission (KOOK ignores per-bit grants for them).
+        const permissions = isOwner || isAdmin ? [...KOOK_ROLE_PERMISSIONS] : kookPermissionNames(bits);
+        // Without the owner id or the role list the standing cannot be decided; an admin role still proves admin.
+        const standing = isOwner ? 'owner' : isAdmin ? 'admin'
+            : snapshot.ownerId !== undefined && snapshot.roles ? 'member' : undefined;
+        if (!standing)
+            return undefined;
+        return {
+            standing,
+            ...(roles.length ? { roles } : {}),
+            ...(permissions.length ? { permissions } : {}),
+        };
     }
     async #snapshot(guildId) {
         return this.#guilds.getOrLoad(guildId, () => this.#fetch(guildId), {
@@ -40,7 +71,7 @@ export class KookSenderRoleResolver {
         if (!client)
             return undefined;
         let ownerId;
-        const adminRoleIds = new Set();
+        let roles;
         try {
             const info = await client.getGuildInfo?.(guildId);
             if (info?.user_id != null && String(info.user_id))
@@ -48,12 +79,15 @@ export class KookSenderRoleResolver {
         }
         catch { /* 保守：视为无群主信息 */ }
         try {
+            roles = new Map();
             for (const role of await client.pickGuild(guildId).getRoleList()) {
-                if ((Number(role.permissions) & KOOK_ROLE_ADMIN_BIT) !== 0)
-                    adminRoleIds.add(String(role.role_id));
+                const name = typeof role.name === 'string' ? role.name : undefined;
+                roles.set(String(role.role_id), { ...(name ? { name } : {}), permissions: Number(role.permissions) || 0 });
             }
         }
-        catch { /* 保守：视为无管理员角色 */ }
-        return { ...(ownerId ? { ownerId } : {}), adminRoleIds };
+        catch {
+            roles = undefined; /* 保守：视为无角色信息 */
+        }
+        return { ...(ownerId ? { ownerId } : {}), ...(roles ? { roles } : {}) };
     }
 }

package/lib/webhook.d.ts

@@ -2,7 +2,6 @@ import { type Endpoint } from 'zhin.js/adapter';
 /**
  * KOOK webhook HTTP: verify → parse → admit.
  */
-import type { IncomingMessage, ServerResponse } from 'node:http';
 import type { HttpHost, HttpRouteRegistration } from '@zhin.js/host-http';
 import { type KookInboundMessage, type KookWebhookEventData, type ResolvedKookWebhookConfig } from './protocol.js';
 export interface KookWebhookHandler extends Endpoint {
@@ -15,4 +14,4 @@ export interface KookWebhookHandler extends Endpoint {
     forgetSn?(sn: number): void;
 }
 export declare function registerKookWebhookRoutes(http: HttpHost, handler: KookWebhookHandler): HttpRouteRegistration[];
-export declare function handleKookWebhookRequest(request: IncomingMessage, response: ServerResponse, handler: KookWebhookHandler): Promise<void>;
+export declare function handleKookWebhookRequest(request: Request, handler: KookWebhookHandler): Promise<Response>;

package/lib/webhook.js

@@ -5,12 +5,10 @@ const logger = getLogger('kook');
 export function registerKookWebhookRoutes(http, handler) {
     const path = handler.endpointConfig.webhookPath;
     return [
-        http.route('POST', path, async (request, response) => {
-            await handleKookWebhookRequest(request, response, handler);
-        }, { summary: 'KOOK webhook callback', tags: ['kook'] }),
+        http.route('POST', path, (request) => handleKookWebhookRequest(request, handler), { summary: 'KOOK webhook callback', tags: ['kook'] }),
     ];
 }
-export async function handleKookWebhookRequest(request, response, handler) {
+export async function handleKookWebhookRequest(request, handler) {
     try {
         const rawBody = await readRequestBody(request);
         let frame;
@@ -23,42 +21,28 @@ export async function handleKookWebhookRequest(request, response, handler) {
                 ok: false,
                 error: error instanceof Error ? error.message : String(error),
             }));
-            response.writeHead(400, { 'Content-Type': 'application/json' });
-            response.end(JSON.stringify({ message: 'Invalid webhook payload' }));
-            return;
+            return new Response(JSON.stringify({ message: 'Invalid webhook payload' }), { status: 400, headers: { 'Content-Type': 'application/json' } });
         }
         const event = frame.d;
         if (!event || typeof event !== 'object') {
-            response.writeHead(200, { 'Content-Type': 'application/json' });
-            response.end(JSON.stringify({ message: 'OK' }));
-            return;
+            return new Response(JSON.stringify({ message: 'OK' }), { status: 200, headers: { 'Content-Type': 'application/json' } });
         }
         if (isKookWebhookChallenge(event)) {
             if (!verifyKookWebhookToken(handler.endpointConfig.verifyToken, event.verify_token)) {
-                response.writeHead(403, { 'Content-Type': 'application/json' });
-                response.end(JSON.stringify({ message: 'Invalid verify_token' }));
-                return;
+                return new Response(JSON.stringify({ message: 'Invalid verify_token' }), { status: 403, headers: { 'Content-Type': 'application/json' } });
             }
-            response.writeHead(200, { 'Content-Type': 'application/json' });
-            response.end(JSON.stringify({ challenge: event.challenge ?? '' }));
-            return;
+            return new Response(JSON.stringify({ challenge: event.challenge ?? '' }), { status: 200, headers: { 'Content-Type': 'application/json' } });
         }
         if (!verifyKookWebhookToken(handler.endpointConfig.verifyToken, event.verify_token)) {
-            response.writeHead(403, { 'Content-Type': 'application/json' });
-            response.end(JSON.stringify({ message: 'Invalid verify_token' }));
-            return;
+            return new Response(JSON.stringify({ message: 'Invalid verify_token' }), { status: 403, headers: { 'Content-Type': 'application/json' } });
         }
         if (!handler.isOpen) {
-            response.writeHead(503, { 'Content-Type': 'application/json' });
-            response.end(JSON.stringify({ message: 'Endpoint unavailable' }));
-            return;
+            return new Response(JSON.stringify({ message: 'Endpoint unavailable' }), { status: 503, headers: { 'Content-Type': 'application/json' } });
         }
-        await handler[endpointSpec].events.run(async () => {
+        return await handler[endpointSpec].events.run(async () => {
             if (frame.sn != null) {
                 if (!handler.checkAndRememberSn(frame.sn)) {
-                    response.writeHead(200, { 'Content-Type': 'application/json' });
-                    response.end(JSON.stringify({ message: 'OK' }));
-                    return;
+                    return new Response(JSON.stringify({ message: 'OK' }), { status: 200, headers: { 'Content-Type': 'application/json' } });
                 }
             }
             try {
@@ -67,17 +51,13 @@ export async function handleKookWebhookRequest(request, response, handler) {
             catch {
                 if (frame.sn != null)
                     handler.forgetSn?.(frame.sn);
-                response.writeHead(503, { 'Content-Type': 'application/json' });
-                response.end(JSON.stringify({ message: 'Admission unavailable' }));
-                return;
+                return new Response(JSON.stringify({ message: 'Admission unavailable' }), { status: 503, headers: { 'Content-Type': 'application/json' } });
             }
-            response.writeHead(200, { 'Content-Type': 'application/json' });
-            response.end(JSON.stringify({ message: 'OK' }));
+            return new Response(JSON.stringify({ message: 'OK' }), { status: 200, headers: { 'Content-Type': 'application/json' } });
         });
     }
     catch (error) {
         logger.error('KOOK webhook error:', error);
-        response.writeHead(200, { 'Content-Type': 'application/json' });
-        response.end(JSON.stringify({ message: 'OK' }));
+        return new Response(JSON.stringify({ message: 'OK' }), { status: 200, headers: { 'Content-Type': 'application/json' } });
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/adapter-kook",
-  "version": "1.1.26",
+  "version": "1.1.27",
   "description": "Zhin.js KOOK adapter for Plugin Runtime (WebSocket gateway or Webhook)",
   "type": "module",
   "main": "./lib/index.js",
@@ -33,25 +33,26 @@
   },
   "dependencies": {
     "kook-client": "^1.0.5",
-    "@zhin.js/adapter": "1.1.32",
-    "@zhin.js/agent-feature": "1.1.16",
-    "@zhin.js/console-contract": "1.1.5",
-    "@zhin.js/core": "1.1.60",
-    "@zhin.js/feature-kit": "1.1.15",
-    "@zhin.js/host-http": "1.1.17",
-    "@zhin.js/im-contract": "1.1.13",
-    "@zhin.js/logger": "1.1.2",
-    "@zhin.js/page": "1.1.17",
-    "@zhin.js/permission": "1.1.15",
-    "@zhin.js/skill": "1.1.16",
-    "@zhin.js/tool": "1.1.18"
+    "ws": "^8.21.1",
+    "zod": "^4.6.7",
+    "@zhin.js/adapter": "1.1.33",
+    "@zhin.js/agent-feature": "1.1.17",
+    "@zhin.js/console-contract": "1.1.6",
+    "@zhin.js/core": "1.2.0",
+    "@zhin.js/feature-kit": "1.1.16",
+    "@zhin.js/host-http": "1.2.0",
+    "@zhin.js/im-contract": "1.1.14",
+    "@zhin.js/logger": "1.1.3",
+    "@zhin.js/page": "1.1.18",
+    "@zhin.js/permission": "1.2.0",
+    "@zhin.js/skill": "1.1.17",
+    "@zhin.js/tool": "1.1.19"
   },
   "peerDependencies": {
-    "zod": "^4.0.0",
-    "@zhin.js/adapter": "^1.1.32",
-    "@zhin.js/command": "^1.1.17",
-    "@zhin.js/core": "^1.1.60",
-    "zhin.js": "^1.1.25"
+    "@zhin.js/adapter": "^1.1.33",
+    "@zhin.js/command": "^1.2.0",
+    "@zhin.js/core": "^1.2.0",
+    "zhin.js": "^1.1.26"
   },
   "peerDependenciesMeta": {
     "@zhin.js/command": {
@@ -59,18 +60,15 @@
     },
     "zhin.js": {
       "optional": true
-    },
-    "zod": {
-      "optional": true
     }
   },
   "devDependencies": {
     "@types/node": "^26.1.2",
+    "@types/ws": "^8.18.1",
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
-    "zod": "^4.4.3",
-    "@zhin.js/host-http": "1.1.17",
-    "zhin.js": "1.1.25"
+    "@zhin.js/host-http": "1.2.0",
+    "zhin.js": "1.1.26"
   },
   "files": [
     "adapters",
@@ -80,7 +78,6 @@
     "schema.json",
     "src",
     "lib",
-    "tools",
     "agents",
     "README.md",
     "CHANGELOG.md",
@@ -130,6 +127,6 @@
   "scripts": {
     "build": "tsc",
     "clean": "rimraf lib",
-    "test": "NODE_OPTIONS=--experimental-strip-types vitest run --root ../../.. plugins/adapters/kook/tests"
+    "test": "vitest run --root ../../.. plugins/adapters/kook/tests"
   }
 }

package/plugin.js

@@ -1,7 +1,5 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
 import { definePlugin } from 'zhin.js';
-import { permissionHostToken } from '@zhin.js/permission';
-import { checkKookPlatformPermit } from "./lib/platform-permit.js";
 import { createKookConsoleRpc } from "./lib/console.js";
 export default definePlugin({
     name: 'kook',
@@ -10,12 +8,8 @@ export default definePlugin({
         displayName: 'KOOK WebSocket Adapter',
     },
     setup(context) {
-        const dispose = context.resources.has(permissionHostToken)
-            ? context.resources.use(permissionHostToken).registerPlatform('kook', checkKookPlatformPermit)
-            : undefined;
         return {
             consoleRpc: createKookConsoleRpc(() => context.config.get()),
-            ...(dispose ? { dispose } : {}),
         };
     },
 });

package/schema.json

@@ -50,34 +50,6 @@
       ],
       "default": "info"
     },
-    "master": {
-      "type": [
-        "string",
-        "number"
-      ],
-      "description": "框架 master（KOOK user id；AI/工具权限、endpoint 管理）。endpoints[i].master 可逐项覆盖",
-      "x-i18n": {
-        "en": {
-          "description": "Framework masters (KOOK user id; AI/tool permissions and endpoint management). endpoints[i].master can override this value."
-        }
-      }
-    },
-    "trusted": {
-      "type": "array",
-      "items": {
-        "type": [
-          "string",
-          "number"
-        ],
-        "description": "Trusted KOOK user id"
-      },
-      "description": "框架 trusted 用户列表（弱于 master）。endpoints[i].trusted 可逐项追加",
-      "x-i18n": {
-        "en": {
-          "description": "Framework trusted users, below master authority. endpoints[i].trusted can add users."
-        }
-      }
-    },
     "endpoints": {
       "type": "array",
       "minItems": 1,
@@ -86,34 +58,6 @@
         "type": "object",
         "additionalProperties": false,
         "properties": {
-          "master": {
-            "type": [
-              "string",
-              "number"
-            ],
-            "description": "本 endpoint 的框架 master（KOOK user id）；覆盖顶层 master",
-            "x-i18n": {
-              "en": {
-                "description": "Framework masters for this endpoint (KOOK user id), overriding the top-level master list."
-              }
-            }
-          },
-          "trusted": {
-            "type": "array",
-            "items": {
-              "type": [
-                "string",
-                "number"
-              ],
-              "description": "Trusted KOOK user id"
-            },
-            "description": "本 endpoint 的 trusted 列表",
-            "x-i18n": {
-              "en": {
-                "description": "Trusted users for this endpoint."
-              }
-            }
-          },
           "token": {
             "type": "string",
             "description": "KOOK bot token"

package/src/endpoint.ts

@@ -1,4 +1,4 @@
-import { EndpointDeliveryError, type ConversationRef } from '@zhin.js/im-contract';
+import { EndpointDeliveryError, type ConversationRef, type PlatformStanding, type SelfStandingRequest } from '@zhin.js/im-contract';
 /**
  * KookEndpoint — lifecycle, outbound, admit, OpenAPI helpers for agent tools.
  */
@@ -40,7 +40,7 @@ import {
   type KookClientTransport,
 } from './ws.js';
 import { recallKookMessage, sendKookOutbound } from './outbound.js';
-import { KookSenderRoleResolver, type KookSenderRoleProjection } from './sender-roles.js';
+import { KookSenderRoleResolver } from './sender-roles.js';
 import { receiveKookSideEvent } from './side-event-dispatch.js';
 import { createKookSelfProfile } from './self-profile.js';
 
@@ -49,12 +49,12 @@ export interface KookEndpointOptions {
   readonly config: ResolvedKookWebsocketConfig;
 }
 
-/** 入站 message.receive 载荷：规范角色 owner/admin 进 roles，原始角色 id 进 permissions。 */
+/** 入站 message.receive 载荷：发送者平台身份进 `sender.platform`（ADR 0056 §1）。 */
 function kookInboundPayload(
   endpointId: string,
   conversation: ConversationRef,
   msg: KookInboundMessage,
-  projection: KookSenderRoleProjection,
+  platform: PlatformStanding | undefined,
   selfId: string | undefined,
 ) {
   return {
@@ -66,8 +66,7 @@ function kookInboundPayload(
     sender: {
       id: msg.authorId,
       name: senderDisplayName(msg) || undefined,
-      ...(projection.role ? { roles: [projection.role] } : {}),
-      ...(projection.permissions.length ? { permissions: [...projection.permissions] } : {}),
+      ...(platform ? { platform } : {}),
     },
     endpointId,
     ...(isKookBotMentioned(msg, selfId) ? { mentioned: true } : {}),
@@ -76,7 +75,6 @@ function kookInboundPayload(
       userId: msg.authorId,
       guildId: msg.guildId,
       authorRoleIds: msg.authorRoles,
-      ...(projection.role ? { senderRole: projection.role } : {}),
     }),
   };
 }
@@ -91,7 +89,7 @@ export class KookWebsocketEndpoint extends RuntimeKookClient implements Endpoint
   #open = false;
   #executionSignal?: AbortSignal;
   #started = false;
-  readonly #management: EndpointManagement = createKookEndpointManagement(() => this.#requireClient());
+  readonly #management: EndpointManagement = createKookEndpointManagement(() => this.#requireClient(), this.#roles);
   readonly #control: EndpointControl = Object.freeze<EndpointControl>({
     recall: request => recallKookMessage(this.#requireClient(), request),
   });
@@ -172,10 +170,10 @@ export class KookWebsocketEndpoint extends RuntimeKookClient implements Endpoint
       if (msg.authorBot) return;
       const conversation = kookInboundConversation(String(this.#options.id), msg);
       const selfId = this.self_id != null ? String(this.self_id) : undefined;
-      return this.#roles.resolve(msg).then((projection) => {
+      return this.#roles.resolve(msg).then((platform) => {
         this.#executionSignal?.throwIfAborted();
         return this[endpointSpec].events.emit('message.receive',
-          kookInboundPayload(this.#options.config.id, conversation, msg, projection, selfId));
+          kookInboundPayload(this.#options.config.id, conversation, msg, platform, selfId));
       }).catch((err) => {
         this.#logger.warn(formatCompact({
           op: 'kook_gateway_receive_failed',
@@ -255,7 +253,7 @@ export class KookWebhookEndpoint extends RuntimeKookClient implements Endpoint {
   #open = false;
   #executionSignal?: AbortSignal;
   #started = false;
-  readonly #management: EndpointManagement = createKookEndpointManagement(() => this.#requireClient());
+  readonly #management: EndpointManagement = createKookEndpointManagement(() => this.#requireClient(), this.#roles);
   readonly #control: EndpointControl = Object.freeze<EndpointControl>({
     recall: request => recallKookMessage(this.#requireClient(), request),
   });
@@ -374,10 +372,10 @@ export class KookWebhookEndpoint extends RuntimeKookClient implements Endpoint {
       if (msg.authorBot) return;
       const conversation = kookInboundConversation(String(this.#options.id), msg);
       const selfId = this.self_id != null ? String(this.self_id) : undefined;
-      return this.#roles.resolve(msg).then((projection) => {
+      return this.#roles.resolve(msg).then((platform) => {
         this.#executionSignal?.throwIfAborted();
         return this[endpointSpec].events.emit('message.receive',
-          kookInboundPayload(this.#options.config.id, conversation, msg, projection, selfId));
+          kookInboundPayload(this.#options.config.id, conversation, msg, platform, selfId));
       }).catch((err) => {
         this.#logger.warn(formatCompact({
           op: 'kook_gateway_receive_failed',
@@ -438,8 +436,24 @@ function isKookTextChannelType(type: string | number | undefined): boolean {
  */
 export function createKookEndpointManagement(
   requireClient: () => KookClientTransport,
+  roles: KookSenderRoleResolver = new KookSenderRoleResolver(requireClient),
 ): EndpointManagement {
   return Object.freeze<EndpointManagement>({
+    /**
+     * ADR 0056 §1: the Bot's own standing in the channel's guild (`/v3/user/view` self → its role
+     * ids, then the same guild owner / role-permission resolution as senders).
+     */
+    async inspectSelfStanding({ conversation, signal }: SelfStandingRequest): Promise<PlatformStanding | undefined> {
+      const guildId = conversation.kind === 'channel' ? conversation.parent?.id : undefined;
+      if (!guildId) return undefined;
+      const operation = createEndpointOperation({ signal });
+      const client = requireClient();
+      const selfId = client.self_id != null ? String(client.self_id) : undefined;
+      if (!selfId) return undefined;
+      const { data } = await operation.run(() => client.request.get('/v3/user/view', { params: { user_id: selfId, guild_id: guildId } }));
+      const held = Array.isArray((data as { roles?: unknown })?.roles) ? (data as { roles: unknown[] }).roles.map(Number).filter(Number.isFinite) : [];
+      return roles.resolve({ guildId, authorId: selfId, authorRoles: held });
+    },
     async listGroups(request: EndpointManagementRequest = {}): Promise<readonly EndpointGroup[]> {
       const operation = createEndpointOperation(request);
       const guilds = await operation.run(() => requireClient().getGuildList());

package/src/index.ts

@@ -36,10 +36,4 @@ export {
 export { type KookClientEventMap } from './client.js';
 export { KookAdapter } from './adapter.js';
 
-export {
-  checkKookPlatformPermit,
-  kookGroupPermitResolver,
-  normalizeKookSenderForPermit,
-  platformPermit,
-  type KookSenderInfo,
-} from './platform-permit.js';
+export { platformPermit } from './platform-permit.js';

package/src/platform-permit.ts

@@ -1,75 +1,10 @@
 /**
- * KOOK platform permit — guild / channel 差异化门禁
+ * KOOK platform permit helper（ADR 0056 §5）。
+ *
+ * 平台身份由适配器上报到 `sender.platform`（见 `sender-roles.ts`），permit 由内置评估器
+ * （`@zhin.js/permission`）判断；适配器不再导出自有的 permit 解析器或检查函数。
  */
-import type { PermissionSubject } from '@zhin.js/permission';
-import { KookPermission } from './protocol.js';
-
-const ADAPTER = 'kook';
 
 export function platformPermit(perm: string): string {
-  return `platform(${ADAPTER},${perm})`;
-}
-
-const FACTORY_PERM_MAP: Record<string, string> = {
-  scene_admin: 'guild_admin',
-  scene_owner: 'guild_owner',
-};
-
-export function kookGroupPermitResolver(logicalPerm: string): string {
-  return platformPermit(FACTORY_PERM_MAP[logicalPerm] ?? logicalPerm);
+  return `platform-permission:${perm}`;
 }
-
-export interface KookSenderInfo {
-  id: string;
-  name: string;
-  permission?: KookPermission;
-  roles?: number[];
-  isGuildOwner?: boolean;
-  isAdmin?: boolean;
-  role?: string;
-  permissions?: string[];
-}
-
-export function normalizeKookSenderForPermit(
-  info: KookSenderInfo,
-  isChannel: boolean,
-): { role?: string; permissions?: string[] } {
-  const permissions: string[] = [];
-  if (info.roles?.length) {
-    permissions.push(...info.roles.map((r) => `role:${r}`));
-  }
-
-  if (info.isGuildOwner || info.permission === KookPermission.Owner) {
-    permissions.push('guild_owner', 'guild_admin');
-    return { role: 'owner', permissions };
-  }
-  if (info.permission === KookPermission.ChannelAdmin && isChannel) {
-    permissions.push('channel_admin', 'guild_admin');
-    return { role: 'channel_admin', permissions };
-  }
-  if (info.isAdmin || info.permission === KookPermission.Admin) {
-    permissions.push('guild_admin');
-    return { role: 'admin', permissions };
-  }
-  return { role: 'member', permissions };
-}
-
-export function checkKookPlatformPermit(perm: string, subject: PermissionSubject): boolean {
-  const role = subject.sender?.role?.[0];
-  const permissions = subject.sender?.permissions ?? [];
-  const has = (t: string) => permissions.includes(t);
-
-  switch (perm) {
-    case 'guild_owner':
-      return role === 'owner' || has('guild_owner');
-    case 'guild_admin':
-      return role === 'owner' || role === 'admin' || role === 'channel_admin' || has('guild_admin') || has('channel_admin');
-    case 'channel_admin':
-      return role === 'owner' || role === 'admin' || role === 'channel_admin' || has('channel_admin') || has('guild_admin');
-    case 'manage_roles':
-      return role === 'owner' || role === 'admin' || has('guild_owner') || has('guild_admin');
-    default:
-      return false;
-  }
-}
-

package/src/protocol.ts

@@ -3,7 +3,7 @@ import type { EndpointProfileConfiguration } from 'zhin.js/adapter';
 
 import { createDecipheriv, timingSafeEqual } from 'node:crypto';
 import { inflateSync } from 'node:zlib';
-import type { IncomingMessage } from 'node:http';
+import { readBodyBytes } from '@zhin.js/host-http';
 import { EndpointDeliveryError, isMediaRef, type ConversationRef } from '@zhin.js/im-contract';
 import { formatCompact, getLogger } from '@zhin.js/logger';
 import type { Locale } from 'zhin.js/i18n';
@@ -329,42 +329,13 @@ export function normalizeWebhookPath(path: string): string {
   return trimmed.startsWith('/') ? trimmed : `/${trimmed}`;
 }
 
-export async function readTextBody(
-  request: IncomingMessage,
-  options: { readonly limit?: number } = {},
-): Promise<string> {
-  const limit = options.limit ?? 1_048_576;
-  const chunks: Buffer[] = [];
-  let size = 0;
-  for await (const chunk of request) {
-    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-    size += buffer.length;
-    if (size > limit) {
-      request.destroy();
-      throw new Error(`Request body exceeds ${limit} bytes`);
-    }
-    chunks.push(buffer);
-  }
-  return Buffer.concat(chunks).toString('utf8');
-}
 
 export async function readRequestBody(
-  request: IncomingMessage,
+  request: Request,
   options: { readonly limit?: number } = {},
 ): Promise<Buffer> {
-  const limit = options.limit ?? 1_048_576;
-  const chunks: Buffer[] = [];
-  let size = 0;
-  for await (const chunk of request) {
-    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-    size += buffer.length;
-    if (size > limit) {
-      request.destroy();
-      throw new Error(`Request body exceeds ${limit} bytes`);
-    }
-    chunks.push(buffer);
-  }
-  return Buffer.concat(chunks);
+  // Oversize bodies throw (the webhook answers its generic OK), as before.
+  return Buffer.from(await readBodyBytes(request, { limit: options.limit ?? 1_048_576 }));
 }
 
 export function padKookEncryptKey(key: string): Buffer {