@zhin.js/adapter-lark 6.0.3 → 6.0.5

package/CHANGELOG.md

@@ -1,5 +1,84 @@
 # @zhin.js/adapter-lark
 
+## 6.0.5
+
+### Patch Changes
+
+- 51015d6: refactor(adapters): migrate platform-permit to PermissionSubject
+
+  All adapter platform-permit checkers now accept PermissionSubject
+  (duck-typed from Message/CommandSession) instead of Message directly.
+  registerPlatformPermitChecker is replaced by host.registerPlatform in
+  the adapter plugin setup. activity-feedback service updated for new
+  PermissionHost integration.
+
+- Updated dependencies [6f9c366]
+- Updated dependencies [373a56b]
+- Updated dependencies [0de46a8]
+- Updated dependencies [c106ecc]
+- Updated dependencies [ca92e03]
+- Updated dependencies [b0f37ae]
+- Updated dependencies [ba08a2f]
+- Updated dependencies [b08f7fe]
+- Updated dependencies [daffd4c]
+- Updated dependencies [36c7400]
+- Updated dependencies [a9fa72e]
+- Updated dependencies [c8de3ef]
+- Updated dependencies [60f0fc8]
+- Updated dependencies [574c990]
+- Updated dependencies [d096f16]
+- Updated dependencies [3f29623]
+- Updated dependencies [2916852]
+- Updated dependencies [d047869]
+- Updated dependencies [162fa34]
+- Updated dependencies [e62561e]
+- Updated dependencies [3eeeb46]
+- Updated dependencies [85d0f82]
+- Updated dependencies [61bfc1c]
+- Updated dependencies [04bad47]
+- Updated dependencies [e40b048]
+- Updated dependencies [5a5b1bb]
+- Updated dependencies [f1708c3]
+- Updated dependencies [d254a81]
+- Updated dependencies [7123c47]
+- Updated dependencies [05befc1]
+- Updated dependencies [0663b6a]
+- Updated dependencies [f28f9b3]
+- Updated dependencies [9f340f7]
+- Updated dependencies [e53444f]
+- Updated dependencies [5eedd26]
+- Updated dependencies [92b0dd7]
+- Updated dependencies [f919b6f]
+- Updated dependencies [098e411]
+- Updated dependencies [e1b7c01]
+- Updated dependencies [9b94f87]
+- Updated dependencies [a7df753]
+  - @zhin.js/agent@1.1.5
+  - @zhin.js/host-http@1.0.8
+  - @zhin.js/permission@1.0.1
+  - @zhin.js/im-contract@1.0.3
+  - @zhin.js/adapter@1.1.7
+  - @zhin.js/plugin-runtime@1.1.5
+  - @zhin.js/command@1.0.9
+  - @zhin.js/core@1.5.4
+  - zhin.js@6.0.4
+
+## 6.0.4
+
+### Patch Changes
+
+- f8c7a54: fix: im
+- Updated dependencies [f8c7a54]
+  - @zhin.js/logger@1.0.76
+  - @zhin.js/host-http@1.0.7
+  - @zhin.js/adapter@1.1.6
+  - @zhin.js/agent@1.1.4
+  - @zhin.js/command@1.0.8
+  - @zhin.js/core@1.5.3
+  - @zhin.js/im-contract@1.0.2
+  - @zhin.js/plugin-runtime@1.1.4
+  - zhin.js@6.0.3
+
 ## 6.0.3
 
 ### Patch Changes

package/adapters/lark.js

@@ -21,8 +21,8 @@ export default defineAdapter({
     create(context) {
         const config = resolveLarkConfig(context.config);
         // 注册到插件运行时状态（lark.endpoint list 的"运行中"数据源）
-        context.use(larkRuntimeStateToken).endpoints.set(config.name, {
-            name: config.name,
+        context.use(larkRuntimeStateToken).endpoints.set(config.id, {
+            id: config.id,
             mode: 'webhook',
         });
         return new LarkEndpoint({

package/adapters/lark.ts

@@ -26,8 +26,8 @@ export default defineAdapter<LarkAdapterConfig>({
   create(context) {
     const config = resolveLarkConfig(context.config);
     // 注册到插件运行时状态（lark.endpoint list 的"运行中"数据源）
-    context.use(larkRuntimeStateToken).endpoints.set(config.name, {
-      name: config.name,
+    context.use(larkRuntimeStateToken).endpoints.set(config.id, {
+      id: config.id,
       mode: 'webhook',
     });
     return new LarkEndpoint({

package/lib/endpoint.js

@@ -3,15 +3,15 @@
  */
 import { readFile } from 'node:fs/promises';
 import { basename } from 'node:path';
-import { formatCompact, getLogger } from '@zhin.js/logger';
+import { formatCompact, getAdapterLogger } from '@zhin.js/logger';
 import { registerLarkAgentEndpoint } from './lark-agent-deps.js';
 import { buildImageUploadForm, readOutboundImageMedia, resolveMediaBinary, } from './media-upload.js';
 import { formatInboundContent, formatOutboundBody, generateMessageId, larkInboundConversation, resolveChatType, resolveSender, } from './protocol.js';
 import { registerLarkWebhookRoutes } from './webhook.js';
-const logger = getLogger('lark');
 /** 出站 HTTP 调用统一 30s 超时。 */
 const OUTBOUND_TIMEOUT_MS = 30_000;
 export class LarkEndpoint {
+    #logger;
     #options;
     #fetch;
     /**
@@ -45,6 +45,7 @@ export class LarkEndpoint {
     #started = false;
     #unregisterAgent;
     constructor(options) {
+        this.#logger = getAdapterLogger('lark', options.config.id);
         this.#options = options;
         this.#fetch = options.fetch ?? globalThis.fetch;
     }
@@ -62,25 +63,25 @@ export class LarkEndpoint {
         try {
             if (!this.#options.config.encryptKey && !this.#options.config.verificationToken) {
                 // encryptKey / verificationToken 都未配置时 webhook 完全无鉴权，任何人可伪造事件
-                logger.warn(formatCompact({
-                    endpoint: this.#options.config.name,
+                this.#logger.warn(formatCompact({
+                    endpoint: this.#options.config.id,
                     op: 'webhook',
                     ok: false,
                     error: 'neither encryptKey nor verificationToken configured; webhook is unauthenticated',
                 }));
             }
             await this.#refreshAccessToken();
-            this.#unregisterAgent = registerLarkAgentEndpoint(this.#options.config.name, this);
+            this.#unregisterAgent = registerLarkAgentEndpoint(this.#options.config.id, this);
             this.#routeReleases.push(...registerLarkWebhookRoutes(this.#options.http, this));
-            logger.debug(formatCompact({
-                endpoint: this.#options.config.name,
+            this.#logger.debug(formatCompact({
+                endpoint: this.#options.config.id,
                 op: 'webhook',
                 path: this.#options.config.webhookPath,
             }));
         }
         catch (error) {
             await this.stop();
-            logger.error('Failed to connect Lark endpoint:', error);
+            this.#logger.error('Failed to connect Lark endpoint:', error);
             throw error;
         }
     }
@@ -97,7 +98,7 @@ export class LarkEndpoint {
         this.#unregisterAgent?.();
         this.#unregisterAgent = undefined;
         this.#started = false;
-        logger.debug(formatCompact({ op: 'disconnect', endpoint: this.#options.config.name }));
+        this.#logger.debug(formatCompact({ op: 'disconnect' }));
     }
     async send({ conversation, payload }) {
         const materialized = await this.#materializeOutboundMedia(payload);
@@ -115,10 +116,7 @@ export class LarkEndpoint {
             throw new Error(`Failed to send message: ${data.msg}`);
         }
         const messageId = data.data?.message_id || `${Date.now()}`;
-        logger.debug(formatCompact({
-            op: 'send',
-            endpoint: this.#options.config.name,
-            to: conversation.id,
+        this.#logger.debug(formatCompact({ op: 'send', to: conversation.id,
             id: messageId,
         }));
         return messageId;
@@ -177,7 +175,7 @@ export class LarkEndpoint {
             throw new Error(`Image upload failed: ${data.msg}`);
         }
         catch (error) {
-            logger.error('Failed to upload image:', error);
+            this.#logger.error('Failed to upload image:', error);
             return null;
         }
     }
@@ -190,14 +188,14 @@ export class LarkEndpoint {
             conversation,
             message: { conversation, id: generateMessageId(msg) },
             content: formatInboundContent(msg),
-            sender: resolveSender(msg),
+            sender: { id: resolveSender(msg) },
+            endpointId: this.#options.config.id,
             metadata: Object.freeze({
                 messageType: msg.message_type,
                 chatType: resolveChatType(msg.chat_id, msg.chat_type),
-                endpoint: this.#options.config.name,
             }),
         }).catch((err) => {
-            logger.warn(formatCompact({
+            this.#logger.warn(formatCompact({
                 op: 'lark_gateway_receive_failed',
                 conversation: conversation.id,
                 error: err instanceof Error ? err.message : String(err),
@@ -213,7 +211,7 @@ export class LarkEndpoint {
             return data.data?.user ?? null;
         }
         catch (error) {
-            logger.error('Failed to get user info:', error);
+            this.#logger.error('Failed to get user info:', error);
             return null;
         }
     }
@@ -223,7 +221,7 @@ export class LarkEndpoint {
             return data.data ?? null;
         }
         catch (error) {
-            logger.error('Failed to get chat info:', error);
+            this.#logger.error('Failed to get chat info:', error);
             return null;
         }
     }
@@ -247,7 +245,7 @@ export class LarkEndpoint {
             throw new Error(`Upload failed: ${data.msg}`);
         }
         catch (error) {
-            logger.error('Failed to upload file:', error);
+            this.#logger.error('Failed to upload file:', error);
             return null;
         }
     }
@@ -266,7 +264,7 @@ export class LarkEndpoint {
             throw new Error(`Failed to create chat: ${data.msg}`);
         }
         catch (error) {
-            logger.error('Failed to create chat:', error);
+            this.#logger.error('Failed to create chat:', error);
             return null;
         }
     }
@@ -281,7 +279,7 @@ export class LarkEndpoint {
             throw new Error(`Failed to update chat: ${data.msg}`);
         }
         catch (error) {
-            logger.error('Failed to update chat:', error);
+            this.#logger.error('Failed to update chat:', error);
             return false;
         }
     }
@@ -296,7 +294,7 @@ export class LarkEndpoint {
             throw new Error(`Failed to add members: ${data.msg}`);
         }
         catch (error) {
-            logger.error('Failed to add chat members:', error);
+            this.#logger.error('Failed to add chat members:', error);
             return false;
         }
     }
@@ -311,7 +309,7 @@ export class LarkEndpoint {
             throw new Error(`Failed to remove members: ${data.msg}`);
         }
         catch (error) {
-            logger.error('Failed to remove chat members:', error);
+            this.#logger.error('Failed to remove chat members:', error);
             return false;
         }
     }
@@ -323,7 +321,7 @@ export class LarkEndpoint {
             throw new Error(`Failed to get members: ${data.msg}`);
         }
         catch (error) {
-            logger.error('Failed to get chat members:', error);
+            this.#logger.error('Failed to get chat members:', error);
             return [];
         }
     }
@@ -335,7 +333,7 @@ export class LarkEndpoint {
             throw new Error(`Failed to dissolve chat: ${data.msg}`);
         }
         catch (error) {
-            logger.error('Failed to dissolve chat:', error);
+            this.#logger.error('Failed to dissolve chat:', error);
             return false;
         }
     }
@@ -350,7 +348,7 @@ export class LarkEndpoint {
             throw new Error(`Failed to set managers: ${data.msg}`);
         }
         catch (error) {
-            logger.error('Failed to set chat managers:', error);
+            this.#logger.error('Failed to set chat managers:', error);
             return false;
         }
     }
@@ -365,7 +363,7 @@ export class LarkEndpoint {
             throw new Error(`Failed to remove managers: ${data.msg}`);
         }
         catch (error) {
-            logger.error('Failed to remove chat managers:', error);
+            this.#logger.error('Failed to remove chat managers:', error);
             return false;
         }
     }
@@ -450,7 +448,7 @@ export class LarkEndpoint {
                 expires_in: data.expire ?? 7200,
                 timestamp: Date.now(),
             };
-            logger.debug('Access token refreshed successfully');
+            this.#logger.debug('Access token refreshed successfully');
             return;
         }
         throw new Error(`Failed to get access token: ${data.msg} (${data.code})`);

package/lib/index.d.ts

@@ -1,6 +1,6 @@
 export { formatInboundContent, formatOutboundBody, generateMessageId, headerValue, larkInboundConversation, normalizeWebhookPath, readTextBody, resolveChatType, resolveLarkConfig, resolveSender, verifySignature, type AccessToken, type LarkAdapterConfig, type LarkApiResponse, type LarkEventBody, type LarkMessage, type LarkSendBody, type LarkWireSegment, type ResolvedLarkConfig, } from './protocol.js';
 export { getLarkAgentDeps, registerLarkAgentEndpoint, setLarkAgentDeps, type LarkAgentDeps, type LarkAgentEndpoint, } from './lark-agent-deps.js';
-export { checkLarkPlatformPermit, larkGroupPermitResolver, normalizeLarkSenderForPermit, platformPermit, registerLarkPlatformPermitChecker, } from './platform-permit.js';
+export { checkLarkPlatformPermit, larkGroupPermitResolver, normalizeLarkSenderForPermit, platformPermit, } from './platform-permit.js';
 export { LarkEndpoint, type LarkEndpointOptions, type LarkFetch, } from './endpoint.js';
 export { buildImageUploadForm, readOutboundImageMedia, resolveMediaBinary, type MediaBinary, } from './media-upload.js';
 export { registerLarkWebhookRoutes, handleLarkWebhookRequest, type LarkWebhookHandler, } from './webhook.js';

package/lib/index.js

@@ -1,6 +1,6 @@
 export { formatInboundContent, formatOutboundBody, generateMessageId, headerValue, larkInboundConversation, normalizeWebhookPath, readTextBody, resolveChatType, resolveLarkConfig, resolveSender, verifySignature, } from './protocol.js';
 export { getLarkAgentDeps, registerLarkAgentEndpoint, setLarkAgentDeps, } from './lark-agent-deps.js';
-export { checkLarkPlatformPermit, larkGroupPermitResolver, normalizeLarkSenderForPermit, platformPermit, registerLarkPlatformPermitChecker, } from './platform-permit.js';
+export { checkLarkPlatformPermit, larkGroupPermitResolver, normalizeLarkSenderForPermit, platformPermit, } from './platform-permit.js';
 export { LarkEndpoint, } from './endpoint.js';
 export { buildImageUploadForm, readOutboundImageMedia, resolveMediaBinary, } from './media-upload.js';
 export { registerLarkWebhookRoutes, handleLarkWebhookRequest, } from './webhook.js';

package/lib/lark-agent-deps.d.ts

@@ -19,9 +19,9 @@ export interface LarkAgentEndpoint {
     removeChatManagers(chatId: string, userIds: string[]): Promise<boolean>;
 }
 export interface LarkAgentDeps {
-    getEndpoint: (endpointId: string) => LarkAgentEndpoint;
+    getEndpoint: (endpointKey: string) => LarkAgentEndpoint;
 }
-export declare function registerLarkAgentEndpoint(endpointId: string, endpoint: LarkAgentEndpoint): () => void;
+export declare function registerLarkAgentEndpoint(endpointKey: string, endpoint: LarkAgentEndpoint): () => void;
 /** Optional override used by tests / transitional callers. Pass `null` to clear. */
 export declare function setLarkAgentDeps(deps: LarkAgentDeps | null): void;
 export declare function getLarkAgentDeps(): LarkAgentDeps;

package/lib/lark-agent-deps.js

@@ -4,11 +4,11 @@
  */
 const endpoints = new Map();
 let override = null;
-export function registerLarkAgentEndpoint(endpointId, endpoint) {
-    endpoints.set(endpointId, endpoint);
+export function registerLarkAgentEndpoint(endpointKey, endpoint) {
+    endpoints.set(endpointKey, endpoint);
     return () => {
-        if (endpoints.get(endpointId) === endpoint) {
-            endpoints.delete(endpointId);
+        if (endpoints.get(endpointKey) === endpoint) {
+            endpoints.delete(endpointKey);
         }
     };
 }
@@ -20,10 +20,10 @@ export function getLarkAgentDeps() {
     if (override)
         return override;
     return {
-        getEndpoint(endpointId) {
-            const endpoint = endpoints.get(endpointId);
+        getEndpoint(endpointKey) {
+            const endpoint = endpoints.get(endpointKey);
             if (!endpoint)
-                throw new Error(`Endpoint ${endpointId} 不存在`);
+                throw new Error(`Endpoint ${endpointKey} 不存在`);
             return endpoint;
         },
     };

package/lib/platform-permit.d.ts

@@ -1,7 +1,7 @@
 /**
  * 飞书 Lark platform permit
  */
-import { type Message } from '@zhin.js/core';
+import type { PermissionSubject } from '@zhin.js/permission';
 export declare function platformPermit(perm: string): string;
 export declare function larkGroupPermitResolver(logicalPerm: string): string;
 export declare function normalizeLarkSenderForPermit(input: {
@@ -11,5 +11,4 @@ export declare function normalizeLarkSenderForPermit(input: {
     role?: string;
     permissions?: string[];
 };
-export declare function checkLarkPlatformPermit(perm: string, message: Message<any>): boolean;
-export declare function registerLarkPlatformPermitChecker(): () => void;
+export declare function checkLarkPlatformPermit(perm: string, subject: PermissionSubject): boolean;

package/lib/platform-permit.js

@@ -1,7 +1,3 @@
-/**
- * 飞书 Lark platform permit
- */
-import { registerPlatformPermitChecker } from '@zhin.js/core';
 const ADAPTER = 'lark';
 export function platformPermit(perm) {
     return `platform(${ADAPTER},${perm})`;
@@ -22,10 +18,9 @@ export function normalizeLarkSenderForPermit(input) {
     }
     return { role: 'member', permissions: [] };
 }
-export function checkLarkPlatformPermit(perm, message) {
-    const sender = message.$sender;
-    const permissions = sender.permissions ?? [];
-    const role = sender.role;
+export function checkLarkPlatformPermit(perm, subject) {
+    const role = subject.sender?.role?.[0];
+    const permissions = subject.sender?.permissions ?? [];
     const has = (t) => permissions.includes(t);
     switch (perm) {
         case 'chat_owner':
@@ -38,6 +33,3 @@ export function checkLarkPlatformPermit(perm, message) {
             return false;
     }
 }
-export function registerLarkPlatformPermitChecker() {
-    return registerPlatformPermitChecker(ADAPTER, checkLarkPlatformPermit);
-}

package/lib/protocol.d.ts

@@ -6,7 +6,7 @@ import type { IncomingMessage } from 'node:http';
 import type { ConversationRef } from '@zhin.js/im-contract';
 /** Plugin Runtime owner config (`plugins.<instanceKey>` / schema.json). */
 export interface LarkAdapterConfig {
-    readonly name?: string;
+    readonly id?: string;
     readonly appId?: string;
     readonly appSecret?: string;
     readonly encryptKey?: string;
@@ -21,7 +21,7 @@ export interface LarkAdapterConfig {
 }
 export interface ResolvedLarkConfig {
     readonly context: 'lark';
-    readonly name: string;
+    readonly id: string;
     readonly appId: string;
     readonly appSecret: string;
     readonly encryptKey?: string;
@@ -102,7 +102,7 @@ export declare function resolveChatType(chatId?: string, chatType?: string): 'gr
  * p2p 单聊映射为 private；id 一律为平台 chat_id。Lark 无 guild/频道容器，
  * 不产生 `parent`。
  */
-export declare function larkInboundConversation(endpointId: string, msg: LarkMessage): ConversationRef;
+export declare function larkInboundConversation(endpointKey: string, msg: LarkMessage): ConversationRef;
 export declare function resolveSender(msg: LarkMessage): string;
 export declare function generateMessageId(msg: LarkMessage): string;
 /** Build inbound text for MessageGateway.receive. */

package/lib/protocol.js

@@ -14,8 +14,8 @@ export function resolveLarkConfig(config = {}) {
         throw new TypeError('Lark adapter requires appId + appSecret (plugins.<key> or endpoints with context: lark)');
     }
     const isFeishu = config.isFeishu ?? entry?.isFeishu ?? true;
-    const name = (typeof config.name === 'string' && config.name)
-        || (typeof entry?.name === 'string' && entry.name)
+    const id = (typeof config.id === 'string' && config.id)
+        || (typeof entry?.id === 'string' && entry.id)
         || process.env.LARK_BOT_NAME
         || 'lark-bot';
     const webhookPath = normalizeWebhookPath(config.webhookPath ?? entry?.webhookPath ?? '/lark/webhook');
@@ -27,7 +27,7 @@ export function resolveLarkConfig(config = {}) {
     const verificationToken = config.verificationToken ?? entry?.verificationToken;
     return {
         context: 'lark',
-        name,
+        id,
         appId,
         appSecret,
         ...(encryptKey ? { encryptKey } : {}),
@@ -54,9 +54,9 @@ export function resolveChatType(chatId, chatType) {
  * p2p 单聊映射为 private；id 一律为平台 chat_id。Lark 无 guild/频道容器，
  * 不产生 `parent`。
  */
-export function larkInboundConversation(endpointId, msg) {
+export function larkInboundConversation(endpointKey, msg) {
     return {
-        endpoint: { id: endpointId, adapter: endpointId.split('\0')[0] ?? endpointId },
+        endpoint: { id: endpointKey, adapter: endpointKey.split('\0')[0] ?? endpointKey },
         kind: resolveChatType(msg.chat_id, msg.chat_type),
         id: msg.chat_id || 'unknown',
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/adapter-lark",
-  "version": "6.0.3",
+  "version": "6.0.5",
   "description": "Zhin.js Lark/Feishu (飞书) adapter for Plugin Runtime (HTTP webhook)",
   "type": "module",
   "main": "./lib/index.js",
@@ -34,22 +34,23 @@
     "directory": "plugins/adapters/lark"
   },
   "dependencies": {
-    "@zhin.js/adapter": "1.1.5",
-    "@zhin.js/command": "1.0.7",
-    "@zhin.js/core": "1.5.2",
-    "@zhin.js/host-http": "1.0.6",
-    "@zhin.js/im-contract": "1.0.1",
-    "@zhin.js/logger": "1.0.75",
-    "@zhin.js/plugin-runtime": "1.1.3"
+    "@zhin.js/adapter": "1.1.7",
+    "@zhin.js/command": "1.0.9",
+    "@zhin.js/core": "1.5.4",
+    "@zhin.js/host-http": "1.0.8",
+    "@zhin.js/im-contract": "1.0.3",
+    "@zhin.js/logger": "1.0.76",
+    "@zhin.js/plugin-runtime": "1.1.5"
   },
   "peerDependencies": {
     "zod": "^4.0.0",
-    "@zhin.js/adapter": "1.1.5",
-    "@zhin.js/agent": "1.1.3",
-    "@zhin.js/core": "1.5.2",
-    "@zhin.js/host-http": "1.0.6",
-    "@zhin.js/plugin-runtime": "1.1.3",
-    "zhin.js": "6.0.2"
+    "@zhin.js/adapter": "1.1.7",
+    "@zhin.js/agent": "1.1.5",
+    "@zhin.js/core": "1.5.4",
+    "@zhin.js/host-http": "1.0.8",
+    "@zhin.js/permission": "1.0.1",
+    "@zhin.js/plugin-runtime": "1.1.5",
+    "zhin.js": "6.0.4"
   },
   "peerDependenciesMeta": {
     "zhin.js": {
@@ -67,8 +68,8 @@
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
     "zod": "^4.4.3",
-    "@zhin.js/agent": "1.1.3",
-    "zhin.js": "6.0.2"
+    "@zhin.js/agent": "1.1.5",
+    "zhin.js": "6.0.4"
   },
   "files": [
     "adapters",

package/plugin.js

@@ -1,7 +1,8 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
 import { createEndpointRuntimeState } from '@zhin.js/adapter';
 import { definePlugin } from '@zhin.js/plugin-runtime';
-import { registerLarkPlatformPermitChecker } from "./lib/platform-permit.js";
+import { permissionHostToken } from '@zhin.js/permission';
+import { checkLarkPlatformPermit } from "./lib/platform-permit.js";
 import { larkRuntimeStateToken } from "./lib/lark-runtime-state.js";
 export default definePlugin({
     name: 'lark',
@@ -9,8 +10,10 @@ export default definePlugin({
         displayName: 'Lark/Feishu (飞书) Adapter',
     },
     setup(context) {
-        // 运行中 endpoint 注册表（lark.endpoint list 的"运行中"数据源）
         context.resources.provide(larkRuntimeStateToken, createEndpointRuntimeState());
-        return registerLarkPlatformPermitChecker();
+        if (context.resources.has(permissionHostToken)) {
+            const host = context.resources.use(permissionHostToken);
+            return host.registerPlatform('lark', checkLarkPlatformPermit);
+        }
     },
 });

package/schema.json

@@ -14,16 +14,48 @@
       "type": "boolean",
       "default": true
     },
+    "master": {
+      "type": [
+        "string",
+        "number"
+      ],
+      "description": "框架 master（Lark/Feishu open_id or user_id；AI/工具权限、endpoint 管理）。endpoints[i].master 可逐项覆盖"
+    },
+    "trusted": {
+      "type": "array",
+      "items": {
+        "type": [
+          "string",
+          "number"
+        ],
+        "description": "Trusted Lark/Feishu open_id or user_id"
+      },
+      "description": "框架 trusted 用户列表（弱于 master）。endpoints[i].trusted 可逐项追加"
+    },
     "endpoints": {
       "type": "array",
-      "description": "多账号：一个插件实例挂多个 endpoint。每项与顶层字段同构（name 必填，其余覆盖顶层）",
+      "description": "多账号：一个插件实例挂多个 endpoint。每项与顶层字段同构（id 必填，其余覆盖顶层）",
       "items": {
         "type": "object",
         "additionalProperties": true,
         "properties": {
-          "name": {
-            "type": "string",
-            "description": "Lark bot name"
+          "master": {
+            "type": [
+              "string",
+              "number"
+            ],
+            "description": "本 endpoint 的框架 master（Lark/Feishu open_id or user_id）；覆盖顶层 master"
+          },
+          "trusted": {
+            "type": "array",
+            "items": {
+              "type": [
+                "string",
+                "number"
+              ],
+              "description": "Trusted Lark/Feishu open_id or user_id"
+            },
+            "description": "本 endpoint 的 trusted 列表"
           },
           "appId": {
             "type": "string",
@@ -40,10 +72,14 @@
           "verificationToken": {
             "type": "string",
             "description": "Lark verification token"
+          },
+          "id": {
+            "type": "string",
+            "description": "Lark bot name"
           }
         },
         "required": [
-          "name",
+          "id",
           "appId",
           "appSecret"
         ]

package/src/endpoint.ts

@@ -6,7 +6,7 @@ import { basename } from 'node:path';
 import type { EndpointGroup, EndpointInstance, EndpointManagement, EndpointSendRequest } from '@zhin.js/adapter';
 import type { MessageGateway } from '@zhin.js/core/runtime';
 import type { HttpHost, HttpRouteRegistration } from '@zhin.js/host-http';
-import { formatCompact, getLogger } from '@zhin.js/logger';
+import { formatCompact, getAdapterLogger } from '@zhin.js/logger';
 import type { CapabilityId } from '@zhin.js/plugin-runtime';
 import { registerLarkAgentEndpoint } from './lark-agent-deps.js';
 import {
@@ -28,8 +28,6 @@ import {
 } from './protocol.js';
 import { registerLarkWebhookRoutes } from './webhook.js';
 
-const logger = getLogger('lark');
-
 /** 出站 HTTP 调用统一 30s 超时。 */
 const OUTBOUND_TIMEOUT_MS = 30_000;
 
@@ -57,6 +55,8 @@ export interface LarkEndpointOptions {
 }
 
 export class LarkEndpoint implements EndpointInstance {
+  readonly #logger!: ReturnType<typeof getAdapterLogger>;
+
   readonly #options: LarkEndpointOptions;
   readonly #fetch: LarkFetch;
   /**
@@ -93,6 +93,7 @@ export class LarkEndpoint implements EndpointInstance {
   #unregisterAgent?: () => void;
 
   constructor(options: LarkEndpointOptions) {
+    this.#logger = getAdapterLogger('lark', options.config.id);
     this.#options = options;
     this.#fetch = options.fetch ?? globalThis.fetch;
   }
@@ -112,24 +113,24 @@ export class LarkEndpoint implements EndpointInstance {
     try {
       if (!this.#options.config.encryptKey && !this.#options.config.verificationToken) {
         // encryptKey / verificationToken 都未配置时 webhook 完全无鉴权，任何人可伪造事件
-        logger.warn(formatCompact({
-          endpoint: this.#options.config.name,
+        this.#logger.warn(formatCompact({
+          endpoint: this.#options.config.id,
           op: 'webhook',
           ok: false,
           error: 'neither encryptKey nor verificationToken configured; webhook is unauthenticated',
         }));
       }
       await this.#refreshAccessToken();
-      this.#unregisterAgent = registerLarkAgentEndpoint(this.#options.config.name, this);
+      this.#unregisterAgent = registerLarkAgentEndpoint(this.#options.config.id, this);
       this.#routeReleases.push(...registerLarkWebhookRoutes(this.#options.http, this));
-      logger.debug(formatCompact({
-        endpoint: this.#options.config.name,
+      this.#logger.debug(formatCompact({
+        endpoint: this.#options.config.id,
         op: 'webhook',
         path: this.#options.config.webhookPath,
       }));
     } catch (error) {
       await this.stop();
-      logger.error('Failed to connect Lark endpoint:', error);
+      this.#logger.error('Failed to connect Lark endpoint:', error);
       throw error;
     }
   }
@@ -148,7 +149,7 @@ export class LarkEndpoint implements EndpointInstance {
     this.#unregisterAgent?.();
     this.#unregisterAgent = undefined;
     this.#started = false;
-    logger.debug(formatCompact({ op: 'disconnect', endpoint: this.#options.config.name }));
+    this.#logger.debug(formatCompact({ op: 'disconnect' }));
   }
 
   async send({ conversation, payload }: EndpointSendRequest): Promise<string> {
@@ -167,10 +168,7 @@ export class LarkEndpoint implements EndpointInstance {
       throw new Error(`Failed to send message: ${data.msg}`);
     }
     const messageId = (data.data?.message_id as string) || `${Date.now()}`;
-    logger.debug(formatCompact({
-      op: 'send',
-      endpoint: this.#options.config.name,
-      to: conversation.id,
+    this.#logger.debug(formatCompact({ op: 'send', to: conversation.id,
       id: messageId,
     }));
     return messageId;
@@ -226,7 +224,7 @@ export class LarkEndpoint implements EndpointInstance {
       }
       throw new Error(`Image upload failed: ${data.msg}`);
     } catch (error) {
-      logger.error('Failed to upload image:', error);
+      this.#logger.error('Failed to upload image:', error);
       return null;
     }
   }
@@ -239,14 +237,14 @@ export class LarkEndpoint implements EndpointInstance {
       conversation,
       message: { conversation, id: generateMessageId(msg) },
       content: formatInboundContent(msg),
-      sender: resolveSender(msg),
+      sender: { id: resolveSender(msg) },
+      endpointId: this.#options.config.id,
       metadata: Object.freeze({
         messageType: msg.message_type,
         chatType: resolveChatType(msg.chat_id, msg.chat_type),
-        endpoint: this.#options.config.name,
       }),
     }).catch((err) => {
-      logger.warn(formatCompact({
+      this.#logger.warn(formatCompact({
         op: 'lark_gateway_receive_failed',
         conversation: conversation.id,
         error: err instanceof Error ? err.message : String(err),
@@ -265,7 +263,7 @@ export class LarkEndpoint implements EndpointInstance {
       });
       return data.data?.user ?? null;
     } catch (error) {
-      logger.error('Failed to get user info:', error);
+      this.#logger.error('Failed to get user info:', error);
       return null;
     }
   }
@@ -275,7 +273,7 @@ export class LarkEndpoint implements EndpointInstance {
       const data = await this.#request(`/im/v1/chats/${chatId}`, { method: 'GET' });
       return data.data ?? null;
     } catch (error) {
-      logger.error('Failed to get chat info:', error);
+      this.#logger.error('Failed to get chat info:', error);
       return null;
     }
   }
@@ -302,7 +300,7 @@ export class LarkEndpoint implements EndpointInstance {
       }
       throw new Error(`Upload failed: ${data.msg}`);
     } catch (error) {
-      logger.error('Failed to upload file:', error);
+      this.#logger.error('Failed to upload file:', error);
       return null;
     }
   }
@@ -324,7 +322,7 @@ export class LarkEndpoint implements EndpointInstance {
       if (data.code === 0) return (data.data?.chat_id as string) || null;
       throw new Error(`Failed to create chat: ${data.msg}`);
     } catch (error) {
-      logger.error('Failed to create chat:', error);
+      this.#logger.error('Failed to create chat:', error);
       return null;
     }
   }
@@ -341,7 +339,7 @@ export class LarkEndpoint implements EndpointInstance {
       if (data.code === 0) return true;
       throw new Error(`Failed to update chat: ${data.msg}`);
     } catch (error) {
-      logger.error('Failed to update chat:', error);
+      this.#logger.error('Failed to update chat:', error);
       return false;
     }
   }
@@ -355,7 +353,7 @@ export class LarkEndpoint implements EndpointInstance {
       if (data.code === 0) return true;
       throw new Error(`Failed to add members: ${data.msg}`);
     } catch (error) {
-      logger.error('Failed to add chat members:', error);
+      this.#logger.error('Failed to add chat members:', error);
       return false;
     }
   }
@@ -369,7 +367,7 @@ export class LarkEndpoint implements EndpointInstance {
       if (data.code === 0) return true;
       throw new Error(`Failed to remove members: ${data.msg}`);
     } catch (error) {
-      logger.error('Failed to remove chat members:', error);
+      this.#logger.error('Failed to remove chat members:', error);
       return false;
     }
   }
@@ -380,7 +378,7 @@ export class LarkEndpoint implements EndpointInstance {
       if (data.code === 0) return (data.data?.items as unknown[]) || [];
       throw new Error(`Failed to get members: ${data.msg}`);
     } catch (error) {
-      logger.error('Failed to get chat members:', error);
+      this.#logger.error('Failed to get chat members:', error);
       return [];
     }
   }
@@ -391,7 +389,7 @@ export class LarkEndpoint implements EndpointInstance {
       if (data.code === 0) return true;
       throw new Error(`Failed to dissolve chat: ${data.msg}`);
     } catch (error) {
-      logger.error('Failed to dissolve chat:', error);
+      this.#logger.error('Failed to dissolve chat:', error);
       return false;
     }
   }
@@ -405,7 +403,7 @@ export class LarkEndpoint implements EndpointInstance {
       if (data.code === 0) return true;
       throw new Error(`Failed to set managers: ${data.msg}`);
     } catch (error) {
-      logger.error('Failed to set chat managers:', error);
+      this.#logger.error('Failed to set chat managers:', error);
       return false;
     }
   }
@@ -419,7 +417,7 @@ export class LarkEndpoint implements EndpointInstance {
       if (data.code === 0) return true;
       throw new Error(`Failed to remove managers: ${data.msg}`);
     } catch (error) {
-      logger.error('Failed to remove chat managers:', error);
+      this.#logger.error('Failed to remove chat managers:', error);
       return false;
     }
   }
@@ -524,7 +522,7 @@ export class LarkEndpoint implements EndpointInstance {
         expires_in: data.expire ?? 7200,
         timestamp: Date.now(),
       };
-      logger.debug('Access token refreshed successfully');
+      this.#logger.debug('Access token refreshed successfully');
       return;
     }
     throw new Error(`Failed to get access token: ${data.msg} (${data.code})`);

package/src/index.ts

@@ -33,7 +33,6 @@ export {
   larkGroupPermitResolver,
   normalizeLarkSenderForPermit,
   platformPermit,
-  registerLarkPlatformPermitChecker,
 } from './platform-permit.js';
 
 export {

package/src/lark-agent-deps.ts

@@ -27,20 +27,20 @@ export interface LarkAgentEndpoint {
 }
 
 export interface LarkAgentDeps {
-  getEndpoint: (endpointId: string) => LarkAgentEndpoint;
+  getEndpoint: (endpointKey: string) => LarkAgentEndpoint;
 }
 
 const endpoints = new Map<string, LarkAgentEndpoint>();
 let override: LarkAgentDeps | null = null;
 
 export function registerLarkAgentEndpoint(
-  endpointId: string,
+  endpointKey: string,
   endpoint: LarkAgentEndpoint,
 ): () => void {
-  endpoints.set(endpointId, endpoint);
+  endpoints.set(endpointKey, endpoint);
   return () => {
-    if (endpoints.get(endpointId) === endpoint) {
-      endpoints.delete(endpointId);
+    if (endpoints.get(endpointKey) === endpoint) {
+      endpoints.delete(endpointKey);
     }
   };
 }
@@ -53,9 +53,9 @@ export function setLarkAgentDeps(deps: LarkAgentDeps | null): void {
 export function getLarkAgentDeps(): LarkAgentDeps {
   if (override) return override;
   return {
-    getEndpoint(endpointId) {
-      const endpoint = endpoints.get(endpointId);
-      if (!endpoint) throw new Error(`Endpoint ${endpointId} 不存在`);
+    getEndpoint(endpointKey) {
+      const endpoint = endpoints.get(endpointKey);
+      if (!endpoint) throw new Error(`Endpoint ${endpointKey} 不存在`);
       return endpoint;
     },
   };

package/src/platform-permit.ts

@@ -1,7 +1,7 @@
 /**
  * 飞书 Lark platform permit
  */
-import { registerPlatformPermitChecker, type Message } from '@zhin.js/core';
+import type { PermissionSubject } from '@zhin.js/permission';
 
 const ADAPTER = 'lark';
 
@@ -31,10 +31,9 @@ export function normalizeLarkSenderForPermit(input: {
   return { role: 'member', permissions: [] };
 }
 
-export function checkLarkPlatformPermit(perm: string, message: Message<any>): boolean {
-  const sender = message.$sender as { role?: string; permissions?: string[] };
-  const permissions = sender.permissions ?? [];
-  const role = sender.role;
+export function checkLarkPlatformPermit(perm: string, subject: PermissionSubject): boolean {
+  const role = subject.sender?.role?.[0];
+  const permissions = subject.sender?.permissions ?? [];
   const has = (t: string) => permissions.includes(t);
 
   switch (perm) {
@@ -49,6 +48,3 @@ export function checkLarkPlatformPermit(perm: string, message: Message<any>): bo
   }
 }
 
-export function registerLarkPlatformPermitChecker(): () => void {
-  return registerPlatformPermitChecker(ADAPTER, checkLarkPlatformPermit);
-}

package/src/protocol.ts

@@ -13,7 +13,7 @@ const logger = getLogger('lark');
 
 /** Plugin Runtime owner config (`plugins.<instanceKey>` / schema.json). */
 export interface LarkAdapterConfig {
-  readonly name?: string;
+  readonly id?: string;
   readonly appId?: string;
   readonly appSecret?: string;
   readonly encryptKey?: string;
@@ -29,7 +29,7 @@ export interface LarkAdapterConfig {
 
 export interface ResolvedLarkConfig {
   readonly context: 'lark';
-  readonly name: string;
+  readonly id: string;
   readonly appId: string;
   readonly appSecret: string;
   readonly encryptKey?: string;
@@ -119,8 +119,8 @@ export function resolveLarkConfig(config: LarkAdapterConfig = {}): ResolvedLarkC
     );
   }
   const isFeishu = config.isFeishu ?? entry?.isFeishu ?? true;
-  const name = (typeof config.name === 'string' && config.name)
-    || (typeof entry?.name === 'string' && entry.name)
+  const id = (typeof config.id === 'string' && config.id)
+    || (typeof entry?.id === 'string' && entry.id)
     || process.env.LARK_BOT_NAME
     || 'lark-bot';
   const webhookPath = normalizeWebhookPath(
@@ -136,7 +136,7 @@ export function resolveLarkConfig(config: LarkAdapterConfig = {}): ResolvedLarkC
   const verificationToken = config.verificationToken ?? entry?.verificationToken;
   return {
     context: 'lark',
-    name,
+    id,
     appId,
     appSecret,
     ...(encryptKey ? { encryptKey } : {}),
@@ -164,9 +164,9 @@ export function resolveChatType(chatId?: string, chatType?: string): 'group' | '
  * p2p 单聊映射为 private；id 一律为平台 chat_id。Lark 无 guild/频道容器，
  * 不产生 `parent`。
  */
-export function larkInboundConversation(endpointId: string, msg: LarkMessage): ConversationRef {
+export function larkInboundConversation(endpointKey: string, msg: LarkMessage): ConversationRef {
   return {
-    endpoint: { id: endpointId, adapter: endpointId.split('\0')[0] ?? endpointId },
+    endpoint: { id: endpointKey, adapter: endpointKey.split('\0')[0] ?? endpointKey },
     kind: resolveChatType(msg.chat_id, msg.chat_type),
     id: msg.chat_id || 'unknown',
   };