@zhin.js/adapter-milky 1.1.26 → 1.1.27

package/lib/ws-types.js

@@ -1 +1,31 @@
-export {};
+/**
+ * A Host reverse-WebSocket connection seen through the MilkyWsSocket surface. Protocol
+ * keepalive (ping / pong) belongs to the Host transport, so `ping` is absent.
+ */
+export function socketOfConnection(connection) {
+    let readyState = 1;
+    connection.onClose(() => { readyState = 3; });
+    const subscriptions = new Map();
+    const off = (_event, listener) => {
+        subscriptions.get(listener)?.();
+        subscriptions.delete(listener);
+    };
+    return {
+        get readyState() { return readyState; },
+        send: (data) => connection.send(data),
+        close: (code, reason) => connection.close(code, reason),
+        on(event, listener) {
+            if (event === 'message') {
+                subscriptions.set(listener, connection.onMessage((data) => {
+                    listener(typeof data === 'string' ? data : Buffer.from(data));
+                }));
+            }
+            else if (event === 'close') {
+                subscriptions.set(listener, connection.onClose((code, reason) => listener(code, reason)));
+            }
+            // 'error' surfaces as a close on a WsConnection; 'open' already happened.
+        },
+        off,
+        removeListener: off,
+    };
+}

package/lib/wss-endpoint.d.ts

@@ -2,7 +2,7 @@
  * Milky reverse WSS endpoint — httpHostToken WS upgrade inbound + baseUrl HTTP API outbound.
  */
 import { endpointSpec, type Endpoint, type EndpointSpecification } from 'zhin.js/adapter';
-import type { HttpHost } from '@zhin.js/host-http';
+import { type HttpHost } from '@zhin.js/host-http';
 import type { CapabilityId } from 'zhin.js';
 import { MilkyClient } from './client.js';
 import { callApi, type MilkyWssConfig } from './protocol.js';

package/lib/wss-endpoint.js

@@ -3,11 +3,12 @@ import { createMilkySelfProfile } from './self-profile.js';
  * Milky reverse WSS endpoint — httpHostToken WS upgrade inbound + baseUrl HTTP API outbound.
  */
 import { createEndpointSpecification, endpointSpec, createEndpointLifecycle, createRecallEndpointControl, } from 'zhin.js/adapter';
+import { verifyProtocolAccessToken } from '@zhin.js/host-http';
 import { formatCompact, getAdapterLogger } from '@zhin.js/logger';
-import { verifyMilkyAccessToken } from './milky-auth.js';
 import { createMilkyEndpointManagement } from './endpoint-management.js';
 import { createMilkyActionCaller, readMilkyResponse, milkyClientOptions, forwardMilkyClientEvents, MilkyClient } from './client.js';
-import { buildSendAction, callApi, extractInboundAudioUrl, formatInboundContent, formatInboundMessageId, formatInboundSegments, formatOutboundMessageId, formatOutboundSegments, isMentioned, milkyInboundConversation, parseMessageReceiveData, parseMilkyMessageId, senderNickname, } from './protocol.js';
+import { buildSendAction, callApi, extractInboundAudioUrl, formatInboundContent, formatInboundMessageId, formatInboundSegments, formatOutboundMessageId, formatOutboundSegments, isMentioned, milkyInboundConversation, milkySenderStanding, parseMessageReceiveData, parseMilkyMessageId, senderNickname, } from './protocol.js';
+import { socketOfConnection } from './ws-types.js';
 const WS_OPEN = 1;
 export class MilkyWssEndpoint extends MilkyClient {
     [endpointSpec];
@@ -61,7 +62,17 @@ export class MilkyWssEndpoint extends MilkyClient {
         if (this.#started)
             return;
         this.#started = true;
-        const handle = this.#options.http.ws(this.#options.config.path);
+        if (!this.#options.config.access_token) {
+            // 未配 access_token 时只接受本机回环连接（verifyProtocolAccessToken）。
+            this.#logger.warn(formatCompact({
+                endpoint: this.#options.config.id,
+                mode: 'wss',
+                ok: false,
+                error: 'missing access_token: only loopback peers are accepted',
+            }));
+        }
+        // The peer authenticates with this endpoint's own access_token, not a Console credential.
+        const handle = this.#options.http.ws(this.#options.config.path, { auth: 'protocol' });
         this.#wsRelease = handle.onConnection((connection) => {
             this.#connectionTask = this.#connectionTask
                 .then(() => this.#acceptConnection(connection))
@@ -137,6 +148,7 @@ export class MilkyWssEndpoint extends MilkyClient {
         const segments = formatInboundSegments(data);
         const audioUrl = extractInboundAudioUrl(data);
         const nickname = senderNickname(data);
+        const platform = milkySenderStanding(data);
         const mentioned = isMentioned(data, event.self_id);
         void this[endpointSpec].events.message({
             event,
@@ -145,7 +157,7 @@ export class MilkyWssEndpoint extends MilkyClient {
             message: { conversation, id: formatInboundMessageId(data) },
             content,
             segments,
-            sender: { id: String(data.sender_id) },
+            sender: { id: String(data.sender_id), ...(platform ? { platform } : {}) },
             endpointId: this.#options.config.id,
             ...(mentioned ? { mentioned: true } : {}),
             metadata: Object.freeze({
@@ -166,11 +178,11 @@ export class MilkyWssEndpoint extends MilkyClient {
         });
     }
     async #acceptConnection(connection) {
-        if (!verifyMilkyAccessToken(this.#options.config.access_token, connection.request)) {
-            connection.socket.close(4003, 'Unauthorized');
+        if (!verifyProtocolAccessToken(this.#options.config.access_token, connection)) {
+            connection.close(4003, 'Unauthorized');
             return;
         }
-        const socket = connection.socket;
+        const socket = socketOfConnection(connection);
         await this.#connectionLifecycle.stop();
         await this.#connectionLifecycle.start(async (lifecycleHandle) => {
             this.#ws = socket;
@@ -190,15 +202,7 @@ export class MilkyWssEndpoint extends MilkyClient {
                 if (this.#ws === socket)
                     this.#ws = undefined;
             });
-            this.#connectionLifecycle.startHeartbeat(() => {
-                try {
-                    if (socket.readyState === WS_OPEN)
-                        socket.ping?.();
-                }
-                catch {
-                    /* ignore */
-                }
-            }, this.#options.config.heartbeat_interval);
+            // Dead-peer detection is the Host transport's keepalive (protocol ping / pong).
             socket.on('message', () => {
                 this.#connectionLifecycle.notifyHeartbeatAck();
             });
@@ -215,7 +219,7 @@ export class MilkyWssEndpoint extends MilkyClient {
         this.#logger.debug(formatCompact({
             endpoint: this.#options.config.id,
             mode: 'wss',
-            peer: connection.request.socket.remoteAddress,
+            peer: connection.remoteAddress,
         }));
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/adapter-milky",
-  "version": "1.1.26",
+  "version": "1.1.27",
   "description": "Zhin.js Milky adapter for Plugin Runtime (WebSocket client)",
   "type": "module",
   "main": "./lib/index.js",
@@ -19,7 +19,6 @@
     "schema.json",
     "src",
     "lib",
-    "skills",
     "README.md",
     "CHANGELOG.md",
     "PERMITS.md"
@@ -36,53 +35,42 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/zhinjs/zhin",
+    "url": "git+https://github.com/zhinjs/zhin.git",
     "directory": "plugins/adapters/milky"
   },
   "dependencies": {
     "@imhelper/milky-v1": "1.0.7",
     "imhelper": "1.0.7",
     "ws": "^8.21.1",
-    "@zhin.js/adapter": "1.1.32",
-    "@zhin.js/console-contract": "1.1.5",
-    "@zhin.js/core": "1.1.60",
-    "@zhin.js/feature-kit": "1.1.15",
-    "@zhin.js/host-http": "1.1.17",
-    "@zhin.js/im-contract": "1.1.13",
-    "@zhin.js/logger": "1.1.2",
-    "@zhin.js/page": "1.1.17",
-    "@zhin.js/skill": "1.1.16"
+    "@zhin.js/adapter": "1.1.33",
+    "@zhin.js/console-contract": "1.1.6",
+    "@zhin.js/core": "1.2.0",
+    "@zhin.js/feature-kit": "1.1.16",
+    "@zhin.js/host-http": "1.2.0",
+    "@zhin.js/im-contract": "1.1.14",
+    "@zhin.js/logger": "1.1.3",
+    "@zhin.js/page": "1.1.18"
   },
   "devDependencies": {
     "@types/node": "^26.1.2",
     "@types/ws": "^8.18.1",
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
-    "zod": "^4.4.3",
-    "@zhin.js/agent": "1.1.51",
-    "@zhin.js/host-http": "1.1.17",
-    "zhin.js": "1.1.25"
+    "@zhin.js/host-http": "1.2.0",
+    "zhin.js": "1.1.26"
   },
   "peerDependencies": {
-    "zod": "^4.0.0",
-    "@zhin.js/adapter": "^1.1.32",
-    "@zhin.js/agent": "^1.1.51",
-    "@zhin.js/command": "^1.1.17",
-    "@zhin.js/core": "^1.1.60",
-    "zhin.js": "^1.1.25"
+    "@zhin.js/adapter": "^1.1.33",
+    "@zhin.js/command": "^1.2.0",
+    "@zhin.js/core": "^1.2.0",
+    "zhin.js": "^1.1.26"
   },
   "peerDependenciesMeta": {
-    "@zhin.js/agent": {
-      "optional": true
-    },
     "@zhin.js/command": {
       "optional": true
     },
     "zhin.js": {
       "optional": true
-    },
-    "zod": {
-      "optional": true
     }
   },
   "author": {
@@ -112,10 +100,6 @@
         "package": "@zhin.js/command",
         "api": "^1.0.0"
       },
-      {
-        "package": "@zhin.js/skill",
-        "api": "^1.0.0"
-      },
       {
         "package": "@zhin.js/page",
         "api": "^1.0.0"
@@ -126,6 +110,6 @@
   "scripts": {
     "build": "tsc",
     "clean": "rimraf lib",
-    "test": "NODE_OPTIONS=--experimental-strip-types vitest run --root ../../.. plugins/adapters/milky/tests"
+    "test": "vitest run --root ../../.. plugins/adapters/milky/tests"
   }
 }

package/schema.json

@@ -22,34 +22,6 @@
       "type": "number",
       "default": 30000
     },
-    "master": {
-      "type": [
-        "string",
-        "number"
-      ],
-      "description": "框架 master（QQ uin；AI/工具权限、endpoint 管理）。endpoints[i].master 可逐项覆盖",
-      "x-i18n": {
-        "en": {
-          "description": "Framework masters (QQ uin; AI/tool permissions and endpoint management). endpoints[i].master can override this value."
-        }
-      }
-    },
-    "trusted": {
-      "type": "array",
-      "items": {
-        "type": [
-          "string",
-          "number"
-        ],
-        "description": "Trusted QQ uin"
-      },
-      "description": "框架 trusted 用户列表（弱于 master）。endpoints[i].trusted 可逐项追加",
-      "x-i18n": {
-        "en": {
-          "description": "Framework trusted users, below master authority. endpoints[i].trusted can add users."
-        }
-      }
-    },
     "endpoints": {
       "type": "array",
       "minItems": 1,
@@ -58,34 +30,6 @@
         "type": "object",
         "additionalProperties": false,
         "properties": {
-          "master": {
-            "type": [
-              "string",
-              "number"
-            ],
-            "description": "本 endpoint 的框架 master（QQ uin）；覆盖顶层 master",
-            "x-i18n": {
-              "en": {
-                "description": "Framework masters for this endpoint (QQ uin), overriding the top-level master list."
-              }
-            }
-          },
-          "trusted": {
-            "type": "array",
-            "items": {
-              "type": [
-                "string",
-                "number"
-              ],
-              "description": "Trusted QQ uin"
-            },
-            "description": "本 endpoint 的 trusted 列表",
-            "x-i18n": {
-              "en": {
-                "description": "Trusted users for this endpoint."
-              }
-            }
-          },
           "connection": {
             "type": "string",
             "enum": [

package/src/endpoint-management.ts

@@ -17,16 +17,49 @@ import {
   type EndpointGroupRequest,
   type PendingRpcRequest,
 } from 'zhin.js/adapter';
+import { standingFromMemberRole, type PlatformStanding, type SelfStandingRequest } from '@zhin.js/im-contract';
 
 /** 管理面只依赖 endpoint 的 callApi（ws/wss/sse/webhook 四种传输各自实现）。 */
 export interface MilkyManagementCaller {
   callApi(request: PendingRpcRequest): Promise<unknown>;
 }
 
+/** How long one `get_login_info` answer is reused (bursts only; see inspectSelfStanding). */
+const SELF_ID_TTL_MS = 5_000;
+
 export function createMilkyEndpointManagement(
   endpoint: MilkyManagementCaller,
 ): EndpointManagement {
+  // The login account can change across reconnects (or a different account on the same
+  // connection), so `get_login_info` is not remembered for the endpoint's lifetime: only briefly,
+  // to coalesce bursts, and never across a failed lookup.
+  let login: { readonly id: string; readonly at: number } | undefined;
+  const loginId = async (signal: AbortSignal | undefined): Promise<string | undefined> => {
+    if (login && Date.now() - login.at < SELF_ID_TTL_MS) return login.id;
+    login = undefined;
+    const info = asRecord(await endpoint.callApi({ action: 'get_login_info', signal }));
+    const id = info.uin ?? info.user_id;
+    const value = (typeof id === 'number' && id > 0) || (typeof id === 'string' && id.trim() !== '' && id !== '0') ? String(id) : undefined;
+    if (value) login = { id: value, at: Date.now() };
+    return value;
+  };
   return Object.freeze<EndpointManagement>({
+    /** ADR 0056 §1: the Bot's own group role (`get_login_info`, then `get_group_member_info` self). */
+    async inspectSelfStanding({ conversation, signal }: SelfStandingRequest): Promise<PlatformStanding | undefined> {
+      if (conversation.kind !== 'group') return undefined;
+      const selfId = await loginId(signal);
+      if (!selfId) return undefined;
+      let data: Record<string, unknown>;
+      try {
+        data = asRecord(await endpoint.callApi({ action: 'get_group_member_info', signal, params: {
+          group_id: toNumberId(conversation.id, 'group_id'), user_id: toNumberId(selfId, 'user_id'), no_cache: true,
+        } }));
+      } catch (error) {
+        login = undefined;
+        throw error;
+      }
+      return standingFromMemberRole(asRecord(data.member).role ?? data.role);
+    },
     async listFriends(request: EndpointManagementRequest = {}): Promise<readonly EndpointFriend[]> {
       const data = asRecord(await endpoint.callApi({ action: 'get_friend_list', signal: request.signal }));
       return toArray(data.friends).map((value) => {

package/src/milky-auth.ts

@@ -1,14 +1,7 @@
-import type { IncomingMessage } from 'node:http';
+import { verifyProtocolAccessToken, type ProtocolAuthRequest } from '@zhin.js/host-http';
 
-export function verifyMilkyAccessToken(accessToken: string | undefined, request: IncomingMessage): boolean {
+export function verifyMilkyAccessToken(accessToken: string | undefined, request: ProtocolAuthRequest): boolean {
+  // Webhook semantics: no configured token admits any caller (reverse sockets use verifyProtocolAccessToken).
   if (!accessToken) return true;
-  const auth = request.headers.authorization ?? '';
-  if (auth === `Bearer ${accessToken}`) return true;
-  try {
-    const url = new URL(request.url ?? '/', 'http://localhost');
-    if (url.searchParams.get('access_token') === accessToken) return true;
-  } catch {
-    /* ignore */
-  }
-  return false;
+  return verifyProtocolAccessToken(accessToken, request);
 }

package/src/protocol.ts

@@ -5,7 +5,7 @@ import type { EndpointProfileConfiguration } from 'zhin.js/adapter';
  * Spec: https://milky.ntqqrev.org/
  */
 
-import { EndpointDeliveryError, isMediaRef, type ConversationRef } from '@zhin.js/im-contract';
+import { EndpointDeliveryError, isMediaRef, type ConversationRef, type PlatformStanding } from '@zhin.js/im-contract';
 import type { Segment } from '@zhin.js/core/runtime';
 import { formatCompact, getLogger } from '@zhin.js/logger';
 
@@ -405,6 +405,16 @@ export function extractInboundAudioUrl(data: MilkyIncomingMessage): string | und
 }
 
 /** 发送者显示名（群名片/群昵称/好友昵称）；没有可靠的显示名时返回 undefined。 */
+/**
+ * ADR 0056 §1：群消息 `group_member.role`（owner / admin / member）→ `sender.platform.standing`。
+ * 私聊 / 临时会话与未知角色词不上报；Milky 没有平台原生角色与权限位。
+ */
+export function milkySenderStanding(data: MilkyIncomingMessage): PlatformStanding | undefined {
+  if (data.message_scene !== 'group') return undefined;
+  const role = data.group_member?.role;
+  return role === 'owner' || role === 'admin' || role === 'member' ? { standing: role } : undefined;
+}
+
 export function senderNickname(data: MilkyIncomingMessage): string | undefined {
   const isGroup = data.message_scene === 'group';
   const name = isGroup

package/src/sse-client.ts

@@ -10,8 +10,15 @@ export interface SseClientOptions {
   readonly onMessage: (data: string) => void;
   readonly onError?: (error: Error) => void;
   readonly onOpen?: () => void;
+  /** Abort and report an error when no bytes arrive for this long (default 5 min; 0 disables). */
+  readonly idleTimeoutMs?: number;
+  /** Abort and report an error when an unterminated frame grows past this many characters (default 8 Mi). */
+  readonly maxBufferLength?: number;
 }
 
+export const SSE_DEFAULT_IDLE_TIMEOUT_MS = 300_000;
+export const SSE_DEFAULT_MAX_BUFFER_LENGTH = 8 * 1024 * 1024;
+
 export interface SseClientHandle {
   readonly closed: Promise<void>;
   close(): void;
@@ -23,6 +30,20 @@ export function openSseStream(options: SseClientOptions): SseClientHandle {
   let settle!: () => void;
   const closed = new Promise<void>((resolve) => { settle = resolve; });
 
+  const idleTimeoutMs = options.idleTimeoutMs ?? SSE_DEFAULT_IDLE_TIMEOUT_MS;
+  const maxBufferLength = options.maxBufferLength ?? SSE_DEFAULT_MAX_BUFFER_LENGTH;
+  let idleTimer: ReturnType<typeof setTimeout> | undefined;
+  // Set before aborting our own controller so the abort is still reported as an error.
+  let failure: Error | undefined;
+  const armIdleTimer = (): void => {
+    if (idleTimeoutMs <= 0) return;
+    clearTimeout(idleTimer);
+    idleTimer = setTimeout(() => {
+      failure = new Error(`SSE idle for ${idleTimeoutMs}ms`);
+      controller.abort();
+    }, idleTimeoutMs);
+  };
+
   const run = async (): Promise<void> => {
     try {
       const response = await fetchImpl(options.url, {
@@ -43,20 +64,30 @@ export function openSseStream(options: SseClientOptions): SseClientHandle {
       const reader = response.body.getReader();
       const decoder = new TextDecoder();
       let buffer = '';
+      armIdleTimer();
       while (true) {
         const { done, value } = await reader.read();
         if (done) break;
+        armIdleTimer();
         buffer += decoder.decode(value, { stream: true });
         buffer = consumeSseBuffer(buffer, options.onMessage);
+        if (buffer.length > maxBufferLength) {
+          throw new Error(`SSE frame exceeds ${maxBufferLength} characters`);
+        }
       }
       buffer += decoder.decode();
       consumeSseBuffer(`${buffer}\n\n`, options.onMessage);
     } catch (error) {
-      if (!controller.signal.aborted) {
+      if (failure) {
+        options.onError?.(failure);
+      } else if (!controller.signal.aborted) {
         const err = error instanceof Error ? error : new Error(String(error));
         options.onError?.(err);
       }
     } finally {
+      clearTimeout(idleTimer);
+      // Release the connection after an oversize frame; a no-op when already closed.
+      controller.abort();
       settle();
     }
   };
@@ -71,12 +102,24 @@ export function openSseStream(options: SseClientOptions): SseClientHandle {
   };
 }
 
+/**
+ * Normalize CRLF / lone CR line endings to LF (all three are valid in
+ * `text/event-stream`). A trailing CR is kept: it may be half of a CRLF split
+ * across chunks.
+ */
+function normalizeSseNewlines(buffer: string): string {
+  if (!buffer.includes('\r')) return buffer;
+  const tail = buffer.endsWith('\r') ? '\r' : '';
+  const body = tail ? buffer.slice(0, -1) : buffer;
+  return body.replace(/\r\n?/g, '\n') + tail;
+}
+
 /** Exported for unit tests. */
 export function consumeSseBuffer(
   buffer: string,
   onMessage: (data: string) => void,
 ): string {
-  let rest = buffer;
+  let rest = normalizeSseNewlines(buffer);
   while (true) {
     const sep = rest.indexOf('\n\n');
     if (sep < 0) return rest;

package/src/sse-endpoint.ts

@@ -28,6 +28,7 @@ import {
   formatOutboundSegments,
   isMentioned,
   milkyInboundConversation,
+  milkySenderStanding,
   parseMessageReceiveData,
   parseMilkyMessageId,
   senderNickname,
@@ -170,6 +171,7 @@ export class MilkySseEndpoint extends MilkyClient implements Endpoint {
     const segments = formatInboundSegments(data);
     const audioUrl = extractInboundAudioUrl(data);
     const nickname = senderNickname(data);
+    const platform = milkySenderStanding(data);
     const mentioned = isMentioned(data, event.self_id);
     void this[endpointSpec].events.message({
       event,
@@ -178,7 +180,7 @@ export class MilkySseEndpoint extends MilkyClient implements Endpoint {
       message: { conversation, id: formatInboundMessageId(data) },
       content,
       segments,
-      sender: { id: String(data.sender_id), name: nickname },
+      sender: { id: String(data.sender_id), name: nickname, ...(platform ? { platform } : {}) },
       endpointId: this.#options.config.id,
       ...(mentioned ? { mentioned: true } : {}),
       metadata: Object.freeze({

package/src/webhook-endpoint.ts

@@ -2,7 +2,6 @@ import { createMilkySelfProfile } from './self-profile.js';
 /**
  * Milky webhook endpoint — httpHostToken POST inbound + baseUrl HTTP API outbound.
  */
-import type { IncomingMessage, ServerResponse } from 'node:http';
 import { acceptHttpIngress } from 'imhelper';
 import {
   createEndpointSpecification, endpointSpec, type Endpoint, type EndpointSpecification,
@@ -28,6 +27,7 @@ import {
   formatOutboundSegments,
   isMentioned,
   milkyInboundConversation,
+  milkySenderStanding,
   parseMessageReceiveData,
   parseMilkyMessageId,
   senderNickname,
@@ -150,6 +150,7 @@ export class MilkyWebhookEndpoint extends MilkyClient implements Endpoint {
     const segments = formatInboundSegments(data);
     const audioUrl = extractInboundAudioUrl(data);
     const nickname = senderNickname(data);
+    const platform = milkySenderStanding(data);
     const mentioned = isMentioned(data, event.self_id);
     void this[endpointSpec].events.message({
       event,
@@ -158,7 +159,7 @@ export class MilkyWebhookEndpoint extends MilkyClient implements Endpoint {
       message: { conversation, id: formatInboundMessageId(data) },
       content,
       segments,
-      sender: { id: String(data.sender_id), name: nickname },
+      sender: { id: String(data.sender_id), name: nickname, ...(platform ? { platform } : {}) },
       endpointId: this.#options.config.id,
       ...(mentioned ? { mentioned: true } : {}),
       metadata: Object.freeze({
@@ -182,34 +183,26 @@ export class MilkyWebhookEndpoint extends MilkyClient implements Endpoint {
   #setupRoutes(): void {
     const path = this.#options.config.path;
     this.#routeReleases.push(
-      this.#options.http.route('POST', path, async (request, response) => {
-        await this.#handleWebhook(request, response);
-      }, { summary: 'Milky webhook callback', tags: ['milky'] }),
+      this.#options.http.route('POST', path, (request) => this.#handleWebhook(request), { summary: 'Milky webhook callback', tags: ['milky'] }),
     );
   }
 
-  async #handleWebhook(request: IncomingMessage, response: ServerResponse): Promise<void> {
+  async #handleWebhook(request: Request): Promise<Response> {
     try {
       if (!verifyMilkyAccessToken(this.#options.config.access_token, request)) {
-        response.writeHead(403, { 'Content-Type': 'application/json' });
-        response.end(JSON.stringify({ message: 'Unauthorized' }));
-        return;
+        return new Response(JSON.stringify({ message: 'Unauthorized' }), { status: 403, headers: { 'Content-Type': 'application/json' } });
       }
       if (!this.#open) {
-        response.writeHead(200, { 'Content-Type': 'application/json' });
-        response.end(JSON.stringify({ status: 'ok' }));
-        return;
+        return new Response(JSON.stringify({ status: 'ok' }), { status: 200, headers: { 'Content-Type': 'application/json' } });
       }
-      await acceptHttpIngress<MilkyEvent>(request, response, event => {
+      const result = await acceptHttpIngress<MilkyEvent>(request, undefined, event => {
         void this[endpointSpec].events.run(() => this.ingest(event as Parameters<MilkyClient['ingest']>[0]))
           .catch(error => this.#warnPlatformEvent(error));
       });
+      return new Response(JSON.stringify(result.body), { status: result.status, headers: result.headers });
     } catch (error) {
       this.#logger.error('Milky webhook error:', error);
-      if (!response.headersSent) {
-        response.writeHead(500, { 'Content-Type': 'application/json' });
-        response.end(JSON.stringify({ message: 'Internal Server Error' }));
-      }
+      return new Response(JSON.stringify({ message: 'Internal Server Error' }), { status: 500, headers: { 'Content-Type': 'application/json' } });
     }
   }
 }

package/src/ws-endpoint.ts

@@ -34,6 +34,7 @@ import {
   formatOutboundSegments,
   isMentioned,
   milkyInboundConversation,
+  milkySenderStanding,
   parseMessageReceiveData,
   parseMilkyMessageId,
   senderNickname,
@@ -183,6 +184,7 @@ export class MilkyWsEndpoint extends MilkyClient implements Endpoint {
     const segments = formatInboundSegments(data);
     const audioUrl = extractInboundAudioUrl(data);
     const nickname = senderNickname(data);
+    const platform = milkySenderStanding(data);
     const mentioned = isMentioned(data, event.self_id);
     void this[endpointSpec].events.message({
       event,
@@ -191,7 +193,7 @@ export class MilkyWsEndpoint extends MilkyClient implements Endpoint {
       message: { conversation, id: formatInboundMessageId(data) },
       content,
       segments,
-      sender: { id: String(data.sender_id), name: nickname },
+      sender: { id: String(data.sender_id), name: nickname, ...(platform ? { platform } : {}) },
       endpointId: this.#options.config.id,
       ...(mentioned ? { mentioned: true } : {}),
       metadata: Object.freeze({

package/src/ws-types.ts

@@ -1,3 +1,5 @@
+import type { WsConnection } from '@zhin.js/host-http';
+
 /** Minimal WS surface used by the endpoint (real `ws` or test mock). */
 export interface MilkyWsSocket {
   readonly readyState: number;
@@ -10,3 +12,34 @@ export interface MilkyWsSocket {
 export interface MilkyWsCreateOptions {
   readonly headers?: Record<string, string>;
 }
+
+/**
+ * A Host reverse-WebSocket connection seen through the MilkyWsSocket surface. Protocol
+ * keepalive (ping / pong) belongs to the Host transport, so `ping` is absent.
+ */
+export function socketOfConnection(connection: WsConnection): MilkyWsSocket {
+  let readyState = 1;
+  connection.onClose(() => { readyState = 3; });
+  const subscriptions = new Map<(...args: unknown[]) => void, () => void>();
+  const off = (_event: string, listener: (...args: unknown[]) => void): void => {
+    subscriptions.get(listener)?.();
+    subscriptions.delete(listener);
+  };
+  return {
+    get readyState() { return readyState; },
+    send: (data: string) => connection.send(data),
+    close: (code?: number, reason?: string) => connection.close(code, reason),
+    on(event: string, listener: (...args: unknown[]) => void) {
+      if (event === 'message') {
+        subscriptions.set(listener, connection.onMessage((data) => {
+          listener(typeof data === 'string' ? data : Buffer.from(data));
+        }));
+      } else if (event === 'close') {
+        subscriptions.set(listener, connection.onClose((code, reason) => listener(code, reason)));
+      }
+      // 'error' surfaces as a close on a WsConnection; 'open' already happened.
+    },
+    off,
+    removeListener: off,
+  } as MilkyWsSocket;
+}