@zhin.js/adapter-onebot11 1.1.26 → 1.1.27

package/CHANGELOG.md

@@ -1,5 +1,157 @@
 # @zhin.js/adapter-onebot11
 
+## 1.1.27
+
+### Patch Changes
+
+- c606d51: 各适配器按平台能力上报入站发送者的 `sender.platform`（ADR 0056 §1），并在能力画像 `scene.platformStanding` 中声明：OneBot11、NapCat、Milky、ICQQ 群消息上报群主 / 管理员 / 成员；QQ 官方频道上报频道主 / 超级管理员与身份组；Discord 服务器频道上报所有者 / 管理员 / 成员、身份组与 snake*case 权限位；Telegram 群消息按 `getChatMember` 上报 creator / administrator / member / 已离开，以及管理员的 `can*\*` 权限；KOOK 服务器频道上报服务器主 / 管理员角色、角色列表与权限位；飞书、钉钉群消息上报群主 / 管理员 / 成员；Sandbox 把模拟角色作为平台身份上报，不再授予框架主人角色。Satori、Slack、OneBot12、企业微信、LINE 的事件不带可靠的成员身份，不上报。README 补充「成员身份」说明。
+
+  机器人自身身份（`management.inspectSelfStanding` + 能力画像 `scene.selfStanding`，供 `bot:*` permit）：ICQQ、OneBot11、NapCat、Milky 群（`get_group_member_info` self）；QQ 官方群（`getBotState`）与频道（机器人频道成员身份组）；Discord（`guild.members.me` 身份组与频道权限）；Telegram（`getChatMember` bot）；KOOK（`/v3/user/view` self 的服务器角色与权限位）；飞书（`chat.get` 群主与 `bot_manager_id_list`）。钉钉没有对应接口，不声明。群管理类 Agent 工具补上 `bot:admin` / `bot:owner` / `bot-permission:*`，需要发言者是群管的平台操作改用 `platform:admin` 等。
+
+- 53932e5: 修复平台身份 permit 与操作目标不一致的问题（ADR 0056 §5）：`platform:*` / `platform-permission:*` / `bot:*` / `bot-permission:*` 按**当前会话**判定，但群管理工具此前接受模型传入的任意群 / 服务器 / 频道 ID，机器人同在 A、B 两群当管理员时，A 群管理员可让 Agent 在 B 群踢人。
+
+  - 目标改为取自当前会话、去掉目标 ID 入参（模型传入的 ID 被忽略）：ICQQ（踢人、禁言、设管理员、头衔、公告、匿名；设精华校验消息属于本群）、Telegram（邀请链接、置顶 / 取消置顶、群描述、默认权限）、Discord（加 / 移除身份组、身份组列表、建子线程）、KOOK（黑名单、授予 / 撤销 / 创建 / 删除角色）、飞书（加成员、设 / 撤管理员、改群信息、解散群）、NapCat（群公告、删公告、头衔、群头像；精华消息校验属于本群）、OneBot11（头衔）、QQ 官方频道（身份组增删建与列表、子频道列表、成员详情；子频道详情只限本频道）。核心场景治理工具工厂（`createSceneManagementTools`）同样只作用于调用消息所在会话，没有会话时拒绝；Agent 侧同名工厂改用与核心一致的 `platform:<地位>` + `bot:<地位>`（此前误作 zhin 角色）。
+  - 钉钉群管理接口使用旧版 `chatid`（无法由当前会话推出），`dingtalk_add_chat_members` / `dingtalk_update_chat` 改为要求 zhin `owner`（`update_chat` 此前没有任何门禁）；`dingtalk_create_chat` 改为要求 zhin `trusted`（`admin` / `owner` 亦满足），不再依赖钉钉从不上报的 `platform-permission:chat_owner`。
+  - Slack 不上报发言者平台身份，频道工具改用 zhin 角色并只作用于当前频道：话题、用途、邀请、置顶 / 取消置顶要求 `admin`，归档 / 恢复归档要求 `owner`；`PERMITS.md` 同步修正。
+  - Discord：加 / 移除身份组要求目标身份组低于发起者的最高身份组（服务器主豁免；托管身份组拒绝），低位 `manage_roles` 管理员不能借机器人给自己加更高身份组。平台权限统一为服务器级：机器人自身改读 `GuildMember.permissions`（不再用频道级 `permissionsFor`）；Interactions 模式的位域含频道覆盖，只上报不能被频道覆盖的权限（管理员上报全部），并用最近一次交互的 `app_permissions` 上报机器人自身身份（同一口径，10 分钟内有效）。
+  - Telegram：`set_permissions` 改要求 `platform-permission:restrict_members`，`set_description` 改 `change_info`，`create_invite` 改 `invite_users`；发送者 `getChatMember` 并发合并为一次、失败负缓存 10 秒，收到 `chat_member` / `my_chat_member` 更新时以新状态覆盖缓存（默认 `allowedUpdates` 增加这两项）；restricted 成员的个人 `can_*` 不再作为平台权限上报（与普通成员一致，只有管理员上报权限）。
+  - KOOK：服务器主与持有「管理员」位的成员（含机器人自身）展开为全部权限；并入「全体成员」（role_id 0）的基础权限。
+  - 飞书：`chat.get` 失败或未返回 `owner_id` 时发送者 / 机器人地位为未知（不再报确定的 `member` 并缓存 60 秒），失败负缓存 10 秒。
+  - QQ 官方：发送者平台身份只在频道子频道上报（群、单聊、频道私信不上报）。
+  - `AdapterIndex.selfStanding`：共享查询使用独立的 10 秒期限，调用方的 `signal` 只中止自己的等待，不再取消他人共享的查询或把结果缓存为未知；查询期间被 `invalidateSelfStanding` 失效时不写回旧结果。
+  - OneBot11 / NapCat / Milky：机器人自身身份不再永久记住首次 `get_login_info` 的账号（重连或换号后刷新；只为合并突发请求复用 5 秒，查询失败即丢弃）。
+  - 删除遗留导出（生成永不匹配的 permit 或已不再注册）：`discordGroupPermitResolver` / `checkDiscordPlatformPermit` / `normalizeDiscordSenderForPermit`、`telegramGroupPermitResolver` / `checkTelegramPlatformPermit` / `normalizeTelegramChatMember`、`kookGroupPermitResolver` / `checkKookPlatformPermit` / `normalizeKookSenderForPermit` / `KookSenderInfo`、`larkGroupPermitResolver` / `checkLarkPlatformPermit` / `normalizeLarkSenderForPermit`、`slackGroupPermitResolver` / `checkSlackPlatformPermit` / `normalizeSlackSenderForPermit`、`dingtalkGroupPermitResolver` / `checkDingtalkPlatformPermit` / `normalizeDingtalkSenderForPermit`、`wecomGroupPermitResolver` / `checkWecomPlatformPermit` / `normalizeWecomSenderForPermit`、`qqGuildPermitResolver` / `checkQqPlatformPermit` / `normalizeQqGuildSenderForPermit`。permit 一律交给内置评估器（`@zhin.js/permission`），`platformPermit()` 仍保留；各适配器 `PERMITS.md` 按实际上报的字段重写。
+
+- 57c6cdc: fix: 全仓审计修复
+
+  - kernel: 模板求值沙箱不再泄漏宿主对象——宿主函数的返回值与抛出的错误会重新包裹代理（`segments.map(x=>x).constructor.constructor(...)` 之前可拿到宿主 `Function`），并禁止通过代理写入/删除宿主属性。
+  - agent: exec 白名单正则按整体锚定（`git|npm` 不再匹配 `gitevil`）；SSRF 主机名黑名单识别尾点形式（`localhost.`）；Docker 沙箱 `always` 模式的 fail-closed 分支可被触达；声明缺失的 `chalk` 依赖。
+  - ai: 摘要按最新优先加载（超过 500 条时不再使用过期锚点）；修复 `test` 脚本指向不存在的配置。
+  - cli: `ZHIN_LOG_LEVEL` 生效（修复运算符优先级）；移除旧守护进程遗留的无引用进程辅助函数。
+  - logger: `formatCompact` 不再把 `config: 'yaml'`、`direction: 'in'` 这类非路径值改写成 `./yaml`。
+  - host-http: 未配置数据库时 `db:tables` 与有数据库时一致返回 `{ tables }`。
+  - a2a: 405 响应把 `Allow` 放进响应头。
+  - pagemanager: 内联进 `<script>` 的页面元数据转义 `<`。
+  - client: 事件历史请求失败时携带 HTTP 状态，token 失效可触发重新登录。
+  - scaffold-wizard / create-zhin-app: 修正适配器文档 URL 与模板里的 `@zhin.js/tool` 导入。
+  - adapter-wechat-mp: 签名比较改为常量时间。
+  - adapter-kook: 声明运行时依赖 `ws`。
+  - plugin-lottery: 遗漏值按最近一次出现计算；推送目标 schema 字段与实现一致（`endpointKey`）。
+  - plugin-code-runner: 语言校验改用自有属性判断。
+  - plugin-link-poster: 抓取前校验主机名白名单（修复 SSRF），超时覆盖响应体读取。
+  - 其余包：从 `files` 中移除不存在的目录。
+  - feature-kit / middleware: 修正 README 中层级错误的文档链接。
+
+- e1fda87: fix: 按审计待审清单处理（安全、功能、清理）
+
+  **行为变更（升级前请阅读）**
+
+  - kernel / core / zhin.js：出站文本中的 `${…}` 不再用 `vm` 求值，只替换 `TemplateContext` 上能解析到值的属性路径（如 `${sender.name}`）；表达式、函数调用、未知名字原样保留。整套 vm 沙箱（`evaluate` / `execute` / `compiler` / `getValueWithRuntime`）已移除。
+  - kernel / core / zhin.js：移除零引用的遗留导出——`Scheduler`、错误管理器与 `ZhinError` 子类、`compose`、`segment.from/toString`、AI 触发/准入函数、`@zhin.js/core/queue-im-field-contract`、`zhin.js/contexts`。
+  - agent：readonly 执行预设不再放行重定向、后台 `&`、进程替换、`find -delete/-exec`、`sed -i`、`sort -o`、`tee`、`xargs`、awk；curl/wget 校验每个 URL 与裸主机并识别更多上传参数；自定义 `execAllowlist` 中的只读命令带写入风险时改走审批。沙箱超时/取消会杀掉进程组或具名容器，默认镜像改为 `node:22-bookworm-slim` + `bash`。移除无生产调用的 `AuditLogger`、`AnomalyDetector`、旧 vision 回合等导出。
+  - ai：移除 `storage`、`FileStateCache`、`CostTracker`、`model-name-utils`、`./agent-step-checkpoint` 子路径、`ContextManager` 及旧压缩管线；延迟工具快照改为有界 LRU。
+  - cli：`zhin send` / `watch` / `schedule` 改为与运行中的 Host 通信（新增 `POST /message/send` 与 `/assistant/jobs` 写接口），`schedule` 不再支持离线改文件；移除 `zhin uninstall service`（用 `zhin service uninstall`）、`build --analyze`、`install -S`；`zhin stop` 杀不掉进程时保留 pid 文件并以非零退出；`runtime migrate` 新增 `verify`；未设置 `TZ` 时调度默认时区改为系统时区；不带 `ZHIN_SUPERVISOR_PID` 的进程被 init 接管后不再自行退出。
+  - schedule：后台 reconcile 出错不再产生未处理 rejection（新增 `onStoreError`）；启动途中 `stop()` 不再遗留定时器。
+  - schema：元组校验与 `safeParse`、JSON Schema 一致（空数组不通过，缺省的可选元组为 `undefined`）。
+  - client / contract：删除无后端路由的 agent-stream API、未使用的 `definePage` 与旧 PageManager 类型；`@zhin.js/contract` 不再依赖 `@zhin.js/ai`；客户端收到 401 会清除已保存的凭据；安装/更新/卸载 RPC 默认超时 120 秒。
+  - a2a：流式响应中途出错写入 SSE error 并结束；未配置 token 的非生产环境只接受本机请求；任务存储有上限与过期；Mailbox 凭据回退与生产环境缺密钥检查修复。
+  - speech：`provider: openai` 不再套用 Ollama 的默认 host/model；识别语言改为可配置，不再写死 `zh`。
+  - adapter-lark：支持 `encryptKey` 加密事件解密。adapter-github：Device Flow 可取消、带超时并回复失败原因。adapter-wecom / dingtalk：请求加超时并校验 HTTP 状态。adapter-weixin-ilink：输入关闭期间暂停轮询。adapter-milky：SSE 支持 CRLF、缓冲上限与空闲重连。adapter-onebot-events：好友删除通知改为 `notice.friend.decrease`。
+  - plugin-group-suite：`teachAllowRegex` 默认关闭，正则安全检查更严格。plugin-qrcode：改为本地生成，回复 data URL 图片。plugin-rss / short-url / link-poster：拒绝解析到内网的地址；rss 修复条目每周重复推送；short-url 的 Console 创建改为真实调用 is.gd。plugin-lottery：按 `historyLimit` 同步。
+
+  **其余**
+
+  - host-http：插件市场详情加缓存与包名校验，SSE 回放容忍背压。host-http-contract：新增 `readTextBody()`，九个适配器改用它。
+  - pagemanager：页面外壳 importmap 升级到 React 19.2.8 / react-router 7.12.0。console-contract：`definePage` 接受 `description` / `group` / `parent` / `fullWidth`。
+  - command：进度提示本地化，匹配不再重复拷贝消息段。runtime：源码监听降级后退避重试原生监听。
+  - html-renderer：删除未接线的 `aiTextAsImage`。create-zhin-app / scaffold-wizard：移除不起作用的"全局安装 CLI"与运行时选择提示。
+  - 依赖声明清理、发布清单不再携带解析不到的 `src` 目录、移除未使用的 Skill 挂载、README 与示例配置按当前实现更正。
+
+- 120e225: 聊天角色（ADR 0056，2026-11-12 修订）：zhin 角色 owner / admin / trusted 分四级、只来自授予；发言者的平台身份与机器人自身的平台身份是独立维度，命令、Agent 工具 / 技能、中间件与按钮按三条维度共用一个评估器过滤。升级说明见 docs/migrations/chat-roles.md。
+
+  - zhin.js：实例首次启动把适配器 `master` / `trusted`、`endpoints[i].master|trusted` 与 `ai.trigger.masters|trusted` 迁入项目数据库 `chat_roles`（先记入 `.zhin/chat-roles-migration.json`，再从配置移除并记日志）；之后配置再出现这些字段时启动报错并指向升级指南。平台身份不再映射为 zhin 角色：删除 `roles.mappings`（适配器块与 `endpoints[i].roles` 出现即启动报错）、`chat_role_mappings` 表与 Console `chat-roles.mappings` / `chat-roles.set-mappings`；`features.selfService.platformAdmins|roles|allowUsers` 删除；群内「功能」「角色」命令只认 zhin 角色，平台群主不再自动具备；聊天改配置、聊天重启、Agent 主人审批按 zhin `owner` 判断。
+  - @zhin.js/core（minor，破坏性）：角色模型与解析移入 core（`ChatRoleService`、`createChatRoleSenderEnricher`），入站消息带 `sender.chatRole` 与归一的 `sender.platform`；删除 `SenderRole`、`senderRolesFromMessage`、`roleSatisfies` 等，`master` 改名 `owner`；删除映射规则 API（`createMappingChatRoleSource`、`DEFAULT_CHAT_ROLE_MAPPINGS` 等）与 `ChatRoleSource`；`createSenderEnricher` / `createConfigurationChatAuthorizer` 改为基于聊天角色。IM Runtime 为 PermissionHost 提供机器人自身身份（经 Adapter 索引缓存），机器人的角色变化事件使缓存失效；命令拒绝回复说明缺少的平台 / 机器人条件；`<Button permit>` 按点击者鉴权；场景治理工具工厂同时要求 `platform:*` 与 `bot:*`；`ai.trigger.masters|trusted` 删除。
+  - @zhin.js/permission（minor，破坏性）：permit 语法 `owner` / `admin` / `trusted` / `role(...)`（zhin 角色）、`platform:owner|admin`、`platform-role:<id>`、`platform-permission:<name>`（发言者平台身份），新增 `bot:owner|admin`、`bot-role:<id>`、`bot-permission:<name>`（机器人自身平台身份，`PermissionSubject.bot`）；`PermissionHost` 新增 `setBotStandingResolver`、`withBotStanding`、`firstDenied`，`checkAll` 可带 `source` 解析机器人身份；新增 `describeDeniedPermit`、`permitsNeedBotStanding`。删除 `role(master)`、`scene_admin`、`scene_owner`、`platform(adapter,perm)` 及 `registerPlatform`、`createSceneRolePlatformChecker`、`platformPermission`、`definePlatformPermission`，定义时报错并给出替代写法。
+  - @zhin.js/command（minor，破坏性）：命令会话的发送者改为 `chatRole` / `platform`，不再从 metadata 读角色；`CONVERSATION_MANAGER_PERMIT` 改为 `admin`（平台群主不再自动满足）；分发结果 `denied` 带 `denial`（第一条不满足的规则与原因）；指令菜单只列出当前发送者在本会话可用的命令。
+  - @zhin.js/agent（minor，破坏性）：危险工具、文件 / exec 策略、主人审批、Agent 回合主体只读 zhin 角色（`principal.roles` 只含展开的聊天角色，平台地位在 `principal.platform`）；`SenderRole` → `PrincipalRole`，`SELF_CHANGE_MASTER_ROLE` → `SELF_CHANGE_OWNER_ROLE`；回合开始时读取机器人自身身份（`contextState.bot.platform`），按三条维度过滤 tool / skill / Agent 包后才披露，执行工具时再校验一次；群规「群主和管理员豁免」改为平台群主 / 管理员与 zhin `owner`。
+  - @zhin.js/feature-kit：`OperationSession.sender` 改为 `chatRole` / `platform`。
+  - @zhin.js/im-contract：新增 `PlatformStanding`、`SelfStandingRequest`、`standingFromMemberRole`。
+  - @zhin.js/adapter：入站 sender 可带 `platform`；账号管理命令需要聊天角色 `owner`；`EndpointManagement` 新增可选 `inspectSelfStanding`，能力画像新增 `scene.selfStanding`（声明即须实现），`AdapterIndex.selfStanding` / `invalidateSelfStanding` 按会话缓存机器人自身身份。
+  - @zhin.js/middleware：入站中间件可声明 `permit`，不满足时跳过该中间件（机器人身份只读缓存）。
+  - @zhin.js/tool：定义工具时拒绝已移除的 permit 写法。
+  - @zhin.js/ai：注释更新。
+  - @zhin.js/console-protocol：`chat-roles.list|grant|revoke`（`iam.manage`）；`ConsoleChatRoleSource` 只有 `grant`。
+  - @zhin.js/runtime：Host 配置 Schema 删除 `features.selfService.platformAdmins|roles|allowUsers`。
+  - @zhin.js/testing：伪造消息与 `PluginTestKit` 用 `sender.chatRole` 声明测试身份。
+  - @zhin.js/scaffold-wizard：ICQQ 向导不再写 `master`，完成后提示在 Console 账号「角色」页签或聊天 `角色 授予` 设置 owner。
+  - 适配器：配置 Schema 删除 `master` / `trusted`（以及预览版的 `roles`）；群管理类工具同时声明发言者条件与机器人条件（如 `platform:admin` + `bot:admin`、`bot-permission:manage_roles`），NapCat / OneBot11 工具不再使用已移除的 `platform(adapter,…)` 写法。
+  - 插件：内容审核以 `inbound.bypass`（permit 列表，默认 `owner` 或 `platform:admin`）取代 `masters` / `inbound.bypassMasters`；群管、音乐、日历、地震、B 站、轮盘赌的权限改用 zhin 角色，订阅类命令只认 zhin `admin` / `owner`。
+
+- c2bbdcf: Console 访问控制（ADR 0049）：用户、角色、会话、API 令牌与审计日志存入项目数据库，每个 Console RPC、`/api` 路由与 Host 鉴权的 WebSocket 都按 `@zhin.js/console-protocol` 的权限表放行，未登记的一律拒绝。
+
+  **破坏性变更**
+
+  - `http.tokens` 与演示模式（`scope: demo` / `user`）删除；配置里仍有 `http.tokens` 时 Host 拒绝启动。Host 配置 Schema 同步删除该字段。
+  - `http.token` 变为初始化令牌：只在创建第一个所有者之前有效，之后在所有接口上被拒绝。
+  - 未在 `CONSOLE_WS_PERMISSIONS` 登记、又使用 Host 鉴权的插件 WebSocket 不再接受 Console 账号；插件自己的 WebSocket 应改用 `ws(path, { auth: 'protocol' })` 并自行校验凭据（新增 `verifyProtocolAccessToken`、`isLoopbackAddress`）。
+  - OneBot 11 / 12、NapCat、Milky 的反向 WebSocket 改为只认适配器自己的 `access_token`；未配置 `access_token` 时只接受本机回环连接。
+  - `zhin doctor --live` 等改从 `ZHIN_CONSOLE_TOKEN` 读取 API 令牌（仍兼容 `ZHIN_HTTP_TOKEN`）。
+
+  **迁移步骤**（详见文档「升级到 Console 访问控制」）
+
+  1. 升级后用 `http.token` 打开 Console 初始化向导创建第一个所有者，或运行 `zhin console init`（脚本：`zhin console init --yes --owner <名> --password-stdin`）。
+  2. 删除配置里的 `http.tokens`，在 Console「访问控制」里为原来的令牌持有人创建用户并绑定角色（`viewer` / `operator` / `admin`）；演示环境改用 `viewer` 账号。
+  3. 自动化在 Console 签发 API 令牌，放进 `ZHIN_CONSOLE_TOKEN`。
+  4. 从其他机器或容器连接的反向 WebSocket endpoint 补上 `access_token`。
+  5. 忘记密码或所有者被锁时，停下 Host，用 `zhin console user passwd|enable|create` 离线恢复。
+
+  MCP / A2A 的 Bearer 访问同样接受用户 API 令牌（分别需要 `mcp.access`、`a2a.access`）。适配器与插件文档同步改为账号与角色的说法。
+
+- 5cd9d3d: HTTP 路由契约改为 Web 标准 `Request` / `Response`（ADR 0054 §2，B1.0）
+
+  - host-http-contract：路由处理函数签名改为 `(request, context) => Response`，`context` 提供 `url`、`params`、`principal`、`remoteAddress`；新增 `readBodyBytes` / `readTextBody` / `readJsonBody`（带大小上限，超限先读完再报 413）、`jsonResponse` / `emptyResponse`、带背压的 `createResponseStream`（SSE、大文件下载）与 `WsConnection`。契约不再引用 `node:http` / `ws`。
+  - host-http：Node 服务器移到 `@zhin.js/host-http/node`（`createHttpHost`），负责 Node 请求与 `Request` / `Response` 的互转；认证结果经 `context.principal` 传给路由，删除旧的按请求取主体的辅助函数；未预期的异常只返回通用错误信息，细节写日志。
+  - runtime、mcp、a2a、gateway、zhin.js、calendar 插件与各适配器的 Webhook / 反向 WebSocket 路由迁移到新契约，行为不变。
+
+- 68659cd: `zod` 改为运行时依赖（原为可选对等依赖）：插件运行时在启动时就会加载这些包的约定目录（Agent 工具、命令等），其中静态导入了 `zod`；生成的项目里没有安装可选对等依赖，启动会报 `Cannot find package 'zod'`。范围为 `^4.6.7`（已修复的版本）。
+- Updated dependencies [53932e5]
+- Updated dependencies [57c6cdc]
+- Updated dependencies [e1fda87]
+- Updated dependencies [4e8ba38]
+- Updated dependencies [a9c7a13]
+- Updated dependencies [120e225]
+- Updated dependencies [c2bbdcf]
+- Updated dependencies [c2bbdcf]
+- Updated dependencies [63595fc]
+- Updated dependencies [fd055d2]
+- Updated dependencies [4e8ba38]
+- Updated dependencies [cc7a5f9]
+- Updated dependencies [4e8ba38]
+- Updated dependencies [f8bf684]
+- Updated dependencies [e0bc008]
+- Updated dependencies [5cd9d3d]
+- Updated dependencies [5cd9d3d]
+- Updated dependencies [c2bbdcf]
+- Updated dependencies [f8bf684]
+- Updated dependencies [663473b]
+- Updated dependencies [c606d51]
+- Updated dependencies [5cd9d3d]
+- Updated dependencies [d655ef0]
+- Updated dependencies [1e54b1e]
+  - @zhin.js/adapter@1.1.33
+  - @zhin.js/core@1.2.0
+  - @zhin.js/logger@1.1.3
+  - @zhin.js/host-http@1.2.0
+  - @zhin.js/feature-kit@1.1.16
+  - @zhin.js/adapter-onebot-events@0.0.6
+  - @zhin.js/agent-feature@1.1.17
+  - @zhin.js/console-contract@1.1.6
+  - @zhin.js/permission@1.2.0
+  - @zhin.js/skill@1.1.17
+  - @zhin.js/tool@1.1.19
+  - @zhin.js/im-contract@1.1.14
+  - @zhin.js/page@1.1.18
+
 ## 1.1.26
 
 ### Patch Changes

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 凉菜
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/PERMITS.md

@@ -6,9 +6,9 @@
 
 ## Permit 词汇表
 
-| `platform(onebot11,…)` | 含义 |
+| `platform-permission:…` | 含义 |
 |------------------------|------|
-| `scene_owner` | 群主 |
-| `scene_admin` | 群管理员（含群主） |
+| `platform:owner` | 群主 |
+| `platform:admin` | 群管理员（含群主） |
 
-工厂工具默认 `scene_admin` / `scene_owner`；扩展工具如 `onebot11_set_title` 使用 `scene_owner`。
+工厂工具默认 `platform:admin` / `platform:owner`；扩展工具如 `onebot11_set_title` 使用 `platform:owner`。

package/README.md

@@ -86,19 +86,19 @@ onebot11:
 | 类别 | 路径 |
 |------|------|
 | Permit 词汇 | `PERMITS.md` |
-| 平台工具 | `tools/set_title/index.ts` → `onebot11_set_title` |
+| 平台工具（1 个） | `agents/onebot11/skills/onebot11/tools/set_title/index.ts` → `onebot11_set_title` |
 | 技能说明 | `agents/onebot11/skills/onebot11/SKILL.md` |
 
 ## 迁移说明（Plugin Runtime）
 
 - **notice / request / meta 侧事件**：经统一 `endpointSpec.events` 归一后分发到 `handlers`；消息仍走 `outboundMessageToken`。
 - **群管工具暂未迁移**：旧 Adapter 经 `createSceneManagementTools` 注册踢人 / 禁言 / 群名片等成套 agent 工具；迁移后仅保留 `onebot11_set_title`，其余群管能力可通过 `$client.call()`（如 `set_group_kick`、`set_group_ban`）作为逃生舱调用。
-- **平台权限门禁**：`plugin.ts` setup 通过 generation-owned `permissionHostToken` 调用 `host.registerPlatform('onebot11', createSceneRolePlatformChecker())`，`scene_admin` / `scene_owner` 依据入站 metadata 中的 sender `role`（owner / admin）判定。
+- **平台权限门禁**：工具 / 命令用内置 permit（ADR 0056 §5）：发言者平台身份 `platform:admin` / `platform:owner` 依据入站 `sender.platform.standing`（owner / admin，见下文「成员身份」）；机器人自身群内身份 `bot:admin` / `bot:owner` 依据 `get_group_member_info`（self）的 `role`（能力画像 `scene.selfStanding`，框架按会话缓存）。群管理类工具同时要求两者。
 
 ## 文档链接
 
 - [OneBot 11 标准](https://github.com/botuniverse/onebot-11)
-- [适配器概览](https://zhin.js.org/essentials/adapters)
+- [适配器概览](https://zhin.js.org/adapters/)
 
 ## Console 页面
 
@@ -108,7 +108,7 @@ onebot11:
 - 经所属 Adapter 增删持久化账号、启停单个 Endpoint；凭据由 Host 加密仓储保存，不改启动 YAML 或 `.env`，不重启进程；
 - 如果适配器要求登录，页面会显示 LoginAssist 的扫码 / 滑块 / 设备确认待办；
 
-读取需要 `onebot11:read`，写操作需要 `onebot11:write`；管理员 full token 不受限。页面里的「添加 endpoint」等价于原来的 `onebot11 endpoint add`。
+读取需要 `onebot11:read`（`read` 级别，内置角色 `viewer` 及以上都有）；增删改账号等写操作需要 `onebot11:write`（`operate` 级别，`operator` 及以上都有，绑定到本适配器的角色也算），首次迁移还需管理员身份；全局所有者不受限，见[插件权限的级别](https://zhin.js.org/console/#插件权限的级别)。页面里的「添加 endpoint」等价于原来的 `onebot11 endpoint add`。
 
 ## 故障排查
 
@@ -126,3 +126,7 @@ MIT License
 ### 高阶消息支持边界
 
 OneBot11 标准支持链接分享：canonical share 的 url/title/description/image 分别映射标准 url/title/content/image，保留标题与描述。具体桥是否实现需实机确认；NapCat 的 share 发送限制不能以标准支持推断通过。标准没有 Markdown 与 keyboard 段，直接出站明确 `unsupported_operation / not_sent`；文字交互降级不能算原生按钮支持。参考：[OneBot11 消息段规范](https://github.com/botuniverse/onebot-11/blob/master/message/segment.md)。
+
+## 成员身份
+
+群消息的 `sender.role`（`owner` / `admin` / `member`）归一为 `sender.platform.standing`；私聊不上报。OneBot v11 没有平台原生角色与权限位，`roles` / `permissions` 不上报。能力画像：`group.scene.platformStanding = { standing: true }`。详见 [ADR 0056 §1](https://github.com/zhinjs/zhin/blob/main/docs/adr/0056-chat-roles.md)。

package/adapters/onebot11/index.js

@@ -26,6 +26,9 @@ export default defineAdapter({
             },
             delivery: { send: true, proactive: true, spool: true },
         },
+        // ADR 0056 §1：群消息带 sender.role，归一为 sender.platform.standing。
+        // ADR 0056 §1：发言者与机器人自身的群内地位（get_group_member_info self，供 bot:* permit）。
+        group: { scene: { platformStanding: { standing: true }, selfStanding: { standing: true } } },
     },
     createAdapter: context => new Onebot11Adapter(context),
 });

package/adapters/onebot11/index.ts

@@ -32,6 +32,9 @@ export default defineAdapter<OneBot11EndpointConfig>({
       },
       delivery: { send: true, proactive: true, spool: true },
     },
+    // ADR 0056 §1：群消息带 sender.role，归一为 sender.platform.standing。
+    // ADR 0056 §1：发言者与机器人自身的群内地位（get_group_member_info self，供 bot:* permit）。
+    group: { scene: { platformStanding: { standing: true }, selfStanding: { standing: true } } },
   },
   createAdapter: context => new Onebot11Adapter(context),
 });

package/agents/onebot11/conversation.js

@@ -0,0 +1,15 @@
+// Generated by build-plugin-runtime-entries.mjs. Do not edit.
+import { messages as t } from './messages.js';
+/**
+ * The trusted turn owns the group; model input cannot select another one. Platform (`platform:*`) and
+ * Bot (`bot:*`) permits are judged in the current conversation, so group administration tools act on
+ * the current group only (ADR 0056 §5).
+ */
+export function currentGroup(context) {
+    const { origin } = context;
+    const conversation = origin?.kind === 'im' && origin.platform === 'onebot11' ? origin.conversation : undefined;
+    if (!conversation || conversation.kind !== 'group')
+        throw new Error(t(context.locale, 'groupRequired'));
+    context.signal?.throwIfAborted();
+    return Number(conversation.id);
+}

package/agents/onebot11/conversation.ts

@@ -0,0 +1,17 @@
+import type { ToolExecutionContext } from '@zhin.js/tool';
+import { messages as t } from './messages.js';
+
+export type Onebot11ToolContext = ToolExecutionContext<unknown, 'onebot11'>;
+
+/**
+ * The trusted turn owns the group; model input cannot select another one. Platform (`platform:*`) and
+ * Bot (`bot:*`) permits are judged in the current conversation, so group administration tools act on
+ * the current group only (ADR 0056 §5).
+ */
+export function currentGroup(context: Onebot11ToolContext): number {
+  const { origin } = context;
+  const conversation = origin?.kind === 'im' && origin.platform === 'onebot11' ? origin.conversation : undefined;
+  if (!conversation || conversation.kind !== 'group') throw new Error(t(context.locale, 'groupRequired'));
+  context.signal?.throwIfAborted();
+  return Number(conversation.id);
+}

package/agents/onebot11/messages.js

@@ -1,6 +1,10 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
 import { createMessages } from 'zhin.js/i18n';
 export const messages = createMessages({
+    "groupRequired": {
+        "zh-CN": "此操作仅支持当前 QQ 群",
+        "en": "This operation requires the current QQ group"
+    },
     "setFailed": {
         "zh-CN": "设置失败",
         "en": "Update failed"

package/agents/onebot11/messages.ts

@@ -1,6 +1,10 @@
 import { createMessages } from 'zhin.js/i18n';
 
 export const messages = createMessages({
+  "groupRequired": {
+    "zh-CN": "此操作仅支持当前 QQ 群",
+    "en": "This operation requires the current QQ group"
+  },
   "setFailed": {
     "zh-CN": "设置失败",
     "en": "Update failed"

package/agents/onebot11/skills/onebot11/tools/set_title/index.js

@@ -1,19 +1,20 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
 import { messages as t } from "../../../../messages.js";
+import { currentGroup } from '../../../../conversation.js';
 import { defineAgentTool } from '@zhin.js/tool';
 import { z } from 'zod';
 export default defineAgentTool({
-    description: '设置 QQ 群成员的专属头衔。只有群主才能设置。',
+    description: '设置当前 QQ 群成员的专属头衔。只有群主才能设置。',
     inputSchema: z.object({
-        group_id: z.number().describe('目标群号'),
         user_id: z.number().describe('目标成员 QQ号'),
         title: z.string().describe('头衔文字'),
     }),
     adapter: 'onebot11',
     scopes: ["group"],
     tags: ['onebot11'],
-    permissions: ['platform(onebot11,scene_owner)'],
-    async execute({ group_id, user_id, title }, context) {
+    permissions: ['platform:owner', 'bot:owner'],
+    async execute({ user_id, title }, context) {
+        const group_id = currentGroup(context);
         const client = context.$client;
         const response = await client.call('set_group_special_title', {
             group_id,

package/agents/onebot11/skills/onebot11/tools/set_title/index.ts

@@ -1,18 +1,19 @@
 import { messages as t } from "../../../../messages.js";
+import { currentGroup } from '../../../../conversation.js';
 import { defineAgentTool } from '@zhin.js/tool';
 import { z } from 'zod';
-export default defineAgentTool<{ group_id: number; user_id: number; title: string }>({
-  description: '设置 QQ 群成员的专属头衔。只有群主才能设置。',
+export default defineAgentTool<{ user_id: number; title: string }>({
+  description: '设置当前 QQ 群成员的专属头衔。只有群主才能设置。',
   inputSchema: z.object({
-    group_id: z.number().describe('目标群号'),
     user_id: z.number().describe('目标成员 QQ号'),
     title: z.string().describe('头衔文字'),
   }),
   adapter: 'onebot11',
   scopes: ["group"],
   tags: ['onebot11'],
-  permissions: ['platform(onebot11,scene_owner)'],
-  async execute({ group_id, user_id, title }: { group_id: number; user_id: number; title: string }, context) {
+  permissions: ['platform:owner', 'bot:owner'],
+  async execute({ user_id, title }, context) {
+    const group_id = currentGroup(context);
     const client = context.$client;
     const response = await client.call('set_group_special_title', {
       group_id,

package/lib/endpoint-management.js

@@ -1,5 +1,42 @@
+import { standingFromMemberRole } from '@zhin.js/im-contract';
+/** How long one `get_login_info` answer is reused (bursts only; see inspectSelfStanding). */
+const SELF_ID_TTL_MS = 5_000;
 export function createOneBot11EndpointManagement(endpoint) {
+    // The login account can change across reconnects (or a different account on the same
+    // connection), so `get_login_info` is not remembered for the endpoint's lifetime: only briefly,
+    // to coalesce bursts, and never across a failed lookup.
+    let login;
+    const loginId = async (signal) => {
+        if (login && Date.now() - login.at < SELF_ID_TTL_MS)
+            return login.id;
+        login = undefined;
+        const info = asRecord(await endpoint.callApi({ action: 'get_login_info', signal }));
+        const id = info.user_id;
+        const value = (typeof id === 'number' && id > 0) || (typeof id === 'string' && id.trim() !== '' && id !== '0') ? String(id) : undefined;
+        if (value)
+            login = { id: value, at: Date.now() };
+        return value;
+    };
     return Object.freeze({
+        /** ADR 0056 §1: the Bot's own group role (`get_login_info`, then `get_group_member_info` self). */
+        async inspectSelfStanding({ conversation, signal }) {
+            if (conversation.kind !== 'group')
+                return undefined;
+            const selfId = await loginId(signal);
+            if (!selfId)
+                return undefined;
+            let member;
+            try {
+                member = asRecord(await endpoint.callApi({ action: 'get_group_member_info', signal, params: {
+                        group_id: toNumberId(conversation.id, 'group_id'), user_id: toNumberId(selfId, 'user_id'), no_cache: true,
+                    } }));
+            }
+            catch (error) {
+                login = undefined;
+                throw error;
+            }
+            return standingFromMemberRole(member.role);
+        },
         async listFriends(request = {}) {
             const data = await endpoint.callApi({ action: 'get_friend_list', signal: request.signal });
             return toArray(data).map((value) => {

package/lib/protocol.d.ts

@@ -4,7 +4,7 @@ import type { EndpointProfileConfiguration } from 'zhin.js/adapter';
  * Canonicalization is owned by gateway/core before endpoint.send.
  * Spec: https://github.com/botuniverse/onebot-11
  */
-import { type MediaRef, type ConversationRef } from '@zhin.js/im-contract';
+import { type MediaRef, type ConversationRef, type PlatformStanding } from '@zhin.js/im-contract';
 import { type Segment } from '@zhin.js/core';
 /** One endpoint config after AdapterIndex expands `plugins.<instanceKey>.endpoints`. */
 export interface OneBot11EndpointConfig extends EndpointProfileConfiguration {
@@ -98,6 +98,11 @@ export declare function senderDisplayName(ev: OneBot11Event): string;
  * user_id 缺失时兜底为空串，绝不回退到显示名。
  */
 export declare function senderUserId(ev: OneBot11Event): string;
+/**
+ * ADR 0056 §1：群消息 `sender.role`（owner / admin / member）→ `sender.platform.standing`。
+ * 私聊不上报；未知角色词不上报。OneBot v11 没有平台原生角色与权限位。
+ */
+export declare function onebot11SenderStanding(ev: OneBot11Event): PlatformStanding | undefined;
 /** 显示名（群名片优先）放 metadata.nickname；没有则返回 undefined，不写该字段。 */
 export declare function senderNickname(ev: OneBot11Event): string | undefined;
 /**

package/lib/protocol.js

@@ -119,6 +119,16 @@ export function senderDisplayName(ev) {
 export function senderUserId(ev) {
     return ev.user_id != null ? String(ev.user_id) : '';
 }
+/**
+ * ADR 0056 §1：群消息 `sender.role`（owner / admin / member）→ `sender.platform.standing`。
+ * 私聊不上报；未知角色词不上报。OneBot v11 没有平台原生角色与权限位。
+ */
+export function onebot11SenderStanding(ev) {
+    if (ev.message_type !== 'group')
+        return undefined;
+    const role = ev.sender?.role;
+    return role === 'owner' || role === 'admin' || role === 'member' ? { standing: role } : undefined;
+}
 /** 显示名（群名片优先）放 metadata.nickname；没有则返回 undefined，不写该字段。 */
 export function senderNickname(ev) {
     const name = ev.sender?.card || ev.sender?.nickname;

package/lib/ws-endpoint.js

@@ -7,7 +7,7 @@ import WebSocket from 'ws';
 import { createEndpointSpecification, endpointSpec, createRecallEndpointControl, createEndpointLifecycle, } from 'zhin.js/adapter';
 import { formatCompact, getAdapterLogger } from '@zhin.js/logger';
 import { createOneBot11EndpointManagement } from './endpoint-management.js';
-import { buildSendAction, buildWsConnectOptions, formatInboundContent, formatInboundMetadata, formatOutboundSegments, isMessageEvent, onebot11InboundConversation, senderDisplayName, senderUserId, } from './protocol.js';
+import { buildSendAction, buildWsConnectOptions, formatInboundContent, formatInboundMetadata, formatOutboundSegments, isMessageEvent, onebot11InboundConversation, senderDisplayName, onebot11SenderStanding, senderUserId, } from './protocol.js';
 import { receiveOneBot11SideEvent } from './side-event-dispatch.js';
 import { createOneBot11ContentPort } from './content-port.js';
 import { createOneBot11Rpc } from './ws-transport.js';
@@ -151,6 +151,7 @@ export class OneBot11WsEndpoint extends Onebot11Client {
         const conversation = { ...onebot11InboundConversation(String(this.#options.id), ev), endpoint: this[endpointSpec].identity };
         const content = formatInboundContent(ev);
         const inbound = formatInboundMetadata(ev, this.#options.config.id);
+        const platform = onebot11SenderStanding(ev);
         void this[endpointSpec].events.message({
             event: ev,
             ...(typeof ev.time === 'number' ? { platformSentAt: ev.time * 1000 } : {}),
@@ -160,7 +161,7 @@ export class OneBot11WsEndpoint extends Onebot11Client {
             sender: {
                 id: senderUserId(ev),
                 name: senderDisplayName(ev) || undefined,
-                ...(ev.sender?.role ? { roles: [ev.sender.role] } : {}),
+                ...(platform ? { platform } : {}),
             },
             endpointId: inbound.endpointId,
             ...(inbound.mentioned ? { mentioned: true } : {}),

package/lib/ws-types.d.ts

@@ -1,3 +1,4 @@
+import type { WsConnection } from '@zhin.js/host-http';
 /** Minimal WS surface used by the endpoint (real `ws` or test mock). */
 export interface OneBot11WsSocket {
     readonly readyState: number;
@@ -11,3 +12,8 @@ export interface OneBot11WsCreateOptions {
     readonly headers?: Record<string, string>;
 }
 export declare const WS_OPEN = 1;
+/**
+ * A Host reverse-WebSocket connection seen through the OneBot11WsSocket surface. Protocol
+ * keepalive (ping / pong) belongs to the Host transport, so `ping` is absent.
+ */
+export declare function socketOfConnection(connection: WsConnection): OneBot11WsSocket;

package/lib/ws-types.js

@@ -1 +1,32 @@
 export const WS_OPEN = 1;
+/**
+ * A Host reverse-WebSocket connection seen through the OneBot11WsSocket surface. Protocol
+ * keepalive (ping / pong) belongs to the Host transport, so `ping` is absent.
+ */
+export function socketOfConnection(connection) {
+    let readyState = 1;
+    connection.onClose(() => { readyState = 3; });
+    const subscriptions = new Map();
+    const off = (_event, listener) => {
+        subscriptions.get(listener)?.();
+        subscriptions.delete(listener);
+    };
+    return {
+        get readyState() { return readyState; },
+        send: (data) => connection.send(data),
+        close: (code, reason) => connection.close(code, reason),
+        on(event, listener) {
+            if (event === 'message') {
+                subscriptions.set(listener, connection.onMessage((data) => {
+                    listener(typeof data === 'string' ? data : Buffer.from(data));
+                }));
+            }
+            else if (event === 'close') {
+                subscriptions.set(listener, connection.onClose((code, reason) => listener(code, reason)));
+            }
+            // 'error' surfaces as a close on a WsConnection; 'open' already happened.
+        },
+        off,
+        removeListener: off,
+    };
+}

package/lib/wss-auth.d.ts

@@ -1,2 +1,2 @@
-import type { IncomingMessage } from 'node:http';
-export declare function verifyOneBotAccessToken(accessToken: string | undefined, request: IncomingMessage): boolean;
+import { type ProtocolAuthRequest } from '@zhin.js/host-http';
+export declare function verifyOneBotAccessToken(accessToken: string | undefined, request: ProtocolAuthRequest): boolean;

package/lib/wss-auth.js

@@ -1,16 +1,7 @@
+import { verifyProtocolAccessToken } from '@zhin.js/host-http';
 export function verifyOneBotAccessToken(accessToken, request) {
+    // Webhook semantics: no configured token admits any caller (reverse sockets use verifyProtocolAccessToken).
     if (!accessToken)
         return true;
-    const auth = request.headers.authorization ?? '';
-    if (auth === `Bearer ${accessToken}`)
-        return true;
-    try {
-        const url = new URL(request.url ?? '/', 'http://localhost');
-        if (url.searchParams.get('access_token') === accessToken)
-            return true;
-    }
-    catch {
-        /* ignore */
-    }
-    return false;
+    return verifyProtocolAccessToken(accessToken, request);
 }

package/lib/wss-endpoint.d.ts

@@ -2,7 +2,7 @@
  * OneBot11 reverse WSS endpoint — accepts inbound WebSocket from OneBot implementation.
  */
 import { endpointSpec, type Endpoint, type EndpointSpecification } from 'zhin.js/adapter';
-import type { HttpHost } from '@zhin.js/host-http';
+import { type HttpHost } from '@zhin.js/host-http';
 import type { CapabilityId } from 'zhin.js';
 import { type OneBot11WssConfig } from './protocol.js';
 import { Onebot11Client } from './client.js';

package/lib/wss-endpoint.js

@@ -4,13 +4,14 @@ import { EndpointDeliveryError } from '@zhin.js/im-contract';
  * OneBot11 reverse WSS endpoint — accepts inbound WebSocket from OneBot implementation.
  */
 import { createEndpointSpecification, endpointSpec, createEndpointLifecycle, createRecallEndpointControl, } from 'zhin.js/adapter';
+import { verifyProtocolAccessToken } from '@zhin.js/host-http';
 import { formatCompact, getAdapterLogger } from '@zhin.js/logger';
 import { createOneBot11EndpointManagement } from './endpoint-management.js';
-import { buildSendAction, formatInboundContent, formatInboundMetadata, formatOutboundSegments, isMessageEvent, onebot11InboundConversation, senderDisplayName, senderUserId, } from './protocol.js';
+import { buildSendAction, formatInboundContent, formatInboundMetadata, formatOutboundSegments, isMessageEvent, onebot11InboundConversation, senderDisplayName, onebot11SenderStanding, senderUserId, } from './protocol.js';
 import { receiveOneBot11SideEvent } from './side-event-dispatch.js';
 import { createOneBot11ContentPort } from './content-port.js';
-import { verifyOneBotAccessToken } from './wss-auth.js';
 import { createOneBot11Rpc } from './ws-transport.js';
+import { socketOfConnection } from './ws-types.js';
 import { probeOnebot11SelfId, resolveOnebot11SelfId } from './self-id.js';
 import { callOnebot11Client, readOnebot11Response, onebot11ClientOptions, forwardOnebot11ClientEvents, Onebot11Client } from './client.js';
 export class OneBot11WssEndpoint extends Onebot11Client {
@@ -83,15 +84,16 @@ export class OneBot11WssEndpoint extends Onebot11Client {
             return;
         this.#stopped = false;
         if (!this.#options.config.access_token) {
-            // wss 模式未配 access_token 时任何连接都会被放行（verifyOneBotAccessToken 直接 return true）
+            // 未配 access_token 时只接受本机回环连接（verifyProtocolAccessToken）。
             this.#logger.warn(formatCompact({
                 endpoint: this.#options.config.id,
                 mode: 'wss',
                 ok: false,
-                error: 'missing access_token',
+                error: 'missing access_token: only loopback peers are accepted',
             }));
         }
-        const handle = this.#options.http.ws(this.#options.config.path);
+        // The peer authenticates with this endpoint's own access_token, not a Console credential.
+        const handle = this.#options.http.ws(this.#options.config.path, { auth: 'protocol' });
         this.#wsRelease = handle.onConnection((connection) => {
             this.#connectionTask = this.#connectionTask
                 .then(() => this.#acceptConnection(connection))
@@ -158,6 +160,7 @@ export class OneBot11WssEndpoint extends Onebot11Client {
         }
         const conversation = { ...onebot11InboundConversation(String(this.#options.id), ev), endpoint: this[endpointSpec].identity };
         const inbound = formatInboundMetadata(ev, this.#options.config.id);
+        const platform = onebot11SenderStanding(ev);
         void this[endpointSpec].events.message({
             event: ev,
             ...(typeof ev.time === 'number' ? { platformSentAt: ev.time * 1000 } : {}),
@@ -167,7 +170,7 @@ export class OneBot11WssEndpoint extends Onebot11Client {
             sender: {
                 id: senderUserId(ev),
                 name: senderDisplayName(ev) || undefined,
-                ...(ev.sender?.role ? { roles: [ev.sender.role] } : {}),
+                ...(platform ? { platform } : {}),
             },
             endpointId: inbound.endpointId,
             ...(inbound.mentioned ? { mentioned: true } : {}),
@@ -203,14 +206,14 @@ export class OneBot11WssEndpoint extends Onebot11Client {
     }
     async #acceptConnection(connection) {
         if (!this.#started || this.#stopped) {
-            connection.socket.close();
+            connection.close();
             return;
         }
-        if (!verifyOneBotAccessToken(this.#options.config.access_token, connection.request)) {
-            connection.socket.close(4003, 'Unauthorized');
+        if (!verifyProtocolAccessToken(this.#options.config.access_token, connection)) {
+            connection.close(4003, 'Unauthorized');
             return;
         }
-        const socket = connection.socket;
+        const socket = socketOfConnection(connection);
         await this.#connectionLifecycle.stop();
         this.#rpc.disconnect('连接已替换');
         await this.#connectionLifecycle.start(async (lifecycleHandle) => {
@@ -229,18 +232,7 @@ export class OneBot11WssEndpoint extends Onebot11Client {
                 if (this.#ws === socket)
                     this.#ws = undefined;
             });
-            this.#connectionLifecycle.startHeartbeat(() => {
-                try {
-                    socket.ping?.();
-                }
-                catch {
-                    /* ignore */
-                }
-            }, this.#options.config.heartbeat_interval);
-            socket.on('pong', () => {
-                if (this.#ws === socket)
-                    this.#connectionLifecycle.notifyHeartbeatAck();
-            });
+            // Dead-peer detection is the Host transport's keepalive (protocol ping / pong).
             socket.on('message', (data) => {
                 if (this.#ws !== socket || this.#connectionLifecycle.state === 'closed')
                     return;
@@ -267,7 +259,7 @@ export class OneBot11WssEndpoint extends Onebot11Client {
         this.#logger.debug(formatCompact({
             endpoint: this.#options.config.id,
             mode: 'wss',
-            peer: connection.request.socket.remoteAddress,
+            peer: connection.remoteAddress,
         }));
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zhin.js/adapter-onebot11",
-  "version": "1.1.26",
+  "version": "1.1.27",
   "description": "Zhin.js OneBot 11 adapter for Plugin Runtime (WebSocket client)",
   "type": "module",
   "main": "./lib/index.js",
@@ -19,7 +19,6 @@
     "schema.json",
     "src",
     "lib",
-    "tools",
     "agents",
     "README.md",
     "CHANGELOG.md",
@@ -38,42 +37,41 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/zhinjs/zhin",
+    "url": "git+https://github.com/zhinjs/zhin.git",
     "directory": "plugins/adapters/onebot11"
   },
   "dependencies": {
     "@imhelper/onebot-v11": "1.0.7",
     "imhelper": "1.0.7",
     "ws": "^8.21.1",
-    "@zhin.js/adapter-onebot-events": "0.0.5",
-    "@zhin.js/adapter": "1.1.32",
-    "@zhin.js/agent-feature": "1.1.16",
-    "@zhin.js/console-contract": "1.1.5",
-    "@zhin.js/core": "1.1.60",
-    "@zhin.js/feature-kit": "1.1.15",
-    "@zhin.js/host-http": "1.1.17",
-    "@zhin.js/im-contract": "1.1.13",
-    "@zhin.js/logger": "1.1.2",
-    "@zhin.js/page": "1.1.17",
-    "@zhin.js/permission": "1.1.15",
-    "@zhin.js/skill": "1.1.16",
-    "@zhin.js/tool": "1.1.18"
+    "zod": "^4.6.7",
+    "@zhin.js/adapter": "1.1.33",
+    "@zhin.js/adapter-onebot-events": "0.0.6",
+    "@zhin.js/agent-feature": "1.1.17",
+    "@zhin.js/console-contract": "1.1.6",
+    "@zhin.js/core": "1.2.0",
+    "@zhin.js/feature-kit": "1.1.16",
+    "@zhin.js/host-http": "1.2.0",
+    "@zhin.js/im-contract": "1.1.14",
+    "@zhin.js/logger": "1.1.3",
+    "@zhin.js/page": "1.1.18",
+    "@zhin.js/permission": "1.2.0",
+    "@zhin.js/skill": "1.1.17",
+    "@zhin.js/tool": "1.1.19"
   },
   "devDependencies": {
     "@types/node": "^26.1.2",
     "@types/ws": "^8.18.1",
     "typescript": "^6.0.3",
     "vitest": "^4.1.10",
-    "zod": "^4.4.3",
-    "@zhin.js/host-http": "1.1.17",
-    "zhin.js": "1.1.25"
+    "@zhin.js/host-http": "1.2.0",
+    "zhin.js": "1.1.26"
   },
   "peerDependencies": {
-    "zod": "^4.0.0",
-    "@zhin.js/adapter": "^1.1.32",
-    "@zhin.js/command": "^1.1.17",
-    "@zhin.js/core": "^1.1.60",
-    "zhin.js": "^1.1.25"
+    "@zhin.js/adapter": "^1.1.33",
+    "@zhin.js/command": "^1.2.0",
+    "@zhin.js/core": "^1.2.0",
+    "zhin.js": "^1.1.26"
   },
   "peerDependenciesMeta": {
     "@zhin.js/command": {
@@ -81,9 +79,6 @@
     },
     "zhin.js": {
       "optional": true
-    },
-    "zod": {
-      "optional": true
     }
   },
   "author": {
@@ -135,6 +130,7 @@
   "scripts": {
     "build": "tsc",
     "clean": "rimraf lib",
-    "test": "NODE_OPTIONS=--experimental-strip-types vitest run --root ../../.. plugins/adapters/onebot11/tests"
+    "test": "pnpm run test:types && vitest run --root ../../.. plugins/adapters/onebot11/tests",
+    "test:types": "tsc -p tsconfig.type-tests.json"
   }
 }

package/plugin.js

@@ -1,6 +1,5 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
 import { definePlugin } from 'zhin.js';
-import { permissionHostToken, createSceneRolePlatformChecker } from '@zhin.js/permission';
 import { createOnebot11ConsoleRpc } from "./lib/console.js";
 export default definePlugin({
     name: 'onebot11',
@@ -9,12 +8,8 @@ export default definePlugin({
         displayName: 'OneBot 11 Adapter',
     },
     setup(context) {
-        const dispose = context.resources.has(permissionHostToken)
-            ? context.resources.use(permissionHostToken).registerPlatform('onebot11', createSceneRolePlatformChecker())
-            : undefined;
         return {
             consoleRpc: createOnebot11ConsoleRpc(context.resources, () => context.config.get()),
-            ...(dispose ? { dispose } : {}),
         };
     },
 });

package/schema.json

@@ -20,34 +20,6 @@
       "type": "number",
       "default": 30000
     },
-    "master": {
-      "type": [
-        "string",
-        "number"
-      ],
-      "description": "框架 master（platform user id；AI/工具权限、endpoint 管理）。endpoints[i].master 可逐项覆盖",
-      "x-i18n": {
-        "en": {
-          "description": "Framework masters (platform user id; AI/tool permissions and endpoint management). endpoints[i].master can override this value."
-        }
-      }
-    },
-    "trusted": {
-      "type": "array",
-      "items": {
-        "type": [
-          "string",
-          "number"
-        ],
-        "description": "Trusted platform user id"
-      },
-      "description": "框架 trusted 用户列表（弱于 master）。endpoints[i].trusted 可逐项追加",
-      "x-i18n": {
-        "en": {
-          "description": "Framework trusted users, below master authority. endpoints[i].trusted can add users."
-        }
-      }
-    },
     "endpoints": {
       "type": "array",
       "minItems": 1,
@@ -56,34 +28,6 @@
         "type": "object",
         "additionalProperties": false,
         "properties": {
-          "master": {
-            "type": [
-              "string",
-              "number"
-            ],
-            "description": "本 endpoint 的框架 master（platform user id）；覆盖顶层 master",
-            "x-i18n": {
-              "en": {
-                "description": "Framework masters for this endpoint (platform user id), overriding the top-level master list."
-              }
-            }
-          },
-          "trusted": {
-            "type": "array",
-            "items": {
-              "type": [
-                "string",
-                "number"
-              ],
-              "description": "Trusted platform user id"
-            },
-            "description": "本 endpoint 的 trusted 列表",
-            "x-i18n": {
-              "en": {
-                "description": "Trusted users for this endpoint."
-              }
-            }
-          },
           "connection": {
             "type": "string",
             "enum": [

package/src/endpoint-management.ts

@@ -15,16 +15,49 @@ import {
   type EndpointGroupRequest,
   type PendingRpcRequest,
 } from 'zhin.js/adapter';
+import { standingFromMemberRole, type PlatformStanding, type SelfStandingRequest } from '@zhin.js/im-contract';
 
 /** 管理面只依赖 endpoint 的 callApi（ws/wss 两种传输各自实现）。 */
 export interface OneBot11ManagementCaller {
   callApi(request: PendingRpcRequest): Promise<unknown>;
 }
 
+/** How long one `get_login_info` answer is reused (bursts only; see inspectSelfStanding). */
+const SELF_ID_TTL_MS = 5_000;
+
 export function createOneBot11EndpointManagement(
   endpoint: OneBot11ManagementCaller,
 ): EndpointManagement {
+  // The login account can change across reconnects (or a different account on the same
+  // connection), so `get_login_info` is not remembered for the endpoint's lifetime: only briefly,
+  // to coalesce bursts, and never across a failed lookup.
+  let login: { readonly id: string; readonly at: number } | undefined;
+  const loginId = async (signal: AbortSignal | undefined): Promise<string | undefined> => {
+    if (login && Date.now() - login.at < SELF_ID_TTL_MS) return login.id;
+    login = undefined;
+    const info = asRecord(await endpoint.callApi({ action: 'get_login_info', signal }));
+    const id = info.user_id;
+    const value = (typeof id === 'number' && id > 0) || (typeof id === 'string' && id.trim() !== '' && id !== '0') ? String(id) : undefined;
+    if (value) login = { id: value, at: Date.now() };
+    return value;
+  };
   return Object.freeze<EndpointManagement>({
+    /** ADR 0056 §1: the Bot's own group role (`get_login_info`, then `get_group_member_info` self). */
+    async inspectSelfStanding({ conversation, signal }: SelfStandingRequest): Promise<PlatformStanding | undefined> {
+      if (conversation.kind !== 'group') return undefined;
+      const selfId = await loginId(signal);
+      if (!selfId) return undefined;
+      let member: Record<string, unknown>;
+      try {
+        member = asRecord(await endpoint.callApi({ action: 'get_group_member_info', signal, params: {
+          group_id: toNumberId(conversation.id, 'group_id'), user_id: toNumberId(selfId, 'user_id'), no_cache: true,
+        } }));
+      } catch (error) {
+        login = undefined;
+        throw error;
+      }
+      return standingFromMemberRole(member.role);
+    },
     async listFriends(request: EndpointManagementRequest = {}): Promise<readonly EndpointFriend[]> {
       const data = await endpoint.callApi({ action: 'get_friend_list', signal: request.signal });
       return toArray(data).map((value) => {

package/src/protocol.ts

@@ -4,7 +4,7 @@ import type { EndpointProfileConfiguration } from 'zhin.js/adapter';
  * Canonicalization is owned by gateway/core before endpoint.send.
  * Spec: https://github.com/botuniverse/onebot-11
  */
-import { EndpointDeliveryError, isMediaRef, type MediaRef, type ConversationRef } from '@zhin.js/im-contract';
+import { EndpointDeliveryError, isMediaRef, type MediaRef, type ConversationRef, type PlatformStanding } from '@zhin.js/im-contract';
 import { toCanonicalSegments, type Segment } from '@zhin.js/core';
 import { formatCompact, getLogger } from '@zhin.js/logger';
 
@@ -218,6 +218,16 @@ export function senderUserId(ev: OneBot11Event): string {
   return ev.user_id != null ? String(ev.user_id) : '';
 }
 
+/**
+ * ADR 0056 §1：群消息 `sender.role`（owner / admin / member）→ `sender.platform.standing`。
+ * 私聊不上报；未知角色词不上报。OneBot v11 没有平台原生角色与权限位。
+ */
+export function onebot11SenderStanding(ev: OneBot11Event): PlatformStanding | undefined {
+  if (ev.message_type !== 'group') return undefined;
+  const role = ev.sender?.role;
+  return role === 'owner' || role === 'admin' || role === 'member' ? { standing: role } : undefined;
+}
+
 /** 显示名（群名片优先）放 metadata.nickname；没有则返回 undefined，不写该字段。 */
 export function senderNickname(ev: OneBot11Event): string | undefined {
   const name = ev.sender?.card || ev.sender?.nickname;

package/src/ws-endpoint.ts

@@ -29,6 +29,7 @@ import {
   isMessageEvent,
   onebot11InboundConversation,
   senderDisplayName,
+  onebot11SenderStanding,
   senderUserId,
   type OneBot11Event,
   type OneBot11WsConfig,
@@ -192,6 +193,7 @@ export class OneBot11WsEndpoint extends Onebot11Client implements Endpoint {
     const conversation = { ...onebot11InboundConversation(String(this.#options.id), ev), endpoint: this[endpointSpec].identity };
     const content = formatInboundContent(ev);
     const inbound = formatInboundMetadata(ev, this.#options.config.id);
+    const platform = onebot11SenderStanding(ev);
     void this[endpointSpec].events.message({
       event: ev,
       ...(typeof ev.time === 'number' ? { platformSentAt: ev.time * 1000 } : {}),
@@ -201,7 +203,7 @@ export class OneBot11WsEndpoint extends Onebot11Client implements Endpoint {
       sender: {
         id: senderUserId(ev),
         name: senderDisplayName(ev) || undefined,
-        ...(ev.sender?.role ? { roles: [ev.sender.role] } : {}),
+        ...(platform ? { platform } : {}),
       },
       endpointId: inbound.endpointId,
       ...(inbound.mentioned ? { mentioned: true } : {}),

package/src/ws-types.ts

@@ -1,3 +1,5 @@
+import type { WsConnection } from '@zhin.js/host-http';
+
 /** Minimal WS surface used by the endpoint (real `ws` or test mock). */
 export interface OneBot11WsSocket {
   readonly readyState: number;
@@ -13,3 +15,34 @@ export interface OneBot11WsCreateOptions {
 }
 
 export const WS_OPEN = 1;
+
+/**
+ * A Host reverse-WebSocket connection seen through the OneBot11WsSocket surface. Protocol
+ * keepalive (ping / pong) belongs to the Host transport, so `ping` is absent.
+ */
+export function socketOfConnection(connection: WsConnection): OneBot11WsSocket {
+  let readyState = 1;
+  connection.onClose(() => { readyState = 3; });
+  const subscriptions = new Map<(...args: unknown[]) => void, () => void>();
+  const off = (_event: string, listener: (...args: unknown[]) => void): void => {
+    subscriptions.get(listener)?.();
+    subscriptions.delete(listener);
+  };
+  return {
+    get readyState() { return readyState; },
+    send: (data: string) => connection.send(data),
+    close: (code?: number, reason?: string) => connection.close(code, reason),
+    on(event: string, listener: (...args: unknown[]) => void) {
+      if (event === 'message') {
+        subscriptions.set(listener, connection.onMessage((data) => {
+          listener(typeof data === 'string' ? data : Buffer.from(data));
+        }));
+      } else if (event === 'close') {
+        subscriptions.set(listener, connection.onClose((code, reason) => listener(code, reason)));
+      }
+      // 'error' surfaces as a close on a WsConnection; 'open' already happened.
+    },
+    off,
+    removeListener: off,
+  } as OneBot11WsSocket;
+}

package/src/wss-auth.ts

@@ -1,17 +1,10 @@
-import type { IncomingMessage } from 'node:http';
+import { verifyProtocolAccessToken, type ProtocolAuthRequest } from '@zhin.js/host-http';
 
 export function verifyOneBotAccessToken(
   accessToken: string | undefined,
-  request: IncomingMessage,
+  request: ProtocolAuthRequest,
 ): boolean {
+  // Webhook semantics: no configured token admits any caller (reverse sockets use verifyProtocolAccessToken).
   if (!accessToken) return true;
-  const auth = request.headers.authorization ?? '';
-  if (auth === `Bearer ${accessToken}`) return true;
-  try {
-    const url = new URL(request.url ?? '/', 'http://localhost');
-    if (url.searchParams.get('access_token') === accessToken) return true;
-  } catch {
-    /* ignore */
-  }
-  return false;
+  return verifyProtocolAccessToken(accessToken, request);
 }

package/src/wss-endpoint.ts

@@ -15,7 +15,7 @@ import {
   type PendingRpcRequest,
   type EndpointTransportState,
 } from 'zhin.js/adapter';
-import type { HttpHost, WsConnection } from '@zhin.js/host-http';
+import { verifyProtocolAccessToken, type HttpHost, type WsConnection } from '@zhin.js/host-http';
 import { formatCompact, getAdapterLogger } from '@zhin.js/logger';
 import type { CapabilityId } from 'zhin.js';
 import { createOneBot11EndpointManagement } from './endpoint-management.js';
@@ -27,17 +27,15 @@ import {
   isMessageEvent,
   onebot11InboundConversation,
   senderDisplayName,
+  onebot11SenderStanding,
   senderUserId,
   type OneBot11Event,
   type OneBot11WssConfig,
 } from './protocol.js';
 import { receiveOneBot11SideEvent } from './side-event-dispatch.js';
 import { createOneBot11ContentPort } from './content-port.js';
-import { verifyOneBotAccessToken } from './wss-auth.js';
 import { createOneBot11Rpc, type OneBot11Rpc } from './ws-transport.js';
-import {
-  type OneBot11WsSocket,
-} from './ws-types.js';
+import { socketOfConnection, type OneBot11WsSocket } from './ws-types.js';
 import { probeOnebot11SelfId, resolveOnebot11SelfId } from './self-id.js';
 import { callOnebot11Client, readOnebot11Response, onebot11ClientOptions, forwardOnebot11ClientEvents, Onebot11Client } from './client.js';
 
@@ -117,15 +115,16 @@ export class OneBot11WssEndpoint extends Onebot11Client implements Endpoint {
     if (this.#started) return;
     this.#stopped = false;
     if (!this.#options.config.access_token) {
-      // wss 模式未配 access_token 时任何连接都会被放行（verifyOneBotAccessToken 直接 return true）
+      // 未配 access_token 时只接受本机回环连接（verifyProtocolAccessToken）。
       this.#logger.warn(formatCompact({
         endpoint: this.#options.config.id,
         mode: 'wss',
         ok: false,
-        error: 'missing access_token',
+        error: 'missing access_token: only loopback peers are accepted',
       }));
     }
-    const handle = this.#options.http.ws(this.#options.config.path);
+    // The peer authenticates with this endpoint's own access_token, not a Console credential.
+    const handle = this.#options.http.ws(this.#options.config.path, { auth: 'protocol' });
     this.#wsRelease = handle.onConnection((connection) => {
       this.#connectionTask = this.#connectionTask
         .then(() => this.#acceptConnection(connection))
@@ -194,6 +193,7 @@ export class OneBot11WssEndpoint extends Onebot11Client implements Endpoint {
     }
     const conversation = { ...onebot11InboundConversation(String(this.#options.id), ev), endpoint: this[endpointSpec].identity };
     const inbound = formatInboundMetadata(ev, this.#options.config.id);
+    const platform = onebot11SenderStanding(ev);
     void this[endpointSpec].events.message({
       event: ev,
       ...(typeof ev.time === 'number' ? { platformSentAt: ev.time * 1000 } : {}),
@@ -203,7 +203,7 @@ export class OneBot11WssEndpoint extends Onebot11Client implements Endpoint {
       sender: {
         id: senderUserId(ev),
         name: senderDisplayName(ev) || undefined,
-        ...(ev.sender?.role ? { roles: [ev.sender.role] } : {}),
+        ...(platform ? { platform } : {}),
       },
       endpointId: inbound.endpointId,
       ...(inbound.mentioned ? { mentioned: true } : {}),
@@ -240,14 +240,14 @@ export class OneBot11WssEndpoint extends Onebot11Client implements Endpoint {
 
   async #acceptConnection(connection: WsConnection): Promise<void> {
     if (!this.#started || this.#stopped) {
-      connection.socket.close();
+      connection.close();
       return;
     }
-    if (!verifyOneBotAccessToken(this.#options.config.access_token, connection.request)) {
-      connection.socket.close(4003, 'Unauthorized');
+    if (!verifyProtocolAccessToken(this.#options.config.access_token, connection)) {
+      connection.close(4003, 'Unauthorized');
       return;
     }
-    const socket = connection.socket as unknown as OneBot11WsSocket;
+    const socket = socketOfConnection(connection);
     await this.#connectionLifecycle.stop();
     this.#rpc.disconnect('连接已替换');
     await this.#connectionLifecycle.start(async (lifecycleHandle) => {
@@ -264,16 +264,7 @@ export class OneBot11WssEndpoint extends Onebot11Client implements Endpoint {
         }
         if (this.#ws === socket) this.#ws = undefined;
       });
-      this.#connectionLifecycle.startHeartbeat(() => {
-        try {
-          socket.ping?.();
-        } catch {
-          /* ignore */
-        }
-      }, this.#options.config.heartbeat_interval);
-      socket.on('pong', () => {
-        if (this.#ws === socket) this.#connectionLifecycle.notifyHeartbeatAck();
-      });
+      // Dead-peer detection is the Host transport's keepalive (protocol ping / pong).
       socket.on('message', (data) => {
         if (this.#ws !== socket || this.#connectionLifecycle.state === 'closed') return;
         this.#connectionLifecycle.notifyHeartbeatAck();
@@ -296,7 +287,7 @@ export class OneBot11WssEndpoint extends Onebot11Client implements Endpoint {
     this.#logger.debug(formatCompact({
       endpoint: this.#options.config.id,
       mode: 'wss',
-      peer: connection.request.socket.remoteAddress,
+      peer: connection.remoteAddress,
     }));
   }
 }