@zhin.js/adapter-slack 2.0.0 → 3.0.0

package/src/{bot.ts → endpoint.ts}

@@ -1,14 +1,15 @@
 /**
- * Slack Bot 实现
+ * Slack Endpoint 实现
  */
 import { App as SlackApp, LogLevel } from "@slack/bolt";
 import { WebClient, type ChatPostMessageArguments } from "@slack/web-api";
-import { formatCompact, Bot, Message, MessageSegment, segment, SendContent, SendOptions } from 'zhin.js';
-import type { SlackBotConfig, SlackMessageEvent } from "./types.js";
+import { formatCompact, Endpoint, Message, MessageSegment, segment, SendContent, SendOptions } from 'zhin.js';
+import type { SlackEndpointConfig, SlackMessageEvent } from "./types.js";
 import type { SlackAdapter } from "./adapter.js";
+import { normalizeSlackSenderForPermit } from "./platform-permit.js";
 
 
-export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
+export class SlackEndpoint implements Endpoint<SlackEndpointConfig, SlackMessageEvent> {
   $connected: boolean;
   /** 延迟到 `$connect`，避免子类 mock `$connect` 时仍在构造函数里创建 Bolt/WebClient（会在后台触发 Slack API） */
   private app?: SlackApp;
@@ -22,7 +23,7 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
     return this.$config.name;
   }
 
-  constructor(public adapter: SlackAdapter, public $config: SlackBotConfig) {
+  constructor(public adapter: SlackAdapter, public $config: SlackEndpointConfig) {
     this.$connected = false;
   }
 
@@ -73,7 +74,7 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
 
       // Get bot info
       const authTest = await this.client!.auth.test();
-      this.logger.info(formatCompact({ bot: this.$config.name, user: authTest.user }));
+      this.logger.info(formatCompact({ endpoint: this.$config.name, user: authTest.user }));
 
       if (!this.$config.socketMode) {
         this.logger.info(formatCompact( { op: "listen", port }));
@@ -93,13 +94,57 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
     try {
       await this.app!.stop();
       this.$connected = false;
-      this.logger.info(formatCompact( { op: "disconnect", bot: this.$config.name }));
+      this.logger.info(formatCompact( { op: "disconnect", endpoint: this.$config.name }));
     } catch (error) {
       this.logger.error("Error disconnecting Slack bot:", error);
       throw error;
     }
   }
 
+  private senderPermitCache = new Map<string, { at: number; role?: string; permissions: string[] }>();
+
+  private async enrichChannelSender(
+    message: Message<SlackMessageEvent>,
+    msg: SlackMessageEvent,
+  ): Promise<void> {
+    if (message.$channel.type !== "group" || !("user" in msg) || !msg.user) return;
+    const channelId = msg.channel;
+    const userId = msg.user;
+    const key = `${channelId}:${userId}`;
+    const now = Date.now();
+    const cached = this.senderPermitCache.get(key);
+    if (cached && now - cached.at < 60_000) {
+      message.$sender.role = cached.role;
+      message.$sender.permissions = cached.permissions;
+      return;
+    }
+    try {
+      const user = await this.getUserInfo(userId);
+      let isChannelManager = false;
+      try {
+        const channel = await this.getChannelInfo(channelId);
+        if (channel?.creator === userId) isChannelManager = true;
+      } catch {
+        // ignore
+      }
+      const normalized = normalizeSlackSenderForPermit({
+        isWorkspaceOwner: user.is_owner === true,
+        isWorkspaceAdmin: user.is_admin === true,
+        isChannelManager,
+      });
+      const entry = {
+        at: now,
+        role: normalized.role,
+        permissions: normalized.permissions ?? [],
+      };
+      this.senderPermitCache.set(key, entry);
+      message.$sender.role = entry.role;
+      message.$sender.permissions = entry.permissions;
+    } catch {
+      // 保守拒绝
+    }
+  }
+
   private async handleSlackMessage(msg: SlackMessageEvent): Promise<void> {
     // Ignore bot messages and message changes
     if ("subtype" in msg && (msg.subtype === "bot_message" || msg.subtype === "message_changed")) {
@@ -107,6 +152,7 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
     }
 
     const message = this.$formatMessage(msg);
+    await this.enrichChannelSender(message, msg);
     this.adapter.emit("message.receive", message);
     this.logger.debug(
       `${this.$config.name} recv  ${message.$channel.type}(${message.$channel.id}): ${segment.raw(message.$content)}`
@@ -129,7 +175,7 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
     const result = Message.from(msg, {
       $id: msg.ts,
       $adapter: "slack",
-      $bot: this.$config.name,
+      $endpoint: this.$config.name,
       $sender: {
         id: userId,
         name: userName,
@@ -170,7 +216,7 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
 
         return  await this.adapter.sendMessage({
           context: "slack",
-          bot: this.$config.name,
+          endpoint: this.$config.name,
           id: channelId,
           type: "channel",
           content: content,
@@ -458,10 +504,10 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
 
   async $recallMessage(id: string): Promise<void> {
     // Slack requires both channel and ts (timestamp) to delete a message
-    // The Bot interface only provides message ID (ts), making recall impossible  
+    // The Endpoint interface only provides message ID (ts), making recall impossible  
     // Users should use message.$recall() instead, which has the full context
     throw new Error(
-      "SlackBot.$recallMessage: Message recall not supported without channel information. " +
+      "SlackEndpoint.$recallMessage: Message recall not supported without channel information. " +
       "Use message.$recall() method instead, which contains the required context."
     );
   }
@@ -476,10 +522,10 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
   async inviteToChannel(channel: string, users: string[]): Promise<boolean> {
     try {
       await this.client!.conversations.invite({ channel, users: users.join(',') });
-      this.logger.debug(formatCompact( { op: "invite", bot: this.$id, channel, users: users.join(",") }));
+      this.logger.debug(formatCompact( { op: "invite", endpoint: this.$id, channel, users: users.join(",") }));
       return true;
     } catch (error) {
-      this.logger.error(`Slack Bot ${this.$id} 邀请用户失败:`, error);
+      this.logger.error(`Slack Endpoint ${this.$id} 邀请用户失败:`, error);
       throw error;
     }
   }
@@ -492,10 +538,10 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
   async kickFromChannel(channel: string, user: string): Promise<boolean> {
     try {
       await this.client!.conversations.kick({ channel, user });
-      this.logger.debug(formatCompact( { op: "kick", bot: this.$id, channel, user }));
+      this.logger.debug(formatCompact( { op: "kick", endpoint: this.$id, channel, user }));
       return true;
     } catch (error) {
-      this.logger.error(`Slack Bot ${this.$id} 踢出用户失败:`, error);
+      this.logger.error(`Slack Endpoint ${this.$id} 踢出用户失败:`, error);
       throw error;
     }
   }
@@ -508,10 +554,10 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
   async setChannelTopic(channel: string, topic: string): Promise<boolean> {
     try {
       await this.client!.conversations.setTopic({ channel, topic });
-      this.logger.debug(formatCompact( { op: "set_topic", bot: this.$id, channel }));
+      this.logger.debug(formatCompact( { op: "set_topic", endpoint: this.$id, channel }));
       return true;
     } catch (error) {
-      this.logger.error(`Slack Bot ${this.$id} 设置话题失败:`, error);
+      this.logger.error(`Slack Endpoint ${this.$id} 设置话题失败:`, error);
       throw error;
     }
   }
@@ -524,10 +570,10 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
   async setChannelPurpose(channel: string, purpose: string): Promise<boolean> {
     try {
       await this.client!.conversations.setPurpose({ channel, purpose });
-      this.logger.debug(formatCompact( { op: "set_purpose", bot: this.$id, channel }));
+      this.logger.debug(formatCompact( { op: "set_purpose", endpoint: this.$id, channel }));
       return true;
     } catch (error) {
-      this.logger.error(`Slack Bot ${this.$id} 设置目的失败:`, error);
+      this.logger.error(`Slack Endpoint ${this.$id} 设置目的失败:`, error);
       throw error;
     }
   }
@@ -539,10 +585,10 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
   async archiveChannel(channel: string): Promise<boolean> {
     try {
       await this.client!.conversations.archive({ channel });
-      this.logger.debug(formatCompact( { op: "archive", bot: this.$id, channel }));
+      this.logger.debug(formatCompact( { op: "archive", endpoint: this.$id, channel }));
       return true;
     } catch (error) {
-      this.logger.error(`Slack Bot ${this.$id} 归档频道失败:`, error);
+      this.logger.error(`Slack Endpoint ${this.$id} 归档频道失败:`, error);
       throw error;
     }
   }
@@ -554,10 +600,10 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
   async unarchiveChannel(channel: string): Promise<boolean> {
     try {
       await this.client!.conversations.unarchive({ channel });
-      this.logger.debug(formatCompact( { op: "unarchive", bot: this.$id, channel }));
+      this.logger.debug(formatCompact( { op: "unarchive", endpoint: this.$id, channel }));
       return true;
     } catch (error) {
-      this.logger.error(`Slack Bot ${this.$id} 取消归档失败:`, error);
+      this.logger.error(`Slack Endpoint ${this.$id} 取消归档失败:`, error);
       throw error;
     }
   }
@@ -570,10 +616,10 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
   async renameChannel(channel: string, name: string): Promise<boolean> {
     try {
       await this.client!.conversations.rename({ channel, name });
-      this.logger.debug(formatCompact( { op: "rename", bot: this.$id, channel, name }));
+      this.logger.debug(formatCompact( { op: "rename", endpoint: this.$id, channel, name }));
       return true;
     } catch (error) {
-      this.logger.error(`Slack Bot ${this.$id} 重命名频道失败:`, error);
+      this.logger.error(`Slack Endpoint ${this.$id} 重命名频道失败:`, error);
       throw error;
     }
   }
@@ -587,7 +633,7 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
       const result = await this.client!.conversations.members({ channel });
       return result.members || [];
     } catch (error) {
-      this.logger.error(`Slack Bot ${this.$id} 获取成员列表失败:`, error);
+      this.logger.error(`Slack Endpoint ${this.$id} 获取成员列表失败:`, error);
       throw error;
     }
   }
@@ -601,7 +647,7 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
       const result = await this.client!.conversations.info({ channel });
       return result.channel;
     } catch (error) {
-      this.logger.error(`Slack Bot ${this.$id} 获取频道信息失败:`, error);
+      this.logger.error(`Slack Endpoint ${this.$id} 获取频道信息失败:`, error);
       throw error;
     }
   }
@@ -615,7 +661,7 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
       const result = await this.client!.users.info({ user });
       return result.user;
     } catch (error) {
-      this.logger.error(`Slack Bot ${this.$id} 获取用户信息失败:`, error);
+      this.logger.error(`Slack Endpoint ${this.$id} 获取用户信息失败:`, error);
       throw error;
     }
   }
@@ -629,10 +675,10 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
   async addReaction(channel: string, timestamp: string, name: string): Promise<boolean> {
     try {
       await this.client!.reactions.add({ channel, timestamp, name });
-      this.logger.debug(formatCompact( { op: "reaction_add", bot: this.$id, name }));
+      this.logger.debug(formatCompact( { op: "reaction_add", endpoint: this.$id, name }));
       return true;
     } catch (error) {
-      this.logger.error(`Slack Bot ${this.$id} 添加反应失败:`, error);
+      this.logger.error(`Slack Endpoint ${this.$id} 添加反应失败:`, error);
       throw error;
     }
   }
@@ -646,10 +692,10 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
   async removeReaction(channel: string, timestamp: string, name: string): Promise<boolean> {
     try {
       await this.client!.reactions.remove({ channel, timestamp, name });
-      this.logger.debug(formatCompact( { op: "reaction_remove", bot: this.$id, name }));
+      this.logger.debug(formatCompact( { op: "reaction_remove", endpoint: this.$id, name }));
       return true;
     } catch (error) {
-      this.logger.error(`Slack Bot ${this.$id} 移除反应失败:`, error);
+      this.logger.error(`Slack Endpoint ${this.$id} 移除反应失败:`, error);
       throw error;
     }
   }
@@ -662,10 +708,10 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
   async pinMessage(channel: string, timestamp: string): Promise<boolean> {
     try {
       await this.client!.pins.add({ channel, timestamp });
-      this.logger.debug(formatCompact( { op: "pin", bot: this.$id, channel }));
+      this.logger.debug(formatCompact( { op: "pin", endpoint: this.$id, channel }));
       return true;
     } catch (error) {
-      this.logger.error(`Slack Bot ${this.$id} 置顶消息失败:`, error);
+      this.logger.error(`Slack Endpoint ${this.$id} 置顶消息失败:`, error);
       throw error;
     }
   }
@@ -678,10 +724,10 @@ export class SlackBot implements Bot<SlackBotConfig, SlackMessageEvent> {
   async unpinMessage(channel: string, timestamp: string): Promise<boolean> {
     try {
       await this.client!.pins.remove({ channel, timestamp });
-      this.logger.debug(formatCompact( { op: "unpin", bot: this.$id, channel }));
+      this.logger.debug(formatCompact( { op: "unpin", endpoint: this.$id, channel }));
       return true;
     } catch (error) {
-      this.logger.error(`Slack Bot ${this.$id} 取消置顶失败:`, error);
+      this.logger.error(`Slack Endpoint ${this.$id} 取消置顶失败:`, error);
       throw error;
     }
   }

package/src/index.ts

@@ -3,6 +3,11 @@
  */
 import { usePlugin, type Plugin, type IGroupManagement, createGroupManagementTools, type ToolFeature } from "zhin.js";
 import { SlackAdapter } from "./adapter.js";
+import {
+  platformPermit,
+  registerSlackPlatformPermitChecker,
+  slackGroupPermitResolver,
+} from "./platform-permit.js";
 
 declare module "zhin.js" {
   interface Adapters {
@@ -11,7 +16,7 @@ declare module "zhin.js" {
 }
 
 export * from "./types.js";
-export { SlackBot } from "./bot.js";
+export { SlackEndpoint } from "./endpoint.js";
 export { SlackAdapter } from "./adapter.js";
 
 const plugin = usePlugin();
@@ -19,7 +24,7 @@ const { provide, useContext } = plugin;
 
 provide({
   name: "slack",
-  description: "Slack Bot Adapter",
+  description: "Slack Endpoint Adapter",
   mounted: async (p: Plugin) => {
     const adapter = new SlackAdapter(p);
     await adapter.start();
@@ -31,16 +36,19 @@ provide({
 });
 
 useContext('tool', 'slack', (toolService: ToolFeature, slack: SlackAdapter) => {
+  const disposers: (() => void)[] = [];
+  disposers.push(registerSlackPlatformPermitChecker());
   const groupTools = createGroupManagementTools(
     slack as unknown as IGroupManagement,
     'slack',
+    { permitResolver: slackGroupPermitResolver, registerChecker: false },
   );
-  const disposers: (() => void)[] = groupTools.map(t => toolService.addTool(t, plugin.name));
+  disposers.push(...groupTools.map(t => toolService.addTool(t, plugin.name)));
 
-  function getBot(botId: string) {
-    const bot = slack.bots.get(botId);
-    if (!bot) throw new Error(`Bot ${botId} 不存在`);
-    return bot;
+  function getEndpoint(endpointId: string) {
+    const endpoint = slack.endpoints.get(endpointId);
+    if (!endpoint) throw new Error(`Endpoint ${endpointId} 不存在`);
+    return endpoint;
   }
 
   disposers.push(toolService.addTool({
@@ -49,17 +57,18 @@ useContext('tool', 'slack', (toolService: ToolFeature, slack: SlackAdapter) => {
     parameters: {
       type: 'object',
       properties: {
-        bot: { type: 'string', description: 'Bot 名称' },
+        endpoint_id: { type: 'string', description: 'Endpoint 名称', contextKey: 'endpointId' },
         channel: { type: 'string', description: '频道 ID' },
         users: { type: 'string', description: '用户 ID 列表（逗号分隔）' },
       },
-      required: ['bot', 'channel', 'users'],
+      required: ['endpoint_id', 'channel', 'users'],
     },
     platforms: ['slack'],
     tags: ['slack'],
+    permissions: [platformPermit('channel_manager')],
     execute: async (args: Record<string, any>) => {
-      const bot = getBot(args.bot);
-      const success = await bot.inviteToChannel(args.channel, args.users.split(','));
+      const endpoint = getEndpoint(args.endpoint_id);
+      const success = await endpoint.inviteToChannel(args.channel, args.users.split(','));
       return { success, message: success ? '已邀请用户加入频道' : '操作失败' };
     },
   }, plugin.name));
@@ -70,17 +79,18 @@ useContext('tool', 'slack', (toolService: ToolFeature, slack: SlackAdapter) => {
     parameters: {
       type: 'object',
       properties: {
-        bot: { type: 'string', description: 'Bot 名称' },
+        endpoint_id: { type: 'string', description: 'Endpoint 名称', contextKey: 'endpointId' },
         channel: { type: 'string', description: '频道 ID' },
         topic: { type: 'string', description: '新话题' },
       },
-      required: ['bot', 'channel', 'topic'],
+      required: ['endpoint_id', 'channel', 'topic'],
     },
     platforms: ['slack'],
     tags: ['slack'],
+    permissions: [platformPermit('channel_manager')],
     execute: async (args: Record<string, any>) => {
-      const bot = getBot(args.bot);
-      const success = await bot.setChannelTopic(args.channel, args.topic);
+      const endpoint = getEndpoint(args.endpoint_id);
+      const success = await endpoint.setChannelTopic(args.channel, args.topic);
       return { success, message: success ? '已设置频道话题' : '操作失败' };
     },
   }, plugin.name));
@@ -91,16 +101,17 @@ useContext('tool', 'slack', (toolService: ToolFeature, slack: SlackAdapter) => {
     parameters: {
       type: 'object',
       properties: {
-        bot: { type: 'string', description: 'Bot 名称' },
+        endpoint_id: { type: 'string', description: 'Endpoint 名称', contextKey: 'endpointId' },
         channel: { type: 'string', description: '频道 ID' },
       },
-      required: ['bot', 'channel'],
+      required: ['endpoint_id', 'channel'],
     },
     platforms: ['slack'],
     tags: ['slack'],
+    permissions: [platformPermit('workspace_admin')],
     execute: async (args: Record<string, any>) => {
-      const bot = getBot(args.bot);
-      const success = await bot.archiveChannel(args.channel);
+      const endpoint = getEndpoint(args.endpoint_id);
+      const success = await endpoint.archiveChannel(args.channel);
       return { success, message: success ? '已归档频道' : '操作失败' };
     },
   }, plugin.name));
@@ -111,17 +122,18 @@ useContext('tool', 'slack', (toolService: ToolFeature, slack: SlackAdapter) => {
     parameters: {
       type: 'object',
       properties: {
-        bot: { type: 'string', description: 'Bot 名称' },
+        endpoint_id: { type: 'string', description: 'Endpoint 名称', contextKey: 'endpointId' },
         channel: { type: 'string', description: '频道 ID' },
         timestamp: { type: 'string', description: '消息时间戳' },
       },
-      required: ['bot', 'channel', 'timestamp'],
+      required: ['endpoint_id', 'channel', 'timestamp'],
     },
     platforms: ['slack'],
     tags: ['slack'],
+    permissions: [platformPermit('channel_manager')],
     execute: async (args: Record<string, any>) => {
-      const bot = getBot(args.bot);
-      const success = await bot.pinMessage(args.channel, args.timestamp);
+      const endpoint = getEndpoint(args.endpoint_id);
+      const success = await endpoint.pinMessage(args.channel, args.timestamp);
       return { success, message: success ? '已置顶消息' : '操作失败' };
     },
   }, plugin.name));
@@ -132,18 +144,18 @@ useContext('tool', 'slack', (toolService: ToolFeature, slack: SlackAdapter) => {
     parameters: {
       type: 'object',
       properties: {
-        bot: { type: 'string', description: 'Bot 名称' },
+        endpoint_id: { type: 'string', description: 'Endpoint 名称', contextKey: 'endpointId' },
         channel: { type: 'string', description: '频道 ID' },
         timestamp: { type: 'string', description: '消息时间戳' },
         emoji: { type: 'string', description: '表情名称（不含冒号）' },
       },
-      required: ['bot', 'channel', 'timestamp', 'emoji'],
+      required: ['endpoint_id', 'channel', 'timestamp', 'emoji'],
     },
     platforms: ['slack'],
     tags: ['slack'],
     execute: async (args: Record<string, any>) => {
-      const bot = getBot(args.bot);
-      const success = await bot.addReaction(args.channel, args.timestamp, args.emoji);
+      const endpoint = getEndpoint(args.endpoint_id);
+      const success = await endpoint.addReaction(args.channel, args.timestamp, args.emoji);
       return { success, message: success ? `已添加反应 :${args.emoji}:` : '操作失败' };
     },
   }, plugin.name));
@@ -154,18 +166,18 @@ useContext('tool', 'slack', (toolService: ToolFeature, slack: SlackAdapter) => {
     parameters: {
       type: 'object',
       properties: {
-        bot: { type: 'string', description: 'Bot 名称' },
+        endpoint_id: { type: 'string', description: 'Endpoint 名称', contextKey: 'endpointId' },
         channel_id: { type: 'string', description: '频道 ID' },
         timestamp: { type: 'string', description: '消息时间戳' },
         name: { type: 'string', description: '表情名称（如 thumbsup、heart）' },
       },
-      required: ['bot', 'channel_id', 'timestamp', 'name'],
+      required: ['endpoint_id', 'channel_id', 'timestamp', 'name'],
     },
     platforms: ['slack'],
     tags: ['slack'],
     execute: async (args: Record<string, any>) => {
-      const bot = getBot(args.bot);
-      const success = await bot.removeReaction(args.channel_id, args.timestamp, args.name);
+      const endpoint = getEndpoint(args.endpoint_id);
+      const success = await endpoint.removeReaction(args.channel_id, args.timestamp, args.name);
       return { success, message: success ? `已移除反应 :${args.name}:` : '操作失败' };
     },
   }, plugin.name));
@@ -176,17 +188,18 @@ useContext('tool', 'slack', (toolService: ToolFeature, slack: SlackAdapter) => {
     parameters: {
       type: 'object',
       properties: {
-        bot: { type: 'string', description: 'Bot 名称' },
+        endpoint_id: { type: 'string', description: 'Endpoint 名称', contextKey: 'endpointId' },
         channel_id: { type: 'string', description: '频道 ID' },
         timestamp: { type: 'string', description: '消息时间戳' },
       },
-      required: ['bot', 'channel_id', 'timestamp'],
+      required: ['endpoint_id', 'channel_id', 'timestamp'],
     },
     platforms: ['slack'],
     tags: ['slack'],
+    permissions: [platformPermit('channel_manager')],
     execute: async (args: Record<string, any>) => {
-      const bot = getBot(args.bot);
-      const success = await bot.unpinMessage(args.channel_id, args.timestamp);
+      const endpoint = getEndpoint(args.endpoint_id);
+      const success = await endpoint.unpinMessage(args.channel_id, args.timestamp);
       return { success, message: success ? '已取消置顶' : '操作失败' };
     },
   }, plugin.name));
@@ -197,16 +210,16 @@ useContext('tool', 'slack', (toolService: ToolFeature, slack: SlackAdapter) => {
     parameters: {
       type: 'object',
       properties: {
-        bot: { type: 'string', description: 'Bot 名称' },
+        endpoint_id: { type: 'string', description: 'Endpoint 名称', contextKey: 'endpointId' },
         user_id: { type: 'string', description: '用户 ID' },
       },
-      required: ['bot', 'user_id'],
+      required: ['endpoint_id', 'user_id'],
     },
     platforms: ['slack'],
     tags: ['slack'],
     execute: async (args: Record<string, any>) => {
-      const bot = getBot(args.bot);
-      const user = await bot.getUserInfo(args.user_id);
+      const endpoint = getEndpoint(args.endpoint_id);
+      const user = await endpoint.getUserInfo(args.user_id);
       return {
         id: user.id,
         name: user.name,
@@ -226,17 +239,18 @@ useContext('tool', 'slack', (toolService: ToolFeature, slack: SlackAdapter) => {
     parameters: {
       type: 'object',
       properties: {
-        bot: { type: 'string', description: 'Bot 名称' },
+        endpoint_id: { type: 'string', description: 'Endpoint 名称', contextKey: 'endpointId' },
         channel_id: { type: 'string', description: '频道 ID' },
         purpose: { type: 'string', description: '频道用途描述' },
       },
-      required: ['bot', 'channel_id', 'purpose'],
+      required: ['endpoint_id', 'channel_id', 'purpose'],
     },
     platforms: ['slack'],
     tags: ['slack'],
+    permissions: [platformPermit('channel_manager')],
     execute: async (args: Record<string, any>) => {
-      const bot = getBot(args.bot);
-      const success = await bot.setChannelPurpose(args.channel_id, args.purpose);
+      const endpoint = getEndpoint(args.endpoint_id);
+      const success = await endpoint.setChannelPurpose(args.channel_id, args.purpose);
       return { success, message: success ? '频道用途已更新' : '操作失败' };
     },
   }, plugin.name));
@@ -247,16 +261,17 @@ useContext('tool', 'slack', (toolService: ToolFeature, slack: SlackAdapter) => {
     parameters: {
       type: 'object',
       properties: {
-        bot: { type: 'string', description: 'Bot 名称' },
+        endpoint_id: { type: 'string', description: 'Endpoint 名称', contextKey: 'endpointId' },
         channel_id: { type: 'string', description: '频道 ID' },
       },
-      required: ['bot', 'channel_id'],
+      required: ['endpoint_id', 'channel_id'],
     },
     platforms: ['slack'],
     tags: ['slack'],
+    permissions: [platformPermit('workspace_admin')],
     execute: async (args: Record<string, any>) => {
-      const bot = getBot(args.bot);
-      const success = await bot.unarchiveChannel(args.channel_id);
+      const endpoint = getEndpoint(args.endpoint_id);
+      const success = await endpoint.unarchiveChannel(args.channel_id);
       return { success, message: success ? '频道已恢复' : '操作失败' };
     },
   }, plugin.name));

package/src/platform-permit.ts

@@ -0,0 +1,64 @@
+/**
+ * Slack platform permit — workspace + channel 权限
+ */
+import type { Message } from 'zhin.js';
+import { registerPlatformPermitChecker } from 'zhin.js';
+
+const ADAPTER = 'slack';
+
+export function platformPermit(perm: string): string {
+  return `platform(${ADAPTER},${perm})`;
+}
+
+const FACTORY_PERM_MAP: Record<string, string> = {
+  group_admin: 'channel_manager',
+  group_owner: 'workspace_owner',
+};
+
+export function slackGroupPermitResolver(logicalPerm: string): string {
+  return platformPermit(FACTORY_PERM_MAP[logicalPerm] ?? logicalPerm);
+}
+
+export function normalizeSlackSenderForPermit(input: {
+  isWorkspaceOwner?: boolean;
+  isWorkspaceAdmin?: boolean;
+  isChannelManager?: boolean;
+}): { role?: string; permissions?: string[] } {
+  const permissions: string[] = [];
+  if (input.isWorkspaceOwner) {
+    permissions.push('workspace_owner', 'workspace_admin', 'channel_manager');
+    return { role: 'owner', permissions };
+  }
+  if (input.isWorkspaceAdmin) {
+    permissions.push('workspace_admin', 'channel_manager');
+    return { role: 'admin', permissions };
+  }
+  if (input.isChannelManager) {
+    permissions.push('channel_manager');
+    return { role: 'channel_admin', permissions };
+  }
+  return { role: 'member', permissions };
+}
+
+export function checkSlackPlatformPermit(perm: string, message: Message<any>): boolean {
+  const sender = message.$sender as { role?: string; permissions?: string[] };
+  const permissions = sender.permissions ?? [];
+  const role = sender.role;
+  const has = (t: string) => permissions.includes(t);
+
+  switch (perm) {
+    case 'workspace_owner':
+      return role === 'owner' || has('workspace_owner');
+    case 'workspace_admin':
+      return role === 'owner' || role === 'admin' || has('workspace_admin') || has('workspace_owner');
+    case 'channel_manager':
+      return role === 'owner' || role === 'admin' || role === 'channel_admin'
+        || has('channel_manager') || has('workspace_admin') || has('workspace_owner');
+    default:
+      return false;
+  }
+}
+
+export function registerSlackPlatformPermitChecker(): () => void {
+  return registerPlatformPermitChecker(ADAPTER, checkSlackPlatformPermit);
+}

package/src/types.ts

@@ -4,7 +4,7 @@
 import type { LogLevel } from "@slack/bolt";
 import type { KnownEventFromType } from "@slack/bolt";
 
-export interface SlackBotConfig {
+export interface SlackEndpointConfig {
   context: "slack";
   token: string;
   name: string;

package/lib/bot.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bot.d.ts","sourceRoot":"","sources":["../src/bot.ts"],"names":[],"mappings":"AAKA,OAAO,EAAiB,GAAG,EAAE,OAAO,EAAwC,WAAW,EAAE,MAAM,SAAS,CAAC;AACzG,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAGjD,qBAAa,QAAS,YAAW,GAAG,CAAC,cAAc,EAAE,iBAAiB,CAAC;;IAclD,OAAO,EAAE,YAAY;IAAS,OAAO,EAAE,cAAc;IAbxE,UAAU,EAAE,OAAO,CAAC;IACpB,sFAAsF;IACtF,OAAO,CAAC,GAAG,CAAC,CAAW;IACvB,OAAO,CAAC,MAAM,CAAC,CAAY;IAE3B,IAAI,MAAM,6BAET;IAED,IAAI,GAAG,WAEN;gBAEkB,OAAO,EAAE,YAAY,EAAS,OAAO,EAAE,cAAc;IA0BlE,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAqCzB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;YAepB,kBAAkB;IAahC,cAAc,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAoElE,OAAO,CAAC,mBAAmB;IAiF3B,OAAO,CAAC,cAAc;IA+FhB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;YAgB3C,oBAAoB;IAmF5B,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAY/C;;;;OAIG;IACG,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAWzE;;;;OAIG;IACG,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWtE;;;;OAIG;IACG,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWvE;;;;OAIG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAW3E;;;OAGG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWvD;;;OAGG;IACG,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWzD;;;;OAIG;IACG,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWpE;;;OAGG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAU3D;;;OAGG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAUnD;;;OAGG;IACG,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAU7C;;;;;OAKG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWrF;;;;;OAKG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWxF;;;;OAIG;IACG,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWtE;;;;OAIG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAUzE"}