@zhin.js/core 1.1.34 → 1.1.35

package/lib/built/login-assist.js

@@ -6,34 +6,77 @@
  * 待办未消费前会一直保留，刷新页面后仍可继续消费。
  *
  * 事件：
- *   bot.login.pending — 有新待办时触发，payload: PendingLoginTask
+ *   endpoint.login.pending — 有新待办时触发，payload: PendingLoginTask
+ *   endpoint.login.expired — 超时自动取消时触发，payload: PendingLoginTask
  */
+/** 默认 5 分钟；扫码/滑块长期挂起会泄漏 Promise 与 Map 条目 */
+export const DEFAULT_LOGIN_ASSIST_TIMEOUT_MS = 5 * 60 * 1000;
 // ============================================================================
 // LoginAssist 服务
 // ============================================================================
 export class LoginAssist {
-    plugin;
+    bus;
     pending = new Map();
+    local = new Map();
     idSeq = 0;
-    constructor(plugin) {
-        this.plugin = plugin;
+    /** 构造时默认超时；可被 waitForInput options 覆盖 */
+    defaultTimeoutMs;
+    constructor(bus, options) {
+        this.bus = bus ?? null;
+        this.defaultTimeoutMs = options?.defaultTimeoutMs ?? DEFAULT_LOGIN_ASSIST_TIMEOUT_MS;
     }
     /**
-     * 生产者：等待用户输入后 resolve。会发出 bot.login.pending 事件，未消费前可被 listPending 拉取（刷新后可继续消费）。
+     * Subscribe without requiring a Plugin EventEmitter.
+     * Returns unsubscribe.
      */
-    waitForInput(adapter, botId, type, payload = {}) {
+    subscribe(name, listener) {
+        let set = this.local.get(name);
+        if (!set) {
+            set = new Set();
+            this.local.set(name, set);
+        }
+        set.add(listener);
+        return () => {
+            set.delete(listener);
+        };
+    }
+    /**
+     * 生产者：等待用户输入后 resolve。会发出 endpoint.login.pending 事件，未消费前可被 listPending 拉取（刷新后可继续消费）。
+     * 超时后 reject 并 emit `endpoint.login.expired`。
+     */
+    waitForInput(adapter, endpointKey, type, payload, options) {
         const id = `login-${Date.now()}-${++this.idSeq}`;
+        const timeoutMs = resolveTimeoutMs(options?.timeoutMs, this.defaultTimeoutMs);
+        const createdAt = Date.now();
         const task = {
             id,
             adapter,
-            botId,
+            endpointKey,
             type,
             payload: { message: payload.message ?? '', ...payload },
-            createdAt: Date.now(),
+            createdAt,
+            ...(timeoutMs != null ? { expiresAt: createdAt + timeoutMs } : {}),
         };
         const promise = new Promise((resolve, reject) => {
-            this.pending.set(id, { task, resolve, reject });
-            this.plugin.emit('bot.login.pending', task);
+            const entry = { task, owner: options.owner, resolve, reject };
+            if (timeoutMs != null) {
+                entry.timer = setTimeout(() => {
+                    if (!this.pending.has(id))
+                        return;
+                    this.pending.delete(id);
+                    try {
+                        this.#notify('endpoint.login.expired', task);
+                    }
+                    catch {
+                        /* observer failure must not leave the producer hanging forever */
+                    }
+                    reject(new Error(`LoginAssist task timed out after ${timeoutMs}ms`));
+                }, timeoutMs);
+                // Node: 不阻止进程退出
+                entry.timer.unref?.();
+            }
+            this.pending.set(id, entry);
+            this.#notify('endpoint.login.pending', task);
         });
         return promise;
     }
@@ -45,7 +88,10 @@ export class LoginAssist {
         if (!entry)
             return false;
         this.pending.delete(id);
+        if (entry.timer)
+            clearTimeout(entry.timer);
         entry.resolve(value);
+        this.#notify('endpoint.login.resolved', entry.task);
         return true;
     }
     /**
@@ -56,20 +102,76 @@ export class LoginAssist {
         if (!entry)
             return false;
         this.pending.delete(id);
+        if (entry.timer)
+            clearTimeout(entry.timer);
         entry.reject(new Error(reason));
+        this.#notify('endpoint.login.resolved', entry.task);
         return true;
     }
+    /**
+     * Cancel pending tasks created by one exact Endpoint instance.
+     */
+    cancelOwned(owner, reason = 'superseded') {
+        let count = 0;
+        for (const [id, entry] of [...this.pending]) {
+            if (entry.owner !== owner)
+                continue;
+            this.pending.delete(id);
+            if (entry.timer)
+                clearTimeout(entry.timer);
+            entry.reject(new Error(reason));
+            this.#notify('endpoint.login.resolved', entry.task);
+            count += 1;
+        }
+        return count;
+    }
     /**
      * 列出未消费的待办（供 Web/CLI 展示，刷新后仍可拉取同一列表）。
      */
     listPending() {
         return [...this.pending.values()].map((e) => e.task);
     }
+    hasPending(adapter, endpointKey) {
+        if (adapter == null)
+            return this.pending.size > 0;
+        for (const entry of this.pending.values()) {
+            if (entry.task.adapter !== adapter)
+                continue;
+            if (endpointKey != null && entry.task.endpointKey !== endpointKey)
+                continue;
+            return true;
+        }
+        return false;
+    }
     dispose() {
         for (const [, entry] of this.pending) {
+            if (entry.timer)
+                clearTimeout(entry.timer);
             entry.reject(new Error('LoginAssist disposed'));
         }
         this.pending.clear();
+        this.local.clear();
+    }
+    #notify(name, task) {
+        try {
+            this.bus?.emit(name, task);
+        }
+        catch {
+            /* bus observers must not break producer */
+        }
+        for (const listener of this.local.get(name) ?? []) {
+            try {
+                listener(task);
+            }
+            catch {
+                /* same */
+            }
+        }
     }
 }
-//# sourceMappingURL=login-assist.js.map
+function resolveTimeoutMs(explicit, fallback) {
+    const raw = explicit === undefined ? fallback : explicit;
+    if (!Number.isFinite(raw) || raw <= 0)
+        return undefined;
+    return raw;
+}

package/lib/built/management-command-guard.d.ts

@@ -0,0 +1,15 @@
+/**
+ * IM 运维 / Endpoint 管理斜杠命令：仅 master 或 trusted 可执行。
+ */
+import { resolveSenderRoles, type AITriggerConfig } from './ai-trigger.js';
+import type { Message } from '../message.js';
+import type { Plugin } from '../plugin.js';
+export declare const MANAGEMENT_COMMAND_DENIED = "\u26A0\uFE0F \u8BE5\u547D\u4EE4\u4EC5 Endpoint Owner\uFF08master\uFF09\u6216 trusted \u64CD\u4F5C\u5458\u53EF\u7528\u3002";
+/** 运维 / 内省 / Endpoint 管理命令：仅 master 或 trusted 可执行与展示 */
+export declare const MANAGEMENT_OPERATOR_PERMIT: "role(master,trusted)";
+/** Endpoint Owner 私聊专用命令（如 /approve） */
+export declare const OWNER_OPERATOR_PERMIT: "role(master)";
+export declare const OWNER_PRIVATE_PERMITS: readonly ["role(master)", "private(*)"];
+export declare function resolveManagementCommandRoles(message: Message, root: Plugin, triggerConfig?: AITriggerConfig): ReturnType<typeof resolveSenderRoles>['roles'];
+/** 通过返回 null；拒绝返回用户可见提示文案 */
+export declare function rejectUnlessManagementOperator(message: Message, root: Plugin, triggerConfig?: AITriggerConfig): string | null;

package/lib/built/management-command-guard.js

@@ -0,0 +1,25 @@
+/**
+ * IM 运维 / Endpoint 管理斜杠命令：仅 master 或 trusted 可执行。
+ */
+import { mergeAITriggerConfig, resolveSenderRoles, } from './ai-trigger.js';
+import { hasSenderRole } from './roles.js';
+export const MANAGEMENT_COMMAND_DENIED = '⚠️ 该命令仅 Endpoint Owner（master）或 trusted 操作员可用。';
+/** 运维 / 内省 / Endpoint 管理命令：仅 master 或 trusted 可执行与展示 */
+export const MANAGEMENT_OPERATOR_PERMIT = 'role(master,trusted)';
+/** Endpoint Owner 私聊专用命令（如 /approve） */
+export const OWNER_OPERATOR_PERMIT = 'role(master)';
+export const OWNER_PRIVATE_PERMITS = [OWNER_OPERATOR_PERMIT, 'private(*)'];
+export function resolveManagementCommandRoles(message, root, triggerConfig) {
+    const cfg = mergeAITriggerConfig(triggerConfig ?? {});
+    const adapterInstance = root.inject(message.$adapter);
+    const endpointConfig = adapterInstance?.endpoints?.get(message.$endpoint)?.$config;
+    return resolveSenderRoles(message, cfg, endpointConfig).roles;
+}
+/** 通过返回 null；拒绝返回用户可见提示文案 */
+export function rejectUnlessManagementOperator(message, root, triggerConfig) {
+    const roles = resolveManagementCommandRoles(message, root, triggerConfig);
+    if (hasSenderRole(roles, 'trusted')) {
+        return null;
+    }
+    return MANAGEMENT_COMMAND_DENIED;
+}

package/lib/built/message-enrich.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Message enrich — 入站鉴权快照与合成通讯上下文
+ */
+import type { Plugin } from '../plugin.js';
+import { Message, type MessageChannel } from '../message.js';
+import type { Adapters } from '../adapter.js';
+import type { SendContent } from '../types.js';
+import { type SenderRole } from './roles.js';
+/** Agent turn 可挂载在 Message 扩展字段上的元数据 */
+export type AgentTurnMessage = Message<{
+    extra?: Record<string, unknown>;
+}>;
+export declare function senderRolesFromMessage(message: Message<any>): readonly SenderRole[];
+/**
+ * 入站 enrich：写入 $sender.isMaster / isTrusted 快照（本 turn 只读）
+ */
+export declare function enrichMessageForAgent(plugin: Plugin, message: Message<any>): Message<any>;
+export interface SyntheticMessageInput {
+    adapter: keyof Adapters | string;
+    endpoint: string;
+    sender: {
+        id: string;
+        name?: string;
+        role?: string;
+        isMaster?: boolean;
+        isTrusted?: boolean;
+    };
+    channel: MessageChannel;
+    id?: string;
+    reply?: (content: SendContent, quote?: boolean | string) => Promise<string>;
+    extra?: Record<string, unknown>;
+}
+/** cron / subagent / mission 等无真实入站时构造最小 Message */
+export declare function createSyntheticMessage(input: SyntheticMessageInput): AgentTurnMessage;
+/** hook context 中的 commMessage 字段（AIHookEvent.context） */
+export declare function commMessageFromHookContext(context: Record<string, unknown>): Message<any> | undefined;
+/** 兼容 tool parameters 上的 contextKey（endpointKey / sceneId / scope 等） */
+export declare function resolveContextKey(message: Message<any>, key: string): unknown;

package/lib/built/message-enrich.js

@@ -0,0 +1,75 @@
+import { Message } from '../message.js';
+import { hasSenderRole } from './roles.js';
+import { resolveSubjectRoles } from './authorization.js';
+function frameworkRolesFromSenderFlags(sender) {
+    if (sender.isMaster)
+        return ['master'];
+    if (sender.isTrusted)
+        return ['trusted'];
+    return ['user'];
+}
+export function senderRolesFromMessage(message) {
+    const sender = message.$sender;
+    if (sender.isMaster !== undefined || sender.isTrusted !== undefined) {
+        return frameworkRolesFromSenderFlags(sender);
+    }
+    return ['user'];
+}
+/**
+ * 入站 enrich：写入 $sender.isMaster / isTrusted 快照（本 turn 只读）
+ */
+export function enrichMessageForAgent(plugin, message) {
+    const { roles } = resolveSubjectRoles(plugin.root ?? plugin, message);
+    message.$sender.isMaster = hasSenderRole(roles, 'master');
+    message.$sender.isTrusted = !message.$sender.isMaster && hasSenderRole(roles, 'trusted');
+    return message;
+}
+/** cron / subagent / mission 等无真实入站时构造最小 Message */
+export function createSyntheticMessage(input) {
+    const id = input.id ?? `synthetic:${Date.now()}`;
+    const reply = input.reply ?? (async () => id);
+    return Message.from({ extra: input.extra }, {
+        $id: id,
+        $adapter: input.adapter,
+        $endpoint: input.endpoint,
+        $content: [],
+        $sender: { ...input.sender },
+        $reply: reply,
+        $recall: async () => { },
+        $channel: input.channel,
+        $timestamp: Date.now(),
+        $raw: '',
+    });
+}
+/** hook context 中的 commMessage 字段（AIHookEvent.context） */
+export function commMessageFromHookContext(context) {
+    const raw = context.commMessage;
+    if (raw && typeof raw === 'object' && '$sender' in raw) {
+        return raw;
+    }
+    return undefined;
+}
+/** 兼容 tool parameters 上的 contextKey（endpointKey / sceneId / scope 等） */
+export function resolveContextKey(message, key) {
+    switch (key) {
+        case 'platform':
+            return message.$adapter;
+        case 'endpointKey':
+            return message.$endpoint;
+        case 'messageId':
+            return message.$id;
+        case 'sceneId':
+            return message.$channel?.id ?? message.$sender.id;
+        case 'senderId':
+            return message.$sender.id;
+        case 'scope':
+            return message.$channel?.type ?? 'private';
+        default: {
+            if (key in message) {
+                return message[key];
+            }
+            const extra = message.extra;
+            return extra?.[key];
+        }
+    }
+}

package/lib/built/message-filter.d.ts

@@ -7,7 +7,7 @@
  *
  * 核心特性：
  *   - 基于优先级的规则引擎（first-match-wins，类似防火墙规则）
- *   - 多维匹配：scope / adapter / bot / channel / sender
+ *   - 多维匹配：scope / adapter / endpoint / channel / sender
  *   - 支持精确匹配、通配符 `*`、正则 `/pattern/`
  *   - 通过 Dispatcher Guardrail 集成，在消息调度第一阶段拦截
  *   - 插件通过 `addFilterRule()` 动态注册规则，卸载时自动清理
@@ -52,8 +52,8 @@ export interface FilterRule {
     scopes?: FilterScope[];
     /** 匹配的适配器名称 */
     adapters?: FilterPattern[];
-    /** 匹配的 Bot 名称 */
-    bots?: FilterPattern[];
+    /** 匹配的 Endpoint 名称 */
+    endpoints?: FilterPattern[];
     /** 匹配的频道/群/会话 ID */
     channels?: FilterPattern[];
     /** 匹配的发送者 ID */
@@ -77,7 +77,7 @@ export interface FilterRuleConfig {
     enabled?: boolean;
     scopes?: FilterScope[];
     adapters?: string[];
-    bots?: string[];
+    endpoints?: string[];
     channels?: string[];
     senders?: string[];
 }
@@ -174,4 +174,3 @@ export declare class MessageFilterFeature extends Feature<FilterRule> {
         setDefaultFilterPolicy(policy: FilterAction): void;
     };
 }
-//# sourceMappingURL=message-filter.d.ts.map

package/lib/built/message-filter.js

@@ -7,13 +7,12 @@
  *
  * 核心特性：
  *   - 基于优先级的规则引擎（first-match-wins，类似防火墙规则）
- *   - 多维匹配：scope / adapter / bot / channel / sender
+ *   - 多维匹配：scope / adapter / endpoint / channel / sender
  *   - 支持精确匹配、通配符 `*`、正则 `/pattern/`
  *   - 通过 Dispatcher Guardrail 集成，在消息调度第一阶段拦截
  *   - 插件通过 `addFilterRule()` 动态注册规则，卸载时自动清理
  */
 import { Feature } from '@zhin.js/kernel';
-import { getPlugin } from '../plugin.js';
 // ============================================================================
 // 规则工厂
 // ============================================================================
@@ -144,7 +143,7 @@ export class MessageFilterFeature extends Feature {
                 enabled: r.enabled !== false,
                 scopes: r.scopes,
                 adapters: r.adapters?.map(p => p instanceof RegExp ? p.source : p),
-                bots: r.bots?.map(p => p instanceof RegExp ? p.source : p),
+                endpoints: r.endpoints?.map(p => p instanceof RegExp ? p.source : p),
                 channels: r.channels?.map(p => p instanceof RegExp ? p.source : p),
                 senders: r.senders?.map(p => p instanceof RegExp ? p.source : p),
             })),
@@ -155,7 +154,7 @@ export class MessageFilterFeature extends Feature {
         const feature = this;
         return {
             addFilterRule(rule) {
-                const plugin = getPlugin();
+                const plugin = this;
                 const dispose = feature.add(rule, plugin.name);
                 plugin.recordFeatureContribution(feature.name, rule.name);
                 plugin.onDispose(dispose);
@@ -195,7 +194,7 @@ export class MessageFilterFeature extends Feature {
             enabled: rc.enabled,
             scopes: rc.scopes,
             adapters: rc.adapters?.map(p => this.#parsePattern(p)),
-            bots: rc.bots?.map(p => this.#parsePattern(p)),
+            endpoints: rc.endpoints?.map(p => this.#parsePattern(p)),
             channels: rc.channels?.map(p => this.#parsePattern(p)),
             senders: rc.senders?.map(p => this.#parsePattern(p)),
         };
@@ -216,7 +215,7 @@ export class MessageFilterFeature extends Feature {
         if (rule.adapters?.length && !this.#matchAny(rule.adapters, String(message.$adapter))) {
             return false;
         }
-        if (rule.bots?.length && !this.#matchAny(rule.bots, String(message.$bot))) {
+        if (rule.endpoints?.length && !this.#matchAny(rule.endpoints, String(message.$endpoint))) {
             return false;
         }
         if (rule.channels?.length && !this.#matchAny(rule.channels, String(message.$channel.id))) {
@@ -238,4 +237,3 @@ export class MessageFilterFeature extends Feature {
         });
     }
 }
-//# sourceMappingURL=message-filter.js.map

package/lib/built/optional-peer-import.d.ts

@@ -0,0 +1,3 @@
+/** 从应用根（ZHIN_PROJECT_ROOT / cwd）解析 optional peer，避免 core 包目录下 dynamic import 失败 */
+export declare function resolveOptionalPeerPackage(packageName: string): string | undefined;
+export declare function importOptionalPeerPackage<T = Record<string, unknown>>(packageName: string): Promise<T>;

package/lib/built/optional-peer-import.js

@@ -0,0 +1,33 @@
+import { createRequire } from 'node:module';
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+/** 从应用根（ZHIN_PROJECT_ROOT / cwd）解析 optional peer，避免 core 包目录下 dynamic import 失败 */
+export function resolveOptionalPeerPackage(packageName) {
+    const roots = new Set();
+    const envRoot = process.env.ZHIN_PROJECT_ROOT?.trim();
+    if (envRoot)
+        roots.add(path.resolve(envRoot));
+    roots.add(process.cwd());
+    for (const root of roots) {
+        try {
+            const req = createRequire(path.join(root, 'package.json'));
+            return req.resolve(packageName);
+        }
+        catch {
+            // try next root
+        }
+    }
+    try {
+        return createRequire(import.meta.url).resolve(packageName);
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function importOptionalPeerPackage(packageName) {
+    const resolved = resolveOptionalPeerPackage(packageName);
+    if (resolved) {
+        return import(pathToFileURL(resolved).href);
+    }
+    return import(packageName);
+}

package/lib/built/outbound-media-contract.d.ts

@@ -0,0 +1,22 @@
+import type { SendContent } from '../types.js';
+/**
+ * 出站两阶段契约（Adapter 实现参考）：
+ *
+ * 1. **resolveRichSegments**（Adapter.renderSendMessage 首步）
+ *    语义段（html / tts / qrcode / markdown）→ 标准 IM 段（image / audio / text）
+ *
+ * 2. **materializeOutboundMedia**（Endpoint.$sendMessage 前，各 adapter 可选）
+ *    标准段中的 base64 / 本地路径 → 平台 URL 或上传后的引用
+ */
+export interface OutboundMediaUploadContext {
+    /** 上传二进制，返回平台可发送的 URL */
+    uploadBuffer?(buffer: Buffer, mimeHint?: string): Promise<string>;
+    /** 上传本地文件路径 */
+    uploadFile?(filePath: string): Promise<string>;
+    outboundDir?: string;
+}
+export type OutboundMediaMaterializer = (content: SendContent, ctx: OutboundMediaUploadContext) => Promise<SendContent>;
+/** 契约测试：adapter 须声明 outboundRichSegmentPolicy */
+export declare function assertAdapterDeclaresRichSegmentPolicy(adapterClass: {
+    outboundRichSegmentPolicy?: Record<string, string>;
+}): void;

package/lib/built/outbound-media-contract.js

@@ -0,0 +1,10 @@
+/** 契约测试：adapter 须声明 outboundRichSegmentPolicy */
+export function assertAdapterDeclaresRichSegmentPolicy(adapterClass) {
+    if (!adapterClass.outboundRichSegmentPolicy) {
+        throw new Error('Adapter must declare static outboundRichSegmentPolicy');
+    }
+    const policy = adapterClass.outboundRichSegmentPolicy;
+    if (typeof policy !== 'object' || Object.keys(policy).length === 0) {
+        throw new Error('outboundRichSegmentPolicy must be a non-empty object');
+    }
+}

package/lib/built/outbound-media-utils.d.ts

@@ -0,0 +1,9 @@
+import type { MessageElement, SendContent } from '../types.js';
+export declare function isRemoteUrl(value: string): boolean;
+/** 从 message 段 data 提取 base64 Buffer（data: URL / base64:// / raw base64） */
+export declare function extractBase64Buffer(data: Record<string, unknown>): Buffer | undefined;
+/** 解析本地文件路径（非 http(s) / base64） */
+export declare function resolveLocalMediaPath(data: Record<string, unknown>): string | undefined;
+export declare function asMessageElements(content: SendContent): MessageElement[];
+export declare function isMediaSegmentType(type: string): boolean;
+export declare function collectOutboundMediaKinds(content: SendContent | undefined): string[];

package/lib/built/outbound-media-utils.js

@@ -0,0 +1,62 @@
+const MEDIA_SEGMENT_TYPES = new Set(['image', 'audio', 'video', 'file']);
+export function isRemoteUrl(value) {
+    return /^https?:\/\//i.test(value);
+}
+/** 从 message 段 data 提取 base64 Buffer（data: URL / base64:// / raw base64） */
+export function extractBase64Buffer(data) {
+    const url = typeof data.url === 'string' ? data.url : undefined;
+    const file = typeof data.file === 'string' ? data.file : undefined;
+    const base64 = typeof data.base64 === 'string' ? data.base64 : undefined;
+    if (url?.startsWith('base64://')) {
+        return Buffer.from(url.slice(9), 'base64');
+    }
+    if (url && /^data:[^/]+\/[^;]+;base64,/i.test(url)) {
+        return Buffer.from(url.replace(/^data:[^/]+\/[^;]+;base64,/, ''), 'base64');
+    }
+    if (file?.startsWith('base64://')) {
+        return Buffer.from(file.slice(9), 'base64');
+    }
+    if (base64) {
+        const raw = base64.startsWith('base64://') ? base64.slice(9) : base64;
+        return Buffer.from(raw, 'base64');
+    }
+    return undefined;
+}
+/** 解析本地文件路径（非 http(s) / base64） */
+export function resolveLocalMediaPath(data) {
+    const url = typeof data.url === 'string' ? data.url : undefined;
+    const file = typeof data.file === 'string' ? data.file : undefined;
+    const candidate = file ?? url;
+    if (!candidate || isRemoteUrl(candidate))
+        return undefined;
+    if (candidate.startsWith('base64://') || /^data:/.test(candidate))
+        return undefined;
+    if (candidate.startsWith('file://') || candidate.startsWith('/') || !candidate.includes('://')) {
+        return candidate;
+    }
+    return undefined;
+}
+export function asMessageElements(content) {
+    if (typeof content === 'string') {
+        return [{ type: 'text', data: { text: content } }];
+    }
+    if (!Array.isArray(content)) {
+        return [content];
+    }
+    return content.map((item) => typeof item === 'string' ? { type: 'text', data: { text: item } } : item);
+}
+export function isMediaSegmentType(type) {
+    return MEDIA_SEGMENT_TYPES.has(type);
+}
+export function collectOutboundMediaKinds(content) {
+    if (content == null)
+        return [];
+    const kinds = new Set();
+    for (const item of asMessageElements(content)) {
+        const t = item?.type;
+        if (typeof t === 'string' && isMediaSegmentType(t)) {
+            kinds.add(t);
+        }
+    }
+    return [...kinds];
+}

package/lib/built/permission.d.ts

@@ -5,6 +5,7 @@
 import { Feature, FeatureJSON } from "@zhin.js/kernel";
 import type { MaybePromise, RegisteredAdapter, AdapterMessage } from "../types.js";
 import { Message as MessageClass } from "../message.js";
+export type PermissionSubject = MessageClass<AdapterMessage<RegisteredAdapter>>;
 export type PermissionItem<T extends RegisteredAdapter = RegisteredAdapter> = {
     name: string | RegExp;
     check: PermissionChecker<T>;
@@ -31,9 +32,9 @@ export declare class PermissionFeature extends Feature<PermissionItem> {
     readonly desc = "\u6743\u9650";
     constructor();
     /**
-     * 检查权限
+     * 检查权限（subject 为 Message 通讯上下文）
      */
-    check(name: string, message: MessageClass<AdapterMessage<RegisteredAdapter>>): Promise<boolean>;
+    check(name: string, subject: PermissionSubject): Promise<boolean>;
     /**
      * 序列化为 JSON
      */
@@ -48,8 +49,3 @@ export declare class PermissionFeature extends Feature<PermissionItem> {
 export declare namespace Permissions {
     function define<T extends RegisteredAdapter = RegisteredAdapter>(name: string | RegExp, check: PermissionChecker<T>): PermissionItem<T>;
 }
-/**
- * @deprecated Use PermissionFeature instead
- */
-export declare const PermissionService: typeof PermissionFeature;
-//# sourceMappingURL=permission.d.ts.map