fix(core): fix session.permissions maybe undefined

packages/core/src/command/validate.ts

@@ -18,7 +18,7 @@ export default function validate(ctx: Context) {
         permissions.push(`command.${command.name}.option.${option.name}`)
       }
     }
-    if (!await ctx.permissions.test(session.permissions, permissions, session as any)) {
+    if (!await ctx.permissions.test(permissions, session as any)) {
       return sendHint('internal.low-authority')
     }
   }, true)

packages/core/src/middleware.ts

@@ -256,7 +256,6 @@ export class Processor {
     defineProperty(session, 'parsed', { hasMention, content, appel, prefix: null })
     this.ctx.emit(session, 'before-attach', session)
 
-    session.permissions = []
     if (this.ctx.database) {
       if (!session.isDirect) {
         // attach group data
@@ -265,7 +264,6 @@ export class Processor {
         const channel = await session.observeChannel(channelFields)
         // for backwards compatibility
         channel.guildId = session.guildId
-        session.permissions.push(...channel.permissions)
 
         // emit attach event
         if (await this.ctx.serial(session, 'attach-channel', session)) return
@@ -280,7 +278,6 @@ export class Processor {
       const userFields = new Set<User.Field>(['id', 'flag', 'authority', 'permissions', 'locales'])
       this.ctx.emit('before-attach-user', session, userFields)
       const user = await session.observeUser(userFields)
-      session.permissions.push(`user.${user.id}`, ...user.permissions)
 
       // emit attach event
       if (await this.ctx.serial(session, 'attach-user', session)) return

packages/core/src/permission.ts

@@ -76,6 +76,12 @@ export class Permissions {
     this.provide('bot.*', async (name, session) => {
       return session.bot?.supports(name.slice(4), session)
     })
+
+    this.provide('*', async (name, session) => {
+      return session.permissions?.includes(name)
+        || session.user?.permissions?.includes(name)
+        || session.channel?.permissions?.includes(name)
+    })
   }
 
   private get caller(): Context {
@@ -96,9 +102,9 @@ export class Permissions {
         .map(([key, value]) => value)
       if (!callbacks.length) return false
       for (const callback of callbacks) {
-        if (!await callback(name, session)) return false
+        if (await callback(name, session)) return true
       }
-      return true
+      return false
     } catch (error) {
       logger.warn(error)
       return false
@@ -140,11 +146,10 @@ export class Permissions {
     return [...this.#inherits.store.keys()]
   }
 
-  async test(x: string[], y: Iterable<string>, session: Partial<Session> = {}) {
+  async test(y: Iterable<string>, session: Partial<Session> = {}) {
     const cache: Dict<Promise<boolean>> = Object.create(null)
     for (const name of this.#depends.subgraph(y, session)) {
       const parents = [...this.#inherits.subgraph([name], session)]
-      if (parents.some(parent => x.includes(parent))) continue
       const results = await Promise.all(parents.map(parent => cache[parent] ||= this.check(parent, session)))
       if (results.some(result => result)) continue
       return false

packages/core/src/session.ts

@@ -100,6 +100,7 @@ extend(Session.prototype as Session.Private, {
     defineProperty(this, 'user', null)
     defineProperty(this, 'channel', null)
     defineProperty(this, 'guild', null)
+    defineProperty(this, 'permissions', [])
     defineProperty(this, '_queuedTasks', [])
     defineProperty(this, '_queuedTimeout', null)
   },