@imweapp/openclaw-imwe 2026.4.12-alpha.2 → 2026.4.12-alpha.3

package/README.md

@@ -7,17 +7,21 @@ imwe 即时通讯渠道插件，AppKey/AppSecret HMAC-SHA256 签名认证，支
 
 ### 单账号
 
+凭证写在 `accounts.default` 内，共享配置（`dmPolicy`、`allowFrom`）放在顶层作为默认值。`apiBaseUrl` 可省略，默认使用 `https://im-pre.imweapi.com`。
+
 ```json
 {
   "channels": {
     "imwe": {
-      "apiBaseUrl": "https://api.imwe.example.com",
-      "appKey": "your-app-key",
-      "appSecret": "your-app-secret",
+      "defaultAccount": "default",
       "dmPolicy": "open",
-      "allowFrom": [
-        "*"
-      ],
+      "allowFrom": ["*"],
+      "accounts": {
+        "default": {
+          "appKey": "your-app-key",
+          "appSecret": "your-app-secret"
+        }
+      }
     }
   }
 }
@@ -25,30 +29,42 @@ imwe 即时通讯渠道插件，AppKey/AppSecret HMAC-SHA256 签名认证，支
 
 ### 多账号
 
+顶层写共享默认值，每个账号只写凭证。
+
 ```json
 {
   "channels": {
     "imwe": {
-      "apiBaseUrl": "https://api.imwe.example.com",
       "defaultAccount": "default",
+      "dmPolicy": "open",
+      "allowFrom": ["*"],
       "accounts": {
         "default": {
-          "apiBaseUrl": "https://api.imwe.example.com",
-          "appKey": "your-app-key",
-          "appSecret": "your-app-secret",
-          "dmPolicy": "open",
-          "allowFrom": [
-            "*"
-          ],
+          "appKey": "app-key-1",
+          "appSecret": "app-secret-1"
         },
         "bot2": {
-          "apiBaseUrl": "https://api.imwe.example.com",
+          "appKey": "app-key-2",
+          "appSecret": "app-secret-2"
+        }
+      }
+    }
+  }
+}
+```
+
+### 使用 SecretRef 引用环境变量
+
+凭证字段支持 SecretRef 对象，通过 `{ source: 'env', provider: 'default', id: '...' }` 引用环境变量：
+
+```json
+{
+  "channels": {
+    "imwe": {
+      "accounts": {
+        "default": {
           "appKey": "your-app-key",
-          "appSecret": "your-app-secret",
-          "dmPolicy": "open",
-          "allowFrom": [
-            "*"
-          ],
+          "appSecret": { "source": "env", "provider": "default", "id": "IMWE_APP_SECRET" }
         }
       }
     }

package/openclaw.plugin.json

@@ -7,52 +7,6 @@
   "configSchema": {
     "type": "object",
     "additionalProperties": false,
-    "properties": {
-      "accounts": {
-        "type": "object",
-        "description": "多账号配置，key 为 accountId",
-        "additionalProperties": {
-          "type": "object",
-          "additionalProperties": false,
-          "properties": {
-            "name": { "type": "string" },
-            "enabled": { "type": "boolean" },
-            "apiBaseUrl": { "type": "string" },
-            "appKey": { "type": "string" },
-            "appSecret": { "type": "string" },
-            "dmPolicy": {
-              "type": "string",
-              "enum": ["pairing", "allowlist", "open", "disabled"]
-            },
-            "allowFrom": {
-              "type": "array",
-              "items": { "type": ["string", "number"] }
-            },
-            "pollIntervalMs": {
-              "type": "number",
-              "description": "短轮询间隔（毫秒），默认 3000"
-            }
-          }
-        }
-      },
-      "defaultAccount": { "type": "string" },
-      "name": { "type": "string" },
-      "enabled": { "type": "boolean" },
-      "apiBaseUrl": { "type": "string" },
-      "appKey": { "type": "string" },
-      "appSecret": { "type": "string" },
-      "dmPolicy": {
-        "type": "string",
-        "enum": ["pairing", "allowlist", "open", "disabled"]
-      },
-      "allowFrom": {
-        "type": "array",
-        "items": { "type": ["string", "number"] }
-      },
-      "pollIntervalMs": {
-        "type": "number",
-        "description": "短轮询间隔（毫秒），默认 3000"
-      }
-    }
+    "properties": {}
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@imweapp/openclaw-imwe",
-  "version": "2026.4.12-alpha.2",
+  "version": "2026.4.12-alpha.3",
   "description": "OpenClaw imwe 渠道插件 —— AppKey/AppSecret 签名认证，支持多账号、私聊文字消息",
   "type": "module",
   "publishConfig": {
@@ -61,7 +61,7 @@
       "quickstartAllowFrom": true
     },
     "install": {
-      "npmSpec": "@imwe/opencalw-imwe",
+      "npmSpec": "@imweapp/opencalw-imwe",
       "defaultChoice": "npm",
       "minHostVersion": ">=2026.4.11"
     },
@@ -69,5 +69,5 @@
       "pluginApi": ">=2026.4.11"
     }
   },
-  "gitHead": "a47db5b9829b4e94f68a7016f024164faa6e09ad"
+  "gitHead": "3815a36581e83ca8f98a95d1229b069233c98897"
 }

package/src/accounts.ts

@@ -14,6 +14,7 @@ import {
 } from 'openclaw/plugin-sdk/account-helpers';
 import { normalizeAccountId } from 'openclaw/plugin-sdk/account-id';
 import type { OpenClawConfig } from 'openclaw/plugin-sdk/config-runtime';
+import { coerceSecretRef } from 'openclaw/plugin-sdk/provider-auth';
 import type { ImweAccountConfig, ImweConfig, ResolvedImweAccount } from './types.js';
 
 // ─────────────────────────────────────────────────────────────────────────────
@@ -40,6 +41,28 @@ function mergeImweAccountConfig(cfg: OpenClawConfig, accountId: string): ImweAcc
   });
 }
 
+// ─────────────────────────────────────────────────────────────────────────────
+// SecretRef 解析 helper
+// ─────────────────────────────────────────────────────────────────────────────
+
+/** 将纯字符串或 SecretRef 对象解析为字符串值。env 类型 ref 从 process.env 读取。 */
+function resolveSecretLike(value: unknown): string | undefined {
+  if (value != null && typeof value === 'string') {
+    const trimmed = value.trim();
+    if (trimmed) return trimmed;
+  }
+
+  const ref = coerceSecretRef(value);
+  if (!ref) return undefined;
+
+  // env 类型 SecretRef 从 process.env 读取
+  if (ref.source === 'env') {
+    return process.env[ref.id]?.trim() || undefined;
+  }
+
+  return undefined;
+}
+
 // ─────────────────────────────────────────────────────────────────────────────
 // 凭证解析：优先级 账号级 config > 顶层 config > 环境变量
 // ─────────────────────────────────────────────────────────────────────────────
@@ -48,13 +71,11 @@ function resolveImweCredentials(
   merged: ImweAccountConfig,
   accountId: string,
 ): { appKey: string; appSecret: string; source: ResolvedImweAccount['credentialSource'] } {
-  // 1. config 里的 appKey + appSecret
-  if (merged.appKey?.trim() && merged.appSecret?.trim()) {
-    return {
-      appKey: merged.appKey.trim(),
-      appSecret: merged.appSecret.trim(),
-      source: 'config',
-    };
+  // 1. config 里的 appKey + appSecret（支持 SecretRef）
+  const configKey = resolveSecretLike(merged.appKey);
+  const configSecret = resolveSecretLike(merged.appSecret);
+  if (configKey && configSecret) {
+    return { appKey: configKey, appSecret: configSecret, source: 'config' };
   }
 
   // 2. 环境变量（仅 default 账号，避免多账号混用同一组 env）

package/src/config-schema.ts

@@ -10,13 +10,14 @@ import {
   DmPolicySchema,
 } from 'openclaw/plugin-sdk/channel-config-schema';
 import { z } from 'openclaw/plugin-sdk/zod';
+import { buildSecretInputSchema } from './secret-input.js';
 
 const imweAccountSchema = z.object({
   name: z.string().optional(),
   enabled: z.boolean().optional(),
   apiBaseUrl: z.string().optional(),
-  appKey: z.string().optional(),
-  appSecret: z.string().optional(),
+  appKey: buildSecretInputSchema().optional(),
+  appSecret: buildSecretInputSchema().optional(),
   dmPolicy: DmPolicySchema.optional(),
   allowFrom: AllowFromListSchema,
   /** 短轮询间隔（毫秒），默认 3000 */

package/src/secret-input.ts

@@ -0,0 +1,6 @@
+export {
+  buildSecretInputSchema,
+  hasConfiguredSecretInput,
+  normalizeResolvedSecretInputString,
+  normalizeSecretInputString,
+} from 'openclaw/plugin-sdk/secret-input';

package/src/types.ts

@@ -12,6 +12,8 @@
  *   无需 token、无需登录流程、无需持久化任何凭证。
  */
 
+import type { SecretInput } from 'openclaw/plugin-sdk/secret-input';
+
 // ─────────────────────────────────────────────────────────────────────────────
 // 第一层：原始配置（对应 openclaw.json 里用户写的内容）
 // ─────────────────────────────────────────────────────────────────────────────
@@ -25,14 +27,14 @@ export type ImweAccountConfig = {
   apiBaseUrl?: string;
   /**
    * 应用 Key，由 imwe 开放平台颁发，用于标识调用方身份。
-   * 也可通过环境变量 IMWE_APP_KEY 提供。
+   * 支持纯字符串或 SecretRef 对象（如 { source: 'env', provider: 'default', id: 'IMWE_APP_KEY' }）。
    */
-  appKey?: string;
+  appKey?: string | SecretInput;
   /**
    * 应用 Secret，与 AppKey 配对，用于 HMAC-SHA256 签名。
-   * 请勿明文提交到版本控制，建议通过环境变量 IMWE_APP_SECRET 提供。
+   * 支持纯字符串或 SecretRef 对象（如 { source: 'env', provider: 'default', id: 'IMWE_APP_SECRET' }）。
    */
-  appSecret?: string;
+  appSecret?: string | SecretInput;
   /** DM 安全策略：pairing（配对审批）| allowlist | open | disabled */
   dmPolicy?: 'pairing' | 'allowlist' | 'open' | 'disabled';
   /** DM 发送者白名单（imwe userId 列表） */