@imweapp/openclaw-imwe 2026.4.12-alpha.2 → 2026.4.12-alpha.4

package/README.md

@@ -7,17 +7,21 @@ imwe 即时通讯渠道插件，AppKey/AppSecret HMAC-SHA256 签名认证，支
 
 ### 单账号
 
+凭证写在 `accounts.default` 内，共享配置（`dmPolicy`、`allowFrom`）放在顶层作为默认值。`apiBaseUrl` 可省略，默认使用 `https://im-pre.imweapi.com`。
+
 ```json
 {
   "channels": {
     "imwe": {
-      "apiBaseUrl": "https://api.imwe.example.com",
-      "appKey": "your-app-key",
-      "appSecret": "your-app-secret",
+      "defaultAccount": "default",
       "dmPolicy": "open",
-      "allowFrom": [
-        "*"
-      ],
+      "allowFrom": ["*"],
+      "accounts": {
+        "default": {
+          "appKey": "your-app-key",
+          "appSecret": "your-app-secret"
+        }
+      }
     }
   }
 }
@@ -25,30 +29,42 @@ imwe 即时通讯渠道插件，AppKey/AppSecret HMAC-SHA256 签名认证，支
 
 ### 多账号
 
+顶层写共享默认值，每个账号只写凭证。
+
 ```json
 {
   "channels": {
     "imwe": {
-      "apiBaseUrl": "https://api.imwe.example.com",
       "defaultAccount": "default",
+      "dmPolicy": "open",
+      "allowFrom": ["*"],
       "accounts": {
         "default": {
-          "apiBaseUrl": "https://api.imwe.example.com",
-          "appKey": "your-app-key",
-          "appSecret": "your-app-secret",
-          "dmPolicy": "open",
-          "allowFrom": [
-            "*"
-          ],
+          "appKey": "app-key-1",
+          "appSecret": "app-secret-1"
         },
         "bot2": {
-          "apiBaseUrl": "https://api.imwe.example.com",
+          "appKey": "app-key-2",
+          "appSecret": "app-secret-2"
+        }
+      }
+    }
+  }
+}
+```
+
+### 使用 SecretRef 引用环境变量
+
+凭证字段支持 SecretRef 对象，通过 `{ source: 'env', provider: 'default', id: '...' }` 引用环境变量：
+
+```json
+{
+  "channels": {
+    "imwe": {
+      "accounts": {
+        "default": {
           "appKey": "your-app-key",
-          "appSecret": "your-app-secret",
-          "dmPolicy": "open",
-          "allowFrom": [
-            "*"
-          ],
+          "appSecret": { "source": "env", "provider": "default", "id": "IMWE_APP_SECRET" }
         }
       }
     }

package/openclaw.plugin.json

@@ -7,52 +7,6 @@
   "configSchema": {
     "type": "object",
     "additionalProperties": false,
-    "properties": {
-      "accounts": {
-        "type": "object",
-        "description": "多账号配置，key 为 accountId",
-        "additionalProperties": {
-          "type": "object",
-          "additionalProperties": false,
-          "properties": {
-            "name": { "type": "string" },
-            "enabled": { "type": "boolean" },
-            "apiBaseUrl": { "type": "string" },
-            "appKey": { "type": "string" },
-            "appSecret": { "type": "string" },
-            "dmPolicy": {
-              "type": "string",
-              "enum": ["pairing", "allowlist", "open", "disabled"]
-            },
-            "allowFrom": {
-              "type": "array",
-              "items": { "type": ["string", "number"] }
-            },
-            "pollIntervalMs": {
-              "type": "number",
-              "description": "短轮询间隔（毫秒），默认 3000"
-            }
-          }
-        }
-      },
-      "defaultAccount": { "type": "string" },
-      "name": { "type": "string" },
-      "enabled": { "type": "boolean" },
-      "apiBaseUrl": { "type": "string" },
-      "appKey": { "type": "string" },
-      "appSecret": { "type": "string" },
-      "dmPolicy": {
-        "type": "string",
-        "enum": ["pairing", "allowlist", "open", "disabled"]
-      },
-      "allowFrom": {
-        "type": "array",
-        "items": { "type": ["string", "number"] }
-      },
-      "pollIntervalMs": {
-        "type": "number",
-        "description": "短轮询间隔（毫秒），默认 3000"
-      }
-    }
+    "properties": {}
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@imweapp/openclaw-imwe",
-  "version": "2026.4.12-alpha.2",
+  "version": "2026.4.12-alpha.4",
   "description": "OpenClaw imwe 渠道插件 —— AppKey/AppSecret 签名认证，支持多账号、私聊文字消息",
   "type": "module",
   "publishConfig": {
@@ -61,7 +61,7 @@
       "quickstartAllowFrom": true
     },
     "install": {
-      "npmSpec": "@imwe/opencalw-imwe",
+      "npmSpec": "@imweapp/opencalw-imwe",
       "defaultChoice": "npm",
       "minHostVersion": ">=2026.4.11"
     },
@@ -69,5 +69,5 @@
       "pluginApi": ">=2026.4.11"
     }
   },
-  "gitHead": "a47db5b9829b4e94f68a7016f024164faa6e09ad"
+  "gitHead": "cde7947e1487818e4ae2262172741a4e7786bfd2"
 }

package/proto/PbChatEmoteContent.proto

@@ -0,0 +1,34 @@
+// PbChatEmoteContent.proto — 表情消息内容定义
+//
+// 来源：im_proto/MsgCore/PbChatEmoteContent.proto
+// 当 emoteType=GIFS(1) 时，插件通过 emoteId 拼接 URL 下载 GIF。
+
+syntax = "proto3";
+
+package proto;
+
+option java_package = "com.imwe.im.proto";
+
+message PbChatEmoteContent {
+
+  enum EmoteType {
+    EMOTE_TYPE_UNKNOWN = 0;
+    EMOTE_TYPE_GIFS = 1;
+    EMOTE_TYPE_STICKER = 2;
+    EMOTE_TYPE_EMOJI = 3;
+  }
+
+  enum EmoteFileType {
+    EMOTE_FILE_TYPE_UNKNOWN = 0;
+    EMOTE_FILE_TYPE_WEBP = 1;
+    EMOTE_FILE_TYPE_GIF = 2;
+    EMOTE_FILE_TYPE_PNG = 3;
+  }
+
+  string emoteId = 1;
+  string blurHash = 2;
+  int32 width = 3;
+  int32 height = 4;
+  EmoteFileType type = 5;
+  EmoteType emoteType = 6;
+}

package/proto/PbChatLocationContent.proto

@@ -0,0 +1,15 @@
+// PbChatLocationContent.proto — 位置消息内容
+//
+// 来源：im_proto/Core/PbChatLocationContent.proto（精简拷贝，仅保留插件所需字段）
+// 插件仅提取核心位置信息（lat/lng/address/name），不处理截图和请求关联。
+
+syntax = "proto3";
+
+package proto;
+
+message PbChatLocationContent {
+    double latitude = 1;           // 纬度
+    double longitude = 2;          // 经度
+    optional string address = 3;   // 完整地址
+    optional string name = 4;      // 地点名称
+}

package/proto/PbChatMsg.proto

@@ -15,8 +15,10 @@ package proto;
 import "PbChatTextContent.proto";
 import "PbChatAudioContent.proto";
 import "PbChatRichMediaContent.proto";
+import "PbChatEmoteContent.proto";
 import "PbMarkdownContent.proto";
 import "PbMsgReadStampContent.proto";
+import "PbChatLocationContent.proto";
 
 option java_outer_classname = "ChatMessageProto";
 option java_package = "com.imwe.im.proto";
@@ -35,10 +37,10 @@ message PbChatMsgEnvelope {
     bytes callContent = 5;                          // 音视频呼叫（占位，不解析）
     bytes businessCardContent = 6;                  // 个人名片（占位，不解析）
     bytes forwardContent = 7;                       // 合并转发（占位，不解析）
-    bytes emoteContent = 8;                         // 表情消息（占位，不解析）
+    PbChatEmoteContent emoteContent = 8;             // 表情消息（插件处理）
     PbChatRichMediaContent richMediaContent = 9;    // 图片/视频（插件处理）
     bytes locationRequestContent = 10;              // 位置请求（占位，不解析）
-    bytes locationContent = 11;                     // 位置消息（占位，不解析）
+    PbChatLocationContent locationContent = 11;     // 位置消息（插件处理）
     bytes groupInviteContent = 12;                  // 群邀请（占位，不解析）
     PbChatRichMediaContent fileContent = 13;        // 文件消息（插件处理）
     bytes aiNoteSummaryContent = 14;                // AI笔记总结（占位，不解析）

package/src/accounts.ts

@@ -14,6 +14,7 @@ import {
 } from 'openclaw/plugin-sdk/account-helpers';
 import { normalizeAccountId } from 'openclaw/plugin-sdk/account-id';
 import type { OpenClawConfig } from 'openclaw/plugin-sdk/config-runtime';
+import { coerceSecretRef } from 'openclaw/plugin-sdk/provider-auth';
 import type { ImweAccountConfig, ImweConfig, ResolvedImweAccount } from './types.js';
 
 // ─────────────────────────────────────────────────────────────────────────────
@@ -40,6 +41,28 @@ function mergeImweAccountConfig(cfg: OpenClawConfig, accountId: string): ImweAcc
   });
 }
 
+// ─────────────────────────────────────────────────────────────────────────────
+// SecretRef 解析 helper
+// ─────────────────────────────────────────────────────────────────────────────
+
+/** 将纯字符串或 SecretRef 对象解析为字符串值。env 类型 ref 从 process.env 读取。 */
+function resolveSecretLike(value: unknown): string | undefined {
+  if (value != null && typeof value === 'string') {
+    const trimmed = value.trim();
+    if (trimmed) return trimmed;
+  }
+
+  const ref = coerceSecretRef(value);
+  if (!ref) return undefined;
+
+  // env 类型 SecretRef 从 process.env 读取
+  if (ref.source === 'env') {
+    return process.env[ref.id]?.trim() || undefined;
+  }
+
+  return undefined;
+}
+
 // ─────────────────────────────────────────────────────────────────────────────
 // 凭证解析：优先级 账号级 config > 顶层 config > 环境变量
 // ─────────────────────────────────────────────────────────────────────────────
@@ -48,13 +71,11 @@ function resolveImweCredentials(
   merged: ImweAccountConfig,
   accountId: string,
 ): { appKey: string; appSecret: string; source: ResolvedImweAccount['credentialSource'] } {
-  // 1. config 里的 appKey + appSecret
-  if (merged.appKey?.trim() && merged.appSecret?.trim()) {
-    return {
-      appKey: merged.appKey.trim(),
-      appSecret: merged.appSecret.trim(),
-      source: 'config',
-    };
+  // 1. config 里的 appKey + appSecret（支持 SecretRef）
+  const configKey = resolveSecretLike(merged.appKey);
+  const configSecret = resolveSecretLike(merged.appSecret);
+  if (configKey && configSecret) {
+    return { appKey: configKey, appSecret: configSecret, source: 'config' };
   }
 
   // 2. 环境变量（仅 default 账号，避免多账号混用同一组 env）

package/src/api-client.ts

@@ -216,6 +216,54 @@ export async function postJson<T>(
   }
 }
 
+// ─────────────────────────────────────────────────────────────────────────────
+// getJson — 签名 GET 请求（JSON 响应）
+// ─────────────────────────────────────────────────────────────────────────────
+
+/**
+ * 发送带签名的 GET 请求，返回 JSON 响应。
+ *
+ * @param apiBaseUrl  API 基础地址
+ * @param path        请求路径
+ * @param auth        鉴权凭证
+ * @param opts.timeoutMs  请求超时（毫秒）
+ * @throws 非 2xx 响应时抛出包含状态码的 Error
+ */
+export async function getJson<T>(
+  apiBaseUrl: string,
+  path: string,
+  auth: { apiKey: string; apiSecret: string },
+  opts?: { timeoutMs?: number },
+): Promise<T> {
+  const url = `${apiBaseUrl.replace(/\/$/, '')}${path}`;
+  const emptyBody = new Uint8Array(0);
+
+  const controller = new AbortController();
+  const timer = opts?.timeoutMs ? setTimeout(() => controller.abort(), opts.timeoutMs) : null;
+
+  try {
+    const res = await fetch(url, {
+      method: 'GET',
+      headers: {
+        Accept: 'application/json',
+        ...buildAuthHeaders(auth.apiKey, auth.apiSecret, 'GET', path, emptyBody),
+      },
+      signal: controller.signal,
+    });
+
+    if (!res.ok) {
+      const errText = await res.text().catch(() => '');
+      throw new Error(`imwe API ${path} 返回 ${res.status}: ${errText}`);
+    }
+
+    return res.json() as Promise<T>;
+  } finally {
+    if (timer) {
+      clearTimeout(timer);
+    }
+  }
+}
+
 // ─────────────────────────────────────────────────────────────────────────────
 // getMe — 获取当前机器人信息（文档 §三）
 // ─────────────────────────────────────────────────────────────────────────────

package/src/config-schema.ts

@@ -10,13 +10,14 @@ import {
   DmPolicySchema,
 } from 'openclaw/plugin-sdk/channel-config-schema';
 import { z } from 'openclaw/plugin-sdk/zod';
+import { buildSecretInputSchema } from './secret-input.js';
 
 const imweAccountSchema = z.object({
   name: z.string().optional(),
   enabled: z.boolean().optional(),
   apiBaseUrl: z.string().optional(),
-  appKey: z.string().optional(),
-  appSecret: z.string().optional(),
+  appKey: buildSecretInputSchema().optional(),
+  appSecret: buildSecretInputSchema().optional(),
   dmPolicy: DmPolicySchema.optional(),
   allowFrom: AllowFromListSchema,
   /** 短轮询间隔（毫秒），默认 3000 */

package/src/emote/api.ts

@@ -0,0 +1,25 @@
+import { getJson } from '../api-client.js';
+
+export type EmoteUrlSchema = {
+  original: string;
+  stickerOriginal: string;
+  preview: string;
+  compress: string;
+};
+
+export async function fetchEmoteUrlSchema(
+  apiBaseUrl: string,
+  auth: { apiKey: string; apiSecret: string },
+): Promise<EmoteUrlSchema> {
+  return getJson<EmoteUrlSchema>(apiBaseUrl, '/api/im/emotes/urlSchema', auth);
+}
+
+export async function resolveEmoteGifUrl(
+  apiBaseUrl: string,
+  auth: { apiKey: string; apiSecret: string },
+  emoteId: string,
+): Promise<string> {
+  const schema = await fetchEmoteUrlSchema(apiBaseUrl, auth);
+  const prefix = schema.original.endsWith('/') ? schema.original : `${schema.original}/`;
+  return `${prefix}${emoteId}`;
+}

package/src/emote/handle.ts

@@ -0,0 +1,36 @@
+import { resolveEmoteGifUrl } from './api.js';
+
+type EmoteData = {
+  emoteId: string;
+  emoteType: number;
+  fileType?: number;
+  blurHash?: string;
+  width?: number;
+  height?: number;
+};
+
+type EmoteContext = {
+  apiBaseUrl: string;
+  auth: { apiKey: string; apiSecret: string };
+  log?: { info?: (...args: unknown[]) => void; warn?: (...args: unknown[]) => void };
+};
+
+export async function handleEmoteMessage(
+  emoteData: EmoteData,
+  ctx: EmoteContext,
+): Promise<Record<string, unknown> | null> {
+  try {
+    const gifUrl = await resolveEmoteGifUrl(ctx.apiBaseUrl, ctx.auth, emoteData.emoteId);
+    ctx.log?.info?.(`[emote] GIF URL resolved: ${gifUrl}`);
+
+    const { saveMediaSource } = await import('openclaw/plugin-sdk/media-runtime');
+    const saved = await saveMediaSource(gifUrl);
+    ctx.log?.info?.(`[emote] GIF downloaded: path=${saved.path}, contentType=${saved.contentType}`);
+
+    const { buildMediaPayload } = await import('openclaw/plugin-sdk/reply-payload');
+    return buildMediaPayload([{ path: saved.path, contentType: saved.contentType }]);
+  } catch (err) {
+    ctx.log?.warn?.(`[emote] GIF 处理失败: emoteId=${emoteData.emoteId}, error=${String(err)}`);
+    return null;
+  }
+}

package/src/emote/index.ts

@@ -0,0 +1,3 @@
+export { fetchEmoteUrlSchema, resolveEmoteGifUrl } from './api.js';
+export type { EmoteUrlSchema } from './api.js';
+export { handleEmoteMessage } from './handle.js';

package/src/monitor.ts

@@ -40,11 +40,13 @@ import type { ChannelGatewayContext } from 'openclaw/plugin-sdk/channel-contract
 import { createTypingCallbacks } from 'openclaw/plugin-sdk/channel-reply-pipeline';
 import type { OpenClawConfig } from 'openclaw/plugin-sdk/config-runtime';
 import { resolveStateDir } from 'openclaw/plugin-sdk/state-paths';
+import { toLocationContext } from 'openclaw/plugin-sdk/channel-inbound';
 import { pullMessages } from './api-client.js';
 import type { BotInfo, PullState } from './api-client.js';
 import type { E2eeService } from './e2ee/index.js';
 import { downloadAndDecryptFile } from './file-transfer/index.js';
 import { isMarkdownContent, extractMarkdownDigest } from './markdown-detect.js';
+import { handleEmoteMessage } from './emote/index.js';
 import { uploadEncryptedFile } from './file-transfer/index.js';
 import { inferMediaType, inferMediaTypeFromMime } from './media-utils.js';
 import type { E2eeDecryptFn } from './proto/inbound.codec.js';
@@ -438,6 +440,24 @@ async function handleInboundMessage(
       }
     }
 
+    // ── 3.5 处理入站表情消息（GIF）──────────────────────────────────────────
+    if (msg.emoteData) {
+      if (msg.emoteData.emoteType === 1) {
+        const emoteMediaFields = await handleEmoteMessage(msg.emoteData, {
+          apiBaseUrl: outbound.apiBaseUrl,
+          auth: outbound.auth,
+          log,
+        });
+        if (emoteMediaFields) {
+          Object.assign(mediaFields, emoteMediaFields);
+        }
+      } else {
+        log?.info?.(
+          `[${account.accountId}] 忽略非 GIF 表情消息: emoteType=${msg.emoteData.emoteType}, emoteId=${msg.emoteData.emoteId}`,
+        );
+      }
+    }
+
     // ── 4. 构造 PascalCase ctx 并通过 finalizeInboundContext 规范化 ─────────
     const cacheScopeKey = botInfo.botMainAcctId;
     const replyToId = msg.referenceClientMsgId ?? undefined;
@@ -483,6 +503,7 @@ async function handleInboundMessage(
       ReplyToBody: quotedMessage?.body,
       ReplyToSender: quotedMessage?.senderId,
       ReplyToIsQuote: quotedMessage ? true : undefined,
+      ...(msg.locationData ? toLocationContext(msg.locationData) : {}),
       ...mediaFields,
     });
 

package/src/proto/inbound.codec.ts

@@ -22,6 +22,7 @@
  *   - richMediaContent（图片/视频消息，oneof 字段 9）
  *   - fileContent（文件消息，oneof 字段 13）
  *   - audioContent（音频消息，oneof 字段 4）
+ *   - locationContent（位置消息，oneof 字段 11）
  * 其他类型返回 skip，由 monitor.ts 跳过。
  */
 
@@ -34,8 +35,11 @@ import type {
   DecodedRichMediaContent,
   DecodedAudioContent,
   DecodedFileMeta,
+  DecodedEmoteContent,
 } from './proto-types.js';
 import type { ImweInboundMessage } from '../types.js';
+import type { NormalizedLocation } from 'openclaw/plugin-sdk/channel-inbound';
+import { formatLocationText } from 'openclaw/plugin-sdk/channel-inbound';
 
 // ─────────────────────────────────────────────────────────────────────────────
 // 常量
@@ -117,6 +121,8 @@ export type InboundTextMessage = ImweInboundMessage & {
   convType: number;
   /** 接收方 ID（单聊=账户ID，群聊=群组ID） */
   toId: string;
+  /** 位置消息结构化数据（仅位置消息时存在） */
+  locationData?: NormalizedLocation;
 };
 
 /** 解包失败或不支持的消息类型，由调用方决定是否记录日志 */
@@ -377,6 +383,62 @@ export async function decodeInboundPacket(packetBytes: Uint8Array): Promise<Inbo
     return { ok: true, message };
   }
 
+  if (envelope.locationContent) {
+    // ── 位置消息（字段11）─────────────────────────────────────────────────
+    const loc = envelope.locationContent;
+    const locationData: NormalizedLocation = {
+      latitude: loc.latitude,
+      longitude: loc.longitude,
+      address: loc.address || undefined,
+      name: loc.name || undefined,
+      source: 'pin',
+    };
+    const message: InboundTextMessage = {
+      msgId: deliver.clientMsgId,
+      senderId: deliver.fromId,
+      content: formatLocationText(locationData),
+      timestampMs: Number(deliver.serverStamp),
+      serverMsgId: deliver.serverMsgId,
+      convType: deliver.convType,
+      toId: deliver.toId,
+      locationData,
+    };
+    return { ok: true, message };
+  }
+
+  if (envelope.emoteContent) {
+    // ── 表情消息（字段8）─────────────────────────────────────────────────
+    const emote = envelope.emoteContent as DecodedEmoteContent;
+    const EMOTE_TYPE_GIFS = 1;
+    if (emote.emoteType !== EMOTE_TYPE_GIFS) {
+      return {
+        ok: false,
+        skip: {
+          reason: 'unsupported-content-type',
+          detail: `emoteType=${emote.emoteType}, emoteId=${emote.emoteId}`,
+        },
+      };
+    }
+    const message: InboundTextMessage = {
+      msgId: deliver.clientMsgId,
+      senderId: deliver.fromId,
+      content: '',
+      timestampMs: Number(deliver.serverStamp),
+      serverMsgId: deliver.serverMsgId,
+      convType: deliver.convType,
+      toId: deliver.toId,
+      emoteData: {
+        emoteId: emote.emoteId,
+        blurHash: emote.blurHash || undefined,
+        width: emote.width || undefined,
+        height: emote.height || undefined,
+        fileType: emote.type ?? 0,
+        emoteType: emote.emoteType,
+      },
+    };
+    return { ok: true, message };
+  }
+
   return {
     ok: false,
     skip: {
@@ -614,6 +676,60 @@ async function decodeInboundPacketPlaintextTail(
     return { ok: true, message };
   }
 
+  if (envelope.locationContent) {
+    const loc = envelope.locationContent;
+    const locationData: NormalizedLocation = {
+      latitude: loc.latitude,
+      longitude: loc.longitude,
+      address: loc.address || undefined,
+      name: loc.name || undefined,
+      source: 'pin',
+    };
+    const message: InboundTextMessage = {
+      msgId: deliver.clientMsgId,
+      senderId: deliver.fromId,
+      content: formatLocationText(locationData),
+      timestampMs: Number(deliver.serverStamp),
+      serverMsgId: deliver.serverMsgId,
+      convType: deliver.convType,
+      toId: deliver.toId,
+      locationData,
+    };
+    return { ok: true, message };
+  }
+
+  if (envelope.emoteContent) {
+    const emote = envelope.emoteContent as DecodedEmoteContent;
+    const EMOTE_TYPE_GIFS = 1;
+    if (emote.emoteType !== EMOTE_TYPE_GIFS) {
+      return {
+        ok: false,
+        skip: {
+          reason: 'unsupported-content-type',
+          detail: `emoteType=${emote.emoteType}, emoteId=${emote.emoteId}`,
+        },
+      };
+    }
+    const message: InboundTextMessage = {
+      msgId: deliver.clientMsgId,
+      senderId: deliver.fromId,
+      content: '',
+      timestampMs: Number(deliver.serverStamp),
+      serverMsgId: deliver.serverMsgId,
+      convType: deliver.convType,
+      toId: deliver.toId,
+      emoteData: {
+        emoteId: emote.emoteId,
+        blurHash: emote.blurHash || undefined,
+        width: emote.width || undefined,
+        height: emote.height || undefined,
+        fileType: emote.type ?? 0,
+        emoteType: emote.emoteType,
+      },
+    };
+    return { ok: true, message };
+  }
+
   return {
     ok: false,
     skip: {

package/src/proto/proto-types.ts

@@ -146,6 +146,34 @@ export interface DecodedMarkdownContent {
   markdown: string;
 }
 
+// ─────────────────────────────────────────────────────────────────────────────
+// 位置内容层（PbChatLocationContent.proto）
+// ─────────────────────────────────────────────────────────────────────────────
+
+/** PbChatLocationContent 解码后的字段 */
+export interface DecodedLocationContent {
+  latitude: number;
+  longitude: number;
+  address?: string;
+  name?: string;
+}
+
+// ─────────────────────────────────────────────────────────────────────────────
+// 表情内容层（PbChatEmoteContent.proto）
+// ─────────────────────────────────────────────────────────────────────────────
+
+/** PbChatEmoteContent 解码后的字段 */
+export interface DecodedEmoteContent {
+  emoteId: string;
+  blurHash?: string;
+  width?: number;
+  height?: number;
+  /** EmoteFileType 枚举值：0=UNKNOWN, 1=WEBP, 2=GIF, 3=PNG */
+  type: number;
+  /** EmoteType 枚举值：0=UNKNOWN, 1=GIFS, 2=STICKER, 3=EMOJI */
+  emoteType: number;
+}
+
 // ─────────────────────────────────────────────────────────────────────────────
 // 信封层（PbChatMsg.proto）
 // ─────────────────────────────────────────────────────────────────────────────
@@ -167,6 +195,10 @@ export interface DecodedChatMsgEnvelope {
   audioContent?: DecodedAudioContent;
   /** Markdown 消息（oneof 字段 16） */
   markdownContent?: DecodedMarkdownContent;
+  /** 位置消息（oneof 字段 11） */
+  locationContent?: DecodedLocationContent;
+  /** 表情消息（oneof 字段 8） */
+  emoteContent?: DecodedEmoteContent;
 }
 
 // ─────────────────────────────────────────────────────────────────────────────

package/src/proto/registry.ts

@@ -88,6 +88,10 @@ export type ProtoRegistry = {
   PbChatFileMeta: Type;
   /** 音频消息内容（PbChatMsgEnvelope 字段 4） */
   PbChatAudioContent: Type;
+  /** 位置消息内容（PbChatMsgEnvelope 字段 11） */
+  PbChatLocationContent: Type;
+  /** 表情消息内容（PbChatMsgEnvelope 字段 8） */
+  PbChatEmoteContent: Type;
 
   // ── 发送层（PbSingleChatMsg.proto） ──────────────────────────────────────
   /** 单聊消息请求体，作为 PbRequest.body 的内容 */
@@ -153,6 +157,8 @@ function buildRegistry(root: Root): ProtoRegistry {
     PbChatRichMediaContent: root.lookupType('proto.PbChatRichMediaContent'),
     PbChatFileMeta: root.lookupType('proto.PbChatFileMeta'),
     PbChatAudioContent: root.lookupType('proto.PbChatAudioContent'),
+    PbChatLocationContent: root.lookupType('proto.PbChatLocationContent'),
+    PbChatEmoteContent: root.lookupType('proto.PbChatEmoteContent'),
     // 发送层
     PbSingleChatMsgReqBody: root.lookupType('proto.PbSingleChatMsgReqBody'),
     PbSingleChatDeviceMsg: root.lookupType('proto.PbSingleChatDeviceMsg'),
@@ -193,6 +199,8 @@ export async function getRegistry(): Promise<ProtoRegistry> {
       resolve(PROTO_DIR, 'PbChatFileMeta.proto'), // 需在 PbChatRichMediaContent/PbChatAudioContent 之前加载（被 import）
       resolve(PROTO_DIR, 'PbChatRichMediaContent.proto'), // 需在 PbChatMsg.proto 之前加载（被 import）
       resolve(PROTO_DIR, 'PbChatAudioContent.proto'), // 需在 PbChatMsg.proto 之前加载（被 import）
+      resolve(PROTO_DIR, 'PbChatLocationContent.proto'), // 需在 PbChatMsg.proto 之前加载（被 import）
+      resolve(PROTO_DIR, 'PbChatEmoteContent.proto'), // 需在 PbChatMsg.proto 之前加载（被 import）
       resolve(PROTO_DIR, 'PbMarkdownContent.proto'), // 需在 PbChatMsg.proto 之前加载（被 import）
       resolve(PROTO_DIR, 'PbMsgReadStampContent.proto'), // 需在 PbChatMsg.proto 之前加载（被 import）
       resolve(PROTO_DIR, 'PbChatMsg.proto'),

package/src/secret-input.ts

@@ -0,0 +1,6 @@
+export {
+  buildSecretInputSchema,
+  hasConfiguredSecretInput,
+  normalizeResolvedSecretInputString,
+  normalizeSecretInputString,
+} from 'openclaw/plugin-sdk/secret-input';

package/src/types.ts

@@ -12,6 +12,9 @@
  *   无需 token、无需登录流程、无需持久化任何凭证。
  */
 
+import type { NormalizedLocation } from 'openclaw/plugin-sdk/channel-inbound';
+import type { SecretInput } from 'openclaw/plugin-sdk/secret-input';
+
 // ─────────────────────────────────────────────────────────────────────────────
 // 第一层：原始配置（对应 openclaw.json 里用户写的内容）
 // ─────────────────────────────────────────────────────────────────────────────
@@ -25,14 +28,14 @@ export type ImweAccountConfig = {
   apiBaseUrl?: string;
   /**
    * 应用 Key，由 imwe 开放平台颁发，用于标识调用方身份。
-   * 也可通过环境变量 IMWE_APP_KEY 提供。
+   * 支持纯字符串或 SecretRef 对象（如 { source: 'env', provider: 'default', id: 'IMWE_APP_KEY' }）。
    */
-  appKey?: string;
+  appKey?: string | SecretInput;
   /**
    * 应用 Secret，与 AppKey 配对，用于 HMAC-SHA256 签名。
-   * 请勿明文提交到版本控制，建议通过环境变量 IMWE_APP_SECRET 提供。
+   * 支持纯字符串或 SecretRef 对象（如 { source: 'env', provider: 'default', id: 'IMWE_APP_SECRET' }）。
    */
-  appSecret?: string;
+  appSecret?: string | SecretInput;
   /** DM 安全策略：pairing（配对审批）| allowlist | open | disabled */
   dmPolicy?: 'pairing' | 'allowlist' | 'open' | 'disabled';
   /** DM 发送者白名单（imwe userId 列表） */
@@ -138,6 +141,19 @@ export type ImweInboundMessage = {
   referenceClientMsgId?: string;
   /** 多媒体附件列表（文本消息时为 undefined） */
   attachments?: ImweAttachment[];
+  /** 位置消息结构化数据（仅位置消息时存在） */
+  locationData?: NormalizedLocation;
+  /** 表情消息结构化数据（仅表情消息时存在） */
+  emoteData?: {
+    emoteId: string;
+    blurHash?: string;
+    width?: number;
+    height?: number;
+    /** 表情文件格式：0=UNKNOWN, 1=WEBP, 2=GIF, 3=PNG */
+    fileType: number;
+    /** 表情类型：0=UNKNOWN, 1=GIFS, 2=STICKER, 3=EMOJI */
+    emoteType: number;
+  };
 };
 
 /**