@krischoichoi/channel-qq 0.6.0

package/README.md

@@ -0,0 +1,93 @@
+# @krischoichoi/channel-qq
+
+QQ Bot channel adapter for DeepSeek Harness.
+
+Consumes the official Tencent SDK `@tencent-connect/qqbot-nodejs` and maps it to
+the stable Channel Contract. The SDK owns token acquisition, the WebSocket
+gateway, media upload and C2C streaming; the adapter adds dedup, reply routing,
+image hydration and DSH lifecycle handling.
+
+## Install
+
+```bash
+pnpm add @krischoichoi/channel-qq
+```
+
+Or install the whole bundle:
+
+```bash
+npx @deepseek-ai/dsh plugin --profile web add -w @krischoichoi/dsh-channels@latest
+```
+
+## Configuration
+
+```yaml
+- id: channels-qq
+  name: '@krischoichoi/channel-qq'
+  inject: [channels, credentials, channelControl]
+  config:
+    enabled: true
+    accountId: main
+    appId: "102345678"               # QQ 开放平台 AppId（非机密）
+    appSecretRef: QQBOT_APP_SECRET   # 真实 AppSecret 只存 ctx.credentials
+    markdownSupport: false
+    streaming:
+      enabled: true
+      throttleMs: 500
+    dedup:
+      enabled: true
+      windowMs: 5000
+    startupTimeoutMs: 15000
+```
+
+The AppSecret is resolved through `ctx.credentials` at startup and injected as
+`deps.appSecret`. It never appears in config, logs or fixtures.
+
+## Streaming
+
+Streaming is target-aware:
+
+- **C2C + reply-to-message-id** → `native` (full-text replace streaming)
+- **group / other targets** → `buffered` (send once at turn end)
+
+## Capabilities
+
+| Capability | Value |
+| --- | --- |
+| text / image / file / audio / video | ✅ |
+| markdown | depends on `markdownSupport` |
+| cards / reactions / threads | ❌ |
+| interactive actions | ✅（新版 QQ Markdown inline keyboard） |
+| streaming | `native` (C2C) / `buffered` (default) |
+
+Interactive questions always use the new QQ Markdown keyboard payload
+(`msg_type=2`, `markdown.content`, `keyboard`). Button callbacks use action
+type `1` and require the `INTERACTION` Gateway intent. Ordinary text replies
+continue to follow `markdownSupport`. The QQ Bot account must have the current
+Markdown/interactive-message platform capability; this is a live platform
+entitlement and cannot be proven from local configuration alone.
+
+## Upstream
+
+| Field | Value |
+| --- | --- |
+| SDK | `@tencent-connect/qqbot-nodejs` |
+| Tested version | `1.0.4` |
+| Status | `tested` (offline contract + fixture + E2E suites) |
+
+## Development
+
+```bash
+pnpm --filter @krischoichoi/channel-qq build
+pnpm --filter @krischoichoi/channel-qq typecheck
+pnpm --filter @krischoichoi/channel-qq test
+```
+
+## Related
+
+- [Repository root](../../README.md)
+- [Adapter authoring guide](../../docs/adapter-authoring.md)
+
+## License
+
+[MIT](../../LICENSE)

package/lib/adapter.d.ts

@@ -0,0 +1,76 @@
+/**
+ * QQ channel adapter — maps the Tencent SDK to the Channel Contract.
+ *
+ * The SDK owns Token acquisition/refresh, the WebSocket gateway (hello /
+ * identify / heartbeat / RESUME / reconnect) and the OpenAPI REST surface.
+ * The adapter only registers lifecycle handlers (`ready`/`resumed`/`error`/
+ * `message`) and drives `start`/`stop`. It never runs its own receive or
+ * reconnect loop (no double reconnect, no backoff).
+ *
+ * Streaming is target-aware: C2C + triggering `replyToMessageId` → native
+ * (`createReply` → `QQStreamingReply`); everywhere else → buffered (reply
+ * router accumulates and sends once at `turn/end`).
+ *
+ * The QQ AppSecret never lives in config: it is resolved via `ctx.credentials`
+ * by the plugin (`appSecretRef`) and handed to the adapter as
+ * `deps.appSecret`. Missing credential → startup fails loudly (QQ-R5).
+ */
+import type { ChannelAdapter, ChannelAdapterContext, ChannelCapabilities, ChannelHealth, ChannelTarget, OutboundMessage, ReplyHandle, SendResult, StreamingMode } from '@krischoichoi/channel-core';
+import { SecureRemoteMediaFetcher } from '@krischoichoi/channel-core';
+import type { QQConfig } from './config.js';
+import { type QQSdkClient } from './sdk-client.js';
+import { type QQManifest } from './manifest.js';
+export interface QQAdapterDeps {
+    /** SDK client (tests inject the Fake). Defaults to a real Tencent client. */
+    sdkClient?: QQSdkClient;
+    /** Resolved QQ AppSecret credential value (injected by the plugin). Tests using the Fake client may omit it. */
+    appSecret?: string;
+    /**
+     * Optional secure remote media fetcher used to hydrate inbound media bytes
+     * (image/file/audio/video) before emit. Tests inject a
+     * fake so the inbound path is fully offline; production defaults to a real
+     * `SecureRemoteMediaFetcher`. Configurable here (not in config) because it
+     * is a low-level seam, not a user-facing knob.
+     */
+    secureFetch?: SecureRemoteMediaFetcher;
+    /** Injectable clock (tests). */
+    now?: () => number;
+    /** Called after the platform-delivered C2C sender is accepted as owner. */
+    onOwnerDiscovered?: (ownerId: string) => Promise<void> | void;
+}
+export declare class QQAdapter implements ChannelAdapter {
+    private readonly config;
+    readonly id = "qq";
+    /** Upstream compatibility manifest (read structurally by `channels doctor`). */
+    readonly manifest: QQManifest;
+    readonly capabilities: ChannelCapabilities;
+    /**
+     * Test-only accessor exposing the injected `appSecret` so unit tests can
+     * assert the resolved credential reached the adapter without triggering the
+     * real Tencent client build. Produces no value in any production path.
+     */
+    get testAppSecret(): string | undefined;
+    private ctx?;
+    private readonly deps;
+    private readonly now;
+    private client;
+    private inbound;
+    private outbound;
+    private started;
+    private connected;
+    private error?;
+    private runPromise?;
+    constructor(config: QQConfig, deps?: QQAdapterDeps);
+    resolveStreamingMode(target: ChannelTarget): StreamingMode;
+    start(ctx: ChannelAdapterContext): Promise<void>;
+    stop(): Promise<void>;
+    send(target: ChannelTarget, message: OutboundMessage): Promise<SendResult>;
+    createReply(target: ChannelTarget): Promise<ReplyHandle>;
+    getHealth(): Promise<ChannelHealth>;
+    private handleSdkError;
+    private handleInbound;
+    private handleInteraction;
+    private emitAuth;
+    private emitConnection;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/lib/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,eAAe,EACf,WAAW,EACX,UAAU,EACV,aAAa,EACd,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAgB,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEpF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAI5C,OAAO,EAA8C,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE/F,OAAO,EAA0B,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAExE,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB,gHAAgH;IAChH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,wBAAwB,CAAC;IACvC,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC/D;AAED,qBAAa,SAAU,YAAW,cAAc;IA2BlC,OAAO,CAAC,QAAQ,CAAC,MAAM;IA1BnC,QAAQ,CAAC,EAAE,QAAQ;IAEnB,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAc;IAC3C,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAE3C;;;;OAIG;IACH,IAAI,aAAa,IAAI,MAAM,GAAG,SAAS,CAEtC;IAED,OAAO,CAAC,GAAG,CAAC,CAAwB;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,KAAK,CAAC,CAAQ;IACtB,OAAO,CAAC,UAAU,CAAC,CAAgB;gBAEN,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAE,aAAkB;IA+BvE,oBAAoB,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa;IAYpD,KAAK,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IA0EhD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAUrB,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAO1E,WAAW,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC;IAcxD,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC;IA6BzC,OAAO,CAAC,cAAc;YAOR,aAAa;YAOb,iBAAiB;IA8C/B,OAAO,CAAC,QAAQ;IAYhB,OAAO,CAAC,cAAc;CAWvB"}

package/lib/adapter.js

@@ -0,0 +1,299 @@
+import { ChannelError, SecureRemoteMediaFetcher } from '@krischoichoi/channel-core';
+import { InboundProcessor } from './inbound.js';
+import { mapInteraction } from './interaction-mapper.js';
+import { OutboundSender } from './outbound.js';
+import { TencentQQSdkClient } from './sdk-client.js';
+import { QQStreamingReply } from './streaming-reply.js';
+import { manifest as qqManifest } from './manifest.js';
+export class QQAdapter {
+    config;
+    id = 'qq';
+    /** Upstream compatibility manifest (read structurally by `channels doctor`). */
+    manifest = qqManifest;
+    capabilities;
+    /**
+     * Test-only accessor exposing the injected `appSecret` so unit tests can
+     * assert the resolved credential reached the adapter without triggering the
+     * real Tencent client build. Produces no value in any production path.
+     */
+    get testAppSecret() {
+        return this.deps.appSecret;
+    }
+    ctx;
+    deps;
+    now;
+    client;
+    inbound;
+    outbound;
+    started = false;
+    connected = false;
+    error;
+    runPromise;
+    constructor(config, deps = {}) {
+        this.config = config;
+        this.deps = deps;
+        this.now = deps.now ?? Date.now;
+        this.capabilities = {
+            text: true,
+            image: true,
+            file: true,
+            audio: true,
+            video: true,
+            markdown: config.markdownSupport,
+            cards: false,
+            reactions: false,
+            threads: false,
+            // Native inline keyboard round-trip (P1): `OutboundMessage.actions` →
+            // QQ inline keyboard, button presses → `interaction.received`.
+            interactiveActions: true,
+            // Directional, per-kind media precision:
+            // inbound 'bytes' — the inbound path hydrates every binary kind through
+            // `SecureRemoteMediaFetcher` before emit (image/file/audio/video);
+            // outbound 'bytes' — `sendMedia` uploads `localData` bytes via the SDK
+            // `fileData` carrier for every kind (IMAGE / VOICE / VIDEO / FILE).
+            media: {
+                inbound: { image: 'bytes', file: 'bytes', audio: 'bytes', video: 'bytes' },
+                outbound: { image: 'bytes', file: 'bytes', audio: 'bytes', video: 'bytes' },
+            },
+            // Conservative default; `resolveStreamingMode` upgrades C2C+msgId to
+            // native streaming.
+            streaming: 'buffered',
+        };
+    }
+    resolveStreamingMode(target) {
+        // `streaming.enabled: false` is a hard off-switch: it forces the buffered
+        // send-once strategy even for a C2C target with a reply message id.
+        if (!this.config.streaming.enabled) {
+            return 'buffered';
+        }
+        if (target.conversationType === 'dm' && target.replyToMessageId) {
+            return 'native';
+        }
+        return 'buffered';
+    }
+    async start(ctx) {
+        if (this.started)
+            return;
+        this.ctx = ctx;
+        this.connected = false;
+        this.error = undefined;
+        const ready = createDeferred();
+        this.client =
+            this.deps.sdkClient ??
+                new TencentQQSdkClient(this.config, ctx.logger, requireAppSecret(this.deps.appSecret, this.config));
+        this.inbound = new InboundProcessor({
+            ctx,
+            meta: { channel: this.id, accountId: this.config.accountId },
+            dedupEnabled: this.config.dedup.enabled,
+            dedupWindowMs: this.config.dedup.windowMs,
+            secureFetch: this.deps.secureFetch,
+            now: this.now,
+        });
+        this.outbound = new OutboundSender(this.client, ctx.logger);
+        this.client.onReady(() => {
+            this.connected = true;
+            void this.emitAuth('authenticated');
+            void this.emitConnection('connected');
+            ready.resolve();
+        });
+        this.client.onResumed(() => {
+            this.connected = true;
+            void this.emitConnection('connected');
+        });
+        this.client.onError((error) => {
+            this.handleSdkError(error);
+        });
+        this.client.onMessage((message) => {
+            void this.handleInbound(message);
+        });
+        this.client.onInteraction((event) => {
+            void this.handleInteraction(event);
+        });
+        // Never `await bot.start()` inline — it resolves only on stop/abort and
+        // would block the Cordis plugin init. Track the raw promise and surface
+        // failures through `handleSdkError`.
+        this.runPromise = this.client.start(ctx.signal);
+        // Fail-fast (QQ-R14): `tokenPrefetch: 'sync'` makes the SDK reject on bad
+        // credentials before `ready`. Propagate that rejection to the startup
+        // deferred instead of letting it hang until the timeout, and still record
+        // the error for health/event reporting.
+        this.runPromise.catch((error) => {
+            this.handleSdkError(error);
+            ready.reject(error);
+        });
+        try {
+            await withTimeout(ready.promise, this.config.startupTimeoutMs);
+            this.started = true;
+        }
+        catch (error) {
+            // Rollback: stop the (possibly half-started) SDK client and settle the
+            // run promise so a failed start never leaks a live client behind a
+            // `started === false` adapter.
+            this.client.stop();
+            await this.runPromise?.catch(() => undefined);
+            this.runPromise = undefined;
+            throw error;
+        }
+    }
+    async stop() {
+        if (!this.started && this.runPromise === undefined)
+            return;
+        this.started = false;
+        this.connected = false;
+        this.client.stop();
+        await this.runPromise?.catch(() => undefined);
+        this.runPromise = undefined;
+        void this.emitConnection('closed');
+    }
+    async send(target, message) {
+        if (!this.started || !this.outbound) {
+            throw new ChannelError('CHANNEL_NOT_STARTED', 'qq adapter is not started');
+        }
+        return this.outbound.send(target, message);
+    }
+    async createReply(target) {
+        if (target.conversationType !== 'dm' || !target.replyToMessageId) {
+            throw new ChannelError('CHANNEL_ERROR', 'QQ native streaming requires a C2C reply target with message id');
+        }
+        const stream = this.client.openStream({ scope: 'c2c', targetId: target.conversationId, msgId: target.replyToMessageId }, { throttleMs: this.config.streaming.throttleMs });
+        return new QQStreamingReply(stream);
+    }
+    async getHealth() {
+        if (!this.started) {
+            return { status: 'down', detail: 'qq adapter is not started', authenticated: false };
+        }
+        if (this.error) {
+            return {
+                status: 'degraded',
+                detail: 'sdk error',
+                connection: this.connected ? 'connected' : 'disconnected',
+                authenticated: this.connected,
+                error: this.error.message,
+            };
+        }
+        if (this.connected) {
+            return {
+                status: 'ok',
+                detail: 'connected',
+                connection: 'connected',
+                authenticated: true,
+            };
+        }
+        return {
+            status: 'degraded',
+            detail: 'sdk not ready',
+            connection: 'disconnected',
+            authenticated: false,
+        };
+    }
+    handleSdkError(error) {
+        this.error = error;
+        this.connected = false;
+        this.ctx?.logger.error('[channel-qq] sdk error', error);
+        void this.emitConnection('disconnected');
+    }
+    async handleInbound(message) {
+        if (message.kind === 'c2c' && message.senderId) {
+            await this.deps.onOwnerDiscovered?.(message.senderId);
+        }
+        await this.inbound.handle(message);
+    }
+    async handleInteraction(event) {
+        // QQ requires an interaction ACK within ~5s; ACK fire-and-forget first so
+        // the platform is satisfied regardless of how long Harness answer
+        // resolution takes. Never awaits Harness resolution before ACKing.
+        if (event.id) {
+            void this.client
+                .acknowledgeInteraction(event.id, 0)
+                .catch((error) => this.ctx?.logger.debug('[channel-qq] interaction ACK failed', {
+                interactionId: event.id,
+                error: error instanceof Error ? error.message : error,
+            }));
+        }
+        const result = mapInteraction(event, {
+            channel: this.id,
+            accountId: this.config.accountId,
+        });
+        if (!result.ok) {
+            // Fail closed: never emit a guessed event (security doc). Drop with a
+            // debug note — no raw payload dump.
+            this.ctx?.logger.debug('[channel-qq] dropped interaction', { reason: result.reason });
+            return;
+        }
+        const ev = result.event;
+        // Inbound summary (project rule): no raw payload dump.
+        this.ctx?.logger.info(`[channel-qq] interaction from ${ev.sender.id} in ${ev.conversation.id}`, {
+            channel: this.id,
+            accountId: this.config.accountId,
+            conversationType: ev.conversation.type,
+            interactionId: ev.interactionId,
+        });
+        // Adapter only emits the canonical event; the Harness Access Gate
+        // authorizes (never implement ACL here).
+        if (this.ctx) {
+            await this.ctx.emit(ev);
+        }
+    }
+    emitAuth(state) {
+        if (!this.ctx)
+            return Promise.resolve();
+        return this.ctx
+            .emit({
+            type: 'auth.changed',
+            channel: this.id,
+            accountId: this.config.accountId,
+            state,
+        })
+            .then(() => undefined);
+    }
+    emitConnection(state) {
+        if (!this.ctx)
+            return Promise.resolve();
+        return this.ctx
+            .emit({
+            type: 'connection.changed',
+            channel: this.id,
+            accountId: this.config.accountId,
+            state,
+        })
+            .then(() => undefined);
+    }
+}
+/** Minimal deferred primitive. */
+function createDeferred() {
+    let resolve;
+    let reject;
+    const promise = new Promise((res, rej) => {
+        resolve = res;
+        reject = rej;
+    });
+    return { promise, resolve, reject };
+}
+/** Resolve a promise or reject after `timeoutMs`. */
+async function withTimeout(promise, timeoutMs) {
+    let timer;
+    try {
+        return await Promise.race([
+            promise,
+            new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new ChannelError('CHANNEL_START_FAILED', 'qq adapter startup timed out')), timeoutMs);
+            }),
+        ]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+/**
+ * Fail loudly when the resolved QQ AppSecret credential is missing/empty —
+ * the adapter must not construct a real Tencent client with an empty secret
+ * (v1.1 QQ-R5). The Fake client path never reaches this helper.
+ */
+function requireAppSecret(appSecret, config) {
+    if (!appSecret) {
+        throw new ChannelError('CHANNEL_ERROR', `QQ credential "${config.appSecretRef}" is not configured`);
+    }
+    return appSecret;
+}
+//# sourceMappingURL=adapter.js.map

package/lib/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AA4BA,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAGpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAA4C,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAmB,MAAM,eAAe,CAAC;AAqBxE,MAAM,OAAO,SAAS;IA2BS;IA1BpB,EAAE,GAAG,IAAI,CAAC;IAEnB,gFAAgF;IACvE,QAAQ,GAAe,UAAU,CAAC;IAClC,YAAY,CAAsB;IAE3C;;;;OAIG;IACH,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;IAC7B,CAAC;IAEO,GAAG,CAAyB;IACnB,IAAI,CAAgB;IACpB,GAAG,CAAe;IAC3B,MAAM,CAAe;IACrB,OAAO,CAAoB;IAC3B,QAAQ,CAAkB;IAC1B,OAAO,GAAG,KAAK,CAAC;IAChB,SAAS,GAAG,KAAK,CAAC;IAClB,KAAK,CAAS;IACd,UAAU,CAAiB;IAEnC,YAA6B,MAAgB,EAAE,OAAsB,EAAE;QAA1C,WAAM,GAAN,MAAM,CAAU;QAC3C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG;YAClB,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,MAAM,CAAC,eAAe;YAChC,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,KAAK;YACd,sEAAsE;YACtE,+DAA+D;YAC/D,kBAAkB,EAAE,IAAI;YACxB,yCAAyC;YACzC,wEAAwE;YACxE,mEAAmE;YACnE,uEAAuE;YACvE,oEAAoE;YACpE,KAAK,EAAE;gBACL,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;gBAC1E,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;aAC5E;YACD,qEAAqE;YACrE,oBAAoB;YACpB,SAAS,EAAE,UAAU;SACtB,CAAC;IACJ,CAAC;IAED,oBAAoB,CAAC,MAAqB;QACxC,0EAA0E;QAC1E,oEAAoE;QACpE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACnC,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAChE,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAA0B;QACpC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QAEvB,MAAM,KAAK,GAAG,cAAc,EAAQ,CAAC;QAErC,IAAI,CAAC,MAAM;YACT,IAAI,CAAC,IAAI,CAAC,SAAS;gBACnB,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAEtG,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,CAAC;YAClC,GAAG;YACH,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAW,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAkB,EAAE;YAC9E,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO;YACvC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ;YACzC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;YAClC,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAE5D,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;YACvB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,KAAK,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YACpC,KAAK,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YACtC,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE;YACzB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,KAAK,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YAC5B,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE;YAChC,KAAK,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,EAAE;YAClC,KAAK,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,wEAAwE;QACxE,wEAAwE;QACxE,qCAAqC;QACrC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEhD,0EAA0E;QAC1E,sEAAsE;QACtE,0EAA0E;QAC1E,wCAAwC;QACxC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAC9B,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC3B,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC/D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uEAAuE;YACvE,mEAAmE;YACnE,+BAA+B;YAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO;QAC3D,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,KAAK,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAqB,EAAE,OAAwB;QACxD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,2BAA2B,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAqB;QACrC,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjE,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,iEAAiE,CAClE,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CACnC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,gBAAgB,EAAE,EACjF,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,CACjD,CAAC;QACF,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,SAAS;QACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QACvF,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,WAAW;gBACnB,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc;gBACzD,aAAa,EAAE,IAAI,CAAC,SAAS;gBAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO;aAC1B,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,WAAW;gBACnB,UAAU,EAAE,WAAW;gBACvB,aAAa,EAAE,IAAI;aACpB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,eAAe;YACvB,UAAU,EAAE,cAAc;YAC1B,aAAa,EAAE,KAAK;SACrB,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,KAAY;QACjC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;QACxD,KAAK,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAA4B;QACtD,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,KAAwB;QACtD,0EAA0E;QAC1E,kEAAkE;QAClE,mEAAmE;QACnE,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;YACb,KAAK,IAAI,CAAC,MAAM;iBACb,sBAAsB,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;iBACnC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;gBAC5D,aAAa,EAAE,KAAK,CAAC,EAAE;gBACvB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;aACtD,CAAC,CACH,CAAC;QACN,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE;YACnC,OAAO,EAAE,IAAI,CAAC,EAAW;YACzB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAkB;SAC1C,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,sEAAsE;YACtE,oCAAoC;YACpC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;QACxB,uDAAuD;QACvD,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CACnB,iCAAiC,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EACxE;YACE,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,gBAAgB,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI;YACtC,aAAa,EAAE,EAAE,CAAC,aAAa;SAChC,CACF,CAAC;QAEF,kEAAkE;QAClE,yCAAyC;QACzC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,KAAqE;QACpF,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,GAAG;aACZ,IAAI,CAAC;YACJ,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,IAAI,CAAC,EAAW;YACzB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAkB;YACzC,KAAK;SACN,CAAC;aACD,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAEO,cAAc,CAAC,KAA8E;QACnG,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,GAAG;aACZ,IAAI,CAAC;YACJ,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,IAAI,CAAC,EAAW;YACzB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAkB;YACzC,KAAK;SACN,CAAC;aACD,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;CACF;AAED,kCAAkC;AAClC,SAAS,cAAc;IACrB,IAAI,OAA4B,CAAC;IACjC,IAAI,MAAmC,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1C,OAAO,GAAG,GAAG,CAAC;QACd,MAAM,GAAG,GAAG,CAAC;IACf,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED,qDAAqD;AACrD,KAAK,UAAU,WAAW,CAAI,OAAmB,EAAE,SAAiB;IAClE,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,OAAO;YACP,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,sBAAsB,EAAE,8BAA8B,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACxH,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,SAA6B,EAAE,MAAgB;IACvE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,kBAAkB,MAAM,CAAC,YAAY,qBAAqB,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/lib/config.d.ts

@@ -0,0 +1,62 @@
+/**
+ * QQ adapter configuration (Schemastery).
+ *
+ * V1 consumes the official Tencent SDK `@tencent-connect/qqbot-nodejs`, which
+ * owns Token acquisition/refresh, the WebSocket gateway (hello/identify/
+ * heartbeat/RESUME/reconnect) and the OpenAPI REST surface. The adapter only
+ * needs the AppId and behavioural tuning — no base URL, transport, reconnect
+ * budget or QR auth config.
+ *
+ * The real AppSecret is **never** written into config / profile / git. Config
+ * only carries its credential reference name (`appSecretRef`); the actual
+ * secret is resolved at startup through `ctx.credentials` (v1.1 §6.2, QQ-R5).
+ */
+import Schema from '@deepseek-ai/schemastery';
+import type { Volatile } from '@deepseek-ai/cordis';
+export declare const QQ_APP_SECRET_REF = "QQBOT_APP_SECRET";
+export interface QQStreamingConfig {
+    /** Whether incremental outbound streaming is enabled. */
+    enabled: boolean;
+    /** Stream flush throttle (ms). Tencent SDK: default 500, min 300. */
+    throttleMs: number;
+}
+export interface QQDedupConfig {
+    enabled: boolean;
+    windowMs: number;
+}
+export interface QQConfig {
+    enabled: boolean;
+    /** Account id within the qq channel (defaults to 'main'). */
+    accountId: string;
+    /** QQ Open Platform AppId (not a secret — may live in config/git). */
+    appId: string;
+    /**
+     * Credential reference name for the QQ Open Platform AppSecret (e.g.
+     * `'QQBOT_APP_SECRET'`). Only the reference — never the real secret — is
+     * stored here; the secret is resolved via `ctx.credentials` at startup.
+     */
+    appSecretRef: string;
+    /** Whether ordinary bot replies may use Markdown. Interactive keyboard questions use the new QQ Markdown wire format regardless. */
+    markdownSupport: boolean;
+    streaming: QQStreamingConfig;
+    dedup: QQDedupConfig;
+    /** How long start() waits for the SDK `ready` event before failing. */
+    startupTimeoutMs: number;
+}
+/**
+ * Activation-time config shape (Harness 0.2.0): every volatile field resolves
+ * to a `Volatile<T>` live handle instead of a plain value. `apply()` unwraps
+ * these once via `resolveVolatileConfig` into a plain `QQConfig`.
+ */
+export interface QQConfigLive {
+    enabled: Volatile<boolean>;
+    accountId: Volatile<string>;
+    appId: Volatile<string>;
+    appSecretRef: string;
+    markdownSupport: Volatile<boolean>;
+    streaming: Volatile<QQStreamingConfig>;
+    dedup: Volatile<QQDedupConfig>;
+    startupTimeoutMs: Volatile<number>;
+}
+export declare const Config: Schema<QQConfigLive>;
+//# sourceMappingURL=config.d.ts.map

package/lib/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,MAAM,MAAM,0BAA0B,CAAC;AAC9C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,eAAO,MAAM,iBAAiB,qBAAqB,CAAC;AAEpD,MAAM,WAAW,iBAAiB;IAChC,yDAAyD;IACzD,OAAO,EAAE,OAAO,CAAC;IACjB,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,oIAAoI;IACpI,eAAe,EAAE,OAAO,CAAC;IACzB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,KAAK,EAAE,aAAa,CAAC;IACrB,uEAAuE;IACvE,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5B,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACvC,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC/B,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACpC;AAMD,eAAO,MAAM,MAAM,EAsBF,MAAM,CAAC,YAAY,CAAC,CAAC"}

package/lib/config.js

@@ -0,0 +1,43 @@
+/**
+ * QQ adapter configuration (Schemastery).
+ *
+ * V1 consumes the official Tencent SDK `@tencent-connect/qqbot-nodejs`, which
+ * owns Token acquisition/refresh, the WebSocket gateway (hello/identify/
+ * heartbeat/RESUME/reconnect) and the OpenAPI REST surface. The adapter only
+ * needs the AppId and behavioural tuning — no base URL, transport, reconnect
+ * budget or QR auth config.
+ *
+ * The real AppSecret is **never** written into config / profile / git. Config
+ * only carries its credential reference name (`appSecretRef`); the actual
+ * secret is resolved at startup through `ctx.credentials` (v1.1 §6.2, QQ-R5).
+ */
+import Schema from '@deepseek-ai/schemastery';
+export const QQ_APP_SECRET_REF = 'QQBOT_APP_SECRET';
+// The runtime schema is genuine Schemastery (validation happens at the Loader
+// boundary); the annotation records the activation-time output shape. The cast
+// is required because Schemastery's inferred ObjectT models per-field optionality
+// more precisely than the hand-written `QQConfigLive` alias.
+export const Config = Schema.object({
+    // Harness 0.2.0 settings model: fields the control plane / settings page may
+    // write at runtime are declared `.volatile()` — they surface on the
+    // auto-generated settings form, `ctx.settings.update(entryId, patch)` accepts
+    // exactly these paths, and at activation they resolve to `Volatile<T>`
+    // handles (unwrapped by `resolveVolatileConfig` in definition.ts / apply()).
+    enabled: Schema.boolean().default(true).volatile(),
+    accountId: Schema.string().default('main').volatile(),
+    // QQ Open Platform AppId (not a secret — may live in config/git).
+    appId: Schema.string().volatile(),
+    // Credential reference name only — never the secret value itself.
+    appSecretRef: Schema.string().default(QQ_APP_SECRET_REF),
+    markdownSupport: Schema.boolean().default(false).volatile(),
+    streaming: Schema.object({
+        enabled: Schema.boolean().default(true),
+        throttleMs: Schema.natural().min(300).default(500),
+    }).default({}).volatile(),
+    dedup: Schema.object({
+        enabled: Schema.boolean().default(true),
+        windowMs: Schema.natural().default(5000),
+    }).default({}).volatile(),
+    startupTimeoutMs: Schema.natural().default(15000).volatile(),
+});
+//# sourceMappingURL=config.js.map

package/lib/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,MAAM,MAAM,0BAA0B,CAAC;AAG9C,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAkDpD,8EAA8E;AAC9E,+EAA+E;AAC/E,kFAAkF;AAClF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAClC,6EAA6E;IAC7E,oEAAoE;IACpE,8EAA8E;IAC9E,uEAAuE;IACvE,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAClD,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IACrD,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,kEAAkE;IAClE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACxD,eAAe,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IAC3D,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACvC,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;KACnD,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACvC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACzC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzB,gBAAgB,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CAC7D,CAAoC,CAAC"}