@largezhou/ddingtalk 1.4.3 → 2.0.0-beta.1

package/index.ts

@@ -1,24 +1,14 @@
-import type { OpenClawPluginApi } from "openclaw/plugin-sdk";
-import { emptyPluginConfigSchema } from "openclaw/plugin-sdk";
+import { defineChannelPluginEntry } from "openclaw/plugin-sdk/core";
 import { dingtalkPlugin } from "./src/channel.js";
 import { setDingTalkRuntime } from "./src/runtime.js";
-import { PLUGIN_ID } from "./src/constants.js";
 
-const plugin: {
-  id: string;
-  name: string;
-  description: string;
-  configSchema: ReturnType<typeof emptyPluginConfigSchema>;
-  register: (api: OpenClawPluginApi) => void;
-} = {
-  id: PLUGIN_ID,
+export { dingtalkPlugin } from "./src/channel.js";
+export { setDingTalkRuntime } from "./src/runtime.js";
+
+export default defineChannelPluginEntry({
+  id: "ddingtalk",
   name: "DingTalk",
   description: "DingTalk (钉钉) enterprise robot channel plugin",
-  configSchema: emptyPluginConfigSchema(),
-  register(api: OpenClawPluginApi) {
-    setDingTalkRuntime(api.runtime);
-    api.registerChannel({ plugin: dingtalkPlugin });
-  },
-};
-
-export default plugin;
+  plugin: dingtalkPlugin,
+  setRuntime: setDingTalkRuntime,
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@largezhou/ddingtalk",
-  "version": "1.4.3",
+  "version": "2.0.0-beta.1",
   "description": "OpenClaw DingTalk (钉钉) channel plugin",
   "main": "index.ts",
   "type": "module",
@@ -33,14 +33,14 @@
     "zod": "^4.0.0"
   },
   "devDependencies": {
-    "@types/node": "^20.10.0",
+    "@types/node": "^22.0.0",
     "dotenv": "^17.3.1",
-    "openclaw": "<=2026.3.13",
+    "openclaw": ">=2026.3.22",
     "tsx": "^4.6.0",
     "typescript": "^5.3.0"
   },
   "peerDependencies": {
-    "openclaw": "<=2026.3.13"
+    "openclaw": ">=2026.3.22"
   },
   "openclaw": {
     "extensions": [

package/src/accounts.ts

@@ -2,7 +2,7 @@ import {
   DEFAULT_ACCOUNT_ID,
   normalizeAccountId,
   type OpenClawConfig,
-} from "openclaw/plugin-sdk";
+} from "openclaw/plugin-sdk/core";
 import type {
   DingTalkConfig,
   DingTalkAccountConfig,

package/src/channel.ts

@@ -3,16 +3,14 @@ import {
   DEFAULT_ACCOUNT_ID,
   setAccountEnabledInConfigSection,
   deleteAccountFromConfigSection,
-  applyAccountNameToChannelSection,
   formatPairingApproveHint,
-  loadWebMedia,
-  missingTargetError,
   normalizeAccountId,
   type ChannelPlugin,
-  type ChannelStatusIssue,
-  type ChannelAccountSnapshot,
   type OpenClawConfig,
-} from "openclaw/plugin-sdk";
+} from "openclaw/plugin-sdk/core";
+import type { ChannelStatusIssue, ChannelAccountSnapshot } from "openclaw/plugin-sdk/channel-contract";
+import { loadWebMedia } from "openclaw/plugin-sdk/web-media";
+import { missingTargetError } from "openclaw/plugin-sdk/channel-feedback";
 import path from "path";
 import { getDingTalkRuntime } from "./runtime.js";
 import {
@@ -24,9 +22,10 @@ import { DingTalkConfigSchema, type DingTalkConfig, type ResolvedDingTalkAccount
 import { sendTextMessage, sendImageMessage, sendFileMessage, sendAudioMessage, sendVideoMessage, uploadMedia, probeDingTalkBot, inferMediaType, isGroupTarget } from "./client.js";
 import { logger } from "./logger.js";
 import { monitorDingTalkProvider } from "./monitor.js";
-import { dingtalkOnboardingAdapter } from "./onboarding.js";
 import { PLUGIN_ID } from "./constants.js";
 import { hasFFmpeg, probeMediaBuffer } from "./ffmpeg.js";
+import { dingtalkSetupAdapter } from "./setup-core.js";
+import { dingtalkSetupWizard } from "./setup-surface.js";
 
 // ======================= Target Normalization =======================
 
@@ -93,7 +92,7 @@ const meta = {
 export const dingtalkPlugin: ChannelPlugin<ResolvedDingTalkAccount> = {
   id: PLUGIN_ID,
   meta,
-  onboarding: dingtalkOnboardingAdapter,
+  setupWizard: dingtalkSetupWizard,
   capabilities: {
     chatTypes: ["direct", "group"],
     reactions: false,
@@ -195,84 +194,7 @@ export const dingtalkPlugin: ChannelPlugin<ResolvedDingTalkAccount> = {
     },
   },
 
-  setup: {
-    resolveAccountId: ({ accountId }) => normalizeAccountId(accountId),
-    applyAccountName: ({ cfg, accountId, name }) =>
-      applyAccountNameToChannelSection({
-        cfg,
-        channelKey: PLUGIN_ID,
-        accountId: accountId ?? DEFAULT_ACCOUNT_ID,
-        name,
-      }),
-    validateInput: ({ input }) => {
-      const typedInput = input as {
-        clientId?: string;
-        clientSecret?: string;
-      };
-      if (!typedInput.clientId) {
-        return "DingTalk requires clientId.";
-      }
-      if (!typedInput.clientSecret) {
-        return "DingTalk requires clientSecret.";
-      }
-      return null;
-    },
-    applyAccountConfig: ({ cfg, accountId, input }) => {
-      const typedInput = input as {
-        name?: string;
-        clientId?: string;
-        clientSecret?: string;
-      };
-      const aid = normalizeAccountId(accountId);
-
-      // 应用账号名称
-      let next = applyAccountNameToChannelSection({
-        cfg,
-        channelKey: PLUGIN_ID,
-        accountId: aid,
-        name: typedInput.name,
-      });
-
-      const dingtalkConfig = (next.channels?.[PLUGIN_ID] ?? {}) as DingTalkConfig;
-
-      // default 账号 → 写顶层（兼容旧版 + 前端面板）
-      if (aid === DEFAULT_ACCOUNT_ID) {
-        return {
-          ...next,
-          channels: {
-            ...next.channels,
-            [PLUGIN_ID]: {
-              ...dingtalkConfig,
-              enabled: true,
-              ...(typedInput.clientId ? { clientId: typedInput.clientId } : {}),
-              ...(typedInput.clientSecret ? { clientSecret: typedInput.clientSecret } : {}),
-            },
-          },
-        };
-      }
-
-      // 非 default 账号 → 写 accounts[accountId]
-      return {
-        ...next,
-        channels: {
-          ...next.channels,
-          [PLUGIN_ID]: {
-            ...dingtalkConfig,
-            enabled: true,
-            accounts: {
-              ...dingtalkConfig.accounts,
-              [aid]: {
-                ...dingtalkConfig.accounts?.[aid],
-                enabled: true,
-                ...(typedInput.clientId ? { clientId: typedInput.clientId } : {}),
-                ...(typedInput.clientSecret ? { clientSecret: typedInput.clientSecret } : {}),
-              },
-            },
-          },
-        },
-      };
-    },
-  },
+  setup: dingtalkSetupAdapter,
   outbound: {
     deliveryMode: "direct",
     chunker: (text, limit) => getDingTalkRuntime().channel.text.chunkMarkdownText(text, limit),

package/src/monitor.ts

@@ -1,5 +1,7 @@
 import { DWClient, TOPIC_ROBOT, type DWClientDownStream } from "dingtalk-stream";
-import { recordInboundSession, type OpenClawConfig, type RuntimeEnv } from "openclaw/plugin-sdk";
+import { recordInboundSession } from "openclaw/plugin-sdk/conversation-runtime";
+import type { OpenClawConfig } from "openclaw/plugin-sdk/core";
+import type { RuntimeEnv } from "openclaw/plugin-sdk/runtime-env";
 import type { DingTalkMessageData, ResolvedDingTalkAccount, DingTalkGroupConfig, AudioContent, VideoContent, FileContent, PictureContent, RichTextContent, RichTextElement, RichTextPictureElement } from "./types.js";
 import { replyViaWebhook, getFileDownloadUrl, downloadFromUrl, sendTextMessage } from "./client.js";
 import { resolveDingTalkAccount } from "./accounts.js";

package/src/runtime.ts

@@ -1,4 +1,4 @@
-import type { PluginRuntime } from "openclaw/plugin-sdk";
+import type { PluginRuntime } from "openclaw/plugin-sdk/core";
 
 let runtime: PluginRuntime | null = null;
 

package/src/setup-core.ts

@@ -0,0 +1,170 @@
+import {
+  applySetupAccountConfigPatch,
+  splitSetupEntries,
+  DEFAULT_ACCOUNT_ID,
+  type OpenClawConfig,
+  type WizardPrompter,
+} from "openclaw/plugin-sdk/setup";
+import type { ChannelSetupAdapter } from "openclaw/plugin-sdk/setup";
+import { formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
+import {
+  resolveDefaultDingTalkAccountId,
+  resolveDingTalkAccount,
+} from "./accounts.js";
+import { PLUGIN_ID } from "./constants.js";
+
+const channel = PLUGIN_ID;
+
+export const DINGTALK_CREDENTIAL_HELP_LINES = [
+  "1) Log in to DingTalk Open Platform: https://open.dingtalk.com",
+  "2) Create an internal enterprise app -> Robot",
+  "3) Get AppKey (Client ID) and AppSecret (Client Secret)",
+  "4) Enable Stream mode in app configuration",
+  `Docs: ${formatDocsLink(`/channels/${PLUGIN_ID}`, PLUGIN_ID)}`,
+];
+
+export const DINGTALK_ALLOWFROM_HELP_LINES = [
+  "Add DingTalk user IDs that are allowed to interact with the bot.",
+  "You can find user IDs in DingTalk admin panel or from bot message logs.",
+  "Examples:",
+  "- userId123",
+  "- manager456",
+  "Multiple entries: comma-separated.",
+  `Docs: ${formatDocsLink(`/channels/${PLUGIN_ID}`, PLUGIN_ID)}`,
+];
+
+/**
+ * 解析钉钉 allowFrom 用户 ID
+ * 钉钉用户 ID 一般是字母数字组合
+ */
+export function parseDingTalkAllowFromId(raw: string): string | null {
+  const stripped = raw
+    .trim()
+    .replace(new RegExp(`^(${PLUGIN_ID}|dingtalk|dingding):`, "i"), "")
+    .replace(/^user:/i, "")
+    .trim();
+  return /^[a-zA-Z0-9_$+-]+$/i.test(stripped) ? stripped : null;
+}
+
+/**
+ * 钉钉 allowFrom 条目解析
+ * 钉钉没有 API 来通过用户名查找用户 ID，所以直接使用 parseId 结果
+ */
+export async function resolveDingTalkAllowFromEntries(params: {
+  entries: string[];
+}) {
+  return params.entries.map((entry) => {
+    const id = parseDingTalkAllowFromId(entry);
+    return { input: entry, resolved: Boolean(id), id };
+  });
+}
+
+/**
+ * 交互式 allowFrom 提示
+ */
+export async function promptDingTalkAllowFromForAccount(params: {
+  cfg: OpenClawConfig;
+  prompter: WizardPrompter;
+  accountId?: string;
+}) {
+  const accountId =
+    params.accountId ?? resolveDefaultDingTalkAccountId(params.cfg);
+  const resolved = resolveDingTalkAccount({
+    cfg: params.cfg,
+    accountId,
+  });
+  await params.prompter.note(
+    DINGTALK_ALLOWFROM_HELP_LINES.join("\n"),
+    "DingTalk user id",
+  );
+
+  // 读取现有 allowFrom
+  const existing = resolved.allowFrom ?? [];
+
+  // 提示输入
+  const entry = await params.prompter.text({
+    message: "DingTalk allowFrom (user IDs)",
+    placeholder: "userId1, userId2",
+    initialValue: existing[0] ? String(existing[0]) : undefined,
+    validate: (value: string) =>
+      String(value ?? "").trim() ? undefined : "Required",
+  });
+
+  const parts = splitSetupEntries(String(entry));
+  const ids = parts
+    .map(parseDingTalkAllowFromId)
+    .filter(Boolean) as string[];
+  const unique = [...new Set([...existing.map(String), ...ids])];
+
+  return applySetupAccountConfigPatch({
+    cfg: params.cfg,
+    channelKey: channel,
+    accountId,
+    patch: { allowFrom: unique },
+  });
+}
+
+/**
+ * 检查钉钉账号的凭据状态
+ */
+export function inspectDingTalkSetupAccount(params: {
+  cfg: OpenClawConfig;
+  accountId: string;
+}) {
+  const account = resolveDingTalkAccount(params);
+  const hasClientId = Boolean(account.clientId?.trim());
+  const hasClientSecret = Boolean(account.clientSecret?.trim());
+  return {
+    configured: hasClientId && hasClientSecret,
+    clientId: account.clientId,
+    clientSecret: account.clientSecret,
+    tokenSource: account.tokenSource,
+    hasClientId,
+    hasClientSecret,
+  };
+}
+
+/**
+ * 钉钉 ChannelSetupAdapter
+ *
+ * 钉钉使用 clientId + clientSecret 作为凭据，与 Discord/Telegram 的单 token 不同，
+ * 所以不使用 createEnvPatchedAccountSetupAdapter，而是手写适配器来处理两个凭据字段。
+ */
+export const dingtalkSetupAdapter: ChannelSetupAdapter = {
+  resolveAccountId: ({ accountId }) => accountId ?? DEFAULT_ACCOUNT_ID,
+  applyAccountName: ({ cfg, accountId, name }) =>
+    applySetupAccountConfigPatch({
+      cfg,
+      channelKey: channel,
+      accountId,
+      patch: { name },
+    }),
+  validateInput: ({ input }) => {
+    const typedInput = input as {
+      clientId?: string;
+      clientSecret?: string;
+    };
+    if (!typedInput.clientId && !typedInput.clientSecret) {
+      return "DingTalk requires clientId and clientSecret.";
+    }
+    return null;
+  },
+  applyAccountConfig: ({ cfg, accountId, input }) => {
+    const typedInput = input as {
+      name?: string;
+      clientId?: string;
+      clientSecret?: string;
+    };
+    return applySetupAccountConfigPatch({
+      cfg,
+      channelKey: channel,
+      accountId: accountId ?? DEFAULT_ACCOUNT_ID,
+      patch: {
+        ...(typedInput.clientId ? { clientId: typedInput.clientId } : {}),
+        ...(typedInput.clientSecret
+          ? { clientSecret: typedInput.clientSecret }
+          : {}),
+      },
+    });
+  },
+};

package/src/setup-surface.ts

@@ -0,0 +1,163 @@
+import {
+  createAllowFromSection,
+  createStandardChannelSetupStatus,
+  DEFAULT_ACCOUNT_ID,
+  type OpenClawConfig,
+  applySetupAccountConfigPatch,
+  setSetupChannelEnabled,
+  splitSetupEntries,
+} from "openclaw/plugin-sdk/setup";
+import type {
+  ChannelSetupDmPolicy,
+  ChannelSetupWizard,
+} from "openclaw/plugin-sdk/setup";
+import { formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
+import {
+  listDingTalkAccountIds,
+  resolveDingTalkAccount,
+} from "./accounts.js";
+import { PLUGIN_ID } from "./constants.js";
+import {
+  DINGTALK_ALLOWFROM_HELP_LINES,
+  DINGTALK_CREDENTIAL_HELP_LINES,
+  inspectDingTalkSetupAccount,
+  parseDingTalkAllowFromId,
+  promptDingTalkAllowFromForAccount,
+  resolveDingTalkAllowFromEntries,
+} from "./setup-core.js";
+
+const channel = PLUGIN_ID;
+
+/**
+ * 钉钉 DM 策略
+ */
+const dmPolicy: ChannelSetupDmPolicy = {
+  label: "DingTalk",
+  channel,
+  policyKey: `channels.${channel}.dmPolicy`,
+  allowFromKey: `channels.${channel}.allowFrom`,
+  getCurrent: (cfg) =>
+    (cfg.channels?.[channel] as { dmPolicy?: "open" | "pairing" | "allowlist" } | undefined)
+      ?.dmPolicy ?? "pairing",
+  setPolicy: (cfg, policy) =>
+    applySetupAccountConfigPatch({
+      cfg,
+      channelKey: channel,
+      accountId: DEFAULT_ACCOUNT_ID,
+      patch: { dmPolicy: policy },
+    }),
+  promptAllowFrom: promptDingTalkAllowFromForAccount,
+};
+
+/**
+ * 钉钉 ChannelSetupWizard — 交互式配置向导
+ *
+ * 声明式描述了钉钉 Stream 模式机器人的配置流程：
+ * 1. 凭据步骤：clientId (AppKey) + clientSecret (AppSecret)
+ * 2. AllowFrom：配置允许的用户 ID
+ * 3. DM 策略
+ */
+export const dingtalkSetupWizard: ChannelSetupWizard = {
+  channel,
+  status: createStandardChannelSetupStatus({
+    channelLabel: "DingTalk",
+    configuredLabel: "configured",
+    unconfiguredLabel: "needs credentials",
+    configuredHint: "configured",
+    unconfiguredHint: "needs AppKey & AppSecret",
+    configuredScore: 2,
+    unconfiguredScore: 1,
+    resolveConfigured: ({ cfg }) =>
+      listDingTalkAccountIds(cfg).some((accountId) => {
+        const account = inspectDingTalkSetupAccount({ cfg, accountId });
+        return account.configured;
+      }),
+  }),
+
+  // 钉钉使用两个凭据：clientId + clientSecret
+  // ChannelSetupWizardCredential 每个只处理一个密钥，所以分两步
+  credentials: [
+    {
+      inputKey: "token", // 复用 token 字段映射 clientId
+      providerHint: channel,
+      credentialLabel: "DingTalk AppKey (Client ID)",
+      helpTitle: "DingTalk credentials",
+      helpLines: DINGTALK_CREDENTIAL_HELP_LINES,
+      envPrompt: "DINGTALK_CLIENT_ID detected. Use env var?",
+      keepPrompt: "DingTalk AppKey already configured. Keep it?",
+      inputPrompt: "Enter DingTalk AppKey (Client ID)",
+      allowEnv: ({ accountId }) => accountId === DEFAULT_ACCOUNT_ID,
+      inspect: ({ cfg, accountId }) => {
+        const account = inspectDingTalkSetupAccount({ cfg, accountId });
+        return {
+          accountConfigured: account.configured,
+          hasConfiguredValue: account.hasClientId,
+          resolvedValue: account.clientId?.trim() || undefined,
+          envValue:
+            accountId === DEFAULT_ACCOUNT_ID
+              ? process.env.DINGTALK_CLIENT_ID?.trim() || undefined
+              : undefined,
+        };
+      },
+      applySet: async ({ cfg, accountId, resolvedValue }) =>
+        applySetupAccountConfigPatch({
+          cfg,
+          channelKey: channel,
+          accountId,
+          patch: { clientId: resolvedValue },
+        }),
+    },
+    {
+      inputKey: "privateKey", // 复用 privateKey 字段映射 clientSecret
+      providerHint: channel,
+      credentialLabel: "DingTalk AppSecret (Client Secret)",
+      envPrompt: "DINGTALK_CLIENT_SECRET detected. Use env var?",
+      keepPrompt: "DingTalk AppSecret already configured. Keep it?",
+      inputPrompt: "Enter DingTalk AppSecret (Client Secret)",
+      allowEnv: ({ accountId }) => accountId === DEFAULT_ACCOUNT_ID,
+      inspect: ({ cfg, accountId }) => {
+        const account = inspectDingTalkSetupAccount({ cfg, accountId });
+        return {
+          accountConfigured: account.configured,
+          hasConfiguredValue: account.hasClientSecret,
+          resolvedValue: account.clientSecret?.trim() || undefined,
+          envValue:
+            accountId === DEFAULT_ACCOUNT_ID
+              ? process.env.DINGTALK_CLIENT_SECRET?.trim() || undefined
+              : undefined,
+        };
+      },
+      applySet: async ({ cfg, accountId, resolvedValue }) =>
+        applySetupAccountConfigPatch({
+          cfg,
+          channelKey: channel,
+          accountId,
+          patch: { clientSecret: resolvedValue },
+        }),
+    },
+  ],
+
+  // allowFrom 配置
+  allowFrom: createAllowFromSection({
+    helpTitle: "DingTalk user id",
+    helpLines: DINGTALK_ALLOWFROM_HELP_LINES,
+    message: "DingTalk allowFrom (user IDs)",
+    placeholder: "userId1, userId2",
+    invalidWithoutCredentialNote:
+      "Please enter valid DingTalk user IDs (alphanumeric format).",
+    parseInputs: splitSetupEntries,
+    parseId: parseDingTalkAllowFromId,
+    resolveEntries: async ({ entries }) =>
+      resolveDingTalkAllowFromEntries({ entries }),
+    apply: async ({ cfg, accountId, allowFrom }) =>
+      applySetupAccountConfigPatch({
+        cfg,
+        channelKey: channel,
+        accountId,
+        patch: { allowFrom },
+      }),
+  }),
+
+  dmPolicy,
+  disable: (cfg) => setSetupChannelEnabled(cfg, channel, false),
+};

package/src/onboarding.ts

@@ -1,240 +0,0 @@
-import type { ChannelOnboardingAdapter } from "openclaw/plugin-sdk";
-import { DEFAULT_ACCOUNT_ID, promptAccountId } from "openclaw/plugin-sdk";
-import type { DingTalkConfig } from "./types.js";
-import {
-  listDingTalkAccountIds,
-  resolveDefaultDingTalkAccountId,
-  resolveDingTalkAccount,
-} from "./accounts.js";
-import { PLUGIN_ID } from "./constants.js";
-
-const channel = PLUGIN_ID;
-
-/**
- * Display DingTalk credentials configuration help
- */
-async function noteDingTalkCredentialsHelp(prompter: {
-  note: (message: string, title?: string) => Promise<void>;
-}): Promise<void> {
-  await prompter.note(
-    [
-      "1) Log in to DingTalk Open Platform: https://open.dingtalk.com",
-      "2) Create an internal enterprise app -> Robot",
-      "3) Get AppKey (Client ID) and AppSecret (Client Secret)",
-      "4) Enable Stream mode in app configuration",
-      "Docs: https://open.dingtalk.com/document/",
-    ].join("\n"),
-    "DingTalk bot setup"
-  );
-}
-
-/**
- * Prompt for DingTalk credentials (clientId + clientSecret)
- */
-async function promptDingTalkCredentials(prompter: {
-  text: (opts: { message: string; validate?: (value: string) => string | undefined }) => Promise<string | symbol>;
-}): Promise<{ clientId: string; clientSecret: string }> {
-  const clientId = String(
-    await prompter.text({
-      message: "Enter DingTalk AppKey (Client ID)",
-      validate: (value) => (value?.trim() ? undefined : "Required"),
-    })
-  ).trim();
-  const clientSecret = String(
-    await prompter.text({
-      message: "Enter DingTalk AppSecret (Client Secret)",
-      validate: (value) => (value?.trim() ? undefined : "Required"),
-    })
-  ).trim();
-  return { clientId, clientSecret };
-}
-
-/** 需要从顶层迁移到 accounts.default 的字段 */
-const ACCOUNT_LEVEL_KEYS = new Set([
-  "name",
-  "clientId",
-  "clientSecret",
-  "allowFrom",
-  "groupPolicy",
-  "groupAllowFrom",
-  "groups",
-]);
-
-/**
- * 当添加非 default 账号时，把顶层的账号级字段迁移到 accounts.default 下。
- * 如果 accounts 字典已存在（已经是多账号模式），则不做迁移。
- */
-function moveTopLevelToDefaultAccount(
-  section: DingTalkConfig,
-): DingTalkConfig {
-  // 已有 accounts 字典，不需要迁移
-  if (section.accounts && Object.keys(section.accounts).length > 0) {
-    return section;
-  }
-
-  const defaultAccount: Record<string, unknown> = {};
-  const cleaned: Record<string, unknown> = {};
-
-  for (const [key, value] of Object.entries(section)) {
-    if (key === "accounts" || key === "defaultAccount") {
-      cleaned[key] = value;
-    } else if (ACCOUNT_LEVEL_KEYS.has(key) && value !== undefined) {
-      defaultAccount[key] = value;
-      // 不复制到 cleaned，从顶层移除
-    } else {
-      cleaned[key] = value;
-    }
-  }
-
-  // 没有可迁移的字段
-  if (Object.keys(defaultAccount).length === 0) {
-    return section;
-  }
-
-  return {
-    ...cleaned,
-    accounts: {
-      [DEFAULT_ACCOUNT_ID]: defaultAccount,
-    },
-  } as DingTalkConfig;
-}
-
-/**
- * Apply credentials to the config for a given accountId.
- *
- * 策略（与框架层 Discord/Telegram 一致）：
- * - default 账号：写顶层（兼容单账号模式）
- * - 非 default 账号：先把顶层账号级字段迁移到 accounts.default，再写 accounts[accountId]
- */
-function applyCredentials(
-  cfg: Record<string, unknown>,
-  accountId: string,
-  credentials: { clientId: string; clientSecret: string }
-): Record<string, unknown> {
-  const dingtalkConfig = ((cfg.channels as Record<string, unknown>)?.[PLUGIN_ID] ?? {}) as DingTalkConfig;
-
-  if (accountId === DEFAULT_ACCOUNT_ID) {
-    // default 账号：写顶层
-    return {
-      ...cfg,
-      channels: {
-        ...(cfg.channels as Record<string, unknown>),
-        [PLUGIN_ID]: {
-          ...dingtalkConfig,
-          enabled: true,
-          clientId: credentials.clientId,
-          clientSecret: credentials.clientSecret,
-        },
-      },
-    };
-  }
-
-  // 非 default 账号：先迁移顶层到 accounts.default，再写新账号
-  const migrated = moveTopLevelToDefaultAccount(dingtalkConfig);
-
-  return {
-    ...cfg,
-    channels: {
-      ...(cfg.channels as Record<string, unknown>),
-      [PLUGIN_ID]: {
-        ...migrated,
-        enabled: true,
-        accounts: {
-          ...migrated.accounts,
-          [accountId]: {
-            ...migrated.accounts?.[accountId],
-            enabled: true,
-            clientId: credentials.clientId,
-            clientSecret: credentials.clientSecret,
-          },
-        },
-      },
-    },
-  };
-}
-
-/**
- * DingTalk Onboarding Adapter（支持多账号）
- */
-export const dingtalkOnboardingAdapter: ChannelOnboardingAdapter = {
-  channel,
-  getStatus: async ({ cfg }) => {
-    const configured = listDingTalkAccountIds(cfg).some((accountId) => {
-      const account = resolveDingTalkAccount({ cfg, accountId });
-      return Boolean(account.clientId?.trim() && account.clientSecret?.trim());
-    });
-    return {
-      channel,
-      configured,
-      statusLines: [`DingTalk: ${configured ? "configured" : "needs credentials"}`],
-      selectionHint: configured ? "configured" : "needs AppKey/AppSecret",
-      quickstartScore: configured ? 1 : 5,
-    };
-  },
-  configure: async ({
-    cfg,
-    prompter,
-    shouldPromptAccountIds,
-    accountOverrides,
-  }) => {
-    let next = cfg;
-
-    // 1. 解析 accountId：支持多账号选择 / 添加新账号
-    const defaultAccountId = resolveDefaultDingTalkAccountId(cfg);
-    const override = accountOverrides?.[PLUGIN_ID]?.trim();
-    let accountId = override ?? defaultAccountId;
-
-    if (shouldPromptAccountIds && !override) {
-      accountId = await promptAccountId({
-        cfg,
-        prompter,
-        label: "DingTalk",
-        currentId: accountId,
-        listAccountIds: listDingTalkAccountIds,
-        defaultAccountId,
-      });
-    }
-
-    // 2. 检查该账号自身是否已配置凭据（不继承顶层，避免新账号误判为已配置）
-    const accountConfigured = (() => {
-      const dingtalkSection = (next.channels as Record<string, unknown>)?.[PLUGIN_ID] as DingTalkConfig | undefined;
-      if (!dingtalkSection) return false;
-      // 检查 accounts[accountId] 自身
-      const acct = dingtalkSection.accounts?.[accountId];
-      if (acct?.clientId?.trim() && acct?.clientSecret?.trim()) return true;
-      // default 账号额外兼容顶层旧配置（手动编辑或旧版迁移）
-      if (accountId === DEFAULT_ACCOUNT_ID) {
-        return Boolean(dingtalkSection.clientId?.trim() && dingtalkSection.clientSecret?.trim());
-      }
-      return false;
-    })();
-
-    // 3. 凭据输入
-    if (!accountConfigured) {
-      await noteDingTalkCredentialsHelp(prompter);
-      const credentials = await promptDingTalkCredentials(prompter);
-      next = applyCredentials(next, accountId, credentials) as typeof next;
-    } else {
-      const keep = await prompter.confirm({
-        message: "DingTalk credentials already configured. Keep them?",
-        initialValue: true,
-      });
-      if (!keep) {
-        const credentials = await promptDingTalkCredentials(prompter);
-        next = applyCredentials(next, accountId, credentials) as typeof next;
-      }
-    }
-
-    return { cfg: next, accountId };
-  },
-  disable: (cfg) => {
-    const dingtalkConfig = (cfg.channels?.[PLUGIN_ID] ?? {}) as DingTalkConfig;
-    return {
-      ...cfg,
-      channels: {
-        ...cfg.channels,
-        [PLUGIN_ID]: { ...dingtalkConfig, enabled: false },
-      },
-    };
-  },
-};