@openclaw/googlechat 2026.5.2-beta.2 → 2026.5.3-beta.2

package/dist/setup-surface-CofP-Gg9.js

@@ -0,0 +1,309 @@
+import { safeParseJsonWithSchema, safeParseWithSchema } from "openclaw/plugin-sdk/extension-shared";
+import { DEFAULT_ACCOUNT_ID, createAccountListHelpers, normalizeAccountId, resolveAccountEntry, resolveMergedAccountConfig } from "openclaw/plugin-sdk/account-resolution";
+import { isSecretRef } from "openclaw/plugin-sdk/secret-input";
+import { normalizeOptionalString, normalizeStringifiedOptionalString } from "openclaw/plugin-sdk/text-runtime";
+import { z } from "zod";
+import { createPatchedAccountSetupAdapter, createSetupInputPresenceValidator } from "openclaw/plugin-sdk/setup-runtime";
+import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$1, addWildcardAllowFrom, applySetupAccountConfigPatch, createPromptParsedAllowFromForAccount, createStandardChannelSetupStatus, formatDocsLink, mergeAllowFromEntries, migrateBaseNameToDefaultAccount, splitSetupEntries } from "openclaw/plugin-sdk/setup";
+//#region extensions/googlechat/src/accounts.ts
+const ENV_SERVICE_ACCOUNT$1 = "GOOGLE_CHAT_SERVICE_ACCOUNT";
+const ENV_SERVICE_ACCOUNT_FILE$1 = "GOOGLE_CHAT_SERVICE_ACCOUNT_FILE";
+const JsonRecordSchema = z.record(z.string(), z.unknown());
+const { listAccountIds: listGoogleChatAccountIds, resolveDefaultAccountId: resolveDefaultGoogleChatAccountId } = createAccountListHelpers("googlechat");
+function mergeGoogleChatAccountConfig(cfg, accountId) {
+	const raw = cfg.channels?.["googlechat"] ?? {};
+	const base = resolveMergedAccountConfig({
+		channelConfig: raw,
+		accounts: raw.accounts,
+		accountId,
+		omitKeys: ["defaultAccount"]
+	});
+	const defaultAccountConfig = resolveAccountEntry(raw.accounts, DEFAULT_ACCOUNT_ID) ?? {};
+	if (accountId === DEFAULT_ACCOUNT_ID) return base;
+	const { enabled: _ignoredEnabled, dangerouslyAllowNameMatching: _ignoredDangerouslyAllowNameMatching, serviceAccount: _ignoredServiceAccount, serviceAccountRef: _ignoredServiceAccountRef, serviceAccountFile: _ignoredServiceAccountFile, ...defaultAccountShared } = defaultAccountConfig;
+	return {
+		...defaultAccountShared,
+		...base
+	};
+}
+function resolveGoogleChatConfigAccessorAccount(params) {
+	const accountId = normalizeAccountId(params.accountId ?? params.cfg.channels?.googlechat?.defaultAccount);
+	return { config: mergeGoogleChatAccountConfig(params.cfg, accountId) };
+}
+function parseServiceAccount(value) {
+	if (isSecretRef(value)) return null;
+	if (typeof value === "string") {
+		const trimmed = value.trim();
+		if (!trimmed) return null;
+		return safeParseJsonWithSchema(JsonRecordSchema, trimmed);
+	}
+	return safeParseWithSchema(JsonRecordSchema, value);
+}
+function resolveCredentialsFromConfig(params) {
+	const { account, accountId } = params;
+	const inline = parseServiceAccount(account.serviceAccount);
+	if (inline) return {
+		credentials: inline,
+		source: "inline"
+	};
+	if (isSecretRef(account.serviceAccount)) throw new Error(`channels.googlechat.accounts.${accountId}.serviceAccount: unresolved SecretRef "${account.serviceAccount.source}:${account.serviceAccount.provider}:${account.serviceAccount.id}". Resolve this command against an active gateway runtime snapshot before reading it.`);
+	if (isSecretRef(account.serviceAccountRef)) throw new Error(`channels.googlechat.accounts.${accountId}.serviceAccount: unresolved SecretRef "${account.serviceAccountRef.source}:${account.serviceAccountRef.provider}:${account.serviceAccountRef.id}". Resolve this command against an active gateway runtime snapshot before reading it.`);
+	const file = normalizeOptionalString(account.serviceAccountFile);
+	if (file) return {
+		credentialsFile: file,
+		source: "file"
+	};
+	if (accountId === DEFAULT_ACCOUNT_ID) {
+		const envJson = process.env[ENV_SERVICE_ACCOUNT$1];
+		const envInline = parseServiceAccount(envJson);
+		if (envInline) return {
+			credentials: envInline,
+			source: "env"
+		};
+		const envFile = normalizeOptionalString(process.env[ENV_SERVICE_ACCOUNT_FILE$1]);
+		if (envFile) return {
+			credentialsFile: envFile,
+			source: "env"
+		};
+	}
+	return { source: "none" };
+}
+function resolveGoogleChatAccount(params) {
+	const accountId = normalizeAccountId(params.accountId ?? params.cfg.channels?.["googlechat"]?.defaultAccount);
+	const baseEnabled = params.cfg.channels?.["googlechat"]?.enabled !== false;
+	const merged = mergeGoogleChatAccountConfig(params.cfg, accountId);
+	const accountEnabled = merged.enabled !== false;
+	const enabled = baseEnabled && accountEnabled;
+	const credentials = resolveCredentialsFromConfig({
+		accountId,
+		account: merged
+	});
+	return {
+		accountId,
+		name: normalizeOptionalString(merged.name),
+		enabled,
+		config: merged,
+		credentialSource: credentials.source,
+		credentials: credentials.credentials,
+		credentialsFile: credentials.credentialsFile
+	};
+}
+function listEnabledGoogleChatAccounts(cfg) {
+	return listGoogleChatAccountIds(cfg).map((accountId) => resolveGoogleChatAccount({
+		cfg,
+		accountId
+	})).filter((account) => account.enabled);
+}
+const googlechatSetupAdapter = createPatchedAccountSetupAdapter({
+	channelKey: "googlechat",
+	validateInput: createSetupInputPresenceValidator({
+		defaultAccountOnlyEnvError: "GOOGLE_CHAT_SERVICE_ACCOUNT env vars can only be used for the default account.",
+		whenNotUseEnv: [{
+			someOf: ["token", "tokenFile"],
+			message: "Google Chat requires --token (service account JSON) or --token-file."
+		}]
+	}),
+	buildPatch: (input) => {
+		const patch = input.useEnv ? {} : input.tokenFile ? { serviceAccountFile: input.tokenFile } : input.token ? { serviceAccount: input.token } : {};
+		const audienceType = input.audienceType?.trim();
+		const audience = input.audience?.trim();
+		const webhookPath = input.webhookPath?.trim();
+		const webhookUrl = input.webhookUrl?.trim();
+		return {
+			...patch,
+			...audienceType ? { audienceType } : {},
+			...audience ? { audience } : {},
+			...webhookPath ? { webhookPath } : {},
+			...webhookUrl ? { webhookUrl } : {}
+		};
+	}
+});
+//#endregion
+//#region extensions/googlechat/src/setup-surface.ts
+const channel = "googlechat";
+const ENV_SERVICE_ACCOUNT = "GOOGLE_CHAT_SERVICE_ACCOUNT";
+const ENV_SERVICE_ACCOUNT_FILE = "GOOGLE_CHAT_SERVICE_ACCOUNT_FILE";
+const USE_ENV_FLAG = "__googlechatUseEnv";
+const AUTH_METHOD_FLAG = "__googlechatAuthMethod";
+const googlechatDmPolicy = {
+	label: "Google Chat",
+	channel,
+	policyKey: "channels.googlechat.dm.policy",
+	allowFromKey: "channels.googlechat.dm.allowFrom",
+	resolveConfigKeys: (cfg, accountId) => (accountId ?? resolveDefaultGoogleChatAccountId(cfg)) !== DEFAULT_ACCOUNT_ID$1 ? {
+		policyKey: `channels.googlechat.accounts.${accountId ?? resolveDefaultGoogleChatAccountId(cfg)}.dm.policy`,
+		allowFromKey: `channels.googlechat.accounts.${accountId ?? resolveDefaultGoogleChatAccountId(cfg)}.dm.allowFrom`
+	} : {
+		policyKey: "channels.googlechat.dm.policy",
+		allowFromKey: "channels.googlechat.dm.allowFrom"
+	},
+	getCurrent: (cfg, accountId) => resolveGoogleChatAccount({
+		cfg,
+		accountId: accountId ?? resolveDefaultGoogleChatAccountId(cfg)
+	}).config.dm?.policy ?? "pairing",
+	setPolicy: (cfg, policy, accountId) => {
+		const resolvedAccountId = accountId ?? resolveDefaultGoogleChatAccountId(cfg);
+		const currentDm = resolveGoogleChatAccount({
+			cfg,
+			accountId: resolvedAccountId
+		}).config.dm;
+		return applySetupAccountConfigPatch({
+			cfg,
+			channelKey: channel,
+			accountId: resolvedAccountId,
+			patch: { dm: {
+				...currentDm,
+				policy,
+				...policy === "open" ? { allowFrom: addWildcardAllowFrom(currentDm?.allowFrom) } : {}
+			} }
+		});
+	},
+	promptAllowFrom: createPromptParsedAllowFromForAccount({
+		defaultAccountId: resolveDefaultGoogleChatAccountId,
+		message: "Google Chat allowFrom (users/<id> or raw email; avoid users/<email>)",
+		placeholder: "users/123456789, name@example.com",
+		parseEntries: (raw) => ({ entries: mergeAllowFromEntries(void 0, splitSetupEntries(raw)) }),
+		getExistingAllowFrom: ({ cfg, accountId }) => resolveGoogleChatAccount({
+			cfg,
+			accountId
+		}).config.dm?.allowFrom ?? [],
+		applyAllowFrom: ({ cfg, accountId, allowFrom }) => applySetupAccountConfigPatch({
+			cfg,
+			channelKey: channel,
+			accountId,
+			patch: { dm: {
+				...resolveGoogleChatAccount({
+					cfg,
+					accountId
+				}).config.dm,
+				allowFrom
+			} }
+		})
+	})
+};
+function createServiceAccountTextInput(params) {
+	return {
+		inputKey: params.inputKey,
+		message: params.message,
+		placeholder: params.placeholder,
+		shouldPrompt: ({ credentialValues }) => credentialValues[USE_ENV_FLAG] !== "1" && credentialValues[AUTH_METHOD_FLAG] === params.authMethod,
+		validate: ({ value }) => normalizeStringifiedOptionalString(value) ? void 0 : "Required",
+		normalizeValue: ({ value }) => normalizeStringifiedOptionalString(value) ?? "",
+		applySet: async ({ cfg, accountId, value }) => applySetupAccountConfigPatch({
+			cfg,
+			channelKey: channel,
+			accountId,
+			patch: { [params.patchKey]: value }
+		})
+	};
+}
+const googlechatSetupWizard = {
+	channel,
+	status: createStandardChannelSetupStatus({
+		channelLabel: "Google Chat",
+		configuredLabel: "configured",
+		unconfiguredLabel: "needs service account",
+		configuredHint: "configured",
+		unconfiguredHint: "needs auth",
+		includeStatusLine: true,
+		resolveConfigured: ({ cfg, accountId }) => resolveGoogleChatAccount({
+			cfg,
+			accountId
+		}).credentialSource !== "none"
+	}),
+	introNote: {
+		title: "Google Chat setup",
+		lines: [
+			"Google Chat apps use service-account auth and an HTTPS webhook.",
+			"Set the Chat API scopes in your service account and configure the Chat app URL.",
+			"Webhook verification requires audience type + audience value.",
+			`Docs: ${formatDocsLink("/channels/googlechat", "googlechat")}`
+		]
+	},
+	prepare: async ({ cfg, accountId, credentialValues, prompter }) => {
+		if (accountId === DEFAULT_ACCOUNT_ID$1 && (Boolean(process.env[ENV_SERVICE_ACCOUNT]) || Boolean(process.env[ENV_SERVICE_ACCOUNT_FILE]))) {
+			if (await prompter.confirm({
+				message: "Use GOOGLE_CHAT_SERVICE_ACCOUNT env vars?",
+				initialValue: true
+			})) return {
+				cfg: applySetupAccountConfigPatch({
+					cfg,
+					channelKey: channel,
+					accountId,
+					patch: {}
+				}),
+				credentialValues: {
+					...credentialValues,
+					[USE_ENV_FLAG]: "1"
+				}
+			};
+		}
+		const method = await prompter.select({
+			message: "Google Chat auth method",
+			options: [{
+				value: "file",
+				label: "Service account JSON file"
+			}, {
+				value: "inline",
+				label: "Paste service account JSON"
+			}],
+			initialValue: "file"
+		});
+		return { credentialValues: {
+			...credentialValues,
+			[USE_ENV_FLAG]: "0",
+			[AUTH_METHOD_FLAG]: method
+		} };
+	},
+	credentials: [],
+	textInputs: [createServiceAccountTextInput({
+		inputKey: "tokenFile",
+		message: "Service account JSON path",
+		placeholder: "/path/to/service-account.json",
+		authMethod: "file",
+		patchKey: "serviceAccountFile"
+	}), createServiceAccountTextInput({
+		inputKey: "token",
+		message: "Service account JSON (single line)",
+		placeholder: "{\"type\":\"service_account\", ... }",
+		authMethod: "inline",
+		patchKey: "serviceAccount"
+	})],
+	finalize: async ({ cfg, accountId, prompter }) => {
+		const account = resolveGoogleChatAccount({
+			cfg,
+			accountId
+		});
+		const audienceType = await prompter.select({
+			message: "Webhook audience type",
+			options: [{
+				value: "app-url",
+				label: "App URL (recommended)"
+			}, {
+				value: "project-number",
+				label: "Project number"
+			}],
+			initialValue: account.config.audienceType === "project-number" ? "project-number" : "app-url"
+		});
+		return { cfg: migrateBaseNameToDefaultAccount({
+			cfg: applySetupAccountConfigPatch({
+				cfg,
+				channelKey: channel,
+				accountId,
+				patch: {
+					audienceType,
+					audience: normalizeOptionalString(await prompter.text({
+						message: audienceType === "project-number" ? "Project number" : "App URL",
+						placeholder: audienceType === "project-number" ? "1234567890" : "https://your.host/googlechat",
+						initialValue: account.config.audience || void 0,
+						validate: (value) => normalizeStringifiedOptionalString(value) ? void 0 : "Required"
+					})) ?? ""
+				}
+			}),
+			channelKey: channel
+		}) };
+	},
+	dmPolicy: googlechatDmPolicy
+};
+//#endregion
+export { resolveDefaultGoogleChatAccountId as a, listGoogleChatAccountIds as i, googlechatSetupAdapter as n, resolveGoogleChatAccount as o, listEnabledGoogleChatAccounts as r, resolveGoogleChatConfigAccessorAccount as s, googlechatSetupWizard as t };

package/dist/test-api.js

@@ -0,0 +1,3 @@
+import { R as setGoogleChatRuntime } from "./runtime-api-wkIdfwqY.js";
+import { t as googlechatPlugin } from "./channel-DE2hroMn.js";
+export { googlechatPlugin, setGoogleChatRuntime };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/googlechat",
-  "version": "2026.5.2-beta.2",
+  "version": "2026.5.3-beta.2",
   "description": "OpenClaw Google Chat channel plugin",
   "repository": {
     "type": "git",
@@ -17,7 +17,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.2-beta.2"
+    "openclaw": ">=2026.5.3-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -75,14 +75,22 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.2-beta.2"
+      "pluginApi": ">=2026.5.3-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.5.2-beta.2"
+      "openclawVersion": "2026.5.3-beta.2"
     },
     "release": {
       "publishToClawHub": true,
       "publishToNpm": true
-    }
-  }
+    },
+    "runtimeExtensions": [
+      "./dist/index.js"
+    ],
+    "runtimeSetupEntry": "./dist/setup-entry.js"
+  },
+  "files": [
+    "dist/**",
+    "openclaw.plugin.json"
+  ]
 }

package/api.ts

@@ -1,3 +0,0 @@
-export { googlechatPlugin } from "./src/channel.js";
-export { googlechatSetupAdapter } from "./src/setup-core.js";
-export { googlechatSetupWizard } from "./src/setup-surface.js";

package/channel-config-api.ts

@@ -1 +0,0 @@
-export { GoogleChatChannelConfigSchema } from "./src/config-schema.js";

package/channel-plugin-api.ts

@@ -1 +0,0 @@
-export { googlechatPlugin } from "./src/channel.js";

package/contract-api.ts

@@ -1,5 +0,0 @@
-export {
-  collectRuntimeConfigAssignments,
-  secretTargetRegistryEntries,
-} from "./src/secret-contract.js";
-export { normalizeCompatibilityConfig, legacyConfigRules } from "./src/doctor-contract.js";

package/doctor-contract-api.ts

@@ -1 +0,0 @@
-export { normalizeCompatibilityConfig, legacyConfigRules } from "./src/doctor-contract.js";

package/index.ts

@@ -1,20 +0,0 @@
-import { defineBundledChannelEntry } from "openclaw/plugin-sdk/channel-entry-contract";
-
-export default defineBundledChannelEntry({
-  id: "googlechat",
-  name: "Google Chat",
-  description: "OpenClaw Google Chat channel plugin",
-  importMetaUrl: import.meta.url,
-  plugin: {
-    specifier: "./channel-plugin-api.js",
-    exportName: "googlechatPlugin",
-  },
-  secrets: {
-    specifier: "./secret-contract-api.js",
-    exportName: "channelSecrets",
-  },
-  runtime: {
-    specifier: "./runtime-api.js",
-    exportName: "setGoogleChatRuntime",
-  },
-});

package/runtime-api.ts

@@ -1,60 +0,0 @@
-// Private runtime barrel for the bundled Google Chat extension.
-// Keep this barrel thin and avoid broad plugin-sdk surfaces during bootstrap.
-
-export { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
-export {
-  createActionGate,
-  jsonResult,
-  readNumberParam,
-  readReactionParams,
-  readStringParam,
-} from "openclaw/plugin-sdk/channel-actions";
-export { buildChannelConfigSchema } from "openclaw/plugin-sdk/channel-config-primitives";
-export type {
-  ChannelMessageActionAdapter,
-  ChannelMessageActionName,
-  ChannelStatusIssue,
-} from "openclaw/plugin-sdk/channel-contract";
-export { missingTargetError } from "openclaw/plugin-sdk/channel-feedback";
-export {
-  createAccountStatusSink,
-  runPassiveAccountLifecycle,
-} from "openclaw/plugin-sdk/channel-lifecycle";
-export { createChannelPairingController } from "openclaw/plugin-sdk/channel-pairing";
-export { createChannelReplyPipeline } from "openclaw/plugin-sdk/channel-reply-pipeline";
-export {
-  evaluateGroupRouteAccessForPolicy,
-  resolveDmGroupAccessWithLists,
-  resolveSenderScopedGroupPolicy,
-} from "openclaw/plugin-sdk/channel-policy";
-export { PAIRING_APPROVED_MESSAGE } from "openclaw/plugin-sdk/channel-status";
-export { chunkTextForOutbound } from "openclaw/plugin-sdk/text-chunking";
-export type { OpenClawConfig } from "openclaw/plugin-sdk/config-types";
-export { GoogleChatConfigSchema } from "openclaw/plugin-sdk/bundled-channel-config-schema";
-export {
-  GROUP_POLICY_BLOCKED_LABEL,
-  resolveAllowlistProviderRuntimeGroupPolicy,
-  resolveDefaultGroupPolicy,
-  warnMissingProviderGroupPolicyFallbackOnce,
-} from "openclaw/plugin-sdk/runtime-group-policy";
-export { isDangerousNameMatchingEnabled } from "openclaw/plugin-sdk/dangerous-name-runtime";
-export { fetchRemoteMedia, resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/media-runtime";
-export { loadOutboundMediaFromUrl } from "openclaw/plugin-sdk/outbound-media";
-export type { PluginRuntime } from "openclaw/plugin-sdk/runtime-store";
-export { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
-export type { GoogleChatAccountConfig, GoogleChatConfig } from "openclaw/plugin-sdk/config-types";
-export { extractToolSend } from "openclaw/plugin-sdk/tool-send";
-export { resolveInboundMentionDecision } from "openclaw/plugin-sdk/channel-inbound";
-export { resolveInboundRouteEnvelopeBuilderWithRuntime } from "openclaw/plugin-sdk/inbound-envelope";
-export { resolveWebhookPath } from "openclaw/plugin-sdk/webhook-path";
-export {
-  registerWebhookTargetWithPluginRoute,
-  resolveWebhookTargetWithAuthOrReject,
-  withResolvedWebhookRequestPipeline,
-} from "openclaw/plugin-sdk/webhook-targets";
-export {
-  createWebhookInFlightLimiter,
-  readJsonWebhookBodyOrReject,
-  type WebhookInFlightLimiter,
-} from "openclaw/plugin-sdk/webhook-request-guards";
-export { setGoogleChatRuntime } from "./src/runtime.js";

package/secret-contract-api.ts

@@ -1,5 +0,0 @@
-export {
-  channelSecrets,
-  collectRuntimeConfigAssignments,
-  secretTargetRegistryEntries,
-} from "./src/secret-contract.js";

package/setup-entry.ts

@@ -1,13 +0,0 @@
-import { defineBundledChannelSetupEntry } from "openclaw/plugin-sdk/channel-entry-contract";
-
-export default defineBundledChannelSetupEntry({
-  importMetaUrl: import.meta.url,
-  plugin: {
-    specifier: "./setup-plugin-api.js",
-    exportName: "googlechatSetupPlugin",
-  },
-  secrets: {
-    specifier: "./secret-contract-api.js",
-    exportName: "channelSecrets",
-  },
-});

package/setup-plugin-api.ts

@@ -1,3 +0,0 @@
-// Keep bundled setup entry imports narrow so setup loads do not pull the
-// broader Google Chat runtime plugin surface.
-export { googlechatSetupPlugin } from "./src/channel.setup.js";

package/src/accounts.ts

@@ -1,169 +0,0 @@
-import {
-  createAccountListHelpers,
-  DEFAULT_ACCOUNT_ID,
-  normalizeAccountId,
-  type OpenClawConfig,
-  resolveAccountEntry,
-  resolveMergedAccountConfig,
-} from "openclaw/plugin-sdk/account-resolution";
-import { safeParseJsonWithSchema, safeParseWithSchema } from "openclaw/plugin-sdk/extension-shared";
-import { isSecretRef } from "openclaw/plugin-sdk/secret-input";
-import { normalizeOptionalString } from "openclaw/plugin-sdk/text-runtime";
-import { z } from "zod";
-import type { GoogleChatAccountConfig } from "./types.config.js";
-
-type GoogleChatCredentialSource = "file" | "inline" | "env" | "none";
-
-export type ResolvedGoogleChatAccount = {
-  accountId: string;
-  name?: string;
-  enabled: boolean;
-  config: GoogleChatAccountConfig;
-  credentialSource: GoogleChatCredentialSource;
-  credentials?: Record<string, unknown>;
-  credentialsFile?: string;
-};
-
-export type GoogleChatConfigAccessorAccount = {
-  config: GoogleChatAccountConfig;
-};
-
-const ENV_SERVICE_ACCOUNT = "GOOGLE_CHAT_SERVICE_ACCOUNT";
-const ENV_SERVICE_ACCOUNT_FILE = "GOOGLE_CHAT_SERVICE_ACCOUNT_FILE";
-const JsonRecordSchema = z.record(z.string(), z.unknown());
-
-const {
-  listAccountIds: listGoogleChatAccountIds,
-  resolveDefaultAccountId: resolveDefaultGoogleChatAccountId,
-} = createAccountListHelpers("googlechat");
-export { listGoogleChatAccountIds, resolveDefaultGoogleChatAccountId };
-
-function mergeGoogleChatAccountConfig(
-  cfg: OpenClawConfig,
-  accountId: string,
-): GoogleChatAccountConfig {
-  const raw = cfg.channels?.["googlechat"] ?? {};
-  const base = resolveMergedAccountConfig<GoogleChatAccountConfig>({
-    channelConfig: raw as GoogleChatAccountConfig,
-    accounts: raw.accounts as Record<string, Partial<GoogleChatAccountConfig>> | undefined,
-    accountId,
-    omitKeys: ["defaultAccount"],
-  });
-  const defaultAccountConfig = resolveAccountEntry(raw.accounts, DEFAULT_ACCOUNT_ID) ?? {};
-  if (accountId === DEFAULT_ACCOUNT_ID) {
-    return base;
-  }
-  const {
-    enabled: _ignoredEnabled,
-    dangerouslyAllowNameMatching: _ignoredDangerouslyAllowNameMatching,
-    serviceAccount: _ignoredServiceAccount,
-    serviceAccountRef: _ignoredServiceAccountRef,
-    serviceAccountFile: _ignoredServiceAccountFile,
-    ...defaultAccountShared
-  } = defaultAccountConfig;
-  // In multi-account setups, allow accounts.default to provide shared defaults
-  // (for example webhook/audience fields) while preserving top-level and account overrides.
-  return { ...defaultAccountShared, ...base } as GoogleChatAccountConfig;
-}
-
-export function resolveGoogleChatConfigAccessorAccount(params: {
-  cfg: OpenClawConfig;
-  accountId?: string | null;
-}): GoogleChatConfigAccessorAccount {
-  const accountId = normalizeAccountId(
-    params.accountId ?? params.cfg.channels?.googlechat?.defaultAccount,
-  );
-  return { config: mergeGoogleChatAccountConfig(params.cfg, accountId) };
-}
-
-function parseServiceAccount(value: unknown): Record<string, unknown> | null {
-  if (isSecretRef(value)) {
-    return null;
-  }
-
-  if (typeof value === "string") {
-    const trimmed = value.trim();
-    if (!trimmed) {
-      return null;
-    }
-    return safeParseJsonWithSchema(JsonRecordSchema, trimmed);
-  }
-
-  return safeParseWithSchema(JsonRecordSchema, value);
-}
-
-function resolveCredentialsFromConfig(params: {
-  accountId: string;
-  account: GoogleChatAccountConfig;
-}): {
-  credentials?: Record<string, unknown>;
-  credentialsFile?: string;
-  source: GoogleChatCredentialSource;
-} {
-  const { account, accountId } = params;
-  const inline = parseServiceAccount(account.serviceAccount);
-  if (inline) {
-    return { credentials: inline, source: "inline" };
-  }
-
-  if (isSecretRef(account.serviceAccount)) {
-    throw new Error(
-      `channels.googlechat.accounts.${accountId}.serviceAccount: unresolved SecretRef "${account.serviceAccount.source}:${account.serviceAccount.provider}:${account.serviceAccount.id}". Resolve this command against an active gateway runtime snapshot before reading it.`,
-    );
-  }
-
-  if (isSecretRef(account.serviceAccountRef)) {
-    throw new Error(
-      `channels.googlechat.accounts.${accountId}.serviceAccount: unresolved SecretRef "${account.serviceAccountRef.source}:${account.serviceAccountRef.provider}:${account.serviceAccountRef.id}". Resolve this command against an active gateway runtime snapshot before reading it.`,
-    );
-  }
-
-  const file = normalizeOptionalString(account.serviceAccountFile);
-  if (file) {
-    return { credentialsFile: file, source: "file" };
-  }
-
-  if (accountId === DEFAULT_ACCOUNT_ID) {
-    const envJson = process.env[ENV_SERVICE_ACCOUNT];
-    const envInline = parseServiceAccount(envJson);
-    if (envInline) {
-      return { credentials: envInline, source: "env" };
-    }
-    const envFile = normalizeOptionalString(process.env[ENV_SERVICE_ACCOUNT_FILE]);
-    if (envFile) {
-      return { credentialsFile: envFile, source: "env" };
-    }
-  }
-
-  return { source: "none" };
-}
-
-export function resolveGoogleChatAccount(params: {
-  cfg: OpenClawConfig;
-  accountId?: string | null;
-}): ResolvedGoogleChatAccount {
-  const accountId = normalizeAccountId(
-    params.accountId ?? params.cfg.channels?.["googlechat"]?.defaultAccount,
-  );
-  const baseEnabled = params.cfg.channels?.["googlechat"]?.enabled !== false;
-  const merged = mergeGoogleChatAccountConfig(params.cfg, accountId);
-  const accountEnabled = merged.enabled !== false;
-  const enabled = baseEnabled && accountEnabled;
-  const credentials = resolveCredentialsFromConfig({ accountId, account: merged });
-
-  return {
-    accountId,
-    name: normalizeOptionalString(merged.name),
-    enabled,
-    config: merged,
-    credentialSource: credentials.source,
-    credentials: credentials.credentials,
-    credentialsFile: credentials.credentialsFile,
-  };
-}
-
-export function listEnabledGoogleChatAccounts(cfg: OpenClawConfig): ResolvedGoogleChatAccount[] {
-  return listGoogleChatAccountIds(cfg)
-    .map((accountId) => resolveGoogleChatAccount({ cfg, accountId }))
-    .filter((account) => account.enabled);
-}