@openclaw/qqbot 2026.6.5-beta.2 → 2026.6.5-beta.3

package/dist/config-ZEfgeoL4.js

@@ -0,0 +1,257 @@
+import { a as normalizeStringifiedEntries, c as getPlatformAdapter, o as readStringField, r as normalizeOptionalLowercaseString, t as asOptionalObjectRecord } from "./string-normalize-R_0cKO7Q.js";
+import { coerceSecretRef, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
+import fs from "node:fs";
+import { resolveDefaultSecretProviderAlias } from "openclaw/plugin-sdk/provider-auth";
+//#region extensions/qqbot/src/engine/config/resolve.ts
+/**
+* QQBot config resolution (pure logic layer).
+* QQBot 配置解析（纯逻辑层）。
+*
+* Resolves account IDs, default account selection, and base account
+* info from raw config objects. Secret/credential resolution is
+* intentionally left to the outer layer (src/bridge/config.ts) so that
+* this module stays framework-agnostic and self-contained.
+*/
+/**
+* Default account ID, used for the unnamed top-level account.
+* 默认账号 ID，用于顶层配置中未命名的账号。
+*/
+const DEFAULT_ACCOUNT_ID$1 = "default";
+function normalizeAppId(raw) {
+	if (typeof raw === "string") return raw.trim();
+	if (typeof raw === "number") return String(raw);
+	return "";
+}
+function normalizeAccountConfig(account) {
+	if (!account) return {};
+	const audioPolicy = asOptionalObjectRecord(account.audioFormatPolicy);
+	return {
+		...account,
+		...audioPolicy ? { audioFormatPolicy: { ...audioPolicy } } : {}
+	};
+}
+function readQQBotSection(cfg) {
+	return asOptionalObjectRecord(asOptionalObjectRecord(cfg.channels)?.qqbot);
+}
+/**
+* List all configured QQBot account IDs.
+* 列出所有已配置的 QQBot 账号 ID。
+*/
+function listAccountIds(cfg) {
+	const ids = /* @__PURE__ */ new Set();
+	const qqbot = readQQBotSection(cfg);
+	if (qqbot?.appId || process.env.QQBOT_APP_ID) ids.add(DEFAULT_ACCOUNT_ID$1);
+	if (qqbot?.accounts) {
+		for (const accountId of Object.keys(qqbot.accounts)) if (qqbot.accounts[accountId]?.appId) ids.add(accountId);
+	}
+	return Array.from(ids);
+}
+/**
+* Resolve the default QQBot account ID.
+* 解析默认 QQBot 账号 ID（优先级：defaultAccount > 顶层 appId > 第一个命名账号）。
+*/
+function resolveDefaultAccountId(cfg) {
+	const qqbot = readQQBotSection(cfg);
+	const configuredDefaultAccountId = normalizeOptionalLowercaseString(qqbot?.defaultAccount);
+	if (configuredDefaultAccountId && (configuredDefaultAccountId === "default" || Boolean(qqbot?.accounts?.[configuredDefaultAccountId]?.appId))) return configuredDefaultAccountId;
+	if (qqbot?.appId || process.env.QQBOT_APP_ID) return DEFAULT_ACCOUNT_ID$1;
+	if (qqbot?.accounts) {
+		const ids = Object.keys(qqbot.accounts);
+		if (ids.length > 0) return ids[0];
+	}
+	return DEFAULT_ACCOUNT_ID$1;
+}
+/**
+* Resolve base account info (without credentials).
+* 解析账号基础信息（不含凭证）。
+*
+* Resolves everything except Secret/credential fields. The outer
+* config.ts layer calls this and adds Secret handling on top.
+*/
+function resolveAccountBase(cfg, accountId) {
+	const resolvedAccountId = accountId ?? resolveDefaultAccountId(cfg);
+	const qqbot = readQQBotSection(cfg);
+	let accountConfig;
+	let appId;
+	if (resolvedAccountId === "default") {
+		accountConfig = normalizeAccountConfig(asOptionalObjectRecord(qqbot));
+		appId = normalizeAppId(qqbot?.appId);
+	} else {
+		const account = qqbot?.accounts?.[resolvedAccountId];
+		accountConfig = normalizeAccountConfig(asOptionalObjectRecord(account));
+		appId = normalizeAppId(asOptionalObjectRecord(account)?.appId);
+	}
+	if (!appId && process.env.QQBOT_APP_ID && resolvedAccountId === "default") appId = normalizeAppId(process.env.QQBOT_APP_ID);
+	return {
+		accountId: resolvedAccountId,
+		name: readStringField(accountConfig, "name"),
+		enabled: accountConfig.enabled !== false,
+		appId,
+		systemPrompt: readStringField(accountConfig, "systemPrompt"),
+		markdownSupport: accountConfig.markdownSupport !== false,
+		config: accountConfig
+	};
+}
+/** Apply account config updates into a raw config object. */
+function applyAccountConfig(cfg, accountId, input) {
+	const next = { ...cfg };
+	const channels = asOptionalObjectRecord(cfg.channels) ?? {};
+	const existingQQBot = asOptionalObjectRecord(channels.qqbot) ?? {};
+	if (accountId === "default") {
+		const allowFrom = existingQQBot.allowFrom ?? ["*"];
+		next.channels = {
+			...channels,
+			qqbot: {
+				...existingQQBot,
+				enabled: true,
+				allowFrom,
+				...input.appId ? { appId: input.appId } : {},
+				...input.clientSecret ? {
+					clientSecret: input.clientSecret,
+					clientSecretFile: void 0
+				} : input.clientSecretFile ? {
+					clientSecretFile: input.clientSecretFile,
+					clientSecret: void 0
+				} : {},
+				...input.name ? { name: input.name } : {}
+			}
+		};
+	} else {
+		const accounts = existingQQBot.accounts ?? {};
+		const existingAccount = accounts[accountId] ?? {};
+		const allowFrom = existingAccount.allowFrom ?? ["*"];
+		next.channels = {
+			...channels,
+			qqbot: {
+				...existingQQBot,
+				enabled: true,
+				accounts: {
+					...accounts,
+					[accountId]: {
+						...existingAccount,
+						enabled: true,
+						allowFrom,
+						...input.appId ? { appId: input.appId } : {},
+						...input.clientSecret ? {
+							clientSecret: input.clientSecret,
+							clientSecretFile: void 0
+						} : input.clientSecretFile ? {
+							clientSecretFile: input.clientSecretFile,
+							clientSecret: void 0
+						} : {},
+						...input.name ? { name: input.name } : {}
+					}
+				}
+			}
+		};
+	}
+	return next;
+}
+/** Check whether a QQBot account has been fully configured. */
+function isAccountConfigured(account) {
+	return Boolean(account?.appId && (Boolean(account?.clientSecret) || getPlatformAdapter().hasConfiguredSecret(account?.config?.clientSecret) || Boolean(account?.config?.clientSecretFile?.trim())));
+}
+/** Build a summary description of an account. */
+function describeAccount(account) {
+	return {
+		accountId: account?.accountId ?? "default",
+		name: account?.name,
+		enabled: account?.enabled ?? false,
+		configured: isAccountConfigured(account),
+		tokenSource: account?.secretSource
+	};
+}
+/** Normalize allowFrom entries into uppercase strings without the qqbot: prefix. */
+function formatAllowFrom(allowFrom) {
+	return normalizeStringifiedEntries(allowFrom ?? []).map((entry) => entry.replace(/^qqbot:/i, "")).map((entry) => entry.toUpperCase());
+}
+//#endregion
+//#region extensions/qqbot/src/bridge/config.ts
+const DEFAULT_ACCOUNT_ID = DEFAULT_ACCOUNT_ID$1;
+function assertNotLegacySecretRefMarker(value, path) {
+	const normalized = normalizeSecretInputString(value);
+	if (!normalized || !/^secretref(?:-env)?:/i.test(normalized)) return;
+	throw new Error(`${path}: legacy SecretRef marker strings are not valid QQ Bot clientSecret values; use a structured SecretRef object instead.`);
+}
+function resolveEnvSecretRefValue(params) {
+	const ref = coerceSecretRef(params.value, params.cfg.secrets?.defaults);
+	if (!ref || ref.source !== "env") return;
+	const providerConfig = params.cfg.secrets?.providers?.[ref.provider];
+	if (providerConfig) {
+		if (providerConfig.source !== "env") throw new Error(`Secret provider "${ref.provider}" has source "${providerConfig.source}" but ref requests "env".`);
+		if (providerConfig.allowlist && !providerConfig.allowlist.includes(ref.id)) throw new Error(`Environment variable "${ref.id}" is not allowlisted in secrets.providers.${ref.provider}.allowlist.`);
+	} else if (ref.provider !== resolveDefaultSecretProviderAlias(params.cfg, "env")) throw new Error(`Secret provider "${ref.provider}" is not configured (ref: env:${ref.provider}:${ref.id}).`);
+	return normalizeSecretInputString((params.env ?? process.env)[ref.id]);
+}
+function resolveQQBotClientSecretInput(params) {
+	assertNotLegacySecretRefMarker(params.value, params.path);
+	const envSecret = resolveEnvSecretRefValue({
+		cfg: params.cfg,
+		value: params.value
+	});
+	if (envSecret) return envSecret;
+	return getPlatformAdapter().resolveSecretInputString({
+		value: params.value,
+		path: params.path
+	});
+}
+/** List all configured QQBot account IDs. */
+function listQQBotAccountIds(cfg) {
+	return listAccountIds(cfg);
+}
+/** Resolve the default QQBot account ID. */
+function resolveDefaultQQBotAccountId(cfg) {
+	return resolveDefaultAccountId(cfg);
+}
+/** Resolve QQBot account config for runtime or setup flows. */
+function resolveQQBotAccount(cfg, accountId, opts) {
+	const base = resolveAccountBase(cfg, accountId);
+	const qqbot = cfg.channels?.qqbot;
+	/**
+	* Legacy top-level account uses `channels.qqbot` as the base, but per-account
+	* fields (allowFrom, streaming, …) often live under `accounts.default`.
+	* Merge that slice so runtime sees `config.streaming` etc.
+	*/
+	const accountConfig = base.accountId === DEFAULT_ACCOUNT_ID ? {
+		...qqbot,
+		...qqbot?.accounts?.[DEFAULT_ACCOUNT_ID]
+	} : qqbot?.accounts?.[base.accountId] ?? {};
+	let clientSecret = "";
+	let secretSource = "none";
+	const clientSecretPath = base.accountId === DEFAULT_ACCOUNT_ID ? "channels.qqbot.clientSecret" : `channels.qqbot.accounts.${base.accountId}.clientSecret`;
+	const adapter = getPlatformAdapter();
+	if (adapter.hasConfiguredSecret(accountConfig.clientSecret)) {
+		clientSecret = opts?.allowUnresolvedSecretRef ? adapter.normalizeSecretInputString(accountConfig.clientSecret) ?? "" : resolveQQBotClientSecretInput({
+			cfg,
+			value: accountConfig.clientSecret,
+			path: clientSecretPath
+		}) ?? "";
+		secretSource = "config";
+	} else if (accountConfig.clientSecretFile) try {
+		clientSecret = fs.readFileSync(accountConfig.clientSecretFile, "utf8").trim();
+		secretSource = "file";
+	} catch {
+		secretSource = "none";
+	}
+	else if (process.env.QQBOT_CLIENT_SECRET && base.accountId === DEFAULT_ACCOUNT_ID) {
+		clientSecret = process.env.QQBOT_CLIENT_SECRET;
+		secretSource = "env";
+	}
+	return {
+		accountId: base.accountId,
+		name: accountConfig.name,
+		enabled: base.enabled,
+		appId: base.appId,
+		clientSecret,
+		secretSource,
+		systemPrompt: base.systemPrompt,
+		markdownSupport: base.markdownSupport,
+		config: accountConfig
+	};
+}
+/** Apply account config updates back into the OpenClaw config object. */
+function applyQQBotAccountConfig(cfg, accountId, input) {
+	return applyAccountConfig(cfg, accountId, input);
+}
+//#endregion
+export { resolveQQBotAccount as a, describeAccount as c, resolveAccountBase as d, resolveDefaultQQBotAccountId as i, formatAllowFrom as l, applyQQBotAccountConfig as n, DEFAULT_ACCOUNT_ID$1 as o, listQQBotAccountIds as r, applyAccountConfig as s, DEFAULT_ACCOUNT_ID as t, isAccountConfigured as u };

package/dist/{config-schema-BI7AYP6Q.js → config-schema-BFLNZ8Nf.js}

@@ -1,12 +1,11 @@
-import { a as normalizeStringifiedEntries, c as getPlatformAdapter, d as registerPlatformAdapterFactory, l as hasPlatformAdapter, n as normalizeLowercaseStringOrEmpty, o as readStringField, r as normalizeOptionalLowercaseString, t as asOptionalObjectRecord, u as registerPlatformAdapter } from "./string-normalize-R_0cKO7Q.js";
-import { buildSecretInputSchema, coerceSecretRef, hasConfiguredSecretInput, normalizeResolvedSecretInputString, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
+import { d as registerPlatformAdapterFactory, l as hasPlatformAdapter, n as normalizeLowercaseStringOrEmpty, u as registerPlatformAdapter } from "./string-normalize-R_0cKO7Q.js";
+import { a as resolveQQBotAccount, c as describeAccount, i as resolveDefaultQQBotAccountId, l as formatAllowFrom, n as applyQQBotAccountConfig, r as listQQBotAccountIds, s as applyAccountConfig, u as isAccountConfigured } from "./config-ZEfgeoL4.js";
+import { buildSecretInputSchema, hasConfiguredSecretInput, normalizeResolvedSecretInputString, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { resolvePreferredOpenClawTmpDir } from "openclaw/plugin-sdk/temp-path";
-import fs from "node:fs";
-import { resolveDefaultSecretProviderAlias } from "openclaw/plugin-sdk/provider-auth";
 import { applyAccountNameToChannelSection, deleteAccountFromConfigSection, setAccountEnabledInConfigSection } from "openclaw/plugin-sdk/core";
 import { DEFAULT_ACCOUNT_ID, createStandardChannelSetupStatus, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
 import { formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
-import { AllowFromListSchema, buildChannelConfigSchema } from "openclaw/plugin-sdk/channel-config-schema";
+import { AllowFromListSchema, ToolPolicySchema, buildChannelConfigSchema } from "openclaw/plugin-sdk/channel-config-schema";
 import { z } from "zod";
 //#region extensions/qqbot/src/bridge/logger.ts
 let loggerInstance = null;
@@ -129,258 +128,6 @@ function ensurePlatformAdapter() {
 registerPlatformAdapterFactory(createBuiltinAdapter);
 ensurePlatformAdapter();
 //#endregion
-//#region extensions/qqbot/src/engine/config/resolve.ts
-/**
-* QQBot config resolution (pure logic layer).
-* QQBot 配置解析（纯逻辑层）。
-*
-* Resolves account IDs, default account selection, and base account
-* info from raw config objects. Secret/credential resolution is
-* intentionally left to the outer layer (src/bridge/config.ts) so that
-* this module stays framework-agnostic and self-contained.
-*/
-/**
-* Default account ID, used for the unnamed top-level account.
-* 默认账号 ID，用于顶层配置中未命名的账号。
-*/
-const DEFAULT_ACCOUNT_ID$2 = "default";
-function normalizeAppId(raw) {
-	if (typeof raw === "string") return raw.trim();
-	if (typeof raw === "number") return String(raw);
-	return "";
-}
-function normalizeAccountConfig(account) {
-	if (!account) return {};
-	const audioPolicy = asOptionalObjectRecord(account.audioFormatPolicy);
-	return {
-		...account,
-		...audioPolicy ? { audioFormatPolicy: { ...audioPolicy } } : {}
-	};
-}
-function readQQBotSection(cfg) {
-	return asOptionalObjectRecord(asOptionalObjectRecord(cfg.channels)?.qqbot);
-}
-/**
-* List all configured QQBot account IDs.
-* 列出所有已配置的 QQBot 账号 ID。
-*/
-function listAccountIds(cfg) {
-	const ids = /* @__PURE__ */ new Set();
-	const qqbot = readQQBotSection(cfg);
-	if (qqbot?.appId || process.env.QQBOT_APP_ID) ids.add(DEFAULT_ACCOUNT_ID$2);
-	if (qqbot?.accounts) {
-		for (const accountId of Object.keys(qqbot.accounts)) if (qqbot.accounts[accountId]?.appId) ids.add(accountId);
-	}
-	return Array.from(ids);
-}
-/**
-* Resolve the default QQBot account ID.
-* 解析默认 QQBot 账号 ID（优先级：defaultAccount > 顶层 appId > 第一个命名账号）。
-*/
-function resolveDefaultAccountId(cfg) {
-	const qqbot = readQQBotSection(cfg);
-	const configuredDefaultAccountId = normalizeOptionalLowercaseString(qqbot?.defaultAccount);
-	if (configuredDefaultAccountId && (configuredDefaultAccountId === "default" || Boolean(qqbot?.accounts?.[configuredDefaultAccountId]?.appId))) return configuredDefaultAccountId;
-	if (qqbot?.appId || process.env.QQBOT_APP_ID) return DEFAULT_ACCOUNT_ID$2;
-	if (qqbot?.accounts) {
-		const ids = Object.keys(qqbot.accounts);
-		if (ids.length > 0) return ids[0];
-	}
-	return DEFAULT_ACCOUNT_ID$2;
-}
-/**
-* Resolve base account info (without credentials).
-* 解析账号基础信息（不含凭证）。
-*
-* Resolves everything except Secret/credential fields. The outer
-* config.ts layer calls this and adds Secret handling on top.
-*/
-function resolveAccountBase(cfg, accountId) {
-	const resolvedAccountId = accountId ?? resolveDefaultAccountId(cfg);
-	const qqbot = readQQBotSection(cfg);
-	let accountConfig;
-	let appId;
-	if (resolvedAccountId === "default") {
-		accountConfig = normalizeAccountConfig(asOptionalObjectRecord(qqbot));
-		appId = normalizeAppId(qqbot?.appId);
-	} else {
-		const account = qqbot?.accounts?.[resolvedAccountId];
-		accountConfig = normalizeAccountConfig(asOptionalObjectRecord(account));
-		appId = normalizeAppId(asOptionalObjectRecord(account)?.appId);
-	}
-	if (!appId && process.env.QQBOT_APP_ID && resolvedAccountId === "default") appId = normalizeAppId(process.env.QQBOT_APP_ID);
-	return {
-		accountId: resolvedAccountId,
-		name: readStringField(accountConfig, "name"),
-		enabled: accountConfig.enabled !== false,
-		appId,
-		systemPrompt: readStringField(accountConfig, "systemPrompt"),
-		markdownSupport: accountConfig.markdownSupport !== false,
-		config: accountConfig
-	};
-}
-/** Apply account config updates into a raw config object. */
-function applyAccountConfig(cfg, accountId, input) {
-	const next = { ...cfg };
-	const channels = asOptionalObjectRecord(cfg.channels) ?? {};
-	const existingQQBot = asOptionalObjectRecord(channels.qqbot) ?? {};
-	if (accountId === "default") {
-		const allowFrom = existingQQBot.allowFrom ?? ["*"];
-		next.channels = {
-			...channels,
-			qqbot: {
-				...existingQQBot,
-				enabled: true,
-				allowFrom,
-				...input.appId ? { appId: input.appId } : {},
-				...input.clientSecret ? {
-					clientSecret: input.clientSecret,
-					clientSecretFile: void 0
-				} : input.clientSecretFile ? {
-					clientSecretFile: input.clientSecretFile,
-					clientSecret: void 0
-				} : {},
-				...input.name ? { name: input.name } : {}
-			}
-		};
-	} else {
-		const accounts = existingQQBot.accounts ?? {};
-		const existingAccount = accounts[accountId] ?? {};
-		const allowFrom = existingAccount.allowFrom ?? ["*"];
-		next.channels = {
-			...channels,
-			qqbot: {
-				...existingQQBot,
-				enabled: true,
-				accounts: {
-					...accounts,
-					[accountId]: {
-						...existingAccount,
-						enabled: true,
-						allowFrom,
-						...input.appId ? { appId: input.appId } : {},
-						...input.clientSecret ? {
-							clientSecret: input.clientSecret,
-							clientSecretFile: void 0
-						} : input.clientSecretFile ? {
-							clientSecretFile: input.clientSecretFile,
-							clientSecret: void 0
-						} : {},
-						...input.name ? { name: input.name } : {}
-					}
-				}
-			}
-		};
-	}
-	return next;
-}
-/** Check whether a QQBot account has been fully configured. */
-function isAccountConfigured(account) {
-	return Boolean(account?.appId && (Boolean(account?.clientSecret) || getPlatformAdapter().hasConfiguredSecret(account?.config?.clientSecret) || Boolean(account?.config?.clientSecretFile?.trim())));
-}
-/** Build a summary description of an account. */
-function describeAccount(account) {
-	return {
-		accountId: account?.accountId ?? "default",
-		name: account?.name,
-		enabled: account?.enabled ?? false,
-		configured: isAccountConfigured(account),
-		tokenSource: account?.secretSource
-	};
-}
-/** Normalize allowFrom entries into uppercase strings without the qqbot: prefix. */
-function formatAllowFrom(allowFrom) {
-	return normalizeStringifiedEntries(allowFrom ?? []).map((entry) => entry.replace(/^qqbot:/i, "")).map((entry) => entry.toUpperCase());
-}
-//#endregion
-//#region extensions/qqbot/src/bridge/config.ts
-const DEFAULT_ACCOUNT_ID$1 = DEFAULT_ACCOUNT_ID$2;
-function assertNotLegacySecretRefMarker(value, path) {
-	const normalized = normalizeSecretInputString(value);
-	if (!normalized || !/^secretref(?:-env)?:/i.test(normalized)) return;
-	throw new Error(`${path}: legacy SecretRef marker strings are not valid QQ Bot clientSecret values; use a structured SecretRef object instead.`);
-}
-function resolveEnvSecretRefValue(params) {
-	const ref = coerceSecretRef(params.value, params.cfg.secrets?.defaults);
-	if (!ref || ref.source !== "env") return;
-	const providerConfig = params.cfg.secrets?.providers?.[ref.provider];
-	if (providerConfig) {
-		if (providerConfig.source !== "env") throw new Error(`Secret provider "${ref.provider}" has source "${providerConfig.source}" but ref requests "env".`);
-		if (providerConfig.allowlist && !providerConfig.allowlist.includes(ref.id)) throw new Error(`Environment variable "${ref.id}" is not allowlisted in secrets.providers.${ref.provider}.allowlist.`);
-	} else if (ref.provider !== resolveDefaultSecretProviderAlias(params.cfg, "env")) throw new Error(`Secret provider "${ref.provider}" is not configured (ref: env:${ref.provider}:${ref.id}).`);
-	return normalizeSecretInputString((params.env ?? process.env)[ref.id]);
-}
-function resolveQQBotClientSecretInput(params) {
-	assertNotLegacySecretRefMarker(params.value, params.path);
-	const envSecret = resolveEnvSecretRefValue({
-		cfg: params.cfg,
-		value: params.value
-	});
-	if (envSecret) return envSecret;
-	return getPlatformAdapter().resolveSecretInputString({
-		value: params.value,
-		path: params.path
-	});
-}
-/** List all configured QQBot account IDs. */
-function listQQBotAccountIds(cfg) {
-	return listAccountIds(cfg);
-}
-/** Resolve the default QQBot account ID. */
-function resolveDefaultQQBotAccountId(cfg) {
-	return resolveDefaultAccountId(cfg);
-}
-/** Resolve QQBot account config for runtime or setup flows. */
-function resolveQQBotAccount(cfg, accountId, opts) {
-	const base = resolveAccountBase(cfg, accountId);
-	const qqbot = cfg.channels?.qqbot;
-	/**
-	* Legacy top-level account uses `channels.qqbot` as the base, but per-account
-	* fields (allowFrom, streaming, …) often live under `accounts.default`.
-	* Merge that slice so runtime sees `config.streaming` etc.
-	*/
-	const accountConfig = base.accountId === DEFAULT_ACCOUNT_ID$1 ? {
-		...qqbot,
-		...qqbot?.accounts?.[DEFAULT_ACCOUNT_ID$1]
-	} : qqbot?.accounts?.[base.accountId] ?? {};
-	let clientSecret = "";
-	let secretSource = "none";
-	const clientSecretPath = base.accountId === DEFAULT_ACCOUNT_ID$1 ? "channels.qqbot.clientSecret" : `channels.qqbot.accounts.${base.accountId}.clientSecret`;
-	const adapter = getPlatformAdapter();
-	if (adapter.hasConfiguredSecret(accountConfig.clientSecret)) {
-		clientSecret = opts?.allowUnresolvedSecretRef ? adapter.normalizeSecretInputString(accountConfig.clientSecret) ?? "" : resolveQQBotClientSecretInput({
-			cfg,
-			value: accountConfig.clientSecret,
-			path: clientSecretPath
-		}) ?? "";
-		secretSource = "config";
-	} else if (accountConfig.clientSecretFile) try {
-		clientSecret = fs.readFileSync(accountConfig.clientSecretFile, "utf8").trim();
-		secretSource = "file";
-	} catch {
-		secretSource = "none";
-	}
-	else if (process.env.QQBOT_CLIENT_SECRET && base.accountId === DEFAULT_ACCOUNT_ID$1) {
-		clientSecret = process.env.QQBOT_CLIENT_SECRET;
-		secretSource = "env";
-	}
-	return {
-		accountId: base.accountId,
-		name: accountConfig.name,
-		enabled: base.enabled,
-		appId: base.appId,
-		clientSecret,
-		secretSource,
-		systemPrompt: base.systemPrompt,
-		markdownSupport: base.markdownSupport,
-		config: accountConfig
-	};
-}
-/** Apply account config updates back into the OpenClaw config object. */
-function applyQQBotAccountConfig(cfg, accountId, input) {
-	return applyAccountConfig(cfg, accountId, input);
-}
-//#endregion
 //#region extensions/qqbot/src/engine/config/setup-logic.ts
 /**
 * QQBot setup business logic (pure layer).
@@ -654,6 +401,16 @@ const QQBotGroupPolicySchema = z.enum([
 	"allowlist",
 	"disabled"
 ]).optional();
+const QQBotGroupSchema = z.object({
+	requireMention: z.boolean().optional(),
+	ignoreOtherMentions: z.boolean().optional(),
+	historyLimit: z.number().optional(),
+	name: z.string().optional(),
+	prompt: z.string().optional(),
+	tools: ToolPolicySchema,
+	toolsBySender: z.record(z.string(), ToolPolicySchema).optional()
+}).strict();
+const QQBotGroupsSchema = z.record(z.string(), QQBotGroupSchema).optional();
 const QQBotAccountSchema = z.object({
 	enabled: z.boolean().optional(),
 	name: z.string().optional(),
@@ -672,7 +429,8 @@ const QQBotAccountSchema = z.object({
 	upgradeUrl: z.string().optional(),
 	upgradeMode: z.enum(["doc", "hot-reload"]).optional(),
 	streaming: QQBotStreamingSchema,
-	execApprovals: QQBotExecApprovalsSchema
+	execApprovals: QQBotExecApprovalsSchema,
+	groups: QQBotGroupsSchema
 }).passthrough();
 const qqbotChannelConfigSchema = buildChannelConfigSchema(QQBotAccountSchema.extend({
 	stt: QQBotSttSchema,
@@ -680,4 +438,4 @@ const qqbotChannelConfigSchema = buildChannelConfigSchema(QQBotAccountSchema.ext
 	defaultAccount: z.string().optional()
 }).passthrough());
 //#endregion
-export { qqbotSetupAdapterShared as a, listQQBotAccountIds as c, DEFAULT_ACCOUNT_ID$2 as d, resolveAccountBase as f, setBridgeLogger as h, qqbotMeta as i, resolveDefaultQQBotAccountId as l, getBridgeLogger as m, qqbotSetupWizard as n, DEFAULT_ACCOUNT_ID$1 as o, ensurePlatformAdapter as p, qqbotConfigAdapter as r, applyQQBotAccountConfig as s, qqbotChannelConfigSchema as t, resolveQQBotAccount as u };
+export { qqbotSetupAdapterShared as a, setBridgeLogger as c, qqbotMeta as i, qqbotSetupWizard as n, ensurePlatformAdapter as o, qqbotConfigAdapter as r, getBridgeLogger as s, qqbotChannelConfigSchema as t };