perf: add lightweight secret input runtime

extensions/matrix/src/account-selection.ts

@@ -10,7 +10,7 @@ import {
   normalizeOptionalAccountId,
 } from "openclaw/plugin-sdk/account-id";
 import type { OpenClawConfig } from "openclaw/plugin-sdk/config-runtime";
-import { hasConfiguredSecretInput } from "openclaw/plugin-sdk/secret-input";
+import { hasConfiguredSecretInput } from "openclaw/plugin-sdk/secret-input-runtime";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import {
   resolveMatrixAccountStringValues,

package.json

@@ -1084,6 +1084,10 @@
       "types": "./dist/plugin-sdk/secret-input.d.ts",
       "default": "./dist/plugin-sdk/secret-input.js"
     },
+    "./plugin-sdk/secret-input-runtime": {
+      "types": "./dist/plugin-sdk/secret-input-runtime.d.ts",
+      "default": "./dist/plugin-sdk/secret-input-runtime.js"
+    },
     "./plugin-sdk/channel-status": {
       "types": "./dist/plugin-sdk/channel-status.d.ts",
       "default": "./dist/plugin-sdk/channel-status.js"

scripts/lib/plugin-sdk-entrypoints.json

@@ -257,6 +257,7 @@
   "param-readers",
   "provider-zai-endpoint",
   "secret-input",
+  "secret-input-runtime",
   "channel-status",
   "status-helpers",
   "speech",

src/plugin-sdk/secret-input-runtime.ts

@@ -1,5 +1,11 @@
 export {
+  coerceSecretRef,
   hasConfiguredSecretInput,
+  isSecretRef,
   normalizeResolvedSecretInputString,
   normalizeSecretInputString,
+  resolveSecretInputString,
+  type SecretInput,
+  type SecretInputStringResolution,
+  type SecretInputStringResolutionMode,
 } from "../config/types.secrets.js";