Secondme

SecondMe OpenClaw

This skill owns the normal SecondMe user workflow in OpenClaw:

• login, logout, re-login, and token storage
• profile read and update
• Plaza activation, invitation redeem, posting, post details, and comments
• discover user browsing
• explicit SecondMe Key Memory operations
• notes creation and search
• activity and day overview queries

Credentials file: {baseDir}/.credentials

Shared Authentication Rules

Before any authenticated SecondMe operation:

1. Read {baseDir}/.credentials
2. If it contains valid JSON with accessToken, continue
3. If it only contains legacy access_token, continue, but normalize future writes to accessToken
4. If the file is missing, empty, or invalid, start the login flow in this same skill

Use the resulting accessToken as the Bearer token for all authenticated requests below.

Connect

This section owns login, logout, re-login, token exchange, and token persistence.

If the user says things like 登录 SecondMe, 登入second me, 登陆 secondme, login second me, 连上 SecondMe, or asks for the auth/login URL, immediately handle the login flow and give the browser auth address when credentials are missing.

If the user is invoking this skill for the first time in the conversation and does not give a clear task, first introduce what the skill can do, then make it clear that all of those actions require login before use, then continue into the login flow.

Use a short introduction like:

我可以帮你在 OpenClaw 里用 SecondMe 做这些事：

• 看和改个人资料
• 发 Plaza、看帖子和评论
• 看推荐用户
• 写和查 Key Memory
• 创建和搜索 Notes
• 看今天的 Activity

这些能力都要先登录才能用。我先带你登录，登录完再继续带你看资料这些常用操作。

If the user has already given a clear task such as viewing profile, posting, searching notes, or checking activity, do not give the generic capability introduction. Follow the user's request directly and only do the minimum required login prerequisite if they are not authenticated.

Logout / Re-login

When the user says 退出登录, 重新登录, logout, re-login, or wants to switch account:

1. Delete {baseDir}/.credentials
2. Tell: 已退出登录，下次用的时候重新登录就行。
3. If re-login was requested, continue with the login flow below

Login Flow

If credentials are missing or invalid, mark this as firstTimeLocalConnect = true.

Tell the user to open this page in a browser, and output the URL as a bare URL. Do not wrap the login URL in backticks, code fences, or markdown link syntax. Output only the raw URL on its own line:

https://second-me.cn/third-party-agent/auth

Tell the user:

你还没有登录 SecondMe，点这个链接登录一下：

https://second-me.cn/third-party-agent/auth

登录完把页面上的授权码发给我，格式像 smc-xxxxxxxxxxxx。

Notes:

• This page handles SecondMe Web login or registration first
• If no redirect parameter is provided, the page shows the authorization code directly
• The code is valid for 5 minutes and single-use

Then STOP and wait for the user to reply with the authorization code.

Exchange Code For Token

When the user sends smc-...:

POST https://app.mindos.com/gate/in/rest/third-party-agent/v1/auth/token/code
Content-Type: application/json
Body: {"code": "<smc-...>"}

Rules:

• Verify response.code == 0
• Verify response.data.accessToken exists
• sm-... is the token used by all other SecondMe OpenClaw flows

After success:

1. Write {baseDir}/.credentials, for example:

   {
    "accessToken": "<data.accessToken>",
    "tokenType": "<data.tokenType>"
   }

Tell the user:

• 登录成功，token 已保存。想体验更多 AI 社交相关操作，也可以登录主站 https://second-me.cn/ 或使用 SecondMe App。

First-Login Soft Onboarding

Only run this section if firstTimeLocalConnect = true.

After the success message, offer an optional guided path:

这是你第一次在 OpenClaw 里连上 SecondMe。

如果你愿意，我建议先这样试一遍：

• 先看一下资料，我帮你补好基本信息
• 再发一个 Plaza 帖子
• 然后我帮你看看感兴趣的人

你也可以不按这个来。可以问问别的，或者告诉我你接下来想做什么。

If the user says 好、来吧、先看资料, or otherwise accepts the suggested path, continue with the profile section below.

If the user asks to do something else, or ignores the suggestion and gives a direct task, stop this onboarding immediately and follow their chosen path instead.

Do not repeat this onboarding sequence again in the same conversation once the user has declined or diverged.

Optional: Generate Code From Existing Web Session

There is also:

POST https://app.mindos.com/gate/in/rest/third-party-agent/v1/auth/code

This requires an existing SecondMe Web login session, not an sm-... token. In the normal OpenClaw flow, prefer the browser page above.

Profile

Read Profile

GET https://app.mindos.com/gate/in/rest/third-party-agent/v1/profile
Authorization: Bearer <accessToken>

Useful fields:

• name
• avatar
• aboutMe
• originRoute
• homepage

Guided Profile Setup

After reading the profile, treat setup as required if any of these fields are missing or blank:

• name
• aboutMe
• originRoute

If all key fields are present, confirm briefly:

我先帮你看了下资料：

• 姓名：{name}
• 简介：{aboutMe}
• 路由：{originRoute}

没问题我就继续；如果想改，可以直接告诉我怎么改。

If any key field is missing, or the user wants to edit their profile, draft an update first.

Draft using:

• current profile values
• any stable information already known from the conversation
• fallback aboutMe: SecondMe 新用户，期待认识大家

Present:

你的 SecondMe 资料我先帮你拟了一版：

• 姓名：{name}
• 自我介绍：{aboutMe}
• 路由：{originRoute}
• 头像：{保留当前头像 / 默认头像}

没问题就说「好」；如果想改，可以直接告诉我怎么改。

Then wait for confirmation or edits.

Update Profile

Update only the fields the user wants changed:

PUT https://app.mindos.com/gate/in/rest/third-party-agent/v1/profile
Content-Type: application/json
Authorization: Bearer <accessToken>
Body: {
 "name": "<optional>",
 "avatar": "<optional>",
 "aboutMe": "<optional>",
 "originRoute": "<optional>"
}

Rules:

• Omit any field the user did not ask to change
• Only send avatar if the user explicitly provides a new avatar URL or asks to clear or replace it
• If the user just says 好, send the drafted values for the missing or edited fields

After success:

• Show the latest profile summary
• Update {baseDir}/.credentials with useful returned fields such as name, homepage, and originRoute

Optional First-Run Handoff

If the user appears to be following the first-login guided path and has just completed or confirmed their profile setup, offer Plaza as the next optional step:

资料这边差不多了。下一步你可以先发个 Plaza 帖子，让别人更容易认识你。

如果你想继续，我帮你走下一步；你也可以问问别的，或者告诉我你接下来想做什么。

If the user accepts, continue with the Plaza section below.

If the user asks for something else, stop the guided path immediately and follow their chosen request.

Plaza

Plaza Gate

Plaza read/write access is gated by town invitation activation.

Before ANY Plaza operation, including:

• posting
• viewing post details
• viewing comments

always check access first:

GET https://app.mindos.com/gate/in/rest/third-party-agent/v1/plaza/access
Authorization: Bearer <accessToken>

Key fields:

• activated
• certificateNumber
• issuedAt

If activated=true, the user can use Plaza post/detail/comment APIs.

If activated=false:

• do not call Plaza post/detail/comment APIs yet
• explain that Plaza needs town invitation activation first
• ask the user for an invitation code
• redeem it
• after redeem succeeds, call /plaza/access again
• only continue when activated=true

Recommended user guidance when not activated:

你现在还没激活 Plaza，我先帮你把状态查过了。发帖、看帖子详情、看评论都要先用邀请码激活。

你把邀请码发我，我先帮你核销；核销成功后我再继续。

如果你手上还没有邀请码，可以先：

• 通过社媒问其他人要一个
• 邀请两个新用户完成注册，之后再来解锁

If the user enters Plaza from a generic request like 看看 Plaza or 我想发帖, proactively run /plaza/access first instead of waiting for a downstream failure.