@openclaw/nextcloud-talk 2026.10.10-beta.5 → 2026.11.5-beta.1

package/dist/.setup/{doctor-contract-DwH950tH.mjs → doctor-contract-CkWQa5uZ.mjs}

@@ -1,5 +1,5 @@
 import { hasConfiguredNextcloudTalkChannelState, listNextcloudTalkAccountIds, mergeNextcloudTalkAccountConfig } from "../configured-state.js";
-//#region \0rolldown/runtime.js
+// \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
@@ -24,8 +24,7 @@ var __copyProps = (to, from, except, desc) => {
 	return to;
 };
 var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
-//#endregion
-//#region packages/normalization-core/src/record-coerce.ts
+// packages/normalization-core/src/record-coerce.ts
 /** Type guard for non-array object records at browser-safe boundaries. */
 function isRecord(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value);
@@ -34,8 +33,7 @@ function isRecord(value) {
 function asNullableRecord(value) {
 	return isRecord(value) ? value : null;
 }
-//#endregion
-//#region src/config/channel-config-normalization.ts
+// src/config/channel-config-normalization.ts
 /** Applies one channel-specific doctor migration to every object-shaped account. */
 function normalizeChannelAccounts(params) {
 	const rawAccounts = asNullableRecord(params.entry.accounts);
@@ -111,8 +109,7 @@ function normalizeChannelConfigEntries(params) {
 		changes
 	};
 }
-//#endregion
-//#region src/plugin-sdk/legacy-webhook-listener-migration.ts
+// src/plugin-sdk/legacy-webhook-listener-migration.ts
 /** Preserve explicitly configured webhook listeners while moving ingress onto Gateway routes. */
 function createLegacyWebhookListenerDoctorContract(params) {
 	const portKey = params.portKey ?? "webhookPort";
@@ -182,13 +179,11 @@ function createLegacyWebhookListenerDoctorContract(params) {
 		}
 	};
 }
-//#endregion
-//#region \0openclaw:bundled-sdk:openclaw/plugin-sdk/runtime-doctor-migrations
+// \0openclaw:bundled-sdk:openclaw/plugin-sdk/runtime-doctor-migrations
 var runtime_doctor_migrations_exports = /* @__PURE__ */ __exportAll({ createLegacyWebhookListenerDoctorContract: () => createLegacyWebhookListenerDoctorContract });
 import * as import_openclaw_plugin_sdk_runtime_doctor_migrations from "openclaw/plugin-sdk/runtime-doctor-migrations";
 __reExport(runtime_doctor_migrations_exports, import_openclaw_plugin_sdk_runtime_doctor_migrations);
-//#endregion
-//#region extensions/nextcloud-talk/src/doctor-contract.ts
+// extensions/nextcloud-talk/src/doctor-contract.ts
 const webhookContract = createLegacyWebhookListenerDoctorContract({
 	channelKey: "nextcloud-talk",
 	defaultHost: "0.0.0.0",
@@ -220,5 +215,4 @@ function normalizeCompatibilityConfig({ cfg }) {
 		historicalWebhookAccountIds: webhook.historicalWebhookAccountIds
 	};
 }
-//#endregion
 export { __exportAll as a, normalizeHistoricalWebhookConfig as i, legacyConfigRules as n, __reExport as o, normalizeCompatibilityConfig as r, historicalWebhookListener as t };

package/dist/.setup/outbound-media-CpFe1Xgz.mjs

@@ -0,0 +1,303 @@
+import { a as resolveNextcloudTalkAccount, i as releaseNextcloudTalkGuardedResponse, n as stripNextcloudTalkTargetPrefix, o as resolveNextcloudTalkApiCredentialsResult, r as parseWebDavFileId } from "./channel-BA1-OoqO.mjs";
+import { l as getOptionalNextcloudTalkRuntime, r as fetchWithSsrFGuard } from "./runtime-api-CGy_KpdV.mjs";
+import { resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/account-helpers";
+import { createMessageReceiptFromOutboundResults, isRecentOutboundMessageIdentity, recordOutboundMessageIdentity } from "openclaw/plugin-sdk/channel-outbound";
+import { isRecord } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { convertMarkdownTables } from "openclaw/plugin-sdk/text-chunking";
+import { readProviderJsonResponse, readProviderTextResponse } from "openclaw/plugin-sdk/provider-http";
+import { ssrfPolicyFromPrivateNetworkOptIn } from "openclaw/plugin-sdk/ssrf-runtime";
+import path from "node:path";
+import { sanitizeUntrustedFileName } from "openclaw/plugin-sdk/security-runtime";
+import { truncateUtf8Prefix } from "openclaw/plugin-sdk/text-utility-runtime";
+import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
+import { createHmac, randomUUID } from "node:crypto";
+import { loadOutboundMediaFromUrl } from "openclaw/plugin-sdk/outbound-media";
+// extensions/nextcloud-talk/src/outbound-media.ts
+const OUTBOUND_FILE_PREFIX = /^openclaw-([0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12})-/u;
+const FILE_ID_REQUEST = "<d:propfind xmlns:d=\"DAV:\" xmlns:oc=\"http://owncloud.org/ns\"><d:prop><oc:fileid/></d:prop></d:propfind>";
+function createFileClient(account) {
+	const credentials = resolveNextcloudTalkApiCredentialsResult(account.config);
+	if (credentials.status !== "available") throw new Error("Nextcloud Talk attachments require available apiUser and apiPassword/apiPasswordFile credentials.");
+	const base = new URL(account.baseUrl);
+	if (!/^https?:$/u.test(base.protocol) || base.username || base.password || base.search || base.hash) throw new Error("Nextcloud Talk attachment baseUrl must be an HTTP(S) URL without credentials, query, or fragment.");
+	const authorization = `Basic ${Buffer.from(`${credentials.value.apiUser}:${credentials.value.apiPassword}`).toString("base64")}`;
+	const url = (pathname) => `${base.origin}${base.pathname.replace(/\/+$/u, "")}${pathname}`;
+	async function request(pathname, init, read, options = {}) {
+		options.signal?.throwIfAborted();
+		const headers = new Headers(init.headers);
+		headers.set("Authorization", authorization);
+		headers.set("OCS-APIRequest", "true");
+		if (!headers.has("Accept")) headers.set("Accept", "application/json");
+		const guarded = await fetchWithSsrFGuard({
+			url: url(pathname),
+			init: {
+				...init,
+				headers
+			},
+			maxRedirects: 0,
+			requireHttps: base.protocol === "https:",
+			policy: {
+				...ssrfPolicyFromPrivateNetworkOptIn(account.config.network?.dangerouslyAllowPrivateNetwork),
+				hostnameAllowlist: [base.hostname]
+			},
+			timeoutMs: 12e4,
+			signal: options.signal,
+			beforeRequest: options.beforeRequest,
+			auditContext: "nextcloud-talk-outbound-file"
+		});
+		try {
+			return await read(guarded.response);
+		} finally {
+			await releaseNextcloudTalkGuardedResponse(guarded);
+		}
+	}
+	async function json(pathname, init, options) {
+		return await request(pathname, init, async (response) => {
+			if (!response.ok) throw new Error(`Nextcloud Talk attachment API failed (${response.status}).`);
+			const payload = await readProviderJsonResponse(response, "Nextcloud Talk attachment API");
+			if (!isRecord(payload) || !isRecord(payload.ocs)) throw new Error("Nextcloud Talk attachment API returned an invalid response.");
+			return payload.ocs.data;
+		}, options);
+	}
+	async function user(options) {
+		const data = await json("/ocs/v1.php/cloud/user?format=json", {}, options);
+		if (!isRecord(data) || typeof data.id !== "string" || !data.id || data.id === "." || data.id === ".." || data.id.includes("/") || data.id.includes("\\") || Array.from(data.id).some((character) => {
+			const code = character.charCodeAt(0);
+			return code <= 31 || code === 127;
+		})) throw new Error("Nextcloud Talk API account has no valid canonical user ID.");
+		return data.id;
+	}
+	async function history(roomToken, messageId, options) {
+		const query = new URLSearchParams({
+			lookIntoFuture: "0",
+			limit: messageId ? "1" : "200",
+			setReadMarker: "0",
+			noStatusUpdate: "1",
+			markNotificationsAsRead: "0"
+		});
+		if (messageId) {
+			query.set("lastKnownMessageId", messageId);
+			query.set("includeLastKnown", "1");
+		}
+		const data = await json(`/ocs/v2.php/apps/spreed/api/v1/chat/${encodeURIComponent(roomToken)}?${query}`, {}, options);
+		return Array.isArray(data) ? data : [];
+	}
+	return {
+		request,
+		json,
+		user,
+		history
+	};
+}
+function fileReference(account, roomToken, uid, fileId) {
+	return createHmac("sha256", account.secret).update(JSON.stringify([
+		"nextcloud-talk-outbound-file",
+		account.accountId,
+		roomToken,
+		uid,
+		fileId
+	])).digest("hex");
+}
+function echoIdentity(accountId, roomToken, actor, fileId) {
+	return {
+		channel: "nextcloud-talk",
+		accountId,
+		conversationId: roomToken,
+		sourceId: `file:${actor.toLowerCase()}:${fileId}`
+	};
+}
+/** The bounded cache handles webhook-before-ack; exact history handles restart/backlog. */
+async function isNextcloudTalkOutboundFileEcho(params) {
+	params.signal?.throwIfAborted();
+	const { account, message } = params;
+	const file = message.attachment;
+	if (!file?.fileId) return false;
+	if (isRecentOutboundMessageIdentity(echoIdentity(account.accountId, message.roomToken, message.senderId, file.fileId))) return true;
+	if (!OUTBOUND_FILE_PREFIX.test(file.name)) return false;
+	if (!account.secret || resolveNextcloudTalkApiCredentialsResult(account.config).status !== "available") return false;
+	try {
+		const client = createFileClient(account);
+		const uid = await client.user({ signal: params.signal });
+		if (message.senderId !== `users/${uid}`) return false;
+		const referenceId = fileReference(account, message.roomToken, uid, file.fileId);
+		const history = await client.history(message.roomToken, message.messageId, { signal: params.signal });
+		params.signal?.throwIfAborted();
+		return history.some((entry) => isRecord(entry) && String(entry.id) === message.messageId && entry.token === message.roomToken && entry.actorType === "users" && entry.actorId === uid && entry.referenceId === referenceId && isRecord(entry.messageParameters) && isRecord(entry.messageParameters.file) && String(entry.messageParameters.file.id) === file.fileId);
+	} catch {
+		params.signal?.throwIfAborted();
+		return false;
+	}
+}
+async function sendMediaNextcloudTalk(ctx) {
+	const account = resolveNextcloudTalkAccount({
+		cfg: ctx.cfg,
+		accountId: ctx.accountId
+	});
+	if (!account.enabled || !account.baseUrl || !account.secret) throw new Error("Nextcloud Talk account is disabled or not configured.");
+	const roomToken = stripNextcloudTalkTargetPrefix(ctx.to);
+	if (!roomToken) throw new Error("Room token is required for Nextcloud Talk attachments.");
+	if (ctx.replyToId && !/^[1-9]\d*$/u.test(ctx.replyToId)) throw new Error("Nextcloud Talk attachment replyTo must be a positive message ID.");
+	const client = createFileClient(account);
+	const assertCurrent = () => {
+		ctx.signal?.throwIfAborted();
+		ctx.assertDirectAdapterHandoff?.();
+	};
+	const options = {
+		signal: ctx.signal,
+		beforeRequest: assertCurrent
+	};
+	assertCurrent();
+	if (ctx.silent) {
+		const data = await client.json("/ocs/v2.php/cloud/capabilities?format=json", {}, options);
+		assertCurrent();
+		const spreed = isRecord(data) && isRecord(data.capabilities) ? data.capabilities.spreed : void 0;
+		if (!isRecord(spreed) || !Array.isArray(spreed.features) || !spreed.features.includes("media-caption")) throw new Error("Nextcloud Talk silent attachments require the server's media-caption capability. Upgrade Talk before retrying.");
+	}
+	const maxBytes = resolveChannelMediaMaxBytes({
+		cfg: ctx.cfg,
+		accountId: account.accountId,
+		resolveChannelLimitMb: () => account.config.mediaMaxMb
+	}) ?? 20971520;
+	const media = await loadOutboundMediaFromUrl(ctx.mediaUrl, {
+		maxBytes,
+		mediaAccess: ctx.mediaAccess,
+		mediaLocalRoots: ctx.mediaLocalRoots,
+		mediaReadFile: ctx.mediaReadFile,
+		optimizeImages: false
+	});
+	assertCurrent();
+	const asVoice = ctx.audioAsVoice === true && (media.contentType === "audio/mpeg" || media.contentType === "audio/wav");
+	const uid = await client.user(options);
+	const uploadId = randomUUID();
+	const prefix = `openclaw-${uploadId}-`;
+	const filename = sanitizeUntrustedFileName(media.fileName ?? "attachment.bin", "attachment.bin");
+	const nameBudget = 250 - Buffer.byteLength(prefix);
+	const extension = truncateUtf8Prefix(path.extname(filename), nameBudget - 4);
+	const stem = truncateUtf8Prefix(filename.slice(0, filename.length - path.extname(filename).length), nameBudget - Buffer.byteLength(extension));
+	const uploadFolderPath = `/OpenClaw/openclaw-${uploadId}`;
+	const filePath = `${uploadFolderPath}/${prefix}${stem}${extension}`;
+	const davRoot = `/remote.php/dav/files/${encodeURIComponent(uid)}`;
+	const uploadFolder = `${davRoot}${uploadFolderPath}`;
+	const davPath = `${davRoot}${filePath.split("/").map(encodeURIComponent).join("/")}`;
+	let uploadFolderOwned = false;
+	let publicationAttempted = false;
+	try {
+		await client.request(`${davRoot}/OpenClaw`, { method: "MKCOL" }, async (response) => {
+			if (response.status !== 201 && response.status !== 405) throw new Error(`Nextcloud Talk attachment folder creation failed (${response.status}).`);
+		}, options);
+		await client.request(uploadFolder, { method: "MKCOL" }, async (response) => {
+			if (response.status !== 201) throw new Error(`Nextcloud Talk private upload folder creation failed (${response.status}).`);
+			uploadFolderOwned = true;
+		}, options);
+		await client.request(davPath, {
+			method: "PUT",
+			headers: {
+				"If-None-Match": "*",
+				"Content-Type": media.contentType ?? "application/octet-stream"
+			},
+			body: new Uint8Array(media.buffer)
+		}, async (response) => {
+			if (response.status !== 201) {
+				if (response.status === 412) uploadFolderOwned = false;
+				const recovery = response.status === 401 ? "Check apiUser and update its app password (apiPassword/apiPasswordFile) before retrying." : response.status === 507 ? "Free Files storage or increase the API user's quota before retrying." : "Check Nextcloud server logs and the API user's Files write access.";
+				throw new Error(`Nextcloud Talk attachment upload failed (${response.status}). ${recovery}`);
+			}
+		}, options);
+		const fileId = await client.request(davPath, {
+			method: "PROPFIND",
+			headers: {
+				Depth: "0",
+				"Content-Type": "application/xml"
+			},
+			body: FILE_ID_REQUEST
+		}, async (response) => {
+			if (response.status !== 207) throw new Error("Nextcloud Talk uploaded file identity unavailable.");
+			const id = parseWebDavFileId(await readProviderTextResponse(response, "Nextcloud Talk uploaded file identity", { maxBytes: 65536 }));
+			if (!id) throw new Error("Nextcloud Talk uploaded file identity invalid.");
+			return id;
+		}, options);
+		const referenceId = fileReference(account, roomToken, uid, fileId);
+		const caption = convertMarkdownTables(ctx.text.trim(), resolveMarkdownTableMode({
+			cfg: ctx.cfg,
+			channel: "nextcloud-talk",
+			accountId: account.accountId
+		}));
+		const body = new URLSearchParams({
+			path: filePath,
+			shareType: "10",
+			shareWith: roomToken,
+			permissions: "1",
+			referenceId,
+			talkMetaData: JSON.stringify({
+				caption,
+				...asVoice ? { messageType: "voice-message" } : {},
+				...ctx.silent ? { silent: true } : {},
+				...ctx.replyToId ? { replyTo: Number(ctx.replyToId) } : {}
+			})
+		});
+		await ctx.onPlatformSendDispatch?.();
+		assertCurrent();
+		recordOutboundMessageIdentity(echoIdentity(account.accountId, roomToken, `users/${uid}`, fileId));
+		let publicationError;
+		try {
+			await client.json("/ocs/v2.php/apps/files_sharing/api/v1/shares?format=json", {
+				method: "POST",
+				headers: { "Content-Type": "application/x-www-form-urlencoded" },
+				body
+			}, {
+				...options,
+				beforeRequest: () => {
+					assertCurrent();
+					publicationAttempted = true;
+				}
+			});
+		} catch (error) {
+			if (!publicationAttempted) throw error;
+			publicationError = error;
+		}
+		let history;
+		try {
+			history = await client.history(roomToken);
+		} catch (error) {
+			throw new Error("Nextcloud Talk attachment delivery not confirmed; uploaded file retained. Do not blindly retry.", { cause: error });
+		}
+		const message = history.find((entry) => isRecord(entry) && entry.token === roomToken && entry.actorType === "users" && entry.actorId === uid && entry.referenceId === referenceId && /^[1-9]\d*$/u.test(String(entry.id)) && isRecord(entry.messageParameters) && isRecord(entry.messageParameters.file) && String(entry.messageParameters.file.id) === fileId);
+		if (!isRecord(message)) throw new Error("Nextcloud Talk attachment delivery not confirmed; uploaded file retained. Do not blindly retry.", { cause: publicationError });
+		const messageId = String(message.id);
+		const replyToId = isRecord(message.parent) && String(message.parent.id) === ctx.replyToId ? ctx.replyToId : void 0;
+		recordOutboundMessageIdentity({
+			channel: "nextcloud-talk",
+			accountId: account.accountId,
+			conversationId: roomToken,
+			messageId
+		});
+		getOptionalNextcloudTalkRuntime()?.channel.activity.record({
+			channel: "nextcloud-talk",
+			accountId: account.accountId,
+			direction: "outbound"
+		});
+		return {
+			messageId,
+			roomToken,
+			receipt: createMessageReceiptFromOutboundResults({
+				results: [{
+					channel: "nextcloud-talk",
+					conversationId: roomToken,
+					messageId
+				}],
+				kind: asVoice && message.messageType === "voice-message" ? "voice" : "media",
+				...replyToId ? { replyToId } : {}
+			})
+		};
+	} catch (error) {
+		if (uploadFolderOwned && !publicationAttempted) try {
+			await client.request(uploadFolder, { method: "DELETE" }, async (response) => {
+				if (!response.ok && response.status !== 404) throw new Error("cleanup rejected", { cause: error });
+			});
+		} catch {
+			throw new Error("Nextcloud Talk attachment failed before sharing; unshared upload cleanup also failed.", { cause: error });
+		}
+		throw error;
+	}
+}
+export { isNextcloudTalkOutboundFileEcho, sendMediaNextcloudTalk };

package/dist/.setup/reply-BEkv387l.mjs

@@ -0,0 +1,64 @@
+import { buildOutboundSessionContext, deliverInboundReplyWithMessageSendContext, sendDurableMessageBatch } from "openclaw/plugin-sdk/channel-outbound";
+import { createAcceptedChannelDeliveryResult, createChannelPartialDeliveryError } from "openclaw/plugin-sdk/channel-inbound";
+// extensions/nextcloud-talk/src/reply.ts
+/** Keep final runtime handoff and all payload planning with the shared owners. */
+async function deliverNextcloudTalkReply(params) {
+	const { cfg, accountId, agentId, ctxPayload, payload, info, to } = params;
+	const final = await deliverInboundReplyWithMessageSendContext({
+		cfg,
+		channel: "nextcloud-talk",
+		accountId,
+		agentId,
+		ctxPayload,
+		payload,
+		info,
+		to
+	});
+	if (final.status === "handled_visible" || final.status === "handled_no_send") return final.delivery;
+	if (final.status === "failed") throw final.error;
+	const send = await sendDurableMessageBatch({
+		cfg,
+		channel: "nextcloud-talk",
+		accountId,
+		to,
+		payloads: [payload],
+		replyToId: payload.replyToId,
+		session: buildOutboundSessionContext({
+			cfg,
+			agentId,
+			sessionKey: ctxPayload.SessionKey,
+			policySessionKey: ctxPayload.RuntimePolicySessionKey,
+			conversationType: ctxPayload.ChatType,
+			requesterAccountId: accountId ?? ctxPayload.AccountId,
+			requesterSenderId: ctxPayload.SenderId ?? ctxPayload.From,
+			requesterSenderName: ctxPayload.SenderName,
+			requesterSenderUsername: ctxPayload.SenderUsername,
+			requesterSenderE164: ctxPayload.SenderE164
+		}),
+		gatewayClientScopes: ctxPayload.GatewayClientScopes ?? [],
+		signal: params.signal,
+		onPlatformSendDispatch: info.onPlatformSendDispatch,
+		assertDirectAdapterHandoff: info.assertPlatformSendAuthorized,
+		skipQueue: true,
+		durability: "best_effort"
+	});
+	if (send.status === "failed") throw send.error;
+	const deliveryIntent = send.deliveryIntent ? {
+		id: send.deliveryIntent.id,
+		kind: "outbound_queue",
+		queuePolicy: send.deliveryIntent.queuePolicy
+	} : void 0;
+	if (send.status === "suppressed") return {
+		visibleReplySent: false,
+		receipt: send.receipt,
+		suppression: { reason: send.reason },
+		...deliveryIntent ? { deliveryIntent } : {}
+	};
+	const result = {
+		...createAcceptedChannelDeliveryResult({ results: [{ receipt: send.receipt }] }),
+		...deliveryIntent ? { deliveryIntent } : {}
+	};
+	if (send.status === "partial_failed") throw createChannelPartialDeliveryError(send.error, result);
+	return result;
+}
+export { deliverNextcloudTalkReply };

package/dist/.setup/{runtime-api-DVkVOUSo.mjs → runtime-api-CGy_KpdV.mjs}

@@ -1,13 +1,11 @@
 import { createChannelPairingController } from "openclaw/plugin-sdk/channel-pairing";
 import { logInboundDrop } from "openclaw/plugin-sdk/channel-inbound";
 import { GROUP_POLICY_BLOCKED_LABEL, resolveAllowlistProviderRuntimeGroupPolicy, resolveDefaultGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "openclaw/plugin-sdk/runtime-group-policy";
-import { deliverFormattedTextWithAttachments } from "openclaw/plugin-sdk/reply-payload";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
 import { createPluginRuntimeStore } from "openclaw/plugin-sdk/runtime-store";
-//#region extensions/nextcloud-talk/src/runtime.ts
+// extensions/nextcloud-talk/src/runtime.ts
 const { setRuntime: setNextcloudTalkRuntime, getRuntime: getNextcloudTalkRuntime, tryGetRuntime: getOptionalNextcloudTalkRuntime } = createPluginRuntimeStore({
 	pluginId: "nextcloud-talk",
 	errorMessage: "Nextcloud Talk runtime not initialized"
 });
-//#endregion
-export { logInboundDrop as a, warnMissingProviderGroupPolicyFallbackOnce as c, setNextcloudTalkRuntime as d, fetchWithSsrFGuard as i, getNextcloudTalkRuntime as l, createChannelPairingController as n, resolveAllowlistProviderRuntimeGroupPolicy as o, deliverFormattedTextWithAttachments as r, resolveDefaultGroupPolicy as s, GROUP_POLICY_BLOCKED_LABEL as t, getOptionalNextcloudTalkRuntime as u };
+export { resolveAllowlistProviderRuntimeGroupPolicy as a, getNextcloudTalkRuntime as c, logInboundDrop as i, getOptionalNextcloudTalkRuntime as l, createChannelPairingController as n, resolveDefaultGroupPolicy as o, fetchWithSsrFGuard as r, warnMissingProviderGroupPolicyFallbackOnce as s, GROUP_POLICY_BLOCKED_LABEL as t, setNextcloudTalkRuntime as u };

package/dist/.setup/{secret-contract-api-DoyAH9bS.mjs → secret-contract-api-QMihLdr1.mjs}

@@ -1,2 +1,2 @@
-export { t as channelSecrets, n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-Bvm0PmP3.mjs";
+export { t as channelSecrets, n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-yjCLewtg.mjs";
 import "../secret-contract-api.js";

package/dist/.setup/secret-contract-yjCLewtg.mjs

@@ -0,0 +1,19 @@
+import { hasConfiguredNextcloudAccount } from "../configured-state.js";
+import { collectSimpleChannelFieldAssignments, createChannelSecretContract } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
+// extensions/nextcloud-talk/src/secret-contract.ts
+const channelSecrets = createChannelSecretContract({
+	channelKey: "nextcloud-talk",
+	account: ["apiPassword", "botSecret"],
+	channel: ["apiPassword", "botSecret"],
+	hasImplicitDefaultAccount: ({ context }) => hasConfiguredNextcloudAccount(context.sourceConfig.channels?.["nextcloud-talk"], context.env),
+	collect(params) {
+		for (const field of ["botSecret", "apiPassword"]) collectSimpleChannelFieldAssignments({
+			...params,
+			field,
+			topInactiveReason: `no enabled Nextcloud Talk surface inherits this top-level ${field}.`,
+			accountInactiveReason: "Nextcloud Talk account is disabled."
+		});
+	}
+});
+const { secretTargetRegistryEntries, collectRuntimeConfigAssignments } = channelSecrets;
+export { collectRuntimeConfigAssignments as n, secretTargetRegistryEntries as r, channelSecrets as t };

package/dist/.source-module-urls/3332e832383d54fca83a3cfe8961ecdecf361c1eec0972c99f00a876d9481d98.json

@@ -1 +1 @@
-{"version":3,"entries":[{"output":"api.js","source":"extensions/nextcloud-talk/api.ts"},{"output":"channel-plugin-api.js","source":"extensions/nextcloud-talk/channel-plugin-api.ts"},{"output":"configured-state.js","source":"extensions/nextcloud-talk/configured-state.ts"},{"output":"doctor-contract-api.js","source":"extensions/nextcloud-talk/doctor-contract-api.ts"},{"output":"index.js","source":"extensions/nextcloud-talk/index.ts"},{"output":"runtime-api.js","source":"extensions/nextcloud-talk/runtime-api.ts"},{"output":"secret-contract-api.js","source":"extensions/nextcloud-talk/secret-contract-api.ts"},{"output":"setup-entry.js","source":"extensions/nextcloud-talk/setup-entry.ts"}],"chunks":[{"output":".setup/api-BmNQoi-o.mjs","sha256":"2bc270280c12867279785c00677d286e883e393cc47d4da2a7201006ea89320a","facadeSource":"extensions/nextcloud-talk/api.ts","sources":[]},{"output":".setup/channel-B8-CvvK1.mjs","sha256":"ea3865dc7fd8c75112f517da40fcd855f95f65e66ec36fd90b035ed0ea1f92c6","facadeSource":null,"sources":["extensions/nextcloud-talk/src/accounts.ts","extensions/nextcloud-talk/src/api-credentials.ts","extensions/nextcloud-talk/src/approval-auth.ts","extensions/nextcloud-talk/src/bot-preflight.ts","extensions/nextcloud-talk/src/channel.adapters.ts","extensions/nextcloud-talk/src/channel.ts","extensions/nextcloud-talk/src/config-schema.ts","extensions/nextcloud-talk/src/doctor.ts","extensions/nextcloud-talk/src/gateway.ts","extensions/nextcloud-talk/src/guarded-response.ts","extensions/nextcloud-talk/src/inbound.ts","extensions/nextcloud-talk/src/message-actions.ts","extensions/nextcloud-talk/src/message-adapter.ts","extensions/nextcloud-talk/src/monitor-runtime.ts","extensions/nextcloud-talk/src/monitor.ts","extensions/nextcloud-talk/src/normalize.ts","extensions/nextcloud-talk/src/policy.ts","extensions/nextcloud-talk/src/replay-migration-contract.ts","extensions/nextcloud-talk/src/room-info.ts","extensions/nextcloud-talk/src/send.ts","extensions/nextcloud-talk/src/session-route.ts","extensions/nextcloud-talk/src/setup-core.ts","extensions/nextcloud-talk/src/setup-surface.ts","extensions/nextcloud-talk/src/signature.ts","extensions/nextcloud-talk/src/webhook-route.ts","extensions/nextcloud-talk/src/webhook-spool-state.ts","extensions/nextcloud-talk/src/webhook-spool.ts","packages/normalization-core/src/string-coerce.ts","src/gateway/gateway-http-route-contracts.ts","src/gateway/security-path.ts","src/gateway/server/plugins-http/path-context.ts","src/plugins/http-path-prefix.ts"]},{"output":".setup/doctor-contract-DwH950tH.mjs","sha256":"fc92feebc8e348bacba027cadbf2fd4e510c557abe00e20ff2ee80bab76c0e8a","facadeSource":null,"sources":["extensions/nextcloud-talk/src/doctor-contract.ts","packages/normalization-core/src/record-coerce.ts","src/config/channel-config-normalization.ts","src/plugin-sdk/legacy-webhook-listener-migration.ts"]},{"output":".setup/runtime-api-DVkVOUSo.mjs","sha256":"7f9187eb96ed6d031f63c3a480653fef48d5b9c581f18008598feeee27345cdc","facadeSource":null,"sources":["extensions/nextcloud-talk/src/runtime.ts"]},{"output":".setup/secret-contract-api-DoyAH9bS.mjs","sha256":"f28083e02a867734bc44bdc6a690bba3e7c9dd61e4ee7efe65bf90c7d820caec","facadeSource":"extensions/nextcloud-talk/secret-contract-api.ts","sources":[]},{"output":".setup/secret-contract-Bvm0PmP3.mjs","sha256":"88393e46f2f5b42d8868d36c1b0c85a275dd01472601f757005052fa6dfcf051","facadeSource":null,"sources":["extensions/nextcloud-talk/src/secret-contract.ts"]},{"output":"api.js","sha256":"59b284727af55cf3a9b549405c5b9811e829dca1f9a08492bdb1f6004770bff6","facadeSource":"extensions/nextcloud-talk/api.ts","sources":[]},{"output":"channel-plugin-api.js","sha256":"59b284727af55cf3a9b549405c5b9811e829dca1f9a08492bdb1f6004770bff6","facadeSource":"extensions/nextcloud-talk/channel-plugin-api.ts","sources":[]},{"output":"configured-state.js","sha256":"ac8ee085fd929e3644c33b516f94891205f915591811d8f541ca443d175a74b5","facadeSource":"extensions/nextcloud-talk/configured-state.ts","sources":["extensions/nextcloud-talk/configured-state.ts"]},{"output":"doctor-contract-api.js","sha256":"8bc6b0c8254cfb5f79b7516d18d4bbf6bf862e3a3deba033e037d481b6ff9114","facadeSource":"extensions/nextcloud-talk/doctor-contract-api.ts","sources":[]},{"output":"index.js","sha256":"eaac1b676ea855c0ce9ea0a8e3157564c7a38f956ace23c22b0c28667dc0b424","facadeSource":"extensions/nextcloud-talk/index.ts","sources":["extensions/nextcloud-talk/index.ts"]},{"output":"runtime-api.js","sha256":"f4b2341101e63c59f0086c5738b3d798f1718e7cf7c0ec1dfb70b9f172821f67","facadeSource":"extensions/nextcloud-talk/runtime-api.ts","sources":[]},{"output":"secret-contract-api.js","sha256":"70acb59d3d1c1e0a74dcd8a1090740d6361943e32c9776bcc4e1fc2630ddd860","facadeSource":"extensions/nextcloud-talk/secret-contract-api.ts","sources":[]},{"output":"setup-entry.js","sha256":"085ddebc5687f8394702f895486ad994cdbf703c204c71e74e02b33782282823","facadeSource":"extensions/nextcloud-talk/setup-entry.ts","sources":["extensions/nextcloud-talk/setup-entry.ts"]}],"unrenderedSources":["extensions/nextcloud-talk/api.ts","extensions/nextcloud-talk/channel-plugin-api.ts","extensions/nextcloud-talk/config-doctor-api.ts","extensions/nextcloud-talk/doctor-contract-api.ts","extensions/nextcloud-talk/runtime-api.ts","extensions/nextcloud-talk/secret-contract-api.ts","extensions/nextcloud-talk/src/channel-api.ts","extensions/nextcloud-talk/src/send.runtime.ts"]}
+{"version":3,"entries":[{"output":"api.js","source":"extensions/nextcloud-talk/api.ts"},{"output":"channel-plugin-api.js","source":"extensions/nextcloud-talk/channel-plugin-api.ts"},{"output":"configured-state.js","source":"extensions/nextcloud-talk/configured-state.ts"},{"output":"doctor-contract-api.js","source":"extensions/nextcloud-talk/doctor-contract-api.ts"},{"output":"index.js","source":"extensions/nextcloud-talk/index.ts"},{"output":"runtime-api.js","source":"extensions/nextcloud-talk/runtime-api.ts"},{"output":"secret-contract-api.js","source":"extensions/nextcloud-talk/secret-contract-api.ts"},{"output":"setup-entry.js","source":"extensions/nextcloud-talk/setup-entry.ts"}],"chunks":[{"output":".setup/api-BvrRSilb.mjs","sha256":"b25f39344c117b809520b3961b58f661adee93617654525cf980397c3567f61c","facadeSource":"extensions/nextcloud-talk/api.ts","sources":[]},{"output":".setup/channel-BA1-OoqO.mjs","sha256":"7332d213f8ca1e37bfa7a913f295bbef288630ddb9739c5f4032aa558c2e4057","facadeSource":null,"sources":["extensions/nextcloud-talk/src/accounts.ts","extensions/nextcloud-talk/src/api-credentials.ts","extensions/nextcloud-talk/src/bot-preflight.ts","extensions/nextcloud-talk/src/channel.ts","extensions/nextcloud-talk/src/config-schema.ts","extensions/nextcloud-talk/src/doctor.ts","extensions/nextcloud-talk/src/guarded-response.ts","extensions/nextcloud-talk/src/inbound-media.ts","extensions/nextcloud-talk/src/inbound.ts","extensions/nextcloud-talk/src/message-actions.ts","extensions/nextcloud-talk/src/monitor.ts","extensions/nextcloud-talk/src/normalize.ts","extensions/nextcloud-talk/src/policy.ts","extensions/nextcloud-talk/src/replay-migration-contract.ts","extensions/nextcloud-talk/src/room-info.ts","extensions/nextcloud-talk/src/send.ts","extensions/nextcloud-talk/src/setup-core.ts","extensions/nextcloud-talk/src/setup-surface.ts","extensions/nextcloud-talk/src/signature.ts","extensions/nextcloud-talk/src/voice-media.ts","extensions/nextcloud-talk/src/webdav.ts","extensions/nextcloud-talk/src/webhook-route.ts","extensions/nextcloud-talk/src/webhook-spool-state.ts","extensions/nextcloud-talk/src/webhook-spool.ts","packages/normalization-core/src/string-coerce.ts","src/gateway/gateway-http-route-contracts.ts","src/gateway/security-path.ts","src/gateway/server/plugins-http/path-context.ts","src/plugins/http-path-prefix.ts"]},{"output":".setup/doctor-contract-CkWQa5uZ.mjs","sha256":"b580887eb445ab10c67ee1a057982cd3be79d68e2c3440b3f2a46f2a8852c55b","facadeSource":null,"sources":["extensions/nextcloud-talk/src/doctor-contract.ts","packages/normalization-core/src/record-coerce.ts","src/config/channel-config-normalization.ts","src/plugin-sdk/legacy-webhook-listener-migration.ts"]},{"output":".setup/outbound-media-CpFe1Xgz.mjs","sha256":"bef81da85203f92dc6478aa3f00d11112e3f8aad10191dbf0a0678c07049ab61","facadeSource":"extensions/nextcloud-talk/src/outbound-media.ts","sources":["extensions/nextcloud-talk/src/outbound-media.ts"]},{"output":".setup/reply-BEkv387l.mjs","sha256":"e2c5093c05fcdbbe57a1693ea81de165c8280573ad3706f244dbd152dcd895ca","facadeSource":"extensions/nextcloud-talk/src/reply.ts","sources":["extensions/nextcloud-talk/src/reply.ts"]},{"output":".setup/runtime-api-CGy_KpdV.mjs","sha256":"344accb3739f831215489e33d0ca4dbaa5062fad8a0c98b7e356ee2bd0bb8228","facadeSource":null,"sources":["extensions/nextcloud-talk/src/runtime.ts"]},{"output":".setup/secret-contract-api-QMihLdr1.mjs","sha256":"0a2531895db3b16212c29ea87314c04021173a1bde49b58fbfd29fed181b4f15","facadeSource":"extensions/nextcloud-talk/secret-contract-api.ts","sources":[]},{"output":".setup/secret-contract-yjCLewtg.mjs","sha256":"183e7de729d242a63a7b607f3d353a5712f19eaea4ca24525cd96cc93bb63ffc","facadeSource":null,"sources":["extensions/nextcloud-talk/src/secret-contract.ts"]},{"output":"api.js","sha256":"e6a136ec30af9d685b3b1724ac335bc48534867c9c553e6a04f47d1ae22444d8","facadeSource":"extensions/nextcloud-talk/api.ts","sources":[]},{"output":"channel-plugin-api.js","sha256":"e6a136ec30af9d685b3b1724ac335bc48534867c9c553e6a04f47d1ae22444d8","facadeSource":"extensions/nextcloud-talk/channel-plugin-api.ts","sources":[]},{"output":"configured-state.js","sha256":"a45a34efe4339d78b7fcc92b8d09f8ad60d19c4a4e3a9754104c7f658be278d0","facadeSource":"extensions/nextcloud-talk/configured-state.ts","sources":["extensions/nextcloud-talk/configured-state.ts"]},{"output":"doctor-contract-api.js","sha256":"71237fb5c510be1302851b9fb7b264dd4e0d0095be206e50ffce4b5890ace54f","facadeSource":"extensions/nextcloud-talk/doctor-contract-api.ts","sources":[]},{"output":"index.js","sha256":"16bcc875626f7dd3bc4c1195210f856deaa9c3757abe5cea2a1d90cb2877cd22","facadeSource":"extensions/nextcloud-talk/index.ts","sources":["extensions/nextcloud-talk/index.ts"]},{"output":"runtime-api.js","sha256":"9306402515a553c1fe195fc8be8d6436a41abca338ae6cd4254434422e6f4cb3","facadeSource":"extensions/nextcloud-talk/runtime-api.ts","sources":[]},{"output":"secret-contract-api.js","sha256":"34c4d2c917c364f14b73bb8f51db22a8f24d047246358f543ab3aa0abfa78202","facadeSource":"extensions/nextcloud-talk/secret-contract-api.ts","sources":[]},{"output":"setup-entry.js","sha256":"7dba8b8fb26185b57bcabe7aab548d7e956deb37c46142110413ff4cab7cf80a","facadeSource":"extensions/nextcloud-talk/setup-entry.ts","sources":["extensions/nextcloud-talk/setup-entry.ts"]}],"unrenderedSources":["extensions/nextcloud-talk/api.ts","extensions/nextcloud-talk/channel-plugin-api.ts","extensions/nextcloud-talk/config-doctor-api.ts","extensions/nextcloud-talk/doctor-contract-api.ts","extensions/nextcloud-talk/runtime-api.ts","extensions/nextcloud-talk/secret-contract-api.ts"]}

package/dist/api.js

@@ -1 +1 @@
-export { t as nextcloudTalkPlugin } from "./.setup/channel-B8-CvvK1.mjs";
+export { t as nextcloudTalkPlugin } from "./.setup/channel-BA1-OoqO.mjs";

package/dist/channel-plugin-api.js

@@ -1 +1 @@
-export { t as nextcloudTalkPlugin } from "./.setup/channel-B8-CvvK1.mjs";
+export { t as nextcloudTalkPlugin } from "./.setup/channel-BA1-OoqO.mjs";

package/dist/configured-state.js

@@ -1,12 +1,9 @@
 import { DEFAULT_ACCOUNT_ID, createAccountListHelpers, hasConfiguredAccountValue, normalizeAccountId } from "openclaw/plugin-sdk/account-core";
-//#region extensions/nextcloud-talk/configured-state.ts
+// extensions/nextcloud-talk/configured-state.ts
 const { listAccountIds: listNextcloudTalkAccountIds, resolveDefaultAccountId: resolveDefaultNextcloudTalkAccountId, resolveAccountConfig: mergeNextcloudTalkAccountConfig } = createAccountListHelpers("nextcloud-talk", {
 	normalizeAccountId,
 	omitKeys: ["defaultAccount"],
-	hasImplicitDefaultAccount: (cfg) => {
-		const channel = cfg.channels?.["nextcloud-talk"];
-		return Boolean(channel?.baseUrl?.trim() && (hasConfiguredAccountValue(channel.botSecret) || channel.botSecretFile?.trim() || process.env.NEXTCLOUD_TALK_BOT_SECRET?.trim()));
-	}
+	hasImplicitDefaultAccount: (cfg) => hasConfiguredNextcloudAccount(cfg.channels?.["nextcloud-talk"], process.env)
 });
 function hasConfiguredNextcloudAccount(account, env) {
 	return Boolean(account?.baseUrl?.trim() && (hasConfiguredAccountValue(account.botSecret) || hasConfiguredAccountValue(account.botSecretFile) || hasConfiguredAccountValue(env.NEXTCLOUD_TALK_BOT_SECRET)));
@@ -20,5 +17,4 @@ function hasConfiguredNextcloudTalkChannelState(params) {
 	}
 	return Object.entries(channel?.accounts ?? {}).some(([accountId, account]) => accountId !== DEFAULT_ACCOUNT_ID && account.enabled !== false && hasConfiguredNextcloudAccount(mergeNextcloudTalkAccountConfig(params.cfg, accountId), {}));
 }
-//#endregion
-export { hasConfiguredNextcloudTalkChannelState, listNextcloudTalkAccountIds, mergeNextcloudTalkAccountConfig, resolveDefaultNextcloudTalkAccountId };
+export { hasConfiguredNextcloudAccount, hasConfiguredNextcloudTalkChannelState, listNextcloudTalkAccountIds, mergeNextcloudTalkAccountConfig, resolveDefaultNextcloudTalkAccountId };

package/dist/doctor-contract-api.js

@@ -1 +1 @@
-export { t as historicalWebhookListener, n as legacyConfigRules, r as normalizeCompatibilityConfig, i as normalizeHistoricalWebhookConfig } from "./.setup/doctor-contract-DwH950tH.mjs";
+export { t as historicalWebhookListener, n as legacyConfigRules, r as normalizeCompatibilityConfig, i as normalizeHistoricalWebhookConfig } from "./.setup/doctor-contract-CkWQa5uZ.mjs";

package/dist/index.js

@@ -1,5 +1,5 @@
 import { defineBundledChannelEntry } from "openclaw/plugin-sdk/channel-entry-contract";
-//#region extensions/nextcloud-talk/index.ts
+// extensions/nextcloud-talk/index.ts
 var nextcloud_talk_default = defineBundledChannelEntry({
 	id: "nextcloud-talk",
 	name: "Nextcloud Talk",
@@ -18,5 +18,4 @@ var nextcloud_talk_default = defineBundledChannelEntry({
 		exportName: "setNextcloudTalkRuntime"
 	}
 });
-//#endregion
 export { nextcloud_talk_default as default };

package/dist/runtime-api.js

@@ -1 +1 @@
-export { t as GROUP_POLICY_BLOCKED_LABEL, n as createChannelPairingController, r as deliverFormattedTextWithAttachments, i as fetchWithSsrFGuard, a as logInboundDrop, o as resolveAllowlistProviderRuntimeGroupPolicy, s as resolveDefaultGroupPolicy, d as setNextcloudTalkRuntime, c as warnMissingProviderGroupPolicyFallbackOnce } from "./.setup/runtime-api-DVkVOUSo.mjs";
+export { t as GROUP_POLICY_BLOCKED_LABEL, n as createChannelPairingController, r as fetchWithSsrFGuard, i as logInboundDrop, a as resolveAllowlistProviderRuntimeGroupPolicy, o as resolveDefaultGroupPolicy, u as setNextcloudTalkRuntime, s as warnMissingProviderGroupPolicyFallbackOnce } from "./.setup/runtime-api-CGy_KpdV.mjs";

package/dist/secret-contract-api.js

@@ -1 +1 @@
-export { t as channelSecrets, n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./.setup/secret-contract-Bvm0PmP3.mjs";
+export { t as channelSecrets, n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./.setup/secret-contract-yjCLewtg.mjs";

package/dist/setup-entry.js

@@ -1,16 +1,15 @@
 import { defineBundledChannelSetupEntry } from "openclaw/plugin-sdk/channel-entry-contract";
 import { fileURLToPath } from "node:url";
-//#region extensions/nextcloud-talk/setup-entry.ts
+// extensions/nextcloud-talk/setup-entry.ts
 var setup_entry_default = defineBundledChannelSetupEntry({
 	importMetaUrl: import.meta.url,
 	plugin: {
-		specifier: fileURLToPath(new URL(".setup/api-BmNQoi-o.mjs", import.meta.url).href),
+		specifier: fileURLToPath(new URL(".setup/api-BvrRSilb.mjs", import.meta.url).href),
 		exportName: "nextcloudTalkPlugin"
 	},
 	secrets: {
-		specifier: fileURLToPath(new URL(".setup/secret-contract-api-DoyAH9bS.mjs", import.meta.url).href),
+		specifier: fileURLToPath(new URL(".setup/secret-contract-api-QMihLdr1.mjs", import.meta.url).href),
 		exportName: "channelSecrets"
 	}
 });
-//#endregion
 export { setup_entry_default as default };