@openclaw/nextcloud-talk 2026.5.2 → 2026.5.3-beta.2

package/dist/channel-plugin-api.js

@@ -0,0 +1,2 @@
+import { t as nextcloudTalkPlugin } from "./channel-BVVRsVr5.js";
+export { nextcloudTalkPlugin };

package/dist/contract-api.js

@@ -0,0 +1,2 @@
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-bczDw2-2.js";
+export { collectRuntimeConfigAssignments, secretTargetRegistryEntries };

package/dist/doctor-contract-CYlB-4Bf.js

@@ -0,0 +1,7 @@
+import { createLegacyPrivateNetworkDoctorContract } from "openclaw/plugin-sdk/ssrf-runtime";
+//#region extensions/nextcloud-talk/src/doctor-contract.ts
+const contract = createLegacyPrivateNetworkDoctorContract({ channelKey: "nextcloud-talk" });
+const legacyConfigRules = contract.legacyConfigRules;
+const normalizeCompatibilityConfig = contract.normalizeCompatibilityConfig;
+//#endregion
+export { normalizeCompatibilityConfig as n, legacyConfigRules as t };

package/dist/doctor-contract-api.js

@@ -0,0 +1,2 @@
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-CYlB-4Bf.js";
+export { legacyConfigRules, normalizeCompatibilityConfig };

package/dist/index.js

@@ -0,0 +1,22 @@
+import { defineBundledChannelEntry } from "openclaw/plugin-sdk/channel-entry-contract";
+//#region extensions/nextcloud-talk/index.ts
+var nextcloud_talk_default = defineBundledChannelEntry({
+	id: "nextcloud-talk",
+	name: "Nextcloud Talk",
+	description: "Nextcloud Talk channel plugin",
+	importMetaUrl: import.meta.url,
+	plugin: {
+		specifier: "./channel-plugin-api.js",
+		exportName: "nextcloudTalkPlugin"
+	},
+	secrets: {
+		specifier: "./secret-contract-api.js",
+		exportName: "channelSecrets"
+	},
+	runtime: {
+		specifier: "./runtime-api.js",
+		exportName: "setNextcloudTalkRuntime"
+	}
+});
+//#endregion
+export { nextcloud_talk_default as default };

package/dist/runtime-api-BcCzeRN9.js

@@ -0,0 +1,15 @@
+import { createChannelPairingController } from "openclaw/plugin-sdk/channel-pairing";
+import { readStoreAllowFromForDmPolicy, resolveDmGroupAccessWithCommandGate } from "openclaw/plugin-sdk/channel-policy";
+import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
+import { logInboundDrop } from "openclaw/plugin-sdk/channel-logging";
+import { GROUP_POLICY_BLOCKED_LABEL, resolveAllowlistProviderRuntimeGroupPolicy, resolveDefaultGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "openclaw/plugin-sdk/runtime-group-policy";
+import { dispatchInboundReplyWithBase } from "openclaw/plugin-sdk/inbound-reply-dispatch";
+import { deliverFormattedTextWithAttachments } from "openclaw/plugin-sdk/reply-payload";
+import { createPluginRuntimeStore } from "openclaw/plugin-sdk/runtime-store";
+//#region extensions/nextcloud-talk/src/runtime.ts
+const { setRuntime: setNextcloudTalkRuntime, getRuntime: getNextcloudTalkRuntime } = createPluginRuntimeStore({
+	pluginId: "nextcloud-talk",
+	errorMessage: "Nextcloud Talk runtime not initialized"
+});
+//#endregion
+export { fetchWithSsrFGuard as a, resolveAllowlistProviderRuntimeGroupPolicy as c, warnMissingProviderGroupPolicyFallbackOnce as d, getNextcloudTalkRuntime as f, dispatchInboundReplyWithBase as i, resolveDefaultGroupPolicy as l, createChannelPairingController as n, logInboundDrop as o, setNextcloudTalkRuntime as p, deliverFormattedTextWithAttachments as r, readStoreAllowFromForDmPolicy as s, GROUP_POLICY_BLOCKED_LABEL as t, resolveDmGroupAccessWithCommandGate as u };

package/dist/runtime-api.js

@@ -0,0 +1,2 @@
+import { a as fetchWithSsrFGuard, c as resolveAllowlistProviderRuntimeGroupPolicy, d as warnMissingProviderGroupPolicyFallbackOnce, i as dispatchInboundReplyWithBase, l as resolveDefaultGroupPolicy, n as createChannelPairingController, o as logInboundDrop, p as setNextcloudTalkRuntime, r as deliverFormattedTextWithAttachments, s as readStoreAllowFromForDmPolicy, t as GROUP_POLICY_BLOCKED_LABEL, u as resolveDmGroupAccessWithCommandGate } from "./runtime-api-BcCzeRN9.js";
+export { GROUP_POLICY_BLOCKED_LABEL, createChannelPairingController, deliverFormattedTextWithAttachments, dispatchInboundReplyWithBase, fetchWithSsrFGuard, logInboundDrop, readStoreAllowFromForDmPolicy, resolveAllowlistProviderRuntimeGroupPolicy, resolveDefaultGroupPolicy, resolveDmGroupAccessWithCommandGate, setNextcloudTalkRuntime, warnMissingProviderGroupPolicyFallbackOnce };

package/dist/secret-contract-api.js

@@ -0,0 +1,2 @@
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-bczDw2-2.js";
+export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };

package/dist/secret-contract-bczDw2-2.js

@@ -0,0 +1,86 @@
+import { collectConditionalChannelFieldAssignments, getChannelSurface, hasOwnProperty } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
+//#region extensions/nextcloud-talk/src/secret-contract.ts
+const secretTargetRegistryEntries = [
+	{
+		id: "channels.nextcloud-talk.accounts.*.apiPassword",
+		targetType: "channels.nextcloud-talk.accounts.*.apiPassword",
+		configFile: "openclaw.json",
+		pathPattern: "channels.nextcloud-talk.accounts.*.apiPassword",
+		secretShape: "secret_input",
+		expectedResolvedValue: "string",
+		includeInPlan: true,
+		includeInConfigure: true,
+		includeInAudit: true
+	},
+	{
+		id: "channels.nextcloud-talk.accounts.*.botSecret",
+		targetType: "channels.nextcloud-talk.accounts.*.botSecret",
+		configFile: "openclaw.json",
+		pathPattern: "channels.nextcloud-talk.accounts.*.botSecret",
+		secretShape: "secret_input",
+		expectedResolvedValue: "string",
+		includeInPlan: true,
+		includeInConfigure: true,
+		includeInAudit: true
+	},
+	{
+		id: "channels.nextcloud-talk.apiPassword",
+		targetType: "channels.nextcloud-talk.apiPassword",
+		configFile: "openclaw.json",
+		pathPattern: "channels.nextcloud-talk.apiPassword",
+		secretShape: "secret_input",
+		expectedResolvedValue: "string",
+		includeInPlan: true,
+		includeInConfigure: true,
+		includeInAudit: true
+	},
+	{
+		id: "channels.nextcloud-talk.botSecret",
+		targetType: "channels.nextcloud-talk.botSecret",
+		configFile: "openclaw.json",
+		pathPattern: "channels.nextcloud-talk.botSecret",
+		secretShape: "secret_input",
+		expectedResolvedValue: "string",
+		includeInPlan: true,
+		includeInConfigure: true,
+		includeInAudit: true
+	}
+];
+function collectRuntimeConfigAssignments(params) {
+	const resolved = getChannelSurface(params.config, "nextcloud-talk");
+	if (!resolved) return;
+	const { channel: nextcloudTalk, surface } = resolved;
+	const inheritsField = (field) => ({ account, enabled }) => enabled && !hasOwnProperty(account, field);
+	collectConditionalChannelFieldAssignments({
+		channelKey: "nextcloud-talk",
+		field: "botSecret",
+		channel: nextcloudTalk,
+		surface,
+		defaults: params.defaults,
+		context: params.context,
+		topLevelActiveWithoutAccounts: true,
+		topLevelInheritedAccountActive: inheritsField("botSecret"),
+		accountActive: ({ enabled }) => enabled,
+		topInactiveReason: "no enabled Nextcloud Talk surface inherits this top-level botSecret.",
+		accountInactiveReason: "Nextcloud Talk account is disabled."
+	});
+	collectConditionalChannelFieldAssignments({
+		channelKey: "nextcloud-talk",
+		field: "apiPassword",
+		channel: nextcloudTalk,
+		surface,
+		defaults: params.defaults,
+		context: params.context,
+		topLevelActiveWithoutAccounts: true,
+		topLevelInheritedAccountActive: inheritsField("apiPassword"),
+		accountActive: ({ enabled }) => enabled,
+		topInactiveReason: "no enabled Nextcloud Talk surface inherits this top-level apiPassword.",
+		accountInactiveReason: "Nextcloud Talk account is disabled."
+	});
+}
+const channelSecrets = {
+	secretTargetRegistryEntries,
+	collectRuntimeConfigAssignments
+};
+//#endregion
+export { collectRuntimeConfigAssignments as n, secretTargetRegistryEntries as r, channelSecrets as t };

package/dist/setup-entry.js

@@ -0,0 +1,15 @@
+import { defineBundledChannelSetupEntry } from "openclaw/plugin-sdk/channel-entry-contract";
+//#region extensions/nextcloud-talk/setup-entry.ts
+var setup_entry_default = defineBundledChannelSetupEntry({
+	importMetaUrl: import.meta.url,
+	plugin: {
+		specifier: "./api.js",
+		exportName: "nextcloudTalkPlugin"
+	},
+	secrets: {
+		specifier: "./secret-contract-api.js",
+		exportName: "channelSecrets"
+	}
+});
+//#endregion
+export { setup_entry_default as default };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/nextcloud-talk",
-  "version": "2026.5.2",
+  "version": "2026.5.3-beta.2",
   "description": "OpenClaw Nextcloud Talk channel plugin",
   "repository": {
     "type": "git",
@@ -15,7 +15,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.2"
+    "openclaw": ">=2026.5.3-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -47,14 +47,22 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.2"
+      "pluginApi": ">=2026.5.3-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.5.2"
+      "openclawVersion": "2026.5.3-beta.2"
     },
     "release": {
       "publishToClawHub": true,
       "publishToNpm": true
-    }
-  }
+    },
+    "runtimeExtensions": [
+      "./dist/index.js"
+    ],
+    "runtimeSetupEntry": "./dist/setup-entry.js"
+  },
+  "files": [
+    "dist/**",
+    "openclaw.plugin.json"
+  ]
 }

package/api.ts

@@ -1 +0,0 @@
-export { nextcloudTalkPlugin } from "./src/channel.js";

package/channel-plugin-api.ts

@@ -1 +0,0 @@
-export { nextcloudTalkPlugin } from "./src/channel.js";

package/contract-api.ts

@@ -1,4 +0,0 @@
-export {
-  collectRuntimeConfigAssignments,
-  secretTargetRegistryEntries,
-} from "./src/secret-contract.js";

package/doctor-contract-api.ts

@@ -1 +0,0 @@
-export { normalizeCompatibilityConfig, legacyConfigRules } from "./src/doctor-contract.js";

package/index.ts

@@ -1,20 +0,0 @@
-import { defineBundledChannelEntry } from "openclaw/plugin-sdk/channel-entry-contract";
-
-export default defineBundledChannelEntry({
-  id: "nextcloud-talk",
-  name: "Nextcloud Talk",
-  description: "Nextcloud Talk channel plugin",
-  importMetaUrl: import.meta.url,
-  plugin: {
-    specifier: "./channel-plugin-api.js",
-    exportName: "nextcloudTalkPlugin",
-  },
-  secrets: {
-    specifier: "./secret-contract-api.js",
-    exportName: "channelSecrets",
-  },
-  runtime: {
-    specifier: "./runtime-api.js",
-    exportName: "setNextcloudTalkRuntime",
-  },
-});

package/runtime-api.ts

@@ -1,33 +0,0 @@
-// Private runtime barrel for the bundled Nextcloud Talk extension.
-// Keep this barrel thin and aligned with the local extension surface.
-
-export type { AllowlistMatch } from "openclaw/plugin-sdk/allow-from";
-export type { ChannelGroupContext } from "openclaw/plugin-sdk/channel-contract";
-export { logInboundDrop } from "openclaw/plugin-sdk/channel-logging";
-export { createChannelPairingController } from "openclaw/plugin-sdk/channel-pairing";
-export {
-  readStoreAllowFromForDmPolicy,
-  resolveDmGroupAccessWithCommandGate,
-} from "openclaw/plugin-sdk/channel-policy";
-export type {
-  BlockStreamingCoalesceConfig,
-  DmConfig,
-  DmPolicy,
-  GroupPolicy,
-  GroupToolPolicyConfig,
-  OpenClawConfig,
-} from "openclaw/plugin-sdk/config-types";
-export {
-  GROUP_POLICY_BLOCKED_LABEL,
-  resolveAllowlistProviderRuntimeGroupPolicy,
-  resolveDefaultGroupPolicy,
-  warnMissingProviderGroupPolicyFallbackOnce,
-} from "openclaw/plugin-sdk/runtime-group-policy";
-export { dispatchInboundReplyWithBase } from "openclaw/plugin-sdk/inbound-reply-dispatch";
-export type { OutboundReplyPayload } from "openclaw/plugin-sdk/reply-payload";
-export { deliverFormattedTextWithAttachments } from "openclaw/plugin-sdk/reply-payload";
-export type { PluginRuntime } from "openclaw/plugin-sdk/runtime-store";
-export type { RuntimeEnv } from "openclaw/plugin-sdk/runtime";
-export type { SecretInput } from "openclaw/plugin-sdk/secret-input";
-export { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
-export { setNextcloudTalkRuntime } from "./src/runtime.js";

package/secret-contract-api.ts

@@ -1,5 +0,0 @@
-export {
-  channelSecrets,
-  collectRuntimeConfigAssignments,
-  secretTargetRegistryEntries,
-} from "./src/secret-contract.js";

package/setup-entry.ts

@@ -1,13 +0,0 @@
-import { defineBundledChannelSetupEntry } from "openclaw/plugin-sdk/channel-entry-contract";
-
-export default defineBundledChannelSetupEntry({
-  importMetaUrl: import.meta.url,
-  plugin: {
-    specifier: "./api.js",
-    exportName: "nextcloudTalkPlugin",
-  },
-  secrets: {
-    specifier: "./secret-contract-api.js",
-    exportName: "channelSecrets",
-  },
-});

package/src/accounts.ts

@@ -1,139 +0,0 @@
-import {
-  createAccountListHelpers,
-  DEFAULT_ACCOUNT_ID,
-  normalizeAccountId,
-  resolveAccountWithDefaultFallback,
-  resolveMergedAccountConfig,
-} from "openclaw/plugin-sdk/account-core";
-import { tryReadSecretFileSync } from "openclaw/plugin-sdk/secret-file-runtime";
-import {
-  normalizeLowercaseStringOrEmpty,
-  normalizeOptionalString,
-} from "openclaw/plugin-sdk/text-runtime";
-import { normalizeResolvedSecretInputString } from "./secret-input.js";
-import type { CoreConfig, NextcloudTalkAccountConfig } from "./types.js";
-
-function isTruthyEnvValue(value?: string): boolean {
-  const normalized = normalizeLowercaseStringOrEmpty(value);
-  return normalized === "true" || normalized === "1" || normalized === "yes" || normalized === "on";
-}
-
-const debugAccounts = (...args: unknown[]) => {
-  if (isTruthyEnvValue(process.env.OPENCLAW_DEBUG_NEXTCLOUD_TALK_ACCOUNTS)) {
-    console.warn("[nextcloud-talk:accounts]", ...args);
-  }
-};
-
-export type ResolvedNextcloudTalkAccount = {
-  accountId: string;
-  enabled: boolean;
-  name?: string;
-  baseUrl: string;
-  secret: string;
-  secretSource: "env" | "secretFile" | "config" | "none";
-  config: NextcloudTalkAccountConfig;
-};
-
-const {
-  listAccountIds: listNextcloudTalkAccountIdsInternal,
-  resolveDefaultAccountId: resolveDefaultNextcloudTalkAccountId,
-} = createAccountListHelpers("nextcloud-talk", {
-  normalizeAccountId,
-});
-export { resolveDefaultNextcloudTalkAccountId };
-
-export function listNextcloudTalkAccountIds(cfg: CoreConfig): string[] {
-  const ids = listNextcloudTalkAccountIdsInternal(cfg);
-  debugAccounts("listNextcloudTalkAccountIds", ids);
-  return ids;
-}
-
-function mergeNextcloudTalkAccountConfig(
-  cfg: CoreConfig,
-  accountId: string,
-): NextcloudTalkAccountConfig {
-  return resolveMergedAccountConfig<NextcloudTalkAccountConfig>({
-    channelConfig: cfg.channels?.["nextcloud-talk"] as NextcloudTalkAccountConfig | undefined,
-    accounts: cfg.channels?.["nextcloud-talk"]?.accounts as
-      | Record<string, Partial<NextcloudTalkAccountConfig>>
-      | undefined,
-    accountId,
-    omitKeys: ["defaultAccount"],
-    normalizeAccountId,
-  });
-}
-
-function resolveNextcloudTalkSecret(
-  cfg: CoreConfig,
-  opts: { accountId?: string },
-): { secret: string; source: ResolvedNextcloudTalkAccount["secretSource"] } {
-  const resolvedAccountId = opts.accountId ?? resolveDefaultNextcloudTalkAccountId(cfg);
-  const merged = mergeNextcloudTalkAccountConfig(cfg, resolvedAccountId);
-
-  const envSecret = normalizeOptionalString(process.env.NEXTCLOUD_TALK_BOT_SECRET);
-  if (envSecret && resolvedAccountId === DEFAULT_ACCOUNT_ID) {
-    return { secret: envSecret, source: "env" };
-  }
-
-  if (merged.botSecretFile) {
-    const fileSecret = tryReadSecretFileSync(
-      merged.botSecretFile,
-      "Nextcloud Talk bot secret file",
-      { rejectSymlink: true },
-    );
-    if (fileSecret) {
-      return { secret: fileSecret, source: "secretFile" };
-    }
-  }
-
-  const inlineSecret = normalizeResolvedSecretInputString({
-    value: merged.botSecret,
-    path: `channels.nextcloud-talk.accounts.${resolvedAccountId}.botSecret`,
-  });
-  if (inlineSecret) {
-    return { secret: inlineSecret, source: "config" };
-  }
-
-  return { secret: "", source: "none" };
-}
-
-export function resolveNextcloudTalkAccount(params: {
-  cfg: CoreConfig;
-  accountId?: string | null;
-}): ResolvedNextcloudTalkAccount {
-  const baseEnabled = params.cfg.channels?.["nextcloud-talk"]?.enabled !== false;
-  const resolvedAccountId = params.accountId ?? resolveDefaultNextcloudTalkAccountId(params.cfg);
-
-  const resolve = (accountId: string) => {
-    const merged = mergeNextcloudTalkAccountConfig(params.cfg, accountId);
-    const accountEnabled = merged.enabled !== false;
-    const enabled = baseEnabled && accountEnabled;
-    const secretResolution = resolveNextcloudTalkSecret(params.cfg, { accountId });
-    const baseUrl = merged.baseUrl?.trim()?.replace(/\/$/, "") ?? "";
-
-    debugAccounts("resolve", {
-      accountId,
-      enabled,
-      secretSource: secretResolution.source,
-      baseUrl: baseUrl ? "[set]" : "[missing]",
-    });
-
-    return {
-      accountId,
-      enabled,
-      name: normalizeOptionalString(merged.name),
-      baseUrl,
-      secret: secretResolution.secret,
-      secretSource: secretResolution.source,
-      config: merged,
-    } satisfies ResolvedNextcloudTalkAccount;
-  };
-
-  return resolveAccountWithDefaultFallback({
-    accountId: resolvedAccountId,
-    normalizeAccountId,
-    resolvePrimary: resolve,
-    hasCredential: (account) => account.secretSource !== "none",
-    resolveDefaultAccountId: () => resolveDefaultNextcloudTalkAccountId(params.cfg),
-  });
-}

package/src/approval-auth.test.ts

@@ -1,17 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { nextcloudTalkApprovalAuth } from "./approval-auth.js";
-
-describe("nextcloudTalkApprovalAuth", () => {
-  it("matches Nextcloud Talk actor ids case-insensitively", () => {
-    const cfg = { channels: { "nextcloud-talk": { allowFrom: ["Owner"] } } };
-
-    expect(
-      nextcloudTalkApprovalAuth.authorizeActorAction({
-        cfg,
-        senderId: "owner",
-        action: "approve",
-        approvalKind: "exec",
-      }),
-    ).toEqual({ authorized: true });
-  });
-});

package/src/approval-auth.ts

@@ -1,27 +0,0 @@
-import {
-  createResolvedApproverActionAuthAdapter,
-  resolveApprovalApprovers,
-} from "openclaw/plugin-sdk/approval-auth-runtime";
-import { normalizeOptionalLowercaseString } from "openclaw/plugin-sdk/text-runtime";
-import { resolveNextcloudTalkAccount } from "./accounts.js";
-import type { CoreConfig } from "./types.js";
-
-function normalizeNextcloudTalkApproverId(value: string | number): string | undefined {
-  return normalizeOptionalLowercaseString(
-    String(value)
-      .trim()
-      .replace(/^(nextcloud-talk|nc-talk|nc):/i, ""),
-  );
-}
-
-export const nextcloudTalkApprovalAuth = createResolvedApproverActionAuthAdapter({
-  channelLabel: "Nextcloud Talk",
-  resolveApprovers: ({ cfg, accountId }) => {
-    const account = resolveNextcloudTalkAccount({ cfg: cfg as CoreConfig, accountId });
-    return resolveApprovalApprovers({
-      allowFrom: account.config.allowFrom,
-      normalizeApprover: normalizeNextcloudTalkApproverId,
-    });
-  },
-  normalizeSenderId: (value) => normalizeNextcloudTalkApproverId(value),
-});

package/src/channel-api.ts

@@ -1,5 +0,0 @@
-export type { ChannelPlugin } from "openclaw/plugin-sdk/channel-plugin-common";
-export type { OpenClawConfig } from "openclaw/plugin-sdk/config-types";
-export { clearAccountEntryFields } from "openclaw/plugin-sdk/channel-plugin-common";
-export { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
-export { buildChannelConfigSchema } from "openclaw/plugin-sdk/channel-config-schema";

package/src/channel.adapters.ts

@@ -1,52 +0,0 @@
-import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";
-import {
-  adaptScopedAccountAccessor,
-  createScopedChannelConfigAdapter,
-  createScopedDmSecurityResolver,
-} from "openclaw/plugin-sdk/channel-config-helpers";
-import { createPairingPrefixStripper } from "openclaw/plugin-sdk/channel-pairing";
-import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/text-runtime";
-import {
-  listNextcloudTalkAccountIds,
-  resolveDefaultNextcloudTalkAccountId,
-  resolveNextcloudTalkAccount,
-  type ResolvedNextcloudTalkAccount,
-} from "./accounts.js";
-import type { CoreConfig } from "./types.js";
-
-export const nextcloudTalkConfigAdapter = createScopedChannelConfigAdapter<
-  ResolvedNextcloudTalkAccount,
-  ResolvedNextcloudTalkAccount,
-  CoreConfig
->({
-  sectionKey: "nextcloud-talk",
-  listAccountIds: listNextcloudTalkAccountIds,
-  resolveAccount: adaptScopedAccountAccessor(resolveNextcloudTalkAccount),
-  defaultAccountId: resolveDefaultNextcloudTalkAccountId,
-  clearBaseFields: ["botSecret", "botSecretFile", "baseUrl", "name"],
-  resolveAllowFrom: (account) => account.config.allowFrom,
-  formatAllowFrom: (allowFrom) =>
-    formatAllowFromLowercase({
-      allowFrom,
-      stripPrefixRe: /^(nextcloud-talk|nc-talk|nc):/i,
-    }),
-});
-
-export const nextcloudTalkSecurityAdapter = {
-  resolveDmPolicy: createScopedDmSecurityResolver<ResolvedNextcloudTalkAccount>({
-    channelKey: "nextcloud-talk",
-    resolvePolicy: (account) => account.config.dmPolicy,
-    resolveAllowFrom: (account) => account.config.allowFrom,
-    policyPathSuffix: "dmPolicy",
-    normalizeEntry: (raw) =>
-      normalizeLowercaseStringOrEmpty(raw.trim().replace(/^(nextcloud-talk|nc-talk|nc):/i, "")),
-  }),
-};
-
-export const nextcloudTalkPairingTextAdapter = {
-  idLabel: "nextcloudUserId",
-  message: "OpenClaw: your access has been approved.",
-  normalizeAllowEntry: createPairingPrefixStripper(/^(nextcloud-talk|nc-talk|nc):/i, (entry) =>
-    normalizeLowercaseStringOrEmpty(entry),
-  ),
-};

package/src/channel.core.test.ts

@@ -1,75 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-  nextcloudTalkConfigAdapter,
-  nextcloudTalkPairingTextAdapter,
-  nextcloudTalkSecurityAdapter,
-} from "./channel.adapters.js";
-import { NextcloudTalkConfigSchema } from "./config-schema.js";
-import type { CoreConfig } from "./types.js";
-
-describe("nextcloud talk channel core", () => {
-  it("accepts SecretRef botSecret and apiPassword at top-level", () => {
-    const result = NextcloudTalkConfigSchema.safeParse({
-      baseUrl: "https://cloud.example.com",
-      botSecret: { source: "env", provider: "default", id: "NEXTCLOUD_TALK_BOT_SECRET" },
-      apiUser: "bot",
-      apiPassword: { source: "env", provider: "default", id: "NEXTCLOUD_TALK_API_PASSWORD" },
-    });
-    expect(result.success).toBe(true);
-  });
-
-  it("accepts SecretRef botSecret and apiPassword on account", () => {
-    const result = NextcloudTalkConfigSchema.safeParse({
-      accounts: {
-        main: {
-          baseUrl: "https://cloud.example.com",
-          botSecret: {
-            source: "env",
-            provider: "default",
-            id: "NEXTCLOUD_TALK_MAIN_BOT_SECRET",
-          },
-          apiUser: "bot",
-          apiPassword: {
-            source: "env",
-            provider: "default",
-            id: "NEXTCLOUD_TALK_MAIN_API_PASSWORD",
-          },
-        },
-      },
-    });
-    expect(result.success).toBe(true);
-  });
-
-  it("normalizes trimmed DM allowlist prefixes to lowercase ids", () => {
-    const resolveDmPolicy = nextcloudTalkSecurityAdapter.resolveDmPolicy;
-    if (!resolveDmPolicy) {
-      throw new Error("resolveDmPolicy unavailable");
-    }
-
-    const cfg = {
-      channels: {
-        "nextcloud-talk": {
-          baseUrl: "https://cloud.example.com",
-          botSecret: "secret",
-          dmPolicy: "allowlist",
-          allowFrom: ["  nc:User-Id  "],
-        },
-      },
-    } as CoreConfig;
-
-    const result = resolveDmPolicy({
-      cfg,
-      account: nextcloudTalkConfigAdapter.resolveAccount(cfg, "default"),
-    });
-    if (!result) {
-      throw new Error("nextcloud-talk resolveDmPolicy returned null");
-    }
-
-    expect(result.policy).toBe("allowlist");
-    expect(result.allowFrom).toEqual(["  nc:User-Id  "]);
-    expect(result.normalizeEntry?.("  nc:User-Id  ")).toBe("user-id");
-    expect(nextcloudTalkPairingTextAdapter.normalizeAllowEntry("  nextcloud-talk:User-Id  ")).toBe(
-      "user-id",
-    );
-  });
-});