@openclaw/nextcloud-talk 2026.7.1 → 2026.7.2-beta.1

package/dist/api.js

@@ -1,2 +1,2 @@
-import { t as nextcloudTalkPlugin } from "./channel-BMKRTDSP.js";
+import { t as nextcloudTalkPlugin } from "./channel-CYse6FwT.js";
 export { nextcloudTalkPlugin };

package/dist/{channel-BMKRTDSP.js → channel-CYse6FwT.js}

@@ -1,26 +1,27 @@
 import { a as fetchWithSsrFGuard, c as resolveDefaultGroupPolicy, i as deliverFormattedTextWithAttachments, l as warnMissingProviderGroupPolicyFallbackOnce, o as logInboundDrop, r as createChannelPairingController, s as resolveAllowlistProviderRuntimeGroupPolicy, t as GROUP_POLICY_BLOCKED_LABEL, u as getNextcloudTalkRuntime } from "./runtime-api-BKsxTw4J.js";
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-BY7I5-v9.js";
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-CsCJ-vOP.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-fNhK1wag.js";
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-DGgvfVqm.js";
 import { describeWebhookAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { createChatChannelPlugin } from "openclaw/plugin-sdk/channel-core";
 import { createLoggedPairingApprovalNotifier, createPairingPrefixStripper } from "openclaw/plugin-sdk/channel-pairing";
-import { createAllowlistProviderRouteAllowlistWarningCollector } from "openclaw/plugin-sdk/channel-policy";
+import { createAllowlistProviderRouteAllowlistWarningCollector, resolveScopeRequireMention, resolveScopeToolsPolicy } from "openclaw/plugin-sdk/channel-policy";
 import { buildWebhookChannelStatusSummary, createComputedAccountStatusAdapter, createDefaultChannelRuntimeState } from "openclaw/plugin-sdk/status-helpers";
+import { convertMarkdownTables, sanitizeAssistantVisibleText } from "openclaw/plugin-sdk/text-chunking";
+import { createChannelApprovalAuth } from "openclaw/plugin-sdk/approval-auth-runtime";
+import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { DEFAULT_ACCOUNT_ID, createAccountListHelpers, hasConfiguredAccountValue, normalizeAccountId, resolveAccountWithDefaultFallback, resolveMergedAccountConfig } from "openclaw/plugin-sdk/account-core";
 import { tryReadSecretFileSync } from "openclaw/plugin-sdk/secret-file-runtime";
-import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { buildSecretInputSchema, hasConfiguredSecretInput, normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
-import { createResolvedApproverActionAuthAdapter, resolveApprovalApprovers } from "openclaw/plugin-sdk/approval-auth-runtime";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { parseStrictNonNegativeInteger, parseStrictPositiveInteger } from "openclaw/plugin-sdk/number-runtime";
 import { readProviderJsonResponse, readResponseTextLimited } from "openclaw/plugin-sdk/provider-http";
-import { createAccountStatusSink, createMessageReceiptFromOutboundResults, defineChannelMessageAdapter } from "openclaw/plugin-sdk/channel-outbound";
+import { createAccountStatusSink, createMessageReceiptFromOutboundResults, defineChannelMessageAdapter, resolveChannelStreamingBlockEnabled } from "openclaw/plugin-sdk/channel-outbound";
 import { ssrfPolicyFromPrivateNetworkOptIn, ssrfPolicyFromPrivateNetworkOptIn as ssrfPolicyFromPrivateNetworkOptIn$1 } from "openclaw/plugin-sdk/ssrf-runtime";
 import { readFileSync } from "node:fs";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
-import { convertMarkdownTables } from "openclaw/plugin-sdk/text-chunking";
-import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+import { createHmac, randomBytes } from "node:crypto";
+import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
 import { clearAccountEntryFields } from "openclaw/plugin-sdk/channel-plugin-common";
 import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$2 } from "openclaw/plugin-sdk/account-id";
 import { DmPolicySchema, GroupPolicySchema, MarkdownConfigSchema, ReplyRuntimeConfigSchemaShape, ToolPolicySchema, buildChannelConfigSchema, requireOpenAllowFrom } from "openclaw/plugin-sdk/channel-config-schema";
@@ -35,8 +36,9 @@ import { createClaimableDedupe, migratePersistentDedupeLegacyJsonFile } from "op
 import { resolveStateDir } from "openclaw/plugin-sdk/state-paths";
 import { channelIngressRoutes, resolveStableChannelMessageIngress } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import { resolveInboundRouteEnvelopeBuilderWithRuntime } from "openclaw/plugin-sdk/inbound-envelope";
-import { buildChannelKeyCandidates, normalizeChannelSlug, resolveChannelEntryMatchWithFallback, resolveNestedAllowlistDecision } from "openclaw/plugin-sdk/channel-targets";
+import { buildChannelKeyCandidates, normalizeChannelSlug, resolveChannelEntryMatchWithFallback } from "openclaw/plugin-sdk/channel-targets";
 import { pruneMapToMaxSize } from "openclaw/plugin-sdk/collection-runtime";
+import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { createServer } from "node:http";
 import { WEBHOOK_RATE_LIMIT_DEFAULTS, createAuthRateLimiter, isRequestBodyLimitError, readRequestBodyWithLimit, requestBodyErrorToText } from "openclaw/plugin-sdk/webhook-ingress";
 import { jsonResult, readStringParam, resolveReactionMessageId } from "openclaw/plugin-sdk/channel-actions";
@@ -139,19 +141,16 @@ function resolveNextcloudTalkAccount(params) {
 function normalizeNextcloudTalkApproverId(value) {
 	return normalizeOptionalLowercaseString(String(value).trim().replace(/^(nextcloud-talk|nc-talk|nc):/i, ""));
 }
-const nextcloudTalkApprovalAuth = createResolvedApproverActionAuthAdapter({
+const nextcloudTalkApprovalAuth = createChannelApprovalAuth({
 	channelLabel: "Nextcloud Talk",
-	resolveApprovers: ({ cfg, accountId }) => {
-		return resolveApprovalApprovers({
-			allowFrom: resolveNextcloudTalkAccount({
-				cfg,
-				accountId
-			}).config.allowFrom,
-			normalizeApprover: normalizeNextcloudTalkApproverId
-		});
+	resolveInputs: ({ cfg, accountId }) => {
+		return { allowFrom: resolveNextcloudTalkAccount({
+			cfg,
+			accountId
+		}).config.allowFrom };
 	},
-	normalizeSenderId: (value) => normalizeNextcloudTalkApproverId(value)
-});
+	normalizeApprover: normalizeNextcloudTalkApproverId
+}).approvalAuth;
 //#endregion
 //#region extensions/nextcloud-talk/src/api-credentials.ts
 function resolveNextcloudTalkApiCredentials(params) {
@@ -188,16 +187,7 @@ const BACKEND_HEADER = "x-nextcloud-talk-backend";
 function verifyNextcloudTalkSignature(params) {
 	const { signature, random, body, secret } = params;
 	if (!signature || !random || !secret) return false;
-	const expected = createHmac("sha256", secret).update(random + body).digest("hex");
-	const expectedBuf = Buffer.from(expected, "utf8");
-	const signatureBuf = Buffer.from(signature, "utf8");
-	const maxLen = Math.max(expectedBuf.length, signatureBuf.length);
-	const paddedExpected = Buffer.alloc(maxLen);
-	const paddedSignature = Buffer.alloc(maxLen);
-	expectedBuf.copy(paddedExpected);
-	signatureBuf.copy(paddedSignature);
-	const timingResult = timingSafeEqual(paddedExpected, paddedSignature);
-	return expectedBuf.length === signatureBuf.length && timingResult;
+	return safeEqualSecret(signature, createHmac("sha256", secret).update(random + body).digest("hex"));
 }
 /**
 * Extract webhook headers from an incoming request.
@@ -592,12 +582,11 @@ function resolveNextcloudTalkAllowlistMatch(params) {
 		matchSource: "wildcard"
 	};
 	const senderId = normalizeNextcloudTalkAllowEntry(params.senderId);
-	if (allowFrom.includes(senderId)) return {
+	return allowFrom.includes(senderId) ? {
 		allowed: true,
 		matchKey: senderId,
 		matchSource: "id"
-	};
-	return { allowed: false };
+	} : { allowed: false };
 }
 function resolveNextcloudTalkRoomMatch(params) {
 	const rooms = params.rooms ?? {};
@@ -609,12 +598,7 @@ function resolveNextcloudTalkRoomMatch(params) {
 		normalizeKey: normalizeChannelSlug
 	});
 	const roomConfig = match.entry;
-	const allowed = resolveNestedAllowlistDecision({
-		outerConfigured: allowlistConfigured,
-		outerMatched: Boolean(roomConfig),
-		innerConfigured: false,
-		innerMatched: false
-	});
+	const allowed = !allowlistConfigured || Boolean(roomConfig);
 	return {
 		roomConfig,
 		wildcardConfig: match.wildcardEntry,
@@ -625,25 +609,52 @@ function resolveNextcloudTalkRoomMatch(params) {
 	};
 }
 function resolveNextcloudTalkGroupToolPolicy(params) {
-	const cfg = params.cfg;
 	const roomToken = params.groupId?.trim();
 	if (!roomToken) return;
-	const match = resolveNextcloudTalkRoomMatch({
-		rooms: cfg.channels?.["nextcloud-talk"]?.rooms,
-		roomToken
+	const { tree, toolsPath } = buildNextcloudTalkRoomScope(resolveNextcloudTalkAccount({
+		cfg: params.cfg,
+		accountId: params.accountId
+	}).config.rooms, roomToken);
+	return resolveScopeToolsPolicy({
+		tree,
+		path: toolsPath
 	});
-	return match.roomConfig?.tools ?? match.wildcardConfig?.tools;
 }
-function resolveNextcloudTalkRequireMention(params) {
-	if (typeof params.roomConfig?.requireMention === "boolean") return params.roomConfig.requireMention;
-	if (typeof params.wildcardConfig?.requireMention === "boolean") return params.wildcardConfig.requireMention;
-	return true;
+function buildNextcloudTalkRoomScope(rooms, roomToken) {
+	const { "*": defaults, ...scopes } = rooms ?? {};
+	const tree = {
+		defaults,
+		scopes
+	};
+	const exactPath = Object.hasOwn(scopes, roomToken) ? [roomToken] : [];
+	const toolsMatch = resolveChannelEntryMatchWithFallback({
+		entries: scopes,
+		keys: buildChannelKeyCandidates(roomToken),
+		normalizeKey: normalizeChannelSlug
+	});
+	return {
+		tree,
+		exactPath,
+		toolsPath: toolsMatch.matchKey ? [toolsMatch.matchKey] : []
+	};
+}
+function resolveNextcloudTalkGroupRequireMention(params) {
+	if (!params.groupId) return true;
+	const { tree, exactPath } = buildNextcloudTalkRoomScope(resolveNextcloudTalkAccount({
+		cfg: params.cfg,
+		accountId: params.accountId
+	}).config.rooms, params.groupId);
+	return resolveScopeRequireMention({
+		tree,
+		path: exactPath
+	});
 }
 //#endregion
 //#region extensions/nextcloud-talk/src/room-info.ts
 const ROOM_CACHE_TTL_MS = 300 * 1e3;
 const ROOM_CACHE_ERROR_TTL_MS = 30 * 1e3;
 const ROOM_CACHE_MAX_ENTRIES = 1e3;
+const NEXTCLOUD_TALK_ROOM_INFO_TIMEOUT_MS = 3e4;
 const roomCache = /* @__PURE__ */ new Map();
 function resolveRoomCacheKey(params) {
 	return `${params.accountId}:${params.roomToken}`;
@@ -695,7 +706,8 @@ async function resolveNextcloudTalkRoomKind(params) {
 				}
 			},
 			auditContext: "nextcloud-talk.room-info",
-			policy: ssrfPolicyFromPrivateNetworkOptIn(account.config)
+			policy: ssrfPolicyFromPrivateNetworkOptIn(account.config),
+			timeoutMs: params.timeoutMs ?? NEXTCLOUD_TALK_ROOM_INFO_TIMEOUT_MS
 		});
 		try {
 			if (!response.ok) {
@@ -730,10 +742,10 @@ function stripNextcloudTalkTargetPrefix(raw) {
 	const trimmed = raw.trim();
 	if (!trimmed) return;
 	let normalized = trimmed;
-	if (normalized.startsWith("nextcloud-talk:")) normalized = normalized.slice(15).trim();
-	else if (normalized.startsWith("nc-talk:")) normalized = normalized.slice(8).trim();
-	else if (normalized.startsWith("nc:")) normalized = normalized.slice(3).trim();
-	if (normalized.startsWith("room:")) normalized = normalized.slice(5).trim();
+	if (/^nextcloud-talk:/i.test(normalized)) normalized = normalized.slice(15).trim();
+	else if (/^nc-talk:/i.test(normalized)) normalized = normalized.slice(8).trim();
+	else if (/^nc:/i.test(normalized)) normalized = normalized.slice(3).trim();
+	if (/^room:/i.test(normalized)) normalized = normalized.slice(5).trim();
 	if (!normalized) return;
 	return normalized;
 }
@@ -744,17 +756,18 @@ function normalizeNextcloudTalkMessagingTarget(raw) {
 function looksLikeNextcloudTalkTargetId(raw) {
 	const trimmed = raw.trim();
 	if (!trimmed) return false;
-	if (/^(nextcloud-talk|nc-talk|nc):/i.test(trimmed)) return true;
+	if (/^(nextcloud-talk|nc-talk|nc|room):/i.test(trimmed)) return true;
 	return /^[a-z0-9]{8,}$/i.test(trimmed);
 }
 //#endregion
 //#region extensions/nextcloud-talk/src/send.ts
 const NEXTCLOUD_TALK_ERROR_SNIPPET_MAX_BYTES = 8 * 1024;
 const NEXTCLOUD_TALK_ERROR_SNIPPET_MAX_CHARS = 200;
+const NEXTCLOUD_TALK_SEND_TIMEOUT_MS = 3e4;
 /** Collapses whitespace and caps an error-body prefix to a short, log-safe snippet. */
 function collapseErrorSnippet(text) {
 	const collapsed = text.replace(/\s+/g, " ").trim();
-	if (collapsed.length > NEXTCLOUD_TALK_ERROR_SNIPPET_MAX_CHARS) return `${collapsed.slice(0, NEXTCLOUD_TALK_ERROR_SNIPPET_MAX_CHARS)}…`;
+	if (collapsed.length > NEXTCLOUD_TALK_ERROR_SNIPPET_MAX_CHARS) return `${truncateUtf16Safe(collapsed, NEXTCLOUD_TALK_ERROR_SNIPPET_MAX_CHARS)}…`;
 	return collapsed;
 }
 /** Reads a bounded, collapsed error-body snippet without buffering hostile responses. */
@@ -850,7 +863,8 @@ async function sendMessageNextcloudTalk(to, text, opts) {
 			body: bodyStr
 		},
 		auditContext: "nextcloud-talk-send",
-		policy: ssrfPolicyFromPrivateNetworkOptIn$1(account.config)
+		policy: ssrfPolicyFromPrivateNetworkOptIn$1(account.config),
+		timeoutMs: opts.timeoutMs ?? NEXTCLOUD_TALK_SEND_TIMEOUT_MS
 	});
 	try {
 		if (!response.ok) {
@@ -908,7 +922,8 @@ async function sendReactionNextcloudTalk(roomToken, messageId, reaction, opts) {
 			body
 		},
 		auditContext: "nextcloud-talk-reaction",
-		policy: ssrfPolicyFromPrivateNetworkOptIn$1(account.config)
+		policy: ssrfPolicyFromPrivateNetworkOptIn$1(account.config),
+		timeoutMs: opts.timeoutMs ?? NEXTCLOUD_TALK_SEND_TIMEOUT_MS
 	});
 	try {
 		if (!response.ok) {
@@ -959,7 +974,7 @@ function roomRoutes(params) {
 }
 async function deliverNextcloudTalkReply(params) {
 	const { cfg, payload, roomToken, accountId, statusSink } = params;
-	await deliverFormattedTextWithAttachments({
+	return { visibleReplySent: await deliverFormattedTextWithAttachments({
 		payload,
 		send: async ({ text, replyToId }) => {
 			await sendMessageNextcloudTalk(roomToken, text, {
@@ -969,7 +984,7 @@ async function deliverNextcloudTalkReply(params) {
 			});
 			statusSink?.({ lastOutboundAt: Date.now() });
 		}
-	});
+	}) };
 }
 async function handleNextcloudTalkInbound(params) {
 	const { message, account, config, runtime, statusSink } = params;
@@ -1002,9 +1017,10 @@ async function handleNextcloudTalkInbound(params) {
 		surface: CHANNEL_ID
 	});
 	const hasControlCommand = core.channel.text.hasControlCommand(rawBody, config);
-	const shouldRequireMention = isGroup ? resolveNextcloudTalkRequireMention({
-		roomConfig,
-		wildcardConfig: roomMatch.wildcardConfig
+	const shouldRequireMention = isGroup ? resolveNextcloudTalkGroupRequireMention({
+		cfg: config,
+		accountId: account.accountId,
+		groupId: roomToken
 	}) : false;
 	const { groupPolicy, providerMissingFallbackApplied } = resolveAllowlistProviderRuntimeGroupPolicy({
 		providerConfigPresent: (config.channels?.[CHANNEL_ID] ?? void 0) !== void 0,
@@ -1141,6 +1157,7 @@ async function handleNextcloudTalkInbound(params) {
 		body: rawBody
 	});
 	const groupSystemPrompt = normalizeOptionalString(roomConfig?.systemPrompt);
+	const blockStreamingEnabled = resolveChannelStreamingBlockEnabled(account.config);
 	const ctxPayload = core.channel.reply.finalizeInboundContext({
 		Body: body,
 		BodyForAgent: rawBody,
@@ -1176,8 +1193,12 @@ async function handleNextcloudTalkInbound(params) {
 		recordInboundSession: core.channel.session.recordInboundSession,
 		dispatchReplyWithBufferedBlockDispatcher: core.channel.reply.dispatchReplyWithBufferedBlockDispatcher,
 		delivery: {
+			preparePayload: (payload) => payload.text === void 0 ? payload : {
+				...payload,
+				text: sanitizeAssistantVisibleText(payload.text)
+			},
 			deliver: async (payload) => {
-				await deliverNextcloudTalkReply({
+				return await deliverNextcloudTalkReply({
 					cfg: config,
 					payload,
 					roomToken,
@@ -1192,7 +1213,7 @@ async function handleNextcloudTalkInbound(params) {
 		replyPipeline: {},
 		replyOptions: {
 			skillFilter: roomConfig?.skills,
-			disableBlockStreaming: typeof account.config.blockStreaming === "boolean" ? !account.config.blockStreaming : void 0
+			disableBlockStreaming: typeof blockStreamingEnabled === "boolean" ? !blockStreamingEnabled : void 0
 		},
 		record: { onRecordError: (err) => {
 			runtime.error?.(`nextcloud-talk: failed updating session meta: ${String(err)}`);
@@ -1651,7 +1672,7 @@ const nextcloudTalkMessageActions = {
 		if (!hasConfiguredAccount(cfg, accountId)) return null;
 		return { actions: ["send", "react"] };
 	},
-	supportsAction: ({ action }) => action !== "send",
+	supportsAction: ({ action }) => action === "react",
 	handleAction: async ({ action, params, cfg, accountId, toolContext }) => {
 		if (action === "send") throw new Error("Send should be handled by outbound, not actions handler.");
 		if (action === "react") {
@@ -2076,18 +2097,7 @@ const nextcloudTalkPlugin = createChatChannelPlugin({
 		approvalCapability: nextcloudTalkApprovalAuth,
 		doctor: nextcloudTalkDoctor,
 		groups: {
-			resolveRequireMention: ({ cfg, accountId, groupId }) => {
-				const rooms = resolveNextcloudTalkAccount({
-					cfg,
-					accountId
-				}).config.rooms;
-				if (!rooms || !groupId) return true;
-				const roomConfig = rooms[groupId];
-				if (roomConfig?.requireMention !== void 0) return roomConfig.requireMention;
-				const wildcardConfig = rooms["*"];
-				if (wildcardConfig?.requireMention !== void 0) return wildcardConfig.requireMention;
-				return true;
-			},
+			resolveRequireMention: resolveNextcloudTalkGroupRequireMention,
 			resolveToolPolicy: resolveNextcloudTalkGroupToolPolicy
 		},
 		messaging: {
@@ -2155,7 +2165,8 @@ const nextcloudTalkPlugin = createChatChannelPlugin({
 			deliveryMode: "direct",
 			chunker: (text, limit) => getNextcloudTalkRuntime().channel.text.chunkMarkdownText(text, limit),
 			chunkerMode: "markdown",
-			textChunkLimit: 4e3
+			textChunkLimit: 4e3,
+			sanitizeText: ({ text }) => sanitizeAssistantVisibleText(text)
 		},
 		attachedResults: {
 			channel: "nextcloud-talk",

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as nextcloudTalkPlugin } from "./channel-BMKRTDSP.js";
+import { t as nextcloudTalkPlugin } from "./channel-CYse6FwT.js";
 export { nextcloudTalkPlugin };

package/dist/doctor-contract-api.js

@@ -1,2 +1,2 @@
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-BY7I5-v9.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-fNhK1wag.js";
 export { legacyConfigRules, normalizeCompatibilityConfig };

package/dist/doctor-contract-fNhK1wag.js

@@ -0,0 +1,22 @@
+import { createLegacyPrivateNetworkDoctorContract } from "openclaw/plugin-sdk/ssrf-runtime";
+import { defineChannelAliasMigration } from "openclaw/plugin-sdk/runtime-doctor";
+//#region extensions/nextcloud-talk/src/doctor-contract.ts
+const networkContract = createLegacyPrivateNetworkDoctorContract({ channelKey: "nextcloud-talk" });
+const streamingAliasMigration = defineChannelAliasMigration({
+	channelId: "nextcloud-talk",
+	streaming: {
+		defaultMode: "partial",
+		deliveryOnly: true
+	},
+	accountStreamingReplacesRoot: true
+});
+const legacyConfigRules = [...networkContract.legacyConfigRules, ...streamingAliasMigration.legacyConfigRules];
+function normalizeCompatibilityConfig({ cfg }) {
+	const network = networkContract.normalizeCompatibilityConfig({ cfg });
+	return streamingAliasMigration.normalizeChannelConfig({
+		cfg: network.config,
+		changes: network.changes
+	});
+}
+//#endregion
+export { normalizeCompatibilityConfig as n, legacyConfigRules as t };

package/dist/{secret-contract-CsCJ-vOP.js → secret-contract-DGgvfVqm.js}

@@ -1,51 +1,10 @@
-import { collectConditionalChannelFieldAssignments, getChannelSurface, hasOwnProperty } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
+import { collectConditionalChannelFieldAssignments, createChannelSecretTargetRegistryEntries, getChannelSurface, hasOwnProperty } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
 //#region extensions/nextcloud-talk/src/secret-contract.ts
-const secretTargetRegistryEntries = [
-	{
-		id: "channels.nextcloud-talk.accounts.*.apiPassword",
-		targetType: "channels.nextcloud-talk.accounts.*.apiPassword",
-		configFile: "openclaw.json",
-		pathPattern: "channels.nextcloud-talk.accounts.*.apiPassword",
-		secretShape: "secret_input",
-		expectedResolvedValue: "string",
-		includeInPlan: true,
-		includeInConfigure: true,
-		includeInAudit: true
-	},
-	{
-		id: "channels.nextcloud-talk.accounts.*.botSecret",
-		targetType: "channels.nextcloud-talk.accounts.*.botSecret",
-		configFile: "openclaw.json",
-		pathPattern: "channels.nextcloud-talk.accounts.*.botSecret",
-		secretShape: "secret_input",
-		expectedResolvedValue: "string",
-		includeInPlan: true,
-		includeInConfigure: true,
-		includeInAudit: true
-	},
-	{
-		id: "channels.nextcloud-talk.apiPassword",
-		targetType: "channels.nextcloud-talk.apiPassword",
-		configFile: "openclaw.json",
-		pathPattern: "channels.nextcloud-talk.apiPassword",
-		secretShape: "secret_input",
-		expectedResolvedValue: "string",
-		includeInPlan: true,
-		includeInConfigure: true,
-		includeInAudit: true
-	},
-	{
-		id: "channels.nextcloud-talk.botSecret",
-		targetType: "channels.nextcloud-talk.botSecret",
-		configFile: "openclaw.json",
-		pathPattern: "channels.nextcloud-talk.botSecret",
-		secretShape: "secret_input",
-		expectedResolvedValue: "string",
-		includeInPlan: true,
-		includeInConfigure: true,
-		includeInAudit: true
-	}
-];
+const secretTargetRegistryEntries = createChannelSecretTargetRegistryEntries({
+	channelKey: "nextcloud-talk",
+	account: ["apiPassword", "botSecret"],
+	channel: ["apiPassword", "botSecret"]
+});
 function collectRuntimeConfigAssignments(params) {
 	const resolved = getChannelSurface(params.config, "nextcloud-talk");
 	if (!resolved) return;

package/dist/secret-contract-api.js

@@ -1,2 +1,2 @@
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-CsCJ-vOP.js";
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-DGgvfVqm.js";
 export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };

package/npm-shrinkwrap.json

@@ -1,17 +1,17 @@
 {
   "name": "@openclaw/nextcloud-talk",
-  "version": "2026.7.1",
+  "version": "2026.7.2-beta.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/nextcloud-talk",
-      "version": "2026.7.1",
+      "version": "2026.7.2-beta.1",
       "dependencies": {
         "zod": "4.4.3"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.7.1"
+        "openclaw": ">=2026.7.2-beta.1"
       },
       "peerDependenciesMeta": {
         "openclaw": {

package/openclaw.plugin.json

@@ -366,33 +366,45 @@
             "exclusiveMinimum": 0,
             "maximum": 9007199254740991
           },
-          "chunkMode": {
-            "type": "string",
-            "enum": [
-              "length",
-              "newline"
-            ]
-          },
-          "blockStreaming": {
-            "type": "boolean"
-          },
-          "blockStreamingCoalesce": {
+          "streaming": {
             "type": "object",
             "properties": {
-              "minChars": {
-                "type": "integer",
-                "exclusiveMinimum": 0,
-                "maximum": 9007199254740991
-              },
-              "maxChars": {
-                "type": "integer",
-                "exclusiveMinimum": 0,
-                "maximum": 9007199254740991
+              "chunkMode": {
+                "type": "string",
+                "enum": [
+                  "length",
+                  "newline"
+                ]
               },
-              "idleMs": {
-                "type": "integer",
-                "minimum": 0,
-                "maximum": 9007199254740991
+              "block": {
+                "type": "object",
+                "properties": {
+                  "enabled": {
+                    "type": "boolean"
+                  },
+                  "coalesce": {
+                    "type": "object",
+                    "properties": {
+                      "minChars": {
+                        "type": "integer",
+                        "exclusiveMinimum": 0,
+                        "maximum": 9007199254740991
+                      },
+                      "maxChars": {
+                        "type": "integer",
+                        "exclusiveMinimum": 0,
+                        "maximum": 9007199254740991
+                      },
+                      "idleMs": {
+                        "type": "integer",
+                        "minimum": 0,
+                        "maximum": 9007199254740991
+                      }
+                    },
+                    "additionalProperties": false
+                  }
+                },
+                "additionalProperties": false
               }
             },
             "additionalProperties": false
@@ -752,33 +764,45 @@
                   "exclusiveMinimum": 0,
                   "maximum": 9007199254740991
                 },
-                "chunkMode": {
-                  "type": "string",
-                  "enum": [
-                    "length",
-                    "newline"
-                  ]
-                },
-                "blockStreaming": {
-                  "type": "boolean"
-                },
-                "blockStreamingCoalesce": {
+                "streaming": {
                   "type": "object",
                   "properties": {
-                    "minChars": {
-                      "type": "integer",
-                      "exclusiveMinimum": 0,
-                      "maximum": 9007199254740991
-                    },
-                    "maxChars": {
-                      "type": "integer",
-                      "exclusiveMinimum": 0,
-                      "maximum": 9007199254740991
+                    "chunkMode": {
+                      "type": "string",
+                      "enum": [
+                        "length",
+                        "newline"
+                      ]
                     },
-                    "idleMs": {
-                      "type": "integer",
-                      "minimum": 0,
-                      "maximum": 9007199254740991
+                    "block": {
+                      "type": "object",
+                      "properties": {
+                        "enabled": {
+                          "type": "boolean"
+                        },
+                        "coalesce": {
+                          "type": "object",
+                          "properties": {
+                            "minChars": {
+                              "type": "integer",
+                              "exclusiveMinimum": 0,
+                              "maximum": 9007199254740991
+                            },
+                            "maxChars": {
+                              "type": "integer",
+                              "exclusiveMinimum": 0,
+                              "maximum": 9007199254740991
+                            },
+                            "idleMs": {
+                              "type": "integer",
+                              "minimum": 0,
+                              "maximum": 9007199254740991
+                            }
+                          },
+                          "additionalProperties": false
+                        }
+                      },
+                      "additionalProperties": false
                     }
                   },
                   "additionalProperties": false

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/nextcloud-talk",
-  "version": "2026.7.1",
+  "version": "2026.7.2-beta.1",
   "description": "OpenClaw Nextcloud Talk channel plugin for conversations.",
   "repository": {
     "type": "git",
@@ -8,7 +8,7 @@
   },
   "type": "module",
   "peerDependencies": {
-    "openclaw": ">=2026.7.1"
+    "openclaw": ">=2026.7.2-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -40,10 +40,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.7.1"
+      "pluginApi": ">=2026.7.2-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.7.1"
+      "openclawVersion": "2026.7.2-beta.1"
     },
     "release": {
       "publishToClawHub": true,

package/dist/doctor-contract-BY7I5-v9.js

@@ -1,7 +0,0 @@
-import { createLegacyPrivateNetworkDoctorContract } from "openclaw/plugin-sdk/ssrf-runtime";
-//#region extensions/nextcloud-talk/src/doctor-contract.ts
-const contract = createLegacyPrivateNetworkDoctorContract({ channelKey: "nextcloud-talk" });
-const legacyConfigRules = contract.legacyConfigRules;
-const normalizeCompatibilityConfig = contract.normalizeCompatibilityConfig;
-//#endregion
-export { normalizeCompatibilityConfig as n, legacyConfigRules as t };