@openclaw/nextcloud-talk 2026.7.2-beta.1 → 2026.7.2-beta.2

package/dist/api.js

@@ -1,2 +1,2 @@
-import { t as nextcloudTalkPlugin } from "./channel-CYse6FwT.js";
+import { t as nextcloudTalkPlugin } from "./channel-BSnehBf6.js";
 export { nextcloudTalkPlugin };

package/dist/{channel-CYse6FwT.js → channel-BSnehBf6.js}

@@ -17,22 +17,20 @@ import { parseStrictNonNegativeInteger, parseStrictPositiveInteger } from "openc
 import { readProviderJsonResponse, readResponseTextLimited } from "openclaw/plugin-sdk/provider-http";
 import { createAccountStatusSink, createMessageReceiptFromOutboundResults, defineChannelMessageAdapter, resolveChannelStreamingBlockEnabled } from "openclaw/plugin-sdk/channel-outbound";
 import { ssrfPolicyFromPrivateNetworkOptIn, ssrfPolicyFromPrivateNetworkOptIn as ssrfPolicyFromPrivateNetworkOptIn$1 } from "openclaw/plugin-sdk/ssrf-runtime";
-import { readFileSync } from "node:fs";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
 import { createHmac, randomBytes } from "node:crypto";
-import { safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
+import { fileExists, safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
 import { clearAccountEntryFields } from "openclaw/plugin-sdk/channel-plugin-common";
 import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$2 } from "openclaw/plugin-sdk/account-id";
-import { DmPolicySchema, GroupPolicySchema, MarkdownConfigSchema, ReplyRuntimeConfigSchemaShape, ToolPolicySchema, buildChannelConfigSchema, requireOpenAllowFrom } from "openclaw/plugin-sdk/channel-config-schema";
+import { DmPolicySchema, GroupPolicySchema, MarkdownConfigSchema, ReplyRuntimeConfigSchemaShape, buildChannelConfigSchema, buildGroupEntrySchema, buildMultiAccountChannelSchema, requireOpenAllowFrom } from "openclaw/plugin-sdk/channel-config-schema";
 import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";
 import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter, createScopedDmSecurityResolver } from "openclaw/plugin-sdk/channel-config-helpers";
 import { requireChannelOpenAllowFrom, resolveLoggerBackedRuntime, runStoppablePassiveMonitor, safeParseJsonWithSchema } from "openclaw/plugin-sdk/extension-shared";
 import { z } from "zod";
-import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
-import { createClaimableDedupe, migratePersistentDedupeLegacyJsonFile } from "openclaw/plugin-sdk/persistent-dedupe";
+import { createChannelReplayGuard, migratePersistentDedupeLegacyJsonFile } from "openclaw/plugin-sdk/persistent-dedupe";
 import { resolveStateDir } from "openclaw/plugin-sdk/state-paths";
 import { channelIngressRoutes, resolveStableChannelMessageIngress } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import { resolveInboundRouteEnvelopeBuilderWithRuntime } from "openclaw/plugin-sdk/inbound-envelope";
@@ -43,7 +41,7 @@ import { createServer } from "node:http";
 import { WEBHOOK_RATE_LIMIT_DEFAULTS, createAuthRateLimiter, isRequestBodyLimitError, readRequestBodyWithLimit, requestBodyErrorToText } from "openclaw/plugin-sdk/webhook-ingress";
 import { jsonResult, readStringParam, resolveReactionMessageId } from "openclaw/plugin-sdk/channel-actions";
 import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$1, buildOutboundBaseSessionKey, normalizeAccountId as normalizeAccountId$1 } from "openclaw/plugin-sdk/routing";
-import { applyAccountNameToChannelSection, createSetupTranslator, createStandardChannelSetupStatus, formatDocsLink, patchScopedAccountConfig, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
+import { applyAccountNameToChannelSection, baseUrlTextInput, createSetupTranslator, createStandardChannelSetupStatus, defineTokenCredential, formatDocsLink, patchScopedAccountConfig, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
 import { createSetupInputPresenceValidator, createSetupTranslator as createSetupTranslator$1, mergeAllowFromEntries, promptParsedAllowFromForAccount, resolveSetupAccountId } from "openclaw/plugin-sdk/setup-runtime";
 import { formatDocsLink as formatDocsLink$1 } from "openclaw/plugin-sdk/setup-tools";
 //#region extensions/nextcloud-talk/src/accounts.ts
@@ -166,10 +164,10 @@ function resolveNextcloudTalkApiCredentials(params) {
 	};
 	if (!params.apiPasswordFile) return;
 	try {
-		const filePassword = readFileSync(params.apiPasswordFile, "utf-8").trim();
-		return filePassword ? {
+		const fileValue = tryReadSecretFileSync(params.apiPasswordFile, "Nextcloud Talk API password", { rejectHardlinks: false });
+		return fileValue ? {
 			apiUser,
-			apiPassword: filePassword
+			apiPassword: fileValue
 		} : void 0;
 	} catch {
 		return;
@@ -362,18 +360,11 @@ const nextcloudTalkPairingTextAdapter = {
 };
 //#endregion
 //#region extensions/nextcloud-talk/src/config-schema.ts
-const NextcloudTalkRoomSchema = z.object({
-	requireMention: z.boolean().optional(),
-	tools: ToolPolicySchema,
-	skills: z.array(z.string()).optional(),
-	enabled: z.boolean().optional(),
-	allowFrom: z.array(z.string()).optional(),
-	systemPrompt: z.string().optional()
-}).strict();
+const NextcloudTalkRoomSchema = buildGroupEntrySchema({ allowFrom: z.array(z.string()).optional() }).omit({ toolsBySender: true });
 const NextcloudTalkNetworkSchema = z.object({ 
 /** Dangerous opt-in for self-hosted Nextcloud Talk on trusted private/internal hosts. */
 dangerouslyAllowPrivateNetwork: z.boolean().optional() }).strict().optional();
-const NextcloudTalkAccountSchemaBase = z.object({
+const NextcloudTalkConfigSchema = buildMultiAccountChannelSchema(z.object({
 	name: z.string().optional(),
 	enabled: z.boolean().optional(),
 	markdown: MarkdownConfigSchema,
@@ -395,27 +386,17 @@ const NextcloudTalkAccountSchemaBase = z.object({
 	/** Network policy overrides for self-hosted Nextcloud Talk on trusted private/internal hosts. */
 	network: NextcloudTalkNetworkSchema,
 	...ReplyRuntimeConfigSchemaShape
-}).strict();
-const NextcloudTalkAccountSchema = NextcloudTalkAccountSchemaBase.superRefine((value, ctx) => {
-	requireChannelOpenAllowFrom({
-		channel: "nextcloud-talk",
-		policy: value.dmPolicy,
-		allowFrom: value.allowFrom,
-		ctx,
-		requireOpenAllowFrom
-	});
-});
-const NextcloudTalkConfigSchema = NextcloudTalkAccountSchemaBase.extend({
-	accounts: z.record(z.string(), NextcloudTalkAccountSchema.optional()).optional(),
-	defaultAccount: z.string().optional()
-}).superRefine((value, ctx) => {
-	requireChannelOpenAllowFrom({
-		channel: "nextcloud-talk",
-		policy: value.dmPolicy,
-		allowFrom: value.allowFrom,
-		ctx,
-		requireOpenAllowFrom
-	});
+}).strict(), {
+	optionalAccount: true,
+	refine: (value, ctx) => {
+		requireChannelOpenAllowFrom({
+			channel: "nextcloud-talk",
+			policy: value.dmPolicy,
+			allowFrom: value.allowFrom,
+			ctx,
+			requireOpenAllowFrom
+		});
+	}
 });
 //#endregion
 //#region extensions/nextcloud-talk/src/replay-guard.ts
@@ -424,7 +405,7 @@ const NEXTCLOUD_TALK_REPLAY_DEDUPE_NAMESPACE_PREFIX = "replay-dedupe";
 const DEFAULT_REPLAY_TTL_MS = 1440 * 60 * 1e3;
 const DEFAULT_MEMORY_MAX_SIZE = 1e3;
 const DEFAULT_STATE_MAX_ENTRIES = 1e4;
-function buildReplayKey(params) {
+function buildNextcloudTalkReplayKey(params) {
 	const roomToken = params.roomToken.trim();
 	const messageId = params.messageId.trim();
 	if (!roomToken || !messageId) return null;
@@ -436,55 +417,21 @@ function createNextcloudTalkReplayGuard(options) {
 		ttlMs: options.ttlMs ?? DEFAULT_REPLAY_TTL_MS,
 		memoryMaxSize: options.memoryMaxSize ?? DEFAULT_MEMORY_MAX_SIZE
 	};
-	const dedupe = createClaimableDedupe(stateDir ? {
-		...baseOptions,
-		pluginId: NEXTCLOUD_TALK_PLUGIN_ID,
-		namespacePrefix: NEXTCLOUD_TALK_REPLAY_DEDUPE_NAMESPACE_PREFIX,
-		stateMaxEntries: options.stateMaxEntries ?? options.fileMaxEntries ?? DEFAULT_STATE_MAX_ENTRIES,
-		env: {
-			...process.env,
-			OPENCLAW_STATE_DIR: stateDir
-		},
-		onDiskError: options.onDiskError
-	} : baseOptions);
-	return {
-		claimMessage: async ({ accountId, roomToken, messageId }) => {
-			const replayKey = buildReplayKey({
-				roomToken,
-				messageId
-			});
-			if (!replayKey) return "invalid";
-			return (await dedupe.claim(replayKey, { namespace: accountId })).kind;
-		},
-		commitMessage: async ({ accountId, roomToken, messageId }) => {
-			const replayKey = buildReplayKey({
-				roomToken,
-				messageId
-			});
-			if (!replayKey) return true;
-			return await dedupe.commit(replayKey, { namespace: accountId });
-		},
-		releaseMessage: ({ accountId, roomToken, messageId, error }) => {
-			const replayKey = buildReplayKey({
-				roomToken,
-				messageId
-			});
-			if (!replayKey) return;
-			dedupe.release(replayKey, {
-				namespace: accountId,
-				error
-			});
-		},
-		shouldProcessMessage: async ({ accountId, roomToken, messageId }) => {
-			const replayKey = buildReplayKey({
-				roomToken,
-				messageId
-			});
-			if (!replayKey) return true;
-			if ((await dedupe.claim(replayKey, { namespace: accountId })).kind !== "claimed") return false;
-			return await dedupe.commit(replayKey, { namespace: accountId });
-		}
-	};
+	return createChannelReplayGuard({
+		dedupe: stateDir ? {
+			...baseOptions,
+			pluginId: NEXTCLOUD_TALK_PLUGIN_ID,
+			namespacePrefix: NEXTCLOUD_TALK_REPLAY_DEDUPE_NAMESPACE_PREFIX,
+			stateMaxEntries: options.stateMaxEntries ?? options.fileMaxEntries ?? DEFAULT_STATE_MAX_ENTRIES,
+			env: {
+				...process.env,
+				OPENCLAW_STATE_DIR: stateDir
+			},
+			onDiskError: options.onDiskError
+		} : baseOptions,
+		buildReplayKey: buildNextcloudTalkReplayKey,
+		namespace: (event) => event.accountId
+	});
 }
 //#endregion
 //#region extensions/nextcloud-talk/src/doctor.ts
@@ -495,14 +442,6 @@ function sanitizeLegacyReplaySegment(value) {
 	if (!trimmed) return "default";
 	return trimmed.replace(/[^a-zA-Z0-9_-]/g, "_");
 }
-async function fileExists(filePath) {
-	try {
-		await fs.access(filePath);
-		return true;
-	} catch {
-		return false;
-	}
-}
 async function collectNextcloudTalkBotResponseWarnings(params) {
 	const warnings = [];
 	for (const accountId of listNextcloudTalkAccountIds(params.cfg)) {
@@ -527,7 +466,7 @@ async function repairNextcloudTalkReplayDedupeState(params) {
 	const replayDir = path.join(stateDir, "nextcloud-talk", "replay-dedupe");
 	for (const accountId of listNextcloudTalkAccountIds(params.cfg)) {
 		const legacyPath = path.join(replayDir, `${sanitizeLegacyReplaySegment(accountId)}.json`);
-		if (!await fileExists(legacyPath)) continue;
+		if (!fileExists(legacyPath)) continue;
 		try {
 			const result = await migratePersistentDedupeLegacyJsonFile({
 				filePath: legacyPath,
@@ -1263,40 +1202,12 @@ const WEBHOOK_ERRORS = {
 	payloadTooLarge: "Payload too large",
 	internalServerError: "Internal server error"
 };
-var NextcloudTalkRetryableWebhookError = class extends Error {
-	constructor(message, options) {
-		super(message, options);
-		this.name = "NextcloudTalkRetryableWebhookError";
-	}
-};
 async function processNextcloudTalkReplayGuardedMessage(params) {
-	if (await params.replayGuard.claimMessage({
+	return (await params.replayGuard.processGuarded({
 		accountId: params.accountId,
 		roomToken: params.message.roomToken,
 		messageId: params.message.messageId
-	}) !== "claimed") return "duplicate";
-	try {
-		await params.handleMessage();
-		await params.replayGuard.commitMessage({
-			accountId: params.accountId,
-			roomToken: params.message.roomToken,
-			messageId: params.message.messageId
-		});
-		return "processed";
-	} catch (error) {
-		if (error instanceof NextcloudTalkRetryableWebhookError) params.replayGuard.releaseMessage({
-			accountId: params.accountId,
-			roomToken: params.message.roomToken,
-			messageId: params.message.messageId,
-			error
-		});
-		else await params.replayGuard.commitMessage({
-			accountId: params.accountId,
-			roomToken: params.message.roomToken,
-			messageId: params.message.messageId
-		});
-		throw error;
-	}
+	}, params.handleMessage, { onError: "commit" })).kind === "processed" ? "processed" : "duplicate";
 }
 function formatError(err) {
 	if (err instanceof Error) return err.message;
@@ -1959,8 +1870,10 @@ const nextcloudTalkSetupWizard = {
 			[CONFIGURE_API_FLAG]: "1"
 		} };
 	},
-	credentials: [{
+	credentials: [defineTokenCredential({
 		inputKey: "token",
+		configKey: "botSecret",
+		configuredFields: ["botSecret", "botSecretFile"],
 		providerHint: channel,
 		credentialLabel: t("wizard.nextcloudTalk.botSecret"),
 		preferredEnvVar: "NEXTCLOUD_TALK_BOT_SECRET",
@@ -1968,61 +1881,56 @@ const nextcloudTalkSetupWizard = {
 		keepPrompt: t("wizard.nextcloudTalk.botSecretKeep"),
 		inputPrompt: t("wizard.nextcloudTalk.botSecretInput"),
 		allowEnv: ({ accountId }) => accountId === DEFAULT_ACCOUNT_ID$1,
-		inspect: ({ cfg, accountId }) => {
-			const resolvedAccount = resolveNextcloudTalkAccount({
-				cfg,
-				accountId
-			});
-			return {
-				accountConfigured: Boolean(resolvedAccount.secret && resolvedAccount.baseUrl),
-				hasConfiguredValue: Boolean(hasConfiguredSecretInput(resolvedAccount.config.botSecret) || resolvedAccount.config.botSecretFile),
-				resolvedValue: resolvedAccount.secret || void 0,
-				envValue: accountId === DEFAULT_ACCOUNT_ID$1 ? normalizeOptionalString(process.env.NEXTCLOUD_TALK_BOT_SECRET) : void 0
-			};
+		resolveAccount: ({ cfg, accountId }) => resolveNextcloudTalkAccount({
+			cfg,
+			accountId
+		}),
+		accountConfigured: (account) => Boolean(account.secret && account.baseUrl),
+		hasConfiguredValue: (account) => Boolean(hasConfiguredSecretInput(account.config.botSecret) || account.config.botSecretFile),
+		resolvedValue: (account) => account.secret || void 0,
+		envValue: ({ accountId }) => accountId === DEFAULT_ACCOUNT_ID$1 ? normalizeOptionalString(process.env.NEXTCLOUD_TALK_BOT_SECRET) : void 0,
+		patchAccount: ({ cfg, accountId, patch, clearFields }) => {
+			return setNextcloudTalkAccountConfig(clearNextcloudTalkAccountFields(cfg, accountId, clearFields), accountId, patch);
 		},
-		applyUseEnv: async (params) => {
-			const resolvedAccount = resolveNextcloudTalkAccount({
-				cfg: params.cfg,
-				accountId: params.accountId
-			});
-			return setNextcloudTalkAccountConfig(clearNextcloudTalkAccountFields(params.cfg, params.accountId, ["botSecret", "botSecretFile"]), params.accountId, { baseUrl: resolvedAccount.baseUrl });
+		useEnv: {
+			clearFields: ["botSecret", "botSecretFile"],
+			patch: (account) => ({ baseUrl: account.baseUrl })
 		},
-		applySet: async (params) => setNextcloudTalkAccountConfig(clearNextcloudTalkAccountFields(params.cfg, params.accountId, ["botSecret", "botSecretFile"]), params.accountId, { botSecret: params.value })
-	}, {
+		set: { clearFields: ["botSecret", "botSecretFile"] }
+	}), defineTokenCredential({
 		inputKey: "password",
+		configKey: "apiPassword",
+		configuredFields: ["apiPassword", "apiPasswordFile"],
 		providerHint: "nextcloud-talk-api",
 		credentialLabel: t("wizard.nextcloudTalk.apiPassword"),
 		preferredEnvVar: "NEXTCLOUD_TALK_API_PASSWORD",
 		envPrompt: "",
 		keepPrompt: t("wizard.nextcloudTalk.apiPasswordKeep"),
 		inputPrompt: t("wizard.nextcloudTalk.apiPasswordInput"),
-		inspect: ({ cfg, accountId }) => {
-			const resolvedAccount = resolveNextcloudTalkAccount({
-				cfg,
-				accountId
-			});
-			const apiUser = resolvedAccount.config.apiUser?.trim();
-			const apiPasswordConfigured = Boolean(hasConfiguredSecretInput(resolvedAccount.config.apiPassword) || resolvedAccount.config.apiPasswordFile);
-			return {
-				accountConfigured: Boolean(apiUser && apiPasswordConfigured),
-				hasConfiguredValue: apiPasswordConfigured
-			};
-		},
+		resolveAccount: ({ cfg, accountId }) => resolveNextcloudTalkAccount({
+			cfg,
+			accountId
+		}),
+		accountConfigured: (account) => Boolean(account.config.apiUser?.trim() && (hasConfiguredSecretInput(account.config.apiPassword) || account.config.apiPasswordFile)),
+		hasConfiguredValue: (account) => Boolean(hasConfiguredSecretInput(account.config.apiPassword) || account.config.apiPasswordFile),
 		shouldPrompt: ({ credentialValues }) => credentialValues[CONFIGURE_API_FLAG] === "1",
-		applySet: async (params) => setNextcloudTalkAccountConfig(clearNextcloudTalkAccountFields(params.cfg, params.accountId, ["apiPassword", "apiPasswordFile"]), params.accountId, { apiPassword: params.value })
-	}],
-	textInputs: [{
+		patchAccount: ({ cfg, accountId, patch, clearFields }) => setNextcloudTalkAccountConfig(clearNextcloudTalkAccountFields(cfg, accountId, clearFields), accountId, patch),
+		set: { clearFields: ["apiPassword", "apiPasswordFile"] }
+	})],
+	textInputs: [baseUrlTextInput({
 		inputKey: "httpUrl",
+		configKey: "baseUrl",
 		message: t("wizard.nextcloudTalk.instanceUrlPrompt"),
-		currentValue: ({ cfg, accountId }) => resolveNextcloudTalkAccount({
+		resolveAccount: ({ cfg, accountId }) => resolveNextcloudTalkAccount({
 			cfg,
 			accountId
-		}).baseUrl || void 0,
+		}),
+		currentValue: (account) => account.baseUrl || void 0,
 		shouldPrompt: ({ currentValue }) => !currentValue,
-		validate: ({ value }) => validateNextcloudTalkBaseUrl(value),
-		normalizeValue: ({ value }) => normalizeNextcloudTalkBaseUrl(value),
-		applySet: async (params) => setNextcloudTalkAccountConfig(params.cfg, params.accountId, { baseUrl: params.value })
-	}, {
+		validate: validateNextcloudTalkBaseUrl,
+		normalize: normalizeNextcloudTalkBaseUrl,
+		patchAccount: ({ cfg, accountId, patch }) => setNextcloudTalkAccountConfig(cfg, accountId, patch)
+	}), {
 		inputKey: "userId",
 		message: t("wizard.nextcloudTalk.apiUserPrompt"),
 		currentValue: ({ cfg, accountId }) => resolveNextcloudTalkAccount({

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as nextcloudTalkPlugin } from "./channel-CYse6FwT.js";
+import { t as nextcloudTalkPlugin } from "./channel-BSnehBf6.js";
 export { nextcloudTalkPlugin };

package/npm-shrinkwrap.json

@@ -1,17 +1,17 @@
 {
   "name": "@openclaw/nextcloud-talk",
-  "version": "2026.7.2-beta.1",
+  "version": "2026.7.2-beta.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/nextcloud-talk",
-      "version": "2026.7.2-beta.1",
+      "version": "2026.7.2-beta.2",
       "dependencies": {
         "zod": "4.4.3"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.7.2-beta.1"
+        "openclaw": ">=2026.7.2-beta.2"
       },
       "peerDependenciesMeta": {
         "openclaw": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/nextcloud-talk",
-  "version": "2026.7.2-beta.1",
+  "version": "2026.7.2-beta.2",
   "description": "OpenClaw Nextcloud Talk channel plugin for conversations.",
   "repository": {
     "type": "git",
@@ -8,7 +8,7 @@
   },
   "type": "module",
   "peerDependencies": {
-    "openclaw": ">=2026.7.2-beta.1"
+    "openclaw": ">=2026.7.2-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -40,10 +40,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.7.2-beta.1"
+      "pluginApi": ">=2026.7.2-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.7.2-beta.1"
+      "openclawVersion": "2026.7.2-beta.2"
     },
     "release": {
       "publishToClawHub": true,