@openclaw/nextcloud-talk 2026.7.2-beta.2 → 2026.7.2-beta.3

package/dist/api.js

@@ -1,2 +1,2 @@
-import { t as nextcloudTalkPlugin } from "./channel-BSnehBf6.js";
+import { t as nextcloudTalkPlugin } from "./channel-De2OKnzd.js";
 export { nextcloudTalkPlugin };

package/dist/{channel-BSnehBf6.js → channel-De2OKnzd.js}

@@ -15,6 +15,7 @@ import { buildSecretInputSchema, hasConfiguredSecretInput, normalizeResolvedSecr
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { parseStrictNonNegativeInteger, parseStrictPositiveInteger } from "openclaw/plugin-sdk/number-runtime";
 import { readProviderJsonResponse, readResponseTextLimited } from "openclaw/plugin-sdk/provider-http";
+import { buildChannelInboundEventContext, resolveChannelInboundRouteEnvelope } from "openclaw/plugin-sdk/channel-inbound";
 import { createAccountStatusSink, createMessageReceiptFromOutboundResults, defineChannelMessageAdapter, resolveChannelStreamingBlockEnabled } from "openclaw/plugin-sdk/channel-outbound";
 import { ssrfPolicyFromPrivateNetworkOptIn, ssrfPolicyFromPrivateNetworkOptIn as ssrfPolicyFromPrivateNetworkOptIn$1 } from "openclaw/plugin-sdk/ssrf-runtime";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
@@ -24,7 +25,7 @@ import { fileExists, safeEqualSecret } from "openclaw/plugin-sdk/security-runtim
 import { clearAccountEntryFields } from "openclaw/plugin-sdk/channel-plugin-common";
 import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$2 } from "openclaw/plugin-sdk/account-id";
 import { DmPolicySchema, GroupPolicySchema, MarkdownConfigSchema, ReplyRuntimeConfigSchemaShape, buildChannelConfigSchema, buildGroupEntrySchema, buildMultiAccountChannelSchema, requireOpenAllowFrom } from "openclaw/plugin-sdk/channel-config-schema";
-import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";
+import { formatAllowFromLowercase, resolveAllowlistMatchByCandidates } from "openclaw/plugin-sdk/allow-from";
 import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter, createScopedDmSecurityResolver } from "openclaw/plugin-sdk/channel-config-helpers";
 import { requireChannelOpenAllowFrom, resolveLoggerBackedRuntime, runStoppablePassiveMonitor, safeParseJsonWithSchema } from "openclaw/plugin-sdk/extension-shared";
 import { z } from "zod";
@@ -33,7 +34,6 @@ import path from "node:path";
 import { createChannelReplayGuard, migratePersistentDedupeLegacyJsonFile } from "openclaw/plugin-sdk/persistent-dedupe";
 import { resolveStateDir } from "openclaw/plugin-sdk/state-paths";
 import { channelIngressRoutes, resolveStableChannelMessageIngress } from "openclaw/plugin-sdk/channel-ingress-runtime";
-import { resolveInboundRouteEnvelopeBuilderWithRuntime } from "openclaw/plugin-sdk/inbound-envelope";
 import { buildChannelKeyCandidates, normalizeChannelSlug, resolveChannelEntryMatchWithFallback } from "openclaw/plugin-sdk/channel-targets";
 import { pruneMapToMaxSize } from "openclaw/plugin-sdk/collection-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
@@ -44,6 +44,37 @@ import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$1, buildOutboundBaseSessionKey
 import { applyAccountNameToChannelSection, baseUrlTextInput, createSetupTranslator, createStandardChannelSetupStatus, defineTokenCredential, formatDocsLink, patchScopedAccountConfig, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
 import { createSetupInputPresenceValidator, createSetupTranslator as createSetupTranslator$1, mergeAllowFromEntries, promptParsedAllowFromForAccount, resolveSetupAccountId } from "openclaw/plugin-sdk/setup-runtime";
 import { formatDocsLink as formatDocsLink$1 } from "openclaw/plugin-sdk/setup-tools";
+//#region extensions/nextcloud-talk/src/api-credentials.ts
+function resolveNextcloudTalkApiCredentialsResult(params) {
+	const apiUser = params.apiUser?.trim();
+	if (!apiUser) return { status: "missing" };
+	const inlinePassword = normalizeResolvedSecretInputString({
+		value: params.apiPassword,
+		path: "channels.nextcloud-talk.apiPassword"
+	});
+	if (inlinePassword) return {
+		status: "available",
+		value: {
+			apiUser,
+			apiPassword: inlinePassword
+		}
+	};
+	if (!params.apiPasswordFile?.trim()) return { status: "missing" };
+	const result = tryReadSecretFileSync(params.apiPasswordFile, "Nextcloud Talk API password", { rejectHardlinks: false }, { configPath: params.configPath ?? "channels.nextcloud-talk.apiPasswordFile" });
+	if (result.status === "available") return result.value ? {
+		status: "available",
+		value: {
+			apiUser,
+			apiPassword: result.value
+		}
+	} : { status: "missing" };
+	return result;
+}
+function resolveNextcloudTalkApiCredentials(params) {
+	const result = resolveNextcloudTalkApiCredentialsResult(params);
+	return result.status === "available" ? result.value : void 0;
+}
+//#endregion
 //#region extensions/nextcloud-talk/src/accounts.ts
 function isTruthyEnvValue(value) {
 	const normalized = normalizeLowercaseStringOrEmpty(value);
@@ -79,13 +110,21 @@ function resolveNextcloudTalkSecret(cfg, opts) {
 	const envSecret = normalizeOptionalString(process.env.NEXTCLOUD_TALK_BOT_SECRET);
 	if (envSecret && resolvedAccountId === DEFAULT_ACCOUNT_ID) return {
 		secret: envSecret,
-		source: "env"
+		source: "env",
+		status: "available"
 	};
-	if (merged.botSecretFile) {
-		const fileSecret = tryReadSecretFileSync(merged.botSecretFile, "Nextcloud Talk bot secret file", { rejectSymlink: true });
-		if (fileSecret) return {
-			secret: fileSecret,
-			source: "secretFile"
+	const botSecretFile = normalizeOptionalString(merged.botSecretFile);
+	if (botSecretFile) {
+		const result = tryReadSecretFileSync(botSecretFile, "Nextcloud Talk bot secret file", { rejectSymlink: true }, { configPath: `channels.nextcloud-talk.accounts.${resolvedAccountId}.botSecretFile` });
+		return result.status === "available" ? {
+			secret: result.value,
+			source: "secretFile",
+			status: "available"
+		} : {
+			secret: "",
+			source: "secretFile",
+			status: "configured_unavailable",
+			diagnostic: result.diagnostic
 		};
 	}
 	const inlineSecret = normalizeResolvedSecretInputString({
@@ -94,11 +133,13 @@ function resolveNextcloudTalkSecret(cfg, opts) {
 	});
 	if (inlineSecret) return {
 		secret: inlineSecret,
-		source: "config"
+		source: "config",
+		status: "available"
 	};
 	return {
 		secret: "",
-		source: "none"
+		source: "none",
+		status: "missing"
 	};
 }
 function resolveNextcloudTalkAccount(params) {
@@ -109,6 +150,13 @@ function resolveNextcloudTalkAccount(params) {
 		const accountEnabled = merged.enabled !== false;
 		const enabled = baseEnabled && accountEnabled;
 		const secretResolution = resolveNextcloudTalkSecret(params.cfg, { accountId });
+		const apiCredentialResolution = resolveNextcloudTalkApiCredentialsResult({
+			apiUser: merged.apiUser,
+			apiPassword: merged.apiPassword,
+			apiPasswordFile: merged.apiPasswordFile,
+			configPath: `channels.nextcloud-talk.accounts.${accountId}.apiPasswordFile`
+		});
+		const diagnostics = [secretResolution.diagnostic, apiCredentialResolution.status === "configured_unavailable" ? apiCredentialResolution.diagnostic : void 0].filter((diagnostic) => Boolean(diagnostic));
 		const baseUrl = merged.baseUrl?.trim()?.replace(/\/$/, "") ?? "";
 		debugAccounts("resolve", {
 			accountId,
@@ -123,6 +171,9 @@ function resolveNextcloudTalkAccount(params) {
 			baseUrl,
 			secret: secretResolution.secret,
 			secretSource: secretResolution.source,
+			tokenStatus: secretResolution.status,
+			apiCredentialStatus: apiCredentialResolution.status,
+			...diagnostics.length > 0 ? { credentialDiagnostics: diagnostics } : {},
 			config: merged
 		};
 	};
@@ -130,7 +181,7 @@ function resolveNextcloudTalkAccount(params) {
 		accountId: resolvedAccountId,
 		normalizeAccountId,
 		resolvePrimary: resolve,
-		hasCredential: (account) => account.secretSource !== "none",
+		hasCredential: (account) => account.tokenStatus !== "missing",
 		resolveDefaultAccountId: () => resolveDefaultNextcloudTalkAccountId(params.cfg)
 	});
 }
@@ -150,30 +201,6 @@ const nextcloudTalkApprovalAuth = createChannelApprovalAuth({
 	normalizeApprover: normalizeNextcloudTalkApproverId
 }).approvalAuth;
 //#endregion
-//#region extensions/nextcloud-talk/src/api-credentials.ts
-function resolveNextcloudTalkApiCredentials(params) {
-	const apiUser = params.apiUser?.trim();
-	if (!apiUser) return;
-	const inlinePassword = normalizeResolvedSecretInputString({
-		value: params.apiPassword,
-		path: "channels.nextcloud-talk.apiPassword"
-	});
-	if (inlinePassword) return {
-		apiUser,
-		apiPassword: inlinePassword
-	};
-	if (!params.apiPasswordFile) return;
-	try {
-		const fileValue = tryReadSecretFileSync(params.apiPasswordFile, "Nextcloud Talk API password", { rejectHardlinks: false });
-		return fileValue ? {
-			apiUser,
-			apiPassword: fileValue
-		} : void 0;
-	} catch {
-		return;
-	}
-}
-//#endregion
 //#region extensions/nextcloud-talk/src/signature.ts
 const SIGNATURE_HEADER = "x-nextcloud-talk-signature";
 const RANDOM_HEADER = "x-nextcloud-talk-random";
@@ -513,19 +540,13 @@ function normalizeNextcloudTalkAllowlist(values) {
 	return (values ?? []).map((value) => normalizeNextcloudTalkAllowEntry(String(value))).filter(Boolean);
 }
 function resolveNextcloudTalkAllowlistMatch(params) {
-	const allowFrom = normalizeNextcloudTalkAllowlist(params.allowFrom);
-	if (allowFrom.length === 0) return { allowed: false };
-	if (allowFrom.includes("*")) return {
-		allowed: true,
-		matchKey: "*",
-		matchSource: "wildcard"
-	};
-	const senderId = normalizeNextcloudTalkAllowEntry(params.senderId);
-	return allowFrom.includes(senderId) ? {
-		allowed: true,
-		matchKey: senderId,
-		matchSource: "id"
-	} : { allowed: false };
+	return resolveAllowlistMatchByCandidates({
+		allowList: normalizeNextcloudTalkAllowlist(params.allowFrom),
+		candidates: [{
+			value: normalizeNextcloudTalkAllowEntry(params.senderId),
+			source: "id"
+		}]
+	});
 }
 function resolveNextcloudTalkRoomMatch(params) {
 	const rooms = params.rooms ?? {};
@@ -1077,19 +1098,17 @@ async function handleNextcloudTalkInbound(params) {
 		runtime.log?.(`nextcloud-talk: drop room ${roomToken} (no mention)`);
 		return;
 	}
-	const { route, buildEnvelope } = resolveInboundRouteEnvelopeBuilderWithRuntime({
+	const { route, buildEnvelope } = resolveChannelInboundRouteEnvelope({
 		cfg: config,
 		channel: CHANNEL_ID,
 		accountId: account.accountId,
 		peer: {
 			kind: isGroup ? "group" : "direct",
 			id: isGroup ? roomToken : senderId
-		},
-		runtime: core.channel,
-		sessionStore: config.session?.store
+		}
 	});
 	const fromLabel = isGroup ? `room:${roomName || roomToken}` : senderName || `user:${senderId}`;
-	const { storePath, body } = buildEnvelope({
+	const body = buildEnvelope({
 		channel: "Nextcloud Talk",
 		from: fromLabel,
 		timestamp: message.timestamp,
@@ -1097,40 +1116,58 @@ async function handleNextcloudTalkInbound(params) {
 	});
 	const groupSystemPrompt = normalizeOptionalString(roomConfig?.systemPrompt);
 	const blockStreamingEnabled = resolveChannelStreamingBlockEnabled(account.config);
-	const ctxPayload = core.channel.reply.finalizeInboundContext({
-		Body: body,
-		BodyForAgent: rawBody,
-		RawBody: rawBody,
-		CommandBody: rawBody,
-		From: isGroup ? `nextcloud-talk:room:${roomToken}` : `nextcloud-talk:${senderId}`,
-		To: `nextcloud-talk:${roomToken}`,
-		SessionKey: route.sessionKey,
-		AccountId: route.accountId,
-		ChatType: isGroup ? "group" : "direct",
-		ConversationLabel: fromLabel,
-		SenderName: senderName || void 0,
-		SenderId: senderId,
-		GroupSubject: isGroup ? roomName || roomToken : void 0,
-		GroupSystemPrompt: isGroup ? groupSystemPrompt : void 0,
-		Provider: CHANNEL_ID,
-		Surface: CHANNEL_ID,
-		WasMentioned: isGroup ? wasMentioned : void 0,
-		MessageSid: message.messageId,
-		Timestamp: message.timestamp,
-		OriginatingChannel: CHANNEL_ID,
-		OriginatingTo: `nextcloud-talk:${roomToken}`,
-		CommandAuthorized: commandAuthorized
+	const ctxPayload = buildChannelInboundEventContext({
+		channel: CHANNEL_ID,
+		accountId: route.accountId,
+		messageId: message.messageId,
+		timestamp: message.timestamp,
+		from: isGroup ? `nextcloud-talk:room:${roomToken}` : `nextcloud-talk:${senderId}`,
+		sender: {
+			id: senderId,
+			name: senderName || void 0
+		},
+		conversation: {
+			kind: isGroup ? "group" : "direct",
+			id: roomToken,
+			label: fromLabel
+		},
+		route: {
+			agentId: route.agentId,
+			dmScope: route.dmScope,
+			accountId: route.accountId,
+			routeSessionKey: route.sessionKey
+		},
+		reply: {
+			to: `nextcloud-talk:${roomToken}`,
+			originatingTo: `nextcloud-talk:${roomToken}`
+		},
+		message: {
+			body,
+			bodyForAgent: rawBody,
+			rawBody,
+			commandBody: rawBody
+		},
+		access: {
+			commands: { authorized: commandAuthorized },
+			mentions: {
+				canDetectMention: isGroup,
+				wasMentioned: isGroup && wasMentioned
+			}
+		},
+		extra: {
+			GroupSubject: isGroup ? roomName || roomToken : void 0,
+			GroupSystemPrompt: isGroup ? groupSystemPrompt : void 0
+		}
 	});
-	await core.channel.inbound.dispatchReply({
+	await core.channel.inbound.dispatch({
 		cfg: config,
 		channel: CHANNEL_ID,
 		accountId: account.accountId,
-		agentId: route.agentId,
-		routeSessionKey: route.sessionKey,
-		storePath,
+		route: {
+			agentId: route.agentId,
+			sessionKey: route.sessionKey
+		},
 		ctxPayload,
-		recordInboundSession: core.channel.session.recordInboundSession,
-		dispatchReplyWithBufferedBlockDispatcher: core.channel.reply.dispatchReplyWithBufferedBlockDispatcher,
 		delivery: {
 			preparePayload: (payload) => payload.text === void 0 ? payload : {
 				...payload,
@@ -1992,12 +2029,14 @@ const nextcloudTalkPlugin = createChatChannelPlugin({
 		configSchema: buildChannelConfigSchema(NextcloudTalkConfigSchema),
 		config: {
 			...nextcloudTalkConfigAdapter,
-			isConfigured: (account) => Boolean(account.secret?.trim() && account.baseUrl?.trim()),
+			isConfigured: (account) => Boolean(account.tokenStatus !== "missing" && account.baseUrl?.trim()),
 			describeAccount: (account) => describeWebhookAccountSnapshot({
 				account,
-				configured: Boolean(account.secret?.trim() && account.baseUrl?.trim()),
+				configured: Boolean(account.tokenStatus !== "missing" && account.baseUrl?.trim()),
 				extra: {
 					secretSource: account.secretSource,
+					tokenStatus: account.tokenStatus,
+					apiCredentialStatus: account.apiCredentialStatus,
 					baseUrl: account.baseUrl ? "[set]" : "[missing]"
 				}
 			})
@@ -2048,9 +2087,11 @@ const nextcloudTalkPlugin = createChatChannelPlugin({
 				accountId: account.accountId,
 				name: account.name,
 				enabled: account.enabled,
-				configured: Boolean(account.secret?.trim() && account.baseUrl?.trim()),
+				configured: Boolean(account.tokenStatus !== "missing" && account.baseUrl?.trim()),
 				extra: {
 					secretSource: account.secretSource,
+					tokenStatus: account.tokenStatus,
+					apiCredentialStatus: account.apiCredentialStatus,
 					baseUrl: account.baseUrl ? "[set]" : "[missing]",
 					mode: "webhook"
 				}

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as nextcloudTalkPlugin } from "./channel-BSnehBf6.js";
+import { t as nextcloudTalkPlugin } from "./channel-De2OKnzd.js";
 export { nextcloudTalkPlugin };

package/npm-shrinkwrap.json

@@ -1,17 +1,17 @@
 {
   "name": "@openclaw/nextcloud-talk",
-  "version": "2026.7.2-beta.2",
+  "version": "2026.7.2-beta.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/nextcloud-talk",
-      "version": "2026.7.2-beta.2",
+      "version": "2026.7.2-beta.3",
       "dependencies": {
         "zod": "4.4.3"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.7.2-beta.2"
+        "openclaw": ">=2026.7.2-beta.3"
       },
       "peerDependenciesMeta": {
         "openclaw": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/nextcloud-talk",
-  "version": "2026.7.2-beta.2",
+  "version": "2026.7.2-beta.3",
   "description": "OpenClaw Nextcloud Talk channel plugin for conversations.",
   "repository": {
     "type": "git",
@@ -8,7 +8,7 @@
   },
   "type": "module",
   "peerDependencies": {
-    "openclaw": ">=2026.7.2-beta.2"
+    "openclaw": ">=2026.7.2-beta.3"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -40,10 +40,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.7.2-beta.2"
+      "pluginApi": ">=2026.7.2-beta.3"
     },
     "build": {
-      "openclawVersion": "2026.7.2-beta.2"
+      "openclawVersion": "2026.7.2-beta.3"
     },
     "release": {
       "publishToClawHub": true,