@openclaw/nextcloud-talk 2026.8.1-beta.2 → 2026.8.1

package/dist/api.js

@@ -1,2 +1,2 @@
-import { t as nextcloudTalkPlugin } from "./channel-CojgyJSq.js";
+import { t as nextcloudTalkPlugin } from "./channel-C7Xe0Nkb.js";
 export { nextcloudTalkPlugin };

package/dist/{channel-CojgyJSq.js → channel-C7Xe0Nkb.js}

@@ -4,7 +4,7 @@ import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries
 import { createAccountListHelpers, describeWebhookAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { createChatChannelPlugin } from "openclaw/plugin-sdk/channel-core";
 import { createLoggedPairingApprovalNotifier, createPairingPrefixStripper } from "openclaw/plugin-sdk/channel-pairing";
-import { createAllowlistProviderRouteAllowlistWarningCollector, resolveScopeRequireMention, resolveScopeToolsPolicy } from "openclaw/plugin-sdk/channel-policy";
+import { createAllowlistProviderRouteAllowlistWarningCollector, createConditionalWarningCollector, resolveScopeRequireMention, resolveScopeToolsPolicy } from "openclaw/plugin-sdk/channel-policy";
 import { buildWebhookChannelStatusSummary, createComputedAccountStatusAdapter, createDefaultChannelRuntimeState } from "openclaw/plugin-sdk/status-helpers";
 import { FormatCapabilityProfile, convertMarkdownTables, renderMarkdownWithMarkers, sanitizeAssistantVisibleText } from "openclaw/plugin-sdk/text-chunking";
 import { createChannelApprovalAuth } from "openclaw/plugin-sdk/approval-auth-runtime";
@@ -12,22 +12,22 @@ import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, norm
 import { DEFAULT_ACCOUNT_ID, hasConfiguredAccountValue, normalizeAccountId, resolveAccountWithDefaultFallback } from "openclaw/plugin-sdk/account-core";
 import { isTruthyEnvValue } from "openclaw/plugin-sdk/runtime-env";
 import { tryReadSecretFileSync } from "openclaw/plugin-sdk/secret-file-runtime";
-import { buildSecretInputSchema, hasConfiguredSecretInput, normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
+import { buildSecretInputSchema, hasConfiguredSecretInput, normalizeResolvedSecretInputString, resolveSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { parseStrictNonNegativeInteger, parseStrictPositiveInteger } from "openclaw/plugin-sdk/number-runtime";
-import { readProviderJsonResponse, readResponseTextLimited } from "openclaw/plugin-sdk/provider-http";
+import { readProviderJsonResponse, readProviderTextResponse } from "openclaw/plugin-sdk/provider-http";
 import { resolveChannelInboundRouteEnvelope } from "openclaw/plugin-sdk/channel-inbound";
 import { bindIngressLifecycleToReplyOptions, createAccountStatusSink, createChannelIngressMonitor, createMessageReceiptFromOutboundResults, defineChannelMessageAdapter, resolveChannelStreamingBlockEnabled, runPassiveAccountLifecycle } from "openclaw/plugin-sdk/channel-outbound";
 import { ssrfPolicyFromPrivateNetworkOptIn, ssrfPolicyFromPrivateNetworkOptIn as ssrfPolicyFromPrivateNetworkOptIn$1 } from "openclaw/plugin-sdk/ssrf-runtime";
+import { redactToolPayloadText } from "openclaw/plugin-sdk/logging-core";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
 import { createHmac, randomBytes } from "node:crypto";
 import { fileExists, safeEqualSecret } from "openclaw/plugin-sdk/security-runtime";
-import { clearAccountEntryFields } from "openclaw/plugin-sdk/channel-plugin-common";
 import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$2 } from "openclaw/plugin-sdk/account-id";
-import { DmPolicySchema, GroupPolicySchema, MarkdownConfigSchema, ReplyRuntimeConfigSchemaShape, buildChannelConfigSchema, buildGroupEntrySchema, buildMultiAccountChannelSchema, requireOpenAllowFrom } from "openclaw/plugin-sdk/channel-config-schema";
+import { DmPolicySchema, GroupPolicySchema, MarkdownConfigSchema, ReplyRuntimeConfigSchemaShape, ReplyToModeSchema, buildChannelConfigSchema, buildGroupEntrySchema, buildMultiAccountChannelSchema, requireOpenAllowFrom } from "openclaw/plugin-sdk/channel-config-schema";
 import { formatAllowFromLowercase, resolveAllowlistMatchByCandidates } from "openclaw/plugin-sdk/allow-from";
-import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter, createScopedDmSecurityResolver } from "openclaw/plugin-sdk/channel-config-helpers";
+import { adaptScopedAccountAccessor, clearAccountFieldsFromConfigSection, createScopedChannelConfigAdapter, createScopedDmSecurityResolver } from "openclaw/plugin-sdk/channel-config-helpers";
 import { requireChannelOpenAllowFrom, resolveLoggerBackedRuntime } from "openclaw/plugin-sdk/extension-shared";
 import { z } from "zod";
 import os from "node:os";
@@ -40,7 +40,7 @@ import { buildChannelKeyCandidates, normalizeChannelSlug, resolveChannelEntryMat
 import { pruneMapToMaxSize } from "openclaw/plugin-sdk/collection-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { createServer } from "node:http";
-import { WEBHOOK_RATE_LIMIT_DEFAULTS, createAuthRateLimiter, isRequestBodyLimitError, readRequestBodyWithLimit, requestBodyErrorToText } from "openclaw/plugin-sdk/webhook-ingress";
+import { WEBHOOK_RATE_LIMIT_DEFAULTS, createAuthRateLimiter, isRequestBodyLimitError, readRequestBodyWithLimit, requestBodyErrorToText, resolveRequestClientIp } from "openclaw/plugin-sdk/webhook-ingress";
 import { isRecord } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
 import { jsonResult, readStringParam, resolveReactionMessageId } from "openclaw/plugin-sdk/channel-actions";
 import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$1, buildOutboundBaseSessionKey, normalizeAccountId as normalizeAccountId$1 } from "openclaw/plugin-sdk/routing";
@@ -97,18 +97,26 @@ function listNextcloudTalkAccountIds(cfg) {
 	debugAccounts("listNextcloudTalkAccountIds", ids);
 	return ids;
 }
-function resolveNextcloudTalkSecret(cfg, opts) {
-	const resolvedAccountId = opts.accountId ?? resolveDefaultNextcloudTalkAccountId(cfg);
-	const merged = mergeNextcloudTalkAccountConfig(cfg, resolvedAccountId);
+function resolveNextcloudTalkSecret(accountId, merged) {
+	const configuredSecret = resolveSecretInputString({
+		value: merged.botSecret,
+		path: `channels.nextcloud-talk.accounts.${accountId}.botSecret`,
+		mode: "inspect"
+	});
+	if (configuredSecret.status === "configured_unavailable") return {
+		secret: "",
+		source: "config",
+		status: "configured_unavailable"
+	};
 	const envSecret = normalizeOptionalString(process.env.NEXTCLOUD_TALK_BOT_SECRET);
-	if (envSecret && resolvedAccountId === DEFAULT_ACCOUNT_ID) return {
+	if (envSecret && accountId === DEFAULT_ACCOUNT_ID) return {
 		secret: envSecret,
 		source: "env",
 		status: "available"
 	};
 	const botSecretFile = normalizeOptionalString(merged.botSecretFile);
 	if (botSecretFile) {
-		const result = tryReadSecretFileSync(botSecretFile, "Nextcloud Talk bot secret file", { rejectSymlink: true }, { configPath: `channels.nextcloud-talk.accounts.${resolvedAccountId}.botSecretFile` });
+		const result = tryReadSecretFileSync(botSecretFile, "Nextcloud Talk bot secret file", { rejectSymlink: true }, { configPath: `channels.nextcloud-talk.accounts.${accountId}.botSecretFile` });
 		return result.status === "available" ? {
 			secret: result.value,
 			source: "secretFile",
@@ -120,12 +128,8 @@ function resolveNextcloudTalkSecret(cfg, opts) {
 			diagnostic: result.diagnostic
 		};
 	}
-	const inlineSecret = normalizeResolvedSecretInputString({
-		value: merged.botSecret,
-		path: `channels.nextcloud-talk.accounts.${resolvedAccountId}.botSecret`
-	});
-	if (inlineSecret) return {
-		secret: inlineSecret,
+	if (configuredSecret.status === "available") return {
+		secret: configuredSecret.value,
 		source: "config",
 		status: "available"
 	};
@@ -142,14 +146,7 @@ function resolveNextcloudTalkAccount(params) {
 		const merged = mergeNextcloudTalkAccountConfig(params.cfg, accountId);
 		const accountEnabled = merged.enabled !== false;
 		const enabled = baseEnabled && accountEnabled;
-		const secretResolution = resolveNextcloudTalkSecret(params.cfg, { accountId });
-		const apiCredentialResolution = resolveNextcloudTalkApiCredentialsResult({
-			apiUser: merged.apiUser,
-			apiPassword: merged.apiPassword,
-			apiPasswordFile: merged.apiPasswordFile,
-			configPath: `channels.nextcloud-talk.accounts.${accountId}.apiPasswordFile`
-		});
-		const diagnostics = [secretResolution.diagnostic, apiCredentialResolution.status === "configured_unavailable" ? apiCredentialResolution.diagnostic : void 0].filter((diagnostic) => Boolean(diagnostic));
+		const secretResolution = resolveNextcloudTalkSecret(accountId, merged);
 		const baseUrl = merged.baseUrl?.trim()?.replace(/\/$/, "") ?? "";
 		debugAccounts("resolve", {
 			accountId,
@@ -165,8 +162,7 @@ function resolveNextcloudTalkAccount(params) {
 			secret: secretResolution.secret,
 			secretSource: secretResolution.source,
 			tokenStatus: secretResolution.status,
-			apiCredentialStatus: apiCredentialResolution.status,
-			...diagnostics.length > 0 ? { credentialDiagnostics: diagnostics } : {},
+			...secretResolution.diagnostic ? { credentialDiagnostics: [secretResolution.diagnostic] } : {},
 			config: merged
 		};
 	};
@@ -178,6 +174,21 @@ function resolveNextcloudTalkAccount(params) {
 		resolveDefaultAccountId: () => resolveDefaultNextcloudTalkAccountId(params.cfg)
 	});
 }
+function inspectNextcloudTalkAccount(params) {
+	const account = resolveNextcloudTalkAccount(params);
+	const apiCredentialResolution = resolveNextcloudTalkApiCredentialsResult({
+		apiUser: account.config.apiUser,
+		apiPassword: account.config.apiPassword,
+		apiPasswordFile: account.config.apiPasswordFile,
+		configPath: `channels.nextcloud-talk.accounts.${account.accountId}.apiPasswordFile`
+	});
+	const credentialDiagnostics = [...account.credentialDiagnostics ?? [], ...apiCredentialResolution.status === "configured_unavailable" ? [apiCredentialResolution.diagnostic] : []];
+	return {
+		...account,
+		apiCredentialStatus: apiCredentialResolution.status,
+		...credentialDiagnostics.length > 0 ? { credentialDiagnostics } : {}
+	};
+}
 //#endregion
 //#region extensions/nextcloud-talk/src/approval-auth.ts
 function normalizeNextcloudTalkApproverId(value) {
@@ -199,6 +210,18 @@ async function releaseNextcloudTalkGuardedResponse(params) {
 	if (!params.response.bodyUsed) await params.response.body?.cancel().catch(() => void 0);
 	await params.release();
 }
+async function readNextcloudTalkErrorBody(response, ...credentials) {
+	try {
+		let body = await readProviderTextResponse(response, "Nextcloud Talk error", {
+			maxBytes: 8 * 1024,
+			chunkTimeoutMs: 1e4
+		});
+		for (const credential of credentials) body = body.replaceAll(credential, "***");
+		return redactToolPayloadText(body);
+	} catch {
+		return "";
+	}
+}
 //#endregion
 //#region extensions/nextcloud-talk/src/signature.ts
 const SIGNATURE_HEADER = "x-nextcloud-talk-signature";
@@ -245,7 +268,6 @@ function generateNextcloudTalkSignature(params) {
 //#endregion
 //#region extensions/nextcloud-talk/src/bot-preflight.ts
 const BOT_FEATURE_RESPONSE = 2;
-const BOT_PREFLIGHT_ERROR_BODY_LIMIT_BYTES = 8 * 1024;
 function normalizeUrlForMatch(value) {
 	if (!value?.trim()) return "";
 	try {
@@ -310,7 +332,7 @@ async function probeNextcloudTalkBotResponseFeature(params) {
 		});
 		try {
 			if (!response.ok) {
-				const body = await readResponseTextLimited(response, BOT_PREFLIGHT_ERROR_BODY_LIMIT_BYTES).catch(() => "");
+				const body = await readNextcloudTalkErrorBody(response, auth, credentials.apiPassword);
 				return {
 					ok: false,
 					code: "api_error",
@@ -362,6 +384,7 @@ const nextcloudTalkConfigAdapter = createScopedChannelConfigAdapter({
 	sectionKey: "nextcloud-talk",
 	listAccountIds: listNextcloudTalkAccountIds,
 	resolveAccount: adaptScopedAccountAccessor(resolveNextcloudTalkAccount),
+	inspectAccount: adaptScopedAccountAccessor(inspectNextcloudTalkAccount),
 	defaultAccountId: resolveDefaultNextcloudTalkAccountId,
 	clearBaseFields: [
 		"botSecret",
@@ -397,6 +420,7 @@ const NextcloudTalkConfigSchema = buildMultiAccountChannelSchema(z.object({
 	name: z.string().optional(),
 	enabled: z.boolean().optional(),
 	configWrites: z.boolean().optional(),
+	replyToMode: ReplyToModeSchema.optional(),
 	markdown: MarkdownConfigSchema,
 	baseUrl: z.string().optional(),
 	botSecret: buildSecretInputSchema().optional(),
@@ -692,7 +716,6 @@ function looksLikeNextcloudTalkTargetId(raw) {
 }
 //#endregion
 //#region extensions/nextcloud-talk/src/send.ts
-const NEXTCLOUD_TALK_ERROR_SNIPPET_MAX_BYTES = 8 * 1024;
 const NEXTCLOUD_TALK_ERROR_SNIPPET_MAX_CHARS = 200;
 const NEXTCLOUD_TALK_SEND_TIMEOUT_MS = 3e4;
 const NEXTCLOUD_TALK_FORMAT_PROFILE = FormatCapabilityProfile.define({
@@ -713,20 +736,12 @@ function renderNextcloudTalkMarkdown(markdown) {
 		escapeText: (text) => text
 	}, NEXTCLOUD_TALK_FORMAT_PROFILE);
 }
-/** Collapses whitespace and caps an error-body prefix to a short, log-safe snippet. */
+/** Collapses and caps an already-redacted error body for display. */
 function collapseErrorSnippet(text) {
 	const collapsed = text.replace(/\s+/g, " ").trim();
 	if (collapsed.length > NEXTCLOUD_TALK_ERROR_SNIPPET_MAX_CHARS) return `${truncateUtf16Safe(collapsed, NEXTCLOUD_TALK_ERROR_SNIPPET_MAX_CHARS)}…`;
 	return collapsed;
 }
-/** Reads a bounded, collapsed error-body snippet without buffering hostile responses. */
-async function readNextcloudTalkErrorSnippet(response) {
-	try {
-		return collapseErrorSnippet(await readResponseTextLimited(response, NEXTCLOUD_TALK_ERROR_SNIPPET_MAX_BYTES));
-	} catch {
-		return "";
-	}
-}
 function resolveCredentials(explicit, account) {
 	const baseUrl = explicit.baseUrl?.trim() ?? account.baseUrl;
 	const secret = explicit.secret?.trim() ?? account.secret;
@@ -817,7 +832,7 @@ async function sendMessageNextcloudTalk(to, text, opts) {
 	});
 	try {
 		if (!response.ok) {
-			const errorBody = await readNextcloudTalkErrorSnippet(response);
+			const errorBody = collapseErrorSnippet(await readNextcloudTalkErrorBody(response, signature));
 			const status = response.status;
 			let errorMsg = `Nextcloud Talk send failed (${status})`;
 			if (status === 400) errorMsg = `Nextcloud Talk: bad request - ${errorBody || "invalid message format"}`;
@@ -879,7 +894,7 @@ async function sendReactionNextcloudTalk(roomToken, messageId, reaction, opts) {
 	});
 	try {
 		if (!response.ok) {
-			const errorBody = await readNextcloudTalkErrorSnippet(response);
+			const errorBody = collapseErrorSnippet(await readNextcloudTalkErrorBody(response, signature));
 			throw new Error(`Nextcloud Talk reaction failed: ${response.status} ${errorBody}`.trim());
 		}
 		return { ok: true };
@@ -950,7 +965,15 @@ async function handleNextcloudTalkInbound(params) {
 		accountId: account.accountId
 	});
 	const rawBody = message.text?.trim() ?? "";
-	if (!rawBody) return;
+	if (!rawBody) {
+		logInboundDrop({
+			log: (messageLocal) => runtime.log?.(messageLocal),
+			channel: CHANNEL_ID,
+			reason: `empty message body (mediaType=${message.mediaType})`,
+			target: message.senderId
+		});
+		return;
+	}
 	const roomKind = await resolveNextcloudTalkRoomKind({
 		account,
 		roomToken: message.roomToken,
@@ -1352,7 +1375,7 @@ function createNextcloudTalkWebhookServer(opts) {
 				res.end();
 				return;
 			}
-			const clientIp = req.socket.remoteAddress ?? "unknown";
+			const clientIp = resolveRequestClientIp(req, opts.trustedProxies, opts.allowRealIpFallback) ?? req.socket.remoteAddress ?? "unknown";
 			if (!webhookAuthRateLimiter.check(clientIp, WEBHOOK_AUTH_RATE_LIMIT_SCOPE).allowed) {
 				res.writeHead(429);
 				res.end("Too Many Requests");
@@ -1410,6 +1433,7 @@ function createNextcloudTalkWebhookServer(opts) {
 	const stop = async () => {
 		stopRequested = true;
 		await closeIfListening();
+		webhookAuthRateLimiter.dispose();
 	};
 	const start = () => {
 		if (stopRequested) return Promise.resolve();
@@ -1436,6 +1460,12 @@ function createNextcloudTalkWebhookServer(opts) {
 //#endregion
 //#region extensions/nextcloud-talk/src/webhook-spool.ts
 const NEXTCLOUD_TALK_INGRESS_POLL_INTERVAL_MS = 500;
+function describeIgnoredWebhookEvent(rawEvent) {
+	const envelope = parseRawObject(rawEvent);
+	const type = typeof envelope.type === "string" ? envelope.type : "unknown";
+	const object = isRecord(envelope.object) ? envelope.object : null;
+	return `type=${type} objectType=${typeof object?.type === "string" ? object.type : "unknown"}`;
+}
 const NextcloudTalkWebhookPayloadSchema = z.object({
 	type: z.enum([
 		"Create",
@@ -1562,7 +1592,11 @@ function createNextcloudTalkWebhookSpool(options) {
 			if (stopping) return Promise.reject(/* @__PURE__ */ new Error("Nextcloud Talk ingress stopped"));
 			const receiveTask = (async () => {
 				await startAfterMigration;
-				return (await monitor.admit(rawEvent)).kind === "ignored" ? "ignored" : "accepted";
+				if ((await monitor.admit(rawEvent)).kind === "ignored") {
+					options.runtime.log?.(`nextcloud-talk: ignored non-message webhook event (${describeIgnoredWebhookEvent(rawEvent)})`);
+					return "ignored";
+				}
+				return "accepted";
 			})();
 			inFlightReceives.add(receiveTask);
 			receiveTask.then(() => inFlightReceives.delete(receiveTask), () => inFlightReceives.delete(receiveTask));
@@ -1647,6 +1681,8 @@ async function monitorNextcloudTalkProvider(opts) {
 		onError: (error) => {
 			logger.error(`[nextcloud-talk:${account.accountId}] webhook error: ${error.message}`);
 		},
+		trustedProxies: cfg.gateway?.trustedProxies,
+		allowRealIpFallback: cfg.gateway?.allowRealIpFallback,
 		abortSignal: opts.abortSignal
 	});
 	let stopPromise;
@@ -1704,44 +1740,18 @@ const nextcloudTalkGatewayAdapter = {
 		});
 	},
 	logoutAccount: async ({ accountId, cfg }) => {
-		const nextCfg = { ...cfg };
-		const nextSection = cfg.channels?.["nextcloud-talk"] ? { ...cfg.channels["nextcloud-talk"] } : void 0;
-		let cleared = false;
-		let changed = false;
-		if (nextSection) {
-			if (accountId === DEFAULT_ACCOUNT_ID$2 && nextSection.botSecret) {
-				delete nextSection.botSecret;
-				cleared = true;
-				changed = true;
-			}
-			const accountCleanup = clearAccountEntryFields({
-				accounts: nextSection.accounts,
-				accountId,
-				fields: ["botSecret"]
-			});
-			if (accountCleanup.changed) {
-				changed = true;
-				if (accountCleanup.cleared) cleared = true;
-				if (accountCleanup.nextAccounts) nextSection.accounts = accountCleanup.nextAccounts;
-				else delete nextSection.accounts;
-			}
-		}
-		if (changed) if (nextSection && Object.keys(nextSection).length > 0) nextCfg.channels = {
-			...nextCfg.channels,
-			"nextcloud-talk": nextSection
-		};
-		else {
-			const nextChannels = { ...nextCfg.channels };
-			delete nextChannels["nextcloud-talk"];
-			if (Object.keys(nextChannels).length > 0) nextCfg.channels = nextChannels;
-			else delete nextCfg.channels;
-		}
+		const { nextConfig, changed, cleared } = clearAccountFieldsFromConfigSection({
+			cfg,
+			sectionKey: "nextcloud-talk",
+			accountId,
+			fields: ["botSecret"]
+		});
 		const loggedOut = resolveNextcloudTalkAccount({
-			cfg: changed ? nextCfg : cfg,
+			cfg: nextConfig,
 			accountId
 		}).secretSource === "none";
 		if (changed) await getNextcloudTalkRuntime().config.replaceConfigFile({
-			nextConfig: nextCfg,
+			nextConfig,
 			afterWrite: { mode: "auto" }
 		});
 		return {
@@ -2192,6 +2202,12 @@ const collectNextcloudTalkSecurityWarnings = createAllowlistProviderRouteAllowli
 		groupAllowFromPath: "channels.nextcloud-talk.groupAllowFrom"
 	}
 });
+const collectNextcloudTalkOpenGroupFindings = createConditionalWarningCollector.findings({
+	collectWarnings: collectNextcloudTalkSecurityWarnings,
+	checkId: "channels.nextcloud-talk.groups.open",
+	severity: "critical",
+	title: "Nextcloud Talk security warning"
+});
 const nextcloudTalkPlugin = createChatChannelPlugin({
 	base: {
 		id: "nextcloud-talk",
@@ -2288,7 +2304,7 @@ const nextcloudTalkPlugin = createChatChannelPlugin({
 	} },
 	security: {
 		...nextcloudTalkSecurityAdapter,
-		collectWarnings: collectNextcloudTalkSecurityWarnings
+		collectWarnings: collectNextcloudTalkOpenGroupFindings
 	},
 	outbound: {
 		base: {

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as nextcloudTalkPlugin } from "./channel-CojgyJSq.js";
+import { t as nextcloudTalkPlugin } from "./channel-C7Xe0Nkb.js";
 export { nextcloudTalkPlugin };

package/dist/configured-state.js

@@ -0,0 +1,25 @@
+import { DEFAULT_ACCOUNT_ID, hasConfiguredAccountValue, mergeAccountConfig } from "openclaw/plugin-sdk/account-core";
+//#region extensions/nextcloud-talk/configured-state.ts
+function hasConfiguredNextcloudAccount(account, env) {
+	return Boolean(account?.baseUrl?.trim() && (hasConfiguredAccountValue(account.botSecret) || hasConfiguredAccountValue(account.botSecretFile) || hasConfiguredAccountValue(env.NEXTCLOUD_TALK_BOT_SECRET)));
+}
+/** Require a Nextcloud server plus its account-owned bot credential. */
+function hasConfiguredNextcloudTalkChannelState(params) {
+	const channel = params.cfg.channels?.["nextcloud-talk"];
+	if (channel?.enabled === false) return false;
+	const defaultAccount = channel?.accounts?.[DEFAULT_ACCOUNT_ID];
+	if (defaultAccount?.enabled !== false) {
+		if (hasConfiguredNextcloudAccount(defaultAccount ? mergeAccountConfig({
+			channelConfig: channel,
+			accountConfig: defaultAccount,
+			omitKeys: ["defaultAccount"]
+		}) : channel, params.env ?? process.env)) return true;
+	}
+	return Object.entries(channel?.accounts ?? {}).some(([accountId, account]) => accountId !== DEFAULT_ACCOUNT_ID && account.enabled !== false && hasConfiguredNextcloudAccount(mergeAccountConfig({
+		channelConfig: channel,
+		accountConfig: account,
+		omitKeys: ["defaultAccount"]
+	}), {}));
+}
+//#endregion
+export { hasConfiguredNextcloudTalkChannelState };

package/openclaw.plugin.json

@@ -32,6 +32,26 @@
           "configWrites": {
             "type": "boolean"
           },
+          "replyToMode": {
+            "anyOf": [
+              {
+                "type": "string",
+                "const": "off"
+              },
+              {
+                "type": "string",
+                "const": "first"
+              },
+              {
+                "type": "string",
+                "const": "all"
+              },
+              {
+                "type": "string",
+                "const": "batched"
+              }
+            ]
+          },
           "markdown": {
             "type": "object",
             "properties": {
@@ -479,6 +499,26 @@
                 "configWrites": {
                   "type": "boolean"
                 },
+                "replyToMode": {
+                  "anyOf": [
+                    {
+                      "type": "string",
+                      "const": "off"
+                    },
+                    {
+                      "type": "string",
+                      "const": "first"
+                    },
+                    {
+                      "type": "string",
+                      "const": "all"
+                    },
+                    {
+                      "type": "string",
+                      "const": "batched"
+                    }
+                  ]
+                },
                 "markdown": {
                   "type": "object",
                   "properties": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/nextcloud-talk",
-  "version": "2026.8.1-beta.2",
+  "version": "2026.8.1",
   "description": "OpenClaw Nextcloud Talk channel plugin for conversations.",
   "repository": {
     "type": "git",
@@ -8,7 +8,7 @@
   },
   "type": "module",
   "peerDependencies": {
-    "openclaw": ">=2026.8.1-beta.2"
+    "openclaw": ">=2026.8.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -31,7 +31,9 @@
             "NEXTCLOUD_TALK_BOT_SECRET",
             "NEXTCLOUD_TALK_API_PASSWORD"
           ]
-        }
+        },
+        "specifier": "./dist/configured-state.js",
+        "exportName": "hasConfiguredNextcloudTalkChannelState"
       },
       "label": "Nextcloud Talk",
       "selectionLabel": "Nextcloud Talk (self-hosted)",
@@ -127,10 +129,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.8.1-beta.2"
+      "pluginApi": ">=2026.8.1"
     },
     "build": {
-      "openclawVersion": "2026.8.1-beta.2"
+      "openclawVersion": "2026.8.1"
     },
     "release": {
       "publishToClawHub": true,