loudmouth-ai 0.1.0 → 0.2.0

package/extensions/nextcloud-talk/src/send.ts

@@ -1,206 +0,0 @@
-import { resolveNextcloudTalkAccount } from "./accounts.js";
-import { getNextcloudTalkRuntime } from "./runtime.js";
-import { generateNextcloudTalkSignature } from "./signature.js";
-import type { CoreConfig, NextcloudTalkSendResult } from "./types.js";
-
-type NextcloudTalkSendOpts = {
-  baseUrl?: string;
-  secret?: string;
-  accountId?: string;
-  replyTo?: string;
-  verbose?: boolean;
-};
-
-function resolveCredentials(
-  explicit: { baseUrl?: string; secret?: string },
-  account: { baseUrl: string; secret: string; accountId: string },
-): { baseUrl: string; secret: string } {
-  const baseUrl = explicit.baseUrl?.trim() ?? account.baseUrl;
-  const secret = explicit.secret?.trim() ?? account.secret;
-
-  if (!baseUrl) {
-    throw new Error(
-      `Nextcloud Talk baseUrl missing for account "${account.accountId}" (set channels.nextcloud-talk.baseUrl).`,
-    );
-  }
-  if (!secret) {
-    throw new Error(
-      `Nextcloud Talk bot secret missing for account "${account.accountId}" (set channels.nextcloud-talk.botSecret/botSecretFile or NEXTCLOUD_TALK_BOT_SECRET for default).`,
-    );
-  }
-
-  return { baseUrl, secret };
-}
-
-function normalizeRoomToken(to: string): string {
-  const trimmed = to.trim();
-  if (!trimmed) throw new Error("Room token is required for Nextcloud Talk sends");
-
-  let normalized = trimmed;
-  if (normalized.startsWith("nextcloud-talk:")) {
-    normalized = normalized.slice("nextcloud-talk:".length).trim();
-  } else if (normalized.startsWith("nc:")) {
-    normalized = normalized.slice("nc:".length).trim();
-  }
-
-  if (normalized.startsWith("room:")) {
-    normalized = normalized.slice("room:".length).trim();
-  }
-
-  if (!normalized) throw new Error("Room token is required for Nextcloud Talk sends");
-  return normalized;
-}
-
-export async function sendMessageNextcloudTalk(
-  to: string,
-  text: string,
-  opts: NextcloudTalkSendOpts = {},
-): Promise<NextcloudTalkSendResult> {
-  const cfg = getNextcloudTalkRuntime().config.loadConfig() as CoreConfig;
-  const account = resolveNextcloudTalkAccount({
-    cfg,
-    accountId: opts.accountId,
-  });
-  const { baseUrl, secret } = resolveCredentials(
-    { baseUrl: opts.baseUrl, secret: opts.secret },
-    account,
-  );
-  const roomToken = normalizeRoomToken(to);
-
-  if (!text?.trim()) {
-    throw new Error("Message must be non-empty for Nextcloud Talk sends");
-  }
-
-  const tableMode = getNextcloudTalkRuntime().channel.text.resolveMarkdownTableMode({
-    cfg,
-    channel: "nextcloud-talk",
-    accountId: account.accountId,
-  });
-  const message = getNextcloudTalkRuntime().channel.text.convertMarkdownTables(
-    text.trim(),
-    tableMode,
-  );
-
-  const body: Record<string, unknown> = {
-    message,
-  };
-  if (opts.replyTo) {
-    body.replyTo = opts.replyTo;
-  }
-  const bodyStr = JSON.stringify(body);
-
-  const { random, signature } = generateNextcloudTalkSignature({
-    body: bodyStr,
-    secret,
-  });
-
-  const url = `${baseUrl}/ocs/v2.php/apps/spreed/api/v1/bot/${roomToken}/message`;
-
-  const response = await fetch(url, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      "OCS-APIRequest": "true",
-      "X-Nextcloud-Talk-Bot-Random": random,
-      "X-Nextcloud-Talk-Bot-Signature": signature,
-    },
-    body: bodyStr,
-  });
-
-  if (!response.ok) {
-    const errorBody = await response.text().catch(() => "");
-    const status = response.status;
-    let errorMsg = `Nextcloud Talk send failed (${status})`;
-
-    if (status === 400) {
-      errorMsg = `Nextcloud Talk: bad request - ${errorBody || "invalid message format"}`;
-    } else if (status === 401) {
-      errorMsg = "Nextcloud Talk: authentication failed - check bot secret";
-    } else if (status === 403) {
-      errorMsg = "Nextcloud Talk: forbidden - bot may not have permission in this room";
-    } else if (status === 404) {
-      errorMsg = `Nextcloud Talk: room not found (token=${roomToken})`;
-    } else if (errorBody) {
-      errorMsg = `Nextcloud Talk send failed: ${errorBody}`;
-    }
-
-    throw new Error(errorMsg);
-  }
-
-  let messageId = "unknown";
-  let timestamp: number | undefined;
-  try {
-    const data = (await response.json()) as {
-      ocs?: {
-        data?: {
-          id?: number | string;
-          timestamp?: number;
-        };
-      };
-    };
-    if (data.ocs?.data?.id != null) {
-      messageId = String(data.ocs.data.id);
-    }
-    if (typeof data.ocs?.data?.timestamp === "number") {
-      timestamp = data.ocs.data.timestamp;
-    }
-  } catch {
-    // Response parsing failed, but message was sent.
-  }
-
-  if (opts.verbose) {
-    console.log(`[nextcloud-talk] Sent message ${messageId} to room ${roomToken}`);
-  }
-
-  getNextcloudTalkRuntime().channel.activity.record({
-    channel: "nextcloud-talk",
-    accountId: account.accountId,
-    direction: "outbound",
-  });
-
-  return { messageId, roomToken, timestamp };
-}
-
-export async function sendReactionNextcloudTalk(
-  roomToken: string,
-  messageId: string,
-  reaction: string,
-  opts: Omit<NextcloudTalkSendOpts, "replyTo"> = {},
-): Promise<{ ok: true }> {
-  const cfg = getNextcloudTalkRuntime().config.loadConfig() as CoreConfig;
-  const account = resolveNextcloudTalkAccount({
-    cfg,
-    accountId: opts.accountId,
-  });
-  const { baseUrl, secret } = resolveCredentials(
-    { baseUrl: opts.baseUrl, secret: opts.secret },
-    account,
-  );
-  const normalizedToken = normalizeRoomToken(roomToken);
-
-  const body = JSON.stringify({ reaction });
-  const { random, signature } = generateNextcloudTalkSignature({
-    body,
-    secret,
-  });
-
-  const url = `${baseUrl}/ocs/v2.php/apps/spreed/api/v1/bot/${normalizedToken}/reaction/${messageId}`;
-
-  const response = await fetch(url, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      "OCS-APIRequest": "true",
-      "X-Nextcloud-Talk-Bot-Random": random,
-      "X-Nextcloud-Talk-Bot-Signature": signature,
-    },
-    body,
-  });
-
-  if (!response.ok) {
-    const errorBody = await response.text().catch(() => "");
-    throw new Error(`Nextcloud Talk reaction failed: ${response.status} ${errorBody}`.trim());
-  }
-
-  return { ok: true };
-}

package/extensions/nextcloud-talk/src/signature.ts

@@ -1,67 +0,0 @@
-import { createHmac, randomBytes } from "node:crypto";
-
-import type { NextcloudTalkWebhookHeaders } from "./types.js";
-
-const SIGNATURE_HEADER = "x-nextcloud-talk-signature";
-const RANDOM_HEADER = "x-nextcloud-talk-random";
-const BACKEND_HEADER = "x-nextcloud-talk-backend";
-
-/**
- * Verify the HMAC-SHA256 signature of an incoming webhook request.
- * Signature is calculated as: HMAC-SHA256(random + body, secret)
- */
-export function verifyNextcloudTalkSignature(params: {
-  signature: string;
-  random: string;
-  body: string;
-  secret: string;
-}): boolean {
-  const { signature, random, body, secret } = params;
-  if (!signature || !random || !secret) return false;
-
-  const expected = createHmac("sha256", secret)
-    .update(random + body)
-    .digest("hex");
-
-  if (signature.length !== expected.length) return false;
-  let result = 0;
-  for (let i = 0; i < signature.length; i++) {
-    result |= signature.charCodeAt(i) ^ expected.charCodeAt(i);
-  }
-  return result === 0;
-}
-
-/**
- * Extract webhook headers from an incoming request.
- */
-export function extractNextcloudTalkHeaders(
-  headers: Record<string, string | string[] | undefined>,
-): NextcloudTalkWebhookHeaders | null {
-  const getHeader = (name: string): string | undefined => {
-    const value = headers[name] ?? headers[name.toLowerCase()];
-    return Array.isArray(value) ? value[0] : value;
-  };
-
-  const signature = getHeader(SIGNATURE_HEADER);
-  const random = getHeader(RANDOM_HEADER);
-  const backend = getHeader(BACKEND_HEADER);
-
-  if (!signature || !random || !backend) return null;
-
-  return { signature, random, backend };
-}
-
-/**
- * Generate signature headers for an outbound request to Nextcloud Talk.
- */
-export function generateNextcloudTalkSignature(params: { body: string; secret: string }): {
-  random: string;
-  signature: string;
-} {
-  const { body, secret } = params;
-  const random = randomBytes(32).toString("hex");
-  const signature = createHmac("sha256", secret)
-    .update(random + body)
-    .digest("hex");
-  return { random, signature };
-}

package/extensions/nextcloud-talk/src/types.ts

@@ -1,179 +0,0 @@
-import type {
-  BlockStreamingCoalesceConfig,
-  DmConfig,
-  DmPolicy,
-  GroupPolicy,
-} from "clawdbot/plugin-sdk";
-
-export type NextcloudTalkRoomConfig = {
-  requireMention?: boolean;
-  /** Optional tool policy overrides for this room. */
-  tools?: { allow?: string[]; deny?: string[] };
-  /** If specified, only load these skills for this room. Omit = all skills; empty = no skills. */
-  skills?: string[];
-  /** If false, disable the bot for this room. */
-  enabled?: boolean;
-  /** Optional allowlist for room senders (user ids). */
-  allowFrom?: string[];
-  /** Optional system prompt snippet for this room. */
-  systemPrompt?: string;
-};
-
-export type NextcloudTalkAccountConfig = {
-  /** Optional display name for this account (used in CLI/UI lists). */
-  name?: string;
-  /** If false, do not start this Nextcloud Talk account. Default: true. */
-  enabled?: boolean;
-  /** Base URL of the Nextcloud instance (e.g., "https://cloud.example.com"). */
-  baseUrl?: string;
-  /** Bot shared secret from occ talk:bot:install output. */
-  botSecret?: string;
-  /** Path to file containing bot secret (for secret managers). */
-  botSecretFile?: string;
-  /** Optional API user for room lookups (DM detection). */
-  apiUser?: string;
-  /** Optional API password/app password for room lookups. */
-  apiPassword?: string;
-  /** Path to file containing API password/app password. */
-  apiPasswordFile?: string;
-  /** Direct message policy (default: pairing). */
-  dmPolicy?: DmPolicy;
-  /** Webhook server port. Default: 8788. */
-  webhookPort?: number;
-  /** Webhook server host. Default: "0.0.0.0". */
-  webhookHost?: string;
-  /** Webhook endpoint path. Default: "/nextcloud-talk-webhook". */
-  webhookPath?: string;
-  /** Public URL for the webhook (used if behind reverse proxy). */
-  webhookPublicUrl?: string;
-  /** Optional allowlist of user IDs allowed to DM the bot. */
-  allowFrom?: string[];
-  /** Optional allowlist for Nextcloud Talk room senders (user ids). */
-  groupAllowFrom?: string[];
-  /** Group message policy (default: allowlist). */
-  groupPolicy?: GroupPolicy;
-  /** Per-room configuration (key is room token). */
-  rooms?: Record<string, NextcloudTalkRoomConfig>;
-  /** Max group messages to keep as history context (0 disables). */
-  historyLimit?: number;
-  /** Max DM turns to keep as history context. */
-  dmHistoryLimit?: number;
-  /** Per-DM config overrides keyed by user ID. */
-  dms?: Record<string, DmConfig>;
-  /** Outbound text chunk size (chars). Default: 4000. */
-  textChunkLimit?: number;
-  /** Chunking mode: "length" (default) splits by size; "newline" splits on every newline. */
-  chunkMode?: "length" | "newline";
-  /** Disable block streaming for this account. */
-  blockStreaming?: boolean;
-  /** Merge streamed block replies before sending. */
-  blockStreamingCoalesce?: BlockStreamingCoalesceConfig;
-  /** Media upload max size in MB. */
-  mediaMaxMb?: number;
-};
-
-export type NextcloudTalkConfig = {
-  /** Optional per-account Nextcloud Talk configuration (multi-account). */
-  accounts?: Record<string, NextcloudTalkAccountConfig>;
-} & NextcloudTalkAccountConfig;
-
-export type CoreConfig = {
-  channels?: {
-    "nextcloud-talk"?: NextcloudTalkConfig;
-  };
-  [key: string]: unknown;
-};
-
-/**
- * Nextcloud Talk webhook payload types based on Activity Streams 2.0 format.
- * Reference: https://nextcloud-talk.readthedocs.io/en/latest/bots/
- */
-
-/** Actor in the activity (the message sender). */
-export type NextcloudTalkActor = {
-  type: "Person";
-  /** User ID in Nextcloud. */
-  id: string;
-  /** Display name of the user. */
-  name: string;
-};
-
-/** The message object in the activity. */
-export type NextcloudTalkObject = {
-  type: "Note";
-  /** Message ID. */
-  id: string;
-  /** Message text (same as content for text/plain). */
-  name: string;
-  /** Message content. */
-  content: string;
-  /** Media type of the content. */
-  mediaType: string;
-};
-
-/** Target conversation/room. */
-export type NextcloudTalkTarget = {
-  type: "Collection";
-  /** Room token. */
-  id: string;
-  /** Room display name. */
-  name: string;
-};
-
-/** Incoming webhook payload from Nextcloud Talk. */
-export type NextcloudTalkWebhookPayload = {
-  type: "Create" | "Update" | "Delete";
-  actor: NextcloudTalkActor;
-  object: NextcloudTalkObject;
-  target: NextcloudTalkTarget;
-};
-
-/** Result from sending a message to Nextcloud Talk. */
-export type NextcloudTalkSendResult = {
-  messageId: string;
-  roomToken: string;
-  timestamp?: number;
-};
-
-/** Parsed incoming message context. */
-export type NextcloudTalkInboundMessage = {
-  messageId: string;
-  roomToken: string;
-  roomName: string;
-  senderId: string;
-  senderName: string;
-  text: string;
-  mediaType: string;
-  timestamp: number;
-  isGroupChat: boolean;
-};
-
-/** Headers sent by Nextcloud Talk webhook. */
-export type NextcloudTalkWebhookHeaders = {
-  /** HMAC-SHA256 signature of the request. */
-  signature: string;
-  /** Random string used in signature calculation. */
-  random: string;
-  /** Backend Nextcloud server URL. */
-  backend: string;
-};
-
-/** Options for the webhook server. */
-export type NextcloudTalkWebhookServerOptions = {
-  port: number;
-  host: string;
-  path: string;
-  secret: string;
-  onMessage: (message: NextcloudTalkInboundMessage) => void | Promise<void>;
-  onError?: (error: Error) => void;
-  abortSignal?: AbortSignal;
-};
-
-/** Options for sending a message. */
-export type NextcloudTalkSendOptions = {
-  baseUrl: string;
-  secret: string;
-  roomToken: string;
-  message: string;
-  replyTo?: string;
-};

package/extensions/nostr/CHANGELOG.md

@@ -1,46 +0,0 @@
-# Changelog
-
-## 2026.1.23
-
-### Changes
-- Version alignment with core Clawdbot release numbers.
-
-## 2026.1.22
-
-### Changes
-- Version alignment with core Clawdbot release numbers.
-
-## 2026.1.21
-
-### Changes
-- Version alignment with core Clawdbot release numbers.
-
-## 2026.1.20
-
-### Changes
-- Version alignment with core Clawdbot release numbers.
-
-## 2026.1.19-1
-
-Initial release.
-
-### Features
-
-- NIP-04 encrypted DM support (kind:4 events)
-- Key validation (hex and nsec formats)
-- Multi-relay support with sequential fallback
-- Event signature verification
-- TTL-based deduplication (24h)
-- Access control via dmPolicy (pairing, allowlist, open, disabled)
-- Pubkey normalization (hex/npub)
-
-### Protocol Support
-
-- NIP-01: Basic event structure
-- NIP-04: Encrypted direct messages
-
-### Planned for v2
-
-- NIP-17: Gift-wrapped DMs
-- NIP-44: Versioned encryption
-- Media attachments

package/extensions/nostr/README.md

@@ -1,136 +0,0 @@
-# @clawdbot/nostr
-
-Nostr DM channel plugin for Clawdbot using NIP-04 encrypted direct messages.
-
-## Overview
-
-This extension adds Nostr as a messaging channel to Clawdbot. It enables your bot to:
-
-- Receive encrypted DMs from Nostr users
-- Send encrypted responses back
-- Work with any NIP-04 compatible Nostr client (Damus, Amethyst, etc.)
-
-## Installation
-
-```bash
-clawdbot plugins install @clawdbot/nostr
-```
-
-## Quick Setup
-
-1. Generate a Nostr keypair (if you don't have one):
-   ```bash
-   # Using nak CLI
-   nak key generate
-
-   # Or use any Nostr key generator
-   ```
-
-2. Add to your config:
-   ```json
-   {
-     "channels": {
-       "nostr": {
-         "privateKey": "${NOSTR_PRIVATE_KEY}",
-         "relays": ["wss://relay.damus.io", "wss://nos.lol"]
-       }
-     }
-   }
-   ```
-
-3. Set the environment variable:
-   ```bash
-   export NOSTR_PRIVATE_KEY="nsec1..."  # or hex format
-   ```
-
-4. Restart the gateway
-
-## Configuration
-
-| Key | Type | Default | Description |
-|-----|------|---------|-------------|
-| `privateKey` | string | required | Bot's private key (nsec or hex format) |
-| `relays` | string[] | `["wss://relay.damus.io", "wss://nos.lol"]` | WebSocket relay URLs |
-| `dmPolicy` | string | `"pairing"` | Access control: `pairing`, `allowlist`, `open`, `disabled` |
-| `allowFrom` | string[] | `[]` | Allowed sender pubkeys (npub or hex) |
-| `enabled` | boolean | `true` | Enable/disable the channel |
-| `name` | string | - | Display name for the account |
-
-## Access Control
-
-### DM Policies
-
-- **pairing** (default): Unknown senders receive a pairing code to request access
-- **allowlist**: Only pubkeys in `allowFrom` can message the bot
-- **open**: Anyone can message the bot (use with caution)
-- **disabled**: DMs are disabled
-
-### Example: Allowlist Mode
-
-```json
-{
-  "channels": {
-    "nostr": {
-      "privateKey": "${NOSTR_PRIVATE_KEY}",
-      "dmPolicy": "allowlist",
-      "allowFrom": [
-        "npub1abc...",
-        "0123456789abcdef..."
-      ]
-    }
-  }
-}
-```
-
-## Testing
-
-### Local Relay (Recommended)
-
-```bash
-# Using strfry
-docker run -p 7777:7777 ghcr.io/hoytech/strfry
-
-# Configure clawdbot to use local relay
-"relays": ["ws://localhost:7777"]
-```
-
-### Manual Test
-
-1. Start the gateway with Nostr configured
-2. Open Damus, Amethyst, or another Nostr client
-3. Send a DM to your bot's npub
-4. Verify the bot responds
-
-## Protocol Support
-
-| NIP | Status | Notes |
-|-----|--------|-------|
-| NIP-01 | Supported | Basic event structure |
-| NIP-04 | Supported | Encrypted DMs (kind:4) |
-| NIP-17 | Planned | Gift-wrapped DMs (v2) |
-
-## Security Notes
-
-- Private keys are never logged
-- Event signatures are verified before processing
-- Use environment variables for keys, never commit to config files
-- Consider using `allowlist` mode in production
-
-## Troubleshooting
-
-### Bot not receiving messages
-
-1. Verify private key is correctly configured
-2. Check relay connectivity
-3. Ensure `enabled` is not set to `false`
-4. Check the bot's public key matches what you're sending to
-
-### Messages not being delivered
-
-1. Check relay URLs are correct (must use `wss://`)
-2. Verify relays are online and accepting connections
-3. Check for rate limiting (reduce message frequency)
-
-## License
-
-MIT

package/extensions/nostr/clawdbot.plugin.json

@@ -1,11 +0,0 @@
-{
-  "id": "nostr",
-  "channels": [
-    "nostr"
-  ],
-  "configSchema": {
-    "type": "object",
-    "additionalProperties": false,
-    "properties": {}
-  }
-}