# Qortal Nextcloud Integration: Features List

This file tracks implemented features (not roadmap-only items).

## Admin Features (`qortal_integration`)

- Broker connectivity setup and health checks from Nextcloud Admin UI.
- External Auth runtime configuration from Admin UI:
  - base URL, app credentials, node URL, node API key routing values.
- External Auth app registration from Admin UI.
- OIDC setup assistant:
  - generate setup plans and execute `occ` commands from UI.
- Auto-provisioning controls:
  - policy mode override, guard override, invite TTL, redirect allowlist.
- Allowlist and invite token management for gated auto-provision flows.
- Admin recovery operations for opted-in users:
  - check per-user recovery status,
  - issue one-time recovery codes,
  - start emergency temporary-login reset windows.
- Mapping management:
  - link/unlink Qortal address <-> Nextcloud user, list mappings.
- Wallet operations:
  - list/create wallet, create+link wallet.
- Notification workflows:
  - user/group targeting, queueable jobs, customizable email templates.
- CHD billing controls:
  - registration/connect, entitlement sync, billing status visibility.
- Q-Apps admin configuration:
  - enable/disable Q-Apps menu,
  - full-browser mode,
  - debug toggle,
  - approved app list with per-entry icon modes:
    - auto,
    - URL,
    - use avatar from another registered name.
  - persisted app ordering controls (move up/down).

## Personal/User Features (`qortal_integration`)

- Import account from seed phrase and link to current user.
- Import account from backup JSON and link to current user.
- Create wallet and link it.
- Backup wallet JSON:
  - download file,
  - save into Nextcloud Files.
- Managed recovery (opt-in):
  - escrow enrollment using encrypted backup-password package,
  - admin-code + user-passphrase recovery reveal,
  - failed-attempt lockout,
  - optional emergency temporary-login mode with completion step.
- View and unlink own mapped accounts.
- Q-Apps approval defaults and persisted permission management.
- High-risk Q-App confirmation gate for spend/sign/trade/name/deploy/poll
  requests and large multi-publish requests.

## Dashboard Features (`/apps/qortal_integration/account`)

- NuQloud account/mapping status + linked account visibility.
- Wallet/send flow support (address/name resolution and fee controls).
- Purchases section:
  - subscription tiers + add-ons,
  - live CHD catalog support with default-data fallback.
- CHD announcements section (user-facing, refreshable).
- Activity notifications controls:
  - group/thread/announcement notification mapping,
  - manual identifier management,
  - enabled/disabled state controls.
- Decentralized auth file handling:
  - download backup/auth file,
  - save into Nextcloud Files,
  - Passwords-app handoff/open flow.
- Unconfirmed transactions panel:
  - filters and hides panel when only chat unconfirmed tx entries exist.
- Debug-only panels/controls are gated behind debug mode.

## Q-Apps Features

- Embedded Q-Apps viewer.
- Optional full-browser launcher entry.
- In-view browser controls:
  - back, reload, address + go, new tab, close.
- Mobile-friendly control behavior for compact layouts.
- Gateway proxy routing with theme passthrough.
- Approval modal + wallet unlock flow integration.
- Sharing-key encrypt/decrypt request support for compatible Q-Apps.
- Debug panel with dock/float/minimize/copy/clear.
- Q-Apps gallery cards share unified visual style with dashboard surfaces.

## Talk Bridge Features (`qortal_talk_bridge`)

- Personal bridge page:
  - existing mapping visibility,
  - add new mapping,
  - public-group-only selection (`isOpen=true`),
  - moderator-scoped Talk conversation selection.
- Talk conversation sidebar embed:
  - in-context mapping and relay controls while inside Talk.
- Admin bridge page:
  - mapping management,
  - server relay config (bridge sender user/app password/label),
  - relay enable toggle,
  - debug panel with manual cycle trigger + polling telemetry.
- Server-side relay:
  - cron-driven Qortal -> Talk relay for eligible mappings,
  - runtime status/checkpoint visibility via debug endpoints.
- Resource notice relays:
  - optional thread/announcement notifications per mapping.
- Current limitation:
  - private group relay/mapping support is planned, not yet enabled.

## NuQloud Scrum Features (`nuqloud_scrum`)

- Admin settings surface for Talk-first scrum automation.
- Talk automation user/app-password configuration.
- Workspace filter controls:
  - disabled,
  - allowlist,
  - all visible conversations.
- Manual workspace sync action from Admin Settings.
- Talk conversation discovery through the Talk OCS room API.
- Workspace folder bootstrap under the automation user's Files:
  - `/NuQloud Scrum/{conversation}/`
  - `Files/`
  - `Threads/`
  - `Decisions/`
  - `Summaries/`
  - `_workspace.md`
  - `_manifest.json`
- Background jobs registered for future workspace, message, file, Deck, and summary sync.

## Files Bridge Features (`qortal_files_bridge`)

- Files actions/details integration:
  - publish file/folder to QDN,
  - delete by overwrite tombstone.
- Publish confirmation + estimated publish-credit cost display.
- Published state tracking:
  - current/stale/unpublished indicators in Files UI,
  - descendant folder outlined indicators for published/stale children.
- Q-Manager-compatible filesystem behavior:
  - merge-update of the private filesystem manifest,
  - nested folder structure preserved for published files.
- Activity integration for publish/delete events.
- Bridge status/settings page for quick links and state inspection.

## Custom PWA Features (`custom_pwa`)

- Dedicated authenticated install surface at `/apps/custom_pwa/install`.
- App-managed manifest and service worker routes.
- Instance-wide branded PWA install flow.
- Device registration / notification helper endpoints.
- VAPID-backed web push test delivery and per-device push status tracking.
- Admin settings surface for PWA-related instance behavior.

## Broker + Backend Features

- OIDC endpoints: `authorize`, `token`, `userinfo`, `jwks`.
- Provisioning endpoints for mappings and account linking.
- Nextcloud admin -> broker/external-auth runtime sync bridge (best effort).
- External Auth session refresh handling on daemon 401 responses.
- Authenticated browser -> broker -> external-auth Q-Apps request proxy.

## Deployment/Operational Features

- Docker stacks:
  - local dev,
  - dev-prod SSL,
  - dev-prod no-SSL (external reverse proxy),
  - PostgreSQL variant.
- Bundled optional External Auth profile.
- Bundled Qortal node container with auto API/P2P/QDN port selection.
- Default node settings/start-args initialization helpers.
- Safe dev-prod Nextcloud upgrade script with maintenance/backup flow.
- URL/proxy alignment helper for `trusted_proxies` and `forwarded_for_headers`.

## Security Features

- Role-gated admin routes and user-scoped personal operations.
- Broker internal token for internal API routes.
- Sensitive value redaction in UI debug logs.
- Node API key support for restricted Qortal node endpoints.