182 lines
7.0 KiB
Markdown
182 lines
7.0 KiB
Markdown
# Qortal Nextcloud Integration: Features List
|
|
|
|
This file tracks implemented features (not roadmap-only items).
|
|
|
|
## Admin Features (`qortal_integration`)
|
|
|
|
- Broker connectivity setup and health checks from Nextcloud Admin UI.
|
|
- External Auth runtime configuration from Admin UI:
|
|
- base URL, app credentials, node URL, node API key routing values.
|
|
- External Auth app registration from Admin UI.
|
|
- OIDC setup assistant:
|
|
- generate setup plans and execute `occ` commands from UI.
|
|
- Auto-provisioning controls:
|
|
- policy mode override, guard override, invite TTL, redirect allowlist.
|
|
- Allowlist and invite token management for gated auto-provision flows.
|
|
- Admin recovery operations for opted-in users:
|
|
- check per-user recovery status,
|
|
- issue one-time recovery codes,
|
|
- start emergency temporary-login reset windows.
|
|
- Mapping management:
|
|
- link/unlink Qortal address <-> Nextcloud user, list mappings.
|
|
- Wallet operations:
|
|
- list/create wallet, create+link wallet.
|
|
- Notification workflows:
|
|
- user/group targeting, queueable jobs, customizable email templates.
|
|
- CHD billing controls:
|
|
- registration/connect, entitlement sync, billing status visibility.
|
|
- Q-Apps admin configuration:
|
|
- enable/disable Q-Apps menu,
|
|
- full-browser mode,
|
|
- debug toggle,
|
|
- approved app list with per-entry icon modes:
|
|
- auto,
|
|
- URL,
|
|
- use avatar from another registered name.
|
|
- persisted app ordering controls (move up/down).
|
|
|
|
## Personal/User Features (`qortal_integration`)
|
|
|
|
- Import account from seed phrase and link to current user.
|
|
- Import account from backup JSON and link to current user.
|
|
- Create wallet and link it.
|
|
- Backup wallet JSON:
|
|
- download file,
|
|
- save into Nextcloud Files.
|
|
- Managed recovery (opt-in):
|
|
- escrow enrollment using encrypted backup-password package,
|
|
- admin-code + user-passphrase recovery reveal,
|
|
- failed-attempt lockout,
|
|
- optional emergency temporary-login mode with completion step.
|
|
- View and unlink own mapped accounts.
|
|
- Q-Apps approval defaults and persisted permission management.
|
|
- High-risk Q-App confirmation gate for spend/sign/trade/name/deploy/poll
|
|
requests and large multi-publish requests.
|
|
|
|
## Dashboard Features (`/apps/qortal_integration/account`)
|
|
|
|
- NuQloud account/mapping status + linked account visibility.
|
|
- Wallet/send flow support (address/name resolution and fee controls).
|
|
- Purchases section:
|
|
- subscription tiers + add-ons,
|
|
- live CHD catalog support with default-data fallback.
|
|
- CHD announcements section (user-facing, refreshable).
|
|
- Activity notifications controls:
|
|
- group/thread/announcement notification mapping,
|
|
- manual identifier management,
|
|
- enabled/disabled state controls.
|
|
- Decentralized auth file handling:
|
|
- download backup/auth file,
|
|
- save into Nextcloud Files,
|
|
- Passwords-app handoff/open flow.
|
|
- Unconfirmed transactions panel:
|
|
- filters and hides panel when only chat unconfirmed tx entries exist.
|
|
- Debug-only panels/controls are gated behind debug mode.
|
|
|
|
## Q-Apps Features
|
|
|
|
- Embedded Q-Apps viewer.
|
|
- Optional full-browser launcher entry.
|
|
- In-view browser controls:
|
|
- back, reload, address + go, new tab, close.
|
|
- Mobile-friendly control behavior for compact layouts.
|
|
- Gateway proxy routing with theme passthrough.
|
|
- Approval modal + wallet unlock flow integration.
|
|
- Sharing-key encrypt/decrypt request support for compatible Q-Apps.
|
|
- Debug panel with dock/float/minimize/copy/clear.
|
|
- Q-Apps gallery cards share unified visual style with dashboard surfaces.
|
|
|
|
## Talk Bridge Features (`qortal_talk_bridge`)
|
|
|
|
- Personal bridge page:
|
|
- existing mapping visibility,
|
|
- add new mapping,
|
|
- public-group-only selection (`isOpen=true`),
|
|
- moderator-scoped Talk conversation selection.
|
|
- Talk conversation sidebar embed:
|
|
- in-context mapping and relay controls while inside Talk.
|
|
- Admin bridge page:
|
|
- mapping management,
|
|
- server relay config (bridge sender user/app password/label),
|
|
- relay enable toggle,
|
|
- debug panel with manual cycle trigger + polling telemetry.
|
|
- Server-side relay:
|
|
- cron-driven Qortal -> Talk relay for eligible mappings,
|
|
- runtime status/checkpoint visibility via debug endpoints.
|
|
- Resource notice relays:
|
|
- optional thread/announcement notifications per mapping.
|
|
- Current limitation:
|
|
- private group relay/mapping support is planned, not yet enabled.
|
|
|
|
## NuQloud Scrum Features (`nuqloud_scrum`)
|
|
|
|
- Admin settings surface for Talk-first scrum automation.
|
|
- Talk automation user/app-password configuration.
|
|
- Workspace filter controls:
|
|
- disabled,
|
|
- allowlist,
|
|
- all visible conversations.
|
|
- Manual workspace sync action from Admin Settings.
|
|
- Talk conversation discovery through the Talk OCS room API.
|
|
- Workspace folder bootstrap under the automation user's Files:
|
|
- `/NuQloud Scrum/{conversation}/`
|
|
- `Files/`
|
|
- `Threads/`
|
|
- `Decisions/`
|
|
- `Summaries/`
|
|
- `_workspace.md`
|
|
- `_manifest.json`
|
|
- Background jobs registered for future workspace, message, file, Deck, and summary sync.
|
|
|
|
## Files Bridge Features (`qortal_files_bridge`)
|
|
|
|
- Files actions/details integration:
|
|
- publish file/folder to QDN,
|
|
- delete by overwrite tombstone.
|
|
- Publish confirmation + estimated publish-credit cost display.
|
|
- Published state tracking:
|
|
- current/stale/unpublished indicators in Files UI,
|
|
- descendant folder outlined indicators for published/stale children.
|
|
- Q-Manager-compatible filesystem behavior:
|
|
- merge-update of the private filesystem manifest,
|
|
- nested folder structure preserved for published files.
|
|
- Activity integration for publish/delete events.
|
|
- Bridge status/settings page for quick links and state inspection.
|
|
|
|
## Custom PWA Features (`custom_pwa`)
|
|
|
|
- Dedicated authenticated install surface at `/apps/custom_pwa/install`.
|
|
- App-managed manifest and service worker routes.
|
|
- Instance-wide branded PWA install flow.
|
|
- Device registration / notification helper endpoints.
|
|
- VAPID-backed web push test delivery and per-device push status tracking.
|
|
- Admin settings surface for PWA-related instance behavior.
|
|
|
|
## Broker + Backend Features
|
|
|
|
- OIDC endpoints: `authorize`, `token`, `userinfo`, `jwks`.
|
|
- Provisioning endpoints for mappings and account linking.
|
|
- Nextcloud admin -> broker/external-auth runtime sync bridge (best effort).
|
|
- External Auth session refresh handling on daemon 401 responses.
|
|
- Authenticated browser -> broker -> external-auth Q-Apps request proxy.
|
|
|
|
## Deployment/Operational Features
|
|
|
|
- Docker stacks:
|
|
- local dev,
|
|
- dev-prod SSL,
|
|
- dev-prod no-SSL (external reverse proxy),
|
|
- PostgreSQL variant.
|
|
- Bundled optional External Auth profile.
|
|
- Bundled Qortal node container with auto API/P2P/QDN port selection.
|
|
- Default node settings/start-args initialization helpers.
|
|
- Safe dev-prod Nextcloud upgrade script with maintenance/backup flow.
|
|
- URL/proxy alignment helper for `trusted_proxies` and `forwarded_for_headers`.
|
|
|
|
## Security Features
|
|
|
|
- Role-gated admin routes and user-scoped personal operations.
|
|
- Broker internal token for internal API routes.
|
|
- Sensitive value redaction in UI debug logs.
|
|
- Node API key support for restricted Qortal node endpoints.
|