- DeepInfra video: report malformed successful API JSON responses with provider-owned errors instead of leaking raw parser failures.

- Brave Search: report malformed web and LLM-context API JSON with provider-owned errors instead of leaking raw parser failures.

- xAI tools: report malformed web search, X search, and code execution JSON with provider-owned errors instead of leaking raw parser failures.

- Nextcloud Talk: report malformed room-info and bot-admin JSON with channel-owned errors instead of leaking raw parser failures.

- Twilio voice-call: report malformed successful API JSON responses with provider-owned errors instead of leaking raw parser failures.

- Voice-call provider APIs: report malformed successful guarded JSON responses with provider-prefixed errors instead of leaking raw parser failures.

- Realtime transcription: report malformed provider websocket JSON frames with owned parser errors instead of leaking raw `SyntaxError` objects.

});

});

it("reports malformed bot admin JSON with a stable channel error", async () => {

hoisted.fetchWithSsrFGuard.mockResolvedValueOnce({

response: new Response("{ nope", {

status: 200,

headers: { "content-type": "application/json" },

}),

release: async () => {},

finalUrl: "https://cloud.example.com/ocs/v2.php/apps/spreed/api/v1/bot/admin",

});

await expect(probeNextcloudTalkBotResponseFeature({ account: account() })).resolves.toEqual({

ok: false,

code: "request_failed",

message:

"Nextcloud Talk bot response feature probe failed: Nextcloud Talk bot response feature probe failed: malformed JSON response",

});

});

it("skips when API credentials are absent", async () => {

await expect(

probeNextcloudTalkBotResponseFeature({

import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";

import { readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";

import { fetchWithSsrFGuard } from "../runtime-api.js";

import type { ResolvedNextcloudTalkAccount } from "./accounts.js";

import { resolveNextcloudTalkApiCredentials } from "./api-credentials.js";

};

}

const payload = (await response.json()) as {

const payload = await readProviderJsonResponse<{

ocs?: { data?: NextcloudTalkBotAdminEntry[] };

};

}>(response, "Nextcloud Talk bot response feature probe failed");

const bots = Array.isArray(payload.ocs?.data) ? payload.ocs.data : [];

const bot = bots.find((entry) => normalizeUrlForMatch(entry.url) === webhookUrl);

if (!bot) {

await release();

}

} catch (error) {

const detail = error instanceof Error ? error.message : formatErrorMessage(error);

return {

ok: false,

code: "request_failed",

message: `Nextcloud Talk bot response feature probe failed: ${formatErrorMessage(error)}`,

message: `Nextcloud Talk bot response feature probe failed: ${detail}`,

};

}

}

expect(release).toHaveBeenCalledTimes(1);

});

it("reports malformed room info JSON with a stable channel error", async () => {

const release = vi.fn(async () => {});

const log = vi.fn();

const error = vi.fn();

const exit = vi.fn();

fetchWithSsrFGuard.mockResolvedValue({

response: new Response("{ nope", {

status: 200,

headers: { "content-type": "application/json" },

}),

release,

});

const kind = await resolveNextcloudTalkRoomKind({

account: {

accountId: "acct-malformed",

baseUrl: "https://nc.example.com",

config: {

apiUser: "bot",

apiPassword: "secret",

},

} as never,

roomToken: "room-malformed",

runtime: { log, error, exit },

});

expect(kind).toBeUndefined();

expect(error).toHaveBeenCalledWith(

"nextcloud-talk: room lookup error: Error: Nextcloud Talk room info failed: malformed JSON response",

);

expect(release).toHaveBeenCalledTimes(1);

});

it("returns undefined from room info without credentials or base url", async () => {

await expect(

resolveNextcloudTalkRoomKind({

import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";

import { readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";

import { ssrfPolicyFromPrivateNetworkOptIn } from "openclaw/plugin-sdk/ssrf-runtime";

import { fetchWithSsrFGuard, type RuntimeEnv } from "../runtime-api.js";

import type { ResolvedNextcloudTalkAccount } from "./accounts.js";

return undefined;

}

const payload = (await response.json()) as {

const payload = await readProviderJsonResponse<{

ocs?: { data?: { type?: number | string } };

};

}>(response, "Nextcloud Talk room info failed");

const type = coerceRoomType(payload.ocs?.data?.type);

const kind = resolveRoomKindFromType(type);

roomCache.set(key, { fetchedAt: Date.now(), kind });