@openclaw/msteams 2026.10.1 → 2026.10.5-beta.1

package/dist/.setup/{monitor-DfSPCRkk.cjs → monitor-C9x_CJhY.cjs}

@@ -1,15 +1,15 @@
 const require_rolldown_runtime = require("./rolldown-runtime-BloeesfJ.cjs");
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 require("../runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-Ct9yxQUw.cjs");
-const require_bot_framework_service_url = require("./bot-framework-service-url-BUhTe8F3.cjs");
-const require_token_config = require("./token-config-DOt3XwVa.cjs");
-const require_channel = require("./channel-BFhXodl2.cjs");
-const require_thread_session = require("./thread-session-ClI-lSyG.cjs");
-const require_channel_setup = require("./channel.setup-ss0TO-ap.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-DdDBVCzl.cjs");
+const require_bot_framework_service_url = require("./bot-framework-service-url-CPp4d-Q6.cjs");
+const require_token_config = require("./token-config-CqIh8z7Q.cjs");
+const require_channel = require("./channel-Cifn9fsv.cjs");
+const require_thread_session = require("./thread-session-B74FC1Id.cjs");
+const require_channel_setup = require("./channel.setup-BjbHugkL.cjs");
 const require_approval_card = require("./approval-card-DWPDItvq.cjs");
-const require_conversation_store_state = require("./conversation-store-state-f7V8CVNy.cjs");
-const require_reaction_types = require("./reaction-types-B-GEv57k.cjs");
+const require_conversation_store_state = require("./conversation-store-state-DprmOfl7.cjs");
+const require_reaction_types = require("./reaction-types-Ig9sQJuR.cjs");
 let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
@@ -17,6 +17,7 @@ let openclaw_plugin_sdk_provider_http = require("openclaw/plugin-sdk/provider-ht
 let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_media_runtime = require("openclaw/plugin-sdk/media-runtime");
 let openclaw_plugin_sdk_ssrf_runtime = require("openclaw/plugin-sdk/ssrf-runtime");
+let node_dns_promises = require("node:dns/promises");
 let openclaw_plugin_sdk_ssrf_policy = require("openclaw/plugin-sdk/ssrf-policy");
 let openclaw_plugin_sdk_number_runtime = require("openclaw/plugin-sdk/number-runtime");
 let openclaw_plugin_sdk_text_utility_runtime = require("openclaw/plugin-sdk/text-utility-runtime");
@@ -50,13 +51,6 @@ const MAX_LEARNING_ENTRIES = 1e4;
 function learningStoreKey(storePath, sessionKey) {
 	return node_crypto.default.createHash("sha256").update(`${storePath}\0${sessionKey}`, "utf8").digest("hex");
 }
-function appendFeedbackLearning(current, prepared) {
-	return {
-		sessionKey: prepared.sessionKey,
-		learnings: [...current?.learnings ?? [], prepared.learning].slice(-10),
-		updatedAt: prepared.updatedAt
-	};
-}
 async function storeSessionLearning(params) {
 	const store = require_runtime.getMSTeamsRuntime().state.openKeyedStore({
 		namespace: LEARNINGS_NAMESPACE,
@@ -74,7 +68,11 @@ async function storeSessionLearning(params) {
 		const result = await store.compareAndApply(key, observed.comparison, {
 			operation: "update",
 			action: "set",
-			value: appendFeedbackLearning(observed.value, prepared)
+			value: {
+				sessionKey: prepared.sessionKey,
+				learnings: [...observed.value?.learnings ?? [], prepared.learning].slice(-10),
+				updatedAt: prepared.updatedAt
+			}
 		});
 		if (result.status !== "conflict") return;
 		observed = result.current;
@@ -99,7 +97,6 @@ async function runFeedbackReflection(params) {
 			sessionKey,
 			conversationId: params.conversationId,
 			conversationKind: params.conversationKind,
-			thumbedDownResponse: params.thumbedDownResponse,
 			userComment: params.userComment,
 			cooldownMs,
 			onRecordError: (err) => log.debug?.("reflection session record failed", { error: require_channel_setup.formatUnknownError(err) }),
@@ -427,6 +424,14 @@ async function admitMSTeamsMessage(params) {
 	const { dmPolicy, senderId, senderName, pairing, isDirectMessage, hasConflictingConversationScope, channelGate, senderAccess, commandAccess, allowNameMatching, groupPolicy, msteamsCfg } = access;
 	const effectiveDmAllowFrom = senderAccess.effectiveAllowFrom;
 	const effectiveGroupAllowFrom = senderAccess.effectiveGroupAllowFrom;
+	const saveConversationReference = () => params.conversationStore.upsert(params.conversationId, params.conversationRef).catch((err) => {
+		params.log.debug?.("failed to save conversation reference", { error: require_channel_setup.formatUnknownError(err) });
+	});
+	const dropGroupMessage = (reason, details) => {
+		params.log.info(reason, details);
+		params.log.debug?.(reason, details);
+		return null;
+	};
 	if (hasConflictingConversationScope) {
 		params.log.info("dropping message (conflicting conversation scope)", { conversationId: params.conversationId });
 		params.log.debug?.("dropping message (conflicting conversation scope)");
@@ -448,9 +453,7 @@ async function admitMSTeamsMessage(params) {
 			allowNameMatching
 		});
 		if (senderAccess.decision === "pairing") {
-			params.conversationStore.upsert(params.conversationId, params.conversationRef).catch((err) => {
-				params.log.debug?.("failed to save conversation reference", { error: require_channel_setup.formatUnknownError(err) });
-			});
+			saveConversationReference();
 			if (await pairing.upsertPairingRequest({
 				id: senderId,
 				meta: { name: senderName }
@@ -478,33 +481,15 @@ async function admitMSTeamsMessage(params) {
 		return null;
 	}
 	if (!isDirectMessage && msteamsCfg) {
-		if (channelGate.allowlistConfigured && !channelGate.allowed) {
-			params.log.info("dropping group message (not in team/channel allowlist)", {
-				conversationId: params.conversationId,
-				teamKey: channelGate.teamKey ?? "none",
-				channelKey: channelGate.channelKey ?? "none",
-				channelMatchKey: channelGate.channelMatchKey ?? "none",
-				channelMatchSource: channelGate.channelMatchSource ?? "none"
-			});
-			params.log.debug?.("dropping group message (not in team/channel allowlist)", {
-				conversationId: params.conversationId,
-				teamKey: channelGate.teamKey ?? "none",
-				channelKey: channelGate.channelKey ?? "none",
-				channelMatchKey: channelGate.channelMatchKey ?? "none",
-				channelMatchSource: channelGate.channelMatchSource ?? "none"
-			});
-			return null;
-		}
-		if (!senderAccess.allowed && senderAccess.reasonCode === "group_policy_disabled") {
-			params.log.info("dropping group message (groupPolicy: disabled)", { conversationId: params.conversationId });
-			params.log.debug?.("dropping group message (groupPolicy: disabled)", { conversationId: params.conversationId });
-			return null;
-		}
-		if (!senderAccess.allowed && (senderAccess.reasonCode === "group_policy_empty_allowlist" || senderAccess.reasonCode === "route_sender_empty")) {
-			params.log.info("dropping group message (groupPolicy: allowlist, no allowlist)", { conversationId: params.conversationId });
-			params.log.debug?.("dropping group message (groupPolicy: allowlist, no allowlist)", { conversationId: params.conversationId });
-			return null;
-		}
+		if (channelGate.allowlistConfigured && !channelGate.allowed) return dropGroupMessage("dropping group message (not in team/channel allowlist)", {
+			conversationId: params.conversationId,
+			teamKey: channelGate.teamKey ?? "none",
+			channelKey: channelGate.channelKey ?? "none",
+			channelMatchKey: channelGate.channelMatchKey ?? "none",
+			channelMatchSource: channelGate.channelMatchSource ?? "none"
+		});
+		if (!senderAccess.allowed && senderAccess.reasonCode === "group_policy_disabled") return dropGroupMessage("dropping group message (groupPolicy: disabled)", { conversationId: params.conversationId });
+		if (!senderAccess.allowed && (senderAccess.reasonCode === "group_policy_empty_allowlist" || senderAccess.reasonCode === "route_sender_empty")) return dropGroupMessage("dropping group message (groupPolicy: allowlist, no allowlist)", { conversationId: params.conversationId });
 		if (!senderAccess.allowed) {
 			const allowMatch = (0, openclaw_plugin_sdk_allow_from.resolveAllowlistMatchSimple)({
 				allowFrom: effectiveGroupAllowFrom,
@@ -534,9 +519,7 @@ async function admitMSTeamsMessage(params) {
 		});
 		return null;
 	}
-	params.conversationStore.upsert(params.conversationId, params.conversationRef).catch((err) => {
-		params.log.debug?.("failed to save conversation reference", { error: require_channel_setup.formatUnknownError(err) });
-	});
+	saveConversationReference();
 	return {
 		...access,
 		allowTextCommands,
@@ -587,9 +570,7 @@ async function fetchBotFrameworkAttachment(params, kind) {
 		response = await require_resolve_allowlist.safeFetchWithPolicy({
 			url: params.url,
 			policy: params.policy,
-			fetchFn: params.fetchFn,
-			fetchFnSupportsDispatcher: params.fetchFnSupportsDispatcher,
-			resolveFn: params.resolveFn,
+			resolveFn: node_dns_promises.lookup,
 			requestInit: { headers },
 			timeoutMs: require_resolve_allowlist.resolveMSTeamsRequestTimeoutMs(params.deadline)
 		});
@@ -635,8 +616,7 @@ async function saveBotFrameworkAttachmentView(params) {
 			filePathHint: params.fileNameHint,
 			maxBytes: params.maxBytes,
 			fallbackContentType: params.contentTypeHint,
-			subdir: "inbound",
-			originalFilename: params.preserveFilenames ? params.fileNameHint : void 0
+			subdir: "inbound"
 		});
 	} catch (err) {
 		params.logger?.warn?.("msteams botFramework attachmentView save failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
@@ -670,9 +650,6 @@ async function downloadMSTeamsBotFrameworkAttachment(params) {
 		url: baseUrl,
 		accessToken,
 		policy,
-		fetchFn: params.fetchFn,
-		fetchFnSupportsDispatcher: params.fetchFnSupportsDispatcher,
-		resolveFn: params.resolveFn,
 		logger: params.logger,
 		deadline: params.deadline
 	};
@@ -683,15 +660,14 @@ async function downloadMSTeamsBotFrameworkAttachment(params) {
 	const viewId = typeof candidateView?.viewId === "string" && candidateView.viewId ? candidateView.viewId : void 0;
 	if (!viewId) return;
 	if (typeof candidateView?.size === "number" && candidateView.size > 0 && candidateView.size > params.maxBytes) return;
-	const fileNameHint = typeof params.fileNameHint === "string" && params.fileNameHint || typeof info.name === "string" && info.name || void 0;
-	const contentTypeHint = typeof params.contentTypeHint === "string" && params.contentTypeHint || typeof info.type === "string" && info.type || void 0;
+	const fileNameHint = typeof info.name === "string" && info.name || void 0;
+	const contentTypeHint = typeof info.type === "string" && info.type || void 0;
 	const saved = await saveBotFrameworkAttachmentView({
 		...request,
 		url: `${baseUrl}/views/${encodeURIComponent(viewId)}`,
 		maxBytes: params.maxBytes,
 		fileNameHint,
-		contentTypeHint,
-		preserveFilenames: params.preserveFilenames
+		contentTypeHint
 	});
 	if (!saved) return;
 	return {
@@ -869,12 +845,6 @@ async function downloadAndStoreMSTeamsRemoteMedia(params) {
 }
 //#endregion
 //#region extensions/msteams/src/attachments/download.ts
-function withSourceId(media, sourceId) {
-	return sourceId ? {
-		...media,
-		sourceId
-	} : media;
-}
 function resolveDownloadCandidate(att) {
 	const contentType = require_resolve_allowlist.normalizeContentType(att.contentType);
 	const name = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(att.name) ?? "";
@@ -917,12 +887,8 @@ function resolveDownloadCandidate(att) {
 	};
 }
 function scopeCandidatesForUrl(url) {
-	try {
-		const host = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(new URL(url).hostname);
-		return host.endsWith("graph.microsoft.com") || host.endsWith("sharepoint.com") || host.endsWith("1drv.ms") || host.includes("sharepoint") ? ["https://graph.microsoft.com", "https://api.botframework.com"] : ["https://api.botframework.com", "https://graph.microsoft.com"];
-	} catch {
-		return ["https://api.botframework.com", "https://graph.microsoft.com"];
-	}
+	const host = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(URL.parse(url)?.hostname);
+	return host.endsWith("graph.microsoft.com") || host.endsWith("sharepoint.com") || host.endsWith("1drv.ms") || host.includes("sharepoint") ? ["https://graph.microsoft.com", "https://api.botframework.com"] : ["https://api.botframework.com", "https://graph.microsoft.com"];
 }
 function canonicalizeInlineBase64Payload(value) {
 	let cleaned = "";
@@ -957,15 +923,15 @@ async function resolveInlineDataImageMime(inline) {
 	return mime?.startsWith("image/") ? mime : void 0;
 }
 async function fetchWithAuthFallback(params) {
-	const firstAttempt = await require_resolve_allowlist.safeFetchWithPolicy({
+	const fetchAttempt = (fetchFn, requestInit) => require_resolve_allowlist.safeFetchWithPolicy({
 		url: params.url,
 		policy: params.policy,
-		fetchFn: params.fetchFn,
-		fetchFnSupportsDispatcher: params.fetchFnSupportsDispatcher,
-		requestInit: params.requestInit,
+		fetchFn,
+		requestInit,
 		resolveFn: params.resolveFn,
 		timeoutMs: require_resolve_allowlist.resolveMSTeamsRequestTimeoutMs(params.deadline)
 	});
+	const firstAttempt = await fetchAttempt(params.fetchFn, params.requestInit);
 	if (firstAttempt.ok) return firstAttempt;
 	if (!params.tokenProvider) return firstAttempt;
 	const tokenProvider = params.tokenProvider;
@@ -982,17 +948,9 @@ async function fetchWithAuthFallback(params) {
 		});
 		const authHeaders = new Headers(params.requestInit?.headers);
 		authHeaders.set("Authorization", `Bearer ${token}`);
-		const authAttempt = await require_resolve_allowlist.safeFetchWithPolicy({
-			url: params.url,
-			policy: params.policy,
-			fetchFn,
-			fetchFnSupportsDispatcher: params.fetchFnSupportsDispatcher,
-			requestInit: {
-				...params.requestInit,
-				headers: authHeaders
-			},
-			resolveFn: params.resolveFn,
-			timeoutMs: require_resolve_allowlist.resolveMSTeamsRequestTimeoutMs(params.deadline)
+		const authAttempt = await fetchAttempt(fetchFn, {
+			...params.requestInit,
+			headers: authHeaders
 		});
 		await fallbackAttempt.body?.cancel().catch(() => void 0);
 		if (authAttempt.ok || require_resolve_allowlist.isRedirectStatus(authAttempt.status)) return authAttempt;
@@ -1020,12 +978,6 @@ async function downloadMSTeamsAttachments(params) {
 	});
 	const maxInlineBytes = params.maxBytes;
 	candidates.push(...require_resolve_allowlist.extractInlineImageReferences(list).map((candidate) => {
-		if (candidate.kind === "data") return {
-			kind: "data",
-			mediaKind: "image",
-			src: candidate.src,
-			sourceId: candidate.sourceId
-		};
 		if (candidate.kind === "url") return {
 			kind: "remote",
 			mediaKind: "image",
@@ -1034,11 +986,7 @@ async function downloadMSTeamsAttachments(params) {
 			contentTypeHint: candidate.contentType,
 			sourceId: candidate.sourceId
 		};
-		return {
-			kind: "unavailable",
-			mediaKind: "image",
-			sourceId: candidate.sourceId
-		};
+		return Object.assign(candidate, { mediaKind: "image" });
 	}));
 	for (const sourceId of resolveUnrepresentedHtmlAttachmentIds(list)) candidates.push({
 		kind: "unavailable",
@@ -1046,44 +994,30 @@ async function downloadMSTeamsAttachments(params) {
 		sourceId
 	});
 	if (candidates.length === 0) return [];
-	const out = [];
 	let totalInlineBytes = 0;
-	for (const candidate of candidates) {
-		if (candidate.kind === "unavailable") {
-			out.push(withSourceId({ kind: candidate.mediaKind }, candidate.sourceId));
-			continue;
-		}
+	const downloadCandidate = async (candidate) => {
+		if (candidate.kind === "unavailable") return;
 		if (candidate.kind === "data") {
 			const decoded = decodeInlineDataImage(candidate.src, maxInlineBytes, totalInlineBytes);
-			if (!decoded) {
-				out.push(withSourceId({ kind: candidate.mediaKind }, candidate.sourceId));
-				continue;
-			}
+			if (!decoded) return;
 			totalInlineBytes += decoded.estimatedBytes;
 			try {
 				const contentType = await resolveInlineDataImageMime(decoded);
-				if (!contentType) {
-					out.push(withSourceId({ kind: candidate.mediaKind }, candidate.sourceId));
-					continue;
-				}
+				if (!contentType) return;
 				const saved = await require_runtime.getMSTeamsRuntime().channel.media.saveMediaBuffer(decoded.data, contentType, "inbound", params.maxBytes);
-				out.push(withSourceId({
+				return {
 					path: saved.path,
 					contentType: saved.contentType,
 					kind: "image"
-				}, candidate.sourceId));
+				};
 			} catch (err) {
-				out.push(withSourceId({ kind: candidate.mediaKind }, candidate.sourceId));
 				params.logger?.warn?.("msteams inline attachment decode failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
 			}
-			continue;
-		}
-		if (!(0, openclaw_plugin_sdk_ssrf_policy.isHttpsUrlAllowedByHostnameSuffixAllowlist)(candidate.url, allowHosts)) {
-			out.push(withSourceId({ kind: candidate.mediaKind }, candidate.sourceId));
-			continue;
+			return;
 		}
+		if (!(0, openclaw_plugin_sdk_ssrf_policy.isHttpsUrlAllowedByHostnameSuffixAllowlist)(candidate.url, allowHosts)) return;
 		try {
-			const media = await downloadAndStoreMSTeamsRemoteMedia({
+			return await downloadAndStoreMSTeamsRemoteMedia({
 				url: candidate.url,
 				filePathHint: candidate.fileHint ?? candidate.url,
 				maxBytes: params.maxBytes,
@@ -1094,28 +1028,29 @@ async function downloadMSTeamsAttachments(params) {
 					url: (0, openclaw_plugin_sdk_request_url.resolveRequestUrl)(input),
 					tokenProvider: params.tokenProvider,
 					fetchFn: params.fetchFn,
-					fetchFnSupportsDispatcher: params.fetchFnSupportsDispatcher,
 					requestInit: init,
 					resolveFn: params.resolveFn,
 					policy,
 					deadline: params.deadline
 				})
 			});
-			out.push(withSourceId(media, candidate.sourceId));
 		} catch (err) {
-			out.push(withSourceId({ kind: candidate.mediaKind }, candidate.sourceId));
 			const msg = (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err);
 			params.logger?.warn?.(`msteams attachment download failed host=${safeHostForLog(candidate.url)} error=${msg}`);
 		}
+	};
+	const out = [];
+	for (const candidate of candidates) {
+		const media = await downloadCandidate(candidate) ?? { kind: candidate.mediaKind };
+		out.push(candidate.sourceId ? {
+			...media,
+			sourceId: candidate.sourceId
+		} : media);
 	}
 	return out;
 }
 function safeHostForLog(url) {
-	try {
-		return new URL(url).host;
-	} catch {
-		return "invalid-url";
-	}
+	return URL.parse(url)?.host ?? "invalid-url";
 }
 //#endregion
 //#region extensions/msteams/src/attachments/graph.ts
@@ -1143,21 +1078,24 @@ function buildMSTeamsGraphMessageUrl(params) {
 	if (!chatId) return;
 	return `${require_resolve_allowlist.GRAPH_ROOT}/chats/${encodeURIComponent(chatId)}/messages/${encodeURIComponent(messageId)}`;
 }
-async function releaseGraphResponse(response, release) {
-	if (!response.bodyUsed) response.body?.cancel().catch(() => void 0);
-	await release();
-}
-async function fetchGraphCollection(params) {
-	const fetchFn = params.fetchFn ?? fetch;
+async function withGraphMediaResponse(params, url, kind, read) {
 	const { response, release } = await (0, openclaw_plugin_sdk_ssrf_runtime.fetchWithSsrFGuard)({
-		url: params.url,
-		fetchImpl: fetchFn,
+		url,
+		fetchImpl: params.fetchFn ?? fetch,
 		init: { headers: require_resolve_allowlist.ensureUserAgentHeader({ Authorization: `Bearer ${params.accessToken}` }) },
 		policy: params.ssrfPolicy,
-		auditContext: "msteams.graph.collection",
+		auditContext: `msteams.graph.${kind}`,
 		timeoutMs: require_resolve_allowlist.resolveMSTeamsRequestTimeoutMs(params.deadline)
 	});
 	try {
+		return await read(response);
+	} finally {
+		if (!response.bodyUsed) response.body?.cancel().catch(() => void 0);
+		await release();
+	}
+}
+async function fetchGraphCollection(params) {
+	return withGraphMediaResponse(params, params.url, "collection", async (response) => {
 		const status = response.status;
 		if (!response.ok) return {
 			status,
@@ -1174,9 +1112,7 @@ async function fetchGraphCollection(params) {
 				items: []
 			};
 		}
-	} finally {
-		await releaseGraphResponse(response, release);
-	}
+	});
 }
 function normalizeGraphAttachment(att) {
 	let content = att.content;
@@ -1196,11 +1132,8 @@ async function downloadGraphHostedContent(params) {
 	let hosted;
 	try {
 		hosted = await fetchGraphCollection({
-			url: `${params.messageUrl}/hostedContents`,
-			accessToken: params.accessToken,
-			fetchFn: params.fetchFn,
-			ssrfPolicy: params.ssrfPolicy,
-			deadline: params.deadline
+			...params,
+			url: `${params.messageUrl}/hostedContents`
 		});
 	} catch (err) {
 		params.logger?.warn?.("msteams graph hostedContents fetch failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
@@ -1221,19 +1154,12 @@ async function downloadGraphHostedContent(params) {
 			continue;
 		}
 		try {
-			const valueUrl = `${params.messageUrl}/hostedContents/${encodeURIComponent(item.id)}/$value`;
-			const { response: valRes, release } = await (0, openclaw_plugin_sdk_ssrf_runtime.fetchWithSsrFGuard)({
-				url: valueUrl,
-				fetchImpl: params.fetchFn ?? fetch,
-				init: { headers: require_resolve_allowlist.ensureUserAgentHeader({ Authorization: `Bearer ${params.accessToken}` }) },
-				policy: params.ssrfPolicy,
-				auditContext: "msteams.graph.hostedContent.value",
-				timeoutMs: require_resolve_allowlist.resolveMSTeamsRequestTimeoutMs(params.deadline)
-			});
-			try {
+			const sourceId = item.id;
+			const valueUrl = `${params.messageUrl}/hostedContents/${encodeURIComponent(sourceId)}/$value`;
+			await withGraphMediaResponse(params, valueUrl, "hostedContent.value", async (valRes) => {
 				if (!valRes.ok) {
 					out.push(createGraphHostedContentFact(item));
-					continue;
+					return;
 				}
 				const saved = await require_runtime.getMSTeamsRuntime().channel.media.saveResponseMedia(valRes, {
 					sourceUrl: valueUrl,
@@ -1245,11 +1171,9 @@ async function downloadGraphHostedContent(params) {
 					path: saved.path,
 					contentType: saved.contentType,
 					kind: require_resolve_allowlist.resolveMSTeamsMediaKind({ contentType: saved.contentType }),
-					sourceId: item.id
+					sourceId
 				});
-			} finally {
-				await releaseGraphResponse(valRes, release);
-			}
+			});
 		} catch (err) {
 			out.push(createGraphHostedContentFact(item));
 			params.logger?.warn?.("msteams graph hostedContent value fetch failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
@@ -1271,6 +1195,16 @@ async function downloadMSTeamsGraphMedia(params) {
 	});
 	const ssrfPolicy = (0, openclaw_plugin_sdk_ssrf_policy.buildHostnameAllowlistPolicyFromSuffixAllowlist)(policy.allowHosts);
 	const messageUrl = params.messageUrl;
+	const logGraphFailure = (phase, err) => {
+		params.logger?.debug?.(`graph media ${phase} failed`, {
+			messageUrl,
+			error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)
+		});
+		params.logger?.warn?.(`msteams graph ${phase} failed`, {
+			error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err),
+			...phase === "message parse" ? { messageUrl } : {}
+		});
+	};
 	let accessToken;
 	try {
 		accessToken = await require_resolve_allowlist.withMSTeamsRequestDeadline({
@@ -1279,11 +1213,7 @@ async function downloadMSTeamsGraphMedia(params) {
 			work: () => tokenProvider.getAccessToken("https://graph.microsoft.com")
 		});
 	} catch (err) {
-		params.logger?.debug?.("graph media token acquisition failed", {
-			messageUrl,
-			error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)
-		});
-		params.logger?.warn?.("msteams graph token acquisition failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
+		logGraphFailure("token acquisition", err);
 		return {
 			media: [],
 			messageUrl,
@@ -1297,29 +1227,18 @@ async function downloadMSTeamsGraphMedia(params) {
 	let referenceAttachments = [];
 	let messageStatus;
 	try {
-		const { response: msgRes, release } = await (0, openclaw_plugin_sdk_ssrf_runtime.fetchWithSsrFGuard)({
-			url: messageUrl,
-			fetchImpl: fetchFn,
-			init: { headers: require_resolve_allowlist.ensureUserAgentHeader({ Authorization: `Bearer ${accessToken}` }) },
-			policy: ssrfPolicy,
-			auditContext: "msteams.graph.message",
-			timeoutMs: require_resolve_allowlist.resolveMSTeamsRequestTimeoutMs(params.deadline)
-		});
-		try {
+		await withGraphMediaResponse({
+			...params,
+			accessToken,
+			ssrfPolicy
+		}, messageUrl, "message", async (msgRes) => {
 			messageStatus = msgRes.status;
 			if (msgRes.ok) {
 				let msgData;
 				try {
 					msgData = await (0, openclaw_plugin_sdk_provider_http.readProviderJsonResponse)(msgRes, "MS Teams Graph message");
 				} catch (err) {
-					params.logger?.debug?.("graph media message parse failed", {
-						messageUrl,
-						error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)
-					});
-					params.logger?.warn?.("msteams graph message parse failed", {
-						error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err),
-						messageUrl
-					});
+					logGraphFailure("message parse", err);
 					msgData = {};
 				}
 				messageAttachments = Array.isArray(msgData.attachments) ? msgData.attachments : [];
@@ -1328,15 +1247,9 @@ async function downloadMSTeamsGraphMedia(params) {
 				messageUrl,
 				status: messageStatus
 			});
-		} finally {
-			await releaseGraphResponse(msgRes, release);
-		}
-	} catch (err) {
-		params.logger?.debug?.("graph media message fetch failed", {
-			messageUrl,
-			error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)
 		});
-		params.logger?.warn?.("msteams graph message fetch failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
+	} catch (err) {
+		logGraphFailure("message fetch", err);
 	}
 	for (const att of referenceAttachments) {
 		const name = att.name ?? "file";
@@ -1383,7 +1296,6 @@ async function downloadMSTeamsGraphMedia(params) {
 						url: requestUrl,
 						policy,
 						fetchFn,
-						fetchFnSupportsDispatcher: params.fetchFnSupportsDispatcher,
 						requestInit: {
 							...init,
 							headers
@@ -1415,12 +1327,7 @@ async function downloadMSTeamsGraphMedia(params) {
 		deadline: params.deadline
 	});
 	const normalizedAttachments = messageAttachments.map(normalizeGraphAttachment);
-	const filteredAttachments = sharePointMedia.length > 0 ? normalizedAttachments.filter((att) => {
-		if ((0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(att.contentType) !== "reference") return true;
-		const url = typeof att.contentUrl === "string" ? att.contentUrl : "";
-		if (!url) return true;
-		return !downloadedReferenceUrls.has(url);
-	}) : normalizedAttachments;
+	const filteredAttachments = sharePointMedia.length > 0 ? normalizedAttachments.filter((att) => att.contentType !== "reference" || typeof att.contentUrl !== "string" || !att.contentUrl || !downloadedReferenceUrls.has(att.contentUrl)) : normalizedAttachments;
 	let attachmentMedia = [];
 	try {
 		attachmentMedia = await downloadMSTeamsAttachments({
@@ -1430,7 +1337,6 @@ async function downloadMSTeamsGraphMedia(params) {
 			allowHosts: policy.allowHosts,
 			authAllowHosts: policy.authAllowHosts,
 			fetchFn: params.fetchFn,
-			fetchFnSupportsDispatcher: params.fetchFnSupportsDispatcher,
 			resolveFn: params.resolveFn,
 			deadline: params.deadline,
 			preserveFilenames: params.preserveFilenames,
@@ -1506,14 +1412,13 @@ function hasMaterializedMedia(media) {
 	return media.some((entry) => Boolean(entry.path));
 }
 async function resolveMSTeamsInboundMedia(params) {
-	const { attachments, htmlSummary, maxBytes, tokenProvider, allowHosts, conversationType, conversationId, conversationMessageId, teamAadGroupId, serviceUrl, activity, log, preserveFilenames } = params;
+	const { attachments, htmlSummary, maxBytes, tokenProvider, allowHosts, conversationType, conversationId, conversationMessageId, teamAadGroupId, serviceUrl, activity, log } = params;
 	let mediaList = await downloadMSTeamsAttachments({
 		attachments,
 		maxBytes,
 		tokenProvider,
 		allowHosts,
 		authAllowHosts: params.authAllowHosts,
-		preserveFilenames,
 		deadline: params.deadline,
 		logger: log
 	});
@@ -1540,7 +1445,6 @@ async function resolveMSTeamsInboundMedia(params) {
 					maxBytes,
 					allowHosts,
 					authAllowHosts: params.authAllowHosts,
-					preserveFilenames,
 					deadline: params.deadline
 				});
 				if (bfMedia.media.length > 0) mediaList = mergeMSTeamsMediaFacts(mediaList, bfMedia.media, { positionallyAligned: false });
@@ -1573,7 +1477,6 @@ async function resolveMSTeamsInboundMedia(params) {
 					maxBytes,
 					allowHosts,
 					authAllowHosts: params.authAllowHosts,
-					preserveFilenames,
 					deadline: params.deadline,
 					logger: log
 				});
@@ -1638,8 +1541,7 @@ async function prepareMSTeamsInboundContent(params) {
 					channelData: activity.channelData
 				},
 				log: params.log,
-				deadline: params.deadline,
-				preserveFilenames: false
+				deadline: params.deadline
 			})
 		});
 	} catch (err) {
@@ -1741,26 +1643,19 @@ function createTeamsReplyStreamController(params) {
 	const deferredReplacementLogicalContent = () => {
 		return deferredReplacementEntries.map((entry) => entry.payload.text).filter((text) => Boolean(text)).join("\n") || void 0;
 	};
-	const takeDeferredReplacementPayloads = (replacementFallback) => {
-		const payloads = deferredReplacementEntries.flatMap((entry) => {
-			if (entry.kind === "payload") return [entry.payload];
-			const hasMedia = Boolean(entry.payload.mediaUrl || entry.payload.mediaUrls?.length);
-			const text = replacementFallback?.text;
-			if (!text && !hasMedia) return [];
-			return [{
-				...entry.payload,
-				text: text || void 0
-			}];
-		});
-		deferredReplacementEntries = [];
-		return payloads;
-	};
+	const deferredReplacementPayloads = (replacementFallback) => deferredReplacementEntries.flatMap((entry) => {
+		if (entry.kind === "payload") return [entry.payload];
+		const hasMedia = Boolean(entry.payload.mediaUrl || entry.payload.mediaUrls?.length);
+		const text = replacementFallback?.text;
+		if (!text && !hasMedia) return [];
+		return [{
+			...entry.payload,
+			text: text || void 0
+		}];
+	});
 	const finalizeWithoutReceipt = (logicalContent, canceled = false) => {
-		const pending = pendingFinalPayload;
-		pendingFinalPayload = void 0;
-		const fallback = pending && !canceled ? fallbackPayloadAfterAcknowledgedText(pending) : void 0;
-		const postNativePayloads = replacementSettlementPending && !canceled ? takeDeferredReplacementPayloads(fallback) : [];
-		if (canceled) deferredReplacementEntries = [];
+		const fallback = pendingFinalPayload && !canceled ? fallbackPayloadAfterAcknowledgedText(pendingFinalPayload) : void 0;
+		const postNativePayloads = replacementSettlementPending && !canceled ? deferredReplacementPayloads(fallback) : [];
 		return {
 			...acknowledgedNativeDelivery(),
 			...!canceled && logicalContent ? { logicalContent } : {},
@@ -1920,13 +1815,7 @@ function createTeamsReplyStreamController(params) {
 			}
 			let logicalContent;
 			try {
-				if (wasCanceled()) {
-					pendingFinalPayload = void 0;
-					deferredReplacementEntries = [];
-					streamFinalizationPending = false;
-					return acknowledgedNativeDelivery();
-				}
-				if (!streamFinalizationPending) return acknowledgedNativeDelivery();
+				if (wasCanceled() || !streamFinalizationPending) return acknowledgedNativeDelivery();
 				if (replacementSettlementPending && replacementFinalPending && pendingFinalPayload?.text) {
 					replacementFinalPending = false;
 					deferredReplacementEntries.push({
@@ -1962,12 +1851,10 @@ function createTeamsReplyStreamController(params) {
 					});
 				}
 				const result = await stream.close();
-				streamFinalizationPending = false;
 				if (!result) return finalizeWithoutReceipt(logicalContent, wasCanceled());
 				const replacementFallback = replacementSettlementPending && replacementEmitFailed && pendingFinalPayload ? fallbackPayloadAfterAcknowledgedText(pendingFinalPayload) : void 0;
-				pendingFinalPayload = void 0;
 				const messageId = require_conversation_store_state.extractMessageId(result) ?? acknowledgedStreamId;
-				const postNativePayloads = replacementSettlementPending ? takeDeferredReplacementPayloads(replacementFallback) : [];
+				const postNativePayloads = replacementSettlementPending ? deferredReplacementPayloads(replacementFallback) : [];
 				const nativeContent = replacementEmitFailed ? acknowledgedText || void 0 : content;
 				return {
 					visibleReplySent: replacementEmitFailed ? Boolean(nativeContent) : true,
@@ -1979,16 +1866,14 @@ function createTeamsReplyStreamController(params) {
 			} catch (err) {
 				if (isStreamCancelledError(err)) {
 					canceledLocally = true;
-					pendingFinalPayload = void 0;
-					deferredReplacementEntries = [];
-					streamFinalizationPending = false;
 					return acknowledgedNativeDelivery();
 				}
 				streamFailed = true;
-				streamFinalizationPending = false;
 				params.log?.warn?.(`msteams stream finalize failed: ${(0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)}`);
 				return finalizeWithoutReceipt(logicalContent);
 			} finally {
+				pendingFinalPayload = void 0;
+				streamFinalizationPending = false;
 				failedSegmentFallbackPrepared = true;
 				queuedFinalActivity = void 0;
 				replacementEmitFailed = false;
@@ -2077,29 +1962,7 @@ function createMSTeamsReplyDispatcher(params) {
 	const typingIndicatorEnabled = typeof msteamsCfg?.typingIndicator === "boolean" ? msteamsCfg.typingIndicator : true;
 	const pendingDeliveries = [];
 	let pendingSettlement;
-	const findPendingNativeDelivery = () => pendingDeliveries.find((candidate) => candidate.native && !candidate.nativeSettled);
-	const joinAcceptedContents = (contents) => contents.filter((content) => Boolean(content)).join("\n");
-	const sendMessages = async (messages) => {
-		return require_conversation_store_state.sendMSTeamsMessages({
-			replyStyle: params.replyStyle,
-			app: params.app,
-			conversationRef: params.conversationRef,
-			context: params.context,
-			messages,
-			retry: {},
-			onRetry: (event) => {
-				params.log.debug?.("retrying send", {
-					replyStyle: params.replyStyle,
-					...event
-				});
-			},
-			tokenProvider: params.tokenProvider,
-			sharePointSiteId: params.sharePointSiteId,
-			mediaMaxBytes,
-			feedbackLoopEnabled,
-			serviceUrlBoundary: require_resolve_allowlist.resolveMSTeamsSdkCloudOptions(msteamsCfg)
-		});
-	};
+	const findPendingNativeDelivery = () => pendingDeliveries.find((candidate) => !candidate.nativeSettled);
 	const queueDeliveryFailureSystemEvent = (failure) => {
 		const classification = require_channel_setup.classifyMSTeamsSendError(failure.error);
 		const errorText = require_channel_setup.formatUnknownError(failure.error);
@@ -2120,26 +1983,21 @@ function createMSTeamsReplyDispatcher(params) {
 	const renderReplyPayload = (payload) => {
 		return require_conversation_store_state.renderReplyPayloadsToMessages([payload], {
 			textChunkLimit: params.textLimit,
-			chunkText: true,
-			mediaMode: "split",
 			tableMode,
 			chunkMode
 		});
 	};
-	const deliveryOutcome = (delivery) => {
+	const settlePendingDelivery = (delivery) => {
+		if (delivery.settled || !delivery.blockSettled || !delivery.nativeSettled) return;
+		delivery.settled = true;
 		const acceptedParts = [...delivery.nativeResult ? [delivery.nativeResult] : [], ...delivery.blockResults];
 		const messageIds = acceptedParts.flatMap((part) => part.messageIds);
-		const content = delivery.errors.length > 0 ? joinAcceptedContents(acceptedParts.map((part) => part.content)) : delivery.content;
-		return {
+		const content = delivery.errors.length > 0 ? acceptedParts.map((part) => part.content).filter(Boolean).join("\n") : delivery.content;
+		const outcome = {
 			visibleReplySent: acceptedParts.length > 0,
 			...messageIds.length > 0 ? { messageIds } : {},
 			...acceptedParts.length > 0 && content !== void 0 ? { content } : {}
 		};
-	};
-	const settlePendingDelivery = (delivery) => {
-		if (delivery.settled || !delivery.blockSettled || delivery.native && !delivery.nativeSettled) return;
-		delivery.settled = true;
-		const outcome = deliveryOutcome(delivery);
 		if (delivery.errors.length === 0) {
 			delivery.finalization.resolve(outcome);
 			return;
@@ -2150,21 +2008,6 @@ function createMSTeamsReplyDispatcher(params) {
 			visibleReplySent: true
 		}) : error);
 	};
-	const queueReplyPayload = (payload, messages, native) => {
-		const delivery = {
-			messages,
-			finalization: (0, openclaw_plugin_sdk_extension_shared.createDeferred)(),
-			content: payload.text,
-			blockResults: [],
-			native,
-			nativeSettled: !native,
-			blockSettled: messages.length === 0,
-			settled: false,
-			errors: []
-		};
-		pendingDeliveries.push(delivery);
-		return delivery;
-	};
 	const flushPendingMessages = async () => {
 		for (const delivery of pendingDeliveries) {
 			if (delivery.blockSettled) continue;
@@ -2174,7 +2017,24 @@ function createMSTeamsReplyDispatcher(params) {
 			let lastFailedError;
 			const sentIds = [];
 			for (const msg of toSend) try {
-				const msgIds = await sendMessages([msg]);
+				const msgIds = await require_conversation_store_state.sendMSTeamsMessages({
+					replyStyle: params.replyStyle,
+					app: params.app,
+					conversationRef: params.conversationRef,
+					context: params.context,
+					messages: [msg],
+					onRetry: (event) => {
+						params.log.debug?.("retrying send", {
+							replyStyle: params.replyStyle,
+							...event
+						});
+					},
+					tokenProvider: params.tokenProvider,
+					sharePointSiteId: params.sharePointSiteId,
+					mediaMaxBytes,
+					feedbackLoopEnabled,
+					serviceUrlBoundary: require_resolve_allowlist.resolveMSTeamsSdkCloudOptions(msteamsCfg)
+				});
 				const validIds = msgIds.filter((id) => id.trim() && id !== "unknown");
 				if (msgIds.length > 0) delivery.blockResults.push({
 					messageIds: validIds,
@@ -2227,7 +2087,17 @@ function createMSTeamsReplyDispatcher(params) {
 				visibleReplySent: false,
 				suppression: { reason: "no_visible_result" }
 			};
-			const pending = queueReplyPayload(payload, messages, native);
+			const pending = {
+				messages,
+				finalization: (0, openclaw_plugin_sdk_extension_shared.createDeferred)(),
+				content: payload.text,
+				blockResults: [],
+				nativeSettled: !native,
+				blockSettled: messages.length === 0,
+				settled: false,
+				errors: []
+			};
+			pendingDeliveries.push(pending);
 			if (blockStreamingEnabled) await flushPendingMessages();
 			settlePendingDelivery(pending);
 			return {
@@ -2290,8 +2160,7 @@ function createMSTeamsReplyDispatcher(params) {
 	const shouldSuppressDefaultToolProgressMessages = streamController.hasStream() && teamsStreamMode === "progress";
 	const progressCallbacks = streamController.hasStream() ? {
 		onReasoningStream: async (payload) => {
-			const text = typeof payload?.text === "string" ? payload.text : void 0;
-			await streamController.pushReasoningProgress(text, { snapshot: payload?.isReasoningSnapshot === true });
+			await streamController.pushReasoningProgress(payload.text, { snapshot: payload.isReasoningSnapshot === true });
 			return false;
 		},
 		onReasoningEnd: () => {
@@ -2301,22 +2170,12 @@ function createMSTeamsReplyDispatcher(params) {
 		onToolStart: streamController.pushToolEvent,
 		onItemEvent: streamController.pushItemEvent,
 		onPlanUpdate: async (payload) => {
-			if (payload?.phase !== "update") return false;
-			await streamController.pushPlanProgress((0, openclaw_plugin_sdk_channel_outbound.normalizeAgentPlanSteps)(payload.steps), {
-				explanation: typeof payload.explanation === "string" ? payload.explanation : void 0,
-				explanationFormat: payload.explanationFormat === "plain" ? "plain" : void 0
-			});
+			if (payload.phase !== "update") return false;
+			await streamController.pushPlanProgress(payload.steps, payload);
 			return false;
 		},
 		onApprovalEvent: async (payload) => {
-			await streamController.pushApprovalEvent({
-				...typeof payload?.phase === "string" ? { phase: payload.phase } : {},
-				...typeof payload?.approvalId === "string" ? { approvalId: payload.approvalId } : {},
-				...typeof payload?.title === "string" ? { title: payload.title } : {},
-				...typeof payload?.command === "string" ? { command: payload.command } : {},
-				...typeof payload?.reason === "string" ? { reason: payload.reason } : {},
-				...typeof payload?.message === "string" ? { message: payload.message } : {}
-			});
+			await streamController.pushApprovalEvent(payload);
 			return false;
 		}
 	} : {};
@@ -2354,7 +2213,7 @@ async function dispatchMSTeamsInboundTurn(params) {
 	const teamsFrom = isDirectMessage ? `msteams:${senderId}` : isChannel ? `msteams:channel:${conversationId}` : `msteams:group:${conversationId}`;
 	const teamsTo = isDirectMessage ? `user:${senderId}` : `conversation:${conversationId}`;
 	const envelopeFrom = isDirectMessage ? senderName : conversationType;
-	const buildEnvelope = (0, openclaw_plugin_sdk_channel_inbound.createChannelInboundEnvelopeBuilder)({
+	const buildEnvelope = await (0, openclaw_plugin_sdk_channel_inbound.createChannelInboundEnvelopeBuilderAsync)({
 		cfg,
 		route
 	});
@@ -2719,7 +2578,7 @@ function resolveParentCacheExpiresAt(nowRaw) {
 	const nowMs = (0, openclaw_plugin_sdk_number_runtime.asDateTimestampMs)(nowRaw);
 	return nowMs === void 0 ? void 0 : (0, openclaw_plugin_sdk_number_runtime.resolveExpiresAtMsFromDurationMs)(PARENT_CACHE_TTL_MS, { nowMs });
 }
-async function fetchParentMessageCached(token, groupId, channelId, parentId, fetchParent = require_reaction_types.fetchChannelMessage) {
+async function fetchParentMessageCached(token, groupId, channelId, parentId, deadline) {
 	const key = buildParentCacheKey(groupId, channelId, parentId);
 	const now = (0, openclaw_plugin_sdk_number_runtime.asDateTimestampMs)(Date.now());
 	const cached = parentCache.get(key);
@@ -2730,7 +2589,7 @@ async function fetchParentMessageCached(token, groupId, channelId, parentId, fet
 		return cached.message;
 	}
 	if (cached) parentCache.delete(key);
-	const message = await fetchParent(token, groupId, channelId, parentId);
+	const message = await require_reaction_types.fetchChannelMessage(token, groupId, channelId, parentId, deadline);
 	const expiresAt = resolveParentCacheExpiresAt(Date.now());
 	if (expiresAt !== void 0) touchLru(parentCache, key, {
 		message,
@@ -2840,7 +2699,7 @@ async function resolveMSTeamsThreadContext(params) {
 		const [parentResult, repliesResult] = await require_resolve_allowlist.withMSTeamsRequestDeadline({
 			deadline,
 			label: "MS Teams thread history",
-			work: () => Promise.allSettled([fetchParentMessageCached(graphToken, teamAadGroupId, params.conversationId, threadParentId, (token, groupId, requestedChannelId, messageId) => require_reaction_types.fetchChannelMessage(token, groupId, requestedChannelId, messageId, deadline)), require_reaction_types.fetchThreadReplies(graphToken, teamAadGroupId, params.conversationId, threadParentId, 50, deadline)])
+			work: () => Promise.allSettled([fetchParentMessageCached(graphToken, teamAadGroupId, params.conversationId, threadParentId, deadline), require_reaction_types.fetchThreadReplies(graphToken, teamAadGroupId, params.conversationId, threadParentId, deadline)])
 		});
 		const parentMsg = parentResult.status === "fulfilled" ? parentResult.value : void 0;
 		const replies = repliesResult.status === "fulfilled" ? repliesResult.value : [];
@@ -3540,9 +3399,6 @@ async function runMSTeamsFeedbackInvokeHandler(context, deps) {
 }
 //#endregion
 //#region extensions/msteams/src/file-consent-invoke.ts
-/**
-* Handle fileConsent/invoke activities for large file uploads.
-*/
 async function handleMSTeamsFileConsentInvoke(context, log) {
 	const expiredUploadMessage = "The file upload request has expired. Please try sending the file again.";
 	const activity = context.activity;
@@ -3634,7 +3490,7 @@ async function handleMSTeamsFileConsentInvoke(context, log) {
 async function runMSTeamsFileConsentInvokeHandler(context, log) {
 	try {
 		await require_conversation_store_state.withRevokedProxyFallback({
-			run: async () => await handleMSTeamsFileConsentInvoke(context, log),
+			run: () => handleMSTeamsFileConsentInvoke(context, log),
 			onRevoked: async () => true,
 			onRevokedLog: () => {
 				log.debug?.("turn context revoked during file consent invoke; skipping delayed response");
@@ -3849,23 +3705,22 @@ const STORE_KEY_VERSION_PREFIX = "v2:";
 function makeMSTeamsSsoTokenStoreKey(connectionName, userId) {
 	return `${STORE_KEY_VERSION_PREFIX}${(0, node_crypto.createHash)("sha256").update(JSON.stringify([connectionName, userId])).digest("hex")}`;
 }
-function createMSTeamsSsoTokenStoreFs(params) {
+function createMSTeamsSsoTokenStoreFs() {
 	const tokenStore = require_runtime.getMSTeamsRuntime().state.openKeyedStore({
 		namespace: MSTEAMS_SSO_TOKENS_NAMESPACE,
-		maxEntries: MSTEAMS_MAX_SSO_TOKENS,
-		env: require_conversation_store_state.resolveMSTeamsSqliteStateEnv(params)
+		maxEntries: MSTEAMS_MAX_SSO_TOKENS
 	});
 	return {
 		async get({ connectionName, userId }) {
 			return await tokenStore.lookup(makeMSTeamsSsoTokenStoreKey(connectionName, userId)) ?? null;
 		},
 		async save(token) {
-			await require_conversation_store_state.withMSTeamsSqliteMutationLock(params, SSO_TOKEN_MUTATION_KEY, async () => {
+			await require_conversation_store_state.withMSTeamsSqliteMutationLock(SSO_TOKEN_MUTATION_KEY, async () => {
 				await tokenStore.register(makeMSTeamsSsoTokenStoreKey(token.connectionName, token.userId), require_conversation_store_state.toPluginJsonValue({ ...token }));
 			});
 		},
 		async remove({ connectionName, userId }) {
-			return require_conversation_store_state.withMSTeamsSqliteMutationLock(params, SSO_TOKEN_MUTATION_KEY, () => tokenStore.delete(makeMSTeamsSsoTokenStoreKey(connectionName, userId)));
+			return require_conversation_store_state.withMSTeamsSqliteMutationLock(SSO_TOKEN_MUTATION_KEY, () => tokenStore.delete(makeMSTeamsSsoTokenStoreKey(connectionName, userId)));
 		}
 	};
 }
@@ -3959,10 +3814,6 @@ async function monitorMSTeamsProvider(opts) {
 	const cleanAllowEntries = (entries) => entries?.map((entry) => cleanAllowEntry(entry)).filter((entry) => entry && entry !== "*") ?? [];
 	const isMutableUserEntry = (entry) => !isStableUserId(entry) && !/^accessGroup:/i.test(entry) && !require_resolve_allowlist.looksLikeMSTeamsConversationId(require_resolve_allowlist.normalizeMSTeamsConversationId(entry));
 	const resolveAllowlistUsers = async (label, entries) => {
-		if (entries.length === 0) return {
-			additions: [],
-			unresolved: []
-		};
 		const resolved = await require_resolve_allowlist.resolveMSTeamsUserAllowlist({
 			cfg,
 			entries