@openclaw/msteams 2026.10.5-beta.4 → 2026.10.10-beta.2

package/dist/.setup/config-schema-Dk0mRIam.cjs

@@ -1,160 +0,0 @@
-const require_bot_framework_service_url = require("./bot-framework-service-url-CPp4d-Q6.cjs");
-let openclaw_plugin_sdk_channel_core = require("openclaw/plugin-sdk/channel-core");
-let openclaw_plugin_sdk_ssrf_policy = require("openclaw/plugin-sdk/ssrf-policy");
-let openclaw_plugin_sdk_secret_input = require("openclaw/plugin-sdk/secret-input");
-let openclaw_plugin_sdk_channel_config_schema = require("openclaw/plugin-sdk/channel-config-schema");
-let zod = require("zod");
-//#region extensions/msteams/src/config-ui-hints.ts
-const msTeamsChannelConfigUiHints = {
-	"": {
-		label: "MS Teams",
-		help: "Microsoft Teams channel provider configuration and provider-specific policy toggles. Use this section to isolate Teams behavior from other enterprise chat providers."
-	},
-	configWrites: {
-		label: "MS Teams Config Writes",
-		help: "Allow Microsoft Teams to write config in response to channel events/commands (default: true)."
-	},
-	cloud: {
-		label: "MS Teams Cloud",
-		help: "Teams SDK cloud environment for auth, token validation, and token services: \"Public\", \"USGov\", \"USGovDoD\", or \"China\" (default: Public)."
-	},
-	serviceUrl: {
-		label: "MS Teams Service URL",
-		help: "Bot Connector service URL for SDK proactive sends/edits/deletes. Set with cloud for USGov/DoD; set alone for GCC."
-	},
-	graphMediaFallback: {
-		label: "MS Teams Graph Media Fallback",
-		help: "Query Microsoft Graph for unresolved channel or group-chat HTML media. Adds one lookup per matching message when enabled (default: false)."
-	},
-	requireMentionInBotThreads: {
-		label: "Require Mentions in Bot Threads",
-		help: "Override mention requirements for channel threads rooted at this bot's tracked messages. Unset preserves existing behavior. Channel overrides win over team and global values. Ownership tracking lasts up to 24 hours."
-	},
-	"teams.*.requireMentionInBotThreads": {
-		label: "Team Bot Thread Mentions",
-		help: "Override mention requirements for this bot's channel threads in this team. Unset inherits the global value."
-	},
-	"teams.*.channels.*.requireMentionInBotThreads": {
-		label: "Channel Bot Thread Mentions",
-		help: "Override mention requirements for this bot's threads in this channel. Unset inherits the team or global value."
-	},
-	...(0, openclaw_plugin_sdk_channel_core.createChannelConfigUiHints)({
-		channelLabel: "MS Teams",
-		streaming: { "": {
-			label: "MS Teams Streaming",
-			help: "Microsoft Teams preview/progress streaming mode: \"off\" | \"partial\" | \"block\" | \"progress\". Personal chats use Teams native streaminfo progress when available."
-		} },
-		progress: {
-			labels: "openclaw",
-			titleWording: true
-		}
-	})
-};
-//#endregion
-//#region extensions/msteams/src/config-schema.ts
-const SecretInputSchema = (0, openclaw_plugin_sdk_secret_input.buildSecretInputSchema)();
-const ToolPolicyBySenderSchema = zod.z.record(zod.z.string(), openclaw_plugin_sdk_channel_config_schema.ToolPolicySchema).optional();
-const MSTeamsChannelSchema = zod.z.object({
-	requireMention: zod.z.boolean().optional(),
-	requireMentionInBotThreads: zod.z.boolean().optional(),
-	tools: openclaw_plugin_sdk_channel_config_schema.ToolPolicySchema,
-	toolsBySender: ToolPolicyBySenderSchema,
-	replyStyle: openclaw_plugin_sdk_channel_config_schema.MSTeamsReplyStyleSchema.optional()
-}).strict();
-const MSTeamsTeamSchema = MSTeamsChannelSchema.extend({ channels: zod.z.record(zod.z.string(), MSTeamsChannelSchema.optional()).optional() });
-function isAzureChinaBotFrameworkServiceUrl(value) {
-	return (0, openclaw_plugin_sdk_ssrf_policy.isHttpsUrlAllowedByHostnameSuffixAllowlist)(value.trim(), ["botframework.azure.cn"]);
-}
-const { accountShape, rootPolicyShape } = (0, openclaw_plugin_sdk_channel_config_schema.buildChannelAccountSchemaParts)({
-	omit: [
-		"name",
-		"mentionPatterns",
-		"replyToMode"
-	],
-	allowFrom: zod.z.array(zod.z.string()).optional(),
-	groupAllowFrom: zod.z.array(zod.z.string()).optional(),
-	streaming: openclaw_plugin_sdk_channel_config_schema.ChannelPreviewStreamingConfigSchema.optional()
-});
-const MSTeamsConfigSchema = zod.z.object({
-	...accountShape,
-	...rootPolicyShape,
-	dangerouslyAllowNameMatching: openclaw_plugin_sdk_channel_config_schema.ChannelDangerouslyAllowNameMatchingSchema,
-	appId: zod.z.string().optional(),
-	appPassword: (0, openclaw_plugin_sdk_secret_input.registerSensitiveConfigSchema)(SecretInputSchema.optional()),
-	tenantId: zod.z.string().optional(),
-	cloud: zod.z.enum([
-		"Public",
-		"USGov",
-		"USGovDoD",
-		"China"
-	]).optional(),
-	serviceUrl: zod.z.string().url().refine(require_bot_framework_service_url.isAllowedBotFrameworkServiceUrl, { message: "channels.msteams.serviceUrl must use a supported Microsoft Teams Bot Connector host" }).optional(),
-	authType: zod.z.enum(["secret", "federated"]).optional(),
-	certificatePath: zod.z.string().optional(),
-	certificateThumbprint: zod.z.string().optional(),
-	useManagedIdentity: zod.z.boolean().optional(),
-	managedIdentityClientId: zod.z.string().optional(),
-	webhook: zod.z.object({ path: zod.z.string().optional() }).strict().optional(),
-	legacyWebhook: zod.z.union([zod.z.literal(false), zod.z.object({
-		port: zod.z.number().int().min(1).max(65535),
-		host: zod.z.string().optional()
-	}).strict()]).optional(),
-	typingIndicator: zod.z.boolean().optional(),
-	mediaAllowHosts: zod.z.array(zod.z.string()).optional(),
-	mediaAuthAllowHosts: zod.z.array(zod.z.string()).optional(),
-	graphMediaFallback: zod.z.boolean().optional(),
-	requireMention: zod.z.boolean().optional(),
-	requireMentionInBotThreads: zod.z.boolean().optional(),
-	replyStyle: openclaw_plugin_sdk_channel_config_schema.MSTeamsReplyStyleSchema.optional(),
-	teams: zod.z.record(zod.z.string(), MSTeamsTeamSchema.optional()).optional(),
-	/** SharePoint site ID for file uploads in group chats/channels (e.g., "contoso.sharepoint.com,guid1,guid2") */
-	sharePointSiteId: zod.z.string().optional(),
-	welcomeCard: zod.z.boolean().optional(),
-	promptStarters: zod.z.array(zod.z.string()).optional(),
-	groupWelcomeCard: zod.z.boolean().optional(),
-	feedbackEnabled: zod.z.boolean().optional(),
-	feedbackReflection: zod.z.boolean().optional(),
-	feedbackReflectionCooldownMs: zod.z.number().int().min(0).optional(),
-	delegatedAuth: zod.z.object({
-		enabled: zod.z.boolean().optional(),
-		scopes: zod.z.array(zod.z.string()).optional()
-	}).strict().optional(),
-	sso: zod.z.object({
-		enabled: zod.z.boolean().optional(),
-		connectionName: zod.z.string().optional()
-	}).strict().optional()
-}).strict().superRefine((value, ctx) => {
-	(0, openclaw_plugin_sdk_channel_config_schema.refineChannelDmPolicy)({
-		channelId: "msteams",
-		value,
-		ctx
-	});
-	if (value.sso?.enabled === true && !value.sso.connectionName?.trim()) ctx.addIssue({
-		code: zod.z.ZodIssueCode.custom,
-		path: ["sso", "connectionName"],
-		message: "channels.msteams.sso.enabled=true requires channels.msteams.sso.connectionName to identify the Bot Framework OAuth connection"
-	});
-	if (value.cloud && value.cloud !== "Public" && value.cloud !== "China" && !value.serviceUrl?.trim()) ctx.addIssue({
-		code: zod.z.ZodIssueCode.custom,
-		path: ["serviceUrl"],
-		message: "channels.msteams.cloud requires channels.msteams.serviceUrl for non-public Teams clouds"
-	});
-	if (value.cloud === "China" && value.serviceUrl?.trim() && !isAzureChinaBotFrameworkServiceUrl(value.serviceUrl)) ctx.addIssue({
-		code: zod.z.ZodIssueCode.custom,
-		path: ["serviceUrl"],
-		message: "channels.msteams.cloud=China requires channels.msteams.serviceUrl to use an Azure China Bot Framework channel host"
-	});
-	if (value.cloud !== "China" && value.serviceUrl?.trim() && isAzureChinaBotFrameworkServiceUrl(value.serviceUrl)) ctx.addIssue({
-		code: zod.z.ZodIssueCode.custom,
-		path: ["cloud"],
-		message: "Azure China Bot Framework serviceUrl hosts require channels.msteams.cloud=China"
-	});
-});
-const MSTeamsChannelConfigSchema = (0, openclaw_plugin_sdk_channel_config_schema.buildChannelConfigSchema)(MSTeamsConfigSchema, { uiHints: msTeamsChannelConfigUiHints });
-//#endregion
-Object.defineProperty(exports, "MSTeamsChannelConfigSchema", {
-	enumerable: true,
-	get: function() {
-		return MSTeamsChannelConfigSchema;
-	}
-});

package/dist/.setup/secret-contract-api-ipiUsANg.cjs

@@ -1,28 +0,0 @@
-//#region extensions/msteams/src/secret-contract.ts
-const channelSecrets = (0, require("openclaw/plugin-sdk/channel-secret-basic-runtime").createSimpleChannelSecretContract)({
-	channelKey: "msteams",
-	label: "Microsoft Teams",
-	accountFields: [],
-	channelFields: ["appPassword"],
-	mode: "channel-only"
-});
-const { secretTargetRegistryEntries, collectRuntimeConfigAssignments } = channelSecrets;
-//#endregion
-Object.defineProperty(exports, "channelSecrets", {
-	enumerable: true,
-	get: function() {
-		return channelSecrets;
-	}
-});
-Object.defineProperty(exports, "collectRuntimeConfigAssignments", {
-	enumerable: true,
-	get: function() {
-		return collectRuntimeConfigAssignments;
-	}
-});
-Object.defineProperty(exports, "secretTargetRegistryEntries", {
-	enumerable: true,
-	get: function() {
-		return secretTargetRegistryEntries;
-	}
-});

package/dist/.setup/token-config-CqIh8z7Q.cjs

@@ -1,138 +0,0 @@
-const require_runtime = require("./runtime-gZTAuFux.cjs");
-let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
-let openclaw_plugin_sdk_secret_input = require("openclaw/plugin-sdk/secret-input");
-//#region extensions/msteams/src/delegated-state.ts
-const MSTEAMS_DELEGATED_TOKEN_LEGACY_FILENAME = "msteams-delegated.json";
-const MSTEAMS_DELEGATED_TOKEN_NAMESPACE = "delegated-token";
-const MSTEAMS_DELEGATED_TOKEN_KEY = "current";
-function openDelegatedTokenStore() {
-	return require_runtime.getMSTeamsRuntime().state.openKeyedStore({
-		namespace: MSTEAMS_DELEGATED_TOKEN_NAMESPACE,
-		maxEntries: 1,
-		overflowPolicy: "reject-new"
-	});
-}
-function normalizeMSTeamsDelegatedTokens(value) {
-	if (!value || typeof value !== "object") return null;
-	const token = value;
-	if (typeof token.accessToken !== "string" || !token.accessToken || typeof token.refreshToken !== "string" || !token.refreshToken || typeof token.expiresAt !== "number" || !Number.isFinite(token.expiresAt) || !Array.isArray(token.scopes) || !token.scopes.every((scope) => typeof scope === "string" && scope.length > 0)) return null;
-	return {
-		accessToken: token.accessToken,
-		refreshToken: token.refreshToken,
-		expiresAt: token.expiresAt,
-		scopes: [...token.scopes],
-		...typeof token.userPrincipalName === "string" ? { userPrincipalName: token.userPrincipalName } : {}
-	};
-}
-async function loadMSTeamsDelegatedTokens() {
-	return normalizeMSTeamsDelegatedTokens(await openDelegatedTokenStore().lookup("current")) ?? void 0;
-}
-async function saveMSTeamsDelegatedTokens(tokens) {
-	const normalized = normalizeMSTeamsDelegatedTokens(tokens);
-	if (!normalized) throw new Error("Invalid Microsoft Teams delegated token payload");
-	await openDelegatedTokenStore().register(MSTEAMS_DELEGATED_TOKEN_KEY, normalized);
-}
-//#endregion
-//#region extensions/msteams/src/token-config.ts
-function resolveAuthType(cfg) {
-	const fromCfg = cfg?.authType;
-	if (fromCfg === "secret" || fromCfg === "federated") return fromCfg;
-	if (process.env.MSTEAMS_AUTH_TYPE === "federated") return "federated";
-	return "secret";
-}
-function resolveFederatedPath(configValue, envValue) {
-	return (0, openclaw_plugin_sdk_string_coerce_runtime.readNonBlankString)(configValue) ?? (0, openclaw_plugin_sdk_string_coerce_runtime.readNonBlankString)(envValue);
-}
-function hasConfiguredMSTeamsCredentials(cfg) {
-	const authType = resolveAuthType(cfg);
-	const hasAppId = Boolean((0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(cfg?.appId) || (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(process.env.MSTEAMS_APP_ID));
-	const hasTenantId = Boolean((0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(cfg?.tenantId) || (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(process.env.MSTEAMS_TENANT_ID));
-	if (authType === "federated") {
-		const hasCert = Boolean(resolveFederatedPath(cfg?.certificatePath, process.env.MSTEAMS_CERTIFICATE_PATH));
-		const hasManagedIdentity = cfg?.useManagedIdentity ?? process.env.MSTEAMS_USE_MANAGED_IDENTITY === "true";
-		return hasAppId && hasTenantId && (hasCert || hasManagedIdentity);
-	}
-	return Boolean((0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(cfg?.appId) && (0, openclaw_plugin_sdk_secret_input.hasConfiguredSecretInput)(cfg?.appPassword) && (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(cfg?.tenantId));
-}
-function resolveMSTeamsCredentials(cfg) {
-	const authType = resolveAuthType(cfg);
-	const appId = (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(cfg?.appId) || (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(process.env.MSTEAMS_APP_ID);
-	const tenantId = (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(cfg?.tenantId) || (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(process.env.MSTEAMS_TENANT_ID);
-	if (!appId || !tenantId) return;
-	if (authType === "federated") {
-		const certificatePath = resolveFederatedPath(cfg?.certificatePath, process.env.MSTEAMS_CERTIFICATE_PATH);
-		const certificateThumbprint = cfg?.certificateThumbprint || process.env.MSTEAMS_CERTIFICATE_THUMBPRINT || void 0;
-		const useManagedIdentity = cfg?.useManagedIdentity ?? process.env.MSTEAMS_USE_MANAGED_IDENTITY === "true";
-		const managedIdentityClientId = cfg?.managedIdentityClientId || process.env.MSTEAMS_MANAGED_IDENTITY_CLIENT_ID || void 0;
-		if (!certificatePath && !useManagedIdentity) return;
-		return {
-			type: "federated",
-			appId,
-			tenantId,
-			certificatePath,
-			certificateThumbprint,
-			useManagedIdentity: useManagedIdentity || void 0,
-			managedIdentityClientId
-		};
-	}
-	const appPassword = (0, openclaw_plugin_sdk_secret_input.normalizeResolvedSecretInputString)({
-		value: cfg?.appPassword,
-		path: "channels.msteams.appPassword"
-	}) || (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(process.env.MSTEAMS_APP_PASSWORD);
-	if (!appPassword) return;
-	return {
-		type: "secret",
-		appId,
-		appPassword,
-		tenantId
-	};
-}
-//#endregion
-Object.defineProperty(exports, "MSTEAMS_DELEGATED_TOKEN_KEY", {
-	enumerable: true,
-	get: function() {
-		return MSTEAMS_DELEGATED_TOKEN_KEY;
-	}
-});
-Object.defineProperty(exports, "MSTEAMS_DELEGATED_TOKEN_LEGACY_FILENAME", {
-	enumerable: true,
-	get: function() {
-		return MSTEAMS_DELEGATED_TOKEN_LEGACY_FILENAME;
-	}
-});
-Object.defineProperty(exports, "MSTEAMS_DELEGATED_TOKEN_NAMESPACE", {
-	enumerable: true,
-	get: function() {
-		return MSTEAMS_DELEGATED_TOKEN_NAMESPACE;
-	}
-});
-Object.defineProperty(exports, "hasConfiguredMSTeamsCredentials", {
-	enumerable: true,
-	get: function() {
-		return hasConfiguredMSTeamsCredentials;
-	}
-});
-Object.defineProperty(exports, "loadMSTeamsDelegatedTokens", {
-	enumerable: true,
-	get: function() {
-		return loadMSTeamsDelegatedTokens;
-	}
-});
-Object.defineProperty(exports, "normalizeMSTeamsDelegatedTokens", {
-	enumerable: true,
-	get: function() {
-		return normalizeMSTeamsDelegatedTokens;
-	}
-});
-Object.defineProperty(exports, "resolveMSTeamsCredentials", {
-	enumerable: true,
-	get: function() {
-		return resolveMSTeamsCredentials;
-	}
-});
-Object.defineProperty(exports, "saveMSTeamsDelegatedTokens", {
-	enumerable: true,
-	get: function() {
-		return saveMSTeamsDelegatedTokens;
-	}
-});