@openclaw/msteams 2026.10.5-beta.4 → 2026.10.10-beta.2

package/dist/.setup/{send-rJpcVtRp.cjs → send-Bgm8RYUa.cjs}

@@ -1,13 +1,14 @@
+const require_bot_framework_service_url = require("./bot-framework-service-url-B3FWn2SV.cjs");
+const require_token_config = require("./token-config-bEpua_Q7.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-tYgAHx0t.cjs");
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 require("../runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-DdDBVCzl.cjs");
-const require_bot_framework_service_url = require("./bot-framework-service-url-CPp4d-Q6.cjs");
-const require_token_config = require("./token-config-CqIh8z7Q.cjs");
-const require_channel = require("./channel-Cifn9fsv.cjs");
-const require_channel_setup = require("./channel.setup-BjbHugkL.cjs");
-const require_conversation_store_state = require("./conversation-store-state-DprmOfl7.cjs");
+const require_channel = require("./channel-B7Gy3QUW.cjs");
+const require_channel_setup = require("./channel.setup-B5ClEcNI.cjs");
+const require_conversation_store_state = require("./conversation-store-state-C3__T9mK.cjs");
 let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
+let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_error_runtime = require("openclaw/plugin-sdk/error-runtime");
 let openclaw_plugin_sdk_channel_inbound = require("openclaw/plugin-sdk/channel-inbound");
 let openclaw_plugin_sdk_markdown_table_runtime = require("openclaw/plugin-sdk/markdown-table-runtime");
@@ -83,14 +84,21 @@ async function findConversationReference(recipient) {
 	} : null;
 }
 async function resolveMSTeamsSendContext(params) {
-	const msteamsCfg = params.cfg.channels?.msteams;
-	if (!msteamsCfg?.enabled) throw new Error("msteams provider is not enabled");
-	const account = require_channel_setup.resolveMSTeamsAccount(params.cfg);
+	const accountId = (0, openclaw_plugin_sdk_account_id.normalizeAccountId)(params.accountId ?? require_resolve_allowlist.resolveDefaultMSTeamsAccountId(params.cfg));
+	const account = require_resolve_allowlist.resolveMSTeamsAccount({
+		cfg: params.cfg,
+		accountId
+	});
+	const msteamsCfg = account.config;
+	if (!account.enabled) throw new Error("msteams provider is not enabled");
 	if (account.tokenStatus === "configured_unavailable") throw new Error("msteams credential file is configured but unavailable");
 	if (!account.configured) throw new Error("msteams credentials not configured");
-	const creds = require_token_config.resolveMSTeamsCredentials(msteamsCfg);
+	const creds = require_token_config.resolveMSTeamsCredentials(msteamsCfg, {
+		allowEnvFallback: accountId === openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID,
+		pathPrefix: require_resolve_allowlist.resolveMSTeamsAccountConfigPath(params.cfg, accountId)
+	});
 	if (!creds) throw new Error("msteams credentials not configured");
-	const store = require_conversation_store_state.createMSTeamsConversationStoreState();
+	const store = require_conversation_store_state.createMSTeamsConversationStoreState({ accountId });
 	const recipient = parseRecipient(params.to);
 	const found = await findConversationReference({
 		...recipient,
@@ -144,9 +152,10 @@ async function resolveMSTeamsSendContext(params) {
 	});
 	const mediaMaxBytes = (0, openclaw_plugin_sdk_account_helpers.resolveChannelMediaMaxBytes)({
 		cfg: params.cfg,
-		resolveChannelLimitMb: ({ cfg }) => cfg.channels?.msteams?.mediaMaxMb
+		resolveChannelLimitMb: () => msteamsCfg.mediaMaxMb
 	});
 	return {
+		accountId,
 		conversationId,
 		ref: safeRef,
 		app,
@@ -208,17 +217,27 @@ function createMSTeamsSendResult(params) {
 		...params.pendingUploadId ? { pendingUploadId: params.pendingUploadId } : {}
 	};
 }
+function resolveMSTeamsMarkdownTableMode(cfg, accountId) {
+	return (0, openclaw_plugin_sdk_markdown_table_runtime.resolveMarkdownTableMode)({
+		cfg: {
+			...cfg,
+			channels: {
+				...cfg.channels,
+				msteams: require_resolve_allowlist.resolveMSTeamsAccountConfig(cfg, accountId)
+			}
+		},
+		channel: "msteams"
+	});
+}
 /** Proactive delivery requires a conversation reference captured from an earlier inbound turn. */
 async function sendMessageMSTeams(params) {
 	require_resolve_allowlist.assertMSTeamsSendHandoff(params);
-	const { cfg, to, text, mediaUrl, filename, mediaAccess, mediaLocalRoots, mediaReadFile } = params;
-	const tableMode = (0, openclaw_plugin_sdk_markdown_table_runtime.resolveMarkdownTableMode)({
-		cfg,
-		channel: "msteams"
-	});
+	const { cfg, accountId, to, text, mediaUrl, filename, mediaAccess, mediaLocalRoots, mediaReadFile } = params;
+	const tableMode = resolveMSTeamsMarkdownTableMode(cfg, accountId);
 	const messageText = require_conversation_store_state.formatMSTeamsMarkdown(text ?? "", tableMode);
 	const ctx = await resolveMSTeamsSendContext({
 		cfg,
+		accountId,
 		to
 	});
 	const { conversationId, log, conversationType, tokenProvider, sharePointSiteId } = ctx;
@@ -370,6 +389,7 @@ async function sendTextWithMedia(ctx, text, mediaUrl, options) {
 	const acceptedKinds = [];
 	try {
 		platformMessageIds = await require_conversation_store_state.sendMSTeamsMessages({
+			accountId: ctx.accountId,
 			assertDirectAdapterHandoff: options.assertDirectAdapterHandoff,
 			onPlatformSendDispatch: options.onPlatformSendDispatch,
 			onMessageSent: async (messageId, messageIndex) => {
@@ -426,6 +446,7 @@ async function sendTextWithMedia(ctx, text, mediaUrl, options) {
 async function sendProactiveActivityRaw({ ctx, activity, assertDirectAdapterHandoff, onPlatformSendDispatch }) {
 	const baseRef = require_conversation_store_state.buildConversationReference(ctx.ref);
 	const response = await require_conversation_store_state.sendMSTeamsActivityWithReference(ctx.app, baseRef, activity, {
+		accountId: ctx.accountId,
 		assertDirectAdapterHandoff,
 		onPlatformSendDispatch,
 		...ctx.threadActivityId ? { threadActivityId: ctx.threadActivityId } : {},
@@ -442,9 +463,10 @@ async function sendProactiveActivity(params) {
 }
 async function sendPollMSTeams(params) {
 	require_resolve_allowlist.assertMSTeamsSendHandoff(params);
-	const { cfg, to, question, options, maxSelections } = params;
+	const { cfg, accountId, to, question, options, maxSelections } = params;
 	const ctx = await resolveMSTeamsSendContext({
 		cfg,
+		accountId,
 		to
 	});
 	const { conversationId, log } = ctx;
@@ -478,9 +500,10 @@ async function sendPollMSTeams(params) {
 }
 async function sendAdaptiveCardMSTeams(params) {
 	require_resolve_allowlist.assertMSTeamsSendHandoff(params);
-	const { cfg, to, card } = params;
+	const { cfg, accountId, to, card } = params;
 	const ctx = await resolveMSTeamsSendContext({
 		cfg,
+		accountId,
 		to
 	});
 	const { conversationId, log } = ctx;
@@ -513,10 +536,7 @@ async function editMessageMSTeams(params) {
 	return mutateMSTeamsMessageActivity({
 		...params,
 		activity: {
-			...require_conversation_store_state.buildMSTeamsMessageActivity(require_conversation_store_state.formatMSTeamsMarkdown(params.text, (0, openclaw_plugin_sdk_markdown_table_runtime.resolveMarkdownTableMode)({
-				cfg: params.cfg,
-				channel: "msteams"
-			}))),
+			...require_conversation_store_state.buildMSTeamsMessageActivity(require_conversation_store_state.formatMSTeamsMarkdown(params.text, resolveMSTeamsMarkdownTableMode(params.cfg, params.accountId))),
 			id: params.activityId
 		}
 	});
@@ -534,9 +554,10 @@ async function deleteMessageMSTeams(params) {
 	return mutateMSTeamsMessageActivity(params);
 }
 async function mutateMSTeamsMessageActivity(params) {
-	const { cfg, to, activityId, activity } = params;
+	const { cfg, accountId, to, activityId, activity } = params;
 	const { app, conversationId, ref, log, sdkCloudOptions } = await resolveMSTeamsSendContext({
 		cfg,
+		accountId,
 		to
 	});
 	const operation = activity ? "edit" : "delete";

package/dist/.setup/{setup-plugin-api-DfoVOqMJ.cjs → setup-plugin-api-BACfeF7_.cjs}

@@ -1,3 +1,3 @@
-const require_channel_setup = require("./channel.setup-BjbHugkL.cjs");
+const require_channel_setup = require("./channel.setup-B5ClEcNI.cjs");
 require("../setup-plugin-api.cjs");
 exports.msteamsSetupPlugin = require_channel_setup.msteamsSetupPlugin;

package/dist/.setup/{thread-session-B74FC1Id.cjs → thread-session-C7KTMwLU.cjs}

@@ -1,4 +1,4 @@
-const require_resolve_allowlist = require("./resolve-allowlist-DdDBVCzl.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-tYgAHx0t.cjs");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_approval_auth_runtime = require("openclaw/plugin-sdk/approval-auth-runtime");
 let openclaw_plugin_sdk_routing = require("openclaw/plugin-sdk/routing");
@@ -11,8 +11,8 @@ function normalizeMSTeamsApproverId(value) {
 }
 const msTeamsApproval = (0, openclaw_plugin_sdk_approval_auth_runtime.createChannelApprovalAuth)({
 	channelLabel: "Microsoft Teams",
-	resolveInputs: ({ cfg }) => {
-		const channel = cfg.channels?.msteams;
+	resolveInputs: ({ cfg, accountId }) => {
+		const channel = require_resolve_allowlist.resolveMSTeamsAccountConfig(cfg, accountId);
 		return {
 			allowFrom: channel?.allowFrom,
 			defaultTo: channel?.defaultTo
@@ -26,7 +26,14 @@ const msTeamsApproval = (0, openclaw_plugin_sdk_approval_auth_runtime.createChan
 	}
 });
 const getMSTeamsApprovalApprovers = msTeamsApproval.resolveApprovers;
-const msTeamsApprovalAuth = msTeamsApproval.approvalAuth;
+const msTeamsApprovalAuth = { authorizeActorAction(params) {
+	const channel = params.cfg.channels?.msteams;
+	if (!channel || channel.enabled === false || require_resolve_allowlist.resolveMSTeamsAccountConfig(params.cfg, params.accountId).enabled === false) return {
+		authorized: false,
+		reason: "Microsoft Teams approval account is disabled or unavailable."
+	};
+	return msTeamsApproval.approvalAuth.authorizeActorAction(params);
+} };
 //#endregion
 //#region extensions/msteams/src/monitor-handler/thread-session.ts
 const TRAILING_THREAD_SUFFIX = /(?::thread:[^:]+)+$/;

package/dist/.setup/token-config-bEpua_Q7.cjs

@@ -0,0 +1,93 @@
+let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
+let openclaw_plugin_sdk_secret_input = require("openclaw/plugin-sdk/secret-input");
+//#region extensions/msteams/src/token-config.ts
+function resolveAuthType(cfg, options) {
+	const fromCfg = cfg?.authType;
+	if (fromCfg === "secret" || fromCfg === "federated") return fromCfg;
+	if ((options?.allowEnvFallback === false ? void 0 : process.env.MSTEAMS_AUTH_TYPE) === "federated") return "federated";
+	return "secret";
+}
+function resolveFederatedPath(configValue, envValue) {
+	return (0, openclaw_plugin_sdk_string_coerce_runtime.readNonBlankString)(configValue) ?? (0, openclaw_plugin_sdk_string_coerce_runtime.readNonBlankString)(envValue);
+}
+function resolveMSTeamsAppId(cfg, allowEnvFallback) {
+	return (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(cfg?.appId) || (allowEnvFallback ? (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(process.env.MSTEAMS_APP_ID) : void 0);
+}
+function resolveMSTeamsTenantId(cfg, allowEnvFallback) {
+	return (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(cfg?.tenantId) || (allowEnvFallback ? (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(process.env.MSTEAMS_TENANT_ID) : void 0);
+}
+function hasConfiguredMSTeamsCredentials(cfg, options) {
+	return inspectMSTeamsCredentials(cfg, options).status !== "missing";
+}
+function resolveMSTeamsCredentials(cfg, options) {
+	const allowEnvFallback = options?.allowEnvFallback ?? true;
+	const pathPrefix = options?.pathPrefix ?? "channels.msteams";
+	const authType = resolveAuthType(cfg, { allowEnvFallback });
+	const appId = resolveMSTeamsAppId(cfg, allowEnvFallback);
+	const tenantId = resolveMSTeamsTenantId(cfg, allowEnvFallback);
+	if (!appId || !tenantId) return;
+	if (authType === "federated") {
+		const certificatePath = resolveFederatedPath(cfg?.certificatePath, allowEnvFallback ? process.env.MSTEAMS_CERTIFICATE_PATH : void 0);
+		const certificateThumbprint = cfg?.certificateThumbprint || (allowEnvFallback ? process.env.MSTEAMS_CERTIFICATE_THUMBPRINT : void 0) || void 0;
+		const useManagedIdentity = cfg?.useManagedIdentity ?? (allowEnvFallback ? process.env.MSTEAMS_USE_MANAGED_IDENTITY === "true" : false);
+		const managedIdentityClientId = cfg?.managedIdentityClientId || (allowEnvFallback ? process.env.MSTEAMS_MANAGED_IDENTITY_CLIENT_ID : void 0) || void 0;
+		if (!certificatePath && !useManagedIdentity) return;
+		return {
+			type: "federated",
+			appId,
+			tenantId,
+			certificatePath,
+			certificateThumbprint,
+			useManagedIdentity: useManagedIdentity || void 0,
+			managedIdentityClientId
+		};
+	}
+	const appPassword = (0, openclaw_plugin_sdk_secret_input.normalizeResolvedSecretInputString)({
+		value: cfg?.appPassword,
+		path: `${pathPrefix}.appPassword`
+	}) || (allowEnvFallback ? (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(process.env.MSTEAMS_APP_PASSWORD) : void 0);
+	if (!appPassword) return;
+	return {
+		type: "secret",
+		appId,
+		appPassword,
+		tenantId
+	};
+}
+/** Read credential availability for diagnostics without redeeming unresolved SecretRefs. */
+function inspectMSTeamsCredentials(cfg, options) {
+	const allowEnvFallback = options?.allowEnvFallback ?? true;
+	const authType = resolveAuthType(cfg, { allowEnvFallback });
+	const appId = resolveMSTeamsAppId(cfg, allowEnvFallback);
+	const tenantId = resolveMSTeamsTenantId(cfg, allowEnvFallback);
+	if (!appId || !tenantId) return { status: "missing" };
+	if (authType === "federated") {
+		const credentials = resolveMSTeamsCredentials(cfg, { allowEnvFallback });
+		return credentials?.type === "federated" ? {
+			credentials,
+			status: "available"
+		} : { status: "missing" };
+	}
+	if ((0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(cfg?.appPassword)) return { status: "available" };
+	if ((0, openclaw_plugin_sdk_secret_input.hasConfiguredSecretInput)(cfg?.appPassword)) return { status: "configured_unavailable" };
+	return (allowEnvFallback ? (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(process.env.MSTEAMS_APP_PASSWORD) : void 0) ? { status: "available" } : { status: "missing" };
+}
+//#endregion
+Object.defineProperty(exports, "hasConfiguredMSTeamsCredentials", {
+	enumerable: true,
+	get: function() {
+		return hasConfiguredMSTeamsCredentials;
+	}
+});
+Object.defineProperty(exports, "inspectMSTeamsCredentials", {
+	enumerable: true,
+	get: function() {
+		return inspectMSTeamsCredentials;
+	}
+});
+Object.defineProperty(exports, "resolveMSTeamsCredentials", {
+	enumerable: true,
+	get: function() {
+		return resolveMSTeamsCredentials;
+	}
+});

package/dist/api.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_channel = require("./.setup/channel-Cifn9fsv.cjs");
-const require_channel_setup = require("./.setup/channel.setup-BjbHugkL.cjs");
+const require_channel = require("./.setup/channel-B7Gy3QUW.cjs");
+const require_channel_setup = require("./.setup/channel.setup-B5ClEcNI.cjs");
 exports.createMSTeamsSetupWizardBase = require_channel_setup.createMSTeamsSetupWizardBase;
 exports.msteamsPlugin = require_channel.msteamsPlugin;
 exports.msteamsSetupAdapter = require_channel_setup.msteamsSetupAdapter;

package/dist/channel-config-api.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_config_schema = require("./.setup/config-schema-Dk0mRIam.cjs");
+const require_config_schema = require("./.setup/config-schema-CkKdphSp.cjs");
 exports.MSTeamsChannelConfigSchema = require_config_schema.MSTeamsChannelConfigSchema;

package/dist/channel-plugin-api.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_channel = require("./.setup/channel-Cifn9fsv.cjs");
+const require_channel = require("./.setup/channel-B7Gy3QUW.cjs");
 exports.msteamsPlugin = require_channel.msteamsPlugin;

package/dist/directory-contract-api.cjs

@@ -1,36 +1,44 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_resolve_allowlist = require("./.setup/resolve-allowlist-DdDBVCzl.cjs");
-const require_token_config = require("./.setup/token-config-CqIh8z7Q.cjs");
+const require_resolve_allowlist = require("./.setup/resolve-allowlist-tYgAHx0t.cjs");
 let openclaw_plugin_sdk_directory_runtime = require("openclaw/plugin-sdk/directory-runtime");
 const msteamsDirectoryContractPlugin = {
 	id: "msteams",
 	directory: {
-		self: async ({ cfg }) => {
-			const creds = require_token_config.resolveMSTeamsCredentials(cfg.channels?.msteams);
+		self: async ({ cfg, accountId }) => {
+			const { credentials: creds } = require_resolve_allowlist.resolveMSTeamsRuntimeAccount({
+				cfg,
+				accountId
+			});
 			return creds ? {
 				kind: "user",
 				id: creds.appId,
 				name: creds.appId
 			} : null;
 		},
-		listPeers: async ({ cfg, query, limit }) => (0, openclaw_plugin_sdk_directory_runtime.listDirectoryEntriesFromSources)({
-			kind: "user",
-			sources: [cfg.channels?.msteams?.allowFrom ?? [], Object.keys(cfg.channels?.msteams?.dms ?? {})],
-			query,
-			limit,
-			normalizeId: (raw) => {
-				const normalized = require_resolve_allowlist.normalizeMSTeamsMessagingTarget(raw) ?? raw;
-				const lowered = normalized.toLowerCase();
-				return lowered.startsWith("user:") || lowered.startsWith("conversation:") ? normalized : `user:${normalized}`;
-			}
-		}),
-		listGroups: async ({ cfg, query, limit }) => (0, openclaw_plugin_sdk_directory_runtime.listDirectoryEntriesFromSources)({
-			kind: "group",
-			sources: [Object.values(cfg.channels?.msteams?.teams ?? {}).flatMap((team) => Object.keys(team.channels ?? {}))],
-			query,
-			limit,
-			normalizeId: (raw) => `conversation:${raw.replace(/^conversation:/i, "").trim()}`
-		})
+		listPeers: async ({ cfg, accountId, query, limit }) => {
+			const msteamsCfg = require_resolve_allowlist.resolveMSTeamsAccountConfig(cfg, accountId);
+			return (0, openclaw_plugin_sdk_directory_runtime.listDirectoryEntriesFromSources)({
+				kind: "user",
+				sources: [msteamsCfg.allowFrom ?? [], Object.keys(msteamsCfg.dms ?? {})],
+				query,
+				limit,
+				normalizeId: (raw) => {
+					const normalized = require_resolve_allowlist.normalizeMSTeamsMessagingTarget(raw) ?? raw;
+					const lowered = normalized.toLowerCase();
+					return lowered.startsWith("user:") || lowered.startsWith("conversation:") ? normalized : `user:${normalized}`;
+				}
+			});
+		},
+		listGroups: async ({ cfg, accountId, query, limit }) => {
+			const msteamsCfg = require_resolve_allowlist.resolveMSTeamsAccountConfig(cfg, accountId);
+			return (0, openclaw_plugin_sdk_directory_runtime.listDirectoryEntriesFromSources)({
+				kind: "group",
+				sources: [Object.values(msteamsCfg.teams ?? {}).flatMap((team) => Object.keys(team.channels ?? {}))],
+				query,
+				limit,
+				normalizeId: (raw) => `conversation:${raw.replace(/^conversation:/i, "").trim()}`
+			});
+		}
 	}
 };
 //#endregion

package/dist/doctor-contract-api.cjs

@@ -1,6 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_rolldown_runtime = require("./.setup/rolldown-runtime-BloeesfJ.cjs");
-const require_token_config = require("./.setup/token-config-CqIh8z7Q.cjs");
+const require_token_config = require("./.setup/token-config-bEpua_Q7.cjs");
+const require_delegated_state = require("./.setup/delegated-state-Bv5cWuec.cjs");
 const require_doctor_backup_resources = require("./doctor-backup-resources.cjs");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_error_runtime = require("openclaw/plugin-sdk/error-runtime");
@@ -264,11 +265,11 @@ const stateMigrations = [
 	{
 		id: "msteams-delegated-token-json-to-plugin-state",
 		label: "Microsoft Teams delegated OAuth token",
-		collectBackupResources: ({ stateDir }) => require_doctor_backup_resources.stateFileBackupResources(stateDir, require_token_config.MSTEAMS_DELEGATED_TOKEN_LEGACY_FILENAME),
+		collectBackupResources: ({ stateDir }) => require_doctor_backup_resources.stateFileBackupResources(stateDir, require_delegated_state.MSTEAMS_DELEGATED_TOKEN_LEGACY_FILENAME),
 		async detectLegacyState(params) {
-			const filePath = node_path.default.join(params.stateDir, require_token_config.MSTEAMS_DELEGATED_TOKEN_LEGACY_FILENAME);
+			const filePath = node_path.default.join(params.stateDir, require_delegated_state.MSTEAMS_DELEGATED_TOKEN_LEGACY_FILENAME);
 			try {
-				return (await node_fs_promises.default.stat(filePath)).isFile() ? { preview: [`- ${MSTEAMS_PLUGIN_ID} delegated OAuth token -> plugin state (${require_token_config.MSTEAMS_DELEGATED_TOKEN_NAMESPACE})`] } : null;
+				return (await node_fs_promises.default.stat(filePath)).isFile() ? { preview: [`- ${MSTEAMS_PLUGIN_ID} delegated OAuth token -> plugin state (${require_delegated_state.MSTEAMS_DELEGATED_TOKEN_NAMESPACE})`] } : null;
 			} catch {
 				return null;
 			}
@@ -276,10 +277,10 @@ const stateMigrations = [
 		async migrateLegacyState(params) {
 			const changes = [];
 			const warnings = [];
-			const filePath = node_path.default.join(params.stateDir, require_token_config.MSTEAMS_DELEGATED_TOKEN_LEGACY_FILENAME);
+			const filePath = node_path.default.join(params.stateDir, require_delegated_state.MSTEAMS_DELEGATED_TOKEN_LEGACY_FILENAME);
 			let token;
 			try {
-				token = require_token_config.normalizeMSTeamsDelegatedTokens(JSON.parse(await node_fs_promises.default.readFile(filePath, "utf8")));
+				token = require_delegated_state.normalizeMSTeamsDelegatedTokens(JSON.parse(await node_fs_promises.default.readFile(filePath, "utf8")));
 			} catch (error) {
 				if (error.code === "ENOENT") return {
 					changes,
@@ -299,11 +300,11 @@ const stateMigrations = [
 				};
 			}
 			const store = params.context.openPluginStateKeyedStore({
-				namespace: require_token_config.MSTEAMS_DELEGATED_TOKEN_NAMESPACE,
+				namespace: require_delegated_state.MSTEAMS_DELEGATED_TOKEN_NAMESPACE,
 				maxEntries: 1,
 				overflowPolicy: "reject-new"
 			});
-			const existing = await store.lookup(require_token_config.MSTEAMS_DELEGATED_TOKEN_KEY);
+			const existing = await store.lookup(require_delegated_state.MSTEAMS_DELEGATED_TOKEN_KEY);
 			if (existing && JSON.stringify(existing) !== JSON.stringify(token)) {
 				warnings.push(`Kept existing ${MSTEAMS_PLUGIN_ID} delegated OAuth token in plugin state; left differing legacy source in place`);
 				return {
@@ -312,7 +313,7 @@ const stateMigrations = [
 				};
 			}
 			if (!existing) try {
-				await store.registerIfAbsent(require_token_config.MSTEAMS_DELEGATED_TOKEN_KEY, token);
+				await store.registerIfAbsent(require_delegated_state.MSTEAMS_DELEGATED_TOKEN_KEY, token);
 			} catch (error) {
 				warnings.push(`Failed importing ${MSTEAMS_PLUGIN_ID} delegated OAuth token: ${String(error)}; left legacy source in place`);
 				return {
@@ -320,7 +321,7 @@ const stateMigrations = [
 					warnings
 				};
 			}
-			const persisted = require_token_config.normalizeMSTeamsDelegatedTokens(await store.lookup(require_token_config.MSTEAMS_DELEGATED_TOKEN_KEY));
+			const persisted = require_delegated_state.normalizeMSTeamsDelegatedTokens(await store.lookup(require_delegated_state.MSTEAMS_DELEGATED_TOKEN_KEY));
 			if (!persisted || JSON.stringify(persisted) !== JSON.stringify(token)) {
 				warnings.push(`Failed verifying ${MSTEAMS_PLUGIN_ID} delegated OAuth token in plugin state; left legacy source in place`);
 				return {

package/dist/qa-runner-api.cjs

@@ -2,7 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 let openclaw_plugin_sdk_qa_runner_runtime = require("openclaw/plugin-sdk/qa-runner-runtime");
 //#region extensions/msteams/src/qa/cli.ts
 const DEFAULT_MSTEAMS_QA_SCENARIOS = ["channel-canary"];
-const loadMSTeamsQaAdapterRuntime = (0, openclaw_plugin_sdk_qa_runner_runtime.createLazyCliRuntimeLoader)(() => Promise.resolve().then(() => require("./.setup/adapter.runtime-JoPydWqP.cjs")));
+const loadMSTeamsQaAdapterRuntime = (0, openclaw_plugin_sdk_qa_runner_runtime.createLazyCliRuntimeLoader)(() => Promise.resolve().then(() => require("./.setup/adapter.runtime-B-6Q3nMI.cjs")));
 //#endregion
 //#region extensions/msteams/qa-runner-api.ts
 const qaRunnerCliRegistrations = [(0, openclaw_plugin_sdk_qa_runner_runtime.createLiveTransportQaCliRegistration)({

package/dist/runtime-api.cjs

@@ -2,14 +2,14 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_runtime = require("./.setup/runtime-gZTAuFux.cjs");
 let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
 let openclaw_plugin_sdk_channel_pairing = require("openclaw/plugin-sdk/channel-pairing");
-let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
+let openclaw_plugin_sdk_account_helpers = require("openclaw/plugin-sdk/account-helpers");
 let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
+let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
 let openclaw_plugin_sdk_channel_status = require("openclaw/plugin-sdk/channel-status");
 let openclaw_plugin_sdk_channel_targets = require("openclaw/plugin-sdk/channel-targets");
 let openclaw_plugin_sdk_dangerous_name_runtime = require("openclaw/plugin-sdk/dangerous-name-runtime");
 let openclaw_plugin_sdk_runtime_group_policy = require("openclaw/plugin-sdk/runtime-group-policy");
 let openclaw_plugin_sdk_media_runtime = require("openclaw/plugin-sdk/media-runtime");
-let openclaw_plugin_sdk_account_helpers = require("openclaw/plugin-sdk/account-helpers");
 let openclaw_plugin_sdk_outbound_media = require("openclaw/plugin-sdk/outbound-media");
 let openclaw_plugin_sdk_reply_payload = require("openclaw/plugin-sdk/reply-payload");
 let openclaw_plugin_sdk_ssrf_runtime = require("openclaw/plugin-sdk/ssrf-runtime");

package/dist/secret-contract-api.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_secret_contract_api = require("./.setup/secret-contract-api-ipiUsANg.cjs");
+const require_secret_contract_api = require("./.setup/secret-contract-api-wAyY5UHv.cjs");
 exports.channelSecrets = require_secret_contract_api.channelSecrets;
 exports.collectRuntimeConfigAssignments = require_secret_contract_api.collectRuntimeConfigAssignments;
 exports.secretTargetRegistryEntries = require_secret_contract_api.secretTargetRegistryEntries;

package/dist/setup-entry.cjs

@@ -4,11 +4,11 @@ let node_url = require("node:url");
 var setup_entry_default = (0, openclaw_plugin_sdk_channel_entry_contract.defineBundledChannelSetupEntry)({
 	importMetaUrl: require("url").pathToFileURL(__filename).href,
 	plugin: {
-		specifier: (0, node_url.fileURLToPath)(new URL(".setup/setup-plugin-api-DfoVOqMJ.cjs", require("url").pathToFileURL(__filename).href).href),
+		specifier: (0, node_url.fileURLToPath)(new URL(".setup/setup-plugin-api-BACfeF7_.cjs", require("url").pathToFileURL(__filename).href).href),
 		exportName: "msteamsSetupPlugin"
 	},
 	secrets: {
-		specifier: (0, node_url.fileURLToPath)(new URL(".setup/secret-contract-api-ChQdBeU1.cjs", require("url").pathToFileURL(__filename).href).href),
+		specifier: (0, node_url.fileURLToPath)(new URL(".setup/secret-contract-api-YY3v6MP8.cjs", require("url").pathToFileURL(__filename).href).href),
 		exportName: "channelSecrets"
 	}
 });

package/dist/setup-plugin-api.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_channel_setup = require("./.setup/channel.setup-BjbHugkL.cjs");
+const require_channel_setup = require("./.setup/channel.setup-B5ClEcNI.cjs");
 exports.msteamsSetupPlugin = require_channel_setup.msteamsSetupPlugin;