@openclaw/msteams 2026.11.3 → 2026.11.5-beta.2

package/dist/.setup/{config-schema-CkKdphSp.cjs → config-schema-3lVZ45cB.cjs}

@@ -1,13 +1,13 @@
 const require_bot_framework_service_url = require("./bot-framework-service-url-B3FWn2SV.cjs");
-const require_token_config = require("./token-config-bEpua_Q7.cjs");
+const require_token_config = require("./token-config-DICiuJWr.cjs");
 let openclaw_plugin_sdk_channel_core = require("openclaw/plugin-sdk/channel-core");
 let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_secret_input = require("openclaw/plugin-sdk/secret-input");
 let openclaw_plugin_sdk_ssrf_policy = require("openclaw/plugin-sdk/ssrf-policy");
 let openclaw_plugin_sdk_channel_config_schema = require("openclaw/plugin-sdk/channel-config-schema");
-let zod = require("zod");
 let openclaw_plugin_sdk_webhook_targets = require("openclaw/plugin-sdk/webhook-targets");
-//#region extensions/msteams/src/config-schema-refinement.ts
+let zod = require("zod");
+//#region extensions/msteams/src/config-schema.ts
 function hasConfiguredValue(value) {
 	return typeof value === "string" ? value.trim().length > 0 : value !== void 0 && value !== null;
 }
@@ -44,125 +44,6 @@ function refineEffectiveAccount(account, path, isDefault, ctx) {
 	if (cloud === "China" && serviceUrl && !isAzureChinaBotFrameworkServiceUrl(serviceUrl)) issue("serviceUrl", `${field("cloud=China")} requires serviceUrl to use an Azure China Bot Framework channel host`);
 	if (cloud !== "China" && serviceUrl && isAzureChinaBotFrameworkServiceUrl(serviceUrl)) issue("cloud", `Azure China Bot Framework serviceUrl hosts require ${isDefault ? "the effective default Microsoft Teams account cloud=China" : "channels.msteams.accounts.*.cloud=China"}`);
 }
-function refineMSTeamsConfig(value, ctx) {
-	const webhookPaths = /* @__PURE__ */ new Map();
-	const appIds = /* @__PURE__ */ new Map();
-	const recordWebhookPath = (webhookPath, path) => {
-		const canonical = (0, openclaw_plugin_sdk_webhook_targets.canonicalizeWebhookRouteKey)(webhookPath);
-		const existing = webhookPaths.get(canonical);
-		if (existing) ctx.addIssue({
-			code: zod.z.ZodIssueCode.custom,
-			path,
-			message: `Microsoft Teams webhook path ${webhookPath} is already used by ${existing}`
-		});
-		else webhookPaths.set(canonical, path.join("."));
-	};
-	const recordAppId = (appId, path) => {
-		const normalized = appId?.trim().toLowerCase();
-		if (!normalized) return;
-		const existing = appIds.get(normalized);
-		if (existing) {
-			ctx.addIssue({
-				code: zod.z.ZodIssueCode.custom,
-				path,
-				message: `Microsoft Teams appId is already used by ${existing}`
-			});
-			return;
-		}
-		appIds.set(normalized, path.join("."));
-	};
-	const accountKeys = /* @__PURE__ */ new Map();
-	for (const accountId of Object.keys(value.accounts ?? {})) {
-		const canonicalAccountId = (0, openclaw_plugin_sdk_account_id.normalizeAccountId)(accountId);
-		const existing = accountKeys.get(canonicalAccountId);
-		if (existing) {
-			ctx.addIssue({
-				code: zod.z.ZodIssueCode.custom,
-				path: ["accounts", accountId],
-				message: `channels.msteams.accounts contains duplicate canonical account id "${canonicalAccountId}" from "${existing}" and "${accountId}"`
-			});
-			continue;
-		}
-		accountKeys.set(canonicalAccountId, accountId);
-	}
-	const rootDefaultIdentityFields = [value.appId, value.appPassword].some((field) => field !== void 0 && field !== null && field !== "");
-	const defaultAccountKey = accountKeys.get(openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID);
-	const accountsDefault = defaultAccountKey ? value.accounts?.[defaultAccountKey] : void 0;
-	const accountsDefaultPath = ["accounts", defaultAccountKey ?? openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID];
-	const accountsDefaultIdentityFields = [accountsDefault?.appId, accountsDefault?.appPassword].some((field) => field !== void 0 && field !== null && field !== "");
-	const effectiveDefault = {
-		...value,
-		...accountsDefault,
-		sso: {
-			...value.sso,
-			...accountsDefault?.sso
-		}
-	};
-	const hasEnvironmentDefaultCredentials = require_token_config.hasConfiguredMSTeamsCredentials(effectiveDefault);
-	if (rootDefaultIdentityFields && accountsDefaultIdentityFields) ctx.addIssue({
-		code: zod.z.ZodIssueCode.custom,
-		path: accountsDefaultPath,
-		message: "channels.msteams can define the default Teams identity either at the root or in accounts.default, not both"
-	});
-	const rootDefaultAccountEnabled = value.enabled !== false && accountsDefault?.enabled !== false;
-	const defaultAccountConfigured = rootDefaultIdentityFields || accountsDefaultIdentityFields || hasEnvironmentDefaultCredentials || accountKeys.size === 0;
-	const effectiveDefaultAppId = hasConfiguredValue(accountsDefault?.appId) ? accountsDefault?.appId : hasConfiguredValue(value.appId) ? value.appId : process.env.MSTEAMS_APP_ID;
-	if (rootDefaultAccountEnabled && defaultAccountConfigured) {
-		refineEffectiveAccount(effectiveDefault, accountsDefault ? accountsDefaultPath : [], true, ctx);
-		recordAppId(effectiveDefaultAppId, ["appId"]);
-		recordWebhookPath(require_bot_framework_service_url.resolveMSTeamsWebhookPath(value, openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID, accountsDefault), [
-			...accountsDefault ? accountsDefaultPath : [],
-			"webhook",
-			"path"
-		]);
-	}
-	for (const [accountId, account] of Object.entries(value.accounts ?? {})) {
-		if (!account) continue;
-		const canonicalAccountId = (0, openclaw_plugin_sdk_account_id.normalizeAccountId)(accountId);
-		const path = ["accounts", accountId];
-		if (canonicalAccountId === openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID) continue;
-		if (!(value.enabled !== false && account.enabled !== false)) continue;
-		refineEffectiveAccount({
-			dmPolicy: account.dmPolicy ?? value.dmPolicy,
-			allowFrom: account.allowFrom ?? value.allowFrom,
-			sso: {
-				...value.sso,
-				...account.sso
-			},
-			cloud: account.cloud ?? value.cloud,
-			serviceUrl: account.serviceUrl ?? value.serviceUrl
-		}, path, false, ctx);
-		if (!account.appId?.trim()) ctx.addIssue({
-			code: zod.z.ZodIssueCode.custom,
-			path: [...path, "appId"],
-			message: "channels.msteams.accounts.*.appId is required for named Microsoft Teams bot accounts"
-		});
-		if (!(account.tenantId ?? value.tenantId)?.trim()) ctx.addIssue({
-			code: zod.z.ZodIssueCode.custom,
-			path: [...path, "tenantId"],
-			message: "channels.msteams.accounts.*.tenantId or channels.msteams.tenantId is required for named Microsoft Teams bot accounts"
-		});
-		const effectiveAuthType = account.authType ?? value.authType ?? "secret";
-		if (effectiveAuthType === "secret" && !hasConfiguredValue(account.appPassword)) ctx.addIssue({
-			code: zod.z.ZodIssueCode.custom,
-			path: [...path, "appPassword"],
-			message: "channels.msteams.accounts.*.appPassword is required for named Microsoft Teams bot accounts using secret auth"
-		});
-		if (effectiveAuthType === "federated" && !(account.certificatePath ?? value.certificatePath)?.trim() && (account.useManagedIdentity ?? value.useManagedIdentity) !== true) ctx.addIssue({
-			code: zod.z.ZodIssueCode.custom,
-			path: [...path, "authType"],
-			message: "channels.msteams.accounts.* using federated auth must configure certificatePath or useManagedIdentity"
-		});
-		recordAppId(account.appId, [...path, "appId"]);
-		recordWebhookPath(require_bot_framework_service_url.resolveMSTeamsWebhookPath(value, canonicalAccountId, account), [
-			...path,
-			"webhook",
-			"path"
-		]);
-	}
-}
-//#endregion
-//#region extensions/msteams/src/config-ui-hints.ts
 const msTeamsChannelConfigUiHints = {
 	"": {
 		label: "MS Teams",
@@ -208,8 +89,6 @@ const msTeamsChannelConfigUiHints = {
 		}
 	})
 };
-//#endregion
-//#region extensions/msteams/src/config-schema.ts
 const SecretInputSchema = (0, openclaw_plugin_sdk_secret_input.buildSecretInputSchema)();
 const ToolPolicyBySenderSchema = zod.z.record(zod.z.string(), openclaw_plugin_sdk_channel_config_schema.ToolPolicySchema).optional();
 const MSTeamsChannelSchema = zod.z.object({
@@ -282,7 +161,123 @@ const MSTeamsConfigSchema = MSTeamsAccountConfigBaseSchema.extend({
 	...rootPolicyShape,
 	accounts: zod.z.record(zod.z.string(), MSTeamsAccountConfigBaseSchema.extend({ name: zod.z.string().optional() }).optional()).optional(),
 	defaultAccount: zod.z.string().optional()
-}).strict().superRefine(refineMSTeamsConfig);
+}).strict().superRefine((value, ctx) => {
+	const webhookPaths = /* @__PURE__ */ new Map();
+	const appIds = /* @__PURE__ */ new Map();
+	const recordWebhookPath = (webhookPath, path) => {
+		const canonical = (0, openclaw_plugin_sdk_webhook_targets.canonicalizeWebhookRouteKey)(webhookPath);
+		const existing = webhookPaths.get(canonical);
+		if (existing) ctx.addIssue({
+			code: zod.z.ZodIssueCode.custom,
+			path,
+			message: `Microsoft Teams webhook path ${webhookPath} is already used by ${existing}`
+		});
+		else webhookPaths.set(canonical, path.join("."));
+	};
+	const recordAppId = (appId, path) => {
+		const normalized = appId?.trim().toLowerCase();
+		if (!normalized) return;
+		const existing = appIds.get(normalized);
+		if (existing) {
+			ctx.addIssue({
+				code: zod.z.ZodIssueCode.custom,
+				path,
+				message: `Microsoft Teams appId is already used by ${existing}`
+			});
+			return;
+		}
+		appIds.set(normalized, path.join("."));
+	};
+	const accountKeys = /* @__PURE__ */ new Map();
+	for (const accountId of Object.keys(value.accounts ?? {})) {
+		const canonicalAccountId = (0, openclaw_plugin_sdk_account_id.normalizeAccountId)(accountId);
+		const existing = accountKeys.get(canonicalAccountId);
+		if (existing) {
+			ctx.addIssue({
+				code: zod.z.ZodIssueCode.custom,
+				path: ["accounts", accountId],
+				message: `channels.msteams.accounts contains duplicate canonical account id "${canonicalAccountId}" from "${existing}" and "${accountId}"`
+			});
+			continue;
+		}
+		accountKeys.set(canonicalAccountId, accountId);
+	}
+	const rootDefaultIdentityFields = [value.appId, value.appPassword].some((field) => field !== void 0 && field !== null && field !== "");
+	const defaultAccountKey = accountKeys.get(openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID);
+	const accountsDefault = defaultAccountKey ? value.accounts?.[defaultAccountKey] : void 0;
+	const accountsDefaultPath = ["accounts", defaultAccountKey ?? openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID];
+	const accountsDefaultIdentityFields = [accountsDefault?.appId, accountsDefault?.appPassword].some((field) => field !== void 0 && field !== null && field !== "");
+	const effectiveDefault = {
+		...value,
+		...accountsDefault,
+		sso: {
+			...value.sso,
+			...accountsDefault?.sso
+		}
+	};
+	const hasEnvironmentDefaultCredentials = require_token_config.hasConfiguredMSTeamsCredentials(effectiveDefault);
+	if (rootDefaultIdentityFields && accountsDefaultIdentityFields) ctx.addIssue({
+		code: zod.z.ZodIssueCode.custom,
+		path: accountsDefaultPath,
+		message: "channels.msteams can define the default Teams identity either at the root or in accounts.default, not both"
+	});
+	const rootDefaultAccountEnabled = value.enabled !== false && accountsDefault?.enabled !== false;
+	const defaultAccountConfigured = rootDefaultIdentityFields || accountsDefaultIdentityFields || hasEnvironmentDefaultCredentials || accountKeys.size === 0;
+	const effectiveDefaultAppId = hasConfiguredValue(accountsDefault?.appId) ? accountsDefault?.appId : hasConfiguredValue(value.appId) ? value.appId : process.env.MSTEAMS_APP_ID;
+	if (rootDefaultAccountEnabled && defaultAccountConfigured) {
+		refineEffectiveAccount(effectiveDefault, accountsDefault ? accountsDefaultPath : [], true, ctx);
+		recordAppId(effectiveDefaultAppId, ["appId"]);
+		recordWebhookPath(require_bot_framework_service_url.resolveMSTeamsWebhookPath(value, openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID, accountsDefault), [
+			...accountsDefault ? accountsDefaultPath : [],
+			"webhook",
+			"path"
+		]);
+	}
+	for (const [accountId, account] of Object.entries(value.accounts ?? {})) {
+		if (!account) continue;
+		const canonicalAccountId = (0, openclaw_plugin_sdk_account_id.normalizeAccountId)(accountId);
+		const path = ["accounts", accountId];
+		if (canonicalAccountId === openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID) continue;
+		if (!(value.enabled !== false && account.enabled !== false)) continue;
+		refineEffectiveAccount({
+			dmPolicy: account.dmPolicy ?? value.dmPolicy,
+			allowFrom: account.allowFrom ?? value.allowFrom,
+			sso: {
+				...value.sso,
+				...account.sso
+			},
+			cloud: account.cloud ?? value.cloud,
+			serviceUrl: account.serviceUrl ?? value.serviceUrl
+		}, path, false, ctx);
+		if (!account.appId?.trim()) ctx.addIssue({
+			code: zod.z.ZodIssueCode.custom,
+			path: [...path, "appId"],
+			message: "channels.msteams.accounts.*.appId is required for named Microsoft Teams bot accounts"
+		});
+		if (!(account.tenantId ?? value.tenantId)?.trim()) ctx.addIssue({
+			code: zod.z.ZodIssueCode.custom,
+			path: [...path, "tenantId"],
+			message: "channels.msteams.accounts.*.tenantId or channels.msteams.tenantId is required for named Microsoft Teams bot accounts"
+		});
+		const effectiveAuthType = account.authType ?? value.authType ?? "secret";
+		if (effectiveAuthType === "secret" && !hasConfiguredValue(account.appPassword)) ctx.addIssue({
+			code: zod.z.ZodIssueCode.custom,
+			path: [...path, "appPassword"],
+			message: "channels.msteams.accounts.*.appPassword is required for named Microsoft Teams bot accounts using secret auth"
+		});
+		if (effectiveAuthType === "federated" && !(account.certificatePath ?? value.certificatePath)?.trim() && (account.useManagedIdentity ?? value.useManagedIdentity) !== true) ctx.addIssue({
+			code: zod.z.ZodIssueCode.custom,
+			path: [...path, "authType"],
+			message: "channels.msteams.accounts.* using federated auth must configure certificatePath or useManagedIdentity"
+		});
+		recordAppId(account.appId, [...path, "appId"]);
+		recordWebhookPath(require_bot_framework_service_url.resolveMSTeamsWebhookPath(value, canonicalAccountId, account), [
+			...path,
+			"webhook",
+			"path"
+		]);
+	}
+});
 const MSTeamsChannelConfigSchema = (0, openclaw_plugin_sdk_channel_config_schema.buildChannelConfigSchema)(MSTeamsConfigSchema, { uiHints: msTeamsChannelConfigUiHints });
 //#endregion
 Object.defineProperty(exports, "MSTeamsChannelConfigSchema", {