@openclaw/msteams 2026.11.3 → 2026.11.5-beta.2

package/dist/.setup/{monitor-cuifGELM.cjs → monitor-b0zPpnmW.cjs}

@@ -1,157 +1,49 @@
-const require_rolldown_runtime = require("./rolldown-runtime-BloeesfJ.cjs");
 const require_bot_framework_service_url = require("./bot-framework-service-url-B3FWn2SV.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-gI34MnpE.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-7mIEepXB.cjs");
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 require("../runtime-api.cjs");
-const require_delegated_state = require("./delegated-state-Bv5cWuec.cjs");
-const require_channel = require("./channel-Ci6K9Njb.cjs");
-const require_thread_session = require("./thread-session-BWVCoYza.cjs");
-const require_channel_setup = require("./channel.setup-BN3uhq3r.cjs");
-const require_approval_card = require("./approval-card-DWPDItvq.cjs");
-const require_conversation_store_state = require("./conversation-store-state-B-4g4uq5.cjs");
-const require_reaction_types = require("./reaction-types-CwP5RVQB.cjs");
+const require_delegated_state = require("./delegated-state-ilYzKwD8.cjs");
+const require_channel = require("./channel-BaTw0JW3.cjs");
+const require_presentation = require("./presentation-Duoi9Ijn.cjs");
+const require_thread_session = require("./thread-session-CeWYiol_.cjs");
+const require_channel_setup = require("./channel.setup-B9yKGEse.cjs");
+const require_approval_card = require("./approval-card-BHAKsdAM.cjs");
+const require_conversation_store_state = require("./conversation-store-state-CVhMM0QY.cjs");
+const require_reaction_types = require("./reaction-types-C6F6g2nk.cjs");
 let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
+let openclaw_plugin_sdk_interactive_runtime = require("openclaw/plugin-sdk/interactive-runtime");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
 let openclaw_plugin_sdk_provider_http = require("openclaw/plugin-sdk/provider-http");
 let openclaw_plugin_sdk_media_runtime = require("openclaw/plugin-sdk/media-runtime");
 let openclaw_plugin_sdk_ssrf_runtime = require("openclaw/plugin-sdk/ssrf-runtime");
-let node_dns_promises = require("node:dns/promises");
 let openclaw_plugin_sdk_ssrf_policy = require("openclaw/plugin-sdk/ssrf-policy");
 let openclaw_plugin_sdk_number_runtime = require("openclaw/plugin-sdk/number-runtime");
 let openclaw_plugin_sdk_text_utility_runtime = require("openclaw/plugin-sdk/text-utility-runtime");
 let openclaw_plugin_sdk_error_runtime = require("openclaw/plugin-sdk/error-runtime");
-let node_crypto = require("node:crypto");
-node_crypto = require_rolldown_runtime.__toESM(node_crypto, 1);
+let openclaw_plugin_sdk_node_crypto_runtime = require("openclaw/plugin-sdk/node-crypto-runtime");
 let openclaw_plugin_sdk_webhook_targets = require("openclaw/plugin-sdk/webhook-targets");
-let openclaw_plugin_sdk_routing = require("openclaw/plugin-sdk/routing");
 let openclaw_plugin_sdk_channel_inbound = require("openclaw/plugin-sdk/channel-inbound");
+let node_dns_promises = require("node:dns/promises");
+let openclaw_plugin_sdk_gateway_runtime = require("openclaw/plugin-sdk/gateway-runtime");
 let openclaw_plugin_sdk_security_runtime = require("openclaw/plugin-sdk/security-runtime");
 let openclaw_plugin_sdk_approval_gateway_runtime = require("openclaw/plugin-sdk/approval-gateway-runtime");
 let openclaw_plugin_sdk_channel_ingress_runtime = require("openclaw/plugin-sdk/channel-ingress-runtime");
 let openclaw_plugin_sdk_context_visibility_runtime = require("openclaw/plugin-sdk/context-visibility-runtime");
 let openclaw_plugin_sdk_reply_history = require("openclaw/plugin-sdk/reply-history");
 let openclaw_plugin_sdk_runtime_config_snapshot = require("openclaw/plugin-sdk/runtime-config-snapshot");
-let node_util = require("node:util");
-let openclaw_plugin_sdk_request_url = require("openclaw/plugin-sdk/request-url");
 let openclaw_plugin_sdk_agent_runtime = require("openclaw/plugin-sdk/agent-runtime");
 let openclaw_plugin_sdk_extension_shared = require("openclaw/plugin-sdk/extension-shared");
 let openclaw_plugin_sdk_plugin_runtime = require("openclaw/plugin-sdk/plugin-runtime");
 let openclaw_plugin_sdk_collection_runtime = require("openclaw/plugin-sdk/collection-runtime");
-let openclaw_plugin_sdk_gateway_runtime = require("openclaw/plugin-sdk/gateway-runtime");
+let openclaw_plugin_sdk_request_url = require("openclaw/plugin-sdk/request-url");
 let openclaw_plugin_sdk_time_runtime = require("openclaw/plugin-sdk/time-runtime");
 let openclaw_plugin_sdk_channel_pairing = require("openclaw/plugin-sdk/channel-pairing");
 let openclaw_plugin_sdk_runtime_group_policy = require("openclaw/plugin-sdk/runtime-group-policy");
 let openclaw_plugin_sdk_dangerous_name_runtime = require("openclaw/plugin-sdk/dangerous-name-runtime");
 let openclaw_plugin_sdk_account_helpers = require("openclaw/plugin-sdk/account-helpers");
 let openclaw_plugin_sdk_webhook_ingress = require("openclaw/plugin-sdk/webhook-ingress");
-//#region extensions/msteams/src/feedback-reflection-store.ts
-const LEARNINGS_NAMESPACE = "feedback-learnings";
-const MAX_LEARNING_ENTRIES = 1e4;
-function learningStoreKey(storePath, sessionKey) {
-	return node_crypto.default.createHash("sha256").update(`${storePath}\0${sessionKey}`, "utf8").digest("hex");
-}
-async function storeSessionLearning(params) {
-	const store = require_runtime.getMSTeamsRuntime().state.openKeyedStore({
-		namespace: LEARNINGS_NAMESPACE,
-		maxEntries: MAX_LEARNING_ENTRIES
-	});
-	const key = learningStoreKey(params.storePath, params.sessionKey);
-	if (!store.observe || !store.compareAndApply) throw new Error("plugin state atomic comparison is unavailable");
-	const prepared = {
-		sessionKey: params.sessionKey,
-		learning: params.learning,
-		updatedAt: Date.now()
-	};
-	let observed = await store.observe(key);
-	while (true) {
-		const result = await store.compareAndApply(key, observed.comparison, {
-			operation: "update",
-			action: "set",
-			value: {
-				sessionKey: prepared.sessionKey,
-				learnings: [...observed.value?.learnings ?? [], prepared.learning].slice(-10),
-				updatedAt: prepared.updatedAt
-			}
-		});
-		if (result.status !== "conflict") return;
-		observed = result.current;
-	}
-}
-//#endregion
-//#region extensions/msteams/src/feedback-reflection.ts
-/**
-* Run a background reflection after negative feedback.
-* This is designed to be called fire-and-forget (don't await in the invoke handler).
-*/
-async function runFeedbackReflection(params) {
-	const { cfg, log, sessionKey } = params;
-	const msteamsCfg = require_resolve_allowlist.resolveMSTeamsAccountConfig(cfg, params.accountId);
-	const cooldownMs = msteamsCfg.feedbackReflectionCooldownMs ?? openclaw_plugin_sdk_channel_inbound.DEFAULT_CHANNEL_FEEDBACK_REFLECTION_COOLDOWN_MS;
-	let reflection;
-	try {
-		reflection = await (0, openclaw_plugin_sdk_channel_inbound.runChannelFeedbackReflection)({
-			cfg,
-			channel: "msteams",
-			channelLabel: "Teams",
-			agentId: params.agentId,
-			sessionKey,
-			conversationId: params.conversationId,
-			conversationKind: params.conversationKind,
-			userComment: params.userComment,
-			cooldownMs,
-			onRecordError: (err) => log.debug?.("reflection session record failed", { error: require_channel_setup.formatUnknownError(err) }),
-			onDispatchError: (err) => log.debug?.("reflection reply error", { error: require_channel_setup.formatUnknownError(err) })
-		});
-	} catch (err) {
-		log.error("reflection dispatch failed", { error: require_channel_setup.formatUnknownError(err) });
-		return;
-	}
-	if (reflection.status === "cooldown") {
-		log.debug?.("skipping reflection (cooldown active)", { sessionKey });
-		return;
-	}
-	if (reflection.status === "empty") {
-		log.debug?.("reflection produced no output");
-		return;
-	}
-	log.info("reflection complete", {
-		sessionKey,
-		responseLength: reflection.responseLength,
-		followUp: reflection.followUp
-	});
-	try {
-		await storeSessionLearning({
-			storePath: reflection.storePath,
-			sessionKey,
-			learning: reflection.learning
-		});
-	} catch (err) {
-		log.debug?.("failed to store reflection learning", { error: require_channel_setup.formatUnknownError(err) });
-	}
-	const conversationType = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(params.conversationRef.conversation?.conversationType);
-	if (!(conversationType === "personal" && reflection.followUp && Boolean(reflection.userMessage))) {
-		if (reflection.followUp && conversationType !== "personal") log.debug?.("skipping reflection follow-up outside direct message", {
-			sessionKey,
-			conversationType
-		});
-		return;
-	}
-	try {
-		await require_conversation_store_state.sendMSTeamsActivityWithReference(params.app, require_conversation_store_state.buildConversationReference(params.conversationRef), {
-			type: "message",
-			text: reflection.userMessage
-		}, {
-			accountId: params.accountId,
-			serviceUrlBoundary: require_resolve_allowlist.resolveMSTeamsSdkCloudOptions(msteamsCfg)
-		});
-		log.info("sent reflection follow-up", { sessionKey });
-	} catch (err) {
-		log.debug?.("failed to send reflection follow-up", { error: require_channel_setup.formatUnknownError(err) });
-	}
-}
-//#endregion
 //#region extensions/msteams/src/adaptive-card-submit.ts
 function extractAdaptiveCardSubmittedData(value) {
 	if (!(0, openclaw_plugin_sdk_string_coerce_runtime.isRecord)(value)) return value;
@@ -337,7 +229,7 @@ async function resolveMSTeamsSenderAccess(params) {
 	const defaultGroupPolicy = (0, openclaw_plugin_sdk_runtime_group_policy.resolveDefaultGroupPolicy)(params.cfg);
 	const groupPolicy = !isDirectMessage && msteamsCfg ? msteamsCfg.groupPolicy ?? defaultGroupPolicy ?? "allowlist" : "disabled";
 	const allowNameMatching = (0, openclaw_plugin_sdk_dangerous_name_runtime.isDangerousNameMatchingEnabled)(msteamsCfg);
-	const channelGate = require_channel.resolveMSTeamsRouteConfig({
+	const channelGate = require_presentation.resolveMSTeamsRouteConfig({
 		cfg: msteamsCfg,
 		teamId: activity.channelData?.team?.id,
 		teamName: activity.channelData?.team?.name,
@@ -538,7 +430,6 @@ async function admitMSTeamsMessage(params) {
 		allowTextCommands,
 		isControlCommand,
 		commandAuthorized: commandAccess.requested ? commandAccess.authorized : void 0,
-		effectiveDmAllowFrom,
 		effectiveGroupAllowFrom,
 		isChannel: params.isChannel
 	};
@@ -556,1904 +447,1543 @@ function resolveBotThreadMentionPolicy(params) {
 	};
 }
 //#endregion
-//#region extensions/msteams/src/monitor-handler/config.ts
-const allowlistInputs = (config) => [
-	config.allowFrom,
-	config.groupAllowFrom,
-	config.teams,
-	config.dangerouslyAllowNameMatching
-];
-function createMSTeamsHandlerConfigReader(deps) {
-	const source = deps.accountPolicyCfg ?? deps.cfg;
-	const read = (0, openclaw_plugin_sdk_runtime_config_snapshot.createRuntimeConfigReader)(source);
-	const originallyConfigured = require_resolve_allowlist.listMSTeamsAccountIds(source).includes(deps.accountId);
-	const startupInputs = deps.accountPolicyCfg && allowlistInputs(require_resolve_allowlist.resolveMSTeamsAccountConfig(source, deps.accountId));
-	const startup = deps.cfg.channels?.msteams;
-	const startupAllowlists = {
-		allowFrom: startup?.allowFrom,
-		groupAllowFrom: startup?.groupAllowFrom,
-		teams: startup?.teams
-	};
-	let lastSource;
-	let lastProjection = deps.cfg;
-	return () => {
-		const current = read();
-		if (current === lastSource) return lastProjection;
-		lastSource = current;
-		if (current === source && deps.accountPolicyCfg) return lastProjection = deps.cfg;
-		const retired = originallyConfigured && !require_resolve_allowlist.listMSTeamsAccountIds(current).includes(deps.accountId);
-		const accountConfig = require_resolve_allowlist.resolveMSTeamsAccountConfig(current, deps.accountId);
-		const keepStartup = current.channels?.msteams !== void 0 && (0, node_util.isDeepStrictEqual)(allowlistInputs(accountConfig), startupInputs);
-		if (deps.accountId === "default" && !current.channels?.msteams?.accounts && !retired && !keepStartup) return lastProjection = current;
-		return lastProjection = require_resolve_allowlist.withAccountScopedMSTeamsConfig({
-			cfg: current,
-			accountId: deps.accountId,
-			accountConfig: {
-				...accountConfig,
-				...keepStartup ? startupAllowlists : {},
-				...current.channels?.msteams?.enabled === false || retired ? { enabled: false } : {}
-			}
-		});
-	};
-}
-//#endregion
-//#region extensions/msteams/src/attachments/bot-framework.ts
-const BOT_FRAMEWORK_SCOPE = "https://api.botframework.com";
-/**
-* Detect Bot Framework personal chat ("a:") and MSA orgid ("8:orgid:") conversation
-* IDs. These identifiers are not recognized by Graph's `/chats/{id}` endpoint, so we
-* must fetch media via the Bot Framework v3 attachments endpoint instead.
-*
-* Graph-compatible IDs start with `19:` and are left untouched by this detector.
-*/
-function isBotFrameworkPersonalChatId(conversationId) {
-	if (typeof conversationId !== "string") return false;
-	const trimmed = conversationId.trim();
-	return trimmed.startsWith("a:") || trimmed.startsWith("8:orgid:");
-}
-async function fetchBotFrameworkAttachment(params, kind) {
-	let response;
-	try {
-		const headers = require_resolve_allowlist.ensureUserAgentHeader();
-		require_resolve_allowlist.applyAuthorizationHeaderForUrl({
-			headers,
-			url: params.url,
-			authAllowHosts: params.policy.authAllowHosts,
-			bearerToken: params.accessToken
-		});
-		response = await require_resolve_allowlist.safeFetchWithPolicy({
-			url: params.url,
-			policy: params.policy,
-			resolveFn: node_dns_promises.lookup,
-			requestInit: { headers },
-			timeoutMs: require_resolve_allowlist.resolveMSTeamsRequestTimeoutMs(params.deadline)
-		});
-	} catch (err) {
-		params.logger?.warn?.(`msteams botFramework ${kind} fetch failed`, { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
-		return;
-	}
-	if (!response.ok) {
-		await response.body?.cancel().catch(() => void 0);
-		params.logger?.warn?.(`msteams botFramework ${kind} non-ok`, { status: response.status });
-		return;
-	}
-	return response;
-}
-async function fetchBotFrameworkAttachmentInfo(params) {
-	const response = await fetchBotFrameworkAttachment(params, "attachmentInfo");
-	if (!response) return;
-	try {
-		return await (0, openclaw_plugin_sdk_provider_http.readProviderJsonResponse)(response, "msteams botFramework attachmentInfo");
-	} catch (err) {
-		params.logger?.warn?.("msteams botFramework attachmentInfo parse failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
-		return;
+//#region extensions/msteams/src/informative-status.ts
+const INFORMATIVE_MAX_CHARS = 1e3;
+const INFORMATIVE_MAX_BYTES = 1024;
+const ELLIPSIS = "…";
+const segmenter = new Intl.Segmenter(void 0, { granularity: "grapheme" });
+const utf8 = new TextEncoder();
+function flattenInformativeStatus(text) {
+	const joined = text.split("\n").map((line) => line.trim().replace(/^[•-]\s+/u, "")).filter(Boolean).join(" · ");
+	if (joined.length <= INFORMATIVE_MAX_CHARS && utf8.encode(joined).length <= INFORMATIVE_MAX_BYTES) return joined;
+	const graphemes = Array.from(segmenter.segment(joined), (s) => s.segment);
+	let chars = 1;
+	let bytes = utf8.encode(ELLIPSIS).length;
+	let start = graphemes.length;
+	while (start > 0) {
+		const next = graphemes[start - 1];
+		const nextBytes = utf8.encode(next).length;
+		if (chars + next.length > INFORMATIVE_MAX_CHARS || bytes + nextBytes > INFORMATIVE_MAX_BYTES) break;
+		chars += next.length;
+		bytes += nextBytes;
+		start -= 1;
 	}
+	return ELLIPSIS + graphemes.slice(start).join("");
 }
-async function saveBotFrameworkAttachmentView(params) {
-	const response = await fetchBotFrameworkAttachment(params, "attachmentView");
-	if (!response) return;
-	try {
-		return await require_runtime.getMSTeamsRuntime().channel.media.saveResponseMedia(response, {
-			sourceUrl: params.url,
-			filePathHint: params.fileNameHint,
-			maxBytes: params.maxBytes,
-			fallbackContentType: params.contentTypeHint,
-			subdir: "inbound"
-		});
-	} catch (err) {
-		params.logger?.warn?.("msteams botFramework attachmentView save failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
-		return;
-	} finally {
-		await response.body?.cancel().catch(() => void 0);
-	}
+//#endregion
+//#region extensions/msteams/src/reply-stream-controller.ts
+function hasUnstreamedContent(payload) {
+	return Boolean(payload.presentation || payload.mediaUrl || payload.mediaUrls?.length);
 }
-async function downloadMSTeamsBotFrameworkAttachment(params) {
-	if (!params.serviceUrl || !params.attachmentId || !params.tokenProvider) return;
-	const tokenProvider = params.tokenProvider;
-	const policy = require_resolve_allowlist.resolveAttachmentFetchPolicy({
-		allowHosts: params.allowHosts,
-		authAllowHosts: params.authAllowHosts
+/** Bridge reply callbacks to the SDK stream; shared conversations use block delivery. */
+function createTeamsReplyStreamController(params) {
+	const isPersonal = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(params.conversationType) === "personal";
+	const streamMode = (0, openclaw_plugin_sdk_channel_outbound.resolveChannelPreviewStreamMode)(params.msteamsConfig, "partial");
+	const stream = params.allowProviderPreview && isPersonal && (streamMode === "partial" || streamMode === "progress") ? params.context.stream : void 0;
+	let tokensEmitted = false;
+	let nativeDispatchStarted = false;
+	let nativeDeliveryClaimed = false;
+	let streamFinalizationPending = false;
+	let pendingFinalPayload;
+	let emittedText = "";
+	let acknowledgedText = "";
+	let acknowledgedLogicalText = "";
+	let acknowledgedStreamId;
+	let replacementFinalPending = false;
+	let replacementSettlementPending = false;
+	let replacementTextAwaitingAcknowledgement;
+	let deferredReplacementEntries = [];
+	let queuedFinalActivity;
+	const streamEvents = stream?.events;
+	let streamChunkSubscription;
+	if (typeof streamEvents?.on === "function" && typeof streamEvents.off === "function") streamChunkSubscription = streamEvents.on("chunk", (activity) => {
+		const replacementAcknowledgementPending = replacementTextAwaitingAcknowledgement !== void 0;
+		const replacementAcknowledgement = typeof activity.text === "string" && replacementAcknowledgementPending && activity.text === replacementTextAwaitingAcknowledgement?.text;
+		if (activity.type !== "typing" || activity.channelData?.streamType !== "streaming" || !activity.id || !activity.text || acknowledgedStreamId !== void 0 && activity.id !== acknowledgedStreamId || (replacementAcknowledgementPending ? !replacementAcknowledgement : !activity.text.startsWith(acknowledgedText)) || !replacementAcknowledgement && !emittedText.startsWith(activity.text)) return;
+		acknowledgedStreamId = activity.id;
+		acknowledgedText = activity.text;
+		acknowledgedLogicalText = replacementAcknowledgement ? replacementTextAwaitingAcknowledgement.logicalText : activity.text;
+		if (replacementAcknowledgement) replacementTextAwaitingAcknowledgement = void 0;
 	});
-	const baseUrl = `${params.serviceUrl.replace(/\/+$/, "")}/v3/attachments/${encodeURIComponent(params.attachmentId)}`;
-	if (!(0, openclaw_plugin_sdk_ssrf_policy.isHttpsUrlAllowedByHostnameSuffixAllowlist)(baseUrl, policy.allowHosts)) return;
-	let accessToken;
-	try {
-		accessToken = await require_resolve_allowlist.withMSTeamsRequestDeadline({
-			deadline: params.deadline,
-			label: "MS Teams Bot Framework token",
-			work: () => tokenProvider.getAccessToken(BOT_FRAMEWORK_SCOPE)
-		});
-	} catch (err) {
-		params.logger?.warn?.("msteams botFramework token acquisition failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
-		return;
-	}
-	if (!accessToken) return;
-	const request = {
-		url: baseUrl,
-		accessToken,
-		policy,
-		logger: params.logger,
-		deadline: params.deadline
+	const wasCanceled = () => Boolean(stream?.canceled);
+	const releaseStreamChunkSubscription = () => {
+		if (streamChunkSubscription === void 0) return;
+		streamEvents?.off(streamChunkSubscription);
+		streamChunkSubscription = void 0;
 	};
-	const info = await fetchBotFrameworkAttachmentInfo(request);
-	if (!info) return;
-	const views = Array.isArray(info.views) ? info.views : [];
-	const candidateView = views.find((view) => view?.viewId === "original") ?? views.find((view) => typeof view?.viewId === "string");
-	const viewId = typeof candidateView?.viewId === "string" && candidateView.viewId ? candidateView.viewId : void 0;
-	if (!viewId) return;
-	if (typeof candidateView?.size === "number" && candidateView.size > 0 && candidateView.size > params.maxBytes) return;
-	const fileNameHint = typeof info.name === "string" && info.name || void 0;
-	const contentTypeHint = typeof info.type === "string" && info.type || void 0;
-	const saved = await saveBotFrameworkAttachmentView({
-		...request,
-		url: `${baseUrl}/views/${encodeURIComponent(viewId)}`,
-		maxBytes: params.maxBytes,
-		fileNameHint,
-		contentTypeHint
-	});
-	if (!saved) return;
-	return {
-		path: saved.path,
-		contentType: saved.contentType,
-		kind: require_resolve_allowlist.resolveMSTeamsMediaKind({
-			contentType: saved.contentType,
-			fileName: fileNameHint
-		})
+	const acknowledgedNativeDelivery = () => {
+		if (!acknowledgedStreamId || !acknowledgedText) return { visibleReplySent: false };
+		return {
+			visibleReplySent: true,
+			content: acknowledgedText,
+			messageId: acknowledgedStreamId
+		};
 	};
-}
-/**
-* Download media for every attachment referenced by a Bot Framework personal
-* chat activity. Returns all successfully fetched media along with diagnostics
-* compatible with `downloadMSTeamsGraphMedia`'s result shape so callers can
-* reuse the existing logging path.
-*/
-async function downloadMSTeamsBotFrameworkAttachments(params) {
-	const unique = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeUniqueTrimmedStringList)(params.attachmentIds);
-	if (unique.length === 0 || !params.serviceUrl || !params.tokenProvider) return {
-		media: [],
-		attachmentCount: unique.length
+	const fallbackPayloadAfterAcknowledgedText = (payload) => {
+		if (!acknowledgedLogicalText || typeof payload.text !== "string" || !payload.text.startsWith(acknowledgedLogicalText)) return payload;
+		const remainingText = payload.text.slice(acknowledgedLogicalText.length);
+		if (!remainingText && !hasUnstreamedContent(payload)) return;
+		return {
+			...payload,
+			text: remainingText || void 0
+		};
 	};
-	const media = [];
-	for (const attachmentId of unique) try {
-		const item = await downloadMSTeamsBotFrameworkAttachment({
-			...params,
-			attachmentId
-		});
-		if (item) media.push({
-			...item,
-			sourceId: attachmentId
-		});
-		else media.push({
-			kind: "document",
-			sourceId: attachmentId
-		});
-	} catch (err) {
-		media.push({
-			kind: "document",
-			sourceId: attachmentId
-		});
-		params.logger?.warn?.("msteams botFramework attachment download failed", {
-			error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err),
-			attachmentId
-		});
-	}
-	return {
-		media,
-		attachmentCount: unique.length
+	const fallbackPayloadForSuppressedFinal = (payload) => {
+		return Boolean(payload.mediaUrl || payload.mediaUrls?.length) ? {
+			...payload,
+			mediaUrl: void 0,
+			mediaUrls: void 0
+		} : payload;
 	};
-}
-//#endregion
-//#region extensions/msteams/src/attachments/html.ts
-/**
-* Extract every `<attachment id="...">` reference from the HTML attachments in
-* the inbound activity. Returns the complete (non-sliced) list; callers that
-* need a capped diagnostic summary can truncate after calling this helper.
-*/
-function extractMSTeamsHtmlAttachmentIds(attachments) {
-	const list = Array.isArray(attachments) ? attachments : [];
-	if (list.length === 0) return [];
-	const ids = /* @__PURE__ */ new Set();
-	for (const att of list) {
-		const html = require_resolve_allowlist.extractHtmlFromAttachment(att);
-		if (!html) continue;
-		for (const value of require_resolve_allowlist.htmlTagAttributeValues(html, "attachment", "id")) {
-			const id = value.trim();
-			if (id) ids.add(id);
-		}
-	}
-	return Array.from(ids);
-}
-function summarizeMSTeamsHtmlAttachments(attachments) {
-	const list = Array.isArray(attachments) ? attachments : [];
-	if (list.length === 0) return;
-	let htmlAttachments = 0;
-	let imgTags = 0;
-	let dataImages = 0;
-	let cidImages = 0;
-	const srcHosts = /* @__PURE__ */ new Set();
-	let attachmentTags = 0;
-	const attachmentIds = /* @__PURE__ */ new Set();
-	for (const att of list) {
-		const html = require_resolve_allowlist.extractHtmlFromAttachment(att);
-		if (!html) continue;
-		htmlAttachments += 1;
-		for (const value of require_resolve_allowlist.htmlTagAttributeValues(html, "img", "src")) {
-			imgTags += 1;
-			const src = value.trim();
-			if (src) {
-				if (src.startsWith("data:")) dataImages += 1;
-				else if (src.startsWith("cid:")) cidImages += 1;
-				else srcHosts.add(require_resolve_allowlist.safeHostForUrl(src));
-			}
-		}
-		for (const value of require_resolve_allowlist.htmlTagAttributeValues(html, "attachment", "id")) {
-			attachmentTags += 1;
-			const id = value.trim();
-			if (id) attachmentIds.add(id);
-		}
-	}
-	if (htmlAttachments === 0) return;
-	return {
-		htmlAttachments,
-		imgTags,
-		dataImages,
-		cidImages,
-		srcHosts: Array.from(srcHosts).slice(0, 5),
-		attachmentTags,
-		attachmentIds: Array.from(attachmentIds).slice(0, 5)
+	const finalStreamActivity = (text) => ({
+		...require_conversation_store_state.buildMSTeamsMessageActivity(text === void 0 ? void 0 : require_conversation_store_state.formatMSTeamsMarkdown(text, params.tableMode ?? "code")),
+		channelData: params.feedbackLoopEnabled ? { feedbackLoopEnabled: true } : {}
+	});
+	const queueFinalReplacement = (activeStream, text) => {
+		const activity = finalStreamActivity(text);
+		replacementTextAwaitingAcknowledgement = {
+			text: activity.text,
+			logicalText: text
+		};
+		activeStream.emit(activity);
+		queuedFinalActivity = activity;
+		emittedText = text;
 	};
-}
-function resolveUnrepresentedHtmlAttachmentIds(attachments) {
-	const representedIds = /* @__PURE__ */ new Set();
-	for (const attachment of attachments) {
-		if ((require_resolve_allowlist.normalizeContentType(attachment.contentType) ?? "").startsWith("text/html")) continue;
-		const id = attachment.id?.trim();
-		if (id) representedIds.add(id);
-	}
-	return extractMSTeamsHtmlAttachmentIds(attachments).filter((id) => !representedIds.has(id));
-}
-function createAdvertisedMediaFact(kind, sourceId) {
-	return {
-		kind,
-		...sourceId ? { sourceId } : {}
+	const deferredReplacementLogicalContent = () => {
+		return deferredReplacementEntries.map((entry) => entry.payload.text).filter((text) => Boolean(text)).join("\n") || void 0;
 	};
-}
-function resolveMSTeamsAdvertisedMedia(attachments) {
-	const list = Array.isArray(attachments) ? attachments : [];
-	if (list.length === 0) return [];
-	const fileAttachments = list.filter(require_resolve_allowlist.isAdvertisedFileAttachment);
-	const inlineMedia = require_resolve_allowlist.extractInlineImageReferences(list).map((candidate) => createAdvertisedMediaFact("image", candidate.sourceId));
-	const htmlAttachmentIds = resolveUnrepresentedHtmlAttachmentIds(list);
-	return [
-		...fileAttachments.map((attachment) => createAdvertisedMediaFact(require_resolve_allowlist.isLikelyImageAttachment(attachment) ? "image" : require_resolve_allowlist.resolveMSTeamsMediaKind({
-			contentType: require_resolve_allowlist.normalizeContentType(attachment.contentType),
-			fileName: attachment.name ?? void 0
-		}), attachment.id?.trim() || void 0)),
-		...inlineMedia,
-		...htmlAttachmentIds.map((sourceId) => createAdvertisedMediaFact("document", sourceId))
-	];
-}
-//#endregion
-//#region extensions/msteams/src/attachments/remote-media.ts
-/**
-* Direct save path used when the caller supplies the already-guarded fetch
-* implementation. This lets Teams-specific auth fallback own the request
-* sequence while keeping redirect and DNS pinning inside `safeFetchWithPolicy`.
-*/
-async function downloadAndStoreMSTeamsRemoteMedia(params) {
-	const response = await params.fetchImpl(params.url, { redirect: "follow" });
-	try {
-		const saved = await (0, openclaw_plugin_sdk_media_runtime.saveResponseMedia)(response, {
-			sourceUrl: params.url,
-			filePathHint: params.filePathHint,
-			maxBytes: params.maxBytes,
-			fallbackContentType: params.contentTypeHint,
-			originalFilename: params.preserveFilenames ? params.filePathHint : void 0
-		});
-		return {
-			path: saved.path,
-			contentType: saved.contentType,
-			kind: params.kind ?? require_resolve_allowlist.resolveMSTeamsMediaKind({
-				contentType: saved.contentType,
-				fileName: params.filePathHint
-			})
-		};
-	} finally {
-		await response.body?.cancel().catch(() => void 0);
-	}
-}
-//#endregion
-//#region extensions/msteams/src/attachments/download.ts
-function resolveDownloadCandidate(att, graphReferenceToken) {
-	const contentType = require_resolve_allowlist.normalizeContentType(att.contentType);
-	const graphReference = graphReferenceToken !== void 0 && contentType === "reference";
-	const name = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(att.name) ?? "";
-	if (contentType === "application/vnd.microsoft.teams.file.download.info") {
-		if (!(0, openclaw_plugin_sdk_string_coerce_runtime.isRecord)(att.content)) return null;
-		const downloadUrl = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(att.content.downloadUrl) ?? "";
-		if (!downloadUrl) return null;
-		const fileType = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(att.content.fileType) ?? "";
-		const uniqueId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(att.content.uniqueId) ?? "";
-		const fileName = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(att.content.fileName) ?? "";
-		const fileHint = name || fileName || (uniqueId && fileType ? `${uniqueId}.${fileType}` : "");
+	const deferredReplacementPayloads = (replacementFallback) => deferredReplacementEntries.flatMap((entry) => {
+		if (entry.kind === "payload") return [entry.payload];
+		const text = replacementFallback?.text;
+		if (!text && !hasUnstreamedContent(entry.payload)) return [];
+		return [{
+			...entry.payload,
+			text: text || void 0
+		}];
+	});
+	const finalizeWithoutReceipt = (logicalContent, canceled = false) => {
+		const fallback = pendingFinalPayload && !canceled ? fallbackPayloadAfterAcknowledgedText(pendingFinalPayload) : void 0;
+		const postNativePayloads = replacementSettlementPending && !canceled ? deferredReplacementPayloads(fallback) : [];
 		return {
-			kind: "remote",
-			mediaKind: require_resolve_allowlist.resolveMSTeamsMediaKind({
-				contentType,
-				fileName: fileHint,
-				fileType
-			}),
-			url: downloadUrl,
-			fileHint: fileHint || void 0,
-			contentTypeHint: void 0,
-			sourceId: att.id?.trim() || void 0
+			...acknowledgedNativeDelivery(),
+			...!canceled && logicalContent ? { logicalContent } : {},
+			...!replacementSettlementPending && fallback ? { fallbackPayload: fallback } : {},
+			...postNativePayloads.length > 0 ? { postNativePayloads } : {}
 		};
-	}
-	const contentUrl = graphReference ? att.contentUrl ?? "" : (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(att.contentUrl) ?? "";
-	if (!contentUrl) return null;
-	const sharesUrl = graphReference ? `${require_resolve_allowlist.GRAPH_ROOT}/shares/${require_resolve_allowlist.encodeGraphShareId(contentUrl)}/driveItem/content` : require_resolve_allowlist.tryBuildGraphSharesUrlForSharedLink(contentUrl);
-	const resolvedUrl = sharesUrl ?? contentUrl;
-	const resolvedContentTypeHint = graphReference ? "application/octet-stream" : sharesUrl ? void 0 : contentType;
-	return {
-		kind: "remote",
-		mediaKind: require_resolve_allowlist.resolveMSTeamsMediaKind({
-			contentType,
-			fileName: name
-		}),
-		url: resolvedUrl,
-		fileHint: graphReference ? att.name ?? void 0 : name || void 0,
-		contentTypeHint: resolvedContentTypeHint,
-		sourceId: att.id?.trim() || void 0,
-		graphReference
 	};
-}
-function scopeCandidatesForUrl(url) {
-	const host = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(URL.parse(url)?.hostname);
-	return host.endsWith("graph.microsoft.com") || host.endsWith("sharepoint.com") || host.endsWith("1drv.ms") || host.includes("sharepoint") ? ["https://graph.microsoft.com", "https://api.botframework.com"] : ["https://api.botframework.com", "https://graph.microsoft.com"];
-}
-function canonicalizeInlineBase64Payload(value) {
-	let cleaned = "";
-	for (const char of value) if (char.charCodeAt(0) > 32) cleaned += char;
-	return cleaned.length % 4 === 0 && /^[A-Za-z0-9+/]+={0,2}$/.test(cleaned) ? cleaned : void 0;
-}
-function decodeInlineDataImage(src, maxBytes, totalBytes) {
-	const match = /^data:(image\/[a-z0-9.+-]+)?(;base64)?,(.*)$/i.exec(src);
-	if (!match) return null;
-	const contentType = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(match[1] ?? "");
-	if (!Boolean(match[2])) return null;
-	const canonicalPayload = canonicalizeInlineBase64Payload(match[3] ?? "");
-	if (!canonicalPayload) return null;
-	const estimatedBytes = Buffer.byteLength(canonicalPayload, "base64");
-	if (estimatedBytes <= 0 || typeof maxBytes === "number" && (estimatedBytes > maxBytes || totalBytes + estimatedBytes > maxBytes)) return null;
-	try {
-		return {
-			data: Buffer.from(canonicalPayload, "base64"),
-			contentType,
-			estimatedBytes
-		};
-	} catch {
-		return null;
-	}
-}
-async function resolveInlineDataImageMime(inline) {
-	const detectedMime = await require_runtime.getMSTeamsRuntime().media.detectMime({
-		buffer: inline.data,
-		headerMime: inline.contentType
-	});
-	const mime = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(detectedMime ?? inline.contentType);
-	return mime?.startsWith("image/") ? mime : void 0;
-}
-async function fetchWithAuthFallback(params) {
-	const fetchAttempt = (fetchFn, requestInit) => require_resolve_allowlist.safeFetchWithPolicy({
-		url: params.url,
-		policy: params.policy,
-		fetchFn,
-		requestInit,
-		resolveFn: params.resolveFn,
-		timeoutMs: require_resolve_allowlist.resolveMSTeamsRequestTimeoutMs(params.deadline)
+	const progressDraft = (0, openclaw_plugin_sdk_channel_outbound.createChannelProgressDraftCompositor)({
+		preparedItems: true,
+		formatPlainText: (text) => text,
+		entry: params.msteamsConfig,
+		mode: streamMode,
+		active: Boolean(stream) && streamMode === "progress",
+		seed: params.progressSeed ?? "msteams",
+		update: (text) => {
+			if (!stream || wasCanceled() || streamFinalizationPending) return false;
+			stream.update(flattenInformativeStatus(text));
+			return true;
+		}
 	});
-	if (params.bearerToken !== void 0) {
-		const headers = require_resolve_allowlist.ensureUserAgentHeader(params.requestInit?.headers);
-		require_resolve_allowlist.applyAuthorizationHeaderForUrl({
-			headers,
-			url: params.url,
-			authAllowHosts: params.policy.authAllowHosts,
-			bearerToken: params.bearerToken
-		});
-		return fetchAttempt(params.fetchFn, {
-			...params.requestInit,
-			headers
-		});
-	}
-	const firstAttempt = await fetchAttempt(params.fetchFn, params.requestInit);
-	if (firstAttempt.ok) return firstAttempt;
-	if (!params.tokenProvider) return firstAttempt;
-	const tokenProvider = params.tokenProvider;
-	if (firstAttempt.status !== 401 && firstAttempt.status !== 403) return firstAttempt;
-	if (!(0, openclaw_plugin_sdk_ssrf_policy.isHttpsUrlAllowedByHostnameSuffixAllowlist)(params.url, params.policy.authAllowHosts)) return firstAttempt;
-	let fallbackAttempt = firstAttempt;
-	const scopes = scopeCandidatesForUrl(params.url);
-	const fetchFn = params.fetchFn ?? fetch;
-	for (const scope of scopes) try {
-		const token = await require_resolve_allowlist.withMSTeamsRequestDeadline({
-			deadline: params.deadline,
-			label: "MS Teams attachment token",
-			work: () => tokenProvider.getAccessToken(scope)
-		});
-		const authHeaders = new Headers(params.requestInit?.headers);
-		authHeaders.set("Authorization", `Bearer ${token}`);
-		const authAttempt = await fetchAttempt(fetchFn, {
-			...params.requestInit,
-			headers: authHeaders
-		});
-		await fallbackAttempt.body?.cancel().catch(() => void 0);
-		if (authAttempt.ok || require_resolve_allowlist.isRedirectStatus(authAttempt.status)) return authAttempt;
-		fallbackAttempt = authAttempt;
-	} catch {}
-	return fallbackAttempt;
-}
-async function downloadMSTeamsAttachments(params) {
-	const list = Array.isArray(params.attachments) ? params.attachments : [];
-	if (list.length === 0) return [];
-	const policy = require_resolve_allowlist.resolveAttachmentFetchPolicy({
-		allowHosts: params.allowHosts,
-		authAllowHosts: params.authAllowHosts
-	});
-	const allowHosts = policy.allowHosts;
-	const candidates = list.filter(require_resolve_allowlist.isAdvertisedFileAttachment).map((attachment) => {
-		return (require_resolve_allowlist.isDownloadableAttachment(attachment) ? resolveDownloadCandidate(attachment, params.graphReferenceToken) : null) ?? {
-			kind: "unavailable",
-			mediaKind: require_resolve_allowlist.resolveMSTeamsMediaKind({
-				contentType: require_resolve_allowlist.normalizeContentType(attachment.contentType),
-				fileName: attachment.name ?? void 0
-			}),
-			sourceId: attachment.id?.trim() || void 0
-		};
-	});
-	const maxInlineBytes = params.maxBytes;
-	candidates.push(...require_resolve_allowlist.extractInlineImageReferences(list).map((candidate) => {
-		if (candidate.kind === "url") return {
-			kind: "remote",
-			mediaKind: "image",
-			url: candidate.url,
-			fileHint: candidate.fileHint,
-			contentTypeHint: candidate.contentType,
-			sourceId: candidate.sourceId
-		};
-		return Object.assign(candidate, { mediaKind: "image" });
-	}));
-	for (const sourceId of resolveUnrepresentedHtmlAttachmentIds(list)) candidates.push({
-		kind: "unavailable",
-		mediaKind: "document",
-		sourceId
-	});
-	if (candidates.length === 0) return [];
-	let totalInlineBytes = 0;
-	const downloadCandidate = async (candidate) => {
-		if (candidate.kind === "unavailable") return;
-		if (candidate.kind === "data") {
-			const decoded = decodeInlineDataImage(candidate.src, maxInlineBytes, totalInlineBytes);
-			if (!decoded) return;
-			totalInlineBytes += decoded.estimatedBytes;
+	return {
+		onPartialReply(payload) {
+			if (!stream || !payload.text || wasCanceled() || streamMode !== "partial") return;
+			if (replacementSettlementPending && replacementFinalPending) {
+				pendingFinalPayload = { text: payload.text };
+				return;
+			}
+			if (streamFinalizationPending || nativeDeliveryClaimed) return;
+			const fullText = payload.text;
+			let prefixLength = 0;
+			while (prefixLength < emittedText.length && prefixLength < fullText.length && emittedText[prefixLength] === fullText[prefixLength]) prefixLength += 1;
+			const previousRemainder = emittedText.slice(prefixLength);
+			const delta = fullText.slice(prefixLength);
+			if (!delta) return;
+			if (previousRemainder.trim()) {
+				stream.clearText();
+				replacementFinalPending = true;
+				replacementSettlementPending = true;
+				pendingFinalPayload = { text: fullText };
+				streamFinalizationPending = true;
+				return;
+			}
+			stream.emit(delta);
+			emittedText = fullText;
+			tokensEmitted = true;
+			nativeDispatchStarted = true;
+		},
+		pushItemEvent: progressDraft.pushItemEvent.bind(progressDraft),
+		pushToolEvent: progressDraft.pushToolEvent,
+		pushReasoningProgress: progressDraft.pushReasoningProgress.bind(progressDraft),
+		resetReasoningProgress: progressDraft.resetReasoningProgress,
+		pushApprovalEvent: progressDraft.pushApprovalEvent.bind(progressDraft),
+		pushPlanProgress: progressDraft.pushPlanProgress.bind(progressDraft),
+		preparePayload(payload) {
+			if (!stream) return payload;
+			if (wasCanceled()) return;
+			if (payload.text) progressDraft.markFinalReplyStarted();
+			if (replacementSettlementPending) {
+				if (!replacementFinalPending || !payload.text) {
+					deferredReplacementEntries.push({
+						kind: "payload",
+						payload
+					});
+					return;
+				}
+				replacementFinalPending = false;
+				deferredReplacementEntries.push({
+					kind: "replacement",
+					payload
+				});
+				pendingFinalPayload = fallbackPayloadForSuppressedFinal(payload);
+				queueFinalReplacement(stream, payload.text);
+				tokensEmitted = false;
+				return;
+			}
+			if (streamMode === "progress" && payload.text && !nativeDispatchStarted) {
+				stream.emit(payload.text);
+				emittedText = payload.text;
+				nativeDispatchStarted = true;
+				tokensEmitted = true;
+			}
+			if (tokensEmitted) {
+				const hasMedia = Boolean(payload.mediaUrl || payload.mediaUrls?.length);
+				pendingFinalPayload = fallbackPayloadForSuppressedFinal(payload);
+				streamFinalizationPending = true;
+				tokensEmitted = false;
+				if (!hasMedia) return;
+				const { presentation: _presentation, presentationTextMode: _mode, ...mediaPayload } = payload;
+				return {
+					...mediaPayload,
+					text: void 0
+				};
+			}
+			return payload;
+		},
+		claimNativeDelivery() {
+			if (!nativeDispatchStarted || nativeDeliveryClaimed) return false;
+			nativeDeliveryClaimed = true;
+			return true;
+		},
+		async finalize() {
+			progressDraft.markFinalReplyStarted();
+			if (!stream || !nativeDispatchStarted) {
+				releaseStreamChunkSubscription();
+				return { visibleReplySent: false };
+			}
+			let logicalContent;
 			try {
-				const contentType = await resolveInlineDataImageMime(decoded);
-				if (!contentType) return;
-				const saved = await require_runtime.getMSTeamsRuntime().channel.media.saveMediaBuffer(decoded.data, contentType, "inbound", params.maxBytes);
+				if (wasCanceled() || !streamFinalizationPending) return acknowledgedNativeDelivery();
+				if (replacementSettlementPending && replacementFinalPending && pendingFinalPayload?.text) {
+					replacementFinalPending = false;
+					deferredReplacementEntries.push({
+						kind: "replacement",
+						payload: pendingFinalPayload
+					});
+					logicalContent = deferredReplacementLogicalContent();
+					queueFinalReplacement(stream, pendingFinalPayload.text);
+				}
+				logicalContent ??= replacementSettlementPending ? deferredReplacementLogicalContent() : void 0;
+				const logicalText = pendingFinalPayload?.text ?? (emittedText || void 0);
+				const finalActivity = queuedFinalActivity ?? finalStreamActivity(logicalText);
+				const content = finalActivity.text;
+				logicalContent ??= content !== logicalText ? logicalText : void 0;
+				if (!queuedFinalActivity) {
+					if (content !== void 0 && content !== emittedText) {
+						stream.clearText();
+						replacementTextAwaitingAcknowledgement = {
+							text: content,
+							logicalText
+						};
+						stream.emit(finalActivity);
+					} else stream.emit({
+						...finalActivity,
+						text: void 0
+					});
+				}
+				const result = await stream.close();
+				if (!result) return finalizeWithoutReceipt(logicalContent, wasCanceled());
+				const messageId = require_conversation_store_state.extractMessageId(result) ?? acknowledgedStreamId;
+				const postNativePayloads = replacementSettlementPending ? deferredReplacementPayloads(void 0) : pendingFinalPayload?.presentation ? [{
+					...pendingFinalPayload,
+					text: void 0
+				}] : [];
 				return {
-					path: saved.path,
-					contentType: saved.contentType,
-					kind: "image"
+					visibleReplySent: true,
+					...content === void 0 ? {} : { content },
+					...logicalContent ? { logicalContent } : {},
+					...messageId ? { messageId } : {},
+					...postNativePayloads.length > 0 ? { postNativePayloads } : {}
 				};
 			} catch (err) {
-				params.logger?.warn?.("msteams inline attachment decode failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
-			}
-			return;
-		}
-		if (!(0, openclaw_plugin_sdk_ssrf_policy.isHttpsUrlAllowedByHostnameSuffixAllowlist)(candidate.url, allowHosts)) return;
-		try {
-			return await downloadAndStoreMSTeamsRemoteMedia({
-				url: candidate.url,
-				filePathHint: candidate.fileHint ?? candidate.url,
-				maxBytes: params.maxBytes,
-				contentTypeHint: candidate.contentTypeHint,
-				kind: candidate.graphReference ? void 0 : candidate.mediaKind,
-				preserveFilenames: params.preserveFilenames,
-				fetchImpl: (input, init) => fetchWithAuthFallback({
-					url: (0, openclaw_plugin_sdk_request_url.resolveRequestUrl)(input),
-					tokenProvider: params.tokenProvider,
-					fetchFn: params.fetchFn,
-					requestInit: init,
-					resolveFn: params.resolveFn,
-					policy,
-					deadline: params.deadline,
-					bearerToken: candidate.graphReference ? params.graphReferenceToken : void 0
-				})
-			});
-		} catch (err) {
-			if (candidate.graphReference) {
-				params.logger?.warn?.("msteams SharePoint reference download failed", {
-					error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err),
-					name: candidate.fileHint
-				});
-				return;
+				if (err instanceof Error && err.name === "StreamCancelledError") return acknowledgedNativeDelivery();
+				params.log?.warn?.(`msteams stream finalize failed: ${(0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)}`);
+				return finalizeWithoutReceipt(logicalContent);
+			} finally {
+				pendingFinalPayload = void 0;
+				streamFinalizationPending = false;
+				queuedFinalActivity = void 0;
+				replacementFinalPending = false;
+				replacementSettlementPending = false;
+				replacementTextAwaitingAcknowledgement = void 0;
+				deferredReplacementEntries = [];
+				releaseStreamChunkSubscription();
 			}
-			const msg = (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err);
-			params.logger?.warn?.(`msteams attachment download failed host=${safeHostForLog(candidate.url)} error=${msg}`);
-		}
+		},
+		hasStream() {
+			return Boolean(stream);
+		},
+		isStreamActive() {
+			return Boolean(stream) && tokensEmitted && !wasCanceled();
+		},
+		wasCanceled
 	};
-	const out = [];
-	for (const candidate of candidates) {
-		const media = await downloadCandidate(candidate) ?? { kind: candidate.mediaKind };
-		out.push(candidate.sourceId ? {
-			...media,
-			sourceId: candidate.sourceId
-		} : media);
-	}
-	return out;
-}
-function safeHostForLog(url) {
-	return URL.parse(url)?.host ?? "invalid-url";
 }
 //#endregion
-//#region extensions/msteams/src/attachments/graph.ts
-function createGraphHostedContentFact(item) {
-	const contentType = require_resolve_allowlist.normalizeContentType(item.contentType);
-	return {
-		kind: require_resolve_allowlist.resolveMSTeamsMediaKind({ contentType }),
-		...contentType ? { contentType } : {},
-		...item.id ? { sourceId: item.id } : {}
-	};
-}
-function buildMSTeamsGraphMessageUrl(params) {
-	const conversationType = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(params.conversationType ?? "");
-	const messageId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params.messageId);
-	if (!messageId) return;
-	if (conversationType === "channel") {
-		const teamAadGroupId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params.teamAadGroupId);
-		const channelId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params.channelId);
-		if (!teamAadGroupId || !channelId) return;
-		const messageRoot = `${require_resolve_allowlist.GRAPH_ROOT}/teams/${encodeURIComponent(teamAadGroupId)}/channels/${encodeURIComponent(channelId)}/messages`;
-		const threadRootMessageId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params.threadRootMessageId);
-		return threadRootMessageId && threadRootMessageId !== messageId ? `${messageRoot}/${encodeURIComponent(threadRootMessageId)}/replies/${encodeURIComponent(messageId)}` : `${messageRoot}/${encodeURIComponent(messageId)}`;
-	}
-	const chatId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params.conversationId);
-	if (!chatId) return;
-	return `${require_resolve_allowlist.GRAPH_ROOT}/chats/${encodeURIComponent(chatId)}/messages/${encodeURIComponent(messageId)}`;
-}
-async function withGraphMediaResponse(params, url, kind, read) {
-	const { response, release } = await (0, openclaw_plugin_sdk_ssrf_runtime.fetchWithSsrFGuard)({
-		url,
-		fetchImpl: params.fetchFn ?? fetch,
-		init: { headers: require_resolve_allowlist.ensureUserAgentHeader({ Authorization: `Bearer ${params.accessToken}` }) },
-		policy: params.ssrfPolicy,
-		auditContext: `msteams.graph.${kind}`,
-		timeoutMs: require_resolve_allowlist.resolveMSTeamsRequestTimeoutMs(params.deadline)
+//#region extensions/msteams/src/reply-dispatcher.ts
+function createMSTeamsReplyDispatcher(params) {
+	const core = require_runtime.getMSTeamsRuntime();
+	const msteamsCfg = require_resolve_allowlist.resolveMSTeamsAccountConfig(params.cfg, params.accountId);
+	const mediaMaxBytes = (0, openclaw_plugin_sdk_account_helpers.resolveChannelMediaMaxBytes)({
+		cfg: params.cfg,
+		resolveChannelLimitMb: () => msteamsCfg.mediaMaxMb
 	});
-	try {
-		return await read(response);
-	} finally {
-		if (!response.bodyUsed) response.body?.cancel().catch(() => void 0);
-		await release();
-	}
-}
-async function fetchGraphCollection(params) {
-	return withGraphMediaResponse(params, params.url, "collection", async (response) => {
-		const status = response.status;
-		if (!response.ok) return {
-			status,
-			items: []
-		};
-		try {
-			return {
-				status,
-				items: await (0, openclaw_plugin_sdk_provider_http.readProviderJsonArrayFieldResponse)(response, "MS Teams Graph collection", "value")
-			};
-		} catch {
-			return {
-				status,
-				items: []
-			};
+	const feedbackLoopEnabled = msteamsCfg.feedbackEnabled !== false;
+	const conversationType = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(params.conversationRef.conversation?.conversationType);
+	const isTypingSupported = conversationType === "personal" || conversationType === "groupchat";
+	const TYPING_KEEPALIVE_INTERVAL_MS = 8e3;
+	const TYPING_KEEPALIVE_MAX_DURATION_MS = 6e5;
+	const sendTypingIndicator = async () => {
+		if (!isTypingSupported || streamController.isStreamActive() || streamController.wasCanceled()) return;
+		await params.context.sendActivity({ type: "typing" });
+	};
+	const { onModelSelected, typingCallbacks, ...replyPipeline } = (0, openclaw_plugin_sdk_channel_outbound.createChannelMessageReplyPipeline)({
+		cfg: params.cfg,
+		agentId: params.agentId,
+		channel: "msteams",
+		accountId: params.accountId,
+		typing: {
+			start: sendTypingIndicator,
+			keepaliveIntervalMs: TYPING_KEEPALIVE_INTERVAL_MS,
+			maxDurationMs: TYPING_KEEPALIVE_MAX_DURATION_MS,
+			onStartError: (err) => {
+				(0, openclaw_plugin_sdk_channel_outbound.logTypingFailure)({
+					log: (message) => params.log.debug?.(message),
+					channel: "msteams",
+					action: "start",
+					error: err
+				});
+			}
 		}
 	});
-}
-function normalizeGraphAttachment(att) {
-	let content = att.content;
-	if (typeof content === "string") try {
-		content = JSON.parse(content);
-	} catch {}
-	return {
-		id: att.id ?? void 0,
-		contentType: require_resolve_allowlist.normalizeContentType(att.contentType) ?? void 0,
-		contentUrl: att.contentUrl ?? void 0,
-		name: att.name ?? void 0,
-		thumbnailUrl: att.thumbnailUrl ?? void 0,
-		content
+	const chunkMode = core.channel.text.resolveChunkMode(params.cfg, "msteams", params.accountId);
+	const tableMode = core.channel.text.resolveMarkdownTableMode({
+		cfg: params.cfg,
+		channel: "msteams",
+		accountId: params.accountId
+	});
+	const hookRunner = (0, openclaw_plugin_sdk_plugin_runtime.getGlobalHookRunner)();
+	const streamController = createTeamsReplyStreamController({
+		tableMode,
+		allowProviderPreview: !((hookRunner?.hasHooks("reply_payload_sending") ?? false) || (hookRunner?.hasHooks("message_sending") ?? false)),
+		conversationType,
+		context: params.context,
+		feedbackLoopEnabled,
+		log: params.log,
+		msteamsConfig: msteamsCfg,
+		progressSeed: `${params.accountId ?? "default"}:${params.conversationRef.conversation?.id ?? ""}`
+	});
+	const teamsStreamMode = (0, openclaw_plugin_sdk_channel_outbound.resolveChannelPreviewStreamMode)(msteamsCfg, "partial");
+	const blockStreamingResolved = teamsStreamMode === "block" ? true : (0, openclaw_plugin_sdk_channel_outbound.resolveChannelStreamingBlockEnabled)(msteamsCfg);
+	const blockStreamingEnabled = blockStreamingResolved ?? false;
+	const typingIndicatorEnabled = typeof msteamsCfg?.typingIndicator === "boolean" ? msteamsCfg.typingIndicator : true;
+	const pendingDeliveries = [];
+	let pendingSettlement;
+	const findPendingNativeDelivery = () => pendingDeliveries.find((candidate) => !candidate.nativeSettled);
+	const queueDeliveryFailureSystemEvent = (failure) => {
+		const classification = require_channel_setup.classifyMSTeamsSendError(failure.error);
+		const errorText = require_channel_setup.formatUnknownError(failure.error);
+		const failedAll = failure.failed >= failure.total;
+		const ambiguous = classification.kind === "ambiguous";
+		const sentences = [
+			`Microsoft Teams delivery failed: ${ambiguous ? failedAll ? "the delivery outcome is unknown for the previous reply" : `the delivery outcome is unknown for ${failure.failed} of ${failure.total} message blocks` : failedAll ? "the previous reply was not delivered" : `${failure.failed} of ${failure.total} message blocks were not delivered`}.`,
+			ambiguous ? void 0 : `The user may not have received ${failedAll ? "that reply" : "the full reply"}.`,
+			`Error: ${errorText}.`,
+			classification.statusCode != null ? `Status: ${classification.statusCode}.` : void 0,
+			require_channel_setup.formatMSTeamsDeliveryFailureGuidance(classification)
+		].filter(Boolean);
+		core.system.enqueueSystemEvent(sentences.join(" "), {
+			sessionKey: params.sessionKey,
+			contextKey: `msteams:delivery-failure:${params.conversationRef.conversation?.id ?? "unknown"}`
+		});
 	};
-}
-async function downloadGraphHostedContent(params) {
-	let hosted;
-	try {
-		hosted = await fetchGraphCollection({
-			...params,
-			url: `${params.messageUrl}/hostedContents`
+	const renderReplyPayload = (payload) => {
+		return require_conversation_store_state.renderReplyPayloadsToMessages([payload], {
+			textChunkLimit: params.textLimit,
+			tableMode,
+			chunkMode
 		});
-	} catch (err) {
-		params.logger?.warn?.("msteams graph hostedContents fetch failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
-		return {
-			media: [],
-			count: 0
-		};
-	}
-	if (hosted.items.length === 0) return {
-		media: [],
-		status: hosted.status,
-		count: 0
 	};
-	const out = [];
-	for (const item of hosted.items) {
-		if (!item.id) {
-			out.push(createGraphHostedContentFact(item));
-			continue;
+	const settlePendingDelivery = (delivery) => {
+		if (delivery.settled || !delivery.blockSettled || !delivery.nativeSettled) return;
+		delivery.settled = true;
+		const acceptedParts = [...delivery.nativeResult ? [delivery.nativeResult] : [], ...delivery.blockResults];
+		const messageIds = acceptedParts.flatMap((part) => part.messageIds);
+		const content = delivery.errors.length > 0 ? acceptedParts.map((part) => part.content).filter(Boolean).join("\n") : delivery.content;
+		const outcome = {
+			visibleReplySent: acceptedParts.length > 0,
+			...messageIds.length > 0 ? { messageIds } : {},
+			...acceptedParts.length > 0 && content !== void 0 ? { content } : {}
+		};
+		if (delivery.errors.length === 0) {
+			delivery.finalization.resolve(outcome);
+			return;
 		}
-		try {
-			const sourceId = item.id;
-			const valueUrl = `${params.messageUrl}/hostedContents/${encodeURIComponent(sourceId)}/$value`;
-			await withGraphMediaResponse(params, valueUrl, "hostedContent.value", async (valRes) => {
-				if (!valRes.ok) {
-					out.push(createGraphHostedContentFact(item));
-					return;
-				}
-				const saved = await require_runtime.getMSTeamsRuntime().channel.media.saveResponseMedia(valRes, {
-					sourceUrl: valueUrl,
-					maxBytes: params.maxBytes,
-					fallbackContentType: item.contentType ?? void 0,
-					subdir: "inbound"
+		const error = delivery.errors.find((candidate) => !(candidate instanceof openclaw_plugin_sdk_error_runtime.PlatformMessageNotDispatchedError)) ?? delivery.errors[0];
+		delivery.finalization.reject(outcome.visibleReplySent ? (0, openclaw_plugin_sdk_channel_inbound.createChannelPartialDeliveryError)(error, {
+			...outcome,
+			visibleReplySent: true
+		}) : error);
+	};
+	const flushPendingMessages = async () => {
+		for (const delivery of pendingDeliveries) {
+			if (delivery.blockSettled) continue;
+			const toSend = delivery.messages.splice(0);
+			const total = toSend.length;
+			let failed = 0;
+			let lastFailedError;
+			const sentIds = [];
+			for (const msg of toSend) try {
+				const msgIds = await require_conversation_store_state.sendMSTeamsMessages({
+					accountId: params.accountId,
+					replyStyle: params.replyStyle,
+					app: params.app,
+					conversationRef: params.conversationRef,
+					context: params.context,
+					messages: [msg],
+					onRetry: (event) => {
+						params.log.debug?.("retrying send", {
+							replyStyle: params.replyStyle,
+							...event
+						});
+					},
+					tokenProvider: params.tokenProvider,
+					sharePointSiteId: params.sharePointSiteId,
+					mediaMaxBytes,
+					feedbackLoopEnabled,
+					serviceUrlBoundary: require_resolve_allowlist.resolveMSTeamsSdkCloudOptions(msteamsCfg)
 				});
-				out.push({
-					path: saved.path,
-					contentType: saved.contentType,
-					kind: require_resolve_allowlist.resolveMSTeamsMediaKind({ contentType: saved.contentType }),
-					sourceId
+				const validIds = msgIds.filter((id) => id.trim() && id !== "unknown");
+				if (msgIds.length > 0) delivery.blockResults.push({
+					messageIds: validIds,
+					...msg.text ? { content: msg.text } : {}
 				});
-			});
-		} catch (err) {
-			out.push(createGraphHostedContentFact(item));
-			params.logger?.warn?.("msteams graph hostedContent value fetch failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
-			continue;
+				sentIds.push(...validIds);
+			} catch (msgError) {
+				failed += 1;
+				lastFailedError = msgError;
+				delivery.errors.push(msgError);
+				params.log.debug?.("individual message send failed, continuing with remaining blocks");
+			}
+			if (failed > 0) {
+				const classification = require_channel_setup.classifyMSTeamsSendError(lastFailedError);
+				const hint = require_channel_setup.formatMSTeamsSendErrorHint(classification);
+				params.log.warn?.(`failed to deliver ${failed} of ${total} message blocks`, {
+					failed,
+					total,
+					error: require_channel_setup.formatUnknownError(lastFailedError),
+					classification,
+					...hint ? { hint } : {}
+				});
+				queueDeliveryFailureSystemEvent({
+					failed,
+					total,
+					error: lastFailedError
+				});
+			}
+			delivery.blockSettled = true;
+			settlePendingDelivery(delivery);
+			if (sentIds.length > 0) try {
+				params.onSentMessageIds?.(sentIds);
+			} catch (error) {
+				params.log.warn?.("failed to record sent Teams message ids", { error: require_channel_setup.formatUnknownError(error) });
+			}
 		}
-	}
-	return {
-		media: out,
-		status: hosted.status,
-		count: hosted.items.length
 	};
-}
-async function downloadMSTeamsGraphMedia(params) {
-	if (!params.messageUrl || !params.tokenProvider) return { media: [] };
-	const tokenProvider = params.tokenProvider;
-	const policy = require_resolve_allowlist.resolveAttachmentFetchPolicy({
-		allowHosts: params.allowHosts,
-		authAllowHosts: params.authAllowHosts
-	});
-	const ssrfPolicy = (0, openclaw_plugin_sdk_ssrf_policy.buildHostnameAllowlistPolicyFromSuffixAllowlist)(policy.allowHosts);
-	const messageUrl = params.messageUrl;
-	const logGraphFailure = (phase, err) => {
-		params.logger?.debug?.(`graph media ${phase} failed`, {
-			messageUrl,
-			error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)
-		});
-		params.logger?.warn?.(`msteams graph ${phase} failed`, {
-			error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err),
-			...phase === "message parse" ? { messageUrl } : {}
-		});
+	const dispatcherOptions = {
+		...replyPipeline,
+		humanDelay: (0, openclaw_plugin_sdk_agent_runtime.resolveHumanDelayConfig)(params.cfg, params.agentId),
+		onReplyStart: async () => {
+			if (typingIndicatorEnabled) await typingCallbacks?.onReplyStart?.();
+		},
+		typingCallbacks
 	};
-	let accessToken;
-	try {
-		accessToken = await require_resolve_allowlist.withMSTeamsRequestDeadline({
-			deadline: params.deadline,
-			label: "MS Teams Graph media token",
-			work: () => tokenProvider.getAccessToken("https://graph.microsoft.com")
-		});
-	} catch (err) {
-		logGraphFailure("token acquisition", err);
-		return {
-			media: [],
-			messageUrl,
-			tokenError: true
-		};
-	}
-	let messageAttachments = [];
-	let referenceAttachments = [];
-	let messageStatus;
-	try {
-		await withGraphMediaResponse({
-			...params,
-			accessToken,
-			ssrfPolicy
-		}, messageUrl, "message", async (msgRes) => {
-			messageStatus = msgRes.status;
-			if (msgRes.ok) {
-				let msgData;
-				try {
-					msgData = await (0, openclaw_plugin_sdk_provider_http.readProviderJsonResponse)(msgRes, "MS Teams Graph message");
-				} catch (err) {
-					logGraphFailure("message parse", err);
-					msgData = {};
-				}
-				messageAttachments = Array.isArray(msgData.attachments) ? msgData.attachments : [];
-				referenceAttachments = messageAttachments.filter((a) => a.contentType === "reference" && a.contentUrl && a.name);
-			} else params.logger?.debug?.("graph media message fetch not ok", {
-				messageUrl,
-				status: messageStatus
+	const delivery = {
+		observeMessageSent: true,
+		deliver: async (payload) => {
+			if (pendingSettlement) await pendingSettlement;
+			let resolvedPayload = payload;
+			if (payload.presentation) {
+				let nativePayload;
+				const fallbackPayload = await (0, openclaw_plugin_sdk_interactive_runtime.renderPresentationForDelivery)({
+					presentationCapabilities: require_presentation.MSTEAMS_PRESENTATION_CAPABILITIES,
+					renderPresentation: (adapted) => {
+						nativePayload = adapted;
+						return adapted;
+					}
+				}, payload);
+				resolvedPayload = nativePayload ?? fallbackPayload;
+			}
+			const preparedPayload = streamController.preparePayload(resolvedPayload);
+			const native = streamController.claimNativeDelivery();
+			if (preparedPayload && !native && findPendingNativeDelivery()) await settleDelivery();
+			const messages = preparedPayload && !streamController.wasCanceled() ? renderReplyPayload(preparedPayload) : [];
+			if (!native && messages.length === 0) return {
+				visibleReplySent: false,
+				suppression: { reason: "no_visible_result" }
+			};
+			const pending = {
+				messages,
+				finalization: (0, openclaw_plugin_sdk_extension_shared.createDeferred)(),
+				content: payload.text,
+				blockResults: [],
+				nativeSettled: !native,
+				blockSettled: messages.length === 0,
+				settled: false,
+				errors: []
+			};
+			pendingDeliveries.push(pending);
+			if (blockStreamingEnabled) await flushPendingMessages();
+			settlePendingDelivery(pending);
+			return {
+				visibleReplySent: false,
+				finalization: pending.finalization.promise
+			};
+		},
+		onError: (err, info) => {
+			const errMsg = require_channel_setup.formatUnknownError(err);
+			const classification = require_channel_setup.classifyMSTeamsSendError(err);
+			const hint = require_channel_setup.formatMSTeamsSendErrorHint(classification);
+			params.log.error("reply failed", {
+				kind: info.kind,
+				error: errMsg,
+				classification,
+				hint
 			});
-		});
-	} catch (err) {
-		logGraphFailure("message fetch", err);
-	}
-	const sharePointMedia = await downloadMSTeamsAttachments({
-		...params,
-		attachments: referenceAttachments,
-		graphReferenceToken: accessToken,
-		allowHosts: policy.allowHosts,
-		authAllowHosts: policy.authAllowHosts
-	});
-	const hosted = await downloadGraphHostedContent({
-		accessToken,
-		messageUrl,
-		maxBytes: params.maxBytes,
-		fetchFn: params.fetchFn,
-		ssrfPolicy,
-		logger: params.logger,
-		deadline: params.deadline
+		}
+	};
+	const settleDelivery = () => pendingSettlement ??= Promise.resolve().then(async () => {
+		await flushPendingMessages();
+		const nativeDelivery = findPendingNativeDelivery();
+		if (!nativeDelivery) {
+			await streamController.finalize();
+			return;
+		}
+		let nativeResult;
+		try {
+			nativeResult = await streamController.finalize();
+		} catch (error) {
+			nativeDelivery.errors.push(error);
+			nativeDelivery.nativeSettled = true;
+			settlePendingDelivery(nativeDelivery);
+			return;
+		}
+		if (nativeResult.visibleReplySent) nativeDelivery.nativeResult = {
+			messageIds: nativeResult.messageId ? [nativeResult.messageId] : [],
+			...nativeResult.content !== void 0 ? { content: nativeResult.content } : {}
+		};
+		const hasPostNativePayloads = Boolean(nativeResult.postNativePayloads?.length);
+		if (nativeResult.logicalContent !== void 0) nativeDelivery.content = nativeResult.logicalContent;
+		else if (nativeResult.content !== void 0 && (!nativeResult.fallbackPayload && !hasPostNativePayloads || nativeDelivery.content === void 0)) nativeDelivery.content = nativeResult.content;
+		const afterNativePayloads = [...nativeResult.fallbackPayload ? [nativeResult.fallbackPayload] : [], ...nativeResult.postNativePayloads ?? []];
+		if (afterNativePayloads.length > 0) {
+			nativeDelivery.messages.push(...afterNativePayloads.flatMap((payload) => renderReplyPayload(payload)));
+			nativeDelivery.blockSettled = nativeDelivery.messages.length === 0;
+		}
+		nativeDelivery.nativeSettled = true;
+		if (!nativeDelivery.blockSettled) await flushPendingMessages();
+		settlePendingDelivery(nativeDelivery);
+		if (nativeResult.messageId) try {
+			params.onSentMessageIds?.([nativeResult.messageId]);
+		} catch (error) {
+			params.log.warn?.("failed to record sent Teams message id", { error: require_channel_setup.formatUnknownError(error) });
+		}
+	}).finally(() => {
+		pendingSettlement = void 0;
 	});
-	const normalizedAttachments = messageAttachments.map(normalizeGraphAttachment);
-	const referenceUrls = new Set(referenceAttachments.map((att) => att.contentUrl));
-	const filteredAttachments = normalizedAttachments.filter((att) => att.contentType !== "reference" || !referenceUrls.has(att.contentUrl));
-	let attachmentMedia = [];
-	try {
-		attachmentMedia = await downloadMSTeamsAttachments({
-			attachments: filteredAttachments,
-			maxBytes: params.maxBytes,
-			tokenProvider: params.tokenProvider,
-			allowHosts: policy.allowHosts,
-			authAllowHosts: policy.authAllowHosts,
-			fetchFn: params.fetchFn,
-			resolveFn: params.resolveFn,
-			deadline: params.deadline,
-			preserveFilenames: params.preserveFilenames,
-			logger: params.logger
-		});
-	} catch (err) {
-		params.logger?.warn?.("msteams graph attachment download failed", {
-			error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err),
-			messageUrl
-		});
-	}
+	const shouldSuppressDefaultToolProgressMessages = streamController.hasStream() && teamsStreamMode === "progress";
+	const progressCallbacks = streamController.hasStream() ? {
+		onReasoningStream: async (payload) => {
+			await streamController.pushReasoningProgress(payload.text, { snapshot: payload.isReasoningSnapshot === true });
+			return false;
+		},
+		onReasoningEnd: () => {
+			streamController.resetReasoningProgress();
+			return false;
+		},
+		onToolStart: streamController.pushToolEvent,
+		onItemEvent: streamController.pushItemEvent,
+		onPlanUpdate: async (payload) => {
+			if (payload.phase !== "update") return false;
+			await streamController.pushPlanProgress(payload.steps, payload);
+			return false;
+		},
+		onApprovalEvent: async (payload) => {
+			await streamController.pushApprovalEvent(payload);
+			return false;
+		}
+	} : {};
 	return {
-		media: [
-			...sharePointMedia,
-			...hosted.media,
-			...attachmentMedia
-		],
-		hostedCount: hosted.count,
-		attachmentCount: filteredAttachments.length + sharePointMedia.length,
-		hostedStatus: hosted.status,
-		attachmentStatus: messageStatus,
-		messageUrl
+		dispatcherOptions: {
+			...dispatcherOptions,
+			onSettled: settleDelivery
+		},
+		delivery,
+		replyOptions: {
+			progressPreambleEnabled: shouldSuppressDefaultToolProgressMessages,
+			commentaryProgressEnabled: shouldSuppressDefaultToolProgressMessages,
+			...streamController.hasStream() ? { onPartialReply: (payload) => {
+				streamController.onPartialReply(payload);
+				return false;
+			} } : {},
+			...progressCallbacks,
+			...shouldSuppressDefaultToolProgressMessages ? { suppressDefaultToolProgressMessages: true } : {},
+			disableBlockStreaming: blockStreamingResolved == null ? void 0 : !blockStreamingResolved,
+			onModelSelected
+		}
 	};
 }
 //#endregion
-//#region extensions/msteams/src/monitor-handler/inbound-media.ts
-function shouldAttemptMSTeamsGraphMediaFallback(params) {
-	const conversationType = params.conversationType.trim().toLowerCase();
-	return params.graphMediaFallback === true && (conversationType === "channel" || conversationType === "groupchat") && (params.htmlSummary?.htmlAttachments ?? 0) > 0;
-}
-function resolveMSTeamsInboundMediaBody(params) {
-	const unavailableCount = params.materializedMedia.filter((media) => !media.path).length + Math.max(0, params.nativeMedia.length - params.materializedMedia.length);
-	if (unavailableCount === 0) return params.body;
-	return (0, openclaw_plugin_sdk_channel_inbound.formatInboundMediaUnavailableText)({
-		body: params.body,
-		notice: `[msteams ${unavailableCount > 1 ? `${unavailableCount} attachments` : "attachment"} unavailable]`
-	});
-}
-function hasDefinitiveContentType(media) {
-	const contentType = media.contentType?.split(";", 1)[0]?.trim().toLowerCase();
-	return Boolean(contentType && contentType !== "application/octet-stream" && contentType !== "binary/octet-stream");
+//#region extensions/msteams/src/team-identity.ts
+const teamGroupIdCache = /* @__PURE__ */ new Map();
+const TEAM_GROUP_ID_CACHE_MAX_ENTRIES = 500;
+function cacheTeamGroupId(conversationTeamId, groupId) {
+	teamGroupIdCache.set(conversationTeamId, groupId);
+	(0, openclaw_plugin_sdk_collection_runtime.pruneMapToMaxSize)(teamGroupIdCache, TEAM_GROUP_ID_CACHE_MAX_ENTRIES);
 }
-function mergeMSTeamsMediaFacts(nativeMedia, materializedMedia, options = {}) {
-	const merged = [...nativeMedia];
-	const nativeSlotCount = nativeMedia.length;
-	const nativeIndexBySourceId = /* @__PURE__ */ new Map();
-	nativeMedia.forEach((media, index) => {
-		if (media.sourceId && !nativeIndexBySourceId.has(media.sourceId)) nativeIndexBySourceId.set(media.sourceId, index);
-	});
-	for (const [index, materialized] of materializedMedia.entries()) {
-		const sourceIndex = materialized.sourceId ? nativeIndexBySourceId.get(materialized.sourceId) : void 0;
-		const positionalIndex = options.positionallyAligned === false || index >= nativeMedia.length ? void 0 : index;
-		const unresolvedIndexes = options.positionallyAligned === false ? merged.slice(0, nativeSlotCount).flatMap((media, mediaIndex) => !media.path && !media.sourceId ? [mediaIndex] : []) : [];
-		const fallbackIndex = unresolvedIndexes.find((mediaIndex) => merged[mediaIndex]?.kind === materialized.kind) ?? (unresolvedIndexes.length === 1 ? unresolvedIndexes[0] : void 0);
-		const targetIndex = sourceIndex ?? positionalIndex ?? fallbackIndex;
-		if (targetIndex === void 0) {
-			if (materialized.sourceId) nativeIndexBySourceId.set(materialized.sourceId, merged.length);
-			merged.push(materialized);
-		} else {
-			if (materialized.sourceId) nativeIndexBySourceId.set(materialized.sourceId, targetIndex);
-			const current = merged[targetIndex];
-			if (materialized.path) merged[targetIndex] = materialized;
-			else if (!current?.path) merged[targetIndex] = {
-				...current,
-				...materialized,
-				kind: hasDefinitiveContentType(materialized) || !current?.kind ? materialized.kind : current.kind
-			};
-		}
+/** Resolve the Graph team GUID without ever treating a Bot Framework team ID as equivalent. */
+async function resolveTeamGroupId(params) {
+	const activityGroupId = params.aadGroupId?.trim();
+	if (activityGroupId) {
+		cacheTeamGroupId(params.conversationTeamId, activityGroupId);
+		return activityGroupId;
 	}
-	return merged;
-}
-function hasMaterializedMedia(media) {
-	return media.some((entry) => Boolean(entry.path));
-}
-async function resolveMSTeamsInboundMedia(params) {
-	const { attachments, htmlSummary, maxBytes, tokenProvider, allowHosts, conversationType, conversationId, conversationMessageId, teamAadGroupId, serviceUrl, activity, log } = params;
-	let mediaList = await downloadMSTeamsAttachments({
-		attachments,
-		maxBytes,
-		tokenProvider,
-		allowHosts,
-		authAllowHosts: params.authAllowHosts,
+	const cached = teamGroupIdCache.get(params.conversationTeamId);
+	if (cached) return cached;
+	const getTeamDetails = params.getTeamDetails;
+	if (!getTeamDetails) return;
+	const groupId = (await require_resolve_allowlist.withMSTeamsRequestDeadline({
 		deadline: params.deadline,
-		logger: log
-	});
-	if (!hasMaterializedMedia(mediaList)) {
-		const attachmentIds = extractMSTeamsHtmlAttachmentIds(attachments);
-		const hasHtmlFileAttachment = attachmentIds.length > 0;
-		const hasChannelOrGroupHtml = shouldAttemptMSTeamsGraphMediaFallback({
-			conversationType,
-			htmlSummary,
-			graphMediaFallback: params.graphMediaFallback
-		});
-		const shouldFetchGraphMessage = hasHtmlFileAttachment || hasChannelOrGroupHtml;
-		const isBotFrameworkPersonalChat = isBotFrameworkPersonalChatId(conversationId);
-		if (hasHtmlFileAttachment && isBotFrameworkPersonalChat) {
-			if (!serviceUrl) log.debug?.("bot framework attachment skipped (missing serviceUrl)", {
-				conversationType,
-				conversationId
-			});
-			else {
-				const bfMedia = await downloadMSTeamsBotFrameworkAttachments({
-					serviceUrl,
-					attachmentIds,
-					tokenProvider,
-					maxBytes,
-					allowHosts,
-					authAllowHosts: params.authAllowHosts,
-					deadline: params.deadline
-				});
-				mediaList = mergeMSTeamsMediaFacts(mediaList, bfMedia.media, { positionallyAligned: false });
-				if (!hasMaterializedMedia(bfMedia.media)) log.debug?.("bot framework attachments fetch empty", {
-					conversationType,
-					attachmentCount: bfMedia.attachmentCount ?? attachmentIds.length
-				});
-			}
-		}
-		if (shouldFetchGraphMessage && !isBotFrameworkPersonalChat) {
-			const graphTeamAadGroupId = conversationType.trim().toLowerCase() === "channel" && !teamAadGroupId ? await params.resolveTeamAadGroupId?.() : teamAadGroupId;
-			const messageUrl = buildMSTeamsGraphMessageUrl({
-				conversationType,
-				conversationId,
-				messageId: activity.id ?? void 0,
-				threadRootMessageId: conversationMessageId ?? activity.replyToId,
-				teamAadGroupId: graphTeamAadGroupId,
-				channelId: activity.channelData?.channel?.id
-			});
-			if (!messageUrl) log.debug?.("graph message url unavailable", {
-				conversationType,
-				hasChannelData: Boolean(activity.channelData),
-				messageId: activity.id ?? void 0,
-				replyToId: activity.replyToId ?? void 0
-			});
-			else {
-				const graphMedia = await downloadMSTeamsGraphMedia({
-					messageUrl,
-					tokenProvider,
-					maxBytes,
-					allowHosts,
-					authAllowHosts: params.authAllowHosts,
-					deadline: params.deadline,
-					logger: log
-				});
-				mediaList = mergeMSTeamsMediaFacts(mediaList, graphMedia.media, { positionallyAligned: false });
-				if (!hasMaterializedMedia(mediaList)) log.debug?.("graph media fetch empty", {
-					messageUrl,
-					hostedStatus: graphMedia.hostedStatus,
-					attachmentStatus: graphMedia.attachmentStatus,
-					hostedCount: graphMedia.hostedCount,
-					attachmentCount: graphMedia.attachmentCount,
-					tokenError: graphMedia.tokenError,
-					attachmentIdCount: attachmentIds.length
-				});
-			}
-		}
-	}
-	const materializedCount = mediaList.filter((media) => Boolean(media.path)).length;
-	if (materializedCount > 0) log.debug?.("downloaded attachments", { count: materializedCount });
-	else if (htmlSummary?.imgTags) log.debug?.("inline images detected but none downloaded", {
-		imgTags: htmlSummary.imgTags,
-		srcHosts: htmlSummary.srcHosts,
-		dataImages: htmlSummary.dataImages,
-		cidImages: htmlSummary.cidImages
-	});
-	return mediaList;
+		label: "MS Teams team details",
+		work: () => getTeamDetails(params.conversationTeamId)
+	})).aadGroupId?.trim();
+	if (!groupId) return;
+	cacheTeamGroupId(params.conversationTeamId, groupId);
+	return groupId;
 }
 //#endregion
-//#region extensions/msteams/src/monitor-handler/inbound-content.ts
-async function prepareMSTeamsInboundContent(params) {
-	const activity = params.entry.context.activity;
-	const mayRecoverGraphMedia = Boolean(params.htmlSummary?.attachmentIds.length) || shouldAttemptMSTeamsGraphMediaFallback({
-		conversationType: params.conversationType,
-		htmlSummary: params.htmlSummary,
-		graphMediaFallback: params.graphMediaFallback
+//#region extensions/msteams/src/monitor-handler/config.ts
+function createMSTeamsHandlerConfigReader(deps) {
+	const source = deps.accountPolicyCfg ?? deps.cfg;
+	const read = (0, openclaw_plugin_sdk_runtime_config_snapshot.createRuntimeConfigReader)(source);
+	const originallyConfigured = require_resolve_allowlist.listMSTeamsAccountIds(source).includes(deps.accountId);
+	let lastSource;
+	let lastProjection = deps.cfg;
+	return () => {
+		const current = read();
+		if (current === lastSource) return lastProjection;
+		lastSource = current;
+		if (current === source && deps.accountPolicyCfg) return lastProjection = deps.cfg;
+		const retired = originallyConfigured && !require_resolve_allowlist.listMSTeamsAccountIds(current).includes(deps.accountId);
+		if (deps.accountId === "default" && !current.channels?.msteams?.accounts && !retired) return lastProjection = current;
+		const accountConfig = require_resolve_allowlist.resolveMSTeamsAccountConfig(current, deps.accountId);
+		return lastProjection = require_resolve_allowlist.withAccountScopedMSTeamsConfig({
+			cfg: current,
+			accountId: deps.accountId,
+			accountConfig: {
+				...accountConfig,
+				...current.channels?.msteams?.enabled === false || retired ? { enabled: false } : {}
+			}
+		});
+	};
+}
+//#endregion
+//#region extensions/msteams/src/attachments/bot-framework.ts
+const BOT_FRAMEWORK_SCOPE = "https://api.botframework.com";
+/**
+* Detect Bot Framework personal chat ("a:") and MSA orgid ("8:orgid:") conversation
+* IDs. These identifiers are not recognized by Graph's `/chats/{id}` endpoint, so we
+* must fetch media via the Bot Framework v3 attachments endpoint instead.
+*
+* Graph-compatible IDs start with `19:` and are left untouched by this detector.
+*/
+function isBotFrameworkPersonalChatId(conversationId) {
+	if (typeof conversationId !== "string") return false;
+	const trimmed = conversationId.trim();
+	return trimmed.startsWith("a:") || trimmed.startsWith("8:orgid:");
+}
+async function fetchBotFrameworkAttachment(params, kind) {
+	let response;
+	try {
+		const headers = require_resolve_allowlist.ensureUserAgentHeader();
+		require_resolve_allowlist.applyAuthorizationHeaderForUrl({
+			headers,
+			url: params.url,
+			authAllowHosts: params.policy.authAllowHosts,
+			bearerToken: params.accessToken
+		});
+		response = await require_resolve_allowlist.safeFetchWithPolicy({
+			url: params.url,
+			policy: params.policy,
+			resolveFn: node_dns_promises.lookup,
+			requestInit: { headers },
+			timeoutMs: require_resolve_allowlist.resolveMSTeamsRequestTimeoutMs(params.deadline)
+		});
+	} catch (err) {
+		params.logger?.warn?.(`msteams botFramework ${kind} fetch failed`, { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
+		return;
+	}
+	if (!response.ok) {
+		await response.body?.cancel().catch(() => void 0);
+		params.logger?.warn?.(`msteams botFramework ${kind} non-ok`, { status: response.status });
+		return;
+	}
+	return response;
+}
+async function downloadMSTeamsBotFrameworkAttachment(params) {
+	if (!params.serviceUrl || !params.attachmentId || !params.tokenProvider) return;
+	const tokenProvider = params.tokenProvider;
+	const policy = require_resolve_allowlist.resolveAttachmentFetchPolicy({
+		allowHosts: params.allowHosts,
+		authAllowHosts: params.authAllowHosts
 	});
-	if (!params.rawBody && params.advertisedMedia.length === 0 && !mayRecoverGraphMedia) {
-		params.log.debug?.("skipping empty message after stripping mentions");
-		return null;
+	const baseUrl = `${params.serviceUrl.replace(/\/+$/, "")}/v3/attachments/${encodeURIComponent(params.attachmentId)}`;
+	if (!(0, openclaw_plugin_sdk_ssrf_policy.isHttpsUrlAllowedByHostnameSuffixAllowlist)(baseUrl, policy.allowHosts)) return;
+	let accessToken;
+	try {
+		accessToken = await require_resolve_allowlist.withMSTeamsRequestDeadline({
+			deadline: params.deadline,
+			label: "MS Teams Bot Framework token",
+			work: () => tokenProvider.getAccessToken(BOT_FRAMEWORK_SCOPE)
+		});
+	} catch (err) {
+		params.logger?.warn?.("msteams botFramework token acquisition failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
+		return;
 	}
-	let mediaList = [];
-	const deadline = require_resolve_allowlist.createMSTeamsInboundMediaDeadline();
+	if (!accessToken) return;
+	const request = {
+		url: baseUrl,
+		accessToken,
+		policy,
+		logger: params.logger,
+		deadline: params.deadline
+	};
+	const infoResponse = await fetchBotFrameworkAttachment(request, "attachmentInfo");
+	if (!infoResponse) return;
+	let info;
 	try {
-		mediaList = await require_resolve_allowlist.withMSTeamsRequestDeadline({
-			deadline,
-			label: "MS Teams inbound media",
-			work: () => resolveMSTeamsInboundMedia({
-				attachments: params.entry.attachments,
-				htmlSummary: params.htmlSummary,
-				maxBytes: params.mediaMaxBytes,
-				tokenProvider: params.tokenProvider,
-				allowHosts: params.mediaAllowHosts,
-				authAllowHosts: params.mediaAuthAllowHosts,
-				graphMediaFallback: params.graphMediaFallback,
-				conversationType: params.conversationType,
-				conversationId: params.conversationId,
-				conversationMessageId: params.conversationMessageId,
-				teamAadGroupId: params.teamAadGroupId,
-				resolveTeamAadGroupId: () => params.resolveTeamAadGroupId(deadline),
-				serviceUrl: activity.serviceUrl,
-				activity: {
-					id: activity.id,
-					replyToId: activity.replyToId,
-					channelData: activity.channelData
-				},
-				log: params.log,
-				deadline
-			})
+		info = await (0, openclaw_plugin_sdk_provider_http.readProviderJsonResponse)(infoResponse, "msteams botFramework attachmentInfo");
+	} catch (err) {
+		request.logger?.warn?.("msteams botFramework attachmentInfo parse failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
+		return;
+	}
+	if (!info) return;
+	const views = Array.isArray(info.views) ? info.views : [];
+	const candidateView = views.find((view) => view?.viewId === "original") ?? views.find((view) => typeof view?.viewId === "string");
+	const viewId = typeof candidateView?.viewId === "string" && candidateView.viewId ? candidateView.viewId : void 0;
+	if (!viewId) return;
+	if (typeof candidateView?.size === "number" && candidateView.size > 0 && candidateView.size > params.maxBytes) return;
+	const fileNameHint = typeof info.name === "string" && info.name || void 0;
+	const contentTypeHint = typeof info.type === "string" && info.type || void 0;
+	const viewUrl = `${baseUrl}/views/${encodeURIComponent(viewId)}`;
+	const maxBytes = params.maxBytes;
+	const response = await fetchBotFrameworkAttachment({
+		...request,
+		url: viewUrl
+	}, "attachmentView");
+	if (!response) return;
+	let saved;
+	try {
+		saved = await require_runtime.getMSTeamsRuntime().channel.media.saveResponseMedia(response, {
+			sourceUrl: viewUrl,
+			filePathHint: fileNameHint,
+			maxBytes,
+			fallbackContentType: contentTypeHint,
+			subdir: "inbound"
 		});
 	} catch (err) {
-		params.log.debug?.("failed to resolve inbound Teams media", { error: require_channel_setup.formatUnknownError(err) });
+		request.logger?.warn?.("msteams botFramework attachmentView save failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
+		return;
+	} finally {
+		await response.body?.cancel().catch(() => void 0);
 	}
-	const inboundMedia = mergeMSTeamsMediaFacts(params.advertisedMedia, mediaList);
-	const nativeMediaForComparison = [...params.advertisedMedia, ...mediaList.slice(params.advertisedMedia.length).map((media) => ({
-		contentType: media.contentType,
-		kind: media.kind
-	}))];
-	const agentBody = resolveMSTeamsInboundMediaBody({
-		body: params.rawBody,
-		nativeMedia: nativeMediaForComparison,
-		materializedMedia: inboundMedia
-	});
-	if (!agentBody && inboundMedia.length === 0) {
-		params.log.debug?.("skipping empty message after Graph media recovery");
-		return null;
+	if (!saved) return;
+	return {
+		path: saved.path,
+		contentType: saved.contentType,
+		kind: require_resolve_allowlist.resolveMSTeamsMediaKind({
+			contentType: saved.contentType,
+			fileName: fileNameHint
+		})
+	};
+}
+/**
+* Download media for every attachment referenced by a Bot Framework personal
+* chat activity. Returns all successfully fetched media along with diagnostics
+* compatible with `downloadMSTeamsGraphMedia`'s result shape so callers can
+* reuse the existing logging path.
+*/
+async function downloadMSTeamsBotFrameworkAttachments(params) {
+	const unique = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeUniqueTrimmedStringList)(params.attachmentIds);
+	if (unique.length === 0 || !params.serviceUrl || !params.tokenProvider) return {
+		media: [],
+		attachmentCount: unique.length
+	};
+	const media = [];
+	for (const attachmentId of unique) try {
+		const item = await downloadMSTeamsBotFrameworkAttachment({
+			...params,
+			attachmentId
+		});
+		if (item) media.push({
+			...item,
+			sourceId: attachmentId
+		});
+		else media.push({
+			kind: "document",
+			sourceId: attachmentId
+		});
+	} catch (err) {
+		media.push({
+			kind: "document",
+			sourceId: attachmentId
+		});
+		params.logger?.warn?.("msteams botFramework attachment download failed", {
+			error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err),
+			attachmentId
+		});
 	}
 	return {
-		agentBody,
-		inboundMedia
+		media,
+		attachmentCount: unique.length
 	};
 }
 //#endregion
-//#region extensions/msteams/src/informative-status.ts
-const INFORMATIVE_MAX_CHARS = 1e3;
-const INFORMATIVE_MAX_BYTES = 1024;
-const ELLIPSIS = "…";
-const segmenter = new Intl.Segmenter(void 0, { granularity: "grapheme" });
-const utf8 = new TextEncoder();
-function flattenInformativeStatus(text) {
-	const joined = text.split("\n").map((line) => line.trim().replace(/^[•-]\s+/u, "")).filter(Boolean).join(" · ");
-	if (joined.length <= INFORMATIVE_MAX_CHARS && utf8.encode(joined).length <= INFORMATIVE_MAX_BYTES) return joined;
-	const graphemes = Array.from(segmenter.segment(joined), (s) => s.segment);
-	let chars = 1;
-	let bytes = utf8.encode(ELLIPSIS).length;
-	let start = graphemes.length;
-	while (start > 0) {
-		const next = graphemes[start - 1];
-		const nextBytes = utf8.encode(next).length;
-		if (chars + next.length > INFORMATIVE_MAX_CHARS || bytes + nextBytes > INFORMATIVE_MAX_BYTES) break;
-		chars += next.length;
-		bytes += nextBytes;
-		start -= 1;
+//#region extensions/msteams/src/attachments/html.ts
+function collectHtmlAttachmentIds(html, ids) {
+	for (const value of require_resolve_allowlist.htmlTagAttributeValues(html, "attachment", "id")) {
+		const id = value.trim();
+		if (id) ids.add(id);
 	}
-	return ELLIPSIS + graphemes.slice(start).join("");
 }
-//#endregion
-//#region extensions/msteams/src/reply-stream-controller.ts
-function isStreamCancelledError(err) {
-	return err instanceof Error && err.name === "StreamCancelledError";
+/**
+* Extract every `<attachment id="...">` reference from the HTML attachments in
+* the inbound activity. Returns the complete (non-sliced) list; callers that
+* need a capped diagnostic summary can truncate after calling this helper.
+*/
+function extractMSTeamsHtmlAttachmentIds(attachments) {
+	const list = attachments ?? [];
+	const ids = /* @__PURE__ */ new Set();
+	for (const att of list) {
+		const html = require_resolve_allowlist.extractHtmlFromAttachment(att);
+		if (!html) continue;
+		collectHtmlAttachmentIds(html, ids);
+	}
+	return Array.from(ids);
 }
-/** Bridge reply callbacks to the SDK stream; shared conversations use block delivery. */
-function createTeamsReplyStreamController(params) {
-	const isPersonal = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(params.conversationType) === "personal";
-	const streamMode = (0, openclaw_plugin_sdk_channel_outbound.resolveChannelPreviewStreamMode)(params.msteamsConfig, "partial");
-	const stream = params.allowProviderPreview && isPersonal && (streamMode === "partial" || streamMode === "progress") ? params.context.stream : void 0;
-	let tokensEmitted = false;
-	let nativeDispatchStarted = false;
-	let nativeDeliveryClaimed = false;
-	let streamFinalizationPending = false;
-	let canceledLocally = false;
-	let pendingFinalPayload;
-	let emittedText = "";
-	let acknowledgedText = "";
-	let acknowledgedLogicalText = "";
-	let acknowledgedStreamId;
-	let replacementFinalPending = false;
-	let replacementSettlementPending = false;
-	let replacementTextAwaitingAcknowledgement;
-	let deferredReplacementEntries = [];
-	let queuedFinalActivity;
-	const streamEvents = stream?.events;
-	let streamChunkSubscription;
-	if (typeof streamEvents?.on === "function" && typeof streamEvents.off === "function") streamChunkSubscription = streamEvents.on("chunk", (activity) => {
-		const replacementAcknowledgementPending = replacementTextAwaitingAcknowledgement !== void 0;
-		const replacementAcknowledgement = typeof activity.text === "string" && replacementAcknowledgementPending && activity.text === replacementTextAwaitingAcknowledgement?.text;
-		if (activity.type !== "typing" || activity.channelData?.streamType !== "streaming" || !activity.id || !activity.text || acknowledgedStreamId !== void 0 && activity.id !== acknowledgedStreamId || (replacementAcknowledgementPending ? !replacementAcknowledgement : !activity.text.startsWith(acknowledgedText)) || !replacementAcknowledgement && !emittedText.startsWith(activity.text)) return;
-		acknowledgedStreamId = activity.id;
-		acknowledgedText = activity.text;
-		acknowledgedLogicalText = replacementAcknowledgement ? replacementTextAwaitingAcknowledgement.logicalText : activity.text;
-		if (replacementAcknowledgement) replacementTextAwaitingAcknowledgement = void 0;
-	});
-	const wasCanceled = () => canceledLocally || Boolean(stream?.canceled);
-	const releaseStreamChunkSubscription = () => {
-		if (streamChunkSubscription === void 0) return;
-		streamEvents?.off(streamChunkSubscription);
-		streamChunkSubscription = void 0;
-	};
-	const acknowledgedNativeDelivery = () => {
-		if (!acknowledgedStreamId || !acknowledgedText) return { visibleReplySent: false };
-		return {
-			visibleReplySent: true,
-			content: acknowledgedText,
-			messageId: acknowledgedStreamId
-		};
-	};
-	const fallbackPayloadAfterAcknowledgedText = (payload) => {
-		if (!acknowledgedLogicalText || typeof payload.text !== "string" || !payload.text.startsWith(acknowledgedLogicalText)) return payload;
-		const remainingText = payload.text.slice(acknowledgedLogicalText.length);
-		const hasMedia = Boolean(payload.mediaUrl || payload.mediaUrls?.length);
-		if (!remainingText && !hasMedia) return;
-		return {
-			...payload,
-			text: remainingText || void 0
-		};
-	};
-	const fallbackPayloadForSuppressedFinal = (payload) => {
-		return Boolean(payload.mediaUrl || payload.mediaUrls?.length) ? {
-			...payload,
-			mediaUrl: void 0,
-			mediaUrls: void 0
-		} : payload;
-	};
-	const finalStreamActivity = (text) => ({
-		...require_conversation_store_state.buildMSTeamsMessageActivity(text === void 0 ? void 0 : require_conversation_store_state.formatMSTeamsMarkdown(text, params.tableMode ?? "code")),
-		channelData: params.feedbackLoopEnabled ? { feedbackLoopEnabled: true } : {}
-	});
-	const queueFinalReplacement = (activeStream, text) => {
-		const activity = finalStreamActivity(text);
-		replacementTextAwaitingAcknowledgement = {
-			text: activity.text,
-			logicalText: text
-		};
-		activeStream.emit(activity);
-		queuedFinalActivity = activity;
-		emittedText = text;
-	};
-	const deferredReplacementLogicalContent = () => {
-		return deferredReplacementEntries.map((entry) => entry.payload.text).filter((text) => Boolean(text)).join("\n") || void 0;
-	};
-	const deferredReplacementPayloads = (replacementFallback) => deferredReplacementEntries.flatMap((entry) => {
-		if (entry.kind === "payload") return [entry.payload];
-		const hasMedia = Boolean(entry.payload.mediaUrl || entry.payload.mediaUrls?.length);
-		const text = replacementFallback?.text;
-		if (!text && !hasMedia) return [];
-		return [{
-			...entry.payload,
-			text: text || void 0
-		}];
-	});
-	const finalizeWithoutReceipt = (logicalContent, canceled = false) => {
-		const fallback = pendingFinalPayload && !canceled ? fallbackPayloadAfterAcknowledgedText(pendingFinalPayload) : void 0;
-		const postNativePayloads = replacementSettlementPending && !canceled ? deferredReplacementPayloads(fallback) : [];
-		return {
-			...acknowledgedNativeDelivery(),
-			...!canceled && logicalContent ? { logicalContent } : {},
-			...!replacementSettlementPending && fallback ? { fallbackPayload: fallback } : {},
-			...postNativePayloads.length > 0 ? { postNativePayloads } : {}
-		};
-	};
-	const progressDraft = (0, openclaw_plugin_sdk_channel_outbound.createChannelProgressDraftCompositor)({
-		preparedItems: true,
-		formatPlainText: (text) => text,
-		entry: params.msteamsConfig,
-		mode: streamMode,
-		active: Boolean(stream) && streamMode === "progress",
-		seed: params.progressSeed ?? "msteams",
-		update: (text) => {
-			if (!stream || wasCanceled() || streamFinalizationPending) return false;
-			try {
-				stream.update(flattenInformativeStatus(text));
-				return true;
-			} catch (err) {
-				if (isStreamCancelledError(err)) canceledLocally = true;
-				else params.log?.debug?.(`stream informative update failed: ${(0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)}`);
-				return false;
+function summarizeMSTeamsHtmlAttachments(attachments) {
+	const list = attachments ?? [];
+	let htmlAttachments = 0;
+	let imgTags = 0;
+	let dataImages = 0;
+	let cidImages = 0;
+	const srcHosts = /* @__PURE__ */ new Set();
+	const attachmentIds = /* @__PURE__ */ new Set();
+	for (const att of list) {
+		const html = require_resolve_allowlist.extractHtmlFromAttachment(att);
+		if (!html) continue;
+		htmlAttachments += 1;
+		for (const value of require_resolve_allowlist.htmlTagAttributeValues(html, "img", "src")) {
+			imgTags += 1;
+			const src = value.trim();
+			if (src) {
+				if (src.startsWith("data:")) dataImages += 1;
+				else if (src.startsWith("cid:")) cidImages += 1;
+				else srcHosts.add(require_resolve_allowlist.safeHostForUrl(src));
 			}
 		}
-	});
+		collectHtmlAttachmentIds(html, attachmentIds);
+	}
+	if (htmlAttachments === 0) return;
 	return {
-		onPartialReply(payload) {
-			if (!stream || !payload.text || wasCanceled() || streamMode !== "partial") return;
-			if (replacementSettlementPending && replacementFinalPending) {
-				pendingFinalPayload = { text: payload.text };
-				return;
-			}
-			if (streamFinalizationPending || nativeDeliveryClaimed) return;
-			const fullText = payload.text;
-			let prefixLength = 0;
-			while (prefixLength < emittedText.length && prefixLength < fullText.length && emittedText[prefixLength] === fullText[prefixLength]) prefixLength += 1;
-			const previousRemainder = emittedText.slice(prefixLength);
-			const delta = fullText.slice(prefixLength);
-			if (!delta) return;
-			if (previousRemainder.trim()) {
-				stream.clearText();
-				replacementFinalPending = true;
-				replacementSettlementPending = true;
-				pendingFinalPayload = { text: fullText };
-				streamFinalizationPending = true;
-				return;
-			}
-			try {
-				stream.emit(delta);
-				emittedText = fullText;
-				tokensEmitted = true;
-				nativeDispatchStarted = true;
-			} catch (err) {
-				if (isStreamCancelledError(err)) {
-					canceledLocally = true;
-					return;
-				}
-				throw err;
-			}
-		},
-		pushItemEvent: progressDraft.pushItemEvent.bind(progressDraft),
-		pushToolEvent: progressDraft.pushToolEvent,
-		pushReasoningProgress: progressDraft.pushReasoningProgress.bind(progressDraft),
-		resetReasoningProgress: progressDraft.resetReasoningProgress,
-		pushApprovalEvent: progressDraft.pushApprovalEvent.bind(progressDraft),
-		pushPlanProgress: progressDraft.pushPlanProgress.bind(progressDraft),
-		preparePayload(payload) {
-			if (!stream) return payload;
-			if (wasCanceled()) return;
-			if (payload.text) progressDraft.markFinalReplyStarted();
-			if (replacementSettlementPending) {
-				if (!replacementFinalPending || !payload.text) {
-					deferredReplacementEntries.push({
-						kind: "payload",
-						payload
-					});
-					return;
-				}
-				replacementFinalPending = false;
-				deferredReplacementEntries.push({
-					kind: "replacement",
-					payload
-				});
-				pendingFinalPayload = fallbackPayloadForSuppressedFinal(payload);
-				try {
-					queueFinalReplacement(stream, payload.text);
-					tokensEmitted = false;
-					return;
-				} catch (err) {
-					replacementTextAwaitingAcknowledgement = void 0;
-					tokensEmitted = false;
-					if (isStreamCancelledError(err)) {
-						canceledLocally = true;
-						pendingFinalPayload = void 0;
-						deferredReplacementEntries = [];
-						return;
-					}
-					throw err;
-				}
-			}
-			if (streamMode === "progress" && payload.text && !nativeDispatchStarted) try {
-				stream.emit(payload.text);
-				emittedText = payload.text;
-				nativeDispatchStarted = true;
-				tokensEmitted = true;
-			} catch (err) {
-				if (isStreamCancelledError(err)) {
-					canceledLocally = true;
-					return;
-				}
-				throw err;
-			}
-			if (tokensEmitted) {
-				const hasMedia = Boolean(payload.mediaUrl || payload.mediaUrls?.length);
-				pendingFinalPayload = fallbackPayloadForSuppressedFinal(payload);
-				streamFinalizationPending = true;
-				tokensEmitted = false;
-				return hasMedia ? {
-					...payload,
-					text: void 0
-				} : void 0;
-			}
-			return payload;
-		},
-		claimNativeDelivery() {
-			if (!nativeDispatchStarted || nativeDeliveryClaimed) return false;
-			nativeDeliveryClaimed = true;
-			return true;
-		},
-		async finalize() {
-			progressDraft.markFinalReplyStarted();
-			if (!stream || !nativeDispatchStarted) {
-				releaseStreamChunkSubscription();
-				return { visibleReplySent: false };
-			}
-			let logicalContent;
-			try {
-				if (wasCanceled() || !streamFinalizationPending) return acknowledgedNativeDelivery();
-				if (replacementSettlementPending && replacementFinalPending && pendingFinalPayload?.text) {
-					replacementFinalPending = false;
-					deferredReplacementEntries.push({
-						kind: "replacement",
-						payload: pendingFinalPayload
-					});
-					logicalContent = deferredReplacementLogicalContent();
-					queueFinalReplacement(stream, pendingFinalPayload.text);
-				}
-				logicalContent ??= replacementSettlementPending ? deferredReplacementLogicalContent() : void 0;
-				const logicalText = pendingFinalPayload?.text ?? (emittedText || void 0);
-				const finalActivity = queuedFinalActivity ?? finalStreamActivity(logicalText);
-				const content = finalActivity.text;
-				logicalContent ??= content !== logicalText ? logicalText : void 0;
-				if (!queuedFinalActivity) {
-					if (content !== void 0 && content !== emittedText) {
-						stream.clearText();
-						replacementTextAwaitingAcknowledgement = {
-							text: content,
-							logicalText
-						};
-						stream.emit(finalActivity);
-					} else stream.emit({
-						...finalActivity,
-						text: void 0
-					});
-				}
-				const result = await stream.close();
-				if (!result) return finalizeWithoutReceipt(logicalContent, wasCanceled());
-				const messageId = require_conversation_store_state.extractMessageId(result) ?? acknowledgedStreamId;
-				const postNativePayloads = replacementSettlementPending ? deferredReplacementPayloads(void 0) : [];
-				return {
-					visibleReplySent: true,
-					...content === void 0 ? {} : { content },
-					...logicalContent ? { logicalContent } : {},
-					...messageId ? { messageId } : {},
-					...postNativePayloads.length > 0 ? { postNativePayloads } : {}
-				};
-			} catch (err) {
-				if (isStreamCancelledError(err)) {
-					canceledLocally = true;
-					return acknowledgedNativeDelivery();
-				}
-				params.log?.warn?.(`msteams stream finalize failed: ${(0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)}`);
-				return finalizeWithoutReceipt(logicalContent);
-			} finally {
-				pendingFinalPayload = void 0;
-				streamFinalizationPending = false;
-				queuedFinalActivity = void 0;
-				replacementFinalPending = false;
-				replacementSettlementPending = false;
-				replacementTextAwaitingAcknowledgement = void 0;
-				deferredReplacementEntries = [];
-				releaseStreamChunkSubscription();
-			}
-		},
-		hasStream() {
-			return Boolean(stream);
-		},
-		isStreamActive() {
-			return Boolean(stream) && tokensEmitted && !wasCanceled();
-		},
-		wasCanceled
+		htmlAttachments,
+		imgTags,
+		dataImages,
+		cidImages,
+		srcHosts: Array.from(srcHosts).slice(0, 5),
+		attachmentIds: Array.from(attachmentIds).slice(0, 5)
 	};
 }
+function resolveUnrepresentedHtmlAttachmentIds(attachments) {
+	const representedIds = /* @__PURE__ */ new Set();
+	for (const attachment of attachments) {
+		if ((require_resolve_allowlist.normalizeContentType(attachment.contentType) ?? "").startsWith("text/html")) continue;
+		const id = attachment.id?.trim();
+		if (id) representedIds.add(id);
+	}
+	return extractMSTeamsHtmlAttachmentIds(attachments).filter((id) => !representedIds.has(id));
+}
+function createAdvertisedMediaFact(kind, sourceId) {
+	return {
+		kind,
+		...sourceId ? { sourceId } : {}
+	};
+}
+function resolveMSTeamsAdvertisedMedia(attachments) {
+	const list = attachments ?? [];
+	const fileAttachments = list.filter(require_resolve_allowlist.isAdvertisedFileAttachment);
+	const inlineMedia = require_resolve_allowlist.extractInlineImageReferences(list).map((candidate) => createAdvertisedMediaFact("image", candidate.sourceId));
+	const htmlAttachmentIds = resolveUnrepresentedHtmlAttachmentIds(list);
+	return [
+		...fileAttachments.map((attachment) => createAdvertisedMediaFact(require_resolve_allowlist.isLikelyImageAttachment(attachment) ? "image" : require_resolve_allowlist.resolveMSTeamsMediaKind({
+			contentType: require_resolve_allowlist.normalizeContentType(attachment.contentType),
+			fileName: attachment.name ?? void 0
+		}), attachment.id?.trim() || void 0)),
+		...inlineMedia,
+		...htmlAttachmentIds.map((sourceId) => createAdvertisedMediaFact("document", sourceId))
+	];
+}
+//#endregion
+//#region extensions/msteams/src/attachments/remote-media.ts
+/**
+* Direct save path used when the caller supplies the already-guarded fetch
+* implementation. This lets Teams-specific auth fallback own the request
+* sequence while keeping redirect and DNS pinning inside `safeFetchWithPolicy`.
+*/
+async function downloadAndStoreMSTeamsRemoteMedia(params) {
+	const response = await params.fetchImpl(params.url, { redirect: "follow" });
+	try {
+		const saved = await (0, openclaw_plugin_sdk_media_runtime.saveResponseMedia)(response, {
+			sourceUrl: params.url,
+			filePathHint: params.filePathHint,
+			maxBytes: params.maxBytes,
+			fallbackContentType: params.contentTypeHint
+		});
+		return {
+			path: saved.path,
+			contentType: saved.contentType,
+			kind: params.kind ?? require_resolve_allowlist.resolveMSTeamsMediaKind({
+				contentType: saved.contentType,
+				fileName: params.filePathHint
+			})
+		};
+	} finally {
+		await response.body?.cancel().catch(() => void 0);
+	}
+}
 //#endregion
-//#region extensions/msteams/src/reply-dispatcher.ts
-function createMSTeamsReplyDispatcher(params) {
-	const core = require_runtime.getMSTeamsRuntime();
-	const msteamsCfg = require_resolve_allowlist.resolveMSTeamsAccountConfig(params.cfg, params.accountId);
-	const mediaMaxBytes = (0, openclaw_plugin_sdk_account_helpers.resolveChannelMediaMaxBytes)({
-		cfg: params.cfg,
-		resolveChannelLimitMb: () => msteamsCfg.mediaMaxMb
-	});
-	const feedbackLoopEnabled = msteamsCfg.feedbackEnabled !== false;
-	const conversationType = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(params.conversationRef.conversation?.conversationType);
-	const isTypingSupported = conversationType === "personal" || conversationType === "groupchat";
-	const TYPING_KEEPALIVE_INTERVAL_MS = 8e3;
-	const TYPING_KEEPALIVE_MAX_DURATION_MS = 6e5;
-	const sendTypingIndicator = async () => {
-		if (!isTypingSupported || streamController.isStreamActive() || streamController.wasCanceled()) return;
-		await require_conversation_store_state.withRevokedProxyFallback({
-			run: async () => {
-				await params.context.sendActivity({ type: "typing" });
-			},
-			onRevoked: async () => {
-				await require_conversation_store_state.sendMSTeamsActivityWithReference(params.app, require_conversation_store_state.buildConversationReference(params.conversationRef), { type: "typing" }, {
-					accountId: params.accountId,
-					serviceUrlBoundary: require_resolve_allowlist.resolveMSTeamsSdkCloudOptions(msteamsCfg)
-				});
-			},
-			onRevokedLog: () => {
-				params.log.debug?.("turn context revoked, sending typing via proactive messaging");
-			}
-		});
+//#region extensions/msteams/src/attachments/download.ts
+function resolveDownloadCandidate(att, graphReferenceToken) {
+	const contentType = require_resolve_allowlist.normalizeContentType(att.contentType);
+	const graphReference = graphReferenceToken !== void 0 && contentType === "reference";
+	const name = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(att.name) ?? "";
+	if (contentType === "application/vnd.microsoft.teams.file.download.info") {
+		if (!(0, openclaw_plugin_sdk_string_coerce_runtime.isRecord)(att.content)) return null;
+		const downloadUrl = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(att.content.downloadUrl) ?? "";
+		if (!downloadUrl) return null;
+		const fileType = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(att.content.fileType) ?? "";
+		const uniqueId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(att.content.uniqueId) ?? "";
+		const fileName = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(att.content.fileName) ?? "";
+		const fileHint = name || fileName || (uniqueId && fileType ? `${uniqueId}.${fileType}` : "");
+		return {
+			kind: "remote",
+			mediaKind: require_resolve_allowlist.resolveMSTeamsMediaKind({
+				contentType,
+				fileName: fileHint,
+				fileType
+			}),
+			url: downloadUrl,
+			fileHint: fileHint || void 0,
+			contentTypeHint: void 0,
+			sourceId: att.id?.trim() || void 0
+		};
+	}
+	const contentUrl = graphReference ? att.contentUrl ?? "" : (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(att.contentUrl) ?? "";
+	if (!contentUrl) return null;
+	const sharesUrl = graphReference ? `${require_resolve_allowlist.GRAPH_ROOT}/shares/${require_resolve_allowlist.encodeGraphShareId(contentUrl)}/driveItem/content` : require_resolve_allowlist.tryBuildGraphSharesUrlForSharedLink(contentUrl);
+	const resolvedUrl = sharesUrl ?? contentUrl;
+	const resolvedContentTypeHint = graphReference ? "application/octet-stream" : sharesUrl ? void 0 : contentType;
+	return {
+		kind: "remote",
+		mediaKind: require_resolve_allowlist.resolveMSTeamsMediaKind({
+			contentType,
+			fileName: name
+		}),
+		url: resolvedUrl,
+		fileHint: graphReference ? att.name ?? void 0 : name || void 0,
+		contentTypeHint: resolvedContentTypeHint,
+		sourceId: att.id?.trim() || void 0,
+		graphReference
 	};
-	const { onModelSelected, typingCallbacks, ...replyPipeline } = (0, openclaw_plugin_sdk_channel_outbound.createChannelMessageReplyPipeline)({
-		cfg: params.cfg,
-		agentId: params.agentId,
-		channel: "msteams",
-		accountId: params.accountId,
-		typing: {
-			start: sendTypingIndicator,
-			keepaliveIntervalMs: TYPING_KEEPALIVE_INTERVAL_MS,
-			maxDurationMs: TYPING_KEEPALIVE_MAX_DURATION_MS,
-			onStartError: (err) => {
-				(0, openclaw_plugin_sdk_channel_outbound.logTypingFailure)({
-					log: (message) => params.log.debug?.(message),
-					channel: "msteams",
-					action: "start",
-					error: err
-				});
-			}
-		}
+}
+function scopeCandidatesForUrl(url) {
+	const host = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(URL.parse(url)?.hostname);
+	return host.endsWith("graph.microsoft.com") || host.endsWith("sharepoint.com") || host.endsWith("1drv.ms") || host.includes("sharepoint") ? ["https://graph.microsoft.com", "https://api.botframework.com"] : ["https://api.botframework.com", "https://graph.microsoft.com"];
+}
+function canonicalizeInlineBase64Payload(value) {
+	let cleaned = "";
+	for (const char of value) if (char.charCodeAt(0) > 32) cleaned += char;
+	return cleaned.length % 4 === 0 && /^[A-Za-z0-9+/]+={0,2}$/.test(cleaned) ? cleaned : void 0;
+}
+async function resolveInlineDataImageMime(inline) {
+	const detectedMime = await require_runtime.getMSTeamsRuntime().media.detectMime({
+		buffer: inline.data,
+		headerMime: inline.contentType
 	});
-	const chunkMode = core.channel.text.resolveChunkMode(params.cfg, "msteams", params.accountId);
-	const tableMode = core.channel.text.resolveMarkdownTableMode({
-		cfg: params.cfg,
-		channel: "msteams",
-		accountId: params.accountId
+	const mime = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(detectedMime ?? inline.contentType);
+	return mime?.startsWith("image/") ? mime : void 0;
+}
+async function downloadMSTeamsAttachments(params) {
+	const list = params.attachments ?? [];
+	if (list.length === 0) return [];
+	const policy = require_resolve_allowlist.resolveAttachmentFetchPolicy({
+		allowHosts: params.allowHosts,
+		authAllowHosts: params.authAllowHosts
 	});
-	const hookRunner = (0, openclaw_plugin_sdk_plugin_runtime.getGlobalHookRunner)();
-	const streamController = createTeamsReplyStreamController({
-		tableMode,
-		allowProviderPreview: !((hookRunner?.hasHooks("reply_payload_sending") ?? false) || (hookRunner?.hasHooks("message_sending") ?? false)),
-		conversationType,
-		context: params.context,
-		feedbackLoopEnabled,
-		log: params.log,
-		msteamsConfig: msteamsCfg,
-		progressSeed: `${params.accountId ?? "default"}:${params.conversationRef.conversation?.id ?? ""}`
+	const allowHosts = policy.allowHosts;
+	const candidates = list.filter(require_resolve_allowlist.isAdvertisedFileAttachment).map((attachment) => {
+		return (require_resolve_allowlist.isDownloadableAttachment(attachment) ? resolveDownloadCandidate(attachment, params.graphReferenceToken) : null) ?? {
+			kind: "unavailable",
+			mediaKind: require_resolve_allowlist.resolveMSTeamsMediaKind({
+				contentType: require_resolve_allowlist.normalizeContentType(attachment.contentType),
+				fileName: attachment.name ?? void 0
+			}),
+			sourceId: attachment.id?.trim() || void 0
+		};
 	});
-	const teamsStreamMode = (0, openclaw_plugin_sdk_channel_outbound.resolveChannelPreviewStreamMode)(msteamsCfg, "partial");
-	const blockStreamingResolved = teamsStreamMode === "block" ? true : (0, openclaw_plugin_sdk_channel_outbound.resolveChannelStreamingBlockEnabled)(msteamsCfg);
-	const blockStreamingEnabled = blockStreamingResolved ?? false;
-	const typingIndicatorEnabled = typeof msteamsCfg?.typingIndicator === "boolean" ? msteamsCfg.typingIndicator : true;
-	const pendingDeliveries = [];
-	let pendingSettlement;
-	const findPendingNativeDelivery = () => pendingDeliveries.find((candidate) => !candidate.nativeSettled);
-	const queueDeliveryFailureSystemEvent = (failure) => {
-		const classification = require_channel_setup.classifyMSTeamsSendError(failure.error);
-		const errorText = require_channel_setup.formatUnknownError(failure.error);
-		const failedAll = failure.failed >= failure.total;
-		const ambiguous = classification.kind === "ambiguous";
-		const sentences = [
-			`Microsoft Teams delivery failed: ${ambiguous ? failedAll ? "the delivery outcome is unknown for the previous reply" : `the delivery outcome is unknown for ${failure.failed} of ${failure.total} message blocks` : failedAll ? "the previous reply was not delivered" : `${failure.failed} of ${failure.total} message blocks were not delivered`}.`,
-			ambiguous ? void 0 : `The user may not have received ${failedAll ? "that reply" : "the full reply"}.`,
-			`Error: ${errorText}.`,
-			classification.statusCode != null ? `Status: ${classification.statusCode}.` : void 0,
-			require_channel_setup.formatMSTeamsDeliveryFailureGuidance(classification)
-		].filter(Boolean);
-		core.system.enqueueSystemEvent(sentences.join(" "), {
-			sessionKey: params.sessionKey,
-			contextKey: `msteams:delivery-failure:${params.conversationRef.conversation?.id ?? "unknown"}`
-		});
-	};
-	const renderReplyPayload = (payload) => {
-		return require_conversation_store_state.renderReplyPayloadsToMessages([payload], {
-			textChunkLimit: params.textLimit,
-			tableMode,
-			chunkMode
-		});
-	};
-	const settlePendingDelivery = (delivery) => {
-		if (delivery.settled || !delivery.blockSettled || !delivery.nativeSettled) return;
-		delivery.settled = true;
-		const acceptedParts = [...delivery.nativeResult ? [delivery.nativeResult] : [], ...delivery.blockResults];
-		const messageIds = acceptedParts.flatMap((part) => part.messageIds);
-		const content = delivery.errors.length > 0 ? acceptedParts.map((part) => part.content).filter(Boolean).join("\n") : delivery.content;
-		const outcome = {
-			visibleReplySent: acceptedParts.length > 0,
-			...messageIds.length > 0 ? { messageIds } : {},
-			...acceptedParts.length > 0 && content !== void 0 ? { content } : {}
+	const maxInlineBytes = params.maxBytes;
+	candidates.push(...require_resolve_allowlist.extractInlineImageReferences(list).map((candidate) => {
+		if (candidate.kind === "url") return {
+			kind: "remote",
+			mediaKind: "image",
+			url: candidate.url,
+			fileHint: candidate.fileHint,
+			contentTypeHint: candidate.contentType,
+			sourceId: candidate.sourceId
 		};
-		if (delivery.errors.length === 0) {
-			delivery.finalization.resolve(outcome);
-			return;
-		}
-		const error = delivery.errors.find((candidate) => !(candidate instanceof openclaw_plugin_sdk_error_runtime.PlatformMessageNotDispatchedError)) ?? delivery.errors[0];
-		delivery.finalization.reject(outcome.visibleReplySent ? (0, openclaw_plugin_sdk_channel_inbound.createChannelPartialDeliveryError)(error, {
-			...outcome,
-			visibleReplySent: true
-		}) : error);
-	};
-	const flushPendingMessages = async () => {
-		for (const delivery of pendingDeliveries) {
-			if (delivery.blockSettled) continue;
-			const toSend = delivery.messages.splice(0);
-			const total = toSend.length;
-			let failed = 0;
-			let lastFailedError;
-			const sentIds = [];
-			for (const msg of toSend) try {
-				const msgIds = await require_conversation_store_state.sendMSTeamsMessages({
-					accountId: params.accountId,
-					replyStyle: params.replyStyle,
-					app: params.app,
-					conversationRef: params.conversationRef,
-					context: params.context,
-					messages: [msg],
-					onRetry: (event) => {
-						params.log.debug?.("retrying send", {
-							replyStyle: params.replyStyle,
-							...event
-						});
-					},
-					tokenProvider: params.tokenProvider,
-					sharePointSiteId: params.sharePointSiteId,
-					mediaMaxBytes,
-					feedbackLoopEnabled,
-					serviceUrlBoundary: require_resolve_allowlist.resolveMSTeamsSdkCloudOptions(msteamsCfg)
-				});
-				const validIds = msgIds.filter((id) => id.trim() && id !== "unknown");
-				if (msgIds.length > 0) delivery.blockResults.push({
-					messageIds: validIds,
-					...msg.text ? { content: msg.text } : {}
-				});
-				sentIds.push(...validIds);
-			} catch (msgError) {
-				failed += 1;
-				lastFailedError = msgError;
-				delivery.errors.push(msgError);
-				params.log.debug?.("individual message send failed, continuing with remaining blocks");
+		return Object.assign(candidate, { mediaKind: "image" });
+	}));
+	for (const sourceId of resolveUnrepresentedHtmlAttachmentIds(list)) candidates.push({
+		kind: "unavailable",
+		mediaKind: "document",
+		sourceId
+	});
+	if (candidates.length === 0) return [];
+	let totalInlineBytes = 0;
+	const downloadCandidate = async (candidate) => {
+		if (candidate.kind === "unavailable") return;
+		if (candidate.kind === "data") {
+			const match = /^data:(image\/[a-z0-9.+-]+)?(;base64)?,(.*)$/i.exec(candidate.src);
+			if (!match) return;
+			const declaredContentType = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(match[1] ?? "");
+			if (!Boolean(match[2])) return;
+			const canonicalPayload = canonicalizeInlineBase64Payload(match[3] ?? "");
+			if (!canonicalPayload) return;
+			const estimatedBytes = Buffer.byteLength(canonicalPayload, "base64");
+			if (estimatedBytes <= 0 || estimatedBytes > maxInlineBytes || totalInlineBytes + estimatedBytes > maxInlineBytes) return;
+			const decoded = {
+				data: Buffer.from(canonicalPayload, "base64"),
+				contentType: declaredContentType,
+				estimatedBytes
+			};
+			totalInlineBytes += decoded.estimatedBytes;
+			try {
+				const contentType = await resolveInlineDataImageMime(decoded);
+				if (!contentType) return;
+				const saved = await require_runtime.getMSTeamsRuntime().channel.media.saveMediaBuffer(decoded.data, contentType, "inbound", params.maxBytes);
+				return {
+					path: saved.path,
+					contentType: saved.contentType,
+					kind: "image"
+				};
+			} catch (err) {
+				params.logger?.warn?.("msteams inline attachment decode failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
 			}
-			if (failed > 0) {
-				const classification = require_channel_setup.classifyMSTeamsSendError(lastFailedError);
-				const hint = require_channel_setup.formatMSTeamsSendErrorHint(classification);
-				params.log.warn?.(`failed to deliver ${failed} of ${total} message blocks`, {
-					failed,
-					total,
-					error: require_channel_setup.formatUnknownError(lastFailedError),
-					classification,
-					...hint ? { hint } : {}
-				});
-				queueDeliveryFailureSystemEvent({
-					failed,
-					total,
-					error: lastFailedError
+			return;
+		}
+		if (!(0, openclaw_plugin_sdk_ssrf_policy.isHttpsUrlAllowedByHostnameSuffixAllowlist)(candidate.url, allowHosts)) return;
+		try {
+			return await downloadAndStoreMSTeamsRemoteMedia({
+				url: candidate.url,
+				filePathHint: candidate.fileHint ?? candidate.url,
+				maxBytes: params.maxBytes,
+				contentTypeHint: candidate.contentTypeHint,
+				kind: candidate.graphReference ? void 0 : candidate.mediaKind,
+				fetchImpl: async (input, init) => {
+					const url = (0, openclaw_plugin_sdk_request_url.resolveRequestUrl)(input);
+					const providedTokenProvider = params.tokenProvider;
+					const deadline = params.deadline;
+					const bearerToken = candidate.graphReference ? params.graphReferenceToken : void 0;
+					const fetchAttempt = (requestInit) => require_resolve_allowlist.safeFetchWithPolicy({
+						url,
+						policy,
+						resolveFn: node_dns_promises.lookup,
+						requestInit,
+						timeoutMs: require_resolve_allowlist.resolveMSTeamsRequestTimeoutMs(deadline)
+					});
+					if (bearerToken !== void 0) {
+						const headers = require_resolve_allowlist.ensureUserAgentHeader(init?.headers);
+						require_resolve_allowlist.applyAuthorizationHeaderForUrl({
+							headers,
+							url,
+							authAllowHosts: policy.authAllowHosts,
+							bearerToken
+						});
+						return fetchAttempt({
+							...init,
+							headers
+						});
+					}
+					const firstAttempt = await fetchAttempt(init);
+					if (firstAttempt.ok) return firstAttempt;
+					if (!providedTokenProvider) return firstAttempt;
+					const tokenProvider = providedTokenProvider;
+					if (firstAttempt.status !== 401 && firstAttempt.status !== 403) return firstAttempt;
+					if (!(0, openclaw_plugin_sdk_ssrf_policy.isHttpsUrlAllowedByHostnameSuffixAllowlist)(url, policy.authAllowHosts)) return firstAttempt;
+					let fallbackAttempt = firstAttempt;
+					const scopes = scopeCandidatesForUrl(url);
+					for (const scope of scopes) try {
+						const token = await require_resolve_allowlist.withMSTeamsRequestDeadline({
+							deadline,
+							label: "MS Teams attachment token",
+							work: () => tokenProvider.getAccessToken(scope)
+						});
+						const authHeaders = new Headers(init?.headers);
+						authHeaders.set("Authorization", `Bearer ${token}`);
+						const authAttempt = await fetchAttempt({
+							...init,
+							headers: authHeaders
+						});
+						await fallbackAttempt.body?.cancel().catch(() => void 0);
+						if (authAttempt.ok || require_resolve_allowlist.isRedirectStatus(authAttempt.status)) return authAttempt;
+						fallbackAttempt = authAttempt;
+					} catch {}
+					return fallbackAttempt;
+				}
+			});
+		} catch (err) {
+			if (candidate.graphReference) {
+				params.logger?.warn?.("msteams SharePoint reference download failed", {
+					error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err),
+					name: candidate.fileHint
 				});
+				return;
 			}
-			delivery.blockSettled = true;
-			settlePendingDelivery(delivery);
-			if (sentIds.length > 0) try {
-				params.onSentMessageIds?.(sentIds);
-			} catch (error) {
-				params.log.warn?.("failed to record sent Teams message ids", { error: require_channel_setup.formatUnknownError(error) });
-			}
+			const msg = (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err);
+			params.logger?.warn?.(`msteams attachment download failed host=${safeHostForLog(candidate.url)} error=${msg}`);
 		}
 	};
-	const dispatcherOptions = {
-		...replyPipeline,
-		humanDelay: (0, openclaw_plugin_sdk_agent_runtime.resolveHumanDelayConfig)(params.cfg, params.agentId),
-		onReplyStart: async () => {
-			if (typingIndicatorEnabled) await typingCallbacks?.onReplyStart?.();
-		},
-		typingCallbacks
+	const out = [];
+	for (const candidate of candidates) {
+		const media = await downloadCandidate(candidate) ?? { kind: candidate.mediaKind };
+		out.push(candidate.sourceId ? {
+			...media,
+			sourceId: candidate.sourceId
+		} : media);
+	}
+	return out;
+}
+function safeHostForLog(url) {
+	return URL.parse(url)?.host ?? "invalid-url";
+}
+//#endregion
+//#region extensions/msteams/src/attachments/graph.ts
+function createGraphHostedContentFact(item) {
+	const contentType = require_resolve_allowlist.normalizeContentType(item.contentType);
+	return {
+		kind: require_resolve_allowlist.resolveMSTeamsMediaKind({ contentType }),
+		...contentType ? { contentType } : {},
+		...item.id ? { sourceId: item.id } : {}
 	};
-	const delivery = {
-		observeMessageSent: true,
-		deliver: async (payload) => {
-			if (pendingSettlement) await pendingSettlement;
-			const preparedPayload = streamController.preparePayload(payload);
-			const native = streamController.claimNativeDelivery();
-			if (preparedPayload && !native && findPendingNativeDelivery()) await settleDelivery();
-			const messages = preparedPayload && !streamController.wasCanceled() ? renderReplyPayload(preparedPayload) : [];
-			if (!native && messages.length === 0) return {
-				visibleReplySent: false,
-				suppression: { reason: "no_visible_result" }
-			};
-			const pending = {
-				messages,
-				finalization: (0, openclaw_plugin_sdk_extension_shared.createDeferred)(),
-				content: payload.text,
-				blockResults: [],
-				nativeSettled: !native,
-				blockSettled: messages.length === 0,
-				settled: false,
-				errors: []
-			};
-			pendingDeliveries.push(pending);
-			if (blockStreamingEnabled) await flushPendingMessages();
-			settlePendingDelivery(pending);
-			return {
-				visibleReplySent: false,
-				finalization: pending.finalization.promise
-			};
-		},
-		onError: (err, info) => {
-			const errMsg = require_channel_setup.formatUnknownError(err);
-			const classification = require_channel_setup.classifyMSTeamsSendError(err);
-			const hint = require_channel_setup.formatMSTeamsSendErrorHint(classification);
-			params.runtime.error?.(`msteams ${info.kind} reply failed: ${errMsg}${hint ? ` (${hint})` : ""}`);
-			params.log.error("reply failed", {
-				kind: info.kind,
-				error: errMsg,
-				classification,
-				hint
+}
+function buildMSTeamsGraphMessageUrl(params) {
+	const conversationType = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(params.conversationType ?? "");
+	const messageId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params.messageId);
+	if (!messageId) return;
+	if (conversationType === "channel") {
+		const teamAadGroupId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params.teamAadGroupId);
+		const channelId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params.channelId);
+		if (!teamAadGroupId || !channelId) return;
+		const messageRoot = `${require_resolve_allowlist.GRAPH_ROOT}/teams/${encodeURIComponent(teamAadGroupId)}/channels/${encodeURIComponent(channelId)}/messages`;
+		const threadRootMessageId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params.threadRootMessageId);
+		return threadRootMessageId && threadRootMessageId !== messageId ? `${messageRoot}/${encodeURIComponent(threadRootMessageId)}/replies/${encodeURIComponent(messageId)}` : `${messageRoot}/${encodeURIComponent(messageId)}`;
+	}
+	const chatId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params.conversationId);
+	if (!chatId) return;
+	return `${require_resolve_allowlist.GRAPH_ROOT}/chats/${encodeURIComponent(chatId)}/messages/${encodeURIComponent(messageId)}`;
+}
+async function withGraphMediaResponse(params, url, kind, read) {
+	const { response, release } = await (0, openclaw_plugin_sdk_ssrf_runtime.fetchWithSsrFGuard)({
+		url,
+		init: { headers: require_resolve_allowlist.ensureUserAgentHeader({ Authorization: `Bearer ${params.accessToken}` }) },
+		policy: params.ssrfPolicy,
+		auditContext: `msteams.graph.${kind}`,
+		timeoutMs: require_resolve_allowlist.resolveMSTeamsRequestTimeoutMs(params.deadline)
+	});
+	try {
+		return await read(response);
+	} finally {
+		if (!response.bodyUsed) response.body?.cancel().catch(() => void 0);
+		await release();
+	}
+}
+function normalizeGraphAttachment(att) {
+	let content = att.content;
+	if (typeof content === "string") try {
+		content = JSON.parse(content);
+	} catch {}
+	return {
+		id: att.id ?? void 0,
+		contentType: require_resolve_allowlist.normalizeContentType(att.contentType),
+		contentUrl: att.contentUrl ?? void 0,
+		name: att.name ?? void 0,
+		content
+	};
+}
+async function downloadMSTeamsGraphMedia(params) {
+	if (!params.messageUrl || !params.tokenProvider) return { media: [] };
+	const tokenProvider = params.tokenProvider;
+	const policy = require_resolve_allowlist.resolveAttachmentFetchPolicy({
+		allowHosts: params.allowHosts,
+		authAllowHosts: params.authAllowHosts
+	});
+	const ssrfPolicy = (0, openclaw_plugin_sdk_ssrf_policy.buildHostnameAllowlistPolicyFromSuffixAllowlist)(policy.allowHosts);
+	const messageUrl = params.messageUrl;
+	const logGraphFailure = (phase, err) => {
+		params.logger?.debug?.(`graph media ${phase} failed`, {
+			messageUrl,
+			error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)
+		});
+		params.logger?.warn?.(`msteams graph ${phase} failed`, {
+			error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err),
+			...phase === "message parse" ? { messageUrl } : {}
+		});
+	};
+	let accessToken;
+	try {
+		accessToken = await require_resolve_allowlist.withMSTeamsRequestDeadline({
+			deadline: params.deadline,
+			label: "MS Teams Graph media token",
+			work: () => tokenProvider.getAccessToken("https://graph.microsoft.com")
+		});
+	} catch (err) {
+		logGraphFailure("token acquisition", err);
+		return {
+			media: [],
+			tokenError: true
+		};
+	}
+	let messageAttachments = [];
+	let referenceAttachments = [];
+	let messageStatus;
+	try {
+		await withGraphMediaResponse({
+			...params,
+			accessToken,
+			ssrfPolicy
+		}, messageUrl, "message", async (msgRes) => {
+			messageStatus = msgRes.status;
+			if (msgRes.ok) {
+				let msgData;
+				try {
+					msgData = await (0, openclaw_plugin_sdk_provider_http.readProviderJsonResponse)(msgRes, "MS Teams Graph message");
+				} catch (err) {
+					logGraphFailure("message parse", err);
+					msgData = {};
+				}
+				messageAttachments = Array.isArray(msgData.attachments) ? msgData.attachments : [];
+				referenceAttachments = messageAttachments.filter((a) => a.contentType === "reference" && a.contentUrl && a.name);
+			} else params.logger?.debug?.("graph media message fetch not ok", {
+				messageUrl,
+				status: messageStatus
 			});
-		}
+		});
+	} catch (err) {
+		logGraphFailure("message fetch", err);
+	}
+	const sharePointMedia = await downloadMSTeamsAttachments({
+		...params,
+		attachments: referenceAttachments,
+		graphReferenceToken: accessToken,
+		allowHosts: policy.allowHosts,
+		authAllowHosts: policy.authAllowHosts
+	});
+	const { maxBytes, logger, deadline } = params;
+	const hostedRequest = {
+		accessToken,
+		ssrfPolicy,
+		deadline
 	};
-	const settleDelivery = () => pendingSettlement ??= Promise.resolve().then(async () => {
-		await flushPendingMessages();
-		const nativeDelivery = findPendingNativeDelivery();
-		if (!nativeDelivery) {
-			await streamController.finalize();
-			return;
+	let hosted = { items: [] };
+	try {
+		hosted = await withGraphMediaResponse(hostedRequest, `${messageUrl}/hostedContents`, "collection", async (response) => {
+			const status = response.status;
+			if (!response.ok) return {
+				status,
+				items: []
+			};
+			try {
+				return {
+					status,
+					items: await (0, openclaw_plugin_sdk_provider_http.readProviderJsonArrayFieldResponse)(response, "MS Teams Graph collection", "value")
+				};
+			} catch {
+				return {
+					status,
+					items: []
+				};
+			}
+		});
+	} catch (err) {
+		logger?.warn?.("msteams graph hostedContents fetch failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
+	}
+	const hostedMedia = [];
+	for (const item of hosted.items) {
+		if (!item.id) {
+			hostedMedia.push(createGraphHostedContentFact(item));
+			continue;
 		}
-		let nativeResult;
 		try {
-			nativeResult = await streamController.finalize();
-		} catch (error) {
-			nativeDelivery.errors.push(error);
-			nativeDelivery.nativeSettled = true;
-			settlePendingDelivery(nativeDelivery);
-			return;
-		}
-		if (nativeResult.visibleReplySent) nativeDelivery.nativeResult = {
-			messageIds: nativeResult.messageId ? [nativeResult.messageId] : [],
-			...nativeResult.content !== void 0 ? { content: nativeResult.content } : {}
-		};
-		const hasPostNativePayloads = Boolean(nativeResult.postNativePayloads?.length);
-		if (nativeResult.logicalContent !== void 0) nativeDelivery.content = nativeResult.logicalContent;
-		else if (nativeResult.content !== void 0 && (!nativeResult.fallbackPayload && !hasPostNativePayloads || nativeDelivery.content === void 0)) nativeDelivery.content = nativeResult.content;
-		const afterNativePayloads = [...nativeResult.fallbackPayload ? [nativeResult.fallbackPayload] : [], ...nativeResult.postNativePayloads ?? []];
-		if (afterNativePayloads.length > 0) {
-			nativeDelivery.messages.push(...afterNativePayloads.flatMap((payload) => renderReplyPayload(payload)));
-			nativeDelivery.blockSettled = nativeDelivery.messages.length === 0;
-		}
-		nativeDelivery.nativeSettled = true;
-		if (!nativeDelivery.blockSettled) await flushPendingMessages();
-		settlePendingDelivery(nativeDelivery);
-		if (nativeResult.messageId) try {
-			params.onSentMessageIds?.([nativeResult.messageId]);
-		} catch (error) {
-			params.log.warn?.("failed to record sent Teams message id", { error: require_channel_setup.formatUnknownError(error) });
-		}
-	}).finally(() => {
-		pendingSettlement = void 0;
-	});
-	const shouldSuppressDefaultToolProgressMessages = streamController.hasStream() && teamsStreamMode === "progress";
-	const progressCallbacks = streamController.hasStream() ? {
-		onReasoningStream: async (payload) => {
-			await streamController.pushReasoningProgress(payload.text, { snapshot: payload.isReasoningSnapshot === true });
-			return false;
-		},
-		onReasoningEnd: () => {
-			streamController.resetReasoningProgress();
-			return false;
-		},
-		onToolStart: streamController.pushToolEvent,
-		onItemEvent: streamController.pushItemEvent,
-		onPlanUpdate: async (payload) => {
-			if (payload.phase !== "update") return false;
-			await streamController.pushPlanProgress(payload.steps, payload);
-			return false;
-		},
-		onApprovalEvent: async (payload) => {
-			await streamController.pushApprovalEvent(payload);
-			return false;
+			const sourceId = item.id;
+			const valueUrl = `${messageUrl}/hostedContents/${encodeURIComponent(sourceId)}/$value`;
+			await withGraphMediaResponse(hostedRequest, valueUrl, "hostedContent.value", async (valRes) => {
+				if (!valRes.ok) {
+					hostedMedia.push(createGraphHostedContentFact(item));
+					return;
+				}
+				const saved = await require_runtime.getMSTeamsRuntime().channel.media.saveResponseMedia(valRes, {
+					sourceUrl: valueUrl,
+					maxBytes,
+					fallbackContentType: item.contentType ?? void 0,
+					subdir: "inbound"
+				});
+				hostedMedia.push({
+					path: saved.path,
+					contentType: saved.contentType,
+					kind: require_resolve_allowlist.resolveMSTeamsMediaKind({ contentType: saved.contentType }),
+					sourceId
+				});
+			});
+		} catch (err) {
+			hostedMedia.push(createGraphHostedContentFact(item));
+			logger?.warn?.("msteams graph hostedContent value fetch failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
+			continue;
 		}
-	} : {};
+	}
+	const normalizedAttachments = messageAttachments.map(normalizeGraphAttachment);
+	const referenceUrls = new Set(referenceAttachments.map((att) => att.contentUrl));
+	const filteredAttachments = normalizedAttachments.filter((att) => att.contentType !== "reference" || !referenceUrls.has(att.contentUrl));
+	let attachmentMedia = [];
+	try {
+		attachmentMedia = await downloadMSTeamsAttachments({
+			attachments: filteredAttachments,
+			maxBytes: params.maxBytes,
+			tokenProvider: params.tokenProvider,
+			allowHosts: policy.allowHosts,
+			authAllowHosts: policy.authAllowHosts,
+			deadline: params.deadline,
+			logger: params.logger
+		});
+	} catch (err) {
+		params.logger?.warn?.("msteams graph attachment download failed", {
+			error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err),
+			messageUrl
+		});
+	}
 	return {
-		dispatcherOptions: {
-			...dispatcherOptions,
-			onSettled: settleDelivery
-		},
-		delivery,
-		replyOptions: {
-			progressPreambleEnabled: shouldSuppressDefaultToolProgressMessages,
-			commentaryProgressEnabled: shouldSuppressDefaultToolProgressMessages,
-			...streamController.hasStream() ? { onPartialReply: (payload) => {
-				streamController.onPartialReply(payload);
-				return false;
-			} } : {},
-			...progressCallbacks,
-			...shouldSuppressDefaultToolProgressMessages ? { suppressDefaultToolProgressMessages: true } : {},
-			disableBlockStreaming: blockStreamingResolved == null ? void 0 : !blockStreamingResolved,
-			onModelSelected
-		}
+		media: [
+			...sharePointMedia,
+			...hostedMedia,
+			...attachmentMedia
+		],
+		hostedCount: hosted.items.length,
+		attachmentCount: filteredAttachments.length + sharePointMedia.length,
+		hostedStatus: hosted.status,
+		attachmentStatus: messageStatus
 	};
 }
 //#endregion
-//#region extensions/msteams/src/monitor-handler/inbound-dispatch.ts
-async function dispatchMSTeamsInboundTurn(params) {
-	const core = require_runtime.getMSTeamsRuntime();
-	const { cfg, runtime, app, tokenProvider, textLimit, log, logVerboseMessage, facts, admission, content, routing, thread, replyStyle, timestamp, contextVisibilityMode, conversationHistories, historyLimit } = params;
-	const { context, activity, rawBody, text, quoteInfo, conversationRef } = facts;
-	const { senderId, senderName, isDirectMessage, allowNameMatching, groupPolicy, commandAuthorized, effectiveGroupAllowFrom, msteamsCfg } = admission;
-	const { route } = routing;
-	const { agentBody, inboundMedia } = content;
-	const { teamAadGroupId, quoteBodyFull, quoteSenderId, quoteSenderName, threadContext } = thread;
-	const { conversationId, conversationType, isChannel, teamId, graphChannelId } = facts;
-	const teamsFrom = isDirectMessage ? `msteams:${senderId}` : isChannel ? `msteams:channel:${conversationId}` : `msteams:group:${conversationId}`;
-	const teamsTo = isDirectMessage ? `user:${senderId}` : `conversation:${conversationId}`;
-	const envelopeFrom = isDirectMessage ? senderName : conversationType;
-	const buildEnvelope = await (0, openclaw_plugin_sdk_channel_inbound.createChannelInboundEnvelopeBuilderAsync)({
-		cfg,
-		route
-	});
-	let combinedBody = buildEnvelope({
-		channel: "Teams",
-		from: envelopeFrom,
-		timestamp,
-		body: agentBody
-	});
-	const isRoomish = !isDirectMessage;
-	const historyKey = isRoomish ? facts.historyKey : void 0;
-	if (isRoomish && historyKey) combinedBody = (0, openclaw_plugin_sdk_reply_history.createChannelHistoryWindow)({ historyMap: conversationHistories }).buildPendingContext({
-		historyKey,
-		limit: historyLimit,
-		currentMessage: combinedBody,
-		formatEntry: (entry) => buildEnvelope({
-			channel: "Teams",
-			from: conversationType,
-			timestamp: entry.timestamp,
-			previousTimestamp: null,
-			body: `${entry.sender}: ${entry.body}${entry.messageId ? ` [id:${entry.messageId}]` : ""}`
-		})
-	});
-	const inboundHistory = isRoomish && historyKey && historyLimit > 0 ? (0, openclaw_plugin_sdk_reply_history.createChannelHistoryWindow)({ historyMap: conversationHistories }).buildInboundHistory({
-		historyKey,
-		limit: historyLimit
-	}) : void 0;
-	const commandBody = text.trim();
-	const quoteSenderAllowed = quoteInfo && quoteInfo.sender ? (0, openclaw_plugin_sdk_channel_inbound.resolveInboundSupplementalSenderAllowed)({
-		isGroup: !isDirectMessage,
-		groupPolicy,
-		allowFrom: effectiveGroupAllowFrom,
-		isSenderAllowed: (allowFrom) => (0, openclaw_plugin_sdk_allow_from.resolveAllowlistMatchSimple)({
-			allowFrom,
-			senderId: quoteSenderId ?? "",
-			senderName: quoteSenderName,
-			allowNameMatching
-		}).allowed
-	}) : true;
-	const nativeChannelId = isChannel && teamAadGroupId ? `${teamAadGroupId}/${graphChannelId}` : void 0;
-	const boundIngress = await resolveMSTeamsSenderAccess({
-		cfg: route.accountId === params.listenerAccountId ? params.readConfig() : params.accountPolicyCfg,
-		accountId: route.accountId,
-		activity,
-		hasControlCommand: admission.isControlCommand,
-		conversationThreadId: facts.threadId,
-		contextBinding: {
-			agentId: route.agentId,
-			sessionKey: route.sessionKey,
-			...activity.id ? { messageId: activity.id } : {},
-			...nativeChannelId ? { nativeChannelId } : {},
-			inboundEventKind: "user_request"
-		}
+//#region extensions/msteams/src/monitor-handler/inbound-content.ts
+async function prepareMSTeamsInboundContent(params) {
+	const activity = params.entry.context.activity;
+	const mayRecoverGraphMedia = Boolean(params.htmlSummary?.attachmentIds.length) || shouldAttemptMSTeamsGraphMediaFallback({
+		conversationType: params.conversationType,
+		htmlSummary: params.htmlSummary,
+		graphMediaFallback: params.graphMediaFallback
 	});
-	if (!boundIngress.senderAccess.allowed || boundIngress.hasConflictingConversationScope || boundIngress.msteamsCfg?.enabled === false || boundIngress.commandAccess.shouldBlockControlCommand) {
-		log.info("dropping message (dispatch-time account authorization changed)");
-		return {
-			kind: "completed",
-			finalResponses: 0
-		};
+	if (!params.rawBody && params.advertisedMedia.length === 0 && !mayRecoverGraphMedia) {
+		params.log.debug?.("skipping empty message after stripping mentions");
+		return null;
 	}
-	const ctxPayload = core.channel.inbound.buildContext({
-		channelIngress: boundIngress.channelIngress,
-		channel: "msteams",
-		contextVisibility: contextVisibilityMode,
-		supplemental: {
-			channelStructuredContext: threadContext.length ? [{
-				label: "Thread history",
-				source: "msteams",
-				type: "chat_window",
-				sessionTranscriptMode: "preserve",
-				payload: {
-					order: "chronological",
-					messages: threadContext
-				}
-			}] : void 0,
-			quote: quoteInfo ? {
-				id: quoteInfo.id ?? activity.replyToId ?? void 0,
-				body: quoteBodyFull ?? quoteInfo.body,
-				sender: quoteInfo.sender,
-				senderAllowed: quoteSenderAllowed,
-				isQuote: true
-			} : void 0
-		},
-		media: await (0, openclaw_plugin_sdk_channel_inbound.toInboundMediaFactsWithMetadata)(inboundMedia),
-		messageId: activity.id,
-		timestamp: timestamp?.getTime() ?? Date.now(),
-		from: teamsFrom,
-		sender: {
-			id: senderId,
-			name: senderName
-		},
-		conversation: {
-			kind: isDirectMessage ? "direct" : isChannel ? "channel" : "group",
-			id: conversationId,
-			label: envelopeFrom,
-			spaceId: teamId,
-			nativeChannelId
-		},
-		route: {
-			agentId: route.agentId,
-			dmScope: route.dmScope,
-			accountId: route.accountId,
-			routeSessionKey: route.sessionKey
-		},
-		reply: {
-			to: teamsTo,
-			originatingTo: `conversation:${conversationId}`,
-			messageThreadId: facts.threadId ?? void 0,
-			replyToId: activity.replyToId ?? void 0,
-			nativeChannelId
-		},
-		message: {
-			body: combinedBody,
-			bodyForAgent: agentBody,
-			inboundHistory,
-			rawBody,
-			commandBody
-		},
-		sessionTranscript: { historyLimit: isRoomish ? historyLimit : 0 },
-		access: {
-			mentions: {
-				canDetectMention: !isDirectMessage,
-				wasMentioned: isDirectMessage || params.mentionWasEffective
-			},
-			commands: { authorized: commandAuthorized === true }
-		},
-		extra: {
-			GroupSubject: !isDirectMessage ? conversationType : void 0,
-			ReplyToIsQuote: quoteInfo ? true : void 0
-		}
-	});
-	const preview = (0, openclaw_plugin_sdk_text_utility_runtime.sliceUtf16Safe)(rawBody.replace(/\s+/g, " "), 0, 160);
-	logVerboseMessage(`msteams inbound: from=${ctxPayload.From} preview="${preview}"`);
-	const { dispatcherOptions, delivery, replyOptions } = createMSTeamsReplyDispatcher({
-		cfg,
-		agentId: route.agentId,
-		sessionKey: route.sessionKey,
-		accountId: route.accountId,
-		runtime,
-		log,
-		app,
-		conversationRef,
-		context,
-		replyStyle,
-		textLimit,
-		onSentMessageIds: (ids) => {
-			for (const id of ids) require_conversation_store_state.recordMSTeamsSentMessage(conversationId, id, { accountId: route.accountId });
-		},
-		tokenProvider,
-		sharePointSiteId: msteamsCfg?.sharePointSiteId
-	});
-	const senderTimezone = (activity.entities?.find((entity) => entity.type === "clientInfo"))?.timezone || conversationRef.timezone;
-	const turnConfig = senderTimezone && !cfg.agents?.defaults?.userTimezone ? {
-		...cfg,
-		agents: {
-			...cfg.agents,
-			defaults: {
-				...cfg.agents?.defaults,
-				userTimezone: senderTimezone
-			}
-		}
-	} : cfg;
-	log.info("dispatching to agent", { sessionKey: route.sessionKey });
+	let resolvedMedia = [];
+	const deadline = require_resolve_allowlist.createMSTeamsInboundMediaDeadline();
 	try {
-		const turnResult = await core.channel.inbound.run({
-			channel: "msteams",
-			accountId: route.accountId,
-			raw: context,
-			adapter: {
-				ingest: () => ({
-					id: activity.id ?? `${teamsFrom}:${Date.now()}`,
-					timestamp: timestamp?.getTime(),
-					rawText: rawBody,
-					textForAgent: agentBody,
-					textForCommands: commandBody,
-					raw: activity
-				}),
-				resolveTurn: () => ({
-					cfg: turnConfig,
-					channel: "msteams",
-					accountId: route.accountId,
-					route: {
-						agentId: route.agentId,
-						sessionKey: route.sessionKey
-					},
-					ctxPayload,
-					record: { onRecordError: (err) => {
-						logVerboseMessage(`msteams: failed updating session meta: ${require_channel_setup.formatUnknownError(err)}`);
-					} },
-					history: {
-						isGroup: isRoomish,
-						historyKey,
-						historyMap: conversationHistories,
-						limit: historyLimit
-					},
-					dispatcherOptions,
-					delivery,
-					replyOptions: {
-						...replyOptions,
-						...facts.turnAdoptionLifecycle ? (0, openclaw_plugin_sdk_channel_outbound.bindIngressLifecycleToReplyOptions)(facts.turnAdoptionLifecycle) : {}
+		resolvedMedia = await require_resolve_allowlist.withMSTeamsRequestDeadline({
+			deadline,
+			label: "MS Teams inbound media",
+			work: async () => {
+				let mediaList = await downloadMSTeamsAttachments({
+					attachments: params.entry.attachments,
+					maxBytes: params.mediaMaxBytes,
+					tokenProvider: params.tokenProvider,
+					allowHosts: params.mediaAllowHosts,
+					authAllowHosts: params.mediaAuthAllowHosts,
+					deadline,
+					logger: params.log
+				});
+				if (!hasMaterializedMedia(mediaList)) {
+					const attachmentIds = extractMSTeamsHtmlAttachmentIds(params.entry.attachments);
+					const hasHtmlFileAttachment = attachmentIds.length > 0;
+					const shouldFetchGraphMessage = hasHtmlFileAttachment || shouldAttemptMSTeamsGraphMediaFallback(params);
+					const isBotFrameworkPersonalChat = isBotFrameworkPersonalChatId(params.conversationId);
+					if (hasHtmlFileAttachment && isBotFrameworkPersonalChat) {
+						if (!activity.serviceUrl) params.log.debug?.("bot framework attachment skipped (missing serviceUrl)", {
+							conversationType: params.conversationType,
+							conversationId: params.conversationId
+						});
+						else {
+							const bfMedia = await downloadMSTeamsBotFrameworkAttachments({
+								serviceUrl: activity.serviceUrl,
+								attachmentIds,
+								tokenProvider: params.tokenProvider,
+								maxBytes: params.mediaMaxBytes,
+								allowHosts: params.mediaAllowHosts,
+								authAllowHosts: params.mediaAuthAllowHosts,
+								deadline
+							});
+							mediaList = mergeMSTeamsMediaFacts(mediaList, bfMedia.media, { positionallyAligned: false });
+							if (!hasMaterializedMedia(bfMedia.media)) params.log.debug?.("bot framework attachments fetch empty", {
+								conversationType: params.conversationType,
+								attachmentCount: bfMedia.attachmentCount ?? attachmentIds.length
+							});
+						}
 					}
-				})
+					if (shouldFetchGraphMessage && !isBotFrameworkPersonalChat) {
+						const graphTeamAadGroupId = params.conversationType.trim().toLowerCase() === "channel" && !params.teamAadGroupId ? await params.resolveTeamAadGroupId(deadline) : params.teamAadGroupId;
+						const messageUrl = buildMSTeamsGraphMessageUrl({
+							conversationType: params.conversationType,
+							conversationId: params.conversationId,
+							messageId: activity.id,
+							threadRootMessageId: params.conversationMessageId ?? activity.replyToId,
+							teamAadGroupId: graphTeamAadGroupId,
+							channelId: activity.channelData?.channel?.id
+						});
+						if (!messageUrl) params.log.debug?.("graph message url unavailable", {
+							conversationType: params.conversationType,
+							hasChannelData: Boolean(activity.channelData),
+							messageId: activity.id,
+							replyToId: activity.replyToId
+						});
+						else {
+							const graphMedia = await downloadMSTeamsGraphMedia({
+								messageUrl,
+								tokenProvider: params.tokenProvider,
+								maxBytes: params.mediaMaxBytes,
+								allowHosts: params.mediaAllowHosts,
+								authAllowHosts: params.mediaAuthAllowHosts,
+								deadline,
+								logger: params.log
+							});
+							mediaList = mergeMSTeamsMediaFacts(mediaList, graphMedia.media, { positionallyAligned: false });
+							if (!hasMaterializedMedia(mediaList)) params.log.debug?.("graph media fetch empty", {
+								messageUrl,
+								hostedStatus: graphMedia.hostedStatus,
+								attachmentStatus: graphMedia.attachmentStatus,
+								hostedCount: graphMedia.hostedCount,
+								attachmentCount: graphMedia.attachmentCount,
+								tokenError: graphMedia.tokenError,
+								attachmentIdCount: attachmentIds.length
+							});
+						}
+					}
+				}
+				const materializedCount = mediaList.filter((media) => Boolean(media.path)).length;
+				if (materializedCount > 0) params.log.debug?.("downloaded attachments", { count: materializedCount });
+				else if (params.htmlSummary?.imgTags) params.log.debug?.("inline images detected but none downloaded", {
+					imgTags: params.htmlSummary.imgTags,
+					srcHosts: params.htmlSummary.srcHosts,
+					dataImages: params.htmlSummary.dataImages,
+					cidImages: params.htmlSummary.cidImages
+				});
+				return mediaList;
 			}
 		});
-		const dispatchResult = turnResult.dispatched ? turnResult.dispatchResult : void 0;
-		const counts = (0, openclaw_plugin_sdk_channel_inbound.resolveInboundReplyDispatchCounts)(dispatchResult);
-		log.info("dispatch complete", { counts });
-		if ((0, openclaw_plugin_sdk_channel_inbound.hasFinalInboundReplyDispatch)(dispatchResult)) logVerboseMessage(`msteams: delivered ${counts.final} repl${counts.final === 1 ? "y" : "ies"} to ${teamsTo}`);
-		return {
-			kind: "completed",
-			finalResponses: counts.final
-		};
 	} catch (err) {
-		log.error("dispatch failed", { error: require_channel_setup.formatUnknownError(err) });
-		runtime.error(`msteams dispatch failed: ${require_channel_setup.formatUnknownError(err)}`);
-		if (facts.turnAdoptionLifecycle) throw err;
-		try {
-			await context.sendActivity("⚠️ Something went wrong. Please try again.");
-		} catch {}
-		return { kind: "failed" };
+		params.log.debug?.("failed to resolve inbound Teams media", { error: require_channel_setup.formatUnknownError(err) });
+	}
+	const inboundMedia = mergeMSTeamsMediaFacts(params.advertisedMedia, resolvedMedia);
+	const body = params.rawBody;
+	const expectedMediaCount = Math.max(params.advertisedMedia.length, resolvedMedia.length);
+	const unavailableCount = inboundMedia.filter((media) => !media.path).length + Math.max(0, expectedMediaCount - inboundMedia.length);
+	const agentBody = unavailableCount === 0 ? body : (0, openclaw_plugin_sdk_channel_inbound.formatInboundMediaUnavailableText)({
+		body,
+		notice: `[msteams ${unavailableCount > 1 ? `${unavailableCount} attachments` : "attachment"} unavailable]`
+	});
+	if (!agentBody && inboundMedia.length === 0) {
+		params.log.debug?.("skipping empty message after Graph media recovery");
+		return null;
+	}
+	return {
+		agentBody,
+		inboundMedia
+	};
+}
+function shouldAttemptMSTeamsGraphMediaFallback(params) {
+	const conversationType = params.conversationType.trim().toLowerCase();
+	return params.graphMediaFallback === true && (conversationType === "channel" || conversationType === "groupchat") && (params.htmlSummary?.htmlAttachments ?? 0) > 0;
+}
+function hasDefinitiveContentType(media) {
+	const contentType = media.contentType?.split(";", 1)[0]?.trim().toLowerCase();
+	return Boolean(contentType && contentType !== "application/octet-stream" && contentType !== "binary/octet-stream");
+}
+function mergeMSTeamsMediaFacts(nativeMedia, materializedMedia, options = {}) {
+	const merged = [...nativeMedia];
+	const nativeSlotCount = nativeMedia.length;
+	const nativeIndexBySourceId = /* @__PURE__ */ new Map();
+	nativeMedia.forEach((media, index) => {
+		if (media.sourceId && !nativeIndexBySourceId.has(media.sourceId)) nativeIndexBySourceId.set(media.sourceId, index);
+	});
+	for (const [index, materialized] of materializedMedia.entries()) {
+		const sourceIndex = materialized.sourceId ? nativeIndexBySourceId.get(materialized.sourceId) : void 0;
+		const positionalIndex = options.positionallyAligned === false || index >= nativeMedia.length ? void 0 : index;
+		const unresolvedIndexes = options.positionallyAligned === false ? merged.slice(0, nativeSlotCount).flatMap((media, mediaIndex) => !media.path && !media.sourceId ? [mediaIndex] : []) : [];
+		const fallbackIndex = unresolvedIndexes.find((mediaIndex) => merged[mediaIndex]?.kind === materialized.kind) ?? (unresolvedIndexes.length === 1 ? unresolvedIndexes[0] : void 0);
+		const targetIndex = sourceIndex ?? positionalIndex ?? fallbackIndex;
+		if (targetIndex === void 0) {
+			if (materialized.sourceId) nativeIndexBySourceId.set(materialized.sourceId, merged.length);
+			merged.push(materialized);
+		} else {
+			if (materialized.sourceId) nativeIndexBySourceId.set(materialized.sourceId, targetIndex);
+			const current = merged[targetIndex];
+			if (materialized.path) merged[targetIndex] = materialized;
+			else if (!current?.path) merged[targetIndex] = {
+				...current,
+				...materialized,
+				kind: hasDefinitiveContentType(materialized) || !current?.kind ? materialized.kind : current.kind
+			};
+		}
 	}
+	return merged;
+}
+function hasMaterializedMedia(media) {
+	return media.some((entry) => Boolean(entry.path));
 }
 //#endregion
 //#region extensions/msteams/src/monitor-handler/inbound-facts.ts
-function extractTextFromHtmlAttachments(attachments) {
+function extractTextFromHtmlAttachments(attachments, activity) {
 	for (const attachment of attachments) {
 		const raw = require_resolve_allowlist.extractHtmlFromAttachment(attachment);
 		if (!raw) continue;
-		const text = require_resolve_allowlist.htmlToPlainText(raw.replace(/<at[^>]*>.*?<\/at>/gis, " ").replace(/<a\b[^>]*href=["']([^"']+)["'][^>]*>(.*?)<\/a>/gis, "$2 $1"));
+		const text = require_resolve_allowlist.htmlToPlainText(require_resolve_allowlist.normalizeMSTeamsMentionTags(require_resolve_allowlist.replaceTeamsEmojiSpriteImagesWithAltText(raw), activity, { preserveHtml: true }).replace(/<a\b[^>]*href=["']([^"']+)["'][^>]*>(.*?)<\/a>/gis, "$2 $1"));
 		if (text) return text;
 	}
 	return "";
@@ -2462,9 +1992,9 @@ async function prepareMSTeamsDebounceEntry(params) {
 	const activity = params.context.activity;
 	const attachments = Array.isArray(activity.attachments) ? activity.attachments : [];
 	const rawText = activity.text?.trim() ?? "";
-	const text = rawText ? require_resolve_allowlist.stripMSTeamsMentionTags(rawText) : extractTextFromHtmlAttachments(attachments) || require_resolve_allowlist.stripMSTeamsMentionTags(serializeMSTeamsAdaptiveCardActionValue(activity.value) || "");
+	const text = rawText ? require_resolve_allowlist.normalizeMSTeamsMentionTags(rawText, activity) : extractTextFromHtmlAttachments(attachments, activity) || require_resolve_allowlist.stripMSTeamsMentionTags(serializeMSTeamsAdaptiveCardActionValue(activity.value) || "");
 	const conversationId = require_resolve_allowlist.normalizeMSTeamsConversationId(activity.conversation?.id ?? "");
-	const replyToId = activity.replyToId ?? void 0;
+	const replyToId = activity.replyToId;
 	const implicitMentionKinds = conversationId && replyToId && await require_conversation_store_state.wasMSTeamsMessageSentWithPersistence({
 		conversationId,
 		messageId: replyToId,
@@ -2480,15 +2010,23 @@ async function prepareMSTeamsDebounceEntry(params) {
 		turnAdoptionLifecycle: params.turnAdoptionLifecycle
 	};
 }
-function buildStoredConversationReference(params) {
-	const { activity, conversationId, conversationType, teamId, threadId } = params;
-	const from = activity.from;
+function assembleMSTeamsInboundFacts(entry) {
+	const activity = entry.context.activity;
 	const conversation = activity.conversation;
+	const rawConversationId = conversation?.id ?? "";
+	const conversationId = require_resolve_allowlist.normalizeMSTeamsConversationId(rawConversationId);
+	const conversationMessageId = require_resolve_allowlist.extractMSTeamsConversationMessageId(rawConversationId);
+	const conversationType = conversation?.conversationType ?? "personal";
+	const isChannel = conversationType === "channel";
+	const teamId = activity.channelData?.team?.id;
+	const threadId = isChannel ? conversationMessageId ?? activity.replyToId : void 0;
+	const advertisedMedia = resolveMSTeamsAdvertisedMedia(entry.attachments);
+	const from = activity.from;
 	const clientInfo = activity.entities?.find((entity) => entity.type === "clientInfo");
 	const tenantId = activity.channelData?.tenant?.id ?? conversation?.tenantId;
 	const aadObjectId = from?.aadObjectId;
 	const serviceUrl = require_bot_framework_service_url.tryNormalizeBotFrameworkServiceUrl(activity.serviceUrl);
-	return {
+	const conversationRef = {
 		activityId: activity.id,
 		user: from ? {
 			id: from.id,
@@ -2510,18 +2048,6 @@ function buildStoredConversationReference(params) {
 		...clientInfo?.timezone ? { timezone: clientInfo.timezone } : {},
 		...threadId ? { threadId } : {}
 	};
-}
-function assembleMSTeamsInboundFacts(entry) {
-	const activity = entry.context.activity;
-	const conversation = activity.conversation;
-	const rawConversationId = conversation?.id ?? "";
-	const conversationId = require_resolve_allowlist.normalizeMSTeamsConversationId(rawConversationId);
-	const conversationMessageId = require_resolve_allowlist.extractMSTeamsConversationMessageId(rawConversationId);
-	const conversationType = conversation?.conversationType ?? "personal";
-	const isChannel = conversationType === "channel";
-	const teamId = activity.channelData?.team?.id;
-	const threadId = isChannel ? conversationMessageId ?? activity.replyToId ?? void 0 : void 0;
-	const advertisedMedia = resolveMSTeamsAdvertisedMedia(entry.attachments);
 	return {
 		...entry,
 		activity,
@@ -2530,9 +2056,7 @@ function assembleMSTeamsInboundFacts(entry) {
 		rawBody: entry.text,
 		advertisedMedia,
 		quoteInfo: require_resolve_allowlist.extractMSTeamsQuoteInfo(entry.attachments),
-		attachmentTypes: entry.attachments.map((attachment) => typeof attachment.contentType === "string" ? attachment.contentType : void 0).filter(Boolean).slice(0, 3),
 		htmlSummary: summarizeMSTeamsHtmlAttachments(entry.attachments),
-		rawConversationId,
 		conversationId,
 		conversationMessageId,
 		conversationType,
@@ -2541,44 +2065,10 @@ function assembleMSTeamsInboundFacts(entry) {
 		graphChannelId: activity.channelData?.channel?.id?.trim() || conversationId,
 		threadId,
 		historyKey: threadId ? `${conversationId}:thread:${threadId}` : conversationId,
-		conversationRef: buildStoredConversationReference({
-			activity,
-			conversationId,
-			conversationType,
-			teamId,
-			threadId
-		})
+		conversationRef
 	};
 }
 //#endregion
-//#region extensions/msteams/src/team-identity.ts
-const teamGroupIdCache = /* @__PURE__ */ new Map();
-const TEAM_GROUP_ID_CACHE_MAX_ENTRIES = 500;
-function cacheTeamGroupId(conversationTeamId, groupId) {
-	teamGroupIdCache.set(conversationTeamId, groupId);
-	(0, openclaw_plugin_sdk_collection_runtime.pruneMapToMaxSize)(teamGroupIdCache, TEAM_GROUP_ID_CACHE_MAX_ENTRIES);
-}
-/** Resolve the Graph team GUID without ever treating a Bot Framework team ID as equivalent. */
-async function resolveTeamGroupId(params) {
-	const activityGroupId = params.aadGroupId?.trim();
-	if (activityGroupId) {
-		cacheTeamGroupId(params.conversationTeamId, activityGroupId);
-		return activityGroupId;
-	}
-	const cached = teamGroupIdCache.get(params.conversationTeamId);
-	if (cached) return cached;
-	const getTeamDetails = params.getTeamDetails;
-	if (!getTeamDetails) return;
-	const groupId = (await require_resolve_allowlist.withMSTeamsRequestDeadline({
-		deadline: params.deadline,
-		label: "MS Teams team details",
-		work: () => getTeamDetails(params.conversationTeamId)
-	})).aadGroupId?.trim();
-	if (!groupId) return;
-	cacheTeamGroupId(params.conversationTeamId, groupId);
-	return groupId;
-}
-//#endregion
 //#region extensions/msteams/src/thread-parent-context.ts
 const PARENT_CACHE_TTL_MS = 3e5;
 const PARENT_CACHE_MAX = 100;
@@ -2592,7 +2082,7 @@ function touchLru(map, key, value, max) {
 }
 async function fetchParentMessageCached(token, groupId, channelId, parentId, deadline) {
 	const key = JSON.stringify([
-		(0, node_crypto.createHash)("sha256").update(token).digest("hex"),
+		(0, openclaw_plugin_sdk_node_crypto_runtime.sha256Hex)(token),
 		groupId,
 		channelId,
 		parentId
@@ -2603,7 +2093,6 @@ async function fetchParentMessageCached(token, groupId, channelId, parentId, dea
 		parentCache.set(key, cached);
 		return cached.message;
 	}
-	if (cached) parentCache.delete(key);
 	const message = await require_reaction_types.fetchChannelMessage(token, groupId, channelId, parentId, deadline);
 	touchLru(parentCache, key, {
 		message,
@@ -2612,20 +2101,14 @@ async function fetchParentMessageCached(token, groupId, channelId, parentId, dea
 	return message;
 }
 const PARENT_TEXT_MAX_CHARS = 400;
-function summarizeParentMessage(message) {
+function formatParentContextEvent(message) {
 	if (!message) return;
 	const sender = message.from?.user?.displayName ?? message.from?.application?.displayName ?? "unknown";
 	const contentType = message.body?.contentType ?? "text";
 	const raw = message.body?.content ?? "";
 	const text = contentType === "html" ? require_reaction_types.stripHtmlFromTeamsMessage(raw) : raw.replace(/\s+/g, " ").trim();
 	if (!text) return;
-	return {
-		sender,
-		text: text.length > PARENT_TEXT_MAX_CHARS ? `${(0, openclaw_plugin_sdk_text_utility_runtime.truncateUtf16Safe)(text, 399)}…` : text
-	};
-}
-function formatParentContextEvent(summary) {
-	return `Replying to @${summary.sender}: ${summary.text}`;
+	return `Replying to @${sender}: ${text.length > PARENT_TEXT_MAX_CHARS ? `${(0, openclaw_plugin_sdk_text_utility_runtime.truncateUtf16Safe)(text, 399)}…` : text}`;
 }
 function shouldInjectParentContext(sessionKey, parentId) {
 	return injectedParents.get(sessionKey) !== parentId;
@@ -2635,55 +2118,12 @@ function markParentContextInjected(sessionKey, parentId) {
 }
 //#endregion
 //#region extensions/msteams/src/monitor-handler/thread-context.ts
-function prepareMSTeamsThreadRouting(params) {
-	const route = require_runtime.getMSTeamsRuntime().channel.routing.resolveAgentRoute({
-		cfg: params.cfg,
-		channel: "msteams",
-		accountId: params.accountId,
-		teamId: params.teamId,
-		peer: {
-			kind: params.isDirectMessage ? "direct" : params.isChannel ? "channel" : "group",
-			id: params.isDirectMessage ? params.senderId : params.conversationId
-		}
-	});
-	route.sessionKey = require_thread_session.resolveMSTeamsRouteSessionKey({
-		baseSessionKey: route.sessionKey,
-		isChannel: params.isChannel,
-		conversationMessageId: params.conversationMessageId,
-		replyToId: params.context.activity.replyToId
-	});
-	let teamAadGroupId = params.context.activity.channelData?.team?.aadGroupId?.trim() || void 0;
-	const conversationTeamId = params.isChannel ? params.teamId : void 0;
-	let teamGroupIdPromise;
-	const resolveTeamAadGroupId = async (deadline) => {
-		if (!conversationTeamId) return;
-		teamGroupIdPromise ??= resolveTeamGroupId({
-			conversationTeamId,
-			aadGroupId: teamAadGroupId,
-			getTeamDetails: params.context.getTeamDetails,
-			deadline
-		}).catch((err) => {
-			params.log.debug?.("failed to resolve Teams AAD group ID", {
-				teamId: conversationTeamId,
-				error: require_channel_setup.formatUnknownError(err)
-			});
-		});
-		teamAadGroupId = await teamGroupIdPromise;
-		return teamAadGroupId;
-	};
-	return {
-		route,
-		threadRootId: params.conversationMessageId ?? params.context.activity.replyToId,
-		resolveTeamAadGroupId,
-		getTeamAadGroupId: () => teamAadGroupId
-	};
-}
 async function resolveMSTeamsThreadContext(params) {
 	const core = require_runtime.getMSTeamsRuntime();
 	const activity = params.context.activity;
-	const { route } = params.routing;
+	const { route } = params;
 	const deadline = require_resolve_allowlist.createMSTeamsInboundEnrichmentDeadline();
-	const teamAadGroupId = await params.routing.resolveTeamAadGroupId(deadline);
+	const teamAadGroupId = await params.resolveTeamAadGroupId(deadline);
 	let quoteBodyFull;
 	let quoteSenderId;
 	let quoteSenderName;
@@ -2703,7 +2143,7 @@ async function resolveMSTeamsThreadContext(params) {
 		params.log.debug?.("failed to fetch full quoted message text", { error: require_channel_setup.formatUnknownError(err) });
 	}
 	let threadContext = [];
-	const threadParentId = params.routing.threadRootId;
+	const threadParentId = params.threadRootId;
 	if (threadParentId && threadParentId !== activity.id && params.isChannel && teamAadGroupId) try {
 		const graphToken = await require_resolve_allowlist.withMSTeamsRequestDeadline({
 			deadline,
@@ -2730,29 +2170,22 @@ async function resolveMSTeamsThreadContext(params) {
 				allowNameMatching: params.allowNameMatching
 			}).allowed
 		});
-		const parentSummary = summarizeParentMessage(parentMsg);
-		const visibleParentMessages = parentMsg ? (0, openclaw_plugin_sdk_context_visibility_runtime.filterSupplementalContextItems)({
-			items: [parentMsg],
+		const parentContextEvent = formatParentContextEvent(parentMsg);
+		const { items: threadMessages } = (0, openclaw_plugin_sdk_context_visibility_runtime.filterSupplementalContextItems)({
+			items: parentMsg ? [parentMsg, ...replies] : replies,
 			mode: params.contextVisibilityMode,
 			kind: "thread",
 			isSenderAllowed: isThreadSenderAllowed
-		}).items : [];
-		if (parentSummary && visibleParentMessages.length > 0 && shouldInjectParentContext(route.sessionKey, threadParentId)) {
-			core.system.enqueueSystemEvent(formatParentContextEvent(parentSummary), {
+		});
+		if (parentContextEvent && parentMsg && threadMessages.includes(parentMsg) && shouldInjectParentContext(route.sessionKey, threadParentId)) {
+			core.system.enqueueSystemEvent(parentContextEvent, {
 				sessionKey: route.sessionKey,
 				contextKey: `msteams:thread-parent:${params.conversationId}:${threadParentId}`
 			});
 			markParentContextInjected(route.sessionKey, threadParentId);
 		}
-		const allMessages = parentMsg ? [parentMsg, ...replies] : replies;
-		quoteSenderId = parentMsg?.from?.user?.id ?? parentMsg?.from?.application?.id ?? void 0;
+		quoteSenderId = parentMsg?.from?.user?.id ?? parentMsg?.from?.application?.id;
 		quoteSenderName = parentMsg?.from?.user?.displayName ?? parentMsg?.from?.application?.displayName ?? params.quoteInfo?.sender;
-		const { items: threadMessages } = (0, openclaw_plugin_sdk_context_visibility_runtime.filterSupplementalContextItems)({
-			items: allMessages,
-			mode: params.contextVisibilityMode,
-			kind: "thread",
-			isSenderAllowed: isThreadSenderAllowed
-		});
 		threadContext = require_reaction_types.buildThreadContext(threadMessages, activity.id);
 	} catch (err) {
 		params.log.debug?.("failed to fetch thread history", { error: require_channel_setup.formatUnknownError(err) });
@@ -2790,17 +2223,8 @@ function createMSTeamsMessageHandler(deps) {
 	});
 	const handleTeamsMessageNow = async (params) => {
 		const facts = assembleMSTeamsInboundFacts(params);
-		const { context, activity, rawText, text, attachments, advertisedMedia, rawBody, quoteInfo, from, conversation, attachmentTypes, htmlSummary, conversationId, conversationMessageId, conversationType, isChannel, teamId, conversationRef } = facts;
+		const { context, activity, text, advertisedMedia, rawBody, quoteInfo, from, htmlSummary, conversationId, conversationMessageId, conversationType, isChannel, teamId, graphChannelId, conversationRef } = facts;
 		const historyBody = [text, (0, openclaw_plugin_sdk_channel_inbound.formatMediaPlaceholderText)(advertisedMedia)].filter(Boolean).join("\n");
-		log.info("received message", {
-			rawText: (0, openclaw_plugin_sdk_text_utility_runtime.truncateUtf16Safe)(rawText, 50),
-			text: (0, openclaw_plugin_sdk_text_utility_runtime.truncateUtf16Safe)(text, 50),
-			attachments: attachments.length,
-			attachmentTypes,
-			from: from?.id,
-			conversation: conversation?.id
-		});
-		if (htmlSummary) log.debug?.("html attachment summary", htmlSummary);
 		if (!from?.id) {
 			log.debug?.("skipping message without from.id");
 			return;
@@ -2809,7 +2233,7 @@ function createMSTeamsMessageHandler(deps) {
 		let isBotOwnedThread = false;
 		if (isChannel && facts.threadId && activity.recipient?.id) {
 			const channelConfig = currentCfg.channels?.msteams;
-			const routeConfig = require_channel.resolveMSTeamsRouteConfig({
+			const routeConfig = require_presentation.resolveMSTeamsRouteConfig({
 				cfg: channelConfig,
 				teamId,
 				teamName: activity.channelData?.team?.name,
@@ -2817,7 +2241,7 @@ function createMSTeamsMessageHandler(deps) {
 				channelName: activity.channelData?.channel?.name,
 				allowNameMatching: channelConfig?.dangerouslyAllowNameMatching === true
 			});
-			if (require_channel.resolveMSTeamsReplyPolicy({
+			if (require_presentation.resolveMSTeamsReplyPolicy({
 				isDirectMessage: false,
 				globalConfig: channelConfig,
 				...routeConfig
@@ -2846,7 +2270,7 @@ function createMSTeamsMessageHandler(deps) {
 			logVerboseMessage
 		});
 		if (!admission) return;
-		const { senderId, senderName, isDirectMessage, channelGate, allowNameMatching, groupPolicy, commandAuthorized, effectiveGroupAllowFrom, allowTextCommands, isControlCommand } = admission;
+		const { senderId, senderName, isDirectMessage, channelGate, allowNameMatching, groupPolicy, commandAuthorized, effectiveGroupAllowFrom, allowTextCommands, isControlCommand, msteamsCfg: admittedMSTeamsCfg } = admission;
 		const pollVote = require_conversation_store_state.extractMSTeamsPollVote(activity);
 		if (pollVote) {
 			try {
@@ -2855,11 +2279,6 @@ function createMSTeamsMessageHandler(deps) {
 					voterId: senderId,
 					selections: pollVote.selections
 				})) log.debug?.("poll vote ignored (poll not found)", { pollId: pollVote.pollId });
-				else log.info("recorded poll vote", {
-					pollId: pollVote.pollId,
-					voter: senderId,
-					selections: pollVote.selections
-				});
 			} catch (err) {
 				log.error("failed to record poll vote", {
 					pollId: pollVote.pollId,
@@ -2868,19 +2287,42 @@ function createMSTeamsMessageHandler(deps) {
 			}
 			return;
 		}
-		const threadRouting = prepareMSTeamsThreadRouting({
+		const route = require_runtime.getMSTeamsRuntime().channel.routing.resolveAgentRoute({
 			cfg: currentCfg,
+			channel: "msteams",
 			accountId,
-			context,
-			isDirectMessage,
-			isChannel,
-			senderId,
-			conversationId,
-			conversationMessageId: conversationMessageId ?? void 0,
 			teamId,
-			log
+			peer: {
+				kind: isDirectMessage ? "direct" : isChannel ? "channel" : "group",
+				id: isDirectMessage ? senderId : conversationId
+			}
 		});
-		const { route } = threadRouting;
+		route.sessionKey = require_thread_session.resolveMSTeamsRouteSessionKey({
+			baseSessionKey: route.sessionKey,
+			isChannel,
+			conversationMessageId,
+			replyToId: context.activity.replyToId
+		});
+		let resolvedTeamAadGroupId = context.activity.channelData?.team?.aadGroupId?.trim() || void 0;
+		const conversationTeamId = isChannel ? teamId : void 0;
+		let teamGroupIdPromise;
+		const resolveTeamAadGroupId = async (deadline) => {
+			if (!conversationTeamId) return;
+			teamGroupIdPromise ??= resolveTeamGroupId({
+				conversationTeamId,
+				aadGroupId: resolvedTeamAadGroupId,
+				getTeamDetails: context.getTeamDetails,
+				deadline
+			}).catch((err) => {
+				log.debug?.("failed to resolve Teams AAD group ID", {
+					teamId: conversationTeamId,
+					error: require_channel_setup.formatUnknownError(err)
+				});
+			});
+			resolvedTeamAadGroupId = await teamGroupIdPromise;
+			return resolvedTeamAadGroupId;
+		};
+		const threadRootId = conversationMessageId ?? context.activity.replyToId;
 		const inboundLabel = isDirectMessage ? `Teams DM from ${senderName}` : `Teams message in ${conversationType} from ${senderName}`;
 		const enqueuePrimaryMessageSystemEvent = () => core.system.enqueueSystemEvent(inboundLabel, {
 			sessionKey: route.sessionKey,
@@ -2888,7 +2330,7 @@ function createMSTeamsMessageHandler(deps) {
 		});
 		const channelId = conversationId;
 		const { teamConfig, channelConfig } = channelGate;
-		const replyPolicy = require_channel.resolveMSTeamsReplyPolicy({
+		const replyPolicy = require_presentation.resolveMSTeamsReplyPolicy({
 			isDirectMessage,
 			globalConfig: currentMSTeamsCfg,
 			teamConfig,
@@ -2934,7 +2376,7 @@ function createMSTeamsMessageHandler(deps) {
 							sender: senderName,
 							body: historyBody,
 							timestamp: timestamp?.getTime(),
-							messageId: activity.id ?? void 0
+							messageId: activity.id
 						}
 					});
 				}
@@ -2945,12 +2387,12 @@ function createMSTeamsMessageHandler(deps) {
 			entry: params,
 			rawBody,
 			advertisedMedia,
-			htmlSummary: htmlSummary ?? void 0,
+			htmlSummary,
 			conversationType,
 			conversationId,
-			conversationMessageId: conversationMessageId ?? void 0,
-			teamAadGroupId: threadRouting.getTeamAadGroupId(),
-			resolveTeamAadGroupId: threadRouting.resolveTeamAadGroupId,
+			conversationMessageId,
+			teamAadGroupId: resolvedTeamAadGroupId,
+			resolveTeamAadGroupId,
 			mediaMaxBytes,
 			tokenProvider,
 			mediaAllowHosts: currentMSTeamsCfg?.mediaAllowHosts,
@@ -2961,7 +2403,9 @@ function createMSTeamsMessageHandler(deps) {
 		if (!content) return;
 		enqueuePrimaryMessageSystemEvent();
 		const thread = await resolveMSTeamsThreadContext({
-			routing: threadRouting,
+			route,
+			threadRootId,
+			resolveTeamAadGroupId,
 			context,
 			tokenProvider,
 			quoteInfo,
@@ -2974,29 +2418,219 @@ function createMSTeamsMessageHandler(deps) {
 			allowNameMatching,
 			log
 		});
-		await dispatchMSTeamsInboundTurn({
+		const dispatchAccountPolicyCfg = readFullConfig();
+		const dispatchCore = require_runtime.getMSTeamsRuntime();
+		const { agentBody, inboundMedia } = content;
+		const { teamAadGroupId, quoteBodyFull, quoteSenderId, quoteSenderName, threadContext } = thread;
+		const teamsFrom = isDirectMessage ? `msteams:${senderId}` : isChannel ? `msteams:channel:${conversationId}` : `msteams:group:${conversationId}`;
+		const teamsTo = isDirectMessage ? `user:${senderId}` : `conversation:${conversationId}`;
+		const envelopeFrom = isDirectMessage ? senderName : conversationType;
+		const buildEnvelope = await (0, openclaw_plugin_sdk_channel_inbound.createChannelInboundEnvelopeBuilderAsync)({
 			cfg: currentCfg,
-			accountPolicyCfg: readFullConfig(),
-			readConfig,
-			listenerAccountId: accountId,
-			runtime,
-			app,
-			tokenProvider,
-			textLimit,
-			log,
-			logVerboseMessage,
-			facts,
-			admission,
-			content,
-			routing: threadRouting,
-			thread,
-			replyStyle,
+			route
+		});
+		let combinedBody = buildEnvelope({
+			channel: "Teams",
+			from: envelopeFrom,
 			timestamp,
-			contextVisibilityMode,
-			mentionWasEffective: mentionDecision.effectiveWasMentioned,
-			conversationHistories,
-			historyLimit
+			body: agentBody
+		});
+		const isRoomish = !isDirectMessage;
+		const historyKey = isRoomish ? facts.historyKey : void 0;
+		if (isRoomish && historyKey) combinedBody = (0, openclaw_plugin_sdk_reply_history.createChannelHistoryWindow)({ historyMap: conversationHistories }).buildPendingContext({
+			historyKey,
+			limit: historyLimit,
+			currentMessage: combinedBody,
+			formatEntry: (entry) => buildEnvelope({
+				channel: "Teams",
+				from: conversationType,
+				timestamp: entry.timestamp,
+				previousTimestamp: null,
+				body: `${entry.sender}: ${entry.body}${entry.messageId ? ` [id:${entry.messageId}]` : ""}`
+			})
+		});
+		const inboundHistory = isRoomish && historyKey && historyLimit > 0 ? (0, openclaw_plugin_sdk_reply_history.createChannelHistoryWindow)({ historyMap: conversationHistories }).buildInboundHistory({
+			historyKey,
+			limit: historyLimit
+		}) : void 0;
+		const commandBody = text.trim();
+		const quoteSenderAllowed = quoteInfo && quoteInfo.sender ? (0, openclaw_plugin_sdk_channel_inbound.resolveInboundSupplementalSenderAllowed)({
+			isGroup: !isDirectMessage,
+			groupPolicy,
+			allowFrom: effectiveGroupAllowFrom,
+			isSenderAllowed: (allowFrom) => (0, openclaw_plugin_sdk_allow_from.resolveAllowlistMatchSimple)({
+				allowFrom,
+				senderId: quoteSenderId ?? "",
+				senderName: quoteSenderName,
+				allowNameMatching
+			}).allowed
+		}) : true;
+		const nativeChannelId = isChannel && teamAadGroupId ? `${teamAadGroupId}/${graphChannelId}` : void 0;
+		const boundIngress = await resolveMSTeamsSenderAccess({
+			cfg: route.accountId === accountId ? readConfig() : dispatchAccountPolicyCfg,
+			accountId: route.accountId,
+			activity,
+			hasControlCommand: admission.isControlCommand,
+			conversationThreadId: facts.threadId,
+			contextBinding: {
+				agentId: route.agentId,
+				sessionKey: route.sessionKey,
+				...activity.id ? { messageId: activity.id } : {},
+				...nativeChannelId ? { nativeChannelId } : {},
+				inboundEventKind: "user_request"
+			}
+		});
+		if (!boundIngress.senderAccess.allowed || boundIngress.hasConflictingConversationScope || boundIngress.msteamsCfg?.enabled === false || boundIngress.commandAccess.shouldBlockControlCommand) {
+			log.info("dropping message (dispatch-time account authorization changed)");
+			return;
+		}
+		const ctxPayload = dispatchCore.channel.inbound.buildContext({
+			channelIngress: boundIngress.channelIngress,
+			channel: "msteams",
+			contextVisibility: contextVisibilityMode,
+			supplemental: {
+				channelStructuredContext: threadContext.length ? [{
+					label: "Thread history",
+					source: "msteams",
+					type: "chat_window",
+					sessionTranscriptMode: "preserve",
+					payload: {
+						order: "chronological",
+						messages: threadContext
+					}
+				}] : void 0,
+				quote: quoteInfo ? {
+					id: quoteInfo.id ?? activity.replyToId,
+					body: quoteBodyFull ?? quoteInfo.body,
+					sender: quoteInfo.sender,
+					senderAllowed: quoteSenderAllowed,
+					isQuote: true
+				} : void 0
+			},
+			media: await (0, openclaw_plugin_sdk_channel_inbound.toInboundMediaFactsWithMetadata)(inboundMedia),
+			messageId: activity.id,
+			timestamp: timestamp?.getTime() ?? Date.now(),
+			from: teamsFrom,
+			sender: {
+				id: senderId,
+				name: senderName
+			},
+			conversation: {
+				kind: isDirectMessage ? "direct" : isChannel ? "channel" : "group",
+				id: conversationId,
+				label: envelopeFrom,
+				spaceId: teamId,
+				nativeChannelId
+			},
+			route: {
+				agentId: route.agentId,
+				dmScope: route.dmScope,
+				accountId: route.accountId,
+				routeSessionKey: route.sessionKey
+			},
+			reply: {
+				to: teamsTo,
+				originatingTo: `conversation:${conversationId}`,
+				messageThreadId: facts.threadId,
+				replyToId: activity.replyToId,
+				nativeChannelId
+			},
+			message: {
+				body: combinedBody,
+				bodyForAgent: agentBody,
+				inboundHistory,
+				rawBody,
+				commandBody
+			},
+			sessionTranscript: { historyLimit: isRoomish ? historyLimit : 0 },
+			access: {
+				mentions: {
+					canDetectMention: !isDirectMessage,
+					wasMentioned: isDirectMessage || mentionDecision.effectiveWasMentioned
+				},
+				commands: { authorized: commandAuthorized === true }
+			},
+			extra: {
+				GroupSubject: !isDirectMessage ? conversationType : void 0,
+				ReplyToIsQuote: quoteInfo ? true : void 0
+			}
 		});
+		const { dispatcherOptions, delivery, replyOptions } = createMSTeamsReplyDispatcher({
+			cfg: currentCfg,
+			agentId: route.agentId,
+			sessionKey: route.sessionKey,
+			accountId: route.accountId,
+			log,
+			app,
+			conversationRef,
+			context,
+			replyStyle,
+			textLimit,
+			onSentMessageIds: (ids) => {
+				for (const id of ids) require_conversation_store_state.recordMSTeamsSentMessage(conversationId, id, { accountId: route.accountId });
+			},
+			tokenProvider,
+			sharePointSiteId: admittedMSTeamsCfg?.sharePointSiteId
+		});
+		const senderTimezone = conversationRef.timezone;
+		const turnConfig = senderTimezone && !currentCfg.agents?.defaults?.userTimezone ? {
+			...currentCfg,
+			agents: {
+				...currentCfg.agents,
+				defaults: {
+					...currentCfg.agents?.defaults,
+					userTimezone: senderTimezone
+				}
+			}
+		} : currentCfg;
+		try {
+			await dispatchCore.channel.inbound.run({
+				channel: "msteams",
+				accountId: route.accountId,
+				raw: context,
+				adapter: {
+					ingest: () => ({
+						id: activity.id ?? `${teamsFrom}:${Date.now()}`,
+						timestamp: timestamp?.getTime(),
+						rawText: rawBody,
+						textForAgent: agentBody,
+						textForCommands: commandBody,
+						raw: activity
+					}),
+					resolveTurn: () => ({
+						cfg: turnConfig,
+						channel: "msteams",
+						accountId: route.accountId,
+						route: {
+							agentId: route.agentId,
+							sessionKey: route.sessionKey
+						},
+						ctxPayload,
+						record: { onRecordError: (err) => {
+							logVerboseMessage(`msteams: failed updating session meta: ${require_channel_setup.formatUnknownError(err)}`);
+						} },
+						history: {
+							isGroup: isRoomish,
+							historyKey,
+							historyMap: conversationHistories,
+							limit: historyLimit
+						},
+						dispatcherOptions,
+						delivery,
+						replyOptions: {
+							...replyOptions,
+							...facts.turnAdoptionLifecycle ? (0, openclaw_plugin_sdk_channel_outbound.bindIngressLifecycleToReplyOptions)(facts.turnAdoptionLifecycle) : {}
+						}
+					})
+				}
+			});
+		} catch (err) {
+			runtime.error(`msteams dispatch failed: ${require_channel_setup.formatUnknownError(err)}`);
+			if (facts.turnAdoptionLifecycle) throw err;
+			try {
+				await context.sendActivity("⚠️ Something went wrong. Please try again.");
+			} catch {}
+		}
 	};
 	const inboundDebouncer = core.channel.debounce.createInboundDebouncer({
 		debounceMs: resolveDebounceMs(),
@@ -3148,13 +2782,6 @@ function createMSTeamsReactionHandler(deps) {
 			const reactionType = reaction.type ?? "unknown";
 			const emoji = require_reaction_types.resolveMSTeamsReactionEmoji(reactionType);
 			const label = direction === "added" ? `Teams reaction ${emoji} added by ${senderName} on message ${targetMessageId}` : `Teams reaction ${emoji} removed by ${senderName} from message ${targetMessageId}`;
-			log.info(`reaction ${direction}`, {
-				sender: senderId,
-				reactionType,
-				emoji,
-				targetMessageId,
-				conversationId
-			});
 			core.system.enqueueSystemEvent(label, {
 				sessionKey,
 				contextKey: `msteams:reaction:${conversationId}:${targetMessageId}:${senderId}:${reactionType}:${direction}`
@@ -3163,44 +2790,12 @@ function createMSTeamsReactionHandler(deps) {
 	};
 }
 //#endregion
-//#region extensions/msteams/src/welcome-card.ts
+//#region extensions/msteams/src/monitor-handler.ts
 const DEFAULT_PROMPT_STARTERS = [
 	"What can you do?",
 	"Summarize my last meeting",
 	"Help me draft an email"
 ];
-function buildWelcomeCard(options) {
-	const botName = options?.botName || "OpenClaw";
-	const starters = options?.promptStarters?.length ? options.promptStarters : DEFAULT_PROMPT_STARTERS;
-	return {
-		type: "AdaptiveCard",
-		version: "1.5",
-		body: [{
-			type: "TextBlock",
-			text: `Hi! I'm ${botName}.`,
-			weight: "Bolder",
-			size: "Medium"
-		}, {
-			type: "TextBlock",
-			text: "I can help you with questions, tasks, and more. Here are some things to try:",
-			wrap: true
-		}],
-		actions: starters.map((label) => ({
-			type: "Action.Submit",
-			title: label,
-			data: { msteams: {
-				type: "imBack",
-				value: label
-			} }
-		}))
-	};
-}
-function buildGroupWelcomeText(botName) {
-	const name = botName || "OpenClaw";
-	return `Hi! I'm ${name}. Mention me with @${name} to get started.`;
-}
-//#endregion
-//#region extensions/msteams/src/monitor-handler.ts
 async function isMSTeamsInvokeAuthorized(params) {
 	const { context, deps, invokeKind } = params;
 	const cfg = deps.readConfig?.() ?? deps.cfg;
@@ -3258,10 +2853,30 @@ function createMSTeamsActivityHandler(deps) {
 		for (const member of membersAdded) if (member.id === botId) {
 			const isPersonal = ((0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(ctx.activity?.conversation?.conversationType) ?? "personal") === "personal";
 			if (isPersonal && msteamsCfg?.welcomeCard !== false) {
-				const card = buildWelcomeCard({
-					botName: ctx.activity?.recipient?.name ?? void 0,
-					promptStarters: msteamsCfg?.promptStarters
-				});
+				const botName = ctx.activity?.recipient?.name || "OpenClaw";
+				const starters = msteamsCfg?.promptStarters?.length ? msteamsCfg.promptStarters : DEFAULT_PROMPT_STARTERS;
+				const card = {
+					type: "AdaptiveCard",
+					version: "1.5",
+					body: [{
+						type: "TextBlock",
+						text: `Hi! I'm ${botName}.`,
+						weight: "Bolder",
+						size: "Medium"
+					}, {
+						type: "TextBlock",
+						text: "I can help you with questions, tasks, and more. Here are some things to try:",
+						wrap: true
+					}],
+					actions: starters.map((label) => ({
+						type: "Action.Submit",
+						title: label,
+						data: { msteams: {
+							type: "imBack",
+							value: label
+						} }
+					}))
+				};
 				try {
 					await ctx.sendActivity(require_conversation_store_state.buildMSTeamsAdaptiveCardActivity(card));
 					deps.log.info("sent welcome card");
@@ -3269,9 +2884,9 @@ function createMSTeamsActivityHandler(deps) {
 					deps.log.debug?.("failed to send welcome card", { error: require_channel_setup.formatUnknownError(err) });
 				}
 			} else if (!isPersonal && msteamsCfg?.groupWelcomeCard === true) {
-				const botName = ctx.activity?.recipient?.name ?? void 0;
+				const botName = ctx.activity?.recipient?.name || "OpenClaw";
 				try {
-					await ctx.sendActivity(buildGroupWelcomeText(botName));
+					await ctx.sendActivity(`Hi! I'm ${botName}. Mention me with @${botName} to get started.`);
 					deps.log.info("sent group welcome message");
 				} catch (err) {
 					deps.log.debug?.("failed to send group welcome", { error: require_channel_setup.formatUnknownError(err) });
@@ -3363,12 +2978,12 @@ async function runMSTeamsFeedbackInvokeHandler(context, deps) {
 			id: isDirectMessage ? senderId : conversationId
 		}
 	});
-	const feedbackThreadId = isChannel ? require_resolve_allowlist.extractMSTeamsConversationMessageId(rawConversationId) ?? activity.replyToId ?? void 0 : void 0;
-	if (feedbackThreadId) route.sessionKey = (0, openclaw_plugin_sdk_routing.resolveThreadSessionKeys)({
+	route.sessionKey = require_thread_session.resolveMSTeamsRouteSessionKey({
 		baseSessionKey: route.sessionKey,
-		threadId: feedbackThreadId,
-		parentSessionKey: route.sessionKey
-	}).sessionKey;
+		isChannel,
+		conversationMessageId: require_resolve_allowlist.extractMSTeamsConversationMessageId(rawConversationId),
+		replyToId: activity.replyToId
+	});
 	const feedbackEvent = {
 		type: "custom",
 		event: "feedback",
@@ -3414,58 +3029,95 @@ async function runMSTeamsFeedbackInvokeHandler(context, deps) {
 		serviceUrl: activity.serviceUrl,
 		locale: activity.locale
 	};
-	if (isNegative && msteamsCfg?.feedbackReflection !== false) runFeedbackReflection({
-		cfg,
-		app: deps.app,
-		accountId: deps.accountId,
-		conversationRef,
-		sessionKey: route.sessionKey,
-		agentId: route.agentId,
-		conversationId,
-		conversationKind: isDirectMessage ? "direct" : isChannel ? "channel" : "group",
-		userComment,
-		log: deps.log
-	}).catch((err) => {
-		deps.log.error("feedback reflection failed", { error: require_channel_setup.formatUnknownError(err) });
-	});
+	if (isNegative && msteamsCfg?.feedbackReflection !== false) {
+		const { app, accountId, log } = deps;
+		const { sessionKey, agentId } = route;
+		const conversationKind = isDirectMessage ? "direct" : isChannel ? "channel" : "group";
+		(async () => {
+			const cooldownMs = msteamsCfg.feedbackReflectionCooldownMs ?? openclaw_plugin_sdk_channel_inbound.DEFAULT_CHANNEL_FEEDBACK_REFLECTION_COOLDOWN_MS;
+			let reflection;
+			try {
+				reflection = await (0, openclaw_plugin_sdk_channel_inbound.runChannelFeedbackReflection)({
+					cfg,
+					channel: "msteams",
+					channelLabel: "Teams",
+					agentId,
+					sessionKey,
+					conversationId,
+					conversationKind,
+					userComment,
+					cooldownMs,
+					onRecordError: (err) => log.debug?.("reflection session record failed", { error: require_channel_setup.formatUnknownError(err) }),
+					onDispatchError: (err) => log.debug?.("reflection reply error", { error: require_channel_setup.formatUnknownError(err) })
+				});
+			} catch (err) {
+				log.error("reflection dispatch failed", { error: require_channel_setup.formatUnknownError(err) });
+				return;
+			}
+			if (reflection.status === "cooldown") {
+				log.debug?.("skipping reflection (cooldown active)", { sessionKey });
+				return;
+			}
+			if (reflection.status === "empty") {
+				log.debug?.("reflection produced no output");
+				return;
+			}
+			if (!(convType === "personal" && reflection.followUp && Boolean(reflection.userMessage))) {
+				if (reflection.followUp && convType !== "personal") log.debug?.("skipping reflection follow-up outside direct message", {
+					sessionKey,
+					conversationType: convType
+				});
+				return;
+			}
+			try {
+				await require_conversation_store_state.sendMSTeamsActivityWithReference(app, require_conversation_store_state.buildConversationReference(conversationRef), {
+					type: "message",
+					text: reflection.userMessage
+				}, {
+					accountId,
+					serviceUrlBoundary: require_resolve_allowlist.resolveMSTeamsSdkCloudOptions(msteamsCfg)
+				});
+			} catch (err) {
+				log.debug?.("failed to send reflection follow-up", { error: require_channel_setup.formatUnknownError(err) });
+			}
+		})().catch((err) => {
+			deps.log.error("feedback reflection failed", { error: require_channel_setup.formatUnknownError(err) });
+		});
+	}
 	return true;
 }
 //#endregion
 //#region extensions/msteams/src/file-consent-invoke.ts
-async function handleMSTeamsFileConsentInvoke(context, log) {
-	const expiredUploadMessage = "The file upload request has expired. Please try sending the file again.";
-	const activity = context.activity;
-	if (activity.type !== "invoke" || activity.name !== "fileConsent/invoke") return false;
-	const consentResponse = require_conversation_store_state.parseFileConsentInvoke(activity);
-	if (!consentResponse) {
-		log.debug?.("invalid file consent invoke");
-		return false;
-	}
-	const uploadId = typeof consentResponse.context?.uploadId === "string" ? consentResponse.context.uploadId : void 0;
-	const inMemoryFile = require_conversation_store_state.getPendingUpload(uploadId);
-	const fsFile = inMemoryFile ? void 0 : await require_conversation_store_state.getPendingUploadFs(uploadId);
-	const pendingFile = inMemoryFile ?? fsFile;
-	if (pendingFile) {
-		const pendingConversationId = require_resolve_allowlist.normalizeMSTeamsConversationId(pendingFile.conversationId);
-		const invokeConversationId = require_resolve_allowlist.normalizeMSTeamsConversationId(activity.conversation?.id ?? "");
-		if (!invokeConversationId || pendingConversationId !== invokeConversationId) {
-			log.info("file consent conversation mismatch", {
-				uploadId,
-				expectedConversationId: pendingConversationId,
-				receivedConversationId: invokeConversationId || void 0
-			});
-			if (consentResponse.action === "accept") await context.sendActivity(expiredUploadMessage);
-			return true;
+/** Run delayed upload/update work after the SDK route acknowledges the invoke. */
+async function runMSTeamsFileConsentInvokeHandler(context, log) {
+	try {
+		const expiredUploadMessage = "The file upload request has expired. Please try sending the file again.";
+		const activity = context.activity;
+		if (activity.type !== "invoke" || activity.name !== "fileConsent/invoke") return;
+		const consentResponse = require_conversation_store_state.parseFileConsentInvoke(activity);
+		if (!consentResponse) {
+			log.debug?.("invalid file consent invoke");
+			return;
 		}
-	}
-	if (consentResponse.action === "accept" && consentResponse.uploadInfo) {
+		const uploadId = typeof consentResponse.context?.uploadId === "string" ? consentResponse.context.uploadId : void 0;
+		const inMemoryFile = require_conversation_store_state.getPendingUpload(uploadId);
+		const fsFile = inMemoryFile ? void 0 : await require_conversation_store_state.getPendingUploadFs(uploadId);
+		const pendingFile = inMemoryFile ?? fsFile;
 		if (pendingFile) {
-			log.debug?.("user accepted file consent, uploading", {
-				uploadId,
-				filename: pendingFile.filename,
-				size: pendingFile.buffer.length
-			});
-			try {
+			const pendingConversationId = require_resolve_allowlist.normalizeMSTeamsConversationId(pendingFile.conversationId);
+			const invokeConversationId = require_resolve_allowlist.normalizeMSTeamsConversationId(activity.conversation?.id ?? "");
+			if (!invokeConversationId || pendingConversationId !== invokeConversationId) {
+				log.info("file consent conversation mismatch", {
+					uploadId,
+					expectedConversationId: pendingConversationId,
+					receivedConversationId: invokeConversationId || void 0
+				});
+				if (consentResponse.action === "accept") await context.sendActivity(expiredUploadMessage);
+				return;
+			}
+		}
+		if (consentResponse.action === "accept" && consentResponse.uploadInfo) {
+			if (pendingFile) try {
 				await require_conversation_store_state.uploadToConsentUrl({
 					url: consentResponse.uploadInfo.uploadUrl,
 					buffer: pendingFile.buffer,
@@ -3489,11 +3141,6 @@ async function handleMSTeamsFileConsentInvoke(context, log) {
 					await context.sendActivity(fileActivity);
 				}
 				else await context.sendActivity(fileActivity);
-				log.info("file upload complete", {
-					uploadId,
-					filename: consentResponse.uploadInfo.name,
-					uniqueId: consentResponse.uploadInfo.uniqueId
-				});
 			} catch (err) {
 				log.error("file upload failed", {
 					uploadId,
@@ -3504,55 +3151,20 @@ async function handleMSTeamsFileConsentInvoke(context, log) {
 				require_conversation_store_state.removePendingUpload(uploadId);
 				await require_conversation_store_state.removePendingUploadFs(uploadId);
 			}
+			else {
+				log.debug?.("pending file not found for consent", { uploadId });
+				await context.sendActivity(expiredUploadMessage);
+			}
 		} else {
-			log.debug?.("pending file not found for consent", { uploadId });
-			await context.sendActivity(expiredUploadMessage);
+			log.debug?.("user declined file consent", { uploadId });
+			require_conversation_store_state.removePendingUpload(uploadId);
+			await require_conversation_store_state.removePendingUploadFs(uploadId);
 		}
-	} else {
-		log.debug?.("user declined file consent", { uploadId });
-		require_conversation_store_state.removePendingUpload(uploadId);
-		await require_conversation_store_state.removePendingUploadFs(uploadId);
-	}
-	return true;
-}
-/**
-* Run the file-consent invoke handler after the SDK route has acknowledged the
-* invoke. This intentionally does not send its own invokeResponse; it only does
-* the delayed upload/update work.
-*/
-async function runMSTeamsFileConsentInvokeHandler(context, log) {
-	try {
-		await require_conversation_store_state.withRevokedProxyFallback({
-			run: () => handleMSTeamsFileConsentInvoke(context, log),
-			onRevoked: async () => true,
-			onRevokedLog: () => {
-				log.debug?.("turn context revoked during file consent invoke; skipping delayed response");
-			}
-		});
 	} catch (err) {
 		log.debug?.("file consent handler error", { error: require_channel_setup.formatUnknownError(err) });
 	}
 }
 //#endregion
-//#region extensions/msteams/src/monitor-account-stores.ts
-function createMSTeamsMonitorStores(accountId, overrides) {
-	return {
-		conversationStore: overrides.conversationStore ?? require_conversation_store_state.createMSTeamsConversationStoreState({ accountId }),
-		pollStore: overrides.pollStore ?? require_conversation_store_state.createMSTeamsPollStoreState({ accountId })
-	};
-}
-//#endregion
-//#region extensions/msteams/src/monitor-status.ts
-function publishMSTeamsBlocked(statusSink, lastError) {
-	statusSink?.((0, openclaw_plugin_sdk_gateway_runtime.channelBlockedPatch)(lastError, { running: true }));
-}
-function publishMSTeamsReady(statusSink, now = Date.now()) {
-	statusSink?.((0, openclaw_plugin_sdk_gateway_runtime.channelReadyPatch)({ lastConnectedAt: now }));
-}
-function publishMSTeamsStopped(statusSink) {
-	statusSink?.((0, openclaw_plugin_sdk_gateway_runtime.channelStoppedPatch)());
-}
-//#endregion
 //#region extensions/msteams/src/msteams-ingress.ts
 const MSTEAMS_INGRESS_VERSION = 1;
 const MSTEAMS_INGRESS_DRAIN_INTERVAL_MS = 500;
@@ -3717,17 +3329,9 @@ function createMSTeamsReplayContext(activity, app, serviceUrlBoundary, accountId
 	return {
 		activity,
 		sendActivity,
-		sendActivities: async (activities) => {
-			const results = [];
-			for (const outbound of activities) results.push(await sendActivity(outbound));
-			return results;
-		},
 		updateActivity: async (outbound) => {
 			return await require_conversation_store_state.updateMSTeamsActivityWithReference(app, reference, typeof outbound.id === "string" ? outbound.id : "", outbound, proactiveOptions);
 		},
-		deleteActivity: async (activityId) => {
-			await require_conversation_store_state.deleteMSTeamsActivityWithReference(app, reference, activityId, proactiveOptions);
-		},
 		getTeamDetails: (teamId) => app.api.teams.getById(teamId)
 	};
 }
@@ -3744,7 +3348,7 @@ const MSTEAMS_SSO_TOKENS_NAMESPACE = "sso-tokens";
 const MSTEAMS_MAX_SSO_TOKENS = 5e3;
 const STORE_KEY_VERSION_PREFIX = "v2:";
 function makeMSTeamsSsoTokenStoreKey(connectionName, userId) {
-	return `${STORE_KEY_VERSION_PREFIX}${(0, node_crypto.createHash)("sha256").update(JSON.stringify([connectionName, userId])).digest("hex")}`;
+	return `${STORE_KEY_VERSION_PREFIX}${(0, openclaw_plugin_sdk_node_crypto_runtime.sha256Hex)(JSON.stringify([connectionName, userId]))}`;
 }
 function createMSTeamsSsoTokenStoreFs(params) {
 	const namespace = require_delegated_state.resolveMSTeamsAccountStateNamespace(MSTEAMS_SSO_TOKENS_NAMESPACE, params?.accountId);
@@ -3757,12 +3361,10 @@ function createMSTeamsSsoTokenStoreFs(params) {
 			return await tokenStore.lookup(makeMSTeamsSsoTokenStoreKey(connectionName, userId)) ?? null;
 		},
 		async save(token) {
-			await require_delegated_state.withMSTeamsSqliteMutationLock(namespace, async () => {
-				await tokenStore.register(makeMSTeamsSsoTokenStoreKey(token.connectionName, token.userId), require_delegated_state.toPluginJsonValue({ ...token }));
-			});
+			await tokenStore.register(makeMSTeamsSsoTokenStoreKey(token.connectionName, token.userId), require_delegated_state.toPluginJsonValue(token));
 		},
 		async remove({ connectionName, userId }) {
-			return require_delegated_state.withMSTeamsSqliteMutationLock(namespace, () => tokenStore.delete(makeMSTeamsSsoTokenStoreKey(connectionName, userId)));
+			return tokenStore.delete(makeMSTeamsSsoTokenStoreKey(connectionName, userId));
 		}
 	};
 }
@@ -3772,7 +3374,6 @@ function createMSTeamsSsoTokenStoreFs(params) {
 function createMSTeamsWebhookHandler(expressApp, warn) {
 	const responses = /* @__PURE__ */ new Map();
 	let closing = false;
-	let closeTask;
 	return {
 		handler: ((req, res) => {
 			if (closing) {
@@ -3798,18 +3399,15 @@ function createMSTeamsWebhookHandler(expressApp, warn) {
 			}
 			return response.promise;
 		}),
-		close: () => {
+		close: async () => {
 			closing = true;
-			closeTask ??= (async () => {
-				if (responses.size === 0) return;
-				try {
-					await (0, openclaw_plugin_sdk_time_runtime.withTimeout)(Promise.all(responses.values()), require_resolve_allowlist.MSTEAMS_REQUEST_TIMEOUT_MS, "Microsoft Teams webhook shutdown");
-				} catch {
-					warn("Microsoft Teams webhook shutdown exceeded 30 seconds; closing active responses");
-					for (const response of responses.keys()) response.destroy();
-				}
-			})();
-			return closeTask;
+			if (responses.size === 0) return;
+			try {
+				await (0, openclaw_plugin_sdk_time_runtime.withTimeout)(Promise.all(responses.values()), require_resolve_allowlist.MSTEAMS_REQUEST_TIMEOUT_MS, "Microsoft Teams webhook shutdown");
+			} catch {
+				warn("Microsoft Teams webhook shutdown exceeded 30 seconds; closing active responses");
+				for (const response of responses.keys()) response.destroy();
+			}
 		}
 	};
 }
@@ -3825,19 +3423,13 @@ async function monitorMSTeamsProvider(opts) {
 	let msteamsCfg = account.config;
 	if (opts.cfg.channels?.msteams?.enabled !== true || msteamsCfg.enabled === false) {
 		log.debug?.("msteams provider disabled");
-		publishMSTeamsBlocked(opts.statusSink, "Microsoft Teams provider is disabled");
-		return {
-			app: null,
-			shutdown: async () => {}
-		};
+		opts.statusSink?.((0, openclaw_plugin_sdk_gateway_runtime.channelBlockedPatch)("Microsoft Teams provider is disabled", { running: true }));
+		return;
 	}
 	if (!creds) {
 		log.error("msteams credentials not configured");
-		publishMSTeamsBlocked(opts.statusSink, "Microsoft Teams credentials are not configured");
-		return {
-			app: null,
-			shutdown: async () => {}
-		};
+		opts.statusSink?.((0, openclaw_plugin_sdk_gateway_runtime.channelBlockedPatch)("Microsoft Teams credentials are not configured", { running: true }));
+		return;
 	}
 	const collisionIssue = require_channel.resolveMSTeamsWebhookCollisionIssue(accountPolicyCfg);
 	if (collisionIssue) throw new Error(collisionIssue);
@@ -3946,7 +3538,8 @@ async function monitorMSTeamsProvider(opts) {
 		cfg,
 		resolveChannelLimitMb: ({ cfg: channelCfg }) => channelCfg.channels?.msteams?.mediaMaxMb
 	}) ?? 8388608;
-	const { conversationStore, pollStore } = createMSTeamsMonitorStores(accountId, opts);
+	const conversationStore = require_conversation_store_state.createMSTeamsConversationStoreState({ accountId });
+	const pollStore = require_conversation_store_state.createMSTeamsPollStoreState({ accountId });
 	log.info("starting provider on Gateway HTTP routes");
 	const express = await import("express");
 	const expressApp = express.default();
@@ -4183,12 +3776,11 @@ async function monitorMSTeamsProvider(opts) {
 			throwOnFailure: true,
 			log: (message) => log.warn?.(message)
 		}));
-		const legacyMessagesOwner = require_channel.resolveMSTeamsLegacyMessagesOwner(accountPolicyCfg);
-		if (accountId === openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID && !legacyMessagesOwner) unregisterRoutes.push((0, openclaw_plugin_sdk_webhook_targets.registerPluginHttpRoute)({
+		if (accountId === openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID && configuredPath !== "/api/messages") unregisterRoutes.push((0, openclaw_plugin_sdk_webhook_targets.registerPluginHttpRoute)({
 			path: "/api/messages",
 			auth: "plugin",
 			pluginId: "msteams",
-			source: "msteams-webhook",
+			source: "msteams-webhook-alias",
 			accountId,
 			handler: webhook.handler,
 			log: (message) => log.warn?.(message)
@@ -4199,26 +3791,15 @@ async function monitorMSTeamsProvider(opts) {
 		throw error;
 	}
 	log.info(`msteams provider started on Gateway route ${configuredPath}`);
-	publishMSTeamsReady(opts.statusSink);
-	let shutdownTask;
-	const shutdown = () => {
-		shutdownTask ??= (async () => {
-			await webhook.close();
-			for (const unregister of unregisterRoutes.splice(0)) unregister();
-			await ingress.stop();
-			publishMSTeamsStopped(opts.statusSink);
-		})();
-		return shutdownTask;
-	};
+	opts.statusSink?.((0, openclaw_plugin_sdk_gateway_runtime.channelReadyPatch)());
 	try {
-		await (0, openclaw_plugin_sdk_channel_outbound.waitUntilAbort)(opts.abortSignal, shutdown);
+		await (0, openclaw_plugin_sdk_channel_outbound.waitUntilAbort)(opts.abortSignal);
 	} finally {
-		await shutdown();
+		await webhook.close();
+		for (const unregister of unregisterRoutes) unregister();
+		await ingress.stop();
+		opts.statusSink?.((0, openclaw_plugin_sdk_gateway_runtime.channelStoppedPatch)());
 	}
-	return {
-		app: expressApp,
-		shutdown
-	};
 }
 function cardActionMessage(value) {
 	return {
@@ -4257,18 +3838,10 @@ function adaptSdkContext(ctx, app) {
 	const sendActivity = (activity) => isThreadable ? sdkCtx.reply(activity) : sdkCtx.send(activity);
 	return Object.assign(Object.create(Object.getPrototypeOf(ctx)), ctx, {
 		sendActivity,
-		sendActivities: async (activities) => {
-			const results = [];
-			for (const a of activities) results.push(await sendActivity(a));
-			return results;
-		},
 		updateActivity: async (activity) => {
 			const activityId = activity.id ?? "";
 			return activityApi.conversations.activities(conversationId).update(activityId, activity);
 		},
-		deleteActivity: async (activityId) => {
-			return activityApi.conversations.activities(conversationId).delete(activityId);
-		},
 		getTeamDetails,
 		stream: sdkCtx.stream
 	});