@openclaw/msteams 2026.5.12 → 2026.5.14-beta.1

package/dist/api.js

@@ -1,3 +1,3 @@
-import { t as msteamsPlugin } from "./channel-BApPsQGS.js";
-import { i as msteamsSetupAdapter, n as openDelegatedOAuthUrl, r as createMSTeamsSetupWizardBase, t as msteamsSetupWizard } from "./setup-surface-Ce463w3t.js";
+import { t as msteamsPlugin } from "./channel-C7J7iUD1.js";
+import { i as msteamsSetupAdapter, n as openDelegatedOAuthUrl, r as createMSTeamsSetupWizardBase, t as msteamsSetupWizard } from "./setup-surface-D9_2tf9Q.js";
 export { createMSTeamsSetupWizardBase, msteamsPlugin, msteamsSetupAdapter, msteamsSetupWizard, openDelegatedOAuthUrl };

package/dist/{channel-BApPsQGS.js → channel-C7J7iUD1.js}

@@ -1,9 +1,9 @@
 import { o as buildProbeChannelStatusSummary, r as PAIRING_APPROVED_MESSAGE, s as chunkTextForOutbound, t as DEFAULT_ACCOUNT_ID, u as createDefaultChannelRuntimeState } from "./runtime-api-C3EIaIpt.js";
-import { h as resolveMSTeamsCredentials } from "./graph-users-BQJvcsX8.js";
-import { a as parseMSTeamsTeamChannelInput, c as resolveMSTeamsUserAllowlist, i as parseMSTeamsConversationId, n as normalizeMSTeamsMessagingTarget, r as normalizeMSTeamsUserInput, s as resolveMSTeamsChannelAllowlist, t as looksLikeMSTeamsTargetId } from "./resolve-allowlist-DPCTpYxi.js";
+import { h as resolveMSTeamsCredentials } from "./graph-users-OieoCBxW.js";
+import { a as parseMSTeamsTeamChannelInput, c as resolveMSTeamsUserAllowlist, i as parseMSTeamsConversationId, n as normalizeMSTeamsMessagingTarget, r as normalizeMSTeamsUserInput, s as resolveMSTeamsChannelAllowlist, t as looksLikeMSTeamsTargetId } from "./resolve-allowlist-DWp32o4l.js";
 import { t as MSTeamsChannelConfigSchema } from "./config-schema-DwOEthCC.js";
 import { n as resolveMSTeamsGroupToolPolicy } from "./policy-bM71GXRd.js";
-import { i as msteamsSetupAdapter, t as msteamsSetupWizard } from "./setup-surface-Ce463w3t.js";
+import { i as msteamsSetupAdapter, t as msteamsSetupWizard } from "./setup-surface-D9_2tf9Q.js";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";
 import { createTopLevelChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
@@ -183,7 +183,7 @@ const collectMSTeamsSecurityWarnings = createAllowlistProviderGroupPolicyWarning
 	resolveGroupPolicy: ({ cfg }) => cfg.channels?.msteams?.groupPolicy,
 	collect: ({ groupPolicy }) => groupPolicy === "open" ? ["- MS Teams groups: groupPolicy=\"open\" allows any member to trigger (mention-gated). Set channels.msteams.groupPolicy=\"allowlist\" + channels.msteams.groupAllowFrom to restrict senders."] : []
 });
-const loadMSTeamsChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-CnDHBWml.js"), "msTeamsChannelRuntime");
+const loadMSTeamsChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-B14HY4Hr.js"), "msTeamsChannelRuntime");
 const resolveMSTeamsChannelConfig = (cfg) => ({
 	allowFrom: cfg.channels?.msteams?.allowFrom,
 	defaultTo: cfg.channels?.msteams?.defaultTo
@@ -965,7 +965,7 @@ const msteamsPlugin = createChatChannelPlugin({
 			})
 		}),
 		gateway: { startAccount: async (ctx) => {
-			const { monitorMSTeamsProvider } = await import("./src-BEhrsfns.js");
+			const { monitorMSTeamsProvider } = await import("./src-CBRN2aXw.js");
 			const port = ctx.cfg.channels?.msteams?.webhook?.port ?? 3978;
 			ctx.setStatus({
 				accountId: ctx.accountId,

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as msteamsPlugin } from "./channel-BApPsQGS.js";
+import { t as msteamsPlugin } from "./channel-C7J7iUD1.js";
 export { msteamsPlugin };

package/dist/{channel.runtime-CnDHBWml.js → channel.runtime-B14HY4Hr.js}

@@ -1,6 +1,6 @@
 import { s as chunkTextForOutbound } from "./runtime-api-C3EIaIpt.js";
-import { a as fetchGraphJson, c as normalizeQuery, d as postGraphJson, f as resolveGraphToken, i as fetchGraphAbsoluteUrl, l as patchGraphJson, n as deleteGraphRequest, o as listChannelsForTeam, r as escapeOData, s as listTeamsByName, t as searchGraphUsers, u as postGraphBetaJson } from "./graph-users-BQJvcsX8.js";
-import { S as createMSTeamsConversationStoreFs, a as sendMessageMSTeams, b as createMSTeamsPollStoreFs, i as sendAdaptiveCardMSTeams, n as deleteMessageMSTeams, o as sendPollMSTeams, r as editMessageMSTeams, t as probeMSTeams } from "./probe-4kXMWuAw.js";
+import { a as fetchGraphJson, c as normalizeQuery, d as postGraphJson, f as resolveGraphToken, i as fetchGraphAbsoluteUrl, l as patchGraphJson, n as deleteGraphRequest, o as listChannelsForTeam, r as escapeOData, s as listTeamsByName, t as searchGraphUsers, u as postGraphBetaJson } from "./graph-users-OieoCBxW.js";
+import { S as createMSTeamsConversationStoreFs, a as sendMessageMSTeams, b as createMSTeamsPollStoreFs, i as sendAdaptiveCardMSTeams, n as deleteMessageMSTeams, o as sendPollMSTeams, r as editMessageMSTeams, t as probeMSTeams } from "./probe-D3LwpZwU.js";
 import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createAttachedChannelResultAdapter } from "openclaw/plugin-sdk/channel-send-result";
 import { resolveOutboundSendDep } from "openclaw/plugin-sdk/outbound-send-deps";

package/dist/{graph-users-BQJvcsX8.js → graph-users-OieoCBxW.js}

@@ -180,8 +180,24 @@ function extractHtmlFromAttachment(att) {
 	if (!isRecord$2(att.content)) return;
 	return typeof att.content.text === "string" ? att.content.text : typeof att.content.body === "string" ? att.content.body : typeof att.content.content === "string" ? att.content.content : void 0;
 }
-function isLikelyBase64Payload(value) {
-	return /^[A-Za-z0-9+/=\r\n]+$/.test(value);
+function canonicalizeInlineBase64Payload(value) {
+	let cleaned = "";
+	let padding = 0;
+	let sawPadding = false;
+	for (let index = 0; index < value.length; index += 1) {
+		const code = value.charCodeAt(index);
+		if (code <= 32) continue;
+		if (code === 61) {
+			padding += 1;
+			if (padding > 2) return;
+			sawPadding = true;
+			cleaned += "=";
+			continue;
+		}
+		if (sawPadding || !(code >= 65 && code <= 90 || code >= 97 && code <= 122 || code >= 48 && code <= 57 || code === 43 || code === 47)) return;
+		cleaned += value[index];
+	}
+	return cleaned && cleaned.length % 4 === 0 ? cleaned : void 0;
 }
 function decodeDataImageWithLimits(src, opts) {
 	const match = /^data:(image\/[a-z0-9.+-]+)?(;base64)?,(.*)$/i.exec(src);
@@ -194,12 +210,12 @@ function decodeDataImageWithLimits(src, opts) {
 		candidate: null,
 		estimatedBytes: 0
 	};
-	const payload = match[3] ?? "";
-	if (!payload || !isLikelyBase64Payload(payload)) return {
+	const canonicalPayload = canonicalizeInlineBase64Payload(match[3] ?? "");
+	if (!canonicalPayload) return {
 		candidate: null,
 		estimatedBytes: 0
 	};
-	const estimatedBytes = estimateBase64DecodedBytes(payload);
+	const estimatedBytes = estimateBase64DecodedBytes(canonicalPayload);
 	if (estimatedBytes <= 0) return {
 		candidate: null,
 		estimatedBytes: 0
@@ -212,7 +228,7 @@ function decodeDataImageWithLimits(src, opts) {
 		return {
 			candidate: {
 				kind: "data",
-				data: Buffer.from(payload, "base64"),
+				data: Buffer.from(canonicalPayload, "base64"),
 				contentType,
 				placeholder: "<media:image>"
 			},

package/dist/{probe-4kXMWuAw.js → probe-D3LwpZwU.js}

@@ -1,5 +1,5 @@
 import { C as normalizeStringEntries, E as resolveChannelMediaMaxBytes, M as getMSTeamsRuntime, d as detectMime, g as getFileExtension, m as extractOriginalFilename, p as extensionForMime, y as loadOutboundMediaFromUrl } from "./runtime-api-C3EIaIpt.js";
-import { C as loadMSTeamsSdkWithAuth, D as formatMSTeamsSendErrorHint, E as classifyMSTeamsSendError, O as formatUnknownError, S as createMSTeamsTokenProvider, _ as resolveMSTeamsStorePath, h as resolveMSTeamsCredentials, k as isRevokedProxyError, m as loadDelegatedTokens, w as buildUserAgent, x as createMSTeamsAdapter, y as readAccessToken } from "./graph-users-BQJvcsX8.js";
+import { C as loadMSTeamsSdkWithAuth, D as formatMSTeamsSendErrorHint, E as classifyMSTeamsSendError, O as formatUnknownError, S as createMSTeamsTokenProvider, _ as resolveMSTeamsStorePath, h as resolveMSTeamsCredentials, k as isRevokedProxyError, m as loadDelegatedTokens, w as buildUserAgent, x as createMSTeamsAdapter, y as readAccessToken } from "./graph-users-OieoCBxW.js";
 import { i as resolveMSTeamsRouteConfig, r as resolveMSTeamsReplyPolicy } from "./policy-bM71GXRd.js";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-message";
 import { isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";

package/dist/{resolve-allowlist-DPCTpYxi.js → resolve-allowlist-DWp32o4l.js}

@@ -1,4 +1,4 @@
-import { c as normalizeQuery, f as resolveGraphToken, o as listChannelsForTeam, s as listTeamsByName, t as searchGraphUsers } from "./graph-users-BQJvcsX8.js";
+import { c as normalizeQuery, f as resolveGraphToken, o as listChannelsForTeam, s as listTeamsByName, t as searchGraphUsers } from "./graph-users-OieoCBxW.js";
 import { mapAllowlistResolutionInputs } from "openclaw/plugin-sdk/allow-from";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/msteams/src/resolve-allowlist.ts

package/dist/setup-plugin-api.js

@@ -1,6 +1,6 @@
-import { h as resolveMSTeamsCredentials } from "./graph-users-BQJvcsX8.js";
+import { h as resolveMSTeamsCredentials } from "./graph-users-OieoCBxW.js";
 import { t as MSTeamsChannelConfigSchema } from "./config-schema-DwOEthCC.js";
-import { i as msteamsSetupAdapter, t as msteamsSetupWizard } from "./setup-surface-Ce463w3t.js";
+import { i as msteamsSetupAdapter, t as msteamsSetupWizard } from "./setup-surface-D9_2tf9Q.js";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";
 import { createTopLevelChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";

package/dist/{setup-surface-Ce463w3t.js → setup-surface-D9_2tf9Q.js}

@@ -1,5 +1,5 @@
-import { O as formatUnknownError, g as saveDelegatedTokens, h as resolveMSTeamsCredentials, p as hasConfiguredMSTeamsCredentials, v as normalizeSecretInputString } from "./graph-users-BQJvcsX8.js";
-import { c as resolveMSTeamsUserAllowlist, o as parseMSTeamsTeamEntry, s as resolveMSTeamsChannelAllowlist } from "./resolve-allowlist-DPCTpYxi.js";
+import { O as formatUnknownError, g as saveDelegatedTokens, h as resolveMSTeamsCredentials, p as hasConfiguredMSTeamsCredentials, v as normalizeSecretInputString } from "./graph-users-OieoCBxW.js";
+import { c as resolveMSTeamsUserAllowlist, o as parseMSTeamsTeamEntry, s as resolveMSTeamsChannelAllowlist } from "./resolve-allowlist-DWp32o4l.js";
 import { DEFAULT_ACCOUNT_ID, createStandardChannelSetupStatus, createTopLevelChannelAllowFromSetter, createTopLevelChannelDmPolicy, createTopLevelChannelGroupPolicySetter, mergeAllowFromEntries, splitSetupEntries } from "openclaw/plugin-sdk/setup";
 import { formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
 //#region extensions/msteams/src/setup-core.ts

package/dist/{src-BEhrsfns.js → src-CBRN2aXw.js}

@@ -1,16 +1,15 @@
 import { A as summarizeMapping, D as resolveDefaultGroupPolicy, E as resolveChannelMediaMaxBytes, M as getMSTeamsRuntime, N as getOptionalMSTeamsRuntime, _ as isDangerousNameMatchingEnabled, a as buildMediaPayload, b as logTypingFailure, c as createChannelMessageReplyPipeline, f as dispatchReplyFromConfigWithSettledDispatcher$1, l as createChannelPairingController, n as DEFAULT_WEBHOOK_MAX_BODY_BYTES, t as DEFAULT_ACCOUNT_ID, v as keepHttpServerTaskAlive, x as mergeAllowlist } from "./runtime-api-C3EIaIpt.js";
-import { A as ATTACHMENT_TAG_RE, B as isLikelyImageAttachment, C as loadMSTeamsSdkWithAuth, D as formatMSTeamsSendErrorHint, E as classifyMSTeamsSendError, F as estimateBase64DecodedBytes, G as resolveAttachmentFetchPolicy, H as isUrlAllowed, I as extractHtmlFromAttachment, J as safeFetchWithPolicy, K as resolveMediaSsrfPolicy, L as extractInlineImageCandidates, M as IMG_SRC_RE, N as applyAuthorizationHeaderForUrl, O as formatUnknownError, P as encodeGraphShareId, R as inferPlaceholder, S as createMSTeamsTokenProvider, T as ensureUserAgentHeader, U as normalizeContentType, V as isRecord$1, W as readNestedString, X as tryBuildGraphSharesUrlForSharedLink, Y as safeHostForUrl, _ as resolveMSTeamsStorePath, a as fetchGraphJson, b as createBotFrameworkJwtValidator, h as resolveMSTeamsCredentials, j as GRAPH_ROOT, q as resolveRequestUrl, w as buildUserAgent, x as createMSTeamsAdapter, z as isDownloadableAttachment } from "./graph-users-BQJvcsX8.js";
-import { c as resolveMSTeamsUserAllowlist, s as resolveMSTeamsChannelAllowlist } from "./resolve-allowlist-DPCTpYxi.js";
+import { A as ATTACHMENT_TAG_RE, B as isLikelyImageAttachment, C as loadMSTeamsSdkWithAuth, D as formatMSTeamsSendErrorHint, E as classifyMSTeamsSendError, F as estimateBase64DecodedBytes, G as resolveAttachmentFetchPolicy, H as isUrlAllowed, I as extractHtmlFromAttachment, J as safeFetchWithPolicy, K as resolveMediaSsrfPolicy, L as extractInlineImageCandidates, M as IMG_SRC_RE, N as applyAuthorizationHeaderForUrl, O as formatUnknownError, P as encodeGraphShareId, R as inferPlaceholder, S as createMSTeamsTokenProvider, T as ensureUserAgentHeader, U as normalizeContentType, V as isRecord$1, W as readNestedString, X as tryBuildGraphSharesUrlForSharedLink, Y as safeHostForUrl, _ as resolveMSTeamsStorePath, a as fetchGraphJson, b as createBotFrameworkJwtValidator, h as resolveMSTeamsCredentials, j as GRAPH_ROOT, q as resolveRequestUrl, w as buildUserAgent, x as createMSTeamsAdapter, z as isDownloadableAttachment } from "./graph-users-OieoCBxW.js";
+import { c as resolveMSTeamsUserAllowlist, s as resolveMSTeamsChannelAllowlist } from "./resolve-allowlist-DWp32o4l.js";
 import { i as resolveMSTeamsRouteConfig, r as resolveMSTeamsReplyPolicy, t as resolveMSTeamsAllowlistMatch } from "./policy-bM71GXRd.js";
-import { C as readJsonFile, S as createMSTeamsConversationStoreFs, T as writeJsonFile, _ as buildFileInfoCard, b as createMSTeamsPollStoreFs, c as renderReplyPayloadsToMessages, d as withRevokedProxyFallback, f as resolveGraphChatId, g as removePendingUploadFs, h as getPendingUploadFs, l as sendMSTeamsMessages, m as removePendingUpload, p as getPendingUpload, s as buildConversationReference, u as AI_GENERATED_ENTITY, v as parseFileConsentInvoke, w as withFileLock, x as extractMSTeamsPollVote, y as uploadToConsentUrl } from "./probe-4kXMWuAw.js";
+import { C as readJsonFile, S as createMSTeamsConversationStoreFs, T as writeJsonFile, _ as buildFileInfoCard, b as createMSTeamsPollStoreFs, c as renderReplyPayloadsToMessages, d as withRevokedProxyFallback, f as resolveGraphChatId, g as removePendingUploadFs, h as getPendingUploadFs, l as sendMSTeamsMessages, m as removePendingUpload, p as getPendingUpload, s as buildConversationReference, u as AI_GENERATED_ENTITY, v as parseFileConsentInvoke, w as withFileLock, x as extractMSTeamsPollVote, y as uploadToConsentUrl } from "./probe-D3LwpZwU.js";
 import { formatAllowlistMatchMeta } from "openclaw/plugin-sdk/allow-from";
 import { createLiveMessageState, createPreviewMessageReceipt, defineFinalizableLivePreviewAdapter, deliverWithFinalizableLivePreviewAdapter, markLiveMessageFinalized } from "openclaw/plugin-sdk/channel-message";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, readStringValue } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createDraftStreamLoop } from "openclaw/plugin-sdk/channel-lifecycle";
-import { readResponseWithLimit } from "openclaw/plugin-sdk/media-runtime";
+import { saveResponseMedia } from "openclaw/plugin-sdk/media-runtime";
 import { dispatchReplyFromConfigWithSettledDispatcher, hasFinalInboundReplyDispatch, resolveInboundReplyDispatchCounts } from "openclaw/plugin-sdk/inbound-reply-dispatch";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
-import { Buffer as Buffer$1 } from "node:buffer";
 import path from "node:path";
 import { appendRegularFile } from "openclaw/plugin-sdk/security-runtime";
 import { writeJsonFileAtomically } from "openclaw/plugin-sdk/json-store";
@@ -20,7 +19,7 @@ import { channelIngressRoutes, resolveStableChannelMessageIngress } from "opencl
 import { logInboundDrop, resolveInboundMentionDecision, resolveInboundSessionEnvelopeContext } from "openclaw/plugin-sdk/channel-inbound";
 import { filterSupplementalContextItems, resolveChannelContextVisibilityMode, shouldIncludeSupplementalContext } from "openclaw/plugin-sdk/context-visibility-runtime";
 import { DEFAULT_GROUP_HISTORY_LIMIT, buildPendingHistoryContextFromMap, recordPendingHistoryEntryIfEnabled } from "openclaw/plugin-sdk/reply-history";
-import { buildChannelProgressDraftLine, buildChannelProgressDraftLineForEntry, createChannelProgressDraftGate, formatChannelProgressDraftText, isChannelProgressDraftWorkToolName, resolveChannelPreviewStreamMode, resolveChannelProgressDraftMaxLines, resolveChannelStreamingBlockEnabled, resolveChannelStreamingPreviewToolProgress } from "openclaw/plugin-sdk/channel-streaming";
+import { buildChannelProgressDraftLine, buildChannelProgressDraftLineForEntry, createChannelProgressDraftGate, formatChannelProgressDraftText, isChannelProgressDraftWorkToolName, mergeChannelProgressDraftLine, normalizeChannelProgressDraftLineIdentity, resolveChannelPreviewStreamMode, resolveChannelProgressDraftMaxLines, resolveChannelStreamingBlockEnabled, resolveChannelStreamingPreviewToolProgress } from "openclaw/plugin-sdk/channel-streaming";
 //#region extensions/msteams/src/feedback-reflection-prompt.ts
 /** Max chars of the thumbed-down response to include in the reflection prompt. */
 const MAX_RESPONSE_CHARS = 500;
@@ -624,7 +623,7 @@ async function fetchBotFrameworkAttachmentInfo(params) {
 		return;
 	}
 }
-async function fetchBotFrameworkAttachmentView(params) {
+async function saveBotFrameworkAttachmentView(params) {
 	const url = `${normalizeServiceUrl(params.serviceUrl)}/v3/attachments/${encodeURIComponent(params.attachmentId)}/views/${encodeURIComponent(params.viewId)}`;
 	let response;
 	try {
@@ -646,12 +645,16 @@ async function fetchBotFrameworkAttachmentView(params) {
 	const contentLength = response.headers.get("content-length");
 	if (contentLength && Number(contentLength) > params.maxBytes) return;
 	try {
-		const arrayBuffer = await response.arrayBuffer();
-		const buffer = Buffer$1.from(arrayBuffer);
-		if (buffer.byteLength > params.maxBytes) return;
-		return buffer;
+		return await getMSTeamsRuntime().channel.media.saveResponseMedia(response, {
+			sourceUrl: url,
+			filePathHint: params.fileNameHint,
+			maxBytes: params.maxBytes,
+			fallbackContentType: params.contentTypeHint,
+			subdir: "inbound",
+			originalFilename: params.preserveFilenames ? params.fileNameHint : void 0
+		});
 	} catch (err) {
-		params.logger?.warn?.("msteams botFramework attachmentView body read failed", { error: err instanceof Error ? err.message : String(err) });
+		params.logger?.warn?.("msteams botFramework attachmentView save failed", { error: err instanceof Error ? err.message : String(err) });
 		return;
 	}
 }
@@ -691,40 +694,31 @@ async function downloadMSTeamsBotFrameworkAttachment(params) {
 	const viewId = typeof candidateView?.viewId === "string" && candidateView.viewId ? candidateView.viewId : void 0;
 	if (!viewId) return;
 	if (typeof candidateView?.size === "number" && candidateView.size > 0 && candidateView.size > params.maxBytes) return;
-	const buffer = await fetchBotFrameworkAttachmentView({
+	const fileNameHint = typeof params.fileNameHint === "string" && params.fileNameHint || typeof info.name === "string" && info.name || void 0;
+	const contentTypeHint = typeof params.contentTypeHint === "string" && params.contentTypeHint || typeof info.type === "string" && info.type || void 0;
+	const saved = await saveBotFrameworkAttachmentView({
 		serviceUrl: params.serviceUrl,
 		attachmentId: params.attachmentId,
 		viewId,
 		accessToken,
 		maxBytes: params.maxBytes,
+		fileNameHint,
+		contentTypeHint,
+		preserveFilenames: params.preserveFilenames,
 		policy,
 		fetchFn: params.fetchFn,
 		resolveFn: params.resolveFn,
 		logger: params.logger
 	});
-	if (!buffer) return;
-	const fileNameHint = typeof params.fileNameHint === "string" && params.fileNameHint || typeof info.name === "string" && info.name || void 0;
-	const contentTypeHint = typeof params.contentTypeHint === "string" && params.contentTypeHint || typeof info.type === "string" && info.type || void 0;
-	const mime = await getMSTeamsRuntime().media.detectMime({
-		buffer,
-		headerMime: contentTypeHint,
-		filePath: fileNameHint
-	});
-	try {
-		const originalFilename = params.preserveFilenames ? fileNameHint : void 0;
-		const saved = await getMSTeamsRuntime().channel.media.saveMediaBuffer(buffer, mime ?? contentTypeHint, "inbound", params.maxBytes, originalFilename);
-		return {
-			path: saved.path,
+	if (!saved) return;
+	return {
+		path: saved.path,
+		contentType: saved.contentType,
+		placeholder: inferPlaceholder({
 			contentType: saved.contentType,
-			placeholder: inferPlaceholder({
-				contentType: saved.contentType,
-				fileName: fileNameHint
-			})
-		};
-	} catch (err) {
-		params.logger?.warn?.("msteams botFramework save failed", { error: err instanceof Error ? err.message : String(err) });
-		return;
-	}
+			fileName: fileNameHint
+		})
+	};
 }
 /**
 * Download media for every attachment referenced by a Bot Framework personal
@@ -780,8 +774,8 @@ async function downloadMSTeamsBotFrameworkAttachments(params) {
 * Direct fetch path used when the caller's `fetchImpl` has already validated
 * the URL against a hostname allowlist (for example `safeFetchWithPolicy`).
 *
-* Bypasses the strict SSRF dispatcher on `fetchRemoteMedia` because:
-*   1. The pinned undici dispatcher used by `fetchRemoteMedia` is incompatible
+* Bypasses the strict SSRF dispatcher on `readRemoteMediaBuffer` because:
+*   1. The pinned undici dispatcher used by `readRemoteMediaBuffer` is incompatible
 *      with Node 24+'s built-in undici v7 (fails with "invalid onRequestStart
 *      method"), which silently breaks SharePoint/OneDrive downloads. See
 *      issue #63396.
@@ -789,43 +783,35 @@ async function downloadMSTeamsBotFrameworkAttachments(params) {
 *      (`safeFetch` validates every redirect hop against the hostname
 *      allowlist before following).
 */
-async function fetchRemoteMediaDirect(params) {
-	const response = await params.fetchImpl(params.url, { redirect: "follow" });
-	if (!response.ok) {
-		const statusText = response.statusText ? ` ${response.statusText}` : "";
-		throw new Error(`HTTP ${response.status}${statusText}`);
-	}
-	const contentLength = response.headers.get("content-length");
-	if (contentLength) {
-		const length = Number(contentLength);
-		if (Number.isFinite(length) && length > params.maxBytes) throw new Error(`content length ${length} exceeds maxBytes ${params.maxBytes}`);
-	}
-	return {
-		buffer: await readResponseWithLimit(response, params.maxBytes, { onOverflow: ({ size, maxBytes }) => /* @__PURE__ */ new Error(`payload size ${size} exceeds maxBytes ${maxBytes}`) }),
-		contentType: response.headers.get("content-type") ?? void 0
-	};
+async function saveRemoteMediaDirect(params) {
+	return await saveResponseMedia(await params.fetchImpl(params.url, { redirect: "follow" }), {
+		sourceUrl: params.url,
+		filePathHint: params.filePathHint,
+		maxBytes: params.maxBytes,
+		fallbackContentType: params.contentTypeHint,
+		originalFilename: params.originalFilename
+	});
 }
 async function downloadAndStoreMSTeamsRemoteMedia(params) {
-	let fetched;
-	if (params.useDirectFetch && params.fetchImpl) fetched = await fetchRemoteMediaDirect({
+	const originalFilename = params.preserveFilenames ? params.filePathHint : void 0;
+	let saved;
+	if (params.useDirectFetch && params.fetchImpl) saved = await saveRemoteMediaDirect({
 		url: params.url,
+		filePathHint: params.filePathHint,
 		fetchImpl: params.fetchImpl,
-		maxBytes: params.maxBytes
+		maxBytes: params.maxBytes,
+		contentTypeHint: params.contentTypeHint,
+		originalFilename
 	});
-	else fetched = await getMSTeamsRuntime().channel.media.fetchRemoteMedia({
+	else saved = await getMSTeamsRuntime().channel.media.saveRemoteMedia({
 		url: params.url,
 		fetchImpl: params.fetchImpl,
 		filePathHint: params.filePathHint,
 		maxBytes: params.maxBytes,
-		ssrfPolicy: params.ssrfPolicy
+		ssrfPolicy: params.ssrfPolicy,
+		fallbackContentType: params.contentTypeHint,
+		originalFilename
 	});
-	const mime = await getMSTeamsRuntime().media.detectMime({
-		buffer: fetched.buffer,
-		headerMime: fetched.contentType ?? params.contentTypeHint,
-		filePath: params.filePathHint
-	});
-	const originalFilename = params.preserveFilenames ? params.filePathHint : void 0;
-	const saved = await getMSTeamsRuntime().channel.media.saveMediaBuffer(fetched.buffer, mime ?? params.contentTypeHint, "inbound", params.maxBytes, originalFilename);
 	return {
 		path: saved.path,
 		contentType: saved.contentType,
@@ -1106,28 +1092,38 @@ async function downloadGraphHostedContent(params) {
 				params.logger?.warn?.("msteams graph hostedContent base64 decode failed", { error: err instanceof Error ? err.message : String(err) });
 				continue;
 			}
-		} else if (item.id) try {
-			const { response: valRes, release } = await fetchWithSsrFGuard({
-				url: `${params.messageUrl}/hostedContents/${encodeURIComponent(item.id)}/$value`,
-				fetchImpl: params.fetchFn ?? fetch,
-				init: { headers: ensureUserAgentHeader({ Authorization: `Bearer ${params.accessToken}` }) },
-				policy: params.ssrfPolicy,
-				auditContext: "msteams.graph.hostedContent.value"
-			});
+		} else if (item.id) {
 			try {
-				if (!valRes.ok) continue;
-				const cl = valRes.headers.get("content-length");
-				if (cl && Number(cl) > params.maxBytes) continue;
-				const ab = await valRes.arrayBuffer();
-				buffer = Buffer.from(ab);
-			} finally {
-				await release();
+				const valueUrl = `${params.messageUrl}/hostedContents/${encodeURIComponent(item.id)}/$value`;
+				const { response: valRes, release } = await fetchWithSsrFGuard({
+					url: valueUrl,
+					fetchImpl: params.fetchFn ?? fetch,
+					init: { headers: ensureUserAgentHeader({ Authorization: `Bearer ${params.accessToken}` }) },
+					policy: params.ssrfPolicy,
+					auditContext: "msteams.graph.hostedContent.value"
+				});
+				try {
+					if (!valRes.ok) continue;
+					const saved = await getMSTeamsRuntime().channel.media.saveResponseMedia(valRes, {
+						sourceUrl: valueUrl,
+						maxBytes: params.maxBytes,
+						fallbackContentType: item.contentType ?? void 0,
+						subdir: "inbound"
+					});
+					out.push({
+						path: saved.path,
+						contentType: saved.contentType,
+						placeholder: inferPlaceholder({ contentType: saved.contentType })
+					});
+				} finally {
+					await release();
+				}
+			} catch (err) {
+				params.logger?.warn?.("msteams graph hostedContent value fetch failed", { error: err instanceof Error ? err.message : String(err) });
+				continue;
 			}
-		} catch (err) {
-			params.logger?.warn?.("msteams graph hostedContent value fetch failed", { error: err instanceof Error ? err.message : String(err) });
 			continue;
-		}
-		else continue;
+		} else continue;
 		if (buffer.byteLength > params.maxBytes) continue;
 		const mime = await getMSTeamsRuntime().media.detectMime({
 			buffer,
@@ -1824,13 +1820,8 @@ function createTeamsReplyStreamController(params) {
 		if (!stream || streamMode !== "progress") return;
 		if (options?.toolName !== void 0 && !isChannelProgressDraftWorkToolName(options.toolName)) return;
 		if (shouldStreamPreviewToolProgress) {
-			const normalized = normalizeProgressLineIdentity(line);
-			if (normalized) {
-				if (normalizeProgressLineIdentity(progressLines.at(-1)) !== normalized) {
-					const progressLine = typeof line === "object" && line !== void 0 ? line : normalized;
-					progressLines = [...progressLines, progressLine].slice(-resolveChannelProgressDraftMaxLines(params.msteamsConfig));
-				}
-			}
+			const normalized = normalizeChannelProgressDraftLineIdentity(line);
+			if (normalized) progressLines = mergeChannelProgressDraftLine(progressLines, typeof line === "object" && line !== void 0 ? line : normalized, { maxLines: resolveChannelProgressDraftMaxLines(params.msteamsConfig) });
 		}
 		await noteProgressWork();
 	};
@@ -1961,9 +1952,6 @@ function createTeamsReplyStreamController(params) {
 		}
 	};
 }
-function normalizeProgressLineIdentity(line) {
-	return (typeof line === "string" ? line : line?.text)?.replace(/\s+/g, " ").trim() ?? "";
-}
 //#endregion
 //#region extensions/msteams/src/reply-dispatcher.ts
 function createMSTeamsReplyDispatcher(params) {
@@ -2214,6 +2202,7 @@ function createMSTeamsReplyDispatcher(params) {
 				onItemEvent: async (payload) => {
 					await streamController.pushProgressLine(buildChannelProgressDraftLineForEntry(msteamsCfg, {
 						event: "item",
+						itemId: payload.itemId,
 						itemKind: payload.kind,
 						title: payload.title,
 						name: payload.name,

package/dist/test-api.js

@@ -1,2 +1,2 @@
-import { t as msteamsPlugin } from "./channel-BApPsQGS.js";
+import { t as msteamsPlugin } from "./channel-C7J7iUD1.js";
 export { msteamsPlugin };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/msteams",
-  "version": "2026.5.12",
+  "version": "2026.5.14-beta.1",
   "description": "OpenClaw Microsoft Teams channel plugin",
   "repository": {
     "type": "git",
@@ -22,7 +22,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.12"
+    "openclaw": ">=2026.5.14-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -58,10 +58,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.12"
+      "pluginApi": ">=2026.5.14-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.5.12"
+      "openclawVersion": "2026.5.14-beta.1"
     },
     "release": {
       "publishToClawHub": true,