@openclaw/msteams 2026.5.12 → 2026.5.14-beta.2

package/dist/{setup-surface-Ce463w3t.js → setup-surface-CQrMX-nJ.js}

@@ -1,7 +1,223 @@
-import { O as formatUnknownError, g as saveDelegatedTokens, h as resolveMSTeamsCredentials, p as hasConfiguredMSTeamsCredentials, v as normalizeSecretInputString } from "./graph-users-BQJvcsX8.js";
-import { c as resolveMSTeamsUserAllowlist, o as parseMSTeamsTeamEntry, s as resolveMSTeamsChannelAllowlist } from "./resolve-allowlist-DPCTpYxi.js";
+import { O as formatUnknownError, c as normalizeQuery, f as resolveGraphToken, g as saveDelegatedTokens, h as resolveMSTeamsCredentials, o as listChannelsForTeam, p as hasConfiguredMSTeamsCredentials, s as listTeamsByName, t as searchGraphUsers, v as normalizeSecretInputString } from "./graph-users-ChPPxUzD.js";
+import { mapAllowlistResolutionInputs } from "openclaw/plugin-sdk/allow-from";
+import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { DEFAULT_ACCOUNT_ID, createStandardChannelSetupStatus, createTopLevelChannelAllowFromSetter, createTopLevelChannelDmPolicy, createTopLevelChannelGroupPolicySetter, mergeAllowFromEntries, splitSetupEntries } from "openclaw/plugin-sdk/setup";
 import { formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
+//#region extensions/msteams/src/resolve-allowlist.ts
+function stripProviderPrefix(raw) {
+	return raw.replace(/^(msteams|teams):/i, "");
+}
+function normalizeMSTeamsMessagingTarget(raw) {
+	let trimmed = raw.trim();
+	if (!trimmed) return;
+	trimmed = stripProviderPrefix(trimmed).trim();
+	if (/^conversation:/i.test(trimmed)) {
+		const id = trimmed.slice(13).trim();
+		return id ? `conversation:${id}` : void 0;
+	}
+	if (/^user:/i.test(trimmed)) {
+		const id = trimmed.slice(5).trim();
+		return id ? `user:${id}` : void 0;
+	}
+	return trimmed || void 0;
+}
+function normalizeMSTeamsUserInput(raw) {
+	return stripProviderPrefix(raw).replace(/^(user|conversation):/i, "").trim();
+}
+function parseMSTeamsConversationId(raw) {
+	const trimmed = stripProviderPrefix(raw).trim();
+	if (!/^conversation:/i.test(trimmed)) return null;
+	return trimmed.slice(13).trim();
+}
+/**
+* Detect whether a raw target string looks like a Microsoft Teams conversation
+* or user id that cron announce delivery and other explicit-target paths can
+* forward verbatim to the channel adapter.
+*
+* Accepts both prefixed and bare formats:
+* - `conversation:<id>` — explicit conversation prefix
+* - `user:<aad-guid>`   — user id (16+ hex chars, UUID-like)
+* - `19:abc@thread.tacv2` / `19:abc@thread.skype` — channel / legacy group
+* - `19:{userId}_{appId}@unq.gbl.spaces` — Graph 1:1 chat thread format
+* - `a:1xxx` — Bot Framework personal (1:1) chat id
+* - `8:orgid:xxx` — Bot Framework org-scoped personal chat id
+* - `29:xxx` — Bot Framework user id
+*
+* Display-name user targets such as `user:John Smith` intentionally return
+* false so that the Graph API directory lookup still runs for them.
+*/
+function looksLikeMSTeamsTargetId(raw) {
+	const trimmed = raw.trim();
+	if (!trimmed) return false;
+	if (/^conversation:/i.test(trimmed)) return true;
+	if (/^user:/i.test(trimmed)) {
+		const id = trimmed.slice(5).trim();
+		return /^[0-9a-fA-F-]{16,}$/.test(id);
+	}
+	if (/^19:.+@thread\.(tacv2|skype)$/i.test(trimmed)) return true;
+	if (/^19:.+@unq\.gbl\.spaces$/i.test(trimmed)) return true;
+	if (/^a:1[A-Za-z0-9_-]+$/i.test(trimmed)) return true;
+	if (/^8:orgid:[A-Za-z0-9-]+$/i.test(trimmed)) return true;
+	if (/^29:[A-Za-z0-9_-]+$/i.test(trimmed)) return true;
+	return /@thread\b/i.test(trimmed);
+}
+function normalizeMSTeamsTeamKey(raw) {
+	return stripProviderPrefix(raw).replace(/^team:/i, "").trim() || void 0;
+}
+function normalizeMSTeamsChannelKey(raw) {
+	return (raw?.trim().replace(/^#/, "").trim() ?? "") || void 0;
+}
+function normalizeMSTeamsConversationTargetId(raw) {
+	const trimmed = stripProviderPrefix(raw).trim();
+	return parseMSTeamsConversationId(trimmed) ?? trimmed;
+}
+function looksLikeMSTeamsThreadConversationId(raw) {
+	const normalized = normalizeMSTeamsConversationTargetId(raw);
+	return /^19:.+@thread\./i.test(normalized);
+}
+function parseMSTeamsTeamChannelInput(raw) {
+	const trimmed = stripProviderPrefix(raw).trim();
+	if (!trimmed) return {};
+	const parts = trimmed.split("/");
+	const team = normalizeMSTeamsTeamKey(parts[0] ?? "");
+	const channel = parts.length > 1 ? normalizeMSTeamsChannelKey(parts.slice(1).join("/")) : void 0;
+	return {
+		...team ? { team } : {},
+		...channel ? { channel } : {}
+	};
+}
+function parseMSTeamsTeamEntry(raw) {
+	const { team, channel } = parseMSTeamsTeamChannelInput(raw);
+	if (!team) return null;
+	return {
+		teamKey: team,
+		...channel ? { channelKey: channel } : {}
+	};
+}
+async function resolveMSTeamsChannelAllowlist(params) {
+	let tokenPromise;
+	const getToken = () => {
+		tokenPromise ??= resolveGraphToken(params.cfg);
+		return tokenPromise;
+	};
+	return await mapAllowlistResolutionInputs({
+		inputs: params.entries,
+		mapInput: async (input) => {
+			const { team, channel } = parseMSTeamsTeamChannelInput(input);
+			if (!team) return {
+				input,
+				resolved: false
+			};
+			if (looksLikeMSTeamsThreadConversationId(team)) {
+				const teamId = normalizeMSTeamsConversationTargetId(team);
+				if (!channel) return {
+					input,
+					resolved: true,
+					teamId,
+					teamName: teamId
+				};
+				if (!looksLikeMSTeamsThreadConversationId(channel)) return {
+					input,
+					resolved: false,
+					teamId,
+					teamName: teamId,
+					note: "channel id required for conversation-id team"
+				};
+				const channelId = normalizeMSTeamsConversationTargetId(channel);
+				return {
+					input,
+					resolved: true,
+					teamId,
+					teamName: teamId,
+					channelId,
+					channelName: channelId
+				};
+			}
+			const token = await getToken();
+			const teams = /^[0-9a-fA-F-]{16,}$/.test(team) ? [{
+				id: team,
+				displayName: team
+			}] : await listTeamsByName(token, team);
+			if (teams.length === 0) return {
+				input,
+				resolved: false,
+				note: "team not found"
+			};
+			const teamMatch = teams[0];
+			const graphTeamId = teamMatch.id?.trim();
+			const teamName = teamMatch.displayName?.trim() || team;
+			if (!graphTeamId) return {
+				input,
+				resolved: false,
+				note: "team id missing"
+			};
+			let teamChannels = [];
+			try {
+				teamChannels = await listChannelsForTeam(token, graphTeamId);
+			} catch {}
+			const teamId = teamChannels.find((ch) => normalizeOptionalLowercaseString(ch.displayName) === "general")?.id?.trim() || graphTeamId;
+			if (!channel) return {
+				input,
+				resolved: true,
+				teamId,
+				teamName,
+				note: teams.length > 1 ? "multiple teams; chose first" : void 0
+			};
+			const normalizedChannel = normalizeOptionalLowercaseString(channel);
+			const channelMatch = teamChannels.find((item) => item.id === channel) ?? teamChannels.find((item) => normalizeOptionalLowercaseString(item.displayName) === normalizedChannel) ?? teamChannels.find((item) => normalizeLowercaseStringOrEmpty(item.displayName ?? "").includes(normalizedChannel ?? ""));
+			if (!channelMatch?.id) return {
+				input,
+				resolved: false,
+				note: "channel not found"
+			};
+			return {
+				input,
+				resolved: true,
+				teamId,
+				teamName,
+				channelId: channelMatch.id,
+				channelName: channelMatch.displayName ?? channel,
+				note: teamChannels.length > 1 ? "multiple channels; chose first" : void 0
+			};
+		}
+	});
+}
+async function resolveMSTeamsUserAllowlist(params) {
+	const token = await resolveGraphToken(params.cfg);
+	return await mapAllowlistResolutionInputs({
+		inputs: params.entries,
+		mapInput: async (input) => {
+			const query = normalizeQuery(normalizeMSTeamsUserInput(input));
+			if (!query) return {
+				input,
+				resolved: false
+			};
+			if (/^[0-9a-fA-F-]{16,}$/.test(query)) return {
+				input,
+				resolved: true,
+				id: query
+			};
+			const users = await searchGraphUsers({
+				token,
+				query,
+				top: 10
+			});
+			const match = users[0];
+			if (!match?.id) return {
+				input,
+				resolved: false
+			};
+			return {
+				input,
+				resolved: true,
+				id: match.id,
+				name: match.displayName ?? void 0,
+				note: users.length > 1 ? "multiple matches; chose first" : void 0
+			};
+		}
+	});
+}
+//#endregion
 //#region extensions/msteams/src/setup-core.ts
 const msteamsSetupAdapter = {
 	resolveAccountId: () => DEFAULT_ACCOUNT_ID,
@@ -271,7 +487,7 @@ const msteamsSetupWizard = {
 					}
 				};
 				try {
-					const { loginMSTeamsDelegated } = await import("./oauth-BWJyilR1.js");
+					const { loginMSTeamsDelegated } = await import("./oauth-DsVj42gA.js");
 					const progress = params.prompter.progress("MSTeams Delegated OAuth");
 					saveDelegatedTokens(await loginMSTeamsDelegated({
 						isRemote: true,
@@ -310,4 +526,4 @@ const msteamsSetupWizard = {
 	})
 };
 //#endregion
-export { msteamsSetupAdapter as i, openDelegatedOAuthUrl as n, createMSTeamsSetupWizardBase as r, msteamsSetupWizard as t };
+export { looksLikeMSTeamsTargetId as a, parseMSTeamsConversationId as c, resolveMSTeamsUserAllowlist as d, msteamsSetupAdapter as i, parseMSTeamsTeamChannelInput as l, openDelegatedOAuthUrl as n, normalizeMSTeamsMessagingTarget as o, createMSTeamsSetupWizardBase as r, normalizeMSTeamsUserInput as s, msteamsSetupWizard as t, resolveMSTeamsChannelAllowlist as u };

package/dist/{src-BEhrsfns.js → src-CYZq-lQ4.js}

@@ -1,16 +1,15 @@
 import { A as summarizeMapping, D as resolveDefaultGroupPolicy, E as resolveChannelMediaMaxBytes, M as getMSTeamsRuntime, N as getOptionalMSTeamsRuntime, _ as isDangerousNameMatchingEnabled, a as buildMediaPayload, b as logTypingFailure, c as createChannelMessageReplyPipeline, f as dispatchReplyFromConfigWithSettledDispatcher$1, l as createChannelPairingController, n as DEFAULT_WEBHOOK_MAX_BODY_BYTES, t as DEFAULT_ACCOUNT_ID, v as keepHttpServerTaskAlive, x as mergeAllowlist } from "./runtime-api-C3EIaIpt.js";
-import { A as ATTACHMENT_TAG_RE, B as isLikelyImageAttachment, C as loadMSTeamsSdkWithAuth, D as formatMSTeamsSendErrorHint, E as classifyMSTeamsSendError, F as estimateBase64DecodedBytes, G as resolveAttachmentFetchPolicy, H as isUrlAllowed, I as extractHtmlFromAttachment, J as safeFetchWithPolicy, K as resolveMediaSsrfPolicy, L as extractInlineImageCandidates, M as IMG_SRC_RE, N as applyAuthorizationHeaderForUrl, O as formatUnknownError, P as encodeGraphShareId, R as inferPlaceholder, S as createMSTeamsTokenProvider, T as ensureUserAgentHeader, U as normalizeContentType, V as isRecord$1, W as readNestedString, X as tryBuildGraphSharesUrlForSharedLink, Y as safeHostForUrl, _ as resolveMSTeamsStorePath, a as fetchGraphJson, b as createBotFrameworkJwtValidator, h as resolveMSTeamsCredentials, j as GRAPH_ROOT, q as resolveRequestUrl, w as buildUserAgent, x as createMSTeamsAdapter, z as isDownloadableAttachment } from "./graph-users-BQJvcsX8.js";
-import { c as resolveMSTeamsUserAllowlist, s as resolveMSTeamsChannelAllowlist } from "./resolve-allowlist-DPCTpYxi.js";
-import { i as resolveMSTeamsRouteConfig, r as resolveMSTeamsReplyPolicy, t as resolveMSTeamsAllowlistMatch } from "./policy-bM71GXRd.js";
-import { C as readJsonFile, S as createMSTeamsConversationStoreFs, T as writeJsonFile, _ as buildFileInfoCard, b as createMSTeamsPollStoreFs, c as renderReplyPayloadsToMessages, d as withRevokedProxyFallback, f as resolveGraphChatId, g as removePendingUploadFs, h as getPendingUploadFs, l as sendMSTeamsMessages, m as removePendingUpload, p as getPendingUpload, s as buildConversationReference, u as AI_GENERATED_ENTITY, v as parseFileConsentInvoke, w as withFileLock, x as extractMSTeamsPollVote, y as uploadToConsentUrl } from "./probe-4kXMWuAw.js";
+import { A as ATTACHMENT_TAG_RE, B as isLikelyImageAttachment, C as loadMSTeamsSdkWithAuth, D as formatMSTeamsSendErrorHint, E as classifyMSTeamsSendError, F as estimateBase64DecodedBytes, G as resolveAttachmentFetchPolicy, H as isUrlAllowed, I as extractHtmlFromAttachment, J as safeFetchWithPolicy, K as resolveMediaSsrfPolicy, L as extractInlineImageCandidates, M as IMG_SRC_RE, N as applyAuthorizationHeaderForUrl, O as formatUnknownError, P as encodeGraphShareId, R as inferPlaceholder, S as createMSTeamsTokenProvider, T as ensureUserAgentHeader, U as normalizeContentType, V as isRecord$1, W as readNestedString, X as tryBuildGraphSharesUrlForSharedLink, Y as safeHostForUrl, _ as resolveMSTeamsStorePath, a as fetchGraphJson, b as createBotFrameworkJwtValidator, h as resolveMSTeamsCredentials, j as GRAPH_ROOT, q as resolveRequestUrl, w as buildUserAgent, x as createMSTeamsAdapter, z as isDownloadableAttachment } from "./graph-users-ChPPxUzD.js";
+import { d as resolveMSTeamsUserAllowlist, u as resolveMSTeamsChannelAllowlist } from "./setup-surface-CQrMX-nJ.js";
+import { i as resolveMSTeamsRouteConfig, n as resolveMSTeamsAllowlistMatch, r as resolveMSTeamsReplyPolicy } from "./channel-C5CVTygn.js";
+import { C as readJsonFile, S as createMSTeamsConversationStoreFs, T as writeJsonFile, _ as buildFileInfoCard, b as createMSTeamsPollStoreFs, c as renderReplyPayloadsToMessages, d as withRevokedProxyFallback, f as resolveGraphChatId, g as removePendingUploadFs, h as getPendingUploadFs, l as sendMSTeamsMessages, m as removePendingUpload, p as getPendingUpload, s as buildConversationReference, u as AI_GENERATED_ENTITY, v as parseFileConsentInvoke, w as withFileLock, x as extractMSTeamsPollVote, y as uploadToConsentUrl } from "./probe-I2DM0U-s.js";
 import { formatAllowlistMatchMeta } from "openclaw/plugin-sdk/allow-from";
 import { createLiveMessageState, createPreviewMessageReceipt, defineFinalizableLivePreviewAdapter, deliverWithFinalizableLivePreviewAdapter, markLiveMessageFinalized } from "openclaw/plugin-sdk/channel-message";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, readStringValue } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createDraftStreamLoop } from "openclaw/plugin-sdk/channel-lifecycle";
-import { readResponseWithLimit } from "openclaw/plugin-sdk/media-runtime";
+import { saveResponseMedia } from "openclaw/plugin-sdk/media-runtime";
 import { dispatchReplyFromConfigWithSettledDispatcher, hasFinalInboundReplyDispatch, resolveInboundReplyDispatchCounts } from "openclaw/plugin-sdk/inbound-reply-dispatch";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
-import { Buffer as Buffer$1 } from "node:buffer";
 import path from "node:path";
 import { appendRegularFile } from "openclaw/plugin-sdk/security-runtime";
 import { writeJsonFileAtomically } from "openclaw/plugin-sdk/json-store";
@@ -20,7 +19,7 @@ import { channelIngressRoutes, resolveStableChannelMessageIngress } from "opencl
 import { logInboundDrop, resolveInboundMentionDecision, resolveInboundSessionEnvelopeContext } from "openclaw/plugin-sdk/channel-inbound";
 import { filterSupplementalContextItems, resolveChannelContextVisibilityMode, shouldIncludeSupplementalContext } from "openclaw/plugin-sdk/context-visibility-runtime";
 import { DEFAULT_GROUP_HISTORY_LIMIT, buildPendingHistoryContextFromMap, recordPendingHistoryEntryIfEnabled } from "openclaw/plugin-sdk/reply-history";
-import { buildChannelProgressDraftLine, buildChannelProgressDraftLineForEntry, createChannelProgressDraftGate, formatChannelProgressDraftText, isChannelProgressDraftWorkToolName, resolveChannelPreviewStreamMode, resolveChannelProgressDraftMaxLines, resolveChannelStreamingBlockEnabled, resolveChannelStreamingPreviewToolProgress } from "openclaw/plugin-sdk/channel-streaming";
+import { buildChannelProgressDraftLine, buildChannelProgressDraftLineForEntry, createChannelProgressDraftGate, formatChannelProgressDraftText, isChannelProgressDraftWorkToolName, mergeChannelProgressDraftLine, normalizeChannelProgressDraftLineIdentity, resolveChannelPreviewStreamMode, resolveChannelProgressDraftMaxLines, resolveChannelStreamingBlockEnabled, resolveChannelStreamingPreviewToolProgress } from "openclaw/plugin-sdk/channel-streaming";
 //#region extensions/msteams/src/feedback-reflection-prompt.ts
 /** Max chars of the thumbed-down response to include in the reflection prompt. */
 const MAX_RESPONSE_CHARS = 500;
@@ -624,7 +623,7 @@ async function fetchBotFrameworkAttachmentInfo(params) {
 		return;
 	}
 }
-async function fetchBotFrameworkAttachmentView(params) {
+async function saveBotFrameworkAttachmentView(params) {
 	const url = `${normalizeServiceUrl(params.serviceUrl)}/v3/attachments/${encodeURIComponent(params.attachmentId)}/views/${encodeURIComponent(params.viewId)}`;
 	let response;
 	try {
@@ -646,12 +645,16 @@ async function fetchBotFrameworkAttachmentView(params) {
 	const contentLength = response.headers.get("content-length");
 	if (contentLength && Number(contentLength) > params.maxBytes) return;
 	try {
-		const arrayBuffer = await response.arrayBuffer();
-		const buffer = Buffer$1.from(arrayBuffer);
-		if (buffer.byteLength > params.maxBytes) return;
-		return buffer;
+		return await getMSTeamsRuntime().channel.media.saveResponseMedia(response, {
+			sourceUrl: url,
+			filePathHint: params.fileNameHint,
+			maxBytes: params.maxBytes,
+			fallbackContentType: params.contentTypeHint,
+			subdir: "inbound",
+			originalFilename: params.preserveFilenames ? params.fileNameHint : void 0
+		});
 	} catch (err) {
-		params.logger?.warn?.("msteams botFramework attachmentView body read failed", { error: err instanceof Error ? err.message : String(err) });
+		params.logger?.warn?.("msteams botFramework attachmentView save failed", { error: err instanceof Error ? err.message : String(err) });
 		return;
 	}
 }
@@ -691,40 +694,31 @@ async function downloadMSTeamsBotFrameworkAttachment(params) {
 	const viewId = typeof candidateView?.viewId === "string" && candidateView.viewId ? candidateView.viewId : void 0;
 	if (!viewId) return;
 	if (typeof candidateView?.size === "number" && candidateView.size > 0 && candidateView.size > params.maxBytes) return;
-	const buffer = await fetchBotFrameworkAttachmentView({
+	const fileNameHint = typeof params.fileNameHint === "string" && params.fileNameHint || typeof info.name === "string" && info.name || void 0;
+	const contentTypeHint = typeof params.contentTypeHint === "string" && params.contentTypeHint || typeof info.type === "string" && info.type || void 0;
+	const saved = await saveBotFrameworkAttachmentView({
 		serviceUrl: params.serviceUrl,
 		attachmentId: params.attachmentId,
 		viewId,
 		accessToken,
 		maxBytes: params.maxBytes,
+		fileNameHint,
+		contentTypeHint,
+		preserveFilenames: params.preserveFilenames,
 		policy,
 		fetchFn: params.fetchFn,
 		resolveFn: params.resolveFn,
 		logger: params.logger
 	});
-	if (!buffer) return;
-	const fileNameHint = typeof params.fileNameHint === "string" && params.fileNameHint || typeof info.name === "string" && info.name || void 0;
-	const contentTypeHint = typeof params.contentTypeHint === "string" && params.contentTypeHint || typeof info.type === "string" && info.type || void 0;
-	const mime = await getMSTeamsRuntime().media.detectMime({
-		buffer,
-		headerMime: contentTypeHint,
-		filePath: fileNameHint
-	});
-	try {
-		const originalFilename = params.preserveFilenames ? fileNameHint : void 0;
-		const saved = await getMSTeamsRuntime().channel.media.saveMediaBuffer(buffer, mime ?? contentTypeHint, "inbound", params.maxBytes, originalFilename);
-		return {
-			path: saved.path,
+	if (!saved) return;
+	return {
+		path: saved.path,
+		contentType: saved.contentType,
+		placeholder: inferPlaceholder({
 			contentType: saved.contentType,
-			placeholder: inferPlaceholder({
-				contentType: saved.contentType,
-				fileName: fileNameHint
-			})
-		};
-	} catch (err) {
-		params.logger?.warn?.("msteams botFramework save failed", { error: err instanceof Error ? err.message : String(err) });
-		return;
-	}
+			fileName: fileNameHint
+		})
+	};
 }
 /**
 * Download media for every attachment referenced by a Bot Framework personal
@@ -780,8 +774,8 @@ async function downloadMSTeamsBotFrameworkAttachments(params) {
 * Direct fetch path used when the caller's `fetchImpl` has already validated
 * the URL against a hostname allowlist (for example `safeFetchWithPolicy`).
 *
-* Bypasses the strict SSRF dispatcher on `fetchRemoteMedia` because:
-*   1. The pinned undici dispatcher used by `fetchRemoteMedia` is incompatible
+* Bypasses the strict SSRF dispatcher on `readRemoteMediaBuffer` because:
+*   1. The pinned undici dispatcher used by `readRemoteMediaBuffer` is incompatible
 *      with Node 24+'s built-in undici v7 (fails with "invalid onRequestStart
 *      method"), which silently breaks SharePoint/OneDrive downloads. See
 *      issue #63396.
@@ -789,43 +783,35 @@ async function downloadMSTeamsBotFrameworkAttachments(params) {
 *      (`safeFetch` validates every redirect hop against the hostname
 *      allowlist before following).
 */
-async function fetchRemoteMediaDirect(params) {
-	const response = await params.fetchImpl(params.url, { redirect: "follow" });
-	if (!response.ok) {
-		const statusText = response.statusText ? ` ${response.statusText}` : "";
-		throw new Error(`HTTP ${response.status}${statusText}`);
-	}
-	const contentLength = response.headers.get("content-length");
-	if (contentLength) {
-		const length = Number(contentLength);
-		if (Number.isFinite(length) && length > params.maxBytes) throw new Error(`content length ${length} exceeds maxBytes ${params.maxBytes}`);
-	}
-	return {
-		buffer: await readResponseWithLimit(response, params.maxBytes, { onOverflow: ({ size, maxBytes }) => /* @__PURE__ */ new Error(`payload size ${size} exceeds maxBytes ${maxBytes}`) }),
-		contentType: response.headers.get("content-type") ?? void 0
-	};
+async function saveRemoteMediaDirect(params) {
+	return await saveResponseMedia(await params.fetchImpl(params.url, { redirect: "follow" }), {
+		sourceUrl: params.url,
+		filePathHint: params.filePathHint,
+		maxBytes: params.maxBytes,
+		fallbackContentType: params.contentTypeHint,
+		originalFilename: params.originalFilename
+	});
 }
 async function downloadAndStoreMSTeamsRemoteMedia(params) {
-	let fetched;
-	if (params.useDirectFetch && params.fetchImpl) fetched = await fetchRemoteMediaDirect({
+	const originalFilename = params.preserveFilenames ? params.filePathHint : void 0;
+	let saved;
+	if (params.useDirectFetch && params.fetchImpl) saved = await saveRemoteMediaDirect({
 		url: params.url,
+		filePathHint: params.filePathHint,
 		fetchImpl: params.fetchImpl,
-		maxBytes: params.maxBytes
+		maxBytes: params.maxBytes,
+		contentTypeHint: params.contentTypeHint,
+		originalFilename
 	});
-	else fetched = await getMSTeamsRuntime().channel.media.fetchRemoteMedia({
+	else saved = await getMSTeamsRuntime().channel.media.saveRemoteMedia({
 		url: params.url,
 		fetchImpl: params.fetchImpl,
 		filePathHint: params.filePathHint,
 		maxBytes: params.maxBytes,
-		ssrfPolicy: params.ssrfPolicy
+		ssrfPolicy: params.ssrfPolicy,
+		fallbackContentType: params.contentTypeHint,
+		originalFilename
 	});
-	const mime = await getMSTeamsRuntime().media.detectMime({
-		buffer: fetched.buffer,
-		headerMime: fetched.contentType ?? params.contentTypeHint,
-		filePath: params.filePathHint
-	});
-	const originalFilename = params.preserveFilenames ? params.filePathHint : void 0;
-	const saved = await getMSTeamsRuntime().channel.media.saveMediaBuffer(fetched.buffer, mime ?? params.contentTypeHint, "inbound", params.maxBytes, originalFilename);
 	return {
 		path: saved.path,
 		contentType: saved.contentType,
@@ -1106,28 +1092,38 @@ async function downloadGraphHostedContent(params) {
 				params.logger?.warn?.("msteams graph hostedContent base64 decode failed", { error: err instanceof Error ? err.message : String(err) });
 				continue;
 			}
-		} else if (item.id) try {
-			const { response: valRes, release } = await fetchWithSsrFGuard({
-				url: `${params.messageUrl}/hostedContents/${encodeURIComponent(item.id)}/$value`,
-				fetchImpl: params.fetchFn ?? fetch,
-				init: { headers: ensureUserAgentHeader({ Authorization: `Bearer ${params.accessToken}` }) },
-				policy: params.ssrfPolicy,
-				auditContext: "msteams.graph.hostedContent.value"
-			});
+		} else if (item.id) {
 			try {
-				if (!valRes.ok) continue;
-				const cl = valRes.headers.get("content-length");
-				if (cl && Number(cl) > params.maxBytes) continue;
-				const ab = await valRes.arrayBuffer();
-				buffer = Buffer.from(ab);
-			} finally {
-				await release();
+				const valueUrl = `${params.messageUrl}/hostedContents/${encodeURIComponent(item.id)}/$value`;
+				const { response: valRes, release } = await fetchWithSsrFGuard({
+					url: valueUrl,
+					fetchImpl: params.fetchFn ?? fetch,
+					init: { headers: ensureUserAgentHeader({ Authorization: `Bearer ${params.accessToken}` }) },
+					policy: params.ssrfPolicy,
+					auditContext: "msteams.graph.hostedContent.value"
+				});
+				try {
+					if (!valRes.ok) continue;
+					const saved = await getMSTeamsRuntime().channel.media.saveResponseMedia(valRes, {
+						sourceUrl: valueUrl,
+						maxBytes: params.maxBytes,
+						fallbackContentType: item.contentType ?? void 0,
+						subdir: "inbound"
+					});
+					out.push({
+						path: saved.path,
+						contentType: saved.contentType,
+						placeholder: inferPlaceholder({ contentType: saved.contentType })
+					});
+				} finally {
+					await release();
+				}
+			} catch (err) {
+				params.logger?.warn?.("msteams graph hostedContent value fetch failed", { error: err instanceof Error ? err.message : String(err) });
+				continue;
 			}
-		} catch (err) {
-			params.logger?.warn?.("msteams graph hostedContent value fetch failed", { error: err instanceof Error ? err.message : String(err) });
 			continue;
-		}
-		else continue;
+		} else continue;
 		if (buffer.byteLength > params.maxBytes) continue;
 		const mime = await getMSTeamsRuntime().media.detectMime({
 			buffer,
@@ -1824,13 +1820,8 @@ function createTeamsReplyStreamController(params) {
 		if (!stream || streamMode !== "progress") return;
 		if (options?.toolName !== void 0 && !isChannelProgressDraftWorkToolName(options.toolName)) return;
 		if (shouldStreamPreviewToolProgress) {
-			const normalized = normalizeProgressLineIdentity(line);
-			if (normalized) {
-				if (normalizeProgressLineIdentity(progressLines.at(-1)) !== normalized) {
-					const progressLine = typeof line === "object" && line !== void 0 ? line : normalized;
-					progressLines = [...progressLines, progressLine].slice(-resolveChannelProgressDraftMaxLines(params.msteamsConfig));
-				}
-			}
+			const normalized = normalizeChannelProgressDraftLineIdentity(line);
+			if (normalized) progressLines = mergeChannelProgressDraftLine(progressLines, typeof line === "object" && line !== void 0 ? line : normalized, { maxLines: resolveChannelProgressDraftMaxLines(params.msteamsConfig) });
 		}
 		await noteProgressWork();
 	};
@@ -1961,9 +1952,6 @@ function createTeamsReplyStreamController(params) {
 		}
 	};
 }
-function normalizeProgressLineIdentity(line) {
-	return (typeof line === "string" ? line : line?.text)?.replace(/\s+/g, " ").trim() ?? "";
-}
 //#endregion
 //#region extensions/msteams/src/reply-dispatcher.ts
 function createMSTeamsReplyDispatcher(params) {
@@ -2214,6 +2202,7 @@ function createMSTeamsReplyDispatcher(params) {
 				onItemEvent: async (payload) => {
 					await streamController.pushProgressLine(buildChannelProgressDraftLineForEntry(msteamsCfg, {
 						event: "item",
+						itemId: payload.itemId,
 						itemKind: payload.kind,
 						title: payload.title,
 						name: payload.name,

package/dist/test-api.js

@@ -1,2 +1,2 @@
-import { t as msteamsPlugin } from "./channel-BApPsQGS.js";
+import { t as msteamsPlugin } from "./channel-C5CVTygn.js";
 export { msteamsPlugin };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/msteams",
-  "version": "2026.5.12",
+  "version": "2026.5.14-beta.2",
   "description": "OpenClaw Microsoft Teams channel plugin",
   "repository": {
     "type": "git",
@@ -9,8 +9,8 @@
   "type": "module",
   "dependencies": {
     "@azure/identity": "4.13.1",
-    "@microsoft/teams.api": "2.0.10",
-    "@microsoft/teams.apps": "2.0.10",
+    "@microsoft/teams.api": "2.0.11",
+    "@microsoft/teams.apps": "2.0.11",
     "express": "5.2.1",
     "jsonwebtoken": "9.0.3",
     "jwks-rsa": "4.0.1",
@@ -22,7 +22,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.12"
+    "openclaw": ">=2026.5.14-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -58,10 +58,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.12"
+      "pluginApi": ">=2026.5.14-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.5.12"
+      "openclawVersion": "2026.5.14-beta.2"
     },
     "release": {
       "publishToClawHub": true,