@openclaw/msteams 2026.5.14-beta.1 → 2026.5.14-beta.2

package/dist/api.js

@@ -1,3 +1,3 @@
-import { t as msteamsPlugin } from "./channel-C7J7iUD1.js";
-import { i as msteamsSetupAdapter, n as openDelegatedOAuthUrl, r as createMSTeamsSetupWizardBase, t as msteamsSetupWizard } from "./setup-surface-D9_2tf9Q.js";
+import { i as msteamsSetupAdapter, n as openDelegatedOAuthUrl, r as createMSTeamsSetupWizardBase, t as msteamsSetupWizard } from "./setup-surface-CQrMX-nJ.js";
+import { t as msteamsPlugin } from "./channel-C5CVTygn.js";
 export { createMSTeamsSetupWizardBase, msteamsPlugin, msteamsSetupAdapter, msteamsSetupWizard, openDelegatedOAuthUrl };

package/dist/{channel-C7J7iUD1.js → channel-C5CVTygn.js}

@@ -1,9 +1,7 @@
-import { o as buildProbeChannelStatusSummary, r as PAIRING_APPROVED_MESSAGE, s as chunkTextForOutbound, t as DEFAULT_ACCOUNT_ID, u as createDefaultChannelRuntimeState } from "./runtime-api-C3EIaIpt.js";
-import { h as resolveMSTeamsCredentials } from "./graph-users-OieoCBxW.js";
-import { a as parseMSTeamsTeamChannelInput, c as resolveMSTeamsUserAllowlist, i as parseMSTeamsConversationId, n as normalizeMSTeamsMessagingTarget, r as normalizeMSTeamsUserInput, s as resolveMSTeamsChannelAllowlist, t as looksLikeMSTeamsTargetId } from "./resolve-allowlist-DWp32o4l.js";
+import { O as resolveNestedAllowlistDecision, S as normalizeChannelSlug, T as resolveChannelEntryMatchWithFallback, _ as isDangerousNameMatchingEnabled, i as buildChannelKeyCandidates, k as resolveToolsBySender, o as buildProbeChannelStatusSummary, r as PAIRING_APPROVED_MESSAGE, s as chunkTextForOutbound, t as DEFAULT_ACCOUNT_ID, u as createDefaultChannelRuntimeState, w as resolveAllowlistMatchSimple } from "./runtime-api-C3EIaIpt.js";
+import { h as resolveMSTeamsCredentials } from "./graph-users-ChPPxUzD.js";
+import { a as looksLikeMSTeamsTargetId, c as parseMSTeamsConversationId, d as resolveMSTeamsUserAllowlist, i as msteamsSetupAdapter, l as parseMSTeamsTeamChannelInput, o as normalizeMSTeamsMessagingTarget, s as normalizeMSTeamsUserInput, t as msteamsSetupWizard, u as resolveMSTeamsChannelAllowlist } from "./setup-surface-CQrMX-nJ.js";
 import { t as MSTeamsChannelConfigSchema } from "./config-schema-DwOEthCC.js";
-import { n as resolveMSTeamsGroupToolPolicy } from "./policy-bM71GXRd.js";
-import { i as msteamsSetupAdapter, t as msteamsSetupWizard } from "./setup-surface-D9_2tf9Q.js";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";
 import { createTopLevelChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
@@ -67,6 +65,138 @@ const collectMSTeamsMutableAllowlistWarnings = createDangerousNameMatchingMutabl
 	}]
 });
 //#endregion
+//#region extensions/msteams/src/policy.ts
+function resolveMSTeamsRouteConfig(params) {
+	const teamId = params.teamId?.trim();
+	const teamName = params.teamName?.trim();
+	const conversationId = params.conversationId?.trim();
+	const channelName = params.channelName?.trim();
+	const teams = params.cfg?.teams ?? {};
+	const allowlistConfigured = Object.keys(teams).length > 0;
+	const teamMatch = resolveChannelEntryMatchWithFallback({
+		entries: teams,
+		keys: buildChannelKeyCandidates(teamId, params.allowNameMatching ? teamName : void 0, params.allowNameMatching && teamName ? normalizeChannelSlug(teamName) : void 0),
+		wildcardKey: "*",
+		normalizeKey: normalizeChannelSlug
+	});
+	const teamConfig = teamMatch.entry;
+	const channels = teamConfig?.channels ?? {};
+	const channelAllowlistConfigured = Object.keys(channels).length > 0;
+	const channelMatch = resolveChannelEntryMatchWithFallback({
+		entries: channels,
+		keys: buildChannelKeyCandidates(conversationId, params.allowNameMatching ? channelName : void 0, params.allowNameMatching && channelName ? normalizeChannelSlug(channelName) : void 0),
+		wildcardKey: "*",
+		normalizeKey: normalizeChannelSlug
+	});
+	const channelConfig = channelMatch.entry;
+	return {
+		teamConfig,
+		channelConfig,
+		allowlistConfigured,
+		allowed: resolveNestedAllowlistDecision({
+			outerConfigured: allowlistConfigured,
+			outerMatched: Boolean(teamConfig),
+			innerConfigured: channelAllowlistConfigured,
+			innerMatched: Boolean(channelConfig)
+		}),
+		teamKey: teamMatch.matchKey ?? teamMatch.key,
+		channelKey: channelMatch.matchKey ?? channelMatch.key,
+		channelMatchKey: channelMatch.matchKey,
+		channelMatchSource: channelMatch.matchSource === "direct" || channelMatch.matchSource === "wildcard" ? channelMatch.matchSource : void 0
+	};
+}
+function resolveMSTeamsGroupToolPolicy(params) {
+	const cfg = params.cfg.channels?.msteams;
+	if (!cfg) return;
+	const groupId = params.groupId?.trim();
+	const groupChannel = params.groupChannel?.trim();
+	const groupSpace = params.groupSpace?.trim();
+	const allowNameMatching = isDangerousNameMatchingEnabled(cfg);
+	const resolved = resolveMSTeamsRouteConfig({
+		cfg,
+		teamId: groupSpace,
+		teamName: groupSpace,
+		conversationId: groupId,
+		channelName: groupChannel,
+		allowNameMatching
+	});
+	if (resolved.channelConfig) {
+		const senderPolicy = resolveToolsBySender({
+			toolsBySender: resolved.channelConfig.toolsBySender,
+			senderId: params.senderId,
+			senderName: params.senderName,
+			senderUsername: params.senderUsername,
+			senderE164: params.senderE164
+		});
+		if (senderPolicy) return senderPolicy;
+		if (resolved.channelConfig.tools) return resolved.channelConfig.tools;
+		const teamSenderPolicy = resolveToolsBySender({
+			toolsBySender: resolved.teamConfig?.toolsBySender,
+			senderId: params.senderId,
+			senderName: params.senderName,
+			senderUsername: params.senderUsername,
+			senderE164: params.senderE164
+		});
+		if (teamSenderPolicy) return teamSenderPolicy;
+		return resolved.teamConfig?.tools;
+	}
+	if (resolved.teamConfig) {
+		const teamSenderPolicy = resolveToolsBySender({
+			toolsBySender: resolved.teamConfig.toolsBySender,
+			senderId: params.senderId,
+			senderName: params.senderName,
+			senderUsername: params.senderUsername,
+			senderE164: params.senderE164
+		});
+		if (teamSenderPolicy) return teamSenderPolicy;
+		if (resolved.teamConfig.tools) return resolved.teamConfig.tools;
+	}
+	if (!groupId) return;
+	const channelCandidates = buildChannelKeyCandidates(groupId, allowNameMatching ? groupChannel : void 0, allowNameMatching && groupChannel ? normalizeChannelSlug(groupChannel) : void 0);
+	for (const teamConfig of Object.values(cfg.teams ?? {})) {
+		const match = resolveChannelEntryMatchWithFallback({
+			entries: teamConfig?.channels ?? {},
+			keys: channelCandidates,
+			wildcardKey: "*",
+			normalizeKey: normalizeChannelSlug
+		});
+		if (match.entry) {
+			const senderPolicy = resolveToolsBySender({
+				toolsBySender: match.entry.toolsBySender,
+				senderId: params.senderId,
+				senderName: params.senderName,
+				senderUsername: params.senderUsername,
+				senderE164: params.senderE164
+			});
+			if (senderPolicy) return senderPolicy;
+			if (match.entry.tools) return match.entry.tools;
+			const teamSenderPolicy = resolveToolsBySender({
+				toolsBySender: teamConfig?.toolsBySender,
+				senderId: params.senderId,
+				senderName: params.senderName,
+				senderUsername: params.senderUsername,
+				senderE164: params.senderE164
+			});
+			if (teamSenderPolicy) return teamSenderPolicy;
+			return teamConfig?.tools;
+		}
+	}
+}
+function resolveMSTeamsAllowlistMatch(params) {
+	return resolveAllowlistMatchSimple(params);
+}
+function resolveMSTeamsReplyPolicy(params) {
+	if (params.isDirectMessage) return {
+		requireMention: false,
+		replyStyle: "thread"
+	};
+	const requireMention = params.channelConfig?.requireMention ?? params.teamConfig?.requireMention ?? params.globalConfig?.requireMention ?? true;
+	return {
+		requireMention,
+		replyStyle: params.channelConfig?.replyStyle ?? params.teamConfig?.replyStyle ?? params.globalConfig?.replyStyle ?? (requireMention ? "thread" : "top-level")
+	};
+}
+//#endregion
 //#region extensions/msteams/src/presentation.ts
 function buildMSTeamsPresentationCard(params) {
 	const body = [];
@@ -183,7 +313,7 @@ const collectMSTeamsSecurityWarnings = createAllowlistProviderGroupPolicyWarning
 	resolveGroupPolicy: ({ cfg }) => cfg.channels?.msteams?.groupPolicy,
 	collect: ({ groupPolicy }) => groupPolicy === "open" ? ["- MS Teams groups: groupPolicy=\"open\" allows any member to trigger (mention-gated). Set channels.msteams.groupPolicy=\"allowlist\" + channels.msteams.groupAllowFrom to restrict senders."] : []
 });
-const loadMSTeamsChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-B14HY4Hr.js"), "msTeamsChannelRuntime");
+const loadMSTeamsChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-fqvE_yLN.js"), "msTeamsChannelRuntime");
 const resolveMSTeamsChannelConfig = (cfg) => ({
 	allowFrom: cfg.channels?.msteams?.allowFrom,
 	defaultTo: cfg.channels?.msteams?.defaultTo
@@ -965,7 +1095,7 @@ const msteamsPlugin = createChatChannelPlugin({
 			})
 		}),
 		gateway: { startAccount: async (ctx) => {
-			const { monitorMSTeamsProvider } = await import("./src-CBRN2aXw.js");
+			const { monitorMSTeamsProvider } = await import("./src-CYZq-lQ4.js");
 			const port = ctx.cfg.channels?.msteams?.webhook?.port ?? 3978;
 			ctx.setStatus({
 				accountId: ctx.accountId,
@@ -1006,4 +1136,4 @@ const msteamsPlugin = createChatChannelPlugin({
 	outbound: msteamsChannelOutbound
 });
 //#endregion
-export { msteamsPlugin as t };
+export { resolveMSTeamsRouteConfig as i, resolveMSTeamsAllowlistMatch as n, resolveMSTeamsReplyPolicy as r, msteamsPlugin as t };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as msteamsPlugin } from "./channel-C7J7iUD1.js";
+import { t as msteamsPlugin } from "./channel-C5CVTygn.js";
 export { msteamsPlugin };

package/dist/{channel.runtime-B14HY4Hr.js → channel.runtime-fqvE_yLN.js}

@@ -1,6 +1,6 @@
 import { s as chunkTextForOutbound } from "./runtime-api-C3EIaIpt.js";
-import { a as fetchGraphJson, c as normalizeQuery, d as postGraphJson, f as resolveGraphToken, i as fetchGraphAbsoluteUrl, l as patchGraphJson, n as deleteGraphRequest, o as listChannelsForTeam, r as escapeOData, s as listTeamsByName, t as searchGraphUsers, u as postGraphBetaJson } from "./graph-users-OieoCBxW.js";
-import { S as createMSTeamsConversationStoreFs, a as sendMessageMSTeams, b as createMSTeamsPollStoreFs, i as sendAdaptiveCardMSTeams, n as deleteMessageMSTeams, o as sendPollMSTeams, r as editMessageMSTeams, t as probeMSTeams } from "./probe-D3LwpZwU.js";
+import { a as fetchGraphJson, c as normalizeQuery, d as postGraphJson, f as resolveGraphToken, i as fetchGraphAbsoluteUrl, l as patchGraphJson, n as deleteGraphRequest, o as listChannelsForTeam, r as escapeOData, s as listTeamsByName, t as searchGraphUsers, u as postGraphBetaJson } from "./graph-users-ChPPxUzD.js";
+import { S as createMSTeamsConversationStoreFs, a as sendMessageMSTeams, b as createMSTeamsPollStoreFs, i as sendAdaptiveCardMSTeams, n as deleteMessageMSTeams, o as sendPollMSTeams, r as editMessageMSTeams, t as probeMSTeams } from "./probe-I2DM0U-s.js";
 import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createAttachedChannelResultAdapter } from "openclaw/plugin-sdk/channel-send-result";
 import { resolveOutboundSendDep } from "openclaw/plugin-sdk/outbound-send-deps";

package/dist/contract-api.js

@@ -1,2 +1,2 @@
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-BuoEXmPS.js";
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-DDPQm4fE.js";
 export { collectRuntimeConfigAssignments, secretTargetRegistryEntries };

package/dist/{graph-users-OieoCBxW.js → graph-users-ChPPxUzD.js}

@@ -1,8 +1,9 @@
 import { M as getMSTeamsRuntime, h as fetchWithSsrFGuard$1 } from "./runtime-api-C3EIaIpt.js";
-import { n as refreshMSTeamsDelegatedTokens } from "./oauth.token-xxpoLWy5.js";
+import { n as refreshMSTeamsDelegatedTokens } from "./oauth.token-mUfXUE0j.js";
 import { createRequire } from "node:module";
 import { isRecord as isRecord$2, normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
+import { readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";
 import { Buffer } from "node:buffer";
 import { lookup } from "node:dns/promises";
 import { buildHostnameAllowlistPolicyFromSuffixAllowlist, isHttpsUrlAllowedByHostnameSuffixAllowlist, isPrivateIpAddress, normalizeHostnameSuffixAllowlist } from "openclaw/plugin-sdk/ssrf-policy";
@@ -1195,6 +1196,12 @@ async function resolveDelegatedAccessToken(params) {
 //#endregion
 //#region extensions/msteams/src/graph.ts
 const GRAPH_BETA = "https://graph.microsoft.com/beta";
+const NULL_BODY_STATUSES = new Set([
+	101,
+	204,
+	205,
+	304
+]);
 function normalizeQuery(value) {
 	return value?.trim() ?? "";
 }
@@ -1203,25 +1210,41 @@ function escapeOData(value) {
 }
 async function requestGraph(params) {
 	const hasBody = params.body !== void 0;
-	const res = await fetch(`${params.root ?? "https://graph.microsoft.com/v1.0"}${params.path}`, {
-		method: params.method,
-		headers: {
-			"User-Agent": buildUserAgent(),
-			Authorization: `Bearer ${params.token}`,
-			...hasBody ? { "Content-Type": "application/json" } : {},
-			...params.headers
+	const url = `${params.root ?? "https://graph.microsoft.com/v1.0"}${params.path}`;
+	const currentFetch = globalThis.fetch;
+	const { response, release } = await fetchWithSsrFGuard$1({
+		url,
+		fetchImpl: async (input, guardedInit) => await currentFetch(input, guardedInit),
+		init: {
+			method: params.method,
+			headers: {
+				"User-Agent": buildUserAgent(),
+				Authorization: `Bearer ${params.token}`,
+				...hasBody ? { "Content-Type": "application/json" } : {},
+				...params.headers
+			},
+			body: hasBody ? JSON.stringify(params.body) : void 0
 		},
-		body: hasBody ? JSON.stringify(params.body) : void 0
+		auditContext: "msteams.graph"
 	});
-	if (!res.ok) {
-		const text = await res.text().catch(() => "");
-		throw new Error(`${params.errorPrefix ?? "Graph"} ${params.path} failed (${res.status}): ${text || "unknown error"}`);
+	try {
+		if (!response.ok) {
+			const text = await response.text().catch(() => "");
+			throw new Error(`${params.errorPrefix ?? "Graph"} ${params.path} failed (${response.status}): ${text || "unknown error"}`);
+		}
+		const body = NULL_BODY_STATUSES.has(response.status) ? null : await response.arrayBuffer();
+		return new Response(body, {
+			status: response.status,
+			statusText: response.statusText,
+			headers: new Headers(response.headers)
+		});
+	} finally {
+		await release();
 	}
-	return res;
 }
-async function readOptionalGraphJson(res) {
+async function readOptionalGraphJson(res, label) {
 	if (res.status === 204 || res.headers?.get?.("content-length") === "0") return;
-	return await res.json();
+	return await readProviderJsonResponse(res, label);
 }
 async function fetchGraphJson(params) {
 	return await readOptionalGraphJson(await requestGraph({
@@ -1230,7 +1253,7 @@ async function fetchGraphJson(params) {
 		method: params.method,
 		body: params.body,
 		headers: params.headers
-	}));
+	}), `Graph ${params.path} failed`);
 }
 /**
 * Fetch JSON from an absolute Graph API URL (for example @odata.nextLink
@@ -1251,7 +1274,7 @@ async function fetchGraphAbsoluteUrl(params) {
 			const text = await response.text().catch(() => "");
 			throw new Error(`Graph ${params.url} failed (${response.status}): ${text || "unknown error"}`);
 		}
-		return await response.json();
+		return await readProviderJsonResponse(response, `Graph ${params.url} failed`);
 	} finally {
 		await release();
 	}
@@ -1325,7 +1348,7 @@ async function postGraphJson(params) {
 		method: "POST",
 		body: params.body,
 		errorPrefix: "Graph POST"
-	}));
+	}), `Graph POST ${params.path} failed`);
 }
 async function postGraphBetaJson(params) {
 	return readOptionalGraphJson(await requestGraph({
@@ -1335,7 +1358,7 @@ async function postGraphBetaJson(params) {
 		root: GRAPH_BETA,
 		body: params.body,
 		errorPrefix: "Graph beta POST"
-	}));
+	}), `Graph beta POST ${params.path} failed`);
 }
 async function deleteGraphRequest(params) {
 	await requestGraph({
@@ -1346,15 +1369,13 @@ async function deleteGraphRequest(params) {
 	});
 }
 async function patchGraphJson(params) {
-	const res = await requestGraph({
+	return readOptionalGraphJson(await requestGraph({
 		token: params.token,
 		path: params.path,
 		method: "PATCH",
 		body: params.body,
 		errorPrefix: "Graph PATCH"
-	});
-	if (res.status === 204 || res.headers.get("content-length") === "0") return;
-	return await res.json();
+	}), `Graph PATCH ${params.path} failed`);
 }
 async function listChannelsForTeam(token, teamId) {
 	const { items } = await fetchAllGraphPages({

package/dist/{oauth-BWJyilR1.js → oauth-DsVj42gA.js}

@@ -1,4 +1,4 @@
-import { a as MSTEAMS_OAUTH_CALLBACK_PORT, i as MSTEAMS_OAUTH_CALLBACK_PATH, o as MSTEAMS_OAUTH_REDIRECT_URI, r as MSTEAMS_DEFAULT_DELEGATED_SCOPES, s as buildMSTeamsAuthEndpoint, t as exchangeMSTeamsCodeForTokens } from "./oauth.token-xxpoLWy5.js";
+import { a as MSTEAMS_OAUTH_CALLBACK_PORT, i as MSTEAMS_OAUTH_CALLBACK_PATH, o as MSTEAMS_OAUTH_REDIRECT_URI, r as MSTEAMS_DEFAULT_DELEGATED_SCOPES, s as buildMSTeamsAuthEndpoint, t as exchangeMSTeamsCodeForTokens } from "./oauth.token-mUfXUE0j.js";
 import { generateHexPkceVerifierChallenge } from "openclaw/plugin-sdk/provider-auth";
 import { generateOAuthState, parseOAuthCallbackInput, waitForLocalOAuthCallback } from "openclaw/plugin-sdk/provider-auth-runtime";
 import { isWSL2Sync } from "openclaw/plugin-sdk/runtime-env";

package/dist/{oauth.token-xxpoLWy5.js → oauth.token-mUfXUE0j.js}

@@ -1,4 +1,5 @@
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
+import { readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";
 //#region extensions/msteams/src/oauth.shared.ts
 const MSTEAMS_OAUTH_REDIRECT_URI = "http://localhost:8086/oauth2callback";
 const MSTEAMS_OAUTH_CALLBACK_PORT = 8086;
@@ -51,7 +52,7 @@ async function fetchMSTeamsTokens(params) {
 			const errorText = await response.text();
 			throw new Error(`MSTeams ${params.failureLabel} failed (${response.status}): ${errorText}`);
 		}
-		return await response.json();
+		return await readProviderJsonResponse(response, `MSTeams ${params.failureLabel} failed`);
 	} finally {
 		await release();
 	}

package/dist/{probe-D3LwpZwU.js → probe-I2DM0U-s.js}

@@ -1,6 +1,6 @@
 import { C as normalizeStringEntries, E as resolveChannelMediaMaxBytes, M as getMSTeamsRuntime, d as detectMime, g as getFileExtension, m as extractOriginalFilename, p as extensionForMime, y as loadOutboundMediaFromUrl } from "./runtime-api-C3EIaIpt.js";
-import { C as loadMSTeamsSdkWithAuth, D as formatMSTeamsSendErrorHint, E as classifyMSTeamsSendError, O as formatUnknownError, S as createMSTeamsTokenProvider, _ as resolveMSTeamsStorePath, h as resolveMSTeamsCredentials, k as isRevokedProxyError, m as loadDelegatedTokens, w as buildUserAgent, x as createMSTeamsAdapter, y as readAccessToken } from "./graph-users-OieoCBxW.js";
-import { i as resolveMSTeamsRouteConfig, r as resolveMSTeamsReplyPolicy } from "./policy-bM71GXRd.js";
+import { C as loadMSTeamsSdkWithAuth, D as formatMSTeamsSendErrorHint, E as classifyMSTeamsSendError, O as formatUnknownError, S as createMSTeamsTokenProvider, _ as resolveMSTeamsStorePath, h as resolveMSTeamsCredentials, k as isRevokedProxyError, m as loadDelegatedTokens, w as buildUserAgent, x as createMSTeamsAdapter, y as readAccessToken } from "./graph-users-ChPPxUzD.js";
+import { i as resolveMSTeamsRouteConfig, r as resolveMSTeamsReplyPolicy } from "./channel-C5CVTygn.js";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-message";
 import { isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { withFileLock } from "openclaw/plugin-sdk/file-lock";

package/dist/secret-contract-api.js

@@ -1,2 +1,2 @@
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-BuoEXmPS.js";
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-DDPQm4fE.js";
 export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };

package/dist/setup-plugin-api.js

@@ -1,6 +1,6 @@
-import { h as resolveMSTeamsCredentials } from "./graph-users-OieoCBxW.js";
+import { h as resolveMSTeamsCredentials } from "./graph-users-ChPPxUzD.js";
+import { i as msteamsSetupAdapter, t as msteamsSetupWizard } from "./setup-surface-CQrMX-nJ.js";
 import { t as MSTeamsChannelConfigSchema } from "./config-schema-DwOEthCC.js";
-import { i as msteamsSetupAdapter, t as msteamsSetupWizard } from "./setup-surface-D9_2tf9Q.js";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";
 import { createTopLevelChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";

package/dist/{setup-surface-D9_2tf9Q.js → setup-surface-CQrMX-nJ.js}

@@ -1,7 +1,223 @@
-import { O as formatUnknownError, g as saveDelegatedTokens, h as resolveMSTeamsCredentials, p as hasConfiguredMSTeamsCredentials, v as normalizeSecretInputString } from "./graph-users-OieoCBxW.js";
-import { c as resolveMSTeamsUserAllowlist, o as parseMSTeamsTeamEntry, s as resolveMSTeamsChannelAllowlist } from "./resolve-allowlist-DWp32o4l.js";
+import { O as formatUnknownError, c as normalizeQuery, f as resolveGraphToken, g as saveDelegatedTokens, h as resolveMSTeamsCredentials, o as listChannelsForTeam, p as hasConfiguredMSTeamsCredentials, s as listTeamsByName, t as searchGraphUsers, v as normalizeSecretInputString } from "./graph-users-ChPPxUzD.js";
+import { mapAllowlistResolutionInputs } from "openclaw/plugin-sdk/allow-from";
+import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { DEFAULT_ACCOUNT_ID, createStandardChannelSetupStatus, createTopLevelChannelAllowFromSetter, createTopLevelChannelDmPolicy, createTopLevelChannelGroupPolicySetter, mergeAllowFromEntries, splitSetupEntries } from "openclaw/plugin-sdk/setup";
 import { formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
+//#region extensions/msteams/src/resolve-allowlist.ts
+function stripProviderPrefix(raw) {
+	return raw.replace(/^(msteams|teams):/i, "");
+}
+function normalizeMSTeamsMessagingTarget(raw) {
+	let trimmed = raw.trim();
+	if (!trimmed) return;
+	trimmed = stripProviderPrefix(trimmed).trim();
+	if (/^conversation:/i.test(trimmed)) {
+		const id = trimmed.slice(13).trim();
+		return id ? `conversation:${id}` : void 0;
+	}
+	if (/^user:/i.test(trimmed)) {
+		const id = trimmed.slice(5).trim();
+		return id ? `user:${id}` : void 0;
+	}
+	return trimmed || void 0;
+}
+function normalizeMSTeamsUserInput(raw) {
+	return stripProviderPrefix(raw).replace(/^(user|conversation):/i, "").trim();
+}
+function parseMSTeamsConversationId(raw) {
+	const trimmed = stripProviderPrefix(raw).trim();
+	if (!/^conversation:/i.test(trimmed)) return null;
+	return trimmed.slice(13).trim();
+}
+/**
+* Detect whether a raw target string looks like a Microsoft Teams conversation
+* or user id that cron announce delivery and other explicit-target paths can
+* forward verbatim to the channel adapter.
+*
+* Accepts both prefixed and bare formats:
+* - `conversation:<id>` — explicit conversation prefix
+* - `user:<aad-guid>`   — user id (16+ hex chars, UUID-like)
+* - `19:abc@thread.tacv2` / `19:abc@thread.skype` — channel / legacy group
+* - `19:{userId}_{appId}@unq.gbl.spaces` — Graph 1:1 chat thread format
+* - `a:1xxx` — Bot Framework personal (1:1) chat id
+* - `8:orgid:xxx` — Bot Framework org-scoped personal chat id
+* - `29:xxx` — Bot Framework user id
+*
+* Display-name user targets such as `user:John Smith` intentionally return
+* false so that the Graph API directory lookup still runs for them.
+*/
+function looksLikeMSTeamsTargetId(raw) {
+	const trimmed = raw.trim();
+	if (!trimmed) return false;
+	if (/^conversation:/i.test(trimmed)) return true;
+	if (/^user:/i.test(trimmed)) {
+		const id = trimmed.slice(5).trim();
+		return /^[0-9a-fA-F-]{16,}$/.test(id);
+	}
+	if (/^19:.+@thread\.(tacv2|skype)$/i.test(trimmed)) return true;
+	if (/^19:.+@unq\.gbl\.spaces$/i.test(trimmed)) return true;
+	if (/^a:1[A-Za-z0-9_-]+$/i.test(trimmed)) return true;
+	if (/^8:orgid:[A-Za-z0-9-]+$/i.test(trimmed)) return true;
+	if (/^29:[A-Za-z0-9_-]+$/i.test(trimmed)) return true;
+	return /@thread\b/i.test(trimmed);
+}
+function normalizeMSTeamsTeamKey(raw) {
+	return stripProviderPrefix(raw).replace(/^team:/i, "").trim() || void 0;
+}
+function normalizeMSTeamsChannelKey(raw) {
+	return (raw?.trim().replace(/^#/, "").trim() ?? "") || void 0;
+}
+function normalizeMSTeamsConversationTargetId(raw) {
+	const trimmed = stripProviderPrefix(raw).trim();
+	return parseMSTeamsConversationId(trimmed) ?? trimmed;
+}
+function looksLikeMSTeamsThreadConversationId(raw) {
+	const normalized = normalizeMSTeamsConversationTargetId(raw);
+	return /^19:.+@thread\./i.test(normalized);
+}
+function parseMSTeamsTeamChannelInput(raw) {
+	const trimmed = stripProviderPrefix(raw).trim();
+	if (!trimmed) return {};
+	const parts = trimmed.split("/");
+	const team = normalizeMSTeamsTeamKey(parts[0] ?? "");
+	const channel = parts.length > 1 ? normalizeMSTeamsChannelKey(parts.slice(1).join("/")) : void 0;
+	return {
+		...team ? { team } : {},
+		...channel ? { channel } : {}
+	};
+}
+function parseMSTeamsTeamEntry(raw) {
+	const { team, channel } = parseMSTeamsTeamChannelInput(raw);
+	if (!team) return null;
+	return {
+		teamKey: team,
+		...channel ? { channelKey: channel } : {}
+	};
+}
+async function resolveMSTeamsChannelAllowlist(params) {
+	let tokenPromise;
+	const getToken = () => {
+		tokenPromise ??= resolveGraphToken(params.cfg);
+		return tokenPromise;
+	};
+	return await mapAllowlistResolutionInputs({
+		inputs: params.entries,
+		mapInput: async (input) => {
+			const { team, channel } = parseMSTeamsTeamChannelInput(input);
+			if (!team) return {
+				input,
+				resolved: false
+			};
+			if (looksLikeMSTeamsThreadConversationId(team)) {
+				const teamId = normalizeMSTeamsConversationTargetId(team);
+				if (!channel) return {
+					input,
+					resolved: true,
+					teamId,
+					teamName: teamId
+				};
+				if (!looksLikeMSTeamsThreadConversationId(channel)) return {
+					input,
+					resolved: false,
+					teamId,
+					teamName: teamId,
+					note: "channel id required for conversation-id team"
+				};
+				const channelId = normalizeMSTeamsConversationTargetId(channel);
+				return {
+					input,
+					resolved: true,
+					teamId,
+					teamName: teamId,
+					channelId,
+					channelName: channelId
+				};
+			}
+			const token = await getToken();
+			const teams = /^[0-9a-fA-F-]{16,}$/.test(team) ? [{
+				id: team,
+				displayName: team
+			}] : await listTeamsByName(token, team);
+			if (teams.length === 0) return {
+				input,
+				resolved: false,
+				note: "team not found"
+			};
+			const teamMatch = teams[0];
+			const graphTeamId = teamMatch.id?.trim();
+			const teamName = teamMatch.displayName?.trim() || team;
+			if (!graphTeamId) return {
+				input,
+				resolved: false,
+				note: "team id missing"
+			};
+			let teamChannels = [];
+			try {
+				teamChannels = await listChannelsForTeam(token, graphTeamId);
+			} catch {}
+			const teamId = teamChannels.find((ch) => normalizeOptionalLowercaseString(ch.displayName) === "general")?.id?.trim() || graphTeamId;
+			if (!channel) return {
+				input,
+				resolved: true,
+				teamId,
+				teamName,
+				note: teams.length > 1 ? "multiple teams; chose first" : void 0
+			};
+			const normalizedChannel = normalizeOptionalLowercaseString(channel);
+			const channelMatch = teamChannels.find((item) => item.id === channel) ?? teamChannels.find((item) => normalizeOptionalLowercaseString(item.displayName) === normalizedChannel) ?? teamChannels.find((item) => normalizeLowercaseStringOrEmpty(item.displayName ?? "").includes(normalizedChannel ?? ""));
+			if (!channelMatch?.id) return {
+				input,
+				resolved: false,
+				note: "channel not found"
+			};
+			return {
+				input,
+				resolved: true,
+				teamId,
+				teamName,
+				channelId: channelMatch.id,
+				channelName: channelMatch.displayName ?? channel,
+				note: teamChannels.length > 1 ? "multiple channels; chose first" : void 0
+			};
+		}
+	});
+}
+async function resolveMSTeamsUserAllowlist(params) {
+	const token = await resolveGraphToken(params.cfg);
+	return await mapAllowlistResolutionInputs({
+		inputs: params.entries,
+		mapInput: async (input) => {
+			const query = normalizeQuery(normalizeMSTeamsUserInput(input));
+			if (!query) return {
+				input,
+				resolved: false
+			};
+			if (/^[0-9a-fA-F-]{16,}$/.test(query)) return {
+				input,
+				resolved: true,
+				id: query
+			};
+			const users = await searchGraphUsers({
+				token,
+				query,
+				top: 10
+			});
+			const match = users[0];
+			if (!match?.id) return {
+				input,
+				resolved: false
+			};
+			return {
+				input,
+				resolved: true,
+				id: match.id,
+				name: match.displayName ?? void 0,
+				note: users.length > 1 ? "multiple matches; chose first" : void 0
+			};
+		}
+	});
+}
+//#endregion
 //#region extensions/msteams/src/setup-core.ts
 const msteamsSetupAdapter = {
 	resolveAccountId: () => DEFAULT_ACCOUNT_ID,
@@ -271,7 +487,7 @@ const msteamsSetupWizard = {
 					}
 				};
 				try {
-					const { loginMSTeamsDelegated } = await import("./oauth-BWJyilR1.js");
+					const { loginMSTeamsDelegated } = await import("./oauth-DsVj42gA.js");
 					const progress = params.prompter.progress("MSTeams Delegated OAuth");
 					saveDelegatedTokens(await loginMSTeamsDelegated({
 						isRemote: true,
@@ -310,4 +526,4 @@ const msteamsSetupWizard = {
 	})
 };
 //#endregion
-export { msteamsSetupAdapter as i, openDelegatedOAuthUrl as n, createMSTeamsSetupWizardBase as r, msteamsSetupWizard as t };
+export { looksLikeMSTeamsTargetId as a, parseMSTeamsConversationId as c, resolveMSTeamsUserAllowlist as d, msteamsSetupAdapter as i, parseMSTeamsTeamChannelInput as l, openDelegatedOAuthUrl as n, normalizeMSTeamsMessagingTarget as o, createMSTeamsSetupWizardBase as r, normalizeMSTeamsUserInput as s, msteamsSetupWizard as t, resolveMSTeamsChannelAllowlist as u };

package/dist/{src-CBRN2aXw.js → src-CYZq-lQ4.js}

@@ -1,8 +1,8 @@
 import { A as summarizeMapping, D as resolveDefaultGroupPolicy, E as resolveChannelMediaMaxBytes, M as getMSTeamsRuntime, N as getOptionalMSTeamsRuntime, _ as isDangerousNameMatchingEnabled, a as buildMediaPayload, b as logTypingFailure, c as createChannelMessageReplyPipeline, f as dispatchReplyFromConfigWithSettledDispatcher$1, l as createChannelPairingController, n as DEFAULT_WEBHOOK_MAX_BODY_BYTES, t as DEFAULT_ACCOUNT_ID, v as keepHttpServerTaskAlive, x as mergeAllowlist } from "./runtime-api-C3EIaIpt.js";
-import { A as ATTACHMENT_TAG_RE, B as isLikelyImageAttachment, C as loadMSTeamsSdkWithAuth, D as formatMSTeamsSendErrorHint, E as classifyMSTeamsSendError, F as estimateBase64DecodedBytes, G as resolveAttachmentFetchPolicy, H as isUrlAllowed, I as extractHtmlFromAttachment, J as safeFetchWithPolicy, K as resolveMediaSsrfPolicy, L as extractInlineImageCandidates, M as IMG_SRC_RE, N as applyAuthorizationHeaderForUrl, O as formatUnknownError, P as encodeGraphShareId, R as inferPlaceholder, S as createMSTeamsTokenProvider, T as ensureUserAgentHeader, U as normalizeContentType, V as isRecord$1, W as readNestedString, X as tryBuildGraphSharesUrlForSharedLink, Y as safeHostForUrl, _ as resolveMSTeamsStorePath, a as fetchGraphJson, b as createBotFrameworkJwtValidator, h as resolveMSTeamsCredentials, j as GRAPH_ROOT, q as resolveRequestUrl, w as buildUserAgent, x as createMSTeamsAdapter, z as isDownloadableAttachment } from "./graph-users-OieoCBxW.js";
-import { c as resolveMSTeamsUserAllowlist, s as resolveMSTeamsChannelAllowlist } from "./resolve-allowlist-DWp32o4l.js";
-import { i as resolveMSTeamsRouteConfig, r as resolveMSTeamsReplyPolicy, t as resolveMSTeamsAllowlistMatch } from "./policy-bM71GXRd.js";
-import { C as readJsonFile, S as createMSTeamsConversationStoreFs, T as writeJsonFile, _ as buildFileInfoCard, b as createMSTeamsPollStoreFs, c as renderReplyPayloadsToMessages, d as withRevokedProxyFallback, f as resolveGraphChatId, g as removePendingUploadFs, h as getPendingUploadFs, l as sendMSTeamsMessages, m as removePendingUpload, p as getPendingUpload, s as buildConversationReference, u as AI_GENERATED_ENTITY, v as parseFileConsentInvoke, w as withFileLock, x as extractMSTeamsPollVote, y as uploadToConsentUrl } from "./probe-D3LwpZwU.js";
+import { A as ATTACHMENT_TAG_RE, B as isLikelyImageAttachment, C as loadMSTeamsSdkWithAuth, D as formatMSTeamsSendErrorHint, E as classifyMSTeamsSendError, F as estimateBase64DecodedBytes, G as resolveAttachmentFetchPolicy, H as isUrlAllowed, I as extractHtmlFromAttachment, J as safeFetchWithPolicy, K as resolveMediaSsrfPolicy, L as extractInlineImageCandidates, M as IMG_SRC_RE, N as applyAuthorizationHeaderForUrl, O as formatUnknownError, P as encodeGraphShareId, R as inferPlaceholder, S as createMSTeamsTokenProvider, T as ensureUserAgentHeader, U as normalizeContentType, V as isRecord$1, W as readNestedString, X as tryBuildGraphSharesUrlForSharedLink, Y as safeHostForUrl, _ as resolveMSTeamsStorePath, a as fetchGraphJson, b as createBotFrameworkJwtValidator, h as resolveMSTeamsCredentials, j as GRAPH_ROOT, q as resolveRequestUrl, w as buildUserAgent, x as createMSTeamsAdapter, z as isDownloadableAttachment } from "./graph-users-ChPPxUzD.js";
+import { d as resolveMSTeamsUserAllowlist, u as resolveMSTeamsChannelAllowlist } from "./setup-surface-CQrMX-nJ.js";
+import { i as resolveMSTeamsRouteConfig, n as resolveMSTeamsAllowlistMatch, r as resolveMSTeamsReplyPolicy } from "./channel-C5CVTygn.js";
+import { C as readJsonFile, S as createMSTeamsConversationStoreFs, T as writeJsonFile, _ as buildFileInfoCard, b as createMSTeamsPollStoreFs, c as renderReplyPayloadsToMessages, d as withRevokedProxyFallback, f as resolveGraphChatId, g as removePendingUploadFs, h as getPendingUploadFs, l as sendMSTeamsMessages, m as removePendingUpload, p as getPendingUpload, s as buildConversationReference, u as AI_GENERATED_ENTITY, v as parseFileConsentInvoke, w as withFileLock, x as extractMSTeamsPollVote, y as uploadToConsentUrl } from "./probe-I2DM0U-s.js";
 import { formatAllowlistMatchMeta } from "openclaw/plugin-sdk/allow-from";
 import { createLiveMessageState, createPreviewMessageReceipt, defineFinalizableLivePreviewAdapter, deliverWithFinalizableLivePreviewAdapter, markLiveMessageFinalized } from "openclaw/plugin-sdk/channel-message";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, readStringValue } from "openclaw/plugin-sdk/string-coerce-runtime";

package/dist/test-api.js

@@ -1,2 +1,2 @@
-import { t as msteamsPlugin } from "./channel-C7J7iUD1.js";
+import { t as msteamsPlugin } from "./channel-C5CVTygn.js";
 export { msteamsPlugin };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/msteams",
-  "version": "2026.5.14-beta.1",
+  "version": "2026.5.14-beta.2",
   "description": "OpenClaw Microsoft Teams channel plugin",
   "repository": {
     "type": "git",
@@ -9,8 +9,8 @@
   "type": "module",
   "dependencies": {
     "@azure/identity": "4.13.1",
-    "@microsoft/teams.api": "2.0.10",
-    "@microsoft/teams.apps": "2.0.10",
+    "@microsoft/teams.api": "2.0.11",
+    "@microsoft/teams.apps": "2.0.11",
     "express": "5.2.1",
     "jsonwebtoken": "9.0.3",
     "jwks-rsa": "4.0.1",
@@ -22,7 +22,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.14-beta.1"
+    "openclaw": ">=2026.5.14-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -58,10 +58,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.14-beta.1"
+      "pluginApi": ">=2026.5.14-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.5.14-beta.1"
+      "openclawVersion": "2026.5.14-beta.2"
     },
     "release": {
       "publishToClawHub": true,

package/dist/policy-bM71GXRd.js

@@ -1,134 +0,0 @@
-import { O as resolveNestedAllowlistDecision, S as normalizeChannelSlug, T as resolveChannelEntryMatchWithFallback, _ as isDangerousNameMatchingEnabled, i as buildChannelKeyCandidates, k as resolveToolsBySender, w as resolveAllowlistMatchSimple } from "./runtime-api-C3EIaIpt.js";
-//#region extensions/msteams/src/policy.ts
-function resolveMSTeamsRouteConfig(params) {
-	const teamId = params.teamId?.trim();
-	const teamName = params.teamName?.trim();
-	const conversationId = params.conversationId?.trim();
-	const channelName = params.channelName?.trim();
-	const teams = params.cfg?.teams ?? {};
-	const allowlistConfigured = Object.keys(teams).length > 0;
-	const teamMatch = resolveChannelEntryMatchWithFallback({
-		entries: teams,
-		keys: buildChannelKeyCandidates(teamId, params.allowNameMatching ? teamName : void 0, params.allowNameMatching && teamName ? normalizeChannelSlug(teamName) : void 0),
-		wildcardKey: "*",
-		normalizeKey: normalizeChannelSlug
-	});
-	const teamConfig = teamMatch.entry;
-	const channels = teamConfig?.channels ?? {};
-	const channelAllowlistConfigured = Object.keys(channels).length > 0;
-	const channelMatch = resolveChannelEntryMatchWithFallback({
-		entries: channels,
-		keys: buildChannelKeyCandidates(conversationId, params.allowNameMatching ? channelName : void 0, params.allowNameMatching && channelName ? normalizeChannelSlug(channelName) : void 0),
-		wildcardKey: "*",
-		normalizeKey: normalizeChannelSlug
-	});
-	const channelConfig = channelMatch.entry;
-	return {
-		teamConfig,
-		channelConfig,
-		allowlistConfigured,
-		allowed: resolveNestedAllowlistDecision({
-			outerConfigured: allowlistConfigured,
-			outerMatched: Boolean(teamConfig),
-			innerConfigured: channelAllowlistConfigured,
-			innerMatched: Boolean(channelConfig)
-		}),
-		teamKey: teamMatch.matchKey ?? teamMatch.key,
-		channelKey: channelMatch.matchKey ?? channelMatch.key,
-		channelMatchKey: channelMatch.matchKey,
-		channelMatchSource: channelMatch.matchSource === "direct" || channelMatch.matchSource === "wildcard" ? channelMatch.matchSource : void 0
-	};
-}
-function resolveMSTeamsGroupToolPolicy(params) {
-	const cfg = params.cfg.channels?.msteams;
-	if (!cfg) return;
-	const groupId = params.groupId?.trim();
-	const groupChannel = params.groupChannel?.trim();
-	const groupSpace = params.groupSpace?.trim();
-	const allowNameMatching = isDangerousNameMatchingEnabled(cfg);
-	const resolved = resolveMSTeamsRouteConfig({
-		cfg,
-		teamId: groupSpace,
-		teamName: groupSpace,
-		conversationId: groupId,
-		channelName: groupChannel,
-		allowNameMatching
-	});
-	if (resolved.channelConfig) {
-		const senderPolicy = resolveToolsBySender({
-			toolsBySender: resolved.channelConfig.toolsBySender,
-			senderId: params.senderId,
-			senderName: params.senderName,
-			senderUsername: params.senderUsername,
-			senderE164: params.senderE164
-		});
-		if (senderPolicy) return senderPolicy;
-		if (resolved.channelConfig.tools) return resolved.channelConfig.tools;
-		const teamSenderPolicy = resolveToolsBySender({
-			toolsBySender: resolved.teamConfig?.toolsBySender,
-			senderId: params.senderId,
-			senderName: params.senderName,
-			senderUsername: params.senderUsername,
-			senderE164: params.senderE164
-		});
-		if (teamSenderPolicy) return teamSenderPolicy;
-		return resolved.teamConfig?.tools;
-	}
-	if (resolved.teamConfig) {
-		const teamSenderPolicy = resolveToolsBySender({
-			toolsBySender: resolved.teamConfig.toolsBySender,
-			senderId: params.senderId,
-			senderName: params.senderName,
-			senderUsername: params.senderUsername,
-			senderE164: params.senderE164
-		});
-		if (teamSenderPolicy) return teamSenderPolicy;
-		if (resolved.teamConfig.tools) return resolved.teamConfig.tools;
-	}
-	if (!groupId) return;
-	const channelCandidates = buildChannelKeyCandidates(groupId, allowNameMatching ? groupChannel : void 0, allowNameMatching && groupChannel ? normalizeChannelSlug(groupChannel) : void 0);
-	for (const teamConfig of Object.values(cfg.teams ?? {})) {
-		const match = resolveChannelEntryMatchWithFallback({
-			entries: teamConfig?.channels ?? {},
-			keys: channelCandidates,
-			wildcardKey: "*",
-			normalizeKey: normalizeChannelSlug
-		});
-		if (match.entry) {
-			const senderPolicy = resolveToolsBySender({
-				toolsBySender: match.entry.toolsBySender,
-				senderId: params.senderId,
-				senderName: params.senderName,
-				senderUsername: params.senderUsername,
-				senderE164: params.senderE164
-			});
-			if (senderPolicy) return senderPolicy;
-			if (match.entry.tools) return match.entry.tools;
-			const teamSenderPolicy = resolveToolsBySender({
-				toolsBySender: teamConfig?.toolsBySender,
-				senderId: params.senderId,
-				senderName: params.senderName,
-				senderUsername: params.senderUsername,
-				senderE164: params.senderE164
-			});
-			if (teamSenderPolicy) return teamSenderPolicy;
-			return teamConfig?.tools;
-		}
-	}
-}
-function resolveMSTeamsAllowlistMatch(params) {
-	return resolveAllowlistMatchSimple(params);
-}
-function resolveMSTeamsReplyPolicy(params) {
-	if (params.isDirectMessage) return {
-		requireMention: false,
-		replyStyle: "thread"
-	};
-	const requireMention = params.channelConfig?.requireMention ?? params.teamConfig?.requireMention ?? params.globalConfig?.requireMention ?? true;
-	return {
-		requireMention,
-		replyStyle: params.channelConfig?.replyStyle ?? params.teamConfig?.replyStyle ?? params.globalConfig?.replyStyle ?? (requireMention ? "thread" : "top-level")
-	};
-}
-//#endregion
-export { resolveMSTeamsRouteConfig as i, resolveMSTeamsGroupToolPolicy as n, resolveMSTeamsReplyPolicy as r, resolveMSTeamsAllowlistMatch as t };

package/dist/resolve-allowlist-DWp32o4l.js

@@ -1,219 +0,0 @@
-import { c as normalizeQuery, f as resolveGraphToken, o as listChannelsForTeam, s as listTeamsByName, t as searchGraphUsers } from "./graph-users-OieoCBxW.js";
-import { mapAllowlistResolutionInputs } from "openclaw/plugin-sdk/allow-from";
-import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString } from "openclaw/plugin-sdk/string-coerce-runtime";
-//#region extensions/msteams/src/resolve-allowlist.ts
-function stripProviderPrefix(raw) {
-	return raw.replace(/^(msteams|teams):/i, "");
-}
-function normalizeMSTeamsMessagingTarget(raw) {
-	let trimmed = raw.trim();
-	if (!trimmed) return;
-	trimmed = stripProviderPrefix(trimmed).trim();
-	if (/^conversation:/i.test(trimmed)) {
-		const id = trimmed.slice(13).trim();
-		return id ? `conversation:${id}` : void 0;
-	}
-	if (/^user:/i.test(trimmed)) {
-		const id = trimmed.slice(5).trim();
-		return id ? `user:${id}` : void 0;
-	}
-	return trimmed || void 0;
-}
-function normalizeMSTeamsUserInput(raw) {
-	return stripProviderPrefix(raw).replace(/^(user|conversation):/i, "").trim();
-}
-function parseMSTeamsConversationId(raw) {
-	const trimmed = stripProviderPrefix(raw).trim();
-	if (!/^conversation:/i.test(trimmed)) return null;
-	return trimmed.slice(13).trim();
-}
-/**
-* Detect whether a raw target string looks like a Microsoft Teams conversation
-* or user id that cron announce delivery and other explicit-target paths can
-* forward verbatim to the channel adapter.
-*
-* Accepts both prefixed and bare formats:
-* - `conversation:<id>` — explicit conversation prefix
-* - `user:<aad-guid>`   — user id (16+ hex chars, UUID-like)
-* - `19:abc@thread.tacv2` / `19:abc@thread.skype` — channel / legacy group
-* - `19:{userId}_{appId}@unq.gbl.spaces` — Graph 1:1 chat thread format
-* - `a:1xxx` — Bot Framework personal (1:1) chat id
-* - `8:orgid:xxx` — Bot Framework org-scoped personal chat id
-* - `29:xxx` — Bot Framework user id
-*
-* Display-name user targets such as `user:John Smith` intentionally return
-* false so that the Graph API directory lookup still runs for them.
-*/
-function looksLikeMSTeamsTargetId(raw) {
-	const trimmed = raw.trim();
-	if (!trimmed) return false;
-	if (/^conversation:/i.test(trimmed)) return true;
-	if (/^user:/i.test(trimmed)) {
-		const id = trimmed.slice(5).trim();
-		return /^[0-9a-fA-F-]{16,}$/.test(id);
-	}
-	if (/^19:.+@thread\.(tacv2|skype)$/i.test(trimmed)) return true;
-	if (/^19:.+@unq\.gbl\.spaces$/i.test(trimmed)) return true;
-	if (/^a:1[A-Za-z0-9_-]+$/i.test(trimmed)) return true;
-	if (/^8:orgid:[A-Za-z0-9-]+$/i.test(trimmed)) return true;
-	if (/^29:[A-Za-z0-9_-]+$/i.test(trimmed)) return true;
-	return /@thread\b/i.test(trimmed);
-}
-function normalizeMSTeamsTeamKey(raw) {
-	return stripProviderPrefix(raw).replace(/^team:/i, "").trim() || void 0;
-}
-function normalizeMSTeamsChannelKey(raw) {
-	return (raw?.trim().replace(/^#/, "").trim() ?? "") || void 0;
-}
-function normalizeMSTeamsConversationTargetId(raw) {
-	const trimmed = stripProviderPrefix(raw).trim();
-	return parseMSTeamsConversationId(trimmed) ?? trimmed;
-}
-function looksLikeMSTeamsThreadConversationId(raw) {
-	const normalized = normalizeMSTeamsConversationTargetId(raw);
-	return /^19:.+@thread\./i.test(normalized);
-}
-function parseMSTeamsTeamChannelInput(raw) {
-	const trimmed = stripProviderPrefix(raw).trim();
-	if (!trimmed) return {};
-	const parts = trimmed.split("/");
-	const team = normalizeMSTeamsTeamKey(parts[0] ?? "");
-	const channel = parts.length > 1 ? normalizeMSTeamsChannelKey(parts.slice(1).join("/")) : void 0;
-	return {
-		...team ? { team } : {},
-		...channel ? { channel } : {}
-	};
-}
-function parseMSTeamsTeamEntry(raw) {
-	const { team, channel } = parseMSTeamsTeamChannelInput(raw);
-	if (!team) return null;
-	return {
-		teamKey: team,
-		...channel ? { channelKey: channel } : {}
-	};
-}
-async function resolveMSTeamsChannelAllowlist(params) {
-	let tokenPromise;
-	const getToken = () => {
-		tokenPromise ??= resolveGraphToken(params.cfg);
-		return tokenPromise;
-	};
-	return await mapAllowlistResolutionInputs({
-		inputs: params.entries,
-		mapInput: async (input) => {
-			const { team, channel } = parseMSTeamsTeamChannelInput(input);
-			if (!team) return {
-				input,
-				resolved: false
-			};
-			if (looksLikeMSTeamsThreadConversationId(team)) {
-				const teamId = normalizeMSTeamsConversationTargetId(team);
-				if (!channel) return {
-					input,
-					resolved: true,
-					teamId,
-					teamName: teamId
-				};
-				if (!looksLikeMSTeamsThreadConversationId(channel)) return {
-					input,
-					resolved: false,
-					teamId,
-					teamName: teamId,
-					note: "channel id required for conversation-id team"
-				};
-				const channelId = normalizeMSTeamsConversationTargetId(channel);
-				return {
-					input,
-					resolved: true,
-					teamId,
-					teamName: teamId,
-					channelId,
-					channelName: channelId
-				};
-			}
-			const token = await getToken();
-			const teams = /^[0-9a-fA-F-]{16,}$/.test(team) ? [{
-				id: team,
-				displayName: team
-			}] : await listTeamsByName(token, team);
-			if (teams.length === 0) return {
-				input,
-				resolved: false,
-				note: "team not found"
-			};
-			const teamMatch = teams[0];
-			const graphTeamId = teamMatch.id?.trim();
-			const teamName = teamMatch.displayName?.trim() || team;
-			if (!graphTeamId) return {
-				input,
-				resolved: false,
-				note: "team id missing"
-			};
-			let teamChannels = [];
-			try {
-				teamChannels = await listChannelsForTeam(token, graphTeamId);
-			} catch {}
-			const teamId = teamChannels.find((ch) => normalizeOptionalLowercaseString(ch.displayName) === "general")?.id?.trim() || graphTeamId;
-			if (!channel) return {
-				input,
-				resolved: true,
-				teamId,
-				teamName,
-				note: teams.length > 1 ? "multiple teams; chose first" : void 0
-			};
-			const normalizedChannel = normalizeOptionalLowercaseString(channel);
-			const channelMatch = teamChannels.find((item) => item.id === channel) ?? teamChannels.find((item) => normalizeOptionalLowercaseString(item.displayName) === normalizedChannel) ?? teamChannels.find((item) => normalizeLowercaseStringOrEmpty(item.displayName ?? "").includes(normalizedChannel ?? ""));
-			if (!channelMatch?.id) return {
-				input,
-				resolved: false,
-				note: "channel not found"
-			};
-			return {
-				input,
-				resolved: true,
-				teamId,
-				teamName,
-				channelId: channelMatch.id,
-				channelName: channelMatch.displayName ?? channel,
-				note: teamChannels.length > 1 ? "multiple channels; chose first" : void 0
-			};
-		}
-	});
-}
-async function resolveMSTeamsUserAllowlist(params) {
-	const token = await resolveGraphToken(params.cfg);
-	return await mapAllowlistResolutionInputs({
-		inputs: params.entries,
-		mapInput: async (input) => {
-			const query = normalizeQuery(normalizeMSTeamsUserInput(input));
-			if (!query) return {
-				input,
-				resolved: false
-			};
-			if (/^[0-9a-fA-F-]{16,}$/.test(query)) return {
-				input,
-				resolved: true,
-				id: query
-			};
-			const users = await searchGraphUsers({
-				token,
-				query,
-				top: 10
-			});
-			const match = users[0];
-			if (!match?.id) return {
-				input,
-				resolved: false
-			};
-			return {
-				input,
-				resolved: true,
-				id: match.id,
-				name: match.displayName ?? void 0,
-				note: users.length > 1 ? "multiple matches; chose first" : void 0
-			};
-		}
-	});
-}
-//#endregion
-export { parseMSTeamsTeamChannelInput as a, resolveMSTeamsUserAllowlist as c, parseMSTeamsConversationId as i, normalizeMSTeamsMessagingTarget as n, parseMSTeamsTeamEntry as o, normalizeMSTeamsUserInput as r, resolveMSTeamsChannelAllowlist as s, looksLikeMSTeamsTargetId as t };