@openclaw/msteams 2026.5.26 → 2026.5.27-beta.1

package/dist/api.js

@@ -1,3 +1,3 @@
-import { i as msteamsSetupAdapter, n as openDelegatedOAuthUrl, r as createMSTeamsSetupWizardBase, t as msteamsSetupWizard } from "./setup-surface-f9pZ7G9O.js";
-import { t as msteamsPlugin } from "./channel-DZt_jPWh.js";
+import { i as msteamsSetupAdapter, n as openDelegatedOAuthUrl, r as createMSTeamsSetupWizardBase, t as msteamsSetupWizard } from "./setup-surface-evwYex71.js";
+import { t as msteamsPlugin } from "./channel-c7nnGfMx.js";
 export { createMSTeamsSetupWizardBase, msteamsPlugin, msteamsSetupAdapter, msteamsSetupWizard, openDelegatedOAuthUrl };

package/dist/{channel-DZt_jPWh.js → channel-c7nnGfMx.js}

@@ -1,18 +1,17 @@
-import { O as resolveNestedAllowlistDecision, S as normalizeChannelSlug, T as resolveChannelEntryMatchWithFallback, _ as isDangerousNameMatchingEnabled, i as buildChannelKeyCandidates, k as resolveToolsBySender, o as buildProbeChannelStatusSummary, r as PAIRING_APPROVED_MESSAGE, s as chunkTextForOutbound, t as DEFAULT_ACCOUNT_ID, u as createDefaultChannelRuntimeState, w as resolveAllowlistMatchSimple } from "./runtime-api-CJC3UvbX.js";
-import { h as resolveMSTeamsCredentials } from "./graph-users-CwYemYEo.js";
-import { a as looksLikeMSTeamsTargetId, c as parseMSTeamsConversationId, d as resolveMSTeamsUserAllowlist, i as msteamsSetupAdapter, l as parseMSTeamsTeamChannelInput, o as normalizeMSTeamsMessagingTarget, s as normalizeMSTeamsUserInput, t as msteamsSetupWizard, u as resolveMSTeamsChannelAllowlist } from "./setup-surface-f9pZ7G9O.js";
+import { O as resolveNestedAllowlistDecision, S as normalizeChannelSlug, T as resolveChannelEntryMatchWithFallback, _ as isDangerousNameMatchingEnabled, i as buildChannelKeyCandidates, k as resolveToolsBySender, o as buildProbeChannelStatusSummary, r as PAIRING_APPROVED_MESSAGE, s as chunkTextForOutbound, t as DEFAULT_ACCOUNT_ID, u as createDefaultChannelRuntimeState, w as resolveAllowlistMatchSimple } from "./runtime-api-BlvMnDKz.js";
+import { h as resolveMSTeamsCredentials } from "./graph-users-uPAE6-KQ.js";
+import { a as looksLikeMSTeamsTargetId, c as parseMSTeamsConversationId, d as resolveMSTeamsUserAllowlist, i as msteamsSetupAdapter, l as parseMSTeamsTeamChannelInput, o as normalizeMSTeamsMessagingTarget, s as normalizeMSTeamsUserInput, t as msteamsSetupWizard, u as resolveMSTeamsChannelAllowlist } from "./setup-surface-evwYex71.js";
 import { t as MSTeamsChannelConfigSchema } from "./config-schema-CuksCQKC.js";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";
 import { createTopLevelChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
 import { buildChannelOutboundSessionRoute, createChatChannelPlugin, stripChannelTargetPrefix, stripTargetKindPrefix } from "openclaw/plugin-sdk/channel-core";
-import { createChannelMessageAdapterFromOutbound } from "openclaw/plugin-sdk/channel-message";
+import { createChannelMessageAdapterFromOutbound, createRuntimeOutboundDelegates } from "openclaw/plugin-sdk/channel-outbound";
 import { createPairingPrefixStripper } from "openclaw/plugin-sdk/channel-pairing";
 import { createAllowlistProviderGroupPolicyWarningCollector, createDangerousNameMatchingMutableAllowlistWarningCollector, projectConfigWarningCollector } from "openclaw/plugin-sdk/channel-policy";
 import { createChannelDirectoryAdapter, createRuntimeDirectoryLiveAdapter, listDirectoryEntriesFromSources } from "openclaw/plugin-sdk/directory-runtime";
 import { adaptMessagePresentationForChannel, normalizeMessagePresentation } from "openclaw/plugin-sdk/interactive-runtime";
 import { createLazyRuntimeNamedExport } from "openclaw/plugin-sdk/lazy-runtime";
-import { createRuntimeOutboundDelegates } from "openclaw/plugin-sdk/outbound-runtime";
 import { createComputedAccountStatusAdapter } from "openclaw/plugin-sdk/status-helpers";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { Type } from "typebox";
@@ -331,7 +330,7 @@ const collectMSTeamsSecurityWarnings = createAllowlistProviderGroupPolicyWarning
 	resolveGroupPolicy: ({ cfg }) => cfg.channels?.msteams?.groupPolicy,
 	collect: ({ groupPolicy }) => groupPolicy === "open" ? ["- MS Teams groups: groupPolicy=\"open\" allows any member to trigger (mention-gated). Set channels.msteams.groupPolicy=\"allowlist\" + channels.msteams.groupAllowFrom to restrict senders."] : []
 });
-const loadMSTeamsChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-BJgDc9SC.js"), "msTeamsChannelRuntime");
+const loadMSTeamsChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-Boha-kk1.js"), "msTeamsChannelRuntime");
 const resolveMSTeamsChannelConfig = (cfg) => ({
 	allowFrom: cfg.channels?.msteams?.allowFrom,
 	defaultTo: cfg.channels?.msteams?.defaultTo
@@ -1117,7 +1116,7 @@ const msteamsPlugin = createChatChannelPlugin({
 			})
 		}),
 		gateway: { startAccount: async (ctx) => {
-			const { monitorMSTeamsProvider } = await import("./src-B2Yc1zLS.js");
+			const { monitorMSTeamsProvider } = await import("./src-ui0zJEZI.js");
 			const port = ctx.cfg.channels?.msteams?.webhook?.port ?? 3978;
 			ctx.setStatus({
 				accountId: ctx.accountId,

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as msteamsPlugin } from "./channel-DZt_jPWh.js";
+import { t as msteamsPlugin } from "./channel-c7nnGfMx.js";
 export { msteamsPlugin };

package/dist/{channel.runtime-BJgDc9SC.js → channel.runtime-Boha-kk1.js}

@@ -1,11 +1,11 @@
-import { C as normalizeStringEntries$1, s as chunkTextForOutbound } from "./runtime-api-CJC3UvbX.js";
-import { a as fetchGraphJson, c as normalizeQuery, d as postGraphJson, f as resolveGraphToken, i as fetchGraphAbsoluteUrl, l as patchGraphJson, n as deleteGraphRequest, o as listChannelsForTeam, r as escapeOData, s as listTeamsByName, t as searchGraphUsers, u as postGraphBetaJson } from "./graph-users-CwYemYEo.js";
-import { n as MSTEAMS_PRESENTATION_CAPABILITIES, r as buildMSTeamsPresentationCard } from "./channel-DZt_jPWh.js";
-import { S as createMSTeamsConversationStoreFs, a as sendMessageMSTeams, b as createMSTeamsPollStoreFs, i as sendAdaptiveCardMSTeams, n as deleteMessageMSTeams, o as sendPollMSTeams, r as editMessageMSTeams, t as probeMSTeams } from "./probe-DC3tmy9c.js";
+import { C as normalizeStringEntries$1, s as chunkTextForOutbound } from "./runtime-api-BlvMnDKz.js";
+import { a as fetchGraphJson, c as normalizeQuery, d as postGraphJson, f as resolveGraphToken, i as fetchGraphAbsoluteUrl, l as patchGraphJson, n as deleteGraphRequest, o as listChannelsForTeam, r as escapeOData, s as listTeamsByName, t as searchGraphUsers, u as postGraphBetaJson } from "./graph-users-uPAE6-KQ.js";
+import { n as MSTEAMS_PRESENTATION_CAPABILITIES, r as buildMSTeamsPresentationCard } from "./channel-c7nnGfMx.js";
+import { S as createMSTeamsConversationStoreFs, a as sendMessageMSTeams, b as createMSTeamsPollStoreFs, i as sendAdaptiveCardMSTeams, n as deleteMessageMSTeams, o as sendPollMSTeams, r as editMessageMSTeams, t as probeMSTeams } from "./probe-istgFnuw.js";
+import { resolveOutboundSendDep } from "openclaw/plugin-sdk/channel-outbound";
 import { normalizeLowercaseStringOrEmpty, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolvePayloadMediaUrls, resolveTextChunksWithFallback, sendPayloadMediaSequence } from "openclaw/plugin-sdk/reply-payload";
 import { attachChannelToResult, createAttachedChannelResultAdapter } from "openclaw/plugin-sdk/channel-send-result";
-import { resolveOutboundSendDep } from "openclaw/plugin-sdk/outbound-send-deps";
 //#region extensions/msteams/src/directory-live.ts
 async function listMSTeamsDirectoryPeersLive(params) {
 	const query = normalizeQuery(params.query);

package/dist/{graph-users-CwYemYEo.js → graph-users-uPAE6-KQ.js}

@@ -1,4 +1,4 @@
-import { M as getMSTeamsRuntime, h as fetchWithSsrFGuard$1 } from "./runtime-api-CJC3UvbX.js";
+import { M as getMSTeamsRuntime, h as fetchWithSsrFGuard$1 } from "./runtime-api-BlvMnDKz.js";
 import { n as refreshMSTeamsDelegatedTokens } from "./oauth.token-BNbWziwM.js";
 import { createRequire } from "node:module";
 import { isRecord, isRecord as isRecord$1, normalizeLowercaseStringOrEmpty, normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -403,6 +403,36 @@ async function safeFetchWithPolicy(params) {
 		resolveFn: params.resolveFn
 	});
 }
+const BOT_FRAMEWORK_SERVICE_URL_HOST_ALLOWLIST = normalizeHostnameSuffixAllowlist([
+	"smba.trafficmanager.net",
+	"smba.infra.gcc.teams.microsoft.com",
+	"smba.infra.gov.teams.microsoft.us",
+	"smba.infra.dod.teams.microsoft.us"
+]);
+const serviceUrlSsrfPolicy = buildHostnameAllowlistPolicyFromSuffixAllowlist(BOT_FRAMEWORK_SERVICE_URL_HOST_ALLOWLIST);
+if (!serviceUrlSsrfPolicy) throw new Error("Microsoft Teams Bot Framework serviceUrl allowlist is empty");
+const BOT_FRAMEWORK_SERVICE_URL_SSRF_POLICY = serviceUrlSsrfPolicy;
+function describeBotFrameworkServiceUrlHost(serviceUrl) {
+	try {
+		return new URL(serviceUrl.trim()).hostname || "invalid-url";
+	} catch {
+		return "invalid-url";
+	}
+}
+function isAllowedBotFrameworkServiceUrl(serviceUrl) {
+	if (typeof serviceUrl !== "string") return false;
+	const trimmed = serviceUrl.trim();
+	return Boolean(trimmed && isHttpsUrlAllowedByHostnameSuffixAllowlist(trimmed, BOT_FRAMEWORK_SERVICE_URL_HOST_ALLOWLIST));
+}
+function tryNormalizeBotFrameworkServiceUrl(serviceUrl) {
+	if (!isAllowedBotFrameworkServiceUrl(serviceUrl)) return;
+	return serviceUrl.trim().replace(/\/+$/, "");
+}
+function normalizeBotFrameworkServiceUrl(serviceUrl) {
+	const normalized = tryNormalizeBotFrameworkServiceUrl(serviceUrl);
+	if (normalized) return normalized;
+	throw new Error(`Blocked Microsoft Teams serviceUrl host: ${describeBotFrameworkServiceUrlHost(serviceUrl)}`);
+}
 //#endregion
 //#region extensions/msteams/src/errors.ts
 function formatUnknownError(err) {
@@ -703,7 +733,8 @@ function createBotTokenGetter(app) {
 	};
 }
 function createApiClient(sdk, serviceUrl, getToken) {
-	return new sdk.Client(serviceUrl, {
+	const normalizedServiceUrl = normalizeBotFrameworkServiceUrl(serviceUrl);
+	return new sdk.Client(normalizedServiceUrl, {
 		token: async () => await getToken() || void 0,
 		headers: { "User-Agent": buildUserAgent() }
 	});
@@ -715,11 +746,13 @@ function normalizeOutboundActivity(textOrActivity) {
 	} : textOrActivity;
 }
 function createSendContext(params) {
-	const apiClient = params.serviceUrl && params.conversationId ? createApiClient(params.sdk, params.serviceUrl, params.getToken) : void 0;
+	const normalizedServiceUrl = tryNormalizeBotFrameworkServiceUrl(params.serviceUrl);
+	const apiClient = normalizedServiceUrl && params.conversationId ? createApiClient(params.sdk, normalizedServiceUrl, params.getToken) : void 0;
 	return {
 		async sendActivity(textOrActivity) {
 			const msg = normalizeOutboundActivity(textOrActivity);
 			if (params.treatInvokeResponseAsNoop && msg.type === "invokeResponse") return { id: "invokeResponse" };
+			if (params.serviceUrl && !normalizedServiceUrl) normalizeBotFrameworkServiceUrl(params.serviceUrl);
 			if (!apiClient || !params.conversationId) return { id: "unknown" };
 			const existingChannelData = msg.channelData && typeof msg.channelData === "object" ? msg.channelData : void 0;
 			const channelData = params.tenantId ? {
@@ -753,7 +786,7 @@ function createSendContext(params) {
 			if (!activityId) throw new Error("updateActivity requires an activity id");
 			if (!params.serviceUrl || !params.conversationId) return { id: "unknown" };
 			return await updateActivityViaRest({
-				serviceUrl: params.serviceUrl,
+				serviceUrl: normalizeBotFrameworkServiceUrl(params.serviceUrl),
 				conversationId: params.conversationId,
 				activityId,
 				activity: nextActivity,
@@ -764,7 +797,7 @@ function createSendContext(params) {
 			if (!activityId) throw new Error("deleteActivity requires an activity id");
 			if (!params.serviceUrl || !params.conversationId) return;
 			await deleteActivityViaRest({
-				serviceUrl: params.serviceUrl,
+				serviceUrl: normalizeBotFrameworkServiceUrl(params.serviceUrl),
 				conversationId: params.conversationId,
 				activityId,
 				token: await params.getToken()
@@ -807,7 +840,7 @@ function createProcessContext(params) {
 */
 async function updateActivityViaRest(params) {
 	const { serviceUrl, conversationId, activityId, activity, token } = params;
-	const url = `${serviceUrl.replace(/\/+$/, "")}/v3/conversations/${encodeURIComponent(conversationId)}/activities/${encodeURIComponent(activityId)}`;
+	const url = `${normalizeBotFrameworkServiceUrl(serviceUrl)}/v3/conversations/${encodeURIComponent(conversationId)}/activities/${encodeURIComponent(activityId)}`;
 	const headers = {
 		"Content-Type": "application/json",
 		"User-Agent": buildUserAgent()
@@ -826,7 +859,8 @@ async function updateActivityViaRest(params) {
 				id: activityId
 			})
 		},
-		auditContext: "msteams-update-activity"
+		auditContext: "msteams-update-activity",
+		policy: BOT_FRAMEWORK_SERVICE_URL_SSRF_POLICY
 	});
 	try {
 		if (!response.ok) {
@@ -844,7 +878,7 @@ async function updateActivityViaRest(params) {
 */
 async function deleteActivityViaRest(params) {
 	const { serviceUrl, conversationId, activityId, token } = params;
-	const url = `${serviceUrl.replace(/\/+$/, "")}/v3/conversations/${encodeURIComponent(conversationId)}/activities/${encodeURIComponent(activityId)}`;
+	const url = `${normalizeBotFrameworkServiceUrl(serviceUrl)}/v3/conversations/${encodeURIComponent(conversationId)}/activities/${encodeURIComponent(activityId)}`;
 	const headers = { "User-Agent": buildUserAgent() };
 	if (token) headers.Authorization = `Bearer ${token}`;
 	const currentFetch = globalThis.fetch;
@@ -855,7 +889,8 @@ async function deleteActivityViaRest(params) {
 			method: "DELETE",
 			headers
 		},
-		auditContext: "msteams-delete-activity"
+		auditContext: "msteams-delete-activity",
+		policy: BOT_FRAMEWORK_SERVICE_URL_SSRF_POLICY
 	});
 	try {
 		if (!response.ok) {
@@ -877,8 +912,9 @@ async function deleteActivityViaRest(params) {
 function createMSTeamsAdapter(app, sdk) {
 	return {
 		async continueConversation(_appId, reference, logic) {
-			const serviceUrl = reference.serviceUrl;
-			if (!serviceUrl) throw new Error("Missing serviceUrl in conversation reference");
+			const rawServiceUrl = reference.serviceUrl;
+			if (!rawServiceUrl) throw new Error("Missing serviceUrl in conversation reference");
+			const serviceUrl = normalizeBotFrameworkServiceUrl(rawServiceUrl);
 			const conversationId = reference.conversation?.id;
 			if (!conversationId) throw new Error("Missing conversation.id in conversation reference");
 			const tenantId = reference.tenantId ?? reference.conversation?.tenantId;
@@ -1405,4 +1441,4 @@ async function searchGraphUsers(params) {
 	})).value ?? [];
 }
 //#endregion
-export { ATTACHMENT_TAG_RE as A, isLikelyImageAttachment as B, loadMSTeamsSdkWithAuth as C, formatMSTeamsSendErrorHint as D, classifyMSTeamsSendError as E, estimateBase64DecodedBytes as F, resolveAttachmentFetchPolicy as G, isUrlAllowed as H, extractHtmlFromAttachment as I, safeFetchWithPolicy as J, resolveMediaSsrfPolicy as K, extractInlineImageCandidates as L, IMG_SRC_RE as M, applyAuthorizationHeaderForUrl as N, formatUnknownError as O, encodeGraphShareId as P, inferPlaceholder as R, createMSTeamsTokenProvider as S, ensureUserAgentHeader as T, normalizeContentType as U, isRecord$1 as V, readNestedString as W, tryBuildGraphSharesUrlForSharedLink as X, safeHostForUrl as Y, resolveMSTeamsStorePath as _, fetchGraphJson as a, createBotFrameworkJwtValidator as b, normalizeQuery as c, postGraphJson as d, resolveGraphToken as f, saveDelegatedTokens as g, resolveMSTeamsCredentials as h, fetchGraphAbsoluteUrl as i, GRAPH_ROOT as j, isRevokedProxyError as k, patchGraphJson as l, loadDelegatedTokens as m, deleteGraphRequest as n, listChannelsForTeam as o, hasConfiguredMSTeamsCredentials as p, resolveRequestUrl as q, escapeOData as r, listTeamsByName as s, searchGraphUsers as t, postGraphBetaJson as u, normalizeSecretInputString as v, buildUserAgent as w, createMSTeamsAdapter as x, readAccessToken as y, isDownloadableAttachment as z };
+export { safeHostForUrl as $, describeBotFrameworkServiceUrlHost as A, extractHtmlFromAttachment as B, loadMSTeamsSdkWithAuth as C, formatMSTeamsSendErrorHint as D, classifyMSTeamsSendError as E, GRAPH_ROOT as F, isRecord$1 as G, inferPlaceholder as H, IMG_SRC_RE as I, readNestedString as J, isUrlAllowed as K, applyAuthorizationHeaderForUrl as L, normalizeBotFrameworkServiceUrl as M, tryNormalizeBotFrameworkServiceUrl as N, formatUnknownError as O, ATTACHMENT_TAG_RE as P, safeFetchWithPolicy as Q, encodeGraphShareId as R, createMSTeamsTokenProvider as S, ensureUserAgentHeader as T, isDownloadableAttachment as U, extractInlineImageCandidates as V, isLikelyImageAttachment as W, resolveMediaSsrfPolicy as X, resolveAttachmentFetchPolicy as Y, resolveRequestUrl as Z, resolveMSTeamsStorePath as _, fetchGraphJson as a, createBotFrameworkJwtValidator as b, normalizeQuery as c, postGraphJson as d, tryBuildGraphSharesUrlForSharedLink as et, resolveGraphToken as f, saveDelegatedTokens as g, resolveMSTeamsCredentials as h, fetchGraphAbsoluteUrl as i, isAllowedBotFrameworkServiceUrl as j, isRevokedProxyError as k, patchGraphJson as l, loadDelegatedTokens as m, deleteGraphRequest as n, listChannelsForTeam as o, hasConfiguredMSTeamsCredentials as p, normalizeContentType as q, escapeOData as r, listTeamsByName as s, searchGraphUsers as t, postGraphBetaJson as u, normalizeSecretInputString as v, buildUserAgent as w, createMSTeamsAdapter as x, readAccessToken as y, estimateBase64DecodedBytes as z };

package/dist/{probe-DC3tmy9c.js → probe-istgFnuw.js}

@@ -1,7 +1,7 @@
-import { C as normalizeStringEntries$1, E as resolveChannelMediaMaxBytes, M as getMSTeamsRuntime, d as detectMime, g as getFileExtension, m as extractOriginalFilename, p as extensionForMime, y as loadOutboundMediaFromUrl } from "./runtime-api-CJC3UvbX.js";
-import { C as loadMSTeamsSdkWithAuth, D as formatMSTeamsSendErrorHint, E as classifyMSTeamsSendError, O as formatUnknownError, S as createMSTeamsTokenProvider, _ as resolveMSTeamsStorePath, h as resolveMSTeamsCredentials, k as isRevokedProxyError, m as loadDelegatedTokens, w as buildUserAgent, x as createMSTeamsAdapter, y as readAccessToken } from "./graph-users-CwYemYEo.js";
-import { a as resolveMSTeamsReplyPolicy, o as resolveMSTeamsRouteConfig } from "./channel-DZt_jPWh.js";
-import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-message";
+import { C as normalizeStringEntries$1, E as resolveChannelMediaMaxBytes, M as getMSTeamsRuntime, d as detectMime, g as getFileExtension, m as extractOriginalFilename, p as extensionForMime, y as loadOutboundMediaFromUrl } from "./runtime-api-BlvMnDKz.js";
+import { A as describeBotFrameworkServiceUrlHost, C as loadMSTeamsSdkWithAuth, D as formatMSTeamsSendErrorHint, E as classifyMSTeamsSendError, M as normalizeBotFrameworkServiceUrl, O as formatUnknownError, S as createMSTeamsTokenProvider, _ as resolveMSTeamsStorePath, h as resolveMSTeamsCredentials, j as isAllowedBotFrameworkServiceUrl, k as isRevokedProxyError, m as loadDelegatedTokens, w as buildUserAgent, x as createMSTeamsAdapter, y as readAccessToken } from "./graph-users-uPAE6-KQ.js";
+import { a as resolveMSTeamsReplyPolicy, o as resolveMSTeamsRouteConfig } from "./channel-c7nnGfMx.js";
+import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, normalizeStringEntries, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { withFileLock } from "openclaw/plugin-sdk/file-lock";
 import { resolveSendableOutboundReplyParts } from "openclaw/plugin-sdk/reply-payload";
@@ -1590,15 +1590,30 @@ async function resolveMSTeamsSendContext(params) {
 	});
 	if (!found) throw new Error(`No conversation reference found for ${recipient.type}:${recipient.id}. The bot must receive a message from this conversation before it can send proactively.`);
 	const { conversationId, ref } = found;
+	const log = getMSTeamsRuntime().logging.getChildLogger({ name: "msteams:send" });
+	if (ref.serviceUrl && !isAllowedBotFrameworkServiceUrl(ref.serviceUrl)) {
+		try {
+			await store.remove(conversationId);
+		} catch (err) {
+			log.warn?.("failed to remove blocked msteams conversation reference", {
+				conversationId,
+				error: formatUnknownError(err)
+			});
+		}
+		throw new Error(`Stored Microsoft Teams conversation reference has blocked serviceUrl host: ${describeBotFrameworkServiceUrlHost(ref.serviceUrl)}. The bot must receive a new message from this conversation before it can send proactively.`);
+	}
+	const safeRef = ref.serviceUrl ? {
+		...ref,
+		serviceUrl: normalizeBotFrameworkServiceUrl(ref.serviceUrl)
+	} : ref;
 	if (recipient.type === "user") {
-		const resolvedType = normalizeLowercaseStringOrEmpty(ref.conversation?.conversationType ?? "");
+		const resolvedType = normalizeLowercaseStringOrEmpty(safeRef.conversation?.conversationType ?? "");
 		if (resolvedType && resolvedType !== "personal") throw new Error(`Conversation reference for user:${recipient.id} resolved to a ${resolvedType} conversation (${conversationId}) instead of a personal DM. The bot must receive a DM from this user before it can send proactively.`);
 	}
-	const log = getMSTeamsRuntime().logging.getChildLogger({ name: "msteams:send" });
 	const { sdk, app } = await loadMSTeamsSdkWithAuth(creds);
 	const adapter = createMSTeamsAdapter(app, sdk);
 	const tokenProvider = createMSTeamsTokenProvider(app);
-	const storedConversationType = normalizeLowercaseStringOrEmpty(ref.conversation?.conversationType ?? "");
+	const storedConversationType = normalizeLowercaseStringOrEmpty(safeRef.conversation?.conversationType ?? "");
 	let conversationType;
 	if (storedConversationType === "personal") conversationType = "personal";
 	else if (storedConversationType === "channel") conversationType = "channel";
@@ -1606,7 +1621,7 @@ async function resolveMSTeamsSendContext(params) {
 	const replyStyle = resolveMSTeamsProactiveReplyStyle({
 		cfg: msteamsCfg,
 		conversationId,
-		ref,
+		ref: safeRef,
 		conversationType
 	});
 	const sharePointSiteId = msteamsCfg.sharePointSiteId;
@@ -1614,16 +1629,16 @@ async function resolveMSTeamsSendContext(params) {
 		cfg: params.cfg,
 		resolveChannelLimitMb: ({ cfg }) => cfg.channels?.msteams?.mediaMaxMb
 	});
-	let graphChatId = ref.graphChatId ?? void 0;
+	let graphChatId = safeRef.graphChatId ?? void 0;
 	if (graphChatId === void 0 && sharePointSiteId) try {
 		const resolved = await resolveGraphChatId({
 			botFrameworkConversationId: conversationId,
-			userAadObjectId: ref.user?.aadObjectId,
+			userAadObjectId: safeRef.user?.aadObjectId,
 			tokenProvider
 		});
 		graphChatId = resolved;
 		if (resolved) await store.upsert(conversationId, {
-			...ref,
+			...safeRef,
 			graphChatId: resolved
 		});
 		else log.warn?.("could not resolve Graph chat ID; file uploads may fail for this conversation", { conversationId });
@@ -1637,7 +1652,7 @@ async function resolveMSTeamsSendContext(params) {
 	return {
 		appId: creds.appId,
 		conversationId,
-		ref,
+		ref: safeRef,
 		adapter,
 		log,
 		conversationType,

package/dist/{runtime-api-CJC3UvbX.js → runtime-api-BlvMnDKz.js}

@@ -1,17 +1,15 @@
 import { mergeAllowlist, resolveAllowlistMatchSimple, summarizeMapping } from "openclaw/plugin-sdk/allow-from";
-import { createChannelMessageReplyPipeline } from "openclaw/plugin-sdk/channel-message";
+import { createChannelMessageReplyPipeline, keepHttpServerTaskAlive, logTypingFailure } from "openclaw/plugin-sdk/channel-outbound";
 import { createChannelPairingController } from "openclaw/plugin-sdk/channel-pairing";
 import { resolveToolsBySender } from "openclaw/plugin-sdk/channel-policy";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
-import { logTypingFailure } from "openclaw/plugin-sdk/channel-logging";
 import { PAIRING_APPROVED_MESSAGE, buildProbeChannelStatusSummary, createDefaultChannelRuntimeState } from "openclaw/plugin-sdk/channel-status";
 import { buildChannelKeyCandidates, normalizeChannelSlug, resolveChannelEntryMatchWithFallback, resolveNestedAllowlistDecision } from "openclaw/plugin-sdk/channel-targets";
 import { isDangerousNameMatchingEnabled } from "openclaw/plugin-sdk/dangerous-name-runtime";
 import { resolveDefaultGroupPolicy } from "openclaw/plugin-sdk/runtime-group-policy";
 import { withFileLock as withFileLock$1 } from "openclaw/plugin-sdk/file-lock";
-import { keepHttpServerTaskAlive } from "openclaw/plugin-sdk/channel-lifecycle";
 import { detectMime, extensionForMime, extractOriginalFilename, getFileExtension, resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/media-runtime";
-import { dispatchReplyFromConfigWithSettledDispatcher as dispatchReplyFromConfigWithSettledDispatcher$1 } from "openclaw/plugin-sdk/inbound-reply-dispatch";
+import { dispatchReplyFromConfigWithSettledDispatcher as dispatchReplyFromConfigWithSettledDispatcher$1 } from "openclaw/plugin-sdk/channel-inbound";
 import { loadOutboundMediaFromUrl } from "openclaw/plugin-sdk/outbound-media";
 import { buildMediaPayload } from "openclaw/plugin-sdk/reply-payload";
 import { fetchWithSsrFGuard as fetchWithSsrFGuard$1 } from "openclaw/plugin-sdk/ssrf-runtime";

package/dist/runtime-api.js

@@ -1,2 +1,2 @@
-import { A as summarizeMapping, C as normalizeStringEntries, D as resolveDefaultGroupPolicy, E as resolveChannelMediaMaxBytes, O as resolveNestedAllowlistDecision, P as setMSTeamsRuntime, S as normalizeChannelSlug, T as resolveChannelEntryMatchWithFallback, _ as isDangerousNameMatchingEnabled, a as buildMediaPayload, b as logTypingFailure, c as createChannelMessageReplyPipeline, d as detectMime, f as dispatchReplyFromConfigWithSettledDispatcher, g as getFileExtension, h as fetchWithSsrFGuard, i as buildChannelKeyCandidates, j as withFileLock, k as resolveToolsBySender, l as createChannelPairingController, m as extractOriginalFilename, n as DEFAULT_WEBHOOK_MAX_BODY_BYTES, o as buildProbeChannelStatusSummary, p as extensionForMime, r as PAIRING_APPROVED_MESSAGE, s as chunkTextForOutbound, t as DEFAULT_ACCOUNT_ID, u as createDefaultChannelRuntimeState, v as keepHttpServerTaskAlive, w as resolveAllowlistMatchSimple, x as mergeAllowlist, y as loadOutboundMediaFromUrl } from "./runtime-api-CJC3UvbX.js";
+import { A as summarizeMapping, C as normalizeStringEntries, D as resolveDefaultGroupPolicy, E as resolveChannelMediaMaxBytes, O as resolveNestedAllowlistDecision, P as setMSTeamsRuntime, S as normalizeChannelSlug, T as resolveChannelEntryMatchWithFallback, _ as isDangerousNameMatchingEnabled, a as buildMediaPayload, b as logTypingFailure, c as createChannelMessageReplyPipeline, d as detectMime, f as dispatchReplyFromConfigWithSettledDispatcher, g as getFileExtension, h as fetchWithSsrFGuard, i as buildChannelKeyCandidates, j as withFileLock, k as resolveToolsBySender, l as createChannelPairingController, m as extractOriginalFilename, n as DEFAULT_WEBHOOK_MAX_BODY_BYTES, o as buildProbeChannelStatusSummary, p as extensionForMime, r as PAIRING_APPROVED_MESSAGE, s as chunkTextForOutbound, t as DEFAULT_ACCOUNT_ID, u as createDefaultChannelRuntimeState, v as keepHttpServerTaskAlive, w as resolveAllowlistMatchSimple, x as mergeAllowlist, y as loadOutboundMediaFromUrl } from "./runtime-api-BlvMnDKz.js";
 export { DEFAULT_ACCOUNT_ID, DEFAULT_WEBHOOK_MAX_BODY_BYTES, PAIRING_APPROVED_MESSAGE, buildChannelKeyCandidates, buildMediaPayload, buildProbeChannelStatusSummary, chunkTextForOutbound, createChannelMessageReplyPipeline, createChannelPairingController, createDefaultChannelRuntimeState, detectMime, dispatchReplyFromConfigWithSettledDispatcher, extensionForMime, extractOriginalFilename, fetchWithSsrFGuard, getFileExtension, isDangerousNameMatchingEnabled, keepHttpServerTaskAlive, loadOutboundMediaFromUrl, logTypingFailure, mergeAllowlist, normalizeChannelSlug, normalizeStringEntries, resolveAllowlistMatchSimple, resolveChannelEntryMatchWithFallback, resolveChannelMediaMaxBytes, resolveDefaultGroupPolicy, resolveNestedAllowlistDecision, resolveToolsBySender, setMSTeamsRuntime, summarizeMapping, withFileLock };

package/dist/setup-plugin-api.js

@@ -1,5 +1,5 @@
-import { h as resolveMSTeamsCredentials } from "./graph-users-CwYemYEo.js";
-import { i as msteamsSetupAdapter, t as msteamsSetupWizard } from "./setup-surface-f9pZ7G9O.js";
+import { h as resolveMSTeamsCredentials } from "./graph-users-uPAE6-KQ.js";
+import { i as msteamsSetupAdapter, t as msteamsSetupWizard } from "./setup-surface-evwYex71.js";
 import { t as MSTeamsChannelConfigSchema } from "./config-schema-CuksCQKC.js";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";

package/dist/{setup-surface-f9pZ7G9O.js → setup-surface-evwYex71.js}

@@ -1,4 +1,4 @@
-import { O as formatUnknownError, c as normalizeQuery, f as resolveGraphToken, g as saveDelegatedTokens, h as resolveMSTeamsCredentials, o as listChannelsForTeam, p as hasConfiguredMSTeamsCredentials, s as listTeamsByName, t as searchGraphUsers, v as normalizeSecretInputString } from "./graph-users-CwYemYEo.js";
+import { O as formatUnknownError, c as normalizeQuery, f as resolveGraphToken, g as saveDelegatedTokens, h as resolveMSTeamsCredentials, o as listChannelsForTeam, p as hasConfiguredMSTeamsCredentials, s as listTeamsByName, t as searchGraphUsers, v as normalizeSecretInputString } from "./graph-users-uPAE6-KQ.js";
 import { mapAllowlistResolutionInputs } from "openclaw/plugin-sdk/allow-from";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { DEFAULT_ACCOUNT_ID, createSetupTranslator, createStandardChannelSetupStatus, createTopLevelChannelAllowFromSetter, createTopLevelChannelDmPolicy, createTopLevelChannelGroupPolicySetter, mergeAllowFromEntries, splitSetupEntries } from "openclaw/plugin-sdk/setup";

package/dist/{src-B2Yc1zLS.js → src-ui0zJEZI.js}

@@ -1,14 +1,13 @@
-import { A as summarizeMapping, D as resolveDefaultGroupPolicy, E as resolveChannelMediaMaxBytes, M as getMSTeamsRuntime, N as getOptionalMSTeamsRuntime, _ as isDangerousNameMatchingEnabled, a as buildMediaPayload, b as logTypingFailure, c as createChannelMessageReplyPipeline, f as dispatchReplyFromConfigWithSettledDispatcher$1, l as createChannelPairingController, n as DEFAULT_WEBHOOK_MAX_BODY_BYTES, t as DEFAULT_ACCOUNT_ID, v as keepHttpServerTaskAlive, x as mergeAllowlist } from "./runtime-api-CJC3UvbX.js";
-import { A as ATTACHMENT_TAG_RE, B as isLikelyImageAttachment, C as loadMSTeamsSdkWithAuth, D as formatMSTeamsSendErrorHint, E as classifyMSTeamsSendError, F as estimateBase64DecodedBytes, G as resolveAttachmentFetchPolicy, H as isUrlAllowed, I as extractHtmlFromAttachment, J as safeFetchWithPolicy, K as resolveMediaSsrfPolicy, L as extractInlineImageCandidates, M as IMG_SRC_RE, N as applyAuthorizationHeaderForUrl, O as formatUnknownError, P as encodeGraphShareId, R as inferPlaceholder, S as createMSTeamsTokenProvider, T as ensureUserAgentHeader, U as normalizeContentType, V as isRecord$1, W as readNestedString, X as tryBuildGraphSharesUrlForSharedLink, Y as safeHostForUrl, _ as resolveMSTeamsStorePath, a as fetchGraphJson, b as createBotFrameworkJwtValidator, h as resolveMSTeamsCredentials, j as GRAPH_ROOT, q as resolveRequestUrl, w as buildUserAgent, x as createMSTeamsAdapter, z as isDownloadableAttachment } from "./graph-users-CwYemYEo.js";
-import { d as resolveMSTeamsUserAllowlist, u as resolveMSTeamsChannelAllowlist } from "./setup-surface-f9pZ7G9O.js";
-import { a as resolveMSTeamsReplyPolicy, i as resolveMSTeamsAllowlistMatch, o as resolveMSTeamsRouteConfig } from "./channel-DZt_jPWh.js";
-import { C as readJsonFile, S as createMSTeamsConversationStoreFs, T as writeJsonFile, _ as buildFileInfoCard, b as createMSTeamsPollStoreFs, c as renderReplyPayloadsToMessages, d as withRevokedProxyFallback, f as resolveGraphChatId, g as removePendingUploadFs, h as getPendingUploadFs, l as sendMSTeamsMessages, m as removePendingUpload, p as getPendingUpload, s as buildConversationReference, u as AI_GENERATED_ENTITY, v as parseFileConsentInvoke, w as withFileLock, x as extractMSTeamsPollVote, y as uploadToConsentUrl } from "./probe-DC3tmy9c.js";
+import { A as summarizeMapping, D as resolveDefaultGroupPolicy, E as resolveChannelMediaMaxBytes, M as getMSTeamsRuntime, N as getOptionalMSTeamsRuntime, _ as isDangerousNameMatchingEnabled, a as buildMediaPayload, b as logTypingFailure, c as createChannelMessageReplyPipeline, f as dispatchReplyFromConfigWithSettledDispatcher$1, l as createChannelPairingController, n as DEFAULT_WEBHOOK_MAX_BODY_BYTES, t as DEFAULT_ACCOUNT_ID, v as keepHttpServerTaskAlive, x as mergeAllowlist } from "./runtime-api-BlvMnDKz.js";
+import { $ as safeHostForUrl, B as extractHtmlFromAttachment, C as loadMSTeamsSdkWithAuth, D as formatMSTeamsSendErrorHint, E as classifyMSTeamsSendError, F as GRAPH_ROOT, G as isRecord$1, H as inferPlaceholder, I as IMG_SRC_RE, J as readNestedString, K as isUrlAllowed, L as applyAuthorizationHeaderForUrl, N as tryNormalizeBotFrameworkServiceUrl, O as formatUnknownError, P as ATTACHMENT_TAG_RE, Q as safeFetchWithPolicy, R as encodeGraphShareId, S as createMSTeamsTokenProvider, T as ensureUserAgentHeader, U as isDownloadableAttachment, V as extractInlineImageCandidates, W as isLikelyImageAttachment, X as resolveMediaSsrfPolicy, Y as resolveAttachmentFetchPolicy, Z as resolveRequestUrl, _ as resolveMSTeamsStorePath, a as fetchGraphJson, b as createBotFrameworkJwtValidator, et as tryBuildGraphSharesUrlForSharedLink, h as resolveMSTeamsCredentials, q as normalizeContentType, w as buildUserAgent, x as createMSTeamsAdapter, z as estimateBase64DecodedBytes } from "./graph-users-uPAE6-KQ.js";
+import { d as resolveMSTeamsUserAllowlist, u as resolveMSTeamsChannelAllowlist } from "./setup-surface-evwYex71.js";
+import { a as resolveMSTeamsReplyPolicy, i as resolveMSTeamsAllowlistMatch, o as resolveMSTeamsRouteConfig } from "./channel-c7nnGfMx.js";
+import { C as readJsonFile, S as createMSTeamsConversationStoreFs, T as writeJsonFile, _ as buildFileInfoCard, b as createMSTeamsPollStoreFs, c as renderReplyPayloadsToMessages, d as withRevokedProxyFallback, f as resolveGraphChatId, g as removePendingUploadFs, h as getPendingUploadFs, l as sendMSTeamsMessages, m as removePendingUpload, p as getPendingUpload, s as buildConversationReference, u as AI_GENERATED_ENTITY, v as parseFileConsentInvoke, w as withFileLock, x as extractMSTeamsPollVote, y as uploadToConsentUrl } from "./probe-istgFnuw.js";
 import { formatAllowlistMatchMeta } from "openclaw/plugin-sdk/allow-from";
-import { createLiveMessageState, createPreviewMessageReceipt, defineFinalizableLivePreviewAdapter, deliverWithFinalizableLivePreviewAdapter, markLiveMessageFinalized } from "openclaw/plugin-sdk/channel-message";
+import { buildChannelProgressDraftLine, buildChannelProgressDraftLineForEntry, createChannelProgressDraftGate, createDraftStreamLoop, createLiveMessageState, createPreviewMessageReceipt, defineFinalizableLivePreviewAdapter, deliverWithFinalizableLivePreviewAdapter, formatChannelProgressDraftText, isChannelProgressDraftWorkToolName, markLiveMessageFinalized, mergeChannelProgressDraftLine, normalizeChannelProgressDraftLineIdentity, resolveChannelPreviewStreamMode, resolveChannelProgressDraftMaxLines, resolveChannelStreamingBlockEnabled, resolveChannelStreamingPreviewToolProgress } from "openclaw/plugin-sdk/channel-outbound";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, readStringValue, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { createDraftStreamLoop } from "openclaw/plugin-sdk/channel-lifecycle";
 import { saveResponseMedia } from "openclaw/plugin-sdk/media-runtime";
-import { dispatchReplyFromConfigWithSettledDispatcher, hasFinalInboundReplyDispatch, resolveInboundReplyDispatchCounts } from "openclaw/plugin-sdk/inbound-reply-dispatch";
+import { buildChannelInboundEventContext, dispatchReplyFromConfigWithSettledDispatcher, hasFinalInboundReplyDispatch, logInboundDrop, resolveInboundMentionDecision, resolveInboundReplyDispatchCounts, resolveInboundSessionEnvelopeContext } from "openclaw/plugin-sdk/channel-inbound";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
 import path from "node:path";
 import { appendRegularFile } from "openclaw/plugin-sdk/security-runtime";
@@ -16,10 +15,8 @@ import { writeJsonFileAtomically } from "openclaw/plugin-sdk/json-store";
 import { resolveThreadSessionKeys } from "openclaw/plugin-sdk/routing";
 import fs from "node:fs/promises";
 import { channelIngressRoutes, resolveStableChannelMessageIngress } from "openclaw/plugin-sdk/channel-ingress-runtime";
-import { logInboundDrop, resolveInboundMentionDecision, resolveInboundSessionEnvelopeContext } from "openclaw/plugin-sdk/channel-inbound";
-import { filterSupplementalContextItems, resolveChannelContextVisibilityMode, shouldIncludeSupplementalContext } from "openclaw/plugin-sdk/context-visibility-runtime";
+import { filterSupplementalContextItems, resolveChannelContextVisibilityMode } from "openclaw/plugin-sdk/context-visibility-runtime";
 import { DEFAULT_GROUP_HISTORY_LIMIT, createChannelHistoryWindow } from "openclaw/plugin-sdk/reply-history";
-import { buildChannelProgressDraftLine, buildChannelProgressDraftLineForEntry, createChannelProgressDraftGate, formatChannelProgressDraftText, isChannelProgressDraftWorkToolName, mergeChannelProgressDraftLine, normalizeChannelProgressDraftLineIdentity, resolveChannelPreviewStreamMode, resolveChannelProgressDraftMaxLines, resolveChannelStreamingBlockEnabled, resolveChannelStreamingPreviewToolProgress } from "openclaw/plugin-sdk/channel-streaming";
 //#region extensions/msteams/src/feedback-reflection-prompt.ts
 /** Max chars of the thumbed-down response to include in the reflection prompt. */
 const MAX_RESPONSE_CHARS = 500;
@@ -2519,6 +2516,7 @@ function buildStoredConversationReference(params) {
 	const clientInfo = activity.entities?.find((e) => e.type === "clientInfo");
 	const tenantId = activity.channelData?.tenant?.id ?? conversation?.tenantId;
 	const aadObjectId = from?.aadObjectId;
+	const serviceUrl = tryNormalizeBotFrameworkServiceUrl(activity.serviceUrl);
 	return {
 		activityId: activity.id,
 		user: from ? {
@@ -2540,7 +2538,7 @@ function buildStoredConversationReference(params) {
 		...aadObjectId ? { aadObjectId } : {},
 		teamId,
 		channelId: activity.channelId,
-		serviceUrl: activity.serviceUrl,
+		...serviceUrl ? { serviceUrl } : {},
 		locale: activity.locale,
 		...clientInfo?.timezone ? { timezone: clientInfo.timezone } : {},
 		...threadId ? { threadId } : {}
@@ -2948,44 +2946,62 @@ function createMSTeamsMessageHandler(deps) {
 			senderName: quoteSenderName,
 			allowNameMatching
 		}).allowed : true;
-		const includeQuoteContext = quoteInfo && shouldIncludeSupplementalContext({
-			mode: contextVisibilityMode,
-			kind: "quote",
-			senderAllowed: quoteSenderAllowed
-		});
 		const bodyForAgent = threadContext ? `[Thread history]\n${threadContext}\n[/Thread history]\n\n${rawBody}` : rawBody;
 		const nativeChannelId = isChannel && teamId ? `${teamId}/${conversationId}` : void 0;
-		const ctxPayload = core.channel.reply.finalizeInboundContext({
-			Body: combinedBody,
-			BodyForAgent: bodyForAgent,
-			InboundHistory: inboundHistory,
-			RawBody: rawBody,
-			CommandBody: commandBody,
-			BodyForCommands: commandBody,
-			From: teamsFrom,
-			To: teamsTo,
-			SessionKey: route.sessionKey,
-			AccountId: route.accountId,
-			ChatType: isDirectMessage ? "direct" : isChannel ? "channel" : "group",
-			ConversationLabel: envelopeFrom,
-			GroupSubject: !isDirectMessage ? conversationType : void 0,
-			GroupSpace: teamId,
-			SenderName: senderName,
-			SenderId: senderId,
-			Provider: "msteams",
-			Surface: "msteams",
-			MessageSid: activity.id,
-			Timestamp: timestamp?.getTime() ?? Date.now(),
-			WasMentioned: isDirectMessage || mentionDecision.effectiveWasMentioned,
-			CommandAuthorized: commandAuthorized,
-			OriginatingChannel: "msteams",
-			OriginatingTo: teamsTo,
-			NativeChannelId: nativeChannelId,
-			ReplyToId: activity.replyToId ?? void 0,
-			ReplyToBody: includeQuoteContext ? quoteInfo?.body : void 0,
-			ReplyToSender: includeQuoteContext ? quoteInfo?.sender : void 0,
-			ReplyToIsQuote: quoteInfo ? true : void 0,
-			...mediaPayload
+		const ctxPayload = buildChannelInboundEventContext({
+			channel: "msteams",
+			finalize: core.channel.reply.finalizeInboundContext,
+			contextVisibility: contextVisibilityMode,
+			supplemental: { quote: quoteInfo ? {
+				id: activity.replyToId ?? void 0,
+				body: quoteInfo.body,
+				sender: quoteInfo.sender,
+				senderAllowed: quoteSenderAllowed,
+				isQuote: true
+			} : void 0 },
+			messageId: activity.id,
+			timestamp: timestamp?.getTime() ?? Date.now(),
+			from: teamsFrom,
+			sender: {
+				id: senderId,
+				name: senderName
+			},
+			conversation: {
+				kind: isDirectMessage ? "direct" : isChannel ? "channel" : "group",
+				id: conversationId,
+				label: envelopeFrom,
+				spaceId: teamId,
+				nativeChannelId
+			},
+			route: {
+				agentId: route.agentId,
+				accountId: route.accountId,
+				routeSessionKey: route.sessionKey
+			},
+			reply: {
+				to: teamsTo,
+				replyToId: activity.replyToId ?? void 0,
+				nativeChannelId
+			},
+			message: {
+				body: combinedBody,
+				bodyForAgent,
+				inboundHistory,
+				rawBody,
+				commandBody
+			},
+			access: {
+				mentions: {
+					canDetectMention: !isDirectMessage,
+					wasMentioned: isDirectMessage || mentionDecision.effectiveWasMentioned
+				},
+				commands: { authorized: commandAuthorized }
+			},
+			extra: {
+				GroupSubject: !isDirectMessage ? conversationType : void 0,
+				ReplyToIsQuote: quoteInfo ? true : void 0,
+				...mediaPayload
+			}
 		});
 		logVerboseMessage(`msteams inbound: from=${ctxPayload.From} preview="${preview}"`);
 		const sharePointSiteId = msteamsCfg?.sharePointSiteId;
@@ -3015,7 +3031,7 @@ function createMSTeamsMessageHandler(deps) {
 		} } } : void 0;
 		log.info("dispatching to agent", { sessionKey: route.sessionKey });
 		try {
-			const turnResult = await core.channel.turn.run({
+			const turnResult = await core.channel.inbound.run({
 				channel: "msteams",
 				accountId: route.accountId,
 				raw: context,
@@ -3600,6 +3616,7 @@ async function handleFeedbackInvoke(context, deps) {
 			rejectSymlinkParents: true
 		}).catch(() => {});
 	} catch {}
+	const serviceUrl = tryNormalizeBotFrameworkServiceUrl(activity.serviceUrl);
 	const conversationRef = {
 		activityId: activity.id,
 		user: {
@@ -3621,7 +3638,7 @@ async function handleFeedbackInvoke(context, deps) {
 			tenantId: activity.conversation?.tenantId
 		},
 		channelId: activity.channelId ?? "msteams",
-		serviceUrl: activity.serviceUrl,
+		...serviceUrl ? { serviceUrl } : {},
 		locale: activity.locale
 	};
 	if (isNegative && msteamsCfg?.feedbackReflection !== false) runFeedbackReflection({

package/dist/test-api.js

@@ -1,2 +1,2 @@
-import { t as msteamsPlugin } from "./channel-DZt_jPWh.js";
+import { t as msteamsPlugin } from "./channel-c7nnGfMx.js";
 export { msteamsPlugin };

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/msteams",
-  "version": "2026.5.26",
+  "version": "2026.5.27-beta.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/msteams",
-      "version": "2026.5.26",
+      "version": "2026.5.27-beta.1",
       "dependencies": {
         "@azure/identity": "4.13.1",
         "@microsoft/teams.api": "2.0.11",
@@ -17,7 +17,7 @@
         "typebox": "1.1.38"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.5.26"
+        "openclaw": ">=2026.5.27-beta.1"
       },
       "peerDependenciesMeta": {
         "openclaw": {

package/openclaw.plugin.json

@@ -1,5 +1,7 @@
 {
   "id": "msteams",
+  "name": "Microsoft Teams",
+  "description": "OpenClaw Microsoft Teams channel plugin for bot conversations.",
   "activation": {
     "onStartup": false
   },

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@openclaw/msteams",
-  "version": "2026.5.26",
-  "description": "OpenClaw Microsoft Teams channel plugin",
+  "version": "2026.5.27-beta.1",
+  "description": "OpenClaw Microsoft Teams channel plugin for bot conversations.",
   "repository": {
     "type": "git",
     "url": "https://github.com/openclaw/openclaw"
@@ -17,7 +17,7 @@
     "typebox": "1.1.38"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.26"
+    "openclaw": ">=2026.5.27-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -53,10 +53,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.26"
+      "pluginApi": ">=2026.5.27-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.5.26"
+      "openclawVersion": "2026.5.27-beta.1"
     },
     "release": {
       "publishToClawHub": true,