@openclaw/msteams 2026.5.27 → 2026.5.28-beta.2

package/node_modules/@microsoft/teams.apps/node_modules/jwks-rsa/src/errors/SigningKeyNotFoundError.js

@@ -1,10 +0,0 @@
-function SigningKeyNotFoundError(message) {
-  Error.call(this, message);
-  Error.captureStackTrace(this, this.constructor);
-  this.name = 'SigningKeyNotFoundError';
-  this.message = message;
-}
-
-SigningKeyNotFoundError.prototype = Object.create(Error.prototype);
-SigningKeyNotFoundError.prototype.constructor = SigningKeyNotFoundError;
-module.exports = SigningKeyNotFoundError;

package/node_modules/@microsoft/teams.apps/node_modules/jwks-rsa/src/errors/index.js

@@ -1,6 +0,0 @@
-module.exports = {
-  ArgumentError: require('./ArgumentError'),
-  JwksError: require('./JwksError'),
-  JwksRateLimitError: require('./JwksRateLimitError'),
-  SigningKeyNotFoundError: require('./SigningKeyNotFoundError')
-};

package/node_modules/@microsoft/teams.apps/node_modules/jwks-rsa/src/index.js

@@ -1,22 +0,0 @@
-const { JwksClient } = require('./JwksClient');
-const errors = require('./errors');
-const { hapiJwt2Key, hapiJwt2KeyAsync } = require('./integrations/hapi');
-const { expressJwtSecret } = require('./integrations/express');
-const { koaJwtSecret } = require('./integrations/koa');
-const { passportJwtSecret } = require('./integrations/passport');
-
-module.exports = (options) => {
-  return new JwksClient(options);
-};
-module.exports.JwksClient = JwksClient;
-
-module.exports.ArgumentError = errors.ArgumentError;
-module.exports.JwksError = errors.JwksError;
-module.exports.JwksRateLimitError = errors.JwksRateLimitError;
-module.exports.SigningKeyNotFoundError = errors.SigningKeyNotFoundError;
-
-module.exports.expressJwtSecret = expressJwtSecret;
-module.exports.hapiJwt2Key = hapiJwt2Key;
-module.exports.hapiJwt2KeyAsync = hapiJwt2KeyAsync;
-module.exports.koaJwtSecret = koaJwtSecret;
-module.exports.passportJwtSecret = passportJwtSecret;

package/node_modules/@microsoft/teams.apps/node_modules/jwks-rsa/src/integrations/config.js

@@ -1,15 +0,0 @@
-const allowedSignatureAlg = [
-  'RS256',
-  'RS384',
-  'RS512',
-  'PS256',
-  'PS384',
-  'PS512',
-  'ES256',
-  'ES256K',
-  'ES384',
-  'ES512',
-  'EdDSA'
-];
-
-module.exports = allowedSignatureAlg;

package/node_modules/@microsoft/teams.apps/node_modules/jwks-rsa/src/integrations/express.js

@@ -1,60 +0,0 @@
-const { ArgumentError } = require('../errors');
-const { JwksClient } = require('../JwksClient');
-const supportedAlg = require('./config');
-
-const handleSigningKeyError = (err, cb) => {
-  // If we didn't find a match, can't provide a key.
-  if (err && err.name === 'SigningKeyNotFoundError') {
-    return cb(null);
-  }
-
-  // If an error occured like rate limiting or HTTP issue, we'll bubble up the error.
-  if (err) {
-    return cb(err);
-  }
-};
-
-module.exports.expressJwtSecret = function (options) {
-  if (options === null || options === undefined) {
-    throw new ArgumentError('An options object must be provided when initializing expressJwtSecret');
-  }
-
-  const client = new JwksClient(options);
-  const onError = options.handleSigningKeyError || handleSigningKeyError;
-
-  const expressJwt7Provider = async (req, token) => {
-    if (!token) { return; }
-    const header = token.header;
-    if (!header || !supportedAlg.includes(header.alg)) {
-      return;
-    }
-    try {
-      const key = await client.getSigningKey(header.kid);
-      return key.publicKey || key.rsaPublicKey;
-    } catch (err) {
-      return new Promise((resolve, reject) => {
-        onError(err, (newError) => {
-          if (!newError) { return resolve(); }
-          reject(newError);
-        });
-      });
-    }
-  };
-
-  return function secretProvider(req, header, payload, cb) {
-    //This function has 4 parameters to make it work with express-jwt@6
-    //but it also supports express-jwt@7 which only has 2.
-    if (arguments.length === 4) {
-      expressJwt7Provider(req, { header })
-        .then(key => {
-          setImmediate(cb, null, key);
-        }).catch(err => {
-          setImmediate(cb, err);
-        });
-
-      return;
-    }
-
-    return expressJwt7Provider(req, arguments[1]);
-  };
-};

package/node_modules/@microsoft/teams.apps/node_modules/jwks-rsa/src/integrations/hapi.js

@@ -1,59 +0,0 @@
-const { ArgumentError } = require('../errors');
-const { JwksClient } = require('../JwksClient');
-const supportedAlg = require('./config');
-
-const handleSigningKeyError = (err, cb) => {
-  // If we didn't find a match, can't provide a key.
-  if (err && err.name === 'SigningKeyNotFoundError') {
-    return cb(err, null, null);
-  }
-
-  // If an error occured like rate limiting or HTTP issue, we'll bubble up the error.
-  if (err) {
-    return cb(err, null, null);
-  }
-};
-
-/**
- * Call hapiJwt2Key as a Promise
- * @param {object} options 
- * @returns {Promise}
- */
-module.exports.hapiJwt2KeyAsync = (options) => {
-  const secretProvider = module.exports.hapiJwt2Key(options);
-  return function(decoded) {
-    return new Promise((resolve, reject) => {
-      const cb = (err, key) => {
-        (!key || err) ? reject(err) : resolve({ key });
-      };
-      secretProvider(decoded, cb);
-    });
-  };
-}; 
-
-module.exports.hapiJwt2Key = function (options) {
-  if (options === null || options === undefined) {
-    throw new ArgumentError('An options object must be provided when initializing hapiJwt2Key');
-  }
-
-  const client = new JwksClient(options);
-  const onError = options.handleSigningKeyError || handleSigningKeyError;
-
-  return function secretProvider(decoded, cb) {
-    // We cannot find a signing certificate if there is no header (no kid).
-    if (!decoded || !decoded.header) {
-      return cb(new Error('Cannot find a signing certificate if there is no header'), null, null);
-    }
-
-    if (!supportedAlg.includes(decoded.header.alg)) {
-      return cb(new Error('Unsupported algorithm ' + decoded.header.alg + ' supplied.'), null, null);
-    }
-
-    client.getSigningKey(decoded.header.kid)
-      .then(key => {
-        return cb(null, key.publicKey || key.rsaPublicKey, key);
-      }).catch(err => {
-        return onError(err, (newError) => cb(newError, null, null));
-      });
-  };
-};

package/node_modules/@microsoft/teams.apps/node_modules/jwks-rsa/src/integrations/koa.js

@@ -1,30 +0,0 @@
-const { ArgumentError } = require('../errors');
-const { JwksClient } = require('../JwksClient');
-const supportedAlg = require('./config');
-
-module.exports.koaJwtSecret = function (options = {}) {
-  if (!options.jwksUri) {
-    throw new ArgumentError('No JWKS provided. Please provide a jwksUri');
-  }
-
-  const client = new JwksClient(options);
-
-  return function secretProvider({ alg, kid } = {}) {
-    return new Promise((resolve, reject) => {
-      if (!supportedAlg.includes(alg)) {
-        return reject(new Error('Missing / invalid token algorithm'));
-      }
-
-      client.getSigningKey(kid)
-        .then(key => {
-          resolve(key.publicKey || key.rsaPublicKey);
-        }).catch(err => {
-          if (options.handleSigningKeyError) {
-            return options.handleSigningKeyError(err).then(reject);
-          }
-
-          return reject(err);
-        });
-    });
-  };
-};

package/node_modules/@microsoft/teams.apps/node_modules/jwks-rsa/src/integrations/passport.js

@@ -1,52 +0,0 @@
-const jose = require('jose');
-const { ArgumentError } = require('../errors');
-const { JwksClient } = require('../JwksClient');
-const supportedAlg = require('./config');
-
-const handleSigningKeyError = (err, cb) => {
-  // If we didn't find a match, can't provide a key.
-  if (err && err.name === 'SigningKeyNotFoundError') {
-    return cb(null);
-  }
-
-  // If an error occured like rate limiting or HTTP issue, we'll bubble up the error.
-  if (err) {
-    return cb(err);
-  }
-};
-
-module.exports.passportJwtSecret = function (options) {
-  if (options === null || options === undefined) {
-    throw new ArgumentError('An options object must be provided when initializing passportJwtSecret');
-  }
-
-  if (!options.jwksUri) {
-    throw new ArgumentError('No JWKS provided. Please provide a jwksUri');
-  }
-
-  const client = new JwksClient(options);
-  const onError = options.handleSigningKeyError || handleSigningKeyError;
-
-  return function secretProvider(req, rawJwtToken, cb) {
-    let decoded;
-    try {
-      decoded = {
-        payload: jose.decodeJwt(rawJwtToken),
-        header: jose.decodeProtectedHeader(rawJwtToken)
-      };
-    } catch (err) {
-      decoded = null;
-    }
-
-    if (!decoded || !supportedAlg.includes(decoded.header.alg)) {
-      return cb(null, null);
-    }
-
-    client.getSigningKey(decoded.header.kid)
-      .then(key => {
-        cb(null, key.publicKey || key.rsaPublicKey);
-      }).catch(err => {
-        onError(err, (newError) => cb(newError, null));
-      });
-  };
-};

package/node_modules/@microsoft/teams.apps/node_modules/jwks-rsa/src/utils.js

@@ -1,80 +0,0 @@
-const jose = require('jose');
-const JwksError = require('./errors/JwksError');
-
-function resolveAlg(jwk) {
-  if (jwk.alg) {
-    return jwk.alg;
-  }
-
-  if (jwk.kty === 'RSA') {
-    return 'RS256';
-  }
-
-  if (jwk.kty === 'EC') {
-    switch (jwk.crv) {
-      case 'P-256':
-        return 'ES256';
-      case 'secp256k1':
-        return 'ES256K';
-      case 'P-384':
-        return 'ES384';
-      case 'P-521':
-        return 'ES512';
-    }
-  }
-
-  if (jwk.kty === 'OKP') {
-    switch (jwk.crv) {
-      case 'Ed25519':
-      case 'Ed448':
-        return 'EdDSA';
-    }
-  }
-
-  throw new JwksError('Unsupported JWK');
-}
-
-async function retrieveSigningKeys(jwks) {
-  const results = [];
-
-  jwks = jwks
-    .filter(({ use }) => use === 'sig' || use === undefined)
-    .filter(({ kty }) => kty === 'RSA' || kty === 'EC' || kty === 'OKP');
-
-  for (const jwk of jwks) {
-    try {
-      const key = await jose.importJWK({ ...jwk, ext: true }, resolveAlg(jwk));
-      if (key.type !== 'public') {
-        continue;
-      }
-      let getSpki;
-      switch (key[Symbol.toStringTag]) {
-        case 'CryptoKey': {
-          const spki = await jose.exportSPKI(key);
-          getSpki = () => spki;
-          break;
-        }
-        case 'KeyObject':
-          // Assume legacy Node.js version without the Symbol.toStringTag backported
-          // Fall through
-        default:
-          getSpki = () => key.export({ format: 'pem', type: 'spki' });
-      }
-      results.push({
-        get publicKey() { return getSpki(); },
-        get rsaPublicKey() { return getSpki(); },
-        getPublicKey() { return getSpki(); },
-        ...(typeof jwk.kid === 'string' && jwk.kid ? { kid: jwk.kid } : undefined),
-        ...(typeof jwk.alg === 'string' && jwk.alg ? { alg: jwk.alg } : undefined)
-      });
-    } catch (err) {
-      continue;
-    }
-  }
-
-  return results;
-}
-
-module.exports = {
-  retrieveSigningKeys
-};

package/node_modules/@microsoft/teams.apps/node_modules/jwks-rsa/src/wrappers/cache.js

@@ -1,15 +0,0 @@
-const logger = require('debug')('jwks');
-const memoizer = require('lru-memoizer');
-const { promisify, callbackify } = require('util');
-
-function cacheWrapper(client, { cacheMaxEntries = 5, cacheMaxAge = 600000 }) {
-  logger(`Configured caching of signing keys. Max: ${cacheMaxEntries} / Age: ${cacheMaxAge}`);
-  return promisify(memoizer({
-    hash: (kid) => kid,
-    load: callbackify(client.getSigningKey.bind(client)),
-    maxAge: cacheMaxAge,
-    max: cacheMaxEntries
-  }));
-}
-
-module.exports.default = cacheWrapper;

package/node_modules/@microsoft/teams.apps/node_modules/jwks-rsa/src/wrappers/callbackSupport.js

@@ -1,16 +0,0 @@
-const { callbackify } = require('util');
-
-const callbackSupport = (client) => {
-  const getSigningKey = client.getSigningKey.bind(client);
-
-  return (kid, cb) => {
-    if (cb) {
-      const callbackFunc = callbackify(getSigningKey);
-      return callbackFunc(kid, cb);
-    }
-
-    return getSigningKey(kid);
-  };
-};
-
-module.exports.default = callbackSupport;

package/node_modules/@microsoft/teams.apps/node_modules/jwks-rsa/src/wrappers/index.js

@@ -1,7 +0,0 @@
-module.exports = {
-  request: require('./request').default,
-  cacheSigningKey: require('./cache').default,
-  rateLimitSigningKey: require('./rateLimit').default,
-  getKeysInterceptor: require('./interceptor').default,
-  callbackSupport: require('./callbackSupport').default
-};

package/node_modules/@microsoft/teams.apps/node_modules/jwks-rsa/src/wrappers/interceptor.js

@@ -1,30 +0,0 @@
-const retrieveSigningKeys = require('../utils').retrieveSigningKeys;
-
-/**
- * Uses getKeysInterceptor to allow users to retrieve keys from a file,
- * external cache, or provided object before falling back to the jwksUri endpoint
- */
-function getKeysInterceptor(client, { getKeysInterceptor }) {
-  const getSigningKey = client.getSigningKey.bind(client);
-
-  return async (kid) => {
-    const keys = await getKeysInterceptor();
-
-    let signingKeys;
-    if (keys && keys.length) {
-      signingKeys = await retrieveSigningKeys(keys);
-    }
-
-    if (signingKeys && signingKeys.length) {
-      const key = signingKeys.find(k => !kid || k.kid === kid);
-
-      if (key) {
-        return key;
-      }
-    }
-
-    return getSigningKey(kid);
-  };
-}
-
-module.exports.default = getKeysInterceptor;

package/node_modules/@microsoft/teams.apps/node_modules/jwks-rsa/src/wrappers/rateLimit.js

@@ -1,34 +0,0 @@
-const logger = require('debug')('jwks');
-const { RateLimiter } = require('limiter');
-
-const JwksRateLimitError = require('../errors/JwksRateLimitError');
-
-function rateLimitWrapper(client, { jwksRequestsPerMinute = 10 }) {
-  const getSigningKey = client.getSigningKey.bind(client);
-
-  const limiter = new RateLimiter(jwksRequestsPerMinute, 'minute', true);
-  logger(`Configured rate limiting to JWKS endpoint at ${jwksRequestsPerMinute}/minute`);
-
-  return async (kid) => await new Promise((resolve, reject) => {
-    limiter.removeTokens(1, async (err, remaining) => {
-      if (err) {
-        reject(err);
-      }
-
-      logger('Requests to the JWKS endpoint available for the next minute:', remaining);
-      if (remaining < 0) {
-        logger('Too many requests to the JWKS endpoint');
-        reject(new JwksRateLimitError('Too many requests to the JWKS endpoint'));
-      } else {
-        try {
-          const key = await getSigningKey(kid);
-          resolve(key);
-        } catch (error) {
-          reject(error);
-        }
-      }
-    });
-  });
-}
-
-module.exports.default = rateLimitWrapper;

package/node_modules/@microsoft/teams.apps/node_modules/jwks-rsa/src/wrappers/request.js

@@ -1,54 +0,0 @@
-const http = require('http');
-const https = require('https');
-const ArgumentError = require('../errors/ArgumentError');
-
-module.exports.default =  (options) => {
-  if (options.fetcher) {
-    return options.fetcher(options.uri);
-  }
-
-  return new Promise((resolve, reject) => {
-    let url;
-    try {
-      url = new URL(options.uri);
-    } catch (err) {
-      throw new ArgumentError('Invalid JWKS URI: The provided URI is not a valid URL.');
-    }
-    const { hostname, port, protocol, pathname, search } = url;
-    const path = pathname + search;
-
-    const requestOptions = {
-      hostname,
-      path,
-      port,
-      method: 'GET',
-      ...(options.headers && { headers: { ...options.headers } }),
-      ...(options.timeout && { timeout: options.timeout }),
-      ...(options.agent && { agent: options.agent })
-    };
-
-    const httpRequestLib = protocol === 'https:' ? https : http;
-    const httpRequest = httpRequestLib.request(requestOptions, (res) => {
-      let rawData = '';
-      res.setEncoding('utf8');
-      res.on('data', (chunk) => { rawData += chunk; });
-      res.on('end', () => {
-        if (res.statusCode < 200 || res.statusCode >= 300) {
-          const errorMsg = res.body && (res.body.message || res.body) || res.statusMessage || `Http Error ${res.statusCode}`;
-          reject({ errorMsg });
-        } else {
-          try {
-            resolve(rawData && JSON.parse(rawData));
-          } catch (error) {
-            reject(error);
-          }
-        }
-      });
-    });
-
-    httpRequest
-      .on('timeout', () => httpRequest.destroy())
-      .on('error', (e) => reject(e))
-      .end();
-  });
-};

package/node_modules/@microsoft/teams.apps/node_modules/lru-cache/README.md

@@ -1,166 +0,0 @@
-# lru cache
-
-A cache object that deletes the least-recently-used items.
-
-[![Build Status](https://travis-ci.org/isaacs/node-lru-cache.svg?branch=master)](https://travis-ci.org/isaacs/node-lru-cache) [![Coverage Status](https://coveralls.io/repos/isaacs/node-lru-cache/badge.svg?service=github)](https://coveralls.io/github/isaacs/node-lru-cache)
-
-## Installation:
-
-```javascript
-npm install lru-cache --save
-```
-
-## Usage:
-
-```javascript
-var LRU = require("lru-cache")
-  , options = { max: 500
-              , length: function (n, key) { return n * 2 + key.length }
-              , dispose: function (key, n) { n.close() }
-              , maxAge: 1000 * 60 * 60 }
-  , cache = new LRU(options)
-  , otherCache = new LRU(50) // sets just the max size
-
-cache.set("key", "value")
-cache.get("key") // "value"
-
-// non-string keys ARE fully supported
-// but note that it must be THE SAME object, not
-// just a JSON-equivalent object.
-var someObject = { a: 1 }
-cache.set(someObject, 'a value')
-// Object keys are not toString()-ed
-cache.set('[object Object]', 'a different value')
-assert.equal(cache.get(someObject), 'a value')
-// A similar object with same keys/values won't work,
-// because it's a different object identity
-assert.equal(cache.get({ a: 1 }), undefined)
-
-cache.reset()    // empty the cache
-```
-
-If you put more stuff in it, then items will fall out.
-
-If you try to put an oversized thing in it, then it'll fall out right
-away.
-
-## Options
-
-* `max` The maximum size of the cache, checked by applying the length
-  function to all values in the cache.  Not setting this is kind of
-  silly, since that's the whole purpose of this lib, but it defaults
-  to `Infinity`.  Setting it to a non-number or negative number will
-  throw a `TypeError`.  Setting it to 0 makes it be `Infinity`.
-* `maxAge` Maximum age in ms.  Items are not pro-actively pruned out
-  as they age, but if you try to get an item that is too old, it'll
-  drop it and return undefined instead of giving it to you.
-  Setting this to a negative value will make everything seem old!
-  Setting it to a non-number will throw a `TypeError`.
-* `length` Function that is used to calculate the length of stored
-  items.  If you're storing strings or buffers, then you probably want
-  to do something like `function(n, key){return n.length}`.  The default is
-  `function(){return 1}`, which is fine if you want to store `max`
-  like-sized things.  The item is passed as the first argument, and
-  the key is passed as the second argumnet.
-* `dispose` Function that is called on items when they are dropped
-  from the cache.  This can be handy if you want to close file
-  descriptors or do other cleanup tasks when items are no longer
-  accessible.  Called with `key, value`.  It's called *before*
-  actually removing the item from the internal cache, so if you want
-  to immediately put it back in, you'll have to do that in a
-  `nextTick` or `setTimeout` callback or it won't do anything.
-* `stale` By default, if you set a `maxAge`, it'll only actually pull
-  stale items out of the cache when you `get(key)`.  (That is, it's
-  not pre-emptively doing a `setTimeout` or anything.)  If you set
-  `stale:true`, it'll return the stale value before deleting it.  If
-  you don't set this, then it'll return `undefined` when you try to
-  get a stale entry, as if it had already been deleted.
-* `noDisposeOnSet` By default, if you set a `dispose()` method, then
-  it'll be called whenever a `set()` operation overwrites an existing
-  key.  If you set this option, `dispose()` will only be called when a
-  key falls out of the cache, not when it is overwritten.
-* `updateAgeOnGet` When using time-expiring entries with `maxAge`,
-  setting this to `true` will make each item's effective time update
-  to the current time whenever it is retrieved from cache, causing it
-  to not expire.  (It can still fall out of cache based on recency of
-  use, of course.)
-
-## API
-
-* `set(key, value, maxAge)`
-* `get(key) => value`
-
-    Both of these will update the "recently used"-ness of the key.
-    They do what you think. `maxAge` is optional and overrides the
-    cache `maxAge` option if provided.
-
-    If the key is not found, `get()` will return `undefined`.
-
-    The key and val can be any value.
-
-* `peek(key)`
-
-    Returns the key value (or `undefined` if not found) without
-    updating the "recently used"-ness of the key.
-
-    (If you find yourself using this a lot, you *might* be using the
-    wrong sort of data structure, but there are some use cases where
-    it's handy.)
-
-* `del(key)`
-
-    Deletes a key out of the cache.
-
-* `reset()`
-
-    Clear the cache entirely, throwing away all values.
-
-* `has(key)`
-
-    Check if a key is in the cache, without updating the recent-ness
-    or deleting it for being stale.
-
-* `forEach(function(value,key,cache), [thisp])`
-
-    Just like `Array.prototype.forEach`.  Iterates over all the keys
-    in the cache, in order of recent-ness.  (Ie, more recently used
-    items are iterated over first.)
-
-* `rforEach(function(value,key,cache), [thisp])`
-
-    The same as `cache.forEach(...)` but items are iterated over in
-    reverse order.  (ie, less recently used items are iterated over
-    first.)
-
-* `keys()`
-
-    Return an array of the keys in the cache.
-
-* `values()`
-
-    Return an array of the values in the cache.
-
-* `length`
-
-    Return total length of objects in cache taking into account
-    `length` options function.
-
-* `itemCount`
-
-    Return total quantity of objects currently in cache. Note, that
-    `stale` (see options) items are returned as part of this item
-    count.
-
-* `dump()`
-
-    Return an array of the cache entries ready for serialization and usage
-    with 'destinationCache.load(arr)`.
-
-* `load(cacheEntriesArray)`
-
-    Loads another cache entries array, obtained with `sourceCache.dump()`,
-    into the cache. The destination cache is reset before loading new entries
-
-* `prune()`
-
-    Manually iterates over the entire cache proactively pruning old entries