@openclaw/msteams 2026.5.28-beta.2 → 2026.5.28-beta.4

package/dist/api.js

@@ -1,3 +1,3 @@
-import { i as msteamsSetupAdapter, n as openDelegatedOAuthUrl, r as createMSTeamsSetupWizardBase, t as msteamsSetupWizard } from "./setup-surface-C-uCiIKh.js";
-import { t as msteamsPlugin } from "./channel-C_AMaSpi.js";
+import { i as msteamsSetupAdapter, n as openDelegatedOAuthUrl, r as createMSTeamsSetupWizardBase, t as msteamsSetupWizard } from "./setup-surface-C9IApOv3.js";
+import { t as msteamsPlugin } from "./channel-2_L55KDI.js";
 export { createMSTeamsSetupWizardBase, msteamsPlugin, msteamsSetupAdapter, msteamsSetupWizard, openDelegatedOAuthUrl };

package/dist/{channel-C_AMaSpi.js → channel-2_L55KDI.js}

@@ -1,6 +1,6 @@
 import { O as resolveNestedAllowlistDecision, S as normalizeChannelSlug, T as resolveChannelEntryMatchWithFallback, _ as isDangerousNameMatchingEnabled, i as buildChannelKeyCandidates, k as resolveToolsBySender, o as buildProbeChannelStatusSummary, r as PAIRING_APPROVED_MESSAGE, s as chunkTextForOutbound, t as DEFAULT_ACCOUNT_ID, u as createDefaultChannelRuntimeState, w as resolveAllowlistMatchSimple } from "./runtime-api-BlvMnDKz.js";
-import { y as resolveMSTeamsCredentials } from "./errors-B4snzfP5.js";
-import { a as looksLikeMSTeamsTargetId, c as parseMSTeamsConversationId, d as resolveMSTeamsUserAllowlist, i as msteamsSetupAdapter, l as parseMSTeamsTeamChannelInput, o as normalizeMSTeamsMessagingTarget, s as normalizeMSTeamsUserInput, t as msteamsSetupWizard, u as resolveMSTeamsChannelAllowlist } from "./setup-surface-C-uCiIKh.js";
+import { y as resolveMSTeamsCredentials } from "./errors-DZGI_mqq.js";
+import { a as looksLikeMSTeamsTargetId, c as parseMSTeamsConversationId, d as resolveMSTeamsUserAllowlist, i as msteamsSetupAdapter, l as parseMSTeamsTeamChannelInput, o as normalizeMSTeamsMessagingTarget, s as normalizeMSTeamsUserInput, t as msteamsSetupWizard, u as resolveMSTeamsChannelAllowlist } from "./setup-surface-C9IApOv3.js";
 import { t as MSTeamsChannelConfigSchema } from "./config-schema-BL4qQZiA.js";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";
@@ -330,7 +330,7 @@ const collectMSTeamsSecurityWarnings = createAllowlistProviderGroupPolicyWarning
 	resolveGroupPolicy: ({ cfg }) => cfg.channels?.msteams?.groupPolicy,
 	collect: ({ groupPolicy }) => groupPolicy === "open" ? ["- MS Teams groups: groupPolicy=\"open\" allows any member to trigger (mention-gated). Set channels.msteams.groupPolicy=\"allowlist\" + channels.msteams.groupAllowFrom to restrict senders."] : []
 });
-const loadMSTeamsChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-BJJ1R1iY.js"), "msTeamsChannelRuntime");
+const loadMSTeamsChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-CxxY1xk6.js"), "msTeamsChannelRuntime");
 const resolveMSTeamsChannelConfig = (cfg) => ({
 	allowFrom: cfg.channels?.msteams?.allowFrom,
 	defaultTo: cfg.channels?.msteams?.defaultTo
@@ -1116,7 +1116,7 @@ const msteamsPlugin = createChatChannelPlugin({
 			})
 		}),
 		gateway: { startAccount: async (ctx) => {
-			const { monitorMSTeamsProvider } = await import("./src-Cc3f8Zi2.js");
+			const { monitorMSTeamsProvider } = await import("./src-D_rcW2Zm.js");
 			const port = ctx.cfg.channels?.msteams?.webhook?.port ?? 3978;
 			ctx.setStatus({
 				accountId: ctx.accountId,

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as msteamsPlugin } from "./channel-C_AMaSpi.js";
+import { t as msteamsPlugin } from "./channel-2_L55KDI.js";
 export { msteamsPlugin };

package/dist/{channel.runtime-BJJ1R1iY.js → channel.runtime-CxxY1xk6.js}

@@ -1,7 +1,7 @@
 import { C as normalizeStringEntries$1, s as chunkTextForOutbound } from "./runtime-api-BlvMnDKz.js";
-import { a as searchGraphUsers, c as fetchGraphAbsoluteUrl, d as listTeamsByName, f as normalizeQuery, g as resolveGraphToken, h as postGraphJson, l as fetchGraphJson, m as postGraphBetaJson, o as deleteGraphRequest, p as patchGraphJson, s as escapeOData, u as listChannelsForTeam } from "./errors-B4snzfP5.js";
-import { n as MSTEAMS_PRESENTATION_CAPABILITIES, r as buildMSTeamsPresentationCard } from "./channel-C_AMaSpi.js";
-import { S as createMSTeamsConversationStoreFs, a as sendMessageMSTeams, b as createMSTeamsPollStoreFs, i as sendAdaptiveCardMSTeams, n as deleteMessageMSTeams, o as sendPollMSTeams, r as editMessageMSTeams, t as probeMSTeams } from "./probe-DRwI-ZqW.js";
+import { a as searchGraphUsers, c as fetchGraphAbsoluteUrl, d as listTeamsByName, f as normalizeQuery, g as resolveGraphToken, h as postGraphJson, l as fetchGraphJson, m as postGraphBetaJson, o as deleteGraphRequest, p as patchGraphJson, s as escapeOData, u as listChannelsForTeam } from "./errors-DZGI_mqq.js";
+import { n as MSTEAMS_PRESENTATION_CAPABILITIES, r as buildMSTeamsPresentationCard } from "./channel-2_L55KDI.js";
+import { S as createMSTeamsConversationStoreFs, a as sendMessageMSTeams, b as createMSTeamsPollStoreFs, i as sendAdaptiveCardMSTeams, n as deleteMessageMSTeams, o as sendPollMSTeams, r as editMessageMSTeams, t as probeMSTeams } from "./probe-BoUA5GpA.js";
 import { resolveOutboundSendDep } from "openclaw/plugin-sdk/channel-outbound";
 import { normalizeLowercaseStringOrEmpty, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolvePayloadMediaUrls, resolveTextChunksWithFallback, sendPayloadMediaSequence } from "openclaw/plugin-sdk/reply-payload";

package/dist/{errors-B4snzfP5.js → errors-DZGI_mqq.js}

@@ -1,5 +1,5 @@
 import { M as getMSTeamsRuntime, h as fetchWithSsrFGuard$1 } from "./runtime-api-BlvMnDKz.js";
-import { c as createMSTeamsHttpError, n as refreshMSTeamsDelegatedTokens } from "./oauth.token-5ygi8ycy.js";
+import { c as createMSTeamsHttpError, n as refreshMSTeamsDelegatedTokens } from "./oauth.token-BKzEFepQ.js";
 import { createRequire } from "node:module";
 import { isRecord, isRecord as isRecord$1, normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
@@ -11,6 +11,7 @@ import * as fs from "node:fs";
 import { readFileSync } from "node:fs";
 import path, { basename, dirname } from "node:path";
 import { privateFileStoreSync } from "openclaw/plugin-sdk/security-runtime";
+import { asFiniteNumberInRange, parseStrictFiniteNumber } from "openclaw/plugin-sdk/number-runtime";
 import { hasConfiguredSecretInput, normalizeResolvedSecretInputString, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
 //#region extensions/msteams/src/attachments/shared.ts
 const IMAGE_EXT_RE = /\.(avif|bmp|gif|heic|heif|jpe?g|png|tiff?|webp)$/i;
@@ -1032,6 +1033,7 @@ async function searchGraphUsers(params) {
 }
 //#endregion
 //#region extensions/msteams/src/errors.ts
+const MAX_SAFE_RETRY_AFTER_SECONDS = Number.MAX_SAFE_INTEGER / 1e3;
 function formatUnknownError(err) {
 	if (err instanceof Error) return err.message;
 	if (typeof err === "string") return err;
@@ -1082,13 +1084,20 @@ function extractErrorCode(err) {
 }
 function extractRetryAfterMs(err) {
 	if (!isRecord(err)) return null;
-	const direct = err.retryAfterMs ?? err.retry_after_ms;
-	if (typeof direct === "number" && Number.isFinite(direct) && direct >= 0) return direct;
+	const directMs = asFiniteNumberInRange(err.retryAfterMs ?? err.retry_after_ms, {
+		min: 0,
+		max: Number.MAX_SAFE_INTEGER
+	});
+	if (directMs !== void 0) return directMs;
 	const retryAfter = err.retryAfter ?? err.retry_after;
-	if (typeof retryAfter === "number" && Number.isFinite(retryAfter)) return retryAfter >= 0 ? retryAfter * 1e3 : null;
+	const retryAfterSeconds = asFiniteNumberInRange(retryAfter, {
+		min: 0,
+		max: MAX_SAFE_RETRY_AFTER_SECONDS
+	});
+	if (retryAfterSeconds !== void 0) return retryAfterSeconds * 1e3;
 	if (typeof retryAfter === "string") {
 		const parsed = parseNonNegativeRetryAfterSeconds(retryAfter);
-		if (Number.isFinite(parsed) && parsed >= 0) return parsed * 1e3;
+		if (parsed !== void 0) return parsed * 1e3;
 	}
 	const response = err.response;
 	if (!isRecord(response)) return null;
@@ -1098,22 +1107,25 @@ function extractRetryAfterMs(err) {
 		const raw = headers["retry-after"] ?? headers["Retry-After"];
 		if (typeof raw === "string") {
 			const parsed = parseNonNegativeRetryAfterSeconds(raw);
-			if (Number.isFinite(parsed) && parsed >= 0) return parsed * 1e3;
+			if (parsed !== void 0) return parsed * 1e3;
 		}
 	}
 	if (typeof headers === "object" && headers !== null && "get" in headers && typeof headers.get === "function") {
 		const raw = headers.get("retry-after");
 		if (raw) {
 			const parsed = parseNonNegativeRetryAfterSeconds(raw);
-			if (Number.isFinite(parsed) && parsed >= 0) return parsed * 1e3;
+			if (parsed !== void 0) return parsed * 1e3;
 		}
 	}
 	return null;
 }
 function parseNonNegativeRetryAfterSeconds(raw) {
 	const trimmed = raw.trim();
-	if (!/^\d+(?:\.\d+)?$/.test(trimmed)) return NaN;
-	return Number(trimmed);
+	if (!/^\d+(?:\.\d+)?$/.test(trimmed)) return;
+	return asFiniteNumberInRange(parseStrictFiniteNumber(trimmed), {
+		min: 0,
+		max: MAX_SAFE_RETRY_AFTER_SECONDS
+	});
 }
 /**
 * Classify outbound send errors for safe retries and actionable logs.

package/dist/{oauth-BrKjrCNK.js → oauth-ei63gdyS.js}

@@ -1,4 +1,4 @@
-import { a as MSTEAMS_OAUTH_CALLBACK_PORT, i as MSTEAMS_OAUTH_CALLBACK_PATH, o as MSTEAMS_OAUTH_REDIRECT_URI, r as MSTEAMS_DEFAULT_DELEGATED_SCOPES, s as buildMSTeamsAuthEndpoint, t as exchangeMSTeamsCodeForTokens } from "./oauth.token-5ygi8ycy.js";
+import { a as MSTEAMS_OAUTH_CALLBACK_PORT, i as MSTEAMS_OAUTH_CALLBACK_PATH, o as MSTEAMS_OAUTH_REDIRECT_URI, r as MSTEAMS_DEFAULT_DELEGATED_SCOPES, s as buildMSTeamsAuthEndpoint, t as exchangeMSTeamsCodeForTokens } from "./oauth.token-BKzEFepQ.js";
 import { generateHexPkceVerifierChallenge } from "openclaw/plugin-sdk/provider-auth";
 import { generateOAuthState, parseOAuthCallbackInput, waitForLocalOAuthCallback } from "openclaw/plugin-sdk/provider-auth-runtime";
 import { isWSL2Sync } from "openclaw/plugin-sdk/runtime-env";

package/dist/{oauth.token-5ygi8ycy.js → oauth.token-BKzEFepQ.js}

@@ -1,5 +1,6 @@
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
 import { createProviderHttpError, readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";
+import { resolveExpiresAtMsFromDurationSeconds } from "openclaw/plugin-sdk/number-runtime";
 //#region extensions/msteams/src/http-error.ts
 async function createMSTeamsHttpError(response, label, options) {
 	return await createProviderHttpError(response, label, options);
@@ -36,6 +37,19 @@ function createMSTeamsTokenBody(params) {
 	for (const [key, value] of Object.entries(params.values ?? {})) body.set(key, value);
 	return body;
 }
+function resolveMSTeamsTokenExpiresAt(value) {
+	return resolveExpiresAtMsFromDurationSeconds(value, { bufferMs: EXPIRY_BUFFER_MS });
+}
+function parseMSTeamsTokenResponse(data, failureLabel) {
+	const expiresAt = resolveMSTeamsTokenExpiresAt(data.expires_in);
+	if (typeof data.access_token !== "string" || !data.access_token || expiresAt === void 0 || data.refresh_token !== void 0 && typeof data.refresh_token !== "string" || data.scope !== void 0 && typeof data.scope !== "string") throw new Error(`MSTeams ${failureLabel} failed: invalid token response fields`);
+	return {
+		access_token: data.access_token,
+		refresh_token: data.refresh_token,
+		expiresAt,
+		scope: data.scope
+	};
+}
 async function fetchMSTeamsTokens(params) {
 	const currentFetch = globalThis.fetch;
 	const { response, release } = await fetchWithSsrFGuard({
@@ -54,7 +68,7 @@ async function fetchMSTeamsTokens(params) {
 	});
 	try {
 		if (!response.ok) throw await createMSTeamsHttpError(response, `MSTeams ${params.failureLabel} failed`);
-		return await readProviderJsonResponse(response, `MSTeams ${params.failureLabel} failed`);
+		return parseMSTeamsTokenResponse(await readProviderJsonResponse(response, `MSTeams ${params.failureLabel} failed`), params.failureLabel);
 	} finally {
 		await release();
 	}
@@ -77,7 +91,7 @@ async function requestMSTeamsDelegatedTokens(params) {
 	return {
 		accessToken: data.access_token,
 		refreshToken: params.resolveRefreshToken(data),
-		expiresAt: Date.now() + data.expires_in * 1e3 - EXPIRY_BUFFER_MS,
+		expiresAt: data.expiresAt,
 		scopes: data.scope ? data.scope.split(" ") : [...scopes]
 	};
 }

package/dist/{probe-DRwI-ZqW.js → probe-BoUA5GpA.js}

@@ -1,7 +1,7 @@
 import { C as normalizeStringEntries$1, E as resolveChannelMediaMaxBytes, M as getMSTeamsRuntime, d as detectMime, g as getFileExtension, m as extractOriginalFilename, p as extensionForMime, y as loadOutboundMediaFromUrl } from "./runtime-api-BlvMnDKz.js";
-import { A as isAllowedBotFrameworkServiceUrl, C as readAccessToken, D as buildUserAgent, E as loadMSTeamsSdkWithAuth, N as resolveMSTeamsSdkCloudOptions, P as validateMSTeamsProactiveServiceUrlBoundary, T as createMSTeamsTokenProvider, i as isRevokedProxyError, j as normalizeBotFrameworkServiceUrl, k as describeBotFrameworkServiceUrlHost, n as formatMSTeamsSendErrorHint, r as formatUnknownError, t as classifyMSTeamsSendError, v as loadDelegatedTokens, x as resolveMSTeamsStorePath, y as resolveMSTeamsCredentials } from "./errors-B4snzfP5.js";
-import { c as createMSTeamsHttpError } from "./oauth.token-5ygi8ycy.js";
-import { a as resolveMSTeamsReplyPolicy, o as resolveMSTeamsRouteConfig } from "./channel-C_AMaSpi.js";
+import { A as isAllowedBotFrameworkServiceUrl, C as readAccessToken, D as buildUserAgent, E as loadMSTeamsSdkWithAuth, N as resolveMSTeamsSdkCloudOptions, P as validateMSTeamsProactiveServiceUrlBoundary, T as createMSTeamsTokenProvider, i as isRevokedProxyError, j as normalizeBotFrameworkServiceUrl, k as describeBotFrameworkServiceUrlHost, n as formatMSTeamsSendErrorHint, r as formatUnknownError, t as classifyMSTeamsSendError, v as loadDelegatedTokens, x as resolveMSTeamsStorePath, y as resolveMSTeamsCredentials } from "./errors-DZGI_mqq.js";
+import { c as createMSTeamsHttpError } from "./oauth.token-BKzEFepQ.js";
+import { a as resolveMSTeamsReplyPolicy, o as resolveMSTeamsRouteConfig } from "./channel-2_L55KDI.js";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, normalizeStringEntries, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { withFileLock } from "openclaw/plugin-sdk/file-lock";
@@ -11,6 +11,7 @@ import { lookup } from "node:dns/promises";
 import { isPrivateIpAddress } from "openclaw/plugin-sdk/ssrf-policy";
 import path from "node:path";
 import { pathExists } from "openclaw/plugin-sdk/security-runtime";
+import { parseStrictNonNegativeInteger } from "openclaw/plugin-sdk/number-runtime";
 import { readJsonFileWithFallback, writeJsonFileAtomically } from "openclaw/plugin-sdk/json-store";
 import crypto from "node:crypto";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
@@ -324,10 +325,7 @@ function pruneToLimit$1(polls) {
 }
 function normalizeMSTeamsPollSelections(poll, selections) {
 	const maxSelections = Math.max(1, poll.maxSelections);
-	const mapped = selections.map((entry) => {
-		const trimmed = entry.trim();
-		return /^\d+$/.test(trimmed) ? Number(trimmed) : NaN;
-	}).filter((value) => Number.isSafeInteger(value)).filter((value) => value >= 0 && value < poll.options.length).map((value) => String(value));
+	const mapped = selections.map((entry) => parseStrictNonNegativeInteger(entry)).filter((value) => value !== void 0).filter((value) => value >= 0 && value < poll.options.length).map((value) => String(value));
 	return uniqueStrings(maxSelections > 1 ? mapped.slice(0, maxSelections) : mapped.slice(0, 1));
 }
 function createMSTeamsPollStoreFs(params) {

package/dist/setup-plugin-api.js

@@ -1,5 +1,5 @@
-import { y as resolveMSTeamsCredentials } from "./errors-B4snzfP5.js";
-import { i as msteamsSetupAdapter, t as msteamsSetupWizard } from "./setup-surface-C-uCiIKh.js";
+import { y as resolveMSTeamsCredentials } from "./errors-DZGI_mqq.js";
+import { i as msteamsSetupAdapter, t as msteamsSetupWizard } from "./setup-surface-C9IApOv3.js";
 import { t as MSTeamsChannelConfigSchema } from "./config-schema-BL4qQZiA.js";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";

package/dist/{setup-surface-C-uCiIKh.js → setup-surface-C9IApOv3.js}

@@ -1,4 +1,4 @@
-import { S as normalizeSecretInputString, _ as hasConfiguredMSTeamsCredentials, a as searchGraphUsers, b as saveDelegatedTokens, d as listTeamsByName, f as normalizeQuery, g as resolveGraphToken, r as formatUnknownError, u as listChannelsForTeam, y as resolveMSTeamsCredentials } from "./errors-B4snzfP5.js";
+import { S as normalizeSecretInputString, _ as hasConfiguredMSTeamsCredentials, a as searchGraphUsers, b as saveDelegatedTokens, d as listTeamsByName, f as normalizeQuery, g as resolveGraphToken, r as formatUnknownError, u as listChannelsForTeam, y as resolveMSTeamsCredentials } from "./errors-DZGI_mqq.js";
 import { mapAllowlistResolutionInputs } from "openclaw/plugin-sdk/allow-from";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { DEFAULT_ACCOUNT_ID, createSetupTranslator, createStandardChannelSetupStatus, createTopLevelChannelAllowFromSetter, createTopLevelChannelDmPolicy, createTopLevelChannelGroupPolicySetter, mergeAllowFromEntries, splitSetupEntries } from "openclaw/plugin-sdk/setup";
@@ -489,7 +489,7 @@ const msteamsSetupWizard = {
 					}
 				};
 				try {
-					const { loginMSTeamsDelegated } = await import("./oauth-BrKjrCNK.js");
+					const { loginMSTeamsDelegated } = await import("./oauth-ei63gdyS.js");
 					const progress = params.prompter.progress(t("wizard.msteams.delegatedOAuthProgress"));
 					saveDelegatedTokens(await loginMSTeamsDelegated({
 						isRemote: true,

package/dist/{src-Cc3f8Zi2.js → src-D_rcW2Zm.js}

@@ -1,12 +1,12 @@
 import { A as summarizeMapping, D as resolveDefaultGroupPolicy, E as resolveChannelMediaMaxBytes, M as getMSTeamsRuntime, N as getOptionalMSTeamsRuntime, _ as isDangerousNameMatchingEnabled, a as buildMediaPayload, b as logTypingFailure, c as createChannelMessageReplyPipeline, f as dispatchReplyFromConfigWithSettledDispatcher$1, l as createChannelPairingController, n as DEFAULT_WEBHOOK_MAX_BODY_BYTES, t as DEFAULT_ACCOUNT_ID, v as keepHttpServerTaskAlive, x as mergeAllowlist } from "./runtime-api-BlvMnDKz.js";
-import { $ as safeFetchWithPolicy, B as estimateBase64DecodedBytes, E as loadMSTeamsSdkWithAuth, F as ATTACHMENT_TAG_RE, G as isLikelyImageAttachment, H as extractInlineImageCandidates, I as GRAPH_ROOT, J as normalizeContentType, K as isRecord$1, L as IMG_SRC_RE, M as tryNormalizeBotFrameworkServiceUrl, N as resolveMSTeamsSdkCloudOptions, O as ensureUserAgentHeader, Q as resolveRequestUrl, R as applyAuthorizationHeaderForUrl, T as createMSTeamsTokenProvider, U as inferPlaceholder, V as extractHtmlFromAttachment, W as isDownloadableAttachment, X as resolveAttachmentFetchPolicy, Y as readNestedString, Z as resolveMediaSsrfPolicy, et as safeHostForUrl, l as fetchGraphJson, n as formatMSTeamsSendErrorHint, q as isUrlAllowed, r as formatUnknownError, t as classifyMSTeamsSendError, tt as tryBuildGraphSharesUrlForSharedLink, w as createMSTeamsExpressAdapter, x as resolveMSTeamsStorePath, y as resolveMSTeamsCredentials, z as encodeGraphShareId } from "./errors-B4snzfP5.js";
-import { d as resolveMSTeamsUserAllowlist, u as resolveMSTeamsChannelAllowlist } from "./setup-surface-C-uCiIKh.js";
-import { a as resolveMSTeamsReplyPolicy, i as resolveMSTeamsAllowlistMatch, o as resolveMSTeamsRouteConfig } from "./channel-C_AMaSpi.js";
-import { C as readJsonFile, S as createMSTeamsConversationStoreFs, T as writeJsonFile, _ as buildFileInfoCard, b as createMSTeamsPollStoreFs, c as renderReplyPayloadsToMessages, d as withRevokedProxyFallback, f as resolveGraphChatId, g as removePendingUploadFs, h as getPendingUploadFs, l as sendMSTeamsMessages, m as removePendingUpload, p as getPendingUpload, s as buildConversationReference, u as sendMSTeamsActivityWithReference, v as parseFileConsentInvoke, w as withFileLock, x as extractMSTeamsPollVote, y as uploadToConsentUrl } from "./probe-DRwI-ZqW.js";
+import { $ as safeFetchWithPolicy, B as estimateBase64DecodedBytes, E as loadMSTeamsSdkWithAuth, F as ATTACHMENT_TAG_RE, G as isLikelyImageAttachment, H as extractInlineImageCandidates, I as GRAPH_ROOT, J as normalizeContentType, K as isRecord$1, L as IMG_SRC_RE, M as tryNormalizeBotFrameworkServiceUrl, N as resolveMSTeamsSdkCloudOptions, O as ensureUserAgentHeader, Q as resolveRequestUrl, R as applyAuthorizationHeaderForUrl, T as createMSTeamsTokenProvider, U as inferPlaceholder, V as extractHtmlFromAttachment, W as isDownloadableAttachment, X as resolveAttachmentFetchPolicy, Y as readNestedString, Z as resolveMediaSsrfPolicy, et as safeHostForUrl, l as fetchGraphJson, n as formatMSTeamsSendErrorHint, q as isUrlAllowed, r as formatUnknownError, t as classifyMSTeamsSendError, tt as tryBuildGraphSharesUrlForSharedLink, w as createMSTeamsExpressAdapter, x as resolveMSTeamsStorePath, y as resolveMSTeamsCredentials, z as encodeGraphShareId } from "./errors-DZGI_mqq.js";
+import { d as resolveMSTeamsUserAllowlist, u as resolveMSTeamsChannelAllowlist } from "./setup-surface-C9IApOv3.js";
+import { a as resolveMSTeamsReplyPolicy, i as resolveMSTeamsAllowlistMatch, o as resolveMSTeamsRouteConfig } from "./channel-2_L55KDI.js";
+import { C as readJsonFile, S as createMSTeamsConversationStoreFs, T as writeJsonFile, _ as buildFileInfoCard, b as createMSTeamsPollStoreFs, c as renderReplyPayloadsToMessages, d as withRevokedProxyFallback, f as resolveGraphChatId, g as removePendingUploadFs, h as getPendingUploadFs, l as sendMSTeamsMessages, m as removePendingUpload, p as getPendingUpload, s as buildConversationReference, u as sendMSTeamsActivityWithReference, v as parseFileConsentInvoke, w as withFileLock, x as extractMSTeamsPollVote, y as uploadToConsentUrl } from "./probe-BoUA5GpA.js";
 import { formatAllowlistMatchMeta } from "openclaw/plugin-sdk/allow-from";
 import { buildChannelProgressDraftLine, buildChannelProgressDraftLineForEntry, createChannelProgressDraftGate, formatChannelProgressDraftText, isChannelProgressDraftWorkToolName, mergeChannelProgressDraftLine, normalizeChannelProgressDraftLineIdentity, resolveChannelPreviewStreamMode, resolveChannelProgressDraftMaxLines, resolveChannelStreamingBlockEnabled, resolveChannelStreamingPreviewToolProgress, resolveChannelStreamingSuppressDefaultToolProgressMessages } from "openclaw/plugin-sdk/channel-outbound";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { saveResponseMedia } from "openclaw/plugin-sdk/media-runtime";
+import { parseMediaContentLength, saveResponseMedia } from "openclaw/plugin-sdk/media-runtime";
 import { buildChannelInboundEventContext, dispatchReplyFromConfigWithSettledDispatcher, hasFinalInboundReplyDispatch, logInboundDrop, resolveInboundMentionDecision, resolveInboundReplyDispatchCounts, resolveInboundSessionEnvelopeContext } from "openclaw/plugin-sdk/channel-inbound";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
 import path from "node:path";
@@ -548,8 +548,15 @@ async function saveBotFrameworkAttachmentView(params) {
 		params.logger?.warn?.("msteams botFramework attachmentView non-ok", { status: response.status });
 		return;
 	}
-	const contentLength = response.headers.get("content-length");
-	if (contentLength && Number(contentLength) > params.maxBytes) {
+	let contentLength;
+	try {
+		contentLength = parseMediaContentLength(response.headers.get("content-length"));
+	} catch (err) {
+		await response.body?.cancel();
+		params.logger?.warn?.("msteams botFramework attachmentView invalid content-length", { error: err instanceof Error ? err.message : String(err) });
+		return;
+	}
+	if (contentLength !== null && contentLength > params.maxBytes) {
 		await response.body?.cancel();
 		return;
 	}

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/msteams",
-  "version": "2026.5.28-beta.2",
+  "version": "2026.5.28-beta.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/msteams",
-      "version": "2026.5.28-beta.2",
+      "version": "2026.5.28-beta.4",
       "dependencies": {
         "@azure/identity": "4.13.1",
         "@microsoft/teams.api": "2.0.12",
@@ -15,7 +15,7 @@
         "typebox": "1.1.38"
       },
       "peerDependencies": {
-        "openclaw": ">=2026.5.28-beta.2"
+        "openclaw": ">=2026.5.28-beta.4"
       },
       "peerDependenciesMeta": {
         "openclaw": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/msteams",
-  "version": "2026.5.28-beta.2",
+  "version": "2026.5.28-beta.4",
   "description": "OpenClaw Microsoft Teams channel plugin for bot conversations.",
   "repository": {
     "type": "git",
@@ -15,7 +15,7 @@
     "typebox": "1.1.38"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.28-beta.2"
+    "openclaw": ">=2026.5.28-beta.4"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -51,10 +51,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.28-beta.2"
+      "pluginApi": ">=2026.5.28-beta.4"
     },
     "build": {
-      "openclawVersion": "2026.5.28-beta.2"
+      "openclawVersion": "2026.5.28-beta.4"
     },
     "release": {
       "publishToClawHub": true,