@openclaw/msteams 2026.5.30-beta.1 → 2026.5.31-beta.1

package/dist/api.js

@@ -1,3 +1,3 @@
-import { i as msteamsSetupAdapter, n as openDelegatedOAuthUrl, r as createMSTeamsSetupWizardBase, t as msteamsSetupWizard } from "./setup-surface-BLAlJzog.js";
-import { t as msteamsPlugin } from "./channel-I5mMZ1Ju.js";
+import { i as msteamsSetupAdapter, n as openDelegatedOAuthUrl, r as createMSTeamsSetupWizardBase, t as msteamsSetupWizard } from "./setup-surface-B7a1pD-K.js";
+import { t as msteamsPlugin } from "./channel-CqRTzeBc.js";
 export { createMSTeamsSetupWizardBase, msteamsPlugin, msteamsSetupAdapter, msteamsSetupWizard, openDelegatedOAuthUrl };

package/dist/{channel-I5mMZ1Ju.js → channel-CqRTzeBc.js}

@@ -1,6 +1,6 @@
 import { O as resolveNestedAllowlistDecision, S as normalizeChannelSlug, T as resolveChannelEntryMatchWithFallback, _ as isDangerousNameMatchingEnabled, i as buildChannelKeyCandidates, k as resolveToolsBySender, o as buildProbeChannelStatusSummary, r as PAIRING_APPROVED_MESSAGE, s as chunkTextForOutbound, t as DEFAULT_ACCOUNT_ID, u as createDefaultChannelRuntimeState, w as resolveAllowlistMatchSimple } from "./runtime-api-BlvMnDKz.js";
-import { y as resolveMSTeamsCredentials } from "./errors-HUt6we-U.js";
-import { a as looksLikeMSTeamsTargetId, c as parseMSTeamsConversationId, d as resolveMSTeamsUserAllowlist, i as msteamsSetupAdapter, l as parseMSTeamsTeamChannelInput, o as normalizeMSTeamsMessagingTarget, s as normalizeMSTeamsUserInput, t as msteamsSetupWizard, u as resolveMSTeamsChannelAllowlist } from "./setup-surface-BLAlJzog.js";
+import { y as resolveMSTeamsCredentials } from "./errors-Dpn8B05h.js";
+import { a as looksLikeMSTeamsTargetId, c as parseMSTeamsConversationId, d as resolveMSTeamsUserAllowlist, i as msteamsSetupAdapter, l as parseMSTeamsTeamChannelInput, o as normalizeMSTeamsMessagingTarget, s as normalizeMSTeamsUserInput, t as msteamsSetupWizard, u as resolveMSTeamsChannelAllowlist } from "./setup-surface-B7a1pD-K.js";
 import { t as MSTeamsChannelConfigSchema } from "./config-schema-BL4qQZiA.js";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";
@@ -283,7 +283,7 @@ function buildMSTeamsPresentationCard(params) {
 //#endregion
 //#region extensions/msteams/src/session-route.ts
 function resolveMSTeamsOutboundSessionRoute(params) {
-	let trimmed = stripChannelTargetPrefix(params.target, "msteams", "teams");
+	const trimmed = stripChannelTargetPrefix(params.target, "msteams", "teams");
 	if (!trimmed) return null;
 	const isUser = normalizeLowercaseStringOrEmpty(trimmed).startsWith("user:");
 	const rawId = stripTargetKindPrefix(trimmed);
@@ -330,7 +330,7 @@ const collectMSTeamsSecurityWarnings = createAllowlistProviderGroupPolicyWarning
 	resolveGroupPolicy: ({ cfg }) => cfg.channels?.msteams?.groupPolicy,
 	collect: ({ groupPolicy }) => groupPolicy === "open" ? ["- MS Teams groups: groupPolicy=\"open\" allows any member to trigger (mention-gated). Set channels.msteams.groupPolicy=\"allowlist\" + channels.msteams.groupAllowFrom to restrict senders."] : []
 });
-const loadMSTeamsChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-Cg8XWuDW.js"), "msTeamsChannelRuntime");
+const loadMSTeamsChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-C38epVZr.js"), "msTeamsChannelRuntime");
 const resolveMSTeamsChannelConfig = (cfg) => ({
 	allowFrom: cfg.channels?.msteams?.allowFrom,
 	defaultTo: cfg.channels?.msteams?.defaultTo
@@ -1116,7 +1116,7 @@ const msteamsPlugin = createChatChannelPlugin({
 			})
 		}),
 		gateway: { startAccount: async (ctx) => {
-			const { monitorMSTeamsProvider } = await import("./src-hH0j_Pt1.js");
+			const { monitorMSTeamsProvider } = await import("./src-B6CFMcvV.js");
 			const port = ctx.cfg.channels?.msteams?.webhook?.port ?? 3978;
 			ctx.setStatus({
 				accountId: ctx.accountId,

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as msteamsPlugin } from "./channel-I5mMZ1Ju.js";
+import { t as msteamsPlugin } from "./channel-CqRTzeBc.js";
 export { msteamsPlugin };

package/dist/{channel.runtime-Cg8XWuDW.js → channel.runtime-C38epVZr.js}

@@ -1,7 +1,7 @@
 import { C as normalizeStringEntries$1, s as chunkTextForOutbound } from "./runtime-api-BlvMnDKz.js";
-import { a as searchGraphUsers, c as fetchGraphAbsoluteUrl, d as listTeamsByName, f as normalizeQuery, g as resolveGraphToken, h as postGraphJson, l as fetchGraphJson, m as postGraphBetaJson, o as deleteGraphRequest, p as patchGraphJson, s as escapeOData, u as listChannelsForTeam } from "./errors-HUt6we-U.js";
-import { n as MSTEAMS_PRESENTATION_CAPABILITIES, r as buildMSTeamsPresentationCard } from "./channel-I5mMZ1Ju.js";
-import { S as createMSTeamsConversationStoreState, a as sendMessageMSTeams, b as createMSTeamsPollStoreState, i as sendAdaptiveCardMSTeams, n as deleteMessageMSTeams, o as sendPollMSTeams, r as editMessageMSTeams, t as probeMSTeams } from "./probe-MGBfnHCR.js";
+import { a as searchGraphUsers, c as fetchGraphAbsoluteUrl, d as listTeamsByName, f as normalizeQuery, g as resolveGraphToken, h as postGraphJson, l as fetchGraphJson, m as postGraphBetaJson, o as deleteGraphRequest, p as patchGraphJson, s as escapeOData, u as listChannelsForTeam } from "./errors-Dpn8B05h.js";
+import { n as MSTEAMS_PRESENTATION_CAPABILITIES, r as buildMSTeamsPresentationCard } from "./channel-CqRTzeBc.js";
+import { S as createMSTeamsConversationStoreState, a as sendMessageMSTeams, b as createMSTeamsPollStoreState, i as sendAdaptiveCardMSTeams, n as deleteMessageMSTeams, o as sendPollMSTeams, r as editMessageMSTeams, t as probeMSTeams } from "./probe-DMNefdBZ.js";
 import { resolveOutboundSendDep } from "openclaw/plugin-sdk/channel-outbound";
 import { normalizeLowercaseStringOrEmpty, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolvePayloadMediaUrls, resolveTextChunksWithFallback, sendPayloadMediaSequence } from "openclaw/plugin-sdk/reply-payload";
@@ -473,7 +473,7 @@ async function listChannelsMSTeams(params) {
 			description: ch.description,
 			membershipType: ch.membershipType
 		})),
-		truncated: !!nextPath
+		truncated: Boolean(nextPath)
 	};
 }
 /**

package/dist/doctor-contract-api.js

@@ -0,0 +1,171 @@
+import path from "node:path";
+import crypto from "node:crypto";
+import fs from "node:fs/promises";
+import { resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
+//#region extensions/msteams/doctor-contract-api.ts
+const LEARNINGS_NAMESPACE = "feedback-learnings";
+const MAX_LEARNING_ENTRIES = 1e4;
+function encodeSessionKey(sessionKey) {
+	return Buffer.from(sessionKey, "utf8").toString("base64url");
+}
+function learningStoreKey(storePath, sessionKey) {
+	return crypto.createHash("sha256").update(`${storePath}\0${sessionKey}`, "utf8").digest("hex");
+}
+function decodeSessionKey(fileStem) {
+	try {
+		const decoded = Buffer.from(fileStem, "base64url").toString("utf8");
+		return encodeSessionKey(decoded) === fileStem && decoded.trim() ? decoded : null;
+	} catch {
+		return null;
+	}
+}
+function resolveLearningSessionKey(fileStem) {
+	return decodeSessionKey(fileStem);
+}
+function legacySanitizeSessionKey(sessionKey) {
+	return sessionKey.replace(/[^a-zA-Z0-9_-]/g, "_");
+}
+async function listKnownSessionKeys(storePath) {
+	const candidates = [storePath, path.join(storePath, "sessions.json")];
+	for (const candidate of candidates) try {
+		const parsed = JSON.parse(await fs.readFile(candidate, "utf8"));
+		if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) continue;
+		const sessions = parsed.sessions && typeof parsed.sessions === "object" && !Array.isArray(parsed.sessions) ? parsed.sessions : parsed;
+		return Object.keys(sessions).filter((key) => key.trim());
+	} catch {}
+	return [];
+}
+function resolveLegacySanitizedSessionKey(fileStem, knownSessionKeys) {
+	const matches = knownSessionKeys.filter((sessionKey) => legacySanitizeSessionKey(sessionKey) === fileStem);
+	return matches.length === 1 ? matches[0] : null;
+}
+function listAgentIds(config) {
+	const ids = new Set(["main"]);
+	for (const agent of config.agents?.list ?? []) if (typeof agent.id === "string" && agent.id.trim()) ids.add(agent.id.trim());
+	return [...ids];
+}
+function listCandidateStorePaths(params) {
+	const paths = /* @__PURE__ */ new Set();
+	paths.add(resolveStorePath(params.config.session?.store, { env: params.env }));
+	for (const agentId of listAgentIds(params.config)) paths.add(resolveStorePath(params.config.session?.store, {
+		agentId,
+		env: params.env
+	}));
+	return [...paths];
+}
+async function fileExists(filePath) {
+	try {
+		return (await fs.stat(filePath)).isFile();
+	} catch {
+		return false;
+	}
+}
+async function listLegacyLearningFiles(storePath) {
+	let entries = [];
+	try {
+		entries = await fs.readdir(storePath, { withFileTypes: true });
+	} catch {
+		return [];
+	}
+	const suffix = ".learnings.json";
+	const knownSessionKeys = await listKnownSessionKeys(storePath);
+	const files = [];
+	for (const entry of entries) {
+		if (!entry.isFile() || !entry.name.endsWith(suffix)) continue;
+		const fileStem = entry.name.slice(0, -15);
+		const sessionKey = resolveLearningSessionKey(fileStem) ?? resolveLegacySanitizedSessionKey(fileStem, knownSessionKeys);
+		const filePath = path.join(storePath, entry.name);
+		try {
+			const parsed = JSON.parse(await fs.readFile(filePath, "utf8"));
+			if (Array.isArray(parsed)) {
+				const learnings = parsed.filter((item) => typeof item === "string");
+				if (learnings.length > 0) files.push({
+					storePath,
+					sessionKey,
+					filePath,
+					learnings: learnings.slice(-10)
+				});
+			}
+		} catch {}
+	}
+	return files;
+}
+async function archiveLegacySource(params) {
+	const archivedPath = `${params.filePath}.migrated`;
+	if (await fileExists(archivedPath)) {
+		params.warnings.push(`Left migrated Microsoft Teams feedback-learning source in place because ${archivedPath} already exists`);
+		return;
+	}
+	try {
+		await fs.rename(params.filePath, archivedPath);
+		params.changes.push(`Archived Microsoft Teams feedback-learning legacy source -> ${archivedPath}`);
+	} catch (err) {
+		params.warnings.push(`Failed archiving Microsoft Teams feedback-learning legacy source: ${String(err)}`);
+	}
+}
+function mergeLearnings(legacy, existing) {
+	const seen = /* @__PURE__ */ new Set();
+	const merged = [];
+	for (const learning of [...legacy, ...existing?.learnings ?? []]) {
+		if (seen.has(learning)) continue;
+		seen.add(learning);
+		merged.push(learning);
+	}
+	return merged.slice(-10);
+}
+const stateMigrations = [{
+	id: "msteams-feedback-learnings-json-to-plugin-state",
+	label: "Microsoft Teams feedback learnings",
+	async detectLegacyState(params) {
+		const files = (await Promise.all(listCandidateStorePaths(params).map((storePath) => listLegacyLearningFiles(storePath)))).flat();
+		if (files.length === 0) return null;
+		return { preview: [`- Microsoft Teams feedback learnings: ${files.length} ${files.length === 1 ? "file" : "files"} -> plugin state (${LEARNINGS_NAMESPACE})`] };
+	},
+	async migrateLegacyState(params) {
+		const changes = [];
+		const warnings = [];
+		const files = (await Promise.all(listCandidateStorePaths(params).map((storePath) => listLegacyLearningFiles(storePath)))).flat();
+		const store = params.context.openPluginStateKeyedStore({
+			namespace: LEARNINGS_NAMESPACE,
+			maxEntries: MAX_LEARNING_ENTRIES
+		});
+		const existingEntries = await store.entries();
+		const existingKeys = new Set(existingEntries.map((entry) => entry.key));
+		const importableFiles = files.filter((file) => file.sessionKey);
+		const missingKeys = new Set(importableFiles.map((file) => learningStoreKey(file.storePath, file.sessionKey ?? "")).filter((key) => !existingKeys.has(key)));
+		if (missingKeys.size > MAX_LEARNING_ENTRIES - existingKeys.size) {
+			warnings.push(`Skipped Microsoft Teams feedback-learning migration because plugin state has room for ${MAX_LEARNING_ENTRIES - existingKeys.size} of ${missingKeys.size} missing entries; left legacy sources in place`);
+			return {
+				changes,
+				warnings
+			};
+		}
+		let imported = 0;
+		for (const file of files) {
+			if (!file.sessionKey) {
+				warnings.push(`Left Microsoft Teams feedback-learning source in place because its legacy filename cannot be mapped to a session key: ${file.filePath}`);
+				continue;
+			}
+			const key = learningStoreKey(file.storePath, file.sessionKey);
+			const existing = await store.lookup(key);
+			await store.register(key, {
+				sessionKey: existing?.sessionKey ?? file.sessionKey,
+				learnings: mergeLearnings(file.learnings, existing),
+				updatedAt: Date.now()
+			});
+			imported++;
+			await archiveLegacySource({
+				filePath: file.filePath,
+				changes,
+				warnings
+			});
+		}
+		if (imported > 0) changes.unshift(`Migrated ${imported} Microsoft Teams feedback-learning ${imported === 1 ? "entry" : "entries"} -> plugin state`);
+		return {
+			changes,
+			warnings
+		};
+	}
+}];
+//#endregion
+export { stateMigrations };

package/dist/{errors-HUt6we-U.js → errors-Dpn8B05h.js}

@@ -296,7 +296,7 @@ function resolveAuthAllowedHosts(input) {
 }
 function isMockFetchFn(fetchFn) {
 	const candidate = fetchFn;
-	return Boolean(candidate.mock || Object.prototype.hasOwnProperty.call(candidate, "_isMockFunction"));
+	return Boolean(candidate.mock || Object.hasOwn(candidate, "_isMockFunction"));
 }
 function resolveGuardedFetchImpl(params) {
 	if (!params.fetchFn) return;

package/dist/{probe-MGBfnHCR.js → probe-DMNefdBZ.js}

@@ -1,7 +1,7 @@
 import { C as normalizeStringEntries$1, E as resolveChannelMediaMaxBytes, M as getMSTeamsRuntime, d as detectMime, g as getFileExtension, m as extractOriginalFilename, p as extensionForMime, y as loadOutboundMediaFromUrl } from "./runtime-api-BlvMnDKz.js";
-import { A as isAllowedBotFrameworkServiceUrl, C as readAccessToken, D as buildUserAgent, E as loadMSTeamsSdkWithAuth, N as resolveMSTeamsSdkCloudOptions, P as validateMSTeamsProactiveServiceUrlBoundary, T as createMSTeamsTokenProvider, i as isRevokedProxyError, j as normalizeBotFrameworkServiceUrl, k as describeBotFrameworkServiceUrlHost, n as formatMSTeamsSendErrorHint, r as formatUnknownError, t as classifyMSTeamsSendError, v as loadDelegatedTokens, x as resolveMSTeamsStorePath, y as resolveMSTeamsCredentials } from "./errors-HUt6we-U.js";
+import { A as isAllowedBotFrameworkServiceUrl, C as readAccessToken, D as buildUserAgent, E as loadMSTeamsSdkWithAuth, N as resolveMSTeamsSdkCloudOptions, P as validateMSTeamsProactiveServiceUrlBoundary, T as createMSTeamsTokenProvider, i as isRevokedProxyError, j as normalizeBotFrameworkServiceUrl, k as describeBotFrameworkServiceUrlHost, n as formatMSTeamsSendErrorHint, r as formatUnknownError, t as classifyMSTeamsSendError, v as loadDelegatedTokens, x as resolveMSTeamsStorePath, y as resolveMSTeamsCredentials } from "./errors-Dpn8B05h.js";
 import { c as createMSTeamsHttpError } from "./oauth.token-BKzEFepQ.js";
-import { a as resolveMSTeamsReplyPolicy, o as resolveMSTeamsRouteConfig } from "./channel-I5mMZ1Ju.js";
+import { a as resolveMSTeamsReplyPolicy, o as resolveMSTeamsRouteConfig } from "./channel-CqRTzeBc.js";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, normalizeStringEntries, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { withFileLock } from "openclaw/plugin-sdk/file-lock";
@@ -12,7 +12,7 @@ import { isPrivateIpAddress } from "openclaw/plugin-sdk/ssrf-policy";
 import path from "node:path";
 import { isFutureDateTimestampMs, parseStrictNonNegativeInteger } from "openclaw/plugin-sdk/number-runtime";
 import { pathExists } from "openclaw/plugin-sdk/security-runtime";
-import crypto from "node:crypto";
+import crypto, { createHash } from "node:crypto";
 import fs from "node:fs/promises";
 import { readJsonFileWithFallback, writeJsonFileAtomically } from "openclaw/plugin-sdk/json-store";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
@@ -106,7 +106,8 @@ function resolveMSTeamsSqliteStateEnv(options) {
 	};
 }
 function toPluginJsonValue(value) {
-	return JSON.parse(JSON.stringify(value));
+	const serialized = JSON.stringify(value);
+	return JSON.parse(serialized);
 }
 function resolveMSTeamsSqliteStateDir(options) {
 	return resolveStateDirOverride(options) ?? getMSTeamsRuntime().state.resolveStateDir(options?.env ?? process.env, options?.homedir);
@@ -786,31 +787,24 @@ async function uploadToConsentUrl(params) {
 }
 //#endregion
 //#region extensions/msteams/src/pending-uploads-fs.ts
-/**
-* Filesystem-backed pending upload store for the FileConsentCard flow.
-*
-* The CLI `message send --media` path runs in a different process from the
-* gateway's bot monitor that receives the `fileConsent/invoke` callback.
-* An in-memory `pending-uploads.ts` store cannot bridge those processes, so
-* when the user clicks "Allow" the monitor handler's lookup misses and the
-* user sees "card action not supported".
-*
-* This FS store persists pending uploads to a JSON file (with the file buffer
-* base64-encoded) so any process that shares the OpenClaw state dir can read
-* them back. The in-memory store in `pending-uploads.ts` is still the fast
-* path for same-process flows (for example the messenger reply path); this FS
-* store is a cross-process fallback.
-*/
 /** TTL for persisted pending uploads (matches in-memory store). */
 const PENDING_UPLOAD_TTL_MS$1 = 300 * 1e3;
 /** Cap to avoid unbounded growth if a process crashes mid-flow. */
 const MAX_PENDING_UPLOADS = 100;
+const MAX_CHUNKS_PER_UPLOAD = 3072;
+const MAX_PENDING_UPLOAD_CHUNK_ROWS = 45e3;
+const RAW_CHUNK_BYTES = 36 * 1024;
+const PENDING_UPLOAD_META_MAX_ENTRIES = 200;
 const STORE_FILENAME = "msteams-pending-uploads.json";
+const PENDING_UPLOAD_META_NAMESPACE = "pending-uploads";
+const PENDING_UPLOAD_CHUNKS_NAMESPACE = "pending-upload-chunks";
+const PENDING_UPLOAD_MIGRATIONS_NAMESPACE = "pending-upload-migrations";
+const PENDING_UPLOAD_LOCK_FILENAME = "msteams-pending-uploads.sqlite.lock";
 const empty = {
 	version: 1,
 	uploads: {}
 };
-function resolveFilePath(options) {
+function resolveLegacyFilePath(options) {
 	return resolveMSTeamsStorePath({
 		filename: STORE_FILENAME,
 		env: options?.env,
@@ -819,6 +813,42 @@ function resolveFilePath(options) {
 		storePath: options?.storePath
 	});
 }
+function createMetaStore(options) {
+	return getMSTeamsRuntime().state.openKeyedStore({
+		namespace: PENDING_UPLOAD_META_NAMESPACE,
+		maxEntries: PENDING_UPLOAD_META_MAX_ENTRIES,
+		env: resolveMSTeamsSqliteStateEnv(options)
+	});
+}
+function createChunkStore(options) {
+	return getMSTeamsRuntime().state.openKeyedStore({
+		namespace: PENDING_UPLOAD_CHUNKS_NAMESPACE,
+		maxEntries: MAX_PENDING_UPLOAD_CHUNK_ROWS,
+		env: resolveMSTeamsSqliteStateEnv(options)
+	});
+}
+function createMigrationStore(options) {
+	return getMSTeamsRuntime().state.openKeyedStore({
+		namespace: PENDING_UPLOAD_MIGRATIONS_NAMESPACE,
+		maxEntries: 100,
+		env: resolveMSTeamsSqliteStateEnv(options)
+	});
+}
+function buildUploadKey(id) {
+	return `upload:${createHash("sha256").update(id).digest("hex")}`;
+}
+function buildMetaKey(id) {
+	return `${buildUploadKey(id)}:meta`;
+}
+function buildChunkKey(id, index) {
+	return `${buildUploadKey(id)}:chunk:${String(index).padStart(4, "0")}`;
+}
+function buildMigrationKey(filePath) {
+	return `legacy-json:${createHash("sha256").update(filePath).digest("hex")}`;
+}
+function buildMigrationContentKey(filePath, value) {
+	return `legacy-json-content:${createHash("sha256").update(filePath).update("\0").update(JSON.stringify(value) ?? "undefined").digest("hex")}`;
+}
 function pruneExpired(uploads, nowMs, ttlMs) {
 	const kept = {};
 	for (const [id, record] of Object.entries(uploads)) if (nowMs - record.createdAt <= ttlMs) kept[id] = record;
@@ -831,10 +861,10 @@ function pruneToLimit(uploads) {
 	const keep = entries.slice(entries.length - MAX_PENDING_UPLOADS);
 	return Object.fromEntries(keep);
 }
-function recordToUpload(record) {
+function recordToUpload(record, buffer) {
 	return {
 		id: record.id,
-		buffer: Buffer.from(record.bufferBase64, "base64"),
+		buffer,
 		filename: record.filename,
 		contentType: record.contentType,
 		conversationId: record.conversationId,
@@ -847,17 +877,119 @@ function isValidStore(value) {
 	const candidate = value;
 	return candidate.version === 1 && typeof candidate.uploads === "object" && candidate.uploads !== null && !Array.isArray(candidate.uploads);
 }
-async function readStore(filePath, ttlMs) {
-	const { value } = await readJsonFile(filePath, empty);
-	if (!isValidStore(value)) return {
-		version: 1,
-		uploads: {}
-	};
+function normalizeLegacyUploadRecord(value) {
+	if (!value || typeof value !== "object") return null;
+	const record = value;
+	if (typeof record.id !== "string" || !record.id || typeof record.bufferBase64 !== "string" || typeof record.filename !== "string" || !record.filename || typeof record.conversationId !== "string" || !record.conversationId || typeof record.createdAt !== "number" || !Number.isFinite(record.createdAt)) return null;
 	return {
-		version: 1,
-		uploads: pruneToLimit(pruneExpired(value.uploads, Date.now(), ttlMs))
+		id: record.id,
+		bufferBase64: record.bufferBase64,
+		filename: record.filename,
+		contentType: typeof record.contentType === "string" ? record.contentType : void 0,
+		conversationId: record.conversationId,
+		consentCardActivityId: typeof record.consentCardActivityId === "string" ? record.consentCardActivityId : void 0,
+		createdAt: record.createdAt
 	};
 }
+function normalizeLegacyUploads(value) {
+	if (!isValidStore(value)) return {};
+	const uploads = {};
+	for (const record of Object.values(value.uploads)) {
+		const normalized = normalizeLegacyUploadRecord(record);
+		if (normalized) uploads[normalized.id] = normalized;
+	}
+	return uploads;
+}
+async function deleteUploadRows(id, metaStore, chunkStore) {
+	const existing = await metaStore.lookup(buildMetaKey(id));
+	await metaStore.delete(buildMetaKey(id));
+	if (!existing) return;
+	const chunkCount = existing.chunkCount;
+	for (let index = 0; index < chunkCount; index += 1) await chunkStore.delete(buildChunkKey(id, index));
+}
+async function registerUploadRows(record, metaStore, chunkStore, ttlMs, overwrite) {
+	const buffer = Buffer.from(record.bufferBase64, "base64");
+	const chunkCount = Math.max(1, Math.ceil(buffer.byteLength / RAW_CHUNK_BYTES));
+	if (chunkCount > MAX_CHUNKS_PER_UPLOAD) throw new Error(`Microsoft Teams pending upload ${record.id} exceeds SQLite chunk limit (${chunkCount}/${MAX_CHUNKS_PER_UPLOAD})`);
+	if (overwrite) await deleteUploadRows(record.id, metaStore, chunkStore);
+	else if (await metaStore.lookup(buildMetaKey(record.id))) return;
+	await pruneUploadStore(metaStore, chunkStore, ttlMs, chunkCount);
+	for (let index = 0; index < chunkCount; index += 1) {
+		const chunk = buffer.subarray(index * RAW_CHUNK_BYTES, (index + 1) * RAW_CHUNK_BYTES);
+		await chunkStore.register(buildChunkKey(record.id, index), toPluginJsonValue({
+			id: record.id,
+			index,
+			dataBase64: chunk.toString("base64")
+		}));
+	}
+	await metaStore.register(buildMetaKey(record.id), toPluginJsonValue({
+		id: record.id,
+		filename: record.filename,
+		contentType: record.contentType,
+		conversationId: record.conversationId,
+		consentCardActivityId: record.consentCardActivityId,
+		createdAt: record.createdAt,
+		chunkCount,
+		byteLength: buffer.byteLength
+	}));
+}
+async function importLegacyStore(options, metaStore, chunkStore, ttlMs) {
+	const legacyFilePath = resolveLegacyFilePath(options);
+	const migrationStore = createMigrationStore(options);
+	const migrationKey = buildMigrationKey(legacyFilePath);
+	const imported = await migrationStore.lookup(migrationKey) !== void 0;
+	const { value, exists } = await readJsonFile(legacyFilePath, empty);
+	if (!exists) {
+		if (!imported) await migrationStore.register(migrationKey, { importedAt: (/* @__PURE__ */ new Date()).toISOString() });
+		return;
+	}
+	const contentKey = buildMigrationContentKey(legacyFilePath, value);
+	if (await migrationStore.lookup(contentKey)) return;
+	const legacy = pruneToLimit(pruneExpired(normalizeLegacyUploads(value), Date.now(), ttlMs));
+	for (const record of Object.values(legacy)) await registerUploadRows(record, metaStore, chunkStore, ttlMs, false);
+	await migrationStore.register(contentKey, { importedAt: (/* @__PURE__ */ new Date()).toISOString() });
+	if (!imported) await migrationStore.register(migrationKey, { importedAt: (/* @__PURE__ */ new Date()).toISOString() });
+	await fs.rm(legacyFilePath, { force: true }).catch(() => {});
+}
+async function withPendingUploadLock(options, run) {
+	return await withMSTeamsSqliteMutationLock(options, PENDING_UPLOAD_LOCK_FILENAME, run);
+}
+async function ensureLegacyImported(options, metaStore, chunkStore, ttlMs) {
+	await withPendingUploadLock(options, () => importLegacyStore(options, metaStore, chunkStore, ttlMs));
+}
+async function readUploadRows(id, metaStore, chunkStore) {
+	const meta = await metaStore.lookup(buildMetaKey(id));
+	if (!meta) return;
+	const chunks = [];
+	for (let index = 0; index < meta.chunkCount; index += 1) {
+		const chunk = await chunkStore.lookup(buildChunkKey(id, index));
+		if (!chunk || chunk.id !== id || chunk.index !== index) return;
+		chunks.push(Buffer.from(chunk.dataBase64, "base64"));
+	}
+	return recordToUpload(meta, Buffer.concat(chunks, meta.byteLength));
+}
+async function pruneUploadStore(metaStore, chunkStore, ttlMs, extraChunkRows = 0) {
+	const rows = await metaStore.entries();
+	const liveRows = [];
+	const now = Date.now();
+	let liveChunkRows = 0;
+	for (const row of rows) {
+		if (now - row.value.createdAt > ttlMs) {
+			await deleteUploadRows(row.value.id, metaStore, chunkStore);
+			continue;
+		}
+		liveChunkRows += row.value.chunkCount;
+		liveRows.push(row);
+	}
+	if (liveRows.length <= MAX_PENDING_UPLOADS && liveChunkRows + extraChunkRows <= MAX_PENDING_UPLOAD_CHUNK_ROWS) return;
+	const sorted = liveRows.toSorted((a, b) => a.value.createdAt - b.value.createdAt || a.value.id.localeCompare(b.value.id));
+	for (const row of sorted) {
+		if (liveRows.length <= MAX_PENDING_UPLOADS && liveChunkRows + extraChunkRows <= MAX_PENDING_UPLOAD_CHUNK_ROWS) break;
+		await deleteUploadRows(row.value.id, metaStore, chunkStore);
+		liveChunkRows -= row.value.chunkCount;
+		liveRows.pop();
+	}
+}
 /**
 * Persist a pending upload record so another process can read it back.
 * Pass in the pre-generated id (same as the one placed in the consent card
@@ -865,10 +997,11 @@ async function readStore(filePath, ttlMs) {
 */
 async function storePendingUploadFs(upload, options) {
 	const ttlMs = options?.ttlMs ?? PENDING_UPLOAD_TTL_MS$1;
-	const filePath = resolveFilePath(options);
-	await withFileLock$1(filePath, empty, async () => {
-		const store = await readStore(filePath, ttlMs);
-		store.uploads[upload.id] = {
+	const metaStore = createMetaStore(options);
+	const chunkStore = createChunkStore(options);
+	await withPendingUploadLock(options, async () => {
+		await importLegacyStore(options, metaStore, chunkStore, ttlMs);
+		await registerUploadRows({
 			id: upload.id,
 			bufferBase64: upload.buffer.toString("base64"),
 			filename: upload.filename,
@@ -876,9 +1009,8 @@ async function storePendingUploadFs(upload, options) {
 			conversationId: upload.conversationId,
 			consentCardActivityId: upload.consentCardActivityId,
 			createdAt: Date.now()
-		};
-		store.uploads = pruneToLimit(pruneExpired(store.uploads, Date.now(), ttlMs));
-		await writeJsonFile(filePath, store);
+		}, metaStore, chunkStore, ttlMs, true);
+		await pruneUploadStore(metaStore, chunkStore, ttlMs);
 	});
 }
 /**
@@ -887,10 +1019,16 @@ async function storePendingUploadFs(upload, options) {
 async function getPendingUploadFs(id, options) {
 	if (!id) return;
 	const ttlMs = options?.ttlMs ?? PENDING_UPLOAD_TTL_MS$1;
-	const record = (await readStore(resolveFilePath(options), ttlMs)).uploads[id];
-	if (!record) return;
-	if (Date.now() - record.createdAt > ttlMs) return;
-	return recordToUpload(record);
+	const metaStore = createMetaStore(options);
+	const chunkStore = createChunkStore(options);
+	await ensureLegacyImported(options, metaStore, chunkStore, ttlMs);
+	const upload = await readUploadRows(id, metaStore, chunkStore);
+	if (!upload) return;
+	if (Date.now() - upload.createdAt > ttlMs) {
+		await removePendingUploadFs(id, options);
+		return;
+	}
+	return upload;
 }
 /**
 * Remove a persisted pending upload (after successful upload or decline).
@@ -899,12 +1037,11 @@ async function getPendingUploadFs(id, options) {
 async function removePendingUploadFs(id, options) {
 	if (!id) return;
 	const ttlMs = options?.ttlMs ?? PENDING_UPLOAD_TTL_MS$1;
-	const filePath = resolveFilePath(options);
-	await withFileLock$1(filePath, empty, async () => {
-		const store = await readStore(filePath, ttlMs);
-		if (!(id in store.uploads)) return;
-		delete store.uploads[id];
-		await writeJsonFile(filePath, store);
+	const metaStore = createMetaStore(options);
+	const chunkStore = createChunkStore(options);
+	await withPendingUploadLock(options, async () => {
+		await importLegacyStore(options, metaStore, chunkStore, ttlMs);
+		await deleteUploadRows(id, metaStore, chunkStore);
 	});
 }
 /**
@@ -913,13 +1050,16 @@ async function removePendingUploadFs(id, options) {
 */
 async function setPendingUploadActivityIdFs(id, activityId, options) {
 	const ttlMs = options?.ttlMs ?? PENDING_UPLOAD_TTL_MS$1;
-	const filePath = resolveFilePath(options);
-	await withFileLock$1(filePath, empty, async () => {
-		const store = await readStore(filePath, ttlMs);
-		const record = store.uploads[id];
-		if (!record) return;
-		record.consentCardActivityId = activityId;
-		await writeJsonFile(filePath, store);
+	const metaStore = createMetaStore(options);
+	const chunkStore = createChunkStore(options);
+	await withPendingUploadLock(options, async () => {
+		await importLegacyStore(options, metaStore, chunkStore, ttlMs);
+		const record = await metaStore.lookup(buildMetaKey(id));
+		if (!record || Date.now() - record.createdAt > ttlMs) return;
+		await metaStore.register(buildMetaKey(id), toPluginJsonValue({
+			...record,
+			consentCardActivityId: activityId
+		}));
 	});
 }
 //#endregion
@@ -2567,4 +2707,4 @@ async function probeMSTeams(cfg) {
 	}
 }
 //#endregion
-export { readJsonFile as C, createMSTeamsConversationStoreState as S, writeJsonFile as T, buildFileInfoCard as _, sendMessageMSTeams as a, createMSTeamsPollStoreState as b, renderReplyPayloadsToMessages as c, withRevokedProxyFallback as d, resolveGraphChatId as f, removePendingUploadFs as g, getPendingUploadFs as h, sendAdaptiveCardMSTeams as i, sendMSTeamsMessages as l, removePendingUpload as m, deleteMessageMSTeams as n, sendPollMSTeams as o, getPendingUpload as p, editMessageMSTeams as r, buildConversationReference as s, probeMSTeams as t, sendMSTeamsActivityWithReference as u, parseFileConsentInvoke as v, withFileLock$1 as w, extractMSTeamsPollVote as x, uploadToConsentUrl as y };
+export { resolveMSTeamsSqliteStateEnv as C, readJsonFile as E, createMSTeamsConversationStoreState as S, withMSTeamsSqliteMutationLock as T, buildFileInfoCard as _, sendMessageMSTeams as a, createMSTeamsPollStoreState as b, renderReplyPayloadsToMessages as c, withRevokedProxyFallback as d, resolveGraphChatId as f, removePendingUploadFs as g, getPendingUploadFs as h, sendAdaptiveCardMSTeams as i, sendMSTeamsMessages as l, removePendingUpload as m, deleteMessageMSTeams as n, sendPollMSTeams as o, getPendingUpload as p, editMessageMSTeams as r, buildConversationReference as s, probeMSTeams as t, sendMSTeamsActivityWithReference as u, parseFileConsentInvoke as v, toPluginJsonValue as w, extractMSTeamsPollVote as x, uploadToConsentUrl as y };

package/dist/setup-plugin-api.js

@@ -1,5 +1,5 @@
-import { y as resolveMSTeamsCredentials } from "./errors-HUt6we-U.js";
-import { i as msteamsSetupAdapter, t as msteamsSetupWizard } from "./setup-surface-BLAlJzog.js";
+import { y as resolveMSTeamsCredentials } from "./errors-Dpn8B05h.js";
+import { i as msteamsSetupAdapter, t as msteamsSetupWizard } from "./setup-surface-B7a1pD-K.js";
 import { t as MSTeamsChannelConfigSchema } from "./config-schema-BL4qQZiA.js";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";

package/dist/{setup-surface-BLAlJzog.js → setup-surface-B7a1pD-K.js}

@@ -1,4 +1,4 @@
-import { S as normalizeSecretInputString, _ as hasConfiguredMSTeamsCredentials, a as searchGraphUsers, b as saveDelegatedTokens, d as listTeamsByName, f as normalizeQuery, g as resolveGraphToken, r as formatUnknownError, u as listChannelsForTeam, y as resolveMSTeamsCredentials } from "./errors-HUt6we-U.js";
+import { S as normalizeSecretInputString, _ as hasConfiguredMSTeamsCredentials, a as searchGraphUsers, b as saveDelegatedTokens, d as listTeamsByName, f as normalizeQuery, g as resolveGraphToken, r as formatUnknownError, u as listChannelsForTeam, y as resolveMSTeamsCredentials } from "./errors-Dpn8B05h.js";
 import { mapAllowlistResolutionInputs } from "openclaw/plugin-sdk/allow-from";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { DEFAULT_ACCOUNT_ID, createSetupTranslator, createStandardChannelSetupStatus, createTopLevelChannelAllowFromSetter, createTopLevelChannelDmPolicy, createTopLevelChannelGroupPolicySetter, mergeAllowFromEntries, splitSetupEntries } from "openclaw/plugin-sdk/setup";