@openclaw/msteams 2026.7.1-beta.1 → 2026.7.1-beta.4

package/node_modules/@azure/msal-browser/package.json

@@ -10,7 +10,7 @@
     "type": "git",
     "url": "https://github.com/AzureAD/microsoft-authentication-library-for-js.git"
   },
-  "version": "5.12.0",
+  "version": "5.16.0",
   "description": "Microsoft Authentication Library for js",
   "keywords": [
     "implicit",
@@ -98,15 +98,14 @@
     "apiExtractor": "api-extractor run"
   },
   "devDependencies": {
-    "@azure/storage-blob": "^12.2.1",
     "@babel/core": "^7.7.2",
     "@babel/plugin-proposal-class-properties": "^7.7.0",
     "@babel/plugin-proposal-object-rest-spread": "^7.6.2",
     "@babel/preset-env": "^7.7.1",
     "@babel/preset-typescript": "^7.7.2",
-    "@microsoft/api-extractor": "^7.43.4",
+    "@microsoft/api-extractor": "^7.58.7",
     "@rollup/plugin-node-resolve": "^15.0.1",
-    "@rollup/plugin-terser": "^0.4.0",
+    "@rollup/plugin-terser": "^1.0.0",
     "@rollup/plugin-typescript": "^11.0.0",
     "@types/jest": "^29.5.0",
     "@types/node": "^20.3.1",
@@ -124,12 +123,12 @@
     "rollup-msal": "file:../../shared-configs/rollup-msal",
     "shx": "^0.3.2",
     "ssri": "^8.0.1",
-    "ts-jest": "^29.2.5",
+    "ts-jest": "^29.4.11",
     "ts-jest-resolver": "^2.0.1",
     "tslib": "^1.10.0",
     "typescript": "^4.9.5"
   },
   "dependencies": {
-    "@azure/msal-common": "16.7.0"
+    "@azure/msal-common": "16.11.0"
   }
 }

package/node_modules/@azure/msal-browser/src/app/IPublicClientApplication.ts

@@ -81,35 +81,40 @@ export const stubbedPublicClientApplication: IPublicClientApplication = {
     initialize: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     acquireTokenPopup: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     acquireTokenRedirect: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     acquireTokenSilent: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     acquireTokenByCode: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
@@ -122,42 +127,48 @@ export const stubbedPublicClientApplication: IPublicClientApplication = {
     handleRedirectPromise: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     loginPopup: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     loginRedirect: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     logoutRedirect: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     logoutPopup: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     ssoSilent: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
@@ -175,7 +186,8 @@ export const stubbedPublicClientApplication: IPublicClientApplication = {
     },
     getLogger: () => {
         throw createBrowserConfigurationAuthError(
-            BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+            BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+            ""
         );
     },
     setLogger: () => {
@@ -195,20 +207,23 @@ export const stubbedPublicClientApplication: IPublicClientApplication = {
     },
     getConfiguration: () => {
         throw createBrowserConfigurationAuthError(
-            BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+            BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+            ""
         );
     },
     hydrateCache: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },
     clearCache: () => {
         return Promise.reject(
             createBrowserConfigurationAuthError(
-                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled
+                BrowserConfigurationAuthErrorCodes.stubbedPublicClientApplicationCalled,
+                ""
             )
         );
     },

package/node_modules/@azure/msal-browser/src/broker/nativeBroker/PlatformAuthDOMHandler.ts

@@ -208,6 +208,7 @@ export class PlatformAuthDOMHandler implements IPlatformAuthHandler {
                     );
                     throw createNativeAuthError(
                         errorResponse.error.code,
+                        correlationId,
                         errorResponse.error.description,
                         {
                             error: parseInt(errorResponse.error.errorCode),
@@ -221,6 +222,7 @@ export class PlatformAuthDOMHandler implements IPlatformAuthHandler {
         }
         throw createAuthError(
             AuthErrorCodes.unexpectedError,
+            correlationId,
             "Response missing expected properties."
         );
     }

package/node_modules/@azure/msal-browser/src/broker/nativeBroker/PlatformAuthExtensionHandler.ts

@@ -211,7 +211,8 @@ export class PlatformAuthExtensionHandler implements IPlatformAuthHandler {
                 });
                 reject(
                     createBrowserAuthError(
-                        BrowserAuthErrorCodes.nativeHandshakeTimeout
+                        BrowserAuthErrorCodes.nativeHandshakeTimeout,
+                        ""
                     )
                 );
                 this.handshakeResolvers.delete(req.responseId);
@@ -280,7 +281,8 @@ export class PlatformAuthExtensionHandler implements IPlatformAuthHandler {
             });
             handshakeResolver.reject(
                 createBrowserAuthError(
-                    BrowserAuthErrorCodes.nativeExtensionNotInstalled
+                    BrowserAuthErrorCodes.nativeExtensionNotInstalled,
+                    ""
                 )
             );
         }
@@ -327,6 +329,7 @@ export class PlatformAuthExtensionHandler implements IPlatformAuthHandler {
                     resolver.reject(
                         createNativeAuthError(
                             response.code,
+                            correlationId,
                             response.description,
                             response.ext
                         )
@@ -339,6 +342,7 @@ export class PlatformAuthExtensionHandler implements IPlatformAuthHandler {
                         resolver.reject(
                             createNativeAuthError(
                                 response.result["code"],
+                                correlationId,
                                 response.result["description"],
                                 response.result["ext"]
                             )
@@ -349,6 +353,7 @@ export class PlatformAuthExtensionHandler implements IPlatformAuthHandler {
                 } else {
                     throw createAuthError(
                         AuthErrorCodes.unexpectedError,
+                        correlationId,
                         "Event does not contain result."
                     );
                 }
@@ -420,6 +425,7 @@ export class PlatformAuthExtensionHandler implements IPlatformAuthHandler {
         } else {
             throw createAuthError(
                 AuthErrorCodes.unexpectedError,
+                "",
                 "Response missing expected properties."
             );
         }

package/node_modules/@azure/msal-browser/src/broker/nativeBroker/PlatformAuthProvider.ts

@@ -128,7 +128,8 @@ export function isPlatformAuthAllowed(
         config.experimental.allowPlatformBrokerWithDOM
     ) {
         throw createClientConfigurationError(
-            ClientConfigurationErrorCodes.invalidPlatformBrokerConfiguration
+            ClientConfigurationErrorCodes.invalidPlatformBrokerConfiguration,
+            ""
         );
     }
 

package/node_modules/@azure/msal-browser/src/cache/BrowserCacheManager.ts

@@ -77,6 +77,23 @@ import { EncryptedData, isEncrypted } from "./EncryptedData.js";
 
 type KmsiMap = { [homeAccountId: string]: boolean };
 
+/**
+ * Reason an old-schema cache entry was removed during migration.
+ */
+const MigrationRemovalReason = {
+    Invalid: "invalid",
+    TtlExpired: "ttlExpired",
+    DecryptFailed: "decryptFailed",
+    Expired: "expired",
+} as const;
+
+type MigrationRemovalReason =
+    (typeof MigrationRemovalReason)[keyof typeof MigrationRemovalReason];
+
+type UpdateOldEntryResult =
+    | { entry: CredentialEntity; removalReason?: undefined }
+    | { entry: null; removalReason: MigrationRemovalReason };
+
 /**
  * This class implements the cache storage interface for MSAL through browser local or session storage.
  */
@@ -198,7 +215,7 @@ export class BrowserCacheManager extends CacheManager {
     async updateOldEntry(
         key: string,
         correlationId: string
-    ): Promise<CredentialEntity | null> {
+    ): Promise<UpdateOldEntryResult> {
         const rawValue = this.browserStorage.getItem(key);
         const parsedValue = this.validateAndParseJson(rawValue || "") as
             | CredentialEntity
@@ -207,7 +224,10 @@ export class BrowserCacheManager extends CacheManager {
 
         if (!parsedValue) {
             this.browserStorage.removeItem(key);
-            return null;
+            return {
+                entry: null,
+                removalReason: MigrationRemovalReason.Invalid,
+            };
         }
 
         if (!parsedValue.lastUpdatedAt) {
@@ -221,27 +241,38 @@ export class BrowserCacheManager extends CacheManager {
             )
         ) {
             this.browserStorage.removeItem(key);
-            this.performanceClient.incrementFields(
-                { expiredCacheRemovedCount: 1 },
-                correlationId
-            );
-            return null;
+            return {
+                entry: null,
+                removalReason: MigrationRemovalReason.TtlExpired,
+            };
         }
 
-        const decryptedData = isEncrypted(parsedValue)
+        const wasEncrypted = isEncrypted(parsedValue);
+        const decryptedData = wasEncrypted
             ? await this.browserStorage.decryptData(
                   key,
                   parsedValue,
                   correlationId
               )
             : parsedValue;
-        if (!decryptedData || !CacheHelpers.isCredentialEntity(decryptedData)) {
+
+        if (!decryptedData) {
             this.browserStorage.removeItem(key);
-            this.performanceClient.incrementFields(
-                { invalidCacheCount: 1 },
-                correlationId
-            );
-            return null;
+
+            return {
+                entry: null,
+                removalReason: wasEncrypted
+                    ? MigrationRemovalReason.DecryptFailed
+                    : MigrationRemovalReason.Invalid,
+            };
+        }
+
+        if (!CacheHelpers.isCredentialEntity(decryptedData)) {
+            this.browserStorage.removeItem(key);
+            return {
+                entry: null,
+                removalReason: MigrationRemovalReason.Invalid,
+            };
         }
 
         if (
@@ -254,14 +285,13 @@ export class BrowserCacheManager extends CacheManager {
             )
         ) {
             this.browserStorage.removeItem(key);
-            this.performanceClient.incrementFields(
-                { expiredCacheRemovedCount: 1 },
-                correlationId
-            );
-            return null;
+            return {
+                entry: null,
+                removalReason: MigrationRemovalReason.Expired,
+            };
         }
 
-        return decryptedData;
+        return { entry: decryptedData };
     }
 
     /**
@@ -297,6 +327,10 @@ export class BrowserCacheManager extends CacheManager {
 
             if (!parsedValue) {
                 this.browserStorage.removeItem(accountKey);
+                this.performanceClient.incrementFields(
+                    { invalidAcntCount: 1 },
+                    correlationId
+                );
                 removeElementFromArray(accountKeysToCheck, accountKey);
                 continue;
             }
@@ -323,6 +357,10 @@ export class BrowserCacheManager extends CacheManager {
                     credentialSchema,
                     correlationId
                 );
+                this.performanceClient.incrementFields(
+                    { ttlExpiredAcntCount: 1 },
+                    correlationId
+                );
                 removeElementFromArray(accountKeysToCheck, accountKey);
             } else if (isEncrypted(parsedValue)) {
                 // Remove accounts encrypted with a different key (session cookie expired/changed)
@@ -334,7 +372,9 @@ export class BrowserCacheManager extends CacheManager {
                 if (!decrypted) {
                     this.browserStorage.removeItem(accountKey);
                     this.performanceClient.incrementFields(
-                        { expiredAcntRemovedCount: 1 },
+                        {
+                            decryptFailedAcntCount: 1,
+                        },
                         correlationId
                     );
                     removeElementFromArray(accountKeysToCheck, accountKey);
@@ -390,11 +430,6 @@ export class BrowserCacheManager extends CacheManager {
             this.setTokenKeys(tokenKeys, correlationId, credentialSchema);
         }
 
-        this.performanceClient.incrementFields(
-            { expiredAcntRemovedCount: 1 },
-            correlationId
-        );
-
         this.browserStorage.removeItem(accountKey);
     }
 
@@ -411,7 +446,8 @@ export class BrowserCacheManager extends CacheManager {
                 const idToken = JSON.parse(rawValue) as IdTokenEntity;
                 const claims = AuthToken.extractTokenClaims(
                     idToken.secret,
-                    base64Decode
+                    base64Decode,
+                    ""
                 );
                 if (claims) {
                     kmsiMap[idToken.homeAccountId] = AuthToken.isKmsi(claims);
@@ -459,11 +495,29 @@ export class BrowserCacheManager extends CacheManager {
                 correlationId
             );
 
-            const oldSchemaData = (await this.updateOldEntry(
-                idTokenKey,
-                correlationId
-            )) as IdTokenEntity | null;
+            const result = await this.updateOldEntry(idTokenKey, correlationId);
+            const oldSchemaData = result.entry as IdTokenEntity | null;
             if (!oldSchemaData) {
+                switch (result.removalReason) {
+                    case MigrationRemovalReason.TtlExpired:
+                        this.performanceClient.incrementFields(
+                            { ttlExpiredITCount: 1 },
+                            correlationId
+                        );
+                        break;
+                    case MigrationRemovalReason.DecryptFailed:
+                        this.performanceClient.incrementFields(
+                            { decryptFailedITCount: 1 },
+                            correlationId
+                        );
+                        break;
+                    case MigrationRemovalReason.Invalid:
+                        this.performanceClient.incrementFields(
+                            { invalidITCount: 1 },
+                            correlationId
+                        );
+                        break;
+                }
                 removeElementFromArray(
                     credentialKeysToMigrate.idToken,
                     idTokenKey
@@ -508,7 +562,8 @@ export class BrowserCacheManager extends CacheManager {
 
             const claims = AuthToken.extractTokenClaims(
                 oldSchemaData.secret,
-                base64Decode
+                base64Decode,
+                correlationId
             );
 
             const newIdTokenKey = this.generateCredentialKey(oldSchemaData);
@@ -523,7 +578,8 @@ export class BrowserCacheManager extends CacheManager {
                 Object.keys(
                     AuthToken.extractTokenClaims(
                         currentIdToken.secret,
-                        base64Decode
+                        base64Decode,
+                        correlationId
                     ) || {}
                 ).includes("signin_state");
 
@@ -550,6 +606,7 @@ export class BrowserCacheManager extends CacheManager {
                         account.homeAccountId,
                         account.localAccountId,
                         tenantId,
+                        account.nativeAccountId,
                         claims
                     );
                     tenantProfiles.push(newTenantProfile);
@@ -628,11 +685,38 @@ export class BrowserCacheManager extends CacheManager {
                 correlationId
             );
 
-            const oldSchemaData = (await this.updateOldEntry(
+            const result = await this.updateOldEntry(
                 accessTokenKey,
                 correlationId
-            )) as AccessTokenEntity | null;
+            );
+            const oldSchemaData = result.entry as AccessTokenEntity | null;
             if (!oldSchemaData) {
+                switch (result.removalReason) {
+                    case MigrationRemovalReason.TtlExpired:
+                        this.performanceClient.incrementFields(
+                            { ttlExpiredATCount: 1 },
+                            correlationId
+                        );
+                        break;
+                    case MigrationRemovalReason.DecryptFailed:
+                        this.performanceClient.incrementFields(
+                            { decryptFailedATCount: 1 },
+                            correlationId
+                        );
+                        break;
+                    case MigrationRemovalReason.Expired:
+                        this.performanceClient.incrementFields(
+                            { expiredATCount: 1 },
+                            correlationId
+                        );
+                        break;
+                    case MigrationRemovalReason.Invalid:
+                        this.performanceClient.incrementFields(
+                            { invalidATCount: 1 },
+                            correlationId
+                        );
+                        break;
+                }
                 removeElementFromArray(
                     credentialKeysToMigrate.accessToken,
                     accessTokenKey
@@ -732,11 +816,38 @@ export class BrowserCacheManager extends CacheManager {
                 correlationId
             );
 
-            const oldSchemaData = (await this.updateOldEntry(
+            const result = await this.updateOldEntry(
                 refreshTokenKey,
                 correlationId
-            )) as RefreshTokenEntity | null;
+            );
+            const oldSchemaData = result.entry as RefreshTokenEntity | null;
             if (!oldSchemaData) {
+                switch (result.removalReason) {
+                    case MigrationRemovalReason.TtlExpired:
+                        this.performanceClient.incrementFields(
+                            { ttlExpiredRTCount: 1 },
+                            correlationId
+                        );
+                        break;
+                    case MigrationRemovalReason.DecryptFailed:
+                        this.performanceClient.incrementFields(
+                            { decryptFailedRTCount: 1 },
+                            correlationId
+                        );
+                        break;
+                    case MigrationRemovalReason.Expired:
+                        this.performanceClient.incrementFields(
+                            { expiredRTCount: 1 },
+                            correlationId
+                        );
+                        break;
+                    case MigrationRemovalReason.Invalid:
+                        this.performanceClient.incrementFields(
+                            { invalidRTCount: 1 },
+                            correlationId
+                        );
+                        break;
+                }
                 removeElementFromArray(
                     credentialKeysToMigrate.refreshToken,
                     refreshTokenKey
@@ -813,10 +924,9 @@ export class BrowserCacheManager extends CacheManager {
                 `MSAL.js was last initialized by version: '${previousVersion}'`,
                 correlationId
             );
-            this.performanceClient.addFields(
-                { previousLibraryVersion: previousVersion },
-                correlationId
-            );
+            this.performanceClient.addGlobalFields({
+                previousLibraryVersion: previousVersion,
+            });
         }
 
         if (previousVersion !== version) {
@@ -2129,7 +2239,8 @@ export class BrowserCacheManager extends CacheManager {
         );
         if (!encodedTokenRequest) {
             throw createBrowserAuthError(
-                BrowserAuthErrorCodes.noTokenRequestCacheError
+                BrowserAuthErrorCodes.noTokenRequestCacheError,
+                ""
             );
         }
         const encodedVerifier = this.getTemporaryCache(
@@ -2155,7 +2266,8 @@ export class BrowserCacheManager extends CacheManager {
                 correlationId
             );
             throw createBrowserAuthError(
-                BrowserAuthErrorCodes.unableToParseTokenRequestCacheError
+                BrowserAuthErrorCodes.unableToParseTokenRequestCacheError,
+                ""
             );
         }
 
@@ -2256,7 +2368,8 @@ export class BrowserCacheManager extends CacheManager {
                     this.removeTemporaryItem(key);
                 } else {
                     throw createBrowserAuthError(
-                        BrowserAuthErrorCodes.interactionInProgress
+                        BrowserAuthErrorCodes.interactionInProgress,
+                        ""
                     );
                 }
             }
@@ -2318,6 +2431,7 @@ export class BrowserCacheManager extends CacheManager {
                 ? TimeUtils.toSecondsFromDate(result.extExpiresOn)
                 : 0,
             base64Decode,
+            request.correlationId || "",
             undefined, // refreshOn
             result.tokenType as Constants.AuthenticationScheme,
             undefined, // userAssertionHash
@@ -2336,7 +2450,11 @@ export class BrowserCacheManager extends CacheManager {
             cacheRecord,
             result.correlationId,
             AuthToken.isKmsi(
-                AuthToken.extractTokenClaims(result.idToken, base64Decode)
+                AuthToken.extractTokenClaims(
+                    result.idToken,
+                    base64Decode,
+                    result.correlationId
+                )
             ),
             ApiId.hydrateCache
         );

package/node_modules/@azure/msal-browser/src/cache/CookieStorage.ts

@@ -46,7 +46,10 @@ export class CookieStorage implements IWindowStorage<string> {
     }
 
     getUserData(): string | null {
-        throw createClientAuthError(ClientAuthErrorCodes.methodNotImplemented);
+        throw createClientAuthError(
+            ClientAuthErrorCodes.methodNotImplemented,
+            ""
+        );
     }
 
     setItem(
@@ -73,9 +76,16 @@ export class CookieStorage implements IWindowStorage<string> {
         document.cookie = cookieStr;
     }
 
-    async setUserData(): Promise<void> {
+    async setUserData(
+        _key: string,
+        _value: string,
+        correlationId: string
+    ): Promise<void> {
         return Promise.reject(
-            createClientAuthError(ClientAuthErrorCodes.methodNotImplemented)
+            createClientAuthError(
+                ClientAuthErrorCodes.methodNotImplemented,
+                correlationId
+            )
         );
     }