@openclaw/msteams 2026.7.1 → 2026.7.2-beta.1

package/dist/{channel-Cf5LJ4aO.js → channel-BSyPdpGN.cjs}

@@ -1,50 +1,58 @@
-import { DEFAULT_ACCOUNT_ID, PAIRING_APPROVED_MESSAGE, buildChannelKeyCandidates, buildProbeChannelStatusSummary, chunkTextForOutbound, createDefaultChannelRuntimeState, isDangerousNameMatchingEnabled, normalizeChannelSlug, resolveAllowlistMatchSimple, resolveChannelEntryMatchWithFallback, resolveNestedAllowlistDecision, resolveToolsBySender } from "./runtime-api.js";
-import { C as resolveMSTeamsCredentials, a as parseMSTeamsTeamChannelInput, c as resolveMSTeamsUserAllowlist, i as parseMSTeamsConversationId, n as normalizeMSTeamsMessagingTarget, r as normalizeMSTeamsUserInput, s as resolveMSTeamsChannelAllowlist, t as looksLikeMSTeamsTargetId } from "./resolve-allowlist-Dnw4aNOu.js";
-import { t as MSTeamsChannelConfigSchema } from "./config-schema-BL4qQZiA.js";
-import { c as msteamsSetupAdapter, t as msteamsSetupWizard } from "./setup-surface-qW-ECHL-.js";
-import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
-import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";
-import { createTopLevelChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
-import { buildChannelOutboundSessionRoute, createChatChannelPlugin, stripChannelTargetPrefix, stripTargetKindPrefix } from "openclaw/plugin-sdk/channel-core";
-import { createChannelMessageAdapterFromOutbound, createRuntimeOutboundDelegates } from "openclaw/plugin-sdk/channel-outbound";
-import { createPairingPrefixStripper } from "openclaw/plugin-sdk/channel-pairing";
-import { createAllowlistProviderGroupPolicyWarningCollector, createDangerousNameMatchingMutableAllowlistWarningCollector, projectConfigWarningCollector } from "openclaw/plugin-sdk/channel-policy";
-import { createChannelDirectoryAdapter, createRuntimeDirectoryLiveAdapter, listDirectoryEntriesFromSources } from "openclaw/plugin-sdk/directory-runtime";
-import { adaptMessagePresentationForChannel, normalizeMessagePresentation, resolveMessagePresentationControlValue } from "openclaw/plugin-sdk/interactive-runtime";
-import { createLazyRuntimeNamedExport } from "openclaw/plugin-sdk/lazy-runtime";
-import { createComputedAccountStatusAdapter } from "openclaw/plugin-sdk/status-helpers";
-import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { Type } from "typebox";
-import { createResolvedApproverActionAuthAdapter, resolveApprovalApprovers } from "openclaw/plugin-sdk/approval-auth-runtime";
-import { resolveThreadSessionKeys } from "openclaw/plugin-sdk/routing";
+require("./runtime-api.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CyQ57MfH.cjs");
+const require_config_schema = require("./config-schema-BSNLJUta.cjs");
+const require_setup_surface = require("./setup-surface-BDTPN3dX.cjs");
+let openclaw_plugin_sdk_account_helpers = require("openclaw/plugin-sdk/account-helpers");
+let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
+let openclaw_plugin_sdk_channel_config_helpers = require("openclaw/plugin-sdk/channel-config-helpers");
+let openclaw_plugin_sdk_channel_core = require("openclaw/plugin-sdk/channel-core");
+let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
+let openclaw_plugin_sdk_channel_pairing = require("openclaw/plugin-sdk/channel-pairing");
+let openclaw_plugin_sdk_channel_policy = require("openclaw/plugin-sdk/channel-policy");
+let openclaw_plugin_sdk_directory_runtime = require("openclaw/plugin-sdk/directory-runtime");
+let openclaw_plugin_sdk_interactive_runtime = require("openclaw/plugin-sdk/interactive-runtime");
+let openclaw_plugin_sdk_lazy_runtime = require("openclaw/plugin-sdk/lazy-runtime");
+let openclaw_plugin_sdk_status_helpers = require("openclaw/plugin-sdk/status-helpers");
+let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
+let typebox = require("typebox");
+let openclaw_plugin_sdk_approval_auth_runtime = require("openclaw/plugin-sdk/approval-auth-runtime");
+let openclaw_plugin_sdk_channel_actions = require("openclaw/plugin-sdk/channel-actions");
+let openclaw_plugin_sdk_html_entity_runtime = require("openclaw/plugin-sdk/html-entity-runtime");
+let openclaw_plugin_sdk_routing = require("openclaw/plugin-sdk/routing");
+let openclaw_plugin_sdk_channel_targets = require("openclaw/plugin-sdk/channel-targets");
+let openclaw_plugin_sdk_dangerous_name_runtime = require("openclaw/plugin-sdk/dangerous-name-runtime");
+let openclaw_plugin_sdk_runtime_group_policy = require("openclaw/plugin-sdk/runtime-group-policy");
+let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
+let openclaw_plugin_sdk_text_chunking = require("openclaw/plugin-sdk/text-chunking");
+let openclaw_plugin_sdk_channel_status = require("openclaw/plugin-sdk/channel-status");
 //#region extensions/msteams/src/approval-auth.ts
 const MSTEAMS_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function normalizeMSTeamsApproverId(value) {
-	const normalized = normalizeMSTeamsMessagingTarget(String(value));
+	const normalized = require_resolve_allowlist.normalizeMSTeamsMessagingTarget(String(value));
 	if (!normalized?.startsWith("user:")) return;
-	const id = normalizeOptionalLowercaseString(normalized.slice(5));
+	const id = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(normalized.slice(5));
 	if (!id) return;
 	return MSTEAMS_ID_RE.test(id) ? id : void 0;
 }
 function resolveMSTeamsChannelConfig$1(cfg) {
 	return cfg.channels?.msteams;
 }
-const msTeamsApprovalAuth = createResolvedApproverActionAuthAdapter({
+const msTeamsApprovalAuth = (0, openclaw_plugin_sdk_approval_auth_runtime.createChannelApprovalAuth)({
 	channelLabel: "Microsoft Teams",
-	resolveApprovers: ({ cfg }) => {
+	resolveInputs: ({ cfg }) => {
 		const channel = resolveMSTeamsChannelConfig$1(cfg);
-		return resolveApprovalApprovers({
+		return {
 			allowFrom: channel?.allowFrom,
-			defaultTo: channel?.defaultTo,
-			normalizeApprover: normalizeMSTeamsApproverId
-		});
+			defaultTo: channel?.defaultTo
+		};
 	},
+	normalizeApprover: normalizeMSTeamsApproverId,
 	normalizeSenderId: (value) => {
-		const trimmed = normalizeOptionalLowercaseString(value);
+		const trimmed = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(value);
 		if (!trimmed) return;
 		return MSTEAMS_ID_RE.test(trimmed) ? trimmed : void 0;
 	}
-});
+}).approvalAuth;
 //#endregion
 //#region extensions/msteams/src/doctor.ts
 function isMSTeamsMutableAllowEntry(raw) {
@@ -53,7 +61,7 @@ function isMSTeamsMutableAllowEntry(raw) {
 	const withoutPrefix = text.replace(/^(msteams|user):/i, "").trim();
 	return /\s/.test(withoutPrefix) || withoutPrefix.includes("@");
 }
-const collectMSTeamsMutableAllowlistWarnings = createDangerousNameMatchingMutableAllowlistWarningCollector({
+const collectMSTeamsMutableAllowlistWarnings = (0, openclaw_plugin_sdk_channel_policy.createDangerousNameMatchingMutableAllowlistWarningCollector)({
 	channel: "msteams",
 	detector: isMSTeamsMutableAllowEntry,
 	collectLists: (scope) => [{
@@ -66,6 +74,78 @@ const collectMSTeamsMutableAllowlistWarnings = createDangerousNameMatchingMutabl
 });
 //#endregion
 //#region extensions/msteams/src/policy.ts
+const encodeScopeSegment = (value) => `${value.length}:${value}`;
+const teamScopeKey = (teamKey) => `team:${encodeScopeSegment(teamKey)}`;
+const channelScopeKey = (teamKey, channelKey) => `${teamScopeKey(teamKey)}/channel:${encodeScopeSegment(channelKey)}`;
+function buildMSTeamsToolPolicyTree(teams) {
+	const scopes = {};
+	for (const [teamKey, team] of Object.entries(teams ?? {})) {
+		scopes[teamScopeKey(teamKey)] = {
+			tools: team.tools,
+			toolsBySender: team.toolsBySender
+		};
+		for (const [channelKey, channel] of Object.entries(team.channels ?? {})) scopes[channelScopeKey(teamKey, channelKey)] = {
+			tools: channel.tools,
+			toolsBySender: channel.toolsBySender
+		};
+	}
+	return { scopes };
+}
+function resolveMSTeamsToolPolicyScope(params) {
+	const teams = params.cfg.teams ?? {};
+	const tree = buildMSTeamsToolPolicyTree(teams);
+	const teamMatch = (0, openclaw_plugin_sdk_channel_targets.resolveChannelEntryMatchWithFallback)({
+		entries: teams,
+		keys: (0, openclaw_plugin_sdk_channel_targets.buildChannelKeyCandidates)(params.groupSpace?.trim()),
+		wildcardKey: "*",
+		normalizeKey: openclaw_plugin_sdk_channel_targets.normalizeChannelSlug
+	});
+	const matchedTeamKey = teamMatch.matchKey ?? teamMatch.key;
+	if (teamMatch.entry && matchedTeamKey) {
+		const channelMatch = (0, openclaw_plugin_sdk_channel_targets.resolveChannelEntryMatchWithFallback)({
+			entries: teamMatch.entry.channels ?? {},
+			keys: (0, openclaw_plugin_sdk_channel_targets.buildChannelKeyCandidates)(params.groupId?.trim()),
+			wildcardKey: "*",
+			normalizeKey: openclaw_plugin_sdk_channel_targets.normalizeChannelSlug
+		});
+		const matchedChannelKey = channelMatch.matchKey ?? channelMatch.key;
+		return {
+			tree,
+			path: [teamScopeKey(matchedTeamKey), ...channelMatch.entry && matchedChannelKey ? [channelScopeKey(matchedTeamKey, matchedChannelKey)] : []]
+		};
+	}
+	return {
+		tree,
+		path: []
+	};
+}
+function resolveMSTeamsCrossTeamScanScope(params) {
+	const teams = params.cfg.teams ?? {};
+	const tree = buildMSTeamsToolPolicyTree(teams);
+	const groupId = params.groupId?.trim();
+	if (!groupId) return {
+		tree,
+		path: []
+	};
+	const channelCandidates = (0, openclaw_plugin_sdk_channel_targets.buildChannelKeyCandidates)(groupId);
+	for (const [teamKey, team] of Object.entries(teams)) {
+		const channelMatch = (0, openclaw_plugin_sdk_channel_targets.resolveChannelEntryMatchWithFallback)({
+			entries: team.channels ?? {},
+			keys: channelCandidates,
+			wildcardKey: "*",
+			normalizeKey: openclaw_plugin_sdk_channel_targets.normalizeChannelSlug
+		});
+		const matchedChannelKey = channelMatch.matchKey ?? channelMatch.key;
+		if (channelMatch.entry && matchedChannelKey) return {
+			tree,
+			path: [teamScopeKey(teamKey), channelScopeKey(teamKey, matchedChannelKey)]
+		};
+	}
+	return {
+		tree,
+		path: []
+	};
+}
 function resolveMSTeamsRouteConfig(params) {
 	const teamId = params.teamId?.trim();
 	const teamName = params.teamName?.trim();
@@ -73,27 +153,27 @@ function resolveMSTeamsRouteConfig(params) {
 	const channelName = params.channelName?.trim();
 	const teams = params.cfg?.teams ?? {};
 	const allowlistConfigured = Object.keys(teams).length > 0;
-	const teamMatch = resolveChannelEntryMatchWithFallback({
+	const teamMatch = (0, openclaw_plugin_sdk_channel_targets.resolveChannelEntryMatchWithFallback)({
 		entries: teams,
-		keys: buildChannelKeyCandidates(teamId, params.allowNameMatching ? teamName : void 0, params.allowNameMatching && teamName ? normalizeChannelSlug(teamName) : void 0),
+		keys: (0, openclaw_plugin_sdk_channel_targets.buildChannelKeyCandidates)(teamId, params.allowNameMatching ? teamName : void 0, params.allowNameMatching && teamName ? (0, openclaw_plugin_sdk_channel_targets.normalizeChannelSlug)(teamName) : void 0),
 		wildcardKey: "*",
-		normalizeKey: normalizeChannelSlug
+		normalizeKey: openclaw_plugin_sdk_channel_targets.normalizeChannelSlug
 	});
 	const teamConfig = teamMatch.entry;
 	const channels = teamConfig?.channels ?? {};
 	const channelAllowlistConfigured = Object.keys(channels).length > 0;
-	const channelMatch = resolveChannelEntryMatchWithFallback({
+	const channelMatch = (0, openclaw_plugin_sdk_channel_targets.resolveChannelEntryMatchWithFallback)({
 		entries: channels,
-		keys: buildChannelKeyCandidates(conversationId, params.allowNameMatching ? channelName : void 0, params.allowNameMatching && channelName ? normalizeChannelSlug(channelName) : void 0),
+		keys: (0, openclaw_plugin_sdk_channel_targets.buildChannelKeyCandidates)(conversationId, params.allowNameMatching ? channelName : void 0, params.allowNameMatching && channelName ? (0, openclaw_plugin_sdk_channel_targets.normalizeChannelSlug)(channelName) : void 0),
 		wildcardKey: "*",
-		normalizeKey: normalizeChannelSlug
+		normalizeKey: openclaw_plugin_sdk_channel_targets.normalizeChannelSlug
 	});
 	const channelConfig = channelMatch.entry;
 	return {
 		teamConfig,
 		channelConfig,
 		allowlistConfigured,
-		allowed: resolveNestedAllowlistDecision({
+		allowed: (0, openclaw_plugin_sdk_channel_targets.resolveNestedAllowlistDecision)({
 			outerConfigured: allowlistConfigured,
 			outerMatched: Boolean(teamConfig),
 			innerConfigured: channelAllowlistConfigured,
@@ -108,82 +188,33 @@ function resolveMSTeamsRouteConfig(params) {
 function resolveMSTeamsGroupToolPolicy(params) {
 	const cfg = params.cfg.channels?.msteams;
 	if (!cfg) return;
-	const groupId = params.groupId?.trim();
-	const groupChannel = params.groupChannel?.trim();
-	const groupSpace = params.groupSpace?.trim();
-	const allowNameMatching = isDangerousNameMatchingEnabled(cfg);
-	const resolved = resolveMSTeamsRouteConfig({
+	const scope = resolveMSTeamsToolPolicyScope({
 		cfg,
-		teamId: groupSpace,
-		teamName: groupSpace,
-		conversationId: groupId,
-		channelName: groupChannel,
-		allowNameMatching
+		groupSpace: params.groupSpace,
+		groupId: params.groupId
+	});
+	const senderScope = {
+		senderId: params.senderId,
+		senderName: params.senderName,
+		senderUsername: params.senderUsername,
+		senderE164: params.senderE164
+	};
+	const resolved = (0, openclaw_plugin_sdk_channel_policy.resolveScopeToolsPolicy)({
+		...scope,
+		...senderScope
+	});
+	if (resolved !== void 0) return resolved;
+	if (scope.path.length > 1) return;
+	return (0, openclaw_plugin_sdk_channel_policy.resolveScopeToolsPolicy)({
+		...resolveMSTeamsCrossTeamScanScope({
+			cfg,
+			groupId: params.groupId
+		}),
+		...senderScope
 	});
-	if (resolved.channelConfig) {
-		const senderPolicy = resolveToolsBySender({
-			toolsBySender: resolved.channelConfig.toolsBySender,
-			senderId: params.senderId,
-			senderName: params.senderName,
-			senderUsername: params.senderUsername,
-			senderE164: params.senderE164
-		});
-		if (senderPolicy) return senderPolicy;
-		if (resolved.channelConfig.tools) return resolved.channelConfig.tools;
-		const teamSenderPolicy = resolveToolsBySender({
-			toolsBySender: resolved.teamConfig?.toolsBySender,
-			senderId: params.senderId,
-			senderName: params.senderName,
-			senderUsername: params.senderUsername,
-			senderE164: params.senderE164
-		});
-		if (teamSenderPolicy) return teamSenderPolicy;
-		return resolved.teamConfig?.tools;
-	}
-	if (resolved.teamConfig) {
-		const teamSenderPolicy = resolveToolsBySender({
-			toolsBySender: resolved.teamConfig.toolsBySender,
-			senderId: params.senderId,
-			senderName: params.senderName,
-			senderUsername: params.senderUsername,
-			senderE164: params.senderE164
-		});
-		if (teamSenderPolicy) return teamSenderPolicy;
-		if (resolved.teamConfig.tools) return resolved.teamConfig.tools;
-	}
-	if (!groupId) return;
-	const channelCandidates = buildChannelKeyCandidates(groupId, allowNameMatching ? groupChannel : void 0, allowNameMatching && groupChannel ? normalizeChannelSlug(groupChannel) : void 0);
-	for (const teamConfig of Object.values(cfg.teams ?? {})) {
-		const match = resolveChannelEntryMatchWithFallback({
-			entries: teamConfig?.channels ?? {},
-			keys: channelCandidates,
-			wildcardKey: "*",
-			normalizeKey: normalizeChannelSlug
-		});
-		if (match.entry) {
-			const senderPolicy = resolveToolsBySender({
-				toolsBySender: match.entry.toolsBySender,
-				senderId: params.senderId,
-				senderName: params.senderName,
-				senderUsername: params.senderUsername,
-				senderE164: params.senderE164
-			});
-			if (senderPolicy) return senderPolicy;
-			if (match.entry.tools) return match.entry.tools;
-			const teamSenderPolicy = resolveToolsBySender({
-				toolsBySender: teamConfig?.toolsBySender,
-				senderId: params.senderId,
-				senderName: params.senderName,
-				senderUsername: params.senderUsername,
-				senderE164: params.senderE164
-			});
-			if (teamSenderPolicy) return teamSenderPolicy;
-			return teamConfig?.tools;
-		}
-	}
 }
 function resolveMSTeamsAllowlistMatch(params) {
-	return resolveAllowlistMatchSimple(params);
+	return (0, openclaw_plugin_sdk_allow_from.resolveAllowlistMatchSimple)(params);
 }
 function resolveMSTeamsReplyPolicy(params) {
 	if (params.isDirectMessage) return {
@@ -214,13 +245,13 @@ const MSTEAMS_PRESENTATION_CAPABILITIES = {
 };
 function buildMSTeamsPresentationCard(params) {
 	const body = [];
-	const text = normalizeOptionalString(params.text);
+	const text = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params.text);
 	if (text) body.push({
 		type: "TextBlock",
 		text,
 		wrap: true
 	});
-	const presentation = adaptMessagePresentationForChannel({
+	const presentation = (0, openclaw_plugin_sdk_interactive_runtime.adaptMessagePresentationForChannel)({
 		presentation: params.presentation,
 		capabilities: MSTEAMS_PRESENTATION_CAPABILITIES
 	});
@@ -255,21 +286,28 @@ function buildMSTeamsPresentationCard(params) {
 			continue;
 		}
 		if (block.type === "buttons") for (const button of block.buttons) {
-			const targetUrl = button.url ?? button.webApp?.url ?? button.web_app?.url;
-			if (targetUrl) {
+			const action = (0, openclaw_plugin_sdk_interactive_runtime.resolveMessagePresentationButtonAction)(button);
+			if (action?.type === "url" || action?.type === "web-app") {
 				actions.push({
 					type: "Action.OpenUrl",
 					title: button.label,
-					url: targetUrl
+					url: action.url
 				});
 				continue;
 			}
-			const value = resolveMessagePresentationControlValue(button);
-			if (value) actions.push({
+			if (action?.type === "command") {
+				actions.push({
+					type: "Action.Submit",
+					title: button.label,
+					data: action.command
+				});
+				continue;
+			}
+			if (action?.type === "callback") actions.push({
 				type: "Action.Submit",
 				title: button.label,
-				data: button.action?.type === "command" ? value : {
-					value,
+				data: {
+					value: action.value,
 					label: button.label
 				}
 			});
@@ -283,18 +321,231 @@ function buildMSTeamsPresentationCard(params) {
 	};
 }
 //#endregion
-//#region extensions/msteams/src/inbound.ts
-/**
-* Decode common HTML entities to plain text.
-*/
-function decodeHtmlEntities(html) {
-	return html.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, "\"").replace(/&#39;/g, "'").replace(/&#x27;/g, "'").replace(/&nbsp;/g, " ").replace(/&amp;/g, "&");
+//#region extensions/msteams/src/read-policy.ts
+function normalizeTarget(raw) {
+	return raw ? require_resolve_allowlist.normalizeMSTeamsMessagingTarget(raw) ?? "" : "";
+}
+function sameAccount(ctx) {
+	const requested = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(ctx.accountId) ?? "default";
+	const requester = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(ctx.requesterAccountId);
+	return requester !== void 0 && requester === requested;
+}
+function isCurrentMSTeamsReadTarget(params) {
+	if ((0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params.ctx.toolContext?.currentChannelProvider)?.toLowerCase() !== "msteams" || !sameAccount(params.ctx)) return false;
+	const candidates = [
+		params.ctx.toolContext?.currentChannelId,
+		params.ctx.toolContext?.currentMessagingTarget,
+		params.ctx.toolContext?.currentGraphChannelId
+	];
+	const target = normalizeTarget(params.target);
+	return candidates.some((candidate) => normalizeTarget(candidate) === target);
+}
+function normalizeUserTarget(target) {
+	return target.replace(/^user:/i, "").trim().toLowerCase();
+}
+function isStableUserId(value) {
+	return /^[0-9a-f-]{16,}$/i.test(value);
+}
+async function resolveAllowedDmTarget(cfg, target) {
+	const teams = cfg.channels?.msteams;
+	if (teams?.dmPolicy === "disabled") return;
+	const userId = normalizeUserTarget(target);
+	if (!userId) return;
+	const normalizedEntries = (teams?.allowFrom ?? []).map((entry) => normalizeUserTarget(entry.replace(/^(msteams|teams):/i, "")));
+	const allowAll = (teams?.dmPolicy ?? "pairing") === "open" || normalizedEntries.includes("*");
+	if (isStableUserId(userId)) return allowAll || normalizedEntries.some((entry) => entry === userId) ? `user:${userId}` : void 0;
+	if (!(0, openclaw_plugin_sdk_dangerous_name_runtime.isDangerousNameMatchingEnabled)(teams)) return;
+	try {
+		const [resolvedTarget, ...resolvedEntries] = await require_resolve_allowlist.resolveMSTeamsUserAllowlist({
+			cfg,
+			entries: [userId, ...normalizedEntries.filter((entry) => entry !== "*")]
+		});
+		if (!resolvedTarget?.resolved || !resolvedTarget.id) return;
+		return allowAll || resolvedEntries.some((entry) => entry.resolved && entry.id?.toLowerCase() === resolvedTarget.id?.toLowerCase()) ? `user:${resolvedTarget.id}` : void 0;
+	} catch {
+		return;
+	}
+}
+async function resolveDirectDmTarget(cfg, target) {
+	if (cfg.channels?.msteams?.dmPolicy === "disabled") return;
+	const userId = normalizeUserTarget(target);
+	if (!userId) return;
+	if (isStableUserId(userId)) return `user:${userId}`;
+	if (!(0, openclaw_plugin_sdk_dangerous_name_runtime.isDangerousNameMatchingEnabled)(cfg.channels?.msteams)) return;
+	try {
+		const [resolved] = await require_resolve_allowlist.resolveMSTeamsUserAllowlist({
+			cfg,
+			entries: [userId]
+		});
+		return resolved?.resolved && resolved.id ? `user:${resolved.id}` : void 0;
+	} catch {
+		return;
+	}
+}
+function resolveMSTeamsReadGroupPolicy(cfg) {
+	const teams = cfg.channels?.msteams;
+	return teams ? teams.groupPolicy ?? (0, openclaw_plugin_sdk_runtime_group_policy.resolveDefaultGroupPolicy)(cfg) ?? "allowlist" : "disabled";
+}
+function isStableChannelKey(value) {
+	return /^[0-9a-f-]{16,}$/i.test(value) || /^19:.+@thread\./i.test(value);
+}
+function isStableGraphTeamId(value) {
+	return /^[0-9a-f-]{16,}$/i.test(value);
+}
+function isStableGraphChannelTarget(target) {
+	const [teamId, channelId] = target.split("/", 2);
+	return Boolean(teamId && channelId && isStableGraphTeamId(teamId) && isStableChannelKey(channelId));
+}
+function hasMutableChannelConfig(cfg) {
+	const teams = cfg.channels?.msteams?.teams ?? {};
+	return Object.entries(teams).some(([teamKey, teamConfig]) => {
+		if (teamKey !== "*" && !isStableChannelKey(teamKey)) return true;
+		return Object.keys(teamConfig?.channels ?? {}).some((channelKey) => channelKey !== "*" && !isStableChannelKey(channelKey));
+	});
+}
+async function resolveConfiguredBotFrameworkTeamKey(cfg, graphTeamId) {
+	const configuredTeams = cfg.channels?.msteams?.teams;
+	if (!configuredTeams) return;
+	const stableConfiguredKeys = Object.keys(configuredTeams).filter((teamKey) => teamKey !== "*" && /^19:.+@thread\./i.test(teamKey));
+	if (stableConfiguredKeys.length === 0) return;
+	const channelResult = await require_resolve_allowlist.listChannelsForTeamWithPageInfo(await require_resolve_allowlist.resolveGraphToken(cfg), graphTeamId);
+	if (channelResult.truncated) return;
+	const channelIds = new Set(channelResult.items.map((channel) => channel.id?.trim()).filter((channelId) => Boolean(channelId)));
+	const matches = stableConfiguredKeys.filter((teamKey) => channelIds.has(teamKey));
+	return matches.length === 1 ? matches[0] : void 0;
+}
+async function resolveStableChannelTarget(cfg, target) {
+	if (isStableGraphChannelTarget(target)) return target;
+	if (!(0, openclaw_plugin_sdk_dangerous_name_runtime.isDangerousNameMatchingEnabled)(cfg.channels?.msteams)) return;
+	try {
+		const [resolved] = await require_resolve_allowlist.resolveMSTeamsChannelAllowlist({
+			cfg,
+			entries: [target]
+		});
+		return resolved?.resolved && resolved.graphTeamId && resolved.channelId ? `${resolved.graphTeamId}/${resolved.channelId}` : void 0;
+	} catch {
+		return;
+	}
 }
+async function resolveAllowedChannelTarget(cfg, target) {
+	const teams = cfg.channels?.msteams;
+	const groupPolicy = resolveMSTeamsReadGroupPolicy(cfg);
+	if (groupPolicy === "disabled") return;
+	const [teamId, channelId] = target.split("/", 2);
+	if (!teamId || !channelId) return;
+	const directRoute = resolveMSTeamsRouteConfig({
+		cfg: teams,
+		teamId,
+		teamName: teamId,
+		conversationId: channelId,
+		channelName: channelId,
+		allowNameMatching: (0, openclaw_plugin_sdk_dangerous_name_runtime.isDangerousNameMatchingEnabled)(teams)
+	});
+	const stableTarget = await resolveStableChannelTarget(cfg, target);
+	if (directRoute.allowed) return stableTarget;
+	if (!directRoute.allowlistConfigured) return groupPolicy === "open" ? stableTarget : void 0;
+	if (!stableTarget || !teams?.teams) return;
+	const [stableTeamId, stableChannelId] = stableTarget.split("/", 2);
+	if (!stableTeamId || !stableChannelId) return;
+	try {
+		const botFrameworkTeamKey = await resolveConfiguredBotFrameworkTeamKey(cfg, stableTeamId);
+		if (botFrameworkTeamKey) {
+			if (resolveMSTeamsRouteConfig({
+				cfg: teams,
+				teamId: botFrameworkTeamKey,
+				conversationId: stableChannelId
+			}).allowed) return stableTarget;
+		}
+		if (!hasMutableChannelConfig(cfg)) return;
+		const resolved = await require_resolve_allowlist.resolveMSTeamsTeamsConfig({
+			cfg,
+			teamIdMode: "graph",
+			teams: teams.teams
+		});
+		return resolveMSTeamsRouteConfig({
+			cfg: {
+				...teams,
+				teams: resolved.teams
+			},
+			teamId: stableTeamId,
+			conversationId: stableChannelId
+		}).allowed ? stableTarget : void 0;
+	} catch {
+		return;
+	}
+}
+function bothUnknownScopesAllowed(cfg) {
+	const teams = cfg.channels?.msteams;
+	return resolveMSTeamsReadGroupPolicy(cfg) === "open" && (teams?.dmPolicy ?? "pairing") === "open";
+}
+async function assertMSTeamsReadTargetAllowed(params) {
+	const target = normalizeTarget(params.target);
+	const isChannel = target.includes("/");
+	const isDm = /^user:/i.test(target);
+	const isChat = require_resolve_allowlist.looksLikeMSTeamsConversationId(target);
+	const current = isCurrentMSTeamsReadTarget({
+		ctx: params.ctx,
+		target
+	});
+	const directOperator = params.ctx.conversationReadOrigin === "direct-operator";
+	const currentChatType = params.ctx.toolContext?.currentChatType;
+	const allowedTarget = directOperator ? isChannel ? resolveMSTeamsReadGroupPolicy(params.cfg) !== "disabled" ? await resolveStableChannelTarget(params.cfg, target) : void 0 : isDm ? await resolveDirectDmTarget(params.cfg, target) : isChat && resolveMSTeamsReadGroupPolicy(params.cfg) !== "disabled" && params.cfg.channels?.msteams?.dmPolicy !== "disabled" ? target : void 0 : current ? isChannel ? resolveMSTeamsReadGroupPolicy(params.cfg) !== "disabled" ? target : void 0 : isDm ? params.cfg.channels?.msteams?.dmPolicy !== "disabled" ? target : void 0 : currentChatType === "direct" ? params.cfg.channels?.msteams?.dmPolicy !== "disabled" ? target : void 0 : currentChatType === "group" || currentChatType === "channel" ? resolveMSTeamsReadGroupPolicy(params.cfg) !== "disabled" ? target : void 0 : resolveMSTeamsReadGroupPolicy(params.cfg) !== "disabled" && params.cfg.channels?.msteams?.dmPolicy !== "disabled" ? target : void 0 : isChannel ? await resolveAllowedChannelTarget(params.cfg, target) : isDm ? await resolveAllowedDmTarget(params.cfg, target) : isChat ? bothUnknownScopesAllowed(params.cfg) ? target : void 0 : false;
+	if (!allowedTarget) throw new openclaw_plugin_sdk_channel_actions.ToolAuthorizationError("Microsoft Teams read target is not allowed.");
+	return allowedTarget;
+}
+async function assertMSTeamsTeamEnumerationAllowed(params) {
+	const teams = params.cfg.channels?.msteams;
+	const groupPolicy = resolveMSTeamsReadGroupPolicy(params.cfg);
+	if (groupPolicy === "disabled") throw new openclaw_plugin_sdk_channel_actions.ToolAuthorizationError("Microsoft Teams channel list is not allowed.");
+	const directRoute = resolveMSTeamsRouteConfig({
+		cfg: teams,
+		teamId: params.teamId,
+		teamName: params.teamId,
+		conversationId: "__openclaw_all_channels__",
+		allowNameMatching: (0, openclaw_plugin_sdk_dangerous_name_runtime.isDangerousNameMatchingEnabled)(teams)
+	});
+	const stableTeamId = isStableGraphTeamId(params.teamId) ? params.teamId : (0, openclaw_plugin_sdk_dangerous_name_runtime.isDangerousNameMatchingEnabled)(teams) ? (await require_resolve_allowlist.resolveMSTeamsChannelAllowlist({
+		cfg: params.cfg,
+		entries: [params.teamId]
+	}))[0]?.graphTeamId : void 0;
+	if (!stableTeamId) throw new openclaw_plugin_sdk_channel_actions.ToolAuthorizationError("Microsoft Teams channel list requires access to every channel in the team.");
+	if (params.ctx?.conversationReadOrigin === "direct-operator") return stableTeamId;
+	let allowed = directRoute.allowlistConfigured ? directRoute.allowed : groupPolicy === "open";
+	if (!allowed && teams?.teams) try {
+		const botFrameworkTeamKey = await resolveConfiguredBotFrameworkTeamKey(params.cfg, stableTeamId);
+		if (botFrameworkTeamKey) allowed = resolveMSTeamsRouteConfig({
+			cfg: teams,
+			teamId: botFrameworkTeamKey,
+			conversationId: "__openclaw_all_channels__"
+		}).allowed;
+		if (!allowed && hasMutableChannelConfig(params.cfg)) {
+			const resolved = await require_resolve_allowlist.resolveMSTeamsTeamsConfig({
+				cfg: params.cfg,
+				teamIdMode: "graph",
+				teams: teams.teams
+			});
+			allowed = resolveMSTeamsRouteConfig({
+				cfg: {
+					...teams,
+					teams: resolved.teams
+				},
+				teamId: stableTeamId,
+				conversationId: "__openclaw_all_channels__"
+			}).allowed;
+		}
+	} catch {
+		allowed = false;
+	}
+	if (!allowed) throw new openclaw_plugin_sdk_channel_actions.ToolAuthorizationError("Microsoft Teams channel list requires access to every channel in the team.");
+	return stableTeamId;
+}
+//#endregion
+//#region extensions/msteams/src/inbound.ts
 /**
 * Strip HTML tags, preserving text content.
 */
 function htmlToPlainText(html) {
-	return decodeHtmlEntities(html.replace(/<[^>]*>/g, " ").replace(/\s+/g, " ").trim());
+	return (0, openclaw_plugin_sdk_html_entity_runtime.decodeHtmlEntities)(html.replace(/<[^>]*>/g, " ")).replaceAll("\xA0", " ").replace(/\s+/g, " ").trim();
 }
 /**
 * Extract quote info from MS Teams HTML reply attachments.
@@ -312,11 +563,13 @@ function extractMSTeamsQuoteInfo(attachments) {
 		if (!content.includes("http://schema.skype.com/Reply")) continue;
 		const senderMatch = /<strong[^>]*itemprop=["']mri["'][^>]*>(.*?)<\/strong>/i.exec(content);
 		const sender = senderMatch?.[1] ? htmlToPlainText(senderMatch[1]) : void 0;
-		const bodyMatch = /<p[^>]*itemprop=["']copy["'][^>]*>(.*?)<\/p>/is.exec(content);
+		const bodyMatch = /<p[^>]*itemprop=["']copy["'][^>]*>(.*?)<\/p>/is.exec(content) ?? /<p[^>]*itemprop=["']preview["'][^>]*>(.*?)<\/p>/is.exec(content);
 		const body = bodyMatch?.[1] ? htmlToPlainText(bodyMatch[1]) : void 0;
+		const id = /<blockquote[^>]*\bitemid=["']([^"']+)["'][^>]*>/is.exec(content)?.[1]?.trim() || void 0;
 		if (body) return {
 			sender: sender ?? "unknown",
-			body
+			body,
+			...id ? { id } : {}
 		};
 	}
 }
@@ -337,22 +590,6 @@ function parseMSTeamsActivityTimestamp(value) {
 function stripMSTeamsMentionTags(text) {
 	return text.replace(/<at[^>]*>.*?<\/at>/gi, "").trim();
 }
-/**
-* Bot Framework uses 'a:xxx' conversation IDs for personal chats, but Graph API
-* requires the '19:{userId}_{botAppId}@unq.gbl.spaces' format.
-*
-* This is the documented Graph API format for 1:1 chat thread IDs between a user
-* and a bot/app. See Microsoft docs "Get chat between user and app":
-* https://learn.microsoft.com/en-us/graph/api/userscopeteamsappinstallation-get-chat
-*
-* The format is only synthesized when the Bot Framework conversation ID starts with
-* 'a:' (the opaque format used by BF but not recognized by Graph). If the ID already
-* has the '19:...' Graph format, it is passed through unchanged.
-*/
-function translateMSTeamsDmConversationIdForGraph(params) {
-	const { isDirectMessage, conversationId, aadObjectId, appId } = params;
-	return isDirectMessage && conversationId.startsWith("a:") && aadObjectId && appId ? `19:${aadObjectId}_${appId}@unq.gbl.spaces` : conversationId;
-}
 function wasMSTeamsBotMentioned(activity) {
 	const botId = activity.recipient?.id;
 	if (!botId) return false;
@@ -364,7 +601,7 @@ const TRAILING_THREAD_SUFFIX = /(?::thread:[^:]+)+$/;
 function resolveMSTeamsRouteSessionKey(params) {
 	const channelThreadId = params.isChannel ? params.conversationMessageId ?? params.replyToId ?? void 0 : void 0;
 	const cleanBase = params.baseSessionKey.replace(TRAILING_THREAD_SUFFIX, "");
-	return resolveThreadSessionKeys({
+	return (0, openclaw_plugin_sdk_routing.resolveThreadSessionKeys)({
 		baseSessionKey: cleanBase,
 		threadId: channelThreadId,
 		parentSessionKey: channelThreadId ? cleanBase : void 0
@@ -373,10 +610,10 @@ function resolveMSTeamsRouteSessionKey(params) {
 //#endregion
 //#region extensions/msteams/src/session-route.ts
 function resolveMSTeamsOutboundSessionRoute(params) {
-	const trimmed = stripChannelTargetPrefix(params.target, "msteams", "teams");
+	const trimmed = (0, openclaw_plugin_sdk_channel_core.stripChannelTargetPrefix)(params.target, "msteams", "teams");
 	if (!trimmed) return null;
-	const isUser = normalizeLowercaseStringOrEmpty(trimmed).startsWith("user:");
-	const rawId = stripTargetKindPrefix(trimmed);
+	const isUser = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(trimmed).startsWith("user:");
+	const rawId = (0, openclaw_plugin_sdk_channel_core.stripTargetKindPrefix)(trimmed);
 	if (!rawId) return null;
 	const conversationId = normalizeMSTeamsConversationId(rawId);
 	const isChannel = !isUser && /@thread\.tacv2/i.test(conversationId);
@@ -386,7 +623,7 @@ function resolveMSTeamsOutboundSessionRoute(params) {
 	const resolvedKind = params.resolvedTarget?.kind;
 	const isCanonicalUserId = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(conversationId);
 	const recipientSessionExact = (isUser || resolvedKind === "user") && isCanonicalUserId || (isChannel ? channelThreadId !== void 0 : resolvedKind === "group");
-	const route = buildChannelOutboundSessionRoute({
+	const route = (0, openclaw_plugin_sdk_channel_core.buildChannelOutboundSessionRoute)({
 		cfg: params.cfg,
 		agentId: params.agentId,
 		channel: "msteams",
@@ -436,26 +673,26 @@ const MSTEAMS_GROUP_MANAGEMENT_ACTIONS = /* @__PURE__ */ new Set([
 	"removeParticipant",
 	"renameGroup"
 ]);
-const collectMSTeamsSecurityWarnings = createAllowlistProviderGroupPolicyWarningCollector({
+const collectMSTeamsSecurityWarnings = (0, openclaw_plugin_sdk_channel_policy.createAllowlistProviderGroupPolicyWarningCollector)({
 	providerConfigPresent: (cfg) => cfg.channels?.msteams !== void 0,
 	resolveGroupPolicy: ({ cfg }) => cfg.channels?.msteams?.groupPolicy,
 	collect: ({ groupPolicy }) => groupPolicy === "open" ? ["- MS Teams groups: groupPolicy=\"open\" allows any member to trigger (mention-gated). Set channels.msteams.groupPolicy=\"allowlist\" + channels.msteams.groupAllowFrom to restrict senders."] : []
 });
-const loadMSTeamsChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-Bwu6Tjhf.js"), "msTeamsChannelRuntime");
+const loadMSTeamsChannelRuntime = (0, openclaw_plugin_sdk_lazy_runtime.createLazyRuntimeNamedExport)(() => Promise.resolve().then(() => require("./channel.runtime-DQTOzzet.cjs")), "msTeamsChannelRuntime");
 const resolveMSTeamsChannelConfig = (cfg) => ({
 	allowFrom: cfg.channels?.msteams?.allowFrom,
 	defaultTo: cfg.channels?.msteams?.defaultTo
 });
-const msteamsConfigAdapter = createTopLevelChannelConfigAdapter({
+const msteamsConfigAdapter = (0, openclaw_plugin_sdk_channel_config_helpers.createTopLevelChannelConfigAdapter)({
 	sectionKey: "msteams",
 	resolveAccount: (cfg) => ({
-		accountId: DEFAULT_ACCOUNT_ID,
+		accountId: openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID,
 		enabled: cfg.channels?.msteams?.enabled !== false,
-		configured: Boolean(resolveMSTeamsCredentials(cfg.channels?.msteams))
+		configured: Boolean(require_resolve_allowlist.resolveMSTeamsCredentials(cfg.channels?.msteams))
 	}),
 	resolveAccessorAccount: ({ cfg }) => resolveMSTeamsChannelConfig(cfg),
 	resolveAllowFrom: (account) => account.allowFrom,
-	formatAllowFrom: (allowFrom) => formatAllowFromLowercase({ allowFrom }),
+	formatAllowFrom: (allowFrom) => (0, openclaw_plugin_sdk_allow_from.formatAllowFromLowercase)({ allowFrom }),
 	resolveDefaultTo: (account) => account.defaultTo
 });
 function jsonActionResult(data) {
@@ -526,17 +763,28 @@ function requireMSTeamsGroupManagementAuthorization(ctx) {
 function resolveActionTarget(params, currentChannelId) {
 	return typeof params.to === "string" ? params.to.trim() : typeof params.target === "string" ? params.target.trim() : currentChannelId?.trim() ?? "";
 }
-function resolveGraphActionTarget(params, currentChannelId, currentGraphChannelId) {
-	return resolveActionTarget(params, currentGraphChannelId ?? currentChannelId);
+function resolveGraphActionTarget(params, currentChannelId, currentGraphChannelId, currentChatType) {
+	const explicitTarget = resolveActionTarget(params);
+	const currentChannelTarget = currentChannelId?.trim();
+	const currentGraphTarget = currentGraphChannelId?.trim();
+	if (explicitTarget) {
+		if (currentChatType === "channel" && currentGraphTarget && currentChannelTarget && explicitTarget === currentChannelTarget) return currentGraphTarget;
+		return explicitTarget;
+	}
+	if (currentGraphTarget) return currentGraphTarget;
+	return currentChatType === "channel" ? "" : currentChannelTarget ?? "";
+}
+function resolveCurrentGraphActionTarget(toolContext) {
+	return (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(toolContext?.currentGraphChannelId) ?? (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(toolContext?.currentMessagingTarget);
 }
 function resolveActionMessageId(params) {
-	return normalizeOptionalString(params.messageId) ?? "";
+	return (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params.messageId) ?? "";
 }
 function resolveActionPinnedMessageId(params) {
 	return typeof params.pinnedMessageId === "string" ? params.pinnedMessageId.trim() : typeof params.messageId === "string" ? params.messageId.trim() : "";
 }
 function resolveActionQuery(params) {
-	return normalizeOptionalString(params.query) ?? "";
+	return (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params.query) ?? "";
 }
 function resolveActionContent(params) {
 	return typeof params.text === "string" ? params.text : typeof params.content === "string" ? params.content : typeof params.message === "string" ? params.message : "";
@@ -555,12 +803,12 @@ function resolveActionUploadFilePath(params) {
 	}
 }
 function resolveRequiredActionTarget(params) {
-	const to = params.graphOnly ? resolveGraphActionTarget(params.toolParams, params.currentChannelId, params.currentGraphChannelId) : resolveActionTarget(params.toolParams, params.currentChannelId);
+	const to = params.graphOnly ? resolveGraphActionTarget(params.toolParams, params.currentChannelId, params.currentGraphChannelId, params.currentChatType) : resolveActionTarget(params.toolParams, params.currentChannelId);
 	if (!to) return actionError(`${params.actionLabel} requires a target (to).`);
 	return to;
 }
 function resolveRequiredActionMessageTarget(params) {
-	const to = params.graphOnly ? resolveGraphActionTarget(params.toolParams, params.currentChannelId, params.currentGraphChannelId) : resolveActionTarget(params.toolParams, params.currentChannelId);
+	const to = params.graphOnly ? resolveGraphActionTarget(params.toolParams, params.currentChannelId, params.currentGraphChannelId, params.currentChatType) : resolveActionTarget(params.toolParams, params.currentChannelId);
 	const messageId = resolveActionMessageId(params.toolParams);
 	if (!to || !messageId) return actionError(`${params.actionLabel} requires a target (to) and messageId.`);
 	return {
@@ -569,7 +817,7 @@ function resolveRequiredActionMessageTarget(params) {
 	};
 }
 function resolveRequiredActionPinnedMessageTarget(params) {
-	const to = params.graphOnly ? resolveGraphActionTarget(params.toolParams, params.currentChannelId, params.currentGraphChannelId) : resolveActionTarget(params.toolParams, params.currentChannelId);
+	const to = params.graphOnly ? resolveGraphActionTarget(params.toolParams, params.currentChannelId, params.currentGraphChannelId, params.currentChatType) : resolveActionTarget(params.toolParams, params.currentChannelId);
 	const pinnedMessageId = resolveActionPinnedMessageId(params.toolParams);
 	if (!to || !pinnedMessageId) return actionError(`${params.actionLabel} requires a target (to) and pinnedMessageId.`);
 	return {
@@ -583,6 +831,7 @@ async function runWithRequiredActionTarget(params) {
 		toolParams: params.toolParams,
 		currentChannelId: params.currentChannelId,
 		currentGraphChannelId: params.currentGraphChannelId,
+		currentChatType: params.currentChatType,
 		graphOnly: params.graphOnly
 	});
 	if (typeof to !== "string") return to;
@@ -594,6 +843,7 @@ async function runWithRequiredActionMessageTarget(params) {
 		toolParams: params.toolParams,
 		currentChannelId: params.currentChannelId,
 		currentGraphChannelId: params.currentGraphChannelId,
+		currentChatType: params.currentChatType,
 		graphOnly: params.graphOnly
 	});
 	if ("isError" in target) return target;
@@ -605,13 +855,14 @@ async function runWithRequiredActionPinnedMessageTarget(params) {
 		toolParams: params.toolParams,
 		currentChannelId: params.currentChannelId,
 		currentGraphChannelId: params.currentGraphChannelId,
+		currentChatType: params.currentChatType,
 		graphOnly: params.graphOnly
 	});
 	if ("isError" in target) return target;
 	return await params.run(target);
 }
 function describeMSTeamsMessageTool({ cfg }) {
-	const enabled = cfg.channels?.msteams?.enabled !== false && Boolean(resolveMSTeamsCredentials(cfg.channels?.msteams));
+	const enabled = cfg.channels?.msteams?.enabled !== false && Boolean(require_resolve_allowlist.resolveMSTeamsCredentials(cfg.channels?.msteams));
 	return {
 		actions: enabled ? [
 			"upload-file",
@@ -635,13 +886,13 @@ function describeMSTeamsMessageTool({ cfg }) {
 		capabilities: enabled ? ["presentation"] : [],
 		schema: enabled ? {
 			actions: ["unpin"],
-			properties: { pinnedMessageId: Type.Optional(Type.String({ description: "Pinned message resource ID for unpin (from pin or list-pins, not the chat message ID)." })) }
+			properties: { pinnedMessageId: typebox.Type.Optional(typebox.Type.String({ description: "Pinned message resource ID for unpin (from pin or list-pins, not the chat message ID)." })) }
 		} : null
 	};
 }
 const msteamsChannelOutbound = {
 	deliveryMode: "direct",
-	chunker: chunkTextForOutbound,
+	chunker: openclaw_plugin_sdk_text_chunking.chunkTextForOutbound,
 	chunkerMode: "markdown",
 	textChunkLimit: 4e3,
 	pollMaxOptions: 12,
@@ -652,7 +903,7 @@ const msteamsChannelOutbound = {
 		messageSendingHooks: true
 	} },
 	presentationCapabilities: MSTEAMS_PRESENTATION_CAPABILITIES,
-	...createRuntimeOutboundDelegates({
+	...(0, openclaw_plugin_sdk_channel_outbound.createRuntimeOutboundDelegates)({
 		getRuntime: loadMSTeamsChannelRuntime,
 		renderPresentation: { resolve: (runtime) => runtime.msteamsOutbound.renderPresentation },
 		sendPayload: { resolve: (runtime) => runtime.msteamsOutbound.sendPayload },
@@ -661,7 +912,7 @@ const msteamsChannelOutbound = {
 		sendPoll: { resolve: (runtime) => runtime.msteamsOutbound.sendPoll }
 	})
 };
-const msteamsMessageAdapter = createChannelMessageAdapterFromOutbound({
+const msteamsMessageAdapter = (0, openclaw_plugin_sdk_channel_outbound.createChannelMessageAdapterFromOutbound)({
 	id: "msteams",
 	outbound: msteamsChannelOutbound,
 	live: {
@@ -678,14 +929,14 @@ const msteamsMessageAdapter = createChannelMessageAdapterFromOutbound({
 		} }
 	}
 });
-const msteamsPlugin = createChatChannelPlugin({
+const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlugin)({
 	base: {
 		id: "msteams",
 		meta: {
 			...meta,
 			aliases: [...meta.aliases]
 		},
-		setupWizard: msteamsSetupWizard,
+		setupWizard: require_setup_surface.msteamsSetupWizard,
 		capabilities: {
 			chatTypes: [
 				"direct",
@@ -703,11 +954,11 @@ const msteamsPlugin = createChatChannelPlugin({
 		agentPrompt: { messageToolHints: () => ["- Adaptive Cards supported. Use `action=send` with `card={type,version,body}` to send rich cards.", "- MSTeams targeting: omit `target` to reply to the current conversation (auto-inferred). Explicit targets: `user:ID` or `user:Display Name` (requires Graph API) for DMs, `conversation:19:...@thread.tacv2` for groups/channels. Prefer IDs over display names for speed."] },
 		groups: { resolveToolPolicy: resolveMSTeamsGroupToolPolicy },
 		reload: { configPrefixes: ["channels.msteams"] },
-		configSchema: MSTeamsChannelConfigSchema,
+		configSchema: require_config_schema.MSTeamsChannelConfigSchema,
 		config: {
 			...msteamsConfigAdapter,
-			isConfigured: (_account, cfg) => Boolean(resolveMSTeamsCredentials(cfg.channels?.msteams)),
-			describeAccount: (account) => describeAccountSnapshot({
+			isConfigured: (_account, cfg) => Boolean(require_resolve_allowlist.resolveMSTeamsCredentials(cfg.channels?.msteams)),
+			describeAccount: (account) => (0, openclaw_plugin_sdk_account_helpers.describeAccountSnapshot)({
 				account,
 				configured: account.configured
 			})
@@ -720,20 +971,20 @@ const msteamsPlugin = createChatChannelPlugin({
 			warnOnEmptyGroupSenderAllowlist: true,
 			collectMutableAllowlistWarnings: collectMSTeamsMutableAllowlistWarnings
 		},
-		setup: msteamsSetupAdapter,
+		setup: require_setup_surface.msteamsSetupAdapter,
 		messaging: {
 			targetPrefixes: ["msteams", "teams"],
-			normalizeTarget: normalizeMSTeamsMessagingTarget,
+			normalizeTarget: require_resolve_allowlist.normalizeMSTeamsMessagingTarget,
 			resolveOutboundSessionRoute: (params) => resolveMSTeamsOutboundSessionRoute(params),
 			targetResolver: {
-				looksLikeId: (raw) => looksLikeMSTeamsTargetId(raw),
+				looksLikeId: (raw) => require_resolve_allowlist.looksLikeMSTeamsTargetId(raw),
 				hint: "<conversationId|user:ID|conversation:ID>"
 			}
 		},
 		message: msteamsMessageAdapter,
-		directory: createChannelDirectoryAdapter({
+		directory: (0, openclaw_plugin_sdk_directory_runtime.createChannelDirectoryAdapter)({
 			self: async ({ cfg }) => {
-				const creds = resolveMSTeamsCredentials(cfg.channels?.msteams);
+				const creds = require_resolve_allowlist.resolveMSTeamsCredentials(cfg.channels?.msteams);
 				if (!creds) return null;
 				return {
 					kind: "user",
@@ -741,26 +992,26 @@ const msteamsPlugin = createChatChannelPlugin({
 					name: creds.appId
 				};
 			},
-			listPeers: async ({ cfg, query, limit }) => listDirectoryEntriesFromSources({
+			listPeers: async ({ cfg, query, limit }) => (0, openclaw_plugin_sdk_directory_runtime.listDirectoryEntriesFromSources)({
 				kind: "user",
 				sources: [cfg.channels?.msteams?.allowFrom ?? [], Object.keys(cfg.channels?.msteams?.dms ?? {})],
 				query,
 				limit,
 				normalizeId: (raw) => {
-					const normalized = normalizeMSTeamsMessagingTarget(raw) ?? raw;
+					const normalized = require_resolve_allowlist.normalizeMSTeamsMessagingTarget(raw) ?? raw;
 					const lowered = normalized.toLowerCase();
 					if (lowered.startsWith("user:") || lowered.startsWith("conversation:")) return normalized;
 					return `user:${normalized}`;
 				}
 			}),
-			listGroups: async ({ cfg, query, limit }) => listDirectoryEntriesFromSources({
+			listGroups: async ({ cfg, query, limit }) => (0, openclaw_plugin_sdk_directory_runtime.listDirectoryEntriesFromSources)({
 				kind: "group",
 				sources: [Object.values(cfg.channels?.msteams?.teams ?? {}).flatMap((team) => Object.keys(team.channels ?? {}))],
 				query,
 				limit,
 				normalizeId: (raw) => `conversation:${raw.replace(/^conversation:/i, "").trim()}`
 			}),
-			...createRuntimeDirectoryLiveAdapter({
+			...(0, openclaw_plugin_sdk_directory_runtime.createRuntimeDirectoryLiveAdapter)({
 				getRuntime: loadMSTeamsChannelRuntime,
 				listPeersLive: (runtime) => runtime.listMSTeamsDirectoryPeersLive,
 				listGroupsLive: (runtime) => runtime.listMSTeamsDirectoryGroupsLive
@@ -774,7 +1025,7 @@ const msteamsPlugin = createChatChannelPlugin({
 				name: void 0,
 				note: void 0
 			}));
-			const stripPrefix = (value) => normalizeMSTeamsUserInput(value);
+			const stripPrefix = (value) => require_resolve_allowlist.normalizeMSTeamsUserInput(value);
 			const markPendingLookupFailed = (pending) => {
 				pending.forEach(({ index }) => {
 					const entry = results[index];
@@ -814,7 +1065,7 @@ const msteamsPlugin = createChatChannelPlugin({
 						index
 					});
 				});
-				await resolvePending(pending, (entries) => resolveMSTeamsUserAllowlist({
+				await resolvePending(pending, (entries) => require_resolve_allowlist.resolveMSTeamsUserAllowlist({
 					cfg,
 					entries
 				}), (target, entry) => {
@@ -832,14 +1083,14 @@ const msteamsPlugin = createChatChannelPlugin({
 					entry.note = "empty input";
 					return;
 				}
-				const conversationId = parseMSTeamsConversationId(trimmed);
+				const conversationId = require_resolve_allowlist.parseMSTeamsConversationId(trimmed);
 				if (conversationId !== null) {
 					entry.resolved = Boolean(conversationId);
 					entry.id = conversationId || void 0;
 					entry.note = conversationId ? "conversation id" : "empty conversation id";
 					return;
 				}
-				const parsed = parseMSTeamsTeamChannelInput(trimmed);
+				const parsed = require_resolve_allowlist.parseMSTeamsTeamChannelInput(trimmed);
 				if (!parsed.team) {
 					entry.note = "missing team";
 					return;
@@ -851,7 +1102,7 @@ const msteamsPlugin = createChatChannelPlugin({
 					index
 				});
 			});
-			await resolvePending(pending, (entries) => resolveMSTeamsChannelAllowlist({
+			await resolvePending(pending, (entries) => require_resolve_allowlist.resolveMSTeamsChannelAllowlist({
 				cfg,
 				entries
 			}), (target, entry) => {
@@ -875,13 +1126,13 @@ const msteamsPlugin = createChatChannelPlugin({
 		} },
 		actions: {
 			describeMessageTool: describeMSTeamsMessageTool,
-			requiresTrustedRequesterSender: ({ action, toolContext }) => normalizeOptionalString(toolContext?.currentChannelProvider)?.toLowerCase() === "msteams" && MSTEAMS_GROUP_MANAGEMENT_ACTIONS.has(action),
+			requiresTrustedRequesterSender: ({ action, toolContext }) => (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(toolContext?.currentChannelProvider)?.toLowerCase() === "msteams" && MSTEAMS_GROUP_MANAGEMENT_ACTIONS.has(action),
 			handleAction: async (ctx) => {
 				if (MSTEAMS_GROUP_MANAGEMENT_ACTIONS.has(ctx.action)) {
 					const authError = requireMSTeamsGroupManagementAuthorization(ctx);
 					if (authError) return authError;
 				}
-				const presentation = ctx.action === "send" ? normalizeMessagePresentation(ctx.params.presentation) : void 0;
+				const presentation = ctx.action === "send" ? (0, openclaw_plugin_sdk_interactive_runtime.normalizeMessagePresentation)(ctx.params.presentation) : void 0;
 				if (ctx.action === "send" && presentation) {
 					const card = buildMSTeamsPresentationCard({
 						presentation,
@@ -952,10 +1203,15 @@ const msteamsPlugin = createChatChannelPlugin({
 						toolParams: ctx.params,
 						currentChannelId: ctx.toolContext?.currentChannelId,
 						run: async (target) => {
+							const to = await assertMSTeamsReadTargetAllowed({
+								cfg: ctx.cfg,
+								ctx,
+								target: target.to
+							});
 							const { editMessageMSTeams } = await loadMSTeamsChannelRuntime();
 							return jsonMSTeamsConversationResult((await editMessageMSTeams({
 								cfg: ctx.cfg,
-								to: target.to,
+								to,
 								activityId: target.messageId,
 								text: content
 							})).conversationId);
@@ -967,10 +1223,15 @@ const msteamsPlugin = createChatChannelPlugin({
 					toolParams: ctx.params,
 					currentChannelId: ctx.toolContext?.currentChannelId,
 					run: async (target) => {
+						const to = await assertMSTeamsReadTargetAllowed({
+							cfg: ctx.cfg,
+							ctx,
+							target: target.to
+						});
 						const { deleteMessageMSTeams } = await loadMSTeamsChannelRuntime();
 						return jsonMSTeamsConversationResult((await deleteMessageMSTeams({
 							cfg: ctx.cfg,
-							to: target.to,
+							to,
 							activityId: target.messageId
 						})).conversationId);
 					}
@@ -979,13 +1240,19 @@ const msteamsPlugin = createChatChannelPlugin({
 					actionLabel: "Read",
 					toolParams: ctx.params,
 					currentChannelId: ctx.toolContext?.currentChannelId,
-					currentGraphChannelId: ctx.toolContext?.currentGraphChannelId,
+					currentGraphChannelId: resolveCurrentGraphActionTarget(ctx.toolContext),
+					currentChatType: ctx.toolContext?.currentChatType,
 					graphOnly: true,
 					run: async (target) => {
+						const to = await assertMSTeamsReadTargetAllowed({
+							cfg: ctx.cfg,
+							ctx,
+							target: target.to
+						});
 						const { getMessageMSTeams } = await loadMSTeamsChannelRuntime();
 						return jsonMSTeamsOkActionResult("read", { message: await getMessageMSTeams({
 							cfg: ctx.cfg,
-							to: target.to,
+							to,
 							messageId: target.messageId
 						}) });
 					}
@@ -994,13 +1261,19 @@ const msteamsPlugin = createChatChannelPlugin({
 					actionLabel: "Pin",
 					toolParams: ctx.params,
 					currentChannelId: ctx.toolContext?.currentChannelId,
-					currentGraphChannelId: ctx.toolContext?.currentGraphChannelId,
+					currentGraphChannelId: resolveCurrentGraphActionTarget(ctx.toolContext),
+					currentChatType: ctx.toolContext?.currentChatType,
 					graphOnly: true,
 					run: async (target) => {
+						const to = await assertMSTeamsReadTargetAllowed({
+							cfg: ctx.cfg,
+							ctx,
+							target: target.to
+						});
 						const { pinMessageMSTeams } = await loadMSTeamsChannelRuntime();
 						return jsonMSTeamsActionResult("pin", await pinMessageMSTeams({
 							cfg: ctx.cfg,
-							to: target.to,
+							to,
 							messageId: target.messageId
 						}));
 					}
@@ -1009,13 +1282,19 @@ const msteamsPlugin = createChatChannelPlugin({
 					actionLabel: "Unpin",
 					toolParams: ctx.params,
 					currentChannelId: ctx.toolContext?.currentChannelId,
-					currentGraphChannelId: ctx.toolContext?.currentGraphChannelId,
+					currentGraphChannelId: resolveCurrentGraphActionTarget(ctx.toolContext),
+					currentChatType: ctx.toolContext?.currentChatType,
 					graphOnly: true,
 					run: async (target) => {
+						const to = await assertMSTeamsReadTargetAllowed({
+							cfg: ctx.cfg,
+							ctx,
+							target: target.to
+						});
 						const { unpinMessageMSTeams } = await loadMSTeamsChannelRuntime();
 						return jsonMSTeamsActionResult("unpin", await unpinMessageMSTeams({
 							cfg: ctx.cfg,
-							to: target.to,
+							to,
 							pinnedMessageId: target.pinnedMessageId
 						}));
 					}
@@ -1024,13 +1303,19 @@ const msteamsPlugin = createChatChannelPlugin({
 					actionLabel: "List-pins",
 					toolParams: ctx.params,
 					currentChannelId: ctx.toolContext?.currentChannelId,
-					currentGraphChannelId: ctx.toolContext?.currentGraphChannelId,
+					currentGraphChannelId: resolveCurrentGraphActionTarget(ctx.toolContext),
+					currentChatType: ctx.toolContext?.currentChatType,
 					graphOnly: true,
 					run: async (to) => {
+						const allowedTarget = await assertMSTeamsReadTargetAllowed({
+							cfg: ctx.cfg,
+							ctx,
+							target: to
+						});
 						const { listPinsMSTeams } = await loadMSTeamsChannelRuntime();
 						return jsonMSTeamsOkActionResult("list-pins", await listPinsMSTeams({
 							cfg: ctx.cfg,
-							to
+							to: allowedTarget
 						}));
 					}
 				});
@@ -1038,7 +1323,8 @@ const msteamsPlugin = createChatChannelPlugin({
 					actionLabel: "React",
 					toolParams: ctx.params,
 					currentChannelId: ctx.toolContext?.currentChannelId,
-					currentGraphChannelId: ctx.toolContext?.currentGraphChannelId,
+					currentGraphChannelId: resolveCurrentGraphActionTarget(ctx.toolContext),
+					currentChatType: ctx.toolContext?.currentChatType,
 					graphOnly: true,
 					run: async (target) => {
 						const emoji = typeof ctx.params.emoji === "string" ? ctx.params.emoji.trim() : "";
@@ -1054,6 +1340,11 @@ const msteamsPlugin = createChatChannelPlugin({
 								validTypes: [...MSTEAMS_REACTION_TYPES]
 							}
 						};
+						const to = await assertMSTeamsReadTargetAllowed({
+							cfg: ctx.cfg,
+							ctx,
+							target: target.to
+						});
 						if (remove) {
 							const { unreactMessageMSTeams } = await loadMSTeamsChannelRuntime();
 							return jsonMSTeamsActionResult("react", {
@@ -1061,7 +1352,7 @@ const msteamsPlugin = createChatChannelPlugin({
 								reactionType: emoji,
 								...await unreactMessageMSTeams({
 									cfg: ctx.cfg,
-									to: target.to,
+									to,
 									messageId: target.messageId,
 									reactionType: emoji
 								})
@@ -1072,7 +1363,7 @@ const msteamsPlugin = createChatChannelPlugin({
 							reactionType: emoji,
 							...await reactMessageMSTeams({
 								cfg: ctx.cfg,
-								to: target.to,
+								to,
 								messageId: target.messageId,
 								reactionType: emoji
 							})
@@ -1083,13 +1374,19 @@ const msteamsPlugin = createChatChannelPlugin({
 					actionLabel: "Reactions",
 					toolParams: ctx.params,
 					currentChannelId: ctx.toolContext?.currentChannelId,
-					currentGraphChannelId: ctx.toolContext?.currentGraphChannelId,
+					currentGraphChannelId: resolveCurrentGraphActionTarget(ctx.toolContext),
+					currentChatType: ctx.toolContext?.currentChatType,
 					graphOnly: true,
 					run: async (target) => {
+						const to = await assertMSTeamsReadTargetAllowed({
+							cfg: ctx.cfg,
+							ctx,
+							target: target.to
+						});
 						const { listReactionsMSTeams } = await loadMSTeamsChannelRuntime();
 						return jsonMSTeamsOkActionResult("reactions", await listReactionsMSTeams({
 							cfg: ctx.cfg,
-							to: target.to,
+							to,
 							messageId: target.messageId
 						}));
 					}
@@ -1098,9 +1395,15 @@ const msteamsPlugin = createChatChannelPlugin({
 					actionLabel: "Search",
 					toolParams: ctx.params,
 					currentChannelId: ctx.toolContext?.currentChannelId,
-					currentGraphChannelId: ctx.toolContext?.currentGraphChannelId,
+					currentGraphChannelId: resolveCurrentGraphActionTarget(ctx.toolContext),
+					currentChatType: ctx.toolContext?.currentChatType,
 					graphOnly: true,
 					run: async (to) => {
+						const allowedTarget = await assertMSTeamsReadTargetAllowed({
+							cfg: ctx.cfg,
+							ctx,
+							target: to
+						});
 						const query = resolveActionQuery(ctx.params);
 						if (!query) return actionError("Search requires a target (to) and query.");
 						const limit = typeof ctx.params.limit === "number" ? ctx.params.limit : void 0;
@@ -1108,7 +1411,7 @@ const msteamsPlugin = createChatChannelPlugin({
 						const { searchMessagesMSTeams } = await loadMSTeamsChannelRuntime();
 						return jsonMSTeamsOkActionResult("search", await searchMessagesMSTeams({
 							cfg: ctx.cfg,
-							to,
+							to: allowedTarget,
 							query,
 							from: from || void 0,
 							limit
@@ -1116,32 +1419,64 @@ const msteamsPlugin = createChatChannelPlugin({
 					}
 				});
 				if (ctx.action === "member-info") {
-					const userId = normalizeOptionalString(ctx.params.userId) ?? "";
+					const userId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(ctx.params.userId) ?? "";
 					if (!userId) return actionError("member-info requires a userId.");
-					const { getMemberInfoMSTeams } = await loadMSTeamsChannelRuntime();
-					return jsonMSTeamsOkActionResult("member-info", await getMemberInfoMSTeams({
-						cfg: ctx.cfg,
-						userId
-					}));
+					return await runWithRequiredActionTarget({
+						actionLabel: "member-info",
+						toolParams: ctx.params,
+						currentChannelId: ctx.toolContext?.currentChannelId,
+						currentGraphChannelId: resolveCurrentGraphActionTarget(ctx.toolContext),
+						currentChatType: ctx.toolContext?.currentChatType,
+						graphOnly: true,
+						run: async (target) => {
+							const to = await assertMSTeamsReadTargetAllowed({
+								cfg: ctx.cfg,
+								ctx,
+								target
+							});
+							const currentRequesterId = isCurrentMSTeamsReadTarget({
+								ctx,
+								target: to
+							}) ? ctx.requesterSenderId : void 0;
+							const { getMemberInfoMSTeams } = await loadMSTeamsChannelRuntime();
+							return jsonMSTeamsOkActionResult("member-info", await getMemberInfoMSTeams({
+								cfg: ctx.cfg,
+								to,
+								userId,
+								currentRequesterId
+							}));
+						}
+					});
 				}
 				if (ctx.action === "channel-list") {
-					const teamId = normalizeOptionalString(ctx.params.teamId) ?? "";
+					const teamId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(ctx.params.teamId) ?? "";
 					if (!teamId) return actionError("channel-list requires a teamId.");
+					const graphTeamId = await assertMSTeamsTeamEnumerationAllowed({
+						cfg: ctx.cfg,
+						ctx,
+						teamId
+					});
 					const { listChannelsMSTeams } = await loadMSTeamsChannelRuntime();
 					return jsonMSTeamsOkActionResult("channel-list", await listChannelsMSTeams({
 						cfg: ctx.cfg,
-						teamId
+						teamId: graphTeamId
 					}));
 				}
 				if (ctx.action === "channel-info") {
-					const teamId = normalizeOptionalString(ctx.params.teamId) ?? "";
-					const channelId = normalizeOptionalString(ctx.params.channelId) ?? "";
+					const teamId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(ctx.params.teamId) ?? "";
+					const channelId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(ctx.params.channelId) ?? "";
 					if (!teamId || !channelId) return actionError("channel-info requires teamId and channelId.");
+					const [graphTeamId, graphChannelId] = (await assertMSTeamsReadTargetAllowed({
+						cfg: ctx.cfg,
+						ctx,
+						target: `${teamId}/${channelId}`
+					})).split("/", 2);
+					if (!graphTeamId || !graphChannelId) throw new Error("Authorized Microsoft Teams channel target is invalid.");
 					const { getChannelInfoMSTeams } = await loadMSTeamsChannelRuntime();
 					return jsonMSTeamsOkActionResult("channel-info", { channelInfo: (await getChannelInfoMSTeams({
 						cfg: ctx.cfg,
-						teamId,
-						channelId
+						teamId: graphTeamId,
+						channelId: graphChannelId
 					})).channel });
 				}
 				if (ctx.action === "addParticipant") {
@@ -1200,9 +1535,9 @@ const msteamsPlugin = createChatChannelPlugin({
 				return null;
 			}
 		},
-		status: createComputedAccountStatusAdapter({
-			defaultRuntime: createDefaultChannelRuntimeState(DEFAULT_ACCOUNT_ID, { port: null }),
-			buildChannelSummary: ({ snapshot }) => buildProbeChannelStatusSummary(snapshot, { port: snapshot.port ?? null }),
+		status: (0, openclaw_plugin_sdk_status_helpers.createComputedAccountStatusAdapter)({
+			defaultRuntime: (0, openclaw_plugin_sdk_channel_status.createDefaultChannelRuntimeState)(openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID, { port: null }),
+			buildChannelSummary: ({ snapshot }) => (0, openclaw_plugin_sdk_channel_status.buildProbeChannelStatusSummary)(snapshot, { port: snapshot.port ?? null }),
 			probeAccount: async ({ cfg }) => await (await loadMSTeamsChannelRuntime()).probeMSTeams(cfg.channels?.msteams),
 			formatCapabilitiesProbe: ({ probe }) => {
 				const teamsProbe = probe;
@@ -1211,8 +1546,8 @@ const msteamsPlugin = createChatChannelPlugin({
 				if (appId) lines.push({ text: `App: ${appId}` });
 				const graph = teamsProbe?.graph;
 				if (graph) {
-					const roles = Array.isArray(graph.roles) ? normalizeStringEntries(graph.roles) : [];
-					const scopes = Array.isArray(graph.scopes) ? normalizeStringEntries(graph.scopes) : [];
+					const roles = Array.isArray(graph.roles) ? (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeStringEntries)(graph.roles) : [];
+					const scopes = Array.isArray(graph.scopes) ? (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeStringEntries)(graph.scopes) : [];
 					const formatPermission = (permission) => {
 						const hint = TEAMS_GRAPH_PERMISSION_HINTS[permission];
 						return hint ? `${permission} (${hint})` : permission;
@@ -1236,7 +1571,7 @@ const msteamsPlugin = createChatChannelPlugin({
 			})
 		}),
 		gateway: { startAccount: async (ctx) => {
-			const { monitorMSTeamsProvider } = await import("./src-DZFs5XtZ.js");
+			const { monitorMSTeamsProvider } = await Promise.resolve().then(() => require("./src-CUMz2B6f.cjs"));
 			const port = ctx.cfg.channels?.msteams?.webhook?.port ?? 3978;
 			ctx.setStatus({
 				accountId: ctx.accountId,
@@ -1250,11 +1585,11 @@ const msteamsPlugin = createChatChannelPlugin({
 			});
 		} }
 	},
-	security: { collectWarnings: projectConfigWarningCollector(collectMSTeamsSecurityWarnings) },
+	security: { collectWarnings: (0, openclaw_plugin_sdk_channel_policy.projectConfigWarningCollector)(collectMSTeamsSecurityWarnings) },
 	pairing: { text: {
 		idLabel: "msteamsUserId",
-		message: PAIRING_APPROVED_MESSAGE,
-		normalizeAllowEntry: createPairingPrefixStripper(/^(msteams|user):/i),
+		message: openclaw_plugin_sdk_channel_status.PAIRING_APPROVED_MESSAGE,
+		normalizeAllowEntry: (0, openclaw_plugin_sdk_channel_pairing.createPairingPrefixStripper)(/^(msteams|user):/i),
 		notify: async ({ cfg, id, message }) => {
 			const { sendMessageMSTeams } = await loadMSTeamsChannelRuntime();
 			await sendMessageMSTeams({
@@ -1268,7 +1603,9 @@ const msteamsPlugin = createChatChannelPlugin({
 		const nativeChannelId = context.NativeChannelId?.trim();
 		const hasChannelRoute = Boolean(nativeChannelId && nativeChannelId.includes("/"));
 		return {
-			currentChannelId: normalizeOptionalString(context.To),
+			currentChannelId: (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(context.To),
+			currentChatType: context.ChatType === "direct" || context.ChatType === "group" || context.ChatType === "channel" ? context.ChatType : void 0,
+			currentMessagingTarget: hasChannelRoute ? nativeChannelId : void 0,
 			currentGraphChannelId: hasChannelRoute ? nativeChannelId : void 0,
 			currentThreadTs: context.ReplyToId,
 			hasRepliedRef
@@ -1277,4 +1614,81 @@ const msteamsPlugin = createChatChannelPlugin({
 	outbound: msteamsChannelOutbound
 });
 //#endregion
-export { normalizeMSTeamsConversationId as a, translateMSTeamsDmConversationIdForGraph as c, buildMSTeamsPresentationCard as d, resolveMSTeamsAllowlistMatch as f, extractMSTeamsQuoteInfo as i, wasMSTeamsBotMentioned as l, resolveMSTeamsRouteConfig as m, resolveMSTeamsRouteSessionKey as n, parseMSTeamsActivityTimestamp as o, resolveMSTeamsReplyPolicy as p, extractMSTeamsConversationMessageId as r, stripMSTeamsMentionTags as s, msteamsPlugin as t, MSTEAMS_PRESENTATION_CAPABILITIES as u };
+Object.defineProperty(exports, "MSTEAMS_PRESENTATION_CAPABILITIES", {
+	enumerable: true,
+	get: function() {
+		return MSTEAMS_PRESENTATION_CAPABILITIES;
+	}
+});
+Object.defineProperty(exports, "buildMSTeamsPresentationCard", {
+	enumerable: true,
+	get: function() {
+		return buildMSTeamsPresentationCard;
+	}
+});
+Object.defineProperty(exports, "extractMSTeamsConversationMessageId", {
+	enumerable: true,
+	get: function() {
+		return extractMSTeamsConversationMessageId;
+	}
+});
+Object.defineProperty(exports, "extractMSTeamsQuoteInfo", {
+	enumerable: true,
+	get: function() {
+		return extractMSTeamsQuoteInfo;
+	}
+});
+Object.defineProperty(exports, "msteamsPlugin", {
+	enumerable: true,
+	get: function() {
+		return msteamsPlugin;
+	}
+});
+Object.defineProperty(exports, "normalizeMSTeamsConversationId", {
+	enumerable: true,
+	get: function() {
+		return normalizeMSTeamsConversationId;
+	}
+});
+Object.defineProperty(exports, "parseMSTeamsActivityTimestamp", {
+	enumerable: true,
+	get: function() {
+		return parseMSTeamsActivityTimestamp;
+	}
+});
+Object.defineProperty(exports, "resolveMSTeamsAllowlistMatch", {
+	enumerable: true,
+	get: function() {
+		return resolveMSTeamsAllowlistMatch;
+	}
+});
+Object.defineProperty(exports, "resolveMSTeamsReplyPolicy", {
+	enumerable: true,
+	get: function() {
+		return resolveMSTeamsReplyPolicy;
+	}
+});
+Object.defineProperty(exports, "resolveMSTeamsRouteConfig", {
+	enumerable: true,
+	get: function() {
+		return resolveMSTeamsRouteConfig;
+	}
+});
+Object.defineProperty(exports, "resolveMSTeamsRouteSessionKey", {
+	enumerable: true,
+	get: function() {
+		return resolveMSTeamsRouteSessionKey;
+	}
+});
+Object.defineProperty(exports, "stripMSTeamsMentionTags", {
+	enumerable: true,
+	get: function() {
+		return stripMSTeamsMentionTags;
+	}
+});
+Object.defineProperty(exports, "wasMSTeamsBotMentioned", {
+	enumerable: true,
+	get: function() {
+		return wasMSTeamsBotMentioned;
+	}
+});