@openclaw/msteams 2026.7.2-beta.1 → 2026.7.2-beta.3

package/dist/{polls-BhoI4VaN.cjs → polls-CWExq2xZ.cjs}

@@ -1,15 +1,13 @@
-const require_rolldown_runtime = require("./rolldown-runtime-D6vf50IK.cjs");
+const require_delegated_state = require("./delegated-state-DOSCHaAB.cjs");
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_file_lock = require("openclaw/plugin-sdk/file-lock");
 let openclaw_plugin_sdk_number_runtime = require("openclaw/plugin-sdk/number-runtime");
-let node_path = require("node:path");
-node_path = require_rolldown_runtime.__toESM(node_path, 1);
-let openclaw_plugin_sdk_security_runtime = require("openclaw/plugin-sdk/security-runtime");
 let node_crypto = require("node:crypto");
-node_crypto = require_rolldown_runtime.__toESM(node_crypto, 1);
+node_crypto = require_delegated_state.__toESM(node_crypto, 1);
+let node_path = require("node:path");
+node_path = require_delegated_state.__toESM(node_path, 1);
 let openclaw_plugin_sdk_keyed_async_queue = require("openclaw/plugin-sdk/keyed-async-queue");
-let openclaw_plugin_sdk_json_store = require("openclaw/plugin-sdk/json-store");
 //#region extensions/msteams/src/conversation-store-helpers.ts
 function normalizeStoredConversationId(raw) {
 	return raw.split(";")[0] ?? raw;
@@ -52,30 +50,6 @@ function findPreferredDmConversationByUserId(entries, id) {
 	return candidates[0] ?? null;
 }
 //#endregion
-//#region extensions/msteams/src/store-fs.ts
-const STORE_LOCK_OPTIONS = {
-	retries: {
-		retries: 10,
-		factor: 2,
-		minTimeout: 100,
-		maxTimeout: 1e4,
-		randomize: true
-	},
-	stale: 3e4
-};
-async function writeJsonFile(filePath, value) {
-	await (0, openclaw_plugin_sdk_json_store.writeJsonFileAtomically)(filePath, value);
-}
-async function ensureJsonFile(filePath, fallback) {
-	if (!await (0, openclaw_plugin_sdk_security_runtime.pathExists)(filePath)) await writeJsonFile(filePath, fallback);
-}
-async function withFileLock(filePath, fallback, fn) {
-	await ensureJsonFile(filePath, fallback);
-	return await (0, openclaw_plugin_sdk_file_lock.withFileLock)(filePath, STORE_LOCK_OPTIONS, async () => {
-		return await fn();
-	});
-}
-//#endregion
 //#region extensions/msteams/src/sqlite-state.ts
 function resolveStateDirOverride(options) {
 	if (!options) return;
@@ -100,13 +74,23 @@ function resolveMSTeamsSqliteStateDir(options) {
 	return resolveStateDirOverride(options) ?? require_runtime.getMSTeamsRuntime().state.resolveStateDir(options?.env ?? process.env, options?.homedir);
 }
 const sqliteMutationLocks = new openclaw_plugin_sdk_keyed_async_queue.KeyedAsyncQueue();
+const MSTEAMS_MUTATION_LOCK_OPTIONS = {
+	retries: {
+		retries: 10,
+		factor: 2,
+		minTimeout: 100,
+		maxTimeout: 1e4,
+		randomize: true
+	},
+	stale: 3e4
+};
 async function withProcessMutationLock(lockPath, fn) {
 	return await sqliteMutationLocks.enqueue(lockPath, fn);
 }
-async function withMSTeamsSqliteMutationLock(options, lockFilename, fn) {
-	const lockPath = node_path.default.join(resolveMSTeamsSqliteStateDir(options), lockFilename);
-	return await withProcessMutationLock(lockPath, async () => {
-		return await withFileLock(lockPath, { version: 1 }, fn);
+async function withMSTeamsSqliteMutationLock(options, mutationKey, fn) {
+	const scopedMutationKey = node_path.default.join(resolveMSTeamsSqliteStateDir(options), mutationKey);
+	return await withProcessMutationLock(scopedMutationKey, async () => {
+		return await (0, openclaw_plugin_sdk_file_lock.withFileLock)(scopedMutationKey, MSTEAMS_MUTATION_LOCK_OPTIONS, fn);
 	});
 }
 //#endregion
@@ -116,7 +100,7 @@ const MSTEAMS_CONVERSATIONS_NAMESPACE = "conversations";
 const MSTEAMS_MAX_CONVERSATIONS = 1e3;
 const MSTEAMS_SQLITE_MAX_CONVERSATION_ROWS = 2e3;
 const MSTEAMS_CONVERSATION_TTL_MS = 365 * 24 * 60 * 60 * 1e3;
-const CONVERSATION_LOCK_FILENAME = "msteams-conversations.sqlite.lock";
+const CONVERSATION_MUTATION_KEY = "conversations";
 function createConversationStateStore(params) {
 	return require_runtime.getMSTeamsRuntime().state.openKeyedStore({
 		namespace: MSTEAMS_CONVERSATIONS_NAMESPACE,
@@ -217,14 +201,14 @@ function createMSTeamsConversationStoreState(params) {
 	};
 	const upsert = async (conversationId, reference) => {
 		const normalizedId = normalizeStoredConversationId(conversationId);
-		await withMSTeamsSqliteMutationLock(params, CONVERSATION_LOCK_FILENAME, async () => {
+		await withMSTeamsSqliteMutationLock(params, CONVERSATION_MUTATION_KEY, async () => {
 			const existing = await lookupStored(normalizedId);
 			await register(normalizedId, mergeStoredConversationReference(existing ?? void 0, reference, (/* @__PURE__ */ new Date()).toISOString()));
 		});
 	};
 	const remove = async (conversationId) => {
 		const normalizedId = normalizeStoredConversationId(conversationId);
-		return await withMSTeamsSqliteMutationLock(params, CONVERSATION_LOCK_FILENAME, async () => {
+		return await withMSTeamsSqliteMutationLock(params, CONVERSATION_MUTATION_KEY, async () => {
 			return await conversationStore.delete(buildMSTeamsConversationStateKey(normalizedId));
 		});
 	};
@@ -246,7 +230,7 @@ const MSTEAMS_SQLITE_MAX_POLL_ROWS = 2e3;
 const MSTEAMS_POLL_VOTE_BUCKET_COUNT = 32;
 const MSTEAMS_MAX_POLL_VOTE_BUCKET_ROWS = 1001 * MSTEAMS_POLL_VOTE_BUCKET_COUNT;
 const MSTEAMS_POLL_TTL_MS = 720 * 60 * 60 * 1e3;
-const POLL_LOCK_FILENAME = "msteams-polls.sqlite.lock";
+const POLL_MUTATION_KEY = "polls";
 function normalizeChoiceValue(value) {
 	if (typeof value === "string") {
 		const trimmed = value.trim();
@@ -496,7 +480,7 @@ function createMSTeamsPollStoreState(params) {
 		}
 	};
 	const createPoll = async (poll) => {
-		await withMSTeamsSqliteMutationLock(params, POLL_LOCK_FILENAME, async () => {
+		await withMSTeamsSqliteMutationLock(params, POLL_MUTATION_KEY, async () => {
 			const { metadata, votes } = splitMSTeamsPoll(poll);
 			await pollStore.register(buildMSTeamsPollStateKey(poll.id), toPluginJsonValue(metadata));
 			await deletePollVotes(poll.id);
@@ -511,7 +495,7 @@ function createMSTeamsPollStoreState(params) {
 		return await reconstructPoll(poll);
 	};
 	const recordVote = async (vote) => {
-		return await withMSTeamsSqliteMutationLock(params, POLL_LOCK_FILENAME, async () => {
+		return await withMSTeamsSqliteMutationLock(params, POLL_MUTATION_KEY, async () => {
 			const pollKey = buildMSTeamsPollStateKey(vote.pollId);
 			const poll = await pollStore.lookup(pollKey);
 			if (!poll) return null;

package/dist/{resolve-allowlist-CyQ57MfH.cjs → resolve-allowlist-Dk-1CqBm.cjs}

@@ -1,4 +1,4 @@
-const require_rolldown_runtime = require("./rolldown-runtime-D6vf50IK.cjs");
+const require_delegated_state = require("./delegated-state-DOSCHaAB.cjs");
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 require("./runtime-api.cjs");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
@@ -12,11 +12,8 @@ let openclaw_plugin_sdk_ssrf_policy = require("openclaw/plugin-sdk/ssrf-policy")
 let openclaw_plugin_sdk_number_runtime = require("openclaw/plugin-sdk/number-runtime");
 let openclaw_plugin_sdk_text_utility_runtime = require("openclaw/plugin-sdk/text-utility-runtime");
 let node_fs = require("node:fs");
-node_fs = require_rolldown_runtime.__toESM(node_fs, 1);
+node_fs = require_delegated_state.__toESM(node_fs, 1);
 let node_module = require("node:module");
-let node_path = require("node:path");
-node_path = require_rolldown_runtime.__toESM(node_path, 1);
-let openclaw_plugin_sdk_security_runtime = require("openclaw/plugin-sdk/security-runtime");
 let openclaw_plugin_sdk_secret_input = require("openclaw/plugin-sdk/secret-input");
 //#region extensions/msteams/src/request-timeout.ts
 const MSTEAMS_REQUEST_TIMEOUT_MS = 3e4;
@@ -44,6 +41,22 @@ function resolveMSTeamsSharePointUploadTimeoutMs(sizeInBytes) {
 	const transferBudgetMs = Math.ceil((Number.isFinite(sizeInBytes) && sizeInBytes > 0 ? Math.ceil(sizeInBytes) : 0) / MSTEAMS_SHAREPOINT_UPLOAD_MIN_BYTES_PER_SECOND * 1e3);
 	return (0, openclaw_plugin_sdk_number_runtime.resolveTimerTimeoutMs)(MSTEAMS_SHAREPOINT_UPLOAD_BASE_TIMEOUT_MS + transferBudgetMs, MSTEAMS_SHAREPOINT_UPLOAD_BASE_TIMEOUT_MS, 1);
 }
+function createMSTeamsRequestTimeoutError(label, timeoutMs) {
+	const error = /* @__PURE__ */ new Error(`${label} timed out after ${timeoutMs}ms`);
+	error.name = "TimeoutError";
+	return error;
+}
+async function withMSTeamsAbortableRequestTimeout(params) {
+	const controller = new AbortController();
+	const timeoutMs = (0, openclaw_plugin_sdk_number_runtime.resolveTimerTimeoutMs)(params.timeoutMs, MSTEAMS_REQUEST_TIMEOUT_MS, 1);
+	const work = Promise.resolve().then(() => params.work(controller.signal));
+	try {
+		return await (0, openclaw_plugin_sdk_text_utility_runtime.withTimeout)(work, timeoutMs, { createError: () => createMSTeamsRequestTimeoutError(params.label, timeoutMs) });
+	} catch (error) {
+		controller.abort(error);
+		throw error;
+	}
+}
 //#endregion
 //#region extensions/msteams/src/response-with-release.ts
 const NULL_BODY_STATUSES = /* @__PURE__ */ new Set([
@@ -624,6 +637,16 @@ function resolveOpenClawVersion() {
 		return "unknown";
 	}
 }
+/**
+* Build a combined User-Agent string that preserves the Teams SDK identity
+* and appends the OpenClaw version.
+*
+* Format: "teams.ts[apps]/<sdk-version> OpenClaw/<openclaw-version>"
+* Example: "teams.ts[apps]/2.0.5 OpenClaw/2026.3.22"
+*
+* This lets the Teams backend track SDK usage while also identifying the
+* host application.
+*/
 function buildUserAgent() {
 	if (cachedUserAgent) return cachedUserAgent;
 	cachedUserAgent = `teams.ts[apps]/${resolveTeamsSdkVersion()} OpenClaw/${resolveOpenClawVersion()}`;
@@ -883,15 +906,6 @@ async function refreshMSTeamsDelegatedTokens(params) {
 	});
 }
 //#endregion
-//#region extensions/msteams/src/storage.ts
-function resolveMSTeamsStorePath(params) {
-	if (params.storePath) return params.storePath;
-	if (params.stateDir) return node_path.default.join(params.stateDir, params.filename);
-	const env = params.env ?? process.env;
-	const stateDir = params.homedir ? require_runtime.getMSTeamsRuntime().state.resolveStateDir(env, params.homedir) : require_runtime.getMSTeamsRuntime().state.resolveStateDir(env);
-	return node_path.default.join(stateDir, params.filename);
-}
-//#endregion
 //#region extensions/msteams/src/token.ts
 function resolveAuthType(cfg) {
 	const fromCfg = cfg?.authType;
@@ -943,21 +957,11 @@ function resolveMSTeamsCredentials(cfg) {
 		tenantId
 	};
 }
-const DELEGATED_TOKEN_FILENAME = "msteams-delegated.json";
-function resolveDelegatedTokenPath() {
-	return resolveMSTeamsStorePath({ filename: DELEGATED_TOKEN_FILENAME });
-}
 function loadDelegatedTokens() {
-	try {
-		const content = (0, node_fs.readFileSync)(resolveDelegatedTokenPath(), "utf8");
-		return JSON.parse(content);
-	} catch {
-		return;
-	}
+	return require_delegated_state.loadMSTeamsDelegatedTokens();
 }
 function saveDelegatedTokens(tokens) {
-	const tokenPath = resolveDelegatedTokenPath();
-	(0, openclaw_plugin_sdk_security_runtime.privateFileStoreSync)((0, node_path.dirname)(tokenPath)).writeJson((0, node_path.basename)(tokenPath), tokens);
+	require_delegated_state.saveMSTeamsDelegatedTokens(tokens);
 }
 async function resolveDelegatedAccessToken(params) {
 	const tokens = loadDelegatedTokens();
@@ -1098,7 +1102,11 @@ async function resolveGraphToken(cfg, options) {
 		if (delegated) return delegated;
 	}
 	const { app } = await loadMSTeamsSdkWithAuth(creds, resolveMSTeamsSdkCloudOptions(msteamsCfg));
-	const accessToken = readAccessToken(await createMSTeamsTokenProvider(app).getAccessToken("https://graph.microsoft.com"));
+	const tokenProvider = createMSTeamsTokenProvider(app);
+	const accessToken = readAccessToken(await withMSTeamsRequestDeadline({
+		label: "MS Teams Graph token",
+		work: () => tokenProvider.getAccessToken("https://graph.microsoft.com")
+	}));
 	if (!accessToken) throw new Error("MS Teams graph token unavailable");
 	return accessToken;
 }
@@ -2038,6 +2046,12 @@ Object.defineProperty(exports, "validateMSTeamsProactiveServiceUrlBoundary", {
 		return validateMSTeamsProactiveServiceUrlBoundary;
 	}
 });
+Object.defineProperty(exports, "withMSTeamsAbortableRequestTimeout", {
+	enumerable: true,
+	get: function() {
+		return withMSTeamsAbortableRequestTimeout;
+	}
+});
 Object.defineProperty(exports, "withMSTeamsRequestDeadline", {
 	enumerable: true,
 	get: function() {

package/dist/runtime-api.cjs

@@ -11,7 +11,6 @@ let openclaw_plugin_sdk_dangerous_name_runtime = require("openclaw/plugin-sdk/da
 let openclaw_plugin_sdk_runtime_group_policy = require("openclaw/plugin-sdk/runtime-group-policy");
 let openclaw_plugin_sdk_file_lock = require("openclaw/plugin-sdk/file-lock");
 let openclaw_plugin_sdk_media_runtime = require("openclaw/plugin-sdk/media-runtime");
-let openclaw_plugin_sdk_channel_inbound = require("openclaw/plugin-sdk/channel-inbound");
 let openclaw_plugin_sdk_outbound_media = require("openclaw/plugin-sdk/outbound-media");
 let openclaw_plugin_sdk_reply_payload = require("openclaw/plugin-sdk/reply-payload");
 let openclaw_plugin_sdk_ssrf_runtime = require("openclaw/plugin-sdk/ssrf-runtime");
@@ -84,12 +83,6 @@ Object.defineProperty(exports, "detectMime", {
 		return openclaw_plugin_sdk_media_runtime.detectMime;
 	}
 });
-Object.defineProperty(exports, "dispatchReplyFromConfigWithSettledDispatcher", {
-	enumerable: true,
-	get: function() {
-		return openclaw_plugin_sdk_channel_inbound.dispatchReplyFromConfigWithSettledDispatcher;
-	}
-});
 Object.defineProperty(exports, "extensionForMime", {
 	enumerable: true,
 	get: function() {

package/dist/secret-contract-api.cjs

@@ -16,6 +16,12 @@ function collectRuntimeConfigAssignments(params) {
 		context: params.context,
 		active: msteams.enabled !== false,
 		inactiveReason: "Microsoft Teams channel is disabled.",
+		owner: {
+			ownerKind: "account",
+			ownerId: "msteams:default",
+			requiredForGateway: false,
+			disposition: "isolate"
+		},
 		apply: (value) => {
 			msteams.appPassword = value;
 		}

package/dist/setup-plugin-api.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_resolve_allowlist = require("./resolve-allowlist-CyQ57MfH.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-Dk-1CqBm.cjs");
 const require_config_schema = require("./config-schema-BSNLJUta.cjs");
-const require_setup_surface = require("./setup-surface-BDTPN3dX.cjs");
+const require_setup_surface = require("./setup-surface-BcRVoUY8.cjs");
 let openclaw_plugin_sdk_account_helpers = require("openclaw/plugin-sdk/account-helpers");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
 let openclaw_plugin_sdk_channel_config_helpers = require("openclaw/plugin-sdk/channel-config-helpers");

package/dist/{setup-surface-BDTPN3dX.cjs → setup-surface-BcRVoUY8.cjs}

@@ -1,8 +1,9 @@
-const require_resolve_allowlist = require("./resolve-allowlist-CyQ57MfH.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-Dk-1CqBm.cjs");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_number_runtime = require("openclaw/plugin-sdk/number-runtime");
 let openclaw_plugin_sdk_setup = require("openclaw/plugin-sdk/setup");
 let openclaw_plugin_sdk_setup_tools = require("openclaw/plugin-sdk/setup-tools");
+let openclaw_plugin_sdk_retry_runtime = require("openclaw/plugin-sdk/retry-runtime");
 let openclaw_plugin_sdk_secret_input = require("openclaw/plugin-sdk/secret-input");
 //#region extensions/msteams/src/setup-core.ts
 const t$1 = (0, openclaw_plugin_sdk_setup.createSetupTranslator)();
@@ -181,14 +182,14 @@ function extractRetryAfterMs(err) {
 	if ((0, openclaw_plugin_sdk_string_coerce_runtime.isRecord)(headers)) {
 		const raw = headers["retry-after"] ?? headers["Retry-After"];
 		if (typeof raw === "string") {
-			const parsed = parseNonNegativeRetryAfterSeconds(raw);
+			const parsed = (0, openclaw_plugin_sdk_retry_runtime.parseRetryAfterHeaderSeconds)(raw);
 			if (parsed !== void 0) return parsed * 1e3;
 		}
 	}
 	if (typeof headers === "object" && headers !== null && "get" in headers && typeof headers.get === "function") {
 		const raw = headers.get("retry-after");
 		if (raw) {
-			const parsed = parseNonNegativeRetryAfterSeconds(raw);
+			const parsed = (0, openclaw_plugin_sdk_retry_runtime.parseRetryAfterHeaderSeconds)(raw);
 			if (parsed !== void 0) return parsed * 1e3;
 		}
 	}
@@ -454,7 +455,7 @@ const msteamsSetupWizard = {
 				};
 				let oauthModule;
 				try {
-					oauthModule = await Promise.resolve().then(() => require("./oauth-C5E5powI.cjs"));
+					oauthModule = await Promise.resolve().then(() => require("./oauth-BUFvYhIw.cjs"));
 				} catch (err) {
 					await noteDelegatedAuthFailure(err);
 					return {
@@ -505,16 +506,7 @@ const msteamsSetupWizard = {
 	},
 	dmPolicy: msteamsDmPolicy,
 	groupAccess: msteamsGroupAccess,
-	disable: (cfg) => ({
-		...cfg,
-		channels: {
-			...cfg.channels,
-			msteams: {
-				...cfg.channels?.msteams,
-				enabled: false
-			}
-		}
-	})
+	disable: (cfg) => (0, openclaw_plugin_sdk_setup.setSetupChannelEnabled)(cfg, channel, false)
 };
 //#endregion
 Object.defineProperty(exports, "classifyMSTeamsSendError", {