@openclaw/msteams 2026.7.2-beta.5 → 2026.7.2-beta.7

package/dist/{resolve-allowlist-Dr_1sOJh.cjs → resolve-allowlist-CEj9sABO.cjs}

@@ -1,6 +1,6 @@
-const require_delegated_state = require("./delegated-state-DOSCHaAB.cjs");
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 require("./runtime-api.cjs");
+const require_delegated_state = require("./delegated-state-DiEz9JIa.cjs");
 let openclaw_plugin_sdk_lazy_runtime = require("openclaw/plugin-sdk/lazy-runtime");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
@@ -11,10 +11,10 @@ let node_dns_promises = require("node:dns/promises");
 let openclaw_plugin_sdk_ssrf_policy = require("openclaw/plugin-sdk/ssrf-policy");
 let openclaw_plugin_sdk_number_runtime = require("openclaw/plugin-sdk/number-runtime");
 let openclaw_plugin_sdk_text_utility_runtime = require("openclaw/plugin-sdk/text-utility-runtime");
-let node_fs = require("node:fs");
-node_fs = require_delegated_state.__toESM(node_fs, 1);
+let openclaw_plugin_sdk_secret_file = require("openclaw/plugin-sdk/secret-file");
 let node_module = require("node:module");
 let openclaw_plugin_sdk_secret_input = require("openclaw/plugin-sdk/secret-input");
+let openclaw_plugin_sdk_html_entity_runtime = require("openclaw/plugin-sdk/html-entity-runtime");
 //#region extensions/msteams/src/request-timeout.ts
 const MSTEAMS_REQUEST_TIMEOUT_MS = 3e4;
 const MSTEAMS_SHAREPOINT_UPLOAD_BASE_TIMEOUT_MS = 5 * 6e4;
@@ -746,7 +746,7 @@ async function createMSTeamsApp(creds, options) {
 		...serviceUrl ? { serviceUrl } : {},
 		...options?.oauthDefaultConnectionName ? { oauth: { defaultConnectionName: options.oauthDefaultConnectionName } } : {}
 	};
-	if (creds.type === "federated") return createFederatedApp(creds, App, appOptions);
+	if (creds.type === "federated") return await createFederatedApp(creds, App, appOptions);
 	return new App({
 		clientId: creds.appId,
 		clientSecret: creds.appPassword,
@@ -754,7 +754,7 @@ async function createMSTeamsApp(creds, options) {
 		...appOptions
 	});
 }
-function createFederatedApp(creds, App, appOptions) {
+async function createFederatedApp(creds, App, appOptions) {
 	if (creds.useManagedIdentity) return new App({
 		clientId: creds.appId,
 		tenantId: creds.tenantId,
@@ -764,7 +764,7 @@ function createFederatedApp(creds, App, appOptions) {
 	if (!creds.certificatePath) throw new Error("Federated credentials require either a certificate path or managed identity.");
 	let privateKey;
 	try {
-		privateKey = node_fs.readFileSync(creds.certificatePath, "utf-8");
+		privateKey = await (0, openclaw_plugin_sdk_secret_file.readSecretFile)(creds.certificatePath, "Microsoft Teams certificate");
 	} catch (err) {
 		const msg = err instanceof Error ? err.message : String(err);
 		throw new Error(`Failed to read certificate file at '${creds.certificatePath}': ${msg}`, { cause: err });
@@ -948,12 +948,16 @@ function resolveAuthType(cfg) {
 	if (process.env.MSTEAMS_AUTH_TYPE === "federated") return "federated";
 	return "secret";
 }
+function resolveFederatedPath(configValue, envValue) {
+	if ((0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(configValue)) return configValue;
+	if ((0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(envValue)) return envValue;
+}
 function hasConfiguredMSTeamsCredentials(cfg) {
 	const authType = resolveAuthType(cfg);
 	const hasAppId = Boolean((0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(cfg?.appId) || (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(process.env.MSTEAMS_APP_ID));
 	const hasTenantId = Boolean((0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(cfg?.tenantId) || (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(process.env.MSTEAMS_TENANT_ID));
 	if (authType === "federated") {
-		const hasCert = Boolean(cfg?.certificatePath || process.env.MSTEAMS_CERTIFICATE_PATH);
+		const hasCert = Boolean(resolveFederatedPath(cfg?.certificatePath, process.env.MSTEAMS_CERTIFICATE_PATH));
 		const hasManagedIdentity = cfg?.useManagedIdentity ?? process.env.MSTEAMS_USE_MANAGED_IDENTITY === "true";
 		return hasAppId && hasTenantId && (hasCert || hasManagedIdentity);
 	}
@@ -965,7 +969,7 @@ function resolveMSTeamsCredentials(cfg) {
 	const tenantId = (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(cfg?.tenantId) || (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(process.env.MSTEAMS_TENANT_ID);
 	if (!appId || !tenantId) return;
 	if (authType === "federated") {
-		const certificatePath = cfg?.certificatePath || process.env.MSTEAMS_CERTIFICATE_PATH || void 0;
+		const certificatePath = resolveFederatedPath(cfg?.certificatePath, process.env.MSTEAMS_CERTIFICATE_PATH);
 		const certificateThumbprint = cfg?.certificateThumbprint || process.env.MSTEAMS_CERTIFICATE_THUMBPRINT || void 0;
 		const useManagedIdentity = cfg?.useManagedIdentity ?? process.env.MSTEAMS_USE_MANAGED_IDENTITY === "true";
 		const managedIdentityClientId = cfg?.managedIdentityClientId || process.env.MSTEAMS_MANAGED_IDENTITY_CLIENT_ID || void 0;
@@ -1237,7 +1241,64 @@ async function findGraphUsersByExactIdentity(params) {
 	});
 }
 //#endregion
+//#region extensions/msteams/src/inbound.ts
+/**
+* Strip HTML tags, preserving text content.
+*/
+function htmlToPlainText(html) {
+	return (0, openclaw_plugin_sdk_html_entity_runtime.decodeHtmlEntities)(html.replace(/<[^>]*>/g, " ")).replaceAll("\xA0", " ").replace(/\s+/g, " ").trim();
+}
+/**
+* Extract quote info from MS Teams HTML reply attachments.
+* Teams wraps quoted content in a blockquote with itemtype="http://schema.skype.com/Reply".
+*/
+function extractMSTeamsQuoteInfo(attachments) {
+	for (const att of attachments) {
+		let content = "";
+		if (typeof att.content === "string") content = att.content;
+		else if (typeof att.content === "object" && att.content !== null) {
+			const record = att.content;
+			content = typeof record.text === "string" ? record.text : typeof record.body === "string" ? record.body : "";
+		}
+		if (!content) continue;
+		if (!content.includes("http://schema.skype.com/Reply")) continue;
+		const senderMatch = /<strong[^>]*itemprop=["']mri["'][^>]*>(.*?)<\/strong>/i.exec(content);
+		const sender = senderMatch?.[1] ? htmlToPlainText(senderMatch[1]) : void 0;
+		const bodyMatch = /<p[^>]*itemprop=["']copy["'][^>]*>(.*?)<\/p>/is.exec(content) ?? /<p[^>]*itemprop=["']preview["'][^>]*>(.*?)<\/p>/is.exec(content);
+		const body = bodyMatch?.[1] ? htmlToPlainText(bodyMatch[1]) : void 0;
+		const id = /<blockquote[^>]*\bitemid=["']([^"']+)["'][^>]*>/is.exec(content)?.[1]?.trim() || void 0;
+		if (body) return {
+			sender: sender ?? "unknown",
+			body,
+			...id ? { id } : {}
+		};
+	}
+}
+function normalizeMSTeamsConversationId(raw) {
+	return raw.split(";")[0] ?? raw;
+}
+function extractMSTeamsConversationMessageId(raw) {
+	if (!raw) return;
+	return (/(?:^|;)messageid=([^;]+)/i.exec(raw)?.[1]?.trim() ?? "") || void 0;
+}
+function parseMSTeamsActivityTimestamp(value) {
+	if (!value) return;
+	if (value instanceof Date) return value;
+	if (typeof value !== "string") return;
+	const date = new Date(value);
+	return Number.isNaN(date.getTime()) ? void 0 : date;
+}
+function stripMSTeamsMentionTags(text) {
+	return text.replace(/<at[^>]*>.*?<\/at>/gi, "").trim();
+}
+function wasMSTeamsBotMentioned(activity) {
+	const botId = activity.recipient?.id;
+	if (!botId) return false;
+	return (activity.entities ?? []).some((e) => e.type === "mention" && e.mentioned?.id === botId);
+}
+//#endregion
 //#region extensions/msteams/src/resolve-allowlist.ts
+const MSTEAMS_GROUP_CONVERSATION_ID = /^19:.+@thread\.(?:tacv2|skype|v2)$/i;
 function normalizeExactMatch(value) {
 	return (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(value ?? "");
 }
@@ -1280,6 +1341,16 @@ function projectStableMSTeamsUserAllowlist(entries) {
 	const projected = entries.map((entry) => normalizeStaticMSTeamsAllowEntry(entry)).filter((entry) => Boolean(entry));
 	return [...new Map(projected.map((entry) => [normalizeExactMatch(entry), entry])).values()];
 }
+function projectStableMSTeamsGroupAllowlist(entries) {
+	if (!entries) return;
+	const projected = entries.map((entry) => {
+		const stableUserEntry = normalizeStaticMSTeamsAllowEntry(entry);
+		if (stableUserEntry) return stableUserEntry;
+		const conversationId = normalizeMSTeamsConversationId(normalizeMSTeamsUserInput(entry));
+		return MSTEAMS_GROUP_CONVERSATION_ID.test(conversationId) ? conversationId : void 0;
+	}).filter((entry) => Boolean(entry));
+	return [...new Map(projected.map((entry) => [MSTEAMS_GROUP_CONVERSATION_ID.test(entry) ? `conversation:${entry}` : normalizeExactMatch(entry), entry])).values()];
+}
 function stripProviderPrefix(raw) {
 	return raw.replace(/^(msteams|teams):/i, "");
 }
@@ -1311,7 +1382,7 @@ function parseMSTeamsConversationId(raw) {
 *
 * Accepts both prefixed and bare formats:
 * - `conversation:<id>` — explicit conversation prefix
-* - `19:abc@thread.tacv2` / `19:abc@thread.skype` — channel / legacy group
+* - `19:abc@thread.tacv2` / `19:abc@thread.skype` / `19:abc@thread.v2` — group or channel
 * - `19:{userId}_{appId}@unq.gbl.spaces` — Graph 1:1 chat thread format
 * - `a:1xxx` — Bot Framework personal (1:1) chat id
 * - `8:orgid:xxx` — Bot Framework org-scoped personal chat id
@@ -1320,7 +1391,7 @@ function looksLikeMSTeamsConversationId(raw) {
 	const trimmed = raw.trim();
 	if (!trimmed) return false;
 	if (/^conversation:/i.test(trimmed)) return true;
-	if (/^19:.+@thread\.(tacv2|skype)$/i.test(trimmed)) return true;
+	if (MSTEAMS_GROUP_CONVERSATION_ID.test(trimmed)) return true;
 	if (/^19:.+@unq\.gbl\.spaces$/i.test(trimmed)) return true;
 	if (/^a:1[A-Za-z0-9_-]+$/i.test(trimmed)) return true;
 	if (/^8:orgid:[A-Za-z0-9-]+$/i.test(trimmed)) return true;
@@ -1331,7 +1402,7 @@ function looksLikeMSTeamsConversationId(raw) {
 * can forward verbatim to the channel adapter.
 */
 function looksLikeMSTeamsTargetId(raw) {
-	const trimmed = raw.trim();
+	const trimmed = stripProviderPrefix(raw.trim()).trim();
 	if (looksLikeMSTeamsConversationId(trimmed)) return true;
 	if (/^user:/i.test(trimmed)) {
 		const id = trimmed.slice(5).trim();
@@ -1805,6 +1876,18 @@ Object.defineProperty(exports, "extractInlineImageCandidates", {
 		return extractInlineImageCandidates;
 	}
 });
+Object.defineProperty(exports, "extractMSTeamsConversationMessageId", {
+	enumerable: true,
+	get: function() {
+		return extractMSTeamsConversationMessageId;
+	}
+});
+Object.defineProperty(exports, "extractMSTeamsQuoteInfo", {
+	enumerable: true,
+	get: function() {
+		return extractMSTeamsQuoteInfo;
+	}
+});
 Object.defineProperty(exports, "fetchGraphAbsoluteUrl", {
 	enumerable: true,
 	get: function() {
@@ -1907,6 +1990,12 @@ Object.defineProperty(exports, "normalizeContentType", {
 		return normalizeContentType;
 	}
 });
+Object.defineProperty(exports, "normalizeMSTeamsConversationId", {
+	enumerable: true,
+	get: function() {
+		return normalizeMSTeamsConversationId;
+	}
+});
 Object.defineProperty(exports, "normalizeMSTeamsMessagingTarget", {
 	enumerable: true,
 	get: function() {
@@ -1925,6 +2014,12 @@ Object.defineProperty(exports, "normalizeQuery", {
 		return normalizeQuery;
 	}
 });
+Object.defineProperty(exports, "parseMSTeamsActivityTimestamp", {
+	enumerable: true,
+	get: function() {
+		return parseMSTeamsActivityTimestamp;
+	}
+});
 Object.defineProperty(exports, "parseMSTeamsConversationId", {
 	enumerable: true,
 	get: function() {
@@ -1961,6 +2056,12 @@ Object.defineProperty(exports, "postGraphJson", {
 		return postGraphJson;
 	}
 });
+Object.defineProperty(exports, "projectStableMSTeamsGroupAllowlist", {
+	enumerable: true,
+	get: function() {
+		return projectStableMSTeamsGroupAllowlist;
+	}
+});
 Object.defineProperty(exports, "projectStableMSTeamsTeamsConfig", {
 	enumerable: true,
 	get: function() {
@@ -2075,6 +2176,12 @@ Object.defineProperty(exports, "searchGraphUsers", {
 		return searchGraphUsers;
 	}
 });
+Object.defineProperty(exports, "stripMSTeamsMentionTags", {
+	enumerable: true,
+	get: function() {
+		return stripMSTeamsMentionTags;
+	}
+});
 Object.defineProperty(exports, "tryBuildGraphSharesUrlForSharedLink", {
 	enumerable: true,
 	get: function() {
@@ -2093,6 +2200,12 @@ Object.defineProperty(exports, "validateMSTeamsProactiveServiceUrlBoundary", {
 		return validateMSTeamsProactiveServiceUrlBoundary;
 	}
 });
+Object.defineProperty(exports, "wasMSTeamsBotMentioned", {
+	enumerable: true,
+	get: function() {
+		return wasMSTeamsBotMentioned;
+	}
+});
 Object.defineProperty(exports, "withMSTeamsAbortableRequestTimeout", {
 	enumerable: true,
 	get: function() {

package/dist/setup-plugin-api.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_resolve_allowlist = require("./resolve-allowlist-Dr_1sOJh.cjs");
-const require_setup_surface = require("./setup-surface-xVejKCJV.cjs");
-const require_config_schema = require("./config-schema-BTnLgWAe.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CEj9sABO.cjs");
+const require_setup_surface = require("./setup-surface-ByWjaXEn.cjs");
+const require_config_schema = require("./config-schema-C4CszdDi.cjs");
 let openclaw_plugin_sdk_account_helpers = require("openclaw/plugin-sdk/account-helpers");
 //#region extensions/msteams/src/channel.setup.ts
 const msteamsSetupPlugin = {

package/dist/{setup-surface-xVejKCJV.cjs → setup-surface-ByWjaXEn.cjs}

@@ -1,4 +1,4 @@
-const require_resolve_allowlist = require("./resolve-allowlist-Dr_1sOJh.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CEj9sABO.cjs");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
@@ -38,38 +38,24 @@ const msteamsConfigAdapter = (0, openclaw_plugin_sdk_channel_config_helpers.crea
 //#endregion
 //#region extensions/msteams/src/setup-core.ts
 const t$1 = (0, openclaw_plugin_sdk_setup.createSetupTranslator)();
+const channel$1 = "msteams";
 const msteamsSetupAdapter = {
 	resolveAccountId: () => openclaw_plugin_sdk_setup.DEFAULT_ACCOUNT_ID,
-	applyAccountConfig: ({ cfg }) => ({
-		...cfg,
-		channels: {
-			...cfg.channels,
-			msteams: {
-				...cfg.channels?.msteams,
-				enabled: true
-			}
-		}
-	})
+	applyAccountConfig: ({ cfg }) => (0, openclaw_plugin_sdk_setup.setSetupChannelEnabled)(cfg, channel$1, true)
 };
 const msteamsSetupContract = (0, openclaw_plugin_sdk_channel_setup.defineChannelSetupContract)({
 	fields: {},
 	legacyAdapter: msteamsSetupAdapter
 });
-const channel$1 = "msteams";
 async function promptMSTeamsCredentials(prompter) {
+	const promptRequired = async (message) => (await prompter.text({
+		message,
+		validate: (value) => value?.trim() ? void 0 : t$1("common.required")
+	})).trim();
 	return {
-		appId: (await prompter.text({
-			message: t$1("wizard.msteams.appIdPrompt"),
-			validate: (value) => value?.trim() ? void 0 : t$1("common.required")
-		})).trim(),
-		appPassword: (await prompter.text({
-			message: t$1("wizard.msteams.appPasswordPrompt"),
-			validate: (value) => value?.trim() ? void 0 : t$1("common.required")
-		})).trim(),
-		tenantId: (await prompter.text({
-			message: t$1("wizard.msteams.tenantIdPrompt"),
-			validate: (value) => value?.trim() ? void 0 : t$1("common.required")
-		})).trim()
+		appId: await promptRequired(t$1("wizard.msteams.appIdPrompt")),
+		appPassword: await promptRequired(t$1("wizard.msteams.appPasswordPrompt")),
+		tenantId: await promptRequired(t$1("wizard.msteams.tenantIdPrompt"))
 	};
 }
 async function noteMSTeamsCredentialHelp(prompter) {
@@ -390,17 +376,12 @@ function setMSTeamsTeamsAllowlist(cfg, entries) {
 			};
 		} else teams[teamKey] = existing;
 	}
-	return {
-		...cfg,
-		channels: {
-			...cfg.channels,
-			msteams: {
-				...cfg.channels?.msteams,
-				enabled: true,
-				teams
-			}
-		}
-	};
+	return (0, openclaw_plugin_sdk_setup.patchTopLevelChannelConfigSection)({
+		cfg,
+		channel,
+		enabled: true,
+		patch: { teams }
+	});
 }
 function listMSTeamsGroupEntries(cfg) {
 	return Object.entries(cfg.channels?.msteams?.teams ?? {}).flatMap(([teamKey, value]) => {
@@ -490,7 +471,7 @@ const msteamsSetupWizard = {
 				};
 				let oauthModule;
 				try {
-					oauthModule = await Promise.resolve().then(() => require("./oauth-CNcnL8of.cjs"));
+					oauthModule = await Promise.resolve().then(() => require("./oauth-CW6jVGp8.cjs"));
 				} catch (err) {
 					await noteDelegatedAuthFailure(err);
 					return {