@openclaw/msteams 2026.7.2-beta.7 → 2026.8.1-beta.2

package/dist/{polls-BWKNpBSg.cjs → polls-DvuJvaDG.cjs}

@@ -1,43 +1,19 @@
-//#region \0rolldown/runtime.js
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
-		key = keys[i];
-		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
-			get: ((k) => from[k]).bind(null, key),
-			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-		});
-	}
-	return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
-	value: mod,
-	enumerable: true
-}) : target, mod));
-//#endregion
+const require_rolldown_runtime = require("./rolldown-runtime-D6vf50IK.cjs");
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_file_lock = require("openclaw/plugin-sdk/file-lock");
 let openclaw_plugin_sdk_number_runtime = require("openclaw/plugin-sdk/number-runtime");
 let node_crypto = require("node:crypto");
-node_crypto = __toESM(node_crypto, 1);
+node_crypto = require_rolldown_runtime.__toESM(node_crypto, 1);
 let node_path = require("node:path");
-node_path = __toESM(node_path, 1);
+node_path = require_rolldown_runtime.__toESM(node_path, 1);
 let openclaw_plugin_sdk_keyed_async_queue = require("openclaw/plugin-sdk/keyed-async-queue");
 //#region extensions/msteams/src/conversation-store-helpers.ts
 function normalizeStoredConversationId(raw) {
 	return raw.split(";")[0] ?? raw;
 }
 function parseStoredConversationTimestamp(value) {
-	if (!value) return null;
-	const parsed = Date.parse(value);
-	if (!Number.isFinite(parsed)) return null;
-	return parsed;
+	return (0, openclaw_plugin_sdk_number_runtime.parseDateStringTimestampMs)(value) ?? null;
 }
 function toConversationStoreEntries(entries) {
 	return Array.from(entries, ([conversationId, reference]) => ({
@@ -384,9 +360,7 @@ function createPollVoteBucketStateStore(params) {
 	});
 }
 function parseTimestamp(value) {
-	if (!value) return null;
-	const parsed = Date.parse(value);
-	return Number.isFinite(parsed) ? parsed : null;
+	return (0, openclaw_plugin_sdk_number_runtime.parseDateStringTimestampMs)(value) ?? null;
 }
 function pruneExpired(polls) {
 	const cutoff = Date.now() - MSTEAMS_POLL_TTL_MS;
@@ -405,8 +379,7 @@ function selectRetainedMSTeamsPolls(polls) {
 }
 function normalizeMSTeamsPollSelections(poll, selections) {
 	const maxSelections = Math.max(1, poll.maxSelections);
-	const mapped = selections.map((entry) => (0, openclaw_plugin_sdk_number_runtime.parseStrictNonNegativeInteger)(entry)).filter((value) => value !== void 0).filter((value) => value >= 0 && value < poll.options.length).map((value) => String(value));
-	return (0, openclaw_plugin_sdk_string_coerce_runtime.uniqueStrings)(maxSelections > 1 ? mapped.slice(0, maxSelections) : mapped.slice(0, 1));
+	return (0, openclaw_plugin_sdk_string_coerce_runtime.uniqueStrings)(selections.map((entry) => (0, openclaw_plugin_sdk_number_runtime.parseStrictNonNegativeInteger)(entry)).filter((value) => value !== void 0).filter((value) => value >= 0 && value < poll.options.length).map((value) => String(value))).slice(0, maxSelections);
 }
 function splitMSTeamsPoll(poll) {
 	const { votes, ...metadata } = poll;
@@ -589,12 +562,6 @@ Object.defineProperty(exports, "MSTEAMS_SQLITE_MAX_POLL_ROWS", {
 		return MSTEAMS_SQLITE_MAX_POLL_ROWS;
 	}
 });
-Object.defineProperty(exports, "__toESM", {
-	enumerable: true,
-	get: function() {
-		return __toESM;
-	}
-});
 Object.defineProperty(exports, "buildMSTeamsConversationStateKey", {
 	enumerable: true,
 	get: function() {

package/dist/qa-runner-api.cjs

@@ -0,0 +1,36 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let openclaw_plugin_sdk_qa_runner_runtime = require("openclaw/plugin-sdk/qa-runner-runtime");
+//#region extensions/msteams/src/qa/cli.ts
+const DEFAULT_MSTEAMS_QA_SCENARIOS = ["channel-canary"];
+const loadMSTeamsQaAdapterRuntime = (0, openclaw_plugin_sdk_qa_runner_runtime.createLazyCliRuntimeLoader)(() => Promise.resolve().then(() => require("./adapter.runtime-DEYjslFX.cjs")));
+async function runQaMSTeams(options) {
+	await (0, openclaw_plugin_sdk_qa_runner_runtime.runLiveTransportQaSuiteCommand)({
+		channelId: "msteams",
+		defaultProviderMode: "mock-openai",
+		options,
+		selectScenarioIds: ({ scenarioIds }) => scenarioIds?.length ? [...scenarioIds] : [...DEFAULT_MSTEAMS_QA_SCENARIOS]
+	});
+}
+//#endregion
+//#region extensions/msteams/qa-runner-api.ts
+const qaRunnerCliRegistrations = [(0, openclaw_plugin_sdk_qa_runner_runtime.createLiveTransportQaCliRegistration)({
+	commandName: "msteams",
+	adapterFactory: {
+		id: "msteams",
+		isolatesInstances: true,
+		matches: ({ channelId, driver }) => channelId === "msteams" && driver === "live",
+		async create(context) {
+			return await (await loadMSTeamsQaAdapterRuntime()).createMSTeamsQaTransportAdapter(context);
+		}
+	},
+	defaultProviderMode: "mock-openai",
+	description: "Run Microsoft Teams Gateway QA against a local Bot Framework mock",
+	providerModeHelp: "Provider mode: mock-openai, aimock, or live-frontier",
+	outputDirHelp: "Microsoft Teams QA artifact directory",
+	allowFailuresHelp: "Write artifacts without setting a failing exit code when scenarios fail",
+	scenarioHelp: "Run only the named Microsoft Teams QA scenario (repeatable)",
+	sutAccountHelp: "Normalized Microsoft Teams SUT account id in QA artifacts",
+	run: runQaMSTeams
+})];
+//#endregion
+exports.qaRunnerCliRegistrations = qaRunnerCliRegistrations;

package/dist/{resolve-allowlist-CEj9sABO.cjs → resolve-allowlist-C6YcNC9a.cjs}

@@ -5,16 +5,74 @@ let openclaw_plugin_sdk_lazy_runtime = require("openclaw/plugin-sdk/lazy-runtime
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
 let openclaw_plugin_sdk_ssrf_runtime = require("openclaw/plugin-sdk/ssrf-runtime");
+let openclaw_plugin_sdk_html_entity_runtime = require("openclaw/plugin-sdk/html-entity-runtime");
+let openclaw_plugin_sdk_fetch_runtime = require("openclaw/plugin-sdk/fetch-runtime");
 let openclaw_plugin_sdk_provider_http = require("openclaw/plugin-sdk/provider-http");
 let node_buffer = require("node:buffer");
 let node_dns_promises = require("node:dns/promises");
 let openclaw_plugin_sdk_ssrf_policy = require("openclaw/plugin-sdk/ssrf-policy");
 let openclaw_plugin_sdk_number_runtime = require("openclaw/plugin-sdk/number-runtime");
 let openclaw_plugin_sdk_text_utility_runtime = require("openclaw/plugin-sdk/text-utility-runtime");
+let openclaw_plugin_sdk_error_runtime = require("openclaw/plugin-sdk/error-runtime");
 let openclaw_plugin_sdk_secret_file = require("openclaw/plugin-sdk/secret-file");
 let node_module = require("node:module");
 let openclaw_plugin_sdk_secret_input = require("openclaw/plugin-sdk/secret-input");
-let openclaw_plugin_sdk_html_entity_runtime = require("openclaw/plugin-sdk/html-entity-runtime");
+//#region extensions/msteams/src/inbound.ts
+/**
+* Strip HTML tags, preserving text content.
+*/
+function htmlToPlainText(html) {
+	return (0, openclaw_plugin_sdk_html_entity_runtime.decodeHtmlEntities)(html.replace(/<[^>]*>/g, " ")).replaceAll("\xA0", " ").replace(/\s+/g, " ").trim();
+}
+/**
+* Extract quote info from MS Teams HTML reply attachments.
+* Teams wraps quoted content in a blockquote with itemtype="http://schema.skype.com/Reply".
+*/
+function extractMSTeamsQuoteInfo(attachments) {
+	for (const att of attachments) {
+		let content = "";
+		if (typeof att.content === "string") content = att.content;
+		else if (typeof att.content === "object" && att.content !== null) {
+			const record = att.content;
+			content = typeof record.text === "string" ? record.text : typeof record.body === "string" ? record.body : "";
+		}
+		if (!content) continue;
+		if (!content.includes("http://schema.skype.com/Reply")) continue;
+		const senderMatch = /<strong[^>]*itemprop=["']mri["'][^>]*>(.*?)<\/strong>/i.exec(content);
+		const sender = senderMatch?.[1] ? htmlToPlainText(senderMatch[1]) : void 0;
+		const bodyMatch = /<p[^>]*itemprop=["']copy["'][^>]*>(.*?)<\/p>/is.exec(content) ?? /<p[^>]*itemprop=["']preview["'][^>]*>(.*?)<\/p>/is.exec(content);
+		const body = bodyMatch?.[1] ? htmlToPlainText(bodyMatch[1]) : void 0;
+		const id = /<blockquote[^>]*\bitemid=["']([^"']+)["'][^>]*>/is.exec(content)?.[1]?.trim() || void 0;
+		if (body) return {
+			sender: sender ?? "unknown",
+			body,
+			...id ? { id } : {}
+		};
+	}
+}
+function normalizeMSTeamsConversationId(raw) {
+	return raw.split(";")[0] ?? raw;
+}
+function extractMSTeamsConversationMessageId(raw) {
+	if (!raw) return;
+	return (/(?:^|;)messageid=([^;]+)/i.exec(raw)?.[1]?.trim() ?? "") || void 0;
+}
+function parseMSTeamsActivityTimestamp(value) {
+	if (!value) return;
+	if (value instanceof Date) return value;
+	if (typeof value !== "string") return;
+	const date = new Date(value);
+	return Number.isNaN(date.getTime()) ? void 0 : date;
+}
+function stripMSTeamsMentionTags(text) {
+	return text.replace(/<at[^>]*>.*?<\/at>/gi, "").trim();
+}
+function wasMSTeamsBotMentioned(activity) {
+	const botId = activity.recipient?.id;
+	if (!botId) return false;
+	return (activity.entities ?? []).some((e) => e.type === "mention" && e.mentioned?.id === botId);
+}
+//#endregion
 //#region extensions/msteams/src/request-timeout.ts
 const MSTEAMS_REQUEST_TIMEOUT_MS = 3e4;
 const MSTEAMS_SHAREPOINT_UPLOAD_BASE_TIMEOUT_MS = 5 * 6e4;
@@ -58,52 +116,6 @@ async function withMSTeamsAbortableRequestTimeout(params) {
 	}
 }
 //#endregion
-//#region extensions/msteams/src/response-with-release.ts
-const NULL_BODY_STATUSES = /* @__PURE__ */ new Set([
-	101,
-	204,
-	205,
-	304
-]);
-function responseWithRelease(response, release) {
-	let released = false;
-	const releaseOnce = async () => {
-		if (released) return;
-		released = true;
-		await release();
-	};
-	if (!response.body || NULL_BODY_STATUSES.has(response.status)) {
-		releaseOnce();
-		return response;
-	}
-	const reader = response.body.getReader();
-	const body = new ReadableStream({
-		async pull(controller) {
-			try {
-				const next = await reader.read();
-				if (next.done) {
-					controller.close();
-					await releaseOnce();
-					return;
-				}
-				controller.enqueue(next.value);
-			} catch (error) {
-				await releaseOnce();
-				throw error;
-			}
-		},
-		async cancel(reason) {
-			reader.cancel(reason).catch(() => void 0);
-			await releaseOnce();
-		}
-	});
-	return new Response(body, {
-		status: response.status,
-		statusText: response.statusText,
-		headers: response.headers
-	});
-}
-//#endregion
 //#region extensions/msteams/src/attachments/shared.ts
 const IMAGE_EXT_RE = /\.(avif|bmp|gif|heic|heif|jpe?g|png|tiff?|webp)$/i;
 const IMG_SRC_RE = /<img[^>]+src=["']([^"']+)["'][^>]*>/gi;
@@ -477,6 +489,9 @@ async function resolveAndValidateIP(hostname, resolveFn) {
 }
 /** Maximum number of redirects to follow in safeFetch. */
 const MAX_SAFE_REDIRECTS = 5;
+function isRedirectStatus(status) {
+	return status === 301 || status === 302 || status === 303 || status === 307 || status === 308;
+}
 /**
 * Fetch a URL with redirect: "manual", validating each redirect target
 * against the hostname allowlist and optional DNS-resolved IP (anti-SSRF).
@@ -493,6 +508,13 @@ async function safeFetch(params) {
 	if (!isUrlAllowed(currentUrl, params.allowHosts)) throw new Error(`Initial download URL blocked: ${currentUrl}`);
 	if (currentHeaders.has("authorization") && params.authorizationAllowHosts && !isUrlAllowed(currentUrl, params.authorizationAllowHosts)) currentHeaders.delete("authorization");
 	if (!hasDispatcher) {
+		const lookupFn = async (hostname) => {
+			const resolved = await resolveFn(hostname);
+			return [{
+				...resolved,
+				family: resolved.address.includes(":") ? 6 : 4
+			}];
+		};
 		const guarded = await (0, openclaw_plugin_sdk_ssrf_runtime.fetchWithSsrFGuard)({
 			url: currentUrl,
 			fetchImpl: resolveGuardedFetchImpl({
@@ -506,12 +528,12 @@ async function safeFetch(params) {
 			maxRedirects: MAX_SAFE_REDIRECTS,
 			requireHttps: true,
 			policy: resolveMediaSsrfPolicy(params.allowHosts),
-			lookupFn: resolveFn,
+			lookupFn,
 			retainAuthorizationRedirectHostnameAllowlist: resolveRetainedAuthorizationRedirectHostnameAllowlist(params.authorizationAllowHosts),
 			auditContext: "msteams.attachment",
 			timeoutMs: params.timeoutMs ?? 3e4
 		});
-		return responseWithRelease(guarded.response, guarded.release);
+		return (0, openclaw_plugin_sdk_fetch_runtime.responseWithRelease)(guarded.response, guarded.release);
 	}
 	if (resolveFn) try {
 		const initialHost = new URL(currentUrl).hostname;
@@ -525,13 +547,7 @@ async function safeFetch(params) {
 			headers: currentHeaders,
 			redirect: "manual"
 		});
-		if (![
-			301,
-			302,
-			303,
-			307,
-			308
-		].includes(res.status)) return res;
+		if (!isRedirectStatus(res.status)) return res;
 		const location = res.headers.get("location");
 		if (!location) return res;
 		let redirectUrl;
@@ -656,6 +672,117 @@ function normalizeBotFrameworkServiceUrl(serviceUrl) {
 	throw new Error(`Blocked Microsoft Teams serviceUrl host: ${describeBotFrameworkServiceUrlHost(serviceUrl)}`);
 }
 //#endregion
+//#region extensions/msteams/src/qa/private-runtime.ts
+const PRIVATE_QA_BUILD_ENV = "OPENCLAW_BUILD_PRIVATE_QA";
+const PRIVATE_QA_NONCE_HEADER = "x-openclaw-msteams-qa-nonce";
+const PRIVATE_QA_RUNTIME_SYMBOL = Symbol.for("openclaw.msteams.privateQaRuntime");
+var PrivateQaHttpClient = class PrivateQaHttpClient {
+	constructor(connectorUrl, nonce, options = {}) {
+		this.connectorUrl = connectorUrl;
+		this.nonce = nonce;
+		this.options = options;
+	}
+	clone(options = {}) {
+		return new PrivateQaHttpClient(this.connectorUrl, this.nonce, {
+			...this.options,
+			...options,
+			headers: {
+				...this.options.headers,
+				...options.headers
+			}
+		});
+	}
+	async request(config) {
+		const sourceUrl = new URL(config.url ?? "", "https://smba.trafficmanager.net");
+		const targetUrl = new URL(`${sourceUrl.pathname}${sourceUrl.search}`, this.connectorUrl);
+		const headers = new Headers(this.options.headers);
+		for (const [key, value] of Object.entries(config.headers ?? {})) if (value != null) headers.set(key, String(value));
+		headers.set(PRIVATE_QA_NONCE_HEADER, this.nonce);
+		const token = typeof this.options.token === "function" ? await this.options.token() : this.options.token;
+		if (token) headers.set("authorization", `Bearer ${token}`);
+		const method = String(config.method ?? "GET").toUpperCase();
+		const { response, release } = await (0, openclaw_plugin_sdk_ssrf_runtime.fetchWithSsrFGuard)({
+			url: targetUrl.toString(),
+			init: {
+				method,
+				headers,
+				body: method === "GET" || method === "HEAD" || config.data == null ? void 0 : typeof config.data === "string" ? config.data : JSON.stringify(config.data)
+			},
+			policy: (0, openclaw_plugin_sdk_ssrf_runtime.ssrfPolicyFromHttpBaseUrlAllowedOrigin)(targetUrl.toString()),
+			maxRedirects: 0,
+			auditContext: "msteams-private-qa-connector"
+		});
+		try {
+			const text = await response.text();
+			const data = text ? JSON.parse(text) : void 0;
+			if (!response.ok) throw new Error(`Microsoft Teams private QA connector returned HTTP ${response.status}`);
+			return {
+				data,
+				status: response.status,
+				statusText: response.statusText,
+				headers: Object.fromEntries(response.headers),
+				config
+			};
+		} finally {
+			await release();
+		}
+	}
+	get(url, config = {}) {
+		return this.request({
+			...config,
+			method: "GET",
+			url
+		});
+	}
+	post(url, data, config = {}) {
+		return this.request({
+			...config,
+			data,
+			method: "POST",
+			url
+		});
+	}
+	put(url, data, config = {}) {
+		return this.request({
+			...config,
+			data,
+			method: "PUT",
+			url
+		});
+	}
+	patch(url, data, config = {}) {
+		return this.request({
+			...config,
+			data,
+			method: "PATCH",
+			url
+		});
+	}
+	delete(url, config = {}) {
+		return this.request({
+			...config,
+			method: "DELETE",
+			url
+		});
+	}
+};
+function resolveMSTeamsPrivateQaRuntime(env = process.env, bootstrap = globalThis[PRIVATE_QA_RUNTIME_SYMBOL]) {
+	if (!bootstrap) return;
+	if (env[PRIVATE_QA_BUILD_ENV] !== "1") throw new Error("Microsoft Teams private QA runtime requires OPENCLAW_BUILD_PRIVATE_QA=1");
+	const connectorUrl = bootstrap.connectorUrl?.trim();
+	const nonce = bootstrap.nonce?.trim();
+	const botToken = bootstrap.botToken?.trim();
+	if (!connectorUrl || !nonce || !botToken) throw new Error("Microsoft Teams private QA bootstrap requires connector URL, nonce, and bot token");
+	const parsedConnectorUrl = new URL(connectorUrl);
+	if (parsedConnectorUrl.protocol !== "http:" || parsedConnectorUrl.hostname !== "127.0.0.1" && parsedConnectorUrl.hostname !== "localhost") throw new Error("Microsoft Teams private QA connector must use loopback HTTP");
+	return {
+		client: new PrivateQaHttpClient(parsedConnectorUrl.toString(), nonce),
+		listenHost: "127.0.0.1",
+		skipAuth: true,
+		token: async () => botToken
+	};
+}
+//#endregion
 //#region extensions/msteams/src/user-agent.ts
 let cachedUserAgent;
 function resolveTeamsSdkVersion() {
@@ -733,13 +860,19 @@ async function createMSTeamsExpressAdapter(serverOrApp) {
 */
 async function createMSTeamsApp(creds, options) {
 	const { App, cloudFromName } = await loadSdkModules();
+	const privateQaRuntime = resolveMSTeamsPrivateQaRuntime();
 	const cloud = options?.cloud ?? "Public";
 	const serviceUrl = options?.serviceUrl ? normalizeBotFrameworkServiceUrl(options.serviceUrl) : void 0;
 	const appOptions = {
-		client: options?.httpClient ?? {
+		client: privateQaRuntime?.client ?? options?.httpClient ?? {
 			headers: { "User-Agent": buildOpenClawUserAgentFragment() },
 			timeout: 3e4
 		},
+		...privateQaRuntime ? {
+			clientSecret: "",
+			skipAuth: privateQaRuntime.skipAuth,
+			token: privateQaRuntime.token
+		} : {},
 		...options?.httpServerAdapter ? { httpServerAdapter: options.httpServerAdapter } : {},
 		...options?.messagingEndpoint ? { messagingEndpoint: options.messagingEndpoint } : {},
 		cloud: cloudFromName(cloud),
@@ -766,7 +899,7 @@ async function createFederatedApp(creds, App, appOptions) {
 	try {
 		privateKey = await (0, openclaw_plugin_sdk_secret_file.readSecretFile)(creds.certificatePath, "Microsoft Teams certificate");
 	} catch (err) {
-		const msg = err instanceof Error ? err.message : String(err);
+		const msg = (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err);
 		throw new Error(`Failed to read certificate file at '${creds.certificatePath}': ${msg}`, { cause: err });
 	}
 	return createCertificateApp(creds, privateKey, App, appOptions);
@@ -854,6 +987,10 @@ function createMSTeamsTokenBody(params) {
 function resolveMSTeamsTokenExpiresAt(value) {
 	return (0, openclaw_plugin_sdk_number_runtime.resolveExpiresAtMsFromDurationSeconds)(value, { bufferMs: EXPIRY_BUFFER_MS });
 }
+function assertMSTeamsTokenResponseObject(data, failureLabel) {
+	if (!(0, openclaw_plugin_sdk_string_coerce_runtime.isRecord)(data)) throw new Error(`MSTeams ${failureLabel} failed: invalid token response fields`);
+	return data;
+}
 function parseMSTeamsTokenResponse(data, failureLabel) {
 	const expiresAt = resolveMSTeamsTokenExpiresAt(data.expires_in);
 	if (typeof data.access_token !== "string" || !data.access_token || expiresAt === void 0 || data.refresh_token !== void 0 && typeof data.refresh_token !== "string" || data.scope !== void 0 && typeof data.scope !== "string") throw new Error(`MSTeams ${failureLabel} failed: invalid token response fields`);
@@ -880,7 +1017,7 @@ async function fetchMSTeamsTokens(params) {
 	});
 	try {
 		if (!response.ok) throw await createMSTeamsHttpError(response, `MSTeams ${params.failureLabel} failed`);
-		return parseMSTeamsTokenResponse(await (0, openclaw_plugin_sdk_provider_http.readProviderJsonResponse)(response, `MSTeams ${params.failureLabel} failed`), params.failureLabel);
+		return parseMSTeamsTokenResponse(assertMSTeamsTokenResponseObject(await (0, openclaw_plugin_sdk_provider_http.readProviderJsonResponse)(response, `MSTeams ${params.failureLabel} failed`), params.failureLabel), params.failureLabel);
 	} finally {
 		await release();
 	}
@@ -1050,21 +1187,30 @@ async function requestGraph(params) {
 	try {
 		if (!response.ok) throw await createMSTeamsHttpError(response, `${params.errorPrefix ?? "Graph"} ${params.path} failed`);
 		releaseInFinally = false;
-		return responseWithRelease(response, release);
+		return (0, openclaw_plugin_sdk_fetch_runtime.responseWithRelease)(response, release);
 	} finally {
 		if (releaseInFinally) await release();
 	}
 }
 async function readOptionalGraphJson(res, label) {
-	if (res.status === 204 || res.headers?.get?.("content-length") === "0") return;
+	if (res.status === 204 || res.headers.get("content-length") === "0") return;
 	return await (0, openclaw_plugin_sdk_provider_http.readProviderJsonResponse)(res, label);
 }
-async function fetchGraphJson(params) {
-	return await readOptionalGraphJson(await requestGraph({
+async function mutateGraphJson(params) {
+	const errorPrefix = `Graph${params.beta ? " beta" : ""} ${params.method}`;
+	return readOptionalGraphJson(await requestGraph({
 		token: params.token,
 		path: params.path,
 		method: params.method,
 		body: params.body,
+		root: params.beta ? GRAPH_BETA : void 0,
+		errorPrefix
+	}), `${errorPrefix} ${params.path} failed`);
+}
+async function fetchGraphJson(params) {
+	return await readOptionalGraphJson(await requestGraph({
+		token: params.token,
+		path: params.path,
 		headers: params.headers,
 		deadline: params.deadline
 	}), `Graph ${params.path} failed`);
@@ -1159,41 +1305,13 @@ async function listTeamsByNameWithPageInfo(token, query) {
 		path: `/groups?$filter=${encodeURIComponent(filter)}&$select=id,displayName`
 	});
 }
-async function postGraphJson(params) {
-	return readOptionalGraphJson(await requestGraph({
-		token: params.token,
-		path: params.path,
-		method: "POST",
-		body: params.body,
-		errorPrefix: "Graph POST"
-	}), `Graph POST ${params.path} failed`);
-}
-async function postGraphBetaJson(params) {
-	return readOptionalGraphJson(await requestGraph({
-		token: params.token,
-		path: params.path,
-		method: "POST",
-		root: GRAPH_BETA,
-		body: params.body,
-		errorPrefix: "Graph beta POST"
-	}), `Graph beta POST ${params.path} failed`);
-}
 async function deleteGraphRequest(params) {
-	await requestGraph({
+	await (await requestGraph({
 		token: params.token,
 		path: params.path,
 		method: "DELETE",
 		errorPrefix: "Graph DELETE"
-	});
-}
-async function patchGraphJson(params) {
-	return readOptionalGraphJson(await requestGraph({
-		token: params.token,
-		path: params.path,
-		method: "PATCH",
-		body: params.body,
-		errorPrefix: "Graph PATCH"
-	}), `Graph PATCH ${params.path} failed`);
+	})).body?.cancel().catch(() => void 0);
 }
 async function listChannelsForTeam(token, teamId) {
 	return (await listChannelsForTeamWithPageInfo(token, teamId)).items;
@@ -1241,62 +1359,6 @@ async function findGraphUsersByExactIdentity(params) {
 	});
 }
 //#endregion
-//#region extensions/msteams/src/inbound.ts
-/**
-* Strip HTML tags, preserving text content.
-*/
-function htmlToPlainText(html) {
-	return (0, openclaw_plugin_sdk_html_entity_runtime.decodeHtmlEntities)(html.replace(/<[^>]*>/g, " ")).replaceAll("\xA0", " ").replace(/\s+/g, " ").trim();
-}
-/**
-* Extract quote info from MS Teams HTML reply attachments.
-* Teams wraps quoted content in a blockquote with itemtype="http://schema.skype.com/Reply".
-*/
-function extractMSTeamsQuoteInfo(attachments) {
-	for (const att of attachments) {
-		let content = "";
-		if (typeof att.content === "string") content = att.content;
-		else if (typeof att.content === "object" && att.content !== null) {
-			const record = att.content;
-			content = typeof record.text === "string" ? record.text : typeof record.body === "string" ? record.body : "";
-		}
-		if (!content) continue;
-		if (!content.includes("http://schema.skype.com/Reply")) continue;
-		const senderMatch = /<strong[^>]*itemprop=["']mri["'][^>]*>(.*?)<\/strong>/i.exec(content);
-		const sender = senderMatch?.[1] ? htmlToPlainText(senderMatch[1]) : void 0;
-		const bodyMatch = /<p[^>]*itemprop=["']copy["'][^>]*>(.*?)<\/p>/is.exec(content) ?? /<p[^>]*itemprop=["']preview["'][^>]*>(.*?)<\/p>/is.exec(content);
-		const body = bodyMatch?.[1] ? htmlToPlainText(bodyMatch[1]) : void 0;
-		const id = /<blockquote[^>]*\bitemid=["']([^"']+)["'][^>]*>/is.exec(content)?.[1]?.trim() || void 0;
-		if (body) return {
-			sender: sender ?? "unknown",
-			body,
-			...id ? { id } : {}
-		};
-	}
-}
-function normalizeMSTeamsConversationId(raw) {
-	return raw.split(";")[0] ?? raw;
-}
-function extractMSTeamsConversationMessageId(raw) {
-	if (!raw) return;
-	return (/(?:^|;)messageid=([^;]+)/i.exec(raw)?.[1]?.trim() ?? "") || void 0;
-}
-function parseMSTeamsActivityTimestamp(value) {
-	if (!value) return;
-	if (value instanceof Date) return value;
-	if (typeof value !== "string") return;
-	const date = new Date(value);
-	return Number.isNaN(date.getTime()) ? void 0 : date;
-}
-function stripMSTeamsMentionTags(text) {
-	return text.replace(/<at[^>]*>.*?<\/at>/gi, "").trim();
-}
-function wasMSTeamsBotMentioned(activity) {
-	const botId = activity.recipient?.id;
-	if (!botId) return false;
-	return (activity.entities ?? []).some((e) => e.type === "mention" && e.mentioned?.id === botId);
-}
-//#endregion
 //#region extensions/msteams/src/resolve-allowlist.ts
 const MSTEAMS_GROUP_CONVERSATION_ID = /^19:.+@thread\.(?:tacv2|skype|v2)$/i;
 function normalizeExactMatch(value) {
@@ -1930,6 +1992,12 @@ Object.defineProperty(exports, "isLikelyImageAttachment", {
 		return isLikelyImageAttachment;
 	}
 });
+Object.defineProperty(exports, "isRedirectStatus", {
+	enumerable: true,
+	get: function() {
+		return isRedirectStatus;
+	}
+});
 Object.defineProperty(exports, "isUrlAllowed", {
 	enumerable: true,
 	get: function() {
@@ -1978,6 +2046,12 @@ Object.defineProperty(exports, "looksLikeMSTeamsTargetId", {
 		return looksLikeMSTeamsTargetId;
 	}
 });
+Object.defineProperty(exports, "mutateGraphJson", {
+	enumerable: true,
+	get: function() {
+		return mutateGraphJson;
+	}
+});
 Object.defineProperty(exports, "normalizeBotFrameworkServiceUrl", {
 	enumerable: true,
 	get: function() {
@@ -2038,24 +2112,6 @@ Object.defineProperty(exports, "parseMSTeamsTeamEntry", {
 		return parseMSTeamsTeamEntry;
 	}
 });
-Object.defineProperty(exports, "patchGraphJson", {
-	enumerable: true,
-	get: function() {
-		return patchGraphJson;
-	}
-});
-Object.defineProperty(exports, "postGraphBetaJson", {
-	enumerable: true,
-	get: function() {
-		return postGraphBetaJson;
-	}
-});
-Object.defineProperty(exports, "postGraphJson", {
-	enumerable: true,
-	get: function() {
-		return postGraphJson;
-	}
-});
 Object.defineProperty(exports, "projectStableMSTeamsGroupAllowlist", {
 	enumerable: true,
 	get: function() {
@@ -2110,6 +2166,12 @@ Object.defineProperty(exports, "resolveMSTeamsMediaKind", {
 		return resolveMSTeamsMediaKind;
 	}
 });
+Object.defineProperty(exports, "resolveMSTeamsPrivateQaRuntime", {
+	enumerable: true,
+	get: function() {
+		return resolveMSTeamsPrivateQaRuntime;
+	}
+});
 Object.defineProperty(exports, "resolveMSTeamsRequestTimeoutMs", {
 	enumerable: true,
 	get: function() {