@openclaw/msteams 2026.7.2-beta.7 → 2026.8.1-beta.2

package/dist/{src-B_BdEvcr.cjs → src-Bz9wY0Mr.cjs}

@@ -1,11 +1,12 @@
-const require_polls = require("./polls-BWKNpBSg.cjs");
+const require_rolldown_runtime = require("./rolldown-runtime-D6vf50IK.cjs");
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 require("./runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-CEj9sABO.cjs");
-const require_channel = require("./channel-C7QxRjBW.cjs");
-const require_setup_surface = require("./setup-surface-ByWjaXEn.cjs");
-const require_sso_token_store = require("./sso-token-store-TKYk_Ms7.cjs");
-const require_messenger = require("./messenger-DTiaLTDO.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-C6YcNC9a.cjs");
+const require_channel = require("./channel-DfCbi0d_.cjs");
+const require_setup_surface = require("./setup-surface-DAhGL2h8.cjs");
+const require_polls = require("./polls-DvuJvaDG.cjs");
+const require_sso_token_store = require("./sso-token-store-ChhO1f4i.cjs");
+const require_messenger = require("./messenger-BqA8G3pY.cjs");
 let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
@@ -14,10 +15,10 @@ let openclaw_plugin_sdk_ssrf_runtime = require("openclaw/plugin-sdk/ssrf-runtime
 let openclaw_plugin_sdk_provider_http = require("openclaw/plugin-sdk/provider-http");
 let openclaw_plugin_sdk_number_runtime = require("openclaw/plugin-sdk/number-runtime");
 let openclaw_plugin_sdk_text_utility_runtime = require("openclaw/plugin-sdk/text-utility-runtime");
+let openclaw_plugin_sdk_error_runtime = require("openclaw/plugin-sdk/error-runtime");
 let openclaw_plugin_sdk_routing = require("openclaw/plugin-sdk/routing");
 let node_crypto = require("node:crypto");
-node_crypto = require_polls.__toESM(node_crypto, 1);
-let openclaw_plugin_sdk_error_runtime = require("openclaw/plugin-sdk/error-runtime");
+node_crypto = require_rolldown_runtime.__toESM(node_crypto, 1);
 let openclaw_plugin_sdk_channel_inbound = require("openclaw/plugin-sdk/channel-inbound");
 let openclaw_plugin_sdk_channel_ingress_runtime = require("openclaw/plugin-sdk/channel-ingress-runtime");
 let openclaw_plugin_sdk_context_visibility_runtime = require("openclaw/plugin-sdk/context-visibility-runtime");
@@ -26,7 +27,9 @@ let openclaw_plugin_sdk_agent_runtime = require("openclaw/plugin-sdk/agent-runti
 let openclaw_plugin_sdk_extension_shared = require("openclaw/plugin-sdk/extension-shared");
 let openclaw_plugin_sdk_plugin_runtime = require("openclaw/plugin-sdk/plugin-runtime");
 let openclaw_plugin_sdk_dedupe_runtime = require("openclaw/plugin-sdk/dedupe-runtime");
+let openclaw_plugin_sdk_plugin_state_runtime = require("openclaw/plugin-sdk/plugin-state-runtime");
 let openclaw_plugin_sdk_collection_runtime = require("openclaw/plugin-sdk/collection-runtime");
+let openclaw_plugin_sdk_gateway_runtime = require("openclaw/plugin-sdk/gateway-runtime");
 let openclaw_plugin_sdk_channel_pairing = require("openclaw/plugin-sdk/channel-pairing");
 let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_runtime_group_policy = require("openclaw/plugin-sdk/runtime-group-policy");
@@ -237,50 +240,53 @@ async function resolveMSTeamsSenderAccess(params) {
 		channelName: activity.channelData?.channel?.name,
 		allowNameMatching
 	});
-	return {
-		...await (0, openclaw_plugin_sdk_channel_ingress_runtime.resolveStableChannelMessageIngress)({
-			channelId: "msteams",
-			accountId: pairing.accountId,
-			identity: msteamsIngressIdentity,
-			cfg: params.cfg,
-			readStoreAllowFrom: pairing.readAllowFromStore,
-			subject: {
-				stableId: senderId,
-				aliases: {
-					"sender-name": senderName,
-					...!isDirectMessage ? { "conversation-id": conversationId } : {}
-				}
-			},
-			conversation: {
-				kind: isDirectMessage ? "direct" : convType === "channel" ? "channel" : "group",
-				id: conversationId,
-				parentId: activity.channelData?.team?.id
-			},
-			route: (0, openclaw_plugin_sdk_channel_ingress_runtime.channelIngressRoutes)(!isDirectMessage && channelGate.allowlistConfigured && {
-				id: "msteams:team-channel",
-				kind: "nestedAllowlist",
-				allowed: channelGate.allowed,
-				precedence: 0,
-				matchId: "msteams-route",
-				...channelGate.allowed && groupPolicy === "allowlist" ? {
-					senderPolicy: "deny-when-empty",
-					senderAllowFromSource: "effective-group"
-				} : {}
-			}),
-			dmPolicy,
-			groupPolicy,
-			policy: {
-				groupAllowFromFallbackToAllowFrom: true,
-				mutableIdentifierMatching: allowNameMatching ? "enabled" : "disabled"
-			},
-			allowFrom: configuredDmAllowFrom,
-			groupAllowFrom,
-			command: {
-				allowTextCommands: true,
-				hasControlCommand: params.hasControlCommand === true,
-				directGroupAllowFrom: isDirectMessage ? "effective" : "none"
+	const resolved = await (0, openclaw_plugin_sdk_channel_ingress_runtime.resolveStableChannelMessageIngress)({
+		channelId: "msteams",
+		accountId: pairing.accountId,
+		identity: msteamsIngressIdentity,
+		cfg: params.cfg,
+		readStoreAllowFrom: pairing.readAllowFromStore,
+		subject: {
+			stableId: senderId,
+			aliases: {
+				"sender-name": senderName,
+				...!isDirectMessage ? { "conversation-id": conversationId } : {}
 			}
+		},
+		conversation: {
+			kind: isDirectMessage ? "direct" : convType === "channel" ? "channel" : "group",
+			id: conversationId,
+			threadId: params.conversationThreadId
+		},
+		...params.contextBinding ? { contextBinding: params.contextBinding } : {},
+		route: (0, openclaw_plugin_sdk_channel_ingress_runtime.channelIngressRoutes)(!isDirectMessage && channelGate.allowlistConfigured && {
+			id: "msteams:team-channel",
+			kind: "nestedAllowlist",
+			allowed: channelGate.allowed,
+			precedence: 0,
+			matchId: "msteams-route",
+			...channelGate.allowed && groupPolicy === "allowlist" ? {
+				senderPolicy: "deny-when-empty",
+				senderAllowFromSource: "effective-group"
+			} : {}
 		}),
+		dmPolicy,
+		groupPolicy,
+		policy: {
+			groupAllowFromFallbackToAllowFrom: true,
+			mutableIdentifierMatching: allowNameMatching ? "enabled" : "disabled"
+		},
+		allowFrom: configuredDmAllowFrom,
+		groupAllowFrom,
+		command: {
+			allowTextCommands: true,
+			hasControlCommand: params.hasControlCommand === true,
+			directGroupAllowFrom: isDirectMessage ? "effective" : "none"
+		}
+	});
+	return {
+		...resolved,
+		channelIngress: resolved,
 		pairing,
 		isDirectMessage,
 		conversationId,
@@ -381,7 +387,7 @@ async function admitMSTeamsMessage(params) {
 			params.log.debug?.("dropping group message (groupPolicy: allowlist, no allowlist)", { conversationId: params.conversationId });
 			return null;
 		}
-		if (!senderAccess.allowed && senderAccess.reasonCode === "group_policy_not_allowlisted") {
+		if (!senderAccess.allowed) {
 			const allowMatch = require_channel.resolveMSTeamsAllowlistMatch({
 				allowFrom: effectiveGroupAllowFrom,
 				senderId,
@@ -473,7 +479,7 @@ async function fetchBotFrameworkAttachmentInfo(params) {
 			timeoutMs: require_resolve_allowlist.resolveMSTeamsRequestTimeoutMs(params.deadline)
 		});
 	} catch (err) {
-		params.logger?.warn?.("msteams botFramework attachmentInfo fetch failed", { error: err instanceof Error ? err.message : String(err) });
+		params.logger?.warn?.("msteams botFramework attachmentInfo fetch failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
 		return;
 	}
 	if (!response.ok) {
@@ -484,7 +490,7 @@ async function fetchBotFrameworkAttachmentInfo(params) {
 	try {
 		return await (0, openclaw_plugin_sdk_provider_http.readProviderJsonResponse)(response, "msteams botFramework attachmentInfo");
 	} catch (err) {
-		params.logger?.warn?.("msteams botFramework attachmentInfo parse failed", { error: err instanceof Error ? err.message : String(err) });
+		params.logger?.warn?.("msteams botFramework attachmentInfo parse failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
 		return;
 	}
 }
@@ -506,7 +512,7 @@ async function saveBotFrameworkAttachmentView(params) {
 			timeoutMs: require_resolve_allowlist.resolveMSTeamsRequestTimeoutMs(params.deadline)
 		});
 	} catch (err) {
-		params.logger?.warn?.("msteams botFramework attachmentView fetch failed", { error: err instanceof Error ? err.message : String(err) });
+		params.logger?.warn?.("msteams botFramework attachmentView fetch failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
 		return;
 	}
 	if (!response.ok) {
@@ -519,7 +525,7 @@ async function saveBotFrameworkAttachmentView(params) {
 		contentLength = (0, openclaw_plugin_sdk_media_runtime.parseMediaContentLength)(response.headers.get("content-length"));
 	} catch (err) {
 		await response.body?.cancel().catch(() => void 0);
-		params.logger?.warn?.("msteams botFramework attachmentView invalid content-length", { error: err instanceof Error ? err.message : String(err) });
+		params.logger?.warn?.("msteams botFramework attachmentView invalid content-length", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
 		return;
 	}
 	if (contentLength !== null && contentLength > params.maxBytes) {
@@ -536,7 +542,7 @@ async function saveBotFrameworkAttachmentView(params) {
 			originalFilename: params.preserveFilenames ? params.fileNameHint : void 0
 		});
 	} catch (err) {
-		params.logger?.warn?.("msteams botFramework attachmentView save failed", { error: err instanceof Error ? err.message : String(err) });
+		params.logger?.warn?.("msteams botFramework attachmentView save failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
 		return;
 	} finally {
 		await response.body?.cancel().catch(() => void 0);
@@ -564,7 +570,7 @@ async function downloadMSTeamsBotFrameworkAttachment(params) {
 			work: () => tokenProvider.getAccessToken(BOT_FRAMEWORK_SCOPE)
 		});
 	} catch (err) {
-		params.logger?.warn?.("msteams botFramework token acquisition failed", { error: err instanceof Error ? err.message : String(err) });
+		params.logger?.warn?.("msteams botFramework token acquisition failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
 		return;
 	}
 	if (!accessToken) return;
@@ -665,7 +671,7 @@ async function downloadMSTeamsBotFrameworkAttachments(params) {
 			sourceId: attachmentId
 		});
 		params.logger?.warn?.("msteams botFramework attachment download failed", {
-			error: err instanceof Error ? err.message : String(err),
+			error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err),
 			attachmentId
 		});
 	}
@@ -878,9 +884,6 @@ function scopeCandidatesForUrl(url) {
 		return ["https://api.botframework.com", "https://graph.microsoft.com"];
 	}
 }
-function isRedirectStatus(status) {
-	return status === 301 || status === 302 || status === 303 || status === 307 || status === 308;
-}
 async function resolveInlineDataImageMime(inline) {
 	const mime = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(await require_runtime.getMSTeamsRuntime().media.detectMime({
 		buffer: inline.data,
@@ -903,7 +906,7 @@ async function fetchWithAuthFallback(params) {
 	const tokenProvider = params.tokenProvider;
 	if (firstAttempt.status !== 401 && firstAttempt.status !== 403) return firstAttempt;
 	if (!require_resolve_allowlist.isUrlAllowed(params.url, params.policy.authAllowHosts)) return firstAttempt;
-	await firstAttempt.body?.cancel();
+	let fallbackAttempt = firstAttempt;
 	const scopes = scopeCandidatesForUrl(params.url);
 	const fetchFn = params.fetchFn ?? fetch;
 	for (const scope of scopes) try {
@@ -926,15 +929,11 @@ async function fetchWithAuthFallback(params) {
 			resolveFn: params.resolveFn,
 			timeoutMs: require_resolve_allowlist.resolveMSTeamsRequestTimeoutMs(params.deadline)
 		});
-		if (authAttempt.ok) return authAttempt;
-		if (isRedirectStatus(authAttempt.status)) return authAttempt;
-		if (authAttempt.status !== 401 && authAttempt.status !== 403) {
-			await authAttempt.body?.cancel();
-			continue;
-		}
-		await authAttempt.body?.cancel();
+		await fallbackAttempt.body?.cancel().catch(() => void 0);
+		if (authAttempt.ok || require_resolve_allowlist.isRedirectStatus(authAttempt.status)) return authAttempt;
+		fallbackAttempt = authAttempt;
 	} catch {}
-	return firstAttempt;
+	return fallbackAttempt;
 }
 /**
 * Download all file attachments from a Teams message (images, documents, etc.).
@@ -1015,7 +1014,7 @@ async function downloadMSTeamsAttachments(params) {
 				}, candidate.sourceId));
 			} catch (err) {
 				out.push(withSourceId({ kind: candidate.mediaKind }, candidate.sourceId));
-				params.logger?.warn?.("msteams inline attachment decode failed", { error: err instanceof Error ? err.message : String(err) });
+				params.logger?.warn?.("msteams inline attachment decode failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
 			}
 			continue;
 		}
@@ -1047,7 +1046,7 @@ async function downloadMSTeamsAttachments(params) {
 			out.push(withSourceId(media, candidate.sourceId));
 		} catch (err) {
 			out.push(withSourceId({ kind: candidate.mediaKind }, candidate.sourceId));
-			const msg = err instanceof Error ? err.message : String(err);
+			const msg = (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err);
 			params.logger?.warn?.(`msteams attachment download failed host=${safeHostForLog(candidate.url)} error=${msg}`);
 		}
 	}
@@ -1086,6 +1085,10 @@ function buildMSTeamsGraphMessageUrl(params) {
 	if (!chatId) return;
 	return `${require_resolve_allowlist.GRAPH_ROOT}/chats/${encodeURIComponent(chatId)}/messages/${encodeURIComponent(messageId)}`;
 }
+async function releaseGraphResponse(response, release) {
+	if (!response.bodyUsed) response.body?.cancel().catch(() => void 0);
+	await release();
+}
 async function fetchGraphCollection(params) {
 	const fetchFn = params.fetchFn ?? fetch;
 	const { response, release } = await (0, openclaw_plugin_sdk_ssrf_runtime.fetchWithSsrFGuard)({
@@ -1098,13 +1101,10 @@ async function fetchGraphCollection(params) {
 	});
 	try {
 		const status = response.status;
-		if (!response.ok) {
-			await response.body?.cancel().catch(() => void 0);
-			return {
-				status,
-				items: []
-			};
-		}
+		if (!response.ok) return {
+			status,
+			items: []
+		};
 		try {
 			return {
 				status,
@@ -1117,7 +1117,7 @@ async function fetchGraphCollection(params) {
 			};
 		}
 	} finally {
-		await release();
+		await releaseGraphResponse(response, release);
 	}
 }
 function normalizeGraphAttachment(att) {
@@ -1149,7 +1149,7 @@ async function downloadGraphHostedContent(params) {
 			deadline: params.deadline
 		});
 	} catch (err) {
-		params.logger?.warn?.("msteams graph hostedContents fetch failed", { error: err instanceof Error ? err.message : String(err) });
+		params.logger?.warn?.("msteams graph hostedContents fetch failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
 		return {
 			media: [],
 			count: 0
@@ -1194,11 +1194,11 @@ async function downloadGraphHostedContent(params) {
 					sourceId: item.id
 				});
 			} finally {
-				await release();
+				await releaseGraphResponse(valRes, release);
 			}
 		} catch (err) {
 			out.push(createGraphHostedContentFact(item));
-			params.logger?.warn?.("msteams graph hostedContent value fetch failed", { error: err instanceof Error ? err.message : String(err) });
+			params.logger?.warn?.("msteams graph hostedContent value fetch failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
 			continue;
 		}
 	}
@@ -1227,9 +1227,9 @@ async function downloadMSTeamsGraphMedia(params) {
 	} catch (err) {
 		params.logger?.debug?.("graph media token acquisition failed", {
 			messageUrl,
-			error: err instanceof Error ? err.message : String(err)
+			error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)
 		});
-		params.logger?.warn?.("msteams graph token acquisition failed", { error: err instanceof Error ? err.message : String(err) });
+		params.logger?.warn?.("msteams graph token acquisition failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
 		return {
 			media: [],
 			messageUrl,
@@ -1260,10 +1260,10 @@ async function downloadMSTeamsGraphMedia(params) {
 				} catch (err) {
 					params.logger?.debug?.("graph media message parse failed", {
 						messageUrl,
-						error: err instanceof Error ? err.message : String(err)
+						error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)
 					});
 					params.logger?.warn?.("msteams graph message parse failed", {
-						error: err instanceof Error ? err.message : String(err),
+						error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err),
 						messageUrl
 					});
 					msgData = {};
@@ -1275,14 +1275,14 @@ async function downloadMSTeamsGraphMedia(params) {
 				status: messageStatus
 			});
 		} finally {
-			await release();
+			await releaseGraphResponse(msgRes, release);
 		}
 	} catch (err) {
 		params.logger?.debug?.("graph media message fetch failed", {
 			messageUrl,
-			error: err instanceof Error ? err.message : String(err)
+			error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)
 		});
-		params.logger?.warn?.("msteams graph message fetch failed", { error: err instanceof Error ? err.message : String(err) });
+		params.logger?.warn?.("msteams graph message fetch failed", { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err) });
 	}
 	for (const att of referenceAttachments) {
 		const name = att.name ?? "file";
@@ -1348,7 +1348,7 @@ async function downloadMSTeamsGraphMedia(params) {
 		} catch (err) {
 			sharePointMedia.push(unavailableMedia);
 			params.logger?.warn?.("msteams SharePoint reference download failed", {
-				error: err instanceof Error ? err.message : String(err),
+				error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err),
 				name
 			});
 		}
@@ -1387,7 +1387,7 @@ async function downloadMSTeamsGraphMedia(params) {
 		});
 	} catch (err) {
 		params.logger?.warn?.("msteams graph attachment download failed", {
-			error: err instanceof Error ? err.message : String(err),
+			error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err),
 			messageUrl
 		});
 	}
@@ -1654,12 +1654,22 @@ function createTeamsReplyStreamController(params) {
 	let emittedText = "";
 	let acknowledgedText = "";
 	let acknowledgedStreamId;
+	let replacementFinalPending = false;
+	let replacementEmitFailed = false;
+	let replacementSettlementPending = false;
+	let replacementTextAwaitingAcknowledgement;
+	let deferredReplacementEntries = [];
+	let finalMetadataQueued = false;
+	let failedSegmentFallbackPrepared = false;
 	const streamEvents = stream?.events;
 	let streamChunkSubscription;
 	if (typeof streamEvents?.on === "function" && typeof streamEvents.off === "function") streamChunkSubscription = streamEvents.on("chunk", (activity) => {
-		if (activity.type !== "typing" || activity.channelData?.streamType !== "streaming" || !activity.id || !activity.text || acknowledgedStreamId !== void 0 && activity.id !== acknowledgedStreamId || !activity.text.startsWith(acknowledgedText) || !emittedText.startsWith(activity.text)) return;
+		const replacementAcknowledgementPending = replacementTextAwaitingAcknowledgement !== void 0;
+		const replacementAcknowledgement = typeof activity.text === "string" && replacementAcknowledgementPending && activity.text === replacementTextAwaitingAcknowledgement;
+		if (activity.type !== "typing" || activity.channelData?.streamType !== "streaming" || !activity.id || !activity.text || acknowledgedStreamId !== void 0 && activity.id !== acknowledgedStreamId || (replacementAcknowledgementPending ? !replacementAcknowledgement : !activity.text.startsWith(acknowledgedText)) || !emittedText.startsWith(activity.text)) return;
 		acknowledgedStreamId = activity.id;
 		acknowledgedText = activity.text;
+		if (activity.text === replacementTextAwaitingAcknowledgement) replacementTextAwaitingAcknowledgement = void 0;
 	});
 	const wasCanceled = () => canceledLocally || Boolean(stream?.canceled);
 	const releaseStreamChunkSubscription = () => {
@@ -1667,6 +1677,14 @@ function createTeamsReplyStreamController(params) {
 		streamEvents?.off(streamChunkSubscription);
 		streamChunkSubscription = void 0;
 	};
+	const acknowledgedNativeDelivery = () => {
+		if (!acknowledgedStreamId || !acknowledgedText) return { visibleReplySent: false };
+		return {
+			visibleReplySent: true,
+			content: acknowledgedText,
+			messageId: acknowledgedStreamId
+		};
+	};
 	const fallbackPayloadAfterAcknowledgedText = (payload) => {
 		if (!acknowledgedText || typeof payload.text !== "string" || !payload.text.startsWith(acknowledgedText)) return payload;
 		const remainingText = payload.text.slice(acknowledgedText.length);
@@ -1684,6 +1702,35 @@ function createTeamsReplyStreamController(params) {
 			mediaUrls: void 0
 		} : payload;
 	};
+	const finalStreamActivity = (text) => ({
+		type: "message",
+		...text ? { text } : {},
+		entities: [{
+			type: "https://schema.org/Message",
+			"@type": "Message",
+			"@context": "https://schema.org",
+			"@id": "",
+			additionalType: ["AIGeneratedContent"]
+		}],
+		channelData: params.feedbackLoopEnabled ? { feedbackLoopEnabled: true } : {}
+	});
+	const deferredReplacementLogicalContent = () => {
+		return deferredReplacementEntries.map((entry) => entry.payload.text).filter((text) => Boolean(text)).join("\n") || void 0;
+	};
+	const takeDeferredReplacementPayloads = (replacementFallback) => {
+		const payloads = deferredReplacementEntries.flatMap((entry) => {
+			if (entry.kind === "payload") return [entry.payload];
+			const hasMedia = Boolean(entry.payload.mediaUrl || entry.payload.mediaUrls?.length);
+			const text = replacementFallback?.text;
+			if (!text && !hasMedia) return [];
+			return [{
+				...entry.payload,
+				text: text || void 0
+			}];
+		});
+		deferredReplacementEntries = [];
+		return payloads;
+	};
 	/**
 	* Render the current informative status line into the streaming card. Pulls
 	* the rotating "Thinking..." label from msteams config (or the plugin-sdk
@@ -1708,14 +1755,19 @@ function createTeamsReplyStreamController(params) {
 				canceledLocally = true;
 				return;
 			}
-			params.log?.debug?.(`stream informative update failed: ${err instanceof Error ? err.message : String(err)}`);
+			params.log?.debug?.(`stream informative update failed: ${(0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)}`);
 		}
 	};
 	const progressDraftGate = (0, openclaw_plugin_sdk_channel_outbound.createChannelProgressDraftGate)({ onStart: renderInformativeUpdate });
 	return {
 		async onReplyStart() {},
 		onPartialReply(payload) {
-			if (!stream || !payload.text || wasCanceled() || streamMode !== "partial" || streamFinalizationPending) return;
+			if (!stream || !payload.text || wasCanceled() || streamMode !== "partial") return;
+			if (replacementSettlementPending && replacementFinalPending) {
+				pendingFinalPayload = { text: payload.text };
+				return;
+			}
+			if (streamFinalizationPending) return;
 			const fullText = payload.text;
 			let prefixLength = 0;
 			while (prefixLength < emittedText.length && prefixLength < fullText.length && emittedText[prefixLength] === fullText[prefixLength]) prefixLength += 1;
@@ -1724,7 +1776,13 @@ function createTeamsReplyStreamController(params) {
 			if (!delta) return;
 			if (previousRemainder.trim()) {
 				stream.clearText();
-				streamFailed = true;
+				if (streamFailed) {
+					streamFinalizationPending = true;
+					return;
+				}
+				replacementFinalPending = true;
+				replacementSettlementPending = true;
+				pendingFinalPayload = { text: fullText };
 				streamFinalizationPending = true;
 				return;
 			}
@@ -1739,7 +1797,7 @@ function createTeamsReplyStreamController(params) {
 					return;
 				}
 				streamFailed = true;
-				params.log?.warn?.(`msteams stream emit failed, falling back to block delivery: ${err instanceof Error ? err.message : String(err)}`);
+				params.log?.warn?.(`msteams stream emit failed, falling back to block delivery: ${(0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)}`);
 			}
 		},
 		/**
@@ -1781,6 +1839,49 @@ function createTeamsReplyStreamController(params) {
 		preparePayload(payload) {
 			if (!stream) return payload;
 			if (wasCanceled()) return;
+			if (replacementSettlementPending) {
+				if (!replacementFinalPending) {
+					deferredReplacementEntries.push({
+						kind: "payload",
+						payload
+					});
+					return;
+				}
+				if (!payload.text) {
+					deferredReplacementEntries.push({
+						kind: "payload",
+						payload
+					});
+					return;
+				}
+				replacementFinalPending = false;
+				deferredReplacementEntries.push({
+					kind: "replacement",
+					payload
+				});
+				pendingFinalPayload = fallbackPayloadForSuppressedFinal(payload);
+				try {
+					replacementTextAwaitingAcknowledgement = payload.text;
+					stream.emit(finalStreamActivity(payload.text));
+					finalMetadataQueued = true;
+					emittedText = payload.text;
+					tokensEmitted = false;
+					return;
+				} catch (err) {
+					replacementTextAwaitingAcknowledgement = void 0;
+					tokensEmitted = false;
+					if (isStreamCancelledError(err)) {
+						canceledLocally = true;
+						pendingFinalPayload = void 0;
+						deferredReplacementEntries = [];
+						return;
+					}
+					streamFailed = true;
+					replacementEmitFailed = true;
+					params.log?.warn?.(`msteams stream replacement failed, falling back to block delivery: ${(0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)}`);
+					return;
+				}
+			}
 			if (tokensEmitted && !streamFailed) {
 				const hasMedia = Boolean(payload.mediaUrl || payload.mediaUrls?.length);
 				pendingFinalPayload = fallbackPayloadForSuppressedFinal(payload);
@@ -1792,11 +1893,9 @@ function createTeamsReplyStreamController(params) {
 				} : void 0;
 			}
 			if (streamFailed) {
-				const fallback = fallbackPayloadAfterAcknowledgedText(payload);
+				const fallback = failedSegmentFallbackPrepared ? payload : fallbackPayloadAfterAcknowledgedText(payload);
+				failedSegmentFallbackPrepared = true;
 				pendingFinalPayload = void 0;
-				acknowledgedText = "";
-				acknowledgedStreamId = void 0;
-				releaseStreamChunkSubscription();
 				return fallback;
 			}
 			if (streamMode === "progress" && payload.text) try {
@@ -1813,7 +1912,7 @@ function createTeamsReplyStreamController(params) {
 					canceledLocally = true;
 					return;
 				}
-				params.log?.debug?.(`progress-mode finalize failed: ${err instanceof Error ? err.message : String(err)}`);
+				params.log?.debug?.(`progress-mode finalize failed: ${(0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)}`);
 			}
 			return payload;
 		},
@@ -1828,74 +1927,88 @@ function createTeamsReplyStreamController(params) {
 				releaseStreamChunkSubscription();
 				return { visibleReplySent: false };
 			}
-			const content = wasCanceled() ? acknowledgedText || void 0 : pendingFinalPayload?.text ?? (emittedText || void 0);
+			let logicalContent;
 			try {
 				if (wasCanceled()) {
 					pendingFinalPayload = void 0;
+					deferredReplacementEntries = [];
 					streamFinalizationPending = false;
-					return {
-						visibleReplySent: content !== void 0,
-						...content === void 0 ? {} : { content }
-					};
+					return acknowledgedNativeDelivery();
 				}
-				if (!streamFinalizationPending) return {
-					visibleReplySent: true,
-					...content === void 0 ? {} : { content }
-				};
-				const finalEntities = [{
-					type: "https://schema.org/Message",
-					"@type": "Message",
-					"@context": "https://schema.org",
-					"@id": "",
-					additionalType: ["AIGeneratedContent"]
-				}];
-				const finalChannelData = params.feedbackLoopEnabled ? { feedbackLoopEnabled: true } : {};
-				stream.emit({
-					type: "message",
-					entities: finalEntities,
-					channelData: finalChannelData
-				});
+				if (!streamFinalizationPending) return acknowledgedNativeDelivery();
+				if (replacementSettlementPending && replacementFinalPending && pendingFinalPayload?.text) {
+					replacementFinalPending = false;
+					deferredReplacementEntries.push({
+						kind: "replacement",
+						payload: pendingFinalPayload
+					});
+					replacementTextAwaitingAcknowledgement = pendingFinalPayload.text;
+					logicalContent = deferredReplacementLogicalContent();
+					stream.emit(finalStreamActivity(pendingFinalPayload.text));
+					finalMetadataQueued = true;
+					emittedText = pendingFinalPayload.text;
+				}
+				logicalContent ??= replacementSettlementPending ? deferredReplacementLogicalContent() : void 0;
+				const content = pendingFinalPayload?.text ?? (emittedText || void 0);
+				if (!finalMetadataQueued) stream.emit(finalStreamActivity());
 				const result = await stream.close();
 				streamFinalizationPending = false;
 				if (!result) {
 					const fallback = pendingFinalPayload;
 					pendingFinalPayload = void 0;
-					const fallbackPayload = fallback && !wasCanceled() ? fallbackPayloadAfterAcknowledgedText(fallback) : void 0;
+					const canceled = wasCanceled();
+					const replacementFallback = replacementSettlementPending && fallback && !canceled ? fallbackPayloadAfterAcknowledgedText(fallback) : void 0;
+					const fallbackPayload = !replacementSettlementPending && fallback && !canceled ? fallbackPayloadAfterAcknowledgedText(fallback) : void 0;
+					const postNativePayloads = replacementSettlementPending && !canceled ? takeDeferredReplacementPayloads(replacementFallback) : [];
+					if (canceled) deferredReplacementEntries = [];
 					return {
-						visibleReplySent: true,
-						...content === void 0 ? {} : { content },
-						...fallbackPayload ? { fallbackPayload } : {}
+						...acknowledgedNativeDelivery(),
+						...!canceled && logicalContent ? { logicalContent } : {},
+						...fallbackPayload ? { fallbackPayload } : {},
+						...postNativePayloads.length > 0 ? { postNativePayloads } : {}
 					};
 				}
+				const replacementFallback = replacementSettlementPending && replacementEmitFailed && pendingFinalPayload ? fallbackPayloadAfterAcknowledgedText(pendingFinalPayload) : void 0;
 				pendingFinalPayload = void 0;
-				const messageId = require_messenger.extractMessageId(result) ?? void 0;
+				const messageId = require_messenger.extractMessageId(result) ?? acknowledgedStreamId;
+				const postNativePayloads = replacementSettlementPending ? takeDeferredReplacementPayloads(replacementFallback) : [];
+				const nativeContent = replacementEmitFailed ? acknowledgedText || void 0 : content;
 				return {
-					visibleReplySent: true,
-					...content === void 0 ? {} : { content },
-					...messageId ? { messageId } : {}
+					visibleReplySent: replacementEmitFailed ? Boolean(nativeContent) : true,
+					...nativeContent === void 0 ? {} : { content: nativeContent },
+					...logicalContent ? { logicalContent } : {},
+					...messageId && (!replacementEmitFailed || nativeContent) ? { messageId } : {},
+					...postNativePayloads.length > 0 ? { postNativePayloads } : {}
 				};
 			} catch (err) {
 				if (isStreamCancelledError(err)) {
 					canceledLocally = true;
 					pendingFinalPayload = void 0;
+					deferredReplacementEntries = [];
 					streamFinalizationPending = false;
-					return {
-						visibleReplySent: true,
-						...content === void 0 ? {} : { content }
-					};
+					return acknowledgedNativeDelivery();
 				}
 				streamFailed = true;
 				streamFinalizationPending = false;
-				params.log?.warn?.(`msteams stream finalize failed: ${err instanceof Error ? err.message : String(err)}`);
+				params.log?.warn?.(`msteams stream finalize failed: ${(0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err)}`);
 				const fallback = pendingFinalPayload;
 				pendingFinalPayload = void 0;
-				const fallbackPayload = fallback ? fallbackPayloadAfterAcknowledgedText(fallback) : void 0;
+				const replacementFallback = replacementSettlementPending && fallback ? fallbackPayloadAfterAcknowledgedText(fallback) : void 0;
+				const fallbackPayload = !replacementSettlementPending && fallback ? fallbackPayloadAfterAcknowledgedText(fallback) : void 0;
+				const postNativePayloads = replacementSettlementPending ? takeDeferredReplacementPayloads(replacementFallback) : [];
 				return {
-					visibleReplySent: true,
-					...content === void 0 ? {} : { content },
-					...fallbackPayload ? { fallbackPayload } : {}
+					...acknowledgedNativeDelivery(),
+					...logicalContent ? { logicalContent } : {},
+					...fallbackPayload ? { fallbackPayload } : {},
+					...postNativePayloads.length > 0 ? { postNativePayloads } : {}
 				};
 			} finally {
+				finalMetadataQueued = false;
+				replacementEmitFailed = false;
+				replacementFinalPending = false;
+				replacementSettlementPending = false;
+				replacementTextAwaitingAcknowledgement = void 0;
+				deferredReplacementEntries = [];
 				releaseStreamChunkSubscription();
 			}
 		},
@@ -1998,6 +2111,7 @@ function createMSTeamsReplyDispatcher(params) {
 	const blockStreamingEnabled = blockStreamingResolved ?? false;
 	const typingIndicatorEnabled = typeof msteamsCfg?.typingIndicator === "boolean" ? msteamsCfg.typingIndicator : true;
 	const pendingDeliveries = [];
+	const joinAcceptedContents = (contents) => contents.filter((content) => Boolean(content)).join("\n");
 	const sendMessages = async (messages) => {
 		return require_messenger.sendMSTeamsMessages({
 			replyStyle: params.replyStyle,
@@ -2046,11 +2160,13 @@ function createMSTeamsReplyDispatcher(params) {
 		});
 	};
 	const deliveryOutcome = (delivery) => {
-		const messageIds = [...delivery.nativeMessageId ? [delivery.nativeMessageId] : [], ...delivery.messageIds];
+		const acceptedParts = [...delivery.nativeResult ? [delivery.nativeResult] : [], ...delivery.blockResults];
+		const messageIds = acceptedParts.flatMap((part) => part.messageIds);
+		const content = delivery.errors.length > 0 ? joinAcceptedContents(acceptedParts.map((part) => part.content)) : delivery.content;
 		return {
-			visibleReplySent: delivery.visibleReplySent,
+			visibleReplySent: acceptedParts.length > 0,
 			...messageIds.length > 0 ? { messageIds } : {},
-			...delivery.visibleReplySent && delivery.content !== void 0 ? { content: delivery.content } : {}
+			...acceptedParts.length > 0 && content !== void 0 ? { content } : {}
 		};
 	};
 	const settlePendingDelivery = (delivery) => {
@@ -2062,7 +2178,7 @@ function createMSTeamsReplyDispatcher(params) {
 			return;
 		}
 		const error = delivery.errors.find((candidate) => !(candidate instanceof openclaw_plugin_sdk_error_runtime.PlatformMessageNotDispatchedError)) ?? delivery.errors[0];
-		delivery.finalization.reject(delivery.visibleReplySent ? (0, openclaw_plugin_sdk_channel_inbound.createChannelPartialDeliveryError)(error, {
+		delivery.finalization.reject(outcome.visibleReplySent ? (0, openclaw_plugin_sdk_channel_inbound.createChannelPartialDeliveryError)(error, {
 			...outcome,
 			visibleReplySent: true
 		}) : error);
@@ -2072,12 +2188,11 @@ function createMSTeamsReplyDispatcher(params) {
 			messages,
 			finalization: (0, openclaw_plugin_sdk_extension_shared.createDeferred)(),
 			content: payload.text,
+			blockResults: [],
 			native,
 			nativeSettled: !native,
 			blockSettled: messages.length === 0,
 			settled: false,
-			visibleReplySent: false,
-			messageIds: [],
 			errors: []
 		};
 		pendingDeliveries.push(delivery);
@@ -2093,9 +2208,11 @@ function createMSTeamsReplyDispatcher(params) {
 			const sentIds = [];
 			for (const msg of toSend) try {
 				const msgIds = await sendMessages([msg]);
-				delivery.visibleReplySent ||= msgIds.length > 0;
 				const validIds = msgIds.filter((id) => id.trim() && id !== "unknown");
-				delivery.messageIds.push(...validIds);
+				if (msgIds.length > 0) delivery.blockResults.push({
+					messageIds: validIds,
+					...msg.text ? { content: msg.text } : {}
+				});
 				sentIds.push(...validIds);
 			} catch (msgError) {
 				failed += 1;
@@ -2179,11 +2296,16 @@ function createMSTeamsReplyDispatcher(params) {
 			settlePendingDelivery(nativeDelivery);
 			return;
 		}
-		nativeDelivery.visibleReplySent ||= nativeResult.visibleReplySent;
-		nativeDelivery.nativeMessageId = nativeResult.messageId;
-		if (nativeResult.content !== void 0) nativeDelivery.content = nativeResult.content;
-		if (nativeResult.fallbackPayload) {
-			nativeDelivery.messages.push(...renderReplyPayload(nativeResult.fallbackPayload));
+		if (nativeResult.visibleReplySent) nativeDelivery.nativeResult = {
+			messageIds: nativeResult.messageId ? [nativeResult.messageId] : [],
+			...nativeResult.content !== void 0 ? { content: nativeResult.content } : {}
+		};
+		const hasPostNativePayloads = Boolean(nativeResult.postNativePayloads?.length);
+		if (nativeResult.logicalContent !== void 0) nativeDelivery.content = nativeResult.logicalContent;
+		else if (nativeResult.content !== void 0 && (!nativeResult.fallbackPayload && !hasPostNativePayloads || nativeDelivery.content === void 0)) nativeDelivery.content = nativeResult.content;
+		const afterNativePayloads = [...nativeResult.fallbackPayload ? [nativeResult.fallbackPayload] : [], ...nativeResult.postNativePayloads ?? []];
+		if (afterNativePayloads.length > 0) {
+			nativeDelivery.messages.push(...afterNativePayloads.flatMap((payload) => renderReplyPayload(payload)));
 			nativeDelivery.blockSettled = nativeDelivery.messages.length === 0;
 		}
 		nativeDelivery.nativeSettled = true;
@@ -2201,10 +2323,10 @@ function createMSTeamsReplyDispatcher(params) {
 	const progressCallbacks = streamController.hasStream() ? {
 		onReasoningStream: async (payload) => {
 			const text = typeof payload?.text === "string" ? payload.text : void 0;
-			if (!text) return;
+			if (!text) return false;
 			if (payload?.isReasoningSnapshot !== true) {
 				await streamController.pushProgressLine(text);
-				return;
+				return false;
 			}
 			await streamController.pushProgressLine((0, openclaw_plugin_sdk_channel_outbound.buildChannelProgressDraftLine)({
 				event: "item",
@@ -2213,6 +2335,7 @@ function createMSTeamsReplyDispatcher(params) {
 				title: "Reasoning",
 				progressText: text
 			}));
+			return false;
 		},
 		onToolStart: async (payload) => {
 			const name = typeof payload?.name === "string" ? payload.name : void 0;
@@ -2225,6 +2348,7 @@ function createMSTeamsReplyDispatcher(params) {
 				...typeof payload?.phase === "string" ? { phase: payload.phase } : {},
 				...payload?.args && typeof payload.args === "object" ? { args: payload.args } : {}
 			}, detailMode === "explain" || detailMode === "raw" ? { detailMode } : void 0), name ? { toolName: name } : void 0);
+			return false;
 		},
 		onItemEvent: async (payload) => {
 			await streamController.pushProgressLine((0, openclaw_plugin_sdk_channel_outbound.buildChannelProgressDraftLineForEntry)(msteamsCfg, {
@@ -2240,13 +2364,15 @@ function createMSTeamsReplyDispatcher(params) {
 				...typeof payload?.progressText === "string" ? { progressText: payload.progressText } : {},
 				...typeof payload?.meta === "string" ? { meta: payload.meta } : {}
 			}));
+			return false;
 		},
 		onPlanUpdate: async (payload) => {
-			if (payload?.phase !== "update") return;
+			if (payload?.phase !== "update") return false;
 			await streamController.pushPlanProgress((0, openclaw_plugin_sdk_channel_outbound.normalizeAgentPlanSteps)(payload.steps), { explanation: typeof payload.explanation === "string" ? payload.explanation : void 0 });
+			return false;
 		},
 		onApprovalEvent: async (payload) => {
-			if (payload?.phase !== "requested") return;
+			if (payload?.phase !== "requested") return false;
 			await streamController.pushProgressLine((0, openclaw_plugin_sdk_channel_outbound.buildChannelProgressDraftLine)({
 				event: "approval",
 				phase: payload.phase,
@@ -2255,10 +2381,11 @@ function createMSTeamsReplyDispatcher(params) {
 				...typeof payload?.reason === "string" ? { reason: payload.reason } : {},
 				...typeof payload?.message === "string" ? { message: payload.message } : {}
 			}));
+			return false;
 		},
 		onCommandOutput: async (payload) => {
-			if (payload?.phase !== "end") return;
-			await streamController.pushProgressLine((0, openclaw_plugin_sdk_channel_outbound.buildChannelProgressDraftLine)({
+			if (payload?.phase !== "end") return false;
+			await streamController.pushProgressLine((0, openclaw_plugin_sdk_channel_outbound.buildChannelProgressDraftLineForEntry)(msteamsCfg, {
 				event: "command-output",
 				...typeof payload?.itemId === "string" ? { itemId: payload.itemId } : {},
 				...typeof payload?.toolCallId === "string" ? { toolCallId: payload.toolCallId } : {},
@@ -2268,9 +2395,10 @@ function createMSTeamsReplyDispatcher(params) {
 				...typeof payload?.status === "string" ? { status: payload.status } : {},
 				...typeof payload?.exitCode === "number" ? { exitCode: payload.exitCode } : {}
 			}));
+			return false;
 		},
 		onPatchSummary: async (payload) => {
-			if (payload?.phase !== "end") return;
+			if (payload?.phase !== "end") return false;
 			await streamController.pushProgressLine((0, openclaw_plugin_sdk_channel_outbound.buildChannelProgressDraftLine)({
 				event: "patch",
 				...typeof payload?.itemId === "string" ? { itemId: payload.itemId } : {},
@@ -2283,6 +2411,7 @@ function createMSTeamsReplyDispatcher(params) {
 				...Array.isArray(payload?.deleted) && payload.deleted.every((s) => typeof s === "string") ? { deleted: payload.deleted } : {},
 				...typeof payload?.summary === "string" ? { summary: payload.summary } : {}
 			}));
+			return false;
 		}
 	} : {};
 	return {
@@ -2292,7 +2421,10 @@ function createMSTeamsReplyDispatcher(params) {
 		},
 		delivery,
 		replyOptions: {
-			...streamController.hasStream() ? { onPartialReply: (payload) => streamController.onPartialReply(payload) } : {},
+			...streamController.hasStream() ? { onPartialReply: (payload) => {
+				streamController.onPartialReply(payload);
+				return false;
+			} } : {},
 			...progressCallbacks,
 			...shouldSuppressDefaultToolProgressMessages ? { suppressDefaultToolProgressMessages: true } : {},
 			disableBlockStreaming: blockStreamingResolved == null ? void 0 : !blockStreamingResolved,
@@ -2310,14 +2442,7 @@ const sentMessages = (0, openclaw_plugin_sdk_dedupe_runtime.createPersistentDedu
 		namespace: "msteams.sent-messages",
 		maxEntries: 1e3,
 		openStore: (options) => require_runtime.getOptionalMSTeamsRuntime()?.state.openKeyedStore(options),
-		logError: (error) => {
-			try {
-				require_runtime.getOptionalMSTeamsRuntime()?.logging.getChildLogger({
-					plugin: "msteams",
-					feature: "sent-message-state"
-				}).warn("Microsoft Teams persistent sent-message state failed", { error: String(error) });
-			} catch {}
-		},
+		logError: (0, openclaw_plugin_sdk_plugin_state_runtime.createPluginStateErrorReporter)(require_runtime.getOptionalMSTeamsRuntime, "msteams", "sent-message-state", "Microsoft Teams persistent sent-message state failed"),
 		readTimestamp: (record) => record.sentAt
 	}
 });
@@ -2389,7 +2514,21 @@ async function dispatchMSTeamsInboundTurn(params) {
 	}) : true;
 	const bodyForAgent = threadContext ? `[Thread history]\n${threadContext}\n[/Thread history]\n\n${agentBody}` : agentBody;
 	const nativeChannelId = isChannel && teamAadGroupId ? `${teamAadGroupId}/${graphChannelId}` : void 0;
-	const ctxPayload = (0, openclaw_plugin_sdk_channel_inbound.buildChannelInboundEventContext)({
+	const boundIngress = await resolveMSTeamsSenderAccess({
+		cfg,
+		activity,
+		hasControlCommand: admission.isControlCommand,
+		conversationThreadId: facts.threadId,
+		contextBinding: {
+			agentId: route.agentId,
+			sessionKey: route.sessionKey,
+			...activity.id ? { messageId: activity.id } : {},
+			...nativeChannelId ? { nativeChannelId } : {},
+			inboundEventKind: "user_request"
+		}
+	});
+	const ctxPayload = core.channel.inbound.buildContext({
+		channelIngress: boundIngress.channelIngress,
 		channel: "msteams",
 		contextVisibility: contextVisibilityMode,
 		supplemental: { quote: quoteInfo ? {
@@ -2422,6 +2561,8 @@ async function dispatchMSTeamsInboundTurn(params) {
 		},
 		reply: {
 			to: teamsTo,
+			originatingTo: `conversation:${conversationId}`,
+			messageThreadId: facts.threadId ?? void 0,
 			replyToId: activity.replyToId ?? void 0,
 			nativeChannelId
 		},
@@ -3660,6 +3801,24 @@ async function runMSTeamsFileConsentInvokeHandler(context, log) {
 	}
 }
 //#endregion
+//#region extensions/msteams/src/monitor-status.ts
+function publishMSTeamsBlocked(statusSink, lastError) {
+	statusSink?.((0, openclaw_plugin_sdk_gateway_runtime.channelBlockedPatch)(lastError, { running: true }));
+}
+function publishMSTeamsReady(statusSink, now = Date.now()) {
+	statusSink?.((0, openclaw_plugin_sdk_gateway_runtime.channelReadyPatch)({ lastConnectedAt: now }));
+}
+function publishMSTeamsRecovering(statusSink, lastError) {
+	statusSink?.({
+		connected: false,
+		lifecycle: "recovering",
+		lastError
+	});
+}
+function publishMSTeamsStopped(statusSink) {
+	statusSink?.((0, openclaw_plugin_sdk_gateway_runtime.channelStoppedPatch)());
+}
+//#endregion
 //#region extensions/msteams/src/msteams-ingress.ts
 const MSTEAMS_INGRESS_VERSION = 1;
 const MSTEAMS_INGRESS_DRAIN_INTERVAL_MS = 500;
@@ -3695,9 +3854,6 @@ function parseClaimedActivity(payload, claimedId) {
 	if (facts.eventId !== claimedId) throw new MSTeamsIngressPayloadError("invalid-activity", "Microsoft Teams activity id changed after durable admission.");
 	return parsed;
 }
-function errorText(error) {
-	return error instanceof Error ? error.message : String(error);
-}
 function createMSTeamsIngress(options) {
 	const queue = options.queue ?? require_runtime.getMSTeamsRuntime().state.openChannelIngressQueue({ accountId: options.accountId });
 	const liveContexts = /* @__PURE__ */ new Map();
@@ -3748,13 +3904,13 @@ function createMSTeamsIngress(options) {
 				};
 				return require_setup_surface.classifyMSTeamsSendError(error).kind === "auth" ? {
 					reason: "authentication-failed",
-					message: errorText(error)
+					message: (0, openclaw_plugin_sdk_error_runtime.formatErrorMessage)(error)
 				} : null;
 			},
 			onLog: (message) => options.runtime.error?.(`msteams: ${message}`)
 		},
 		createStoppedError: () => /* @__PURE__ */ new Error("Microsoft Teams ingress stopped."),
-		onError: (error) => options.runtime.error?.(`msteams ingress drain failed: ${errorText(error)}`)
+		onError: (error) => options.runtime.error?.(`msteams ingress drain failed: ${(0, openclaw_plugin_sdk_error_runtime.formatErrorMessage)(error)}`)
 	});
 	let stopTask;
 	return {
@@ -3820,6 +3976,7 @@ async function monitorMSTeamsProvider(opts) {
 	let msteamsCfg = cfg.channels?.msteams;
 	if (!msteamsCfg?.enabled) {
 		log.debug?.("msteams provider disabled");
+		publishMSTeamsBlocked(opts.statusSink, "Microsoft Teams provider is disabled");
 		return {
 			app: null,
 			shutdown: async () => {}
@@ -3828,6 +3985,7 @@ async function monitorMSTeamsProvider(opts) {
 	const creds = require_resolve_allowlist.resolveMSTeamsCredentials(msteamsCfg);
 	if (!creds) {
 		log.error("msteams credentials not configured");
+		publishMSTeamsBlocked(opts.statusSink, "Microsoft Teams credentials are not configured");
 		return {
 			app: null,
 			shutdown: async () => {}
@@ -3922,9 +4080,10 @@ async function monitorMSTeamsProvider(opts) {
 	};
 	const port = msteamsCfg.webhook?.port ?? 3978;
 	const textLimit = core.channel.text.resolveTextChunkLimit(cfg, "msteams");
-	const MB = 1024 * 1024;
-	const agentDefaults = cfg.agents?.defaults;
-	const mediaMaxBytes = typeof agentDefaults?.mediaMaxMb === "number" && agentDefaults.mediaMaxMb > 0 ? Math.floor(agentDefaults.mediaMaxMb * MB) : 8 * MB;
+	const mediaMaxBytes = (0, openclaw_plugin_sdk_media_runtime.resolveChannelMediaMaxBytes)({
+		cfg,
+		resolveChannelLimitMb: ({ cfg: channelCfg }) => channelCfg.channels?.msteams?.mediaMaxMb
+	}) ?? 8 * 1024 * 1024;
 	const conversationStore = opts.conversationStore ?? require_polls.createMSTeamsConversationStoreState();
 	const pollStore = opts.pollStore ?? require_polls.createMSTeamsPollStoreState();
 	log.info(`starting provider (port ${port})`);
@@ -4171,17 +4330,21 @@ async function monitorMSTeamsProvider(opts) {
 	});
 	await app.initialize();
 	ingress.start();
+	const privateQaRuntime = require_resolve_allowlist.resolveMSTeamsPrivateQaRuntime();
 	const httpServer = await new Promise((resolve, reject) => {
-		const server = expressApp.listen(port, (err) => err ? reject(err) : resolve(server));
+		const onListen = (err) => err ? reject(err) : resolve(server);
+		const server = privateQaRuntime ? expressApp.listen(port, privateQaRuntime.listenHost, onListen) : expressApp.listen(port, onListen);
 	}).catch(async (err) => {
 		log.error("msteams server error", { error: require_setup_surface.formatUnknownError(err) });
 		await ingress.stop();
 		throw err;
 	});
 	log.info(`msteams provider started on port ${port}`);
+	publishMSTeamsReady(opts.statusSink);
 	applyMSTeamsWebhookTimeouts(httpServer);
 	httpServer.on("error", (err) => {
 		log.error("msteams server error", { error: require_setup_surface.formatUnknownError(err) });
+		publishMSTeamsRecovering(opts.statusSink, require_setup_surface.formatUnknownError(err));
 	});
 	const shutdown = async () => {
 		log.info("shutting down msteams provider");
@@ -4192,6 +4355,7 @@ async function monitorMSTeamsProvider(opts) {
 			});
 		});
 		await ingress.stop();
+		publishMSTeamsStopped(opts.statusSink);
 	};
 	await (0, openclaw_plugin_sdk_channel_outbound.keepHttpServerTaskAlive)({
 		server: httpServer,