@openclaw/msteams 2026.7.2-beta.7 → 2026.8.1-beta.3

package/dist/{channel-C7QxRjBW.cjs → channel-KpWENcgK.cjs}

@@ -1,8 +1,7 @@
 require("./runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-CEj9sABO.cjs");
-const require_setup_surface = require("./setup-surface-ByWjaXEn.cjs");
-const require_config_schema = require("./config-schema-C4CszdDi.cjs");
-let openclaw_plugin_sdk_account_helpers = require("openclaw/plugin-sdk/account-helpers");
+const require_resolve_allowlist = require("./resolve-allowlist-CIfWUwuc.cjs");
+const require_directory_contract_api = require("./directory-contract-api.cjs");
+const require_channel_setup = require("./channel.setup-mOFtsfYz.cjs");
 let openclaw_plugin_sdk_channel_core = require("openclaw/plugin-sdk/channel-core");
 let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
 let openclaw_plugin_sdk_channel_pairing = require("openclaw/plugin-sdk/channel-pairing");
@@ -13,6 +12,7 @@ let openclaw_plugin_sdk_lazy_runtime = require("openclaw/plugin-sdk/lazy-runtime
 let openclaw_plugin_sdk_status_helpers = require("openclaw/plugin-sdk/status-helpers");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let typebox = require("typebox");
+let openclaw_plugin_sdk_reply_reference = require("openclaw/plugin-sdk/reply-reference");
 let openclaw_plugin_sdk_approval_auth_runtime = require("openclaw/plugin-sdk/approval-auth-runtime");
 let openclaw_plugin_sdk_channel_actions = require("openclaw/plugin-sdk/channel-actions");
 let openclaw_plugin_sdk_routing = require("openclaw/plugin-sdk/routing");
@@ -23,46 +23,6 @@ let openclaw_plugin_sdk_runtime_group_policy = require("openclaw/plugin-sdk/runt
 let openclaw_plugin_sdk_text_chunking = require("openclaw/plugin-sdk/text-chunking");
 let openclaw_plugin_sdk_channel_status = require("openclaw/plugin-sdk/channel-status");
 let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
-//#region extensions/msteams/src/approval-auth.ts
-const MSTEAMS_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-function normalizeMSTeamsApproverId(value) {
-	const normalized = require_resolve_allowlist.normalizeMSTeamsMessagingTarget(String(value));
-	if (!normalized?.startsWith("user:")) return;
-	const id = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(normalized.slice(5));
-	if (!id) return;
-	return MSTEAMS_ID_RE.test(id) ? id : void 0;
-}
-function resolveMSTeamsChannelConfig(cfg) {
-	return cfg.channels?.msteams;
-}
-const msTeamsApprovalAuth = (0, openclaw_plugin_sdk_approval_auth_runtime.createChannelApprovalAuth)({
-	channelLabel: "Microsoft Teams",
-	resolveInputs: ({ cfg }) => {
-		const channel = resolveMSTeamsChannelConfig(cfg);
-		return {
-			allowFrom: channel?.allowFrom,
-			defaultTo: channel?.defaultTo
-		};
-	},
-	normalizeApprover: normalizeMSTeamsApproverId,
-	normalizeSenderId: (value) => {
-		const trimmed = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(value);
-		if (!trimmed) return;
-		return MSTEAMS_ID_RE.test(trimmed) ? trimmed : void 0;
-	}
-}).approvalAuth;
-//#endregion
-//#region extensions/msteams/src/doctor.ts
-const isMSTeamsMutableAllowEntry = (0, openclaw_plugin_sdk_channel_policy.buildMutableAllowEntryDetector)({
-	prefixes: ["msteams:", "user:"],
-	stableIdPattern: /^[^\s@]+$/
-});
-const collectMSTeamsMutableAllowlistWarnings = (0, openclaw_plugin_sdk_channel_policy.createDangerousNameMatchingMutableAllowlistWarningCollector)({
-	channel: "msteams",
-	detector: isMSTeamsMutableAllowEntry,
-	collectLists: (scope) => (0, openclaw_plugin_sdk_channel_policy.collectStandardAllowlistLists)(scope)
-});
-//#endregion
 //#region extensions/msteams/src/policy.ts
 const teamScopeKey = (teamKey) => (0, openclaw_plugin_sdk_channel_policy.scopeKey)(["team", teamKey]);
 const channelScopeKey = (teamKey, channelKey) => (0, openclaw_plugin_sdk_channel_policy.scopeKey)(["team", teamKey], ["channel", channelKey]);
@@ -218,6 +178,115 @@ function resolveMSTeamsReplyPolicy(params) {
 	};
 }
 //#endregion
+//#region extensions/msteams/src/action-threading.ts
+function stripConversationPrefix(raw) {
+	const trimmed = raw.trim();
+	if (/^conversation:/i.test(trimmed)) return trimmed.slice(13).trim();
+	return trimmed;
+}
+/** Normalize Teams conversation targets for equality (strips `conversation:` and `;messageid=`). */
+function normalizeMSTeamsThreadingTarget(raw) {
+	const value = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(raw);
+	if (!value) return;
+	return require_resolve_allowlist.normalizeMSTeamsConversationId(stripConversationPrefix(value));
+}
+function extractMSTeamsResultConversationId(value) {
+	if (!(0, openclaw_plugin_sdk_string_coerce_runtime.isRecord)(value)) return;
+	const direct = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(value.conversationId);
+	if (direct) return direct;
+	const receipt = (0, openclaw_plugin_sdk_string_coerce_runtime.isRecord)(value.receipt) ? value.receipt : void 0;
+	if (!receipt) return;
+	const candidates = [...Array.isArray(receipt.raw) ? receipt.raw : [], ...Array.isArray(receipt.parts) ? receipt.parts.map((part) => (0, openclaw_plugin_sdk_string_coerce_runtime.isRecord)(part) ? part.raw : void 0) : []];
+	for (const candidate of candidates) {
+		if (!(0, openclaw_plugin_sdk_string_coerce_runtime.isRecord)(candidate)) continue;
+		const conversationId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(candidate.conversationId);
+		if (conversationId) return conversationId;
+	}
+}
+/** Recover the actual Teams conversation resolved by a successful tool send. */
+function extractMSTeamsToolSendResult(result, _send) {
+	const details = (0, openclaw_plugin_sdk_string_coerce_runtime.isRecord)(result) && (0, openclaw_plugin_sdk_string_coerce_runtime.isRecord)(result.details) ? result.details : void 0;
+	const conversationId = extractMSTeamsResultConversationId(details && (0, openclaw_plugin_sdk_string_coerce_runtime.isRecord)(details.result) ? details.result : void 0);
+	if (!conversationId) return null;
+	const normalizedConversationId = require_resolve_allowlist.normalizeMSTeamsConversationId(stripConversationPrefix(conversationId));
+	return normalizedConversationId ? { to: `conversation:${normalizedConversationId}` } : null;
+}
+function msteamsContextTargetsMatch(target, context) {
+	const normalizedTarget = normalizeMSTeamsThreadingTarget(target);
+	if (!normalizedTarget) return false;
+	const currentChannel = normalizeMSTeamsThreadingTarget(context.currentChannelId);
+	if (currentChannel && currentChannel === normalizedTarget) return true;
+	const currentMessaging = normalizeMSTeamsThreadingTarget(context.currentMessagingTarget);
+	return Boolean(currentMessaging && currentMessaging === normalizedTarget);
+}
+function resolveMSTeamsAutoThreadId(params) {
+	const explicitThreadId = require_resolve_allowlist.extractMSTeamsConversationMessageId(params.to);
+	if (explicitThreadId) return explicitThreadId;
+	const context = params.toolContext;
+	if (!context?.currentChannelId && !context?.currentMessagingTarget) return;
+	if (!msteamsContextTargetsMatch(params.to, context)) return;
+	const graphTarget = context.currentGraphChannelId ?? context.currentMessagingTarget;
+	const { team, channel } = graphTarget ? require_resolve_allowlist.parseMSTeamsTeamChannelInput(graphTarget) : {
+		team: void 0,
+		channel: void 0
+	};
+	const routeConfig = resolveMSTeamsRouteConfig({
+		cfg: params.cfg,
+		teamId: team,
+		conversationId: channel,
+		allowNameMatching: false
+	});
+	const { replyStyle } = resolveMSTeamsReplyPolicy({
+		isDirectMessage: false,
+		globalConfig: params.cfg,
+		teamConfig: routeConfig.teamConfig,
+		channelConfig: routeConfig.channelConfig
+	});
+	if (replyStyle === "top-level") return;
+	if (!context.currentThreadTs) return;
+	if (context.replyToMode !== "all" && !(0, openclaw_plugin_sdk_reply_reference.isSingleUseReplyToMode)(context.replyToMode ?? "off")) return;
+	if ((0, openclaw_plugin_sdk_reply_reference.isSingleUseReplyToMode)(context.replyToMode ?? "off") && context.hasRepliedRef?.value) return;
+	return context.currentThreadTs;
+}
+//#endregion
+//#region extensions/msteams/src/approval-auth.ts
+const MSTEAMS_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function normalizeMSTeamsApproverId(value) {
+	const normalized = require_resolve_allowlist.normalizeMSTeamsMessagingTarget(String(value));
+	const id = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(normalized?.startsWith("user:") ? normalized.slice(5) : normalized);
+	return id && MSTEAMS_ID_RE.test(id) ? id : void 0;
+}
+function resolveMSTeamsChannelConfig(cfg) {
+	return cfg.channels?.msteams;
+}
+const msTeamsApprovalAuth = (0, openclaw_plugin_sdk_approval_auth_runtime.createChannelApprovalAuth)({
+	channelLabel: "Microsoft Teams",
+	resolveInputs: ({ cfg }) => {
+		const channel = resolveMSTeamsChannelConfig(cfg);
+		return {
+			allowFrom: channel?.allowFrom,
+			defaultTo: channel?.defaultTo
+		};
+	},
+	normalizeApprover: normalizeMSTeamsApproverId,
+	normalizeSenderId: (value) => {
+		const trimmed = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(value);
+		if (!trimmed) return;
+		return MSTEAMS_ID_RE.test(trimmed) ? trimmed : void 0;
+	}
+}).approvalAuth;
+//#endregion
+//#region extensions/msteams/src/doctor.ts
+const isMSTeamsMutableAllowEntry = (0, openclaw_plugin_sdk_channel_policy.buildMutableAllowEntryDetector)({
+	prefixes: ["msteams:", "user:"],
+	stableIdPattern: /^[^\s@]+$/
+});
+const collectMSTeamsMutableAllowlistWarnings = (0, openclaw_plugin_sdk_channel_policy.createDangerousNameMatchingMutableAllowlistWarningCollector)({
+	channel: "msteams",
+	detector: isMSTeamsMutableAllowEntry,
+	collectLists: (scope) => (0, openclaw_plugin_sdk_channel_policy.collectStandardAllowlistLists)(scope)
+});
+//#endregion
 //#region extensions/msteams/src/presentation.ts
 const MSTEAMS_PRESENTATION_CAPABILITIES = {
 	supported: true,
@@ -434,8 +503,8 @@ async function resolveAllowedChannelTarget(cfg, target) {
 		allowNameMatching: (0, openclaw_plugin_sdk_dangerous_name_runtime.isDangerousNameMatchingEnabled)(teams)
 	});
 	const stableTarget = await resolveStableChannelTarget(cfg, target);
+	if (!directRoute.allowlistConfigured && groupPolicy !== "open" && stableTarget) throw new openclaw_plugin_sdk_channel_actions.ToolAuthorizationError("Microsoft Teams read target is not allowed. Configure channels.msteams.teams.<team>.channels for this channel, or deliberately set channels.msteams.groupPolicy to \"open\".");
 	if (directRoute.allowed) return stableTarget;
-	if (!directRoute.allowlistConfigured) return groupPolicy === "open" ? stableTarget : void 0;
 	if (!stableTarget || !teams?.teams) return;
 	const [stableTeamId, stableChannelId] = stableTarget.split("/", 2);
 	if (!stableTeamId || !stableChannelId) return;
@@ -545,20 +614,32 @@ function resolveMSTeamsRouteSessionKey(params) {
 }
 //#endregion
 //#region extensions/msteams/src/session-route.ts
+function inferMSTeamsTargetChatType(raw) {
+	const target = (0, openclaw_plugin_sdk_channel_core.stripChannelTargetPrefix)(raw, "msteams", "teams");
+	if (!target) return;
+	const lower = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(target);
+	const rawId = (0, openclaw_plugin_sdk_channel_core.stripTargetKindPrefix)(target);
+	if (!rawId) return;
+	const conversationId = require_resolve_allowlist.normalizeMSTeamsConversationId(rawId);
+	if (lower.startsWith("user:") || /^[0-9a-f-]{16,}$/i.test(conversationId)) return "direct";
+	if (/@thread\.tacv2/i.test(conversationId)) return "channel";
+	return /^19:.+@thread\.(?:skype|v2)$/i.test(conversationId) ? "group" : void 0;
+}
 function resolveMSTeamsOutboundSessionRoute(params) {
 	const trimmed = (0, openclaw_plugin_sdk_channel_core.stripChannelTargetPrefix)(params.target, "msteams", "teams");
 	if (!trimmed) return null;
-	const isUser = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(trimmed).startsWith("user:");
+	const resolvedKind = params.resolvedTarget?.kind;
+	const targetChatType = inferMSTeamsTargetChatType(trimmed);
+	const isUser = resolvedKind === "user" || targetChatType === "direct";
 	const rawId = (0, openclaw_plugin_sdk_channel_core.stripTargetKindPrefix)(trimmed);
 	if (!rawId) return null;
 	const conversationId = require_resolve_allowlist.normalizeMSTeamsConversationId(rawId);
-	const isChannel = !isUser && /@thread\.tacv2/i.test(conversationId);
+	const isChannel = !isUser && targetChatType === "channel";
 	const embeddedThreadId = require_resolve_allowlist.extractMSTeamsConversationMessageId(rawId);
 	const explicitThreadId = params.threadId ?? params.replyToId;
 	const channelThreadId = embeddedThreadId ?? (explicitThreadId !== void 0 && explicitThreadId !== null ? String(explicitThreadId) : void 0);
-	const resolvedKind = params.resolvedTarget?.kind;
 	const isCanonicalUserId = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(conversationId);
-	const recipientSessionExact = (isUser || resolvedKind === "user") && isCanonicalUserId || (isChannel ? channelThreadId !== void 0 : resolvedKind === "group");
+	const recipientSessionExact = isUser && isCanonicalUserId || (isChannel ? channelThreadId !== void 0 : resolvedKind === "group");
 	const route = (0, openclaw_plugin_sdk_channel_core.buildChannelOutboundSessionRoute)({
 		cfg: params.cfg,
 		agentId: params.agentId,
@@ -604,7 +685,13 @@ const collectMSTeamsSecurityWarnings = (0, openclaw_plugin_sdk_channel_policy.cr
 	resolveGroupPolicy: ({ cfg }) => cfg.channels?.msteams?.groupPolicy,
 	collect: ({ groupPolicy }) => groupPolicy === "open" ? ["- MS Teams groups: groupPolicy=\"open\" allows any member to trigger (mention-gated). Set channels.msteams.groupPolicy=\"allowlist\" + channels.msteams.groupAllowFrom to restrict senders."] : []
 });
-const loadMSTeamsChannelRuntime = (0, openclaw_plugin_sdk_lazy_runtime.createLazyRuntimeNamedExport)(() => Promise.resolve().then(() => require("./channel.runtime-DjY6d_hd.cjs")), "msTeamsChannelRuntime");
+const collectMSTeamsSecurityFindings = openclaw_plugin_sdk_channel_policy.createConditionalWarningCollector.findings({
+	collectWarnings: collectMSTeamsSecurityWarnings,
+	checkId: "channels.msteams.groups.open",
+	severity: "critical",
+	title: "MS Teams security warning"
+});
+const loadMSTeamsChannelRuntime = (0, openclaw_plugin_sdk_lazy_runtime.createLazyRuntimeNamedExport)(() => Promise.resolve().then(() => require("./channel.runtime-Bkzj8jZ0.cjs")), "msTeamsChannelRuntime");
 function jsonActionResult(data) {
 	return {
 		content: [{
@@ -700,7 +787,7 @@ function resolveActionContent(params) {
 	return typeof params.text === "string" ? params.text : typeof params.content === "string" ? params.content : typeof params.message === "string" ? params.message : "";
 }
 function readOptionalTrimmedString(params, key) {
-	return typeof params[key] === "string" ? params[key].trim() || void 0 : void 0;
+	return (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params[key]);
 }
 function resolveActionUploadFilePath(params) {
 	for (const key of [
@@ -712,67 +799,35 @@ function resolveActionUploadFilePath(params) {
 		if (value.trim()) return value;
 	}
 }
-function resolveRequiredActionTarget(params) {
-	const to = params.graphOnly ? resolveGraphActionTarget(params.toolParams, params.currentChannelId, params.currentGraphChannelId, params.currentChatType) : resolveActionTarget(params.toolParams, params.currentChannelId);
+function resolveMSTeamsActionTarget(params) {
+	return params.graphOnly ? resolveGraphActionTarget(params.toolParams, params.currentChannelId, params.currentGraphChannelId, params.currentChatType) : resolveActionTarget(params.toolParams, params.currentChannelId);
+}
+async function runWithRequiredActionTarget(params) {
+	const to = resolveMSTeamsActionTarget(params);
 	if (!to) return actionError(`${params.actionLabel} requires a target (to).`);
-	return to;
+	return await params.run(to);
 }
-function resolveRequiredActionMessageTarget(params) {
-	const to = params.graphOnly ? resolveGraphActionTarget(params.toolParams, params.currentChannelId, params.currentGraphChannelId, params.currentChatType) : resolveActionTarget(params.toolParams, params.currentChannelId);
+async function runWithRequiredActionMessageTarget(params) {
+	const to = resolveMSTeamsActionTarget(params);
 	const messageId = resolveActionMessageId(params.toolParams);
 	if (!to || !messageId) return actionError(`${params.actionLabel} requires a target (to) and messageId.`);
-	return {
+	return await params.run({
 		to,
 		messageId
-	};
+	});
 }
-function resolveRequiredActionPinnedMessageTarget(params) {
-	const to = params.graphOnly ? resolveGraphActionTarget(params.toolParams, params.currentChannelId, params.currentGraphChannelId, params.currentChatType) : resolveActionTarget(params.toolParams, params.currentChannelId);
+async function runWithRequiredActionPinnedMessageTarget(params) {
+	const to = resolveMSTeamsActionTarget(params);
 	const pinnedMessageId = resolveActionPinnedMessageId(params.toolParams);
 	if (!to || !pinnedMessageId) return actionError(`${params.actionLabel} requires a target (to) and pinnedMessageId.`);
-	return {
+	return await params.run({
 		to,
 		pinnedMessageId
-	};
-}
-async function runWithRequiredActionTarget(params) {
-	const to = resolveRequiredActionTarget({
-		actionLabel: params.actionLabel,
-		toolParams: params.toolParams,
-		currentChannelId: params.currentChannelId,
-		currentGraphChannelId: params.currentGraphChannelId,
-		currentChatType: params.currentChatType,
-		graphOnly: params.graphOnly
 	});
-	if (typeof to !== "string") return to;
-	return await params.run(to);
-}
-async function runWithRequiredActionMessageTarget(params) {
-	const target = resolveRequiredActionMessageTarget({
-		actionLabel: params.actionLabel,
-		toolParams: params.toolParams,
-		currentChannelId: params.currentChannelId,
-		currentGraphChannelId: params.currentGraphChannelId,
-		currentChatType: params.currentChatType,
-		graphOnly: params.graphOnly
-	});
-	if ("isError" in target) return target;
-	return await params.run(target);
-}
-async function runWithRequiredActionPinnedMessageTarget(params) {
-	const target = resolveRequiredActionPinnedMessageTarget({
-		actionLabel: params.actionLabel,
-		toolParams: params.toolParams,
-		currentChannelId: params.currentChannelId,
-		currentGraphChannelId: params.currentGraphChannelId,
-		currentChatType: params.currentChatType,
-		graphOnly: params.graphOnly
-	});
-	if ("isError" in target) return target;
-	return await params.run(target);
 }
 function describeMSTeamsMessageTool({ cfg }) {
-	const enabled = cfg.channels?.msteams?.enabled !== false && Boolean(require_resolve_allowlist.resolveMSTeamsCredentials(cfg.channels?.msteams));
+	const account = require_channel_setup.resolveMSTeamsAccount(cfg);
+	const enabled = account.enabled && account.configured && account.tokenStatus === "available";
 	return {
 		actions: enabled ? [
 			"upload-file",
@@ -842,38 +897,13 @@ const msteamsMessageAdapter = (0, openclaw_plugin_sdk_channel_outbound.createCha
 });
 const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlugin)({
 	base: {
-		id: "msteams",
-		meta: {
-			...require_setup_surface.msteamsMeta,
-			aliases: [...require_setup_surface.msteamsMeta.aliases]
-		},
-		setupWizard: require_setup_surface.msteamsSetupWizard,
-		capabilities: {
-			chatTypes: [
-				"direct",
-				"channel",
-				"thread"
-			],
-			polls: true,
-			threads: true,
-			media: true
-		},
+		...require_channel_setup.msteamsSetupPlugin,
 		streaming: { blockStreamingCoalesceDefaults: {
 			minChars: 1500,
 			idleMs: 1e3
 		} },
 		agentPrompt: { messageToolHints: () => ["- Adaptive Cards supported. Use `action=send` with `card={type,version,body}` to send rich cards.", "- MSTeams targeting: omit `target` to reply to the current conversation (auto-inferred). Explicit targets: `user:ID` or `user:Display Name` (requires Graph API) for DMs, `conversation:19:...@thread.tacv2` for groups/channels. Prefer IDs over display names for speed."] },
 		groups: { resolveToolPolicy: resolveMSTeamsGroupToolPolicy },
-		reload: { configPrefixes: ["channels.msteams"] },
-		configSchema: require_config_schema.MSTeamsChannelConfigSchema,
-		config: {
-			...require_setup_surface.msteamsConfigAdapter,
-			isConfigured: (_account, cfg) => Boolean(require_resolve_allowlist.resolveMSTeamsCredentials(cfg.channels?.msteams)),
-			describeAccount: (account) => (0, openclaw_plugin_sdk_account_helpers.describeAccountSnapshot)({
-				account,
-				configured: account.configured
-			})
-		},
 		approvalCapability: msTeamsApprovalAuth,
 		doctor: {
 			dmAllowFromMode: "topOnly",
@@ -882,12 +912,11 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 			warnOnEmptyGroupSenderAllowlist: true,
 			collectMutableAllowlistWarnings: collectMSTeamsMutableAllowlistWarnings
 		},
-		setup: require_setup_surface.msteamsSetupAdapter,
-		setupContract: require_setup_surface.msteamsSetupContract,
 		messaging: {
 			targetPrefixes: ["msteams", "teams"],
 			directTargetStyle: "user-prefixed",
 			normalizeTarget: require_resolve_allowlist.normalizeMSTeamsMessagingTarget,
+			inferTargetChatType: ({ to }) => inferMSTeamsTargetChatType(to),
 			resolveOutboundSessionRoute: (params) => resolveMSTeamsOutboundSessionRoute(params),
 			targetResolver: {
 				looksLikeId: (raw) => require_resolve_allowlist.looksLikeMSTeamsTargetId(raw),
@@ -896,34 +925,7 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 		},
 		message: msteamsMessageAdapter,
 		directory: (0, openclaw_plugin_sdk_directory_runtime.createChannelDirectoryAdapter)({
-			self: async ({ cfg }) => {
-				const creds = require_resolve_allowlist.resolveMSTeamsCredentials(cfg.channels?.msteams);
-				if (!creds) return null;
-				return {
-					kind: "user",
-					id: creds.appId,
-					name: creds.appId
-				};
-			},
-			listPeers: async ({ cfg, query, limit }) => (0, openclaw_plugin_sdk_directory_runtime.listDirectoryEntriesFromSources)({
-				kind: "user",
-				sources: [cfg.channels?.msteams?.allowFrom ?? [], Object.keys(cfg.channels?.msteams?.dms ?? {})],
-				query,
-				limit,
-				normalizeId: (raw) => {
-					const normalized = require_resolve_allowlist.normalizeMSTeamsMessagingTarget(raw) ?? raw;
-					const lowered = normalized.toLowerCase();
-					if (lowered.startsWith("user:") || lowered.startsWith("conversation:")) return normalized;
-					return `user:${normalized}`;
-				}
-			}),
-			listGroups: async ({ cfg, query, limit }) => (0, openclaw_plugin_sdk_directory_runtime.listDirectoryEntriesFromSources)({
-				kind: "group",
-				sources: [Object.values(cfg.channels?.msteams?.teams ?? {}).flatMap((team) => Object.keys(team.channels ?? {}))],
-				query,
-				limit,
-				normalizeId: (raw) => `conversation:${raw.replace(/^conversation:/i, "").trim()}`
-			}),
+			...require_directory_contract_api.msteamsDirectoryContractPlugin.directory,
 			...(0, openclaw_plugin_sdk_directory_runtime.createRuntimeDirectoryLiveAdapter)({
 				getRuntime: loadMSTeamsChannelRuntime,
 				listPeersLive: (runtime) => runtime.listMSTeamsDirectoryPeersLive,
@@ -1038,13 +1040,20 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 			return results;
 		} },
 		actions: {
+			providerOwnedReadGates: true,
 			describeMessageTool: describeMSTeamsMessageTool,
+			extractToolSendResult: ({ result, send }) => extractMSTeamsToolSendResult(result, send),
 			requiresTrustedRequesterSender: ({ action, toolContext }) => (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(toolContext?.currentChannelProvider)?.toLowerCase() === "msteams" && MSTEAMS_GROUP_MANAGEMENT_ACTIONS.has(action),
 			handleAction: async (ctx) => {
 				if (MSTEAMS_GROUP_MANAGEMENT_ACTIONS.has(ctx.action)) {
 					const authError = requireMSTeamsGroupManagementAuthorization(ctx);
 					if (authError) return authError;
 				}
+				const authorizeActionTarget = (target) => assertMSTeamsReadTargetAllowed({
+					cfg: ctx.cfg,
+					ctx,
+					target
+				});
 				const presentation = ctx.action === "send" ? (0, openclaw_plugin_sdk_interactive_runtime.normalizeMessagePresentation)(ctx.params.presentation) : void 0;
 				if (ctx.action === "send" && presentation) {
 					const card = buildMSTeamsPresentationCard({
@@ -1089,6 +1098,7 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 								text: resolveActionContent(ctx.params),
 								mediaUrl,
 								filename: readOptionalTrimmedString(ctx.params, "filename") ?? readOptionalTrimmedString(ctx.params, "title"),
+								mediaAccess: ctx.mediaAccess,
 								mediaLocalRoots: ctx.mediaLocalRoots,
 								mediaReadFile: ctx.mediaReadFile
 							});
@@ -1116,11 +1126,7 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 						toolParams: ctx.params,
 						currentChannelId: ctx.toolContext?.currentChannelId,
 						run: async (target) => {
-							const to = await assertMSTeamsReadTargetAllowed({
-								cfg: ctx.cfg,
-								ctx,
-								target: target.to
-							});
+							const to = await authorizeActionTarget(target.to);
 							const { editMessageMSTeams } = await loadMSTeamsChannelRuntime();
 							return jsonMSTeamsConversationResult((await editMessageMSTeams({
 								cfg: ctx.cfg,
@@ -1136,11 +1142,7 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 					toolParams: ctx.params,
 					currentChannelId: ctx.toolContext?.currentChannelId,
 					run: async (target) => {
-						const to = await assertMSTeamsReadTargetAllowed({
-							cfg: ctx.cfg,
-							ctx,
-							target: target.to
-						});
+						const to = await authorizeActionTarget(target.to);
 						const { deleteMessageMSTeams } = await loadMSTeamsChannelRuntime();
 						return jsonMSTeamsConversationResult((await deleteMessageMSTeams({
 							cfg: ctx.cfg,
@@ -1149,19 +1151,18 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 						})).conversationId);
 					}
 				});
-				if (ctx.action === "read") return await runWithRequiredActionMessageTarget({
-					actionLabel: "Read",
+				const graphActionTarget = {
 					toolParams: ctx.params,
 					currentChannelId: ctx.toolContext?.currentChannelId,
 					currentGraphChannelId: resolveCurrentGraphActionTarget(ctx.toolContext),
 					currentChatType: ctx.toolContext?.currentChatType,
-					graphOnly: true,
+					graphOnly: true
+				};
+				if (ctx.action === "read") return await runWithRequiredActionMessageTarget({
+					actionLabel: "Read",
+					...graphActionTarget,
 					run: async (target) => {
-						const to = await assertMSTeamsReadTargetAllowed({
-							cfg: ctx.cfg,
-							ctx,
-							target: target.to
-						});
+						const to = await authorizeActionTarget(target.to);
 						const { getMessageMSTeams } = await loadMSTeamsChannelRuntime();
 						return jsonMSTeamsOkActionResult("read", { message: await getMessageMSTeams({
 							cfg: ctx.cfg,
@@ -1172,17 +1173,9 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 				});
 				if (ctx.action === "pin") return await runWithRequiredActionMessageTarget({
 					actionLabel: "Pin",
-					toolParams: ctx.params,
-					currentChannelId: ctx.toolContext?.currentChannelId,
-					currentGraphChannelId: resolveCurrentGraphActionTarget(ctx.toolContext),
-					currentChatType: ctx.toolContext?.currentChatType,
-					graphOnly: true,
+					...graphActionTarget,
 					run: async (target) => {
-						const to = await assertMSTeamsReadTargetAllowed({
-							cfg: ctx.cfg,
-							ctx,
-							target: target.to
-						});
+						const to = await authorizeActionTarget(target.to);
 						const { pinMessageMSTeams } = await loadMSTeamsChannelRuntime();
 						return jsonMSTeamsActionResult("pin", await pinMessageMSTeams({
 							cfg: ctx.cfg,
@@ -1193,17 +1186,9 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 				});
 				if (ctx.action === "unpin") return await runWithRequiredActionPinnedMessageTarget({
 					actionLabel: "Unpin",
-					toolParams: ctx.params,
-					currentChannelId: ctx.toolContext?.currentChannelId,
-					currentGraphChannelId: resolveCurrentGraphActionTarget(ctx.toolContext),
-					currentChatType: ctx.toolContext?.currentChatType,
-					graphOnly: true,
+					...graphActionTarget,
 					run: async (target) => {
-						const to = await assertMSTeamsReadTargetAllowed({
-							cfg: ctx.cfg,
-							ctx,
-							target: target.to
-						});
+						const to = await authorizeActionTarget(target.to);
 						const { unpinMessageMSTeams } = await loadMSTeamsChannelRuntime();
 						return jsonMSTeamsActionResult("unpin", await unpinMessageMSTeams({
 							cfg: ctx.cfg,
@@ -1214,17 +1199,9 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 				});
 				if (ctx.action === "list-pins") return await runWithRequiredActionTarget({
 					actionLabel: "List-pins",
-					toolParams: ctx.params,
-					currentChannelId: ctx.toolContext?.currentChannelId,
-					currentGraphChannelId: resolveCurrentGraphActionTarget(ctx.toolContext),
-					currentChatType: ctx.toolContext?.currentChatType,
-					graphOnly: true,
+					...graphActionTarget,
 					run: async (to) => {
-						const allowedTarget = await assertMSTeamsReadTargetAllowed({
-							cfg: ctx.cfg,
-							ctx,
-							target: to
-						});
+						const allowedTarget = await authorizeActionTarget(to);
 						const { listPinsMSTeams } = await loadMSTeamsChannelRuntime();
 						return jsonMSTeamsOkActionResult("list-pins", await listPinsMSTeams({
 							cfg: ctx.cfg,
@@ -1234,11 +1211,7 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 				});
 				if (ctx.action === "react") return await runWithRequiredActionMessageTarget({
 					actionLabel: "React",
-					toolParams: ctx.params,
-					currentChannelId: ctx.toolContext?.currentChannelId,
-					currentGraphChannelId: resolveCurrentGraphActionTarget(ctx.toolContext),
-					currentChatType: ctx.toolContext?.currentChatType,
-					graphOnly: true,
+					...graphActionTarget,
 					run: async (target) => {
 						const emoji = typeof ctx.params.emoji === "string" ? ctx.params.emoji.trim() : "";
 						const remove = typeof ctx.params.remove === "boolean" ? ctx.params.remove : false;
@@ -1253,11 +1226,7 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 								validTypes: [...MSTEAMS_REACTION_TYPES]
 							}
 						};
-						const to = await assertMSTeamsReadTargetAllowed({
-							cfg: ctx.cfg,
-							ctx,
-							target: target.to
-						});
+						const to = await authorizeActionTarget(target.to);
 						if (remove) {
 							const { unreactMessageMSTeams } = await loadMSTeamsChannelRuntime();
 							return jsonMSTeamsActionResult("react", {
@@ -1285,17 +1254,9 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 				});
 				if (ctx.action === "reactions") return await runWithRequiredActionMessageTarget({
 					actionLabel: "Reactions",
-					toolParams: ctx.params,
-					currentChannelId: ctx.toolContext?.currentChannelId,
-					currentGraphChannelId: resolveCurrentGraphActionTarget(ctx.toolContext),
-					currentChatType: ctx.toolContext?.currentChatType,
-					graphOnly: true,
+					...graphActionTarget,
 					run: async (target) => {
-						const to = await assertMSTeamsReadTargetAllowed({
-							cfg: ctx.cfg,
-							ctx,
-							target: target.to
-						});
+						const to = await authorizeActionTarget(target.to);
 						const { listReactionsMSTeams } = await loadMSTeamsChannelRuntime();
 						return jsonMSTeamsOkActionResult("reactions", await listReactionsMSTeams({
 							cfg: ctx.cfg,
@@ -1306,17 +1267,9 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 				});
 				if (ctx.action === "search") return await runWithRequiredActionTarget({
 					actionLabel: "Search",
-					toolParams: ctx.params,
-					currentChannelId: ctx.toolContext?.currentChannelId,
-					currentGraphChannelId: resolveCurrentGraphActionTarget(ctx.toolContext),
-					currentChatType: ctx.toolContext?.currentChatType,
-					graphOnly: true,
+					...graphActionTarget,
 					run: async (to) => {
-						const allowedTarget = await assertMSTeamsReadTargetAllowed({
-							cfg: ctx.cfg,
-							ctx,
-							target: to
-						});
+						const allowedTarget = await authorizeActionTarget(to);
 						const query = resolveActionQuery(ctx.params);
 						if (!query) return actionError("Search requires a target (to) and query.");
 						const limit = typeof ctx.params.limit === "number" ? ctx.params.limit : void 0;
@@ -1336,17 +1289,9 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 					if (!userId) return actionError("member-info requires a userId.");
 					return await runWithRequiredActionTarget({
 						actionLabel: "member-info",
-						toolParams: ctx.params,
-						currentChannelId: ctx.toolContext?.currentChannelId,
-						currentGraphChannelId: resolveCurrentGraphActionTarget(ctx.toolContext),
-						currentChatType: ctx.toolContext?.currentChatType,
-						graphOnly: true,
+						...graphActionTarget,
 						run: async (target) => {
-							const to = await assertMSTeamsReadTargetAllowed({
-								cfg: ctx.cfg,
-								ctx,
-								target
-							});
+							const to = await authorizeActionTarget(target);
 							const currentRequesterId = isCurrentMSTeamsReadTarget({
 								ctx,
 								target: to
@@ -1379,11 +1324,7 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 					const teamId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(ctx.params.teamId) ?? "";
 					const channelId = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(ctx.params.channelId) ?? "";
 					if (!teamId || !channelId) return actionError("channel-info requires teamId and channelId.");
-					const [graphTeamId, graphChannelId] = (await assertMSTeamsReadTargetAllowed({
-						cfg: ctx.cfg,
-						ctx,
-						target: `${teamId}/${channelId}`
-					})).split("/", 2);
+					const [graphTeamId, graphChannelId] = (await authorizeActionTarget(`${teamId}/${channelId}`)).split("/", 2);
 					if (!graphTeamId || !graphChannelId) throw new Error("Authorized Microsoft Teams channel target is invalid.");
 					const { getChannelInfoMSTeams } = await loadMSTeamsChannelRuntime();
 					return jsonMSTeamsOkActionResult("channel-info", { channelInfo: (await getChannelInfoMSTeams({
@@ -1480,25 +1421,30 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 				accountId: account.accountId,
 				enabled: account.enabled,
 				configured: account.configured,
-				extra: { port: runtime?.port ?? null }
+				extra: {
+					port: runtime?.port ?? null,
+					tokenStatus: account.tokenStatus
+				}
 			})
 		}),
 		gateway: { startAccount: async (ctx) => {
-			const { monitorMSTeamsProvider } = await Promise.resolve().then(() => require("./src-B_BdEvcr.cjs"));
+			const { monitorMSTeamsProvider } = await Promise.resolve().then(() => require("./src-C127-DcQ.cjs"));
 			const port = ctx.cfg.channels?.msteams?.webhook?.port ?? 3978;
-			ctx.setStatus({
+			const statusSink = (0, openclaw_plugin_sdk_channel_outbound.createAccountStatusSink)({
 				accountId: ctx.accountId,
-				port
+				setStatus: ctx.setStatus
 			});
+			statusSink({ port });
 			ctx.log?.info(`starting provider (port ${port})`);
 			return monitorMSTeamsProvider({
 				cfg: ctx.cfg,
 				runtime: ctx.runtime,
-				abortSignal: ctx.abortSignal
+				abortSignal: ctx.abortSignal,
+				statusSink
 			});
 		} }
 	},
-	security: { collectWarnings: (0, openclaw_plugin_sdk_channel_policy.projectConfigWarningCollector)(collectMSTeamsSecurityWarnings) },
+	security: { collectWarnings: ({ cfg }) => collectMSTeamsSecurityFindings({ cfg }) },
 	pairing: { text: {
 		idLabel: "msteamsUserId",
 		message: openclaw_plugin_sdk_channel_status.PAIRING_APPROVED_MESSAGE,
@@ -1512,18 +1458,29 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 			});
 		}
 	} },
-	threading: { buildToolContext: ({ context, hasRepliedRef }) => {
-		const nativeChannelId = context.NativeChannelId?.trim();
-		const hasChannelRoute = Boolean(nativeChannelId && nativeChannelId.includes("/"));
-		return {
-			currentChannelId: (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(context.To),
-			currentChatType: context.ChatType === "direct" || context.ChatType === "group" || context.ChatType === "channel" ? context.ChatType : void 0,
-			currentMessagingTarget: hasChannelRoute ? nativeChannelId : void 0,
-			currentGraphChannelId: hasChannelRoute ? nativeChannelId : void 0,
-			currentThreadTs: context.ReplyToId,
-			hasRepliedRef
-		};
-	} },
+	threading: {
+		matchesToolContextTarget: ({ target, toolContext }) => msteamsContextTargetsMatch(target, toolContext),
+		buildToolContext: ({ context, hasRepliedRef }) => {
+			const nativeChannelId = context.NativeChannelId?.trim();
+			const hasChannelRoute = Boolean(nativeChannelId && nativeChannelId.includes("/"));
+			const isChannel = context.ChatType === "channel";
+			const currentThreadTs = (context.MessageThreadId != null ? (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(String(context.MessageThreadId)) : void 0) ?? (isChannel ? (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(context.ReplyToId) : void 0);
+			return {
+				currentChannelId: (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(context.To),
+				currentChatType: context.ChatType === "direct" || context.ChatType === "group" || context.ChatType === "channel" ? context.ChatType : void 0,
+				currentMessagingTarget: hasChannelRoute ? nativeChannelId : void 0,
+				currentGraphChannelId: hasChannelRoute ? nativeChannelId : void 0,
+				currentThreadTs,
+				...currentThreadTs ? { replyToMode: "all" } : {},
+				hasRepliedRef
+			};
+		},
+		resolveAutoThreadId: ({ cfg, to, toolContext }) => resolveMSTeamsAutoThreadId({
+			cfg: cfg.channels?.msteams,
+			to,
+			toolContext
+		})
+	},
 	outbound: msteamsChannelOutbound
 });
 //#endregion