@openclaw/msteams 2026.7.2-beta.7 → 2026.8.1-beta.3

package/dist/{setup-surface-ByWjaXEn.cjs → channel.setup-mOFtsfYz.cjs}

@@ -1,9 +1,12 @@
-const require_resolve_allowlist = require("./resolve-allowlist-CEj9sABO.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CIfWUwuc.cjs");
+const require_config_schema = require("./config-schema-C4CszdDi.cjs");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
-let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
+let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_number_runtime = require("openclaw/plugin-sdk/number-runtime");
 let openclaw_plugin_sdk_channel_config_helpers = require("openclaw/plugin-sdk/channel-config-helpers");
+let openclaw_plugin_sdk_secret_file_runtime = require("openclaw/plugin-sdk/secret-file-runtime");
+let openclaw_plugin_sdk_account_helpers = require("openclaw/plugin-sdk/account-helpers");
 let openclaw_plugin_sdk_channel_setup = require("openclaw/plugin-sdk/channel-setup");
 let openclaw_plugin_sdk_setup = require("openclaw/plugin-sdk/setup");
 let openclaw_plugin_sdk_setup_tools = require("openclaw/plugin-sdk/setup-tools");
@@ -20,13 +23,23 @@ const msteamsMeta = {
 	aliases: ["teams"],
 	order: 60
 };
+function resolveMSTeamsAccount(cfg) {
+	const config = cfg.channels?.msteams;
+	const credentials = require_resolve_allowlist.resolveMSTeamsCredentials(config);
+	const certificatePath = credentials?.type === "federated" && !credentials.useManagedIdentity ? credentials.certificatePath : void 0;
+	const certificate = certificatePath ? (0, openclaw_plugin_sdk_secret_file_runtime.tryReadSecretFileSync)(certificatePath, "Microsoft Teams certificate", void 0, { configPath: config?.certificatePath?.trim() ? "channels.msteams.certificatePath" : "env.MSTEAMS_CERTIFICATE_PATH" }) : void 0;
+	const unavailable = certificate?.status === "configured_unavailable";
+	return {
+		accountId: openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID,
+		enabled: config?.enabled !== false,
+		configured: Boolean(credentials),
+		tokenStatus: !credentials ? "missing" : unavailable ? "configured_unavailable" : "available",
+		...unavailable ? { credentialDiagnostics: [certificate.diagnostic] } : {}
+	};
+}
 const msteamsConfigAdapter = (0, openclaw_plugin_sdk_channel_config_helpers.createTopLevelChannelConfigAdapter)({
 	sectionKey: "msteams",
-	resolveAccount: (cfg) => ({
-		accountId: openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID,
-		enabled: cfg.channels?.msteams?.enabled !== false,
-		configured: Boolean(require_resolve_allowlist.resolveMSTeamsCredentials(cfg.channels?.msteams))
-	}),
+	resolveAccount: resolveMSTeamsAccount,
 	resolveAccessorAccount: ({ cfg }) => ({
 		allowFrom: cfg.channels?.msteams?.allowFrom,
 		defaultTo: cfg.channels?.msteams?.defaultTo
@@ -93,8 +106,8 @@ function createMSTeamsSetupWizardBase() {
 			let appPassword = null;
 			let tenantId = null;
 			if (!resolved && !hasConfigCreds) await noteMSTeamsCredentialHelp(prompter);
-			if (canUseEnv) if (await prompter.confirm({
-				message: t$1("wizard.msteams.envPrompt"),
+			if (canUseEnv || hasConfigCreds) if (await prompter.confirm({
+				message: t$1(canUseEnv ? "wizard.msteams.envPrompt" : "wizard.msteams.credentialsKeep"),
 				initialValue: true
 			})) next = msteamsSetupAdapter.applyAccountConfig({
 				cfg: next,
@@ -102,12 +115,7 @@ function createMSTeamsSetupWizardBase() {
 				input: {}
 			});
 			else ({appId, appPassword, tenantId} = await promptMSTeamsCredentials(prompter));
-			else if (hasConfigCreds) {
-				if (!await prompter.confirm({
-					message: t$1("wizard.msteams.credentialsKeep"),
-					initialValue: true
-				})) ({appId, appPassword, tenantId} = await promptMSTeamsCredentials(prompter));
-			} else ({appId, appPassword, tenantId} = await promptMSTeamsCredentials(prompter));
+			else ({appId, appPassword, tenantId} = await promptMSTeamsCredentials(prompter));
 			if (appId && appPassword && tenantId) next = {
 				...next,
 				channels: {
@@ -225,12 +233,8 @@ function parseNonNegativeRetryAfterSeconds(raw) {
 	});
 }
 /**
-* Classify outbound send errors for safe retries and actionable logs.
-*
-* Important: We only mark errors as retryable when we have an explicit HTTP
-* status code that indicates the message was not accepted (e.g. 429, 5xx).
-* For transport-level errors where delivery is ambiguous, we prefer to avoid
-* retries to reduce the chance of duplicate posts.
+* Owns retry safety and delivery ambiguity for Teams send failures.
+* Only Teams rate-limit rejection proves this unkeyed POST safe to replay.
 */
 function classifyMSTeamsSendError(err) {
 	const statusCode = extractStatusCode(err);
@@ -254,15 +258,15 @@ function classifyMSTeamsSendError(err) {
 		};
 	}
 	if (statusCode === 429) return {
-		kind: "throttled",
+		kind: "replay-safe",
 		statusCode,
 		retryAfterMs: retryAfterMs ?? void 0,
 		errorCode
 	};
 	if (statusCode === 408 || statusCode != null && statusCode >= 500) return {
-		kind: "transient",
+		kind: "ambiguous",
+		source: "http",
 		statusCode,
-		retryAfterMs: retryAfterMs ?? void 0,
 		errorCode
 	};
 	if (statusCode != null && statusCode >= 400) return {
@@ -270,17 +274,14 @@ function classifyMSTeamsSendError(err) {
 		statusCode,
 		errorCode
 	};
-	if (statusCode == null) {
-		const networkCode = (0, openclaw_plugin_sdk_string_coerce_runtime.isRecord)(err) && typeof err.code === "string" ? err.code : null;
-		if (networkCode === "ECONNREFUSED" || networkCode === "ENOTFOUND" || networkCode === "EHOSTUNREACH" || networkCode === "ETIMEDOUT" || networkCode === "ECONNRESET") return {
-			kind: "network",
-			errorCode: networkCode
-		};
-	}
+	if (statusCode == null && (0, openclaw_plugin_sdk_retry_runtime.isTransientNetworkError)(err)) return {
+		kind: "ambiguous",
+		source: "transport",
+		errorCode
+	};
 	return {
 		kind: "unknown",
 		statusCode: statusCode ?? void 0,
-		retryAfterMs: retryAfterMs ?? void 0,
 		errorCode
 	};
 }
@@ -299,9 +300,15 @@ function isRevokedProxyError(err) {
 function formatMSTeamsSendErrorHint(classification) {
 	if (classification.kind === "auth") return "check msteams appId/appPassword/tenantId (or env vars MSTEAMS_APP_ID/MSTEAMS_APP_PASSWORD/MSTEAMS_TENANT_ID)";
 	if (classification.errorCode === "ContentStreamNotAllowed") return "Teams expired the content stream; stop streaming earlier and fall back to normal message delivery";
-	if (classification.kind === "throttled") return "Teams throttled the bot; backing off may help";
-	if (classification.kind === "transient") return "transient Teams/Bot Framework error; retry may succeed";
-	if (classification.kind === "network") return "transport-level failure sending reply to Teams Bot Connector (smba.trafficmanager.net) — check egress firewall rules allow outbound HTTPS to smba.trafficmanager.net";
+	if (classification.kind === "replay-safe") return "Teams throttled the bot; backing off may help";
+	if (classification.kind === "ambiguous") {
+		if (classification.source === "transport") return "transport-level failure sending to Teams Bot Connector (smba.trafficmanager.net); the outcome is unknown, so check egress and conversation history before taking further action";
+		return "Teams/Bot Framework delivery outcome is unknown; inspect the conversation history before taking further action";
+	}
+}
+function formatMSTeamsDeliveryFailureGuidance(classification) {
+	if (classification.kind === "replay-safe") return "The request was rate-limited before delivery; retrying later may succeed.";
+	if (classification.kind === "ambiguous") return "Delivery may already have succeeded; do not send the same content again without checking the conversation.";
 }
 //#endregion
 //#region extensions/msteams/src/setup-surface.ts
@@ -471,7 +478,7 @@ const msteamsSetupWizard = {
 				};
 				let oauthModule;
 				try {
-					oauthModule = await Promise.resolve().then(() => require("./oauth-CW6jVGp8.cjs"));
+					oauthModule = await Promise.resolve().then(() => require("./oauth-C9So7uld.cjs"));
 				} catch (err) {
 					await noteDelegatedAuthFailure(err);
 					return {
@@ -525,6 +532,40 @@ const msteamsSetupWizard = {
 	disable: (cfg) => (0, openclaw_plugin_sdk_setup.setSetupChannelEnabled)(cfg, channel, false)
 };
 //#endregion
+//#region extensions/msteams/src/channel.setup.ts
+const msteamsSetupPlugin = {
+	id: "msteams",
+	meta: {
+		...msteamsMeta,
+		aliases: [...msteamsMeta.aliases]
+	},
+	capabilities: {
+		chatTypes: [
+			"direct",
+			"channel",
+			"group",
+			"thread"
+		],
+		polls: true,
+		threads: true,
+		media: true,
+		reactions: true
+	},
+	reload: { configPrefixes: ["channels.msteams"] },
+	configSchema: require_config_schema.MSTeamsChannelConfigSchema,
+	config: {
+		...msteamsConfigAdapter,
+		isConfigured: (account) => account.configured,
+		describeAccount: (account) => (0, openclaw_plugin_sdk_account_helpers.describeAccountSnapshot)({
+			account,
+			configured: account.configured,
+			extra: { tokenStatus: account.tokenStatus }
+		})
+	},
+	setupWizard: msteamsSetupWizard,
+	setupContract: msteamsSetupContract
+};
+//#endregion
 Object.defineProperty(exports, "classifyMSTeamsSendError", {
 	enumerable: true,
 	get: function() {
@@ -537,6 +578,12 @@ Object.defineProperty(exports, "createMSTeamsSetupWizardBase", {
 		return createMSTeamsSetupWizardBase;
 	}
 });
+Object.defineProperty(exports, "formatMSTeamsDeliveryFailureGuidance", {
+	enumerable: true,
+	get: function() {
+		return formatMSTeamsDeliveryFailureGuidance;
+	}
+});
 Object.defineProperty(exports, "formatMSTeamsSendErrorHint", {
 	enumerable: true,
 	get: function() {
@@ -555,28 +602,16 @@ Object.defineProperty(exports, "isRevokedProxyError", {
 		return isRevokedProxyError;
 	}
 });
-Object.defineProperty(exports, "msteamsConfigAdapter", {
-	enumerable: true,
-	get: function() {
-		return msteamsConfigAdapter;
-	}
-});
-Object.defineProperty(exports, "msteamsMeta", {
-	enumerable: true,
-	get: function() {
-		return msteamsMeta;
-	}
-});
 Object.defineProperty(exports, "msteamsSetupAdapter", {
 	enumerable: true,
 	get: function() {
 		return msteamsSetupAdapter;
 	}
 });
-Object.defineProperty(exports, "msteamsSetupContract", {
+Object.defineProperty(exports, "msteamsSetupPlugin", {
 	enumerable: true,
 	get: function() {
-		return msteamsSetupContract;
+		return msteamsSetupPlugin;
 	}
 });
 Object.defineProperty(exports, "msteamsSetupWizard", {
@@ -591,3 +626,9 @@ Object.defineProperty(exports, "openDelegatedOAuthUrl", {
 		return openDelegatedOAuthUrl;
 	}
 });
+Object.defineProperty(exports, "resolveMSTeamsAccount", {
+	enumerable: true,
+	get: function() {
+		return resolveMSTeamsAccount;
+	}
+});

package/dist/directory-contract-api.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_resolve_allowlist = require("./resolve-allowlist-CEj9sABO.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CIfWUwuc.cjs");
 let openclaw_plugin_sdk_directory_runtime = require("openclaw/plugin-sdk/directory-runtime");
 const msteamsDirectoryContractPlugin = {
 	id: "msteams",

package/dist/doctor-contract-api.cjs

@@ -1,18 +1,18 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_polls = require("./polls-BWKNpBSg.cjs");
+const require_rolldown_runtime = require("./rolldown-runtime-D6vf50IK.cjs");
 const require_delegated_state = require("./delegated-state-DiEz9JIa.cjs");
-const require_sso_token_store = require("./sso-token-store-TKYk_Ms7.cjs");
+const require_polls = require("./polls-DvuJvaDG.cjs");
+const require_sso_token_store = require("./sso-token-store-ChhO1f4i.cjs");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let node_crypto = require("node:crypto");
-node_crypto = require_polls.__toESM(node_crypto, 1);
+node_crypto = require_rolldown_runtime.__toESM(node_crypto, 1);
 let node_fs_promises = require("node:fs/promises");
-node_fs_promises = require_polls.__toESM(node_fs_promises, 1);
+node_fs_promises = require_rolldown_runtime.__toESM(node_fs_promises, 1);
 let node_path = require("node:path");
-node_path = require_polls.__toESM(node_path, 1);
-let openclaw_plugin_sdk_runtime_doctor = require("openclaw/plugin-sdk/runtime-doctor");
-let openclaw_plugin_sdk_session_store_runtime = require("openclaw/plugin-sdk/session-store-runtime");
+node_path = require_rolldown_runtime.__toESM(node_path, 1);
+let openclaw_plugin_sdk_runtime_doctor_migrations = require("openclaw/plugin-sdk/runtime-doctor-migrations");
 //#region extensions/msteams/doctor-contract-api.ts
-const streamingAliasMigration = (0, openclaw_plugin_sdk_runtime_doctor.defineChannelAliasMigration)({
+const streamingAliasMigration = (0, openclaw_plugin_sdk_runtime_doctor_migrations.defineChannelAliasMigration)({
 	channelId: "msteams",
 	streaming: { defaultMode: "partial" }
 });
@@ -66,9 +66,10 @@ function listAgentIds(config) {
 	for (const agent of config.agents?.list ?? []) if (typeof agent.id === "string" && agent.id.trim()) ids.add(agent.id.trim());
 	return [...ids];
 }
-function listCandidateStorePaths(params) {
+async function listCandidateStorePaths(params) {
+	const { resolveStorePath } = await import("openclaw/plugin-sdk/session-store-runtime");
 	const paths = /* @__PURE__ */ new Set();
-	for (const agentId of listAgentIds(params.config)) paths.add((0, openclaw_plugin_sdk_session_store_runtime.resolveStorePath)(params.config.session?.store, {
+	for (const agentId of listAgentIds(params.config)) paths.add(resolveStorePath(params.config.session?.store, {
 		agentId,
 		env: params.env
 	}));
@@ -193,7 +194,7 @@ const stateMigrations = [
 				if (await store.registerIfAbsent(require_polls.buildMSTeamsConversationStateKey(conversationId), require_polls.prepareMSTeamsConversationReferenceForStorage(conversationId, reference))) imported++;
 			}
 			changes.push(`Migrated ${imported} ${MSTEAMS_PLUGIN_ID} conversation ${imported === 1 ? "entry" : "entries"} -> plugin state`);
-			await (0, openclaw_plugin_sdk_runtime_doctor.archiveLegacyStateSource)({
+			await (0, openclaw_plugin_sdk_runtime_doctor_migrations.archiveLegacyStateSource)({
 				filePath,
 				label: `${MSTEAMS_PLUGIN_ID} conversation`,
 				changes,
@@ -259,7 +260,7 @@ const stateMigrations = [
 				if (didImportPoll || importedVoteBucket) imported++;
 			}
 			changes.push(`Migrated ${imported} ${MSTEAMS_PLUGIN_ID} poll ${imported === 1 ? "entry" : "entries"} -> plugin state`);
-			await (0, openclaw_plugin_sdk_runtime_doctor.archiveLegacyStateSource)({
+			await (0, openclaw_plugin_sdk_runtime_doctor_migrations.archiveLegacyStateSource)({
 				filePath,
 				label: `${MSTEAMS_PLUGIN_ID} poll`,
 				changes,
@@ -304,7 +305,7 @@ const stateMigrations = [
 			}
 			changes.push(`Migrated ${imported} ${MSTEAMS_PLUGIN_ID} SSO token ${imported === 1 ? "entry" : "entries"} -> plugin state`);
 			if (skipped > 0) warnings.push(`Skipped ${skipped} malformed ${MSTEAMS_PLUGIN_ID} SSO token ${skipped === 1 ? "entry" : "entries"} during migration`);
-			await (0, openclaw_plugin_sdk_runtime_doctor.archiveLegacyStateSource)({
+			await (0, openclaw_plugin_sdk_runtime_doctor_migrations.archiveLegacyStateSource)({
 				filePath,
 				label: `${MSTEAMS_PLUGIN_ID} SSO-token`,
 				changes,
@@ -383,7 +384,7 @@ const stateMigrations = [
 				};
 			}
 			changes.push(`Migrated ${MSTEAMS_PLUGIN_ID} delegated OAuth token -> plugin state`);
-			await (0, openclaw_plugin_sdk_runtime_doctor.archiveLegacyStateSource)({
+			await (0, openclaw_plugin_sdk_runtime_doctor_migrations.archiveLegacyStateSource)({
 				filePath,
 				label: `${MSTEAMS_PLUGIN_ID} delegated OAuth token`,
 				changes,
@@ -399,14 +400,14 @@ const stateMigrations = [
 		id: "msteams-feedback-learnings-json-to-plugin-state",
 		label: "Microsoft Teams feedback learnings",
 		async detectLegacyState(params) {
-			const files = (await Promise.all(listCandidateStorePaths(params).map((storePath) => listLegacyLearningFiles(storePath)))).flat();
+			const files = (await Promise.all((await listCandidateStorePaths(params)).map((storePath) => listLegacyLearningFiles(storePath)))).flat();
 			if (files.length === 0) return null;
 			return { preview: [`- Microsoft Teams feedback learnings: ${files.length} ${files.length === 1 ? "file" : "files"} -> plugin state (${LEARNINGS_NAMESPACE})`] };
 		},
 		async migrateLegacyState(params) {
 			const changes = [];
 			const warnings = [];
-			const files = (await Promise.all(listCandidateStorePaths(params).map((storePath) => listLegacyLearningFiles(storePath)))).flat();
+			const files = (await Promise.all((await listCandidateStorePaths(params)).map((storePath) => listLegacyLearningFiles(storePath)))).flat();
 			const store = params.context.openPluginStateKeyedStore({
 				namespace: LEARNINGS_NAMESPACE,
 				maxEntries: MAX_LEARNING_ENTRIES
@@ -436,7 +437,7 @@ const stateMigrations = [
 					updatedAt: Date.now()
 				});
 				imported++;
-				await (0, openclaw_plugin_sdk_runtime_doctor.archiveLegacyStateSource)({
+				await (0, openclaw_plugin_sdk_runtime_doctor_migrations.archiveLegacyStateSource)({
 					filePath: file.filePath,
 					label: "Microsoft Teams feedback-learning",
 					changes,

package/dist/{messenger-DTiaLTDO.cjs → messenger-IISPSOvj.cjs}

@@ -1,23 +1,27 @@
-const require_polls = require("./polls-BWKNpBSg.cjs");
+const require_rolldown_runtime = require("./rolldown-runtime-D6vf50IK.cjs");
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 require("./runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-CEj9sABO.cjs");
-const require_setup_surface = require("./setup-surface-ByWjaXEn.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CIfWUwuc.cjs");
+const require_channel_setup = require("./channel.setup-mOFtsfYz.cjs");
+const require_polls = require("./polls-DvuJvaDG.cjs");
 let openclaw_plugin_sdk_lazy_runtime = require("openclaw/plugin-sdk/lazy-runtime");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
+let openclaw_plugin_sdk_provider_http = require("openclaw/plugin-sdk/provider-http");
 let openclaw_plugin_sdk_reply_payload = require("openclaw/plugin-sdk/reply-payload");
 let openclaw_plugin_sdk_text_chunking = require("openclaw/plugin-sdk/text-chunking");
-let openclaw_plugin_sdk_provider_http = require("openclaw/plugin-sdk/provider-http");
 let node_dns_promises = require("node:dns/promises");
 let openclaw_plugin_sdk_ssrf_policy = require("openclaw/plugin-sdk/ssrf-policy");
 let openclaw_plugin_sdk_text_utility_runtime = require("openclaw/plugin-sdk/text-utility-runtime");
 let openclaw_plugin_sdk_html_entity_runtime = require("openclaw/plugin-sdk/html-entity-runtime");
+let openclaw_plugin_sdk_retry_runtime = require("openclaw/plugin-sdk/retry-runtime");
 let node_crypto = require("node:crypto");
-node_crypto = require_polls.__toESM(node_crypto, 1);
+node_crypto = require_rolldown_runtime.__toESM(node_crypto, 1);
 let node_path = require("node:path");
-node_path = require_polls.__toESM(node_path, 1);
+node_path = require_rolldown_runtime.__toESM(node_path, 1);
+let openclaw_plugin_sdk_global_singleton = require("openclaw/plugin-sdk/global-singleton");
 let openclaw_plugin_sdk_error_runtime = require("openclaw/plugin-sdk/error-runtime");
 let openclaw_plugin_sdk_reply_chunking = require("openclaw/plugin-sdk/reply-chunking");
+let openclaw_plugin_sdk_runtime_env = require("openclaw/plugin-sdk/runtime-env");
 let openclaw_plugin_sdk_web_media = require("openclaw/plugin-sdk/web-media");
 let openclaw_plugin_sdk_media_runtime = require("openclaw/plugin-sdk/media-runtime");
 //#region extensions/msteams/src/graph-thread.ts
@@ -449,9 +453,15 @@ async function setPendingUploadActivityIdFs(id, activityId, options) {
 * before upload. This module stores the file data temporarily until the user
 * accepts or declines, or until the TTL expires.
 */
-const pendingUploads = /* @__PURE__ */ new Map();
-/** Timer handles keyed by upload ID, cleared on explicit removal to prevent ghost cleanup */
-const pendingUploadTimers = /* @__PURE__ */ new Map();
+const { pendingUploads, pendingUploadTimers } = (0, openclaw_plugin_sdk_global_singleton.resolveGlobalSingleton)(Symbol.for("openclaw.msteams.pendingUploadState"), () => ({
+	pendingUploads: /* @__PURE__ */ new Map(),
+	/** Timer handles keyed by upload ID, cleared on explicit removal to prevent ghost cleanup. */
+	pendingUploadTimers: /* @__PURE__ */ new Map()
+}), (state) => {
+	for (const timer of state.pendingUploadTimers.values()) clearTimeout(timer);
+	state.pendingUploadTimers.clear();
+	state.pendingUploads.clear();
+});
 /** TTL for pending uploads: 5 minutes */
 const PENDING_UPLOAD_TTL_MS = 300 * 1e3;
 /**
@@ -1088,13 +1098,14 @@ async function getGraphAccessToken(tokenProvider) {
 async function uploadToSharePoint(params) {
 	const fetchFn = params.fetchFn ?? fetch;
 	const uploadPath = `/OpenClawShared/${encodeURIComponent(params.filename)}`;
+	const uploadUrl = `${GRAPH_ROOT}/sites/${params.siteId}/drive/root:${uploadPath}:/content?@microsoft.graph.conflictBehavior=rename`;
 	const timeoutMs = require_resolve_allowlist.resolveMSTeamsSharePointUploadTimeoutMs(params.buffer.length);
 	const data = await require_resolve_allowlist.withMSTeamsAbortableRequestTimeout({
 		label: SHAREPOINT_UPLOAD_TIMEOUT_LABEL,
 		timeoutMs,
 		work: async (signal) => {
 			const token = await getGraphAccessToken(params.tokenProvider);
-			const res = await fetchFn(`${GRAPH_ROOT}/sites/${params.siteId}/drive/root:${uploadPath}:/content`, {
+			const res = await fetchFn(uploadUrl, {
 				method: "PUT",
 				headers: {
 					"User-Agent": require_resolve_allowlist.buildUserAgent(),
@@ -1297,7 +1308,7 @@ async function extractFilename(url) {
 * Check if a URL refers to a local file path.
 */
 function isLocalPath(url) {
-	if (url.startsWith("file://") || url.startsWith("/") || url.startsWith("~")) return true;
+	if (/^file:\/\//iu.test(url) || url.startsWith("/") || url.startsWith("~")) return true;
 	if (url.startsWith("\\") && !url.startsWith("\\\\")) return true;
 	if (/^[a-zA-Z]:[\\/]/.test(url)) return true;
 	if (url.startsWith("\\\\")) return true;
@@ -1314,6 +1325,15 @@ function extractMessageId(response) {
 	return id;
 }
 //#endregion
+//#region extensions/msteams/src/ai-entity.ts
+/** AI-generated content entity added to every outbound AI message. */
+const AI_GENERATED_ENTITY = {
+	type: "https://schema.org/Message",
+	"@type": "Message",
+	"@id": "",
+	additionalType: ["AIGeneratedContent"]
+};
+//#endregion
 //#region extensions/msteams/src/mentions.ts
 /**
 * Check whether an ID looks like a valid Teams user/bot identifier.
@@ -1367,14 +1387,21 @@ async function withRevokedProxyFallback(params) {
 	try {
 		return await params.run();
 	} catch (err) {
-		if (!require_setup_surface.isRevokedProxyError(err)) throw err;
+		if (!require_channel_setup.isRevokedProxyError(err)) throw err;
 		params.onRevokedLog?.();
 		return await params.onRevoked();
 	}
 }
 //#endregion
 //#region extensions/msteams/src/sdk-proactive.ts
-const loadMSTeamsApiModule = (0, openclaw_plugin_sdk_lazy_runtime.createLazyRuntimeModule)(() => import("@microsoft/teams.api"));
+const loadMSTeamsApiClient = (0, openclaw_plugin_sdk_lazy_runtime.createLazyRuntimeModule)(() => import("@microsoft/teams.api").then((api) => ({ Client: api.Client })));
+const loadMSTeamsQuoteModule = (0, openclaw_plugin_sdk_lazy_runtime.createLazyRuntimeModule)(() => import("@microsoft/teams.api/dist/activities/message/message.js").then((message) => ({ MessageActivityInput: message.MessageActivityInput })));
+async function quoteMSTeamsActivity(activity, messageId) {
+	const { MessageActivityInput } = await loadMSTeamsQuoteModule();
+	if (typeof activity === "string") return new MessageActivityInput(activity).prependQuote(messageId);
+	if (activity.type !== "message") return activity;
+	return MessageActivityInput.from(activity).prependQuote(messageId);
+}
 function resolveThreadedConversationId(conversationId, threadActivityId) {
 	if (!threadActivityId) return conversationId.split(";")[0] ?? conversationId;
 	return `${conversationId.split(";")[0] ?? conversationId};messageid=${threadActivityId}`;
@@ -1439,7 +1466,7 @@ async function getApiClientForReference(app, ref) {
 	const appInternals = app;
 	const httpClient = appInternals.api?.http ?? appInternals.client;
 	if (!httpClient) return api;
-	const { Client } = await loadMSTeamsApiModule();
+	const { Client } = await loadMSTeamsApiClient();
 	return new Client(ref.serviceUrl, httpClient);
 }
 function mergeReferenceIntoActivity(activity, ref) {
@@ -1472,7 +1499,7 @@ function mergeReferenceIntoActivity(activity, ref) {
 async function sendMSTeamsActivityWithReference(app, source, activity, options) {
 	const ref = buildSdkConversationReference(source, options);
 	const activities = (await getApiClientForReference(app, ref)).conversations.activities(ref.conversation.id);
-	const activityWithRef = mergeReferenceIntoActivity(activity, ref);
+	const activityWithRef = mergeReferenceIntoActivity(options?.quoteActivityId ? await quoteMSTeamsActivity(activity, options.quoteActivityId) : activity, ref);
 	const isTargeted = activityWithRef.recipient?.isTargeted === true;
 	if (isTargeted && ref.conversation.conversationType === "personal") throw new Error("Targeted messages are not supported in 1:1 (personal) chats.");
 	const activityId = typeof activityWithRef.id === "string" ? activityWithRef.id : void 0;
@@ -1498,15 +1525,6 @@ async function deleteMSTeamsActivityWithReference(app, source, activityId, optio
 	return (await getApiClientForReference(app, ref)).conversations.activities(ref.conversation.id).delete(activityId);
 }
 //#endregion
-//#region extensions/msteams/src/ai-entity.ts
-/** AI-generated content entity added to every outbound AI message. */
-const AI_GENERATED_ENTITY = {
-	type: "https://schema.org/Message",
-	"@type": "Message",
-	"@id": "",
-	additionalType: ["AIGeneratedContent"]
-};
-//#endregion
 //#region extensions/msteams/src/messenger.ts
 /**
 * MSTeams-specific media size limit (100MB).
@@ -1582,12 +1600,9 @@ function resolveRetryOptions(retry) {
 	};
 }
 function computeRetryDelayMs(attempt, classification, opts) {
-	if (classification.retryAfterMs != null) return clampMs(classification.retryAfterMs, opts.maxDelayMs);
+	if (classification.kind === "replay-safe" && classification.retryAfterMs != null) return clampMs(classification.retryAfterMs, opts.maxDelayMs);
 	return clampMs(opts.baseDelayMs * 2 ** Math.max(0, attempt - 1), opts.maxDelayMs);
 }
-function shouldRetry(classification) {
-	return classification.kind === "throttled" || classification.kind === "transient";
-}
 function renderReplyPayloadsToMessages(replies, options) {
 	const out = [];
 	const chunkLimit = Math.min(options.textChunkLimit, 4e3);
@@ -1711,24 +1726,24 @@ async function sendMSTeamsMessages(params) {
 	const retryOptions = resolveRetryOptions(params.retry);
 	const sendWithRetry = async (sendOnce, meta) => {
 		if (!retryOptions.enabled) return await sendOnce();
-		for (const attempt of Array.from({ length: retryOptions.maxAttempts }, (_, index) => index + 1)) try {
-			return await sendOnce();
-		} catch (err) {
-			const classification = require_setup_surface.classifyMSTeamsSendError(err);
-			if (!(attempt < retryOptions.maxAttempts && shouldRetry(classification))) throw err;
-			const delayMs = computeRetryDelayMs(attempt, classification, retryOptions);
-			const nextAttempt = attempt + 1;
-			params.onRetry?.({
-				messageIndex: meta.messageIndex,
-				messageCount: meta.messageCount,
-				nextAttempt,
-				maxAttempts: retryOptions.maxAttempts,
-				delayMs,
-				classification
-			});
-			await (0, openclaw_plugin_sdk_text_utility_runtime.sleep)(delayMs);
-		}
-		throw new Error("unreachable Teams send retry loop exit");
+		return await (0, openclaw_plugin_sdk_retry_runtime.retryAsync)(sendOnce, {
+			attempts: retryOptions.maxAttempts,
+			minDelayMs: 0,
+			maxDelayMs: retryOptions.maxDelayMs,
+			shouldRetry: (err) => require_channel_setup.classifyMSTeamsSendError(err).kind === "replay-safe",
+			delayMs: ({ attempt, err }) => computeRetryDelayMs(attempt, require_channel_setup.classifyMSTeamsSendError(err), retryOptions),
+			onRetry: ({ attempt, err, delayMs }) => {
+				params.onRetry?.({
+					messageIndex: meta.messageIndex,
+					messageCount: meta.messageCount,
+					nextAttempt: attempt + 1,
+					maxAttempts: retryOptions.maxAttempts,
+					delayMs,
+					classification: require_channel_setup.classifyMSTeamsSendError(err)
+				});
+			},
+			sleep: (delayMs) => (0, openclaw_plugin_sdk_runtime_env.sleepWithAbort)(delayMs)
+		});
 	};
 	let providerDispatchStarted = false;
 	const sendMessageInContext = async (sendFn, message, messageIndex) => {

package/dist/{oauth-CW6jVGp8.cjs → oauth-C9So7uld.cjs}

@@ -1,14 +1,11 @@
-const require_resolve_allowlist = require("./resolve-allowlist-CEj9sABO.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CIfWUwuc.cjs");
+let openclaw_plugin_sdk_runtime_env = require("openclaw/plugin-sdk/runtime-env");
 let openclaw_plugin_sdk_provider_auth = require("openclaw/plugin-sdk/provider-auth");
 let openclaw_plugin_sdk_provider_auth_runtime = require("openclaw/plugin-sdk/provider-auth-runtime");
-let openclaw_plugin_sdk_runtime_env = require("openclaw/plugin-sdk/runtime-env");
 //#region extensions/msteams/src/oauth.flow.ts
 function shouldUseManualOAuthFlow(isRemote) {
 	return isRemote || (0, openclaw_plugin_sdk_runtime_env.isWSL2Sync)();
 }
-function generatePkce() {
-	return (0, openclaw_plugin_sdk_provider_auth.generateHexPkceVerifierChallenge)();
-}
 function buildMSTeamsAuthUrl(params) {
 	const scopes = params.scopes ?? require_resolve_allowlist.MSTEAMS_DEFAULT_DELEGATED_SCOPES;
 	return `${require_resolve_allowlist.buildMSTeamsAuthEndpoint(params.tenantId)}?${new URLSearchParams({
@@ -22,24 +19,6 @@ function buildMSTeamsAuthUrl(params) {
 		prompt: "consent"
 	}).toString()}`;
 }
-function parseCallbackInput(input, _expectedState) {
-	return (0, openclaw_plugin_sdk_provider_auth_runtime.parseOAuthCallbackInput)(input, {
-		missingState: "Missing 'state' parameter in URL. Paste the full redirect URL.",
-		invalidInput: "Paste the full redirect URL (including code and state parameters), not just the authorization code."
-	});
-}
-async function waitForLocalCallback(params) {
-	return await (0, openclaw_plugin_sdk_provider_auth_runtime.waitForLocalOAuthCallback)({
-		expectedState: params.expectedState,
-		timeoutMs: params.timeoutMs,
-		port: require_resolve_allowlist.MSTEAMS_OAUTH_CALLBACK_PORT,
-		callbackPath: require_resolve_allowlist.MSTEAMS_OAUTH_CALLBACK_PATH,
-		redirectUri: require_resolve_allowlist.MSTEAMS_OAUTH_REDIRECT_URI,
-		successTitle: "MSTeams Delegated OAuth complete",
-		progressMessage: `Waiting for OAuth callback on ${require_resolve_allowlist.MSTEAMS_OAUTH_REDIRECT_URI}...`,
-		onProgress: params.onProgress
-	});
-}
 //#endregion
 //#region extensions/msteams/src/oauth.ts
 async function loginMSTeamsDelegated(ctx, params) {
@@ -54,7 +33,7 @@ async function loginMSTeamsDelegated(ctx, params) {
 		`Sign in to grant delegated permissions for MSTeams.`,
 		`The callback will be captured automatically on localhost:${require_resolve_allowlist.MSTEAMS_OAUTH_CALLBACK_PORT}.`
 	].join("\n"), "MSTeams Delegated OAuth");
-	const { verifier, challenge } = generatePkce();
+	const { verifier, challenge } = (0, openclaw_plugin_sdk_provider_auth.generateHexPkceVerifierChallenge)();
 	const state = (0, openclaw_plugin_sdk_provider_auth_runtime.generateOAuthState)();
 	const authUrl = buildMSTeamsAuthUrl({
 		tenantId: params.tenantId,
@@ -71,9 +50,14 @@ async function loginMSTeamsDelegated(ctx, params) {
 		ctx.log(`\nOpen this URL in your browser:\n\n${authUrl}\n`);
 	}
 	try {
-		const { code } = await waitForLocalCallback({
+		const { code } = await (0, openclaw_plugin_sdk_provider_auth_runtime.waitForLocalOAuthCallback)({
 			expectedState: state,
 			timeoutMs: 300 * 1e3,
+			port: require_resolve_allowlist.MSTEAMS_OAUTH_CALLBACK_PORT,
+			callbackPath: require_resolve_allowlist.MSTEAMS_OAUTH_CALLBACK_PATH,
+			redirectUri: require_resolve_allowlist.MSTEAMS_OAUTH_REDIRECT_URI,
+			successTitle: "MSTeams Delegated OAuth complete",
+			progressMessage: `Waiting for OAuth callback on ${require_resolve_allowlist.MSTEAMS_OAUTH_REDIRECT_URI}...`,
 			onProgress: (msg) => ctx.progress.update(msg)
 		});
 		ctx.progress.update("Exchanging authorization code for tokens...");
@@ -97,7 +81,10 @@ async function manualFlow(ctx, authUrl, state, verifier, params, cause) {
 	ctx.progress.update("OAuth URL ready");
 	ctx.log(`\nOpen this URL in your LOCAL browser:\n\n${authUrl}\n`);
 	ctx.progress.update("Waiting for you to paste the callback URL...");
-	const parsed = parseCallbackInput(await ctx.prompt("Paste the redirect URL here: "), state);
+	const parsed = (0, openclaw_plugin_sdk_provider_auth_runtime.parseOAuthCallbackInput)(await ctx.prompt("Paste the redirect URL here: "), {
+		missingState: "Missing 'state' parameter in URL. Paste the full redirect URL.",
+		invalidInput: "Paste the full redirect URL (including code and state parameters), not just the authorization code."
+	});
 	if ("error" in parsed) throw new Error(parsed.error, cause ? { cause } : void 0);
 	if (parsed.state !== state) throw new Error("OAuth state mismatch - please try again", cause ? { cause } : void 0);
 	ctx.progress.update("Exchanging authorization code for tokens...");