@openclaw/msteams 2026.7.2-beta.7 → 2026.8.1-beta.3

package/dist/{polls-BWKNpBSg.cjs → polls-DvuJvaDG.cjs}

@@ -1,43 +1,19 @@
-//#region \0rolldown/runtime.js
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __copyProps = (to, from, except, desc) => {
-	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
-		key = keys[i];
-		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
-			get: ((k) => from[k]).bind(null, key),
-			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-		});
-	}
-	return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
-	value: mod,
-	enumerable: true
-}) : target, mod));
-//#endregion
+const require_rolldown_runtime = require("./rolldown-runtime-D6vf50IK.cjs");
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_file_lock = require("openclaw/plugin-sdk/file-lock");
 let openclaw_plugin_sdk_number_runtime = require("openclaw/plugin-sdk/number-runtime");
 let node_crypto = require("node:crypto");
-node_crypto = __toESM(node_crypto, 1);
+node_crypto = require_rolldown_runtime.__toESM(node_crypto, 1);
 let node_path = require("node:path");
-node_path = __toESM(node_path, 1);
+node_path = require_rolldown_runtime.__toESM(node_path, 1);
 let openclaw_plugin_sdk_keyed_async_queue = require("openclaw/plugin-sdk/keyed-async-queue");
 //#region extensions/msteams/src/conversation-store-helpers.ts
 function normalizeStoredConversationId(raw) {
 	return raw.split(";")[0] ?? raw;
 }
 function parseStoredConversationTimestamp(value) {
-	if (!value) return null;
-	const parsed = Date.parse(value);
-	if (!Number.isFinite(parsed)) return null;
-	return parsed;
+	return (0, openclaw_plugin_sdk_number_runtime.parseDateStringTimestampMs)(value) ?? null;
 }
 function toConversationStoreEntries(entries) {
 	return Array.from(entries, ([conversationId, reference]) => ({
@@ -384,9 +360,7 @@ function createPollVoteBucketStateStore(params) {
 	});
 }
 function parseTimestamp(value) {
-	if (!value) return null;
-	const parsed = Date.parse(value);
-	return Number.isFinite(parsed) ? parsed : null;
+	return (0, openclaw_plugin_sdk_number_runtime.parseDateStringTimestampMs)(value) ?? null;
 }
 function pruneExpired(polls) {
 	const cutoff = Date.now() - MSTEAMS_POLL_TTL_MS;
@@ -405,8 +379,7 @@ function selectRetainedMSTeamsPolls(polls) {
 }
 function normalizeMSTeamsPollSelections(poll, selections) {
 	const maxSelections = Math.max(1, poll.maxSelections);
-	const mapped = selections.map((entry) => (0, openclaw_plugin_sdk_number_runtime.parseStrictNonNegativeInteger)(entry)).filter((value) => value !== void 0).filter((value) => value >= 0 && value < poll.options.length).map((value) => String(value));
-	return (0, openclaw_plugin_sdk_string_coerce_runtime.uniqueStrings)(maxSelections > 1 ? mapped.slice(0, maxSelections) : mapped.slice(0, 1));
+	return (0, openclaw_plugin_sdk_string_coerce_runtime.uniqueStrings)(selections.map((entry) => (0, openclaw_plugin_sdk_number_runtime.parseStrictNonNegativeInteger)(entry)).filter((value) => value !== void 0).filter((value) => value >= 0 && value < poll.options.length).map((value) => String(value))).slice(0, maxSelections);
 }
 function splitMSTeamsPoll(poll) {
 	const { votes, ...metadata } = poll;
@@ -589,12 +562,6 @@ Object.defineProperty(exports, "MSTEAMS_SQLITE_MAX_POLL_ROWS", {
 		return MSTEAMS_SQLITE_MAX_POLL_ROWS;
 	}
 });
-Object.defineProperty(exports, "__toESM", {
-	enumerable: true,
-	get: function() {
-		return __toESM;
-	}
-});
 Object.defineProperty(exports, "buildMSTeamsConversationStateKey", {
 	enumerable: true,
 	get: function() {

package/dist/qa-runner-api.cjs

@@ -0,0 +1,36 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let openclaw_plugin_sdk_qa_runner_runtime = require("openclaw/plugin-sdk/qa-runner-runtime");
+//#region extensions/msteams/src/qa/cli.ts
+const DEFAULT_MSTEAMS_QA_SCENARIOS = ["channel-canary"];
+const loadMSTeamsQaAdapterRuntime = (0, openclaw_plugin_sdk_qa_runner_runtime.createLazyCliRuntimeLoader)(() => Promise.resolve().then(() => require("./adapter.runtime-8g-MOPfb.cjs")));
+async function runQaMSTeams(options) {
+	await (0, openclaw_plugin_sdk_qa_runner_runtime.runLiveTransportQaSuiteCommand)({
+		channelId: "msteams",
+		defaultProviderMode: "mock-openai",
+		options,
+		selectScenarioIds: ({ scenarioIds }) => scenarioIds?.length ? [...scenarioIds] : [...DEFAULT_MSTEAMS_QA_SCENARIOS]
+	});
+}
+//#endregion
+//#region extensions/msteams/qa-runner-api.ts
+const qaRunnerCliRegistrations = [(0, openclaw_plugin_sdk_qa_runner_runtime.createLiveTransportQaCliRegistration)({
+	commandName: "msteams",
+	adapterFactory: {
+		id: "msteams",
+		isolatesInstances: true,
+		matches: ({ channelId, driver }) => channelId === "msteams" && driver === "live",
+		async create(context) {
+			return await (await loadMSTeamsQaAdapterRuntime()).createMSTeamsQaTransportAdapter(context);
+		}
+	},
+	defaultProviderMode: "mock-openai",
+	description: "Run Microsoft Teams Gateway QA against a local Bot Framework mock",
+	providerModeHelp: "Provider mode: mock-openai, aimock, or live-frontier",
+	outputDirHelp: "Microsoft Teams QA artifact directory",
+	allowFailuresHelp: "Write artifacts without setting a failing exit code when scenarios fail",
+	scenarioHelp: "Run only the named Microsoft Teams QA scenario (repeatable)",
+	sutAccountHelp: "Normalized Microsoft Teams SUT account id in QA artifacts",
+	run: runQaMSTeams
+})];
+//#endregion
+exports.qaRunnerCliRegistrations = qaRunnerCliRegistrations;

package/dist/{resolve-allowlist-CEj9sABO.cjs → resolve-allowlist-CIfWUwuc.cjs}

@@ -4,8 +4,9 @@ const require_delegated_state = require("./delegated-state-DiEz9JIa.cjs");
 let openclaw_plugin_sdk_lazy_runtime = require("openclaw/plugin-sdk/lazy-runtime");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
-let openclaw_plugin_sdk_ssrf_runtime = require("openclaw/plugin-sdk/ssrf-runtime");
+let openclaw_plugin_sdk_fetch_runtime = require("openclaw/plugin-sdk/fetch-runtime");
 let openclaw_plugin_sdk_provider_http = require("openclaw/plugin-sdk/provider-http");
+let openclaw_plugin_sdk_ssrf_runtime = require("openclaw/plugin-sdk/ssrf-runtime");
 let node_buffer = require("node:buffer");
 let node_dns_promises = require("node:dns/promises");
 let openclaw_plugin_sdk_ssrf_policy = require("openclaw/plugin-sdk/ssrf-policy");
@@ -58,52 +59,6 @@ async function withMSTeamsAbortableRequestTimeout(params) {
 	}
 }
 //#endregion
-//#region extensions/msteams/src/response-with-release.ts
-const NULL_BODY_STATUSES = /* @__PURE__ */ new Set([
-	101,
-	204,
-	205,
-	304
-]);
-function responseWithRelease(response, release) {
-	let released = false;
-	const releaseOnce = async () => {
-		if (released) return;
-		released = true;
-		await release();
-	};
-	if (!response.body || NULL_BODY_STATUSES.has(response.status)) {
-		releaseOnce();
-		return response;
-	}
-	const reader = response.body.getReader();
-	const body = new ReadableStream({
-		async pull(controller) {
-			try {
-				const next = await reader.read();
-				if (next.done) {
-					controller.close();
-					await releaseOnce();
-					return;
-				}
-				controller.enqueue(next.value);
-			} catch (error) {
-				await releaseOnce();
-				throw error;
-			}
-		},
-		async cancel(reason) {
-			reader.cancel(reason).catch(() => void 0);
-			await releaseOnce();
-		}
-	});
-	return new Response(body, {
-		status: response.status,
-		statusText: response.statusText,
-		headers: response.headers
-	});
-}
-//#endregion
 //#region extensions/msteams/src/attachments/shared.ts
 const IMAGE_EXT_RE = /\.(avif|bmp|gif|heic|heif|jpe?g|png|tiff?|webp)$/i;
 const IMG_SRC_RE = /<img[^>]+src=["']([^"']+)["'][^>]*>/gi;
@@ -198,14 +153,15 @@ const GRAPH_SHARED_LINK_HOST_SUFFIXES = [
 * than directly.
 */
 function isGraphSharedLinkUrl(url) {
-	let host;
+	let parsed;
 	try {
-		host = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(new URL(url).hostname);
+		parsed = new URL(url);
 	} catch {
 		return false;
 	}
-	if (!host) return false;
-	return GRAPH_SHARED_LINK_HOST_SUFFIXES.some((suffix) => host === suffix || host.endsWith(suffix));
+	const host = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(parsed.hostname);
+	if (parsed.protocol !== "https:" || !host) return false;
+	return GRAPH_SHARED_LINK_HOST_SUFFIXES.some((suffix) => host === suffix || host.endsWith(suffix.startsWith(".") ? suffix : `.${suffix}`));
 }
 /**
 * Encode a SharePoint/OneDrive URL as a Graph shareId using the documented
@@ -477,6 +433,9 @@ async function resolveAndValidateIP(hostname, resolveFn) {
 }
 /** Maximum number of redirects to follow in safeFetch. */
 const MAX_SAFE_REDIRECTS = 5;
+function isRedirectStatus(status) {
+	return status === 301 || status === 302 || status === 303 || status === 307 || status === 308;
+}
 /**
 * Fetch a URL with redirect: "manual", validating each redirect target
 * against the hostname allowlist and optional DNS-resolved IP (anti-SSRF).
@@ -493,6 +452,13 @@ async function safeFetch(params) {
 	if (!isUrlAllowed(currentUrl, params.allowHosts)) throw new Error(`Initial download URL blocked: ${currentUrl}`);
 	if (currentHeaders.has("authorization") && params.authorizationAllowHosts && !isUrlAllowed(currentUrl, params.authorizationAllowHosts)) currentHeaders.delete("authorization");
 	if (!hasDispatcher) {
+		const lookupFn = async (hostname) => {
+			const resolved = await resolveFn(hostname);
+			return [{
+				...resolved,
+				family: resolved.address.includes(":") ? 6 : 4
+			}];
+		};
 		const guarded = await (0, openclaw_plugin_sdk_ssrf_runtime.fetchWithSsrFGuard)({
 			url: currentUrl,
 			fetchImpl: resolveGuardedFetchImpl({
@@ -506,12 +472,12 @@ async function safeFetch(params) {
 			maxRedirects: MAX_SAFE_REDIRECTS,
 			requireHttps: true,
 			policy: resolveMediaSsrfPolicy(params.allowHosts),
-			lookupFn: resolveFn,
+			lookupFn,
 			retainAuthorizationRedirectHostnameAllowlist: resolveRetainedAuthorizationRedirectHostnameAllowlist(params.authorizationAllowHosts),
 			auditContext: "msteams.attachment",
 			timeoutMs: params.timeoutMs ?? 3e4
 		});
-		return responseWithRelease(guarded.response, guarded.release);
+		return (0, openclaw_plugin_sdk_fetch_runtime.responseWithRelease)(guarded.response, guarded.release);
 	}
 	if (resolveFn) try {
 		const initialHost = new URL(currentUrl).hostname;
@@ -525,13 +491,7 @@ async function safeFetch(params) {
 			headers: currentHeaders,
 			redirect: "manual"
 		});
-		if (![
-			301,
-			302,
-			303,
-			307,
-			308
-		].includes(res.status)) return res;
+		if (!isRedirectStatus(res.status)) return res;
 		const location = res.headers.get("location");
 		if (!location) return res;
 		let redirectUrl;
@@ -656,6 +616,117 @@ function normalizeBotFrameworkServiceUrl(serviceUrl) {
 	throw new Error(`Blocked Microsoft Teams serviceUrl host: ${describeBotFrameworkServiceUrlHost(serviceUrl)}`);
 }
 //#endregion
+//#region extensions/msteams/src/qa/private-runtime.ts
+const PRIVATE_QA_BUILD_ENV = "OPENCLAW_BUILD_PRIVATE_QA";
+const PRIVATE_QA_NONCE_HEADER = "x-openclaw-msteams-qa-nonce";
+const PRIVATE_QA_RUNTIME_SYMBOL = Symbol.for("openclaw.msteams.privateQaRuntime");
+var PrivateQaHttpClient = class PrivateQaHttpClient {
+	constructor(connectorUrl, nonce, options = {}) {
+		this.connectorUrl = connectorUrl;
+		this.nonce = nonce;
+		this.options = options;
+	}
+	clone(options = {}) {
+		return new PrivateQaHttpClient(this.connectorUrl, this.nonce, {
+			...this.options,
+			...options,
+			headers: {
+				...this.options.headers,
+				...options.headers
+			}
+		});
+	}
+	async request(config) {
+		const sourceUrl = new URL(config.url ?? "", "https://smba.trafficmanager.net");
+		const targetUrl = new URL(`${sourceUrl.pathname}${sourceUrl.search}`, this.connectorUrl);
+		const headers = new Headers(this.options.headers);
+		for (const [key, value] of Object.entries(config.headers ?? {})) if (value != null) headers.set(key, String(value));
+		headers.set(PRIVATE_QA_NONCE_HEADER, this.nonce);
+		const token = typeof this.options.token === "function" ? await this.options.token() : this.options.token;
+		if (token) headers.set("authorization", `Bearer ${token}`);
+		const method = String(config.method ?? "GET").toUpperCase();
+		const { response, release } = await (0, openclaw_plugin_sdk_ssrf_runtime.fetchWithSsrFGuard)({
+			url: targetUrl.toString(),
+			init: {
+				method,
+				headers,
+				body: method === "GET" || method === "HEAD" || config.data == null ? void 0 : typeof config.data === "string" ? config.data : JSON.stringify(config.data)
+			},
+			policy: (0, openclaw_plugin_sdk_ssrf_runtime.ssrfPolicyFromHttpBaseUrlAllowedOrigin)(targetUrl.toString()),
+			maxRedirects: 0,
+			auditContext: "msteams-private-qa-connector"
+		});
+		try {
+			const text = await response.text();
+			const data = text ? JSON.parse(text) : void 0;
+			if (!response.ok) throw Object.assign(/* @__PURE__ */ new Error(`Microsoft Teams private QA connector returned HTTP ${response.status}`), { statusCode: response.status });
+			return {
+				data,
+				status: response.status,
+				statusText: response.statusText,
+				headers: Object.fromEntries(response.headers),
+				config
+			};
+		} finally {
+			await release();
+		}
+	}
+	get(url, config = {}) {
+		return this.request({
+			...config,
+			method: "GET",
+			url
+		});
+	}
+	post(url, data, config = {}) {
+		return this.request({
+			...config,
+			data,
+			method: "POST",
+			url
+		});
+	}
+	put(url, data, config = {}) {
+		return this.request({
+			...config,
+			data,
+			method: "PUT",
+			url
+		});
+	}
+	patch(url, data, config = {}) {
+		return this.request({
+			...config,
+			data,
+			method: "PATCH",
+			url
+		});
+	}
+	delete(url, config = {}) {
+		return this.request({
+			...config,
+			method: "DELETE",
+			url
+		});
+	}
+};
+function resolveMSTeamsPrivateQaRuntime(env = process.env, bootstrap = globalThis[PRIVATE_QA_RUNTIME_SYMBOL]) {
+	if (!bootstrap) return;
+	if (env[PRIVATE_QA_BUILD_ENV] !== "1") throw new Error("Microsoft Teams private QA runtime requires OPENCLAW_BUILD_PRIVATE_QA=1");
+	const connectorUrl = bootstrap.connectorUrl?.trim();
+	const nonce = bootstrap.nonce?.trim();
+	const botToken = bootstrap.botToken?.trim();
+	if (!connectorUrl || !nonce || !botToken) throw new Error("Microsoft Teams private QA bootstrap requires connector URL, nonce, and bot token");
+	const parsedConnectorUrl = new URL(connectorUrl);
+	if (parsedConnectorUrl.protocol !== "http:" || parsedConnectorUrl.hostname !== "127.0.0.1" && parsedConnectorUrl.hostname !== "localhost") throw new Error("Microsoft Teams private QA connector must use loopback HTTP");
+	return {
+		client: new PrivateQaHttpClient(parsedConnectorUrl.toString(), nonce),
+		listenHost: "127.0.0.1",
+		skipAuth: true,
+		token: async () => botToken
+	};
+}
+//#endregion
 //#region extensions/msteams/src/user-agent.ts
 let cachedUserAgent;
 function resolveTeamsSdkVersion() {
@@ -733,20 +804,29 @@ async function createMSTeamsExpressAdapter(serverOrApp) {
 */
 async function createMSTeamsApp(creds, options) {
 	const { App, cloudFromName } = await loadSdkModules();
+	const privateQaRuntime = resolveMSTeamsPrivateQaRuntime();
 	const cloud = options?.cloud ?? "Public";
 	const serviceUrl = options?.serviceUrl ? normalizeBotFrameworkServiceUrl(options.serviceUrl) : void 0;
 	const appOptions = {
-		client: options?.httpClient ?? {
+		client: privateQaRuntime?.client ?? options?.httpClient ?? {
 			headers: { "User-Agent": buildOpenClawUserAgentFragment() },
 			timeout: 3e4
 		},
+		...privateQaRuntime ? {
+			clientSecret: "",
+			skipAuth: privateQaRuntime.skipAuth,
+			token: privateQaRuntime.token
+		} : {},
 		...options?.httpServerAdapter ? { httpServerAdapter: options.httpServerAdapter } : {},
 		...options?.messagingEndpoint ? { messagingEndpoint: options.messagingEndpoint } : {},
 		cloud: cloudFromName(cloud),
 		...serviceUrl ? { serviceUrl } : {},
 		...options?.oauthDefaultConnectionName ? { oauth: { defaultConnectionName: options.oauthDefaultConnectionName } } : {}
 	};
-	if (creds.type === "federated") return await createFederatedApp(creds, App, appOptions);
+	if (creds.type === "federated") return await createFederatedApp(creds, App, {
+		clientSecret: "",
+		...appOptions
+	});
 	return new App({
 		clientId: creds.appId,
 		clientSecret: creds.appPassword,
@@ -765,9 +845,8 @@ async function createFederatedApp(creds, App, appOptions) {
 	let privateKey;
 	try {
 		privateKey = await (0, openclaw_plugin_sdk_secret_file.readSecretFile)(creds.certificatePath, "Microsoft Teams certificate");
-	} catch (err) {
-		const msg = err instanceof Error ? err.message : String(err);
-		throw new Error(`Failed to read certificate file at '${creds.certificatePath}': ${msg}`, { cause: err });
+	} catch {
+		throw new Error("Failed to read certificate file: the configured credential is unavailable.");
 	}
 	return createCertificateApp(creds, privateKey, App, appOptions);
 }
@@ -854,6 +933,10 @@ function createMSTeamsTokenBody(params) {
 function resolveMSTeamsTokenExpiresAt(value) {
 	return (0, openclaw_plugin_sdk_number_runtime.resolveExpiresAtMsFromDurationSeconds)(value, { bufferMs: EXPIRY_BUFFER_MS });
 }
+function assertMSTeamsTokenResponseObject(data, failureLabel) {
+	if (!(0, openclaw_plugin_sdk_string_coerce_runtime.isRecord)(data)) throw new Error(`MSTeams ${failureLabel} failed: invalid token response fields`);
+	return data;
+}
 function parseMSTeamsTokenResponse(data, failureLabel) {
 	const expiresAt = resolveMSTeamsTokenExpiresAt(data.expires_in);
 	if (typeof data.access_token !== "string" || !data.access_token || expiresAt === void 0 || data.refresh_token !== void 0 && typeof data.refresh_token !== "string" || data.scope !== void 0 && typeof data.scope !== "string") throw new Error(`MSTeams ${failureLabel} failed: invalid token response fields`);
@@ -880,7 +963,7 @@ async function fetchMSTeamsTokens(params) {
 	});
 	try {
 		if (!response.ok) throw await createMSTeamsHttpError(response, `MSTeams ${params.failureLabel} failed`);
-		return parseMSTeamsTokenResponse(await (0, openclaw_plugin_sdk_provider_http.readProviderJsonResponse)(response, `MSTeams ${params.failureLabel} failed`), params.failureLabel);
+		return parseMSTeamsTokenResponse(assertMSTeamsTokenResponseObject(await (0, openclaw_plugin_sdk_provider_http.readProviderJsonResponse)(response, `MSTeams ${params.failureLabel} failed`), params.failureLabel), params.failureLabel);
 	} finally {
 		await release();
 	}
@@ -1050,21 +1133,30 @@ async function requestGraph(params) {
 	try {
 		if (!response.ok) throw await createMSTeamsHttpError(response, `${params.errorPrefix ?? "Graph"} ${params.path} failed`);
 		releaseInFinally = false;
-		return responseWithRelease(response, release);
+		return (0, openclaw_plugin_sdk_fetch_runtime.responseWithRelease)(response, release);
 	} finally {
 		if (releaseInFinally) await release();
 	}
 }
 async function readOptionalGraphJson(res, label) {
-	if (res.status === 204 || res.headers?.get?.("content-length") === "0") return;
+	if (res.status === 204 || res.headers.get("content-length") === "0") return;
 	return await (0, openclaw_plugin_sdk_provider_http.readProviderJsonResponse)(res, label);
 }
-async function fetchGraphJson(params) {
-	return await readOptionalGraphJson(await requestGraph({
+async function mutateGraphJson(params) {
+	const errorPrefix = `Graph${params.beta ? " beta" : ""} ${params.method}`;
+	return readOptionalGraphJson(await requestGraph({
 		token: params.token,
 		path: params.path,
 		method: params.method,
 		body: params.body,
+		root: params.beta ? GRAPH_BETA : void 0,
+		errorPrefix
+	}), `${errorPrefix} ${params.path} failed`);
+}
+async function fetchGraphJson(params) {
+	return await readOptionalGraphJson(await requestGraph({
+		token: params.token,
+		path: params.path,
 		headers: params.headers,
 		deadline: params.deadline
 	}), `Graph ${params.path} failed`);
@@ -1159,41 +1251,13 @@ async function listTeamsByNameWithPageInfo(token, query) {
 		path: `/groups?$filter=${encodeURIComponent(filter)}&$select=id,displayName`
 	});
 }
-async function postGraphJson(params) {
-	return readOptionalGraphJson(await requestGraph({
-		token: params.token,
-		path: params.path,
-		method: "POST",
-		body: params.body,
-		errorPrefix: "Graph POST"
-	}), `Graph POST ${params.path} failed`);
-}
-async function postGraphBetaJson(params) {
-	return readOptionalGraphJson(await requestGraph({
-		token: params.token,
-		path: params.path,
-		method: "POST",
-		root: GRAPH_BETA,
-		body: params.body,
-		errorPrefix: "Graph beta POST"
-	}), `Graph beta POST ${params.path} failed`);
-}
 async function deleteGraphRequest(params) {
-	await requestGraph({
+	await (await requestGraph({
 		token: params.token,
 		path: params.path,
 		method: "DELETE",
 		errorPrefix: "Graph DELETE"
-	});
-}
-async function patchGraphJson(params) {
-	return readOptionalGraphJson(await requestGraph({
-		token: params.token,
-		path: params.path,
-		method: "PATCH",
-		body: params.body,
-		errorPrefix: "Graph PATCH"
-	}), `Graph PATCH ${params.path} failed`);
+	})).body?.cancel().catch(() => void 0);
 }
 async function listChannelsForTeam(token, teamId) {
 	return (await listChannelsForTeamWithPageInfo(token, teamId)).items;
@@ -1930,6 +1994,12 @@ Object.defineProperty(exports, "isLikelyImageAttachment", {
 		return isLikelyImageAttachment;
 	}
 });
+Object.defineProperty(exports, "isRedirectStatus", {
+	enumerable: true,
+	get: function() {
+		return isRedirectStatus;
+	}
+});
 Object.defineProperty(exports, "isUrlAllowed", {
 	enumerable: true,
 	get: function() {
@@ -1978,6 +2048,12 @@ Object.defineProperty(exports, "looksLikeMSTeamsTargetId", {
 		return looksLikeMSTeamsTargetId;
 	}
 });
+Object.defineProperty(exports, "mutateGraphJson", {
+	enumerable: true,
+	get: function() {
+		return mutateGraphJson;
+	}
+});
 Object.defineProperty(exports, "normalizeBotFrameworkServiceUrl", {
 	enumerable: true,
 	get: function() {
@@ -2038,24 +2114,6 @@ Object.defineProperty(exports, "parseMSTeamsTeamEntry", {
 		return parseMSTeamsTeamEntry;
 	}
 });
-Object.defineProperty(exports, "patchGraphJson", {
-	enumerable: true,
-	get: function() {
-		return patchGraphJson;
-	}
-});
-Object.defineProperty(exports, "postGraphBetaJson", {
-	enumerable: true,
-	get: function() {
-		return postGraphBetaJson;
-	}
-});
-Object.defineProperty(exports, "postGraphJson", {
-	enumerable: true,
-	get: function() {
-		return postGraphJson;
-	}
-});
 Object.defineProperty(exports, "projectStableMSTeamsGroupAllowlist", {
 	enumerable: true,
 	get: function() {
@@ -2110,6 +2168,12 @@ Object.defineProperty(exports, "resolveMSTeamsMediaKind", {
 		return resolveMSTeamsMediaKind;
 	}
 });
+Object.defineProperty(exports, "resolveMSTeamsPrivateQaRuntime", {
+	enumerable: true,
+	get: function() {
+		return resolveMSTeamsPrivateQaRuntime;
+	}
+});
 Object.defineProperty(exports, "resolveMSTeamsRequestTimeoutMs", {
 	enumerable: true,
 	get: function() {

package/dist/rolldown-runtime-D6vf50IK.cjs

@@ -0,0 +1,28 @@
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+//#endregion
+Object.defineProperty(exports, "__toESM", {
+	enumerable: true,
+	get: function() {
+		return __toESM;
+	}
+});

package/dist/runtime-api.cjs

@@ -3,8 +3,8 @@ const require_runtime = require("./runtime-gZTAuFux.cjs");
 let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
 let openclaw_plugin_sdk_channel_pairing = require("openclaw/plugin-sdk/channel-pairing");
 let openclaw_plugin_sdk_channel_policy = require("openclaw/plugin-sdk/channel-policy");
-let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
+let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_channel_status = require("openclaw/plugin-sdk/channel-status");
 let openclaw_plugin_sdk_channel_targets = require("openclaw/plugin-sdk/channel-targets");
 let openclaw_plugin_sdk_dangerous_name_runtime = require("openclaw/plugin-sdk/dangerous-name-runtime");

package/dist/secret-contract-api.cjs

@@ -1,37 +1,13 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-let openclaw_plugin_sdk_channel_secret_basic_runtime = require("openclaw/plugin-sdk/channel-secret-basic-runtime");
 //#region extensions/msteams/src/secret-contract.ts
-const secretTargetRegistryEntries = (0, openclaw_plugin_sdk_channel_secret_basic_runtime.createChannelSecretTargetRegistryEntries)({
+const channelSecrets = (0, require("openclaw/plugin-sdk/channel-secret-basic-runtime").createSimpleChannelSecretContract)({
 	channelKey: "msteams",
-	channel: ["appPassword"]
+	label: "Microsoft Teams",
+	accountFields: [],
+	channelFields: ["appPassword"],
+	mode: "channel-only"
 });
-function collectRuntimeConfigAssignments(params) {
-	const msteams = (0, openclaw_plugin_sdk_channel_secret_basic_runtime.getChannelRecord)(params.config, "msteams");
-	if (!msteams) return;
-	(0, openclaw_plugin_sdk_channel_secret_basic_runtime.collectSecretInputAssignment)({
-		value: msteams.appPassword,
-		path: "channels.msteams.appPassword",
-		expected: "string",
-		defaults: params.defaults,
-		context: params.context,
-		active: msteams.enabled !== false,
-		inactiveReason: "Microsoft Teams channel is disabled.",
-		owner: {
-			ownerKind: "account",
-			ownerId: "msteams:default",
-			requiredForGateway: false,
-			disposition: "isolate",
-			contract: msteams
-		},
-		apply: (value) => {
-			msteams.appPassword = value;
-		}
-	});
-}
-const channelSecrets = {
-	secretTargetRegistryEntries,
-	collectRuntimeConfigAssignments
-};
+const { secretTargetRegistryEntries, collectRuntimeConfigAssignments } = channelSecrets;
 //#endregion
 exports.channelSecrets = channelSecrets;
 exports.collectRuntimeConfigAssignments = collectRuntimeConfigAssignments;