@openclaw/msteams 2026.8.1-beta.2 → 2026.8.1-beta.3

package/dist/{adapter.runtime-DEYjslFX.cjs → adapter.runtime-8g-MOPfb.cjs}

@@ -1,16 +1,17 @@
 const require_rolldown_runtime = require("./rolldown-runtime-D6vf50IK.cjs");
 let openclaw_plugin_sdk_ssrf_runtime = require("openclaw/plugin-sdk/ssrf-runtime");
-let openclaw_plugin_sdk_error_runtime = require("openclaw/plugin-sdk/error-runtime");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_rolldown_runtime.__toESM(node_fs_promises, 1);
 let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
+let openclaw_plugin_sdk_error_runtime = require("openclaw/plugin-sdk/error-runtime");
 let node_timers_promises = require("node:timers/promises");
 let node_url = require("node:url");
 let node_events = require("node:events");
 let node_http = require("node:http");
 //#region extensions/msteams/src/qa/bot-framework-server.ts
+const AMBIGUOUS_GATEWAY_TIMEOUT_MARKER = "QA-MSTEAMS-AMBIGUOUS-504";
 async function readJson(request) {
 	const chunks = [];
 	for await (const chunk of request) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
@@ -53,7 +54,8 @@ async function startMSTeamsQaBotFrameworkServer(options) {
 				conversationId: route.conversationId,
 				...route.threadId ? { threadId: route.threadId } : {}
 			});
-			sendJson(response, 200, { id: activityId });
+			const acceptedButTimedOut = typeof activity.text === "string" && activity.text.includes(AMBIGUOUS_GATEWAY_TIMEOUT_MARKER);
+			sendJson(response, acceptedButTimedOut ? 504 : 200, acceptedButTimedOut ? { error: "gateway timeout after acceptance" } : { id: activityId });
 		})().catch((error) => {
 			sendJson(response, 500, { error: (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(error) });
 		});

package/dist/api.cjs

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_channel = require("./channel-DfCbi0d_.cjs");
-const require_setup_surface = require("./setup-surface-DAhGL2h8.cjs");
-exports.createMSTeamsSetupWizardBase = require_setup_surface.createMSTeamsSetupWizardBase;
+const require_channel = require("./channel-KpWENcgK.cjs");
+const require_channel_setup = require("./channel.setup-mOFtsfYz.cjs");
+exports.createMSTeamsSetupWizardBase = require_channel_setup.createMSTeamsSetupWizardBase;
 exports.msteamsPlugin = require_channel.msteamsPlugin;
-exports.msteamsSetupAdapter = require_setup_surface.msteamsSetupAdapter;
-exports.msteamsSetupWizard = require_setup_surface.msteamsSetupWizard;
-exports.openDelegatedOAuthUrl = require_setup_surface.openDelegatedOAuthUrl;
+exports.msteamsSetupAdapter = require_channel_setup.msteamsSetupAdapter;
+exports.msteamsSetupWizard = require_channel_setup.msteamsSetupWizard;
+exports.openDelegatedOAuthUrl = require_channel_setup.openDelegatedOAuthUrl;

package/dist/{channel-DfCbi0d_.cjs → channel-KpWENcgK.cjs}

@@ -1,8 +1,7 @@
 require("./runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-C6YcNC9a.cjs");
-const require_setup_surface = require("./setup-surface-DAhGL2h8.cjs");
-const require_config_schema = require("./config-schema-C4CszdDi.cjs");
-let openclaw_plugin_sdk_account_helpers = require("openclaw/plugin-sdk/account-helpers");
+const require_resolve_allowlist = require("./resolve-allowlist-CIfWUwuc.cjs");
+const require_directory_contract_api = require("./directory-contract-api.cjs");
+const require_channel_setup = require("./channel.setup-mOFtsfYz.cjs");
 let openclaw_plugin_sdk_channel_core = require("openclaw/plugin-sdk/channel-core");
 let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
 let openclaw_plugin_sdk_channel_pairing = require("openclaw/plugin-sdk/channel-pairing");
@@ -686,7 +685,13 @@ const collectMSTeamsSecurityWarnings = (0, openclaw_plugin_sdk_channel_policy.cr
 	resolveGroupPolicy: ({ cfg }) => cfg.channels?.msteams?.groupPolicy,
 	collect: ({ groupPolicy }) => groupPolicy === "open" ? ["- MS Teams groups: groupPolicy=\"open\" allows any member to trigger (mention-gated). Set channels.msteams.groupPolicy=\"allowlist\" + channels.msteams.groupAllowFrom to restrict senders."] : []
 });
-const loadMSTeamsChannelRuntime = (0, openclaw_plugin_sdk_lazy_runtime.createLazyRuntimeNamedExport)(() => Promise.resolve().then(() => require("./channel.runtime-BJmueA4q.cjs")), "msTeamsChannelRuntime");
+const collectMSTeamsSecurityFindings = openclaw_plugin_sdk_channel_policy.createConditionalWarningCollector.findings({
+	collectWarnings: collectMSTeamsSecurityWarnings,
+	checkId: "channels.msteams.groups.open",
+	severity: "critical",
+	title: "MS Teams security warning"
+});
+const loadMSTeamsChannelRuntime = (0, openclaw_plugin_sdk_lazy_runtime.createLazyRuntimeNamedExport)(() => Promise.resolve().then(() => require("./channel.runtime-Bkzj8jZ0.cjs")), "msTeamsChannelRuntime");
 function jsonActionResult(data) {
 	return {
 		content: [{
@@ -821,7 +826,8 @@ async function runWithRequiredActionPinnedMessageTarget(params) {
 	});
 }
 function describeMSTeamsMessageTool({ cfg }) {
-	const enabled = cfg.channels?.msteams?.enabled !== false && Boolean(require_resolve_allowlist.resolveMSTeamsCredentials(cfg.channels?.msteams));
+	const account = require_channel_setup.resolveMSTeamsAccount(cfg);
+	const enabled = account.enabled && account.configured && account.tokenStatus === "available";
 	return {
 		actions: enabled ? [
 			"upload-file",
@@ -891,38 +897,13 @@ const msteamsMessageAdapter = (0, openclaw_plugin_sdk_channel_outbound.createCha
 });
 const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlugin)({
 	base: {
-		id: "msteams",
-		meta: {
-			...require_setup_surface.msteamsMeta,
-			aliases: [...require_setup_surface.msteamsMeta.aliases]
-		},
-		setupWizard: require_setup_surface.msteamsSetupWizard,
-		capabilities: {
-			chatTypes: [
-				"direct",
-				"channel",
-				"thread"
-			],
-			polls: true,
-			threads: true,
-			media: true
-		},
+		...require_channel_setup.msteamsSetupPlugin,
 		streaming: { blockStreamingCoalesceDefaults: {
 			minChars: 1500,
 			idleMs: 1e3
 		} },
 		agentPrompt: { messageToolHints: () => ["- Adaptive Cards supported. Use `action=send` with `card={type,version,body}` to send rich cards.", "- MSTeams targeting: omit `target` to reply to the current conversation (auto-inferred). Explicit targets: `user:ID` or `user:Display Name` (requires Graph API) for DMs, `conversation:19:...@thread.tacv2` for groups/channels. Prefer IDs over display names for speed."] },
 		groups: { resolveToolPolicy: resolveMSTeamsGroupToolPolicy },
-		reload: { configPrefixes: ["channels.msteams"] },
-		configSchema: require_config_schema.MSTeamsChannelConfigSchema,
-		config: {
-			...require_setup_surface.msteamsConfigAdapter,
-			isConfigured: (_account, cfg) => Boolean(require_resolve_allowlist.resolveMSTeamsCredentials(cfg.channels?.msteams)),
-			describeAccount: (account) => (0, openclaw_plugin_sdk_account_helpers.describeAccountSnapshot)({
-				account,
-				configured: account.configured
-			})
-		},
 		approvalCapability: msTeamsApprovalAuth,
 		doctor: {
 			dmAllowFromMode: "topOnly",
@@ -931,7 +912,6 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 			warnOnEmptyGroupSenderAllowlist: true,
 			collectMutableAllowlistWarnings: collectMSTeamsMutableAllowlistWarnings
 		},
-		setupContract: require_setup_surface.msteamsSetupContract,
 		messaging: {
 			targetPrefixes: ["msteams", "teams"],
 			directTargetStyle: "user-prefixed",
@@ -945,34 +925,7 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 		},
 		message: msteamsMessageAdapter,
 		directory: (0, openclaw_plugin_sdk_directory_runtime.createChannelDirectoryAdapter)({
-			self: async ({ cfg }) => {
-				const creds = require_resolve_allowlist.resolveMSTeamsCredentials(cfg.channels?.msteams);
-				if (!creds) return null;
-				return {
-					kind: "user",
-					id: creds.appId,
-					name: creds.appId
-				};
-			},
-			listPeers: async ({ cfg, query, limit }) => (0, openclaw_plugin_sdk_directory_runtime.listDirectoryEntriesFromSources)({
-				kind: "user",
-				sources: [cfg.channels?.msteams?.allowFrom ?? [], Object.keys(cfg.channels?.msteams?.dms ?? {})],
-				query,
-				limit,
-				normalizeId: (raw) => {
-					const normalized = require_resolve_allowlist.normalizeMSTeamsMessagingTarget(raw) ?? raw;
-					const lowered = normalized.toLowerCase();
-					if (lowered.startsWith("user:") || lowered.startsWith("conversation:")) return normalized;
-					return `user:${normalized}`;
-				}
-			}),
-			listGroups: async ({ cfg, query, limit }) => (0, openclaw_plugin_sdk_directory_runtime.listDirectoryEntriesFromSources)({
-				kind: "group",
-				sources: [Object.values(cfg.channels?.msteams?.teams ?? {}).flatMap((team) => Object.keys(team.channels ?? {}))],
-				query,
-				limit,
-				normalizeId: (raw) => `conversation:${raw.replace(/^conversation:/i, "").trim()}`
-			}),
+			...require_directory_contract_api.msteamsDirectoryContractPlugin.directory,
 			...(0, openclaw_plugin_sdk_directory_runtime.createRuntimeDirectoryLiveAdapter)({
 				getRuntime: loadMSTeamsChannelRuntime,
 				listPeersLive: (runtime) => runtime.listMSTeamsDirectoryPeersLive,
@@ -1087,6 +1040,7 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 			return results;
 		} },
 		actions: {
+			providerOwnedReadGates: true,
 			describeMessageTool: describeMSTeamsMessageTool,
 			extractToolSendResult: ({ result, send }) => extractMSTeamsToolSendResult(result, send),
 			requiresTrustedRequesterSender: ({ action, toolContext }) => (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(toolContext?.currentChannelProvider)?.toLowerCase() === "msteams" && MSTEAMS_GROUP_MANAGEMENT_ACTIONS.has(action),
@@ -1467,11 +1421,14 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 				accountId: account.accountId,
 				enabled: account.enabled,
 				configured: account.configured,
-				extra: { port: runtime?.port ?? null }
+				extra: {
+					port: runtime?.port ?? null,
+					tokenStatus: account.tokenStatus
+				}
 			})
 		}),
 		gateway: { startAccount: async (ctx) => {
-			const { monitorMSTeamsProvider } = await Promise.resolve().then(() => require("./src-Bz9wY0Mr.cjs"));
+			const { monitorMSTeamsProvider } = await Promise.resolve().then(() => require("./src-C127-DcQ.cjs"));
 			const port = ctx.cfg.channels?.msteams?.webhook?.port ?? 3978;
 			const statusSink = (0, openclaw_plugin_sdk_channel_outbound.createAccountStatusSink)({
 				accountId: ctx.accountId,
@@ -1487,7 +1444,7 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 			});
 		} }
 	},
-	security: { collectWarnings: (0, openclaw_plugin_sdk_channel_policy.projectConfigWarningCollector)(collectMSTeamsSecurityWarnings) },
+	security: { collectWarnings: ({ cfg }) => collectMSTeamsSecurityFindings({ cfg }) },
 	pairing: { text: {
 		idLabel: "msteamsUserId",
 		message: openclaw_plugin_sdk_channel_status.PAIRING_APPROVED_MESSAGE,

package/dist/channel-plugin-api.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_channel = require("./channel-DfCbi0d_.cjs");
+const require_channel = require("./channel-KpWENcgK.cjs");
 exports.msteamsPlugin = require_channel.msteamsPlugin;

package/dist/{channel.runtime-BJmueA4q.cjs → channel.runtime-Bkzj8jZ0.cjs}

@@ -1,10 +1,10 @@
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 require("./runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-C6YcNC9a.cjs");
-const require_channel = require("./channel-DfCbi0d_.cjs");
-const require_setup_surface = require("./setup-surface-DAhGL2h8.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CIfWUwuc.cjs");
+const require_channel = require("./channel-KpWENcgK.cjs");
+const require_channel_setup = require("./channel.setup-mOFtsfYz.cjs");
 const require_polls = require("./polls-DvuJvaDG.cjs");
-const require_messenger = require("./messenger-BqA8G3pY.cjs");
+const require_messenger = require("./messenger-IISPSOvj.cjs");
 let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_reply_payload = require("openclaw/plugin-sdk/reply-payload");
@@ -654,6 +654,9 @@ async function findConversationReference(recipient) {
 async function resolveMSTeamsSendContext(params) {
 	const msteamsCfg = params.cfg.channels?.msteams;
 	if (!msteamsCfg?.enabled) throw new Error("msteams provider is not enabled");
+	const account = require_channel_setup.resolveMSTeamsAccount(params.cfg);
+	if (account.tokenStatus === "configured_unavailable") throw new Error("msteams credential file is configured but unavailable");
+	if (!account.configured) throw new Error("msteams credentials not configured");
 	const creds = require_resolve_allowlist.resolveMSTeamsCredentials(msteamsCfg);
 	if (!creds) throw new Error("msteams credentials not configured");
 	const store = require_polls.createMSTeamsConversationStoreState();
@@ -675,7 +678,7 @@ async function resolveMSTeamsSendContext(params) {
 		} catch (err) {
 			log.warn?.("failed to remove blocked msteams conversation reference", {
 				conversationId,
-				error: require_setup_surface.formatUnknownError(err)
+				error: require_channel_setup.formatUnknownError(err)
 			});
 		}
 		throw new Error(`Stored Microsoft Teams conversation reference has blocked serviceUrl host: ${require_resolve_allowlist.describeBotFrameworkServiceUrlHost(ref.serviceUrl)}. The bot must receive a new message from this conversation before it can send proactively.`);
@@ -922,10 +925,10 @@ async function sendMessageMSTeams(params) {
 				kind: "media"
 			});
 		} catch (err) {
-			const classification = require_setup_surface.classifyMSTeamsSendError(err);
-			const hint = require_setup_surface.formatMSTeamsSendErrorHint(classification);
+			const classification = require_channel_setup.classifyMSTeamsSendError(err);
+			const hint = require_channel_setup.formatMSTeamsSendErrorHint(classification);
 			const status = classification.statusCode ? ` (HTTP ${classification.statusCode})` : "";
-			throw new Error(`msteams file send failed${status}: ${require_setup_surface.formatUnknownError(err)}${hint ? ` (${hint})` : ""}`, { cause: err });
+			throw new Error(`msteams file send failed${status}: ${require_channel_setup.formatUnknownError(err)}${hint ? ` (${hint})` : ""}`, { cause: err });
 		}
 	}
 	return sendTextWithMedia(ctx, messageText, void 0);
@@ -960,10 +963,10 @@ async function sendTextWithMedia(ctx, text, mediaUrl) {
 			serviceUrlBoundary: ctx.sdkCloudOptions
 		});
 	} catch (err) {
-		const classification = require_setup_surface.classifyMSTeamsSendError(err);
-		const hint = require_setup_surface.formatMSTeamsSendErrorHint(classification);
+		const classification = require_channel_setup.classifyMSTeamsSendError(err);
+		const hint = require_channel_setup.formatMSTeamsSendErrorHint(classification);
 		const status = classification.statusCode ? ` (HTTP ${classification.statusCode})` : "";
-		throw new Error(`msteams send failed${status}: ${require_setup_surface.formatUnknownError(err)}${hint ? ` (${hint})` : ""}`, { cause: err });
+		throw new Error(`msteams send failed${status}: ${require_channel_setup.formatUnknownError(err)}${hint ? ` (${hint})` : ""}`, { cause: err });
 	}
 	const messageId = platformMessageIds[0] ?? "unknown";
 	log.info("sent proactive message", {
@@ -995,10 +998,10 @@ async function sendProactiveActivity({ ctx, activity, errorPrefix }) {
 			activity
 		});
 	} catch (err) {
-		const classification = require_setup_surface.classifyMSTeamsSendError(err);
-		const hint = require_setup_surface.formatMSTeamsSendErrorHint(classification);
+		const classification = require_channel_setup.classifyMSTeamsSendError(err);
+		const hint = require_channel_setup.formatMSTeamsSendErrorHint(classification);
 		const status = classification.statusCode ? ` (HTTP ${classification.statusCode})` : "";
-		throw new Error(`${errorPrefix} failed${status}: ${require_setup_surface.formatUnknownError(err)}${hint ? ` (${hint})` : ""}`, { cause: err });
+		throw new Error(`${errorPrefix} failed${status}: ${require_channel_setup.formatUnknownError(err)}${hint ? ` (${hint})` : ""}`, { cause: err });
 	}
 }
 /**
@@ -1102,10 +1105,10 @@ async function editMessageMSTeams(params) {
 			text
 		}, { serviceUrlBoundary: sdkCloudOptions });
 	} catch (err) {
-		const classification = require_setup_surface.classifyMSTeamsSendError(err);
-		const hint = require_setup_surface.formatMSTeamsSendErrorHint(classification);
+		const classification = require_channel_setup.classifyMSTeamsSendError(err);
+		const hint = require_channel_setup.formatMSTeamsSendErrorHint(classification);
 		const status = classification.statusCode ? ` (HTTP ${classification.statusCode})` : "";
-		throw new Error(`msteams edit failed${status}: ${require_setup_surface.formatUnknownError(err)}${hint ? ` (${hint})` : ""}`, { cause: err });
+		throw new Error(`msteams edit failed${status}: ${require_channel_setup.formatUnknownError(err)}${hint ? ` (${hint})` : ""}`, { cause: err });
 	}
 	log.info("edited proactive message", {
 		conversationId,
@@ -1132,10 +1135,10 @@ async function deleteMessageMSTeams(params) {
 	try {
 		await require_messenger.deleteMSTeamsActivityWithReference(app, require_messenger.buildConversationReference(ref), activityId, { serviceUrlBoundary: sdkCloudOptions });
 	} catch (err) {
-		const classification = require_setup_surface.classifyMSTeamsSendError(err);
-		const hint = require_setup_surface.formatMSTeamsSendErrorHint(classification);
+		const classification = require_channel_setup.classifyMSTeamsSendError(err);
+		const hint = require_channel_setup.formatMSTeamsSendErrorHint(classification);
 		const status = classification.statusCode ? ` (HTTP ${classification.statusCode})` : "";
-		throw new Error(`msteams delete failed${status}: ${require_setup_surface.formatUnknownError(err)}${hint ? ` (${hint})` : ""}`, { cause: err });
+		throw new Error(`msteams delete failed${status}: ${require_channel_setup.formatUnknownError(err)}${hint ? ` (${hint})` : ""}`, { cause: err });
 	}
 	log.info("deleted proactive message", {
 		conversationId,
@@ -1149,6 +1152,16 @@ const MSTEAMS_TEXT_CHUNK_LIMIT = 4e3;
 function resolveMSTeamsEffectiveTextChunkLimit(configuredLimit) {
 	return typeof configuredLimit === "number" && configuredLimit > 0 ? Math.min(configuredLimit, MSTEAMS_TEXT_CHUNK_LIMIT) : MSTEAMS_TEXT_CHUNK_LIMIT;
 }
+function toMSTeamsOutboundResult(result) {
+	const { conversationId, ...delivery } = result;
+	return {
+		...delivery,
+		target: {
+			kind: "conversation",
+			id: conversationId
+		}
+	};
+}
 function resolveMSTeamsThreadTarget(to, threadId) {
 	const normalizedThreadId = threadId == null ? "" : String(threadId).trim();
 	const graphChannelId = to.includes("/") ? to.slice(to.indexOf("/") + 1) : "";
@@ -1206,11 +1219,11 @@ const msteamsOutbound = {
 	sendPayload: async ({ cfg, to, text, mediaUrl, mediaAccess, mediaLocalRoots, mediaReadFile, payload, deps, onDeliveryResult, threadId }) => {
 		const deliveryTarget = resolveMSTeamsThreadTarget(to, threadId);
 		const presentationCard = (0, openclaw_plugin_sdk_string_coerce_runtime.asOptionalRecord)(payload.channelData?.msteams)?.presentationCard;
-		if (presentationCard && typeof presentationCard === "object" && !Array.isArray(presentationCard)) return (0, openclaw_plugin_sdk_channel_send_result.attachChannelToResult)("msteams", await sendAdaptiveCardMSTeams({
+		if (presentationCard && typeof presentationCard === "object" && !Array.isArray(presentationCard)) return (0, openclaw_plugin_sdk_channel_send_result.attachChannelToResult)("msteams", toMSTeamsOutboundResult(await sendAdaptiveCardMSTeams({
 			cfg,
 			to: deliveryTarget,
 			card: presentationCard
-		}));
+		})));
 		const mediaUrls = (0, openclaw_plugin_sdk_string_normalization_runtime.normalizeStringEntries)((0, openclaw_plugin_sdk_reply_payload.resolvePayloadMediaUrls)({
 			...payload,
 			mediaUrl: payload.mediaUrl ?? mediaUrl
@@ -1224,7 +1237,7 @@ const msteamsOutbound = {
 				text,
 				mediaUrls,
 				onResult: async (deliveryResult) => {
-					await onDeliveryResult?.((0, openclaw_plugin_sdk_channel_send_result.attachChannelToResult)("msteams", deliveryResult));
+					await onDeliveryResult?.((0, openclaw_plugin_sdk_channel_send_result.attachChannelToResult)("msteams", toMSTeamsOutboundResult(deliveryResult)));
 				},
 				send: async ({ text: textLocal, mediaUrl: mediaUrlLocal }) => await send(deliveryTarget, textLocal, {
 					mediaUrl: mediaUrlLocal,
@@ -1233,7 +1246,7 @@ const msteamsOutbound = {
 					mediaReadFile
 				})
 			});
-			if (result) return (0, openclaw_plugin_sdk_channel_send_result.attachChannelToResult)("msteams", result);
+			if (result) return (0, openclaw_plugin_sdk_channel_send_result.attachChannelToResult)("msteams", toMSTeamsOutboundResult(result));
 		}
 		if (text.trim()) {
 			const send = resolveMSTeamsTextSend({
@@ -1244,22 +1257,22 @@ const msteamsOutbound = {
 			let result;
 			for (const chunk of chunks) {
 				result = await send(deliveryTarget, chunk);
-				await onDeliveryResult?.((0, openclaw_plugin_sdk_channel_send_result.attachChannelToResult)("msteams", result));
+				await onDeliveryResult?.((0, openclaw_plugin_sdk_channel_send_result.attachChannelToResult)("msteams", toMSTeamsOutboundResult(result)));
 			}
-			return (0, openclaw_plugin_sdk_channel_send_result.attachChannelToResult)("msteams", result);
+			return (0, openclaw_plugin_sdk_channel_send_result.attachChannelToResult)("msteams", toMSTeamsOutboundResult(result));
 		}
 		throw new Error("MS Teams payload send requires text, media, or a presentation card.");
 	},
 	...(0, openclaw_plugin_sdk_channel_send_result.createAttachedChannelResultAdapter)({
 		channel: "msteams",
 		sendText: async ({ cfg, to, text, deps, threadId }) => {
-			return await resolveMSTeamsTextSend({
+			return toMSTeamsOutboundResult(await resolveMSTeamsTextSend({
 				cfg,
 				deps
-			})(resolveMSTeamsThreadTarget(to, threadId), text);
+			})(resolveMSTeamsThreadTarget(to, threadId), text));
 		},
 		sendMedia: async ({ cfg, to, text, mediaUrl, mediaAccess, mediaLocalRoots, mediaReadFile, deps, threadId }) => {
-			return await resolveMSTeamsMediaSend({
+			return toMSTeamsOutboundResult(await resolveMSTeamsMediaSend({
 				cfg,
 				deps
 			})(resolveMSTeamsThreadTarget(to, threadId), text, {
@@ -1267,7 +1280,7 @@ const msteamsOutbound = {
 				mediaAccess,
 				mediaLocalRoots,
 				mediaReadFile
-			});
+			}));
 		},
 		sendPoll: async ({ cfg, to, poll, threadId }) => {
 			const maxSelections = poll.maxSelections ?? 1;
@@ -1345,7 +1358,7 @@ async function probeMSTeams(cfg) {
 		} catch (err) {
 			graph = {
 				ok: false,
-				error: require_setup_surface.formatUnknownError(err)
+				error: require_channel_setup.formatUnknownError(err)
 			};
 		}
 		let delegatedAuth;
@@ -1379,7 +1392,7 @@ async function probeMSTeams(cfg) {
 		return {
 			ok: false,
 			appId: creds.appId,
-			error: require_setup_surface.formatUnknownError(err)
+			error: require_channel_setup.formatUnknownError(err)
 		};
 	}
 }

package/dist/{setup-surface-DAhGL2h8.cjs → channel.setup-mOFtsfYz.cjs}

@@ -1,9 +1,12 @@
-const require_resolve_allowlist = require("./resolve-allowlist-C6YcNC9a.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CIfWUwuc.cjs");
+const require_config_schema = require("./config-schema-C4CszdDi.cjs");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
-let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
+let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_number_runtime = require("openclaw/plugin-sdk/number-runtime");
 let openclaw_plugin_sdk_channel_config_helpers = require("openclaw/plugin-sdk/channel-config-helpers");
+let openclaw_plugin_sdk_secret_file_runtime = require("openclaw/plugin-sdk/secret-file-runtime");
+let openclaw_plugin_sdk_account_helpers = require("openclaw/plugin-sdk/account-helpers");
 let openclaw_plugin_sdk_channel_setup = require("openclaw/plugin-sdk/channel-setup");
 let openclaw_plugin_sdk_setup = require("openclaw/plugin-sdk/setup");
 let openclaw_plugin_sdk_setup_tools = require("openclaw/plugin-sdk/setup-tools");
@@ -20,13 +23,23 @@ const msteamsMeta = {
 	aliases: ["teams"],
 	order: 60
 };
+function resolveMSTeamsAccount(cfg) {
+	const config = cfg.channels?.msteams;
+	const credentials = require_resolve_allowlist.resolveMSTeamsCredentials(config);
+	const certificatePath = credentials?.type === "federated" && !credentials.useManagedIdentity ? credentials.certificatePath : void 0;
+	const certificate = certificatePath ? (0, openclaw_plugin_sdk_secret_file_runtime.tryReadSecretFileSync)(certificatePath, "Microsoft Teams certificate", void 0, { configPath: config?.certificatePath?.trim() ? "channels.msteams.certificatePath" : "env.MSTEAMS_CERTIFICATE_PATH" }) : void 0;
+	const unavailable = certificate?.status === "configured_unavailable";
+	return {
+		accountId: openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID,
+		enabled: config?.enabled !== false,
+		configured: Boolean(credentials),
+		tokenStatus: !credentials ? "missing" : unavailable ? "configured_unavailable" : "available",
+		...unavailable ? { credentialDiagnostics: [certificate.diagnostic] } : {}
+	};
+}
 const msteamsConfigAdapter = (0, openclaw_plugin_sdk_channel_config_helpers.createTopLevelChannelConfigAdapter)({
 	sectionKey: "msteams",
-	resolveAccount: (cfg) => ({
-		accountId: openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID,
-		enabled: cfg.channels?.msteams?.enabled !== false,
-		configured: Boolean(require_resolve_allowlist.resolveMSTeamsCredentials(cfg.channels?.msteams))
-	}),
+	resolveAccount: resolveMSTeamsAccount,
 	resolveAccessorAccount: ({ cfg }) => ({
 		allowFrom: cfg.channels?.msteams?.allowFrom,
 		defaultTo: cfg.channels?.msteams?.defaultTo
@@ -220,12 +233,8 @@ function parseNonNegativeRetryAfterSeconds(raw) {
 	});
 }
 /**
-* Classify outbound send errors for safe retries and actionable logs.
-*
-* Important: We only mark errors as retryable when we have an explicit HTTP
-* status code that indicates the message was not accepted (e.g. 429, 5xx).
-* For transport-level errors where delivery is ambiguous, we prefer to avoid
-* retries to reduce the chance of duplicate posts.
+* Owns retry safety and delivery ambiguity for Teams send failures.
+* Only Teams rate-limit rejection proves this unkeyed POST safe to replay.
 */
 function classifyMSTeamsSendError(err) {
 	const statusCode = extractStatusCode(err);
@@ -249,15 +258,15 @@ function classifyMSTeamsSendError(err) {
 		};
 	}
 	if (statusCode === 429) return {
-		kind: "throttled",
+		kind: "replay-safe",
 		statusCode,
 		retryAfterMs: retryAfterMs ?? void 0,
 		errorCode
 	};
 	if (statusCode === 408 || statusCode != null && statusCode >= 500) return {
-		kind: "transient",
+		kind: "ambiguous",
+		source: "http",
 		statusCode,
-		retryAfterMs: retryAfterMs ?? void 0,
 		errorCode
 	};
 	if (statusCode != null && statusCode >= 400) return {
@@ -265,17 +274,14 @@ function classifyMSTeamsSendError(err) {
 		statusCode,
 		errorCode
 	};
-	if (statusCode == null) {
-		const networkCode = (0, openclaw_plugin_sdk_string_coerce_runtime.isRecord)(err) && typeof err.code === "string" ? err.code : null;
-		if (networkCode === "ECONNREFUSED" || networkCode === "ENOTFOUND" || networkCode === "EHOSTUNREACH" || networkCode === "ETIMEDOUT" || networkCode === "ECONNRESET") return {
-			kind: "network",
-			errorCode: networkCode
-		};
-	}
+	if (statusCode == null && (0, openclaw_plugin_sdk_retry_runtime.isTransientNetworkError)(err)) return {
+		kind: "ambiguous",
+		source: "transport",
+		errorCode
+	};
 	return {
 		kind: "unknown",
 		statusCode: statusCode ?? void 0,
-		retryAfterMs: retryAfterMs ?? void 0,
 		errorCode
 	};
 }
@@ -294,9 +300,15 @@ function isRevokedProxyError(err) {
 function formatMSTeamsSendErrorHint(classification) {
 	if (classification.kind === "auth") return "check msteams appId/appPassword/tenantId (or env vars MSTEAMS_APP_ID/MSTEAMS_APP_PASSWORD/MSTEAMS_TENANT_ID)";
 	if (classification.errorCode === "ContentStreamNotAllowed") return "Teams expired the content stream; stop streaming earlier and fall back to normal message delivery";
-	if (classification.kind === "throttled") return "Teams throttled the bot; backing off may help";
-	if (classification.kind === "transient") return "transient Teams/Bot Framework error; retry may succeed";
-	if (classification.kind === "network") return "transport-level failure sending reply to Teams Bot Connector (smba.trafficmanager.net) — check egress firewall rules allow outbound HTTPS to smba.trafficmanager.net";
+	if (classification.kind === "replay-safe") return "Teams throttled the bot; backing off may help";
+	if (classification.kind === "ambiguous") {
+		if (classification.source === "transport") return "transport-level failure sending to Teams Bot Connector (smba.trafficmanager.net); the outcome is unknown, so check egress and conversation history before taking further action";
+		return "Teams/Bot Framework delivery outcome is unknown; inspect the conversation history before taking further action";
+	}
+}
+function formatMSTeamsDeliveryFailureGuidance(classification) {
+	if (classification.kind === "replay-safe") return "The request was rate-limited before delivery; retrying later may succeed.";
+	if (classification.kind === "ambiguous") return "Delivery may already have succeeded; do not send the same content again without checking the conversation.";
 }
 //#endregion
 //#region extensions/msteams/src/setup-surface.ts
@@ -466,7 +478,7 @@ const msteamsSetupWizard = {
 				};
 				let oauthModule;
 				try {
-					oauthModule = await Promise.resolve().then(() => require("./oauth-DktsbN22.cjs"));
+					oauthModule = await Promise.resolve().then(() => require("./oauth-C9So7uld.cjs"));
 				} catch (err) {
 					await noteDelegatedAuthFailure(err);
 					return {
@@ -520,6 +532,40 @@ const msteamsSetupWizard = {
 	disable: (cfg) => (0, openclaw_plugin_sdk_setup.setSetupChannelEnabled)(cfg, channel, false)
 };
 //#endregion
+//#region extensions/msteams/src/channel.setup.ts
+const msteamsSetupPlugin = {
+	id: "msteams",
+	meta: {
+		...msteamsMeta,
+		aliases: [...msteamsMeta.aliases]
+	},
+	capabilities: {
+		chatTypes: [
+			"direct",
+			"channel",
+			"group",
+			"thread"
+		],
+		polls: true,
+		threads: true,
+		media: true,
+		reactions: true
+	},
+	reload: { configPrefixes: ["channels.msteams"] },
+	configSchema: require_config_schema.MSTeamsChannelConfigSchema,
+	config: {
+		...msteamsConfigAdapter,
+		isConfigured: (account) => account.configured,
+		describeAccount: (account) => (0, openclaw_plugin_sdk_account_helpers.describeAccountSnapshot)({
+			account,
+			configured: account.configured,
+			extra: { tokenStatus: account.tokenStatus }
+		})
+	},
+	setupWizard: msteamsSetupWizard,
+	setupContract: msteamsSetupContract
+};
+//#endregion
 Object.defineProperty(exports, "classifyMSTeamsSendError", {
 	enumerable: true,
 	get: function() {
@@ -532,6 +578,12 @@ Object.defineProperty(exports, "createMSTeamsSetupWizardBase", {
 		return createMSTeamsSetupWizardBase;
 	}
 });
+Object.defineProperty(exports, "formatMSTeamsDeliveryFailureGuidance", {
+	enumerable: true,
+	get: function() {
+		return formatMSTeamsDeliveryFailureGuidance;
+	}
+});
 Object.defineProperty(exports, "formatMSTeamsSendErrorHint", {
 	enumerable: true,
 	get: function() {
@@ -550,28 +602,16 @@ Object.defineProperty(exports, "isRevokedProxyError", {
 		return isRevokedProxyError;
 	}
 });
-Object.defineProperty(exports, "msteamsConfigAdapter", {
-	enumerable: true,
-	get: function() {
-		return msteamsConfigAdapter;
-	}
-});
-Object.defineProperty(exports, "msteamsMeta", {
-	enumerable: true,
-	get: function() {
-		return msteamsMeta;
-	}
-});
 Object.defineProperty(exports, "msteamsSetupAdapter", {
 	enumerable: true,
 	get: function() {
 		return msteamsSetupAdapter;
 	}
 });
-Object.defineProperty(exports, "msteamsSetupContract", {
+Object.defineProperty(exports, "msteamsSetupPlugin", {
 	enumerable: true,
 	get: function() {
-		return msteamsSetupContract;
+		return msteamsSetupPlugin;
 	}
 });
 Object.defineProperty(exports, "msteamsSetupWizard", {
@@ -586,3 +626,9 @@ Object.defineProperty(exports, "openDelegatedOAuthUrl", {
 		return openDelegatedOAuthUrl;
 	}
 });
+Object.defineProperty(exports, "resolveMSTeamsAccount", {
+	enumerable: true,
+	get: function() {
+		return resolveMSTeamsAccount;
+	}
+});

package/dist/directory-contract-api.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_resolve_allowlist = require("./resolve-allowlist-C6YcNC9a.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CIfWUwuc.cjs");
 let openclaw_plugin_sdk_directory_runtime = require("openclaw/plugin-sdk/directory-runtime");
 const msteamsDirectoryContractPlugin = {
 	id: "msteams",