@openclaw/msteams 2026.8.1-beta.2 → 2026.8.1

package/dist/{resolve-allowlist-C6YcNC9a.cjs → resolve-allowlist-CWbvAW4v.cjs}

@@ -1,78 +1,22 @@
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 require("./runtime-api.cjs");
 const require_delegated_state = require("./delegated-state-DiEz9JIa.cjs");
+require("./secret-input-C65t6kjM.cjs");
 let openclaw_plugin_sdk_lazy_runtime = require("openclaw/plugin-sdk/lazy-runtime");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
-let openclaw_plugin_sdk_ssrf_runtime = require("openclaw/plugin-sdk/ssrf-runtime");
-let openclaw_plugin_sdk_html_entity_runtime = require("openclaw/plugin-sdk/html-entity-runtime");
 let openclaw_plugin_sdk_fetch_runtime = require("openclaw/plugin-sdk/fetch-runtime");
 let openclaw_plugin_sdk_provider_http = require("openclaw/plugin-sdk/provider-http");
+let openclaw_plugin_sdk_ssrf_runtime = require("openclaw/plugin-sdk/ssrf-runtime");
 let node_buffer = require("node:buffer");
 let node_dns_promises = require("node:dns/promises");
 let openclaw_plugin_sdk_ssrf_policy = require("openclaw/plugin-sdk/ssrf-policy");
 let openclaw_plugin_sdk_number_runtime = require("openclaw/plugin-sdk/number-runtime");
 let openclaw_plugin_sdk_text_utility_runtime = require("openclaw/plugin-sdk/text-utility-runtime");
-let openclaw_plugin_sdk_error_runtime = require("openclaw/plugin-sdk/error-runtime");
 let openclaw_plugin_sdk_secret_file = require("openclaw/plugin-sdk/secret-file");
 let node_module = require("node:module");
+let openclaw_plugin_sdk_html_entity_runtime = require("openclaw/plugin-sdk/html-entity-runtime");
 let openclaw_plugin_sdk_secret_input = require("openclaw/plugin-sdk/secret-input");
-//#region extensions/msteams/src/inbound.ts
-/**
-* Strip HTML tags, preserving text content.
-*/
-function htmlToPlainText(html) {
-	return (0, openclaw_plugin_sdk_html_entity_runtime.decodeHtmlEntities)(html.replace(/<[^>]*>/g, " ")).replaceAll("\xA0", " ").replace(/\s+/g, " ").trim();
-}
-/**
-* Extract quote info from MS Teams HTML reply attachments.
-* Teams wraps quoted content in a blockquote with itemtype="http://schema.skype.com/Reply".
-*/
-function extractMSTeamsQuoteInfo(attachments) {
-	for (const att of attachments) {
-		let content = "";
-		if (typeof att.content === "string") content = att.content;
-		else if (typeof att.content === "object" && att.content !== null) {
-			const record = att.content;
-			content = typeof record.text === "string" ? record.text : typeof record.body === "string" ? record.body : "";
-		}
-		if (!content) continue;
-		if (!content.includes("http://schema.skype.com/Reply")) continue;
-		const senderMatch = /<strong[^>]*itemprop=["']mri["'][^>]*>(.*?)<\/strong>/i.exec(content);
-		const sender = senderMatch?.[1] ? htmlToPlainText(senderMatch[1]) : void 0;
-		const bodyMatch = /<p[^>]*itemprop=["']copy["'][^>]*>(.*?)<\/p>/is.exec(content) ?? /<p[^>]*itemprop=["']preview["'][^>]*>(.*?)<\/p>/is.exec(content);
-		const body = bodyMatch?.[1] ? htmlToPlainText(bodyMatch[1]) : void 0;
-		const id = /<blockquote[^>]*\bitemid=["']([^"']+)["'][^>]*>/is.exec(content)?.[1]?.trim() || void 0;
-		if (body) return {
-			sender: sender ?? "unknown",
-			body,
-			...id ? { id } : {}
-		};
-	}
-}
-function normalizeMSTeamsConversationId(raw) {
-	return raw.split(";")[0] ?? raw;
-}
-function extractMSTeamsConversationMessageId(raw) {
-	if (!raw) return;
-	return (/(?:^|;)messageid=([^;]+)/i.exec(raw)?.[1]?.trim() ?? "") || void 0;
-}
-function parseMSTeamsActivityTimestamp(value) {
-	if (!value) return;
-	if (value instanceof Date) return value;
-	if (typeof value !== "string") return;
-	const date = new Date(value);
-	return Number.isNaN(date.getTime()) ? void 0 : date;
-}
-function stripMSTeamsMentionTags(text) {
-	return text.replace(/<at[^>]*>.*?<\/at>/gi, "").trim();
-}
-function wasMSTeamsBotMentioned(activity) {
-	const botId = activity.recipient?.id;
-	if (!botId) return false;
-	return (activity.entities ?? []).some((e) => e.type === "mention" && e.mentioned?.id === botId);
-}
-//#endregion
 //#region extensions/msteams/src/request-timeout.ts
 const MSTEAMS_REQUEST_TIMEOUT_MS = 3e4;
 const MSTEAMS_SHAREPOINT_UPLOAD_BASE_TIMEOUT_MS = 5 * 6e4;
@@ -167,25 +111,6 @@ const DEFAULT_MEDIA_AUTH_HOST_ALLOWLIST = [
 	"graph.microsoft.cn"
 ];
 const GRAPH_ROOT = "https://graph.microsoft.com/v1.0";
-function estimateBase64DecodedBytes(base64) {
-	let effectiveLen = 0;
-	for (let i = 0; i < base64.length; i += 1) {
-		if (base64.charCodeAt(i) <= 32) continue;
-		effectiveLen += 1;
-	}
-	if (effectiveLen === 0) return 0;
-	let padding = 0;
-	let end = base64.length - 1;
-	while (end >= 0 && base64.charCodeAt(end) <= 32) end -= 1;
-	if (end >= 0 && base64[end] === "=") {
-		padding = 1;
-		end -= 1;
-		while (end >= 0 && base64.charCodeAt(end) <= 32) end -= 1;
-		if (end >= 0 && base64[end] === "=") padding = 2;
-	}
-	const estimated = Math.floor(effectiveLen * 3 / 4) - padding;
-	return Math.max(0, estimated);
-}
 /**
 * Host suffixes for SharePoint/OneDrive shared links that must be fetched via
 * the Graph `/shares/{shareId}/driveItem/content` endpoint instead of directly.
@@ -210,14 +135,15 @@ const GRAPH_SHARED_LINK_HOST_SUFFIXES = [
 * than directly.
 */
 function isGraphSharedLinkUrl(url) {
-	let host;
+	let parsed;
 	try {
-		host = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(new URL(url).hostname);
+		parsed = new URL(url);
 	} catch {
 		return false;
 	}
-	if (!host) return false;
-	return GRAPH_SHARED_LINK_HOST_SUFFIXES.some((suffix) => host === suffix || host.endsWith(suffix));
+	const host = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(parsed.hostname);
+	if (parsed.protocol !== "https:" || !host) return false;
+	return GRAPH_SHARED_LINK_HOST_SUFFIXES.some((suffix) => host === suffix || host.endsWith(suffix.startsWith(".") ? suffix : `.${suffix}`));
 }
 /**
 * Encode a SharePoint/OneDrive URL as a Graph shareId using the documented
@@ -331,7 +257,7 @@ function decodeDataImageWithLimits(src, opts) {
 		candidate: null,
 		estimatedBytes: 0
 	};
-	const estimatedBytes = estimateBase64DecodedBytes(canonicalPayload);
+	const estimatedBytes = node_buffer.Buffer.byteLength(canonicalPayload, "base64");
 	if (estimatedBytes <= 0) return {
 		candidate: null,
 		estimatedBytes: 0
@@ -504,7 +430,7 @@ async function safeFetch(params) {
 	const resolveFn = params.resolveFn ?? node_dns_promises.lookup;
 	const hasDispatcher = Boolean(params.requestInit && typeof params.requestInit === "object" && "dispatcher" in params.requestInit);
 	const currentHeaders = new Headers(params.requestInit?.headers);
-	let currentUrl = params.url;
+	const currentUrl = params.url;
 	if (!isUrlAllowed(currentUrl, params.allowHosts)) throw new Error(`Initial download URL blocked: ${currentUrl}`);
 	if (currentHeaders.has("authorization") && params.authorizationAllowHosts && !isUrlAllowed(currentUrl, params.authorizationAllowHosts)) currentHeaders.delete("authorization");
 	if (!hasDispatcher) {
@@ -535,37 +461,29 @@ async function safeFetch(params) {
 		});
 		return (0, openclaw_plugin_sdk_fetch_runtime.responseWithRelease)(guarded.response, guarded.release);
 	}
-	if (resolveFn) try {
+	try {
 		const initialHost = new URL(currentUrl).hostname;
 		await resolveAndValidateIP(initialHost, resolveFn);
 	} catch {
 		throw new Error(`Initial download URL blocked: ${currentUrl}`);
 	}
-	for (let i = 0; i <= MAX_SAFE_REDIRECTS; i++) {
-		const res = await (params.fetchFn ?? fetch)(currentUrl, {
-			...params.requestInit,
-			headers: currentHeaders,
-			redirect: "manual"
-		});
-		if (!isRedirectStatus(res.status)) return res;
-		const location = res.headers.get("location");
-		if (!location) return res;
-		let redirectUrl;
-		try {
-			redirectUrl = new URL(location, currentUrl).toString();
-		} catch {
-			throw new Error(`Invalid redirect URL: ${location}`);
-		}
-		if (!isUrlAllowed(redirectUrl, params.allowHosts)) throw new Error(`Media redirect target blocked by allowlist: ${redirectUrl}`);
-		if (currentHeaders.has("authorization") && params.authorizationAllowHosts && !isUrlAllowed(redirectUrl, params.authorizationAllowHosts)) currentHeaders.delete("authorization");
-		if (hasDispatcher) return res;
-		if (resolveFn) {
-			const redirectHost = new URL(redirectUrl).hostname;
-			await resolveAndValidateIP(redirectHost, resolveFn);
-		}
-		currentUrl = redirectUrl;
+	const res = await (params.fetchFn ?? fetch)(currentUrl, {
+		...params.requestInit,
+		headers: currentHeaders,
+		redirect: "manual"
+	});
+	if (!isRedirectStatus(res.status)) return res;
+	const location = res.headers.get("location");
+	if (!location) return res;
+	let redirectUrl;
+	try {
+		redirectUrl = new URL(location, currentUrl).toString();
+	} catch {
+		throw new Error(`Invalid redirect URL: ${location}`);
 	}
-	throw new Error(`Too many redirects (>${MAX_SAFE_REDIRECTS})`);
+	if (!isUrlAllowed(redirectUrl, params.allowHosts)) throw new Error(`Media redirect target blocked by allowlist: ${redirectUrl}`);
+	if (currentHeaders.has("authorization") && params.authorizationAllowHosts && !isUrlAllowed(redirectUrl, params.authorizationAllowHosts)) currentHeaders.delete("authorization");
+	return res;
 }
 async function safeFetchWithPolicy(params) {
 	return await safeFetch({
@@ -715,7 +633,7 @@ var PrivateQaHttpClient = class PrivateQaHttpClient {
 		try {
 			const text = await response.text();
 			const data = text ? JSON.parse(text) : void 0;
-			if (!response.ok) throw new Error(`Microsoft Teams private QA connector returned HTTP ${response.status}`);
+			if (!response.ok) throw Object.assign(/* @__PURE__ */ new Error(`Microsoft Teams private QA connector returned HTTP ${response.status}`), { statusCode: response.status });
 			return {
 				data,
 				status: response.status,
@@ -879,7 +797,10 @@ async function createMSTeamsApp(creds, options) {
 		...serviceUrl ? { serviceUrl } : {},
 		...options?.oauthDefaultConnectionName ? { oauth: { defaultConnectionName: options.oauthDefaultConnectionName } } : {}
 	};
-	if (creds.type === "federated") return await createFederatedApp(creds, App, appOptions);
+	if (creds.type === "federated") return await createFederatedApp(creds, App, {
+		clientSecret: "",
+		...appOptions
+	});
 	return new App({
 		clientId: creds.appId,
 		clientSecret: creds.appPassword,
@@ -898,9 +819,8 @@ async function createFederatedApp(creds, App, appOptions) {
 	let privateKey;
 	try {
 		privateKey = await (0, openclaw_plugin_sdk_secret_file.readSecretFile)(creds.certificatePath, "Microsoft Teams certificate");
-	} catch (err) {
-		const msg = (0, openclaw_plugin_sdk_error_runtime.coerceErrorMessage)(err);
-		throw new Error(`Failed to read certificate file at '${creds.certificatePath}': ${msg}`, { cause: err });
+	} catch {
+		throw new Error("Failed to read certificate file: the configured credential is unavailable.");
 	}
 	return createCertificateApp(creds, privateKey, App, appOptions);
 }
@@ -1359,6 +1279,62 @@ async function findGraphUsersByExactIdentity(params) {
 	});
 }
 //#endregion
+//#region extensions/msteams/src/inbound.ts
+/**
+* Strip HTML tags, preserving text content.
+*/
+function htmlToPlainText(html) {
+	return (0, openclaw_plugin_sdk_html_entity_runtime.decodeHtmlEntities)(html.replace(/<[^>]*>/g, " ")).replaceAll("\xA0", " ").replace(/\s+/g, " ").trim();
+}
+/**
+* Extract quote info from MS Teams HTML reply attachments.
+* Teams wraps quoted content in a blockquote with itemtype="http://schema.skype.com/Reply".
+*/
+function extractMSTeamsQuoteInfo(attachments) {
+	for (const att of attachments) {
+		let content = "";
+		if (typeof att.content === "string") content = att.content;
+		else if (typeof att.content === "object" && att.content !== null) {
+			const record = att.content;
+			content = typeof record.text === "string" ? record.text : typeof record.body === "string" ? record.body : "";
+		}
+		if (!content) continue;
+		if (!content.includes("http://schema.skype.com/Reply")) continue;
+		const senderMatch = /<strong[^>]*itemprop=["']mri["'][^>]*>(.*?)<\/strong>/i.exec(content);
+		const sender = senderMatch?.[1] ? htmlToPlainText(senderMatch[1]) : void 0;
+		const bodyMatch = /<p[^>]*itemprop=["']copy["'][^>]*>(.*?)<\/p>/is.exec(content) ?? /<p[^>]*itemprop=["']preview["'][^>]*>(.*?)<\/p>/is.exec(content);
+		const body = bodyMatch?.[1] ? htmlToPlainText(bodyMatch[1]) : void 0;
+		const id = /<blockquote[^>]*\bitemid=["']([^"']+)["'][^>]*>/is.exec(content)?.[1]?.trim() || void 0;
+		if (body) return {
+			sender: sender ?? "unknown",
+			body,
+			...id ? { id } : {}
+		};
+	}
+}
+function normalizeMSTeamsConversationId(raw) {
+	return raw.split(";")[0] ?? raw;
+}
+function extractMSTeamsConversationMessageId(raw) {
+	if (!raw) return;
+	return (/(?:^|;)messageid=([^;]+)/i.exec(raw)?.[1]?.trim() ?? "") || void 0;
+}
+function parseMSTeamsActivityTimestamp(value) {
+	if (!value) return;
+	if (value instanceof Date) return value;
+	if (typeof value !== "string") return;
+	const date = new Date(value);
+	return Number.isNaN(date.getTime()) ? void 0 : date;
+}
+function stripMSTeamsMentionTags(text) {
+	return text.replace(/<at[^>]*>.*?<\/at>/gi, "").trim();
+}
+function wasMSTeamsBotMentioned(activity) {
+	const botId = activity.recipient?.id;
+	if (!botId) return false;
+	return (activity.entities ?? []).some((e) => e.type === "mention" && e.mentioned?.id === botId);
+}
+//#endregion
 //#region extensions/msteams/src/resolve-allowlist.ts
 const MSTEAMS_GROUP_CONVERSATION_ID = /^19:.+@thread\.(?:tacv2|skype|v2)$/i;
 function normalizeExactMatch(value) {

package/dist/runtime-api.cjs

@@ -3,14 +3,15 @@ const require_runtime = require("./runtime-gZTAuFux.cjs");
 let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
 let openclaw_plugin_sdk_channel_pairing = require("openclaw/plugin-sdk/channel-pairing");
 let openclaw_plugin_sdk_channel_policy = require("openclaw/plugin-sdk/channel-policy");
-let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
+let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_channel_status = require("openclaw/plugin-sdk/channel-status");
 let openclaw_plugin_sdk_channel_targets = require("openclaw/plugin-sdk/channel-targets");
 let openclaw_plugin_sdk_dangerous_name_runtime = require("openclaw/plugin-sdk/dangerous-name-runtime");
 let openclaw_plugin_sdk_runtime_group_policy = require("openclaw/plugin-sdk/runtime-group-policy");
 let openclaw_plugin_sdk_file_lock = require("openclaw/plugin-sdk/file-lock");
 let openclaw_plugin_sdk_media_runtime = require("openclaw/plugin-sdk/media-runtime");
+let openclaw_plugin_sdk_account_helpers = require("openclaw/plugin-sdk/account-helpers");
 let openclaw_plugin_sdk_outbound_media = require("openclaw/plugin-sdk/outbound-media");
 let openclaw_plugin_sdk_reply_payload = require("openclaw/plugin-sdk/reply-payload");
 let openclaw_plugin_sdk_ssrf_runtime = require("openclaw/plugin-sdk/ssrf-runtime");
@@ -164,7 +165,7 @@ Object.defineProperty(exports, "resolveChannelEntryMatchWithFallback", {
 Object.defineProperty(exports, "resolveChannelMediaMaxBytes", {
 	enumerable: true,
 	get: function() {
-		return openclaw_plugin_sdk_media_runtime.resolveChannelMediaMaxBytes;
+		return openclaw_plugin_sdk_account_helpers.resolveChannelMediaMaxBytes;
 	}
 });
 Object.defineProperty(exports, "resolveDefaultGroupPolicy", {

package/dist/secret-input-C65t6kjM.cjs

@@ -0,0 +1 @@
+require("openclaw/plugin-sdk/secret-input");