@openclaw/msteams 2026.8.1-beta.2 → 2026.9.1-beta.1

package/dist/{channel-DfCbi0d_.cjs → channel-BsqcQ0E9.cjs}

@@ -1,29 +1,31 @@
 require("./runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-C6YcNC9a.cjs");
-const require_setup_surface = require("./setup-surface-DAhGL2h8.cjs");
-const require_config_schema = require("./config-schema-C4CszdDi.cjs");
-let openclaw_plugin_sdk_account_helpers = require("openclaw/plugin-sdk/account-helpers");
+const require_resolve_allowlist = require("./resolve-allowlist-B6FQAa3r.cjs");
+const require_directory_contract_api = require("./directory-contract-api.cjs");
+const require_thread_session = require("./thread-session-DdWfgc8U.cjs");
+const require_channel_setup = require("./channel.setup-BvYxZIFG.cjs");
+let openclaw_plugin_sdk_approval_handler_adapter_runtime = require("openclaw/plugin-sdk/approval-handler-adapter-runtime");
 let openclaw_plugin_sdk_channel_core = require("openclaw/plugin-sdk/channel-core");
 let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
 let openclaw_plugin_sdk_channel_pairing = require("openclaw/plugin-sdk/channel-pairing");
 let openclaw_plugin_sdk_channel_policy = require("openclaw/plugin-sdk/channel-policy");
+let openclaw_plugin_sdk_channel_runtime_context = require("openclaw/plugin-sdk/channel-runtime-context");
 let openclaw_plugin_sdk_directory_runtime = require("openclaw/plugin-sdk/directory-runtime");
 let openclaw_plugin_sdk_interactive_runtime = require("openclaw/plugin-sdk/interactive-runtime");
 let openclaw_plugin_sdk_lazy_runtime = require("openclaw/plugin-sdk/lazy-runtime");
 let openclaw_plugin_sdk_status_helpers = require("openclaw/plugin-sdk/status-helpers");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let typebox = require("typebox");
+let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_reply_reference = require("openclaw/plugin-sdk/reply-reference");
-let openclaw_plugin_sdk_approval_auth_runtime = require("openclaw/plugin-sdk/approval-auth-runtime");
+let openclaw_plugin_sdk_approval_delivery_runtime = require("openclaw/plugin-sdk/approval-delivery-runtime");
+let openclaw_plugin_sdk_approval_native_runtime = require("openclaw/plugin-sdk/approval-native-runtime");
 let openclaw_plugin_sdk_channel_actions = require("openclaw/plugin-sdk/channel-actions");
-let openclaw_plugin_sdk_routing = require("openclaw/plugin-sdk/routing");
 let openclaw_plugin_sdk_channel_targets = require("openclaw/plugin-sdk/channel-targets");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
 let openclaw_plugin_sdk_dangerous_name_runtime = require("openclaw/plugin-sdk/dangerous-name-runtime");
 let openclaw_plugin_sdk_runtime_group_policy = require("openclaw/plugin-sdk/runtime-group-policy");
 let openclaw_plugin_sdk_text_chunking = require("openclaw/plugin-sdk/text-chunking");
 let openclaw_plugin_sdk_channel_status = require("openclaw/plugin-sdk/channel-status");
-let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 //#region extensions/msteams/src/policy.ts
 const teamScopeKey = (teamKey) => (0, openclaw_plugin_sdk_channel_policy.scopeKey)(["team", teamKey]);
 const channelScopeKey = (teamKey, channelKey) => (0, openclaw_plugin_sdk_channel_policy.scopeKey)(["team", teamKey], ["channel", channelKey]);
@@ -250,32 +252,123 @@ function resolveMSTeamsAutoThreadId(params) {
 	return context.currentThreadTs;
 }
 //#endregion
-//#region extensions/msteams/src/approval-auth.ts
-const MSTEAMS_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-function normalizeMSTeamsApproverId(value) {
-	const normalized = require_resolve_allowlist.normalizeMSTeamsMessagingTarget(String(value));
-	const id = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(normalized?.startsWith("user:") ? normalized.slice(5) : normalized);
-	return id && MSTEAMS_ID_RE.test(id) ? id : void 0;
+//#region extensions/msteams/src/approval-native.ts
+function isMSTeamsApprovalTransportEnabled(params) {
+	if (params.accountId && (0, openclaw_plugin_sdk_account_id.normalizeAccountId)(params.accountId) !== openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID) return false;
+	const account = require_channel_setup.resolveMSTeamsAccount(params.cfg);
+	return account.enabled && account.configured && account.tokenStatus === "available";
 }
-function resolveMSTeamsChannelConfig(cfg) {
-	return cfg.channels?.msteams;
-}
-const msTeamsApprovalAuth = (0, openclaw_plugin_sdk_approval_auth_runtime.createChannelApprovalAuth)({
-	channelLabel: "Microsoft Teams",
-	resolveInputs: ({ cfg }) => {
-		const channel = resolveMSTeamsChannelConfig(cfg);
-		return {
-			allowFrom: channel?.allowFrom,
-			defaultTo: channel?.defaultTo
-		};
+const msTeamsMessagingTargetResolvers = (0, openclaw_plugin_sdk_approval_native_runtime.createNativeApprovalMessagingTargetResolvers)({
+	channel: "msteams",
+	normalizeTo: require_resolve_allowlist.normalizeMSTeamsMessagingTarget
+});
+const msTeamsApprovalTargetResolvers = {
+	...msTeamsMessagingTargetResolvers,
+	resolveTurnSourceTarget: (request) => {
+		const target = msTeamsMessagingTargetResolvers.resolveTurnSourceTarget(request);
+		return target ? {
+			...target,
+			threadId: request.request.turnSourceThreadId ?? null
+		} : null;
 	},
-	normalizeApprover: normalizeMSTeamsApproverId,
-	normalizeSenderId: (value) => {
-		const trimmed = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(value);
-		if (!trimmed) return;
-		return MSTEAMS_ID_RE.test(trimmed) ? trimmed : void 0;
+	resolveSessionTarget: (sessionTarget) => {
+		const target = msTeamsMessagingTargetResolvers.resolveSessionTarget(sessionTarget);
+		return target ? {
+			...target,
+			threadId: sessionTarget.threadId ?? null
+		} : null;
+	}
+};
+const msTeamsApprovalRouteGates = (0, openclaw_plugin_sdk_approval_native_runtime.createNativeApprovalChannelRouteGates)({
+	channel: "msteams",
+	defaultForwardingMode: "session",
+	isTransportEnabled: isMSTeamsApprovalTransportEnabled,
+	listAccountIds: require_channel_setup.msteamsConfigAdapter.listAccountIds,
+	resolveDefaultAccountId: () => openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID,
+	normalizeForwardTarget: msTeamsApprovalTargetResolvers.normalizeForwardTarget,
+	resolveTurnSourceTarget: msTeamsApprovalTargetResolvers.resolveTurnSourceTarget
+});
+function isMSTeamsNativeApprovalClientEnabled(params) {
+	return msTeamsApprovalRouteGates.canAnyApprovalPotentiallyRouteToChannel({
+		...params,
+		nativeSessionOnly: true
+	}) && require_thread_session.getMSTeamsApprovalApprovers(params).length > 0;
+}
+function shouldHandleMSTeamsNativeApprovalRequest(params) {
+	return msTeamsApprovalRouteGates.shouldHandleApprovalRequest(params) && require_thread_session.getMSTeamsApprovalApprovers(params).length > 0 && Boolean(msTeamsApprovalTargetResolvers.resolveTurnSourceTarget(params.request));
+}
+function shouldSuppressLocalMSTeamsExecApprovalPrompt(params) {
+	return (0, openclaw_plugin_sdk_approval_native_runtime.shouldSuppressLocalNativeExecApprovalPrompt)({
+		...params,
+		isNativeDeliveryEnabled: isMSTeamsNativeApprovalClientEnabled
+	});
+}
+const resolveMSTeamsOriginTarget = (0, openclaw_plugin_sdk_approval_native_runtime.createChannelNativeOriginTargetResolver)({
+	channel: "msteams",
+	shouldHandleRequest: shouldHandleMSTeamsNativeApprovalRequest,
+	resolveTurnSourceTarget: msTeamsApprovalTargetResolvers.resolveTurnSourceTarget,
+	resolveSessionTarget: msTeamsApprovalTargetResolvers.resolveSessionTarget,
+	normalizeTarget: msTeamsApprovalTargetResolvers.normalizeTarget
+});
+const msTeamsLazyApprovalNativeRuntime = (0, openclaw_plugin_sdk_approval_handler_adapter_runtime.createLazyChannelApprovalNativeRuntimeAdapter)({
+	eventKinds: ["exec", "plugin"],
+	isConfigured: ({ cfg, accountId }) => isMSTeamsNativeApprovalClientEnabled({
+		cfg,
+		accountId
+	}),
+	shouldHandle: ({ cfg, accountId, approvalKind, request }) => shouldHandleMSTeamsNativeApprovalRequest({
+		cfg,
+		accountId,
+		approvalKind,
+		request
+	}),
+	load: async () => {
+		const { msTeamsApprovalNativeRuntime } = await Promise.resolve().then(() => require("./approval-handler.runtime-C3FXQ_6Z.cjs"));
+		return msTeamsApprovalNativeRuntime;
 	}
-}).approvalAuth;
+});
+const resolveMSTeamsApproverDmTargets = (0, openclaw_plugin_sdk_approval_native_runtime.createChannelApproverDmTargetResolver)({
+	shouldHandleRequest: shouldHandleMSTeamsNativeApprovalRequest,
+	resolveApprovers: require_thread_session.getMSTeamsApprovalApprovers,
+	mapApprover: (approver, params) => ({
+		to: `user:${approver}`,
+		accountId: (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params.accountId)
+	})
+});
+const msTeamsApprovalCapability = {
+	...(0, openclaw_plugin_sdk_approval_delivery_runtime.createApproverRestrictedNativeApprovalCapability)({
+		channel: "msteams",
+		channelLabel: "Microsoft Teams",
+		describeExecApprovalSetup: () => "Approve it from the Web UI or terminal UI for now. Microsoft Teams supports native approvals when the bot is configured. Configure `channels.msteams.allowFrom` or `channels.msteams.defaultTo` with Microsoft Entra object ID approvers.",
+		listAccountIds: require_channel_setup.msteamsConfigAdapter.listAccountIds,
+		hasApprovers: ({ cfg, accountId }) => require_thread_session.getMSTeamsApprovalApprovers({
+			cfg,
+			accountId
+		}).length > 0,
+		isExecAuthorizedSender: ({ cfg, accountId, senderId }) => require_thread_session.msTeamsApprovalAuth.authorizeActorAction?.({
+			cfg,
+			accountId,
+			senderId,
+			action: "approve",
+			approvalKind: "exec"
+		})?.authorized ?? false,
+		isPluginAuthorizedSender: ({ cfg, accountId, senderId }) => require_thread_session.msTeamsApprovalAuth.authorizeActorAction?.({
+			cfg,
+			accountId,
+			senderId,
+			action: "approve",
+			approvalKind: "plugin"
+		})?.authorized ?? false,
+		isNativeDeliveryEnabled: isMSTeamsNativeApprovalClientEnabled,
+		resolveNativeDeliveryMode: () => "channel",
+		requireMatchingTurnSourceChannel: true,
+		resolveSuppressionAccountId: ({ target, request }) => (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(target.accountId) ?? (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(request.request.turnSourceAccountId),
+		resolveOriginTarget: resolveMSTeamsOriginTarget,
+		resolveApproverDmTargets: resolveMSTeamsApproverDmTargets,
+		nativeRuntime: msTeamsLazyApprovalNativeRuntime
+	}),
+	authorizeActorAction: (params) => require_thread_session.msTeamsApprovalAuth.authorizeActorAction?.(params)
+};
 //#endregion
 //#region extensions/msteams/src/doctor.ts
 const isMSTeamsMutableAllowEntry = (0, openclaw_plugin_sdk_channel_policy.buildMutableAllowEntryDetector)({
@@ -602,18 +695,6 @@ async function assertMSTeamsTeamEnumerationAllowed(params) {
 	return stableTeamId;
 }
 //#endregion
-//#region extensions/msteams/src/monitor-handler/thread-session.ts
-const TRAILING_THREAD_SUFFIX = /(?::thread:[^:]+)+$/;
-function resolveMSTeamsRouteSessionKey(params) {
-	const channelThreadId = params.isChannel ? params.conversationMessageId ?? params.replyToId ?? void 0 : void 0;
-	const cleanBase = params.baseSessionKey.replace(TRAILING_THREAD_SUFFIX, "");
-	return (0, openclaw_plugin_sdk_routing.resolveThreadSessionKeys)({
-		baseSessionKey: cleanBase,
-		threadId: channelThreadId,
-		parentSessionKey: channelThreadId ? cleanBase : void 0
-	}).sessionKey;
-}
-//#endregion
 //#region extensions/msteams/src/session-route.ts
 function inferMSTeamsTargetChatType(raw) {
 	const target = (0, openclaw_plugin_sdk_channel_core.stripChannelTargetPrefix)(raw, "msteams", "teams");
@@ -657,7 +738,7 @@ function resolveMSTeamsOutboundSessionRoute(params) {
 	});
 	return isChannel ? {
 		...route,
-		sessionKey: resolveMSTeamsRouteSessionKey({
+		sessionKey: require_thread_session.resolveMSTeamsRouteSessionKey({
 			baseSessionKey: route.baseSessionKey,
 			isChannel: true,
 			conversationMessageId: channelThreadId
@@ -686,7 +767,13 @@ const collectMSTeamsSecurityWarnings = (0, openclaw_plugin_sdk_channel_policy.cr
 	resolveGroupPolicy: ({ cfg }) => cfg.channels?.msteams?.groupPolicy,
 	collect: ({ groupPolicy }) => groupPolicy === "open" ? ["- MS Teams groups: groupPolicy=\"open\" allows any member to trigger (mention-gated). Set channels.msteams.groupPolicy=\"allowlist\" + channels.msteams.groupAllowFrom to restrict senders."] : []
 });
-const loadMSTeamsChannelRuntime = (0, openclaw_plugin_sdk_lazy_runtime.createLazyRuntimeNamedExport)(() => Promise.resolve().then(() => require("./channel.runtime-BJmueA4q.cjs")), "msTeamsChannelRuntime");
+const collectMSTeamsSecurityFindings = openclaw_plugin_sdk_channel_policy.createConditionalWarningCollector.findings({
+	collectWarnings: collectMSTeamsSecurityWarnings,
+	checkId: "channels.msteams.groups.open",
+	severity: "critical",
+	title: "MS Teams security warning"
+});
+const loadMSTeamsChannelRuntime = (0, openclaw_plugin_sdk_lazy_runtime.createLazyRuntimeNamedExport)(() => Promise.resolve().then(() => require("./channel.runtime-DuQWuKFd.cjs")), "msTeamsChannelRuntime");
 function jsonActionResult(data) {
 	return {
 		content: [{
@@ -821,7 +908,8 @@ async function runWithRequiredActionPinnedMessageTarget(params) {
 	});
 }
 function describeMSTeamsMessageTool({ cfg }) {
-	const enabled = cfg.channels?.msteams?.enabled !== false && Boolean(require_resolve_allowlist.resolveMSTeamsCredentials(cfg.channels?.msteams));
+	const account = require_channel_setup.resolveMSTeamsAccount(cfg);
+	const enabled = account.enabled && account.configured && account.tokenStatus === "available";
 	return {
 		actions: enabled ? [
 			"upload-file",
@@ -856,6 +944,12 @@ const msteamsChannelOutbound = {
 	textChunkLimit: 4e3,
 	resolveEffectiveTextChunkLimit: ({ fallbackLimit }) => typeof fallbackLimit === "number" && fallbackLimit > 0 ? Math.min(fallbackLimit, 4e3) : 4e3,
 	pollMaxOptions: 12,
+	shouldSuppressLocalPayloadPrompt: ({ cfg, accountId, payload, hint }) => shouldSuppressLocalMSTeamsExecApprovalPrompt({
+		cfg,
+		accountId,
+		payload,
+		hint
+	}),
 	deliveryCapabilities: { durableFinal: {
 		text: true,
 		media: true,
@@ -891,39 +985,14 @@ const msteamsMessageAdapter = (0, openclaw_plugin_sdk_channel_outbound.createCha
 });
 const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlugin)({
 	base: {
-		id: "msteams",
-		meta: {
-			...require_setup_surface.msteamsMeta,
-			aliases: [...require_setup_surface.msteamsMeta.aliases]
-		},
-		setupWizard: require_setup_surface.msteamsSetupWizard,
-		capabilities: {
-			chatTypes: [
-				"direct",
-				"channel",
-				"thread"
-			],
-			polls: true,
-			threads: true,
-			media: true
-		},
+		...require_channel_setup.msteamsSetupPlugin,
 		streaming: { blockStreamingCoalesceDefaults: {
 			minChars: 1500,
 			idleMs: 1e3
 		} },
 		agentPrompt: { messageToolHints: () => ["- Adaptive Cards supported. Use `action=send` with `card={type,version,body}` to send rich cards.", "- MSTeams targeting: omit `target` to reply to the current conversation (auto-inferred). Explicit targets: `user:ID` or `user:Display Name` (requires Graph API) for DMs, `conversation:19:...@thread.tacv2` for groups/channels. Prefer IDs over display names for speed."] },
 		groups: { resolveToolPolicy: resolveMSTeamsGroupToolPolicy },
-		reload: { configPrefixes: ["channels.msteams"] },
-		configSchema: require_config_schema.MSTeamsChannelConfigSchema,
-		config: {
-			...require_setup_surface.msteamsConfigAdapter,
-			isConfigured: (_account, cfg) => Boolean(require_resolve_allowlist.resolveMSTeamsCredentials(cfg.channels?.msteams)),
-			describeAccount: (account) => (0, openclaw_plugin_sdk_account_helpers.describeAccountSnapshot)({
-				account,
-				configured: account.configured
-			})
-		},
-		approvalCapability: msTeamsApprovalAuth,
+		approvalCapability: msTeamsApprovalCapability,
 		doctor: {
 			dmAllowFromMode: "topOnly",
 			groupModel: "hybrid",
@@ -931,7 +1000,6 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 			warnOnEmptyGroupSenderAllowlist: true,
 			collectMutableAllowlistWarnings: collectMSTeamsMutableAllowlistWarnings
 		},
-		setupContract: require_setup_surface.msteamsSetupContract,
 		messaging: {
 			targetPrefixes: ["msteams", "teams"],
 			directTargetStyle: "user-prefixed",
@@ -945,34 +1013,7 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 		},
 		message: msteamsMessageAdapter,
 		directory: (0, openclaw_plugin_sdk_directory_runtime.createChannelDirectoryAdapter)({
-			self: async ({ cfg }) => {
-				const creds = require_resolve_allowlist.resolveMSTeamsCredentials(cfg.channels?.msteams);
-				if (!creds) return null;
-				return {
-					kind: "user",
-					id: creds.appId,
-					name: creds.appId
-				};
-			},
-			listPeers: async ({ cfg, query, limit }) => (0, openclaw_plugin_sdk_directory_runtime.listDirectoryEntriesFromSources)({
-				kind: "user",
-				sources: [cfg.channels?.msteams?.allowFrom ?? [], Object.keys(cfg.channels?.msteams?.dms ?? {})],
-				query,
-				limit,
-				normalizeId: (raw) => {
-					const normalized = require_resolve_allowlist.normalizeMSTeamsMessagingTarget(raw) ?? raw;
-					const lowered = normalized.toLowerCase();
-					if (lowered.startsWith("user:") || lowered.startsWith("conversation:")) return normalized;
-					return `user:${normalized}`;
-				}
-			}),
-			listGroups: async ({ cfg, query, limit }) => (0, openclaw_plugin_sdk_directory_runtime.listDirectoryEntriesFromSources)({
-				kind: "group",
-				sources: [Object.values(cfg.channels?.msteams?.teams ?? {}).flatMap((team) => Object.keys(team.channels ?? {}))],
-				query,
-				limit,
-				normalizeId: (raw) => `conversation:${raw.replace(/^conversation:/i, "").trim()}`
-			}),
+			...require_directory_contract_api.msteamsDirectoryContractPlugin.directory,
 			...(0, openclaw_plugin_sdk_directory_runtime.createRuntimeDirectoryLiveAdapter)({
 				getRuntime: loadMSTeamsChannelRuntime,
 				listPeersLive: (runtime) => runtime.listMSTeamsDirectoryPeersLive,
@@ -1087,6 +1128,7 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 			return results;
 		} },
 		actions: {
+			providerOwnedReadGates: true,
 			describeMessageTool: describeMSTeamsMessageTool,
 			extractToolSendResult: ({ result, send }) => extractMSTeamsToolSendResult(result, send),
 			requiresTrustedRequesterSender: ({ action, toolContext }) => (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(toolContext?.currentChannelProvider)?.toLowerCase() === "msteams" && MSTEAMS_GROUP_MANAGEMENT_ACTIONS.has(action),
@@ -1467,11 +1509,14 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 				accountId: account.accountId,
 				enabled: account.enabled,
 				configured: account.configured,
-				extra: { port: runtime?.port ?? null }
+				extra: {
+					port: runtime?.port ?? null,
+					tokenStatus: account.tokenStatus
+				}
 			})
 		}),
 		gateway: { startAccount: async (ctx) => {
-			const { monitorMSTeamsProvider } = await Promise.resolve().then(() => require("./src-Bz9wY0Mr.cjs"));
+			const { monitorMSTeamsProvider } = await Promise.resolve().then(() => require("./src-NMnaP_95.cjs"));
 			const port = ctx.cfg.channels?.msteams?.webhook?.port ?? 3978;
 			const statusSink = (0, openclaw_plugin_sdk_channel_outbound.createAccountStatusSink)({
 				accountId: ctx.accountId,
@@ -1479,6 +1524,17 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 			});
 			statusSink({ port });
 			ctx.log?.info(`starting provider (port ${port})`);
+			if (isMSTeamsNativeApprovalClientEnabled({
+				cfg: ctx.cfg,
+				accountId: ctx.accountId
+			})) (0, openclaw_plugin_sdk_channel_runtime_context.registerChannelRuntimeContext)({
+				channelRuntime: ctx.channelRuntime,
+				channelId: "msteams",
+				accountId: ctx.accountId,
+				capability: openclaw_plugin_sdk_approval_handler_adapter_runtime.CHANNEL_APPROVAL_NATIVE_RUNTIME_CONTEXT_CAPABILITY,
+				context: {},
+				abortSignal: ctx.abortSignal
+			});
 			return monitorMSTeamsProvider({
 				cfg: ctx.cfg,
 				runtime: ctx.runtime,
@@ -1487,7 +1543,7 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 			});
 		} }
 	},
-	security: { collectWarnings: (0, openclaw_plugin_sdk_channel_policy.projectConfigWarningCollector)(collectMSTeamsSecurityWarnings) },
+	security: { collectWarnings: ({ cfg }) => collectMSTeamsSecurityFindings({ cfg }) },
 	pairing: { text: {
 		idLabel: "msteamsUserId",
 		message: openclaw_plugin_sdk_channel_status.PAIRING_APPROVED_MESSAGE,
@@ -1539,6 +1595,18 @@ Object.defineProperty(exports, "buildMSTeamsPresentationCard", {
 		return buildMSTeamsPresentationCard;
 	}
 });
+Object.defineProperty(exports, "inferMSTeamsTargetChatType", {
+	enumerable: true,
+	get: function() {
+		return inferMSTeamsTargetChatType;
+	}
+});
+Object.defineProperty(exports, "isMSTeamsNativeApprovalClientEnabled", {
+	enumerable: true,
+	get: function() {
+		return isMSTeamsNativeApprovalClientEnabled;
+	}
+});
 Object.defineProperty(exports, "msteamsPlugin", {
 	enumerable: true,
 	get: function() {
@@ -1563,9 +1631,9 @@ Object.defineProperty(exports, "resolveMSTeamsRouteConfig", {
 		return resolveMSTeamsRouteConfig;
 	}
 });
-Object.defineProperty(exports, "resolveMSTeamsRouteSessionKey", {
+Object.defineProperty(exports, "shouldHandleMSTeamsNativeApprovalRequest", {
 	enumerable: true,
 	get: function() {
-		return resolveMSTeamsRouteSessionKey;
+		return shouldHandleMSTeamsNativeApprovalRequest;
 	}
 });

package/dist/channel-plugin-api.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_channel = require("./channel-DfCbi0d_.cjs");
+const require_channel = require("./channel-BsqcQ0E9.cjs");
 exports.msteamsPlugin = require_channel.msteamsPlugin;