@openclaw/msteams 2026.8.1-beta.3 → 2026.8.2

package/dist/{channel-KpWENcgK.cjs → channel-DLn4b6Qi.cjs}

@@ -1,28 +1,31 @@
 require("./runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-CIfWUwuc.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-BrdWKHE-.cjs");
 const require_directory_contract_api = require("./directory-contract-api.cjs");
-const require_channel_setup = require("./channel.setup-mOFtsfYz.cjs");
+const require_thread_session = require("./thread-session-DxOri69r.cjs");
+const require_channel_setup = require("./channel.setup-BRbhaigB.cjs");
+let openclaw_plugin_sdk_approval_handler_adapter_runtime = require("openclaw/plugin-sdk/approval-handler-adapter-runtime");
 let openclaw_plugin_sdk_channel_core = require("openclaw/plugin-sdk/channel-core");
 let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
 let openclaw_plugin_sdk_channel_pairing = require("openclaw/plugin-sdk/channel-pairing");
 let openclaw_plugin_sdk_channel_policy = require("openclaw/plugin-sdk/channel-policy");
+let openclaw_plugin_sdk_channel_runtime_context = require("openclaw/plugin-sdk/channel-runtime-context");
 let openclaw_plugin_sdk_directory_runtime = require("openclaw/plugin-sdk/directory-runtime");
 let openclaw_plugin_sdk_interactive_runtime = require("openclaw/plugin-sdk/interactive-runtime");
 let openclaw_plugin_sdk_lazy_runtime = require("openclaw/plugin-sdk/lazy-runtime");
 let openclaw_plugin_sdk_status_helpers = require("openclaw/plugin-sdk/status-helpers");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let typebox = require("typebox");
+let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_reply_reference = require("openclaw/plugin-sdk/reply-reference");
-let openclaw_plugin_sdk_approval_auth_runtime = require("openclaw/plugin-sdk/approval-auth-runtime");
+let openclaw_plugin_sdk_approval_delivery_runtime = require("openclaw/plugin-sdk/approval-delivery-runtime");
+let openclaw_plugin_sdk_approval_native_runtime = require("openclaw/plugin-sdk/approval-native-runtime");
 let openclaw_plugin_sdk_channel_actions = require("openclaw/plugin-sdk/channel-actions");
-let openclaw_plugin_sdk_routing = require("openclaw/plugin-sdk/routing");
 let openclaw_plugin_sdk_channel_targets = require("openclaw/plugin-sdk/channel-targets");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
 let openclaw_plugin_sdk_dangerous_name_runtime = require("openclaw/plugin-sdk/dangerous-name-runtime");
 let openclaw_plugin_sdk_runtime_group_policy = require("openclaw/plugin-sdk/runtime-group-policy");
 let openclaw_plugin_sdk_text_chunking = require("openclaw/plugin-sdk/text-chunking");
 let openclaw_plugin_sdk_channel_status = require("openclaw/plugin-sdk/channel-status");
-let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 //#region extensions/msteams/src/policy.ts
 const teamScopeKey = (teamKey) => (0, openclaw_plugin_sdk_channel_policy.scopeKey)(["team", teamKey]);
 const channelScopeKey = (teamKey, channelKey) => (0, openclaw_plugin_sdk_channel_policy.scopeKey)(["team", teamKey], ["channel", channelKey]);
@@ -102,18 +105,20 @@ function resolveMSTeamsRouteConfig(params) {
 	const channelName = params.channelName?.trim();
 	const teams = params.cfg?.teams ?? {};
 	const allowlistConfigured = Object.keys(teams).length > 0;
+	const teamCandidates = (0, openclaw_plugin_sdk_channel_targets.buildChannelKeyCandidates)(teamId, params.allowNameMatching ? teamName : void 0, params.allowNameMatching && teamName ? (0, openclaw_plugin_sdk_channel_targets.normalizeChannelSlug)(teamName) : void 0);
 	const teamMatch = (0, openclaw_plugin_sdk_channel_targets.resolveChannelEntryMatchWithFallback)({
 		entries: teams,
-		keys: (0, openclaw_plugin_sdk_channel_targets.buildChannelKeyCandidates)(teamId, params.allowNameMatching ? teamName : void 0, params.allowNameMatching && teamName ? (0, openclaw_plugin_sdk_channel_targets.normalizeChannelSlug)(teamName) : void 0),
+		keys: teamCandidates,
 		wildcardKey: "*",
 		normalizeKey: openclaw_plugin_sdk_channel_targets.normalizeChannelSlug
 	});
 	const teamConfig = teamMatch.entry;
 	const channels = teamConfig?.channels ?? {};
 	const channelAllowlistConfigured = Object.keys(channels).length > 0;
+	const channelCandidates = (0, openclaw_plugin_sdk_channel_targets.buildChannelKeyCandidates)(conversationId, params.allowNameMatching ? channelName : void 0, params.allowNameMatching && channelName ? (0, openclaw_plugin_sdk_channel_targets.normalizeChannelSlug)(channelName) : void 0);
 	const channelMatch = (0, openclaw_plugin_sdk_channel_targets.resolveChannelEntryMatchWithFallback)({
 		entries: channels,
-		keys: (0, openclaw_plugin_sdk_channel_targets.buildChannelKeyCandidates)(conversationId, params.allowNameMatching ? channelName : void 0, params.allowNameMatching && channelName ? (0, openclaw_plugin_sdk_channel_targets.normalizeChannelSlug)(channelName) : void 0),
+		keys: channelCandidates,
 		wildcardKey: "*",
 		normalizeKey: openclaw_plugin_sdk_channel_targets.normalizeChannelSlug
 	});
@@ -155,11 +160,12 @@ function resolveMSTeamsGroupToolPolicy(params) {
 	});
 	if (resolved !== void 0) return resolved;
 	if (scope.path.length > 1) return;
+	const scanScope = resolveMSTeamsCrossTeamScanScope({
+		cfg,
+		groupId: params.groupId
+	});
 	return (0, openclaw_plugin_sdk_channel_policy.resolveScopeToolsPolicy)({
-		...resolveMSTeamsCrossTeamScanScope({
-			cfg,
-			groupId: params.groupId
-		}),
+		...scanScope,
 		...senderScope
 	});
 }
@@ -249,32 +255,123 @@ function resolveMSTeamsAutoThreadId(params) {
 	return context.currentThreadTs;
 }
 //#endregion
-//#region extensions/msteams/src/approval-auth.ts
-const MSTEAMS_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-function normalizeMSTeamsApproverId(value) {
-	const normalized = require_resolve_allowlist.normalizeMSTeamsMessagingTarget(String(value));
-	const id = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(normalized?.startsWith("user:") ? normalized.slice(5) : normalized);
-	return id && MSTEAMS_ID_RE.test(id) ? id : void 0;
-}
-function resolveMSTeamsChannelConfig(cfg) {
-	return cfg.channels?.msteams;
+//#region extensions/msteams/src/approval-native.ts
+function isMSTeamsApprovalTransportEnabled(params) {
+	if (params.accountId && (0, openclaw_plugin_sdk_account_id.normalizeAccountId)(params.accountId) !== openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID) return false;
+	const account = require_channel_setup.resolveMSTeamsAccount(params.cfg);
+	return account.enabled && account.configured && account.tokenStatus === "available";
 }
-const msTeamsApprovalAuth = (0, openclaw_plugin_sdk_approval_auth_runtime.createChannelApprovalAuth)({
-	channelLabel: "Microsoft Teams",
-	resolveInputs: ({ cfg }) => {
-		const channel = resolveMSTeamsChannelConfig(cfg);
-		return {
-			allowFrom: channel?.allowFrom,
-			defaultTo: channel?.defaultTo
-		};
+const msTeamsMessagingTargetResolvers = (0, openclaw_plugin_sdk_approval_native_runtime.createNativeApprovalMessagingTargetResolvers)({
+	channel: "msteams",
+	normalizeTo: require_resolve_allowlist.normalizeMSTeamsMessagingTarget
+});
+const msTeamsApprovalTargetResolvers = {
+	...msTeamsMessagingTargetResolvers,
+	resolveTurnSourceTarget: (request) => {
+		const target = msTeamsMessagingTargetResolvers.resolveTurnSourceTarget(request);
+		return target ? {
+			...target,
+			threadId: request.request.turnSourceThreadId ?? null
+		} : null;
 	},
-	normalizeApprover: normalizeMSTeamsApproverId,
-	normalizeSenderId: (value) => {
-		const trimmed = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(value);
-		if (!trimmed) return;
-		return MSTEAMS_ID_RE.test(trimmed) ? trimmed : void 0;
+	resolveSessionTarget: (sessionTarget) => {
+		const target = msTeamsMessagingTargetResolvers.resolveSessionTarget(sessionTarget);
+		return target ? {
+			...target,
+			threadId: sessionTarget.threadId ?? null
+		} : null;
+	}
+};
+const msTeamsApprovalRouteGates = (0, openclaw_plugin_sdk_approval_native_runtime.createNativeApprovalChannelRouteGates)({
+	channel: "msteams",
+	defaultForwardingMode: "session",
+	isTransportEnabled: isMSTeamsApprovalTransportEnabled,
+	listAccountIds: require_channel_setup.msteamsConfigAdapter.listAccountIds,
+	resolveDefaultAccountId: () => openclaw_plugin_sdk_account_id.DEFAULT_ACCOUNT_ID,
+	normalizeForwardTarget: msTeamsApprovalTargetResolvers.normalizeForwardTarget,
+	resolveTurnSourceTarget: msTeamsApprovalTargetResolvers.resolveTurnSourceTarget
+});
+function isMSTeamsNativeApprovalClientEnabled(params) {
+	return msTeamsApprovalRouteGates.canAnyApprovalPotentiallyRouteToChannel({
+		...params,
+		nativeSessionOnly: true
+	}) && require_thread_session.getMSTeamsApprovalApprovers(params).length > 0;
+}
+function shouldHandleMSTeamsNativeApprovalRequest(params) {
+	return msTeamsApprovalRouteGates.shouldHandleApprovalRequest(params) && require_thread_session.getMSTeamsApprovalApprovers(params).length > 0 && Boolean(msTeamsApprovalTargetResolvers.resolveTurnSourceTarget(params.request));
+}
+function shouldSuppressLocalMSTeamsExecApprovalPrompt(params) {
+	return (0, openclaw_plugin_sdk_approval_native_runtime.shouldSuppressLocalNativeExecApprovalPrompt)({
+		...params,
+		isNativeDeliveryEnabled: isMSTeamsNativeApprovalClientEnabled
+	});
+}
+const resolveMSTeamsOriginTarget = (0, openclaw_plugin_sdk_approval_native_runtime.createChannelNativeOriginTargetResolver)({
+	channel: "msteams",
+	shouldHandleRequest: shouldHandleMSTeamsNativeApprovalRequest,
+	resolveTurnSourceTarget: msTeamsApprovalTargetResolvers.resolveTurnSourceTarget,
+	resolveSessionTarget: msTeamsApprovalTargetResolvers.resolveSessionTarget,
+	normalizeTarget: msTeamsApprovalTargetResolvers.normalizeTarget
+});
+const msTeamsLazyApprovalNativeRuntime = (0, openclaw_plugin_sdk_approval_handler_adapter_runtime.createLazyChannelApprovalNativeRuntimeAdapter)({
+	eventKinds: ["exec", "plugin"],
+	isConfigured: ({ cfg, accountId }) => isMSTeamsNativeApprovalClientEnabled({
+		cfg,
+		accountId
+	}),
+	shouldHandle: ({ cfg, accountId, approvalKind, request }) => shouldHandleMSTeamsNativeApprovalRequest({
+		cfg,
+		accountId,
+		approvalKind,
+		request
+	}),
+	load: async () => {
+		const { msTeamsApprovalNativeRuntime } = await Promise.resolve().then(() => require("./approval-handler.runtime-C0AWNWXk.cjs"));
+		return msTeamsApprovalNativeRuntime;
 	}
-}).approvalAuth;
+});
+const resolveMSTeamsApproverDmTargets = (0, openclaw_plugin_sdk_approval_native_runtime.createChannelApproverDmTargetResolver)({
+	shouldHandleRequest: shouldHandleMSTeamsNativeApprovalRequest,
+	resolveApprovers: require_thread_session.getMSTeamsApprovalApprovers,
+	mapApprover: (approver, params) => ({
+		to: `user:${approver}`,
+		accountId: (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(params.accountId)
+	})
+});
+const msTeamsApprovalCapability = {
+	...(0, openclaw_plugin_sdk_approval_delivery_runtime.createApproverRestrictedNativeApprovalCapability)({
+		channel: "msteams",
+		channelLabel: "Microsoft Teams",
+		describeExecApprovalSetup: () => "Approve it from the Web UI or terminal UI for now. Microsoft Teams supports native approvals when the bot is configured. Configure `channels.msteams.allowFrom` or `channels.msteams.defaultTo` with Microsoft Entra object ID approvers.",
+		listAccountIds: require_channel_setup.msteamsConfigAdapter.listAccountIds,
+		hasApprovers: ({ cfg, accountId }) => require_thread_session.getMSTeamsApprovalApprovers({
+			cfg,
+			accountId
+		}).length > 0,
+		isExecAuthorizedSender: ({ cfg, accountId, senderId }) => require_thread_session.msTeamsApprovalAuth.authorizeActorAction?.({
+			cfg,
+			accountId,
+			senderId,
+			action: "approve",
+			approvalKind: "exec"
+		})?.authorized ?? false,
+		isPluginAuthorizedSender: ({ cfg, accountId, senderId }) => require_thread_session.msTeamsApprovalAuth.authorizeActorAction?.({
+			cfg,
+			accountId,
+			senderId,
+			action: "approve",
+			approvalKind: "plugin"
+		})?.authorized ?? false,
+		isNativeDeliveryEnabled: isMSTeamsNativeApprovalClientEnabled,
+		resolveNativeDeliveryMode: () => "channel",
+		requireMatchingTurnSourceChannel: true,
+		resolveSuppressionAccountId: ({ target, request }) => (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(target.accountId) ?? (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalString)(request.request.turnSourceAccountId),
+		resolveOriginTarget: resolveMSTeamsOriginTarget,
+		resolveApproverDmTargets: resolveMSTeamsApproverDmTargets,
+		nativeRuntime: msTeamsLazyApprovalNativeRuntime
+	}),
+	authorizeActorAction: (params) => require_thread_session.msTeamsApprovalAuth.authorizeActorAction?.(params)
+};
 //#endregion
 //#region extensions/msteams/src/doctor.ts
 const isMSTeamsMutableAllowEntry = (0, openclaw_plugin_sdk_channel_policy.buildMutableAllowEntryDetector)({
@@ -469,7 +566,8 @@ async function resolveConfiguredBotFrameworkTeamKey(cfg, graphTeamId) {
 	if (!configuredTeams) return;
 	const stableConfiguredKeys = Object.keys(configuredTeams).filter((teamKey) => teamKey !== "*" && /^19:.+@thread\./i.test(teamKey));
 	if (stableConfiguredKeys.length === 0) return;
-	const channelResult = await require_resolve_allowlist.listChannelsForTeamWithPageInfo(await require_resolve_allowlist.resolveGraphToken(cfg), graphTeamId);
+	const token = await require_resolve_allowlist.resolveGraphToken(cfg);
+	const channelResult = await require_resolve_allowlist.listChannelsForTeamWithPageInfo(token, graphTeamId);
 	if (channelResult.truncated) return;
 	const channelIds = new Set(channelResult.items.map((channel) => channel.id?.trim()).filter((channelId) => Boolean(channelId)));
 	const matches = stableConfiguredKeys.filter((teamKey) => channelIds.has(teamKey));
@@ -601,18 +699,6 @@ async function assertMSTeamsTeamEnumerationAllowed(params) {
 	return stableTeamId;
 }
 //#endregion
-//#region extensions/msteams/src/monitor-handler/thread-session.ts
-const TRAILING_THREAD_SUFFIX = /(?::thread:[^:]+)+$/;
-function resolveMSTeamsRouteSessionKey(params) {
-	const channelThreadId = params.isChannel ? params.conversationMessageId ?? params.replyToId ?? void 0 : void 0;
-	const cleanBase = params.baseSessionKey.replace(TRAILING_THREAD_SUFFIX, "");
-	return (0, openclaw_plugin_sdk_routing.resolveThreadSessionKeys)({
-		baseSessionKey: cleanBase,
-		threadId: channelThreadId,
-		parentSessionKey: channelThreadId ? cleanBase : void 0
-	}).sessionKey;
-}
-//#endregion
 //#region extensions/msteams/src/session-route.ts
 function inferMSTeamsTargetChatType(raw) {
 	const target = (0, openclaw_plugin_sdk_channel_core.stripChannelTargetPrefix)(raw, "msteams", "teams");
@@ -656,7 +742,7 @@ function resolveMSTeamsOutboundSessionRoute(params) {
 	});
 	return isChannel ? {
 		...route,
-		sessionKey: resolveMSTeamsRouteSessionKey({
+		sessionKey: require_thread_session.resolveMSTeamsRouteSessionKey({
 			baseSessionKey: route.baseSessionKey,
 			isChannel: true,
 			conversationMessageId: channelThreadId
@@ -691,7 +777,7 @@ const collectMSTeamsSecurityFindings = openclaw_plugin_sdk_channel_policy.create
 	severity: "critical",
 	title: "MS Teams security warning"
 });
-const loadMSTeamsChannelRuntime = (0, openclaw_plugin_sdk_lazy_runtime.createLazyRuntimeNamedExport)(() => Promise.resolve().then(() => require("./channel.runtime-Bkzj8jZ0.cjs")), "msTeamsChannelRuntime");
+const loadMSTeamsChannelRuntime = (0, openclaw_plugin_sdk_lazy_runtime.createLazyRuntimeNamedExport)(() => Promise.resolve().then(() => require("./channel.runtime-1mH99ZAm.cjs")), "msTeamsChannelRuntime");
 function jsonActionResult(data) {
 	return {
 		content: [{
@@ -862,6 +948,12 @@ const msteamsChannelOutbound = {
 	textChunkLimit: 4e3,
 	resolveEffectiveTextChunkLimit: ({ fallbackLimit }) => typeof fallbackLimit === "number" && fallbackLimit > 0 ? Math.min(fallbackLimit, 4e3) : 4e3,
 	pollMaxOptions: 12,
+	shouldSuppressLocalPayloadPrompt: ({ cfg, accountId, payload, hint }) => shouldSuppressLocalMSTeamsExecApprovalPrompt({
+		cfg,
+		accountId,
+		payload,
+		hint
+	}),
 	deliveryCapabilities: { durableFinal: {
 		text: true,
 		media: true,
@@ -904,7 +996,7 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 		} },
 		agentPrompt: { messageToolHints: () => ["- Adaptive Cards supported. Use `action=send` with `card={type,version,body}` to send rich cards.", "- MSTeams targeting: omit `target` to reply to the current conversation (auto-inferred). Explicit targets: `user:ID` or `user:Display Name` (requires Graph API) for DMs, `conversation:19:...@thread.tacv2` for groups/channels. Prefer IDs over display names for speed."] },
 		groups: { resolveToolPolicy: resolveMSTeamsGroupToolPolicy },
-		approvalCapability: msTeamsApprovalAuth,
+		approvalCapability: msTeamsApprovalCapability,
 		doctor: {
 			dmAllowFromMode: "topOnly",
 			groupModel: "hybrid",
@@ -1428,7 +1520,7 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 			})
 		}),
 		gateway: { startAccount: async (ctx) => {
-			const { monitorMSTeamsProvider } = await Promise.resolve().then(() => require("./src-C127-DcQ.cjs"));
+			const { monitorMSTeamsProvider } = await Promise.resolve().then(() => require("./src-RSjkJRjI.cjs"));
 			const port = ctx.cfg.channels?.msteams?.webhook?.port ?? 3978;
 			const statusSink = (0, openclaw_plugin_sdk_channel_outbound.createAccountStatusSink)({
 				accountId: ctx.accountId,
@@ -1436,6 +1528,17 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 			});
 			statusSink({ port });
 			ctx.log?.info(`starting provider (port ${port})`);
+			if (isMSTeamsNativeApprovalClientEnabled({
+				cfg: ctx.cfg,
+				accountId: ctx.accountId
+			})) (0, openclaw_plugin_sdk_channel_runtime_context.registerChannelRuntimeContext)({
+				channelRuntime: ctx.channelRuntime,
+				channelId: "msteams",
+				accountId: ctx.accountId,
+				capability: openclaw_plugin_sdk_approval_handler_adapter_runtime.CHANNEL_APPROVAL_NATIVE_RUNTIME_CONTEXT_CAPABILITY,
+				context: {},
+				abortSignal: ctx.abortSignal
+			});
 			return monitorMSTeamsProvider({
 				cfg: ctx.cfg,
 				runtime: ctx.runtime,
@@ -1496,6 +1599,18 @@ Object.defineProperty(exports, "buildMSTeamsPresentationCard", {
 		return buildMSTeamsPresentationCard;
 	}
 });
+Object.defineProperty(exports, "inferMSTeamsTargetChatType", {
+	enumerable: true,
+	get: function() {
+		return inferMSTeamsTargetChatType;
+	}
+});
+Object.defineProperty(exports, "isMSTeamsNativeApprovalClientEnabled", {
+	enumerable: true,
+	get: function() {
+		return isMSTeamsNativeApprovalClientEnabled;
+	}
+});
 Object.defineProperty(exports, "msteamsPlugin", {
 	enumerable: true,
 	get: function() {
@@ -1520,9 +1635,9 @@ Object.defineProperty(exports, "resolveMSTeamsRouteConfig", {
 		return resolveMSTeamsRouteConfig;
 	}
 });
-Object.defineProperty(exports, "resolveMSTeamsRouteSessionKey", {
+Object.defineProperty(exports, "shouldHandleMSTeamsNativeApprovalRequest", {
 	enumerable: true,
 	get: function() {
-		return resolveMSTeamsRouteSessionKey;
+		return shouldHandleMSTeamsNativeApprovalRequest;
 	}
 });

package/dist/channel-config-api.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_config_schema = require("./config-schema-C4CszdDi.cjs");
+const require_config_schema = require("./config-schema-MyN2lamA.cjs");
 exports.MSTeamsChannelConfigSchema = require_config_schema.MSTeamsChannelConfigSchema;

package/dist/channel-plugin-api.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_channel = require("./channel-KpWENcgK.cjs");
+const require_channel = require("./channel-DLn4b6Qi.cjs");
 exports.msteamsPlugin = require_channel.msteamsPlugin;