@openclaw/msteams 2026.8.1-beta.3 → 2026.8.2

package/dist/{channel.setup-mOFtsfYz.cjs → channel.setup-BRbhaigB.cjs}

@@ -1,12 +1,13 @@
-const require_resolve_allowlist = require("./resolve-allowlist-CIfWUwuc.cjs");
-const require_config_schema = require("./config-schema-C4CszdDi.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-BrdWKHE-.cjs");
+require("./secret-input-C65t6kjM.cjs");
+const require_config_schema = require("./config-schema-MyN2lamA.cjs");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
 let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
+let openclaw_plugin_sdk_account_helpers = require("openclaw/plugin-sdk/account-helpers");
 let openclaw_plugin_sdk_number_runtime = require("openclaw/plugin-sdk/number-runtime");
 let openclaw_plugin_sdk_channel_config_helpers = require("openclaw/plugin-sdk/channel-config-helpers");
 let openclaw_plugin_sdk_secret_file_runtime = require("openclaw/plugin-sdk/secret-file-runtime");
-let openclaw_plugin_sdk_account_helpers = require("openclaw/plugin-sdk/account-helpers");
 let openclaw_plugin_sdk_channel_setup = require("openclaw/plugin-sdk/channel-setup");
 let openclaw_plugin_sdk_setup = require("openclaw/plugin-sdk/setup");
 let openclaw_plugin_sdk_setup_tools = require("openclaw/plugin-sdk/setup-tools");
@@ -106,16 +107,17 @@ function createMSTeamsSetupWizardBase() {
 			let appPassword = null;
 			let tenantId = null;
 			if (!resolved && !hasConfigCreds) await noteMSTeamsCredentialHelp(prompter);
-			if (canUseEnv || hasConfigCreds) if (await prompter.confirm({
-				message: t$1(canUseEnv ? "wizard.msteams.envPrompt" : "wizard.msteams.credentialsKeep"),
-				initialValue: true
-			})) next = msteamsSetupAdapter.applyAccountConfig({
-				cfg: next,
-				accountId: openclaw_plugin_sdk_setup.DEFAULT_ACCOUNT_ID,
-				input: {}
-			});
-			else ({appId, appPassword, tenantId} = await promptMSTeamsCredentials(prompter));
-			else ({appId, appPassword, tenantId} = await promptMSTeamsCredentials(prompter));
+			if (canUseEnv || hasConfigCreds) {
+				if (await prompter.confirm({
+					message: t$1(canUseEnv ? "wizard.msteams.envPrompt" : "wizard.msteams.credentialsKeep"),
+					initialValue: true
+				})) next = msteamsSetupAdapter.applyAccountConfig({
+					cfg: next,
+					accountId: openclaw_plugin_sdk_setup.DEFAULT_ACCOUNT_ID,
+					input: {}
+				});
+				else ({appId, appPassword, tenantId} = await promptMSTeamsCredentials(prompter));
+			} else ({appId, appPassword, tenantId} = await promptMSTeamsCredentials(prompter));
 			if (appId && appPassword && tenantId) next = {
 				...next,
 				channels: {
@@ -189,7 +191,8 @@ function extractErrorCode(err) {
 }
 function extractRetryAfterMs(err) {
 	if (!(0, openclaw_plugin_sdk_string_coerce_runtime.isRecord)(err)) return null;
-	const directMs = (0, openclaw_plugin_sdk_number_runtime.asFiniteNumberInRange)(err.retryAfterMs ?? err.retry_after_ms, {
+	const direct = err.retryAfterMs ?? err.retry_after_ms;
+	const directMs = (0, openclaw_plugin_sdk_number_runtime.asFiniteNumberInRange)(direct, {
 		min: 0,
 		max: Number.MAX_SAFE_INTEGER
 	});
@@ -336,12 +339,13 @@ async function promptMSTeamsAllowFrom(params) {
 		"- 00000000-0000-0000-0000-000000000000"
 	].join("\n"), t("wizard.msteams.allowlistTitle"));
 	while (true) {
-		const parts = (0, openclaw_plugin_sdk_setup.splitSetupEntries)(await params.prompter.text({
+		const entry = await params.prompter.text({
 			message: t("wizard.msteams.allowFromPrompt"),
 			placeholder: "alex@example.com, Alex Johnson",
 			initialValue: existing[0] ? existing[0] : void 0,
 			validate: (value) => value.trim() ? void 0 : t("common.required")
-		}));
+		});
+		const parts = (0, openclaw_plugin_sdk_setup.splitSetupEntries)(entry);
 		if (parts.length === 0) {
 			await params.prompter.note(t("wizard.msteams.enterAtLeastOneUser"), t("wizard.msteams.allowlistTitle"));
 			continue;
@@ -364,7 +368,8 @@ async function promptMSTeamsAllowFrom(params) {
 			await params.prompter.note(t("wizard.msteams.couldNotResolve", { entries: unresolved.map((item) => item.input).join(", ") }), t("wizard.msteams.allowlistTitle"));
 			continue;
 		}
-		const unique = (0, openclaw_plugin_sdk_setup.mergeAllowFromEntries)(existing, resolved.map((item) => item.id));
+		const ids = resolved.map((item) => item.id);
+		const unique = (0, openclaw_plugin_sdk_setup.mergeAllowFromEntries)(existing, ids);
 		return setMSTeamsAllowFrom(params.cfg, unique);
 	}
 }
@@ -478,7 +483,7 @@ const msteamsSetupWizard = {
 				};
 				let oauthModule;
 				try {
-					oauthModule = await Promise.resolve().then(() => require("./oauth-C9So7uld.cjs"));
+					oauthModule = await Promise.resolve().then(() => require("./oauth-Bctn-WPI.cjs"));
 				} catch (err) {
 					await noteDelegatedAuthFailure(err);
 					return {
@@ -602,6 +607,12 @@ Object.defineProperty(exports, "isRevokedProxyError", {
 		return isRevokedProxyError;
 	}
 });
+Object.defineProperty(exports, "msteamsConfigAdapter", {
+	enumerable: true,
+	get: function() {
+		return msteamsConfigAdapter;
+	}
+});
 Object.defineProperty(exports, "msteamsSetupAdapter", {
 	enumerable: true,
 	get: function() {

package/dist/{config-schema-C4CszdDi.cjs → config-schema-MyN2lamA.cjs}

@@ -80,18 +80,19 @@ function isAzureChinaBotFrameworkServiceUrl(value) {
 		return false;
 	}
 }
+const { accountShape, rootPolicyShape } = (0, openclaw_plugin_sdk_channel_config_schema.buildChannelAccountSchemaParts)({
+	omit: [
+		"name",
+		"mentionPatterns",
+		"replyToMode"
+	],
+	allowFrom: zod.z.array(zod.z.string()).optional(),
+	groupAllowFrom: zod.z.array(zod.z.string()).optional(),
+	streaming: openclaw_plugin_sdk_channel_config_schema.ChannelPreviewStreamingConfigSchema.optional()
+});
 const MSTeamsConfigSchema = zod.z.object({
-	...(0, openclaw_plugin_sdk_channel_config_schema.buildCommonChannelAccountShape)({
-		useDefaults: true,
-		omit: [
-			"name",
-			"mentionPatterns",
-			"replyToMode"
-		],
-		allowFrom: zod.z.array(zod.z.string()).optional(),
-		groupAllowFrom: zod.z.array(zod.z.string()).optional(),
-		streaming: openclaw_plugin_sdk_channel_config_schema.ChannelPreviewStreamingConfigSchema.optional()
-	}),
+	...accountShape,
+	...rootPolicyShape,
 	dangerouslyAllowNameMatching: openclaw_plugin_sdk_channel_config_schema.ChannelDangerouslyAllowNameMatchingSchema,
 	appId: zod.z.string().optional(),
 	appPassword: (0, openclaw_plugin_sdk_secret_input.registerSensitiveConfigSchema)(SecretInputSchema.optional()),

package/dist/configured-state.cjs

@@ -0,0 +1,20 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+require("./secret-input-C65t6kjM.cjs");
+let openclaw_plugin_sdk_secret_input = require("openclaw/plugin-sdk/secret-input");
+//#region extensions/msteams/configured-state.ts
+/** Mirror Teams auth-mode requirements without loading the Azure SDK or full channel. */
+function hasConfiguredMSTeamsChannelState(params) {
+	const config = params.cfg.channels?.msteams;
+	if (config?.enabled === false) return false;
+	const env = params.env ?? process.env;
+	const appId = (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(config && Object.hasOwn(config, "appId") ? config.appId : env.MSTEAMS_APP_ID);
+	const tenantId = (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(config && Object.hasOwn(config, "tenantId") ? config.tenantId : env.MSTEAMS_TENANT_ID);
+	if (!appId || !tenantId) return false;
+	if ((config?.authType ?? env.MSTEAMS_AUTH_TYPE ?? "secret") === "federated") {
+		const certificatePath = (0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(config && Object.hasOwn(config, "certificatePath") ? config.certificatePath : env.MSTEAMS_CERTIFICATE_PATH);
+		return Boolean(certificatePath || (config?.useManagedIdentity ?? env.MSTEAMS_USE_MANAGED_IDENTITY === "true"));
+	}
+	return config && Object.hasOwn(config, "appPassword") ? (0, openclaw_plugin_sdk_secret_input.hasConfiguredSecretInput)(config.appPassword) : Boolean((0, openclaw_plugin_sdk_secret_input.normalizeSecretInputString)(env.MSTEAMS_APP_PASSWORD));
+}
+//#endregion
+exports.hasConfiguredMSTeamsChannelState = hasConfiguredMSTeamsChannelState;

package/dist/directory-contract-api.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_resolve_allowlist = require("./resolve-allowlist-CIfWUwuc.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-BrdWKHE-.cjs");
 let openclaw_plugin_sdk_directory_runtime = require("openclaw/plugin-sdk/directory-runtime");
 const msteamsDirectoryContractPlugin = {
 	id: "msteams",

package/dist/doctor-contract-api.cjs

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_rolldown_runtime = require("./rolldown-runtime-D6vf50IK.cjs");
+const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
 const require_delegated_state = require("./delegated-state-DiEz9JIa.cjs");
-const require_polls = require("./polls-DvuJvaDG.cjs");
-const require_sso_token_store = require("./sso-token-store-ChhO1f4i.cjs");
+const require_polls = require("./polls-P86qBpeV.cjs");
+const require_sso_token_store = require("./sso-token-store-CNbRhz-A.cjs");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let node_crypto = require("node:crypto");
 node_crypto = require_rolldown_runtime.__toESM(node_crypto, 1);
@@ -11,7 +11,7 @@ node_fs_promises = require_rolldown_runtime.__toESM(node_fs_promises, 1);
 let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
 let openclaw_plugin_sdk_runtime_doctor_migrations = require("openclaw/plugin-sdk/runtime-doctor-migrations");
-//#region extensions/msteams/doctor-contract-api.ts
+//#region extensions/msteams/config-doctor-api.ts
 const streamingAliasMigration = (0, openclaw_plugin_sdk_runtime_doctor_migrations.defineChannelAliasMigration)({
 	channelId: "msteams",
 	streaming: { defaultMode: "partial" }
@@ -20,6 +20,8 @@ const legacyConfigRules = streamingAliasMigration.legacyConfigRules;
 function normalizeCompatibilityConfig({ cfg }) {
 	return streamingAliasMigration.normalizeChannelConfig({ cfg });
 }
+//#endregion
+//#region extensions/msteams/doctor-contract-api.ts
 const LEARNINGS_NAMESPACE = "feedback-learnings";
 const MAX_LEARNING_ENTRIES = 1e4;
 const MSTEAMS_PLUGIN_ID = "Microsoft Teams";
@@ -165,6 +167,33 @@ function mergeLearnings(legacy, existing) {
 	}
 	return merged.slice(-10);
 }
+async function completeLegacyKeyedImport(params) {
+	const { filePath, label, imported, warnings } = params;
+	const changes = [];
+	let missing = 0;
+	for (const { store, requiredKeys } of params.stores) {
+		const retainedKeys = new Set((await store.entries()).map((entry) => entry.key));
+		missing += [...requiredKeys].filter((key) => !retainedKeys.has(key)).length;
+	}
+	if (missing > 0) {
+		warnings.push(`Incomplete ${label} migration: plugin state failed to retain every required entry (${missing} missing); left legacy source in place`);
+		return {
+			changes,
+			warnings
+		};
+	}
+	changes.push(`Migrated ${imported} ${label} ${imported === 1 ? "entry" : "entries"} -> plugin state`);
+	await (0, openclaw_plugin_sdk_runtime_doctor_migrations.archiveLegacyStateSource)({
+		filePath,
+		label: params.archiveLabel ?? label,
+		changes,
+		warnings
+	});
+	return {
+		changes,
+		warnings
+	};
+}
 const stateMigrations = [
 	{
 		id: "msteams-conversations-json-to-plugin-state",
@@ -175,35 +204,36 @@ const stateMigrations = [
 			return { preview: [`- ${MSTEAMS_PLUGIN_ID} conversations: ${Object.keys(state.conversations).length} entries -> plugin state (${require_polls.MSTEAMS_CONVERSATIONS_NAMESPACE})`] };
 		},
 		async migrateLegacyState(params) {
-			const changes = [];
-			const warnings = [];
 			const filePath = resolveStateFilePath(params.stateDir, require_polls.MSTEAMS_CONVERSATIONS_LEGACY_FILENAME);
 			const state = await readLegacyJsonFile(filePath, parseLegacyConversationStore);
 			if (!state) return {
-				changes,
-				warnings
+				changes: [],
+				warnings: []
 			};
 			const store = params.context.openPluginStateKeyedStore({
 				namespace: require_polls.MSTEAMS_CONVERSATIONS_NAMESPACE,
 				maxEntries: require_polls.MSTEAMS_SQLITE_MAX_CONVERSATION_ROWS
 			});
+			const requiredKeys = new Set((await store.entries()).map((entry) => entry.key));
 			let imported = 0;
 			for (const [rawConversationId, reference] of require_polls.selectRetainedMSTeamsConversations(state.conversations)) {
 				const conversationId = require_polls.normalizeStoredConversationId(rawConversationId);
 				if (!conversationId) continue;
-				if (await store.registerIfAbsent(require_polls.buildMSTeamsConversationStateKey(conversationId), require_polls.prepareMSTeamsConversationReferenceForStorage(conversationId, reference))) imported++;
+				const key = require_polls.buildMSTeamsConversationStateKey(conversationId);
+				requiredKeys.add(key);
+				const storedReference = require_polls.prepareMSTeamsConversationReferenceForStorage(conversationId, reference);
+				if (await store.registerIfAbsent(key, storedReference)) imported++;
 			}
-			changes.push(`Migrated ${imported} ${MSTEAMS_PLUGIN_ID} conversation ${imported === 1 ? "entry" : "entries"} -> plugin state`);
-			await (0, openclaw_plugin_sdk_runtime_doctor_migrations.archiveLegacyStateSource)({
+			return completeLegacyKeyedImport({
 				filePath,
 				label: `${MSTEAMS_PLUGIN_ID} conversation`,
-				changes,
-				warnings
+				imported,
+				warnings: [],
+				stores: [{
+					store,
+					requiredKeys
+				}]
 			});
-			return {
-				changes,
-				warnings
-			};
 		}
 	},
 	{
@@ -215,13 +245,11 @@ const stateMigrations = [
 			return { preview: [`- ${MSTEAMS_PLUGIN_ID} polls: ${Object.keys(state.polls).length} entries -> plugin state (${require_polls.MSTEAMS_POLLS_NAMESPACE})`] };
 		},
 		async migrateLegacyState(params) {
-			const changes = [];
-			const warnings = [];
 			const filePath = resolveStateFilePath(params.stateDir, require_polls.MSTEAMS_POLLS_LEGACY_FILENAME);
 			const state = await readLegacyJsonFile(filePath, parseLegacyPollStore);
 			if (!state) return {
-				changes,
-				warnings
+				changes: [],
+				warnings: []
 			};
 			const pollStore = params.context.openPluginStateKeyedStore({
 				namespace: require_polls.MSTEAMS_POLLS_NAMESPACE,
@@ -231,10 +259,14 @@ const stateMigrations = [
 				namespace: require_polls.MSTEAMS_POLL_VOTE_BUCKETS_NAMESPACE,
 				maxEntries: require_polls.MSTEAMS_MAX_POLL_VOTE_BUCKET_ROWS
 			});
+			const requiredPollKeys = new Set((await pollStore.entries()).map((entry) => entry.key));
+			const requiredVoteKeys = new Set((await voteBucketStore.entries()).map((entry) => entry.key));
 			let imported = 0;
 			for (const [pollId, poll] of require_polls.selectRetainedMSTeamsPolls(state.polls)) {
 				const { metadata, votes } = require_polls.splitMSTeamsPoll(poll);
-				const didImportPoll = await pollStore.registerIfAbsent(require_polls.buildMSTeamsPollStateKey(pollId), metadata);
+				const pollKey = require_polls.buildMSTeamsPollStateKey(pollId);
+				requiredPollKeys.add(pollKey);
+				const didImportPoll = await pollStore.registerIfAbsent(pollKey, metadata);
 				const buckets = /* @__PURE__ */ new Map();
 				for (const [voterId, selections] of Object.entries(votes)) {
 					const bucket = require_polls.selectMSTeamsPollVoteBucket(pollId, voterId);
@@ -245,6 +277,7 @@ const stateMigrations = [
 				let importedVoteBucket = false;
 				for (const [bucket, bucketVotes] of buckets) {
 					const key = require_polls.buildMSTeamsPollVoteBucketKey(pollId, bucket);
+					requiredVoteKeys.add(key);
 					const existing = await voteBucketStore.lookup(key);
 					await voteBucketStore.register(key, {
 						pollId,
@@ -259,17 +292,19 @@ const stateMigrations = [
 				}
 				if (didImportPoll || importedVoteBucket) imported++;
 			}
-			changes.push(`Migrated ${imported} ${MSTEAMS_PLUGIN_ID} poll ${imported === 1 ? "entry" : "entries"} -> plugin state`);
-			await (0, openclaw_plugin_sdk_runtime_doctor_migrations.archiveLegacyStateSource)({
+			return completeLegacyKeyedImport({
 				filePath,
 				label: `${MSTEAMS_PLUGIN_ID} poll`,
-				changes,
-				warnings
+				imported,
+				warnings: [],
+				stores: [{
+					store: pollStore,
+					requiredKeys: requiredPollKeys
+				}, {
+					store: voteBucketStore,
+					requiredKeys: requiredVoteKeys
+				}]
 			});
-			return {
-				changes,
-				warnings
-			};
 		}
 	},
 	{
@@ -281,18 +316,18 @@ const stateMigrations = [
 			return { preview: [`- ${MSTEAMS_PLUGIN_ID} SSO tokens: ${Object.keys(state.tokens).length} entries -> plugin state (${require_sso_token_store.MSTEAMS_SSO_TOKENS_NAMESPACE})`] };
 		},
 		async migrateLegacyState(params) {
-			const changes = [];
 			const warnings = [];
 			const filePath = resolveStateFilePath(params.stateDir, require_sso_token_store.MSTEAMS_SSO_TOKENS_LEGACY_FILENAME);
 			const state = await readLegacyJsonFile(filePath, (value) => require_sso_token_store.isMSTeamsSsoStoreData(value) ? value : null);
 			if (!state) return {
-				changes,
+				changes: [],
 				warnings
 			};
 			const store = params.context.openPluginStateKeyedStore({
 				namespace: require_sso_token_store.MSTEAMS_SSO_TOKENS_NAMESPACE,
 				maxEntries: require_sso_token_store.MSTEAMS_MAX_SSO_TOKENS
 			});
+			const requiredKeys = new Set((await store.entries()).map((entry) => entry.key));
 			let imported = 0;
 			let skipped = 0;
 			for (const token of Object.values(state.tokens)) {
@@ -301,20 +336,22 @@ const stateMigrations = [
 					skipped++;
 					continue;
 				}
-				if (await store.registerIfAbsent(require_sso_token_store.makeMSTeamsSsoTokenStoreKey(normalized.connectionName, normalized.userId), normalized)) imported++;
+				const key = require_sso_token_store.makeMSTeamsSsoTokenStoreKey(normalized.connectionName, normalized.userId);
+				requiredKeys.add(key);
+				if (await store.registerIfAbsent(key, normalized)) imported++;
 			}
-			changes.push(`Migrated ${imported} ${MSTEAMS_PLUGIN_ID} SSO token ${imported === 1 ? "entry" : "entries"} -> plugin state`);
 			if (skipped > 0) warnings.push(`Skipped ${skipped} malformed ${MSTEAMS_PLUGIN_ID} SSO token ${skipped === 1 ? "entry" : "entries"} during migration`);
-			await (0, openclaw_plugin_sdk_runtime_doctor_migrations.archiveLegacyStateSource)({
+			return completeLegacyKeyedImport({
 				filePath,
-				label: `${MSTEAMS_PLUGIN_ID} SSO-token`,
-				changes,
-				warnings
+				label: `${MSTEAMS_PLUGIN_ID} SSO token`,
+				archiveLabel: `${MSTEAMS_PLUGIN_ID} SSO-token`,
+				imported,
+				warnings,
+				stores: [{
+					store,
+					requiredKeys
+				}]
 			});
-			return {
-				changes,
-				warnings
-			};
 		}
 	},
 	{