@openclaw/msteams 2026.8.1-beta.3 → 2026.8.2

package/dist/{resolve-allowlist-CIfWUwuc.cjs → resolve-allowlist-BrdWKHE-.cjs}

@@ -1,6 +1,7 @@
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 require("./runtime-api.cjs");
 const require_delegated_state = require("./delegated-state-DiEz9JIa.cjs");
+require("./secret-input-C65t6kjM.cjs");
 let openclaw_plugin_sdk_lazy_runtime = require("openclaw/plugin-sdk/lazy-runtime");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
@@ -14,12 +15,12 @@ let openclaw_plugin_sdk_number_runtime = require("openclaw/plugin-sdk/number-run
 let openclaw_plugin_sdk_text_utility_runtime = require("openclaw/plugin-sdk/text-utility-runtime");
 let openclaw_plugin_sdk_secret_file = require("openclaw/plugin-sdk/secret-file");
 let node_module = require("node:module");
-let openclaw_plugin_sdk_secret_input = require("openclaw/plugin-sdk/secret-input");
 let openclaw_plugin_sdk_html_entity_runtime = require("openclaw/plugin-sdk/html-entity-runtime");
+let openclaw_plugin_sdk_secret_input = require("openclaw/plugin-sdk/secret-input");
 //#region extensions/msteams/src/request-timeout.ts
 const MSTEAMS_REQUEST_TIMEOUT_MS = 3e4;
-const MSTEAMS_SHAREPOINT_UPLOAD_BASE_TIMEOUT_MS = 5 * 6e4;
-const MSTEAMS_SHAREPOINT_UPLOAD_MIN_BYTES_PER_SECOND = 256 * 1024;
+const MSTEAMS_SHAREPOINT_UPLOAD_BASE_TIMEOUT_MS = 3e5;
+const MSTEAMS_SHAREPOINT_UPLOAD_MIN_BYTES_PER_SECOND = 262144;
 const MSTEAMS_INBOUND_PREPROCESS_TIMEOUT_MS = 1e4;
 function createMSTeamsInboundDeadline() {
 	return (0, openclaw_plugin_sdk_provider_http.createProviderOperationDeadline)({
@@ -110,25 +111,6 @@ const DEFAULT_MEDIA_AUTH_HOST_ALLOWLIST = [
 	"graph.microsoft.cn"
 ];
 const GRAPH_ROOT = "https://graph.microsoft.com/v1.0";
-function estimateBase64DecodedBytes(base64) {
-	let effectiveLen = 0;
-	for (let i = 0; i < base64.length; i += 1) {
-		if (base64.charCodeAt(i) <= 32) continue;
-		effectiveLen += 1;
-	}
-	if (effectiveLen === 0) return 0;
-	let padding = 0;
-	let end = base64.length - 1;
-	while (end >= 0 && base64.charCodeAt(end) <= 32) end -= 1;
-	if (end >= 0 && base64[end] === "=") {
-		padding = 1;
-		end -= 1;
-		while (end >= 0 && base64.charCodeAt(end) <= 32) end -= 1;
-		if (end >= 0 && base64[end] === "=") padding = 2;
-	}
-	const estimated = Math.floor(effectiveLen * 3 / 4) - padding;
-	return Math.max(0, estimated);
-}
 /**
 * Host suffixes for SharePoint/OneDrive shared links that must be fetched via
 * the Graph `/shares/{shareId}/driveItem/content` endpoint instead of directly.
@@ -275,7 +257,7 @@ function decodeDataImageWithLimits(src, opts) {
 		candidate: null,
 		estimatedBytes: 0
 	};
-	const estimatedBytes = estimateBase64DecodedBytes(canonicalPayload);
+	const estimatedBytes = node_buffer.Buffer.byteLength(canonicalPayload, "base64");
 	if (estimatedBytes <= 0) return {
 		candidate: null,
 		estimatedBytes: 0
@@ -448,7 +430,7 @@ async function safeFetch(params) {
 	const resolveFn = params.resolveFn ?? node_dns_promises.lookup;
 	const hasDispatcher = Boolean(params.requestInit && typeof params.requestInit === "object" && "dispatcher" in params.requestInit);
 	const currentHeaders = new Headers(params.requestInit?.headers);
-	let currentUrl = params.url;
+	const currentUrl = params.url;
 	if (!isUrlAllowed(currentUrl, params.allowHosts)) throw new Error(`Initial download URL blocked: ${currentUrl}`);
 	if (currentHeaders.has("authorization") && params.authorizationAllowHosts && !isUrlAllowed(currentUrl, params.authorizationAllowHosts)) currentHeaders.delete("authorization");
 	if (!hasDispatcher) {
@@ -479,37 +461,29 @@ async function safeFetch(params) {
 		});
 		return (0, openclaw_plugin_sdk_fetch_runtime.responseWithRelease)(guarded.response, guarded.release);
 	}
-	if (resolveFn) try {
+	try {
 		const initialHost = new URL(currentUrl).hostname;
 		await resolveAndValidateIP(initialHost, resolveFn);
 	} catch {
 		throw new Error(`Initial download URL blocked: ${currentUrl}`);
 	}
-	for (let i = 0; i <= MAX_SAFE_REDIRECTS; i++) {
-		const res = await (params.fetchFn ?? fetch)(currentUrl, {
-			...params.requestInit,
-			headers: currentHeaders,
-			redirect: "manual"
-		});
-		if (!isRedirectStatus(res.status)) return res;
-		const location = res.headers.get("location");
-		if (!location) return res;
-		let redirectUrl;
-		try {
-			redirectUrl = new URL(location, currentUrl).toString();
-		} catch {
-			throw new Error(`Invalid redirect URL: ${location}`);
-		}
-		if (!isUrlAllowed(redirectUrl, params.allowHosts)) throw new Error(`Media redirect target blocked by allowlist: ${redirectUrl}`);
-		if (currentHeaders.has("authorization") && params.authorizationAllowHosts && !isUrlAllowed(redirectUrl, params.authorizationAllowHosts)) currentHeaders.delete("authorization");
-		if (hasDispatcher) return res;
-		if (resolveFn) {
-			const redirectHost = new URL(redirectUrl).hostname;
-			await resolveAndValidateIP(redirectHost, resolveFn);
-		}
-		currentUrl = redirectUrl;
+	const res = await (params.fetchFn ?? fetch)(currentUrl, {
+		...params.requestInit,
+		headers: currentHeaders,
+		redirect: "manual"
+	});
+	if (!isRedirectStatus(res.status)) return res;
+	const location = res.headers.get("location");
+	if (!location) return res;
+	let redirectUrl;
+	try {
+		redirectUrl = new URL(location, currentUrl).toString();
+	} catch {
+		throw new Error(`Invalid redirect URL: ${location}`);
 	}
-	throw new Error(`Too many redirects (>${MAX_SAFE_REDIRECTS})`);
+	if (!isUrlAllowed(redirectUrl, params.allowHosts)) throw new Error(`Media redirect target blocked by allowlist: ${redirectUrl}`);
+	if (currentHeaders.has("authorization") && params.authorizationAllowHosts && !isUrlAllowed(redirectUrl, params.authorizationAllowHosts)) currentHeaders.delete("authorization");
+	return res;
 }
 async function safeFetchWithPolicy(params) {
 	return await safeFetch({
@@ -919,7 +893,7 @@ function buildMSTeamsTokenEndpoint(tenantId) {
 //#endregion
 //#region extensions/msteams/src/oauth.token.ts
 /** Five-minute buffer subtracted from token expiry to avoid edge-case clock drift. */
-const EXPIRY_BUFFER_MS = 300 * 1e3;
+const EXPIRY_BUFFER_MS = 3e5;
 function createMSTeamsTokenBody(params) {
 	const body = new URLSearchParams({
 		client_id: params.clientId,
@@ -1114,8 +1088,9 @@ function escapeOData(value) {
 }
 async function requestGraph(params) {
 	const hasBody = params.body !== void 0;
+	const url = `${params.root ?? "https://graph.microsoft.com/v1.0"}${params.path}`;
 	const { response, release } = await (0, openclaw_plugin_sdk_ssrf_runtime.fetchWithSsrFGuard)({
-		url: `${params.root ?? "https://graph.microsoft.com/v1.0"}${params.path}`,
+		url,
 		init: {
 			method: params.method,
 			headers: {

package/dist/{rolldown-runtime-D6vf50IK.cjs → rolldown-runtime-VH7oDXx4.cjs}

@@ -15,7 +15,7 @@ var __copyProps = (to, from, except, desc) => {
 	}
 	return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
 	value: mod,
 	enumerable: true
 }) : target, mod));

package/dist/runtime-api.cjs

@@ -11,6 +11,7 @@ let openclaw_plugin_sdk_dangerous_name_runtime = require("openclaw/plugin-sdk/da
 let openclaw_plugin_sdk_runtime_group_policy = require("openclaw/plugin-sdk/runtime-group-policy");
 let openclaw_plugin_sdk_file_lock = require("openclaw/plugin-sdk/file-lock");
 let openclaw_plugin_sdk_media_runtime = require("openclaw/plugin-sdk/media-runtime");
+let openclaw_plugin_sdk_account_helpers = require("openclaw/plugin-sdk/account-helpers");
 let openclaw_plugin_sdk_outbound_media = require("openclaw/plugin-sdk/outbound-media");
 let openclaw_plugin_sdk_reply_payload = require("openclaw/plugin-sdk/reply-payload");
 let openclaw_plugin_sdk_ssrf_runtime = require("openclaw/plugin-sdk/ssrf-runtime");
@@ -164,7 +165,7 @@ Object.defineProperty(exports, "resolveChannelEntryMatchWithFallback", {
 Object.defineProperty(exports, "resolveChannelMediaMaxBytes", {
 	enumerable: true,
 	get: function() {
-		return openclaw_plugin_sdk_media_runtime.resolveChannelMediaMaxBytes;
+		return openclaw_plugin_sdk_account_helpers.resolveChannelMediaMaxBytes;
 	}
 });
 Object.defineProperty(exports, "resolveDefaultGroupPolicy", {

package/dist/secret-input-C65t6kjM.cjs

@@ -0,0 +1 @@
+require("openclaw/plugin-sdk/secret-input");