@openclaw/msteams 2026.9.1-beta.1 → 2026.9.1

package/dist/doctor-contract-api.cjs

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_rolldown_runtime = require("./rolldown-runtime-D6vf50IK.cjs");
+const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
 const require_delegated_state = require("./delegated-state-DiEz9JIa.cjs");
-const require_polls = require("./polls-DvuJvaDG.cjs");
-const require_sso_token_store = require("./sso-token-store-ChhO1f4i.cjs");
+const require_polls = require("./polls-P86qBpeV.cjs");
+const require_sso_token_store = require("./sso-token-store-CNbRhz-A.cjs");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let node_crypto = require("node:crypto");
 node_crypto = require_rolldown_runtime.__toESM(node_crypto, 1);
@@ -11,7 +11,7 @@ node_fs_promises = require_rolldown_runtime.__toESM(node_fs_promises, 1);
 let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
 let openclaw_plugin_sdk_runtime_doctor_migrations = require("openclaw/plugin-sdk/runtime-doctor-migrations");
-//#region extensions/msteams/doctor-contract-api.ts
+//#region extensions/msteams/config-doctor-api.ts
 const streamingAliasMigration = (0, openclaw_plugin_sdk_runtime_doctor_migrations.defineChannelAliasMigration)({
 	channelId: "msteams",
 	streaming: { defaultMode: "partial" }
@@ -20,6 +20,8 @@ const legacyConfigRules = streamingAliasMigration.legacyConfigRules;
 function normalizeCompatibilityConfig({ cfg }) {
 	return streamingAliasMigration.normalizeChannelConfig({ cfg });
 }
+//#endregion
+//#region extensions/msteams/doctor-contract-api.ts
 const LEARNINGS_NAMESPACE = "feedback-learnings";
 const MAX_LEARNING_ENTRIES = 1e4;
 const MSTEAMS_PLUGIN_ID = "Microsoft Teams";
@@ -165,6 +167,33 @@ function mergeLearnings(legacy, existing) {
 	}
 	return merged.slice(-10);
 }
+async function completeLegacyKeyedImport(params) {
+	const { filePath, label, imported, warnings } = params;
+	const changes = [];
+	let missing = 0;
+	for (const { store, requiredKeys } of params.stores) {
+		const retainedKeys = new Set((await store.entries()).map((entry) => entry.key));
+		missing += [...requiredKeys].filter((key) => !retainedKeys.has(key)).length;
+	}
+	if (missing > 0) {
+		warnings.push(`Incomplete ${label} migration: plugin state failed to retain every required entry (${missing} missing); left legacy source in place`);
+		return {
+			changes,
+			warnings
+		};
+	}
+	changes.push(`Migrated ${imported} ${label} ${imported === 1 ? "entry" : "entries"} -> plugin state`);
+	await (0, openclaw_plugin_sdk_runtime_doctor_migrations.archiveLegacyStateSource)({
+		filePath,
+		label: params.archiveLabel ?? label,
+		changes,
+		warnings
+	});
+	return {
+		changes,
+		warnings
+	};
+}
 const stateMigrations = [
 	{
 		id: "msteams-conversations-json-to-plugin-state",
@@ -175,35 +204,36 @@ const stateMigrations = [
 			return { preview: [`- ${MSTEAMS_PLUGIN_ID} conversations: ${Object.keys(state.conversations).length} entries -> plugin state (${require_polls.MSTEAMS_CONVERSATIONS_NAMESPACE})`] };
 		},
 		async migrateLegacyState(params) {
-			const changes = [];
-			const warnings = [];
 			const filePath = resolveStateFilePath(params.stateDir, require_polls.MSTEAMS_CONVERSATIONS_LEGACY_FILENAME);
 			const state = await readLegacyJsonFile(filePath, parseLegacyConversationStore);
 			if (!state) return {
-				changes,
-				warnings
+				changes: [],
+				warnings: []
 			};
 			const store = params.context.openPluginStateKeyedStore({
 				namespace: require_polls.MSTEAMS_CONVERSATIONS_NAMESPACE,
 				maxEntries: require_polls.MSTEAMS_SQLITE_MAX_CONVERSATION_ROWS
 			});
+			const requiredKeys = new Set((await store.entries()).map((entry) => entry.key));
 			let imported = 0;
 			for (const [rawConversationId, reference] of require_polls.selectRetainedMSTeamsConversations(state.conversations)) {
 				const conversationId = require_polls.normalizeStoredConversationId(rawConversationId);
 				if (!conversationId) continue;
-				if (await store.registerIfAbsent(require_polls.buildMSTeamsConversationStateKey(conversationId), require_polls.prepareMSTeamsConversationReferenceForStorage(conversationId, reference))) imported++;
+				const key = require_polls.buildMSTeamsConversationStateKey(conversationId);
+				requiredKeys.add(key);
+				const storedReference = require_polls.prepareMSTeamsConversationReferenceForStorage(conversationId, reference);
+				if (await store.registerIfAbsent(key, storedReference)) imported++;
 			}
-			changes.push(`Migrated ${imported} ${MSTEAMS_PLUGIN_ID} conversation ${imported === 1 ? "entry" : "entries"} -> plugin state`);
-			await (0, openclaw_plugin_sdk_runtime_doctor_migrations.archiveLegacyStateSource)({
+			return completeLegacyKeyedImport({
 				filePath,
 				label: `${MSTEAMS_PLUGIN_ID} conversation`,
-				changes,
-				warnings
+				imported,
+				warnings: [],
+				stores: [{
+					store,
+					requiredKeys
+				}]
 			});
-			return {
-				changes,
-				warnings
-			};
 		}
 	},
 	{
@@ -215,13 +245,11 @@ const stateMigrations = [
 			return { preview: [`- ${MSTEAMS_PLUGIN_ID} polls: ${Object.keys(state.polls).length} entries -> plugin state (${require_polls.MSTEAMS_POLLS_NAMESPACE})`] };
 		},
 		async migrateLegacyState(params) {
-			const changes = [];
-			const warnings = [];
 			const filePath = resolveStateFilePath(params.stateDir, require_polls.MSTEAMS_POLLS_LEGACY_FILENAME);
 			const state = await readLegacyJsonFile(filePath, parseLegacyPollStore);
 			if (!state) return {
-				changes,
-				warnings
+				changes: [],
+				warnings: []
 			};
 			const pollStore = params.context.openPluginStateKeyedStore({
 				namespace: require_polls.MSTEAMS_POLLS_NAMESPACE,
@@ -231,10 +259,14 @@ const stateMigrations = [
 				namespace: require_polls.MSTEAMS_POLL_VOTE_BUCKETS_NAMESPACE,
 				maxEntries: require_polls.MSTEAMS_MAX_POLL_VOTE_BUCKET_ROWS
 			});
+			const requiredPollKeys = new Set((await pollStore.entries()).map((entry) => entry.key));
+			const requiredVoteKeys = new Set((await voteBucketStore.entries()).map((entry) => entry.key));
 			let imported = 0;
 			for (const [pollId, poll] of require_polls.selectRetainedMSTeamsPolls(state.polls)) {
 				const { metadata, votes } = require_polls.splitMSTeamsPoll(poll);
-				const didImportPoll = await pollStore.registerIfAbsent(require_polls.buildMSTeamsPollStateKey(pollId), metadata);
+				const pollKey = require_polls.buildMSTeamsPollStateKey(pollId);
+				requiredPollKeys.add(pollKey);
+				const didImportPoll = await pollStore.registerIfAbsent(pollKey, metadata);
 				const buckets = /* @__PURE__ */ new Map();
 				for (const [voterId, selections] of Object.entries(votes)) {
 					const bucket = require_polls.selectMSTeamsPollVoteBucket(pollId, voterId);
@@ -245,6 +277,7 @@ const stateMigrations = [
 				let importedVoteBucket = false;
 				for (const [bucket, bucketVotes] of buckets) {
 					const key = require_polls.buildMSTeamsPollVoteBucketKey(pollId, bucket);
+					requiredVoteKeys.add(key);
 					const existing = await voteBucketStore.lookup(key);
 					await voteBucketStore.register(key, {
 						pollId,
@@ -259,17 +292,19 @@ const stateMigrations = [
 				}
 				if (didImportPoll || importedVoteBucket) imported++;
 			}
-			changes.push(`Migrated ${imported} ${MSTEAMS_PLUGIN_ID} poll ${imported === 1 ? "entry" : "entries"} -> plugin state`);
-			await (0, openclaw_plugin_sdk_runtime_doctor_migrations.archiveLegacyStateSource)({
+			return completeLegacyKeyedImport({
 				filePath,
 				label: `${MSTEAMS_PLUGIN_ID} poll`,
-				changes,
-				warnings
+				imported,
+				warnings: [],
+				stores: [{
+					store: pollStore,
+					requiredKeys: requiredPollKeys
+				}, {
+					store: voteBucketStore,
+					requiredKeys: requiredVoteKeys
+				}]
 			});
-			return {
-				changes,
-				warnings
-			};
 		}
 	},
 	{
@@ -281,18 +316,18 @@ const stateMigrations = [
 			return { preview: [`- ${MSTEAMS_PLUGIN_ID} SSO tokens: ${Object.keys(state.tokens).length} entries -> plugin state (${require_sso_token_store.MSTEAMS_SSO_TOKENS_NAMESPACE})`] };
 		},
 		async migrateLegacyState(params) {
-			const changes = [];
 			const warnings = [];
 			const filePath = resolveStateFilePath(params.stateDir, require_sso_token_store.MSTEAMS_SSO_TOKENS_LEGACY_FILENAME);
 			const state = await readLegacyJsonFile(filePath, (value) => require_sso_token_store.isMSTeamsSsoStoreData(value) ? value : null);
 			if (!state) return {
-				changes,
+				changes: [],
 				warnings
 			};
 			const store = params.context.openPluginStateKeyedStore({
 				namespace: require_sso_token_store.MSTEAMS_SSO_TOKENS_NAMESPACE,
 				maxEntries: require_sso_token_store.MSTEAMS_MAX_SSO_TOKENS
 			});
+			const requiredKeys = new Set((await store.entries()).map((entry) => entry.key));
 			let imported = 0;
 			let skipped = 0;
 			for (const token of Object.values(state.tokens)) {
@@ -301,20 +336,22 @@ const stateMigrations = [
 					skipped++;
 					continue;
 				}
-				if (await store.registerIfAbsent(require_sso_token_store.makeMSTeamsSsoTokenStoreKey(normalized.connectionName, normalized.userId), normalized)) imported++;
+				const key = require_sso_token_store.makeMSTeamsSsoTokenStoreKey(normalized.connectionName, normalized.userId);
+				requiredKeys.add(key);
+				if (await store.registerIfAbsent(key, normalized)) imported++;
 			}
-			changes.push(`Migrated ${imported} ${MSTEAMS_PLUGIN_ID} SSO token ${imported === 1 ? "entry" : "entries"} -> plugin state`);
 			if (skipped > 0) warnings.push(`Skipped ${skipped} malformed ${MSTEAMS_PLUGIN_ID} SSO token ${skipped === 1 ? "entry" : "entries"} during migration`);
-			await (0, openclaw_plugin_sdk_runtime_doctor_migrations.archiveLegacyStateSource)({
+			return completeLegacyKeyedImport({
 				filePath,
-				label: `${MSTEAMS_PLUGIN_ID} SSO-token`,
-				changes,
-				warnings
+				label: `${MSTEAMS_PLUGIN_ID} SSO token`,
+				archiveLabel: `${MSTEAMS_PLUGIN_ID} SSO-token`,
+				imported,
+				warnings,
+				stores: [{
+					store,
+					requiredKeys
+				}]
 			});
-			return {
-				changes,
-				warnings
-			};
 		}
 	},
 	{

package/dist/{messenger-BJB30CC2.cjs → messenger-BvR2flEt.cjs}

@@ -1,9 +1,9 @@
-const require_rolldown_runtime = require("./rolldown-runtime-D6vf50IK.cjs");
+const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 require("./runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-B6FQAa3r.cjs");
-const require_channel_setup = require("./channel.setup-BvYxZIFG.cjs");
-const require_polls = require("./polls-DvuJvaDG.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CoKmLXYe.cjs");
+const require_channel_setup = require("./channel.setup-D2YO3F4O.cjs");
+const require_polls = require("./polls-P86qBpeV.cjs");
 let openclaw_plugin_sdk_lazy_runtime = require("openclaw/plugin-sdk/lazy-runtime");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_provider_http = require("openclaw/plugin-sdk/provider-http");
@@ -161,12 +161,12 @@ async function uploadToConsentUrl(params) {
 //#endregion
 //#region extensions/msteams/src/pending-uploads-fs.ts
 /** TTL for persisted pending uploads (matches in-memory store). */
-const PENDING_UPLOAD_TTL_MS$1 = 300 * 1e3;
+const PENDING_UPLOAD_TTL_MS$1 = 3e5;
 /** Cap to avoid unbounded growth if a process crashes mid-flow. */
 const MAX_PENDING_UPLOADS = 100;
 const MAX_CHUNKS_PER_UPLOAD = 3072;
 const MAX_PENDING_UPLOAD_CHUNK_ROWS = 45e3;
-const RAW_CHUNK_BYTES = 36 * 1024;
+const RAW_CHUNK_BYTES = 36864;
 const PENDING_UPLOAD_META_MAX_ENTRIES = 200;
 const PENDING_UPLOAD_META_NAMESPACE = "pending-uploads";
 const PENDING_UPLOAD_CHUNKS_NAMESPACE = "pending-upload-chunks";
@@ -357,7 +357,7 @@ const { pendingUploads, pendingUploadTimers } = (0, openclaw_plugin_sdk_global_s
 	state.pendingUploads.clear();
 });
 /** TTL for pending uploads: 5 minutes */
-const PENDING_UPLOAD_TTL_MS = 300 * 1e3;
+const PENDING_UPLOAD_TTL_MS = 3e5;
 /**
 * Store a file pending user consent.
 * Returns the upload ID to include in the FileConsentCard context.
@@ -540,10 +540,10 @@ const MSTEAMS_MARKERS = {
 	}
 };
 function createTokenPrefix(text, label) {
-	const normalized = (0, openclaw_plugin_sdk_text_chunking.markdownToIR)(text, {
+	const normalized = /[\u{E000}&]/u.test(text) ? (0, openclaw_plugin_sdk_text_chunking.markdownToIR)(text, {
 		autolink: false,
 		linkify: false
-	}).text;
+	}).text : "";
 	let prefix;
 	do
 		prefix = `\u{E000}${label}-${(0, node_crypto.randomUUID)()}\u{E001}`;
@@ -887,14 +887,16 @@ function formatMSTeamsMarkdown(markdown, tableMode) {
 	const mentions = [];
 	const entities = [];
 	const tokenPrefix = createTokenPrefix(markdown, "msteamsformat");
-	const tableInput = (0, openclaw_plugin_sdk_text_chunking.convertMarkdownTables)(protectMSTeamsMentions(protectMarkdownImages(markdown.replace(MARKDOWN_ENTITY_RE, (entity) => {
+	const mentionsProtected = protectMSTeamsMentions(protectMarkdownImages(markdown.replace(MARKDOWN_ENTITY_RE, (entity) => {
 		const index = entities.push(entity) - 1;
 		return `${tokenPrefix}h${index}${TOKEN_END}`;
-	}), tokenPrefix, images), tokenPrefix, mentions), tableMode);
-	let restored = restoreTokens((0, openclaw_plugin_sdk_text_chunking.renderMarkdownWithMarkers)(prefixMSTeamsBlockquotes(protectMSTeamsCode((0, openclaw_plugin_sdk_text_chunking.markdownToIR)((tableMode === "off" ? protectRawTablesOutsideFences(tableInput, tokenPrefix, rawTables) : tableInput).replace(ESCAPED_MARKDOWN_RE, (escaped) => {
+	}), tokenPrefix, images), tokenPrefix, mentions);
+	const tableInput = (0, openclaw_plugin_sdk_text_chunking.convertMarkdownTables)(mentionsProtected, tableMode);
+	const protectedMarkdown = (tableMode === "off" ? protectRawTablesOutsideFences(tableInput, tokenPrefix, rawTables) : tableInput).replace(ESCAPED_MARKDOWN_RE, (escaped) => {
 		const index = escapedMarkdown.push(escaped) - 1;
 		return `${tokenPrefix}e${index}${TOKEN_END}`;
-	}), {
+	});
+	const ir = prefixMSTeamsBlockquotes(protectMSTeamsCode((0, openclaw_plugin_sdk_text_chunking.markdownToIR)(protectedMarkdown, {
 		autolink: false,
 		enableSpoilers: true,
 		enableTaskLists: true,
@@ -922,7 +924,8 @@ function formatMSTeamsMarkdown(markdown, tableMode) {
 			prefix: `${tokenPrefix}h`,
 			values: entities
 		}
-	])), {
+	]));
+	let restored = restoreTokens((0, openclaw_plugin_sdk_text_chunking.renderMarkdownWithMarkers)(ir, {
 		styleMarkers: MSTEAMS_MARKERS,
 		escapeText: (text) => text,
 		buildLink: (link) => ({
@@ -1068,7 +1071,10 @@ async function getChatMembers(params) {
 				},
 				signal
 			});
-			if (!res.ok) throw await require_resolve_allowlist.createMSTeamsHttpError(res, res.status === 403 ? "Get chat members failed; verify Graph chat-member permissions and tenant access policies" : "Get chat members failed");
+			if (!res.ok) {
+				const message = res.status === 403 ? "Get chat members failed; verify Graph chat-member permissions and tenant access policies" : "Get chat members failed";
+				throw await require_resolve_allowlist.createMSTeamsHttpError(res, message);
+			}
 			return ((await (0, openclaw_plugin_sdk_provider_http.readProviderJsonResponse)(res, "msteams.graph-upload.getChatMembers")).value ?? []).map((member) => ({ aadObjectId: member.userId ?? "" })).filter((member) => member.aadObjectId);
 		}
 	});
@@ -1423,12 +1429,12 @@ async function deleteMSTeamsActivityWithReference(app, source, activityId, optio
 * MSTeams-specific media size limit (100MB).
 * Higher than the default to support Teams file-consent and SharePoint uploads.
 */
-const MSTEAMS_MAX_MEDIA_BYTES = 100 * 1024 * 1024;
+const MSTEAMS_MAX_MEDIA_BYTES = 104857600;
 /**
 * Threshold for large files that require FileConsentCard flow in personal chats.
 * Files >= 4MB use consent flow; smaller images can use inline base64.
 */
-const FILE_CONSENT_THRESHOLD_BYTES = 4 * 1024 * 1024;
+const FILE_CONSENT_THRESHOLD_BYTES = 4194304;
 function normalizeConversationId(rawId) {
 	return rawId.split(";")[0] ?? rawId;
 }

package/dist/{oauth-BXQBTEta.cjs → oauth-BeROaYf0.cjs}

@@ -1,4 +1,4 @@
-const require_resolve_allowlist = require("./resolve-allowlist-B6FQAa3r.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CoKmLXYe.cjs");
 let openclaw_plugin_sdk_runtime_env = require("openclaw/plugin-sdk/runtime-env");
 let openclaw_plugin_sdk_provider_auth = require("openclaw/plugin-sdk/provider-auth");
 let openclaw_plugin_sdk_provider_auth_runtime = require("openclaw/plugin-sdk/provider-auth-runtime");
@@ -52,7 +52,7 @@ async function loginMSTeamsDelegated(ctx, params) {
 	try {
 		const { code } = await (0, openclaw_plugin_sdk_provider_auth_runtime.waitForLocalOAuthCallback)({
 			expectedState: state,
-			timeoutMs: 300 * 1e3,
+			timeoutMs: 3e5,
 			port: require_resolve_allowlist.MSTEAMS_OAUTH_CALLBACK_PORT,
 			callbackPath: require_resolve_allowlist.MSTEAMS_OAUTH_CALLBACK_PATH,
 			redirectUri: require_resolve_allowlist.MSTEAMS_OAUTH_REDIRECT_URI,
@@ -81,7 +81,8 @@ async function manualFlow(ctx, authUrl, state, verifier, params, cause) {
 	ctx.progress.update("OAuth URL ready");
 	ctx.log(`\nOpen this URL in your LOCAL browser:\n\n${authUrl}\n`);
 	ctx.progress.update("Waiting for you to paste the callback URL...");
-	const parsed = (0, openclaw_plugin_sdk_provider_auth_runtime.parseOAuthCallbackInput)(await ctx.prompt("Paste the redirect URL here: "), {
+	const callbackInput = await ctx.prompt("Paste the redirect URL here: ");
+	const parsed = (0, openclaw_plugin_sdk_provider_auth_runtime.parseOAuthCallbackInput)(callbackInput, {
 		missingState: "Missing 'state' parameter in URL. Paste the full redirect URL.",
 		invalidInput: "Paste the full redirect URL (including code and state parameters), not just the authorization code."
 	});

package/dist/{polls-DvuJvaDG.cjs → polls-P86qBpeV.cjs}

@@ -1,4 +1,4 @@
-const require_rolldown_runtime = require("./rolldown-runtime-D6vf50IK.cjs");
+const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_file_lock = require("openclaw/plugin-sdk/file-lock");
@@ -96,7 +96,7 @@ const MSTEAMS_CONVERSATIONS_LEGACY_FILENAME = "msteams-conversations.json";
 const MSTEAMS_CONVERSATIONS_NAMESPACE = "conversations";
 const MSTEAMS_MAX_CONVERSATIONS = 1e3;
 const MSTEAMS_SQLITE_MAX_CONVERSATION_ROWS = 2e3;
-const MSTEAMS_CONVERSATION_TTL_MS = 365 * 24 * 60 * 60 * 1e3;
+const MSTEAMS_CONVERSATION_TTL_MS = 31536e6;
 const CONVERSATION_MUTATION_KEY = "conversations";
 function createConversationStateStore(params) {
 	return require_runtime.getMSTeamsRuntime().state.openKeyedStore({
@@ -226,7 +226,7 @@ const MSTEAMS_MAX_POLLS = 1e3;
 const MSTEAMS_SQLITE_MAX_POLL_ROWS = 2e3;
 const MSTEAMS_POLL_VOTE_BUCKET_COUNT = 32;
 const MSTEAMS_MAX_POLL_VOTE_BUCKET_ROWS = 1001 * MSTEAMS_POLL_VOTE_BUCKET_COUNT;
-const MSTEAMS_POLL_TTL_MS = 720 * 60 * 60 * 1e3;
+const MSTEAMS_POLL_TTL_MS = 2592e6;
 const POLL_MUTATION_KEY = "polls";
 function normalizeChoiceValue(value) {
 	if (typeof value === "string") {
@@ -379,7 +379,8 @@ function selectRetainedMSTeamsPolls(polls) {
 }
 function normalizeMSTeamsPollSelections(poll, selections) {
 	const maxSelections = Math.max(1, poll.maxSelections);
-	return (0, openclaw_plugin_sdk_string_coerce_runtime.uniqueStrings)(selections.map((entry) => (0, openclaw_plugin_sdk_number_runtime.parseStrictNonNegativeInteger)(entry)).filter((value) => value !== void 0).filter((value) => value >= 0 && value < poll.options.length).map((value) => String(value))).slice(0, maxSelections);
+	const mapped = selections.map((entry) => (0, openclaw_plugin_sdk_number_runtime.parseStrictNonNegativeInteger)(entry)).filter((value) => value !== void 0).filter((value) => value >= 0 && value < poll.options.length).map((value) => String(value));
+	return (0, openclaw_plugin_sdk_string_coerce_runtime.uniqueStrings)(mapped).slice(0, maxSelections);
 }
 function splitMSTeamsPoll(poll) {
 	const { votes, ...metadata } = poll;

package/dist/qa-runner-api.cjs

@@ -2,7 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 let openclaw_plugin_sdk_qa_runner_runtime = require("openclaw/plugin-sdk/qa-runner-runtime");
 //#region extensions/msteams/src/qa/cli.ts
 const DEFAULT_MSTEAMS_QA_SCENARIOS = ["channel-canary"];
-const loadMSTeamsQaAdapterRuntime = (0, openclaw_plugin_sdk_qa_runner_runtime.createLazyCliRuntimeLoader)(() => Promise.resolve().then(() => require("./adapter.runtime-8g-MOPfb.cjs")));
+const loadMSTeamsQaAdapterRuntime = (0, openclaw_plugin_sdk_qa_runner_runtime.createLazyCliRuntimeLoader)(() => Promise.resolve().then(() => require("./adapter.runtime-DDuc7sKJ.cjs")));
 async function runQaMSTeams(options) {
 	await (0, openclaw_plugin_sdk_qa_runner_runtime.runLiveTransportQaSuiteCommand)({
 		channelId: "msteams",

package/dist/{reaction-types-dGkp4bkW.cjs → reaction-types-DcJBoyFP.cjs}

@@ -1,4 +1,4 @@
-const require_resolve_allowlist = require("./resolve-allowlist-B6FQAa3r.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CoKmLXYe.cjs");
 let openclaw_plugin_sdk_html_entity_runtime = require("openclaw/plugin-sdk/html-entity-runtime");
 //#region extensions/msteams/src/graph-thread.ts
 /**
@@ -62,9 +62,10 @@ async function fetchChatMessageText(token, chatId, messageId, deadline) {
 * replies but still in ascending order only.
 */
 async function fetchThreadReplies(token, groupId, channelId, messageId, limit = 50, deadline) {
+	const path = `/teams/${encodeURIComponent(groupId)}/channels/${encodeURIComponent(channelId)}/messages/${encodeURIComponent(messageId)}/replies?$top=${Math.min(Math.max(limit, 1), 50)}`;
 	return (await require_resolve_allowlist.fetchGraphJson({
 		token,
-		path: `/teams/${encodeURIComponent(groupId)}/channels/${encodeURIComponent(channelId)}/messages/${encodeURIComponent(messageId)}/replies?$top=${Math.min(Math.max(limit, 1), 50)}`,
+		path,
 		...deadline ? { deadline } : {}
 	})).value ?? [];
 }

package/dist/{resolve-allowlist-B6FQAa3r.cjs → resolve-allowlist-CoKmLXYe.cjs}

@@ -19,8 +19,8 @@ let openclaw_plugin_sdk_html_entity_runtime = require("openclaw/plugin-sdk/html-
 let openclaw_plugin_sdk_secret_input = require("openclaw/plugin-sdk/secret-input");
 //#region extensions/msteams/src/request-timeout.ts
 const MSTEAMS_REQUEST_TIMEOUT_MS = 3e4;
-const MSTEAMS_SHAREPOINT_UPLOAD_BASE_TIMEOUT_MS = 5 * 6e4;
-const MSTEAMS_SHAREPOINT_UPLOAD_MIN_BYTES_PER_SECOND = 256 * 1024;
+const MSTEAMS_SHAREPOINT_UPLOAD_BASE_TIMEOUT_MS = 3e5;
+const MSTEAMS_SHAREPOINT_UPLOAD_MIN_BYTES_PER_SECOND = 262144;
 const MSTEAMS_INBOUND_PREPROCESS_TIMEOUT_MS = 1e4;
 function createMSTeamsInboundDeadline() {
 	return (0, openclaw_plugin_sdk_provider_http.createProviderOperationDeadline)({
@@ -111,25 +111,6 @@ const DEFAULT_MEDIA_AUTH_HOST_ALLOWLIST = [
 	"graph.microsoft.cn"
 ];
 const GRAPH_ROOT = "https://graph.microsoft.com/v1.0";
-function estimateBase64DecodedBytes(base64) {
-	let effectiveLen = 0;
-	for (let i = 0; i < base64.length; i += 1) {
-		if (base64.charCodeAt(i) <= 32) continue;
-		effectiveLen += 1;
-	}
-	if (effectiveLen === 0) return 0;
-	let padding = 0;
-	let end = base64.length - 1;
-	while (end >= 0 && base64.charCodeAt(end) <= 32) end -= 1;
-	if (end >= 0 && base64[end] === "=") {
-		padding = 1;
-		end -= 1;
-		while (end >= 0 && base64.charCodeAt(end) <= 32) end -= 1;
-		if (end >= 0 && base64[end] === "=") padding = 2;
-	}
-	const estimated = Math.floor(effectiveLen * 3 / 4) - padding;
-	return Math.max(0, estimated);
-}
 /**
 * Host suffixes for SharePoint/OneDrive shared links that must be fetched via
 * the Graph `/shares/{shareId}/driveItem/content` endpoint instead of directly.
@@ -276,7 +257,7 @@ function decodeDataImageWithLimits(src, opts) {
 		candidate: null,
 		estimatedBytes: 0
 	};
-	const estimatedBytes = estimateBase64DecodedBytes(canonicalPayload);
+	const estimatedBytes = node_buffer.Buffer.byteLength(canonicalPayload, "base64");
 	if (estimatedBytes <= 0) return {
 		candidate: null,
 		estimatedBytes: 0
@@ -449,7 +430,7 @@ async function safeFetch(params) {
 	const resolveFn = params.resolveFn ?? node_dns_promises.lookup;
 	const hasDispatcher = Boolean(params.requestInit && typeof params.requestInit === "object" && "dispatcher" in params.requestInit);
 	const currentHeaders = new Headers(params.requestInit?.headers);
-	let currentUrl = params.url;
+	const currentUrl = params.url;
 	if (!isUrlAllowed(currentUrl, params.allowHosts)) throw new Error(`Initial download URL blocked: ${currentUrl}`);
 	if (currentHeaders.has("authorization") && params.authorizationAllowHosts && !isUrlAllowed(currentUrl, params.authorizationAllowHosts)) currentHeaders.delete("authorization");
 	if (!hasDispatcher) {
@@ -480,37 +461,29 @@ async function safeFetch(params) {
 		});
 		return (0, openclaw_plugin_sdk_fetch_runtime.responseWithRelease)(guarded.response, guarded.release);
 	}
-	if (resolveFn) try {
+	try {
 		const initialHost = new URL(currentUrl).hostname;
 		await resolveAndValidateIP(initialHost, resolveFn);
 	} catch {
 		throw new Error(`Initial download URL blocked: ${currentUrl}`);
 	}
-	for (let i = 0; i <= MAX_SAFE_REDIRECTS; i++) {
-		const res = await (params.fetchFn ?? fetch)(currentUrl, {
-			...params.requestInit,
-			headers: currentHeaders,
-			redirect: "manual"
-		});
-		if (!isRedirectStatus(res.status)) return res;
-		const location = res.headers.get("location");
-		if (!location) return res;
-		let redirectUrl;
-		try {
-			redirectUrl = new URL(location, currentUrl).toString();
-		} catch {
-			throw new Error(`Invalid redirect URL: ${location}`);
-		}
-		if (!isUrlAllowed(redirectUrl, params.allowHosts)) throw new Error(`Media redirect target blocked by allowlist: ${redirectUrl}`);
-		if (currentHeaders.has("authorization") && params.authorizationAllowHosts && !isUrlAllowed(redirectUrl, params.authorizationAllowHosts)) currentHeaders.delete("authorization");
-		if (hasDispatcher) return res;
-		if (resolveFn) {
-			const redirectHost = new URL(redirectUrl).hostname;
-			await resolveAndValidateIP(redirectHost, resolveFn);
-		}
-		currentUrl = redirectUrl;
+	const res = await (params.fetchFn ?? fetch)(currentUrl, {
+		...params.requestInit,
+		headers: currentHeaders,
+		redirect: "manual"
+	});
+	if (!isRedirectStatus(res.status)) return res;
+	const location = res.headers.get("location");
+	if (!location) return res;
+	let redirectUrl;
+	try {
+		redirectUrl = new URL(location, currentUrl).toString();
+	} catch {
+		throw new Error(`Invalid redirect URL: ${location}`);
 	}
-	throw new Error(`Too many redirects (>${MAX_SAFE_REDIRECTS})`);
+	if (!isUrlAllowed(redirectUrl, params.allowHosts)) throw new Error(`Media redirect target blocked by allowlist: ${redirectUrl}`);
+	if (currentHeaders.has("authorization") && params.authorizationAllowHosts && !isUrlAllowed(redirectUrl, params.authorizationAllowHosts)) currentHeaders.delete("authorization");
+	return res;
 }
 async function safeFetchWithPolicy(params) {
 	return await safeFetch({
@@ -920,7 +893,7 @@ function buildMSTeamsTokenEndpoint(tenantId) {
 //#endregion
 //#region extensions/msteams/src/oauth.token.ts
 /** Five-minute buffer subtracted from token expiry to avoid edge-case clock drift. */
-const EXPIRY_BUFFER_MS = 300 * 1e3;
+const EXPIRY_BUFFER_MS = 3e5;
 function createMSTeamsTokenBody(params) {
 	const body = new URLSearchParams({
 		client_id: params.clientId,
@@ -1115,8 +1088,9 @@ function escapeOData(value) {
 }
 async function requestGraph(params) {
 	const hasBody = params.body !== void 0;
+	const url = `${params.root ?? "https://graph.microsoft.com/v1.0"}${params.path}`;
 	const { response, release } = await (0, openclaw_plugin_sdk_ssrf_runtime.fetchWithSsrFGuard)({
-		url: `${params.root ?? "https://graph.microsoft.com/v1.0"}${params.path}`,
+		url,
 		init: {
 			method: params.method,
 			headers: {
@@ -1199,18 +1173,13 @@ async function fetchAllGraphPages(params) {
 			headers: params.headers
 		});
 		const pageItems = res.value ?? [];
-		if (params.findOne) {
-			const match = pageItems.find(params.findOne);
-			if (match) {
-				items.push(...pageItems);
-				return {
-					items,
-					truncated: false,
-					found: match
-				};
-			}
-		}
-		items.push(...pageItems);
+		const match = params.findOne ? pageItems.find(params.findOne) : void 0;
+		if (params.collectItems !== false) items.push(...pageItems);
+		if (match) return {
+			items,
+			truncated: false,
+			found: match
+		};
 		const rawNext = res["@odata.nextLink"];
 		if (rawNext) nextPath = rawNext.replace("https://graph.microsoft.com/v1.0", "").replace("https://graph.microsoft.com/beta", "");
 		else nextPath = void 0;
@@ -1953,6 +1922,12 @@ Object.defineProperty(exports, "extractMSTeamsQuoteInfo", {
 		return extractMSTeamsQuoteInfo;
 	}
 });
+Object.defineProperty(exports, "fetchAllGraphPages", {
+	enumerable: true,
+	get: function() {
+		return fetchAllGraphPages;
+	}
+});
 Object.defineProperty(exports, "fetchGraphAbsoluteUrl", {
 	enumerable: true,
 	get: function() {

package/dist/{rolldown-runtime-D6vf50IK.cjs → rolldown-runtime-VH7oDXx4.cjs}

@@ -15,7 +15,7 @@ var __copyProps = (to, from, except, desc) => {
 	}
 	return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
 	value: mod,
 	enumerable: true
 }) : target, mod));

package/dist/runtime-api.cjs

@@ -11,6 +11,7 @@ let openclaw_plugin_sdk_dangerous_name_runtime = require("openclaw/plugin-sdk/da
 let openclaw_plugin_sdk_runtime_group_policy = require("openclaw/plugin-sdk/runtime-group-policy");
 let openclaw_plugin_sdk_file_lock = require("openclaw/plugin-sdk/file-lock");
 let openclaw_plugin_sdk_media_runtime = require("openclaw/plugin-sdk/media-runtime");
+let openclaw_plugin_sdk_account_helpers = require("openclaw/plugin-sdk/account-helpers");
 let openclaw_plugin_sdk_outbound_media = require("openclaw/plugin-sdk/outbound-media");
 let openclaw_plugin_sdk_reply_payload = require("openclaw/plugin-sdk/reply-payload");
 let openclaw_plugin_sdk_ssrf_runtime = require("openclaw/plugin-sdk/ssrf-runtime");
@@ -164,7 +165,7 @@ Object.defineProperty(exports, "resolveChannelEntryMatchWithFallback", {
 Object.defineProperty(exports, "resolveChannelMediaMaxBytes", {
 	enumerable: true,
 	get: function() {
-		return openclaw_plugin_sdk_media_runtime.resolveChannelMediaMaxBytes;
+		return openclaw_plugin_sdk_account_helpers.resolveChannelMediaMaxBytes;
 	}
 });
 Object.defineProperty(exports, "resolveDefaultGroupPolicy", {