@openclaw/msteams 2026.9.34 → 2026.9.36

package/dist/.setup/{approval-handler.runtime-D1s7UR3U.cjs → approval-handler.runtime-Da7u1cF0.cjs}

@@ -1,7 +1,7 @@
-const require_resolve_allowlist = require("./resolve-allowlist-Pl_NQFYH.cjs");
-const require_channel = require("./channel-ByzS7QJ0.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CQFnY1-j.cjs");
+const require_channel = require("./channel-BXCVM26V.cjs");
 const require_approval_card = require("./approval-card-DWPDItvq.cjs");
-const require_send = require("./send-VUM7Sryb.cjs");
+const require_send = require("./send-CB-b2WAc.cjs");
 let openclaw_plugin_sdk_account_id = require("openclaw/plugin-sdk/account-id");
 let openclaw_plugin_sdk_approval_native_runtime = require("openclaw/plugin-sdk/approval-native-runtime");
 let openclaw_plugin_sdk_approval_handler_runtime = require("openclaw/plugin-sdk/approval-handler-runtime");

package/dist/.setup/{channel-ByzS7QJ0.cjs → channel-BXCVM26V.cjs}

@@ -1,9 +1,9 @@
 const require_rolldown_runtime = require("./rolldown-runtime-BloeesfJ.cjs");
 require("../runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-Pl_NQFYH.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CQFnY1-j.cjs");
 const require_directory_contract_api = require("../directory-contract-api.cjs");
-const require_thread_session = require("./thread-session--rw3BTal.cjs");
-const require_channel_setup = require("./channel.setup-DL8lcWT_.cjs");
+const require_thread_session = require("./thread-session-BkQzjhtJ.cjs");
+const require_channel_setup = require("./channel.setup-CTlKLkEP.cjs");
 let openclaw_plugin_sdk_approval_handler_adapter_runtime = require("openclaw/plugin-sdk/approval-handler-adapter-runtime");
 let openclaw_plugin_sdk_channel_actions = require("openclaw/plugin-sdk/channel-actions");
 let openclaw_plugin_sdk_channel_core = require("openclaw/plugin-sdk/channel-core");
@@ -393,7 +393,7 @@ const msTeamsLazyApprovalNativeRuntime = (0, openclaw_plugin_sdk_approval_handle
 		request
 	}),
 	load: async () => {
-		const { msTeamsApprovalNativeRuntime } = await Promise.resolve().then(() => require("./approval-handler.runtime-D1s7UR3U.cjs"));
+		const { msTeamsApprovalNativeRuntime } = await Promise.resolve().then(() => require("./approval-handler.runtime-Da7u1cF0.cjs"));
 		return msTeamsApprovalNativeRuntime;
 	}
 });
@@ -1039,7 +1039,7 @@ const collectMSTeamsSecurityFindings = openclaw_plugin_sdk_channel_policy.create
 	severity: "warn",
 	title: "MS Teams security warning"
 });
-const loadMSTeamsChannelRuntime = (0, openclaw_plugin_sdk_lazy_runtime.createLazyRuntimeNamedExport)(() => Promise.resolve().then(() => require("./channel.runtime-Baz8XDFs.cjs")), "msTeamsChannelRuntime");
+const loadMSTeamsChannelRuntime = (0, openclaw_plugin_sdk_lazy_runtime.createLazyRuntimeNamedExport)(() => Promise.resolve().then(() => require("./channel.runtime-CF1zg0CR.cjs")), "msTeamsChannelRuntime");
 const MSTEAMS_REACTION_TYPES = [
 	"like",
 	"heart",
@@ -1665,7 +1665,7 @@ const msteamsPlugin = (0, openclaw_plugin_sdk_channel_core.createChatChannelPlug
 			})
 		}),
 		gateway: { startAccount: async (ctx) => {
-			const { monitorMSTeamsProvider } = await Promise.resolve().then(() => require("./monitor-BJ7IyH4y.cjs"));
+			const { monitorMSTeamsProvider } = await Promise.resolve().then(() => require("./monitor-CGKsYj9l.cjs"));
 			const webhookPath = ctx.cfg.channels?.msteams?.webhook?.path || "/api/messages";
 			const statusSink = (0, openclaw_plugin_sdk_channel_outbound.createAccountStatusSink)({
 				accountId: ctx.accountId,

package/dist/.setup/{channel.runtime-Baz8XDFs.cjs → channel.runtime-CF1zg0CR.cjs}

@@ -1,11 +1,11 @@
 require("../runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-Pl_NQFYH.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CQFnY1-j.cjs");
 const require_delegated_state = require("./delegated-state-u-ywZyZT.cjs");
-const require_channel = require("./channel-ByzS7QJ0.cjs");
-const require_channel_setup = require("./channel.setup-DL8lcWT_.cjs");
-const require_conversation_store_state = require("./conversation-store-state-B7JuyZTm.cjs");
-const require_send = require("./send-VUM7Sryb.cjs");
-const require_reaction_types = require("./reaction-types-CQ4oSUe7.cjs");
+const require_channel = require("./channel-BXCVM26V.cjs");
+const require_channel_setup = require("./channel.setup-CTlKLkEP.cjs");
+const require_conversation_store_state = require("./conversation-store-state-tQtK-Qm3.cjs");
+const require_send = require("./send-CB-b2WAc.cjs");
+const require_reaction_types = require("./reaction-types-iKb8qkSt.cjs");
 let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_reply_payload = require("openclaw/plugin-sdk/reply-payload");

package/dist/.setup/{channel.setup-DL8lcWT_.cjs → channel.setup-CTlKLkEP.cjs}

@@ -1,4 +1,4 @@
-const require_resolve_allowlist = require("./resolve-allowlist-Pl_NQFYH.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CQFnY1-j.cjs");
 const require_delegated_state = require("./delegated-state-u-ywZyZT.cjs");
 const require_config_schema = require("./config-schema-0KoBzb0t.cjs");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
@@ -475,7 +475,7 @@ const msteamsSetupWizard = {
 				};
 				let oauthModule;
 				try {
-					oauthModule = await Promise.resolve().then(() => require("./oauth-DQjOnJ4l.cjs"));
+					oauthModule = await Promise.resolve().then(() => require("./oauth-Dvl_2VcZ.cjs"));
 				} catch (err) {
 					await noteDelegatedAuthFailure(err);
 					return {

package/dist/.setup/{conversation-store-state-B7JuyZTm.cjs → conversation-store-state-tQtK-Qm3.cjs}

@@ -1,9 +1,9 @@
 const require_rolldown_runtime = require("./rolldown-runtime-BloeesfJ.cjs");
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 require("../runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-Pl_NQFYH.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CQFnY1-j.cjs");
 const require_bot_framework_service_url = require("./bot-framework-service-url-BUhTe8F3.cjs");
-const require_channel_setup = require("./channel.setup-DL8lcWT_.cjs");
+const require_channel_setup = require("./channel.setup-CTlKLkEP.cjs");
 let openclaw_plugin_sdk_lazy_runtime = require("openclaw/plugin-sdk/lazy-runtime");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_fetch_runtime = require("openclaw/plugin-sdk/fetch-runtime");

package/dist/.setup/{monitor-BJ7IyH4y.cjs → monitor-CGKsYj9l.cjs}

@@ -1,14 +1,14 @@
 const require_rolldown_runtime = require("./rolldown-runtime-BloeesfJ.cjs");
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 require("../runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-Pl_NQFYH.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CQFnY1-j.cjs");
 const require_bot_framework_service_url = require("./bot-framework-service-url-BUhTe8F3.cjs");
-const require_channel = require("./channel-ByzS7QJ0.cjs");
-const require_thread_session = require("./thread-session--rw3BTal.cjs");
-const require_channel_setup = require("./channel.setup-DL8lcWT_.cjs");
+const require_channel = require("./channel-BXCVM26V.cjs");
+const require_thread_session = require("./thread-session-BkQzjhtJ.cjs");
+const require_channel_setup = require("./channel.setup-CTlKLkEP.cjs");
 const require_approval_card = require("./approval-card-DWPDItvq.cjs");
-const require_conversation_store_state = require("./conversation-store-state-B7JuyZTm.cjs");
-const require_reaction_types = require("./reaction-types-CQ4oSUe7.cjs");
+const require_conversation_store_state = require("./conversation-store-state-tQtK-Qm3.cjs");
+const require_reaction_types = require("./reaction-types-iKb8qkSt.cjs");
 let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
@@ -769,9 +769,8 @@ function extractMSTeamsHtmlAttachmentIds(attachments) {
 	for (const att of list) {
 		const html = require_resolve_allowlist.extractHtmlFromAttachment(att);
 		if (!html) continue;
-		require_resolve_allowlist.ATTACHMENT_TAG_RE.lastIndex = 0;
-		for (const match of html.matchAll(require_resolve_allowlist.ATTACHMENT_TAG_RE)) {
-			const id = match[1]?.trim();
+		for (const value of require_resolve_allowlist.htmlTagAttributeValues(html, "attachment", "id")) {
+			const id = value.trim();
 			if (id) ids.add(id);
 		}
 	}
@@ -791,20 +790,18 @@ function summarizeMSTeamsHtmlAttachments(attachments) {
 		const html = require_resolve_allowlist.extractHtmlFromAttachment(att);
 		if (!html) continue;
 		htmlAttachments += 1;
-		require_resolve_allowlist.IMG_SRC_RE.lastIndex = 0;
-		for (const match of html.matchAll(require_resolve_allowlist.IMG_SRC_RE)) {
+		for (const value of require_resolve_allowlist.htmlTagAttributeValues(html, "img", "src")) {
 			imgTags += 1;
-			const src = match[1]?.trim();
+			const src = value.trim();
 			if (src) {
 				if (src.startsWith("data:")) dataImages += 1;
 				else if (src.startsWith("cid:")) cidImages += 1;
 				else srcHosts.add(require_resolve_allowlist.safeHostForUrl(src));
 			}
 		}
-		require_resolve_allowlist.ATTACHMENT_TAG_RE.lastIndex = 0;
-		for (const attachmentMatch of html.matchAll(require_resolve_allowlist.ATTACHMENT_TAG_RE)) {
+		for (const value of require_resolve_allowlist.htmlTagAttributeValues(html, "attachment", "id")) {
 			attachmentTags += 1;
-			const id = attachmentMatch[1]?.trim();
+			const id = value.trim();
 			if (id) attachmentIds.add(id);
 		}
 	}
@@ -4115,6 +4112,7 @@ async function monitorMSTeamsProvider(opts) {
 	} catch (err) {
 		runtime.error?.(`msteams resolve failed; mutable allowlist entries are disabled. ${require_channel_setup.formatUnknownError(err)}`);
 	}
+	if (Array.isArray(configuredGroupAllowFrom)) groupAllowFrom = require_resolve_allowlist.keepConfiguredMSTeamsAllowlistActive(configuredGroupAllowFrom, groupAllowFrom);
 	if (configuredGroupAllowFrom == null && groupAllowFrom) groupAllowFrom = (0, openclaw_plugin_sdk_allow_from.mergeAllowlist)({
 		existing: groupAllowFrom,
 		additions: allowFrom ?? []

package/dist/.setup/{oauth-DQjOnJ4l.cjs → oauth-Dvl_2VcZ.cjs}

@@ -1,4 +1,4 @@
-const require_resolve_allowlist = require("./resolve-allowlist-Pl_NQFYH.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CQFnY1-j.cjs");
 let openclaw_plugin_sdk_runtime_env = require("openclaw/plugin-sdk/runtime-env");
 let openclaw_plugin_sdk_provider_auth = require("openclaw/plugin-sdk/provider-auth");
 let openclaw_plugin_sdk_provider_auth_runtime = require("openclaw/plugin-sdk/provider-auth-runtime");

package/dist/.setup/{reaction-types-CQ4oSUe7.cjs → reaction-types-iKb8qkSt.cjs}

@@ -1,4 +1,4 @@
-const require_resolve_allowlist = require("./resolve-allowlist-Pl_NQFYH.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CQFnY1-j.cjs");
 //#region extensions/msteams/src/graph-thread.ts
 /**
 * Strip HTML tags from Teams message content, preserving @mention display names.

package/dist/.setup/{resolve-allowlist-Pl_NQFYH.cjs → resolve-allowlist-CQFnY1-j.cjs}

@@ -64,8 +64,48 @@ async function withMSTeamsAbortableRequestTimeout(params) {
 //#endregion
 //#region extensions/msteams/src/attachments/shared.ts
 const IMAGE_EXT_RE = /\.(avif|bmp|gif|heic|heif|jpe?g|png|tiff?|webp)$/i;
-const IMG_SRC_RE = /<img[^>]+src=["']([^"']+)["'][^>]*>/gi;
-const ATTACHMENT_TAG_RE = /<attachment[^>]+id=["']([^"']+)["'][^>]*>/gi;
+/**
+* Values of `attr` on each `<tag ...>` in document order, matching the captures of
+* `/<tag[^>]+attr=["']([^"']+)["'][^>]*>/gi`: the last attribute spelling inside the
+* tag wins, and a quoted value may contain `>`. Each `<tag` start is resolved from
+* precomputed next-`>` and next-quote positions in one forward pass.
+*/
+function htmlTagAttributeValues(html, tag, attr) {
+	const length = html.length;
+	const nextGt = new Int32Array(length + 1).fill(length);
+	const nextQuote = new Int32Array(length + 1).fill(length);
+	for (let index = length - 1; index >= 0; index -= 1) {
+		const char = html[index];
+		nextGt[index] = char === ">" ? index : nextGt[index + 1];
+		nextQuote[index] = char === "\"" || char === "'" ? index : nextQuote[index + 1];
+	}
+	const candidates = [];
+	for (const match of html.matchAll(new RegExp(`${attr}=["']`, "gi"))) {
+		const valueStart = match.index + match[0].length;
+		const valueEnd = nextQuote[valueStart];
+		if (valueEnd > valueStart && valueEnd < length && nextGt[valueEnd + 1] < length) candidates.push({
+			start: match.index,
+			valueStart,
+			valueEnd,
+			end: nextGt[valueEnd + 1] + 1
+		});
+	}
+	const values = [];
+	let resumeAt = 0;
+	let pastWindow = 0;
+	for (const open of html.matchAll(new RegExp(`<${tag}`, "gi"))) {
+		if (open.index < resumeAt) continue;
+		const nameEnd = open.index + open[0].length;
+		const lastStart = nextGt[nameEnd];
+		while (pastWindow < candidates.length && candidates[pastWindow].start <= lastStart) pastWindow += 1;
+		const candidate = candidates[pastWindow - 1];
+		if (candidate && candidate.start > nameEnd) {
+			values.push(html.slice(candidate.valueStart, candidate.valueEnd));
+			resumeAt = candidate.end;
+		}
+	}
+	return values;
+}
 const GRAPH_HOSTED_CONTENT_SRC_RE = /\/hostedContents\/([^/?#]+)/i;
 function resolveInlineImageSourceId(src) {
 	const hostedContentId = GRAPH_HOSTED_CONTENT_SRC_RE.exec(src)?.[1];
@@ -222,9 +262,8 @@ function extractInlineImageReferences(attachments) {
 	for (const att of attachments) {
 		const html = extractHtmlFromAttachment(att);
 		if (!html) continue;
-		IMG_SRC_RE.lastIndex = 0;
-		for (const match of html.matchAll(IMG_SRC_RE)) {
-			const src = match[1]?.trim();
+		for (const value of htmlTagAttributeValues(html, "img", "src")) {
+			const src = value.trim();
 			if (src) {
 				if (src.startsWith("data:")) out.push({
 					kind: "data",
@@ -1114,6 +1153,34 @@ function htmlToPlainText(html) {
 	return (0, openclaw_plugin_sdk_html_entity_runtime.decodeHtmlEntities)(html.replace(/<[^>]*>/g, " ")).replaceAll("\xA0", " ").replace(/\s+/g, " ").trim();
 }
 /**
+* Content of the first `<p ...>` whose opening tag contains `attribute`, up to the next
+* `</p>`, matching `/<p[^>]*ATTRIBUTE[^>]*>(.*?)<\/p>/is`. Opening tags, attribute
+* matches and `>` positions are all visited in one forward pass.
+*/
+function findParagraphContent(html, attribute) {
+	const attributes = Array.from(html.matchAll(attribute), (match) => ({
+		start: match.index,
+		end: match.index + match[0].length
+	}));
+	let nextAttribute = 0;
+	let tagEnd = -1;
+	for (const open of html.matchAll(/<p/gi)) {
+		const afterOpen = open.index + open[0].length;
+		if (tagEnd < afterOpen) {
+			tagEnd = html.indexOf(">", afterOpen);
+			if (tagEnd < 0) return;
+		}
+		while (nextAttribute < attributes.length && attributes[nextAttribute].start < afterOpen) nextAttribute += 1;
+		const match = attributes[nextAttribute];
+		if (match && match.end <= tagEnd) {
+			const close = /<\/p>/gi;
+			close.lastIndex = tagEnd + 1;
+			const closeMatch = close.exec(html);
+			return closeMatch ? html.slice(tagEnd + 1, closeMatch.index) : void 0;
+		}
+	}
+}
+/**
 * Extract quote info from MS Teams HTML reply attachments.
 * Teams wraps quoted content in a blockquote with itemtype="http://schema.skype.com/Reply".
 */
@@ -1129,8 +1196,8 @@ function extractMSTeamsQuoteInfo(attachments) {
 		if (!content.includes("http://schema.skype.com/Reply")) continue;
 		const senderMatch = /<strong[^>]*itemprop=["']mri["'][^>]*>(.*?)<\/strong>/i.exec(content);
 		const sender = senderMatch?.[1] ? htmlToPlainText(senderMatch[1]) : void 0;
-		const bodyMatch = /<p[^>]*itemprop=["']copy["'][^>]*>(.*?)<\/p>/is.exec(content) ?? /<p[^>]*itemprop=["']preview["'][^>]*>(.*?)<\/p>/is.exec(content);
-		const body = bodyMatch?.[1] ? htmlToPlainText(bodyMatch[1]) : void 0;
+		const bodyHtml = findParagraphContent(content, /itemprop=["']copy["']/gi) ?? findParagraphContent(content, /itemprop=["']preview["']/gi);
+		const body = bodyHtml ? htmlToPlainText(bodyHtml) : void 0;
 		const id = /<blockquote[^>]*\bitemid=["']([^"']+)["'][^>]*>/is.exec(content)?.[1]?.trim() || void 0;
 		if (body) return {
 			sender: sender ?? "unknown",
@@ -1167,6 +1234,12 @@ const MSTEAMS_GROUP_CONVERSATION_ID = /^19:.+@thread\.(?:tacv2|skype|v2)$/i;
 function normalizeExactMatch(value) {
 	return (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeLowercaseStringOrEmpty)(value ?? "");
 }
+const MSTEAMS_UNMATCHABLE_THREAD_ID = "19:openclaw-unresolved-allowlist@thread.unresolved";
+/** Keeps a configured but fully unresolvable sender allowlist configured and matching nothing. */
+function keepConfiguredMSTeamsAllowlistActive(configured, projected) {
+	if (!Array.isArray(configured) || configured.every((entry) => !entry?.trim())) return projected;
+	return projected && projected.length > 0 ? projected : [MSTEAMS_UNMATCHABLE_THREAD_ID];
+}
 function uniqueItemsById(items) {
 	const byId = /* @__PURE__ */ new Map();
 	for (const item of items) {
@@ -1288,7 +1361,7 @@ function looksLikeMSTeamsThreadConversationId(raw) {
 function isStableMSTeamsTeamKey(raw) {
 	return /^[0-9a-fA-F-]{16,}$/.test(raw.trim()) || looksLikeMSTeamsThreadConversationId(raw);
 }
-function projectStableMSTeamsChannels(channels) {
+function projectStableMSTeamsChannels(channels, options = {}) {
 	const projected = {};
 	for (const [channelKey, channelConfig] of Object.entries(channels ?? {})) {
 		if (channelKey === "*") {
@@ -1297,21 +1370,45 @@ function projectStableMSTeamsChannels(channels) {
 		}
 		if (looksLikeMSTeamsThreadConversationId(channelKey)) projected[normalizeMSTeamsConversationTargetId(channelKey)] = channelConfig;
 	}
+	if (options.keepConfigured && Object.keys(channels ?? {}).length > 0 && Object.keys(projected).length === 0) projected[MSTEAMS_UNMATCHABLE_THREAD_ID] = {};
 	return projected;
 }
-function projectStableMSTeamsTeamsConfig(teams) {
-	if (!teams) return;
+/** Drops the unmatchable placeholders once a real entry exists beside them. */
+function dropRedundantUnmatchablePlaceholders(teams) {
+	const realTeamKeys = Object.keys(teams).filter((key) => key !== MSTEAMS_UNMATCHABLE_THREAD_ID);
+	const cleaned = {};
+	for (const [teamKey, teamConfig] of Object.entries(teams)) {
+		if (teamKey === MSTEAMS_UNMATCHABLE_THREAD_ID && realTeamKeys.length > 0) continue;
+		const channels = { ...teamConfig.channels };
+		if (Object.keys(channels).length > 1) delete channels[MSTEAMS_UNMATCHABLE_THREAD_ID];
+		cleaned[teamKey] = {
+			...teamConfig,
+			channels
+		};
+	}
+	return cleaned;
+}
+function projectStableMSTeamsTeams(teams) {
 	const projected = {};
 	for (const [teamKey, teamConfig] of Object.entries(teams)) {
 		if (teamKey !== "*" && !isStableMSTeamsTeamKey(teamKey)) continue;
 		const stableKey = teamKey === "*" ? teamKey : normalizeMSTeamsConversationTargetId(teamKey);
 		projected[stableKey] = {
 			...teamConfig,
-			channels: projectStableMSTeamsChannels(teamConfig.channels)
+			channels: projectStableMSTeamsChannels(teamConfig.channels, { keepConfigured: true })
 		};
 	}
 	return projected;
 }
+/** Keeps a configured but fully unresolvable teams allowlist configured and matching nothing. */
+function keepConfiguredMSTeamsTeamsActive(configured, teams) {
+	if (Object.keys(configured).length === 0 || Object.keys(teams).length > 0) return teams;
+	return { [MSTEAMS_UNMATCHABLE_THREAD_ID]: {} };
+}
+function projectStableMSTeamsTeamsConfig(teams) {
+	if (!teams) return;
+	return keepConfiguredMSTeamsTeamsActive(teams, projectStableMSTeamsTeams(teams));
+}
 function parseMSTeamsTeamChannelInput(raw) {
 	const trimmed = stripProviderPrefix(raw).trim();
 	if (!trimmed) return {};
@@ -1506,7 +1603,7 @@ async function resolveMSTeamsTeamsConfig(params) {
 		teamIdMode: params.teamIdMode
 	});
 	const mapping = [];
-	const teams = projectStableMSTeamsTeamsConfig(params.teams) ?? {};
+	const teams = projectStableMSTeamsTeams(params.teams);
 	resolved.forEach((entry, index) => {
 		const source = entries[index];
 		if (!source) return;
@@ -1544,7 +1641,7 @@ async function resolveMSTeamsTeamsConfig(params) {
 		}
 	});
 	return {
-		teams,
+		teams: keepConfiguredMSTeamsTeamsActive(params.teams, dropRedundantUnmatchablePlaceholders(teams)),
 		mapping,
 		unresolved
 	};
@@ -1599,24 +1696,12 @@ async function resolveMSTeamsUserAllowlist(params) {
 	});
 }
 //#endregion
-Object.defineProperty(exports, "ATTACHMENT_TAG_RE", {
-	enumerable: true,
-	get: function() {
-		return ATTACHMENT_TAG_RE;
-	}
-});
 Object.defineProperty(exports, "GRAPH_ROOT", {
 	enumerable: true,
 	get: function() {
 		return GRAPH_ROOT;
 	}
 });
-Object.defineProperty(exports, "IMG_SRC_RE", {
-	enumerable: true,
-	get: function() {
-		return IMG_SRC_RE;
-	}
-});
 Object.defineProperty(exports, "MSTEAMS_DEFAULT_DELEGATED_SCOPES", {
 	enumerable: true,
 	get: function() {
@@ -1767,6 +1852,12 @@ Object.defineProperty(exports, "hasConfiguredMSTeamsCredentials", {
 		return hasConfiguredMSTeamsCredentials;
 	}
 });
+Object.defineProperty(exports, "htmlTagAttributeValues", {
+	enumerable: true,
+	get: function() {
+		return htmlTagAttributeValues;
+	}
+});
 Object.defineProperty(exports, "htmlToPlainText", {
 	enumerable: true,
 	get: function() {
@@ -1797,6 +1888,12 @@ Object.defineProperty(exports, "isRedirectStatus", {
 		return isRedirectStatus;
 	}
 });
+Object.defineProperty(exports, "keepConfiguredMSTeamsAllowlistActive", {
+	enumerable: true,
+	get: function() {
+		return keepConfiguredMSTeamsAllowlistActive;
+	}
+});
 Object.defineProperty(exports, "listChannelsForTeam", {
 	enumerable: true,
 	get: function() {

package/dist/.setup/{send-VUM7Sryb.cjs → send-CB-b2WAc.cjs}

@@ -1,10 +1,10 @@
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 require("../runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-Pl_NQFYH.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CQFnY1-j.cjs");
 const require_bot_framework_service_url = require("./bot-framework-service-url-BUhTe8F3.cjs");
-const require_channel = require("./channel-ByzS7QJ0.cjs");
-const require_channel_setup = require("./channel.setup-DL8lcWT_.cjs");
-const require_conversation_store_state = require("./conversation-store-state-B7JuyZTm.cjs");
+const require_channel = require("./channel-BXCVM26V.cjs");
+const require_channel_setup = require("./channel.setup-CTlKLkEP.cjs");
+const require_conversation_store_state = require("./conversation-store-state-tQtK-Qm3.cjs");
 let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_error_runtime = require("openclaw/plugin-sdk/error-runtime");

package/dist/.setup/{setup-plugin-api-Dyf8kF-l.cjs → setup-plugin-api-GLQ9kPOr.cjs}

@@ -1,3 +1,3 @@
-const require_channel_setup = require("./channel.setup-DL8lcWT_.cjs");
+const require_channel_setup = require("./channel.setup-CTlKLkEP.cjs");
 require("../setup-plugin-api.cjs");
 exports.msteamsSetupPlugin = require_channel_setup.msteamsSetupPlugin;

package/dist/.setup/{thread-session--rw3BTal.cjs → thread-session-BkQzjhtJ.cjs}

@@ -1,4 +1,4 @@
-const require_resolve_allowlist = require("./resolve-allowlist-Pl_NQFYH.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CQFnY1-j.cjs");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_approval_auth_runtime = require("openclaw/plugin-sdk/approval-auth-runtime");
 let openclaw_plugin_sdk_routing = require("openclaw/plugin-sdk/routing");

package/dist/.source-module-urls/f5eb4efa8aa949f29b0b6350e09c004cee922a68414b0f13f9b6615b02452678.json

@@ -0,0 +1 @@
+{"version":3,"entries":[{"output":"api.cjs","source":"extensions/msteams/api.ts"},{"output":"channel-config-api.cjs","source":"extensions/msteams/channel-config-api.ts"},{"output":"channel-plugin-api.cjs","source":"extensions/msteams/channel-plugin-api.ts"},{"output":"configured-state.cjs","source":"extensions/msteams/configured-state.ts"},{"output":"directory-contract-api.cjs","source":"extensions/msteams/directory-contract-api.ts"},{"output":"doctor-contract-api.cjs","source":"extensions/msteams/doctor-contract-api.ts"},{"output":"index.cjs","source":"extensions/msteams/index.ts"},{"output":"qa-runner-api.cjs","source":"extensions/msteams/qa-runner-api.ts"},{"output":"runtime-api.cjs","source":"extensions/msteams/runtime-api.ts"},{"output":"secret-contract-api.cjs","source":"extensions/msteams/secret-contract-api.ts"},{"output":"setup-entry.cjs","source":"extensions/msteams/setup-entry.ts"},{"output":"setup-plugin-api.cjs","source":"extensions/msteams/setup-plugin-api.ts"}],"chunks":[{"output":".setup/adapter.runtime-BiWeMKXE.cjs","sha256":"0955d5767a9ae029b5e63bd0409270c1a4796549abfb0ac4999bb01f017d7584","facadeSource":"extensions/msteams/src/qa/adapter.runtime.ts","sources":["extensions/msteams/src/qa/adapter.runtime.ts","extensions/msteams/src/qa/bot-framework-server.ts"]},{"output":".setup/approval-card-DWPDItvq.cjs","sha256":"7f9ec8b926c94dc0d2f9bfd7c50a0a3308a8689a1038acbdaef3c283d71663b5","facadeSource":null,"sources":["extensions/msteams/src/approval-card-actions.ts","extensions/msteams/src/approval-card.ts"]},{"output":".setup/approval-handler.runtime-Da7u1cF0.cjs","sha256":"c92709b7581be26fbfeff5fcd5ba431f0a7ff0a863d71bbf84ca840eae469d1e","facadeSource":"extensions/msteams/src/approval-handler.runtime.ts","sources":["extensions/msteams/src/approval-handler.runtime.ts"]},{"output":".setup/bot-framework-service-url-BUhTe8F3.cjs","sha256":"8b2be17e2613a60bcea30ff7b72994f1e86b7fa2a41c8b03c07197440a9b5db9","facadeSource":null,"sources":["extensions/msteams/src/bot-framework-service-url.ts"]},{"output":".setup/channel-BXCVM26V.cjs","sha256":"95eacc729ac9132b0096ab64a6e697a636fdef71747ae1c2a7ea2d42e56dd51f","facadeSource":null,"sources":["extensions/msteams/src/action-params.ts","extensions/msteams/src/action-results.ts","extensions/msteams/src/action-threading.ts","extensions/msteams/src/approval-native.ts","extensions/msteams/src/channel.ts","extensions/msteams/src/doctor.ts","extensions/msteams/src/graph-action-context.ts","extensions/msteams/src/policy.ts","extensions/msteams/src/presentation.ts","extensions/msteams/src/read-policy.ts","extensions/msteams/src/session-route.ts","extensions/msteams/src/webhook-route.ts","packages/normalization-core/src/string-coerce.ts","src/gateway/gateway-http-route-contracts.ts","src/gateway/security-path.ts","src/gateway/server/plugins-http/path-context.ts","src/plugins/http-path-prefix.ts"]},{"output":".setup/channel.runtime-CF1zg0CR.cjs","sha256":"f4e78a2e086e4966fcbe199e0336040030fc38d261ea1a62fa8b4b3e4281b55c","facadeSource":"extensions/msteams/src/channel.runtime.ts","sources":["extensions/msteams/src/channel.runtime.ts","extensions/msteams/src/directory-live.ts","extensions/msteams/src/graph-conversation-members.ts","extensions/msteams/src/graph-group-management.ts","extensions/msteams/src/graph-members.ts","extensions/msteams/src/graph-messages.ts","extensions/msteams/src/graph-teams.ts","extensions/msteams/src/outbound.ts","extensions/msteams/src/probe.ts"]},{"output":".setup/channel.setup-CTlKLkEP.cjs","sha256":"bf0774e255071187e50335b8d1b9c32e4b3ebfff0dbafd58b7619235e6edd665","facadeSource":null,"sources":["extensions/msteams/src/channel-config.ts","extensions/msteams/src/channel.setup.ts","extensions/msteams/src/errors.ts","extensions/msteams/src/setup-core.ts","extensions/msteams/src/setup-surface.ts"]},{"output":".setup/config-schema-0KoBzb0t.cjs","sha256":"66b2e92f7913c694e31076a4d67da0d34209e63c4e0c5e5bd201eabd5c30fed9","facadeSource":null,"sources":["extensions/msteams/src/config-schema.ts","extensions/msteams/src/config-ui-hints.ts"]},{"output":".setup/conversation-store-state-tQtK-Qm3.cjs","sha256":"d51fa710d1958d2ad9b175793adea3596e0e44532558c5e7d1e2ba54608a921f","facadeSource":null,"sources":["extensions/msteams/src/conversation-store-helpers.ts","extensions/msteams/src/conversation-store-state.ts","extensions/msteams/src/file-consent-helpers.ts","extensions/msteams/src/file-consent.ts","extensions/msteams/src/format.ts","extensions/msteams/src/graph-chat.ts","extensions/msteams/src/graph-upload.ts","extensions/msteams/src/media-helpers.ts","extensions/msteams/src/mentions.ts","extensions/msteams/src/message-activity.ts","extensions/msteams/src/messenger.ts","extensions/msteams/src/pending-uploads-fs.ts","extensions/msteams/src/pending-uploads.ts","extensions/msteams/src/polls.ts","extensions/msteams/src/revoked-context.ts","extensions/msteams/src/sdk-proactive.ts","extensions/msteams/src/sent-message-cache.ts","extensions/msteams/src/sqlite-state.ts"]},{"output":".setup/delegated-state-u-ywZyZT.cjs","sha256":"12ac11581defd2750c6c567a54e5590e76289307be8d6fa4740b0ca918637534","facadeSource":null,"sources":["extensions/msteams/src/delegated-state.ts"]},{"output":".setup/monitor-CGKsYj9l.cjs","sha256":"0d60bef06e2d8226c5b01c31272fe024007b0c619fc2b1870a7cae25c7f9f061","facadeSource":"extensions/msteams/src/monitor.ts","sources":["extensions/msteams/src/adaptive-card-submit.ts","extensions/msteams/src/approval-card-submit.ts","extensions/msteams/src/attachments/bot-framework.ts","extensions/msteams/src/attachments/download.ts","extensions/msteams/src/attachments/graph.ts","extensions/msteams/src/attachments/html.ts","extensions/msteams/src/attachments/remote-media.ts","extensions/msteams/src/feedback-invoke.ts","extensions/msteams/src/feedback-reflection-store.ts","extensions/msteams/src/feedback-reflection.ts","extensions/msteams/src/file-consent-invoke.ts","extensions/msteams/src/monitor-handler.ts","extensions/msteams/src/monitor-handler/access.ts","extensions/msteams/src/monitor-handler/inbound-content.ts","extensions/msteams/src/monitor-handler/inbound-dispatch.ts","extensions/msteams/src/monitor-handler/inbound-facts.ts","extensions/msteams/src/monitor-handler/inbound-media.ts","extensions/msteams/src/monitor-handler/message-handler.ts","extensions/msteams/src/monitor-handler/reaction-handler.ts","extensions/msteams/src/monitor-handler/thread-context.ts","extensions/msteams/src/monitor-status.ts","extensions/msteams/src/monitor.ts","extensions/msteams/src/msteams-ingress.ts","extensions/msteams/src/replay-context.ts","extensions/msteams/src/reply-dispatcher.ts","extensions/msteams/src/reply-stream-controller.ts","extensions/msteams/src/sso-token-store.ts","extensions/msteams/src/team-identity.ts","extensions/msteams/src/thread-parent-context.ts","extensions/msteams/src/webhook-handler.ts","extensions/msteams/src/welcome-card.ts","src/channels/mention-gating.ts"]},{"output":".setup/oauth-Dvl_2VcZ.cjs","sha256":"38d28068277d50adfd1cdbedf8bba9b9dcd76a157878fd094ee4208671328c3e","facadeSource":"extensions/msteams/src/oauth.ts","sources":["extensions/msteams/src/oauth.flow.ts","extensions/msteams/src/oauth.ts"]},{"output":".setup/reaction-types-iKb8qkSt.cjs","sha256":"587f5cdf2908e70dc16fa5e87b47a63be09278e5de26b12fd2619beb08698262","facadeSource":null,"sources":["extensions/msteams/src/graph-thread.ts","extensions/msteams/src/reaction-types.ts"]},{"output":".setup/resolve-allowlist-CQFnY1-j.cjs","sha256":"3c2338e02344bcc4caa50c2e975bb56aa46c4093251aa53cd7a484be75f1079a","facadeSource":null,"sources":["extensions/msteams/src/attachments/shared.ts","extensions/msteams/src/cloud.ts","extensions/msteams/src/graph-users.ts","extensions/msteams/src/graph.ts","extensions/msteams/src/inbound.ts","extensions/msteams/src/oauth.shared.ts","extensions/msteams/src/oauth.token.ts","extensions/msteams/src/qa/private-runtime.ts","extensions/msteams/src/request-timeout.ts","extensions/msteams/src/resolve-allowlist.ts","extensions/msteams/src/sdk.ts","extensions/msteams/src/send-handoff.ts","extensions/msteams/src/token.ts","extensions/msteams/src/user-agent.ts"]},{"output":".setup/rolldown-runtime-BloeesfJ.cjs","sha256":"f6d735fe8d12fdafd7b0aba5388ce3cd75a782df76da5377cba1663718459d5b","facadeSource":null,"sources":[]},{"output":".setup/runtime-gZTAuFux.cjs","sha256":"f16d4b7c9c8ed1bc3088aca3fcbaf0d0226b766db964e97b13893d505cabfc34","facadeSource":null,"sources":["extensions/msteams/src/runtime.ts"]},{"output":".setup/secret-contract-api-ChQdBeU1.cjs","sha256":"cd9ef1c2041debc738bbc81bf5b63a64aa37b32c7dac727b484d4a2dada38fef","facadeSource":"extensions/msteams/secret-contract-api.ts","sources":[]},{"output":".setup/secret-contract-api-ipiUsANg.cjs","sha256":"29d947a14bc430f5e68f904e5177a51f1a93707b10c2c66daad25df36e61b211","facadeSource":null,"sources":["extensions/msteams/src/secret-contract.ts"]},{"output":".setup/send-CB-b2WAc.cjs","sha256":"c4ae4681d52c3bf07443cff8a3849e4148ee506c148bea1fd4a2c913b11291fb","facadeSource":null,"sources":["extensions/msteams/src/send-context.ts","extensions/msteams/src/send.ts"]},{"output":".setup/setup-plugin-api-GLQ9kPOr.cjs","sha256":"241e1e336c7962001f0ba1edbc0d12b935e8c549e258dfa6af5b60f5d6ce7e83","facadeSource":"extensions/msteams/setup-plugin-api.ts","sources":[]},{"output":".setup/thread-session-BkQzjhtJ.cjs","sha256":"c55842f1d52ed2b7f33d0b1be8d784ab56943c96a93ad19d0aaa7f27fd7325ce","facadeSource":null,"sources":["extensions/msteams/src/approval-auth.ts","extensions/msteams/src/monitor-handler/thread-session.ts"]},{"output":"api.cjs","sha256":"6626d318908219ccac8188ba2c398fdb8dcbbef4cda2e9dd78f93d36b5076001","facadeSource":"extensions/msteams/api.ts","sources":[]},{"output":"channel-config-api.cjs","sha256":"821ebe676551e85ce07954b444bb8813848b2b220d1c5ec4cd96c7b88ba6138a","facadeSource":"extensions/msteams/channel-config-api.ts","sources":[]},{"output":"channel-plugin-api.cjs","sha256":"318c04d6f98f4b18cb6d1bffb0258c89d5a7b5568bfa32e8b59e19fc31ee2373","facadeSource":"extensions/msteams/channel-plugin-api.ts","sources":[]},{"output":"configured-state.cjs","sha256":"f2a39ca958245449c4fef25a376f6ed3b4b84be4e9edb9d623572a1becb2d9b7","facadeSource":"extensions/msteams/configured-state.ts","sources":["extensions/msteams/configured-state.ts"]},{"output":"directory-contract-api.cjs","sha256":"bc5e0cb602fdade5cac45b901256030b5e6b34d6f4b93d5538731a208d6be05d","facadeSource":"extensions/msteams/directory-contract-api.ts","sources":["extensions/msteams/directory-contract-api.ts"]},{"output":"doctor-contract-api.cjs","sha256":"c74a6ae4d17efc5ba9b40664829fab6b81bac16bacf991051a9f289404fc3fae","facadeSource":"extensions/msteams/doctor-contract-api.ts","sources":["extensions/msteams/config-doctor-api.ts","extensions/msteams/doctor-contract-api.ts","packages/normalization-core/src/record-coerce.ts","src/config/channel-config-normalization.ts","src/plugin-sdk/legacy-webhook-listener-migration.ts"]},{"output":"index.cjs","sha256":"7b5ba63fb0abc15c606c95b165e50e09bb31c37036489781cfcca685ae1d79dd","facadeSource":"extensions/msteams/index.ts","sources":["extensions/msteams/index.ts"]},{"output":"qa-runner-api.cjs","sha256":"536588b0150eb8e8785b302ec36290283bfd8d3295ad7a7f08332ddc3fb2b90a","facadeSource":"extensions/msteams/qa-runner-api.ts","sources":["extensions/msteams/qa-runner-api.ts","extensions/msteams/src/qa/cli.ts"]},{"output":"runtime-api.cjs","sha256":"9a3a8f49499dd1e7f40ad7c434357ed6a30d3ffc616f7004fedb0d1d1e592758","facadeSource":"extensions/msteams/runtime-api.ts","sources":[]},{"output":"secret-contract-api.cjs","sha256":"be53089b2ab85c3dbb04ded7d95793559bba9d543b21d00fd7075b5423b5539a","facadeSource":"extensions/msteams/secret-contract-api.ts","sources":[]},{"output":"setup-entry.cjs","sha256":"ec5b1c5cb822606d63a1ce4a02042db927488d545843bf95d626c06a06b43980","facadeSource":"extensions/msteams/setup-entry.ts","sources":["extensions/msteams/setup-entry.ts"]},{"output":"setup-plugin-api.cjs","sha256":"38653d3858e78a6cba4a6befce03e6cfe37585576737b6798685486a32bf1ee8","facadeSource":"extensions/msteams/setup-plugin-api.ts","sources":[]}],"unrenderedSources":["extensions/msteams/api.ts","extensions/msteams/channel-config-api.ts","extensions/msteams/channel-plugin-api.ts","extensions/msteams/runtime-api.ts","extensions/msteams/secret-contract-api.ts","extensions/msteams/setup-plugin-api.ts","extensions/msteams/src/attachments.ts"]}

package/dist/api.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_channel = require("./.setup/channel-ByzS7QJ0.cjs");
-const require_channel_setup = require("./.setup/channel.setup-DL8lcWT_.cjs");
+const require_channel = require("./.setup/channel-BXCVM26V.cjs");
+const require_channel_setup = require("./.setup/channel.setup-CTlKLkEP.cjs");
 exports.createMSTeamsSetupWizardBase = require_channel_setup.createMSTeamsSetupWizardBase;
 exports.msteamsPlugin = require_channel.msteamsPlugin;
 exports.msteamsSetupAdapter = require_channel_setup.msteamsSetupAdapter;

package/dist/channel-plugin-api.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_channel = require("./.setup/channel-ByzS7QJ0.cjs");
+const require_channel = require("./.setup/channel-BXCVM26V.cjs");
 exports.msteamsPlugin = require_channel.msteamsPlugin;

package/dist/directory-contract-api.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_resolve_allowlist = require("./.setup/resolve-allowlist-Pl_NQFYH.cjs");
+const require_resolve_allowlist = require("./.setup/resolve-allowlist-CQFnY1-j.cjs");
 let openclaw_plugin_sdk_directory_runtime = require("openclaw/plugin-sdk/directory-runtime");
 const msteamsDirectoryContractPlugin = {
 	id: "msteams",

package/dist/setup-entry.cjs

@@ -4,7 +4,7 @@ let node_url = require("node:url");
 var setup_entry_default = (0, openclaw_plugin_sdk_channel_entry_contract.defineBundledChannelSetupEntry)({
 	importMetaUrl: require("url").pathToFileURL(__filename).href,
 	plugin: {
-		specifier: (0, node_url.fileURLToPath)(new URL(".setup/setup-plugin-api-Dyf8kF-l.cjs", require("url").pathToFileURL(__filename).href).href),
+		specifier: (0, node_url.fileURLToPath)(new URL(".setup/setup-plugin-api-GLQ9kPOr.cjs", require("url").pathToFileURL(__filename).href).href),
 		exportName: "msteamsSetupPlugin"
 	},
 	secrets: {

package/dist/setup-plugin-api.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_channel_setup = require("./.setup/channel.setup-DL8lcWT_.cjs");
+const require_channel_setup = require("./.setup/channel.setup-CTlKLkEP.cjs");
 exports.msteamsSetupPlugin = require_channel_setup.msteamsSetupPlugin;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/msteams",
-  "version": "2026.9.34",
+  "version": "2026.9.36",
   "description": "OpenClaw Microsoft Teams channel plugin for bot conversations.",
   "repository": {
     "type": "git",
@@ -22,7 +22,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.9.34"
+    "openclaw": ">=2026.9.36"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -73,10 +73,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.9.34"
+      "pluginApi": ">=2026.9.36"
     },
     "build": {
-      "openclawVersion": "2026.9.34",
+      "openclawVersion": "2026.9.36",
       "runtimeFormat": "cjs"
     },
     "release": {