@openclaw/msteams 2026.9.4 → 2026.9.6

package/dist/{delegated-state-DiEz9JIa.cjs → .setup/delegated-state-u-ywZyZT.cjs}

@@ -4,7 +4,7 @@ const MSTEAMS_DELEGATED_TOKEN_LEGACY_FILENAME = "msteams-delegated.json";
 const MSTEAMS_DELEGATED_TOKEN_NAMESPACE = "delegated-token";
 const MSTEAMS_DELEGATED_TOKEN_KEY = "current";
 function openDelegatedTokenStore(env) {
-	return require_runtime.getMSTeamsRuntime().state.openSyncKeyedStore({
+	return require_runtime.getMSTeamsRuntime().state.openKeyedStore({
 		namespace: MSTEAMS_DELEGATED_TOKEN_NAMESPACE,
 		maxEntries: 1,
 		overflowPolicy: "reject-new",
@@ -23,13 +23,13 @@ function normalizeMSTeamsDelegatedTokens(value) {
 		...typeof token.userPrincipalName === "string" ? { userPrincipalName: token.userPrincipalName } : {}
 	};
 }
-function loadMSTeamsDelegatedTokens(env) {
-	return normalizeMSTeamsDelegatedTokens(openDelegatedTokenStore(env).lookup("current")) ?? void 0;
+async function loadMSTeamsDelegatedTokens(env) {
+	return normalizeMSTeamsDelegatedTokens(await openDelegatedTokenStore(env).lookup("current")) ?? void 0;
 }
-function saveMSTeamsDelegatedTokens(tokens, env) {
+async function saveMSTeamsDelegatedTokens(tokens, env) {
 	const normalized = normalizeMSTeamsDelegatedTokens(tokens);
 	if (!normalized) throw new Error("Invalid Microsoft Teams delegated token payload");
-	openDelegatedTokenStore(env).register(MSTEAMS_DELEGATED_TOKEN_KEY, normalized);
+	await openDelegatedTokenStore(env).register(MSTEAMS_DELEGATED_TOKEN_KEY, normalized);
 }
 //#endregion
 Object.defineProperty(exports, "MSTEAMS_DELEGATED_TOKEN_KEY", {

package/dist/{messenger-TLdZf9Ar.cjs → .setup/messenger-8RA1FUJa.cjs}

@@ -1,26 +1,30 @@
 const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
 const require_runtime = require("./runtime-gZTAuFux.cjs");
-require("./runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-DmUTQxEz.cjs");
-const require_channel_setup = require("./channel.setup-BhxokviI.cjs");
-const require_polls = require("./polls-BBdZPx_R.cjs");
+require("../runtime-api.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CHzaaWiC.cjs");
+const require_channel_setup = require("./channel.setup-BVDfgdCc.cjs");
+const require_polls = require("./polls-BJ4-4uZm.cjs");
 let openclaw_plugin_sdk_lazy_runtime = require("openclaw/plugin-sdk/lazy-runtime");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
+let openclaw_plugin_sdk_fetch_runtime = require("openclaw/plugin-sdk/fetch-runtime");
 let openclaw_plugin_sdk_provider_http = require("openclaw/plugin-sdk/provider-http");
 let openclaw_plugin_sdk_reply_payload = require("openclaw/plugin-sdk/reply-payload");
+let openclaw_plugin_sdk_ssrf_runtime = require("openclaw/plugin-sdk/ssrf-runtime");
 let openclaw_plugin_sdk_text_chunking = require("openclaw/plugin-sdk/text-chunking");
 let node_dns_promises = require("node:dns/promises");
 let openclaw_plugin_sdk_ssrf_policy = require("openclaw/plugin-sdk/ssrf-policy");
 let openclaw_plugin_sdk_text_utility_runtime = require("openclaw/plugin-sdk/text-utility-runtime");
+let openclaw_plugin_sdk_error_runtime = require("openclaw/plugin-sdk/error-runtime");
 let openclaw_plugin_sdk_retry_runtime = require("openclaw/plugin-sdk/retry-runtime");
 let node_crypto = require("node:crypto");
 node_crypto = require_rolldown_runtime.__toESM(node_crypto, 1);
 let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
 let openclaw_plugin_sdk_runtime_env = require("openclaw/plugin-sdk/runtime-env");
+let openclaw_plugin_sdk_markdown_table_runtime = require("openclaw/plugin-sdk/markdown-table-runtime");
 let openclaw_plugin_sdk_blob_runtime = require("openclaw/plugin-sdk/blob-runtime");
 let openclaw_plugin_sdk_global_singleton = require("openclaw/plugin-sdk/global-singleton");
-let openclaw_plugin_sdk_error_runtime = require("openclaw/plugin-sdk/error-runtime");
+let openclaw_plugin_sdk_expect_runtime = require("openclaw/plugin-sdk/expect-runtime");
 let openclaw_plugin_sdk_reply_chunking = require("openclaw/plugin-sdk/reply-chunking");
 let openclaw_plugin_sdk_web_media = require("openclaw/plugin-sdk/web-media");
 let openclaw_plugin_sdk_media_runtime = require("openclaw/plugin-sdk/media-runtime");
@@ -475,18 +479,16 @@ function prepareFileConsentActivity(params) {
 */
 async function prepareFileConsentActivityFs(params) {
 	const { media, conversationId, description } = params;
-	const uploadId = storePendingUpload({
+	const upload = {
 		buffer: media.buffer,
 		filename: media.filename,
 		contentType: media.contentType,
 		conversationId
-	});
+	};
+	const uploadId = storePendingUpload(upload);
 	await storePendingUploadFs({
 		id: uploadId,
-		buffer: media.buffer,
-		filename: media.filename,
-		contentType: media.contentType,
-		conversationId
+		...upload
 	});
 	return {
 		activity: buildConsentActivity({
@@ -497,10 +499,6 @@ async function prepareFileConsentActivityFs(params) {
 		uploadId
 	};
 }
-/**
-* Check if a file requires FileConsentCard flow.
-* True for: personal chat AND (large file OR non-image)
-*/
 function requiresFileConsent(params) {
 	const isPersonal = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(params.conversationType) === "personal";
 	const isImage = params.contentType?.startsWith("image/") ?? false;
@@ -635,6 +633,7 @@ function serializeMarkdownDestination(href) {
 	return `<${href.replace(/([\\<>])/gu, "\\$1")}>`;
 }
 function blankBlockEnd(text, index) {
+	if (text[index] !== "\n" && text[index] !== "\r") return;
 	const match = /^(?:\r?\n)[ \t]*(?:\r?\n)/u.exec(text.slice(index));
 	return match ? index + match[0].length : void 0;
 }
@@ -692,136 +691,25 @@ function protectDelimitedMarkdown(text, opener, tokenPrefix, values) {
 	}
 	return protectedText + text.slice(cursor);
 }
-function parseQuotePrefix(line) {
-	let cursor = 0;
-	let depth = 0;
-	while (cursor < line.length) {
-		const checkpoint = cursor;
-		let spaces = 0;
-		while (spaces < 3 && line[cursor] === " ") {
-			cursor += 1;
-			spaces += 1;
-		}
-		if (line[cursor] !== ">") {
-			cursor = checkpoint;
-			break;
-		}
-		cursor += 1;
-		depth += 1;
-		if (line[cursor] === " " || line[cursor] === "	") cursor += 1;
-	}
-	return {
-		content: line.slice(cursor).replace(/\r$/u, ""),
-		depth,
-		prefix: line.slice(0, cursor)
-	};
-}
-function isTableDelimiterLine(content) {
-	const cells = content.trim().replace(/^\|/u, "").replace(/\|$/u, "").split("|").map((cell) => cell.trim());
-	return cells.length > 0 && cells.every((cell) => /^:?-+:?$/u.test(cell));
-}
-function protectRawTablesInSegment(text, tokenPrefix, rawTables) {
-	const lines = text.split("\n");
-	const output = [];
-	for (let index = 0; index < lines.length;) {
-		const line = lines[index] ?? "";
-		const header = parseQuotePrefix(line);
-		const delimiter = parseQuotePrefix(lines[index + 1] ?? "");
-		if (header.content.includes("|") && delimiter.depth === header.depth && isTableDelimiterLine(delimiter.content)) {
-			let end = index + 2;
-			while (end < lines.length) {
-				const row = parseQuotePrefix(lines[end] ?? "");
-				if (row.depth !== header.depth || !row.content.trim() || isInterruptingBlock(lines[end] ?? "")) break;
-				end += 1;
-			}
-			const table = lines.slice(index, end).join("\n");
-			if ((0, openclaw_plugin_sdk_text_chunking.convertMarkdownTables)(table, "code") !== table) {
-				const tableIndex = rawTables.push(table.slice(header.prefix.length)) - 1;
-				output.push(`${header.prefix}${tokenPrefix}t${tableIndex}${TOKEN_END}`);
-				index = end;
-				continue;
-			}
-			for (let lineIndex = index; lineIndex < end; lineIndex += 1) output.push(lines[lineIndex] ?? "");
-			index = end;
-			continue;
-		}
-		output.push(line);
-		index += 1;
-	}
-	return output.join("\n");
-}
-function isInterruptingBlock(line) {
-	const content = parseQuotePrefix(line).content;
-	return /^[ \t]{0,3}(?:#{1,6}(?:[ \t]|$)|`{3,}|~{3,}|(?:[-+*]|\d+[.)])[ \t]+)/u.test(content);
-}
-function leadingQuoteDepth(line) {
-	return parseQuotePrefix(line).depth;
-}
-function parseFenceLine(line) {
-	const match = /^((?: {0,3}>[ \t]?)*)(?:((?:[-+*]|\d+[.)])[ \t]+))?( {0,3})(`{3,}|~{3,})(.*)$/u.exec(line);
-	const marker = match?.[4];
-	const trailing = match?.[5] ?? "";
-	if (!marker || marker.startsWith("`") && trailing.includes("`")) return;
-	return {
-		marker,
-		quoteDepth: match?.[1]?.match(/>/gu)?.length ?? 0,
-		trailing,
-		listIndent: match?.[2]?.length ?? 0,
-		indent: match?.[3]?.length ?? 0
-	};
-}
-function protectRawTablesOutsideFences(text, tokenPrefix, rawTables) {
+function protectRawTables(text, tokenPrefix, rawTables) {
+	if (!text.includes("|")) return text;
+	const { tables } = (0, openclaw_plugin_sdk_text_chunking.markdownToIRWithMeta)(text, {
+		autolink: false,
+		linkify: false,
+		tableMode: "block"
+	});
 	let result = "";
-	let outsideStart = 0;
-	let fenceStart;
-	let active;
-	let listContextIndent = 0;
-	let offset = 0;
-	while (offset <= text.length) {
-		const nextNewline = text.indexOf("\n", offset);
-		const lineEnd = nextNewline < 0 ? text.length : nextNewline;
-		const line = text.slice(offset, lineEnd).replace(/\r$/u, "");
-		let fence = parseFenceLine(line);
-		const lineQuoteDepth = leadingQuoteDepth(line);
-		const lineWithoutQuotes = line.replace(/^(?:[ \t]*>[ \t]?)+/u, "");
-		const lineIndent = /^[ \t]*/u.exec(lineWithoutQuotes)?.[0].length ?? 0;
-		const listMarkerIndent = /^((?:[-+*]|\d+[.)])[ \t]+)/u.exec(lineWithoutQuotes)?.[1]?.length;
-		if (listMarkerIndent) listContextIndent = listMarkerIndent;
-		else if (line.trim() && lineIndent < listContextIndent && !fence) listContextIndent = 0;
-		if (fence && fence.listIndent === 0 && listContextIndent > 0 && fence.indent >= listContextIndent) fence = {
-			...fence,
-			listIndent: listContextIndent
-		};
-		const listOutdented = Boolean(active?.listIndent && line.trim() && lineIndent < active.listIndent && !fence);
-		if (active && (active.quoteDepth > lineQuoteDepth || listOutdented)) {
-			result += text.slice(fenceStart, offset);
-			outsideStart = offset;
-			active = void 0;
-			fenceStart = void 0;
-		}
-		if (!active && fence) {
-			result += protectRawTablesInSegment(text.slice(outsideStart, offset), tokenPrefix, rawTables);
-			fenceStart = offset;
-			active = {
-				marker: fence.marker,
-				quoteDepth: fence.quoteDepth,
-				listIndent: fence.listIndent
-			};
-		} else if (active && fence && fence.marker[0] === active.marker[0] && fence.marker.length >= active.marker.length && fence.quoteDepth === active.quoteDepth && /^[ \t]*$/u.test(fence.trailing)) {
-			const fenceEnd = nextNewline < 0 ? lineEnd : nextNewline + 1;
-			result += text.slice(fenceStart, fenceEnd);
-			outsideStart = fenceEnd;
-			active = void 0;
-			fenceStart = void 0;
-		}
-		if (nextNewline < 0) break;
-		offset = nextNewline + 1;
-	}
-	if (active && fenceStart !== void 0) {
-		result += text.slice(fenceStart);
-		return result;
+	let cursor = 0;
+	for (const table of tables) {
+		const source = (0, openclaw_plugin_sdk_expect_runtime.expectDefined)((0, openclaw_plugin_sdk_markdown_table_runtime.getMarkdownTableSource)(table), "Markdown table source");
+		const lineStart = Math.max(text.lastIndexOf("\n", source.start - 1), text.lastIndexOf("\r", source.start - 1)) + 1;
+		const start = lineStart + (/^(?: {0,3}>[ \t]?)*/u.exec(text.slice(lineStart, source.start))?.[0] ?? "").length;
+		const end = source.end + (text.slice(source.end, source.end + 2) === "\r\n" ? 1 : 0);
+		const index = rawTables.push(text.slice(start, end)) - 1;
+		result += text.slice(cursor, start) + `${tokenPrefix}t${index}${TOKEN_END}`;
+		cursor = end;
 	}
-	return result + protectRawTablesInSegment(text.slice(outsideStart), tokenPrefix, rawTables);
+	return result + text.slice(cursor);
 }
 function protectMSTeamsCode(ir, tokenPrefix, code, protectedValues) {
 	const codeSpans = ir.styles.filter((span) => span.style === "code" || span.style === "code_block");
@@ -877,7 +765,7 @@ function formatMSTeamsMarkdown(markdown, tableMode) {
 		return `${tokenPrefix}h${index}${TOKEN_END}`;
 	}), "![", `${tokenPrefix}i`, images), "@[", `${tokenPrefix}m`, mentions);
 	const tableInput = (0, openclaw_plugin_sdk_text_chunking.convertMarkdownTables)(mentionsProtected, tableMode);
-	const protectedMarkdown = (tableMode === "off" ? protectRawTablesOutsideFences(tableInput, tokenPrefix, rawTables) : tableInput).replace(ESCAPED_MARKDOWN_RE, (escaped) => {
+	const protectedMarkdown = (tableMode === "off" ? protectRawTables(tableInput, tokenPrefix, rawTables) : tableInput).replace(ESCAPED_MARKDOWN_RE, (escaped) => {
 		const index = escapedMarkdown.push(escaped) - 1;
 		return `${tokenPrefix}e${index}${TOKEN_END}`;
 	});
@@ -957,6 +845,19 @@ function buildTeamsFileInfoCard(file) {
 const GRAPH_ROOT = "https://graph.microsoft.com/v1.0";
 const GRAPH_BETA = "https://graph.microsoft.com/beta";
 const GRAPH_SCOPE = "https://graph.microsoft.com";
+async function requestSharePoint(url, init, params) {
+	const { response, release } = await (0, openclaw_plugin_sdk_ssrf_runtime.fetchWithSsrFGuard)({
+		url,
+		init,
+		fetchImpl: params.fetchFn,
+		mode: "trusted_env_proxy",
+		beforeRequest: () => require_resolve_allowlist.assertMSTeamsSendHandoff(params),
+		maxRedirects: 20,
+		allowCrossOriginUnsafeRedirectReplay: true,
+		auditContext: "msteams.graph-upload"
+	});
+	return (0, openclaw_plugin_sdk_fetch_runtime.responseWithRelease)(response, release);
+}
 function requireMSTeamsSharePointSiteId(siteId) {
 	const normalized = siteId?.trim();
 	if (!normalized) throw new Error("channels.msteams.sharePointSiteId is required to send files to group chats or channels");
@@ -978,7 +879,6 @@ async function getGraphAccessToken(tokenProvider) {
 * @param params.siteId - SharePoint site ID (e.g., "contoso.sharepoint.com,guid1,guid2")
 */
 async function uploadToSharePoint(params) {
-	const fetchFn = params.fetchFn ?? fetch;
 	const uploadPath = `/OpenClawShared/${encodeURIComponent(params.filename)}`;
 	const uploadUrl = `${GRAPH_ROOT}/sites/${params.siteId}/drive/root:${uploadPath}:/content?@microsoft.graph.conflictBehavior=rename`;
 	const timeoutMs = require_resolve_allowlist.resolveMSTeamsSharePointUploadTimeoutMs(params.buffer.length);
@@ -986,8 +886,10 @@ async function uploadToSharePoint(params) {
 		label: SHAREPOINT_UPLOAD_TIMEOUT_LABEL,
 		timeoutMs,
 		work: async (signal) => {
+			require_resolve_allowlist.assertMSTeamsSendHandoff(params);
 			const token = await getGraphAccessToken(params.tokenProvider);
-			const res = await fetchFn(uploadUrl, {
+			require_resolve_allowlist.assertMSTeamsSendHandoff(params);
+			const res = await requestSharePoint(uploadUrl, {
 				method: "PUT",
 				headers: {
 					"User-Agent": require_resolve_allowlist.buildUserAgent(),
@@ -996,7 +898,7 @@ async function uploadToSharePoint(params) {
 				},
 				body: new Blob([(0, openclaw_plugin_sdk_blob_runtime.bufferToBlobPart)(params.buffer)]),
 				signal
-			});
+			}, params);
 			if (!res.ok) throw await require_resolve_allowlist.createMSTeamsHttpError(res, "SharePoint upload failed");
 			return await (0, openclaw_plugin_sdk_provider_http.readProviderJsonResponse)(res, "msteams.graph-upload.uploadSharePointFile", { chunkTimeoutMs: timeoutMs });
 		}
@@ -1016,18 +918,19 @@ async function uploadToSharePoint(params) {
 * @param params.itemId - The driveItem ID (returned from upload)
 */
 async function getDriveItemProperties(params) {
-	const fetchFn = params.fetchFn ?? fetch;
 	const data = await require_resolve_allowlist.withMSTeamsAbortableRequestTimeout({
 		label: SHAREPOINT_REQUEST_TIMEOUT_LABEL,
 		work: async (signal) => {
+			require_resolve_allowlist.assertMSTeamsSendHandoff(params);
 			const token = await getGraphAccessToken(params.tokenProvider);
-			const res = await fetchFn(`${GRAPH_ROOT}/sites/${params.siteId}/drive/items/${params.itemId}?$select=eTag,webDavUrl,name`, {
+			require_resolve_allowlist.assertMSTeamsSendHandoff(params);
+			const res = await requestSharePoint(`${GRAPH_ROOT}/sites/${params.siteId}/drive/items/${params.itemId}?$select=eTag,webDavUrl,name`, {
 				headers: {
 					"User-Agent": require_resolve_allowlist.buildUserAgent(),
 					Authorization: `Bearer ${token}`
 				},
 				signal
-			});
+			}, params);
 			if (!res.ok) throw await require_resolve_allowlist.createMSTeamsHttpError(res, "Get driveItem properties failed");
 			return await (0, openclaw_plugin_sdk_provider_http.readProviderJsonResponse)(res, "msteams.graph-upload.getDriveItemProperties");
 		}
@@ -1044,18 +947,19 @@ async function getDriveItemProperties(params) {
 * Used to create sharing links scoped to only the chat participants.
 */
 async function getChatMembers(params) {
-	const fetchFn = params.fetchFn ?? fetch;
 	return await require_resolve_allowlist.withMSTeamsAbortableRequestTimeout({
 		label: SHAREPOINT_REQUEST_TIMEOUT_LABEL,
 		work: async (signal) => {
+			require_resolve_allowlist.assertMSTeamsSendHandoff(params);
 			const token = await getGraphAccessToken(params.tokenProvider);
-			const res = await fetchFn(`${GRAPH_ROOT}/chats/${params.chatId}/members`, {
+			require_resolve_allowlist.assertMSTeamsSendHandoff(params);
+			const res = await requestSharePoint(`${GRAPH_ROOT}/chats/${params.chatId}/members`, {
 				headers: {
 					"User-Agent": require_resolve_allowlist.buildUserAgent(),
 					Authorization: `Bearer ${token}`
 				},
 				signal
-			});
+			}, params);
 			if (!res.ok) {
 				const message = res.status === 403 ? "Get chat members failed; verify Graph chat-member permissions and tenant access policies" : "Get chat members failed";
 				throw await require_resolve_allowlist.createMSTeamsHttpError(res, message);
@@ -1070,7 +974,6 @@ async function getChatMembers(params) {
 * For per-user scope, uses beta API with recipients.
 */
 async function createSharePointSharingLink(params) {
-	const fetchFn = params.fetchFn ?? fetch;
 	const scope = params.scope ?? "organization";
 	const apiRoot = scope === "users" ? GRAPH_BETA : GRAPH_ROOT;
 	const body = {
@@ -1081,8 +984,10 @@ async function createSharePointSharingLink(params) {
 	const data = await require_resolve_allowlist.withMSTeamsAbortableRequestTimeout({
 		label: SHAREPOINT_REQUEST_TIMEOUT_LABEL,
 		work: async (signal) => {
+			require_resolve_allowlist.assertMSTeamsSendHandoff(params);
 			const token = await getGraphAccessToken(params.tokenProvider);
-			const res = await fetchFn(`${apiRoot}/sites/${params.siteId}/drive/items/${params.itemId}/createLink`, {
+			require_resolve_allowlist.assertMSTeamsSendHandoff(params);
+			const res = await requestSharePoint(`${apiRoot}/sites/${params.siteId}/drive/items/${params.itemId}/createLink`, {
 				method: "POST",
 				headers: {
 					"User-Agent": require_resolve_allowlist.buildUserAgent(),
@@ -1091,7 +996,7 @@ async function createSharePointSharingLink(params) {
 				},
 				body: JSON.stringify(body),
 				signal
-			});
+			}, params);
 			if (!res.ok) throw await require_resolve_allowlist.createMSTeamsHttpError(res, "Create SharePoint sharing link failed");
 			return await (0, openclaw_plugin_sdk_provider_http.readProviderJsonResponse)(res, "msteams.graph-upload.createSharePointSharingLink");
 		}
@@ -1116,7 +1021,8 @@ async function uploadAndShareSharePoint(params) {
 		contentType: params.contentType,
 		tokenProvider: params.tokenProvider,
 		siteId: params.siteId,
-		fetchFn: params.fetchFn
+		fetchFn: params.fetchFn,
+		assertDirectAdapterHandoff: params.assertDirectAdapterHandoff
 	});
 	let scope = "organization";
 	let recipientObjectIds;
@@ -1124,7 +1030,8 @@ async function uploadAndShareSharePoint(params) {
 		const members = await getChatMembers({
 			chatId: params.chatId,
 			tokenProvider: params.tokenProvider,
-			fetchFn: params.fetchFn
+			fetchFn: params.fetchFn,
+			assertDirectAdapterHandoff: params.assertDirectAdapterHandoff
 		});
 		if (members.length === 0) throw new Error("MS Teams chat member lookup returned no recipients");
 		scope = "users";
@@ -1136,7 +1043,8 @@ async function uploadAndShareSharePoint(params) {
 		tokenProvider: params.tokenProvider,
 		scope,
 		recipientObjectIds,
-		fetchFn: params.fetchFn
+		fetchFn: params.fetchFn,
+		assertDirectAdapterHandoff: params.assertDirectAdapterHandoff
 	});
 	return {
 		itemId: uploaded.id,
@@ -1236,13 +1144,13 @@ function isValidTeamsId(id) {
 * Returns both the formatted text with <at> tags and the entities array.
 */
 function parseMentions(text) {
-	const mentionPattern = /@\[([^\]]+)\]\(([^)]+)\)/g;
+	const mentionPattern = /@\[((?:\\[\s\S]|[^\]\\])+)\]\(([^)]+)\)/g;
 	const entities = [];
 	return {
 		text: text.replace(mentionPattern, (match, name, id) => {
 			const trimmedId = id.trim();
 			if (!isValidTeamsId(trimmedId)) return match;
-			const trimmedName = name.trim();
+			const trimmedName = name.replace(/\\([\\[\]])/g, "$1").trim();
 			const mentionTag = `<at>${trimmedName}</at>`;
 			entities.push({
 				type: "mention",
@@ -1390,24 +1298,28 @@ function mergeReferenceIntoActivity(activity, ref) {
 	};
 }
 async function sendMSTeamsActivityWithReference(app, source, activity, options) {
-	const ref = buildSdkConversationReference(source, options);
-	const activities = (await getApiClientForReference(app, ref)).conversations.activities(ref.conversation.id);
-	const activityWithRef = mergeReferenceIntoActivity(options?.quoteActivityId ? await quoteMSTeamsActivity(activity, options.quoteActivityId) : activity, ref);
-	const isTargeted = activityWithRef.recipient?.isTargeted === true;
-	if (isTargeted && ref.conversation.conversationType === "personal") throw new Error("Targeted messages are not supported in 1:1 (personal) chats.");
-	const activityId = typeof activityWithRef.id === "string" ? activityWithRef.id : void 0;
-	if (activityId) {
-		const res = isTargeted && activities.updateTargeted ? await activities.updateTargeted(activityId, activityWithRef) : await activities.update(activityId, activityWithRef);
+	return require_resolve_allowlist.withMSTeamsConnectorHandoff(options ?? {}, async (handoff) => {
+		require_resolve_allowlist.assertMSTeamsSendHandoff(handoff);
+		const ref = buildSdkConversationReference(source, options);
+		const activities = (await getApiClientForReference(app, ref)).conversations.activities(ref.conversation.id);
+		const activityWithRef = mergeReferenceIntoActivity(options?.quoteActivityId ? await quoteMSTeamsActivity(activity, options.quoteActivityId) : activity, ref);
+		const isTargeted = activityWithRef.recipient?.isTargeted === true;
+		if (isTargeted && ref.conversation.conversationType === "personal") throw new Error("Targeted messages are not supported in 1:1 (personal) chats.");
+		const activityId = typeof activityWithRef.id === "string" ? activityWithRef.id : void 0;
+		require_resolve_allowlist.assertMSTeamsSendHandoff(handoff);
+		if (activityId) {
+			const res = isTargeted && activities.updateTargeted ? await activities.updateTargeted(activityId, activityWithRef) : await activities.update(activityId, activityWithRef);
+			return {
+				...activityWithRef,
+				...res && typeof res === "object" ? res : {}
+			};
+		}
+		const res = isTargeted && activities.createTargeted ? await activities.createTargeted(activityWithRef) : await activities.create(activityWithRef);
 		return {
 			...activityWithRef,
-			...res && typeof res === "object" ? res : {}
+			...res
 		};
-	}
-	const res = isTargeted && activities.createTargeted ? await activities.createTargeted(activityWithRef) : await activities.create(activityWithRef);
-	return {
-		...activityWithRef,
-		...res
-	};
+	});
 }
 async function updateMSTeamsActivityWithReference(app, source, activityId, activity, options) {
 	const ref = buildSdkConversationReference(source, options);
@@ -1566,6 +1478,7 @@ async function buildActivity(msg, conversationRef, tokenProvider, sharePointSite
 				thresholdBytes: FILE_CONSENT_THRESHOLD_BYTES
 			})) {
 				const conversationId = conversationRef.conversation?.id ?? "unknown";
+				require_resolve_allowlist.assertMSTeamsSendHandoff(options);
 				const { activity: consentActivity, uploadId } = prepareFileConsentActivity({
 					media: {
 						buffer: media.buffer,
@@ -1582,17 +1495,20 @@ async function buildActivity(msg, conversationRef, tokenProvider, sharePointSite
 				const siteId = requireMSTeamsSharePointSiteId(sharePointSiteId);
 				if (!tokenProvider) throw new Error("MS Teams Graph token provider unavailable for SharePoint file send");
 				const chatId = conversationRef.conversation?.id;
+				const uploaded = await uploadAndShareSharePoint({
+					assertDirectAdapterHandoff: options?.assertDirectAdapterHandoff,
+					buffer: media.buffer,
+					filename: fileName,
+					contentType,
+					tokenProvider,
+					siteId,
+					chatId: chatId ?? void 0,
+					usePerUserSharing: conversationType === "groupchat"
+				});
 				activity.attachments = [buildTeamsFileInfoCard(await getDriveItemProperties({
+					assertDirectAdapterHandoff: options?.assertDirectAdapterHandoff,
 					siteId,
-					itemId: (await uploadAndShareSharePoint({
-						buffer: media.buffer,
-						filename: fileName,
-						contentType,
-						tokenProvider,
-						siteId,
-						chatId: chatId ?? void 0,
-						usePerUserSharing: conversationType === "groupchat"
-					})).itemId,
+					itemId: uploaded.itemId,
 					tokenProvider
 				}))];
 				return activity;
@@ -1640,9 +1556,14 @@ async function sendMSTeamsMessages(params) {
 		let response;
 		try {
 			response = await sendWithRetry(async () => {
-				activity ??= await buildActivity(message, params.conversationRef, params.tokenProvider, params.sharePointSiteId, params.mediaMaxBytes, { feedbackLoopEnabled: params.feedbackLoopEnabled });
+				require_resolve_allowlist.assertMSTeamsSendHandoff(params);
+				activity ??= await buildActivity(message, params.conversationRef, params.tokenProvider, params.sharePointSiteId, params.mediaMaxBytes, {
+					feedbackLoopEnabled: params.feedbackLoopEnabled,
+					assertDirectAdapterHandoff: params.assertDirectAdapterHandoff
+				});
 				pendingUploadId ??= typeof activity["_pendingUploadId"] === "string" ? activity["_pendingUploadId"] : void 0;
 				delete activity["_pendingUploadId"];
+				require_resolve_allowlist.assertMSTeamsSendHandoff(params);
 				providerDispatchStarted = true;
 				return await sendFn(activity);
 			}, {
@@ -1650,10 +1571,11 @@ async function sendMSTeamsMessages(params) {
 				messageCount: messages.length
 			});
 		} catch (error) {
-			if (!providerDispatchStarted) throw new openclaw_plugin_sdk_error_runtime.PlatformMessageNotDispatchedError(error instanceof Error ? error.message : "Teams activity preparation failed", { cause: error });
+			if (!providerDispatchStarted && !(error instanceof openclaw_plugin_sdk_error_runtime.PlatformMessageNotDispatchedError)) throw new openclaw_plugin_sdk_error_runtime.PlatformMessageNotDispatchedError(error instanceof Error ? error.message : "Teams activity preparation failed", { cause: error });
 			throw error;
 		}
 		const messageId = extractMessageId(response) ?? "unknown";
+		await params.onMessageSent?.(messageId, messageIndex);
 		if (pendingUploadId && messageId !== "unknown") setPendingUploadActivityId(pendingUploadId, messageId);
 		return messageId;
 	};
@@ -1672,6 +1594,8 @@ async function sendMSTeamsMessages(params) {
 		}
 		const isChannel = params.conversationRef.conversation?.conversationType === "channel";
 		const sendFn = (activity) => sendMSTeamsActivityWithReference(params.app, baseRef, activity, {
+			assertDirectAdapterHandoff: params.assertDirectAdapterHandoff,
+			onPlatformSendDispatch: params.onPlatformSendDispatch,
 			threadActivityId: isChannel ? threadActivityId : void 0,
 			serviceUrlBoundary: params.serviceUrlBoundary
 		});
@@ -1681,7 +1605,7 @@ async function sendMSTeamsMessages(params) {
 	if (params.replyStyle === "thread") {
 		const ctx = params.context;
 		if (!ctx) return await sendProactively(messages, 0, resolvedThreadId);
-		const sendFn = ctx.sendActivity;
+		const sendFn = (activity) => require_resolve_allowlist.withMSTeamsConnectorHandoff(params, () => ctx.sendActivity(activity));
 		const messageIds = [];
 		for (const [idx, message] of messages.entries()) {
 			const result = await withRevokedProxyFallback({

package/dist/{oauth-DUtLTz2u.cjs → .setup/oauth-C6m7dvHj.cjs}

@@ -1,4 +1,4 @@
-const require_resolve_allowlist = require("./resolve-allowlist-DmUTQxEz.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CHzaaWiC.cjs");
 let openclaw_plugin_sdk_runtime_env = require("openclaw/plugin-sdk/runtime-env");
 let openclaw_plugin_sdk_provider_auth = require("openclaw/plugin-sdk/provider-auth");
 let openclaw_plugin_sdk_provider_auth_runtime = require("openclaw/plugin-sdk/provider-auth-runtime");

package/dist/{polls-BBdZPx_R.cjs → .setup/polls-BJ4-4uZm.cjs}

@@ -224,7 +224,6 @@ const MSTEAMS_SQLITE_MAX_POLL_ROWS = 2e3;
 const MSTEAMS_POLL_VOTE_BUCKET_COUNT = 32;
 const MSTEAMS_MAX_POLL_VOTE_BUCKET_ROWS = 1001 * MSTEAMS_POLL_VOTE_BUCKET_COUNT;
 const MSTEAMS_POLL_TTL_MS = 2592e6;
-const POLL_MUTATION_KEY = "polls";
 function normalizeChoiceValue(value) {
 	if (typeof value === "string") {
 		const trimmed = value.trim();
@@ -404,8 +403,11 @@ function createMSTeamsPollStoreState(params) {
 		for (const row of await voteBucketStore.entries()) if (row.value.pollId === pollId) Object.assign(votes, row.value.votes);
 		return votes;
 	};
-	const deletePollVotes = async (pollId) => {
-		for (const row of await voteBucketStore.entries()) if (row.value.pollId === pollId) await voteBucketStore.delete(row.key);
+	const deletePollVotes = async (pollId, cachedRows) => {
+		for (const row of cachedRows?.values() ?? await voteBucketStore.entries()) if (row.value.pollId === pollId) {
+			await voteBucketStore.delete(row.key);
+			cachedRows?.delete(row.key);
+		}
 	};
 	const registerPollVotes = async (pollId, votes, updatedAt) => {
 		const buckets = /* @__PURE__ */ new Map();
@@ -450,11 +452,16 @@ function createMSTeamsPollStoreState(params) {
 		};
 	};
 	const prunePollStoreToLimit = async () => {
+		let voteRows;
+		const deletePrunedPollVotes = async (pollId) => {
+			voteRows ??= new Map((await voteBucketStore.entries()).map((row) => [row.key, row]));
+			await deletePollVotes(pollId, voteRows);
+		};
 		const rows = [];
 		for (const row of await pollStore.entries()) {
 			if (!pruneExpired({ [row.key]: row.value })[row.key]) {
 				await pollStore.delete(row.key);
-				await deletePollVotes(row.value.id);
+				await deletePrunedPollVotes(row.value.id);
 				continue;
 			}
 			rows.push(row);
@@ -465,11 +472,11 @@ function createMSTeamsPollStoreState(params) {
 		});
 		for (const row of sorted.slice(0, rows.length - MSTEAMS_MAX_POLLS)) {
 			await pollStore.delete(row.key);
-			await deletePollVotes(row.value.id);
+			await deletePrunedPollVotes(row.value.id);
 		}
 	};
 	const createPoll = async (poll) => {
-		await withMSTeamsSqliteMutationLock(params, POLL_MUTATION_KEY, async () => {
+		await withMSTeamsSqliteMutationLock(params, MSTEAMS_POLLS_NAMESPACE, async () => {
 			const { metadata, votes } = splitMSTeamsPoll(poll);
 			await pollStore.register(buildMSTeamsPollStateKey(poll.id), toPluginJsonValue(metadata));
 			await deletePollVotes(poll.id);
@@ -484,7 +491,7 @@ function createMSTeamsPollStoreState(params) {
 		return await reconstructPoll(poll);
 	};
 	const recordVote = async (vote) => {
-		return await withMSTeamsSqliteMutationLock(params, POLL_MUTATION_KEY, async () => {
+		return await withMSTeamsSqliteMutationLock(params, MSTEAMS_POLLS_NAMESPACE, async () => {
 			const pollKey = buildMSTeamsPollStateKey(vote.pollId);
 			const poll = await pollStore.lookup(pollKey);
 			if (!poll) return null;

package/dist/{reaction-types-BbBBdnQ5.cjs → .setup/reaction-types-C7RA7Wxt.cjs}

@@ -1,4 +1,4 @@
-const require_resolve_allowlist = require("./resolve-allowlist-DmUTQxEz.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-CHzaaWiC.cjs");
 let openclaw_plugin_sdk_html_entity_runtime = require("openclaw/plugin-sdk/html-entity-runtime");
 //#region extensions/msteams/src/graph-thread.ts
 /**