@openclaw/msteams 2026.9.8 → 2026.10.1-beta.1

package/dist/.setup/{monitor-BJ7IyH4y.cjs → monitor-DfSPCRkk.cjs}

@@ -1,14 +1,15 @@
 const require_rolldown_runtime = require("./rolldown-runtime-BloeesfJ.cjs");
 const require_runtime = require("./runtime-gZTAuFux.cjs");
 require("../runtime-api.cjs");
-const require_resolve_allowlist = require("./resolve-allowlist-Pl_NQFYH.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-Ct9yxQUw.cjs");
 const require_bot_framework_service_url = require("./bot-framework-service-url-BUhTe8F3.cjs");
-const require_channel = require("./channel-ByzS7QJ0.cjs");
-const require_thread_session = require("./thread-session--rw3BTal.cjs");
-const require_channel_setup = require("./channel.setup-DL8lcWT_.cjs");
+const require_token_config = require("./token-config-DOt3XwVa.cjs");
+const require_channel = require("./channel-BFhXodl2.cjs");
+const require_thread_session = require("./thread-session-ClI-lSyG.cjs");
+const require_channel_setup = require("./channel.setup-ss0TO-ap.cjs");
 const require_approval_card = require("./approval-card-DWPDItvq.cjs");
-const require_conversation_store_state = require("./conversation-store-state-B7JuyZTm.cjs");
-const require_reaction_types = require("./reaction-types-CQ4oSUe7.cjs");
+const require_conversation_store_state = require("./conversation-store-state-f7V8CVNy.cjs");
+const require_reaction_types = require("./reaction-types-B-GEv57k.cjs");
 let openclaw_plugin_sdk_channel_outbound = require("openclaw/plugin-sdk/channel-outbound");
 let openclaw_plugin_sdk_string_coerce_runtime = require("openclaw/plugin-sdk/string-coerce-runtime");
 let openclaw_plugin_sdk_allow_from = require("openclaw/plugin-sdk/allow-from");
@@ -31,6 +32,7 @@ let openclaw_plugin_sdk_channel_ingress_runtime = require("openclaw/plugin-sdk/c
 let openclaw_plugin_sdk_context_visibility_runtime = require("openclaw/plugin-sdk/context-visibility-runtime");
 let openclaw_plugin_sdk_reply_history = require("openclaw/plugin-sdk/reply-history");
 let openclaw_plugin_sdk_runtime_config_snapshot = require("openclaw/plugin-sdk/runtime-config-snapshot");
+let openclaw_plugin_sdk_request_url = require("openclaw/plugin-sdk/request-url");
 let openclaw_plugin_sdk_agent_runtime = require("openclaw/plugin-sdk/agent-runtime");
 let openclaw_plugin_sdk_extension_shared = require("openclaw/plugin-sdk/extension-shared");
 let openclaw_plugin_sdk_plugin_runtime = require("openclaw/plugin-sdk/plugin-runtime");
@@ -80,19 +82,6 @@ async function storeSessionLearning(params) {
 }
 //#endregion
 //#region extensions/msteams/src/feedback-reflection.ts
-function buildFeedbackEvent(params) {
-	return {
-		type: "custom",
-		event: "feedback",
-		ts: Date.now(),
-		messageId: params.messageId,
-		value: params.value,
-		comment: params.comment,
-		sessionKey: params.sessionKey,
-		agentId: params.agentId,
-		conversationId: params.conversationId
-	};
-}
 /**
 * Run a background reflection after negative feedback.
 * This is designed to be called fire-and-forget (don't await in the invoke handler).
@@ -1102,7 +1091,7 @@ async function downloadMSTeamsAttachments(params) {
 				kind: candidate.mediaKind,
 				preserveFilenames: params.preserveFilenames,
 				fetchImpl: (input, init) => fetchWithAuthFallback({
-					url: require_resolve_allowlist.resolveRequestUrl(input),
+					url: (0, openclaw_plugin_sdk_request_url.resolveRequestUrl)(input),
 					tokenProvider: params.tokenProvider,
 					fetchFn: params.fetchFn,
 					fetchFnSupportsDispatcher: params.fetchFnSupportsDispatcher,
@@ -1382,7 +1371,7 @@ async function downloadMSTeamsGraphMedia(params) {
 				contentTypeHint: "application/octet-stream",
 				preserveFilenames: params.preserveFilenames,
 				fetchImpl: async (input, init) => {
-					const requestUrl = require_resolve_allowlist.resolveRequestUrl(input);
+					const requestUrl = (0, openclaw_plugin_sdk_request_url.resolveRequestUrl)(input);
 					const headers = require_resolve_allowlist.ensureUserAgentHeader(init?.headers);
 					require_resolve_allowlist.applyAuthorizationHeaderForUrl({
 						headers,
@@ -1494,11 +1483,8 @@ function mergeMSTeamsMediaFacts(nativeMedia, materializedMedia, options = {}) {
 	for (const [index, materialized] of materializedMedia.entries()) {
 		const sourceIndex = materialized.sourceId ? nativeIndexBySourceId.get(materialized.sourceId) : void 0;
 		const positionalIndex = options.positionallyAligned === false || index >= nativeMedia.length ? void 0 : index;
-		const mayUseFallbackOrder = options.positionallyAligned === false;
-		const isEligibleUnresolved = (media) => !media.path && !media.sourceId;
-		const sameKindUnresolvedIndexes = mayUseFallbackOrder ? merged.slice(0, nativeSlotCount).flatMap((media, mediaIndex) => isEligibleUnresolved(media) && media.kind === materialized.kind ? [mediaIndex] : []) : [];
-		const unresolvedIndexes = sameKindUnresolvedIndexes.length === 0 && mayUseFallbackOrder ? merged.slice(0, nativeSlotCount).flatMap((media, mediaIndex) => isEligibleUnresolved(media) ? [mediaIndex] : []) : [];
-		const fallbackIndex = sameKindUnresolvedIndexes.length > 0 ? sameKindUnresolvedIndexes[0] : unresolvedIndexes.length === 1 ? unresolvedIndexes[0] : void 0;
+		const unresolvedIndexes = options.positionallyAligned === false ? merged.slice(0, nativeSlotCount).flatMap((media, mediaIndex) => !media.path && !media.sourceId ? [mediaIndex] : []) : [];
+		const fallbackIndex = unresolvedIndexes.find((mediaIndex) => merged[mediaIndex]?.kind === materialized.kind) ?? (unresolvedIndexes.length === 1 ? unresolvedIndexes[0] : void 0);
 		const targetIndex = sourceIndex ?? positionalIndex ?? fallbackIndex;
 		if (targetIndex === void 0) {
 			if (materialized.sourceId) nativeIndexBySourceId.set(materialized.sourceId, merged.length);
@@ -1683,21 +1669,7 @@ async function prepareMSTeamsInboundContent(params) {
 function isStreamCancelledError(err) {
 	return err instanceof Error && err.name === "StreamCancelledError";
 }
-/**
-* Bridges openclaw's reply pipeline callbacks to the SDK's `ctx.stream`.
-* Streaming is enabled for personal (DM) conversations only; group/channel
-* messages fall through to block delivery.
-*
-* Streaming modes (resolved from `cfg.channels.msteams.streaming.mode`):
-* - "partial" (default): per-token streaming via `stream.emit(text)`. Each
-*   chunk goes onto the live preview card in Teams.
-* - "progress": no per-token streaming; the preview card carries an
-*   informative status that updates as tools run (e.g. "Looking up the
-*   schema..." → "Generating SQL..."). When tool-progress streaming is also
-*   enabled, raw tool names appear as bullets above the label.
-* - "block": disable native streaming entirely; the reply lands as a regular
-*   block message. We bypass the controller in that case.
-*/
+/** Bridge reply callbacks to the SDK stream; shared conversations use block delivery. */
 function createTeamsReplyStreamController(params) {
 	const isPersonal = (0, openclaw_plugin_sdk_string_coerce_runtime.normalizeOptionalLowercaseString)(params.conversationType) === "personal";
 	const streamMode = (0, openclaw_plugin_sdk_channel_outbound.resolveChannelPreviewStreamMode)(params.msteamsConfig, "partial");
@@ -2111,7 +2083,6 @@ function createMSTeamsReplyDispatcher(params) {
 		return require_conversation_store_state.sendMSTeamsMessages({
 			replyStyle: params.replyStyle,
 			app: params.app,
-			appId: params.appId,
 			conversationRef: params.conversationRef,
 			context: params.context,
 			messages,
@@ -2373,7 +2344,7 @@ function createMSTeamsReplyDispatcher(params) {
 //#region extensions/msteams/src/monitor-handler/inbound-dispatch.ts
 async function dispatchMSTeamsInboundTurn(params) {
 	const core = require_runtime.getMSTeamsRuntime();
-	const { cfg, runtime, appId, app, tokenProvider, textLimit, log, logVerboseMessage, facts, admission, content, routing, thread, replyStyle, timestamp, contextVisibilityMode, conversationHistories, historyLimit } = params;
+	const { cfg, runtime, app, tokenProvider, textLimit, log, logVerboseMessage, facts, admission, content, routing, thread, replyStyle, timestamp, contextVisibilityMode, conversationHistories, historyLimit } = params;
 	const { context, activity, rawBody, text, quoteInfo, conversationRef } = facts;
 	const { senderId, senderName, isDirectMessage, allowNameMatching, groupPolicy, commandAuthorized, effectiveGroupAllowFrom } = admission;
 	const { route } = routing;
@@ -2518,7 +2489,6 @@ async function dispatchMSTeamsInboundTurn(params) {
 		runtime,
 		log,
 		app,
-		appId,
 		conversationRef,
 		context,
 		replyStyle,
@@ -3130,7 +3100,6 @@ function createMSTeamsMessageHandler(deps) {
 		await dispatchMSTeamsInboundTurn({
 			cfg: currentCfg,
 			runtime,
-			appId,
 			app,
 			tokenProvider,
 			textLimit,
@@ -3224,10 +3193,6 @@ function createMSTeamsMessageHandler(deps) {
 }
 //#endregion
 //#region extensions/msteams/src/monitor-handler/reaction-handler.ts
-/**
-* Create a handler for MS Teams reaction activities (reactionsAdded / reactionsRemoved).
-* The returned function accepts a turn context and a direction string.
-*/
 function createMSTeamsReactionHandler(deps) {
 	const { cfg, log } = deps;
 	const core = require_runtime.getMSTeamsRuntime();
@@ -3314,17 +3279,11 @@ function createMSTeamsReactionHandler(deps) {
 }
 //#endregion
 //#region extensions/msteams/src/welcome-card.ts
-/**
-* Builds an Adaptive Card for welcoming users when the bot is added to a conversation.
-*/
 const DEFAULT_PROMPT_STARTERS = [
 	"What can you do?",
 	"Summarize my last meeting",
 	"Help me draft an email"
 ];
-/**
-* Build a welcome Adaptive Card for 1:1 personal chats.
-*/
 function buildWelcomeCard(options) {
 	const botName = options?.botName || "OpenClaw";
 	const starters = options?.promptStarters?.length ? options.promptStarters : DEFAULT_PROMPT_STARTERS;
@@ -3351,23 +3310,20 @@ function buildWelcomeCard(options) {
 		}))
 	};
 }
-/**
-* Build a brief welcome message for group chats (when the bot is @mentioned).
-*/
 function buildGroupWelcomeText(botName) {
 	const name = botName || "OpenClaw";
 	return `Hi! I'm ${name}. Mention me with @${name} to get started.`;
 }
 //#endregion
 //#region extensions/msteams/src/monitor-handler.ts
-async function isInvokeAuthorized(params) {
-	const { context, deps, deniedLogs, includeInvokeName = false } = params;
+async function isMSTeamsInvokeAuthorized(params) {
+	const { context, deps, invokeKind } = params;
 	const resolved = await resolveMSTeamsSenderAccess({
 		cfg: deps.cfg,
 		activity: context.activity
 	});
 	const { msteamsCfg, isDirectMessage, conversationId, senderId } = resolved;
-	const maybeInvokeName = includeInvokeName ? { name: context.activity.name } : void 0;
+	const maybeInvokeName = invokeKind === "feedback" ? void 0 : { name: context.activity.name };
 	if (resolved.hasConflictingConversationScope) {
 		deps.log.info("dropping invoke (conflicting conversation scope)", {
 			conversationId,
@@ -3377,7 +3333,7 @@ async function isInvokeAuthorized(params) {
 	}
 	if (!msteamsCfg) return true;
 	if (isDirectMessage && resolved.senderAccess.decision !== "allow") {
-		deps.log.debug?.(deniedLogs.dm, {
+		deps.log.debug?.(`dropping ${invokeKind} invoke (dm sender not allowlisted)`, {
 			sender: senderId,
 			conversationId,
 			...maybeInvokeName
@@ -3385,7 +3341,7 @@ async function isInvokeAuthorized(params) {
 		return false;
 	}
 	if (!isDirectMessage && resolved.channelGate.allowlistConfigured && !resolved.channelGate.allowed) {
-		deps.log.debug?.(deniedLogs.channel, {
+		deps.log.debug?.(`dropping ${invokeKind} invoke (not in team/channel allowlist)`, {
 			conversationId,
 			teamKey: resolved.channelGate.teamKey ?? "none",
 			channelKey: resolved.channelGate.channelKey ?? "none",
@@ -3394,7 +3350,7 @@ async function isInvokeAuthorized(params) {
 		return false;
 	}
 	if (!isDirectMessage && !resolved.senderAccess.allowed) {
-		deps.log.debug?.(deniedLogs.group, {
+		deps.log.debug?.(`dropping ${invokeKind} invoke (group sender not allowlisted)`, {
 			sender: senderId,
 			conversationId,
 			...maybeInvokeName
@@ -3403,41 +3359,6 @@ async function isInvokeAuthorized(params) {
 	}
 	return true;
 }
-async function isFeedbackInvokeAuthorized(context, deps) {
-	return isInvokeAuthorized({
-		context,
-		deps,
-		deniedLogs: {
-			dm: "dropping feedback invoke (dm sender not allowlisted)",
-			channel: "dropping feedback invoke (not in team/channel allowlist)",
-			group: "dropping feedback invoke (group sender not allowlisted)"
-		}
-	});
-}
-async function isSigninInvokeAuthorized(context, deps) {
-	return isInvokeAuthorized({
-		context,
-		deps,
-		deniedLogs: {
-			dm: "dropping signin invoke (dm sender not allowlisted)",
-			channel: "dropping signin invoke (not in team/channel allowlist)",
-			group: "dropping signin invoke (group sender not allowlisted)"
-		},
-		includeInvokeName: true
-	});
-}
-async function isCardActionInvokeAuthorized(context, deps) {
-	return isInvokeAuthorized({
-		context,
-		deps,
-		deniedLogs: {
-			dm: "dropping card action invoke (dm sender not allowlisted)",
-			channel: "dropping card action invoke (not in team/channel allowlist)",
-			group: "dropping card action invoke (group sender not allowlisted)"
-		},
-		includeInvokeName: true
-	});
-}
 function createMSTeamsActivityHandler(deps) {
 	const handleTeamsMessage = createMSTeamsMessageHandler(deps);
 	const handleReaction = createMSTeamsReactionHandler(deps);
@@ -3510,21 +3431,7 @@ function createMSTeamsActivityHandler(deps) {
 }
 //#endregion
 //#region extensions/msteams/src/feedback-invoke.ts
-/**
-* Run the message-submit (feedback) invoke handler.
-*
-* Teams delivers feedback (`actionName === "feedback"`) on AI-generated
-* messages as a `message/submitAction` invoke. The SDK wraps a void return
-* into the HTTP 200 InvokeResponse, so this function intentionally does
-* not ack itself — the legacy `ctx.sendActivity({ type: "invokeResponse",
-* … })` shape is gone (it became an outbound BF activity on the new SDK
-* instead of the HTTP response).
-*
-* Returns `true` if the invoke matched the feedback shape and was
-* consumed (whether or not it was authorized / written / reflected on),
-* `false` if the invoke didn't look like feedback at all and the caller
-* should fall through to other handlers.
-*/
+/** Return whether feedback consumed the invoke; the SDK owns its HTTP acknowledgement. */
 async function runMSTeamsFeedbackInvokeHandler(context, deps) {
 	const activity = context.activity;
 	const value = activity.value;
@@ -3540,7 +3447,11 @@ async function runMSTeamsFeedbackInvokeHandler(context, deps) {
 		deps.log.debug?.("feedback handling disabled");
 		return true;
 	}
-	if (!await isFeedbackInvokeAuthorized(context, deps)) return true;
+	if (!await isMSTeamsInvokeAuthorized({
+		context,
+		deps,
+		invokeKind: "feedback"
+	})) return true;
 	let userComment;
 	if (value.actionValue?.feedback) try {
 		userComment = JSON.parse(value.actionValue.feedback).feedbackText || void 0;
@@ -3567,14 +3478,17 @@ async function runMSTeamsFeedbackInvokeHandler(context, deps) {
 		threadId: feedbackThreadId,
 		parentSessionKey: route.sessionKey
 	}).sessionKey;
-	const feedbackEvent = buildFeedbackEvent({
+	const feedbackEvent = {
+		type: "custom",
+		event: "feedback",
+		ts: Date.now(),
 		messageId,
 		value: isNegative ? "negative" : "positive",
 		comment: userComment,
 		sessionKey: route.sessionKey,
 		agentId: route.agentId,
 		conversationId
-	});
+	};
 	deps.log.info("received feedback", {
 		value: feedbackEvent.value,
 		messageId,
@@ -3860,15 +3774,9 @@ function createMSTeamsIngress(options) {
 		stop: () => {
 			stopTask ??= (async () => {
 				await monitor.pause();
-				let graceTimer;
-				const graceElapsed = new Promise((resolve) => {
-					graceTimer = setTimeout(resolve, require_resolve_allowlist.MSTEAMS_REQUEST_TIMEOUT_MS);
-					graceTimer.unref?.();
-				});
 				try {
-					await Promise.race([monitor.waitForIdle(), graceElapsed]);
+					await (0, openclaw_plugin_sdk_time_runtime.raceWithTimeout)(() => monitor.waitForIdle(), require_resolve_allowlist.MSTEAMS_REQUEST_TIMEOUT_MS, () => void 0, { ref: false });
 				} finally {
-					clearTimeout(graceTimer);
 					await monitor.stop();
 					liveContexts.clear();
 				}
@@ -3933,11 +3841,6 @@ function createMSTeamsReplayContext(activity, app, serviceUrlBoundary) {
 * Tokens are keyed by (connectionName, userId). `userId` should be the
 * stable AAD object ID (`activity.from.aadObjectId`) when available,
 * falling back to the Bot Framework `activity.from.id`.
-*
-* The store is intentionally minimal: it persists the exchanged user
-* token plus its expiration so consumers (for example tool handlers
-* that call Microsoft Graph with delegated permissions) can fetch a
-* valid token without reaching back into Bot Framework every turn.
 */
 const MSTEAMS_SSO_TOKENS_NAMESPACE = "sso-tokens";
 const SSO_TOKEN_MUTATION_KEY = "sso-tokens";
@@ -3946,15 +3849,12 @@ const STORE_KEY_VERSION_PREFIX = "v2:";
 function makeMSTeamsSsoTokenStoreKey(connectionName, userId) {
 	return `${STORE_KEY_VERSION_PREFIX}${(0, node_crypto.createHash)("sha256").update(JSON.stringify([connectionName, userId])).digest("hex")}`;
 }
-function createTokenStore(params) {
-	return require_runtime.getMSTeamsRuntime().state.openKeyedStore({
+function createMSTeamsSsoTokenStoreFs(params) {
+	const tokenStore = require_runtime.getMSTeamsRuntime().state.openKeyedStore({
 		namespace: MSTEAMS_SSO_TOKENS_NAMESPACE,
 		maxEntries: MSTEAMS_MAX_SSO_TOKENS,
 		env: require_conversation_store_state.resolveMSTeamsSqliteStateEnv(params)
 	});
-}
-function createMSTeamsSsoTokenStoreFs(params) {
-	const tokenStore = createTokenStore(params);
 	return {
 		async get({ connectionName, userId }) {
 			return await tokenStore.lookup(makeMSTeamsSsoTokenStoreKey(connectionName, userId)) ?? null;
@@ -3965,11 +3865,7 @@ function createMSTeamsSsoTokenStoreFs(params) {
 			});
 		},
 		async remove({ connectionName, userId }) {
-			let removed = false;
-			await require_conversation_store_state.withMSTeamsSqliteMutationLock(params, SSO_TOKEN_MUTATION_KEY, async () => {
-				removed = await tokenStore.delete(makeMSTeamsSsoTokenStoreKey(connectionName, userId));
-			});
-			return removed;
+			return require_conversation_store_state.withMSTeamsSqliteMutationLock(params, SSO_TOKEN_MUTATION_KEY, () => tokenStore.delete(makeMSTeamsSsoTokenStoreKey(connectionName, userId)));
 		}
 	};
 }
@@ -4035,7 +3931,7 @@ async function monitorMSTeamsProvider(opts) {
 			shutdown: async () => {}
 		};
 	}
-	const creds = require_resolve_allowlist.resolveMSTeamsCredentials(msteamsCfg);
+	const creds = require_token_config.resolveMSTeamsCredentials(msteamsCfg);
 	if (!creds) {
 		log.error("msteams credentials not configured");
 		publishMSTeamsBlocked(opts.statusSink, "Microsoft Teams credentials are not configured");
@@ -4220,7 +4116,11 @@ async function monitorMSTeamsProvider(opts) {
 			if (vote) {
 				const voterId = activity?.from?.aadObjectId ?? activity?.from?.id ?? "unknown";
 				try {
-					if (!await isCardActionInvokeAuthorized(adaptedCtx, handlerDeps)) return cardActionMessage("Not authorized.");
+					if (!await isMSTeamsInvokeAuthorized({
+						context: adaptedCtx,
+						deps: handlerDeps,
+						invokeKind: "card action"
+					})) return cardActionMessage("Not authorized.");
 					const existingPoll = await pollStore.getPoll(vote.pollId);
 					if (!existingPoll) {
 						log.debug?.("poll vote ignored (poll not found)", { pollId: vote.pollId });
@@ -4254,36 +4154,14 @@ async function monitorMSTeamsProvider(opts) {
 						pollId: vote.pollId,
 						error: require_channel_setup.formatUnknownError(err)
 					});
-					return {
-						statusCode: 500,
-						type: "application/vnd.microsoft.error",
-						value: {
-							code: "RECORD_VOTE_FAILED",
-							message: "Could not record vote.",
-							innerHttpError: {
-								statusCode: 500,
-								body: null
-							}
-						}
-					};
+					return cardActionError("RECORD_VOTE_FAILED", "Could not record vote.");
 				}
 			}
 			await ingress.accept(activity, adaptedCtx);
 			return cardActionMessage("OK");
 		} catch (err) {
 			log.error("msteams card.action failed", { error: require_channel_setup.formatUnknownError(err) });
-			return {
-				statusCode: 500,
-				type: "application/vnd.microsoft.error",
-				value: {
-					code: "CARD_ACTION_FAILED",
-					message: "Card action failed.",
-					innerHttpError: {
-						statusCode: 500,
-						body: null
-					}
-				}
-			};
+			return cardActionError("CARD_ACTION_FAILED", "Card action failed.");
 		}
 	});
 	app.on("file.consent.accept", (ctx) => {
@@ -4296,11 +4174,15 @@ async function monitorMSTeamsProvider(opts) {
 	app.process = async (event) => {
 		const activity = event.body;
 		if (activity.type !== "invoke" || !("name" in activity) || activity.name !== "signin/tokenExchange" && activity.name !== "signin/verifyState") return processActivity(event);
-		if (!await isSigninInvokeAuthorized({ activity: {
-			...activity,
-			type: activity.type,
-			name: activity.name
-		} }, handlerDeps)) return {
+		if (!await isMSTeamsInvokeAuthorized({
+			context: { activity: {
+				...activity,
+				type: activity.type,
+				name: activity.name
+			} },
+			deps: handlerDeps,
+			invokeKind: "signin"
+		})) return {
 			status: 200,
 			body: {}
 		};
@@ -4315,7 +4197,11 @@ async function monitorMSTeamsProvider(opts) {
 	};
 	if (ssoDeps) app.event("signin", (ctx) => {
 		(async () => {
-			if (!await isSigninInvokeAuthorized(adaptSdkContext(ctx, app), handlerDeps)) return;
+			if (!await isMSTeamsInvokeAuthorized({
+				context: adaptSdkContext(ctx, app),
+				deps: handlerDeps,
+				invokeKind: "signin"
+			})) return;
 			const activity = ctx.activity;
 			const userIds = Array.from(new Set([activity.from?.id, activity.from?.aadObjectId].filter((id) => Boolean(id))));
 			const connectionName = ctx.token.connectionName || ssoDeps.connectionName;
@@ -4430,6 +4316,20 @@ function cardActionMessage(value) {
 		value
 	};
 }
+function cardActionError(code, message) {
+	return {
+		statusCode: 500,
+		type: "application/vnd.microsoft.error",
+		value: {
+			code,
+			message,
+			innerHttpError: {
+				statusCode: 500,
+				body: null
+			}
+		}
+	};
+}
 /**
 * Adapt a new @microsoft/teams.apps SDK context to the MSTeamsTurnContext interface
 * our handlers expect. The new SDK uses reply()/send() instead of sendActivity().

package/dist/.setup/{oauth-DQjOnJ4l.cjs → oauth-CYxMYIOQ.cjs}

@@ -1,4 +1,4 @@
-const require_resolve_allowlist = require("./resolve-allowlist-Pl_NQFYH.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-Ct9yxQUw.cjs");
 let openclaw_plugin_sdk_runtime_env = require("openclaw/plugin-sdk/runtime-env");
 let openclaw_plugin_sdk_provider_auth = require("openclaw/plugin-sdk/provider-auth");
 let openclaw_plugin_sdk_provider_auth_runtime = require("openclaw/plugin-sdk/provider-auth-runtime");

package/dist/.setup/{reaction-types-CQ4oSUe7.cjs → reaction-types-B-GEv57k.cjs}

@@ -1,4 +1,4 @@
-const require_resolve_allowlist = require("./resolve-allowlist-Pl_NQFYH.cjs");
+const require_resolve_allowlist = require("./resolve-allowlist-Ct9yxQUw.cjs");
 //#region extensions/msteams/src/graph-thread.ts
 /**
 * Strip HTML tags from Teams message content, preserving @mention display names.