@ouro.bot/cli 0.1.0-alpha.642 → 0.1.0-alpha.643

package/changelog.json

@@ -1,6 +1,12 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.643",
+      "changes": [
+        "Dependency audit hardening: refresh the Teams SDK family and vulnerable transitive packages, force Teams' stale msal-node edge onto the safe 5.2.x line, update Teams invoke handlers for the newer SDK route-handler return contract, and add a root npm audit gate to release preflight."
+      ]
+    },
     {
       "version": "0.1.0-alpha.642",
       "changes": [

package/dist/senses/teams.js

@@ -946,7 +946,7 @@ function registerBotHandlers(app, label) {
         const turnKey = teamsTurnKey(convId);
         // Validate payload — graceful no-op for malformed invocations
         if (activity.value?.actionName !== "feedback" || !reaction) {
-            return;
+            return undefined;
         }
         const syntheticText = buildFeedbackSyntheticText(reaction, comment);
         // Turn coordination: if a turn is active, enqueue as steering follow-up
@@ -957,7 +957,7 @@ function registerBotHandlers(app, label) {
                 receivedAt: Date.now(),
                 effect: (0, continuity_1.classifySteeringFollowUpEffect)(syntheticText),
             });
-            return;
+            return undefined;
         }
         try {
             const teamsContext = {
@@ -978,6 +978,7 @@ function registerBotHandlers(app, label) {
         finally {
             _turnCoordinator.endTurn(turnKey);
         }
+        return undefined;
     });
     /* v8 ignore stop */
     // Handle bot install — send welcome Adaptive Card with prompt starters.
@@ -999,6 +1000,7 @@ function registerBotHandlers(app, label) {
             const msg = err instanceof Error ? err.message : String(err);
             (0, runtime_1.emitNervesEvent)({ level: "error", event: "channel.welcome_handler_error", component: "channels", message: msg.slice(0, 200), meta: {} });
         }
+        return undefined;
     });
     /* v8 ignore stop */
     app.on("message", async (ctx) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.642",
+  "version": "0.1.0-alpha.643",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",
@@ -52,12 +52,12 @@
     "@anthropic-ai/sdk": "^0.78.0",
     "@azure/identity": "^4.13.0",
     "@azure/storage-blob": "^12.31.0",
-    "@microsoft/teams.api": "2.0.5",
-    "@microsoft/teams.apps": "^2.0.5",
-    "@microsoft/teams.cards": "2.0.5",
-    "@microsoft/teams.common": "2.0.5",
-    "@microsoft/teams.dev": "^2.0.5",
-    "@microsoft/teams.graph": "2.0.5",
+    "@microsoft/teams.api": "2.0.11",
+    "@microsoft/teams.apps": "2.0.11",
+    "@microsoft/teams.cards": "2.0.11",
+    "@microsoft/teams.common": "2.0.11",
+    "@microsoft/teams.dev": "2.0.11",
+    "@microsoft/teams.graph": "2.0.11",
     "@types/react": "^17.0.91",
     "@types/ws": "^8.18.1",
     "fast-glob": "^3.3.3",
@@ -87,6 +87,9 @@
     "vitest": "^4.0.18"
   },
   "overrides": {
+    "@microsoft/teams.apps": {
+      "@azure/msal-node": "^5.2.2"
+    },
     "@testing-library/react": {
       "react": "$react",
       "@types/react": "$@types/react"