n8n-nodes-base 2.40.2 → 2.41.0

package/dist/nodes/Microsoft/Teams/v2/helpers/utils.d.ts

@@ -1,4 +1,6 @@
-import type { IExecuteFunctions, ILoadOptionsFunctions, INodeListSearchItems } from 'n8n-workflow';
+import type { IDataObject, IExecuteFunctions, ILoadOptionsFunctions, INode, INodeListSearchItems } from 'n8n-workflow';
+import { NodeOperationError } from 'n8n-workflow';
+import { type UserTargetMessages } from '../../../GenericFunctions';
 /** Where the `<at>` tokens go relative to the message text. The workflow-link footer, when on,
  * always comes last, so `end` means "after the text, before the footer". */
 export type MentionPlacement = 'start' | 'end';
@@ -10,23 +12,45 @@ export type Mention = {
             displayName: string;
             userIdentityType: 'aadUser';
         };
+    } | {
+        tag: {
+            id: string;
+            displayName: string;
+        };
     };
 };
+export declare const userTargetMessages: (label: string) => UserTargetMessages;
 /**
- * Resolves every mention row to a Graph user. Graph stores `mentions[].mentioned.user` verbatim
- * and resolves nothing: a UPN or a well-formed but nonexistent GUID is accepted with a 200 and a
- * mention that notifies nobody. So each row goes through `GET /users/{idOrUpn}` first, which also
- * yields the authoritative display name.
+ * Rewrites Graph's 403 for a missing team-tag scope into copy that names the n8n action. Returns
+ * `undefined` for every other error, so both tag call sites stay one line and the two
+ * descriptions cannot drift apart.
  *
- * Rows are walked in order, one request each: a realistic list is 1-3 entries, and sequential
- * keeps a failing row unambiguous and the resolved array in row order.
+ * The text has to be read from all three fields. The delegated transport branch in
+ * `utils/microsoft/transport.ts` passes `errorOptions.message`, which puts Graph's text in
+ * `.message` and clears `.description`; a `NodeApiError` built from a raw response body leaves it
+ * in `.description` and `.messages`. Gating on one field alone is green in tests and dead in
+ * production.
  */
-export declare function resolveMentions(this: IExecuteFunctions, itemIndex: number): Promise<Mention[]>;
-export declare function prepareMessage(this: IExecuteFunctions | ILoadOptionsFunctions, message: string, contentType: string, includeLinkToWorkflow: boolean, instanceId?: string): {
-    body: {
-        contentType: string;
-        content: string;
-    };
-};
+export declare function tagPermissionError(error: unknown, node: INode, message: string, itemIndex?: number): NodeOperationError | undefined;
+/**
+ * Resolves one user-picker row to the Graph user it names. Graph stores
+ * `mentions[].mentioned.user` verbatim and resolves nothing: a UPN or a well-formed but
+ * nonexistent GUID is accepted with a 200 and a mention that notifies nobody. So each row goes
+ * through `GET /users/{idOrUpn}` first, which also yields the authoritative display name.
+ *
+ * `label` names the row in every error (`mention 2`, `participant 1`) and must never carry a
+ * parameter value. Shared by the mention rows and by `chat:create`'s participant rows.
+ */
+export declare function resolveUserTarget(this: IExecuteFunctions, raw: unknown, itemIndex: number, label: string): Promise<IDataObject>;
+/**
+ * Resolves every mention row to a Graph user or team tag. Graph stores `mentions[].mentioned`
+ * verbatim and resolves nothing: a UPN, a well-formed but nonexistent GUID or a bogus tag ID is
+ * accepted with a 200 and a mention that notifies nobody. So each row is looked up first, which
+ * also yields the authoritative display name.
+ *
+ * Rows are walked in order, one request each: sequential keeps a failing row unambiguous.
+ */
+export declare function resolveMentions(this: IExecuteFunctions, itemIndex: number, teamId?: string): Promise<Mention[]>;
+export declare function prepareMessage(this: IExecuteFunctions | ILoadOptionsFunctions, message: string, contentType: string, includeLinkToWorkflow: boolean, instanceId?: string, mentions?: readonly Mention[], mentionPlacement?: MentionPlacement): IDataObject;
 export declare function filterSortSearchListItems(items: INodeListSearchItems[], filter?: string): INodeListSearchItems[];
 //# sourceMappingURL=utils.d.ts.map

package/dist/nodes/Microsoft/Teams/v2/helpers/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../../../nodes/Microsoft/Teams/v2/helpers/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEX,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,MAAM,cAAc,CAAC;AAWtB;4EAC4E;AAC5E,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,CAAC;AAE/C,MAAM,MAAM,OAAO,GAAG;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE;QAAE,IAAI,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,gBAAgB,EAAE,SAAS,CAAA;SAAE,CAAA;KAAE,CAAC;CACtF,CAAC;AAqDF;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACpC,IAAI,EAAE,iBAAiB,EACvB,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,EAAE,CAAC,CA+EpB;AAED,wBAAgB,cAAc,CAC7B,IAAI,EAAE,iBAAiB,GAAG,qBAAqB,EAC/C,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,qBAAqB,EAAE,OAAO,EAC9B,UAAU,CAAC,EAAE,MAAM;;;;;EAiBnB;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,oBAAoB,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,0BAiBvF"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../../../nodes/Microsoft/Teams/v2/helpers/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,WAAW,EACX,iBAAiB,EACjB,qBAAqB,EACrB,KAAK,EACL,oBAAoB,EACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAwC,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGxF,OAAO,EAGN,KAAK,kBAAkB,EACvB,MAAM,2BAA2B,CAAC;AAGnC;4EAC4E;AAC5E,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,CAAC;AAE/C,MAAM,MAAM,OAAO,GAAG;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EACN;QAAE,IAAI,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,gBAAgB,EAAE,SAAS,CAAA;SAAE,CAAA;KAAE,GAC1E;QAAE,GAAG,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CAChD,CAAC;AAoBF,eAAO,MAAM,kBAAkB,UAAW,MAAM,KAAG,kBAcjD,CAAC;AAEH;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CACjC,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,KAAK,EACX,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,GAChB,kBAAkB,GAAG,SAAS,CAWhC;AA6HD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACtC,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACX,OAAO,CAAC,WAAW,CAAC,CA4CtB;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACpC,IAAI,EAAE,iBAAiB,EACvB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,EAAE,CAAC,CAkGpB;AAED,wBAAgB,cAAc,CAC7B,IAAI,EAAE,iBAAiB,GAAG,qBAAqB,EAC/C,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,qBAAqB,EAAE,OAAO,EAC9B,UAAU,CAAC,EAAE,MAAM,EAGnB,QAAQ,GAAE,SAAS,OAAO,EAAO,EACjC,gBAAgB,GAAE,gBAA0B,eAyC5C;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,oBAAoB,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,0BAiBvF"}

package/dist/nodes/Microsoft/Teams/v2/helpers/utils.js

@@ -1,5 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.userTargetMessages = void 0;
+exports.tagPermissionError = tagPermissionError;
+exports.resolveUserTarget = resolveUserTarget;
 exports.resolveMentions = resolveMentions;
 exports.prepareMessage = prepareMessage;
 exports.filterSortSearchListItems = filterSortSearchListItems;
@@ -7,56 +10,218 @@ const n8n_workflow_1 = require("n8n-workflow");
 const query_escaping_1 = require("../../../../../utils/query-escaping");
 const GenericFunctions_1 = require("../../../GenericFunctions");
 const transport_1 = require("../transport");
-// `row` is the node-generated row number (loop index + 1), never a user-supplied value, so
-// these stay static in the sense that matters: they cannot echo the id back.
-const mentionMessages = (row) => ({
+/**
+ * Escapes the marker text. A B2B guest's display name is third-party input, and an unescaped
+ * angle bracket breaks the token. NOT `escapeHtml` from `utils/utilities.ts`: that one decodes.
+ *
+ * Apply this to the `<at>` inner text AND to `mentions[].mentionText`, so the two are the same
+ * string. Graph matches the marker leniently (either form is accepted) but then uses
+ * `mentionText.length` to find where the token ends. Feeding it the raw name while the body
+ * holds the escaped one makes it resume that many characters early and duplicate the tail of
+ * `</at>` into the message, which renders as a stray `/at>` after the chip. Same length on both
+ * sides, no drift.
+ */
+function escapeMentionText(text) {
+    return text.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;');
+}
+// `label` is a node-generated row label (e.g. `mention 2`, `participant 1`), never a
+// user-supplied value. Callers must never pass an id or any parameter value: these messages
+// are surfaced verbatim and must not echo input back.
+const userTargetMessages = (label) => ({
     required: {
-        message: `No user selected for mention ${row}`,
+        message: `No user selected for ${label}`,
         description: 'Pick the user from the list, or enter a user ID or email address.',
     },
     dotsOnly: {
-        message: `The user for mention ${row} is not valid`,
+        message: `The user for ${label} is not valid`,
         description: 'A user ID cannot consist only of dots.',
     },
     invalid: {
-        message: `The user for mention ${row} is not valid`,
+        message: `The user for ${label} is not valid`,
         description: 'Enter a plain email address or user ID. Remove any slashes, backslashes, colons, commas, spaces, or encoded characters and try again.',
     },
 });
+exports.userTargetMessages = userTargetMessages;
+/**
+ * Rewrites Graph's 403 for a missing team-tag scope into copy that names the n8n action. Returns
+ * `undefined` for every other error, so both tag call sites stay one line and the two
+ * descriptions cannot drift apart.
+ *
+ * The text has to be read from all three fields. The delegated transport branch in
+ * `utils/microsoft/transport.ts` passes `errorOptions.message`, which puts Graph's text in
+ * `.message` and clears `.description`; a `NodeApiError` built from a raw response body leaves it
+ * in `.description` and `.messages`. Gating on one field alone is green in tests and dead in
+ * production.
+ */
+function tagPermissionError(error, node, message, itemIndex) {
+    if (!(error instanceof n8n_workflow_1.NodeApiError) || error.httpCode !== '403')
+        return undefined;
+    if (![error.message, error.description, ...error.messages].join(' ').includes('TeamworkTag')) {
+        return undefined;
+    }
+    return new n8n_workflow_1.NodeOperationError(node, message, {
+        itemIndex,
+        description: "This credential does not have permission to read team tags. Add TeamworkTag.Read to the credential's scopes if you set them yourself, then open the credential and select Reconnect. A Microsoft Entra admin must approve it.",
+    });
+}
 /**
  * `GET /users/{id}` resolves an object id or a principal name, never a `mail` address, and the
  * two differ for every guest. So a 404 on something that looks like an address gets one more try
  * against `mail` before we give up, which keeps By Email agreeing with From List, whose `$search`
  * already matches on mail.
  */
-async function findUserByMail(address) {
-    const literal = (0, query_escaping_1.escapeODataValue)(address);
-    const response = (await transport_1.microsoftApiRequest.call(this, 'GET', '/v1.0/users', {}, { $filter: `mail eq '${literal}'`, $select: 'id,displayName,userPrincipalName', $top: 2 }));
-    const found = Array.isArray(response.value) ? response.value : [];
-    // Exactly one match only: an ambiguous address should fall through to the not-found error
-    // rather than silently mentioning the wrong person.
-    return found.length === 1 ? found[0] : undefined;
+async function findUsersByMail(address) {
+    const response = (await transport_1.microsoftApiRequest.call(this, 'GET', '/v1.0/users', {}, {
+        $filter: `mail eq '${(0, query_escaping_1.escapeODataValue)(address)}'`,
+        $select: 'id,displayName,userPrincipalName',
+        $top: 2,
+    }));
+    // The matches, not a single winner: the caller has to tell an ambiguous address apart from
+    // an unknown one, because "the user does not exist" is the wrong answer for two matches.
+    return Array.isArray(response.value) ? response.value : [];
 }
 /**
- * One Graph lookup per distinct user for the whole run, not one per item. The router calls
- * `resolveMentions` once per input item with the same execute context, so a static mention on a
- * 500-item fan-out would otherwise repeat the same `GET /users/{id}` 500 times, sequentially.
- * Keyed on the context object, so the cache is collected with the execution and never crosses
- * runs or tenants. Only successes are stored, so a throttled row is retried on the next item.
+ * Reads a row field that may hold a resource-locator object. Keyed on key presence, not on
+ * truthiness: the everyday "row added, nobody picked yet" state is the RLC default
+ * `{ __rl: true, mode: 'list', value: '' }`, and unwrapping it on truthiness would pass the whole
+ * object down and tell the user to remove slashes from an ID they never typed. One deliberate
+ * delta from `extractValue`: `isResourceLocatorValue` also requires `__rl`, which `extractValueRLC`
+ * does not, so a hand-authored `{ mode, value }` without it is stricter here than under the
+ * indexed read this replaced. That shape then lands on the object branch below, like
+ * `resolveMailbox` in `Microsoft/Outlook/v2/transport`: collapsing it reports "nothing selected"
+ * with no request, where stringifying it would send the literal `[object Object]` to Graph and
+ * spend a call to learn nothing. A number or a boolean still stringifies, because only an object
+ * is guaranteed useless as an ID.
+ */
+const rlcValue = (value) => {
+    const raw = (0, n8n_workflow_1.isResourceLocatorValue)(value) ? value.value : value;
+    if (typeof raw === 'string')
+        return raw.trim();
+    return typeof raw === 'number' || typeof raw === 'boolean' ? String(raw) : '';
+};
+/**
+ * Looks a team tag up under the team that owns it. A foreign tag ID 404s under
+ * `/teams/{other}/tags/{id}`, which is how team ownership is proven.
+ */
+async function resolveTagMention(tagId, teamId, rowNumber, itemIndex) {
+    const node = this.getNode();
+    let tag;
+    try {
+        // `buildTeamsPath`, not `encodeURIComponent`: a tag ID is base64 over `[A-Za-z0-9=]` only
+        // (see `teamworkTagRLC`), which needs no encoding, and Graph's own docs interpolate it
+        // raw. The user branch encodes only because a B2B guest UPN carries `#EXT#`, which
+        // `buildTeamsPath` rejects. It is built inside this try so the catch below attributes a
+        // malformed ID to its item.
+        const response = (await transport_1.microsoftApiRequest.call(this, 'GET', transport_1.buildTeamsPath.call(this, ['/v1.0/teams/', { id: teamId }, '/tags/', { id: tagId }])));
+        // The v1.0 get-by-id docs example wraps the entity in `value` while the list endpoint
+        // returns an array under the same key. Drop the fallback once the ENT-350 live spike
+        // settles it.
+        tag = (response.value ?? response);
+    }
+    catch (error) {
+        // Only a tag row rewrites its 403. A user row in the same loop keeps Graph's own message,
+        // by ENT-324's choice.
+        const denied = tagPermissionError(error, node, 'Could not read the team tag', itemIndex);
+        if (denied)
+            throw denied;
+        if (error instanceof n8n_workflow_1.NodeApiError && error.httpCode === '404') {
+            throw new n8n_workflow_1.NodeOperationError(node, `Could not find the team tag for mention ${rowNumber}`, {
+                itemIndex,
+                description: 'Pick the tag from the list, or check that the tag ID is correct and that the tag belongs to the selected team.',
+            });
+        }
+        throw (0, GenericFunctions_1.stampItemIndexOnError)(error, itemIndex);
+    }
+    // No fallback for either field, unlike the user branch below. A tag ID is an opaque base64
+    // blob, so falling back to it ships a garbage chip that Graph still accepts; and if the
+    // response is the list shape, both fields are missing, `mentioned.tag.id` drops out of the
+    // body and the run is green with a mention that notifies nobody.
+    if (typeof tag.id !== 'string' ||
+        !tag.id ||
+        typeof tag.displayName !== 'string' ||
+        !tag.displayName) {
+        throw new n8n_workflow_1.NodeOperationError(node, `Could not read the team tag for mention ${rowNumber}`, {
+            itemIndex,
+            description: 'Microsoft Graph returned a tag without an ID or a display name.',
+        });
+    }
+    // The ID comes from the response, never from the input: `validateMicrosoftGraphId` trims and
+    // percent-decodes, so the path can legitimately differ from what the user typed, and the body
+    // is what decides who gets notified.
+    return {
+        mentionText: tag.displayName,
+        mentioned: { tag: { id: tag.id, displayName: tag.displayName } },
+    };
+}
+/**
+ * One Graph lookup per distinct mention target for the whole run, not one per item. The router
+ * calls `resolveMentions` once per input item with the same execute context, so a static mention
+ * on a 500-item fan-out would otherwise repeat the same lookup 500 times, sequentially. Keyed on
+ * the context object, so the cache is collected with the execution and never crosses runs or
+ * tenants. Only successes are stored, so a throttled row is retried on the next item.
+ *
+ * Keys are namespaced by mention type, and a tag key carries its team: the same ID string means
+ * different things in the two arms, and a tag only resolves under the team that owns it.
  */
 const resolvedPerRun = new WeakMap();
 /**
- * Resolves every mention row to a Graph user. Graph stores `mentions[].mentioned.user` verbatim
- * and resolves nothing: a UPN or a well-formed but nonexistent GUID is accepted with a 200 and a
- * mention that notifies nobody. So each row goes through `GET /users/{idOrUpn}` first, which also
- * yields the authoritative display name.
+ * Resolves one user-picker row to the Graph user it names. Graph stores
+ * `mentions[].mentioned.user` verbatim and resolves nothing: a UPN or a well-formed but
+ * nonexistent GUID is accepted with a 200 and a mention that notifies nobody. So each row goes
+ * through `GET /users/{idOrUpn}` first, which also yields the authoritative display name.
+ *
+ * `label` names the row in every error (`mention 2`, `participant 1`) and must never carry a
+ * parameter value. Shared by the mention rows and by `chat:create`'s participant rows.
+ */
+async function resolveUserTarget(raw, itemIndex, label) {
+    const node = this.getNode();
+    // Validate the shape before encoding (`encodeURIComponent` leaves `..` intact) and encode
+    // the same trimmed string, since the validator is anchored and callers trim.
+    const value = String(raw ?? '').trim();
+    try {
+        (0, GenericFunctions_1.validateUserTargetId)(value, node, (0, exports.userTargetMessages)(label));
+        return (await transport_1.microsoftApiRequest.call(this, 'GET', `/v1.0/users/${encodeURIComponent(value)}`, {}, { $select: 'id,displayName,userPrincipalName' }));
+    }
+    catch (error) {
+        if (!(error instanceof n8n_workflow_1.NodeApiError && error.httpCode === '404')) {
+            // A validation failure and 403 (missing User.Read.All), 429 or 5xx all keep their
+            // own message; only the item index is added.
+            throw (0, GenericFunctions_1.stampItemIndexOnError)(error, itemIndex);
+        }
+        // Only an address can be a `mail` value, so a GUID goes straight to the error.
+        const matches = value.includes('@')
+            ? await findUsersByMail.call(this, value).catch((mailError) => {
+                throw (0, GenericFunctions_1.stampItemIndexOnError)(mailError, itemIndex);
+            })
+            : [];
+        if (matches.length > 1) {
+            throw new n8n_workflow_1.NodeOperationError(node, `More than one user has that email address for ${label}`, {
+                itemIndex,
+                description: 'Two or more users in this Microsoft 365 tenant share that email address. Pick the user from the list, or enter their user ID instead.',
+            });
+        }
+        if (matches.length === 0) {
+            throw new n8n_workflow_1.NodeOperationError(node, `Could not find the user for ${label}`, {
+                itemIndex,
+                description: 'Pick the user from the list, or check that the user ID or email address is correct and that the user exists in this Microsoft 365 tenant.',
+            });
+        }
+        return matches[0];
+    }
+}
+/**
+ * Resolves every mention row to a Graph user or team tag. Graph stores `mentions[].mentioned`
+ * verbatim and resolves nothing: a UPN, a well-formed but nonexistent GUID or a bogus tag ID is
+ * accepted with a 200 and a mention that notifies nobody. So each row is looked up first, which
+ * also yields the authoritative display name.
  *
- * Rows are walked in order, one request each: a realistic list is 1-3 entries, and sequential
- * keeps a failing row unambiguous and the resolved array in row order.
+ * Rows are walked in order, one request each: sequential keeps a failing row unambiguous.
  */
-async function resolveMentions(itemIndex) {
-    const rows = this.getNodeParameter('mentions.mention', itemIndex, []);
-    const rowCount = Array.isArray(rows) ? rows.length : 0;
+async function resolveMentions(itemIndex, teamId) {
+    // Read the rows wholesale. An indexed read with `{ extractValue: true }` throws once a row
+    // field carries a `displayOptions`, which the mention type discriminator gives both pickers.
+    const raw = this.getNodeParameter('mentions.mention', itemIndex, []);
+    const rows = Array.isArray(raw) ? raw : [];
     const node = this.getNode();
     const mentions = [];
     let cache = resolvedPerRun.get(this);
@@ -64,48 +229,62 @@ async function resolveMentions(itemIndex) {
         cache = new Map();
         resolvedPerRun.set(this, cache);
     }
-    for (let index = 0; index < rowCount; index++) {
-        const raw = this.getNodeParameter(`mentions.mention[${index}].userId`, itemIndex, '', {
-            extractValue: true,
-        });
+    for (let index = 0; index < rows.length; index++) {
+        // A null or non-object row used to fall through lodash `get` to the read's fallback.
+        const row = rows[index] ?? {};
+        const { mentionType } = row;
+        if (mentionType === 'tag') {
+            const tagId = rlcValue(row.tagId);
+            if (!tagId) {
+                throw new n8n_workflow_1.NodeOperationError(node, `No team tag selected for mention ${index + 1}`, {
+                    itemIndex,
+                    description: 'Pick the tag from the list, or enter a tag ID.',
+                });
+            }
+            // `undefined` is a chat message, which has no team and no tag picker; `''` is a
+            // channel message whose Team field is empty.
+            if (teamId === undefined) {
+                throw new n8n_workflow_1.NodeOperationError(node, 'Team tags are not available in a chat message', {
+                    itemIndex,
+                    description: `Remove mention ${index + 1} or use a channel message.`,
+                });
+            }
+            if (!teamId) {
+                throw new n8n_workflow_1.NodeOperationError(node, `No team selected for the team tag in mention ${index + 1}`, { itemIndex, description: 'Select the team that owns the tag and try again.' });
+            }
+            const tagKey = `tag:${teamId}\u0000${tagId}`;
+            const cachedTag = cache.get(tagKey);
+            if (cachedTag) {
+                // Safe to share by reference: `prepareMessage` spreads rather than mutates.
+                mentions.push(cachedTag);
+                continue;
+            }
+            const tagMention = await resolveTagMention.call(this, tagId, teamId, index + 1, itemIndex);
+            cache.set(tagKey, tagMention);
+            mentions.push(tagMention);
+            continue;
+        }
+        // `undefined` is what `chatMessage:create` always sends: its row declares only `userRLC`,
+        // so there is no discriminator to read. An unknown value is an error rather than a silent
+        // user mention, because it reaches here from imported JSON, the public API and a
+        // surviving `$fromAI()` expression.
+        if (mentionType !== undefined && mentionType !== 'user') {
+            throw new n8n_workflow_1.NodeOperationError(node, `The mention type for mention ${index + 1} is not valid`, {
+                itemIndex,
+                description: 'Set the mention type to either User or Team Tag.',
+            });
+        }
         // Validate the shape before encoding (`encodeURIComponent` leaves `..` intact) and encode
         // the same trimmed string, since the validator is anchored and callers trim.
-        const value = String(raw ?? '').trim();
-        const cached = cache.get(value);
+        const value = rlcValue(row.userId);
+        const userKey = `user:${value}`;
+        const cached = cache.get(userKey);
         if (cached) {
             // Safe to share by reference: `prepareMessage` spreads rather than mutates.
             mentions.push(cached);
             continue;
         }
-        let user;
-        try {
-            (0, GenericFunctions_1.validateUserTargetId)(value, node, mentionMessages(index + 1));
-            user = (await transport_1.microsoftApiRequest.call(this, 'GET', `/v1.0/users/${encodeURIComponent(value)}`, {}, { $select: 'id,displayName,userPrincipalName' }));
-        }
-        catch (error) {
-            if (error instanceof n8n_workflow_1.NodeApiError && error.httpCode === '404') {
-                // Only an address can be a `mail` value, so a GUID goes straight to the error.
-                // The fallback runs inside this catch, so its own 403/429/5xx would otherwise
-                // escape without the row index the primary lookup stamps on.
-                const byMail = value.includes('@')
-                    ? await findUserByMail.call(this, value).catch((mailError) => {
-                        throw (0, GenericFunctions_1.stampItemIndexOnError)(mailError, itemIndex);
-                    })
-                    : undefined;
-                if (!byMail) {
-                    throw new n8n_workflow_1.NodeOperationError(node, `Could not find the user for mention ${index + 1}`, {
-                        itemIndex,
-                        description: 'Pick the user from the list, or check that the user ID or email address is correct and that the user exists in this Microsoft 365 tenant.',
-                    });
-                }
-                user = byMail;
-            }
-            else {
-                // A validation failure and 403 (missing User.Read.All), 429 or 5xx all keep their
-                // own message; only the item index is added.
-                throw (0, GenericFunctions_1.stampItemIndexOnError)(error, itemIndex);
-            }
-        }
+        const user = await resolveUserTarget.call(this, value, itemIndex, `mention ${index + 1}`);
         // Directory objects with no display name exist (some guests, some service accounts);
         // without a fallback the mention renders as a blank chip. `||`, so `''` falls through.
         const label = user.displayName || user.userPrincipalName || user.id;
@@ -115,24 +294,48 @@ async function resolveMentions(itemIndex) {
                 user: { id: user.id, displayName: label, userIdentityType: 'aadUser' },
             },
         };
-        cache.set(value, mention);
+        cache.set(userKey, mention);
         mentions.push(mention);
     }
     return mentions;
 }
-function prepareMessage(message, contentType, includeLinkToWorkflow, instanceId) {
+function prepareMessage(message, contentType, includeLinkToWorkflow, instanceId, 
+// Read-only on purpose. `resolveMentions` caches these per run, so the same object can arrive
+// for several items and mutating one here would corrupt every later item in the run.
+mentions = [], mentionPlacement = 'start') {
+    if (mentions.length) {
+        // A mention in a `text` message is a hard 400 ("Mentions are only allowed in Html messages").
+        contentType = 'html';
+        const tokens = mentions
+            .map((mention, index) => `<at id="${index}">${escapeMentionText(mention.mentionText)}</at>`)
+            .join(' ');
+        // The footer is appended after this, so tokens stay above it either way.
+        const parts = mentionPlacement === 'end' ? [message, tokens] : [tokens, message];
+        message = parts.filter(Boolean).join(' ');
+    }
     if (includeLinkToWorkflow) {
         const { id } = this.getWorkflow();
         const link = `${this.getInstanceBaseUrl()}workflow/${id}?utm_source=n8n-internal&utm_medium=powered_by&utm_campaign=${encodeURIComponent('n8n-nodes-base.microsoftTeams')}${instanceId ? '_' + instanceId : ''}`;
         contentType = 'html';
         message = `${message}<br><br><em> Powered by <a href="${link}">this n8n workflow</a> </em>`;
     }
-    return {
+    const body = {
         body: {
             contentType,
             content: message,
         },
     };
+    // `id` comes from the same index as the token above. Graph 400s on any mismatch between the
+    // two, which is the invariant this function exists to hold.
+    if (mentions.length) {
+        body.mentions = mentions.map((mention, index) => ({
+            ...mention,
+            id: index,
+            // Must be byte-identical to the token's inner text; see `escapeMentionText`.
+            mentionText: escapeMentionText(mention.mentionText),
+        }));
+    }
+    return body;
 }
 function filterSortSearchListItems(items, filter) {
     return items

package/dist/nodes/Microsoft/Teams/v2/helpers/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../../../../nodes/Microsoft/Teams/v2/helpers/utils.ts"],"names":[],"mappings":";;;;;AAMA,+CAAgE;AAEhE,0DAAyD;AACzD,gEAImC;AACnC,4CAAmD;AAWnD,2FAA2F;AAC3F,6EAA6E;AAC7E,MAAM,eAAe,GAAG,CAAC,GAAW,EAAsB,EAAE,CAAC,CAAC;IAC7D,QAAQ,EAAE;QACT,OAAO,EAAE,gCAAgC,GAAG,EAAE;QAC9C,WAAW,EAAE,mEAAmE;KAChF;IACD,QAAQ,EAAE;QACT,OAAO,EAAE,wBAAwB,GAAG,eAAe;QACnD,WAAW,EAAE,wCAAwC;KACrD;IACD,OAAO,EAAE;QACR,OAAO,EAAE,wBAAwB,GAAG,eAAe;QACnD,WAAW,EACV,uIAAuI;KACxI;CACD,CAAC,CAAC;AAEH;;;;;GAKG;AACH,KAAK,UAAU,cAAc,CAE5B,OAAe;IAEf,MAAM,OAAO,GAAG,IAAA,iCAAgB,EAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,CAAC,MAAM,+BAAmB,CAAC,IAAI,CAC/C,IAAI,EACJ,KAAK,EACL,aAAa,EACb,EAAE,EACF,EAAE,OAAO,EAAE,YAAY,OAAO,GAAG,EAAE,OAAO,EAAE,kCAAkC,EAAE,IAAI,EAAE,CAAC,EAAE,CACzF,CAAgB,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,QAAQ,CAAC,KAAuB,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,0FAA0F;IAC1F,oDAAoD;IACpD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,cAAc,GAAG,IAAI,OAAO,EAA2C,CAAC;AAE9E;;;;;;;;GAQG;AACI,KAAK,0BAEX,SAAiB;IAEjB,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,IAAI,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;QACnC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,KAAK,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE;YACrF,YAAY,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,0FAA0F;QAC1F,6EAA6E;QAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAEvC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,MAAM,EAAE,CAAC;YACZ,4EAA4E;YAC5E,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,SAAS;QACV,CAAC;QAED,IAAI,IAAiB,CAAC;QACtB,IAAI,CAAC;YACJ,IAAA,uCAAoB,EAAC,KAAK,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YAE9D,IAAI,GAAG,CAAC,MAAM,+BAAmB,CAAC,IAAI,CACrC,IAAI,EACJ,KAAK,EACL,eAAe,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAC1C,EAAE,EACF,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAC/C,CAAgB,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,2BAAY,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;gBAC/D,+EAA+E;gBAC/E,8EAA8E;gBAC9E,6DAA6D;gBAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;oBACjC,CAAC,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE;wBAC3D,MAAM,IAAA,wCAAqB,EAAC,SAAS,EAAE,SAAS,CAAC,CAAC;oBACnD,CAAC,CAAC;oBACH,CAAC,CAAC,SAAS,CAAC;gBACb,IAAI,CAAC,MAAM,EAAE,CAAC;oBACb,MAAM,IAAI,iCAAkB,CAAC,IAAI,EAAE,uCAAuC,KAAK,GAAG,CAAC,EAAE,EAAE;wBACtF,SAAS;wBACT,WAAW,EACV,2IAA2I;qBAC5I,CAAC,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,CAAC;YACf,CAAC;iBAAM,CAAC;gBACP,kFAAkF;gBAClF,6CAA6C;gBAC7C,MAAM,IAAA,wCAAqB,EAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC/C,CAAC;QACF,CAAC;QAED,qFAAqF;QACrF,uFAAuF;QACvF,MAAM,KAAK,GACT,IAAI,CAAC,WAAsB,IAAK,IAAI,CAAC,iBAA4B,IAAK,IAAI,CAAC,EAAa,CAAC;QAE3F,MAAM,OAAO,GAAY;YACxB,WAAW,EAAE,KAAK;YAClB,SAAS,EAAE;gBACV,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAY,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE;aAChF;SACD,CAAC;QACF,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,wBAEC,OAAe,EACf,WAAmB,EACnB,qBAA8B,EAC9B,UAAmB;IAEnB,IAAI,qBAAqB,EAAE,CAAC;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,kBAAkB,EAAE,YAAY,EAAE,+DAA+D,kBAAkB,CACvI,+BAA+B,CAC/B,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACzC,WAAW,GAAG,MAAM,CAAC;QACrB,OAAO,GAAG,GAAG,OAAO,oCAAoC,IAAI,+BAA+B,CAAC;IAC7F,CAAC;IAED,OAAO;QACN,IAAI,EAAE;YACL,WAAW;YACX,OAAO,EAAE,OAAO;SAChB;KACD,CAAC;AACH,CAAC;AAED,mCAA0C,KAA6B,EAAE,MAAe;IACvF,OAAO,KAAK;SACV,MAAM,CACN,CAAC,IAAI,EAAE,EAAE,CACR,CAAC,MAAM;QACP,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACtD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CACnE;SACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACd,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC7D,OAAO,CAAC,CAAC,CAAC;QACX,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC7D,OAAO,CAAC,CAAC;QACV,CAAC;QACD,OAAO,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../../../../nodes/Microsoft/Teams/v2/helpers/utils.ts"],"names":[],"mappings":";;;;;;;;AAOA,+CAAwF;AAExF,0DAAyD;AACzD,gEAImC;AACnC,4CAAmE;AAanE;;;;;;;;;;GAUG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACtC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACtF,CAAC;AAED,qFAAqF;AACrF,4FAA4F;AAC5F,sDAAsD;AAC/C,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAsB,EAAE,CAAC,CAAC;IACzE,QAAQ,EAAE;QACT,OAAO,EAAE,wBAAwB,KAAK,EAAE;QACxC,WAAW,EAAE,mEAAmE;KAChF;IACD,QAAQ,EAAE;QACT,OAAO,EAAE,gBAAgB,KAAK,eAAe;QAC7C,WAAW,EAAE,wCAAwC;KACrD;IACD,OAAO,EAAE;QACR,OAAO,EAAE,gBAAgB,KAAK,eAAe;QAC7C,WAAW,EACV,uIAAuI;KACxI;CACD,CAAC,CAAC;AAdU,QAAA,kBAAkB,GAAlB,kBAAkB,CAc5B;AAEH;;;;;;;;;;GAUG;AACH,4BACC,KAAc,EACd,IAAW,EACX,OAAe,EACf,SAAkB;IAElB,IAAI,CAAC,CAAC,KAAK,YAAY,2BAAY,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IACnF,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9F,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,OAAO,IAAI,iCAAkB,CAAC,IAAI,EAAE,OAAO,EAAE;QAC5C,SAAS;QACT,WAAW,EACV,+NAA+N;KAChO,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAA0B,OAAe;IACtE,MAAM,QAAQ,GAAG,CAAC,MAAM,+BAAmB,CAAC,IAAI,CAC/C,IAAI,EACJ,KAAK,EACL,aAAa,EACb,EAAE,EACF;QACC,OAAO,EAAE,YAAY,IAAA,iCAAgB,EAAC,OAAO,CAAC,GAAG;QACjD,OAAO,EAAE,kCAAkC;QAC3C,IAAI,EAAE,CAAC;KACP,CACD,CAAgB,CAAC;IAClB,2FAA2F;IAC3F,yFAAyF;IACzF,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,QAAQ,CAAC,KAAuB,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAU,EAAE;IAC3C,MAAM,GAAG,GAAG,IAAA,qCAAsB,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAChE,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/E,CAAC,CAAC;AAEF;;;GAGG;AACH,KAAK,UAAU,iBAAiB,CAE/B,KAAa,EACb,MAAc,EACd,SAAiB,EACjB,SAAiB;IAEjB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC5B,IAAI,GAAgB,CAAC;IAErB,IAAI,CAAC;QACJ,0FAA0F;QAC1F,uFAAuF;QACvF,mFAAmF;QACnF,wFAAwF;QACxF,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,CAAC,MAAM,+BAAmB,CAAC,IAAI,CAC/C,IAAI,EACJ,KAAK,EACL,0BAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CACpF,CAAgB,CAAC;QAClB,sFAAsF;QACtF,qFAAqF;QACrF,cAAc;QACd,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAgB,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,0FAA0F;QAC1F,uBAAuB;QACvB,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,6BAA6B,EAAE,SAAS,CAAC,CAAC;QACzF,IAAI,MAAM;YAAE,MAAM,MAAM,CAAC;QACzB,IAAI,KAAK,YAAY,2BAAY,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC/D,MAAM,IAAI,iCAAkB,CAAC,IAAI,EAAE,2CAA2C,SAAS,EAAE,EAAE;gBAC1F,SAAS;gBACT,WAAW,EACV,gHAAgH;aACjH,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,IAAA,wCAAqB,EAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED,2FAA2F;IAC3F,wFAAwF;IACxF,2FAA2F;IAC3F,iEAAiE;IACjE,IACC,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ;QAC1B,CAAC,GAAG,CAAC,EAAE;QACP,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;QACnC,CAAC,GAAG,CAAC,WAAW,EACf,CAAC;QACF,MAAM,IAAI,iCAAkB,CAAC,IAAI,EAAE,2CAA2C,SAAS,EAAE,EAAE;YAC1F,SAAS;YACT,WAAW,EAAE,iEAAiE;SAC9E,CAAC,CAAC;IACJ,CAAC;IAED,6FAA6F;IAC7F,8FAA8F;IAC9F,qCAAqC;IACrC,OAAO;QACN,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE;KAChE,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,cAAc,GAAG,IAAI,OAAO,EAA2C,CAAC;AAE9E;;;;;;;;GAQG;AACI,KAAK,4BAEX,GAAY,EACZ,SAAiB,EACjB,KAAa;IAEb,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC5B,0FAA0F;IAC1F,6EAA6E;IAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEvC,IAAI,CAAC;QACJ,IAAA,uCAAoB,EAAC,KAAK,EAAE,IAAI,EAAE,IAAA,QAAA,kBAAkB,EAAC,KAAK,CAAC,CAAC,CAAC;QAE7D,OAAO,CAAC,MAAM,+BAAmB,CAAC,IAAI,CACrC,IAAI,EACJ,KAAK,EACL,eAAe,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAC1C,EAAE,EACF,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAC/C,CAAgB,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,KAAK,YAAY,2BAAY,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAE,CAAC;YAClE,kFAAkF;YAClF,6CAA6C;YAC7C,MAAM,IAAA,wCAAqB,EAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC/C,CAAC;QACD,+EAA+E;QAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClC,CAAC,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE;gBAC5D,MAAM,IAAA,wCAAqB,EAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACnD,CAAC,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACN,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,iCAAkB,CAAC,IAAI,EAAE,iDAAiD,KAAK,EAAE,EAAE;gBAC5F,SAAS;gBACT,WAAW,EACV,uIAAuI;aACxI,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,iCAAkB,CAAC,IAAI,EAAE,+BAA+B,KAAK,EAAE,EAAE;gBAC1E,SAAS;gBACT,WAAW,EACV,2IAA2I;aAC5I,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;AACF,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,0BAEX,SAAiB,EACjB,MAAe;IAEf,2FAA2F;IAC3F,6FAA6F;IAC7F,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACrE,MAAM,IAAI,GAAkB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAAqB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,IAAI,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;QACnC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,qFAAqF;QACrF,MAAM,GAAG,GAAgB,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC;QAE5B,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,MAAM,IAAI,iCAAkB,CAAC,IAAI,EAAE,oCAAoC,KAAK,GAAG,CAAC,EAAE,EAAE;oBACnF,SAAS;oBACT,WAAW,EAAE,gDAAgD;iBAC7D,CAAC,CAAC;YACJ,CAAC;YACD,gFAAgF;YAChF,6CAA6C;YAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,iCAAkB,CAAC,IAAI,EAAE,+CAA+C,EAAE;oBACnF,SAAS;oBACT,WAAW,EAAE,kBAAkB,KAAK,GAAG,CAAC,4BAA4B;iBACpE,CAAC,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,IAAI,iCAAkB,CAC3B,IAAI,EACJ,gDAAgD,KAAK,GAAG,CAAC,EAAE,EAC3D,EAAE,SAAS,EAAE,WAAW,EAAE,kDAAkD,EAAE,CAC9E,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,OAAO,MAAM,SAAS,KAAK,EAAE,CAAC;YAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,SAAS,EAAE,CAAC;gBACf,4EAA4E;gBAC5E,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACzB,SAAS;YACV,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;YAC3F,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1B,SAAS;QACV,CAAC;QAED,0FAA0F;QAC1F,0FAA0F;QAC1F,iFAAiF;QACjF,oCAAoC;QACpC,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YACzD,MAAM,IAAI,iCAAkB,CAAC,IAAI,EAAE,gCAAgC,KAAK,GAAG,CAAC,eAAe,EAAE;gBAC5F,SAAS;gBACT,WAAW,EAAE,kDAAkD;aAC/D,CAAC,CAAC;QACJ,CAAC;QAED,0FAA0F;QAC1F,6EAA6E;QAC7E,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEnC,MAAM,OAAO,GAAG,QAAQ,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACZ,4EAA4E;YAC5E,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,SAAS;QACV,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;QAE1F,qFAAqF;QACrF,uFAAuF;QACvF,MAAM,KAAK,GACT,IAAI,CAAC,WAAsB,IAAK,IAAI,CAAC,iBAA4B,IAAK,IAAI,CAAC,EAAa,CAAC;QAE3F,MAAM,OAAO,GAAY;YACxB,WAAW,EAAE,KAAK;YAClB,SAAS,EAAE;gBACV,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAY,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE;aAChF;SACD,CAAC;QACF,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,wBAEC,OAAe,EACf,WAAmB,EACnB,qBAA8B,EAC9B,UAAmB;AACnB,8FAA8F;AAC9F,qFAAqF;AACrF,QAAQ,GAAuB,EAAE,EACjC,gBAAgB,GAAqB,OAAO;IAE5C,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrB,8FAA8F;QAC9F,WAAW,GAAG,MAAM,CAAC;QACrB,MAAM,MAAM,GAAG,QAAQ;aACrB,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,KAAK,KAAK,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC;aAC3F,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,yEAAyE;QACzE,MAAM,KAAK,GAAG,gBAAgB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjF,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,qBAAqB,EAAE,CAAC;QAC3B,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,kBAAkB,EAAE,YAAY,EAAE,+DAA+D,kBAAkB,CACvI,+BAA+B,CAC/B,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACzC,WAAW,GAAG,MAAM,CAAC;QACrB,OAAO,GAAG,GAAG,OAAO,oCAAoC,IAAI,+BAA+B,CAAC;IAC7F,CAAC;IAED,MAAM,IAAI,GAAgB;QACzB,IAAI,EAAE;YACL,WAAW;YACX,OAAO,EAAE,OAAO;SAChB;KACD,CAAC;IAEF,4FAA4F;IAC5F,4DAA4D;IAC5D,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACjD,GAAG,OAAO;YACV,EAAE,EAAE,KAAK;YACT,6EAA6E;YAC7E,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC;SACnD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED,mCAA0C,KAA6B,EAAE,MAAe;IACvF,OAAO,KAAK;SACV,MAAM,CACN,CAAC,IAAI,EAAE,EAAE,CACR,CAAC,MAAM;QACP,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACtD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CACnE;SACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACd,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC7D,OAAO,CAAC,CAAC,CAAC;QACX,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC7D,OAAO,CAAC,CAAC;QACV,CAAC;QACD,OAAO,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/nodes/Microsoft/Teams/v2/methods/listSearch.d.ts

@@ -4,6 +4,12 @@ export declare function getChatMembers(this: ILoadOptionsFunctions, filter?: str
 export declare function getUsers(this: ILoadOptionsFunctions, filter?: string, paginationToken?: string): Promise<INodeListSearchResult>;
 export declare function getTeams(this: ILoadOptionsFunctions, filter?: string): Promise<INodeListSearchResult>;
 export declare function getChannels(this: ILoadOptionsFunctions, filter?: string): Promise<INodeListSearchResult>;
+/**
+ * Team tags for the mention picker. Mirrors `getChannels` (team-scoped, client-side filtering)
+ * rather than `getUsers`: Graph documents no `$search` on `/tags`, and `$filter` cannot do the
+ * substring match a picker needs. `/v1.0`, the tags collection is GA.
+ */
+export declare function getTags(this: ILoadOptionsFunctions, filter?: string): Promise<INodeListSearchResult>;
 export declare function getGroups(this: ILoadOptionsFunctions, filter?: string): Promise<INodeListSearchResult>;
 export declare function getPlans(this: ILoadOptionsFunctions, filter?: string): Promise<INodeListSearchResult>;
 export declare function getBuckets(this: ILoadOptionsFunctions, filter?: string): Promise<INodeListSearchResult>;

package/dist/nodes/Microsoft/Teams/v2/methods/listSearch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"listSearch.d.ts","sourceRoot":"","sources":["../../../../../../nodes/Microsoft/Teams/v2/methods/listSearch.ts"],"names":[],"mappings":"AAAA,OAAO,EAGN,KAAK,qBAAqB,EAE1B,KAAK,qBAAqB,EAC1B,MAAM,cAAc,CAAC;AAetB,wBAAsB,QAAQ,CAC7B,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CAuGhC;AAED,wBAAsB,cAAc,CACnC,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CA4BhC;AAED,wBAAsB,QAAQ,CAC7B,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,EACf,eAAe,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,qBAAqB,CAAC,CA2ChC;AAED,wBAAsB,QAAQ,CAC7B,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CA6ChC;AAED,wBAAsB,WAAW,CAChC,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CAgChC;AAED,wBAAsB,SAAS,CAC9B,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CAkBhC;AAED,wBAAsB,QAAQ,CAC7B,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CA8BhC;AAED,wBAAsB,UAAU,CAC/B,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CA6BhC;AAED,wBAAsB,UAAU,CAC/B,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CA8BhC"}
+{"version":3,"file":"listSearch.d.ts","sourceRoot":"","sources":["../../../../../../nodes/Microsoft/Teams/v2/methods/listSearch.ts"],"names":[],"mappings":"AAAA,OAAO,EAGN,KAAK,qBAAqB,EAE1B,KAAK,qBAAqB,EAC1B,MAAM,cAAc,CAAC;AAetB,wBAAsB,QAAQ,CAC7B,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CAuGhC;AAED,wBAAsB,cAAc,CACnC,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CA4BhC;AAED,wBAAsB,QAAQ,CAC7B,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,EACf,eAAe,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,qBAAqB,CAAC,CAiDhC;AAED,wBAAsB,QAAQ,CAC7B,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CA6ChC;AAED,wBAAsB,WAAW,CAChC,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CAgChC;AAED;;;;GAIG;AACH,wBAAsB,OAAO,CAC5B,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CAqDhC;AAED,wBAAsB,SAAS,CAC9B,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CAkBhC;AAED,wBAAsB,QAAQ,CAC7B,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CA8BhC;AAED,wBAAsB,UAAU,CAC/B,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CA6BhC;AAED,wBAAsB,UAAU,CAC/B,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CA8BhC"}

package/dist/nodes/Microsoft/Teams/v2/methods/listSearch.js

@@ -5,6 +5,7 @@ exports.getChatMembers = getChatMembers;
 exports.getUsers = getUsers;
 exports.getTeams = getTeams;
 exports.getChannels = getChannels;
+exports.getTags = getTags;
 exports.getGroups = getGroups;
 exports.getPlans = getPlans;
 exports.getBuckets = getBuckets;
@@ -143,6 +144,11 @@ async function getUsers(filter, paginationToken) {
     catch (error) {
         throw transport_1.rewriteForbiddenUnderSp.call(this, error, "The user list needs the User.Read.All application permission. Grant it with admin consent, or switch the field to By ID and enter the user's object ID.", 'A user principal name also needs User.Read.All, because the node looks it up.');
     }
+    // An unexpected shape is not an empty directory: returning the token as well would offer
+    // "load more" into nothing.
+    if (!Array.isArray(response.value)) {
+        return { results: [], paginationToken: undefined };
+    }
     const returnData = response.value.map((user) => ({
         name: `${user.displayName} (${user.userPrincipalName})`,
         value: user.id,
@@ -215,6 +221,51 @@ async function getChannels(filter) {
     const results = (0, utils_1.filterSortSearchListItems)(returnData, filter);
     return { results };
 }
+/**
+ * Team tags for the mention picker. Mirrors `getChannels` (team-scoped, client-side filtering)
+ * rather than `getUsers`: Graph documents no `$search` on `/tags`, and `$filter` cannot do the
+ * substring match a picker needs. `/v1.0`, the tags collection is GA.
+ */
+async function getTags(filter) {
+    const teamId = this.getCurrentNodeParameter('teamId', { extractValue: true });
+    // Deliberate divergence from `getChannels`, which has no such guard and lets `buildTeamsPath`
+    // emit the generic "A required ID is empty" on the same node.
+    if (!teamId) {
+        throw new n8n_workflow_1.NodeOperationError(this.getNode(), 'Select a team first');
+    }
+    let value;
+    try {
+        value = await transport_1.microsoftApiRequestAllItems.call(this, 'value', 'GET', transport_1.buildTeamsPath.call(this, ['/v1.0/teams/', { id: teamId }, '/tags']));
+    }
+    catch (error) {
+        // The action belongs in the message, not the description: the resource-locator dropdown
+        // renders only the message and drops the description, so guidance put there is invisible.
+        // Verified in the editor against a credential without the scope, 2026-09-10.
+        throw ((0, utils_1.tagPermissionError)(error, this.getNode(), 'Could not load team tags. Add TeamworkTag.Read to the credential, then reconnect it.') ?? error);
+    }
+    // Graph sends `memberCount` as a number when listing and as a string when getting one tag.
+    const memberCounts = new Map(value.map((tag) => [tag.id, Number(tag.memberCount)]));
+    const returnData = value.map((tag) => ({
+        // Falls back like `getUsers`: a tag with no display name would otherwise set `name` to
+        // `undefined` and throw in the comparator below instead of listing the tags.
+        name: tag.displayName || tag.id,
+        value: tag.id,
+        description: tag.description,
+    }));
+    // Filter and sort on the bare display name, then append the count. A tag notifies everyone
+    // carrying it and the dropdown renders only `name`, so the blast radius has to go in the
+    // label, but baking it in first makes every tag match any substring of "(4 members)".
+    const results = (0, utils_1.filterSortSearchListItems)(returnData, filter).map((tag) => {
+        const memberCount = memberCounts.get(tag.value);
+        return memberCount !== undefined && Number.isFinite(memberCount)
+            ? {
+                ...tag,
+                name: `${tag.name} (${memberCount} ${memberCount === 1 ? 'member' : 'members'})`,
+            }
+            : tag;
+    });
+    return { results };
+}
 async function getGroups(filter) {
     const returnData = [];
     const value = await transport_1.microsoftApiRequestAllItems.call(this, 'value', 'GET', transport_1.joinedTeamsEndpoint.call(this));