fix(media): remove express from media host (#71436)

* fix(media): remove express from media host

* fix(media): harden media host responses

* fix(msteams): stage express runtime dependency

* fix(browser): align profile facade exports

* fix(msteams): keep setup entry narrow

* fix(types): satisfy extension setup gates

* fix(msteams): use generic setup config type

extensions/browser/package.json

@@ -7,7 +7,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.29.0",
     "commander": "^14.0.3",
-    "express": "^5.2.1",
+    "express": "5.2.1",
     "playwright-core": "1.59.1",
     "typebox": "1.1.31",
     "undici": "8.1.0",

extensions/msteams/package.json

@@ -4,12 +4,12 @@
   "description": "OpenClaw Microsoft Teams channel plugin",
   "type": "module",
   "dependencies": {
-    "@azure/identity": "^4.13.1",
+    "@azure/identity": "4.13.1",
     "@microsoft/teams.api": "2.0.8",
     "@microsoft/teams.apps": "2.0.8",
-    "express": "^5.2.1",
-    "jsonwebtoken": "^9.0.3",
-    "jwks-rsa": "^4.0.1",
+    "express": "5.2.1",
+    "jsonwebtoken": "9.0.3",
+    "jwks-rsa": "4.0.1",
     "typebox": "1.1.31"
   },
   "devDependencies": {
@@ -59,6 +59,9 @@
     "build": {
       "openclawVersion": "2026.4.20"
     },
+    "bundle": {
+      "stageRuntimeDependencies": true
+    },
     "release": {
       "publishToClawHub": true,
       "publishToNpm": true

extensions/msteams/setup-entry.ts

@@ -3,8 +3,8 @@ import { defineBundledChannelSetupEntry } from "openclaw/plugin-sdk/channel-entr
 export default defineBundledChannelSetupEntry({
   importMetaUrl: import.meta.url,
   plugin: {
-    specifier: "./api.js",
-    exportName: "msteamsPlugin",
+    specifier: "./setup-plugin-api.js",
+    exportName: "msteamsSetupPlugin",
   },
   secrets: {
     specifier: "./secret-contract-api.js",

extensions/msteams/setup-plugin-api.ts

@@ -0,0 +1,3 @@
+// Keep bundled setup entry imports narrow so setup loads do not pull the
+// broader Teams channel plugin surface.
+export { msteamsSetupPlugin } from "./src/channel.setup.js";

extensions/msteams/src/channel.setup.ts

@@ -0,0 +1,77 @@
+import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
+import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";
+import { createTopLevelChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
+import type { ChannelPlugin } from "openclaw/plugin-sdk/channel-core";
+import type { OpenClawConfig } from "openclaw/plugin-sdk/config-runtime";
+import { MSTeamsChannelConfigSchema } from "./config-schema.js";
+import { msteamsSetupAdapter } from "./setup-core.js";
+import { msteamsSetupWizard } from "./setup-surface.js";
+import { resolveMSTeamsCredentials } from "./token.js";
+
+type ResolvedMSTeamsAccount = {
+  accountId: string;
+  enabled: boolean;
+  configured: boolean;
+};
+
+const meta = {
+  id: "msteams",
+  label: "Microsoft Teams",
+  selectionLabel: "Microsoft Teams (Bot Framework)",
+  docsPath: "/channels/msteams",
+  docsLabel: "msteams",
+  blurb: "Teams SDK; enterprise support.",
+  aliases: ["teams"],
+  order: 60,
+} as const;
+
+const resolveMSTeamsChannelConfig = (cfg: OpenClawConfig) => ({
+  allowFrom: cfg.channels?.msteams?.allowFrom,
+  defaultTo: cfg.channels?.msteams?.defaultTo,
+});
+
+const msteamsConfigAdapter = createTopLevelChannelConfigAdapter<
+  ResolvedMSTeamsAccount,
+  {
+    allowFrom?: Array<string | number>;
+    defaultTo?: string;
+  }
+>({
+  sectionKey: "msteams",
+  resolveAccount: (cfg) => ({
+    accountId: "default",
+    enabled: cfg.channels?.msteams?.enabled !== false,
+    configured: Boolean(resolveMSTeamsCredentials(cfg.channels?.msteams)),
+  }),
+  resolveAccessorAccount: ({ cfg }) => resolveMSTeamsChannelConfig(cfg),
+  resolveAllowFrom: (account) => account.allowFrom,
+  formatAllowFrom: (allowFrom) => formatAllowFromLowercase({ allowFrom }),
+  resolveDefaultTo: (account) => account.defaultTo,
+});
+
+export const msteamsSetupPlugin: ChannelPlugin<ResolvedMSTeamsAccount> = {
+  id: "msteams",
+  meta: {
+    ...meta,
+    aliases: [...meta.aliases],
+  },
+  capabilities: {
+    chatTypes: ["direct", "channel", "thread"],
+    polls: true,
+    threads: true,
+    media: true,
+  },
+  reload: { configPrefixes: ["channels.msteams"] },
+  configSchema: MSTeamsChannelConfigSchema,
+  config: {
+    ...msteamsConfigAdapter,
+    isConfigured: (_account, cfg) => Boolean(resolveMSTeamsCredentials(cfg.channels?.msteams)),
+    describeAccount: (account) =>
+      describeAccountSnapshot({
+        account,
+        configured: account.configured,
+      }),
+  },
+  setupWizard: msteamsSetupWizard,
+  setup: msteamsSetupAdapter,
+};

extensions/qa-lab/web/src/assets.d.ts

@@ -0,0 +1 @@
+declare module "*.css";