Peter Steinberger c56b56e514 fix(msteams): harden security-sensitive flows (#65841) ...

* fix(msteams): validate participant graph params

* fix(msteams): restore media fetch ip guard

* fix(msteams): open delegated auth urls without shell

2026-04-15 22:30:23 -05:00

..

attachments

fix(msteams): harden security-sensitive flows (#65841)

2026-04-15 22:30:23 -05:00

monitor-handler

CI: fix mainline regression blockers (#65269)

2026-04-13 06:18:37 +09:00

actions.ts

msteams: add message actions — pin, unpin, read, react, reactions (#53432)

2026-04-10 20:25:57 -05:00

ai-entity.ts

msteams: implement Teams AI agent UX best practices (#51808)

2026-03-23 22:03:39 -07:00

approval-auth.test.ts

refactor: add approval auth capabilities to more channels

2026-03-30 09:04:08 +09:00

approval-auth.ts

refactor: dedupe browser and memory lowercase helpers

2026-04-07 13:44:41 +01:00

attachments.graph.test.ts

refactor: simplify extension conversions

2026-04-11 01:37:23 +01:00

attachments.helpers.test.ts

feat: add local exec-policy CLI (#64050)

2026-04-10 01:16:03 -05:00

attachments.test.ts

fix(msteams): harden security-sensitive flows (#65841)

2026-04-15 22:30:23 -05:00

attachments.ts

fix(msteams): fetch DM media via Bot Framework path for a: conversation IDs (#62219) (#63951)

2026-04-09 21:04:11 -05:00

block-streaming-config.test.ts

fix(msteams): add blockStreaming config and progressive delivery (#56134)

2026-03-27 23:53:24 -05:00

channel-api.ts

perf(plugins): narrow boundary compile sdk imports

2026-04-08 08:52:51 +01:00

channel.actions.test.ts

msteams: add group management actions (add/remove participant, rename) (#57530)

2026-04-11 19:52:58 -05:00

channel.directory.test.ts

chore: enable redundant type constituent checks

2026-04-10 21:23:40 +01:00

channel.runtime.ts

msteams: add group management actions (add/remove participant, rename) (#57530)

2026-04-11 19:52:58 -05:00

channel.test.ts

Fix active-memory recall runs when mx-claw is enabled (#65049)

2026-04-11 21:08:57 -05:00

channel.ts

msteams: add group management actions (add/remove participant, rename) (#57530)

2026-04-11 19:52:58 -05:00

config-schema.ts

fix(ci): restore contract-safe core imports

2026-04-04 15:09:48 +01:00

config-ui-hints.ts

perf(plugins): narrow boundary compile sdk imports

2026-04-08 08:52:51 +01:00

conversation-store-fs.test.ts

refactor(msteams): share conversation store helpers

2026-03-28 02:26:48 +00:00

conversation-store-fs.ts

style: fix extension lint violations

2026-04-06 14:53:55 +01:00

conversation-store-helpers.test.ts

fix(msteams): pin reply target at inbound time to prevent DM/channel leak (#54520) (#62716)

2026-04-08 21:22:12 -05:00

conversation-store-helpers.ts

fix(msteams): include tenantId and aadObjectId on proactive sends (#58774) (#63949)

2026-04-10 12:09:14 -05:00

conversation-store-memory.ts

refactor(msteams): share conversation store helpers

2026-03-28 02:26:48 +00:00

conversation-store.shared.test.ts

fix(msteams): resolve Graph chat ID for personal DM media downloads (#62219) (#63063)

2026-04-09 22:57:02 -05:00

conversation-store.ts

fix: align channel owner context test types

2026-04-10 18:14:14 +01:00

directory-live.test.ts

test(msteams): cover store and live directory helpers

2026-03-22 18:42:43 -07:00

directory-live.ts

refactor: dedupe browser and memory lowercase helpers

2026-04-07 13:44:41 +01:00

directory.ts

refactor: dedupe normalization lowercase helpers

2026-04-07 22:57:52 +01:00

doctor.ts

refactor(plugins): move extension seams into extensions

2026-04-04 00:10:16 +01:00

errors.test.ts

msteams: add typingIndicator config and prevent duplicate DM typing indicator (#60771)

2026-04-04 04:34:24 -05:00

errors.ts

refactor: dedupe msteams record helper

2026-04-06 22:54:48 +01:00

feedback-reflection-prompt.ts

refactor: dedupe browser and memory lowercase helpers

2026-04-07 13:44:41 +01:00

feedback-reflection-store.ts

fix teams feedback learning filename collisions

2026-04-10 18:57:47 -05:00

feedback-reflection.test.ts

fix teams feedback learning filename collisions

2026-04-10 18:57:47 -05:00

feedback-reflection.ts

refactor: dedupe msteams lowercase helpers

2026-04-07 13:01:23 +01:00

file-consent-helpers.test.ts

test: collapse msteams state and monitor suites

2026-03-25 05:57:02 +00:00

file-consent-helpers.ts

fix(msteams): wire CLI --media path into pending upload store (#49784) (#64646)

2026-04-11 12:45:14 -05:00

file-consent.test.ts

fix(msteams): add SSRF validation to file consent upload URL (#23596)

2026-04-06 09:52:56 -05:00

file-consent.ts

refactor: dedupe browser and memory lowercase helpers

2026-04-07 13:44:41 +01:00

file-lock.ts

fix: keep extension helper imports behind local runtime barrels (#60153)

2026-04-03 23:01:43 +09:00

graph-chat.ts

refactor: dedupe lowercase helper readers

2026-04-07 13:44:41 +01:00

graph-group-management.test.ts

fix(msteams): harden security-sensitive flows (#65841)

2026-04-15 22:30:23 -05:00

graph-group-management.ts

fix(msteams): harden security-sensitive flows (#65841)

2026-04-15 22:30:23 -05:00

graph-members.test.ts

test(msteams): avoid loading graph module in member tests

2026-04-03 20:50:00 +09:00

graph-members.ts

msteams: add member-info action via Graph API (#57528)

2026-03-31 02:24:33 -05:00

graph-messages.actions.test.ts

msteams: add message actions — pin, unpin, read, react, reactions (#53432)

2026-04-10 20:25:57 -05:00

graph-messages.read.test.ts

test(msteams): dedupe graph message coverage

2026-04-12 03:05:16 +01:00

graph-messages.search.test.ts

refactor: dedupe repeated test helpers

2026-04-08 09:58:22 +01:00

graph-messages.test-helpers.ts

test(msteams): dedupe graph message coverage

2026-04-12 03:05:16 +01:00

graph-messages.ts

msteams: add group management actions (add/remove participant, rename) (#57530)

2026-04-11 19:52:58 -05:00

graph-teams.test.ts

msteams: add channel-list and channel-info actions (#57529)

2026-04-04 02:43:08 -05:00

graph-teams.ts

msteams: add channel-list and channel-info actions (#57529)

2026-04-04 02:43:08 -05:00

graph-thread.test.ts

msteams: fetch thread history via Graph API for channel replies (#51643)

2026-03-26 01:09:33 -05:00

graph-thread.ts

style: fix extension lint violations

2026-04-06 14:53:55 +01:00

graph-upload.test.ts

feat(msteams): add OpenClaw User-Agent header to Microsoft HTTP calls (#51568) (#60433)

2026-04-04 02:38:57 -05:00

graph-upload.ts

feat(msteams): add OpenClaw User-Agent header to Microsoft HTTP calls (#51568) (#60433)

2026-04-04 02:38:57 -05:00

graph-users.ts

…

graph.test.ts

msteams: add reaction support with delegated auth and pagination helper (#51646)

2026-04-11 07:41:47 -05:00

graph.ts

msteams: add group management actions (add/remove participant, rename) (#57530)

2026-04-11 19:52:58 -05:00

inbound.test.ts

msteams: extract structured quote/reply context (#51647)

2026-03-23 23:41:51 -05:00

inbound.ts

style: fix extension lint violations

2026-04-06 14:53:55 +01:00

index.ts

…

media-helpers.test.ts

…

media-helpers.ts

Plugins: internalize msteams SDK imports

2026-03-17 20:11:24 -07:00

mentions.test.ts

test: tighten msteams regression assertions

2026-03-22 17:23:01 +00:00

mentions.ts

…

messenger.test.ts

fix(msteams): handle fileConsent/invoke callback for bot-to-user file upload (#55386) (#64087)

2026-04-10 14:42:54 -05:00

messenger.ts

style: apply oxfmt cleanup

2026-04-10 23:09:37 +01:00

monitor-handler.adaptive-card.test.ts

fix(msteams): align handler tests with conversation store

2026-04-10 09:03:10 +01:00

monitor-handler.feedback-authz.test.ts

style: fix extension lint violations

2026-04-06 14:53:55 +01:00

monitor-handler.file-consent.test.ts

fix(msteams): wire CLI --media path into pending upload store (#49784) (#64646)

2026-04-11 12:45:14 -05:00

monitor-handler.sso.test.ts

fix(msteams): enforce sender allowlist checks on SSO signin invokes [AI] (#66033)

2026-04-13 23:52:30 +05:30

monitor-handler.test-helpers.ts

style: fix extension lint violations

2026-04-06 14:53:55 +01:00

monitor-handler.ts

fix(msteams): enforce sender allowlist checks on SSO signin invokes [AI] (#66033)

2026-04-13 23:52:30 +05:30

monitor-handler.types.ts

feat(msteams): handle signin/tokenExchange and signin/verifyState for SSO (#60956) (#64089)

2026-04-10 02:38:01 -05:00

monitor-types.ts

test: fix latest main test regressions

2026-03-22 18:28:13 -07:00

monitor.lifecycle.test.ts

lint: enable no extraneous class

2026-04-11 01:45:06 +01:00

monitor.test.ts

test: collapse msteams state and monitor suites

2026-03-25 05:57:02 +00:00

monitor.ts

refactor: simplify channel setup conversions

2026-04-11 01:11:05 +01:00

oauth.flow.ts

msteams: add reaction support with delegated auth and pagination helper (#51646)

2026-04-11 07:41:47 -05:00

oauth.shared.ts

msteams: add reaction support with delegated auth and pagination helper (#51646)

2026-04-11 07:41:47 -05:00

oauth.test.ts

test(msteams): stabilize oauth expiry assertion

2026-04-11 14:07:21 +01:00

oauth.token.ts

msteams: add reaction support with delegated auth and pagination helper (#51646)

2026-04-11 07:41:47 -05:00

oauth.ts

msteams: add reaction support with delegated auth and pagination helper (#51646)

2026-04-11 07:41:47 -05:00

outbound.test.ts

fix(regression): restore msteams cold-runtime chunking

2026-03-27 21:21:40 -05:00

outbound.ts

fix: keep extension helper imports behind local runtime barrels (#60153)

2026-04-03 23:01:43 +09:00

pending-uploads-fs.test.ts

fix(msteams): wire CLI --media path into pending upload store (#49784) (#64646)

2026-04-11 12:45:14 -05:00

pending-uploads-fs.ts

fix(msteams): wire CLI --media path into pending upload store (#49784) (#64646)

2026-04-11 12:45:14 -05:00

pending-uploads.test.ts

fix(msteams): handle fileConsent/invoke callback for bot-to-user file upload (#55386) (#64087)

2026-04-10 14:42:54 -05:00

pending-uploads.ts

fix(msteams): handle fileConsent/invoke callback for bot-to-user file upload (#55386) (#64087)

2026-04-10 14:42:54 -05:00

policy.test.ts

test: tighten msteams regression assertions

2026-03-22 17:07:20 +00:00

policy.ts

Plugins: internalize msteams SDK imports

2026-03-17 20:11:24 -07:00

polls-store-memory.ts

…

polls.test.ts

test: collapse msteams state and monitor suites

2026-03-25 05:57:02 +00:00

polls.ts

refactor: dedupe channel helper readers

2026-04-07 10:37:39 +01:00

probe.test.ts

lint: enable no extraneous class

2026-04-11 01:45:06 +01:00

probe.ts

msteams: add reaction support with delegated auth and pagination helper (#51646)

2026-04-11 07:41:47 -05:00

reply-dispatcher.test.ts

fix: preserve reset hook sender policy context

2026-04-10 17:56:33 -05:00

reply-dispatcher.ts

fix(msteams): keep streaming alive during long tool chains via typing indicator (#59731) (#64088)

2026-04-10 14:42:41 -05:00

reply-stream-controller.test.ts

fix(msteams): keep streaming alive during long tool chains via typing indicator (#59731) (#64088)

2026-04-10 14:42:41 -05:00

reply-stream-controller.ts

fix(msteams): keep streaming alive during long tool chains via typing indicator (#59731) (#64088)

2026-04-10 14:42:41 -05:00

resolve-allowlist.test.ts

fix(cron): accept Microsoft Teams conversation IDs in announce delivery (#58001) (#63953)

2026-04-09 20:38:23 -05:00

resolve-allowlist.ts

fix(cron): accept Microsoft Teams conversation IDs in announce delivery (#58001) (#63953)

2026-04-09 20:38:23 -05:00

revoked-context.ts

refactor: harden msteams lifecycle and attachment flows

2026-03-02 21:19:23 +00:00

runtime.ts

fix(plugins): stabilize bundled setup runtimes (#67200)

2026-04-15 12:35:18 -04:00

sdk-types.ts

msteams: implement Teams AI agent UX best practices (#51808)

2026-03-23 22:03:39 -07:00

sdk.test.ts

fix(msteams): accept SingleTenant sts.windows.net issuer in JWT validator (#64270) (#64641)

2026-04-11 21:19:41 -05:00

sdk.ts

fix(msteams): accept SingleTenant sts.windows.net issuer in JWT validator (#64270) (#64641)

2026-04-11 21:19:41 -05:00

secret-contract.ts

chore(lint): clear extension lint regressions and add #63416 changelog

2026-04-08 17:17:29 -07:00

secret-input.ts

perf(msteams): narrow secret and ssrf runtime seams

2026-04-03 18:47:31 +09:00

send-context.ts

fix(msteams): pin reply target at inbound time to prevent DM/channel leak (#54520) (#62716)

2026-04-08 21:22:12 -05:00

send.reactions.test.ts

msteams: add reaction support with delegated auth and pagination helper (#51646)

2026-04-11 07:41:47 -05:00

send.reactions.ts

msteams: add reaction support with delegated auth and pagination helper (#51646)

2026-04-11 07:41:47 -05:00

send.test.ts

fix(msteams): wire CLI --media path into pending upload store (#49784) (#64646)

2026-04-11 12:45:14 -05:00

send.ts

fix(msteams): wire CLI --media path into pending upload store (#49784) (#64646)

2026-04-11 12:45:14 -05:00

sent-message-cache.test.ts

…

sent-message-cache.ts

fix: restore CI runtime seams

2026-03-27 14:07:01 +00:00

session-route.ts

perf(plugins): narrow boundary compile sdk imports

2026-04-08 08:52:51 +01:00

setup-core.ts

refactor: simplify msteams credential prompts

2026-04-10 23:54:43 +01:00

setup-surface.test.ts

fix(msteams): harden security-sensitive flows (#65841)

2026-04-15 22:30:23 -05:00

setup-surface.ts

fix(msteams): harden security-sensitive flows (#65841)

2026-04-15 22:30:23 -05:00

sso-token-store.test.ts

fix: avoid teams sso token key collisions

2026-04-10 19:29:09 -05:00

sso-token-store.ts

fix: avoid teams sso token key collisions

2026-04-10 19:29:09 -05:00

sso.ts

fix(cycles): split small runtime seams

2026-04-10 09:00:19 +01:00

storage.ts

…

store-fs.ts

fix: keep extension helper imports behind local runtime barrels (#60153)

2026-04-03 23:01:43 +09:00

streaming-message.test.ts

msteams: add typingIndicator config and prevent duplicate DM typing indicator (#60771)

2026-04-04 04:34:24 -05:00

streaming-message.ts

refactor: dedupe extension string helpers

2026-04-07 05:06:54 +01:00

test-runtime.ts

Tests: align plugin test imports with local barrels

2026-03-17 23:23:58 -07:00

thread-parent-context.test.ts

feat(msteams): auto-inject parent message context for thread replies (#54932) (#63945)

2026-04-10 14:42:02 -05:00

thread-parent-context.ts

feat(msteams): auto-inject parent message context for thread replies (#54932) (#63945)

2026-04-10 14:42:02 -05:00

token-response.ts

…

token.test.ts

feat(msteams): add federated credential support (certificate + managed identity) (#53615)

2026-04-11 13:29:22 -05:00

token.ts

feat(msteams): add federated credential support (certificate + managed identity) (#53615)

2026-04-11 13:29:22 -05:00

user-agent.test.ts

feat(msteams): add OpenClaw User-Agent header to Microsoft HTTP calls (#51568) (#60433)

2026-04-04 02:38:57 -05:00

user-agent.ts

feat(msteams): add OpenClaw User-Agent header to Microsoft HTTP calls (#51568) (#60433)

2026-04-04 02:38:57 -05:00

webhook-timeouts.ts

fix(test): reduce startup-heavy hotspot retention (#52381)

2026-03-22 12:28:55 -07:00

welcome-card.test.ts

msteams: implement Teams AI agent UX best practices (#51808)

2026-03-23 22:03:39 -07:00

welcome-card.ts

msteams: implement Teams AI agent UX best practices (#51808)

2026-03-23 22:03:39 -07:00