Greptile Summary

This PR fixes a startup crash in the MS Teams channel (Missing parameter name at index 5: /api*) caused by @microsoft/teams.apps's built-in HttpPlugin registering an Express 4 route pattern that is rejected by Express 5's path-to-regexp@8.x.\n\nThe fix injects a no-op HTTP plugin stub into the Teams SDK App constructor, preventing the default HttpPlugin from being created at all. Since OpenClaw manages its own Express routing for the Teams webhook, the SDK's built-in HTTP handling is genuinely not needed.\n\nKey changes:\n- New createNoOpHttpPlugin() uses reflect-metadata to tag a minimal stub class with the SDK's plugin registry key \"http\", so the App treats it as an already-registered HTTP plugin and skips the default one.\n- createMSTeamsApp is promoted from synchronous to async to accommodate the lazy imports inside createNoOpHttpPlugin; the single downstream caller (loadMSTeamsSdkWithAuth) is updated accordingly.\n- A new regression test exercises the real SDK + Express 5 combination to verify the crash is gone.\n\nOne concern to watch: createNoOpHttpPlugin reaches into three private dist/ paths of @microsoft/teams.apps to obtain reflect-metadata key constants. While correct for @microsoft/teams.apps@2.0.5, these paths are not part of the SDK's public API and could break on any future SDK update. Hardcoding or snapshotting the actual string values would make the fix more durable.

Confidence Score: 4/5

Safe to merge — fixes a real startup crash with a targeted workaround and a passing regression test; the only risk is future SDK updates breaking the internal dist/ imports.

The root cause is well-understood, the fix is minimal and correctly scoped, and the regression test uses the real SDK against Express 5. One non-blocking fragility remains (deep private imports from the SDK's dist/ tree), but it does not affect current correctness.

extensions/msteams/src/sdk.ts lines 77–82 — the three internal @microsoft/teams.apps/dist/… imports.

This is a comment left during a code review.
Path: extensions/msteams/src/sdk.ts
Line: 77-82

Comment:
**Fragile deep-private SDK imports**

These three import paths reach directly into the SDK's compiled `dist/` tree rather than its public API surface:

```
@microsoft/teams.apps/dist/types/plugin/decorators/plugin.js
@microsoft/teams.apps/dist/types/plugin/decorators/dependency.js
@microsoft/teams.apps/dist/types/plugin/decorators/event.js
```

Any internal refactor inside `@microsoft/teams.apps` — even a patch release — will silently break MS Teams channel startup, likely with an opaque `MODULE_NOT_FOUND` error rather than a clear message.

Consider whether the three metadata keys could instead be hard-coded as local string constants (snapshotted from the current SDK source), removing the runtime dependency on these internal paths entirely. The values are unlikely to collide with other plugin registry entries, and a snapshot is more stable than a live import of a private file.

How can I resolve this? If you propose a fix, please make it concise.

_{Reviews (1): Last reviewed commit: "fix(msteams): prevent path-to-regexp cra..." | Re-trigger Greptile}