@codeam/shared 2.61.64 → 2.61.65

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.js CHANGED
@@ -840,13 +840,43 @@ var INTEGRATION_REGISTRY = {
840
840
  name: "Microsoft Teams",
841
841
  icon: "microsoft_teams",
842
842
  category: "comms",
843
- // COMING SOON placeholder catalog entry (no OAuth provider / MCP yet). The
844
- // agent will post review pings + read threads AS THE USER over Microsoft Graph
845
- // once the provider lands. `enabled:false` renders it as a dimmed "coming
846
- // soon" tile inside the (live) comms category.
847
- enabled: false,
848
- auth: { kind: "oauth_redirect" },
849
- delivery: {}
843
+ // LIVEMicrosoft identity platform v2.0 OAuth (multi-tenant, Confidential).
844
+ // The agent reads chats/channels + posts AS THE USER over Microsoft Graph.
845
+ // MS_TEAMS_OAUTH_CLIENT_ID/SECRET/REDIRECT_URI are in Secret Manager (prod+dev);
846
+ // the backend TeamsOAuthProvider is config-gated (503 if env unset).
847
+ // ⚠️ Chat.* + ChannelMessage.Read.All (`.All`) require TENANT-ADMIN consent
848
+ // (MC1163922, Oct-2025) the connecting user must be an org admin, or their
849
+ // IT admin approves the app for the tenant. Not a self-serve funnel like Slack.
850
+ enabled: true,
851
+ auth: {
852
+ kind: "oauth_redirect",
853
+ // Delegated Microsoft Graph scopes. `offline_access` → rotating refresh
854
+ // (Teams access tokens are ~1h). ⚠️ Changing these requires the user to
855
+ // RE-LINK — the token carries only the scopes granted at link time.
856
+ scopes: [
857
+ "User.Read",
858
+ "User.ReadBasic.All",
859
+ "Team.ReadBasic.All",
860
+ "Channel.ReadBasic.All",
861
+ "ChannelMessage.Read.All",
862
+ "ChannelMessage.Send",
863
+ "Chat.Read",
864
+ "Chat.ReadWrite",
865
+ "offline_access"
866
+ ]
867
+ },
868
+ delivery: {
869
+ mcp: {
870
+ // @floriscornel/teams-mcp (Node): BYO Graph access token via AUTH_TOKEN
871
+ // (env only, never argv). Headless. Version PINNED; bump only after
872
+ // re-verifying headless. Tools: get/send channel + chat messages, replies.
873
+ command: "npx",
874
+ args: ["-y", "@floriscornel/teams-mcp@0.9.0"],
875
+ envMapping: {
876
+ AUTH_TOKEN: "accessToken"
877
+ }
878
+ }
879
+ }
850
880
  },
851
881
  google_chat: {
852
882
  id: "google_chat",