@codeam/shared 2.61.64 → 2.61.65

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.mjs CHANGED
@@ -758,13 +758,43 @@ var INTEGRATION_REGISTRY = {
758
758
  name: "Microsoft Teams",
759
759
  icon: "microsoft_teams",
760
760
  category: "comms",
761
- // COMING SOON placeholder catalog entry (no OAuth provider / MCP yet). The
762
- // agent will post review pings + read threads AS THE USER over Microsoft Graph
763
- // once the provider lands. `enabled:false` renders it as a dimmed "coming
764
- // soon" tile inside the (live) comms category.
765
- enabled: false,
766
- auth: { kind: "oauth_redirect" },
767
- delivery: {}
761
+ // LIVEMicrosoft identity platform v2.0 OAuth (multi-tenant, Confidential).
762
+ // The agent reads chats/channels + posts AS THE USER over Microsoft Graph.
763
+ // MS_TEAMS_OAUTH_CLIENT_ID/SECRET/REDIRECT_URI are in Secret Manager (prod+dev);
764
+ // the backend TeamsOAuthProvider is config-gated (503 if env unset).
765
+ // ⚠️ Chat.* + ChannelMessage.Read.All (`.All`) require TENANT-ADMIN consent
766
+ // (MC1163922, Oct-2025) the connecting user must be an org admin, or their
767
+ // IT admin approves the app for the tenant. Not a self-serve funnel like Slack.
768
+ enabled: true,
769
+ auth: {
770
+ kind: "oauth_redirect",
771
+ // Delegated Microsoft Graph scopes. `offline_access` → rotating refresh
772
+ // (Teams access tokens are ~1h). ⚠️ Changing these requires the user to
773
+ // RE-LINK — the token carries only the scopes granted at link time.
774
+ scopes: [
775
+ "User.Read",
776
+ "User.ReadBasic.All",
777
+ "Team.ReadBasic.All",
778
+ "Channel.ReadBasic.All",
779
+ "ChannelMessage.Read.All",
780
+ "ChannelMessage.Send",
781
+ "Chat.Read",
782
+ "Chat.ReadWrite",
783
+ "offline_access"
784
+ ]
785
+ },
786
+ delivery: {
787
+ mcp: {
788
+ // @floriscornel/teams-mcp (Node): BYO Graph access token via AUTH_TOKEN
789
+ // (env only, never argv). Headless. Version PINNED; bump only after
790
+ // re-verifying headless. Tools: get/send channel + chat messages, replies.
791
+ command: "npx",
792
+ args: ["-y", "@floriscornel/teams-mcp@0.9.0"],
793
+ envMapping: {
794
+ AUTH_TOKEN: "accessToken"
795
+ }
796
+ }
797
+ }
768
798
  },
769
799
  google_chat: {
770
800
  id: "google_chat",