@integrity-labs/agt-cli 0.26.1 → 0.26.2-eng5706.0

package/dist/{chunk-7NDNTSHD.js → chunk-U3HCB23E.js}

@@ -930,6 +930,157 @@ async function createSlackApp(configToken, manifest) {
   };
 }
 
+// ../../packages/core/dist/channels/msteams-scopes.js
+var MSTEAMS_SCOPE_REGISTRY = [
+  // ── Messaging ────────────────────────────────────────────────────────────
+  {
+    scope: "ChannelMessage.Read.Group",
+    name: "Read Channel Messages",
+    description: "Read messages in Teams channels the bot has been added to (RSC, per-team).",
+    category: "messaging",
+    risk: "medium",
+    grant_type: "rsc"
+  },
+  {
+    scope: "ChannelMessage.Send.Group",
+    name: "Send Channel Messages",
+    description: "Post messages to Teams channels the bot has been added to.",
+    category: "messaging",
+    risk: "low",
+    grant_type: "rsc"
+  },
+  {
+    scope: "ChatMessage.Read.Chat",
+    name: "Read Chat Messages",
+    description: "Read messages in 1:1 and group chats the bot is part of.",
+    category: "messaging",
+    risk: "high",
+    grant_type: "rsc"
+  },
+  {
+    scope: "Chat.ReadWrite",
+    name: "Read and Write Chats",
+    description: "Create, read, and update 1:1 and group chats the bot is part of.",
+    category: "messaging",
+    risk: "high",
+    grant_type: "application"
+  },
+  {
+    scope: "TeamsActivity.Send",
+    name: "Send Activity Notifications",
+    description: "Send proactive activity feed notifications (toasts) to users in the tenant.",
+    category: "messaging",
+    risk: "medium",
+    grant_type: "application"
+  },
+  // ── Files ────────────────────────────────────────────────────────────────
+  {
+    scope: "Files.Read.All",
+    name: "Read All Files",
+    description: "Read files the user can access in OneDrive and SharePoint (no write).",
+    category: "files",
+    risk: "medium",
+    grant_type: "application"
+  },
+  {
+    scope: "Files.ReadWrite.All",
+    name: "Read and Write All Files",
+    description: "Read, create, update, and delete files in OneDrive and SharePoint. Required for `uploadTeamsFile`.",
+    category: "files",
+    risk: "high",
+    grant_type: "application"
+  },
+  // ── Meetings ─────────────────────────────────────────────────────────────
+  {
+    scope: "ChannelMeeting.ReadBasic.Group",
+    name: "Read Channel Meeting Info",
+    description: "Read basic info (title, time, organiser) of channel meetings in teams the bot has been added to.",
+    category: "meetings",
+    risk: "low",
+    grant_type: "rsc"
+  },
+  {
+    scope: "OnlineMeetings.ReadWrite.All",
+    name: "Read and Write Online Meetings",
+    description: "Create, read, update, and delete Teams online meetings for any user in the tenant.",
+    category: "meetings",
+    risk: "high",
+    grant_type: "application"
+  },
+  // ── Team Management ──────────────────────────────────────────────────────
+  {
+    scope: "Team.ReadBasic.All",
+    name: "Read Basic Team Info",
+    description: "List the teams the bot has been added to and read their basic info.",
+    category: "team-management",
+    risk: "low",
+    grant_type: "application"
+  },
+  {
+    scope: "TeamMember.Read.Group",
+    name: "Read Team Members",
+    description: "Read the membership list of teams the bot has been added to (RSC, per-team).",
+    category: "team-management",
+    risk: "medium",
+    grant_type: "rsc"
+  },
+  {
+    scope: "ChannelSettings.Read.All",
+    name: "Read Channel Settings",
+    description: "Read settings of channels the bot has been added to.",
+    category: "team-management",
+    risk: "low",
+    grant_type: "rsc"
+  },
+  {
+    scope: "ChannelSettings.ReadWrite.All",
+    name: "Manage Channel Settings",
+    description: "Read and update settings of channels the bot has been added to (rename, description, moderation).",
+    category: "team-management",
+    risk: "high",
+    grant_type: "rsc"
+  },
+  // ── User ─────────────────────────────────────────────────────────────────
+  {
+    scope: "User.Read.All",
+    name: "Read All User Profiles",
+    description: "Read full profile info (display name, email, job title) of users in the tenant.",
+    category: "user",
+    risk: "medium",
+    grant_type: "application"
+  },
+  // ── App Lifecycle ────────────────────────────────────────────────────────
+  {
+    scope: "TeamsAppInstallation.ReadWriteForUser.All",
+    name: "Install/Uninstall App for User",
+    description: "Install, upgrade, and uninstall the Teams app for users in the tenant \u2014 required for proactive install before first DM.",
+    category: "user",
+    risk: "high",
+    grant_type: "application"
+  }
+];
+var DEFAULT_PERMISSIONS = [
+  "ChannelMessage.Read.Group",
+  "ChannelMessage.Send.Group",
+  "ChatMessage.Read.Chat",
+  "Chat.ReadWrite",
+  "Team.ReadBasic.All",
+  "TeamMember.Read.Group",
+  "ChannelSettings.Read.All",
+  "Files.ReadWrite.All",
+  "User.Read.All",
+  "TeamsAppInstallation.ReadWriteForUser.All"
+];
+var MSTEAMS_SCOPE_PRESETS = {
+  minimal: [
+    "ChannelMessage.Read.Group",
+    "ChannelMessage.Send.Group",
+    "Team.ReadBasic.All"
+  ],
+  standard: [...DEFAULT_PERMISSIONS],
+  full: MSTEAMS_SCOPE_REGISTRY.map((s) => s.scope)
+};
+
 // ../../packages/core/dist/parser/frontmatter.js
 import { parse as parseYaml } from "yaml";
 function extractFrontmatter(content) {
@@ -3143,10 +3294,10 @@ function resolveConnectivityProbe(input) {
   switch (sourceType) {
     case "mcp_server":
       return {
-        kind: "mcp_tools_list",
+        kind: "unsupported",
         sourceType: "mcp_server",
         readOnly: true,
-        label: `${definitionId}: MCP tools/list`,
+        label: `${definitionId}: local-stdio MCP \u2014 no host probe available`,
         centralReachable: false
       };
     case "cli_tool":
@@ -3743,4 +3894,4 @@ export {
   attributeTranscriptUsageByRun,
   KANBAN_CHECK_COMMAND
 };
-//# sourceMappingURL=chunk-7NDNTSHD.js.map
+//# sourceMappingURL=chunk-U3HCB23E.js.map