@microsoft/agents-hosting 1.7.2 → 1.8.0-beta.36.gb033f0abc1

package/README.md

@@ -1,4 +1,4 @@
-# microsoft/agents-hosting
+# @microsoft/agents-hosting
 
 ## Overview
 
@@ -21,13 +21,28 @@ exposes framework-agnostic primitives that the
 
 - `createCloudAdapter(agent, authConfig)` — returns `{ adapter, headerPropagation }` for processing incoming activities. Use this from any web framework.
 - `CloudAdapterResult` — return type of `createCloudAdapter`.
-- `createAgentResponseHandler(adapter, agent, conversationState)` — framework-agnostic handler `(req, res, params) => Promise<void>` for the agent-to-agent response route.
+- `createAgentResponseHandler(adapter, agent, conversationState)` — framework-agnostic handler `(req, res, params) => Promise<void>` for the authenticated SDK-specific Activity callback route.
 - `AgentResponseHandler`, `AgentResponseHandlerParams`, `AGENT_RESPONSE_ROUTE_PATH` — supporting types and the canonical route path.
 - `WebResponse`, `NextFunction`, `WebRequestParamsCarrier` — minimal structural interfaces (no Express/Fastify imports) used by the cross-framework helpers above.
 
 Most consumers should keep using `startServer`/`createAgentRequestHandler` from the
 Express or Fastify packages; reach for these APIs when adapting another framework.
 
+This Activity callback flow is used for SDK-specific Activity-protocol
+delegation.
+
+The Activity callback handler authenticates requests once through the supplied
+`CloudAdapter`. That boundary validates the token for any configured host connection;
+the handler then verifies that the caller application matches the delegated agent
+recorded for that conversation. Existing route-level `authorizeJWT` middleware is
+redundant but remains compatible. On configured or production hosts, missing,
+invalid, expired, or wrong-audience tokens return `401`. An authenticated caller
+that does not match the delegated agent, or missing, malformed, or pre-upgrade
+delegated state, returns `403`.
+Anonymous callbacks are supported only for unconfigured development hosts
+outside production and emit a registration warning because peer ownership cannot
+be verified. Pre-upgrade conversations must be restarted.
+
 ## Example Usage based on the AgentApplication object
 
 ```ts
@@ -87,3 +102,50 @@ app.post('/api/messages', async (req: Request, res: Response) => {
 })
 
 ```
+
+## Outbound request host validation
+
+`OutboundHostValidator` provides an opt-in allowlist for server-side requests made
+to activity service URLs and attachment URLs. Enforcement is disabled by default.
+It can be configured with environment variables:
+
+```dotenv
+OutboundHostValidator__Enabled=true
+OutboundHostValidator__IncludeDefaultMicrosoftHosts=true
+OutboundHostValidator__Hosts=contoso.com,fabrikam.com
+```
+
+Indexed host variables such as `OutboundHostValidator__Hosts__0=contoso.com` are
+also supported. A host entry matches both the exact host and its subdomains, and
+is normalized (scheme/port/path stripped; a leading `*.` is accepted and ignored).
+
+When enforcement is enabled, `CloudAdapter` rejects inbound activities whose
+`serviceUrl` host is not allowlisted, and it also rejects `serviceurl` claim
+mismatches (equivalent to `CloudAdapterOptions.validateServiceUrl=true`).
+
+For explicit configuration, reuse the same immutable policy in the adapter and
+attachment downloaders:
+
+```ts
+import {
+  AgentApplication,
+  AttachmentDownloader,
+  CloudAdapter,
+  OutboundHostValidator
+} from '@microsoft/agents-hosting'
+
+const outboundHostValidator = new OutboundHostValidator({
+  enabled: true,
+  hosts: ['contoso.com']
+})
+
+const adapter = new CloudAdapter(undefined, undefined, undefined, undefined, outboundHostValidator)
+
+const agent = new AgentApplication({
+  adapter,
+  fileDownloaders: [new AttachmentDownloader('inputFiles', outboundHostValidator)]
+})
+```
+
+The validator checks the URL supplied to the downloader. Redirects retain native
+`fetch` behavior.

package/dist/package.json

@@ -1,7 +1,7 @@
 {
     "$schema": "https://json.schemastore.org/package.json",
     "name": "@microsoft/agents-hosting",
-    "version": "1.7.2",
+    "version": "1.8.0-beta.36.gb033f0abc1",
     "homepage": "https://github.com/microsoft/Agents-for-js",
     "repository": {
         "type": "git",
@@ -21,8 +21,8 @@
     "dependencies": {
         "@azure/core-auth": "1.10.1",
         "@azure/msal-node": "5.1.5",
-        "@microsoft/agents-activity": "1.7.2",
-        "@microsoft/agents-telemetry": "1.7.2",
+        "@microsoft/agents-activity": "1.8.0-beta.36.gb033f0abc1",
+        "@microsoft/agents-telemetry": "1.8.0-beta.36.gb033f0abc1",
         "jsonwebtoken": "9.0.3",
         "jwks-rsa": "4.0.1",
         "zod": "3.25.75"

package/dist/src/agent-client/agentClient.d.ts

@@ -3,7 +3,11 @@ import { Activity, ConversationReference } from '@microsoft/agents-activity';
 import { ConversationState } from '../state';
 import { TurnContext } from '../turnContext';
 /**
- * Configuration settings required to connect to an agent endpoint.
+ * Configuration for SDK-specific Activity-protocol delegation.
+ *
+ * @remarks
+ * This configuration is used by the authenticated Activity callback flow and
+ * does not describe an open A2A protocol endpoint.
  */
 export interface AgentClientConfig {
     /**
@@ -15,12 +19,12 @@ export interface AgentClientConfig {
      */
     clientId: string;
     /**
-     * The service URL used for communication with the agent
+     * The delegating host's callback base URL.
      */
     serviceUrl: string;
 }
 /**
- * Data structure to store conversation state for agent interactions
+ * Conversation state for an SDK-specific delegated Activity exchange.
  */
 export interface ConversationData {
     /**
@@ -31,10 +35,18 @@ export interface ConversationData {
      * Reference to the conversation for maintaining context across interactions
      */
     conversationReference: ConversationReference;
+    /**
+     * Client ID of the delegated agent allowed to send authenticated Activity
+     * callbacks for this conversation.
+     */
+    expectedAgentClientId?: string;
 }
 /**
- * Client for communicating with other agents through HTTP requests.
- * Manages configuration, authentication, and activity exchange with target agents.
+ * Client for SDK-specific Activity-protocol delegation over HTTP.
+ *
+ * @remarks
+ * Manages configuration, authentication, delegated conversation state, and
+ * Activity exchange with a target agent.
  */
 export declare class AgentClient {
     /** Configuration settings for the agent client */
@@ -47,7 +59,7 @@ export declare class AgentClient {
      */
     constructor(agentConfigKey: string);
     /**
-     * Sends an activity to another agent and handles the conversation state.
+     * Sends an activity to a delegated agent and stores the callback state.
      *
      * @param activity The activity to send to the target agent
      * @param authConfig Authentication configuration used to obtain access tokens

package/dist/src/agent-client/agentClient.js

@@ -5,13 +5,17 @@ const auth_1 = require("../auth");
 const agents_activity_1 = require("@microsoft/agents-activity");
 const crypto_1 = require("crypto");
 const agents_telemetry_1 = require("@microsoft/agents-telemetry");
+const turnContext_1 = require("../turnContext");
 const agents_telemetry_2 = require("@microsoft/agents-telemetry");
 const observability_1 = require("../observability");
 const errorHelper_1 = require("../errorHelper");
 const logger = (0, agents_telemetry_1.debug)('agents:agent-client');
 /**
- * Client for communicating with other agents through HTTP requests.
- * Manages configuration, authentication, and activity exchange with target agents.
+ * Client for SDK-specific Activity-protocol delegation over HTTP.
+ *
+ * @remarks
+ * Manages configuration, authentication, delegated conversation state, and
+ * Activity exchange with a target agent.
  */
 class AgentClient {
     /**
@@ -24,7 +28,7 @@ class AgentClient {
         this.agentClientConfig = this.loadAgentClientConfig(agentConfigKey);
     }
     /**
-     * Sends an activity to another agent and handles the conversation state.
+     * Sends an activity to a delegated agent and stores the callback state.
      *
      * @param activity The activity to send to the target agent
      * @param authConfig Authentication configuration used to obtain access tokens
@@ -53,30 +57,42 @@ class AgentClient {
                 }
             };
             activityCopy.conversation.id = (0, crypto_1.randomUUID)();
+            const delegatedContext = new turnContext_1.TurnContext(context.adapter, activityCopy, context.identity);
+            const delegatedStateKey = { channelId: activityCopy.channelId, conversationId: activityCopy.conversation.id };
             const conversationDataAccessor = conversationState.createProperty(activityCopy.conversation.id);
-            const convRef = await conversationDataAccessor.set(context, { conversationReference: activity.getConversationReference(), nameRequested: false }, { channelId: activityCopy.channelId, conversationId: activityCopy.conversation.id });
-            const stateChanges = JSON.stringify(convRef);
-            logger.debug('stateChanges: ', stateChanges);
+            await conversationDataAccessor.set(delegatedContext, {
+                conversationReference: activity.getConversationReference(),
+                nameRequested: false,
+                expectedAgentClientId: this.agentClientConfig.clientId
+            }, delegatedStateKey);
+            logger.debug('stored delegated conversation state');
             const authProvider = new auth_1.MsalTokenProvider(authConfig);
             const token = await authProvider.getAccessToken(this.agentClientConfig.clientId);
-            logger.debug('agent request: ', activityCopy);
+            logger.debug('sending activity to delegated agent');
             let authHeader = ''; // Allow anonymous auth.
             if (token.trim().length > 0) {
                 authHeader = `Bearer ${token}`;
             }
-            await conversationState.saveChanges(context, false, { channelId: activityCopy.channelId, conversationId: activityCopy.conversation.id });
-            const response = await fetch(this.agentClientConfig.endPoint, {
-                method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json',
-                    Authorization: authHeader,
-                    'x-ms-conversation-id': activityCopy.conversation.id
-                },
-                body: JSON.stringify(activityCopy)
-            });
+            await conversationState.saveChanges(delegatedContext, false, delegatedStateKey);
+            let response;
+            try {
+                response = await fetch(this.agentClientConfig.endPoint, {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                        Authorization: authHeader,
+                        'x-ms-conversation-id': activityCopy.conversation.id
+                    },
+                    body: JSON.stringify(activityCopy)
+                });
+            }
+            catch (error) {
+                await conversationState.delete(delegatedContext, delegatedStateKey);
+                throw error;
+            }
             record({ httpStatusCode: response.status.toString() });
             if (!response.ok) {
-                await conversationDataAccessor.delete(context, { channelId: activityCopy.channelId, conversationId: activityCopy.conversation.id });
+                await conversationState.delete(delegatedContext, delegatedStateKey);
                 throw agents_activity_1.ExceptionHelper.generateException(Error, errorHelper_1.Errors.FailedToPostActivityToAgent, undefined, { statusText: response.statusText });
             }
             return response.statusText;

package/dist/src/agent-client/agentClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"agentClient.js","sourceRoot":"","sources":["../../../src/agent-client/agentClient.ts"],"names":[],"mappings":";;;AAAA,kCAA8D;AAC9D,gEAAwG;AACxG,mCAAmC;AACnC,kEAAmD;AAGnD,kEAAmD;AACnD,oDAA8D;AAC9D,gDAAuC;AAEvC,MAAM,MAAM,GAAG,IAAA,wBAAK,EAAC,qBAAqB,CAAC,CAAA;AAkC3C;;;GAGG;AACH,MAAa,WAAW;IAItB;;;;;OAKG;IACH,YAAoB,cAAsB;QACxC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAA;IACrE,CAAC;IAED;;;;;;;;;OASG;IACI,KAAK,CAAC,YAAY,CAAE,QAAkB,EAAE,UAA6B,EAAE,iBAAoC,EAAE,OAAoB;QACtI,OAAO,IAAA,wBAAK,EAAC,2CAA2B,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAC1E,MAAM,CAAC;gBACL,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ;gBACzC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ;aAC1C,CAAC,CAAA;YACF,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAA;YACrC,YAAY,CAAC,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAA;YAC3D,YAAY,CAAC,SAAS,GAAG,EAAE,GAAG,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,2BAAS,CAAC,KAAK,EAAE,CAAA;YAC7E,YAAY,CAAC,SAAS,GAAG;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,UAAU,EAAE,YAAY,CAAC,EAAE;gBAC3B,SAAS,EAAE,YAAY,CAAC,SAAU;gBAClC,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,YAAY,EAAE;oBACZ,EAAE,EAAE,QAAQ,CAAC,YAAa,CAAC,EAAE;oBAC7B,GAAG,YAAY,CAAC,YAAY;iBAC7B;aACF,CAAA;YACD,YAAY,CAAC,YAAa,CAAC,EAAE,GAAG,IAAA,mBAAU,GAAE,CAAA;YAE5C,MAAM,wBAAwB,GAAG,iBAAiB,CAAC,cAAc,CAAmB,YAAY,CAAC,YAAa,CAAC,EAAE,CAAC,CAAA;YAClH,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,GAAG,CAAC,OAAO,EACxD,EAAE,qBAAqB,EAAE,QAAQ,CAAC,wBAAwB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,EACpF,EAAE,SAAS,EAAE,YAAY,CAAC,SAAU,EAAE,cAAc,EAAE,YAAY,CAAC,YAAa,CAAC,EAAE,EAAE,CACtF,CAAA;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;YAC5C,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAA;YAE5C,MAAM,YAAY,GAAG,IAAI,wBAAiB,CAAC,UAAU,CAAC,CAAA;YACtD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAA;YAEhF,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAA;YAE7C,IAAI,UAAU,GAAG,EAAE,CAAA,CAAC,wBAAwB;YAE5C,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,UAAU,GAAG,UAAU,KAAK,EAAE,CAAA;YAChC,CAAC;YAED,MAAM,iBAAiB,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,SAAU,EAAE,cAAc,EAAE,YAAY,CAAC,YAAa,CAAC,EAAE,EAAE,CAAC,CAAA;YAC1I,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE;gBAC5D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU;oBACzB,sBAAsB,EAAE,YAAY,CAAC,YAAa,CAAC,EAAE;iBACtD;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;aACnC,CAAC,CAAA;YAEF,MAAM,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;YAEtD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,wBAAwB,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,SAAU,EAAE,cAAc,EAAE,YAAY,CAAC,YAAa,CAAC,EAAE,EAAE,CAAC,CAAA;gBACrI,MAAM,iCAAe,CAAC,iBAAiB,CAAC,KAAK,EAAE,oBAAM,CAAC,2BAA2B,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;YACpI,CAAC;YACD,OAAO,QAAQ,CAAC,UAAU,CAAA;QAC5B,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,qBAAqB,CAAE,SAAiB;QAC9C,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,WAAW,CAAC,KAAK,SAAS;gBACpD,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,WAAW,CAAC,KAAK,SAAS;gBAClD,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,aAAa,CAAC,KAAK,SAAS,EAAE,CAAC;gBACvD,OAAO;oBACL,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,WAAW,CAAE;oBAC/C,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,WAAW,CAAE;oBAC/C,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,aAAa,CAAE;iBACpD,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,iCAAe,CAAC,iBAAiB,CAAC,KAAK,EAAE,oBAAM,CAAC,wBAAwB,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;YAC3G,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,iCAAe,CAAC,iBAAiB,CAAC,KAAK,EAAE,oBAAM,CAAC,iBAAiB,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC;CACF;AA/GD,kCA+GC"}
+{"version":3,"file":"agentClient.js","sourceRoot":"","sources":["../../../src/agent-client/agentClient.ts"],"names":[],"mappings":";;;AAAA,kCAA8D;AAC9D,gEAAwG;AACxG,mCAAmC;AACnC,kEAAmD;AAEnD,gDAA4C;AAC5C,kEAAmD;AACnD,oDAA8D;AAC9D,gDAAuC;AAEvC,MAAM,MAAM,GAAG,IAAA,wBAAK,EAAC,qBAAqB,CAAC,CAAA;AA2C3C;;;;;;GAMG;AACH,MAAa,WAAW;IAItB;;;;;OAKG;IACH,YAAoB,cAAsB;QACxC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAA;IACrE,CAAC;IAED;;;;;;;;;OASG;IACI,KAAK,CAAC,YAAY,CAAE,QAAkB,EAAE,UAA6B,EAAE,iBAAoC,EAAE,OAAoB;QACtI,OAAO,IAAA,wBAAK,EAAC,2CAA2B,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAC1E,MAAM,CAAC;gBACL,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ;gBACzC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ;aAC1C,CAAC,CAAA;YACF,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAA;YACrC,YAAY,CAAC,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAA;YAC3D,YAAY,CAAC,SAAS,GAAG,EAAE,GAAG,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,2BAAS,CAAC,KAAK,EAAE,CAAA;YAC7E,YAAY,CAAC,SAAS,GAAG;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,UAAU,EAAE,YAAY,CAAC,EAAE;gBAC3B,SAAS,EAAE,YAAY,CAAC,SAAU;gBAClC,MAAM,EAAE,YAAY,CAAC,MAAM;gBAC3B,YAAY,EAAE;oBACZ,EAAE,EAAE,QAAQ,CAAC,YAAa,CAAC,EAAE;oBAC7B,GAAG,YAAY,CAAC,YAAY;iBAC7B;aACF,CAAA;YACD,YAAY,CAAC,YAAa,CAAC,EAAE,GAAG,IAAA,mBAAU,GAAE,CAAA;YAE5C,MAAM,gBAAgB,GAAG,IAAI,yBAAW,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;YACzF,MAAM,iBAAiB,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,SAAU,EAAE,cAAc,EAAE,YAAY,CAAC,YAAa,CAAC,EAAE,EAAE,CAAA;YAC/G,MAAM,wBAAwB,GAAG,iBAAiB,CAAC,cAAc,CAAmB,YAAY,CAAC,YAAa,CAAC,EAAE,CAAC,CAAA;YAClH,MAAM,wBAAwB,CAAC,GAAG,CAAC,gBAAgB,EACjD;gBACE,qBAAqB,EAAE,QAAQ,CAAC,wBAAwB,EAAE;gBAC1D,aAAa,EAAE,KAAK;gBACpB,qBAAqB,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ;aACvD,EACD,iBAAiB,CAClB,CAAA;YAED,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAA;YAEnD,MAAM,YAAY,GAAG,IAAI,wBAAiB,CAAC,UAAU,CAAC,CAAA;YACtD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAA;YAEhF,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAA;YAEnD,IAAI,UAAU,GAAG,EAAE,CAAA,CAAC,wBAAwB;YAE5C,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,UAAU,GAAG,UAAU,KAAK,EAAE,CAAA;YAChC,CAAC;YAED,MAAM,iBAAiB,CAAC,WAAW,CAAC,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAA;YAC/E,IAAI,QAAkB,CAAA;YACtB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE;oBACtD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,aAAa,EAAE,UAAU;wBACzB,sBAAsB,EAAE,YAAY,CAAC,YAAa,CAAC,EAAE;qBACtD;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;iBACnC,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,iBAAiB,CAAC,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAA;gBACnE,MAAM,KAAK,CAAA;YACb,CAAC;YAED,MAAM,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;YAEtD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,iBAAiB,CAAC,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAA;gBACnE,MAAM,iCAAe,CAAC,iBAAiB,CAAC,KAAK,EAAE,oBAAM,CAAC,2BAA2B,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;YACpI,CAAC;YACD,OAAO,QAAQ,CAAC,UAAU,CAAA;QAC5B,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,qBAAqB,CAAE,SAAiB;QAC9C,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,WAAW,CAAC,KAAK,SAAS;gBACpD,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,WAAW,CAAC,KAAK,SAAS;gBAClD,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,aAAa,CAAC,KAAK,SAAS,EAAE,CAAC;gBACvD,OAAO;oBACL,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,WAAW,CAAE;oBAC/C,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,WAAW,CAAE;oBAC/C,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,aAAa,CAAE;iBACpD,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,iCAAe,CAAC,iBAAiB,CAAC,KAAK,EAAE,oBAAM,CAAC,wBAAwB,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;YAC3G,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,iCAAe,CAAC,iBAAiB,CAAC,KAAK,EAAE,oBAAM,CAAC,iBAAiB,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC;CACF;AA1HD,kCA0HC"}

package/dist/src/agent-client/agentResponseHandler.d.ts

@@ -7,10 +7,10 @@ import { CloudAdapter } from '../cloudAdapter';
 import { ConversationState } from '../state';
 /**
  * Minimal application surface needed by {@link configureResponseController} to
- * register the agent-to-agent response POST route. Express's `Application`
- * structurally satisfies this; frameworks that do not (e.g., Fastify) should
- * call {@link createAgentResponseHandler} directly and register the route
- * themselves rather than passing a synthetic `WebApp`.
+ * register the SDK-specific Activity callback POST route. Express's `Application`
+ * structurally satisfies this. Framework integrations that do not satisfy it
+ * should wrap {@link createAgentResponseHandler}; Fastify users should use
+ * `configureResponseController` from `@microsoft/agents-hosting-fastify`.
  *
  * `WebApp` is a minimal structural shape rather than a richer, named
  * route-registrar contract. It is exported so it has a stable name in the
@@ -22,24 +22,29 @@ export interface WebApp {
     post(path: string, handler: (req: any, res: any) => unknown | Promise<unknown>): unknown;
 }
 /**
- * To enable Agent to Agent communication, configures the agent response controller endpoint for handling incoming activities from external services.
+ * Registers the authenticated Activity callback endpoint used by SDK-specific
+ * Activity-protocol delegation.
  *
  * @remarks
- * This function sets up a POST endpoint that receives activities (messages, events, etc.) from external
- * services and processes them through the bot framework's activity handling pipeline. It's typically used
- * when the agent needs to receive and respond to activities from channels or services that send activities
- * to a specific webhook endpoint.
+ * This endpoint is part of the Microsoft Agents SDK delegated-agent callback
+ * flow
  *
  * The endpoint expects activities to be sent to:
  * `POST /api/agentresponse/v3/conversations/{conversationId}/activities/{activityId}`
  *
  * The function handles:
+ * - Returning `401` when JWT authentication fails
+ * - Returning `403` when delegated state is invalid or the authenticated caller
+ *   does not own the delegated conversation
  * - Normalizing incoming activity data from the request body
  * - Retrieving conversation references from conversation state
  * - Continuing conversations using the stored conversation reference
  * - Processing EndOfConversation activities by cleaning up conversation state
  * - Sending activities through the turn context and returning responses
  *
+ * Anonymous callbacks are supported only for unconfigured development hosts
+ * outside production and cannot cryptographically prove callback ownership.
+ *
  * @param app - The application instance (Express `Application` or any framework that satisfies {@link WebApp}) to configure the route on.
  * @param adapter - The CloudAdapter instance used for processing bot framework activities and managing conversations.
  * @param agent - The ActivityHandler instance that contains the bot's logic for processing different types of activities.

package/dist/src/agent-client/agentResponseHandler.js

@@ -7,24 +7,29 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.configureResponseController = void 0;
 const createAgentResponseHandler_1 = require("./createAgentResponseHandler");
 /**
- * To enable Agent to Agent communication, configures the agent response controller endpoint for handling incoming activities from external services.
+ * Registers the authenticated Activity callback endpoint used by SDK-specific
+ * Activity-protocol delegation.
  *
  * @remarks
- * This function sets up a POST endpoint that receives activities (messages, events, etc.) from external
- * services and processes them through the bot framework's activity handling pipeline. It's typically used
- * when the agent needs to receive and respond to activities from channels or services that send activities
- * to a specific webhook endpoint.
+ * This endpoint is part of the Microsoft Agents SDK delegated-agent callback
+ * flow
  *
  * The endpoint expects activities to be sent to:
  * `POST /api/agentresponse/v3/conversations/{conversationId}/activities/{activityId}`
  *
  * The function handles:
+ * - Returning `401` when JWT authentication fails
+ * - Returning `403` when delegated state is invalid or the authenticated caller
+ *   does not own the delegated conversation
  * - Normalizing incoming activity data from the request body
  * - Retrieving conversation references from conversation state
  * - Continuing conversations using the stored conversation reference
  * - Processing EndOfConversation activities by cleaning up conversation state
  * - Sending activities through the turn context and returning responses
  *
+ * Anonymous callbacks are supported only for unconfigured development hosts
+ * outside production and cannot cryptographically prove callback ownership.
+ *
  * @param app - The application instance (Express `Application` or any framework that satisfies {@link WebApp}) to configure the route on.
  * @param adapter - The CloudAdapter instance used for processing bot framework activities and managing conversations.
  * @param agent - The ActivityHandler instance that contains the bot's logic for processing different types of activities.

package/dist/src/agent-client/agentResponseHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"agentResponseHandler.js","sourceRoot":"","sources":["../../../src/agent-client/agentResponseHandler.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAOH,6EAAoG;AAsBpG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACI,MAAM,2BAA2B,GAAG,CACzC,GAAW,EACX,OAAqB,EACrB,KAAsB,EACtB,iBAAoC,EACpC,EAAE;IACF,MAAM,OAAO,GAAG,IAAA,uDAA0B,EAAC,OAAO,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAA;IAC7E,GAAG,CAAC,IAAI,CAAC,sDAAyB,EAAE,KAAK,EAAE,GAAsC,EAAE,GAAgB,EAAE,EAAE;QACrG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE;YACtB,cAAc,EAAE,GAAG,CAAC,MAAO,CAAC,cAAwB;YACpD,UAAU,EAAE,GAAG,CAAC,MAAO,CAAC,UAAoB;SAC7C,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAbY,QAAA,2BAA2B,+BAavC"}
+{"version":3,"file":"agentResponseHandler.js","sourceRoot":"","sources":["../../../src/agent-client/agentResponseHandler.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAOH,6EAAoG;AAsBpG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACI,MAAM,2BAA2B,GAAG,CACzC,GAAW,EACX,OAAqB,EACrB,KAAsB,EACtB,iBAAoC,EACpC,EAAE;IACF,MAAM,OAAO,GAAG,IAAA,uDAA0B,EAAC,OAAO,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAA;IAC7E,GAAG,CAAC,IAAI,CAAC,sDAAyB,EAAE,KAAK,EAAE,GAAsC,EAAE,GAAgB,EAAE,EAAE;QACrG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE;YACtB,cAAc,EAAE,GAAG,CAAC,MAAO,CAAC,cAAwB;YACpD,UAAU,EAAE,GAAG,CAAC,MAAO,CAAC,UAAoB;SAC7C,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAbY,QAAA,2BAA2B,+BAavC"}

package/dist/src/agent-client/createAgentResponseHandler.d.ts

@@ -16,7 +16,7 @@ export interface AgentResponseHandlerParams {
     activityId: string;
 }
 /**
- * Framework-agnostic handler signature for the agent response controller endpoint.
+ * Framework-agnostic handler signature for the SDK-specific Activity callback endpoint.
  *
  * @remarks
  * The handler is intended to be invoked by a thin framework-specific wrapper (such
@@ -25,7 +25,7 @@ export interface AgentResponseHandlerParams {
  */
 export type AgentResponseHandler = (req: Request, res: WebResponse, params: AgentResponseHandlerParams) => Promise<void>;
 /**
- * Creates a framework-agnostic handler for the agent response controller endpoint.
+ * Creates a framework-agnostic handler for the authenticated Activity callback endpoint.
  *
  * This is the core, Express-free implementation used by:
  * - `configureResponseController` in `@microsoft/agents-hosting-express`
@@ -34,6 +34,11 @@ export type AgentResponseHandler = (req: Request, res: WebResponse, params: Agen
  * Both wrappers register the canonical route
  * `POST /api/agentresponse/v3/conversations/:conversationId/activities/:activityId`
  * and forward the parsed body + path parameters to the handler returned here.
+ * The handler returns `401` for failed JWT authentication and `403` when the
+ * authenticated caller does not match the delegated agent stored for the
+ * conversation, or when that delegated state is missing or malformed.
+ *
+ * This callback contract is SDK-specific and is not the open A2A protocol.
  *
  * @param adapter - The CloudAdapter used for processing activities and managing conversations.
  * @param agent - The ActivityHandler containing the agent logic.

package/dist/src/agent-client/createAgentResponseHandler.js

@@ -12,9 +12,10 @@ const crypto_1 = require("crypto");
 const activityWireCompat_1 = require("../activityWireCompat");
 const errorHelper_1 = require("../errorHelper");
 const agents_telemetry_1 = require("@microsoft/agents-telemetry");
+const jwt_middleware_1 = require("../auth/jwt-middleware");
 const logger = (0, agents_telemetry_1.debug)('agents:agent-client');
 /**
- * Creates a framework-agnostic handler for the agent response controller endpoint.
+ * Creates a framework-agnostic handler for the authenticated Activity callback endpoint.
  *
  * This is the core, Express-free implementation used by:
  * - `configureResponseController` in `@microsoft/agents-hosting-express`
@@ -23,6 +24,11 @@ const logger = (0, agents_telemetry_1.debug)('agents:agent-client');
  * Both wrappers register the canonical route
  * `POST /api/agentresponse/v3/conversations/:conversationId/activities/:activityId`
  * and forward the parsed body + path parameters to the handler returned here.
+ * The handler returns `401` for failed JWT authentication and `403` when the
+ * authenticated caller does not match the delegated agent stored for the
+ * conversation, or when that delegated state is missing or malformed.
+ *
+ * This callback contract is SDK-specific and is not the open A2A protocol.
  *
  * @param adapter - The CloudAdapter used for processing activities and managing conversations.
  * @param agent - The ActivityHandler containing the agent logic.
@@ -30,26 +36,57 @@ const logger = (0, agents_telemetry_1.debug)('agents:agent-client');
  * @returns A handler `(req, res, params) => Promise<void>`.
  */
 const createAgentResponseHandler = (adapter, agent, conversationState) => {
+    var _a;
+    const appId = (_a = adapter.getClientId()) !== null && _a !== void 0 ? _a : '';
+    const anonymousDevelopment = appId.length === 0 && process.env.NODE_ENV !== 'production';
+    if (anonymousDevelopment) {
+        emitAgentResponseWarning('The agent-response endpoint is using anonymous authentication outside production. Callback ownership cannot be cryptographically verified; configure a client ID before deployment.');
+    }
     return async (req, res, params) => {
-        var _a, _b;
+        var _a, _b, _c, _d, _e;
+        let middlewareError;
+        let nextCalled = false;
+        await adapter.authorizeRequest(req, res, (err) => {
+            nextCalled = true;
+            middlewareError = err;
+        });
+        if (middlewareError) {
+            throw middlewareError;
+        }
+        if (!nextCalled || res.headersSent) {
+            return;
+        }
         if (!req.body) {
             throw agents_activity_1.ExceptionHelper.generateException(TypeError, errorHelper_1.Errors.MissingRequestBody);
         }
         const incoming = (0, activityWireCompat_1.normalizeIncomingActivity)(req.body);
         const activity = agents_activity_1.Activity.fromObject(incoming);
-        logger.debug('received response: ', activity);
-        const connection = adapter.connectionManager.getDefaultConnection();
-        const appId = (_b = (_a = connection === null || connection === void 0 ? void 0 : connection.connectionSettings) === null || _a === void 0 ? void 0 : _a.clientId) !== null && _b !== void 0 ? _b : '';
-        const myTurnContext = new turnContext_1.TurnContext(adapter, activity, cloudAdapter_1.CloudAdapter.createIdentity(appId));
+        logger.debug('received delegated agent response');
+        const continuationAudience = (_a = (0, jwt_middleware_1.getAuthorizedAudience)(req)) !== null && _a !== void 0 ? _a : appId;
+        const myTurnContext = new turnContext_1.TurnContext(adapter, activity, cloudAdapter_1.CloudAdapter.createIdentity(continuationAudience));
         const conversationDataAccessor = conversationState.createProperty(params.conversationId);
-        const conversationRefState = await conversationDataAccessor.get(myTurnContext, undefined, { channelId: activity.channelId, conversationId: params.conversationId });
+        const incomingChannelId = activity.channelId;
+        const conversationRefState = await conversationDataAccessor.get(myTurnContext, undefined, { channelId: incomingChannelId, conversationId: params.conversationId });
+        if (!isDelegatedConversationState(conversationRefState)) {
+            res.status(403).send({ 'agent-response-auth-error': 'caller is not authorized for this conversation' });
+            return;
+        }
+        const callerClientId = (_c = (_b = req.user) === null || _b === void 0 ? void 0 : _b.azp) !== null && _c !== void 0 ? _c : (_d = req.user) === null || _d === void 0 ? void 0 : _d.appid;
+        const anonymousCaller = anonymousDevelopment && ((_e = req.user) === null || _e === void 0 ? void 0 : _e.name) === 'anonymous';
+        const delegatedAgentMatches = anonymousCaller || (typeof callerClientId === 'string' &&
+            callerClientId.length > 0 &&
+            callerClientId.toLowerCase() === conversationRefState.expectedAgentClientId.toLowerCase());
+        if (!delegatedAgentMatches) {
+            res.status(403).send({ 'agent-response-auth-error': 'caller is not authorized for this conversation' });
+            return;
+        }
         const callback = async (turnContext) => {
             activity.applyConversationReference(conversationRefState.conversationReference);
             turnContext.activity.id = params.activityId;
             let response;
             let responseContentType;
             if (activity.type === agents_activity_1.ActivityTypes.EndOfConversation) {
-                await conversationDataAccessor.delete(turnContext, { channelId: activity.channelId, conversationId: activity.conversation.id });
+                await conversationState.delete(myTurnContext, { channelId: incomingChannelId, conversationId: params.conversationId });
                 applyActivityToTurnContext(turnContext, activity);
                 await agent.run(turnContext);
                 response = (0, crypto_1.randomUUID)().replace(/-/g, '');
@@ -70,6 +107,16 @@ const createAgentResponseHandler = (adapter, agent, conversationState) => {
     };
 };
 exports.createAgentResponseHandler = createAgentResponseHandler;
+function isDelegatedConversationState(state) {
+    return typeof (state === null || state === void 0 ? void 0 : state.conversationReference) === 'object' &&
+        state.conversationReference !== null &&
+        typeof state.expectedAgentClientId === 'string' &&
+        state.expectedAgentClientId.trim().length > 0;
+}
+function emitAgentResponseWarning(message) {
+    console.warn(`[agents:agent-client] ${message}`);
+    logger.warn(message);
+}
 const applyActivityToTurnContext = (turnContext, activity) => {
     turnContext.activity.channelData = activity.channelData;
     turnContext.activity.code = activity.code;

package/dist/src/agent-client/createAgentResponseHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"createAgentResponseHandler.js","sourceRoot":"","sources":["../../../src/agent-client/createAgentResponseHandler.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,gEAA4G;AAE5G,kDAA8C;AAG9C,gDAA4C;AAC5C,mCAAmC;AACnC,8DAAiE;AACjE,gDAAuC;AACvC,kEAAmD;AAGnD,MAAM,MAAM,GAAG,IAAA,wBAAK,EAAC,qBAAqB,CAAC,CAAA;AA6B3C;;;;;;;;;;;;;;;GAeG;AACI,MAAM,0BAA0B,GAAG,CACxC,OAAqB,EACrB,KAAsB,EACtB,iBAAoC,EACd,EAAE;IACxB,OAAO,KAAK,EAAE,GAAY,EAAE,GAAgB,EAAE,MAAkC,EAAE,EAAE;;QAClF,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,iCAAe,CAAC,iBAAiB,CAAC,SAAS,EAAE,oBAAM,CAAC,kBAAkB,CAAC,CAAA;QAC/E,CAAC;QACD,MAAM,QAAQ,GAAG,IAAA,8CAAyB,EAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACpD,MAAM,QAAQ,GAAG,0BAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;QAE9C,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAA;QAE7C,MAAM,UAAU,GAAG,OAAO,CAAC,iBAAiB,CAAC,oBAAoB,EAAE,CAAA;QACnE,MAAM,KAAK,GAAG,MAAA,MAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,kBAAkB,0CAAE,QAAQ,mCAAI,EAAE,CAAA;QAE5D,MAAM,aAAa,GAAG,IAAI,yBAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,2BAAY,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;QAC5F,MAAM,wBAAwB,GAAG,iBAAiB,CAAC,cAAc,CAA6B,MAAM,CAAC,cAAc,CAAC,CAAA;QACpH,MAAM,oBAAoB,GAAG,MAAM,wBAAwB,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAU,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAA;QAEpK,MAAM,QAAQ,GAAG,KAAK,EAAE,WAAwB,EAAE,EAAE;YAClD,QAAQ,CAAC,0BAA0B,CAAC,oBAAoB,CAAC,qBAAqB,CAAC,CAAA;YAC/E,WAAW,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,CAAC,UAAU,CAAA;YAE3C,IAAI,QAAiB,CAAA;YACrB,IAAI,mBAAuC,CAAA;YAC3C,IAAI,QAAQ,CAAC,IAAI,KAAK,+BAAa,CAAC,iBAAiB,EAAE,CAAC;gBACtD,MAAM,wBAAwB,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAU,EAAE,cAAc,EAAE,QAAQ,CAAC,YAAa,CAAC,EAAE,EAAE,CAAC,CAAA;gBAEjI,0BAA0B,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;gBACjD,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;gBAE5B,QAAQ,GAAG,IAAA,mBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;gBACzC,4EAA4E;gBAC5E,4EAA4E;gBAC5E,+CAA+C;gBAC/C,mBAAmB,GAAG,2BAA2B,CAAA;YACnD,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;YACrD,CAAC;YACD,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;gBACtC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAA;YACpD,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAChC,CAAC,CAAA;QAED,MAAM,OAAO,CAAC,oBAAoB,CAAC,aAAa,CAAC,QAAQ,EAAE,oBAAoB,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAA;IAClH,CAAC,CAAA;AACH,CAAC,CAAA;AAjDY,QAAA,0BAA0B,8BAiDtC;AAED,MAAM,0BAA0B,GAAG,CAAC,WAAwB,EAAE,QAAkB,EAAE,EAAE;IAClF,WAAW,CAAC,QAAQ,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAA;IACvD,WAAW,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAA;IACzC,WAAW,CAAC,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAA;IACjD,WAAW,CAAC,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;IAC7C,WAAW,CAAC,QAAQ,CAAC,cAAc,GAAG,QAAQ,CAAC,cAAc,CAAA;IAC7D,WAAW,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAA;IACzC,WAAW,CAAC,QAAQ,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAA;IACnD,WAAW,CAAC,QAAQ,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAA;IACnD,WAAW,CAAC,QAAQ,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAA;IACnD,WAAW,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAA;IACzC,WAAW,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAA;IACzC,WAAW,CAAC,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAA;AAC7C,CAAC,CAAA;AAED;;;GAGG;AACU,QAAA,yBAAyB,GAAG,4EAA4E,CAAA"}
+{"version":3,"file":"createAgentResponseHandler.js","sourceRoot":"","sources":["../../../src/agent-client/createAgentResponseHandler.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,gEAA4G;AAE5G,kDAA8C;AAG9C,gDAA4C;AAC5C,mCAAmC;AACnC,8DAAiE;AACjE,gDAAuC;AACvC,kEAAmD;AAEnD,2DAA8D;AAE9D,MAAM,MAAM,GAAG,IAAA,wBAAK,EAAC,qBAAqB,CAAC,CAAA;AAmC3C;;;;;;;;;;;;;;;;;;;;GAoBG;AACI,MAAM,0BAA0B,GAAG,CACxC,OAAqB,EACrB,KAAsB,EACtB,iBAAoC,EACd,EAAE;;IACxB,MAAM,KAAK,GAAG,MAAA,OAAO,CAAC,WAAW,EAAE,mCAAI,EAAE,CAAA;IACzC,MAAM,oBAAoB,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAA;IACxF,IAAI,oBAAoB,EAAE,CAAC;QACzB,wBAAwB,CACtB,qLAAqL,CACtL,CAAA;IACH,CAAC;IAED,OAAO,KAAK,EAAE,GAAY,EAAE,GAAgB,EAAE,MAAkC,EAAE,EAAE;;QAClF,IAAI,eAAoB,CAAA;QACxB,IAAI,UAAU,GAAG,KAAK,CAAA;QACtB,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAS,EAAE,EAAE;YACrD,UAAU,GAAG,IAAI,CAAA;YACjB,eAAe,GAAG,GAAG,CAAA;QACvB,CAAC,CAAC,CAAA;QACF,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,eAAe,CAAA;QACvB,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACnC,OAAM;QACR,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,iCAAe,CAAC,iBAAiB,CAAC,SAAS,EAAE,oBAAM,CAAC,kBAAkB,CAAC,CAAA;QAC/E,CAAC;QACD,MAAM,QAAQ,GAAG,IAAA,8CAAyB,EAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACpD,MAAM,QAAQ,GAAG,0BAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;QAE9C,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAA;QAEjD,MAAM,oBAAoB,GAAG,MAAA,IAAA,sCAAqB,EAAC,GAAG,CAAC,mCAAI,KAAK,CAAA;QAChE,MAAM,aAAa,GAAG,IAAI,yBAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,2BAAY,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC,CAAA;QAC3G,MAAM,wBAAwB,GAAG,iBAAiB,CAAC,cAAc,CAA6B,MAAM,CAAC,cAAc,CAAC,CAAA;QACpH,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAU,CAAA;QAC7C,MAAM,oBAAoB,GAAG,MAAM,wBAAwB,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAA;QAClK,IAAI,CAAC,4BAA4B,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,2BAA2B,EAAE,gDAAgD,EAAE,CAAC,CAAA;YACvG,OAAM;QACR,CAAC;QAED,MAAM,cAAc,GAAG,MAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,GAAG,mCAAI,MAAA,GAAG,CAAC,IAAI,0CAAE,KAAK,CAAA;QACvD,MAAM,eAAe,GAAG,oBAAoB,IAAI,CAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,IAAI,MAAK,WAAW,CAAA;QAC9E,MAAM,qBAAqB,GAAG,eAAe,IAAI,CAC/C,OAAO,cAAc,KAAK,QAAQ;YAClC,cAAc,CAAC,MAAM,GAAG,CAAC;YACzB,cAAc,CAAC,WAAW,EAAE,KAAK,oBAAoB,CAAC,qBAAqB,CAAC,WAAW,EAAE,CAC1F,CAAA;QACD,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,2BAA2B,EAAE,gDAAgD,EAAE,CAAC,CAAA;YACvG,OAAM;QACR,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,EAAE,WAAwB,EAAE,EAAE;YAClD,QAAQ,CAAC,0BAA0B,CAAC,oBAAoB,CAAC,qBAAqB,CAAC,CAAA;YAC/E,WAAW,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,CAAC,UAAU,CAAA;YAE3C,IAAI,QAAiB,CAAA;YACrB,IAAI,mBAAuC,CAAA;YAC3C,IAAI,QAAQ,CAAC,IAAI,KAAK,+BAAa,CAAC,iBAAiB,EAAE,CAAC;gBACtD,MAAM,iBAAiB,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAA;gBAEtH,0BAA0B,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;gBACjD,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;gBAE5B,QAAQ,GAAG,IAAA,mBAAU,GAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;gBACzC,4EAA4E;gBAC5E,4EAA4E;gBAC5E,+CAA+C;gBAC/C,mBAAmB,GAAG,2BAA2B,CAAA;YACnD,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;YACrD,CAAC;YAED,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;gBACtC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAA;YACpD,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAChC,CAAC,CAAA;QAED,MAAM,OAAO,CAAC,oBAAoB,CAAC,aAAa,CAAC,QAAQ,EAAE,oBAAoB,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAA;IAClH,CAAC,CAAA;AACH,CAAC,CAAA;AAtFY,QAAA,0BAA0B,8BAsFtC;AAED,SAAS,4BAA4B,CAAE,KAA6C;IAClF,OAAO,OAAO,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,qBAAqB,CAAA,KAAK,QAAQ;QACrD,KAAK,CAAC,qBAAqB,KAAK,IAAI;QACpC,OAAO,KAAK,CAAC,qBAAqB,KAAK,QAAQ;QAC/C,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;AACjD,CAAC;AAED,SAAS,wBAAwB,CAAE,OAAe;IAChD,OAAO,CAAC,IAAI,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAA;IAChD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AACtB,CAAC;AAED,MAAM,0BAA0B,GAAG,CAAC,WAAwB,EAAE,QAAkB,EAAE,EAAE;IAClF,WAAW,CAAC,QAAQ,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAA;IACvD,WAAW,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAA;IACzC,WAAW,CAAC,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAA;IACjD,WAAW,CAAC,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;IAC7C,WAAW,CAAC,QAAQ,CAAC,cAAc,GAAG,QAAQ,CAAC,cAAc,CAAA;IAC7D,WAAW,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAA;IACzC,WAAW,CAAC,QAAQ,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAA;IACnD,WAAW,CAAC,QAAQ,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAA;IACnD,WAAW,CAAC,QAAQ,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAA;IACnD,WAAW,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAA;IACzC,WAAW,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAA;IACzC,WAAW,CAAC,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAA;AAC7C,CAAC,CAAA;AAED;;;GAGG;AACU,QAAA,yBAAyB,GAAG,4EAA4E,CAAA"}

package/dist/src/app/adaptiveCards/activityValueParsers.d.ts

@@ -25,10 +25,7 @@ export declare function parseValueActionName(value: unknown): string;
  */
 export declare function parseValueContinuation(value: unknown): string;
 interface ValueAction {
-    action: {
-        type: string;
-        verb: string;
-    };
+    action: AdaptiveCardInvokeAction;
 }
 /**
  * Parses the given value as a value action execute selector.

package/dist/src/app/adaptiveCards/activityValueParsers.js

@@ -72,7 +72,7 @@ function parseValueActionExecuteSelector(value) {
     const actionZodSchema = zod_1.z.object({
         type: zod_1.z.string().min(1),
         verb: zod_1.z.string().min(1)
-    });
+    }).passthrough();
     const actionValueExecuteSelector = zod_1.z.object({
         action: actionZodSchema
     });
@@ -82,10 +82,7 @@ function parseValueActionExecuteSelector(value) {
     }
     const parsedValue = safeParsedValue.data;
     return {
-        action: {
-            type: parsedValue.action.type,
-            verb: parsedValue.action.verb
-        }
+        action: parsedValue.action
     };
 }
 /**

package/dist/src/app/adaptiveCards/activityValueParsers.js.map

@@ -1 +1 @@
-{"version":3,"file":"activityValueParsers.js","sourceRoot":"","sources":["../../../../src/app/adaptiveCards/activityValueParsers.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAaH,4CAMC;AAQD,oDAMC;AAQD,wDAMC;AAeD,0EAsBC;AAQD,8CAaC;AAQD,4EAmBC;AAQD,sEAGC;AAQD,sDAwBC;AAQD,0CAUC;AAQD,kFAUC;AAQD,wEAQC;AAQD,kDAUC;AAnPD,6BAAuB;AACvB,gEAA4I;AAC5I,2EAAgF;AAChF,mDAA0C;AAE1C;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAE,KAAc;IAC9C,MAAM,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;QACpC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC1B,CAAC,CAAA;IACF,oBAAoB,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC/C,OAAO,KAAe,CAAA;AACxB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAE,KAAc;IAClD,MAAM,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;QACxC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC9B,CAAC,CAAA;IACF,wBAAwB,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACnD,OAAO,KAAe,CAAA;AACxB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,sBAAsB,CAAE,KAAc;IACpD,MAAM,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;QAC1C,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAChC,CAAC,CAAA;IACF,0BAA0B,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACrD,OAAO,KAAe,CAAA;AACxB,CAAC;AASD;;;;;GAKG;AACH,SAAgB,+BAA+B,CAAE,KAAc;IAC7D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;QAC/B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACxB,CAAC,CAAA;IACF,MAAM,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;QAC1C,MAAM,EAAE,eAAe;KACxB,CAAC,CAAA;IACF,MAAM,eAAe,GAAG,0BAA0B,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACjF,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,iCAAe,CAAC,iBAAiB,CAAC,KAAK,EAAE,oBAAM,CAAC,kBAAkB,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAChI,CAAC;IACD,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAA;IACxC,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI;YAC7B,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI;SAC9B;KACF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAE,KAAc;IAG/C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;QAChC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC3B,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC/D,OAAO;QACL,OAAO,EAAE,WAAW,CAAC,OAAO;KAC7B,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gCAAgC,CAAE,KAAc;IAM9D,MAAM,oCAAoC,GAAG,OAAC,CAAC,MAAM,CAAC;QACpD,WAAW,EAAE,OAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YAC5D,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;SACtE,CAAC;KACH,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,oCAAoC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACnF,OAAO;QACL,WAAW,EAAE;YACX,QAAQ,EAAE,WAAW,CAAC,WAAW,CAAC,QAAQ;YAC1C,QAAQ,EAAE,WAAW,CAAC,WAAW,CAAC,QAAQ;SAC3C;KACF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,6BAA6B,CAAE,KAAc;IAC3D,mDAAiC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC5D,OAAO,KAAiC,CAAA;AAC1C,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAE,KAAc;IAQnD,MAAM,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;QACrC,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;QACf,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;KACjB,CAAC,CAAA;IACF,MAAM,oBAAoB,GAAG,8DAAkC,CAAC,MAAM,CAAC;QACrE,YAAY,EAAE,qBAAqB;KACpC,CAAC,CAAA;IACF,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACxE,OAAO;QACL,YAAY,EAAE;YACZ,GAAG,EAAE,gBAAgB,CAAC,YAAY,CAAC,GAAG;YACtC,IAAI,EAAE,gBAAgB,CAAC,YAAY,CAAC,IAAI;SACzC;QACD,SAAS,EAAE,gBAAgB,CAAC,SAAS;QACrC,OAAO,EAAE,gBAAgB,CAAC,OAAO;KAClC,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,eAAe,CAAE,KAAc;IAG7C,MAAM,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;QAC5B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACvB,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3D,OAAO;QACL,GAAG,EAAE,WAAW,CAAC,GAAG;KACrB,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mCAAmC,CAAE,KAAc;IAGjE,MAAM,gCAAgC,GAAG,OAAC,CAAC,MAAM,CAAC;QAChD,uBAAuB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC3C,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,gCAAgC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC/E,OAAO;QACL,uBAAuB,EAAE,WAAW,CAAC,uBAAuB;KAC7D,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,8BAA8B,CAAE,KAAc;IAC5D,MAAM,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;QAC3C,kBAAkB,EAAE,OAAC,CAAC,KAAK,CAAC,mCAAiB,CAAC,OAAO,EAAE,CAAC;KACzD,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,2BAA2B,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1E,OAAO;QACL,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;KACnD,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAE,KAAc;IAGjD,MAAM,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;QAClC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC7B,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACjE,OAAO;QACL,SAAS,EAAE,WAAW,CAAC,SAAS;KACjC,CAAA;AACH,CAAC"}
+{"version":3,"file":"activityValueParsers.js","sourceRoot":"","sources":["../../../../src/app/adaptiveCards/activityValueParsers.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAaH,4CAMC;AAQD,oDAMC;AAQD,wDAMC;AAYD,0EAmBC;AAQD,8CAaC;AAQD,4EAmBC;AAQD,sEAGC;AAQD,sDAwBC;AAQD,0CAUC;AAQD,kFAUC;AAQD,wEAQC;AAQD,kDAUC;AA7OD,6BAAuB;AACvB,gEAA4I;AAC5I,2EAAgF;AAChF,mDAA0C;AAE1C;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAE,KAAc;IAC9C,MAAM,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;QACpC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC1B,CAAC,CAAA;IACF,oBAAoB,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC/C,OAAO,KAAe,CAAA;AACxB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAE,KAAc;IAClD,MAAM,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;QACxC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC9B,CAAC,CAAA;IACF,wBAAwB,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACnD,OAAO,KAAe,CAAA;AACxB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,sBAAsB,CAAE,KAAc;IACpD,MAAM,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;QAC1C,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAChC,CAAC,CAAA;IACF,0BAA0B,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACrD,OAAO,KAAe,CAAA;AACxB,CAAC;AAMD;;;;;GAKG;AACH,SAAgB,+BAA+B,CAAE,KAAc;IAC7D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;QAC/B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACxB,CAAC,CAAC,WAAW,EAAE,CAAA;IAChB,MAAM,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;QAC1C,MAAM,EAAE,eAAe;KACxB,CAAC,CAAA;IACF,MAAM,eAAe,GAAG,0BAA0B,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACjF,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,iCAAe,CAAC,iBAAiB,CAAC,KAAK,EAAE,oBAAM,CAAC,kBAAkB,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAChI,CAAC;IACD,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAA;IACxC,OAAO;QACL,MAAM,EAAE,WAAW,CAAC,MAA6C;KAClE,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAE,KAAc;IAG/C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;QAChC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC3B,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC/D,OAAO;QACL,OAAO,EAAE,WAAW,CAAC,OAAO;KAC7B,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gCAAgC,CAAE,KAAc;IAM9D,MAAM,oCAAoC,GAAG,OAAC,CAAC,MAAM,CAAC;QACpD,WAAW,EAAE,OAAC,CAAC,MAAM,CAAC;YACpB,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YAC5D,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;SACtE,CAAC;KACH,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,oCAAoC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACnF,OAAO;QACL,WAAW,EAAE;YACX,QAAQ,EAAE,WAAW,CAAC,WAAW,CAAC,QAAQ;YAC1C,QAAQ,EAAE,WAAW,CAAC,WAAW,CAAC,QAAQ;SAC3C;KACF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,6BAA6B,CAAE,KAAc;IAC3D,mDAAiC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC5D,OAAO,KAAiC,CAAA;AAC1C,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAE,KAAc;IAQnD,MAAM,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;QACrC,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;QACf,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;KACjB,CAAC,CAAA;IACF,MAAM,oBAAoB,GAAG,8DAAkC,CAAC,MAAM,CAAC;QACrE,YAAY,EAAE,qBAAqB;KACpC,CAAC,CAAA;IACF,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACxE,OAAO;QACL,YAAY,EAAE;YACZ,GAAG,EAAE,gBAAgB,CAAC,YAAY,CAAC,GAAG;YACtC,IAAI,EAAE,gBAAgB,CAAC,YAAY,CAAC,IAAI;SACzC;QACD,SAAS,EAAE,gBAAgB,CAAC,SAAS;QACrC,OAAO,EAAE,gBAAgB,CAAC,OAAO;KAClC,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,eAAe,CAAE,KAAc;IAG7C,MAAM,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;QAC5B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACvB,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3D,OAAO;QACL,GAAG,EAAE,WAAW,CAAC,GAAG;KACrB,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mCAAmC,CAAE,KAAc;IAGjE,MAAM,gCAAgC,GAAG,OAAC,CAAC,MAAM,CAAC;QAChD,uBAAuB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC3C,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,gCAAgC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC/E,OAAO;QACL,uBAAuB,EAAE,WAAW,CAAC,uBAAuB;KAC7D,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,8BAA8B,CAAE,KAAc;IAC5D,MAAM,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;QAC3C,kBAAkB,EAAE,OAAC,CAAC,KAAK,CAAC,mCAAiB,CAAC,OAAO,EAAE,CAAC;KACzD,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,2BAA2B,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1E,OAAO;QACL,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;KACnD,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAE,KAAc;IAGjD,MAAM,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;QAClC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC7B,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACjE,OAAO;QACL,SAAS,EAAE,WAAW,CAAC,SAAS;KACjC,CAAA;AACH,CAAC"}

package/dist/src/app/adaptiveCards/adaptiveCardsActions.d.ts

@@ -67,6 +67,24 @@ export declare class AdaptiveCardsActions<TState extends TurnState> {
      * @param verb - A string, RegExp, RouteSelector, or an array of these to match the action verb.
      * @param handler - A function to handle the action execution.
      * @returns The Teams application instance.
+     *
+     * @remarks
+     * The delivery behavior depends on the action trigger and
+     * `adaptiveCardsOptions.actionExecuteResponseType`:
+     *
+     * | Response type | Automatic trigger | Manual trigger |
+     * | --- | --- | --- |
+     * | `REPLACE_FOR_INTERACTOR` | User response | User response |
+     * | `REPLACE_FOR_ALL` | User response | Shared update |
+     * | `NEW_MESSAGE_FOR_ALL` | User response | New message |
+     *
+     * - **User response** — Return an Adaptive Card invoke response only to the requesting or interacting user.
+     * - **Shared update** — Update the shared activity for all users and return an Adaptive Card invoke response to the interacting user.
+     * - **New message** — Send a new activity for all users and return a message acknowledgement to the interacting user.
+     *
+     * Automatic refresh actions always return only an Adaptive Card invoke response.
+     * Updating or sending a refreshable card while processing an automatic refresh
+     * would cause Teams to invoke the refresh action again.
      */
     actionExecute<TData = Record<string, any>>(verb: string | RegExp | RouteSelector | (string | RegExp | RouteSelector)[], handler: (context: TurnContext, state: TState, data: TData) => Promise<AdaptiveCard | string>): AgentApplication<TState>;
     /**