@microsoft/m365agentstoolkit-cli 1.1.18-rc.0 → 1.1.19-alpha.c89a0dd682.0

package/lib/index.js.LICENSE.txt

@@ -309,6 +309,8 @@ PERFORMANCE OF THIS SOFTWARE.
 
 /*! fetch-blob. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> */
 
+/*! formdata-polyfill. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> */
+
 /*! http://mths.be/fromcodepoint v0.1.0 by @mathias */
 
 /*! node-domexception. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> */

package/lib/index.js.map

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/lib/index.js.map
-size: 35431699 bytes
-sha256: 5e63b097f750a56bb3be075d624d0e57782a8c64336de9478cb9eac95b2cc445
+size: 35906986 bytes
+sha256: b3207dbf24eaca70b4c73556113739e822ce59e13ff8d3065516a4966f9afef7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@microsoft/m365agentstoolkit-cli",
-  "version": "1.1.18-rc.0",
+  "version": "1.1.19-alpha.c89a0dd682.0",
   "author": "Microsoft Corporation",
   "description": "Microsoft 365 Agents Toolkit CLI",
   "license": "MIT",
@@ -26,7 +26,7 @@
     "atk": "./cli.js",
     "m365agentstoolkit-cli": "./cli.js"
   },
-  "aiKey": "2b2a561e-be84-4bee-b3a9-12b2a2c9e974",
+  "aiKey": "1c56be97-bb74-42cf-b04b-8f1aabf04592",
   "devDependencies": {
     "@inquirer/testing": "^2.1.2",
     "@types/chai": "^4.2.14",
@@ -75,7 +75,7 @@
     "vitest": "^4.1.8",
     "webpack": "^5.95.0",
     "webpack-cli": "^5.1.4",
-    "@microsoft/metrics-ts": "0.0.13-rc.0"
+    "@microsoft/metrics-ts": "0.0.14-alpha.c89a0dd682.0"
   },
   "dependencies": {
     "@azure/arm-subscriptions": "^5.0.0",
@@ -103,8 +103,8 @@
     "tas-client": "^0.1.73",
     "tree-kill": "^1.2.2",
     "underscore": "^1.13.8",
-    "@microsoft/teamsfx-core": "3.1.4-rc.0",
-    "@microsoft/teamsfx-api": "0.24.3-rc.0"
+    "@microsoft/teamsfx-api": "0.24.4-alpha.c89a0dd682.0",
+    "@microsoft/teamsfx-core": "3.1.5-alpha.c89a0dd682.0"
   },
   "optionalDependencies": {
     "keytar": "^7.7.0"
@@ -121,7 +121,7 @@
   "gitHead": "7d60c0765c0ea8c023a26c10d1c93001c597afbb",
   "publishConfig": {
     "access": "public",
-    "tag": "rc"
+    "tag": "alpha"
   },
   "lint-staged": {
     "*.{js,jsx,css,ts,tsx}": [

package/resource/yaml-schema/v1.13/yaml.schema.json

@@ -1949,45 +1949,62 @@
     "dcrRegister": {
       "type": "object",
       "additionalProperties": false,
-      "description": "Create a Dynamic Client Registration (DCR) configuration.",
+      "description": "Create a Dynamic Client Registration (DCR) configuration through Teams Graph Service (TGS). Registration is skipped when the mapped configurationId environment variable already has a value.",
       "required": ["uses", "with", "writeToEnvironmentFile"],
       "properties": {
         "uses": {
           "type": "string",
-          "description": "Register a DCR configuration.",
+          "description": "Register an OAuth configuration using server-side Dynamic Client Registration.",
           "const": "dcr/register"
         },
         "with": {
           "type": "object",
           "additionalProperties": false,
-          "description": "Parameters for this action",
-          "required": ["name", "wellKnownAuthorizationServer"],
+          "description": "DCR registration parameters. Supply mcpResourceUrl for protected resource metadata discovery, wellKnownAuthorizationServer to pin authorization-server metadata, or both.",
+          "required": ["name", "targetUrlsShouldStartWith"],
+          "anyOf": [
+            { "required": ["mcpResourceUrl"] },
+            { "required": ["wellKnownAuthorizationServer"] }
+          ],
           "properties": {
             "name": {
               "type": "string",
-              "description": "The display name of the DCR configuration. Becomes the clientName sent during RFC 7591 registration. Max 128 characters."
+              "description": "Required client name sent to TGS as clientName for dynamic registration. Maximum 128 characters."
             },
             "appId": {
               "type": "string",
-              "description": "The Teams app id associated with this configuration. Only takes effect when applicableToApps is SpecificApp."
+              "description": "Microsoft 365 app ID. Required when applicableToApps is SpecificApp; ignored when applicableToApps is AnyApp."
+            },
+            "mcpResourceUrl": {
+              "type": "string",
+              "minLength": 1,
+              "description": "HTTPS URL of the actual MCP endpoint, including its path. Recommended for new configurations. TGS probes this endpoint and RFC 9728 well-known locations for protected resource metadata (PRM), then uses its first authorization_servers entry, resource and scopes_supported. This is not the PRM document URL and is not necessarily the OAuth resource indicator. Optional when wellKnownAuthorizationServer is supplied."
             },
             "wellKnownAuthorizationServer": {
               "type": "string",
-              "description": "URL to the authorization server's RFC 8414 metadata document. TGS fetches this to discover the registration_endpoint and performs the RFC 7591 exchange server-side."
+              "minLength": 1,
+              "description": "Legacy/pinning HTTPS URL of the authorization server's RFC 8414 metadata document. Optional when mcpResourceUrl is supplied. When present, this URL takes precedence for authorization-server metadata resolution. If mcpResourceUrl is also supplied, TGS still attempts best-effort PRM discovery for resource and scopes; failure of that enrichment does not fail registration."
+            },
+            "resource": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Optional explicit OAuth resource indicator: an absolute URI without a fragment. Overrides PRM's resource value. Normally omit this field and let PRM determine the resource; it is not inferred from mcpResourceUrl. TGS sends the selected resource in authorization, token and refresh-token requests."
             },
             "targetUrlsShouldStartWith": {
               "type": "array",
-              "description": "Outbound URL allowlist. TGS only allows this configuration to authorize calls whose destination URL starts with one of these prefixes.",
-              "items": { "type": "string" }
+              "description": "Required MCP target URL array. TGS requires exactly one valid HTTPS URL; omission, a string, an empty array or multiple entries is rejected. New configurations use the actual MCP endpoint. This field does not set the OAuth resource indicator.",
+              "minItems": 1,
+              "maxItems": 1,
+              "items": { "type": "string", "minLength": 1 }
             },
             "applicableToApps": {
               "type": "string",
-              "description": "Which app can use this DCR configuration. Default is \"AnyApp\".",
+              "description": "Applications permitted to use this configuration: AnyApp (default), or SpecificApp, which requires appId.",
               "enum": ["SpecificApp", "AnyApp"]
             },
             "targetAudience": {
               "type": "string",
-              "description": "Which tenant can use this DCR configuration. Default is \"HomeTenant\".",
+              "description": "Tenants permitted to use this configuration: HomeTenant (default) or AnyTenant.",
               "enum": ["HomeTenant", "AnyTenant"]
             }
           }
@@ -1999,7 +2016,7 @@
           "required": ["configurationId"],
           "properties": {
             "configurationId": {
-              "description": "Required. The configuration id of the created DCR registration.",
+              "description": "Required environment variable name receiving the returned configurationRegistrationId.oAuthConfigId. This is a configuration ID, not an OAuth client ID or resource indicator. An existing value causes this action to skip registration.",
               "$ref": "#/definitions/envVarName"
             }
           }

package/resource/yaml-schema/yaml.schema.json

@@ -1949,45 +1949,62 @@
     "dcrRegister": {
       "type": "object",
       "additionalProperties": false,
-      "description": "Create a Dynamic Client Registration (DCR) configuration.",
+      "description": "Create a Dynamic Client Registration (DCR) configuration through Teams Graph Service (TGS). Registration is skipped when the mapped configurationId environment variable already has a value.",
       "required": ["uses", "with", "writeToEnvironmentFile"],
       "properties": {
         "uses": {
           "type": "string",
-          "description": "Register a DCR configuration.",
+          "description": "Register an OAuth configuration using server-side Dynamic Client Registration.",
           "const": "dcr/register"
         },
         "with": {
           "type": "object",
           "additionalProperties": false,
-          "description": "Parameters for this action",
-          "required": ["name", "wellKnownAuthorizationServer"],
+          "description": "DCR registration parameters. Supply mcpResourceUrl for protected resource metadata discovery, wellKnownAuthorizationServer to pin authorization-server metadata, or both.",
+          "required": ["name", "targetUrlsShouldStartWith"],
+          "anyOf": [
+            { "required": ["mcpResourceUrl"] },
+            { "required": ["wellKnownAuthorizationServer"] }
+          ],
           "properties": {
             "name": {
               "type": "string",
-              "description": "The display name of the DCR configuration. Becomes the clientName sent during RFC 7591 registration. Max 128 characters."
+              "description": "Required client name sent to TGS as clientName for dynamic registration. Maximum 128 characters."
             },
             "appId": {
               "type": "string",
-              "description": "The Teams app id associated with this configuration. Only takes effect when applicableToApps is SpecificApp."
+              "description": "Microsoft 365 app ID. Required when applicableToApps is SpecificApp; ignored when applicableToApps is AnyApp."
+            },
+            "mcpResourceUrl": {
+              "type": "string",
+              "minLength": 1,
+              "description": "HTTPS URL of the actual MCP endpoint, including its path. Recommended for new configurations. TGS probes this endpoint and RFC 9728 well-known locations for protected resource metadata (PRM), then uses its first authorization_servers entry, resource and scopes_supported. This is not the PRM document URL and is not necessarily the OAuth resource indicator. Optional when wellKnownAuthorizationServer is supplied."
             },
             "wellKnownAuthorizationServer": {
               "type": "string",
-              "description": "URL to the authorization server's RFC 8414 metadata document. TGS fetches this to discover the registration_endpoint and performs the RFC 7591 exchange server-side."
+              "minLength": 1,
+              "description": "Legacy/pinning HTTPS URL of the authorization server's RFC 8414 metadata document. Optional when mcpResourceUrl is supplied. When present, this URL takes precedence for authorization-server metadata resolution. If mcpResourceUrl is also supplied, TGS still attempts best-effort PRM discovery for resource and scopes; failure of that enrichment does not fail registration."
+            },
+            "resource": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Optional explicit OAuth resource indicator: an absolute URI without a fragment. Overrides PRM's resource value. Normally omit this field and let PRM determine the resource; it is not inferred from mcpResourceUrl. TGS sends the selected resource in authorization, token and refresh-token requests."
             },
             "targetUrlsShouldStartWith": {
               "type": "array",
-              "description": "Outbound URL allowlist. TGS only allows this configuration to authorize calls whose destination URL starts with one of these prefixes.",
-              "items": { "type": "string" }
+              "description": "Required MCP target URL array. TGS requires exactly one valid HTTPS URL; omission, a string, an empty array or multiple entries is rejected. New configurations use the actual MCP endpoint. This field does not set the OAuth resource indicator.",
+              "minItems": 1,
+              "maxItems": 1,
+              "items": { "type": "string", "minLength": 1 }
             },
             "applicableToApps": {
               "type": "string",
-              "description": "Which app can use this DCR configuration. Default is \"AnyApp\".",
+              "description": "Applications permitted to use this configuration: AnyApp (default), or SpecificApp, which requires appId.",
               "enum": ["SpecificApp", "AnyApp"]
             },
             "targetAudience": {
               "type": "string",
-              "description": "Which tenant can use this DCR configuration. Default is \"HomeTenant\".",
+              "description": "Tenants permitted to use this configuration: HomeTenant (default) or AnyTenant.",
               "enum": ["HomeTenant", "AnyTenant"]
             }
           }
@@ -1999,7 +2016,7 @@
           "required": ["configurationId"],
           "properties": {
             "configurationId": {
-              "description": "Required. The configuration id of the created DCR registration.",
+              "description": "Required environment variable name receiving the returned configurationRegistrationId.oAuthConfigId. This is a configuration ID, not an OAuth client ID or resource indicator. An existing value causes this action to skip registration.",
               "$ref": "#/definitions/envVarName"
             }
           }

package/templates/v4/floor.json

@@ -1,3 +1,3 @@
 {
-  "version": "6.18.0"
+  "version": "6.18.1"
 }