@microsoft/m365agentstoolkit-cli 1.1.19-alpha.46aaa82df3.0 → 1.1.19-alpha.93bb1c235d.0

package/resource/yaml-schema/yaml.schema.json

@@ -10,7 +10,7 @@
     "environmentFolderPath": {
       "type": "string",
       "description": "The folder path of .env files used for variables and different environments."
-      },
+    },
     "version": {
       "type": "string",
       "description": "The version of the yaml file schema",
@@ -22,7 +22,7 @@
       "additionalProperties": true,
       "properties": {
         "sampleTag": {
-          "type": ["number","string","boolean","object","array", "null", "integer"],
+          "type": ["number", "string", "boolean", "object", "array", "null", "integer"],
           "description": "A tag for the sample app used to track telemetry events sent by Microsoft 365 Agents Toolkit associated with that sample. Pattern: <sample-repo>:<sample-name>"
         }
       }
@@ -76,16 +76,16 @@
           { "$ref": "#/definitions/spfxDeploy" },
           { "$ref": "#/definitions/teamsAppCopyAppPackageToSPFx" },
           { "$ref": "#/definitions/script" },
-          { "$ref": "#/definitions/apiKeyRegister"},
-          { "$ref": "#/definitions/azureStaticWebAppGetDeploymentKey"},
-          { "$ref": "#/definitions/apiKeyUpdate"},
-          { "$ref": "#/definitions/oauthRegister"},
-          { "$ref": "#/definitions/oauthUpdate"},
-          { "$ref": "#/definitions/dcrRegister"},
-          { "$ref": "#/definitions/devChannelCreate"},
-          { "$ref": "#/definitions/devChannelInstallApp"},
-          { "$ref": "#/definitions/typeSpecCompile"},
-          { "$ref": "#/definitions/copilotAgentPublish"}
+          { "$ref": "#/definitions/apiKeyRegister" },
+          { "$ref": "#/definitions/azureStaticWebAppGetDeploymentKey" },
+          { "$ref": "#/definitions/apiKeyUpdate" },
+          { "$ref": "#/definitions/oauthRegister" },
+          { "$ref": "#/definitions/oauthUpdate" },
+          { "$ref": "#/definitions/dcrRegister" },
+          { "$ref": "#/definitions/devChannelCreate" },
+          { "$ref": "#/definitions/devChannelInstallApp" },
+          { "$ref": "#/definitions/typeSpecCompile" },
+          { "$ref": "#/definitions/copilotAgentPublish" }
         ]
       }
     },
@@ -115,7 +115,7 @@
     "aadAppCreateWithSecret": {
       "type": "object",
       "additionalProperties": false,
-      "allOf": [ { "$ref": "#/definitions/aadAppCreateBase" } ],
+      "allOf": [{ "$ref": "#/definitions/aadAppCreateBase" }],
       "required": ["with", "writeToEnvironmentFile"],
       "properties": {
         "name": {},
@@ -144,7 +144,12 @@
             "signInAudience": {
               "type": "string",
               "description": "Specifies what Microsoft accounts are supported for the current application.",
-              "enum": ["AzureADMyOrg", "AzureADMultipleOrgs", "AzureADandPersonalMicrosoftAccount", "PersonalMicrosoftAccount"]
+              "enum": [
+                "AzureADMyOrg",
+                "AzureADMultipleOrgs",
+                "AzureADandPersonalMicrosoftAccount",
+                "PersonalMicrosoftAccount"
+              ]
             },
             "serviceManagementReference": {
               "type": "string",
@@ -197,7 +202,7 @@
     },
     "aadAppCreateWithoutSecret": {
       "type": "object",
-      "allOf": [ { "$ref": "#/definitions/aadAppCreateBase" } ],
+      "allOf": [{ "$ref": "#/definitions/aadAppCreateBase" }],
       "required": ["with", "writeToEnvironmentFile"],
       "additionalProperties": false,
       "properties": {
@@ -227,7 +232,12 @@
             "signInAudience": {
               "type": "string",
               "description": "Specifies what Microsoft accounts are supported for the current application.",
-              "enum": ["AzureADMyOrg", "AzureADMultipleOrgs", "AzureADandPersonalMicrosoftAccount", "PersonalMicrosoftAccount"]
+              "enum": [
+                "AzureADMyOrg",
+                "AzureADMultipleOrgs",
+                "AzureADandPersonalMicrosoftAccount",
+                "PersonalMicrosoftAccount"
+              ]
             },
             "serviceManagementReference": {
               "type": "string",
@@ -1049,7 +1059,7 @@
               "$ref": "#/definitions/secretEnvVarName"
             }
           }
-        }        
+        }
       }
     },
     "botframeworkCreate": {
@@ -1104,7 +1114,10 @@
               "type": "array",
               "description": "the channel(s) to be enabled of the bot",
               "items": {
-                "oneOf": [{ "$ref": "#/definitions/MsTeamsChannel" }, { "$ref": "#/definitions/M365ExtensionsChannel" }]
+                "oneOf": [
+                  { "$ref": "#/definitions/MsTeamsChannel" },
+                  { "$ref": "#/definitions/M365ExtensionsChannel" }
+                ]
               }
             }
           }
@@ -1281,9 +1294,7 @@
               "type": "object",
               "description": "Install Azure Functions Core Tools. This will output environment variable specified by `funcPath` to current environment's .env file.",
               "additionalProperties": false,
-              "required": [
-                "version"
-              ],
+              "required": ["version"],
               "properties": {
                 "version": {
                   "oneOf": [
@@ -1557,7 +1568,7 @@
               "description": "redirect stdout and stderr to a file"
             }
           }
-        }        
+        }
       }
     },
     "relativePath": {
@@ -1841,6 +1852,10 @@
               "type": "string",
               "description": "Token exchange method type, can be BasicAuthorizationHeader or PostRequestBody. BasicAuthorizationHeader: token exchange via HTTP headers, PostRequestBody: token exchange via request body. Default is BasicAuthorizationHeader.",
               "enum": ["BasicAuthorizationHeader", "PostRequestBody"]
+            },
+            "includePersonalMicrosoftAccounts": {
+              "type": "boolean",
+              "description": "Whether to allow personal Microsoft accounts in addition to work or school accounts. If omitted when registering, only work or school accounts are allowed."
             }
           }
         },
@@ -1941,6 +1956,10 @@
               "type": "string",
               "description": "Token exchange method type, can be BasicAuthorizationHeader or PostRequestBody. BasicAuthorizationHeader: token exchange via HTTP headers, PostRequestBody: token exchange via request body. Default is BasicAuthorizationHeader.",
               "enum": ["BasicAuthorizationHeader", "PostRequestBody"]
+            },
+            "includePersonalMicrosoftAccounts": {
+              "type": "boolean",
+              "description": "Whether to allow personal Microsoft accounts in addition to work or school accounts. If omitted during an update, the existing account support remains unchanged."
             }
           }
         }
@@ -1961,7 +1980,7 @@
           "type": "object",
           "additionalProperties": false,
           "description": "DCR registration parameters. Supply mcpResourceUrl for protected resource metadata discovery, wellKnownAuthorizationServer to pin authorization-server metadata, or both.",
-          "required": ["name", "targetUrlsShouldStartWith"],
+          "required": ["name"],
           "anyOf": [
             { "required": ["mcpResourceUrl"] },
             { "required": ["wellKnownAuthorizationServer"] }
@@ -1978,24 +1997,22 @@
             "mcpResourceUrl": {
               "type": "string",
               "minLength": 1,
-              "description": "HTTPS URL of the actual MCP endpoint, including its path. Recommended for new configurations. TGS probes this endpoint and RFC 9728 well-known locations for protected resource metadata (PRM), then uses its first authorization_servers entry, resource and scopes_supported. This is not the PRM document URL and is not necessarily the OAuth resource indicator. Optional when wellKnownAuthorizationServer is supplied."
+              "description": "HTTPS URL of the actual MCP endpoint, including its path. Recommended for new configurations. TGS probes this endpoint and RFC 9728 well-known locations for protected resource metadata (PRM) to discover resource and scopes_supported. Unless wellKnownAuthorizationServer is supplied, TGS uses PRM's first authorization_servers entry. This is not the PRM document URL; the OAuth resource indicator comes from PRM's resource, not directly from this endpoint URL. Optional when wellKnownAuthorizationServer is supplied."
             },
             "wellKnownAuthorizationServer": {
               "type": "string",
               "minLength": 1,
-              "description": "Legacy/pinning HTTPS URL of the authorization server's RFC 8414 metadata document. Optional when mcpResourceUrl is supplied. When present, this URL takes precedence for authorization-server metadata resolution. If mcpResourceUrl is also supplied, TGS still attempts best-effort PRM discovery for resource and scopes; failure of that enrichment does not fail registration."
+              "description": "HTTPS URL of the authorization server's RFC 8414 metadata document, supported for existing configurations and explicit authorization-server selection. Optional when mcpResourceUrl is supplied. When present, this URL takes precedence for authorization-server metadata resolution. An authorization server can serve multiple resources, so this metadata alone cannot identify the intended OAuth resource. Without mcpResourceUrl, supply resource explicitly if the service requires it. If mcpResourceUrl is also supplied, TGS attempts best-effort PRM discovery for resource and scopes; failure of that enrichment does not fail registration."
             },
             "resource": {
               "type": "string",
               "minLength": 1,
-              "description": "Optional explicit OAuth resource indicator: an absolute URI without a fragment. Overrides PRM's resource value. Normally omit this field and let PRM determine the resource; it is not inferred from mcpResourceUrl. TGS sends the selected resource in authorization, token and refresh-token requests."
+              "description": "Optional explicit OAuth resource indicator: an absolute URI without a fragment. Overrides PRM's resource value. Omit this field when mcpResourceUrl enables PRM discovery of the intended resource; otherwise supply it explicitly if the service requires a resource indicator. It is not inferred from authorization-server metadata or copied from the MCP endpoint or target URL. If neither an explicit value nor PRM supplies a resource, no resource indicator is sent. TGS sends the selected resource in authorization, token and refresh-token requests."
             },
             "targetUrlsShouldStartWith": {
               "type": "array",
               "description": "Required MCP target URL array. TGS requires exactly one valid HTTPS URL; omission, a string, an empty array or multiple entries is rejected. New configurations use the actual MCP endpoint. This field does not set the OAuth resource indicator.",
-              "minItems": 1,
-              "maxItems": 1,
-              "items": { "type": "string", "minLength": 1 }
+              "items": { "type": "string" }
             },
             "applicableToApps": {
               "type": "string",
@@ -2006,6 +2023,10 @@
               "type": "string",
               "description": "Tenants permitted to use this configuration: HomeTenant (default) or AnyTenant.",
               "enum": ["HomeTenant", "AnyTenant"]
+            },
+            "includePersonalMicrosoftAccounts": {
+              "type": "boolean",
+              "description": "Whether to allow personal Microsoft accounts in addition to work or school accounts. If omitted when registering, only work or school accounts are allowed."
             }
           }
         },