@microsoft/m365agentstoolkit-cli 1.1.19-alpha.46aaa82df3.0 → 1.1.19-alpha.c38141f74a.0

package/resource/package.nls.zh-Hans.json

@@ -10,7 +10,8 @@
   "core.addKnowledge.continue": "添加",
   "core.addSkill.confirm": "Microsoft 365 智能体工具包将修改“%s”文件夹中的文件，以添加该智能体技能。为避免丢失意外更改，请先备份文件或使用 git 跟踪更改，然后再继续操作。",
   "core.addSkill.continue": "添加",
-  "core.addSkill.featureFlagDisabled": "未启用智能体技能。设置环境变量 TEAMSFX_AGENT_SKILLS=true 以启用此预览功能。",
+  "core.addSkill.featureFlagDisabled": "Agent skills are not enabled. Set the environment variable ATK_FRONTIER=true to enable this preview feature.",
+  "core.featureFlaggedLabel.frontier": "%s (Frontier)",
   "core.setSensitivityLabel.confirm": "Teams 工具包将根据你提供的敏感度标签修改文件“%s”。为了避免丢失意外更改，请先备份文件或使用 git 跟踪更改，然后再继续操作。",
   "core.setSensitivityLabel.continue": "设置",
   "core.provision.provision": "预配",
@@ -41,7 +42,7 @@
   "core.progress.configureAzureStorage": "正在配置 Azure 存储，请启用静态网站设置。",
   "core.progress.runCommand": "在 %s 运行命令 %s",
   "core.progress.deployToAzure": "正在将 %s 部署到 %s。",
-  "core.v4.scaffoldMetadataSourceReadFailed": "The scaffold metadata source could not be read.",
+  "core.v4.scaffoldMetadataSourceReadFailed": "无法读取基架元数据源。",
   "core.migrationV3.abandonedProject": "此项目版本不受支持，无法升级。请使用 Microsoft 365 智能体工具包创建新项目。",
   "core.migrationV3.notAllowedMigration": "此项目可以升级。请使用适用于 VS Code 的 Microsoft 365 智能体工具包 v6.10 或 Microsoft 365 智能体工具包 CLI v1.1.11 升级项目。",
   "core.deployArmTemplates.ActionSuccess": "已成功部署 ARM 模板。资源组名称： %s。部署名称： %s",
@@ -397,6 +398,13 @@
   "core.createProjectQuestion.apiSpec.placeholder": "输入 OpenAPI 文档 URL",
   "core.createProjectQuestion.apiSpecInputUrl.label": "输入 OpenAPI 文档 URL",
   "core.createProjectQuestion.ApiKey": "在 OpenAPI 描述文档中输入 API 密钥",
+  "core.addOpenApiActionQuestion.ApiKey.title": "API Key (optional)",
+  "core.addOpenApiActionQuestion.IdentityProvider.title": "Select the identity provider for OpenAPI OAuth",
+  "core.addOpenApiActionQuestion.IdentityProvider.description": "Identity provider for OpenAPI OAuth (optional; defaults to OAuth).",
+  "core.addOpenApiActionQuestion.OAuthClientId.title": "OpenAPI OAuth client ID (optional)",
+  "core.addOpenApiActionQuestion.OAuthClientSecret.title": "OpenAPI OAuth client secret (optional)",
+  "core.addOpenApiActionQuestion.OAuthScopes.title": "OpenAPI OAuth scopes (optional)",
+  "core.addOpenApiActionQuestion.OAuthPKCE.title": "Enable PKCE for OpenAPI OAuth?",
   "core.createProjectQuestion.ApiKeyConfirm": "Microsoft 365 智能体工具包会将 API 密钥上传到开发人员门户。Teams 客户端将使用 API 密钥在运行时安全地访问 API。Microsoft 365 智能体工具包不会存储 API 密钥。",
   "core.createProjectQuestion.OauthClientId": "OAuth 注册客户端 ID",
   "core.createProjectQuestion.OauthClientId.placeholder": "在 OpenAPI 描述文档中输入 OAuth 注册的客户端 ID",
@@ -598,6 +606,9 @@
   "core.common.removeShareAccess.success": "已从用户中移除共享访问权限: %s。",
   "core.envFunc.unsupportedFile.errorLog": "\"%s\" 文件无效。支持的格式： %s。",
   "core.envFunc.unsupportedFile.errorMessage": "文件无效。%s",
+  "core.envFunc.fileReferenceOutsideManifestDirectory.errorLog.local": "The file reference resolves outside the manifest directory.\nReference: %s\nResolved path: %s\nManifest directory: %s\nMove the file into the manifest directory, then update the file reference in %s.",
+  "core.envFunc.fileReferenceOutsideManifestDirectory.errorMessage": "The file reference must point to a file inside the manifest directory.",
+  "core.envFunc.fileReferenceOutsideManifestDirectory.errorMessage.local": "The file reference \"%s\" resolves to \"%s\", outside the manifest directory \"%s\". Move the file into the manifest directory, then update the reference in %s.",
   "core.envFunc.unsupportedFunction.errorLog": "\"%s\" 是无效函数。支持的函数： \"%s\"。",
   "core.envFunc.unsupportedFunction.errorMessage": "函数无效。%s",
   "core.envFunc.invalidFunctionParameter.errorLog": "函数 \"%s\" 的参数 \"%s\" 无效。请提供由 “” 包装的有效文件路径或 “${{}}” 格式的环境变量名。",
@@ -885,9 +896,14 @@
   "error.teamsApp.validate.details": "文件路径： %s，标题： %s",
   "error.teamsApp.AppIdNotExistError": "开发人员门户中不存在 ID 为 %s 的应用。",
   "error.teamsApp.InvalidAppIdError": "应用 ID %s无效，必须是 GUID。",
-  "error.teamsApp.createAppPackage.invalidFile": "%s 无效，它应与manifest.json或其子目录位于同一目录中。",
+  "error.teamsApp.createAppPackage.invalidFile": "A referenced file is invalid. It must be in the same directory as manifest.json or a subdirectory of it.",
+  "error.teamsApp.createAppPackage.invalidFile.local": "The file reference \"%s\" resolves to \"%s\", outside the manifest directory \"%s\". Move the file into the manifest directory, then update this reference in the manifest that contains it.",
   "error.teamsApp.createAppPackage.packageSizeExceeded": "生成的应用包(%s MB)超过了允许的最大大小(%s MB)。在生成包前减少包内容。",
+  "error.teamsApp.createAppPackage.fileSystemError.telemetry": "The app package file operation failed. File system error: %s.",
+  "error.teamsApp.createAppPackage.fileSystemError.display": "The app package file operation failed for '%s'. File system error: %s.",
   "error.m365.packageService.packageSizeExceeded": "应用包(%s MB)超过了支持的最大大小(%s MB)。在上传包前减少包内容。",
+  "error.m365.packageService.validationFailed": "The app package failed RAI validation. Resolve the following issues and try again:\n%s",
+  "info.m365.packageService.raiValidationInProgress": "RAI validation is in progress. Waiting for completion...",
   "driver.botFramework.description": "在 dev.botframework.com 上创建或更新机器人注册",
   "driver.botFramework.summary.create": "已成功创建机器人注册(%s)。",
   "driver.botFramework.summary.update": "机器人注册已成功更新(%s)。",
@@ -917,6 +933,9 @@
   "error.common.MissingEnvironmentVariablesError": "文件 %s 缺少环境变量 \"%s\"。请编辑 .env 文件 \"%s\" 或 \"%s\"，或调整系统环境变量。对于新项目，请运行本地调试或预配远程环境以设置这些变量。",
   "error.common.InvalidProjectError": "此命令仅适用于由 Microsoft 365 智能体工具包创建的项目。找不到 “m365agents.yml” 或 “m365agents.local.yml”",
   "error.common.InvalidProjectError.display": "此命令仅适用于由 Microsoft 365 智能体工具包创建的项目。找不到 Yaml 文件: %s",
+  "error.common.AmbiguousOpenApiAuthCredentialError": "OpenAPI credentials cannot be mapped because the selected operations use multiple authentication registrations. Omit the scalar credentials or select operations that use one registration.",
+  "error.common.InapplicableOpenApiAuthCredentialError": "The supplied OpenAPI credentials do not apply to the authentication type used by the selected operations. Omit the credentials or supply credentials for the discovered authentication type.",
+  "error.common.IncompleteOpenApiOAuthCredentialError": "OpenAPI OAuth client secret, scopes, and PKCE require --openapi-auth-client-id. Supply a client ID or omit the OAuth credential options to configure credentials during provision.",
   "error.common.FileNotFoundError": "找不到文件或目录: '%s'。检查是否存在，以及你是否有权访问。",
   "error.common.JSONSyntaxError": "JSON 语法错误:%s。请检查 JSON 语法以确保其格式正确。",
   "error.common.ReadFileError": "由于原因 %s，无法读取文件",
@@ -1116,8 +1135,8 @@
   "error.kiotaClient.EmptyResult": "分析 OpenAPI 说明文件时获取空结果。",
   "core.createProjectQuestion.mcpForDa.ServerUrl.title": "MCP 服务器 URL",
   "core.createProjectQuestion.mcpForDa.ServerUrl.placeholder": "输入 MCP 服务器 URL (例如 https://example-mcp.com)",
-  "core.createProjectQuestion.mcpForDa.ServerUrl.notAnMcpEndpoint": "Couldn't reach an MCP server at this URL (returned 404 to the MCP 'initialize' request). Verify the URL, or confirm the server is running.",
-  "core.createProjectQuestion.mcpForDa.ServerUrl.invalidUrl": "Enter an absolute URL that starts with https:// or http://.",
+  "core.createProjectQuestion.mcpForDa.ServerUrl.notAnMcpEndpoint": "无法在此 URL 访问 MCP 服务器(对 MCP \"initialize\" 请求返回 404)。请验证 URL，或确认服务器正在运行。",
+  "core.createProjectQuestion.mcpForDa.ServerUrl.invalidUrl": "输入以 https:// 或 http:// 开头的绝对 URL。",
   "core.createProjectQuestion.mcpForDa.PreFetchTools.title": "选择 Copilot 可与之交互的操作",
   "core.createProjectQuestion.mcpForDa.AuthType.title": "选择身份验证类型",
   "core.createProjectQuestion.mcpForDa.Auth.OAuth": "OAuth (带静态注册)",
@@ -1126,6 +1145,7 @@
   "core.createProjectQuestion.mcpForDa.Auth.OAuthDynamic.Detail": "MCP 服务器会在运行时注册客户端; 无需额外详细信息。",
   "core.createProjectQuestion.mcpForDa.Auth.EntraSSO": "Entra SSO",
   "core.createProjectQuestion.mcpForDa.Auth.EntraSSO.Detail": "使用 Microsoft Entra 应用进行单一登录。工具包会要求提供 Entra 应用客户端 ID。",
+  "core.createProjectQuestion.mcpForDa.Auth.BearerToken.Detail": "Send an API key as an HTTP Bearer token.",
   "core.createProjectQuestion.mcpForDa.Auth.None": "无",
   "core.createProjectQuestion.mcpForDa.Auth.None.Detail": "MCP 服务器不需要身份验证。",
   "core.createProjectQuestion.mcpForDa.ClientId.title": "OAuth 客户端 ID",
@@ -1136,6 +1156,9 @@
   "core.createProjectQuestion.mcpForDa.ClientSecret.required": "OAuth 客户端密钥是必需的。",
   "core.createProjectQuestion.mcpForDa.Scopes.title": "OAuth 范围(可选)",
   "core.createProjectQuestion.mcpForDa.Scopes.placeholder": "以空格分隔的 OAuth 范围，例如 \"read:user repo\"",
+  "core.createProjectQuestion.mcpForDa.ApiKey.title": "API Key",
+  "core.createProjectQuestion.mcpForDa.ApiKey.placeholder": "Enter the API key sent as a bearer token",
+  "core.createProjectQuestion.mcpForDa.ApiKey.required": "API key is required.",
   "core.createProjectQuestion.mcpForDa.EntraClientId.title": "Microsoft Entra 应用程序(客户端) ID",
   "core.createProjectQuestion.mcpForDa.EntraClientId.placeholder": "输入 Microsoft Entra 应用注册的应用程序(客户端) ID",
   "core.createProjectQuestion.mcpForDa.EntraClientId.required": "需要提供 Microsoft Entra 应用程序(客户端) ID。",
@@ -1157,12 +1180,15 @@
   "core.createProjectQuestion.mcpLocalServer.validationHelp": "至少必须选择一个 MCP 服务器",
   "core.MCPForDA.updatePluginManifest": "已成功添加从 MCP 服务器选择的操作，供 Copilot 交互。可转到“%s”查看详细信息。现在你可预配声明性智能体以继续。",
   "core.MCPForDA.mcpAuthMetadataMissingError": "无法在 MCP 服务器中找到身份验证元数据。请确保 MCP 服务器配置正确，然后重试。详细信息: %s",
-  "core.MCPForDA.mcpAuthDcrPlaceholderWarning": "Scaffolding succeeded, but the OAuth endpoints couldn't be discovered automatically. Your MCP server is reachable, but it doesn't advertise its OAuth endpoints — ATK checks the server's OAuth metadata ('.well-known/oauth-authorization-server') and found 'none'. Replace the 'wellKnownAuthorizationServer' placeholder in 'm365agents.yml' with the right value before provisioning.",
-  "core.MCPForDA.mcpAuthOAuthPlaceholderWarning": "Scaffolding succeeded, but the OAuth endpoints couldn't be discovered automatically. Your MCP server is reachable, but it doesn't advertise its OAuth endpoints — ATK checks the server's OAuth metadata ('.well-known/oauth-authorization-server') and found 'none'. Replace the 'authorizationUrl' and 'tokenUrl' placeholders in 'm365agents.yml' with the right values before provisioning.",
+  "core.MCPForDA.mcpAuthDcrPlaceholderWarning": "已成功搭建基架，但无法自动发现 OAuth 终结点。你的 MCP 服务器可访问，但未播发其 OAuth 终结点—ATK 会检查服务器的 OAuth 元数据(\".well-known/oauth-authorization-server\")并找到 \"none\"。在预配前，将 \"m365agents.yml\" 中的 \"wellKnownAuthorizationServer\" 占位符替换为正确的值。",
+  "core.MCPForDA.mcpAuthOAuthPlaceholderWarning": "已成功搭建基架，但无法自动发现 OAuth 终结点。你的 MCP 服务器可访问，但未播发其 OAuth 终结点—ATK 会检查服务器的 OAuth 元数据(\".well-known/oauth-authorization-server\")并找到 \"none\"。在预配前，将 \"m365agents.yml\" 中的 \"authorizationUrl\" 和 \"tokenUrl\" 占位符替换为正确的值。",
   "core.v4.scaffold.existingFileSkipped": "“%s”已存在且未被覆盖。请删除或重命名它以重新生成文件。",
+  "core.v4.scaffold.languageOptionsInvalid": "The template package contains invalid language presentation metadata.",
+  "core.v4.scaffold.languageOptionsFailed": "Failed to load language choices from the template package.",
+  "core.v4.scaffold.openApiAuthYamlInvalid": "Cannot add OpenAPI authentication actions. The project YAML must be valid and contain a provision action list.",
   "core.MCPForDA.mcpAuthMetadataUrlNotFound": "无法从 MCP 服务器响应的 \"resource_metadata\" 属性中找到身份验证元数据。",
-  "core.MCPForDA.mcpServerMetadataUrlNotFound": "Unable to find the server metadata from property \"authorization_servers\" from response of the Protected Resource Metadata of the MCP server.",
-  "core.MCPForDA.authUrlNotFound": "Unable to find the authentication URL(s) from response of Authorization Server Metadata of the MCP server. Attempted: %s",
+  "core.MCPForDA.mcpServerMetadataUrlNotFound": "无法从 MCP 服务器受保护资源元数据响应的 \"authorization_servers\" 属性中找到服务器元数据。",
+  "core.MCPForDA.authUrlNotFound": "无法在 MCP 服务器的授权服务器元数据响应中找到身份验证 URL。已尝试: %s",
   "core.MCPForDA.toolsFileNotFound": "未找到 MCP 工具文件: %s",
   "core.MCPForDA.toolsFileInvalidFormat": "MCP 工具文件格式无效。应为 %s 或工具的 JSON 数组: %s",
   "core.MCPForDA.toolsFileMissingName": "MCP 工具文件中的每个工具均必须包含 %s 属性: %s",
@@ -1175,7 +1201,27 @@
   "core.MCPForDA.toolsFileReadError": "未能读取 MCP 工具文件: %s。若要稍后添加工具，请运行:\n  %s",
   "core.MCPForDA.authRequired": "位于 %s 的 MCP 服务器需要身份验证。无法自动提取工具。若要添加工具，请运行:\n  %s",
   "core.MCPForDA.noToolsFetched": "未从位于 %s 的 MCP 服务器发现任何工具。若要稍后添加工具，请运行:\n  %s",
-  "core.MCPForDA.mcpServerUrlNotAnEndpoint": "%s answered an MCP initialize request with HTTP %s, so it may not be an MCP server URL. Verify the URL before provisioning.",
-  "core.MCPForDA.openYmlFile": "Open m365agents.yml",
+  "core.MCPForDA.mcpServerUrlNotAnEndpoint": "%s 以 HTTP %s 响应了 MCP 初始化请求，因此它可能不是 MCP 服务器 URL。在预配前请验证 URL。",
+  "core.openPluginImport.autoAuthNone": "Auto inferred authentication type None for MCP server '%s'. Verify this choice if individual tools require authentication or use an API key.",
+  "core.openPluginImport.autoAuthOAuth": "Auto inferred OAuthPluginVault for MCP server '%s'. The generated reference ID is a placeholder and must be registered before use.",
+  "core.openPluginImport.authFallback": "OAuth metadata could not be resolved for MCP server '%s' after it confirmed authentication is required. Auto fell back to OAuthPluginVault. Verify the authentication type and register the generated reference ID before use.",
+  "core.openPluginImport.failed": "Failed to import the Agent Plugin.",
+  "core.openPluginImport.invalidManifest": "The mapped Teams manifest is invalid: %s",
+  "core.openPluginImport.invalidOutputPath": "The output path must not be a symbolic link or junction: %s.",
+  "core.openPluginImport.invalidPlugin": "The Agent Plugin is invalid: %s",
+  "core.openPluginImport.missingPluginPath": "The --path option is required.",
+  "core.openPluginImport.outputDirectoryNotEmpty": "The output directory is not empty: %s. Choose a different --output path or empty the directory.",
+  "core.openPluginImport.unresolvedMcpAuth": "Unable to resolve authentication for MCP server '%s' while --default-auth-type is Auto. Specify None, OAuthPluginVault, or ApiKeyPluginVault explicitly.",
+  "core.openPluginExport.failed": "Failed to export the Agent Plugin.",
+  "core.openPluginExport.invalidAgentPluginManifest": "The project cannot be exported as an Agent Plugins 1.0.0 manifest.",
+  "core.openPluginExport.invalidManifest": "The project manifest is invalid.",
+  "core.openPluginExport.invalidMcpServerUrl": "The project contains an MCP server URL that cannot be exported.",
+  "core.openPluginExport.invalidOutputPath": "The output path must not be a symbolic link or junction.",
+  "core.openPluginExport.invalidProjectPath": "The project path is invalid.",
+  "core.openPluginExport.invalidProjectStructure": "The project structure is invalid.",
+  "core.openPluginExport.manifestNotFound": "appPackage/manifest.json was not found in the project.",
+  "core.openPluginExport.missingProjectPath": "The --path option is required.",
+  "core.openPluginExport.outputDirectoryNotEmpty": "The output directory is not empty. Choose a different --output path or empty the directory.",
+  "core.MCPForDA.openYmlFile": "打开 m365agents.yml",
   "core.MCPForDA.fetchError": "未能从位于 %s 的 MCP 服务器提取工具。若要稍后添加工具，请运行:\n  %s"
 }

package/resource/package.nls.zh-Hant.json

@@ -10,7 +10,8 @@
   "core.addKnowledge.continue": "新增",
   "core.addSkill.confirm": "Microsoft 365 Agents Toolkit 會修改 \"%s\" 資料夾中的檔案，以新增 Agent 技能。為了避免遺失未預期的變更，請在繼續之前備份您的檔案或使用 Git 進行變更追蹤。",
   "core.addSkill.continue": "新增",
-  "core.addSkill.featureFlagDisabled": "未啟用 Agent 技能。設定環境變數 TEAMSFX_AGENT_SKILLS=true 以啟用此預覽功能。",
+  "core.addSkill.featureFlagDisabled": "Agent skills are not enabled. Set the environment variable ATK_FRONTIER=true to enable this preview feature.",
+  "core.featureFlaggedLabel.frontier": "%s (Frontier)",
   "core.setSensitivityLabel.confirm": "Teams 工具組會根據您提供的敏感度標籤來修改檔案 \"%s\"。為了避免遺失未預期的變更，請在繼續之前備份您的檔案或使用 Git 進行變更追蹤。",
   "core.setSensitivityLabel.continue": "設定",
   "core.provision.provision": "佈建",
@@ -41,7 +42,7 @@
   "core.progress.configureAzureStorage": "正在設定 Azure 儲存體，啟用靜態網站設定。",
   "core.progress.runCommand": "在 %s 執行命令 %s",
   "core.progress.deployToAzure": "正在將 %s 部署至 %s。",
-  "core.v4.scaffoldMetadataSourceReadFailed": "The scaffold metadata source could not be read.",
+  "core.v4.scaffoldMetadataSourceReadFailed": "無法讀取 Scaffold 中繼資料來源。",
   "core.migrationV3.abandonedProject": "不支援此專案版本，且無法升級。請使用 Microsoft 365 Agents 工具組建立新專案。",
   "core.migrationV3.notAllowedMigration": "此專案可升級。請使用適用於 VS Code v6.10 的 Microsoft 365 Agents 工具組或 Microsoft 365 Agents 工具組 CLI v1.1.11 以升級您的專案。",
   "core.deployArmTemplates.ActionSuccess": "已成功部署ARM範本。資源組名： %s。部署名稱： %s",
@@ -397,6 +398,13 @@
   "core.createProjectQuestion.apiSpec.placeholder": "輸入 OpenAPI 文件 URL",
   "core.createProjectQuestion.apiSpecInputUrl.label": "輸入 OpenAPI 文件 URL",
   "core.createProjectQuestion.ApiKey": "在 OpenAPI 描述檔中輸入 API 金鑰",
+  "core.addOpenApiActionQuestion.ApiKey.title": "API Key (optional)",
+  "core.addOpenApiActionQuestion.IdentityProvider.title": "Select the identity provider for OpenAPI OAuth",
+  "core.addOpenApiActionQuestion.IdentityProvider.description": "Identity provider for OpenAPI OAuth (optional; defaults to OAuth).",
+  "core.addOpenApiActionQuestion.OAuthClientId.title": "OpenAPI OAuth client ID (optional)",
+  "core.addOpenApiActionQuestion.OAuthClientSecret.title": "OpenAPI OAuth client secret (optional)",
+  "core.addOpenApiActionQuestion.OAuthScopes.title": "OpenAPI OAuth scopes (optional)",
+  "core.addOpenApiActionQuestion.OAuthPKCE.title": "Enable PKCE for OpenAPI OAuth?",
   "core.createProjectQuestion.ApiKeyConfirm": "Microsoft 365 Agents 工具組會將 API 金鑰上傳至開發人員入口網站。Teams 用戶端會在執行階段使用該 API 金鑰來安全地存取您的 API。Microsoft 365 Agents 工具組不會儲存您的 API 金鑰。",
   "core.createProjectQuestion.OauthClientId": "OAuth 註冊用戶端識別碼",
   "core.createProjectQuestion.OauthClientId.placeholder": "OpenAPI 描述文件中 OAuth 註冊的輸入用戶端識別碼",
@@ -598,6 +606,9 @@
   "core.common.removeShareAccess.success": "已從使用者成功移除共用存取: %s。",
   "core.envFunc.unsupportedFile.errorLog": "\"%s\" 是無效的檔案。支援的格式： %s。",
   "core.envFunc.unsupportedFile.errorMessage": "無效的檔案。%s",
+  "core.envFunc.fileReferenceOutsideManifestDirectory.errorLog.local": "The file reference resolves outside the manifest directory.\nReference: %s\nResolved path: %s\nManifest directory: %s\nMove the file into the manifest directory, then update the file reference in %s.",
+  "core.envFunc.fileReferenceOutsideManifestDirectory.errorMessage": "The file reference must point to a file inside the manifest directory.",
+  "core.envFunc.fileReferenceOutsideManifestDirectory.errorMessage.local": "The file reference \"%s\" resolves to \"%s\", outside the manifest directory \"%s\". Move the file into the manifest directory, then update the reference in %s.",
   "core.envFunc.unsupportedFunction.errorLog": "\"%s\" 是無效的函數。支援的函數： \"%s\"。",
   "core.envFunc.unsupportedFunction.errorMessage": "無效的函數。%s",
   "core.envFunc.invalidFunctionParameter.errorLog": "函數 \"%s\" 的參數 \"%s\" 無效。請提供由 '' 包裝的有效檔案路徑，或以 “${{}}” 格式包裝的環境變數名稱。",
@@ -885,9 +896,14 @@
   "error.teamsApp.validate.details": "檔案路徑： %s，標題： %s",
   "error.teamsApp.AppIdNotExistError": "開發人員入口網站中不存在識別碼為 %s 的應用程式。",
   "error.teamsApp.InvalidAppIdError": "應用程式識別碼 %s 無效，必須是 GUID。",
-  "error.teamsApp.createAppPackage.invalidFile": "%s 無效，它應該與manifest.json或其子目錄位於相同的目錄中。",
+  "error.teamsApp.createAppPackage.invalidFile": "A referenced file is invalid. It must be in the same directory as manifest.json or a subdirectory of it.",
+  "error.teamsApp.createAppPackage.invalidFile.local": "The file reference \"%s\" resolves to \"%s\", outside the manifest directory \"%s\". Move the file into the manifest directory, then update this reference in the manifest that contains it.",
   "error.teamsApp.createAppPackage.packageSizeExceeded": "產生的應用程式套件 (%s MB) 超過允許的大小上限 %s MB。建置之前先減少套件內容。",
+  "error.teamsApp.createAppPackage.fileSystemError.telemetry": "The app package file operation failed. File system error: %s.",
+  "error.teamsApp.createAppPackage.fileSystemError.display": "The app package file operation failed for '%s'. File system error: %s.",
   "error.m365.packageService.packageSizeExceeded": "應用程式套件 (%s MB) 超過支援的大小上限 (%s MB)。上傳之前先減少套件內容。",
+  "error.m365.packageService.validationFailed": "The app package failed RAI validation. Resolve the following issues and try again:\n%s",
+  "info.m365.packageService.raiValidationInProgress": "RAI validation is in progress. Waiting for completion...",
   "driver.botFramework.description": "在 dev.botframework.com 上建立或更新 Bot 註冊",
   "driver.botFramework.summary.create": "已成功建立 Bot 註冊 (%s)。",
   "driver.botFramework.summary.update": "已成功更新 Bot 註冊 (%s)。",
@@ -917,6 +933,9 @@
   "error.common.MissingEnvironmentVariablesError": "檔案 %s 缺少環境變數 '%s'。請編輯 .env 檔案 '%s' 或 '%s'，或調整系統環境變數。針對新專案，請執行本機偵錯或佈建遠端環境以設定這些變數。",
   "error.common.InvalidProjectError": "此命令僅適用於 Microsoft 365 代理程式工具組建立的專案。找不到 'm365agents.yml' 或 'm365agents.local.yml'",
   "error.common.InvalidProjectError.display": "此命令僅適用於 Microsoft 365 代理程式工具組建立的專案。找不到 Yaml 檔案: %s",
+  "error.common.AmbiguousOpenApiAuthCredentialError": "OpenAPI credentials cannot be mapped because the selected operations use multiple authentication registrations. Omit the scalar credentials or select operations that use one registration.",
+  "error.common.InapplicableOpenApiAuthCredentialError": "The supplied OpenAPI credentials do not apply to the authentication type used by the selected operations. Omit the credentials or supply credentials for the discovered authentication type.",
+  "error.common.IncompleteOpenApiOAuthCredentialError": "OpenAPI OAuth client secret, scopes, and PKCE require --openapi-auth-client-id. Supply a client ID or omit the OAuth credential options to configure credentials during provision.",
   "error.common.FileNotFoundError": "找不到檔案或目錄: '%s'。請檢查它是否存在，以及您是否有存取它的權限。",
   "error.common.JSONSyntaxError": "JSON 語法錯誤: %s。請檢查 JSON 語法，以確保其格式正確。",
   "error.common.ReadFileError": "無法讀取檔案的原因: %s",
@@ -1116,8 +1135,8 @@
   "error.kiotaClient.EmptyResult": "剖析 OpenAPI 描述檔案時取得空白結果。",
   "core.createProjectQuestion.mcpForDa.ServerUrl.title": "MCP 伺服器 URL",
   "core.createProjectQuestion.mcpForDa.ServerUrl.placeholder": "輸入您的 MCP 伺服器 URL (例如 https://example-mcp.com)",
-  "core.createProjectQuestion.mcpForDa.ServerUrl.notAnMcpEndpoint": "Couldn't reach an MCP server at this URL (returned 404 to the MCP 'initialize' request). Verify the URL, or confirm the server is running.",
-  "core.createProjectQuestion.mcpForDa.ServerUrl.invalidUrl": "Enter an absolute URL that starts with https:// or http://.",
+  "core.createProjectQuestion.mcpForDa.ServerUrl.notAnMcpEndpoint": "無法連線到此 URL 的 MCP 伺服器 (對 MCP 'initialize' 要求傳回了 404)。確認 URL，或確認伺服器正在執行。",
+  "core.createProjectQuestion.mcpForDa.ServerUrl.invalidUrl": "輸入以 https:// 或 http:// 開頭的絕對 URL。",
   "core.createProjectQuestion.mcpForDa.PreFetchTools.title": "選取 Copilot 可以互動的作業",
   "core.createProjectQuestion.mcpForDa.AuthType.title": "選取驗證類型",
   "core.createProjectQuestion.mcpForDa.Auth.OAuth": "OAuth (具有靜態註冊)",
@@ -1126,6 +1145,7 @@
   "core.createProjectQuestion.mcpForDa.Auth.OAuthDynamic.Detail": "MCP 伺服器會在執行階段註冊用戶端; 不需要額外的詳細資料。",
   "core.createProjectQuestion.mcpForDa.Auth.EntraSSO": "Entra SSO",
   "core.createProjectQuestion.mcpForDa.Auth.EntraSSO.Detail": "使用 Microsoft Entra 應用程式進行單一登入。工具組會要求 Entra 應用程式用戶端識別碼。",
+  "core.createProjectQuestion.mcpForDa.Auth.BearerToken.Detail": "Send an API key as an HTTP Bearer token.",
   "core.createProjectQuestion.mcpForDa.Auth.None": "無",
   "core.createProjectQuestion.mcpForDa.Auth.None.Detail": "MCP 伺服器不需要驗證。",
   "core.createProjectQuestion.mcpForDa.ClientId.title": "OAuth 用戶端識別碼",
@@ -1136,6 +1156,9 @@
   "core.createProjectQuestion.mcpForDa.ClientSecret.required": "需要 OAuth 用戶端密碼。",
   "core.createProjectQuestion.mcpForDa.Scopes.title": "OAuth 範圍 (選用)",
   "core.createProjectQuestion.mcpForDa.Scopes.placeholder": "以空格分隔的 OAuth 範圍，例如 'read:user repo'",
+  "core.createProjectQuestion.mcpForDa.ApiKey.title": "API Key",
+  "core.createProjectQuestion.mcpForDa.ApiKey.placeholder": "Enter the API key sent as a bearer token",
+  "core.createProjectQuestion.mcpForDa.ApiKey.required": "API key is required.",
   "core.createProjectQuestion.mcpForDa.EntraClientId.title": "Microsoft Entra 應用程式 (用戶端) 識別碼",
   "core.createProjectQuestion.mcpForDa.EntraClientId.placeholder": "輸入 Microsoft Entra 應用程式註冊的應用程式 (用戶端) 識別碼",
   "core.createProjectQuestion.mcpForDa.EntraClientId.required": "需要 Microsoft Entra 應用程式 (用戶端) 識別碼。",
@@ -1157,12 +1180,15 @@
   "core.createProjectQuestion.mcpLocalServer.validationHelp": "必須選取至少一個 MCP 伺服器",
   "core.MCPForDA.updatePluginManifest": "已順利新增從 MCP 伺服器選取的作業，讓 Copilot 與其互動。您可以前往 '%s' 來查看詳細資料。現在，您可以佈建宣告式代理程式以繼續。",
   "core.MCPForDA.mcpAuthMetadataMissingError": "在 MCP 伺服器中找不到驗證中繼資料。請確定您的 MCP 伺服器已正確設定，然後再試一次。詳細資料: %s",
-  "core.MCPForDA.mcpAuthDcrPlaceholderWarning": "Scaffolding succeeded, but the OAuth endpoints couldn't be discovered automatically. Your MCP server is reachable, but it doesn't advertise its OAuth endpoints — ATK checks the server's OAuth metadata ('.well-known/oauth-authorization-server') and found 'none'. Replace the 'wellKnownAuthorizationServer' placeholder in 'm365agents.yml' with the right value before provisioning.",
-  "core.MCPForDA.mcpAuthOAuthPlaceholderWarning": "Scaffolding succeeded, but the OAuth endpoints couldn't be discovered automatically. Your MCP server is reachable, but it doesn't advertise its OAuth endpoints — ATK checks the server's OAuth metadata ('.well-known/oauth-authorization-server') and found 'none'. Replace the 'authorizationUrl' and 'tokenUrl' placeholders in 'm365agents.yml' with the right values before provisioning.",
+  "core.MCPForDA.mcpAuthDcrPlaceholderWarning": "Scaffolding 成功，但無法自動探索 OAuth 端點。您的 MCP 伺服器可連線，但未公告其 OAuth 端點 - ATK 會檢查伺服器的 OAuth 中繼資料 ('.well-known/oauth-authorization-server') 並發現 'none'。在佈建之前，請以正確的值取代 'm365agents.yml' 中的 'wellKnownAuthorizationServer' 預留位置。",
+  "core.MCPForDA.mcpAuthOAuthPlaceholderWarning": "Scaffolding 成功，但無法自動探索 OAuth 端點。您的 MCP 伺服器可連線，但未公告其 OAuth 端點 - ATK 會檢查伺服器的 OAuth 中繼資料 ('.well-known/oauth-authorization-server') 並發現 'none'。在佈建之前，請以正確的值取代 'm365agents.yml' 中的 'authorizationUrl' 和 'tokenUrl' 預留位置。",
   "core.v4.scaffold.existingFileSkipped": "'%s' 已存在，且未被覆寫。請將其刪除或重新命名，以重新建置檔案。",
+  "core.v4.scaffold.languageOptionsInvalid": "The template package contains invalid language presentation metadata.",
+  "core.v4.scaffold.languageOptionsFailed": "Failed to load language choices from the template package.",
+  "core.v4.scaffold.openApiAuthYamlInvalid": "Cannot add OpenAPI authentication actions. The project YAML must be valid and contain a provision action list.",
   "core.MCPForDA.mcpAuthMetadataUrlNotFound": "無法從 MCP 伺服器的回應中找到來自 \"resource_metadata\" 屬性的驗證中繼資料。",
-  "core.MCPForDA.mcpServerMetadataUrlNotFound": "Unable to find the server metadata from property \"authorization_servers\" from response of the Protected Resource Metadata of the MCP server.",
-  "core.MCPForDA.authUrlNotFound": "Unable to find the authentication URL(s) from response of Authorization Server Metadata of the MCP server. Attempted: %s",
+  "core.MCPForDA.mcpServerMetadataUrlNotFound": "無法從 MCP 伺服器的受保護資源中繼資料回應中找到來自 \"authorization_servers\" 屬性的伺服器中繼資料。",
+  "core.MCPForDA.authUrlNotFound": "無法從 MCP 伺服器的授權伺服器中繼資料回應中找到驗證 URL。已嘗試: %s",
   "core.MCPForDA.toolsFileNotFound": "找不到 MCP 工具檔案: %s",
   "core.MCPForDA.toolsFileInvalidFormat": "無效 MCP 工具檔案格式。預期為 %s 或工具的 JSON 陣列: %s",
   "core.MCPForDA.toolsFileMissingName": "MCP 工具檔案中的每個工具都必須具有 %s 屬性: %s",
@@ -1175,7 +1201,27 @@
   "core.MCPForDA.toolsFileReadError": "無法讀取 MCP 工具檔案: %s。若要稍後新增工具，請執行:\n  %s",
   "core.MCPForDA.authRequired": "位於 %s 的 MCP 伺服器需要驗證。無法自動擷取工具。若要新增工具，請執行:\n  %s",
   "core.MCPForDA.noToolsFetched": "從 %s 的 MCP 伺服器中未探索到任何工具。若要稍後新增工具，請執行:\n  %s",
-  "core.MCPForDA.mcpServerUrlNotAnEndpoint": "%s answered an MCP initialize request with HTTP %s, so it may not be an MCP server URL. Verify the URL before provisioning.",
-  "core.MCPForDA.openYmlFile": "Open m365agents.yml",
+  "core.MCPForDA.mcpServerUrlNotAnEndpoint": "%s 以 HTTP %s 回應了 MCP 的初始化要求，因此它可能不是 MCP 伺服器 URL。佈建前請先驗證 URL。",
+  "core.openPluginImport.autoAuthNone": "Auto inferred authentication type None for MCP server '%s'. Verify this choice if individual tools require authentication or use an API key.",
+  "core.openPluginImport.autoAuthOAuth": "Auto inferred OAuthPluginVault for MCP server '%s'. The generated reference ID is a placeholder and must be registered before use.",
+  "core.openPluginImport.authFallback": "OAuth metadata could not be resolved for MCP server '%s' after it confirmed authentication is required. Auto fell back to OAuthPluginVault. Verify the authentication type and register the generated reference ID before use.",
+  "core.openPluginImport.failed": "Failed to import the Agent Plugin.",
+  "core.openPluginImport.invalidManifest": "The mapped Teams manifest is invalid: %s",
+  "core.openPluginImport.invalidOutputPath": "The output path must not be a symbolic link or junction: %s.",
+  "core.openPluginImport.invalidPlugin": "The Agent Plugin is invalid: %s",
+  "core.openPluginImport.missingPluginPath": "The --path option is required.",
+  "core.openPluginImport.outputDirectoryNotEmpty": "The output directory is not empty: %s. Choose a different --output path or empty the directory.",
+  "core.openPluginImport.unresolvedMcpAuth": "Unable to resolve authentication for MCP server '%s' while --default-auth-type is Auto. Specify None, OAuthPluginVault, or ApiKeyPluginVault explicitly.",
+  "core.openPluginExport.failed": "Failed to export the Agent Plugin.",
+  "core.openPluginExport.invalidAgentPluginManifest": "The project cannot be exported as an Agent Plugins 1.0.0 manifest.",
+  "core.openPluginExport.invalidManifest": "The project manifest is invalid.",
+  "core.openPluginExport.invalidMcpServerUrl": "The project contains an MCP server URL that cannot be exported.",
+  "core.openPluginExport.invalidOutputPath": "The output path must not be a symbolic link or junction.",
+  "core.openPluginExport.invalidProjectPath": "The project path is invalid.",
+  "core.openPluginExport.invalidProjectStructure": "The project structure is invalid.",
+  "core.openPluginExport.manifestNotFound": "appPackage/manifest.json was not found in the project.",
+  "core.openPluginExport.missingProjectPath": "The --path option is required.",
+  "core.openPluginExport.outputDirectoryNotEmpty": "The output directory is not empty. Choose a different --output path or empty the directory.",
+  "core.MCPForDA.openYmlFile": "開啟 m365agents.yml",
   "core.MCPForDA.fetchError": "無法從 %s 的 MCP 伺服器擷取工具。若要稍後新增工具，請執行:\n  %s"
 }

package/resource/yaml-schema/v1.13/yaml.schema.json

@@ -10,7 +10,7 @@
     "environmentFolderPath": {
       "type": "string",
       "description": "The folder path of .env files used for variables and different environments."
-      },
+    },
     "version": {
       "type": "string",
       "description": "The version of the yaml file schema",
@@ -22,7 +22,7 @@
       "additionalProperties": true,
       "properties": {
         "sampleTag": {
-          "type": ["number","string","boolean","object","array", "null", "integer"],
+          "type": ["number", "string", "boolean", "object", "array", "null", "integer"],
           "description": "A tag for the sample app used to track telemetry events sent by Microsoft 365 Agents Toolkit associated with that sample. Pattern: <sample-repo>:<sample-name>"
         }
       }
@@ -76,16 +76,16 @@
           { "$ref": "#/definitions/spfxDeploy" },
           { "$ref": "#/definitions/teamsAppCopyAppPackageToSPFx" },
           { "$ref": "#/definitions/script" },
-          { "$ref": "#/definitions/apiKeyRegister"},
-          { "$ref": "#/definitions/azureStaticWebAppGetDeploymentKey"},
-          { "$ref": "#/definitions/apiKeyUpdate"},
-          { "$ref": "#/definitions/oauthRegister"},
-          { "$ref": "#/definitions/oauthUpdate"},
-          { "$ref": "#/definitions/dcrRegister"},
-          { "$ref": "#/definitions/devChannelCreate"},
-          { "$ref": "#/definitions/devChannelInstallApp"},
-          { "$ref": "#/definitions/typeSpecCompile"},
-          { "$ref": "#/definitions/copilotAgentPublish"}
+          { "$ref": "#/definitions/apiKeyRegister" },
+          { "$ref": "#/definitions/azureStaticWebAppGetDeploymentKey" },
+          { "$ref": "#/definitions/apiKeyUpdate" },
+          { "$ref": "#/definitions/oauthRegister" },
+          { "$ref": "#/definitions/oauthUpdate" },
+          { "$ref": "#/definitions/dcrRegister" },
+          { "$ref": "#/definitions/devChannelCreate" },
+          { "$ref": "#/definitions/devChannelInstallApp" },
+          { "$ref": "#/definitions/typeSpecCompile" },
+          { "$ref": "#/definitions/copilotAgentPublish" }
         ]
       }
     },
@@ -115,7 +115,7 @@
     "aadAppCreateWithSecret": {
       "type": "object",
       "additionalProperties": false,
-      "allOf": [ { "$ref": "#/definitions/aadAppCreateBase" } ],
+      "allOf": [{ "$ref": "#/definitions/aadAppCreateBase" }],
       "required": ["with", "writeToEnvironmentFile"],
       "properties": {
         "name": {},
@@ -144,7 +144,12 @@
             "signInAudience": {
               "type": "string",
               "description": "Specifies what Microsoft accounts are supported for the current application.",
-              "enum": ["AzureADMyOrg", "AzureADMultipleOrgs", "AzureADandPersonalMicrosoftAccount", "PersonalMicrosoftAccount"]
+              "enum": [
+                "AzureADMyOrg",
+                "AzureADMultipleOrgs",
+                "AzureADandPersonalMicrosoftAccount",
+                "PersonalMicrosoftAccount"
+              ]
             },
             "serviceManagementReference": {
               "type": "string",
@@ -197,7 +202,7 @@
     },
     "aadAppCreateWithoutSecret": {
       "type": "object",
-      "allOf": [ { "$ref": "#/definitions/aadAppCreateBase" } ],
+      "allOf": [{ "$ref": "#/definitions/aadAppCreateBase" }],
       "required": ["with", "writeToEnvironmentFile"],
       "additionalProperties": false,
       "properties": {
@@ -227,7 +232,12 @@
             "signInAudience": {
               "type": "string",
               "description": "Specifies what Microsoft accounts are supported for the current application.",
-              "enum": ["AzureADMyOrg", "AzureADMultipleOrgs", "AzureADandPersonalMicrosoftAccount", "PersonalMicrosoftAccount"]
+              "enum": [
+                "AzureADMyOrg",
+                "AzureADMultipleOrgs",
+                "AzureADandPersonalMicrosoftAccount",
+                "PersonalMicrosoftAccount"
+              ]
             },
             "serviceManagementReference": {
               "type": "string",
@@ -1049,7 +1059,7 @@
               "$ref": "#/definitions/secretEnvVarName"
             }
           }
-        }        
+        }
       }
     },
     "botframeworkCreate": {
@@ -1104,7 +1114,10 @@
               "type": "array",
               "description": "the channel(s) to be enabled of the bot",
               "items": {
-                "oneOf": [{ "$ref": "#/definitions/MsTeamsChannel" }, { "$ref": "#/definitions/M365ExtensionsChannel" }]
+                "oneOf": [
+                  { "$ref": "#/definitions/MsTeamsChannel" },
+                  { "$ref": "#/definitions/M365ExtensionsChannel" }
+                ]
               }
             }
           }
@@ -1281,9 +1294,7 @@
               "type": "object",
               "description": "Install Azure Functions Core Tools. This will output environment variable specified by `funcPath` to current environment's .env file.",
               "additionalProperties": false,
-              "required": [
-                "version"
-              ],
+              "required": ["version"],
               "properties": {
                 "version": {
                   "oneOf": [
@@ -1557,7 +1568,7 @@
               "description": "redirect stdout and stderr to a file"
             }
           }
-        }        
+        }
       }
     },
     "relativePath": {
@@ -1841,6 +1852,10 @@
               "type": "string",
               "description": "Token exchange method type, can be BasicAuthorizationHeader or PostRequestBody. BasicAuthorizationHeader: token exchange via HTTP headers, PostRequestBody: token exchange via request body. Default is BasicAuthorizationHeader.",
               "enum": ["BasicAuthorizationHeader", "PostRequestBody"]
+            },
+            "includePersonalMicrosoftAccounts": {
+              "type": "boolean",
+              "description": "Whether to allow personal Microsoft accounts in addition to work or school accounts. If omitted when registering, only work or school accounts are allowed."
             }
           }
         },
@@ -1941,6 +1956,10 @@
               "type": "string",
               "description": "Token exchange method type, can be BasicAuthorizationHeader or PostRequestBody. BasicAuthorizationHeader: token exchange via HTTP headers, PostRequestBody: token exchange via request body. Default is BasicAuthorizationHeader.",
               "enum": ["BasicAuthorizationHeader", "PostRequestBody"]
+            },
+            "includePersonalMicrosoftAccounts": {
+              "type": "boolean",
+              "description": "Whether to allow personal Microsoft accounts in addition to work or school accounts. If omitted during an update, the existing account support remains unchanged."
             }
           }
         }
@@ -1961,7 +1980,7 @@
           "type": "object",
           "additionalProperties": false,
           "description": "DCR registration parameters. Supply mcpResourceUrl for protected resource metadata discovery, wellKnownAuthorizationServer to pin authorization-server metadata, or both.",
-          "required": ["name", "targetUrlsShouldStartWith"],
+          "required": ["name"],
           "anyOf": [
             { "required": ["mcpResourceUrl"] },
             { "required": ["wellKnownAuthorizationServer"] }
@@ -1978,24 +1997,22 @@
             "mcpResourceUrl": {
               "type": "string",
               "minLength": 1,
-              "description": "HTTPS URL of the actual MCP endpoint, including its path. Recommended for new configurations. TGS probes this endpoint and RFC 9728 well-known locations for protected resource metadata (PRM), then uses its first authorization_servers entry, resource and scopes_supported. This is not the PRM document URL and is not necessarily the OAuth resource indicator. Optional when wellKnownAuthorizationServer is supplied."
+              "description": "HTTPS URL of the actual MCP endpoint, including its path. Recommended for new configurations. TGS probes this endpoint and RFC 9728 well-known locations for protected resource metadata (PRM) to discover resource and scopes_supported. Unless wellKnownAuthorizationServer is supplied, TGS uses PRM's first authorization_servers entry. This is not the PRM document URL; the OAuth resource indicator comes from PRM's resource, not directly from this endpoint URL. Optional when wellKnownAuthorizationServer is supplied."
             },
             "wellKnownAuthorizationServer": {
               "type": "string",
               "minLength": 1,
-              "description": "Legacy/pinning HTTPS URL of the authorization server's RFC 8414 metadata document. Optional when mcpResourceUrl is supplied. When present, this URL takes precedence for authorization-server metadata resolution. If mcpResourceUrl is also supplied, TGS still attempts best-effort PRM discovery for resource and scopes; failure of that enrichment does not fail registration."
+              "description": "HTTPS URL of the authorization server's RFC 8414 metadata document, supported for existing configurations and explicit authorization-server selection. Optional when mcpResourceUrl is supplied. When present, this URL takes precedence for authorization-server metadata resolution. An authorization server can serve multiple resources, so this metadata alone cannot identify the intended OAuth resource. Without mcpResourceUrl, supply resource explicitly if the service requires it. If mcpResourceUrl is also supplied, TGS attempts best-effort PRM discovery for resource and scopes; failure of that enrichment does not fail registration."
             },
             "resource": {
               "type": "string",
               "minLength": 1,
-              "description": "Optional explicit OAuth resource indicator: an absolute URI without a fragment. Overrides PRM's resource value. Normally omit this field and let PRM determine the resource; it is not inferred from mcpResourceUrl. TGS sends the selected resource in authorization, token and refresh-token requests."
+              "description": "Optional explicit OAuth resource indicator: an absolute URI without a fragment. Overrides PRM's resource value. Omit this field when mcpResourceUrl enables PRM discovery of the intended resource; otherwise supply it explicitly if the service requires a resource indicator. It is not inferred from authorization-server metadata or copied from the MCP endpoint or target URL. If neither an explicit value nor PRM supplies a resource, no resource indicator is sent. TGS sends the selected resource in authorization, token and refresh-token requests."
             },
             "targetUrlsShouldStartWith": {
               "type": "array",
               "description": "Required MCP target URL array. TGS requires exactly one valid HTTPS URL; omission, a string, an empty array or multiple entries is rejected. New configurations use the actual MCP endpoint. This field does not set the OAuth resource indicator.",
-              "minItems": 1,
-              "maxItems": 1,
-              "items": { "type": "string", "minLength": 1 }
+              "items": { "type": "string" }
             },
             "applicableToApps": {
               "type": "string",
@@ -2006,6 +2023,10 @@
               "type": "string",
               "description": "Tenants permitted to use this configuration: HomeTenant (default) or AnyTenant.",
               "enum": ["HomeTenant", "AnyTenant"]
+            },
+            "includePersonalMicrosoftAccounts": {
+              "type": "boolean",
+              "description": "Whether to allow personal Microsoft accounts in addition to work or school accounts. If omitted when registering, only work or school accounts are allowed."
             }
           }
         },