@microsoft/teams.client 2.0.10 → 2.0.11

package/dist/app.d.mts

@@ -1,7 +1,6 @@
-import * as msal from '@azure/msal-browser';
-import * as http from '@microsoft/teams.common/http';
-import { ILogger } from '@microsoft/teams.common/logging';
-import * as graph from '@microsoft/teams.graph';
+import { IPublicClientApplication, Configuration, SilentRequest } from '@azure/msal-browser';
+import { ILogger, Client } from '@microsoft/teams.common';
+import { Client as Client$1 } from '@microsoft/teams.graph';
 
 /**
  * Options to control how MSAL is initialized and used.
@@ -12,14 +11,14 @@ type MsalOptions = ({
      * This is useful if you want to use a custom MSAL instance or if you want to share the
      * same MSAL instance across multiple apps.
      */
-    readonly msalInstance?: msal.IPublicClientApplication;
+    readonly msalInstance?: IPublicClientApplication;
     readonly configuration?: never;
 } | {
     readonly msalInstance?: never;
     /**
      * MSAL configuration to use when constructing an MSAL instance used
      * to make authenticated function calls to remote endpoints. */
-    readonly configuration?: msal.Configuration;
+    readonly configuration?: Configuration;
 }) & {
     /**
      * Options to control scope consent pre-warming. If explicitly set to false, no pre-warming is performed.
@@ -64,13 +63,13 @@ type AppState = {
 } | {
     phase: 'started';
     startedAt: Date;
-    msalInstance: msal.IPublicClientApplication;
+    msalInstance: IPublicClientApplication;
 };
 /**
  * ExecOptions is used to specify options for the exec method.
  */
 type ExecOptions = ({
-    readonly msalTokenRequest?: msal.SilentRequest;
+    readonly msalTokenRequest?: SilentRequest;
     readonly permission?: never;
 } | {
     readonly msalTokenRequest?: never;
@@ -85,8 +84,8 @@ type ExecOptions = ({
  */
 declare class App {
     readonly options: AppOptions;
-    readonly http: http.Client;
-    readonly graph: graph.Client;
+    readonly http: Client;
+    readonly graph: Client$1;
     readonly clientId: string;
     protected _state: AppState;
     /**
@@ -99,7 +98,7 @@ declare class App {
      */
     get startedAt(): Date | undefined;
     /** The msal instance used in this app. undefined until the app is started. */
-    get msalInstance(): msal.IPublicClientApplication | undefined;
+    get msalInstance(): IPublicClientApplication | undefined;
     constructor(clientId: string, options?: AppOptions);
     /**
      * Starts the library and initializes the dependent teams-js and MSAL libraries.

package/dist/app.d.ts

@@ -1,7 +1,6 @@
-import * as msal from '@azure/msal-browser';
-import * as http from '@microsoft/teams.common/http';
-import { ILogger } from '@microsoft/teams.common/logging';
-import * as graph from '@microsoft/teams.graph';
+import { IPublicClientApplication, Configuration, SilentRequest } from '@azure/msal-browser';
+import { ILogger, Client } from '@microsoft/teams.common';
+import { Client as Client$1 } from '@microsoft/teams.graph';
 
 /**
  * Options to control how MSAL is initialized and used.
@@ -12,14 +11,14 @@ type MsalOptions = ({
      * This is useful if you want to use a custom MSAL instance or if you want to share the
      * same MSAL instance across multiple apps.
      */
-    readonly msalInstance?: msal.IPublicClientApplication;
+    readonly msalInstance?: IPublicClientApplication;
     readonly configuration?: never;
 } | {
     readonly msalInstance?: never;
     /**
      * MSAL configuration to use when constructing an MSAL instance used
      * to make authenticated function calls to remote endpoints. */
-    readonly configuration?: msal.Configuration;
+    readonly configuration?: Configuration;
 }) & {
     /**
      * Options to control scope consent pre-warming. If explicitly set to false, no pre-warming is performed.
@@ -64,13 +63,13 @@ type AppState = {
 } | {
     phase: 'started';
     startedAt: Date;
-    msalInstance: msal.IPublicClientApplication;
+    msalInstance: IPublicClientApplication;
 };
 /**
  * ExecOptions is used to specify options for the exec method.
  */
 type ExecOptions = ({
-    readonly msalTokenRequest?: msal.SilentRequest;
+    readonly msalTokenRequest?: SilentRequest;
     readonly permission?: never;
 } | {
     readonly msalTokenRequest?: never;
@@ -85,8 +84,8 @@ type ExecOptions = ({
  */
 declare class App {
     readonly options: AppOptions;
-    readonly http: http.Client;
-    readonly graph: graph.Client;
+    readonly http: Client;
+    readonly graph: Client$1;
     readonly clientId: string;
     protected _state: AppState;
     /**
@@ -99,7 +98,7 @@ declare class App {
      */
     get startedAt(): Date | undefined;
     /** The msal instance used in this app. undefined until the app is started. */
-    get msalInstance(): msal.IPublicClientApplication | undefined;
+    get msalInstance(): IPublicClientApplication | undefined;
     constructor(clientId: string, options?: AppOptions);
     /**
      * Starts the library and initializes the dependent teams-js and MSAL libraries.

package/dist/app.js

@@ -1,34 +1,11 @@
 'use strict';
 
-var msal = require('@azure/msal-browser');
+var msalBrowser = require('@azure/msal-browser');
 var teamsJs = require('@microsoft/teams-js');
-var http = require('@microsoft/teams.common/http');
-var logging = require('@microsoft/teams.common/logging');
+var teams_common = require('@microsoft/teams.common');
 var graphUtils = require('./graph-utils');
 var msalUtils = require('./msal-utils');
 
-function _interopNamespace(e) {
-  if (e && e.__esModule) return e;
-  var n = Object.create(null);
-  if (e) {
-    Object.keys(e).forEach(function (k) {
-      if (k !== 'default') {
-        var d = Object.getOwnPropertyDescriptor(e, k);
-        Object.defineProperty(n, k, d.get ? d : {
-          enumerable: true,
-          get: function () { return e[k]; }
-        });
-      }
-    });
-  }
-  n.default = e;
-  return Object.freeze(n);
-}
-
-var msal__namespace = /*#__PURE__*/_interopNamespace(msal);
-var teamsJs__namespace = /*#__PURE__*/_interopNamespace(teamsJs);
-var http__namespace = /*#__PURE__*/_interopNamespace(http);
-
 class App {
   options;
   http;
@@ -58,8 +35,8 @@ class App {
     }
     this.clientId = clientId;
     this.options = options;
-    this._log = options?.logger || new logging.ConsoleLogger("@teams/client");
-    this.http = new http__namespace.Client({
+    this._log = options?.logger || new teams_common.ConsoleLogger("@teams/client");
+    this.http = new teams_common.Client({
       baseUrl: options?.remoteApiOptions?.baseUrl
     });
     this.graph = graphUtils.buildGraphClient(() => this.appStateGuard(), this._log);
@@ -76,11 +53,11 @@ class App {
     }
     this._log.debug("app starting");
     this._state = { phase: "starting" };
-    await teamsJs__namespace.app.initialize();
+    await teamsJs.app.initialize();
     let msalInstance = this.options.msalOptions?.msalInstance;
     if (!msalInstance) {
       const msalConfig = this.options.msalOptions?.configuration ?? msalUtils.buildMsalConfig(this.clientId, this._log);
-      msalInstance = await msal__namespace.createNestablePublicClientApplication(
+      msalInstance = await msalBrowser.createNestablePublicClientApplication(
         msalConfig
       );
     }
@@ -104,7 +81,7 @@ class App {
    */
   async exec(name, data, options) {
     const { msalInstance } = this.appStateGuard();
-    const context = await teamsJs__namespace.app.getContext();
+    const context = await teamsJs.app.getContext();
     const remoteAppResource = this.options.remoteApiOptions?.remoteAppResource ?? `api://${this.clientId}`;
     const accessToken = await msalUtils.acquireMsalAccessToken(
       msalInstance,

package/dist/app.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/app.ts"],"names":["ConsoleLogger","http","buildGraphClient","teamsJs","buildMsalConfig","msal","acquireMsalAccessToken","getStandardExecSilentRequest","hasConsentForScopes"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4GO,MAAM,GAAA,CAAI;AAAA,EACN,OAAA;AAAA,EACA,IAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA;AAAA,EACC,MAAA,GAAmB,EAAE,KAAA,EAAO,SAAA,EAAU;AAAA;AAAA;AAAA;AAAA,EAKhD,IAAI,GAAA,GAAM;AACR,IAAA,OAAO,IAAA,CAAK,IAAA;AAAA,EACd;AAAA,EACU,IAAA;AAAA;AAAA;AAAA;AAAA,EAKV,IAAI,SAAA,GAAY;AACd,IAAA,OAAO,KAAK,MAAA,EAAQ,SAAA;AAAA,EACtB;AAAA;AAAA,EAGA,IAAI,YAAA,GAAe;AACjB,IAAA,OAAO,KAAK,MAAA,CAAO,YAAA;AAAA,EACrB;AAAA,EAEA,WAAA,CAAY,QAAA,EAAkB,OAAA,GAAsB,EAAC,EAAG;AACtD,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAI,MAAM,oBAAoB,CAAA;AAAA,IACtC;AAEA,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAChB,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AACf,IAAA,IAAA,CAAK,IAAA,GAAO,OAAA,EAAS,MAAA,IAAU,IAAIA,sBAAc,eAAe,CAAA;AAChE,IAAA,IAAA,CAAK,IAAA,GAAO,IAAIC,eAAA,CAAK,MAAA,CAAO;AAAA,MAC1B,OAAA,EAAS,SAAS,gBAAA,EAAkB;AAAA,KACrC,CAAA;AACD,IAAA,IAAA,CAAK,QAAQC,2BAAA,CAAiB,MAAM,KAAK,aAAA,EAAc,EAAG,KAAK,IAAI,CAAA;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,KAAA,KAAU,SAAA,EAAW;AACnC,MAAA,IAAA,CAAK,KAAK,KAAA,CAAM,CAAA,YAAA,EAAe,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA,CAAE,CAAA;AAClD,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,IAAA,CAAK,MAAM,cAAc,CAAA;AAC9B,IAAA,IAAA,CAAK,MAAA,GAAS,EAAE,KAAA,EAAO,UAAA,EAAW;AAElC,IAAA,MAAMC,kBAAA,CAAQ,IAAI,UAAA,EAAW;AAE7B,IAAA,IAAI,YAAA,GAAe,IAAA,CAAK,OAAA,CAAQ,WAAA,EAAa,YAAA;AAC7C,IAAA,IAAI,CAAC,YAAA,EAAc;AACjB,MAAA,MAAM,UAAA,GACJ,KAAK,OAAA,CAAQ,WAAA,EAAa,iBAC1BC,yBAAA,CAAgB,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,IAAI,CAAA;AAC1C,MAAA,YAAA,GAAe,MAAMC,eAAA,CAAK,qCAAA;AAAA,QACxB;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,MAAA,GAAS,EAAE,KAAA,EAAO,SAAA,EAAW,cAAc,SAAA,kBAAW,IAAI,MAAK,EAAE;AAGtE,IAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,WAAA,EAAa,aAAA,KAAkB,KAAA,EAAO;AACrD,MAAA,MAAM,SAAS,IAAA,CAAK,OAAA,CAAQ,WAAA,EAAa,aAAA,IAAiB,CAAC,UAAU,CAAA;AACrE,MAAA,IAAA,CAAK,KAAK,KAAA,CAAM,CAAA,+BAAA,EAAkC,OAAO,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AACrE,MAAA,MAAM,IAAA,CAAK,uBAAuB,MAAM,CAAA;AAAA,IAC1C;AAEA,IAAA,IAAA,CAAK,IAAA,CAAK,MAAM,aAAa,CAAA;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,IAAA,CACJ,IAAA,EACA,IAAA,EACA,OAAA,EACY;AACZ,IAAA,MAAM,EAAE,YAAA,EAAa,GAAI,IAAA,CAAK,aAAA,EAAc;AAC5C,IAAA,MAAM,OAAA,GAAU,MAAMF,kBAAA,CAAQ,GAAA,CAAI,UAAA,EAAW;AAE7C,IAAA,MAAM,oBACJ,IAAA,CAAK,OAAA,CAAQ,kBAAkB,iBAAA,IAC/B,CAAA,MAAA,EAAS,KAAK,QAAQ,CAAA,CAAA;AACxB,IAAA,MAAM,cAAc,MAAMG,gCAAA;AAAA,MACxB,YAAA;AAAA,MACA,OAAA,EAAS,gBAAA,IACPC,sCAAA,CAA6B,iBAAA,EAAmB,SAAS,UAAU,CAAA;AAAA,MACrE,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,IAAA,CAAK,KAAQ,CAAA,eAAA,EAAkB,IAAI,IAAI,IAAA,EAAM;AAAA,MAClE,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,UAAU,WAAW,CAAA,CAAA;AAAA,QACpC,wBAAA,EAA0B,QAAQ,GAAA,CAAI,SAAA;AAAA,QACtC,oBAAA,EAAsB,QAAQ,OAAA,EAAS,EAAA;AAAA,QACvC,iBAAA,EAAmB,QAAQ,IAAA,EAAM,EAAA;AAAA,QACjC,oBAAA,EAAsB,QAAQ,OAAA,EAAS,EAAA;AAAA,QACvC,oBAAA,EAAsB,OAAA,CAAQ,GAAA,CAAI,eAAA,IAAmB,MAAA;AAAA,QACrD,iBAAA,EAAmB,OAAA,CAAQ,IAAA,CAAK,EAAA,IAAM,MAAA;AAAA,QACtC,qBAAA,EAAuB,OAAA,CAAQ,IAAA,CAAK,SAAA,IAAa,MAAA;AAAA,QACjD,iBAAA,EAAmB,QAAQ,IAAA,EAAM,UAAA;AAAA,QACjC,GAAI,OAAA,EAAS,cAAA,IAAkB;AAAC;AAClC,KACD,CAAA;AAED,IAAA,OAAO,GAAA,CAAI,IAAA;AAAA,EACb;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,oBAAoB,MAAA,EAAoC;AAC5D,IAAA,MAAM,EAAE,YAAA,EAAa,GAAI,IAAA,CAAK,aAAA,EAAc;AAE5C,IAAA,OAAO,MAAMC,6BAAA,CAAoB,YAAA,EAAc,MAAA,EAAQ,KAAK,GAAG,CAAA;AAAA,EACjE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,uBAAuB,MAAA,EAAoC;AAC/D,IAAA,MAAM,EAAE,YAAA,EAAa,GAAI,IAAA,CAAK,aAAA,EAAc;AAE5C,IAAA,IAAI;AACF,MAAA,MAAM,QAAQ,MAAMF,gCAAA;AAAA,QAClB,YAAA;AAAA,QACA,EAAE,MAAA,EAAO;AAAA,QACT,IAAA,CAAK;AAAA,OACP;AACA,MAAA,OAAO,CAAC,CAAC,KAAA;AAAA,IACX,SAAS,EAAA,EAAI;AACX,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEQ,aAAA,GAAiD;AACvD,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,KAAA,KAAU,SAAA,EAAW;AACnC,MAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AAAA,IACnC;AACA,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AACF","file":"app.js","sourcesContent":["import * as msal from '@azure/msal-browser';\n\nimport * as teamsJs from '@microsoft/teams-js';\nimport * as http from '@microsoft/teams.common/http';\nimport { ILogger, ConsoleLogger } from '@microsoft/teams.common/logging';\nimport * as graph from '@microsoft/teams.graph';\n\nimport { buildGraphClient } from './graph-utils';\nimport {\n  acquireMsalAccessToken,\n  buildMsalConfig,\n  getStandardExecSilentRequest,\n  hasConsentForScopes,\n} from './msal-utils';\n\n/**\n * Options to control how MSAL is initialized and used.\n */\nexport type MsalOptions = (\n  | {\n      /**\n       * MSAL instance to use when making authenticated function calls to remote endpoints.\n       * This is useful if you want to use a custom MSAL instance or if you want to share the\n       * same MSAL instance across multiple apps.\n       */\n      readonly msalInstance?: msal.IPublicClientApplication;\n      readonly configuration?: never;\n    }\n  | {\n      readonly msalInstance?: never;\n      /**\n       * MSAL configuration to use when constructing an MSAL instance used\n       * to make authenticated function calls to remote endpoints. */\n      readonly configuration?: msal.Configuration;\n    }\n) & {\n  /**\n   * Options to control scope consent pre-warming. If explicitly set to false, no pre-warming is performed.\n   * If no value is provided, the default scope (i.e. \".default\") is pre-warmed. If a set of scopes is\n   * provided, the specified scopes are pre-warmed. The scopes should be for a single resource, and they\n   * should not mix the .default scope with named scopes.\n   */\n  readonly prewarmScopes?: false | string[];\n};\n\nexport type RemoteApiOptions = {\n  /**\n   * The remote API base URL. If omitted, it's assumed that the remote API is hosted in the same domain as the app.\n   */\n  readonly baseUrl?: string;\n\n  /**\n   * The default resource name when building a token request for the Entra token to include when invoking\n   * a remote function. This is useful when the API is hosted in an different AAD app from\n   * the caller and is typically in the format 'api://<remoteAppClientId>'.\n   * When invoking @see exec with default options or a permission name,\n   * this value is used to build a token request in the format of '<remoteAppResource>/<permission>'.\n   * If omitted, it's assumed that the API is hosted in the same AAD app as the caller, and the\n   * token request is made for 'api://<clientId>/permission'.\n   */\n  readonly remoteAppResource?: string;\n};\n\nexport type AppOptions = {\n  /**\n   * Logger instance to use.\n   */\n  readonly logger?: ILogger;\n\n  /**\n   * Options to control how MSAL is initialized and used.\n   */\n  readonly msalOptions?: MsalOptions;\n\n  /** Options to control how remote APIs are invoked. */\n  readonly remoteApiOptions?: RemoteApiOptions;\n};\n\ntype AppState =\n  | {\n      phase: 'stopped' | 'starting';\n      startedAt?: never;\n      msalInstance?: never;\n    }\n  | {\n      phase: 'started';\n      startedAt: Date;\n      msalInstance: msal.IPublicClientApplication;\n    };\n\n/**\n * ExecOptions is used to specify options for the exec method.\n */\nexport type ExecOptions = (\n  | {\n      readonly msalTokenRequest?: msal.SilentRequest;\n      readonly permission?: never;\n    }\n  | { readonly msalTokenRequest?: never; readonly permission?: string }\n) & {\n  readonly requestHeaders?: Record<string, string>;\n};\n\n/**\n * The main entry point for this library. This class streamlines Microsoft Teams app development\n * by simplifying the process of managing authentication, interacting with Microsoft Graph APIs,\n * and executing server-side functions.\n */\nexport class App {\n  readonly options: AppOptions;\n  readonly http: http.Client;\n  readonly graph: graph.Client;\n  readonly clientId: string;\n  protected _state: AppState = { phase: 'stopped' };\n\n  /**\n   * The apps logger\n   */\n  get log() {\n    return this._log;\n  }\n  protected _log: ILogger;\n\n  /**\n   * The date/time when the app was successfully started.\n   */\n  get startedAt() {\n    return this._state?.startedAt;\n  }\n\n  /** The msal instance used in this app. undefined until the app is started. */\n  get msalInstance() {\n    return this._state.msalInstance;\n  }\n\n  constructor(clientId: string, options: AppOptions = {}) {\n    if (!clientId) {\n      throw new Error('Invalid client ID.');\n    }\n\n    this.clientId = clientId;\n    this.options = options;\n    this._log = options?.logger || new ConsoleLogger('@teams/client');\n    this.http = new http.Client({\n      baseUrl: options?.remoteApiOptions?.baseUrl,\n    });\n    this.graph = buildGraphClient(() => this.appStateGuard(), this._log);\n  }\n\n  /**\n   * Starts the library and initializes the dependent teams-js and MSAL libraries.\n   * @returns A promise that will be fulfilled when the app has started, or\n   *          rejected if the initialization fails or times out.\n   */\n  async start(): Promise<void> {\n    if (this._state.phase !== 'stopped') {\n      this._log.debug(`app already ${this._state.phase}`);\n      return;\n    }\n\n    this._log.debug('app starting');\n    this._state = { phase: 'starting' };\n\n    await teamsJs.app.initialize();\n\n    let msalInstance = this.options.msalOptions?.msalInstance;\n    if (!msalInstance) {\n      const msalConfig =\n        this.options.msalOptions?.configuration ??\n        buildMsalConfig(this.clientId, this._log);\n      msalInstance = await msal.createNestablePublicClientApplication(\n        msalConfig\n      );\n    }\n\n    this._state = { phase: 'started', msalInstance, startedAt: new Date() };\n\n    // pre-warm consent for the specified scopes\n    if (this.options.msalOptions?.prewarmScopes !== false) {\n      const scopes = this.options.msalOptions?.prewarmScopes ?? ['.default'];\n      this._log.debug(`prewarming consent for scopes: ${scopes.join(', ')}`);\n      await this.ensureConsentForScopes(scopes);\n    }\n\n    this._log.debug('app started');\n  }\n\n  /**\n   * Execute a server-side function\n   * @param name The unique function name\n   * @param data The data to send\n   * @param options Options\n   * @param options.msalTokenRequest Optional MSAL token request.\n   * If omitted, a default token request is used.\n   * @param options.requestHeaders Optional additional request headers.\n   * @returns The function response\n   */\n  async exec<T = unknown>(\n    name: string,\n    data?: unknown,\n    options?: ExecOptions\n  ): Promise<T> {\n    const { msalInstance } = this.appStateGuard();\n    const context = await teamsJs.app.getContext();\n\n    const remoteAppResource =\n      this.options.remoteApiOptions?.remoteAppResource ??\n      `api://${this.clientId}`;\n    const accessToken = await acquireMsalAccessToken(\n      msalInstance,\n      options?.msalTokenRequest ??\n        getStandardExecSilentRequest(remoteAppResource, options?.permission),\n      this._log\n    );\n\n    const res = await this.http.post<T>(`/api/functions/${name}`, data, {\n      headers: {\n        authorization: `Bearer ${accessToken}`,\n        'x-teams-app-session-id': context.app.sessionId,\n        'x-teams-channel-id': context.channel?.id,\n        'x-teams-chat-id': context.chat?.id,\n        'x-teams-meeting-id': context.meeting?.id,\n        'x-teams-message-id': context.app.parentMessageId || undefined,\n        'x-teams-page-id': context.page.id || undefined,\n        'x-teams-sub-page-id': context.page.subPageId || undefined,\n        'x-teams-team-id': context.team?.internalId,\n        ...(options?.requestHeaders ?? {}),\n      },\n    });\n\n    return res.data;\n  }\n\n  /**\n   * Tests whether the user has consented to the specified scopes without prompting the user for consent.\n   * @param scopes The scopes to check consent for.The scopes should be for a single resource, and they\n   * should not mix the .default scope with named scopes.\n   * @returns A promise that resolves to a boolean indicating whether the user has consented to the scopes.\n   */\n  async hasConsentForScopes(scopes: string[]): Promise<boolean> {\n    const { msalInstance } = this.appStateGuard();\n\n    return await hasConsentForScopes(msalInstance, scopes, this.log);\n  }\n\n  /**\n   * Tests whether the user has consented to the specified scopes, and prompts them if not. This is useful for ensuring\n   * that the user has consented to the required scopes before calling a graph API or other resource.\n   * @param scopes - The scopes to prewarm consent for. The scopes should be for a single resource, and they\n   * should not mix the .default scope with named scopes.\n   * @returns A value indicating whether consent has been acquired for the specified scopes.\n   */\n  async ensureConsentForScopes(scopes: string[]): Promise<boolean> {\n    const { msalInstance } = this.appStateGuard();\n\n    try {\n      const token = await acquireMsalAccessToken(\n        msalInstance,\n        { scopes },\n        this.log\n      );\n      return !!token;\n    } catch (ex) {\n      return false;\n    }\n  }\n\n  private appStateGuard(): AppState & { phase: 'started' } {\n    if (this._state.phase !== 'started') {\n      throw new Error('App not started');\n    }\n    return this._state;\n  }\n}\n"]}
+{"version":3,"sources":["../src/app.ts"],"names":["ConsoleLogger","HttpClient","buildGraphClient","app","buildMsalConfig","createNestablePublicClientApplication","acquireMsalAccessToken","getStandardExecSilentRequest","hasConsentForScopes"],"mappings":";;;;;;;;AAgHO,MAAM,GAAA,CAAI;AAAA,EACN,OAAA;AAAA,EACA,IAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA;AAAA,EACC,MAAA,GAAmB,EAAE,KAAA,EAAO,SAAA,EAAU;AAAA;AAAA;AAAA;AAAA,EAKhD,IAAI,GAAA,GAAM;AACR,IAAA,OAAO,IAAA,CAAK,IAAA;AAAA,EACd;AAAA,EACU,IAAA;AAAA;AAAA;AAAA;AAAA,EAKV,IAAI,SAAA,GAAY;AACd,IAAA,OAAO,KAAK,MAAA,EAAQ,SAAA;AAAA,EACtB;AAAA;AAAA,EAGA,IAAI,YAAA,GAAe;AACjB,IAAA,OAAO,KAAK,MAAA,CAAO,YAAA;AAAA,EACrB;AAAA,EAEA,WAAA,CAAY,QAAA,EAAkB,OAAA,GAAsB,EAAC,EAAG;AACtD,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAI,MAAM,oBAAoB,CAAA;AAAA,IACtC;AAEA,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAChB,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AACf,IAAA,IAAA,CAAK,IAAA,GAAO,OAAA,EAAS,MAAA,IAAU,IAAIA,2BAAc,eAAe,CAAA;AAChE,IAAA,IAAA,CAAK,IAAA,GAAO,IAAIC,mBAAA,CAAW;AAAA,MACzB,OAAA,EAAS,SAAS,gBAAA,EAAkB;AAAA,KACrC,CAAA;AACD,IAAA,IAAA,CAAK,QAAQC,2BAAA,CAAiB,MAAM,KAAK,aAAA,EAAc,EAAG,KAAK,IAAI,CAAA;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,KAAA,KAAU,SAAA,EAAW;AACnC,MAAA,IAAA,CAAK,KAAK,KAAA,CAAM,CAAA,YAAA,EAAe,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA,CAAE,CAAA;AAClD,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,IAAA,CAAK,MAAM,cAAc,CAAA;AAC9B,IAAA,IAAA,CAAK,MAAA,GAAS,EAAE,KAAA,EAAO,UAAA,EAAW;AAElC,IAAA,MAAMC,YAAI,UAAA,EAAW;AAErB,IAAA,IAAI,YAAA,GAAe,IAAA,CAAK,OAAA,CAAQ,WAAA,EAAa,YAAA;AAC7C,IAAA,IAAI,CAAC,YAAA,EAAc;AACjB,MAAA,MAAM,UAAA,GACJ,KAAK,OAAA,CAAQ,WAAA,EAAa,iBAC1BC,yBAAA,CAAgB,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,IAAI,CAAA;AAC1C,MAAA,YAAA,GAAe,MAAMC,iDAAA;AAAA,QACnB;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,MAAA,GAAS,EAAE,KAAA,EAAO,SAAA,EAAW,cAAc,SAAA,kBAAW,IAAI,MAAK,EAAE;AAGtE,IAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,WAAA,EAAa,aAAA,KAAkB,KAAA,EAAO;AACrD,MAAA,MAAM,SAAS,IAAA,CAAK,OAAA,CAAQ,WAAA,EAAa,aAAA,IAAiB,CAAC,UAAU,CAAA;AACrE,MAAA,IAAA,CAAK,KAAK,KAAA,CAAM,CAAA,+BAAA,EAAkC,OAAO,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AACrE,MAAA,MAAM,IAAA,CAAK,uBAAuB,MAAM,CAAA;AAAA,IAC1C;AAEA,IAAA,IAAA,CAAK,IAAA,CAAK,MAAM,aAAa,CAAA;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,IAAA,CACJ,IAAA,EACA,IAAA,EACA,OAAA,EACY;AACZ,IAAA,MAAM,EAAE,YAAA,EAAa,GAAI,IAAA,CAAK,aAAA,EAAc;AAC5C,IAAA,MAAM,OAAA,GAAU,MAAMF,WAAA,CAAI,UAAA,EAAW;AAErC,IAAA,MAAM,oBACJ,IAAA,CAAK,OAAA,CAAQ,kBAAkB,iBAAA,IAC/B,CAAA,MAAA,EAAS,KAAK,QAAQ,CAAA,CAAA;AACxB,IAAA,MAAM,cAAc,MAAMG,gCAAA;AAAA,MACxB,YAAA;AAAA,MACA,OAAA,EAAS,gBAAA,IACPC,sCAAA,CAA6B,iBAAA,EAAmB,SAAS,UAAU,CAAA;AAAA,MACrE,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,IAAA,CAAK,KAAQ,CAAA,eAAA,EAAkB,IAAI,IAAI,IAAA,EAAM;AAAA,MAClE,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,UAAU,WAAW,CAAA,CAAA;AAAA,QACpC,wBAAA,EAA0B,QAAQ,GAAA,CAAI,SAAA;AAAA,QACtC,oBAAA,EAAsB,QAAQ,OAAA,EAAS,EAAA;AAAA,QACvC,iBAAA,EAAmB,QAAQ,IAAA,EAAM,EAAA;AAAA,QACjC,oBAAA,EAAsB,QAAQ,OAAA,EAAS,EAAA;AAAA,QACvC,oBAAA,EAAsB,OAAA,CAAQ,GAAA,CAAI,eAAA,IAAmB,MAAA;AAAA,QACrD,iBAAA,EAAmB,OAAA,CAAQ,IAAA,CAAK,EAAA,IAAM,MAAA;AAAA,QACtC,qBAAA,EAAuB,OAAA,CAAQ,IAAA,CAAK,SAAA,IAAa,MAAA;AAAA,QACjD,iBAAA,EAAmB,QAAQ,IAAA,EAAM,UAAA;AAAA,QACjC,GAAI,OAAA,EAAS,cAAA,IAAkB;AAAC;AAClC,KACD,CAAA;AAED,IAAA,OAAO,GAAA,CAAI,IAAA;AAAA,EACb;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,oBAAoB,MAAA,EAAoC;AAC5D,IAAA,MAAM,EAAE,YAAA,EAAa,GAAI,IAAA,CAAK,aAAA,EAAc;AAE5C,IAAA,OAAO,MAAMC,6BAAA,CAAoB,YAAA,EAAc,MAAA,EAAQ,KAAK,GAAG,CAAA;AAAA,EACjE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,uBAAuB,MAAA,EAAoC;AAC/D,IAAA,MAAM,EAAE,YAAA,EAAa,GAAI,IAAA,CAAK,aAAA,EAAc;AAE5C,IAAA,IAAI;AACF,MAAA,MAAM,QAAQ,MAAMF,gCAAA;AAAA,QAClB,YAAA;AAAA,QACA,EAAE,MAAA,EAAO;AAAA,QACT,IAAA,CAAK;AAAA,OACP;AACA,MAAA,OAAO,CAAC,CAAC,KAAA;AAAA,IACX,SAAS,EAAA,EAAI;AACX,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEQ,aAAA,GAAiD;AACvD,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,KAAA,KAAU,SAAA,EAAW;AACnC,MAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AAAA,IACnC;AACA,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AACF","file":"app.js","sourcesContent":["import {\n  createNestablePublicClientApplication,\n  type Configuration,\n  type IPublicClientApplication,\n  type SilentRequest,\n} from '@azure/msal-browser';\n\nimport { app } from '@microsoft/teams-js';\nimport { ConsoleLogger, Client as HttpClient, ILogger } from '@microsoft/teams.common';\nimport { Client as GraphClient } from '@microsoft/teams.graph';\n\nimport { buildGraphClient } from './graph-utils';\nimport {\n  acquireMsalAccessToken,\n  buildMsalConfig,\n  getStandardExecSilentRequest,\n  hasConsentForScopes,\n} from './msal-utils';\n\n/**\n * Options to control how MSAL is initialized and used.\n */\nexport type MsalOptions = (\n  | {\n      /**\n       * MSAL instance to use when making authenticated function calls to remote endpoints.\n       * This is useful if you want to use a custom MSAL instance or if you want to share the\n       * same MSAL instance across multiple apps.\n       */\n      readonly msalInstance?: IPublicClientApplication;\n      readonly configuration?: never;\n    }\n  | {\n      readonly msalInstance?: never;\n      /**\n       * MSAL configuration to use when constructing an MSAL instance used\n       * to make authenticated function calls to remote endpoints. */\n      readonly configuration?: Configuration;\n    }\n) & {\n  /**\n   * Options to control scope consent pre-warming. If explicitly set to false, no pre-warming is performed.\n   * If no value is provided, the default scope (i.e. \".default\") is pre-warmed. If a set of scopes is\n   * provided, the specified scopes are pre-warmed. The scopes should be for a single resource, and they\n   * should not mix the .default scope with named scopes.\n   */\n  readonly prewarmScopes?: false | string[];\n};\n\nexport type RemoteApiOptions = {\n  /**\n   * The remote API base URL. If omitted, it's assumed that the remote API is hosted in the same domain as the app.\n   */\n  readonly baseUrl?: string;\n\n  /**\n   * The default resource name when building a token request for the Entra token to include when invoking\n   * a remote function. This is useful when the API is hosted in an different AAD app from\n   * the caller and is typically in the format 'api://<remoteAppClientId>'.\n   * When invoking @see exec with default options or a permission name,\n   * this value is used to build a token request in the format of '<remoteAppResource>/<permission>'.\n   * If omitted, it's assumed that the API is hosted in the same AAD app as the caller, and the\n   * token request is made for 'api://<clientId>/permission'.\n   */\n  readonly remoteAppResource?: string;\n};\n\nexport type AppOptions = {\n  /**\n   * Logger instance to use.\n   */\n  readonly logger?: ILogger;\n\n  /**\n   * Options to control how MSAL is initialized and used.\n   */\n  readonly msalOptions?: MsalOptions;\n\n  /** Options to control how remote APIs are invoked. */\n  readonly remoteApiOptions?: RemoteApiOptions;\n};\n\ntype AppState =\n  | {\n      phase: 'stopped' | 'starting';\n      startedAt?: never;\n      msalInstance?: never;\n    }\n  | {\n      phase: 'started';\n      startedAt: Date;\n      msalInstance: IPublicClientApplication;\n    };\n\n/**\n * ExecOptions is used to specify options for the exec method.\n */\nexport type ExecOptions = (\n  | {\n      readonly msalTokenRequest?: SilentRequest;\n      readonly permission?: never;\n    }\n  | { readonly msalTokenRequest?: never; readonly permission?: string }\n) & {\n  readonly requestHeaders?: Record<string, string>;\n};\n\n/**\n * The main entry point for this library. This class streamlines Microsoft Teams app development\n * by simplifying the process of managing authentication, interacting with Microsoft Graph APIs,\n * and executing server-side functions.\n */\nexport class App {\n  readonly options: AppOptions;\n  readonly http: HttpClient;\n  readonly graph: GraphClient;\n  readonly clientId: string;\n  protected _state: AppState = { phase: 'stopped' };\n\n  /**\n   * The apps logger\n   */\n  get log() {\n    return this._log;\n  }\n  protected _log: ILogger;\n\n  /**\n   * The date/time when the app was successfully started.\n   */\n  get startedAt() {\n    return this._state?.startedAt;\n  }\n\n  /** The msal instance used in this app. undefined until the app is started. */\n  get msalInstance() {\n    return this._state.msalInstance;\n  }\n\n  constructor(clientId: string, options: AppOptions = {}) {\n    if (!clientId) {\n      throw new Error('Invalid client ID.');\n    }\n\n    this.clientId = clientId;\n    this.options = options;\n    this._log = options?.logger || new ConsoleLogger('@teams/client');\n    this.http = new HttpClient({\n      baseUrl: options?.remoteApiOptions?.baseUrl,\n    });\n    this.graph = buildGraphClient(() => this.appStateGuard(), this._log);\n  }\n\n  /**\n   * Starts the library and initializes the dependent teams-js and MSAL libraries.\n   * @returns A promise that will be fulfilled when the app has started, or\n   *          rejected if the initialization fails or times out.\n   */\n  async start(): Promise<void> {\n    if (this._state.phase !== 'stopped') {\n      this._log.debug(`app already ${this._state.phase}`);\n      return;\n    }\n\n    this._log.debug('app starting');\n    this._state = { phase: 'starting' };\n\n    await app.initialize();\n\n    let msalInstance = this.options.msalOptions?.msalInstance;\n    if (!msalInstance) {\n      const msalConfig =\n        this.options.msalOptions?.configuration ??\n        buildMsalConfig(this.clientId, this._log);\n      msalInstance = await createNestablePublicClientApplication(\n        msalConfig\n      );\n    }\n\n    this._state = { phase: 'started', msalInstance, startedAt: new Date() };\n\n    // pre-warm consent for the specified scopes\n    if (this.options.msalOptions?.prewarmScopes !== false) {\n      const scopes = this.options.msalOptions?.prewarmScopes ?? ['.default'];\n      this._log.debug(`prewarming consent for scopes: ${scopes.join(', ')}`);\n      await this.ensureConsentForScopes(scopes);\n    }\n\n    this._log.debug('app started');\n  }\n\n  /**\n   * Execute a server-side function\n   * @param name The unique function name\n   * @param data The data to send\n   * @param options Options\n   * @param options.msalTokenRequest Optional MSAL token request.\n   * If omitted, a default token request is used.\n   * @param options.requestHeaders Optional additional request headers.\n   * @returns The function response\n   */\n  async exec<T = unknown>(\n    name: string,\n    data?: unknown,\n    options?: ExecOptions\n  ): Promise<T> {\n    const { msalInstance } = this.appStateGuard();\n    const context = await app.getContext();\n\n    const remoteAppResource =\n      this.options.remoteApiOptions?.remoteAppResource ??\n      `api://${this.clientId}`;\n    const accessToken = await acquireMsalAccessToken(\n      msalInstance,\n      options?.msalTokenRequest ??\n        getStandardExecSilentRequest(remoteAppResource, options?.permission),\n      this._log\n    );\n\n    const res = await this.http.post<T>(`/api/functions/${name}`, data, {\n      headers: {\n        authorization: `Bearer ${accessToken}`,\n        'x-teams-app-session-id': context.app.sessionId,\n        'x-teams-channel-id': context.channel?.id,\n        'x-teams-chat-id': context.chat?.id,\n        'x-teams-meeting-id': context.meeting?.id,\n        'x-teams-message-id': context.app.parentMessageId || undefined,\n        'x-teams-page-id': context.page.id || undefined,\n        'x-teams-sub-page-id': context.page.subPageId || undefined,\n        'x-teams-team-id': context.team?.internalId,\n        ...(options?.requestHeaders ?? {}),\n      },\n    });\n\n    return res.data;\n  }\n\n  /**\n   * Tests whether the user has consented to the specified scopes without prompting the user for consent.\n   * @param scopes The scopes to check consent for.The scopes should be for a single resource, and they\n   * should not mix the .default scope with named scopes.\n   * @returns A promise that resolves to a boolean indicating whether the user has consented to the scopes.\n   */\n  async hasConsentForScopes(scopes: string[]): Promise<boolean> {\n    const { msalInstance } = this.appStateGuard();\n\n    return await hasConsentForScopes(msalInstance, scopes, this.log);\n  }\n\n  /**\n   * Tests whether the user has consented to the specified scopes, and prompts them if not. This is useful for ensuring\n   * that the user has consented to the required scopes before calling a graph API or other resource.\n   * @param scopes - The scopes to prewarm consent for. The scopes should be for a single resource, and they\n   * should not mix the .default scope with named scopes.\n   * @returns A value indicating whether consent has been acquired for the specified scopes.\n   */\n  async ensureConsentForScopes(scopes: string[]): Promise<boolean> {\n    const { msalInstance } = this.appStateGuard();\n\n    try {\n      const token = await acquireMsalAccessToken(\n        msalInstance,\n        { scopes },\n        this.log\n      );\n      return !!token;\n    } catch (ex) {\n      return false;\n    }\n  }\n\n  private appStateGuard(): AppState & { phase: 'started' } {\n    if (this._state.phase !== 'started') {\n      throw new Error('App not started');\n    }\n    return this._state;\n  }\n}\n"]}

package/dist/app.mjs

@@ -1,9 +1,8 @@
-import * as msal from '@azure/msal-browser';
-import * as teamsJs from '@microsoft/teams-js';
-import * as http from '@microsoft/teams.common/http';
-import { ConsoleLogger } from '@microsoft/teams.common/logging';
-import { buildGraphClient } from './graph-utils';
-import { buildMsalConfig, acquireMsalAccessToken, getStandardExecSilentRequest, hasConsentForScopes } from './msal-utils';
+import { createNestablePublicClientApplication } from '@azure/msal-browser';
+import { app } from '@microsoft/teams-js';
+import { ConsoleLogger, Client } from '@microsoft/teams.common';
+import { buildGraphClient } from './graph-utils.mjs';
+import { buildMsalConfig, acquireMsalAccessToken, getStandardExecSilentRequest, hasConsentForScopes } from './msal-utils.mjs';
 
 class App {
   options;
@@ -35,7 +34,7 @@ class App {
     this.clientId = clientId;
     this.options = options;
     this._log = options?.logger || new ConsoleLogger("@teams/client");
-    this.http = new http.Client({
+    this.http = new Client({
       baseUrl: options?.remoteApiOptions?.baseUrl
     });
     this.graph = buildGraphClient(() => this.appStateGuard(), this._log);
@@ -52,11 +51,11 @@ class App {
     }
     this._log.debug("app starting");
     this._state = { phase: "starting" };
-    await teamsJs.app.initialize();
+    await app.initialize();
     let msalInstance = this.options.msalOptions?.msalInstance;
     if (!msalInstance) {
       const msalConfig = this.options.msalOptions?.configuration ?? buildMsalConfig(this.clientId, this._log);
-      msalInstance = await msal.createNestablePublicClientApplication(
+      msalInstance = await createNestablePublicClientApplication(
         msalConfig
       );
     }
@@ -80,7 +79,7 @@ class App {
    */
   async exec(name, data, options) {
     const { msalInstance } = this.appStateGuard();
-    const context = await teamsJs.app.getContext();
+    const context = await app.getContext();
     const remoteAppResource = this.options.remoteApiOptions?.remoteAppResource ?? `api://${this.clientId}`;
     const accessToken = await acquireMsalAccessToken(
       msalInstance,

package/dist/app.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/app.ts"],"names":[],"mappings":";;;;;;;AA4GO,MAAM,GAAA,CAAI;AAAA,EACN,OAAA;AAAA,EACA,IAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA;AAAA,EACC,MAAA,GAAmB,EAAE,KAAA,EAAO,SAAA,EAAU;AAAA;AAAA;AAAA;AAAA,EAKhD,IAAI,GAAA,GAAM;AACR,IAAA,OAAO,IAAA,CAAK,IAAA;AAAA,EACd;AAAA,EACU,IAAA;AAAA;AAAA;AAAA;AAAA,EAKV,IAAI,SAAA,GAAY;AACd,IAAA,OAAO,KAAK,MAAA,EAAQ,SAAA;AAAA,EACtB;AAAA;AAAA,EAGA,IAAI,YAAA,GAAe;AACjB,IAAA,OAAO,KAAK,MAAA,CAAO,YAAA;AAAA,EACrB;AAAA,EAEA,WAAA,CAAY,QAAA,EAAkB,OAAA,GAAsB,EAAC,EAAG;AACtD,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAI,MAAM,oBAAoB,CAAA;AAAA,IACtC;AAEA,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAChB,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AACf,IAAA,IAAA,CAAK,IAAA,GAAO,OAAA,EAAS,MAAA,IAAU,IAAI,cAAc,eAAe,CAAA;AAChE,IAAA,IAAA,CAAK,IAAA,GAAO,IAAI,IAAA,CAAK,MAAA,CAAO;AAAA,MAC1B,OAAA,EAAS,SAAS,gBAAA,EAAkB;AAAA,KACrC,CAAA;AACD,IAAA,IAAA,CAAK,QAAQ,gBAAA,CAAiB,MAAM,KAAK,aAAA,EAAc,EAAG,KAAK,IAAI,CAAA;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,KAAA,KAAU,SAAA,EAAW;AACnC,MAAA,IAAA,CAAK,KAAK,KAAA,CAAM,CAAA,YAAA,EAAe,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA,CAAE,CAAA;AAClD,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,IAAA,CAAK,MAAM,cAAc,CAAA;AAC9B,IAAA,IAAA,CAAK,MAAA,GAAS,EAAE,KAAA,EAAO,UAAA,EAAW;AAElC,IAAA,MAAM,OAAA,CAAQ,IAAI,UAAA,EAAW;AAE7B,IAAA,IAAI,YAAA,GAAe,IAAA,CAAK,OAAA,CAAQ,WAAA,EAAa,YAAA;AAC7C,IAAA,IAAI,CAAC,YAAA,EAAc;AACjB,MAAA,MAAM,UAAA,GACJ,KAAK,OAAA,CAAQ,WAAA,EAAa,iBAC1B,eAAA,CAAgB,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,IAAI,CAAA;AAC1C,MAAA,YAAA,GAAe,MAAM,IAAA,CAAK,qCAAA;AAAA,QACxB;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,MAAA,GAAS,EAAE,KAAA,EAAO,SAAA,EAAW,cAAc,SAAA,kBAAW,IAAI,MAAK,EAAE;AAGtE,IAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,WAAA,EAAa,aAAA,KAAkB,KAAA,EAAO;AACrD,MAAA,MAAM,SAAS,IAAA,CAAK,OAAA,CAAQ,WAAA,EAAa,aAAA,IAAiB,CAAC,UAAU,CAAA;AACrE,MAAA,IAAA,CAAK,KAAK,KAAA,CAAM,CAAA,+BAAA,EAAkC,OAAO,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AACrE,MAAA,MAAM,IAAA,CAAK,uBAAuB,MAAM,CAAA;AAAA,IAC1C;AAEA,IAAA,IAAA,CAAK,IAAA,CAAK,MAAM,aAAa,CAAA;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,IAAA,CACJ,IAAA,EACA,IAAA,EACA,OAAA,EACY;AACZ,IAAA,MAAM,EAAE,YAAA,EAAa,GAAI,IAAA,CAAK,aAAA,EAAc;AAC5C,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,GAAA,CAAI,UAAA,EAAW;AAE7C,IAAA,MAAM,oBACJ,IAAA,CAAK,OAAA,CAAQ,kBAAkB,iBAAA,IAC/B,CAAA,MAAA,EAAS,KAAK,QAAQ,CAAA,CAAA;AACxB,IAAA,MAAM,cAAc,MAAM,sBAAA;AAAA,MACxB,YAAA;AAAA,MACA,OAAA,EAAS,gBAAA,IACP,4BAAA,CAA6B,iBAAA,EAAmB,SAAS,UAAU,CAAA;AAAA,MACrE,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,IAAA,CAAK,KAAQ,CAAA,eAAA,EAAkB,IAAI,IAAI,IAAA,EAAM;AAAA,MAClE,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,UAAU,WAAW,CAAA,CAAA;AAAA,QACpC,wBAAA,EAA0B,QAAQ,GAAA,CAAI,SAAA;AAAA,QACtC,oBAAA,EAAsB,QAAQ,OAAA,EAAS,EAAA;AAAA,QACvC,iBAAA,EAAmB,QAAQ,IAAA,EAAM,EAAA;AAAA,QACjC,oBAAA,EAAsB,QAAQ,OAAA,EAAS,EAAA;AAAA,QACvC,oBAAA,EAAsB,OAAA,CAAQ,GAAA,CAAI,eAAA,IAAmB,MAAA;AAAA,QACrD,iBAAA,EAAmB,OAAA,CAAQ,IAAA,CAAK,EAAA,IAAM,MAAA;AAAA,QACtC,qBAAA,EAAuB,OAAA,CAAQ,IAAA,CAAK,SAAA,IAAa,MAAA;AAAA,QACjD,iBAAA,EAAmB,QAAQ,IAAA,EAAM,UAAA;AAAA,QACjC,GAAI,OAAA,EAAS,cAAA,IAAkB;AAAC;AAClC,KACD,CAAA;AAED,IAAA,OAAO,GAAA,CAAI,IAAA;AAAA,EACb;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,oBAAoB,MAAA,EAAoC;AAC5D,IAAA,MAAM,EAAE,YAAA,EAAa,GAAI,IAAA,CAAK,aAAA,EAAc;AAE5C,IAAA,OAAO,MAAM,mBAAA,CAAoB,YAAA,EAAc,MAAA,EAAQ,KAAK,GAAG,CAAA;AAAA,EACjE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,uBAAuB,MAAA,EAAoC;AAC/D,IAAA,MAAM,EAAE,YAAA,EAAa,GAAI,IAAA,CAAK,aAAA,EAAc;AAE5C,IAAA,IAAI;AACF,MAAA,MAAM,QAAQ,MAAM,sBAAA;AAAA,QAClB,YAAA;AAAA,QACA,EAAE,MAAA,EAAO;AAAA,QACT,IAAA,CAAK;AAAA,OACP;AACA,MAAA,OAAO,CAAC,CAAC,KAAA;AAAA,IACX,SAAS,EAAA,EAAI;AACX,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEQ,aAAA,GAAiD;AACvD,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,KAAA,KAAU,SAAA,EAAW;AACnC,MAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AAAA,IACnC;AACA,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AACF","file":"app.mjs","sourcesContent":["import * as msal from '@azure/msal-browser';\n\nimport * as teamsJs from '@microsoft/teams-js';\nimport * as http from '@microsoft/teams.common/http';\nimport { ILogger, ConsoleLogger } from '@microsoft/teams.common/logging';\nimport * as graph from '@microsoft/teams.graph';\n\nimport { buildGraphClient } from './graph-utils';\nimport {\n  acquireMsalAccessToken,\n  buildMsalConfig,\n  getStandardExecSilentRequest,\n  hasConsentForScopes,\n} from './msal-utils';\n\n/**\n * Options to control how MSAL is initialized and used.\n */\nexport type MsalOptions = (\n  | {\n      /**\n       * MSAL instance to use when making authenticated function calls to remote endpoints.\n       * This is useful if you want to use a custom MSAL instance or if you want to share the\n       * same MSAL instance across multiple apps.\n       */\n      readonly msalInstance?: msal.IPublicClientApplication;\n      readonly configuration?: never;\n    }\n  | {\n      readonly msalInstance?: never;\n      /**\n       * MSAL configuration to use when constructing an MSAL instance used\n       * to make authenticated function calls to remote endpoints. */\n      readonly configuration?: msal.Configuration;\n    }\n) & {\n  /**\n   * Options to control scope consent pre-warming. If explicitly set to false, no pre-warming is performed.\n   * If no value is provided, the default scope (i.e. \".default\") is pre-warmed. If a set of scopes is\n   * provided, the specified scopes are pre-warmed. The scopes should be for a single resource, and they\n   * should not mix the .default scope with named scopes.\n   */\n  readonly prewarmScopes?: false | string[];\n};\n\nexport type RemoteApiOptions = {\n  /**\n   * The remote API base URL. If omitted, it's assumed that the remote API is hosted in the same domain as the app.\n   */\n  readonly baseUrl?: string;\n\n  /**\n   * The default resource name when building a token request for the Entra token to include when invoking\n   * a remote function. This is useful when the API is hosted in an different AAD app from\n   * the caller and is typically in the format 'api://<remoteAppClientId>'.\n   * When invoking @see exec with default options or a permission name,\n   * this value is used to build a token request in the format of '<remoteAppResource>/<permission>'.\n   * If omitted, it's assumed that the API is hosted in the same AAD app as the caller, and the\n   * token request is made for 'api://<clientId>/permission'.\n   */\n  readonly remoteAppResource?: string;\n};\n\nexport type AppOptions = {\n  /**\n   * Logger instance to use.\n   */\n  readonly logger?: ILogger;\n\n  /**\n   * Options to control how MSAL is initialized and used.\n   */\n  readonly msalOptions?: MsalOptions;\n\n  /** Options to control how remote APIs are invoked. */\n  readonly remoteApiOptions?: RemoteApiOptions;\n};\n\ntype AppState =\n  | {\n      phase: 'stopped' | 'starting';\n      startedAt?: never;\n      msalInstance?: never;\n    }\n  | {\n      phase: 'started';\n      startedAt: Date;\n      msalInstance: msal.IPublicClientApplication;\n    };\n\n/**\n * ExecOptions is used to specify options for the exec method.\n */\nexport type ExecOptions = (\n  | {\n      readonly msalTokenRequest?: msal.SilentRequest;\n      readonly permission?: never;\n    }\n  | { readonly msalTokenRequest?: never; readonly permission?: string }\n) & {\n  readonly requestHeaders?: Record<string, string>;\n};\n\n/**\n * The main entry point for this library. This class streamlines Microsoft Teams app development\n * by simplifying the process of managing authentication, interacting with Microsoft Graph APIs,\n * and executing server-side functions.\n */\nexport class App {\n  readonly options: AppOptions;\n  readonly http: http.Client;\n  readonly graph: graph.Client;\n  readonly clientId: string;\n  protected _state: AppState = { phase: 'stopped' };\n\n  /**\n   * The apps logger\n   */\n  get log() {\n    return this._log;\n  }\n  protected _log: ILogger;\n\n  /**\n   * The date/time when the app was successfully started.\n   */\n  get startedAt() {\n    return this._state?.startedAt;\n  }\n\n  /** The msal instance used in this app. undefined until the app is started. */\n  get msalInstance() {\n    return this._state.msalInstance;\n  }\n\n  constructor(clientId: string, options: AppOptions = {}) {\n    if (!clientId) {\n      throw new Error('Invalid client ID.');\n    }\n\n    this.clientId = clientId;\n    this.options = options;\n    this._log = options?.logger || new ConsoleLogger('@teams/client');\n    this.http = new http.Client({\n      baseUrl: options?.remoteApiOptions?.baseUrl,\n    });\n    this.graph = buildGraphClient(() => this.appStateGuard(), this._log);\n  }\n\n  /**\n   * Starts the library and initializes the dependent teams-js and MSAL libraries.\n   * @returns A promise that will be fulfilled when the app has started, or\n   *          rejected if the initialization fails or times out.\n   */\n  async start(): Promise<void> {\n    if (this._state.phase !== 'stopped') {\n      this._log.debug(`app already ${this._state.phase}`);\n      return;\n    }\n\n    this._log.debug('app starting');\n    this._state = { phase: 'starting' };\n\n    await teamsJs.app.initialize();\n\n    let msalInstance = this.options.msalOptions?.msalInstance;\n    if (!msalInstance) {\n      const msalConfig =\n        this.options.msalOptions?.configuration ??\n        buildMsalConfig(this.clientId, this._log);\n      msalInstance = await msal.createNestablePublicClientApplication(\n        msalConfig\n      );\n    }\n\n    this._state = { phase: 'started', msalInstance, startedAt: new Date() };\n\n    // pre-warm consent for the specified scopes\n    if (this.options.msalOptions?.prewarmScopes !== false) {\n      const scopes = this.options.msalOptions?.prewarmScopes ?? ['.default'];\n      this._log.debug(`prewarming consent for scopes: ${scopes.join(', ')}`);\n      await this.ensureConsentForScopes(scopes);\n    }\n\n    this._log.debug('app started');\n  }\n\n  /**\n   * Execute a server-side function\n   * @param name The unique function name\n   * @param data The data to send\n   * @param options Options\n   * @param options.msalTokenRequest Optional MSAL token request.\n   * If omitted, a default token request is used.\n   * @param options.requestHeaders Optional additional request headers.\n   * @returns The function response\n   */\n  async exec<T = unknown>(\n    name: string,\n    data?: unknown,\n    options?: ExecOptions\n  ): Promise<T> {\n    const { msalInstance } = this.appStateGuard();\n    const context = await teamsJs.app.getContext();\n\n    const remoteAppResource =\n      this.options.remoteApiOptions?.remoteAppResource ??\n      `api://${this.clientId}`;\n    const accessToken = await acquireMsalAccessToken(\n      msalInstance,\n      options?.msalTokenRequest ??\n        getStandardExecSilentRequest(remoteAppResource, options?.permission),\n      this._log\n    );\n\n    const res = await this.http.post<T>(`/api/functions/${name}`, data, {\n      headers: {\n        authorization: `Bearer ${accessToken}`,\n        'x-teams-app-session-id': context.app.sessionId,\n        'x-teams-channel-id': context.channel?.id,\n        'x-teams-chat-id': context.chat?.id,\n        'x-teams-meeting-id': context.meeting?.id,\n        'x-teams-message-id': context.app.parentMessageId || undefined,\n        'x-teams-page-id': context.page.id || undefined,\n        'x-teams-sub-page-id': context.page.subPageId || undefined,\n        'x-teams-team-id': context.team?.internalId,\n        ...(options?.requestHeaders ?? {}),\n      },\n    });\n\n    return res.data;\n  }\n\n  /**\n   * Tests whether the user has consented to the specified scopes without prompting the user for consent.\n   * @param scopes The scopes to check consent for.The scopes should be for a single resource, and they\n   * should not mix the .default scope with named scopes.\n   * @returns A promise that resolves to a boolean indicating whether the user has consented to the scopes.\n   */\n  async hasConsentForScopes(scopes: string[]): Promise<boolean> {\n    const { msalInstance } = this.appStateGuard();\n\n    return await hasConsentForScopes(msalInstance, scopes, this.log);\n  }\n\n  /**\n   * Tests whether the user has consented to the specified scopes, and prompts them if not. This is useful for ensuring\n   * that the user has consented to the required scopes before calling a graph API or other resource.\n   * @param scopes - The scopes to prewarm consent for. The scopes should be for a single resource, and they\n   * should not mix the .default scope with named scopes.\n   * @returns A value indicating whether consent has been acquired for the specified scopes.\n   */\n  async ensureConsentForScopes(scopes: string[]): Promise<boolean> {\n    const { msalInstance } = this.appStateGuard();\n\n    try {\n      const token = await acquireMsalAccessToken(\n        msalInstance,\n        { scopes },\n        this.log\n      );\n      return !!token;\n    } catch (ex) {\n      return false;\n    }\n  }\n\n  private appStateGuard(): AppState & { phase: 'started' } {\n    if (this._state.phase !== 'started') {\n      throw new Error('App not started');\n    }\n    return this._state;\n  }\n}\n"]}
+{"version":3,"sources":["../src/app.ts"],"names":["HttpClient"],"mappings":";;;;;;AAgHO,MAAM,GAAA,CAAI;AAAA,EACN,OAAA;AAAA,EACA,IAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA;AAAA,EACC,MAAA,GAAmB,EAAE,KAAA,EAAO,SAAA,EAAU;AAAA;AAAA;AAAA;AAAA,EAKhD,IAAI,GAAA,GAAM;AACR,IAAA,OAAO,IAAA,CAAK,IAAA;AAAA,EACd;AAAA,EACU,IAAA;AAAA;AAAA;AAAA;AAAA,EAKV,IAAI,SAAA,GAAY;AACd,IAAA,OAAO,KAAK,MAAA,EAAQ,SAAA;AAAA,EACtB;AAAA;AAAA,EAGA,IAAI,YAAA,GAAe;AACjB,IAAA,OAAO,KAAK,MAAA,CAAO,YAAA;AAAA,EACrB;AAAA,EAEA,WAAA,CAAY,QAAA,EAAkB,OAAA,GAAsB,EAAC,EAAG;AACtD,IAAA,IAAI,CAAC,QAAA,EAAU;AACb,MAAA,MAAM,IAAI,MAAM,oBAAoB,CAAA;AAAA,IACtC;AAEA,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAChB,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AACf,IAAA,IAAA,CAAK,IAAA,GAAO,OAAA,EAAS,MAAA,IAAU,IAAI,cAAc,eAAe,CAAA;AAChE,IAAA,IAAA,CAAK,IAAA,GAAO,IAAIA,MAAA,CAAW;AAAA,MACzB,OAAA,EAAS,SAAS,gBAAA,EAAkB;AAAA,KACrC,CAAA;AACD,IAAA,IAAA,CAAK,QAAQ,gBAAA,CAAiB,MAAM,KAAK,aAAA,EAAc,EAAG,KAAK,IAAI,CAAA;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,KAAA,KAAU,SAAA,EAAW;AACnC,MAAA,IAAA,CAAK,KAAK,KAAA,CAAM,CAAA,YAAA,EAAe,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA,CAAE,CAAA;AAClD,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,IAAA,CAAK,MAAM,cAAc,CAAA;AAC9B,IAAA,IAAA,CAAK,MAAA,GAAS,EAAE,KAAA,EAAO,UAAA,EAAW;AAElC,IAAA,MAAM,IAAI,UAAA,EAAW;AAErB,IAAA,IAAI,YAAA,GAAe,IAAA,CAAK,OAAA,CAAQ,WAAA,EAAa,YAAA;AAC7C,IAAA,IAAI,CAAC,YAAA,EAAc;AACjB,MAAA,MAAM,UAAA,GACJ,KAAK,OAAA,CAAQ,WAAA,EAAa,iBAC1B,eAAA,CAAgB,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,IAAI,CAAA;AAC1C,MAAA,YAAA,GAAe,MAAM,qCAAA;AAAA,QACnB;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,MAAA,GAAS,EAAE,KAAA,EAAO,SAAA,EAAW,cAAc,SAAA,kBAAW,IAAI,MAAK,EAAE;AAGtE,IAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,WAAA,EAAa,aAAA,KAAkB,KAAA,EAAO;AACrD,MAAA,MAAM,SAAS,IAAA,CAAK,OAAA,CAAQ,WAAA,EAAa,aAAA,IAAiB,CAAC,UAAU,CAAA;AACrE,MAAA,IAAA,CAAK,KAAK,KAAA,CAAM,CAAA,+BAAA,EAAkC,OAAO,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AACrE,MAAA,MAAM,IAAA,CAAK,uBAAuB,MAAM,CAAA;AAAA,IAC1C;AAEA,IAAA,IAAA,CAAK,IAAA,CAAK,MAAM,aAAa,CAAA;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,IAAA,CACJ,IAAA,EACA,IAAA,EACA,OAAA,EACY;AACZ,IAAA,MAAM,EAAE,YAAA,EAAa,GAAI,IAAA,CAAK,aAAA,EAAc;AAC5C,IAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,UAAA,EAAW;AAErC,IAAA,MAAM,oBACJ,IAAA,CAAK,OAAA,CAAQ,kBAAkB,iBAAA,IAC/B,CAAA,MAAA,EAAS,KAAK,QAAQ,CAAA,CAAA;AACxB,IAAA,MAAM,cAAc,MAAM,sBAAA;AAAA,MACxB,YAAA;AAAA,MACA,OAAA,EAAS,gBAAA,IACP,4BAAA,CAA6B,iBAAA,EAAmB,SAAS,UAAU,CAAA;AAAA,MACrE,IAAA,CAAK;AAAA,KACP;AAEA,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,IAAA,CAAK,KAAQ,CAAA,eAAA,EAAkB,IAAI,IAAI,IAAA,EAAM;AAAA,MAClE,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,UAAU,WAAW,CAAA,CAAA;AAAA,QACpC,wBAAA,EAA0B,QAAQ,GAAA,CAAI,SAAA;AAAA,QACtC,oBAAA,EAAsB,QAAQ,OAAA,EAAS,EAAA;AAAA,QACvC,iBAAA,EAAmB,QAAQ,IAAA,EAAM,EAAA;AAAA,QACjC,oBAAA,EAAsB,QAAQ,OAAA,EAAS,EAAA;AAAA,QACvC,oBAAA,EAAsB,OAAA,CAAQ,GAAA,CAAI,eAAA,IAAmB,MAAA;AAAA,QACrD,iBAAA,EAAmB,OAAA,CAAQ,IAAA,CAAK,EAAA,IAAM,MAAA;AAAA,QACtC,qBAAA,EAAuB,OAAA,CAAQ,IAAA,CAAK,SAAA,IAAa,MAAA;AAAA,QACjD,iBAAA,EAAmB,QAAQ,IAAA,EAAM,UAAA;AAAA,QACjC,GAAI,OAAA,EAAS,cAAA,IAAkB;AAAC;AAClC,KACD,CAAA;AAED,IAAA,OAAO,GAAA,CAAI,IAAA;AAAA,EACb;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,oBAAoB,MAAA,EAAoC;AAC5D,IAAA,MAAM,EAAE,YAAA,EAAa,GAAI,IAAA,CAAK,aAAA,EAAc;AAE5C,IAAA,OAAO,MAAM,mBAAA,CAAoB,YAAA,EAAc,MAAA,EAAQ,KAAK,GAAG,CAAA;AAAA,EACjE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,uBAAuB,MAAA,EAAoC;AAC/D,IAAA,MAAM,EAAE,YAAA,EAAa,GAAI,IAAA,CAAK,aAAA,EAAc;AAE5C,IAAA,IAAI;AACF,MAAA,MAAM,QAAQ,MAAM,sBAAA;AAAA,QAClB,YAAA;AAAA,QACA,EAAE,MAAA,EAAO;AAAA,QACT,IAAA,CAAK;AAAA,OACP;AACA,MAAA,OAAO,CAAC,CAAC,KAAA;AAAA,IACX,SAAS,EAAA,EAAI;AACX,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEQ,aAAA,GAAiD;AACvD,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,KAAA,KAAU,SAAA,EAAW;AACnC,MAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AAAA,IACnC;AACA,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AACF","file":"app.mjs","sourcesContent":["import {\n  createNestablePublicClientApplication,\n  type Configuration,\n  type IPublicClientApplication,\n  type SilentRequest,\n} from '@azure/msal-browser';\n\nimport { app } from '@microsoft/teams-js';\nimport { ConsoleLogger, Client as HttpClient, ILogger } from '@microsoft/teams.common';\nimport { Client as GraphClient } from '@microsoft/teams.graph';\n\nimport { buildGraphClient } from './graph-utils';\nimport {\n  acquireMsalAccessToken,\n  buildMsalConfig,\n  getStandardExecSilentRequest,\n  hasConsentForScopes,\n} from './msal-utils';\n\n/**\n * Options to control how MSAL is initialized and used.\n */\nexport type MsalOptions = (\n  | {\n      /**\n       * MSAL instance to use when making authenticated function calls to remote endpoints.\n       * This is useful if you want to use a custom MSAL instance or if you want to share the\n       * same MSAL instance across multiple apps.\n       */\n      readonly msalInstance?: IPublicClientApplication;\n      readonly configuration?: never;\n    }\n  | {\n      readonly msalInstance?: never;\n      /**\n       * MSAL configuration to use when constructing an MSAL instance used\n       * to make authenticated function calls to remote endpoints. */\n      readonly configuration?: Configuration;\n    }\n) & {\n  /**\n   * Options to control scope consent pre-warming. If explicitly set to false, no pre-warming is performed.\n   * If no value is provided, the default scope (i.e. \".default\") is pre-warmed. If a set of scopes is\n   * provided, the specified scopes are pre-warmed. The scopes should be for a single resource, and they\n   * should not mix the .default scope with named scopes.\n   */\n  readonly prewarmScopes?: false | string[];\n};\n\nexport type RemoteApiOptions = {\n  /**\n   * The remote API base URL. If omitted, it's assumed that the remote API is hosted in the same domain as the app.\n   */\n  readonly baseUrl?: string;\n\n  /**\n   * The default resource name when building a token request for the Entra token to include when invoking\n   * a remote function. This is useful when the API is hosted in an different AAD app from\n   * the caller and is typically in the format 'api://<remoteAppClientId>'.\n   * When invoking @see exec with default options or a permission name,\n   * this value is used to build a token request in the format of '<remoteAppResource>/<permission>'.\n   * If omitted, it's assumed that the API is hosted in the same AAD app as the caller, and the\n   * token request is made for 'api://<clientId>/permission'.\n   */\n  readonly remoteAppResource?: string;\n};\n\nexport type AppOptions = {\n  /**\n   * Logger instance to use.\n   */\n  readonly logger?: ILogger;\n\n  /**\n   * Options to control how MSAL is initialized and used.\n   */\n  readonly msalOptions?: MsalOptions;\n\n  /** Options to control how remote APIs are invoked. */\n  readonly remoteApiOptions?: RemoteApiOptions;\n};\n\ntype AppState =\n  | {\n      phase: 'stopped' | 'starting';\n      startedAt?: never;\n      msalInstance?: never;\n    }\n  | {\n      phase: 'started';\n      startedAt: Date;\n      msalInstance: IPublicClientApplication;\n    };\n\n/**\n * ExecOptions is used to specify options for the exec method.\n */\nexport type ExecOptions = (\n  | {\n      readonly msalTokenRequest?: SilentRequest;\n      readonly permission?: never;\n    }\n  | { readonly msalTokenRequest?: never; readonly permission?: string }\n) & {\n  readonly requestHeaders?: Record<string, string>;\n};\n\n/**\n * The main entry point for this library. This class streamlines Microsoft Teams app development\n * by simplifying the process of managing authentication, interacting with Microsoft Graph APIs,\n * and executing server-side functions.\n */\nexport class App {\n  readonly options: AppOptions;\n  readonly http: HttpClient;\n  readonly graph: GraphClient;\n  readonly clientId: string;\n  protected _state: AppState = { phase: 'stopped' };\n\n  /**\n   * The apps logger\n   */\n  get log() {\n    return this._log;\n  }\n  protected _log: ILogger;\n\n  /**\n   * The date/time when the app was successfully started.\n   */\n  get startedAt() {\n    return this._state?.startedAt;\n  }\n\n  /** The msal instance used in this app. undefined until the app is started. */\n  get msalInstance() {\n    return this._state.msalInstance;\n  }\n\n  constructor(clientId: string, options: AppOptions = {}) {\n    if (!clientId) {\n      throw new Error('Invalid client ID.');\n    }\n\n    this.clientId = clientId;\n    this.options = options;\n    this._log = options?.logger || new ConsoleLogger('@teams/client');\n    this.http = new HttpClient({\n      baseUrl: options?.remoteApiOptions?.baseUrl,\n    });\n    this.graph = buildGraphClient(() => this.appStateGuard(), this._log);\n  }\n\n  /**\n   * Starts the library and initializes the dependent teams-js and MSAL libraries.\n   * @returns A promise that will be fulfilled when the app has started, or\n   *          rejected if the initialization fails or times out.\n   */\n  async start(): Promise<void> {\n    if (this._state.phase !== 'stopped') {\n      this._log.debug(`app already ${this._state.phase}`);\n      return;\n    }\n\n    this._log.debug('app starting');\n    this._state = { phase: 'starting' };\n\n    await app.initialize();\n\n    let msalInstance = this.options.msalOptions?.msalInstance;\n    if (!msalInstance) {\n      const msalConfig =\n        this.options.msalOptions?.configuration ??\n        buildMsalConfig(this.clientId, this._log);\n      msalInstance = await createNestablePublicClientApplication(\n        msalConfig\n      );\n    }\n\n    this._state = { phase: 'started', msalInstance, startedAt: new Date() };\n\n    // pre-warm consent for the specified scopes\n    if (this.options.msalOptions?.prewarmScopes !== false) {\n      const scopes = this.options.msalOptions?.prewarmScopes ?? ['.default'];\n      this._log.debug(`prewarming consent for scopes: ${scopes.join(', ')}`);\n      await this.ensureConsentForScopes(scopes);\n    }\n\n    this._log.debug('app started');\n  }\n\n  /**\n   * Execute a server-side function\n   * @param name The unique function name\n   * @param data The data to send\n   * @param options Options\n   * @param options.msalTokenRequest Optional MSAL token request.\n   * If omitted, a default token request is used.\n   * @param options.requestHeaders Optional additional request headers.\n   * @returns The function response\n   */\n  async exec<T = unknown>(\n    name: string,\n    data?: unknown,\n    options?: ExecOptions\n  ): Promise<T> {\n    const { msalInstance } = this.appStateGuard();\n    const context = await app.getContext();\n\n    const remoteAppResource =\n      this.options.remoteApiOptions?.remoteAppResource ??\n      `api://${this.clientId}`;\n    const accessToken = await acquireMsalAccessToken(\n      msalInstance,\n      options?.msalTokenRequest ??\n        getStandardExecSilentRequest(remoteAppResource, options?.permission),\n      this._log\n    );\n\n    const res = await this.http.post<T>(`/api/functions/${name}`, data, {\n      headers: {\n        authorization: `Bearer ${accessToken}`,\n        'x-teams-app-session-id': context.app.sessionId,\n        'x-teams-channel-id': context.channel?.id,\n        'x-teams-chat-id': context.chat?.id,\n        'x-teams-meeting-id': context.meeting?.id,\n        'x-teams-message-id': context.app.parentMessageId || undefined,\n        'x-teams-page-id': context.page.id || undefined,\n        'x-teams-sub-page-id': context.page.subPageId || undefined,\n        'x-teams-team-id': context.team?.internalId,\n        ...(options?.requestHeaders ?? {}),\n      },\n    });\n\n    return res.data;\n  }\n\n  /**\n   * Tests whether the user has consented to the specified scopes without prompting the user for consent.\n   * @param scopes The scopes to check consent for.The scopes should be for a single resource, and they\n   * should not mix the .default scope with named scopes.\n   * @returns A promise that resolves to a boolean indicating whether the user has consented to the scopes.\n   */\n  async hasConsentForScopes(scopes: string[]): Promise<boolean> {\n    const { msalInstance } = this.appStateGuard();\n\n    return await hasConsentForScopes(msalInstance, scopes, this.log);\n  }\n\n  /**\n   * Tests whether the user has consented to the specified scopes, and prompts them if not. This is useful for ensuring\n   * that the user has consented to the required scopes before calling a graph API or other resource.\n   * @param scopes - The scopes to prewarm consent for. The scopes should be for a single resource, and they\n   * should not mix the .default scope with named scopes.\n   * @returns A value indicating whether consent has been acquired for the specified scopes.\n   */\n  async ensureConsentForScopes(scopes: string[]): Promise<boolean> {\n    const { msalInstance } = this.appStateGuard();\n\n    try {\n      const token = await acquireMsalAccessToken(\n        msalInstance,\n        { scopes },\n        this.log\n      );\n      return !!token;\n    } catch (ex) {\n      return false;\n    }\n  }\n\n  private appStateGuard(): AppState & { phase: 'started' } {\n    if (this._state.phase !== 'started') {\n      throw new Error('App not started');\n    }\n    return this._state;\n  }\n}\n"]}

package/dist/graph-utils.d.mts

@@ -1,10 +1,10 @@
-import { ILogger } from '@microsoft/teams.common/logging';
-import * as graph from '@microsoft/teams.graph';
+import { ILogger } from '@microsoft/teams.common';
+import { Client } from '@microsoft/teams.graph';
 import { acquireMsalAccessToken } from './msal-utils.mjs';
 import '@azure/msal-browser';
 
 declare function buildGraphClient(getMsalInstance: () => {
     msalInstance: Parameters<typeof acquireMsalAccessToken>[0];
-}, logger: ILogger): graph.Client;
+}, logger: ILogger): Client;
 
 export { buildGraphClient };

package/dist/graph-utils.d.ts

@@ -1,10 +1,10 @@
-import { ILogger } from '@microsoft/teams.common/logging';
-import * as graph from '@microsoft/teams.graph';
+import { ILogger } from '@microsoft/teams.common';
+import { Client } from '@microsoft/teams.graph';
 import { acquireMsalAccessToken } from './msal-utils.js';
 import '@azure/msal-browser';
 
 declare function buildGraphClient(getMsalInstance: () => {
     msalInstance: Parameters<typeof acquireMsalAccessToken>[0];
-}, logger: ILogger): graph.Client;
+}, logger: ILogger): Client;
 
 export { buildGraphClient };

package/dist/graph-utils.js

@@ -1,30 +1,9 @@
 'use strict';
 
-var http = require('@microsoft/teams.common/http');
-var graph = require('@microsoft/teams.graph');
+var teams_common = require('@microsoft/teams.common');
+var teams_graph = require('@microsoft/teams.graph');
 var msalUtils = require('./msal-utils');
 
-function _interopNamespace(e) {
-  if (e && e.__esModule) return e;
-  var n = Object.create(null);
-  if (e) {
-    Object.keys(e).forEach(function (k) {
-      if (k !== 'default') {
-        var d = Object.getOwnPropertyDescriptor(e, k);
-        Object.defineProperty(n, k, d.get ? d : {
-          enumerable: true,
-          get: function () { return e[k]; }
-        });
-      }
-    });
-  }
-  n.default = e;
-  return Object.freeze(n);
-}
-
-var http__namespace = /*#__PURE__*/_interopNamespace(http);
-var graph__namespace = /*#__PURE__*/_interopNamespace(graph);
-
 function buildGraphClient(getMsalInstance, logger) {
   {
     const graphRequestAccessTokenInterceptor = async (ctx) => {
@@ -37,8 +16,8 @@ function buildGraphClient(getMsalInstance, logger) {
       ctx.config.headers.set("Authorization", `Bearer ${accessToken}`);
       return ctx.config;
     };
-    return new graph__namespace.Client(
-      new http__namespace.Client({
+    return new teams_graph.Client(
+      new teams_common.Client({
         interceptors: [{ request: graphRequestAccessTokenInterceptor }]
       })
     );

package/dist/graph-utils.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/graph-utils.ts"],"names":["acquireMsalAccessToken","graph","http"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAMO,SAAS,gBAAA,CACd,iBACA,MAAA,EACc;AACd,EAAA;AACE,IAAA,MAAM,kCAAA,GAAqC,OAAO,GAAA,KAA6B;AAC7E,MAAA,MAAM,EAAE,YAAA,EAAa,GAAI,eAAA,EAAgB;AAIzC,MAAA,MAAM,cAAc,MAAMA,gCAAA;AAAA,QACxB,YAAA;AAAA,QACA,EAAE,MAAA,EAAQ,CAAC,UAAU,CAAA,EAAE;AAAA,QACvB;AAAA,OACF;AAEA,MAAA,GAAA,CAAI,OAAO,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,WAAW,CAAA,CAAE,CAAA;AAC/D,MAAA,OAAO,GAAA,CAAI,MAAA;AAAA,IACb,CAAA;AAEA,IAAA,OAAO,IAAIC,gBAAA,CAAM,MAAA;AAAA,MACf,IAAIC,gBAAK,MAAA,CAAO;AAAA,QACd,YAAA,EAAc,CAAC,EAAE,OAAA,EAAS,oCAAoC;AAAA,OAC/D;AAAA,KACH;AAAA,EACF;AACF","file":"graph-utils.js","sourcesContent":["import * as http from '@microsoft/teams.common/http';\nimport { ILogger } from '@microsoft/teams.common/logging';\nimport * as graph from '@microsoft/teams.graph';\n\nimport { acquireMsalAccessToken } from './msal-utils';\n\nexport function buildGraphClient(\n  getMsalInstance: () => { msalInstance: Parameters<typeof acquireMsalAccessToken>[0] },\n  logger: ILogger\n): graph.Client {\n  {\n    const graphRequestAccessTokenInterceptor = async (ctx: http.RequestContext) => {\n      const { msalInstance } = getMsalInstance();\n\n      // The developer should already have made sure that the user has consented to the scope\n      // needed for the graph API they're calling, so requesting '.default' should be sufficient.\n      const accessToken = await acquireMsalAccessToken(\n        msalInstance,\n        { scopes: ['.default'] },\n        logger\n      );\n\n      ctx.config.headers.set('Authorization', `Bearer ${accessToken}`);\n      return ctx.config;\n    };\n\n    return new graph.Client(\n      new http.Client({\n        interceptors: [{ request: graphRequestAccessTokenInterceptor }],\n      })\n    );\n  }\n}\n"]}
+{"version":3,"sources":["../src/graph-utils.ts"],"names":["acquireMsalAccessToken","GraphClient","HttpClient"],"mappings":";;;;;;AAKO,SAAS,gBAAA,CACd,iBACA,MAAA,EACa;AACb,EAAA;AACE,IAAA,MAAM,kCAAA,GAAqC,OAAO,GAAA,KAAwB;AACxE,MAAA,MAAM,EAAE,YAAA,EAAa,GAAI,eAAA,EAAgB;AAIzC,MAAA,MAAM,cAAc,MAAMA,gCAAA;AAAA,QACxB,YAAA;AAAA,QACA,EAAE,MAAA,EAAQ,CAAC,UAAU,CAAA,EAAE;AAAA,QACvB;AAAA,OACF;AAEA,MAAA,GAAA,CAAI,OAAO,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,WAAW,CAAA,CAAE,CAAA;AAC/D,MAAA,OAAO,GAAA,CAAI,MAAA;AAAA,IACb,CAAA;AAEA,IAAA,OAAO,IAAIC,kBAAA;AAAA,MACT,IAAIC,mBAAA,CAAW;AAAA,QACb,YAAA,EAAc,CAAC,EAAE,OAAA,EAAS,oCAAoC;AAAA,OAC/D;AAAA,KACH;AAAA,EACF;AACF","file":"graph-utils.js","sourcesContent":["import { Client as HttpClient, ILogger, type RequestContext } from '@microsoft/teams.common';\nimport { Client as GraphClient } from '@microsoft/teams.graph';\n\nimport { acquireMsalAccessToken } from './msal-utils';\n\nexport function buildGraphClient(\n  getMsalInstance: () => { msalInstance: Parameters<typeof acquireMsalAccessToken>[0] },\n  logger: ILogger\n): GraphClient {\n  {\n    const graphRequestAccessTokenInterceptor = async (ctx: RequestContext) => {\n      const { msalInstance } = getMsalInstance();\n\n      // The developer should already have made sure that the user has consented to the scope\n      // needed for the graph API they're calling, so requesting '.default' should be sufficient.\n      const accessToken = await acquireMsalAccessToken(\n        msalInstance,\n        { scopes: ['.default'] },\n        logger\n      );\n\n      ctx.config.headers.set('Authorization', `Bearer ${accessToken}`);\n      return ctx.config;\n    };\n\n    return new GraphClient(\n      new HttpClient({\n        interceptors: [{ request: graphRequestAccessTokenInterceptor }],\n      })\n    );\n  }\n}\n"]}

package/dist/graph-utils.mjs

@@ -1,6 +1,6 @@
-import * as http from '@microsoft/teams.common/http';
-import * as graph from '@microsoft/teams.graph';
-import { acquireMsalAccessToken } from './msal-utils';
+import { Client as Client$1 } from '@microsoft/teams.common';
+import { Client } from '@microsoft/teams.graph';
+import { acquireMsalAccessToken } from './msal-utils.mjs';
 
 function buildGraphClient(getMsalInstance, logger) {
   {
@@ -14,8 +14,8 @@ function buildGraphClient(getMsalInstance, logger) {
       ctx.config.headers.set("Authorization", `Bearer ${accessToken}`);
       return ctx.config;
     };
-    return new graph.Client(
-      new http.Client({
+    return new Client(
+      new Client$1({
         interceptors: [{ request: graphRequestAccessTokenInterceptor }]
       })
     );

package/dist/graph-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/graph-utils.ts"],"names":[],"mappings":";;;;AAMO,SAAS,gBAAA,CACd,iBACA,MAAA,EACc;AACd,EAAA;AACE,IAAA,MAAM,kCAAA,GAAqC,OAAO,GAAA,KAA6B;AAC7E,MAAA,MAAM,EAAE,YAAA,EAAa,GAAI,eAAA,EAAgB;AAIzC,MAAA,MAAM,cAAc,MAAM,sBAAA;AAAA,QACxB,YAAA;AAAA,QACA,EAAE,MAAA,EAAQ,CAAC,UAAU,CAAA,EAAE;AAAA,QACvB;AAAA,OACF;AAEA,MAAA,GAAA,CAAI,OAAO,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,WAAW,CAAA,CAAE,CAAA;AAC/D,MAAA,OAAO,GAAA,CAAI,MAAA;AAAA,IACb,CAAA;AAEA,IAAA,OAAO,IAAI,KAAA,CAAM,MAAA;AAAA,MACf,IAAI,KAAK,MAAA,CAAO;AAAA,QACd,YAAA,EAAc,CAAC,EAAE,OAAA,EAAS,oCAAoC;AAAA,OAC/D;AAAA,KACH;AAAA,EACF;AACF","file":"graph-utils.mjs","sourcesContent":["import * as http from '@microsoft/teams.common/http';\nimport { ILogger } from '@microsoft/teams.common/logging';\nimport * as graph from '@microsoft/teams.graph';\n\nimport { acquireMsalAccessToken } from './msal-utils';\n\nexport function buildGraphClient(\n  getMsalInstance: () => { msalInstance: Parameters<typeof acquireMsalAccessToken>[0] },\n  logger: ILogger\n): graph.Client {\n  {\n    const graphRequestAccessTokenInterceptor = async (ctx: http.RequestContext) => {\n      const { msalInstance } = getMsalInstance();\n\n      // The developer should already have made sure that the user has consented to the scope\n      // needed for the graph API they're calling, so requesting '.default' should be sufficient.\n      const accessToken = await acquireMsalAccessToken(\n        msalInstance,\n        { scopes: ['.default'] },\n        logger\n      );\n\n      ctx.config.headers.set('Authorization', `Bearer ${accessToken}`);\n      return ctx.config;\n    };\n\n    return new graph.Client(\n      new http.Client({\n        interceptors: [{ request: graphRequestAccessTokenInterceptor }],\n      })\n    );\n  }\n}\n"]}
+{"version":3,"sources":["../src/graph-utils.ts"],"names":["GraphClient","HttpClient"],"mappings":";;;;AAKO,SAAS,gBAAA,CACd,iBACA,MAAA,EACa;AACb,EAAA;AACE,IAAA,MAAM,kCAAA,GAAqC,OAAO,GAAA,KAAwB;AACxE,MAAA,MAAM,EAAE,YAAA,EAAa,GAAI,eAAA,EAAgB;AAIzC,MAAA,MAAM,cAAc,MAAM,sBAAA;AAAA,QACxB,YAAA;AAAA,QACA,EAAE,MAAA,EAAQ,CAAC,UAAU,CAAA,EAAE;AAAA,QACvB;AAAA,OACF;AAEA,MAAA,GAAA,CAAI,OAAO,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,WAAW,CAAA,CAAE,CAAA;AAC/D,MAAA,OAAO,GAAA,CAAI,MAAA;AAAA,IACb,CAAA;AAEA,IAAA,OAAO,IAAIA,MAAA;AAAA,MACT,IAAIC,QAAA,CAAW;AAAA,QACb,YAAA,EAAc,CAAC,EAAE,OAAA,EAAS,oCAAoC;AAAA,OAC/D;AAAA,KACH;AAAA,EACF;AACF","file":"graph-utils.mjs","sourcesContent":["import { Client as HttpClient, ILogger, type RequestContext } from '@microsoft/teams.common';\nimport { Client as GraphClient } from '@microsoft/teams.graph';\n\nimport { acquireMsalAccessToken } from './msal-utils';\n\nexport function buildGraphClient(\n  getMsalInstance: () => { msalInstance: Parameters<typeof acquireMsalAccessToken>[0] },\n  logger: ILogger\n): GraphClient {\n  {\n    const graphRequestAccessTokenInterceptor = async (ctx: RequestContext) => {\n      const { msalInstance } = getMsalInstance();\n\n      // The developer should already have made sure that the user has consented to the scope\n      // needed for the graph API they're calling, so requesting '.default' should be sufficient.\n      const accessToken = await acquireMsalAccessToken(\n        msalInstance,\n        { scopes: ['.default'] },\n        logger\n      );\n\n      ctx.config.headers.set('Authorization', `Bearer ${accessToken}`);\n      return ctx.config;\n    };\n\n    return new GraphClient(\n      new HttpClient({\n        interceptors: [{ request: graphRequestAccessTokenInterceptor }],\n      })\n    );\n  }\n}\n"]}

package/dist/index.d.mts

@@ -1,5 +1,4 @@
 export { App, AppOptions, ExecOptions, MsalOptions } from './app.mjs';
 import '@azure/msal-browser';
-import '@microsoft/teams.common/http';
-import '@microsoft/teams.common/logging';
+import '@microsoft/teams.common';
 import '@microsoft/teams.graph';

package/dist/index.d.ts

@@ -1,5 +1,4 @@
 export { App, AppOptions, ExecOptions, MsalOptions } from './app.js';
 import '@azure/msal-browser';
-import '@microsoft/teams.common/http';
-import '@microsoft/teams.common/logging';
+import '@microsoft/teams.common';
 import '@microsoft/teams.graph';

package/dist/index.mjs

@@ -1,3 +1,3 @@
-export { App } from './app';
+export { App } from './app.mjs';
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/dist/msal-utils.d.mts

@@ -1,5 +1,5 @@
-import * as msal from '@azure/msal-browser';
-import { ILogger } from '@microsoft/teams.common/logging';
+import { IPublicClientApplication, SilentRequest, Configuration } from '@azure/msal-browser';
+import { ILogger } from '@microsoft/teams.common';
 
 /**
  * Gets a silent request used to acquire an Entra access token for invoking remote functions on behalf of a user.
@@ -7,7 +7,7 @@ import { ILogger } from '@microsoft/teams.common/logging';
  * @param permission The permission to request. Defaults to 'access_as_user'.
  * @returns
  */
-declare const getStandardExecSilentRequest: (resource: string, permission?: string) => msal.SilentRequest;
+declare const getStandardExecSilentRequest: (resource: string, permission?: string) => SilentRequest;
 /**
  * Builds a default MSAL configuration for the specified client ID.
  * @param clientId The application client ID.
@@ -15,7 +15,7 @@ declare const getStandardExecSilentRequest: (resource: string, permission?: stri
  * @returns A default MSAL configuration object suitable for creating a
  * @see{IPublicClientApplication} instance for a multi-tenant application.
  */
-declare const buildMsalConfig: (clientId: string, logger: ILogger) => msal.Configuration;
+declare const buildMsalConfig: (clientId: string, logger: ILogger) => Configuration;
 /**
  * Acquires an access token using MSAL. It first attempts to acquire the token silently,
  * and if that fails with an InteractionRequiredAuthError, it falls back to acquiring the
@@ -25,7 +25,7 @@ declare const buildMsalConfig: (clientId: string, logger: ILogger) => msal.Confi
  * @param logger The logger instance to use for logging errors.
  * @returns A promise that resolves to the acquired access token.
  */
-declare const acquireMsalAccessToken: (msalInstance: Pick<msal.IPublicClientApplication, "acquireTokenSilent" | "acquireTokenPopup">, request: msal.SilentRequest, logger: ILogger) => Promise<string>;
+declare const acquireMsalAccessToken: (msalInstance: Pick<IPublicClientApplication, "acquireTokenSilent" | "acquireTokenPopup">, request: SilentRequest, logger: ILogger) => Promise<string>;
 /**
  * Tests whether the user has consented to the specified scopes by attempting to acquire a token silently.
  * If the token acquisition is successful, it indicates that the user has consented to the scopes.
@@ -35,6 +35,6 @@ declare const acquireMsalAccessToken: (msalInstance: Pick<msal.IPublicClientAppl
  * @param logger The logger instance to use.
  * @returns A promise that resolves to a boolean indicating whether the user has consented to the scopes.
  */
-declare const hasConsentForScopes: (msalInstance: Pick<msal.IPublicClientApplication, "acquireTokenSilent">, scopes: string[], logger: ILogger) => Promise<boolean>;
+declare const hasConsentForScopes: (msalInstance: Pick<IPublicClientApplication, "acquireTokenSilent">, scopes: string[], logger: ILogger) => Promise<boolean>;
 
 export { acquireMsalAccessToken, buildMsalConfig, getStandardExecSilentRequest, hasConsentForScopes };

package/dist/msal-utils.d.ts

@@ -1,5 +1,5 @@
-import * as msal from '@azure/msal-browser';
-import { ILogger } from '@microsoft/teams.common/logging';
+import { IPublicClientApplication, SilentRequest, Configuration } from '@azure/msal-browser';
+import { ILogger } from '@microsoft/teams.common';
 
 /**
  * Gets a silent request used to acquire an Entra access token for invoking remote functions on behalf of a user.
@@ -7,7 +7,7 @@ import { ILogger } from '@microsoft/teams.common/logging';
  * @param permission The permission to request. Defaults to 'access_as_user'.
  * @returns
  */
-declare const getStandardExecSilentRequest: (resource: string, permission?: string) => msal.SilentRequest;
+declare const getStandardExecSilentRequest: (resource: string, permission?: string) => SilentRequest;
 /**
  * Builds a default MSAL configuration for the specified client ID.
  * @param clientId The application client ID.
@@ -15,7 +15,7 @@ declare const getStandardExecSilentRequest: (resource: string, permission?: stri
  * @returns A default MSAL configuration object suitable for creating a
  * @see{IPublicClientApplication} instance for a multi-tenant application.
  */
-declare const buildMsalConfig: (clientId: string, logger: ILogger) => msal.Configuration;
+declare const buildMsalConfig: (clientId: string, logger: ILogger) => Configuration;
 /**
  * Acquires an access token using MSAL. It first attempts to acquire the token silently,
  * and if that fails with an InteractionRequiredAuthError, it falls back to acquiring the
@@ -25,7 +25,7 @@ declare const buildMsalConfig: (clientId: string, logger: ILogger) => msal.Confi
  * @param logger The logger instance to use for logging errors.
  * @returns A promise that resolves to the acquired access token.
  */
-declare const acquireMsalAccessToken: (msalInstance: Pick<msal.IPublicClientApplication, "acquireTokenSilent" | "acquireTokenPopup">, request: msal.SilentRequest, logger: ILogger) => Promise<string>;
+declare const acquireMsalAccessToken: (msalInstance: Pick<IPublicClientApplication, "acquireTokenSilent" | "acquireTokenPopup">, request: SilentRequest, logger: ILogger) => Promise<string>;
 /**
  * Tests whether the user has consented to the specified scopes by attempting to acquire a token silently.
  * If the token acquisition is successful, it indicates that the user has consented to the scopes.
@@ -35,6 +35,6 @@ declare const acquireMsalAccessToken: (msalInstance: Pick<msal.IPublicClientAppl
  * @param logger The logger instance to use.
  * @returns A promise that resolves to a boolean indicating whether the user has consented to the scopes.
  */
-declare const hasConsentForScopes: (msalInstance: Pick<msal.IPublicClientApplication, "acquireTokenSilent">, scopes: string[], logger: ILogger) => Promise<boolean>;
+declare const hasConsentForScopes: (msalInstance: Pick<IPublicClientApplication, "acquireTokenSilent">, scopes: string[], logger: ILogger) => Promise<boolean>;
 
 export { acquireMsalAccessToken, buildMsalConfig, getStandardExecSilentRequest, hasConsentForScopes };

package/dist/msal-utils.js

@@ -1,26 +1,6 @@
 'use strict';
 
-var msal = require('@azure/msal-browser');
-
-function _interopNamespace(e) {
-  if (e && e.__esModule) return e;
-  var n = Object.create(null);
-  if (e) {
-    Object.keys(e).forEach(function (k) {
-      if (k !== 'default') {
-        var d = Object.getOwnPropertyDescriptor(e, k);
-        Object.defineProperty(n, k, d.get ? d : {
-          enumerable: true,
-          get: function () { return e[k]; }
-        });
-      }
-    });
-  }
-  n.default = e;
-  return Object.freeze(n);
-}
-
-var msal__namespace = /*#__PURE__*/_interopNamespace(msal);
+var msalBrowser = require('@azure/msal-browser');
 
 const getStandardExecSilentRequest = (resource, permission = "access_as_user") => ({
   scopes: [`${resource}/${permission}`]
@@ -38,16 +18,16 @@ const buildMsalConfig = (clientId, logger) => {
         piiLoggingEnabled: false,
         loggerCallback: (level, message) => {
           switch (level) {
-            case msal__namespace.LogLevel.Error:
+            case msalBrowser.LogLevel.Error:
               logger.error(message);
               return;
-            case msal__namespace.LogLevel.Info:
+            case msalBrowser.LogLevel.Info:
               logger.info(message);
               return;
-            case msal__namespace.LogLevel.Verbose:
+            case msalBrowser.LogLevel.Verbose:
               logger.debug(message);
               return;
-            case msal__namespace.LogLevel.Warning:
+            case msalBrowser.LogLevel.Warning:
               logger.warn(message);
               return;
             default:
@@ -63,7 +43,7 @@ const acquireMsalAccessToken = async (msalInstance, request, logger) => {
     const response = await msalInstance.acquireTokenSilent(request);
     return response.accessToken;
   } catch (ex) {
-    const tryAcquireTokenPopup = ex instanceof msal__namespace.InteractionRequiredAuthError;
+    const tryAcquireTokenPopup = ex instanceof msalBrowser.InteractionRequiredAuthError;
     if (!tryAcquireTokenPopup) {
       logger.error("acquireTokenSilent failed", ex);
       throw ex;
@@ -85,7 +65,7 @@ const hasConsentForScopes = async (msalInstance, scopes, logger) => {
     });
     return true;
   } catch (ex) {
-    const acquireTokenPopupNeeded = ex instanceof msal__namespace.InteractionRequiredAuthError;
+    const acquireTokenPopupNeeded = ex instanceof msalBrowser.InteractionRequiredAuthError;
     const logLevel = acquireTokenPopupNeeded ? "debug" : "error";
     logger.log(logLevel, "hasConsentForScopes failed", ex);
     return false;

package/dist/msal-utils.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/msal-utils.ts"],"names":["msal"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAUO,MAAM,4BAAA,GAA+B,CAC1C,QAAA,EACA,UAAA,GAAa,gBAAA,MACW;AAAA,EACxB,QAAQ,CAAC,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,UAAU,CAAA,CAAE;AACtC,CAAA;AASO,MAAM,eAAA,GAAkB,CAAC,QAAA,EAAkB,MAAA,KAAwC;AACxF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM;AAAA,MACJ,QAAA;AAAA,MACA,SAAA,EAAW,EAAA;AAAA,MACX,WAAA,EAAa,GAAA;AAAA,MACb,qBAAA,EAAuB;AAAA,KACzB;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,aAAA,EAAe;AAAA,QACb,iBAAA,EAAmB,KAAA;AAAA,QACnB,cAAA,EAAgB,CAAC,KAAA,EAAO,OAAA,KAAY;AAClC,UAAA,QAAQ,KAAA;AAAO,YACb,KAAKA,gBAAK,QAAA,CAAS,KAAA;AACjB,cAAA,MAAA,CAAO,MAAM,OAAO,CAAA;AACpB,cAAA;AAAA,YACF,KAAKA,gBAAK,QAAA,CAAS,IAAA;AACjB,cAAA,MAAA,CAAO,KAAK,OAAO,CAAA;AACnB,cAAA;AAAA,YACF,KAAKA,gBAAK,QAAA,CAAS,OAAA;AACjB,cAAA,MAAA,CAAO,MAAM,OAAO,CAAA;AACpB,cAAA;AAAA,YACF,KAAKA,gBAAK,QAAA,CAAS,OAAA;AACjB,cAAA,MAAA,CAAO,KAAK,OAAO,CAAA;AACnB,cAAA;AAAA,YACF;AACE,cAAA;AAAA;AACJ,QACF;AAAA;AACF;AACF,GACF;AACF;AAWO,MAAM,sBAAA,GAAyB,OACpC,YAAA,EACA,OAAA,EACA,MAAA,KACoB;AACpB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa,kBAAA,CAAmB,OAAO,CAAA;AAC9D,IAAA,OAAO,QAAA,CAAS,WAAA;AAAA,EAClB,SAAS,EAAA,EAAI;AAGX,IAAA,MAAM,oBAAA,GAAuB,cAAcA,eAAA,CAAK,4BAAA;AAChD,IAAA,IAAI,CAAC,oBAAA,EAAsB;AACzB,MAAA,MAAA,CAAO,KAAA,CAAM,6BAA6B,EAAE,CAAA;AAC5C,MAAA,MAAM,EAAA;AAAA,IACR;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,MAAA,CAAO,MAAM,qDAAqD,CAAA;AAClE,IAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa,iBAAA,CAAkB,OAAO,CAAA;AAC7D,IAAA,OAAO,QAAA,CAAS,WAAA;AAAA,EAClB,SAAS,EAAA,EAAI;AACX,IAAA,MAAA,CAAO,KAAA,CAAM,4BAA4B,EAAE,CAAA;AAC3C,IAAA,MAAM,EAAA;AAAA,EACR;AACF;AAWO,MAAM,mBAAA,GAAsB,OACjC,YAAA,EACA,MAAA,EACA,MAAA,KACqB;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,aAAa,kBAAA,CAAmB;AAAA,MACpC;AAAA,KACD,CAAA;AAED,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,EAAA,EAAI;AAGX,IAAA,MAAM,uBAAA,GAA0B,cAAcA,eAAA,CAAK,4BAAA;AACnD,IAAA,MAAM,QAAA,GAAW,0BAA0B,OAAA,GAAU,OAAA;AACrD,IAAA,MAAA,CAAO,GAAA,CAAI,QAAA,EAAU,4BAAA,EAA8B,EAAE,CAAA;AACrD,IAAA,OAAO,KAAA;AAAA,EACT;AACF","file":"msal-utils.js","sourcesContent":["import * as msal from '@azure/msal-browser';\n\nimport { ILogger } from '@microsoft/teams.common/logging';\n\n/**\n * Gets a silent request used to acquire an Entra access token for invoking remote functions on behalf of a user.\n * @param resource The resource to use, e.g 'api://<clientId>'.\n * @param permission The permission to request. Defaults to 'access_as_user'.\n * @returns\n */\nexport const getStandardExecSilentRequest = (\n  resource: string,\n  permission = 'access_as_user'\n): msal.SilentRequest => ({\n  scopes: [`${resource}/${permission}`],\n});\n\n/**\n * Builds a default MSAL configuration for the specified client ID.\n * @param clientId The application client ID.\n * @param logger The logger instance to use for logging MSAL events.\n * @returns A default MSAL configuration object suitable for creating a\n * @see{IPublicClientApplication} instance for a multi-tenant application.\n */\nexport const buildMsalConfig = (clientId: string, logger: ILogger): msal.Configuration => {\n  return {\n    auth: {\n      clientId,\n      authority: '',\n      redirectUri: '/',\n      postLogoutRedirectUri: '/',\n    },\n    system: {\n      loggerOptions: {\n        piiLoggingEnabled: false,\n        loggerCallback: (level, message) => {\n          switch (level) {\n            case msal.LogLevel.Error:\n              logger.error(message);\n              return;\n            case msal.LogLevel.Info:\n              logger.info(message);\n              return;\n            case msal.LogLevel.Verbose:\n              logger.debug(message);\n              return;\n            case msal.LogLevel.Warning:\n              logger.warn(message);\n              return;\n            default:\n              return;\n          }\n        },\n      },\n    },\n  };\n};\n\n/**\n * Acquires an access token using MSAL. It first attempts to acquire the token silently,\n * and if that fails with an InteractionRequiredAuthError, it falls back to acquiring the\n * token via a popup.\n * @param msalInstance The MSAL instance to use for acquiring the token.\n * @param request The token request object.\n * @param logger The logger instance to use for logging errors.\n * @returns A promise that resolves to the acquired access token.\n */\nexport const acquireMsalAccessToken = async (\n  msalInstance: Pick<msal.IPublicClientApplication, 'acquireTokenSilent' | 'acquireTokenPopup'>,\n  request: msal.SilentRequest,\n  logger: ILogger\n): Promise<string> => {\n  try {\n    const response = await msalInstance.acquireTokenSilent(request);\n    return response.accessToken;\n  } catch (ex) {\n    // InteractionRequiredAuthError indicates that the user may not have consented to the requested\n    // scope yet -- for this, we can fall back on acquireTokenPopup instead.\n    const tryAcquireTokenPopup = ex instanceof msal.InteractionRequiredAuthError;\n    if (!tryAcquireTokenPopup) {\n      logger.error('acquireTokenSilent failed', ex);\n      throw ex;\n    }\n  }\n\n  try {\n    logger.debug('acquireTokenSilent failed; trying acquireTokenPopup');\n    const response = await msalInstance.acquireTokenPopup(request);\n    return response.accessToken;\n  } catch (ex) {\n    logger.error('acquireTokenPopup failed', ex);\n    throw ex;\n  }\n};\n\n/**\n * Tests whether the user has consented to the specified scopes by attempting to acquire a token silently.\n * If the token acquisition is successful, it indicates that the user has consented to the scopes.\n * If it fails, it indicates that the user has not consented to the scopes.\n * @param msalInstance The MSAL instance to use.\n * @param scopes The scopes to check consent for. The scopes should not mix resources, or mix default scope with non-default scopes.\n * @param logger The logger instance to use.\n * @returns A promise that resolves to a boolean indicating whether the user has consented to the scopes.\n */\nexport const hasConsentForScopes = async (\n  msalInstance: Pick<msal.IPublicClientApplication, 'acquireTokenSilent'>,\n  scopes: string[],\n  logger: ILogger\n): Promise<boolean> => {\n  try {\n    await msalInstance.acquireTokenSilent({\n      scopes,\n    });\n\n    return true;\n  } catch (ex) {\n    // InteractionRequiredAuthError indicates that the user has not consented to the requested scope yet.\n    // This is not an error, but may be interesting when trouble shooting.\n    const acquireTokenPopupNeeded = ex instanceof msal.InteractionRequiredAuthError;\n    const logLevel = acquireTokenPopupNeeded ? 'debug' : 'error';\n    logger.log(logLevel, 'hasConsentForScopes failed', ex);\n    return false;\n  }\n};\n"]}
+{"version":3,"sources":["../src/msal-utils.ts"],"names":["LogLevel","InteractionRequiredAuthError"],"mappings":";;;;AAgBO,MAAM,4BAAA,GAA+B,CAC1C,QAAA,EACA,UAAA,GAAa,gBAAA,MACM;AAAA,EACnB,QAAQ,CAAC,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,UAAU,CAAA,CAAE;AACtC,CAAA;AASO,MAAM,eAAA,GAAkB,CAAC,QAAA,EAAkB,MAAA,KAAmC;AACnF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM;AAAA,MACJ,QAAA;AAAA,MACA,SAAA,EAAW,EAAA;AAAA,MACX,WAAA,EAAa,GAAA;AAAA,MACb,qBAAA,EAAuB;AAAA,KACzB;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,aAAA,EAAe;AAAA,QACb,iBAAA,EAAmB,KAAA;AAAA,QACnB,cAAA,EAAgB,CAAC,KAAA,EAAO,OAAA,KAAY;AAClC,UAAA,QAAQ,KAAA;AAAO,YACb,KAAKA,oBAAA,CAAS,KAAA;AACZ,cAAA,MAAA,CAAO,MAAM,OAAO,CAAA;AACpB,cAAA;AAAA,YACF,KAAKA,oBAAA,CAAS,IAAA;AACZ,cAAA,MAAA,CAAO,KAAK,OAAO,CAAA;AACnB,cAAA;AAAA,YACF,KAAKA,oBAAA,CAAS,OAAA;AACZ,cAAA,MAAA,CAAO,MAAM,OAAO,CAAA;AACpB,cAAA;AAAA,YACF,KAAKA,oBAAA,CAAS,OAAA;AACZ,cAAA,MAAA,CAAO,KAAK,OAAO,CAAA;AACnB,cAAA;AAAA,YACF;AACE,cAAA;AAAA;AACJ,QACF;AAAA;AACF;AACF,GACF;AACF;AAWO,MAAM,sBAAA,GAAyB,OACpC,YAAA,EACA,OAAA,EACA,MAAA,KACoB;AACpB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa,kBAAA,CAAmB,OAAO,CAAA;AAC9D,IAAA,OAAO,QAAA,CAAS,WAAA;AAAA,EAClB,SAAS,EAAA,EAAI;AAGX,IAAA,MAAM,uBAAuB,EAAA,YAAcC,wCAAA;AAC3C,IAAA,IAAI,CAAC,oBAAA,EAAsB;AACzB,MAAA,MAAA,CAAO,KAAA,CAAM,6BAA6B,EAAE,CAAA;AAC5C,MAAA,MAAM,EAAA;AAAA,IACR;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,MAAA,CAAO,MAAM,qDAAqD,CAAA;AAClE,IAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa,iBAAA,CAAkB,OAAO,CAAA;AAC7D,IAAA,OAAO,QAAA,CAAS,WAAA;AAAA,EAClB,SAAS,EAAA,EAAI;AACX,IAAA,MAAA,CAAO,KAAA,CAAM,4BAA4B,EAAE,CAAA;AAC3C,IAAA,MAAM,EAAA;AAAA,EACR;AACF;AAWO,MAAM,mBAAA,GAAsB,OACjC,YAAA,EACA,MAAA,EACA,MAAA,KACqB;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,aAAa,kBAAA,CAAmB;AAAA,MACpC;AAAA,KACD,CAAA;AAED,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,EAAA,EAAI;AAGX,IAAA,MAAM,0BAA0B,EAAA,YAAcA,wCAAA;AAC9C,IAAA,MAAM,QAAA,GAAW,0BAA0B,OAAA,GAAU,OAAA;AACrD,IAAA,MAAA,CAAO,GAAA,CAAI,QAAA,EAAU,4BAAA,EAA8B,EAAE,CAAA;AACrD,IAAA,OAAO,KAAA;AAAA,EACT;AACF","file":"msal-utils.js","sourcesContent":["import {\n  type Configuration,\n  type IPublicClientApplication,\n  InteractionRequiredAuthError,\n  LogLevel,\n  type SilentRequest,\n} from '@azure/msal-browser';\n\nimport { ILogger } from '@microsoft/teams.common';\n\n/**\n * Gets a silent request used to acquire an Entra access token for invoking remote functions on behalf of a user.\n * @param resource The resource to use, e.g 'api://<clientId>'.\n * @param permission The permission to request. Defaults to 'access_as_user'.\n * @returns\n */\nexport const getStandardExecSilentRequest = (\n  resource: string,\n  permission = 'access_as_user'\n): SilentRequest => ({\n  scopes: [`${resource}/${permission}`],\n});\n\n/**\n * Builds a default MSAL configuration for the specified client ID.\n * @param clientId The application client ID.\n * @param logger The logger instance to use for logging MSAL events.\n * @returns A default MSAL configuration object suitable for creating a\n * @see{IPublicClientApplication} instance for a multi-tenant application.\n */\nexport const buildMsalConfig = (clientId: string, logger: ILogger): Configuration => {\n  return {\n    auth: {\n      clientId,\n      authority: '',\n      redirectUri: '/',\n      postLogoutRedirectUri: '/',\n    },\n    system: {\n      loggerOptions: {\n        piiLoggingEnabled: false,\n        loggerCallback: (level, message) => {\n          switch (level) {\n            case LogLevel.Error:\n              logger.error(message);\n              return;\n            case LogLevel.Info:\n              logger.info(message);\n              return;\n            case LogLevel.Verbose:\n              logger.debug(message);\n              return;\n            case LogLevel.Warning:\n              logger.warn(message);\n              return;\n            default:\n              return;\n          }\n        },\n      },\n    },\n  };\n};\n\n/**\n * Acquires an access token using MSAL. It first attempts to acquire the token silently,\n * and if that fails with an InteractionRequiredAuthError, it falls back to acquiring the\n * token via a popup.\n * @param msalInstance The MSAL instance to use for acquiring the token.\n * @param request The token request object.\n * @param logger The logger instance to use for logging errors.\n * @returns A promise that resolves to the acquired access token.\n */\nexport const acquireMsalAccessToken = async (\n  msalInstance: Pick<IPublicClientApplication, 'acquireTokenSilent' | 'acquireTokenPopup'>,\n  request: SilentRequest,\n  logger: ILogger\n): Promise<string> => {\n  try {\n    const response = await msalInstance.acquireTokenSilent(request);\n    return response.accessToken;\n  } catch (ex) {\n    // InteractionRequiredAuthError indicates that the user may not have consented to the requested\n    // scope yet -- for this, we can fall back on acquireTokenPopup instead.\n    const tryAcquireTokenPopup = ex instanceof InteractionRequiredAuthError;\n    if (!tryAcquireTokenPopup) {\n      logger.error('acquireTokenSilent failed', ex);\n      throw ex;\n    }\n  }\n\n  try {\n    logger.debug('acquireTokenSilent failed; trying acquireTokenPopup');\n    const response = await msalInstance.acquireTokenPopup(request);\n    return response.accessToken;\n  } catch (ex) {\n    logger.error('acquireTokenPopup failed', ex);\n    throw ex;\n  }\n};\n\n/**\n * Tests whether the user has consented to the specified scopes by attempting to acquire a token silently.\n * If the token acquisition is successful, it indicates that the user has consented to the scopes.\n * If it fails, it indicates that the user has not consented to the scopes.\n * @param msalInstance The MSAL instance to use.\n * @param scopes The scopes to check consent for. The scopes should not mix resources, or mix default scope with non-default scopes.\n * @param logger The logger instance to use.\n * @returns A promise that resolves to a boolean indicating whether the user has consented to the scopes.\n */\nexport const hasConsentForScopes = async (\n  msalInstance: Pick<IPublicClientApplication, 'acquireTokenSilent'>,\n  scopes: string[],\n  logger: ILogger\n): Promise<boolean> => {\n  try {\n    await msalInstance.acquireTokenSilent({\n      scopes,\n    });\n\n    return true;\n  } catch (ex) {\n    // InteractionRequiredAuthError indicates that the user has not consented to the requested scope yet.\n    // This is not an error, but may be interesting when trouble shooting.\n    const acquireTokenPopupNeeded = ex instanceof InteractionRequiredAuthError;\n    const logLevel = acquireTokenPopupNeeded ? 'debug' : 'error';\n    logger.log(logLevel, 'hasConsentForScopes failed', ex);\n    return false;\n  }\n};\n"]}

package/dist/msal-utils.mjs

@@ -1,4 +1,4 @@
-import * as msal from '@azure/msal-browser';
+import { LogLevel, InteractionRequiredAuthError } from '@azure/msal-browser';
 
 const getStandardExecSilentRequest = (resource, permission = "access_as_user") => ({
   scopes: [`${resource}/${permission}`]
@@ -16,16 +16,16 @@ const buildMsalConfig = (clientId, logger) => {
         piiLoggingEnabled: false,
         loggerCallback: (level, message) => {
           switch (level) {
-            case msal.LogLevel.Error:
+            case LogLevel.Error:
               logger.error(message);
               return;
-            case msal.LogLevel.Info:
+            case LogLevel.Info:
               logger.info(message);
               return;
-            case msal.LogLevel.Verbose:
+            case LogLevel.Verbose:
               logger.debug(message);
               return;
-            case msal.LogLevel.Warning:
+            case LogLevel.Warning:
               logger.warn(message);
               return;
             default:
@@ -41,7 +41,7 @@ const acquireMsalAccessToken = async (msalInstance, request, logger) => {
     const response = await msalInstance.acquireTokenSilent(request);
     return response.accessToken;
   } catch (ex) {
-    const tryAcquireTokenPopup = ex instanceof msal.InteractionRequiredAuthError;
+    const tryAcquireTokenPopup = ex instanceof InteractionRequiredAuthError;
     if (!tryAcquireTokenPopup) {
       logger.error("acquireTokenSilent failed", ex);
       throw ex;
@@ -63,7 +63,7 @@ const hasConsentForScopes = async (msalInstance, scopes, logger) => {
     });
     return true;
   } catch (ex) {
-    const acquireTokenPopupNeeded = ex instanceof msal.InteractionRequiredAuthError;
+    const acquireTokenPopupNeeded = ex instanceof InteractionRequiredAuthError;
     const logLevel = acquireTokenPopupNeeded ? "debug" : "error";
     logger.log(logLevel, "hasConsentForScopes failed", ex);
     return false;

package/dist/msal-utils.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/msal-utils.ts"],"names":[],"mappings":";;AAUO,MAAM,4BAAA,GAA+B,CAC1C,QAAA,EACA,UAAA,GAAa,gBAAA,MACW;AAAA,EACxB,QAAQ,CAAC,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,UAAU,CAAA,CAAE;AACtC,CAAA;AASO,MAAM,eAAA,GAAkB,CAAC,QAAA,EAAkB,MAAA,KAAwC;AACxF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM;AAAA,MACJ,QAAA;AAAA,MACA,SAAA,EAAW,EAAA;AAAA,MACX,WAAA,EAAa,GAAA;AAAA,MACb,qBAAA,EAAuB;AAAA,KACzB;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,aAAA,EAAe;AAAA,QACb,iBAAA,EAAmB,KAAA;AAAA,QACnB,cAAA,EAAgB,CAAC,KAAA,EAAO,OAAA,KAAY;AAClC,UAAA,QAAQ,KAAA;AAAO,YACb,KAAK,KAAK,QAAA,CAAS,KAAA;AACjB,cAAA,MAAA,CAAO,MAAM,OAAO,CAAA;AACpB,cAAA;AAAA,YACF,KAAK,KAAK,QAAA,CAAS,IAAA;AACjB,cAAA,MAAA,CAAO,KAAK,OAAO,CAAA;AACnB,cAAA;AAAA,YACF,KAAK,KAAK,QAAA,CAAS,OAAA;AACjB,cAAA,MAAA,CAAO,MAAM,OAAO,CAAA;AACpB,cAAA;AAAA,YACF,KAAK,KAAK,QAAA,CAAS,OAAA;AACjB,cAAA,MAAA,CAAO,KAAK,OAAO,CAAA;AACnB,cAAA;AAAA,YACF;AACE,cAAA;AAAA;AACJ,QACF;AAAA;AACF;AACF,GACF;AACF;AAWO,MAAM,sBAAA,GAAyB,OACpC,YAAA,EACA,OAAA,EACA,MAAA,KACoB;AACpB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa,kBAAA,CAAmB,OAAO,CAAA;AAC9D,IAAA,OAAO,QAAA,CAAS,WAAA;AAAA,EAClB,SAAS,EAAA,EAAI;AAGX,IAAA,MAAM,oBAAA,GAAuB,cAAc,IAAA,CAAK,4BAAA;AAChD,IAAA,IAAI,CAAC,oBAAA,EAAsB;AACzB,MAAA,MAAA,CAAO,KAAA,CAAM,6BAA6B,EAAE,CAAA;AAC5C,MAAA,MAAM,EAAA;AAAA,IACR;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,MAAA,CAAO,MAAM,qDAAqD,CAAA;AAClE,IAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa,iBAAA,CAAkB,OAAO,CAAA;AAC7D,IAAA,OAAO,QAAA,CAAS,WAAA;AAAA,EAClB,SAAS,EAAA,EAAI;AACX,IAAA,MAAA,CAAO,KAAA,CAAM,4BAA4B,EAAE,CAAA;AAC3C,IAAA,MAAM,EAAA;AAAA,EACR;AACF;AAWO,MAAM,mBAAA,GAAsB,OACjC,YAAA,EACA,MAAA,EACA,MAAA,KACqB;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,aAAa,kBAAA,CAAmB;AAAA,MACpC;AAAA,KACD,CAAA;AAED,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,EAAA,EAAI;AAGX,IAAA,MAAM,uBAAA,GAA0B,cAAc,IAAA,CAAK,4BAAA;AACnD,IAAA,MAAM,QAAA,GAAW,0BAA0B,OAAA,GAAU,OAAA;AACrD,IAAA,MAAA,CAAO,GAAA,CAAI,QAAA,EAAU,4BAAA,EAA8B,EAAE,CAAA;AACrD,IAAA,OAAO,KAAA;AAAA,EACT;AACF","file":"msal-utils.mjs","sourcesContent":["import * as msal from '@azure/msal-browser';\n\nimport { ILogger } from '@microsoft/teams.common/logging';\n\n/**\n * Gets a silent request used to acquire an Entra access token for invoking remote functions on behalf of a user.\n * @param resource The resource to use, e.g 'api://<clientId>'.\n * @param permission The permission to request. Defaults to 'access_as_user'.\n * @returns\n */\nexport const getStandardExecSilentRequest = (\n  resource: string,\n  permission = 'access_as_user'\n): msal.SilentRequest => ({\n  scopes: [`${resource}/${permission}`],\n});\n\n/**\n * Builds a default MSAL configuration for the specified client ID.\n * @param clientId The application client ID.\n * @param logger The logger instance to use for logging MSAL events.\n * @returns A default MSAL configuration object suitable for creating a\n * @see{IPublicClientApplication} instance for a multi-tenant application.\n */\nexport const buildMsalConfig = (clientId: string, logger: ILogger): msal.Configuration => {\n  return {\n    auth: {\n      clientId,\n      authority: '',\n      redirectUri: '/',\n      postLogoutRedirectUri: '/',\n    },\n    system: {\n      loggerOptions: {\n        piiLoggingEnabled: false,\n        loggerCallback: (level, message) => {\n          switch (level) {\n            case msal.LogLevel.Error:\n              logger.error(message);\n              return;\n            case msal.LogLevel.Info:\n              logger.info(message);\n              return;\n            case msal.LogLevel.Verbose:\n              logger.debug(message);\n              return;\n            case msal.LogLevel.Warning:\n              logger.warn(message);\n              return;\n            default:\n              return;\n          }\n        },\n      },\n    },\n  };\n};\n\n/**\n * Acquires an access token using MSAL. It first attempts to acquire the token silently,\n * and if that fails with an InteractionRequiredAuthError, it falls back to acquiring the\n * token via a popup.\n * @param msalInstance The MSAL instance to use for acquiring the token.\n * @param request The token request object.\n * @param logger The logger instance to use for logging errors.\n * @returns A promise that resolves to the acquired access token.\n */\nexport const acquireMsalAccessToken = async (\n  msalInstance: Pick<msal.IPublicClientApplication, 'acquireTokenSilent' | 'acquireTokenPopup'>,\n  request: msal.SilentRequest,\n  logger: ILogger\n): Promise<string> => {\n  try {\n    const response = await msalInstance.acquireTokenSilent(request);\n    return response.accessToken;\n  } catch (ex) {\n    // InteractionRequiredAuthError indicates that the user may not have consented to the requested\n    // scope yet -- for this, we can fall back on acquireTokenPopup instead.\n    const tryAcquireTokenPopup = ex instanceof msal.InteractionRequiredAuthError;\n    if (!tryAcquireTokenPopup) {\n      logger.error('acquireTokenSilent failed', ex);\n      throw ex;\n    }\n  }\n\n  try {\n    logger.debug('acquireTokenSilent failed; trying acquireTokenPopup');\n    const response = await msalInstance.acquireTokenPopup(request);\n    return response.accessToken;\n  } catch (ex) {\n    logger.error('acquireTokenPopup failed', ex);\n    throw ex;\n  }\n};\n\n/**\n * Tests whether the user has consented to the specified scopes by attempting to acquire a token silently.\n * If the token acquisition is successful, it indicates that the user has consented to the scopes.\n * If it fails, it indicates that the user has not consented to the scopes.\n * @param msalInstance The MSAL instance to use.\n * @param scopes The scopes to check consent for. The scopes should not mix resources, or mix default scope with non-default scopes.\n * @param logger The logger instance to use.\n * @returns A promise that resolves to a boolean indicating whether the user has consented to the scopes.\n */\nexport const hasConsentForScopes = async (\n  msalInstance: Pick<msal.IPublicClientApplication, 'acquireTokenSilent'>,\n  scopes: string[],\n  logger: ILogger\n): Promise<boolean> => {\n  try {\n    await msalInstance.acquireTokenSilent({\n      scopes,\n    });\n\n    return true;\n  } catch (ex) {\n    // InteractionRequiredAuthError indicates that the user has not consented to the requested scope yet.\n    // This is not an error, but may be interesting when trouble shooting.\n    const acquireTokenPopupNeeded = ex instanceof msal.InteractionRequiredAuthError;\n    const logLevel = acquireTokenPopupNeeded ? 'debug' : 'error';\n    logger.log(logLevel, 'hasConsentForScopes failed', ex);\n    return false;\n  }\n};\n"]}
+{"version":3,"sources":["../src/msal-utils.ts"],"names":[],"mappings":";;AAgBO,MAAM,4BAAA,GAA+B,CAC1C,QAAA,EACA,UAAA,GAAa,gBAAA,MACM;AAAA,EACnB,QAAQ,CAAC,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,UAAU,CAAA,CAAE;AACtC,CAAA;AASO,MAAM,eAAA,GAAkB,CAAC,QAAA,EAAkB,MAAA,KAAmC;AACnF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM;AAAA,MACJ,QAAA;AAAA,MACA,SAAA,EAAW,EAAA;AAAA,MACX,WAAA,EAAa,GAAA;AAAA,MACb,qBAAA,EAAuB;AAAA,KACzB;AAAA,IACA,MAAA,EAAQ;AAAA,MACN,aAAA,EAAe;AAAA,QACb,iBAAA,EAAmB,KAAA;AAAA,QACnB,cAAA,EAAgB,CAAC,KAAA,EAAO,OAAA,KAAY;AAClC,UAAA,QAAQ,KAAA;AAAO,YACb,KAAK,QAAA,CAAS,KAAA;AACZ,cAAA,MAAA,CAAO,MAAM,OAAO,CAAA;AACpB,cAAA;AAAA,YACF,KAAK,QAAA,CAAS,IAAA;AACZ,cAAA,MAAA,CAAO,KAAK,OAAO,CAAA;AACnB,cAAA;AAAA,YACF,KAAK,QAAA,CAAS,OAAA;AACZ,cAAA,MAAA,CAAO,MAAM,OAAO,CAAA;AACpB,cAAA;AAAA,YACF,KAAK,QAAA,CAAS,OAAA;AACZ,cAAA,MAAA,CAAO,KAAK,OAAO,CAAA;AACnB,cAAA;AAAA,YACF;AACE,cAAA;AAAA;AACJ,QACF;AAAA;AACF;AACF,GACF;AACF;AAWO,MAAM,sBAAA,GAAyB,OACpC,YAAA,EACA,OAAA,EACA,MAAA,KACoB;AACpB,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa,kBAAA,CAAmB,OAAO,CAAA;AAC9D,IAAA,OAAO,QAAA,CAAS,WAAA;AAAA,EAClB,SAAS,EAAA,EAAI;AAGX,IAAA,MAAM,uBAAuB,EAAA,YAAc,4BAAA;AAC3C,IAAA,IAAI,CAAC,oBAAA,EAAsB;AACzB,MAAA,MAAA,CAAO,KAAA,CAAM,6BAA6B,EAAE,CAAA;AAC5C,MAAA,MAAM,EAAA;AAAA,IACR;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,MAAA,CAAO,MAAM,qDAAqD,CAAA;AAClE,IAAA,MAAM,QAAA,GAAW,MAAM,YAAA,CAAa,iBAAA,CAAkB,OAAO,CAAA;AAC7D,IAAA,OAAO,QAAA,CAAS,WAAA;AAAA,EAClB,SAAS,EAAA,EAAI;AACX,IAAA,MAAA,CAAO,KAAA,CAAM,4BAA4B,EAAE,CAAA;AAC3C,IAAA,MAAM,EAAA;AAAA,EACR;AACF;AAWO,MAAM,mBAAA,GAAsB,OACjC,YAAA,EACA,MAAA,EACA,MAAA,KACqB;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,aAAa,kBAAA,CAAmB;AAAA,MACpC;AAAA,KACD,CAAA;AAED,IAAA,OAAO,IAAA;AAAA,EACT,SAAS,EAAA,EAAI;AAGX,IAAA,MAAM,0BAA0B,EAAA,YAAc,4BAAA;AAC9C,IAAA,MAAM,QAAA,GAAW,0BAA0B,OAAA,GAAU,OAAA;AACrD,IAAA,MAAA,CAAO,GAAA,CAAI,QAAA,EAAU,4BAAA,EAA8B,EAAE,CAAA;AACrD,IAAA,OAAO,KAAA;AAAA,EACT;AACF","file":"msal-utils.mjs","sourcesContent":["import {\n  type Configuration,\n  type IPublicClientApplication,\n  InteractionRequiredAuthError,\n  LogLevel,\n  type SilentRequest,\n} from '@azure/msal-browser';\n\nimport { ILogger } from '@microsoft/teams.common';\n\n/**\n * Gets a silent request used to acquire an Entra access token for invoking remote functions on behalf of a user.\n * @param resource The resource to use, e.g 'api://<clientId>'.\n * @param permission The permission to request. Defaults to 'access_as_user'.\n * @returns\n */\nexport const getStandardExecSilentRequest = (\n  resource: string,\n  permission = 'access_as_user'\n): SilentRequest => ({\n  scopes: [`${resource}/${permission}`],\n});\n\n/**\n * Builds a default MSAL configuration for the specified client ID.\n * @param clientId The application client ID.\n * @param logger The logger instance to use for logging MSAL events.\n * @returns A default MSAL configuration object suitable for creating a\n * @see{IPublicClientApplication} instance for a multi-tenant application.\n */\nexport const buildMsalConfig = (clientId: string, logger: ILogger): Configuration => {\n  return {\n    auth: {\n      clientId,\n      authority: '',\n      redirectUri: '/',\n      postLogoutRedirectUri: '/',\n    },\n    system: {\n      loggerOptions: {\n        piiLoggingEnabled: false,\n        loggerCallback: (level, message) => {\n          switch (level) {\n            case LogLevel.Error:\n              logger.error(message);\n              return;\n            case LogLevel.Info:\n              logger.info(message);\n              return;\n            case LogLevel.Verbose:\n              logger.debug(message);\n              return;\n            case LogLevel.Warning:\n              logger.warn(message);\n              return;\n            default:\n              return;\n          }\n        },\n      },\n    },\n  };\n};\n\n/**\n * Acquires an access token using MSAL. It first attempts to acquire the token silently,\n * and if that fails with an InteractionRequiredAuthError, it falls back to acquiring the\n * token via a popup.\n * @param msalInstance The MSAL instance to use for acquiring the token.\n * @param request The token request object.\n * @param logger The logger instance to use for logging errors.\n * @returns A promise that resolves to the acquired access token.\n */\nexport const acquireMsalAccessToken = async (\n  msalInstance: Pick<IPublicClientApplication, 'acquireTokenSilent' | 'acquireTokenPopup'>,\n  request: SilentRequest,\n  logger: ILogger\n): Promise<string> => {\n  try {\n    const response = await msalInstance.acquireTokenSilent(request);\n    return response.accessToken;\n  } catch (ex) {\n    // InteractionRequiredAuthError indicates that the user may not have consented to the requested\n    // scope yet -- for this, we can fall back on acquireTokenPopup instead.\n    const tryAcquireTokenPopup = ex instanceof InteractionRequiredAuthError;\n    if (!tryAcquireTokenPopup) {\n      logger.error('acquireTokenSilent failed', ex);\n      throw ex;\n    }\n  }\n\n  try {\n    logger.debug('acquireTokenSilent failed; trying acquireTokenPopup');\n    const response = await msalInstance.acquireTokenPopup(request);\n    return response.accessToken;\n  } catch (ex) {\n    logger.error('acquireTokenPopup failed', ex);\n    throw ex;\n  }\n};\n\n/**\n * Tests whether the user has consented to the specified scopes by attempting to acquire a token silently.\n * If the token acquisition is successful, it indicates that the user has consented to the scopes.\n * If it fails, it indicates that the user has not consented to the scopes.\n * @param msalInstance The MSAL instance to use.\n * @param scopes The scopes to check consent for. The scopes should not mix resources, or mix default scope with non-default scopes.\n * @param logger The logger instance to use.\n * @returns A promise that resolves to a boolean indicating whether the user has consented to the scopes.\n */\nexport const hasConsentForScopes = async (\n  msalInstance: Pick<IPublicClientApplication, 'acquireTokenSilent'>,\n  scopes: string[],\n  logger: ILogger\n): Promise<boolean> => {\n  try {\n    await msalInstance.acquireTokenSilent({\n      scopes,\n    });\n\n    return true;\n  } catch (ex) {\n    // InteractionRequiredAuthError indicates that the user has not consented to the requested scope yet.\n    // This is not an error, but may be interesting when trouble shooting.\n    const acquireTokenPopupNeeded = ex instanceof InteractionRequiredAuthError;\n    const logLevel = acquireTokenPopupNeeded ? 'debug' : 'error';\n    logger.log(logLevel, 'hasConsentForScopes failed', ex);\n    return false;\n  }\n};\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@microsoft/teams.client",
-  "version": "2.0.10",
+  "version": "2.0.11",
   "license": "MIT",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -38,15 +38,15 @@
   },
   "dependencies": {
     "@azure/msal-browser": "^4.9.1",
-    "@microsoft/teams.api": "2.0.10",
-    "@microsoft/teams.common": "2.0.10",
-    "@microsoft/teams.graph": "2.0.10"
+    "@microsoft/teams.api": "2.0.11",
+    "@microsoft/teams.common": "2.0.11",
+    "@microsoft/teams.graph": "2.0.11"
   },
   "peerDependencies": {
     "@microsoft/teams-js": "^2.35.0"
   },
   "devDependencies": {
-    "@microsoft/teams.config": "2.0.10",
+    "@microsoft/teams.config": "2.0.11",
     "@types/jest": "^29.5.12",
     "jest": "^29.7.0",
     "rimraf": "^6.0.1",