@microsoft/teamsfx 1.1.2-alpha.062e4a5ea.0 → 1.1.2-alpha.0904fc821.0

package/types/teamsfx.d.ts

@@ -1,8 +1,7 @@
 /// <reference types="node" />
 
 import { AccessToken } from '@azure/identity';
-import { Activity } from 'botbuilder-core';
-import { Activity as Activity_2 } from 'botbuilder';
+import { Activity } from 'botbuilder';
 import { Attachment } from 'botbuilder';
 import { AuthenticationProvider } from '@microsoft/microsoft-graph-client';
 import { AxiosInstance } from 'axios';
@@ -12,25 +11,53 @@ import { CardAction } from 'botbuilder';
 import { CardImage } from 'botbuilder';
 import { ChannelInfo } from 'botbuilder';
 import { Client } from '@microsoft/microsoft-graph-client';
+import { ComponentDialog } from 'botbuilder-dialogs';
 import { ConnectionConfig } from 'tedious';
 import { ConversationReference } from 'botbuilder';
+import { ConversationState } from 'botbuilder';
 import { Dialog } from 'botbuilder-dialogs';
 import { DialogContext } from 'botbuilder-dialogs';
 import { DialogTurnResult } from 'botbuilder-dialogs';
 import { GetTokenOptions } from '@azure/identity';
 import { HeroCard } from 'botbuilder';
+import { IAdaptiveCard } from 'adaptivecards';
+import { InvokeResponse } from 'botbuilder';
+import { MessagingExtensionResponse } from 'botbuilder';
 import { O365ConnectorCard } from 'botbuilder';
 import { ReceiptCard } from 'botbuilder';
 import { SecureContextOptions } from 'tls';
+import { SigninStateVerificationQuery } from 'botbuilder';
+import { StatePropertyAccessor } from 'botbuilder';
+import { StatusCodes } from 'botbuilder';
+import { Storage as Storage_2 } from 'botbuilder';
+import { TeamDetails } from 'botbuilder';
 import { TeamsChannelAccount } from 'botbuilder';
 import { ThumbnailCard } from 'botbuilder';
 import { TokenCredential } from '@azure/identity';
 import { TokenResponse } from 'botframework-schema';
-import { TurnContext } from 'botbuilder-core';
-import { TurnContext as TurnContext_2 } from 'botbuilder';
+import { TurnContext } from 'botbuilder';
+import { UserState } from 'botbuilder';
 import { WebRequest } from 'botbuilder';
 import { WebResponse } from 'botbuilder';
 
+/**
+ * Options used to control how the response card will be sent to users.
+ */
+export declare enum AdaptiveCardResponse {
+    /**
+     * The response card will be replaced the current one for the interactor who trigger the action.
+     */
+    ReplaceForInteractor = 0,
+    /**
+     * The response card will be replaced the current one for all users in the chat.
+     */
+    ReplaceForAll = 1,
+    /**
+     * The response card will be sent as a new message for all users in the chat.
+     */
+    NewForAll = 2
+}
+
 /**
  * Define available location for API Key location
  */
@@ -249,6 +276,211 @@ export declare class BearerTokenAuthProvider implements AuthProvider {
     AddAuthenticationInfo(config: AxiosRequestConfig): Promise<AxiosRequestConfig>;
 }
 
+/**
+ * Interface for SSO configuration for Bot SSO
+ */
+export declare interface BotSsoConfig {
+    /**
+     * aad related configurations
+     */
+    aad: {
+        /**
+         * The list of scopes for which the token will have access
+         */
+        scopes: string[];
+    } & AuthenticationConfiguration;
+    dialog?: {
+        /**
+         * Custom sso execution activity handler class which should implement the interface {@link BotSsoExecutionActivityHandler}. If not provided, it will use {@link DefaultBotSsoExecutionActivityHandler} by default
+         */
+        CustomBotSsoExecutionActivityHandler?: new (ssoConfig: BotSsoConfig) => BotSsoExecutionActivityHandler;
+        /**
+         * Conversation state for sso command bot, if not provided, it will use internal memory storage to create a new one.
+         */
+        conversationState?: ConversationState;
+        /**
+         * User state for sso command bot, if not provided, it will use internal memory storage to create a new one.
+         */
+        userState?: UserState;
+        /**
+         * Used by {@link BotSsoExecutionDialog} to remove duplicated messages, if not provided, it will use internal memory storage
+         */
+        dedupStorage?: Storage_2;
+        /**
+         * Settings used to configure an teams sso prompt dialog.
+         */
+        ssoPromptConfig?: {
+            /**
+             * Number of milliseconds the prompt will wait for the user to authenticate.
+             * Defaults to a value `900,000` (15 minutes.)
+             */
+            timeout?: number;
+            /**
+             * Value indicating whether the TeamsBotSsoPrompt should end upon receiving an
+             * invalid message.  Generally the TeamsBotSsoPrompt will end the auth flow when receives user
+             * message not related to the auth flow. Setting the flag to false ignores the user's message instead.
+             * Defaults to value `true`
+             */
+            endOnInvalidMessage?: boolean;
+        };
+    };
+}
+
+/**
+ * Interface for user to customize SSO execution activity handler
+ *
+ * @remarks
+ * Bot SSO execution activity handler is to handle SSO login process and trigger SSO command using {@link BotSsoExecutionDialog}.
+ * You can use this interface to implement your own SSO execution dialog, and pass it to ConversationBot options:
+ *
+ * ```typescript
+ * export const commandBot = new ConversationBot({
+ *   ...
+ *   ssoConfig: {
+ *     ...
+ *     dialog: {
+ *       CustomBotSsoExecutionActivityHandler: YourCustomBotSsoExecutionActivityHandler,
+ *     }
+ *   },
+ *    ...
+ * });
+ * ```
+ * For details information about how to implement a BotSsoExecutionActivityHandler, please refer DefaultBotSsoExecutionActivityHandler class source code: https://aka.ms/teamsfx-default-sso-execution-activity-handler
+ */
+export declare interface BotSsoExecutionActivityHandler {
+    /**
+     * Add {@link TeamsFxBotSsoCommandHandler} instance to {@link BotSsoExecutionDialog}
+     * @param handler {@link BotSsoExecutionDialogHandler} callback function
+     * @param triggerPatterns The trigger pattern
+     *
+     * @remarks
+     * This function is used to add SSO command to {@link BotSsoExecutionDialog} instance.
+     */
+    addCommand(handler: BotSsoExecutionDialogHandler, triggerPatterns: TriggerPatterns): void;
+    /**
+     * Called to initiate the event emission process.
+     * @param context The context object for the current turn.
+     */
+    run(context: TurnContext): Promise<void>;
+    /**
+     * Receives invoke activities with Activity name of 'signin/verifyState'.
+     * @param context A context object for this turn.
+     * @param query Signin state (part of signin action auth flow) verification invoke query.
+     * @returns A promise that represents the work queued.
+     *
+     * @remarks
+     * It should trigger {@link BotSsoExecutionDialog} instance to handle signin process
+     */
+    handleTeamsSigninVerifyState(context: TurnContext, query: SigninStateVerificationQuery): Promise<void>;
+    /**
+     * Receives invoke activities with Activity name of 'signin/tokenExchange'
+     * @param context A context object for this turn.
+     * @param query Signin state (part of signin action auth flow) verification invoke query
+     * @returns A promise that represents the work queued.
+     *
+     * @remark
+     * It should trigger {@link BotSsoExecutionDialog} instance to handle signin process
+     */
+    handleTeamsSigninTokenExchange(context: TurnContext, query: SigninStateVerificationQuery): Promise<void>;
+}
+
+/**
+ * Sso execution dialog, use to handle sso command
+ */
+export declare class BotSsoExecutionDialog extends ComponentDialog {
+    private dedupStorage;
+    private dedupStorageKeys;
+    private commandMapping;
+    /**
+     * Creates a new instance of the BotSsoExecutionDialog.
+     * @param dedupStorage Helper storage to remove duplicated messages
+     * @param settings The list of scopes for which the token will have access
+     * @param teamsfx {@link TeamsFx} instance for authentication
+     */
+    constructor(dedupStorage: Storage_2, ssoPromptSettings: TeamsBotSsoPromptSettings, teamsfx: TeamsFx, dialogName?: string);
+    /**
+     * Add TeamsFxBotSsoCommandHandler instance
+     * @param handler {@link BotSsoExecutionDialogHandler} callback function
+     * @param triggerPatterns The trigger pattern
+     */
+    addCommand(handler: BotSsoExecutionDialogHandler, triggerPatterns: TriggerPatterns): void;
+    private getCommandHash;
+    /**
+     * The run method handles the incoming activity (in the form of a DialogContext) and passes it through the dialog system.
+     *
+     * @param context The context object for the current turn.
+     * @param accessor The instance of StatePropertyAccessor for dialog system.
+     */
+    run(context: TurnContext, accessor: StatePropertyAccessor): Promise<void>;
+    private getActivityText;
+    private commandRouteStep;
+    private ssoStep;
+    private dedupStep;
+    /**
+     * Called when the component is ending.
+     *
+     * @param context Context for the current turn of conversation.
+     */
+    protected onEndDialog(context: TurnContext): Promise<void>;
+    /**
+     * If a user is signed into multiple Teams clients, the Bot might receive a "signin/tokenExchange" from each client.
+     * Each token exchange request for a specific user login will have an identical activity.value.Id.
+     * Only one of these token exchange requests should be processed by the bot. For a distributed bot in production,
+     * this requires a distributed storage to ensure only one token exchange is processed.
+     * @param context Context for the current turn of conversation.
+     * @returns boolean value indicate whether the message should be removed
+     */
+    private shouldDedup;
+    private getStorageKey;
+    private matchPattern;
+    private isPatternMatched;
+    private getMatchesCommandId;
+    /**
+     * Ensure bot is running in MS Teams since TeamsBotSsoPrompt is only supported in MS Teams channel.
+     * @param dc dialog context
+     * @throws {@link ErrorCode|ChannelNotSupported} if bot channel is not MS Teams
+     * @internal
+     */
+    private ensureMsTeamsChannel;
+}
+
+export declare type BotSsoExecutionDialogHandler = (context: TurnContext, tokenResponse: TeamsBotSsoPromptTokenResponse, message: CommandMessage) => Promise<void>;
+
+/**
+ * A card action bot to respond to adaptive card universal actions.
+ */
+export declare class CardActionBot {
+    private readonly adapter;
+    private middleware;
+    /**
+     * Creates a new instance of the `CardActionBot`.
+     *
+     * @param adapter The bound `BotFrameworkAdapter`.
+     * @param options - initialize options
+     */
+    constructor(adapter: BotFrameworkAdapter, options?: CardActionOptions);
+    /**
+     * Registers a card action handler to the bot.
+     * @param actionHandler A card action handler to be registered.
+     */
+    registerHandler(actionHandler: TeamsFxAdaptiveCardActionHandler): void;
+    /**
+     * Registers card action handlers to the bot.
+     * @param actionHandlers A set of card action handlers to be registered.
+     */
+    registerHandlers(actionHandlers: TeamsFxAdaptiveCardActionHandler[]): void;
+}
+
+/**
+ * Options to initialize {@link CardActionBot}.
+ */
+export declare interface CardActionOptions {
+    /**
+     * The action handlers to registered with the action bot. Each command should implement the interface {@link TeamsFxAdaptiveCardActionHandler} so that it can be correctly handled by this bot.
+     */
+    actions?: TeamsFxAdaptiveCardActionHandler[];
+}
+
 /**
  * Provider that handles Certificate authentication
  */
@@ -332,25 +564,39 @@ export declare class Channel implements NotificationTarget {
 export declare class CommandBot {
     private readonly adapter;
     private readonly middleware;
+    private readonly ssoConfig;
     /**
      * Creates a new instance of the `CommandBot`.
      *
      * @param adapter The bound `BotFrameworkAdapter`.
      * @param options - initialize options
      */
-    constructor(adapter: BotFrameworkAdapter, options?: CommandOptions);
+    constructor(adapter: BotFrameworkAdapter, options?: CommandOptions, ssoCommandActivityHandler?: BotSsoExecutionActivityHandler, ssoConfig?: BotSsoConfig);
     /**
      * Registers a command into the command bot.
      *
-     * @param command The command to registered.
+     * @param command The command to register.
      */
     registerCommand(command: TeamsFxBotCommandHandler): void;
     /**
      * Registers commands into the command bot.
      *
-     * @param commands The command to registered.
+     * @param commands The commands to register.
      */
     registerCommands(commands: TeamsFxBotCommandHandler[]): void;
+    /**
+     * Registers a sso command into the command bot.
+     *
+     * @param command The command to register.
+     */
+    registerSsoCommand(ssoCommand: TeamsFxBotSsoCommandHandler): void;
+    /**
+     * Registers commands into the command bot.
+     *
+     * @param commands The commands to register.
+     */
+    registerSsoCommands(ssoCommands: TeamsFxBotSsoCommandHandler[]): void;
+    private validateSsoActivityHandler;
 }
 
 /**
@@ -375,6 +621,10 @@ export declare interface CommandOptions {
      * The commands to registered with the command bot. Each command should implement the interface {@link TeamsFxBotCommandHandler} so that it can be correctly handled by this command bot.
      */
     commands?: TeamsFxBotCommandHandler[];
+    /**
+     * The commands to registered with the sso command bot. Each sso command should implement the interface {@link TeamsFxBotSsoCommandHandler} so that it can be correctly handled by this command bot.
+     */
+    ssoCommands?: TeamsFxBotSsoCommandHandler[];
 }
 
 /**
@@ -441,6 +691,10 @@ export declare class ConversationBot {
      * The entrypoint of notification.
      */
     readonly notification?: NotificationBot;
+    /**
+     * The action handler used for adaptive card universal actions.
+     */
+    readonly cardAction?: CardActionBot;
     /**
      * Creates new instance of the `ConversationBot`.
      *
@@ -472,7 +726,7 @@ export declare class ConversationBot {
      * });
      * ```
      */
-    requestHandler(req: WebRequest, res: WebResponse, logic?: (context: TurnContext_2) => Promise<any>): Promise<void>;
+    requestHandler(req: WebRequest, res: WebResponse, logic?: (context: TurnContext) => Promise<any>): Promise<void>;
 }
 
 /**
@@ -497,6 +751,10 @@ export declare interface ConversationOptions {
     adapterConfig?: {
         [key: string]: unknown;
     };
+    /**
+     * Configurations for sso command bot
+     */
+    ssoConfig?: BotSsoConfig;
     /**
      * The command part.
      */
@@ -515,6 +773,15 @@ export declare interface ConversationOptions {
          */
         enabled?: boolean;
     };
+    /**
+     * The adaptive card action handler part.
+     */
+    cardAction?: CardActionOptions & {
+        /**
+         * Whether to enable adaptive card actions or not.
+         */
+        enabled?: boolean;
+    };
 }
 
 /**
@@ -638,6 +905,30 @@ export declare enum ErrorCode {
      * Channel is not supported error.
      */
     ChannelNotSupported = "ChannelNotSupported",
+    /**
+     * Failed to retrieve sso token
+     */
+    FailedToRetrieveSsoToken = "FailedToRetrieveSsoToken",
+    /**
+     * Failed to process sso handler
+     */
+    FailedToProcessSsoHandler = "FailedToProcessSsoHandler",
+    /**
+     * Cannot find command
+     */
+    CannotFindCommand = "CannotFindCommand",
+    /**
+     * Failed to run sso step
+     */
+    FailedToRunSsoStep = "FailedToRunSsoStep",
+    /**
+     * Failed to run dedup step
+     */
+    FailedToRunDedupStep = "FailedToRunDedupStep",
+    /**
+     * Sso activity handler is undefined
+     */
+    SsoActivityHandlerIsUndefined = "SsoActivityHandlerIsUndefined",
     /**
      * Runtime is not supported error.
      */
@@ -702,6 +993,10 @@ export declare class ErrorWithCode extends Error {
  */
 export declare function getLogLevel(): LogLevel | undefined;
 
+export declare interface GetTeamsUserTokenOptions extends GetTokenOptions {
+    resources?: string[];
+}
+
 /**
  * Generate connection configuration consumed by tedious.
  *
@@ -716,6 +1011,25 @@ export declare function getLogLevel(): LogLevel | undefined;
  */
 export declare function getTediousConnectionConfig(teamsfx: TeamsFx, databaseName?: string): Promise<ConnectionConfig>;
 
+/**
+ * Users execute query in message extension with SSO or access token.
+ *
+ * @param {TurnContext} context - The context object for the current turn.
+ * @param {AuthenticationConfiguration} config - User custom the message extension authentication configuration.
+ * @param {string| string[]} scopes - The list of scopes for which the token will have access.
+ * @param {function} logic - Business logic when executing the query in message extension with SSO or access token.
+ *
+ * @throws {@link ErrorCode|InternalError} when User invoke not response to message extension query.
+ * @throws {@link ErrorCode|InternalError} when failed to get access token with unknown error.
+ * @throws {@link ErrorCode|TokenExpiredError} when SSO token has already expired.
+ * @throws {@link ErrorCode|ServiceError} when failed to get access token from simple auth server.
+ * @throws {@link ErrorCode|InvalidParameter} when scopes is not a valid string or string array.
+ * @throws {@link ErrorCode|RuntimeNotSupported} when runtime is nodeJS.
+ *
+ * @returns A MessageExtension Response for the activity. If the logic not return any, return void instead.
+ */
+export declare function handleMessageExtensionQueryWithToken(context: TurnContext, config: AuthenticationConfiguration | null, scopes: string | string[], logic: (token: MessageExtensionTokenResponse) => Promise<any>): Promise<MessagingExtensionResponse | void>;
+
 /**
  * Identity type to use in authentication.
  */
@@ -730,6 +1044,96 @@ export declare enum IdentityType {
     App = "Application"
 }
 
+/**
+ * Status code for an `application/vnd.microsoft.error` invoke response.
+ */
+export declare enum InvokeResponseErrorCode {
+    /**
+     * Invalid request.
+     */
+    BadRequest = 400,
+    /**
+     * Internal server error.
+     */
+    InternalServerError = 500
+}
+
+/**
+ * Provides methods for formatting various invoke responses a bot can send to respond to an invoke request.
+ *
+ * @remarks
+ * All of these functions return an {@link InvokeResponse} object, which can be
+ * passed as input to generate a new `invokeResponse` activity.
+ *
+ * This example sends an invoke response that contains an adaptive card.
+ *
+ * ```typescript
+ *
+ * const myCard: IAdaptiveCard = {
+ *    type: "AdaptiveCard",
+ *    body: [
+ *     {
+ *       "type": "TextBlock",
+ *       "text": "This is a sample card"
+ *     }],
+ *     $schema: "http://adaptivecards.io/schemas/adaptive-card.json",
+ *     version: "1.4"
+ *  };
+ *
+ * const invokeResponse = InvokeResponseFactory.adaptiveCard(myCard);
+ * await context.sendActivity({
+ *    type: ActivityTypes.InvokeResponse,
+ *    value: invokeResponse,
+ *  });
+ * ```
+ */
+export declare class InvokeResponseFactory {
+    /**
+     * Create an invoke response from a text message.
+     * The type of the invoke response is `application/vnd.microsoft.activity.message`
+     * indicates the request was successfully processed.
+     *
+     * @param message A text message included in a invoke response.
+     *
+     * @returns {InvokeResponse} An InvokeResponse object.
+     */
+    static textMessage(message: string): InvokeResponse;
+    /**
+     * Create an invoke response from an adaptive card.
+     *
+     * The type of the invoke response is `application/vnd.microsoft.card.adaptive` indicates
+     * the request was successfully processed, and the response includes an adaptive card
+     * that the client should display in place of the current one.
+     *
+     * @param card The adaptive card JSON payload.
+     *
+     * @returns {InvokeResponse} An InvokeResponse object.
+     */
+    static adaptiveCard(card: IAdaptiveCard): InvokeResponse;
+    /**
+     * Create an invoke response with error code and message.
+     *
+     * The type of the invoke response is `application/vnd.microsoft.error` indicates
+     * the request was failed to processed.
+     *
+     * @param errorCode The status code indicates error, available values:
+     *  - 400 (BadRequest): indicate the incoming request was invalid.
+     *  - 500 (InternalServerError): indicate an unexpected error occurred.
+     * @param errorMessage The error message.
+     *
+     * @returns {InvokeResponse} An InvokeResponse object.
+     */
+    static errorResponse(errorCode: InvokeResponseErrorCode, errorMessage: string): InvokeResponse;
+    /**
+     * Create an invoke response with status code and response value.
+     * @param statusCode The status code.
+     * @param body The value of the response body.
+     *
+     * @returns {InvokeResponse} An InvokeResponse object.
+     */
+    static createInvokeResponse(statusCode: StatusCodes, body?: unknown): InvokeResponse;
+}
+
 /**
  * Log function for customized logging.
  */
@@ -868,14 +1272,14 @@ export declare class MessageBuilder {
      * });
      * ```
      */
-    static attachAdaptiveCard<TData extends object>(cardTemplate: unknown, data: TData): Partial<Activity_2>;
+    static attachAdaptiveCard<TData extends object>(cardTemplate: unknown, data: TData): Partial<Activity>;
     /**
      * Build a bot message activity attached with an adaptive card.
      *
      * @param card The adaptive card content.
      * @returns A bot message activity attached with an adaptive card.
      */
-    static attachAdaptiveCardWithoutData(card: unknown): Partial<Activity_2>;
+    static attachAdaptiveCardWithoutData(card: unknown): Partial<Activity>;
     /**
      * Build a bot message activity attached with an hero card.
      *
@@ -896,7 +1300,7 @@ export declare class MessageBuilder {
      * );
      * ```
      */
-    static attachHeroCard(title: string, images?: (CardImage | string)[], buttons?: (CardAction | string)[], other?: Partial<HeroCard>): Partial<Activity_2>;
+    static attachHeroCard(title: string, images?: (CardImage | string)[], buttons?: (CardAction | string)[], other?: Partial<HeroCard>): Partial<Activity>;
     /**
      * Returns an attachment for a sign-in card.
      *
@@ -909,20 +1313,20 @@ export declare class MessageBuilder {
      * @remarks
      * For channels that don't natively support sign-in cards, an alternative message is rendered.
      */
-    static attachSigninCard(title: string, url: string, text?: string): Partial<Activity_2>;
+    static attachSigninCard(title: string, url: string, text?: string): Partial<Activity>;
     /**
      * Build a bot message activity attached with an Office 365 connector card.
      *
      * @param card A description of the Office 365 connector card.
      * @returns A bot message activity attached with an Office 365 connector card.
      */
-    static attachO365ConnectorCard(card: O365ConnectorCard): Partial<Activity_2>;
+    static attachO365ConnectorCard(card: O365ConnectorCard): Partial<Activity>;
     /**
      * Build a message activity attached with a receipt card.
      * @param card A description of the receipt card.
      * @returns A message activity attached with a receipt card.
      */
-    static AttachReceiptCard(card: ReceiptCard): Partial<Activity_2>;
+    static AttachReceiptCard(card: ReceiptCard): Partial<Activity>;
     /**
      *
      * @param title The card title.
@@ -932,13 +1336,27 @@ export declare class MessageBuilder {
      * @param other Optional. Any additional properties to include on the card.
      * @returns A message activity attached with a thumbnail card
      */
-    static attachThumbnailCard(title: string, images?: (CardImage | string)[], buttons?: (CardAction | string)[], other?: Partial<ThumbnailCard>): Partial<Activity_2>;
+    static attachThumbnailCard(title: string, images?: (CardImage | string)[], buttons?: (CardAction | string)[], other?: Partial<ThumbnailCard>): Partial<Activity>;
     /**
      * Add an attachement to a bot activity.
      * @param attachement The attachment object to attach.
      * @returns A message activity with an attachment.
      */
-    static attachContent(attachement: Attachment): Partial<Activity_2>;
+    static attachContent(attachement: Attachment): Partial<Activity>;
+}
+
+/**
+ * Token response provided by Teams Bot SSO prompt
+ */
+export declare interface MessageExtensionTokenResponse extends TokenResponse {
+    /**
+     * SSO token for user
+     */
+    ssoToken: string;
+    /**
+     * Expire time of SSO token
+     */
+    ssoTokenExpiration: string;
 }
 
 /**
@@ -1008,6 +1426,43 @@ export declare class NotificationBot {
      * @returns - an array of {@link TeamsBotInstallation}.
      */
     installations(): Promise<TeamsBotInstallation[]>;
+    /**
+     * Returns the first {@link Member} where predicate is true, and undefined otherwise.
+     *
+     * @param predicate find calls predicate once for each member of the installation,
+     * until it finds one where predicate returns true. If such a member is found, find
+     * immediately returns that member. Otherwise, find returns undefined.
+     * @param scope the scope to find members from the installations
+     * (personal chat, group chat, Teams channel).
+     * @returns the first {@link Member} where predicate is true, and undefined otherwise.
+     */
+    findMember(predicate: (member: Member) => Promise<boolean>, scope?: SearchScope): Promise<Member | undefined>;
+    /**
+     * Returns the first {@link Channel} where predicate is true, and undefined otherwise.
+     *
+     * @param predicate find calls predicate once for each channel of the installation,
+     * until it finds one where predicate returns true. If such a channel is found, find
+     * immediately returns that channel. Otherwise, find returns undefined.
+     * @returns the first {@link Channel} where predicate is true, and undefined otherwise.
+     */
+    findChannel(predicate: (channel: Channel, teamDetails: TeamDetails | undefined) => Promise<boolean>): Promise<Channel | undefined>;
+    /**
+     * Returns all {@link Member} where predicate is true, and empty array otherwise.
+     *
+     * @param predicate find calls predicate for each member of the installation.
+     * @param scope the scope to find members from the installations
+     * (personal chat, group chat, Teams channel).
+     * @returns an array of {@link Member} where predicate is true, and empty array otherwise.
+     */
+    findAllMembers(predicate: (member: Member) => Promise<boolean>, scope?: SearchScope): Promise<Member[]>;
+    /**
+     * Returns all {@link Channel} where predicate is true, and empty array otherwise.
+     *
+     * @param predicate find calls predicate for each channel of the installation.
+     * @returns an array of {@link Channel} where predicate is true, and empty array otherwise.
+     */
+    findAllChannels(predicate: (channel: Channel, teamDetails: TeamDetails | undefined) => Promise<boolean>): Promise<Channel[]>;
+    private matchSearchScope;
 }
 
 /**
@@ -1197,6 +1652,30 @@ export declare class OnBehalfOfUserCredential implements TokenCredential {
     private generateAuthServerError;
 }
 
+/**
+ * The search scope when calling {@link NotificationBot.findMember} and {@link NotificationBot.findAllMembers}.
+ * The search scope is a flagged enum and it can be combined with `|`.
+ * For example, to search from personal chat and group chat, use `SearchScope.Person | SearchScope.Group`.
+ */
+export declare enum SearchScope {
+    /**
+     * Search members from the installations in personal chat only.
+     */
+    Person = 1,
+    /**
+     * Search members from the installations in group chat only.
+     */
+    Group = 2,
+    /**
+     * Search members from the installations in Teams channel only.
+     */
+    Channel = 4,
+    /**
+     * Search members from all installations including personal chat, group chat and Teams channel.
+     */
+    All = 7
+}
+
 /**
  * Send an adaptive card message to a notification target.
  *
@@ -1318,6 +1797,12 @@ export declare class TeamsBotInstallation implements NotificationTarget {
      * @returns an array of members from where the bot is installed.
      */
     members(): Promise<Member[]>;
+    /**
+     * Get team details from this bot installation
+     *
+     * @returns the team details if bot is installed into a team, otherwise returns undefined.
+     */
+    getTeamDetails(): Promise<TeamDetails | undefined>;
 }
 
 /**
@@ -1511,7 +1996,7 @@ export declare class TeamsFx implements TeamsFxConfiguration {
      *
      * @throws {@link ErrorCode|IdentityTypeNotSupported} when setting app identity in browser.
      */
-    constructor(identityType?: IdentityType, customConfig?: Record<string, string>);
+    constructor(identityType?: IdentityType, customConfig?: Record<string, string> | AuthenticationConfiguration);
     /**
      * Identity type set by user.
      *
@@ -1530,9 +2015,10 @@ export declare class TeamsFx implements TeamsFxConfiguration {
     getCredential(): TokenCredential;
     /**
      * Get user information.
+     * @param {string[]} resources - The optional list of resources for full trust Teams apps.
      * @returns UserInfo object.
      */
-    getUserInfo(): Promise<UserInfo>;
+    getUserInfo(resources?: string[]): Promise<UserInfo>;
     /**
      * Popup login page to get user's access token with specific scopes.
      *
@@ -1547,13 +2033,14 @@ export declare class TeamsFx implements TeamsFxConfiguration {
      * await teamsfx.login("https://graph.microsoft.com/User.Read Calendars.Read"); // multiple scopes using string
      * ```
      * @param scopes - The list of scopes for which the token will have access, before that, we will request user to consent.
+     * @param {string[]} resources - The optional list of resources for full trust Teams apps.
      *
      * @throws {@link ErrorCode|InternalError} when failed to login with unknown error.
      * @throws {@link ErrorCode|ConsentFailed} when user canceled or failed to consent.
      * @throws {@link ErrorCode|InvalidParameter} when scopes is not a valid string or string array.
      * @throws {@link ErrorCode|RuntimeNotSupported} when runtime is nodeJS.
      */
-    login(scopes: string | string[]): Promise<void>;
+    login(scopes: string | string[], resources?: string[]): Promise<void>;
     /**
      * Set SSO token when using user identity in NodeJS.
      * @param {string} ssoToken - used for on behalf of user flow.
@@ -1583,6 +2070,47 @@ export declare class TeamsFx implements TeamsFxConfiguration {
     private loadFromEnv;
 }
 
+/**
+ * Interface for adaptive card action handler that can process card action invoke and return a response.
+ */
+export declare interface TeamsFxAdaptiveCardActionHandler {
+    /**
+     * The verb defined in adaptive card action that can trigger this handler.
+     * The verb string here is case-insensitive.
+     */
+    triggerVerb: string;
+    /**
+     * Specify the behavior for how the card response will be sent in Teams conversation.
+     * The default value is `AdaptiveCardResponse.ReplaceForInteractor`, which means the card
+     * response will replace the current one only for the interactor.
+     */
+    adaptiveCardResponse?: AdaptiveCardResponse;
+    /**
+     * The handler function that will be invoked when the action is fired.
+     * @param context The turn context.
+     * @param actionData The contextual data that associated with the action.
+     *
+     * @returns A `Promise` representing a invoke response for the adaptive card invoke action.
+     * You can use the `InvokeResponseFactory` utility class to create an invoke response from
+     *  - A text message:
+     *   ```typescript
+     *   return InvokeResponseFactory.textMessage("Action is processed successfully!");
+     *   ```
+     *  - An adaptive card:
+     *    ```typescript
+     *    const responseCard = AdaptiveCards.declare(helloWorldCard).render(actionData);
+     return InvokeResponseFactory.adaptiveCard(responseCard);
+     *    ```
+     *  - An error response:
+     *     ```typescript
+     *     return InvokeResponseFactory.errorResponse(InvokeResponseErrorCode.BadRequest, "Invalid request");
+     *     ```
+     *
+     * @remark For more details about the invoke response format, refer to https://docs.microsoft.com/en-us/adaptive-cards/authoring-cards/universal-action-model#response-format.
+     */
+    handleActionInvoked(context: TurnContext, actionData: any): Promise<InvokeResponse>;
+}
+
 /**
  * Interface for a command handler that can process command to a TeamsFx bot and return a response.
  */
@@ -1602,6 +2130,26 @@ export declare interface TeamsFxBotCommandHandler {
     handleCommandReceived(context: TurnContext, message: CommandMessage): Promise<string | Partial<Activity> | void>;
 }
 
+/**
+ * Interface for a command handler that can process sso command to a TeamsFx bot and return a response.
+ */
+export declare interface TeamsFxBotSsoCommandHandler {
+    /**
+     * The string or regular expression patterns that can trigger this handler.
+     */
+    triggerPatterns: TriggerPatterns;
+    /**
+     * Handles a bot command received activity.
+     *
+     * @param context The bot context.
+     * @param message The command message the user types from Teams.
+     * @param tokenResponse The tokenResponse which contains sso token that can be used to exchange access token for the bot.
+     * @returns A `Promise` representing an activity or text to send as the command response.
+     * Or no return value if developers want to send the response activity by themselves in this method.
+     */
+    handleCommandReceived(context: TurnContext, message: CommandMessage, tokenResponse: TeamsBotSsoPromptTokenResponse): Promise<string | Partial<Activity> | void>;
+}
+
 /**
  * TeamsFx interface that provides credential and configuration.
  */
@@ -1624,9 +2172,10 @@ declare interface TeamsFxConfiguration {
     getCredential(): TokenCredential;
     /**
      * Get user information.
+     * @param {string[]} resources - The optional list of resources for full trust Teams apps.
      * @returns UserInfo object.
      */
-    getUserInfo(): Promise<UserInfo>;
+    getUserInfo(resources?: string[]): Promise<UserInfo>;
     /**
      * Popup login page to get user's access token with specific scopes.
      *
@@ -1641,13 +2190,14 @@ declare interface TeamsFxConfiguration {
      * await teamsfx.login("https://graph.microsoft.com/User.Read Calendars.Read"); // multiple scopes using string
      * ```
      * @param scopes - The list of scopes for which the token will have access, before that, we will request user to consent.
+     * @param {string[]} resources - The optional list of resources for full trust Teams apps.
      *
      * @throws {@link ErrorCode|InternalError} when failed to login with unknown error.
      * @throws {@link ErrorCode|ConsentFailed} when user canceled or failed to consent.
      * @throws {@link ErrorCode|InvalidParameter} when scopes is not a valid string or string array.
      * @throws {@link ErrorCode|RuntimeNotSupported} when runtime is nodeJS.
      */
-    login(scopes: string | string[]): Promise<void>;
+    login(scopes: string | string[], resources?: string[]): Promise<void>;
     /**
      * Set SSO token when using user identity in NodeJS.
      * @param {string} ssoToken - used for on behalf of user flow.
@@ -1688,10 +2238,13 @@ export declare class TeamsUserCredential implements TokenCredential {
     constructor(authConfig: AuthenticationConfiguration);
     /**
      * Popup login page to get user's access token with specific scopes.
+     *
+     * @param {string[]} resources - The optional list of resources for full trust Teams apps.
+     *
      * @remarks
      * Can only be used within Teams.
      */
-    login(scopes: string | string[]): Promise<void>;
+    login(scopes: string | string[], resources?: string[]): Promise<void>;
     /**
      * Get access token from credential.
      * @remarks
@@ -1700,10 +2253,13 @@ export declare class TeamsUserCredential implements TokenCredential {
     getToken(scopes: string | string[], options?: GetTokenOptions): Promise<AccessToken | null>;
     /**
      * Get basic user info from SSO token
+     *
+     * @param {string[]} resources - The optional list of resources for full trust Teams apps.
+     *
      * @remarks
      * Can only be used within Teams.
      */
-    getUserInfo(): Promise<UserInfo>;
+    getUserInfo(resources?: string[]): Promise<UserInfo>;
 }
 
 /**