@microsoft/teamsfx 1.1.2-alpha.efe3d972e.0 → 1.2.0-rc.0

package/types/teamsfx.d.ts

@@ -1,8 +1,7 @@
 /// <reference types="node" />
 
 import { AccessToken } from '@azure/identity';
-import { Activity } from 'botbuilder-core';
-import { Activity as Activity_2 } from 'botbuilder';
+import { Activity } from 'botbuilder';
 import { Attachment } from 'botbuilder';
 import { AuthenticationProvider } from '@microsoft/microsoft-graph-client';
 import { AxiosInstance } from 'axios';
@@ -12,26 +11,32 @@ import { CardAction } from 'botbuilder';
 import { CardImage } from 'botbuilder';
 import { ChannelInfo } from 'botbuilder';
 import { Client } from '@microsoft/microsoft-graph-client';
+import { ComponentDialog } from 'botbuilder-dialogs';
 import { ConnectionConfig } from 'tedious';
 import { ConversationReference } from 'botbuilder';
+import { ConversationState } from 'botbuilder';
 import { Dialog } from 'botbuilder-dialogs';
 import { DialogContext } from 'botbuilder-dialogs';
 import { DialogTurnResult } from 'botbuilder-dialogs';
 import { GetTokenOptions } from '@azure/identity';
 import { HeroCard } from 'botbuilder';
 import { IAdaptiveCard } from 'adaptivecards';
-import { InvokeResponse } from 'botbuilder-core';
-import { InvokeResponse as InvokeResponse_2 } from 'botbuilder';
+import { InvokeResponse } from 'botbuilder';
+import { MessagingExtensionResponse } from 'botbuilder';
 import { O365ConnectorCard } from 'botbuilder';
 import { ReceiptCard } from 'botbuilder';
 import { SecureContextOptions } from 'tls';
+import { SigninStateVerificationQuery } from 'botbuilder';
+import { StatePropertyAccessor } from 'botbuilder';
 import { StatusCodes } from 'botbuilder';
+import { Storage as Storage_2 } from 'botbuilder';
+import { TeamDetails } from 'botbuilder';
 import { TeamsChannelAccount } from 'botbuilder';
 import { ThumbnailCard } from 'botbuilder';
 import { TokenCredential } from '@azure/identity';
 import { TokenResponse } from 'botframework-schema';
-import { TurnContext } from 'botbuilder-core';
-import { TurnContext as TurnContext_2 } from 'botbuilder';
+import { TurnContext } from 'botbuilder';
+import { UserState } from 'botbuilder';
 import { WebRequest } from 'botbuilder';
 import { WebResponse } from 'botbuilder';
 
@@ -271,6 +276,176 @@ export declare class BearerTokenAuthProvider implements AuthProvider {
     AddAuthenticationInfo(config: AxiosRequestConfig): Promise<AxiosRequestConfig>;
 }
 
+/**
+ * Interface for SSO configuration for Bot SSO
+ */
+export declare interface BotSsoConfig {
+    /**
+     * aad related configurations
+     */
+    aad: {
+        /**
+         * The list of scopes for which the token will have access
+         */
+        scopes: string[];
+    } & AuthenticationConfiguration;
+    dialog?: {
+        /**
+         * Custom sso execution activity handler class which should implement the interface {@link BotSsoExecutionActivityHandler}. If not provided, it will use {@link DefaultBotSsoExecutionActivityHandler} by default
+         */
+        CustomBotSsoExecutionActivityHandler?: new (ssoConfig: BotSsoConfig) => BotSsoExecutionActivityHandler;
+        /**
+         * Conversation state for sso command bot, if not provided, it will use internal memory storage to create a new one.
+         */
+        conversationState?: ConversationState;
+        /**
+         * User state for sso command bot, if not provided, it will use internal memory storage to create a new one.
+         */
+        userState?: UserState;
+        /**
+         * Used by {@link BotSsoExecutionDialog} to remove duplicated messages, if not provided, it will use internal memory storage
+         */
+        dedupStorage?: Storage_2;
+        /**
+         * Settings used to configure an teams sso prompt dialog.
+         */
+        ssoPromptConfig?: {
+            /**
+             * Number of milliseconds the prompt will wait for the user to authenticate.
+             * Defaults to a value `900,000` (15 minutes.)
+             */
+            timeout?: number;
+            /**
+             * Value indicating whether the TeamsBotSsoPrompt should end upon receiving an
+             * invalid message.  Generally the TeamsBotSsoPrompt will end the auth flow when receives user
+             * message not related to the auth flow. Setting the flag to false ignores the user's message instead.
+             * Defaults to value `true`
+             */
+            endOnInvalidMessage?: boolean;
+        };
+    };
+}
+
+/**
+ * Interface for user to customize SSO execution activity handler
+ *
+ * @remarks
+ * Bot SSO execution activity handler is to handle SSO login process and trigger SSO command using {@link BotSsoExecutionDialog}.
+ * You can use this interface to implement your own SSO execution dialog, and pass it to ConversationBot options:
+ *
+ * ```typescript
+ * export const commandBot = new ConversationBot({
+ *   ...
+ *   ssoConfig: {
+ *     ...
+ *     dialog: {
+ *       CustomBotSsoExecutionActivityHandler: YourCustomBotSsoExecutionActivityHandler,
+ *     }
+ *   },
+ *    ...
+ * });
+ * ```
+ * For details information about how to implement a BotSsoExecutionActivityHandler, please refer DefaultBotSsoExecutionActivityHandler class source code: https://aka.ms/teamsfx-default-sso-execution-activity-handler
+ */
+export declare interface BotSsoExecutionActivityHandler {
+    /**
+     * Add {@link TeamsFxBotSsoCommandHandler} instance to {@link BotSsoExecutionDialog}
+     * @param handler {@link BotSsoExecutionDialogHandler} callback function
+     * @param triggerPatterns The trigger pattern
+     *
+     * @remarks
+     * This function is used to add SSO command to {@link BotSsoExecutionDialog} instance.
+     */
+    addCommand(handler: BotSsoExecutionDialogHandler, triggerPatterns: TriggerPatterns): void;
+    /**
+     * Called to initiate the event emission process.
+     * @param context The context object for the current turn.
+     */
+    run(context: TurnContext): Promise<void>;
+    /**
+     * Receives invoke activities with Activity name of 'signin/verifyState'.
+     * @param context A context object for this turn.
+     * @param query Signin state (part of signin action auth flow) verification invoke query.
+     * @returns A promise that represents the work queued.
+     *
+     * @remarks
+     * It should trigger {@link BotSsoExecutionDialog} instance to handle signin process
+     */
+    handleTeamsSigninVerifyState(context: TurnContext, query: SigninStateVerificationQuery): Promise<void>;
+    /**
+     * Receives invoke activities with Activity name of 'signin/tokenExchange'
+     * @param context A context object for this turn.
+     * @param query Signin state (part of signin action auth flow) verification invoke query
+     * @returns A promise that represents the work queued.
+     *
+     * @remark
+     * It should trigger {@link BotSsoExecutionDialog} instance to handle signin process
+     */
+    handleTeamsSigninTokenExchange(context: TurnContext, query: SigninStateVerificationQuery): Promise<void>;
+}
+
+/**
+ * Sso execution dialog, use to handle sso command
+ */
+export declare class BotSsoExecutionDialog extends ComponentDialog {
+    private dedupStorage;
+    private dedupStorageKeys;
+    private commandMapping;
+    /**
+     * Creates a new instance of the BotSsoExecutionDialog.
+     * @param dedupStorage Helper storage to remove duplicated messages
+     * @param settings The list of scopes for which the token will have access
+     * @param teamsfx {@link TeamsFx} instance for authentication
+     */
+    constructor(dedupStorage: Storage_2, ssoPromptSettings: TeamsBotSsoPromptSettings, teamsfx: TeamsFx, dialogName?: string);
+    /**
+     * Add TeamsFxBotSsoCommandHandler instance
+     * @param handler {@link BotSsoExecutionDialogHandler} callback function
+     * @param triggerPatterns The trigger pattern
+     */
+    addCommand(handler: BotSsoExecutionDialogHandler, triggerPatterns: TriggerPatterns): void;
+    private getCommandHash;
+    /**
+     * The run method handles the incoming activity (in the form of a DialogContext) and passes it through the dialog system.
+     *
+     * @param context The context object for the current turn.
+     * @param accessor The instance of StatePropertyAccessor for dialog system.
+     */
+    run(context: TurnContext, accessor: StatePropertyAccessor): Promise<void>;
+    private getActivityText;
+    private commandRouteStep;
+    private ssoStep;
+    private dedupStep;
+    /**
+     * Called when the component is ending.
+     *
+     * @param context Context for the current turn of conversation.
+     */
+    protected onEndDialog(context: TurnContext): Promise<void>;
+    /**
+     * If a user is signed into multiple Teams clients, the Bot might receive a "signin/tokenExchange" from each client.
+     * Each token exchange request for a specific user login will have an identical activity.value.Id.
+     * Only one of these token exchange requests should be processed by the bot. For a distributed bot in production,
+     * this requires a distributed storage to ensure only one token exchange is processed.
+     * @param context Context for the current turn of conversation.
+     * @returns boolean value indicate whether the message should be removed
+     */
+    private shouldDedup;
+    private getStorageKey;
+    private matchPattern;
+    private isPatternMatched;
+    private getMatchesCommandId;
+    /**
+     * Ensure bot is running in MS Teams since TeamsBotSsoPrompt is only supported in MS Teams channel.
+     * @param dc dialog context
+     * @throws {@link ErrorCode|ChannelNotSupported} if bot channel is not MS Teams
+     * @internal
+     */
+    private ensureMsTeamsChannel;
+}
+
+export declare type BotSsoExecutionDialogHandler = (context: TurnContext, tokenResponse: TeamsBotSsoPromptTokenResponse, message: CommandMessage) => Promise<void>;
+
 /**
  * A card action bot to respond to adaptive card universal actions.
  */
@@ -389,25 +564,39 @@ export declare class Channel implements NotificationTarget {
 export declare class CommandBot {
     private readonly adapter;
     private readonly middleware;
+    private readonly ssoConfig;
     /**
      * Creates a new instance of the `CommandBot`.
      *
      * @param adapter The bound `BotFrameworkAdapter`.
      * @param options - initialize options
      */
-    constructor(adapter: BotFrameworkAdapter, options?: CommandOptions);
+    constructor(adapter: BotFrameworkAdapter, options?: CommandOptions, ssoCommandActivityHandler?: BotSsoExecutionActivityHandler, ssoConfig?: BotSsoConfig);
     /**
      * Registers a command into the command bot.
      *
-     * @param command The command to registered.
+     * @param command The command to register.
      */
     registerCommand(command: TeamsFxBotCommandHandler): void;
     /**
      * Registers commands into the command bot.
      *
-     * @param commands The command to registered.
+     * @param commands The commands to register.
      */
     registerCommands(commands: TeamsFxBotCommandHandler[]): void;
+    /**
+     * Registers a sso command into the command bot.
+     *
+     * @param command The command to register.
+     */
+    registerSsoCommand(ssoCommand: TeamsFxBotSsoCommandHandler): void;
+    /**
+     * Registers commands into the command bot.
+     *
+     * @param commands The commands to register.
+     */
+    registerSsoCommands(ssoCommands: TeamsFxBotSsoCommandHandler[]): void;
+    private validateSsoActivityHandler;
 }
 
 /**
@@ -432,6 +621,10 @@ export declare interface CommandOptions {
      * The commands to registered with the command bot. Each command should implement the interface {@link TeamsFxBotCommandHandler} so that it can be correctly handled by this command bot.
      */
     commands?: TeamsFxBotCommandHandler[];
+    /**
+     * The commands to registered with the sso command bot. Each sso command should implement the interface {@link TeamsFxBotSsoCommandHandler} so that it can be correctly handled by this command bot.
+     */
+    ssoCommands?: TeamsFxBotSsoCommandHandler[];
 }
 
 /**
@@ -533,7 +726,7 @@ export declare class ConversationBot {
      * });
      * ```
      */
-    requestHandler(req: WebRequest, res: WebResponse, logic?: (context: TurnContext_2) => Promise<any>): Promise<void>;
+    requestHandler(req: WebRequest, res: WebResponse, logic?: (context: TurnContext) => Promise<any>): Promise<void>;
 }
 
 /**
@@ -558,6 +751,10 @@ export declare interface ConversationOptions {
     adapterConfig?: {
         [key: string]: unknown;
     };
+    /**
+     * Configurations for sso command bot
+     */
+    ssoConfig?: BotSsoConfig;
     /**
      * The command part.
      */
@@ -708,6 +905,30 @@ export declare enum ErrorCode {
      * Channel is not supported error.
      */
     ChannelNotSupported = "ChannelNotSupported",
+    /**
+     * Failed to retrieve sso token
+     */
+    FailedToRetrieveSsoToken = "FailedToRetrieveSsoToken",
+    /**
+     * Failed to process sso handler
+     */
+    FailedToProcessSsoHandler = "FailedToProcessSsoHandler",
+    /**
+     * Cannot find command
+     */
+    CannotFindCommand = "CannotFindCommand",
+    /**
+     * Failed to run sso step
+     */
+    FailedToRunSsoStep = "FailedToRunSsoStep",
+    /**
+     * Failed to run dedup step
+     */
+    FailedToRunDedupStep = "FailedToRunDedupStep",
+    /**
+     * Sso activity handler is undefined
+     */
+    SsoActivityHandlerIsUndefined = "SsoActivityHandlerIsUndefined",
     /**
      * Runtime is not supported error.
      */
@@ -772,6 +993,10 @@ export declare class ErrorWithCode extends Error {
  */
 export declare function getLogLevel(): LogLevel | undefined;
 
+export declare interface GetTeamsUserTokenOptions extends GetTokenOptions {
+    resources?: string[];
+}
+
 /**
  * Generate connection configuration consumed by tedious.
  *
@@ -786,6 +1011,25 @@ export declare function getLogLevel(): LogLevel | undefined;
  */
 export declare function getTediousConnectionConfig(teamsfx: TeamsFx, databaseName?: string): Promise<ConnectionConfig>;
 
+/**
+ * Users execute query in message extension with SSO or access token.
+ *
+ * @param {TurnContext} context - The context object for the current turn.
+ * @param {AuthenticationConfiguration} config - User custom the message extension authentication configuration.
+ * @param {string| string[]} scopes - The list of scopes for which the token will have access.
+ * @param {function} logic - Business logic when executing the query in message extension with SSO or access token.
+ *
+ * @throws {@link ErrorCode|InternalError} when User invoke not response to message extension query.
+ * @throws {@link ErrorCode|InternalError} when failed to get access token with unknown error.
+ * @throws {@link ErrorCode|TokenExpiredError} when SSO token has already expired.
+ * @throws {@link ErrorCode|ServiceError} when failed to get access token from simple auth server.
+ * @throws {@link ErrorCode|InvalidParameter} when scopes is not a valid string or string array.
+ * @throws {@link ErrorCode|RuntimeNotSupported} when runtime is nodeJS.
+ *
+ * @returns A MessageExtension Response for the activity. If the logic not return any, return void instead.
+ */
+export declare function handleMessageExtensionQueryWithToken(context: TurnContext, config: AuthenticationConfiguration | null, scopes: string | string[], logic: (token: MessageExtensionTokenResponse) => Promise<any>): Promise<MessagingExtensionResponse | void>;
+
 /**
  * Identity type to use in authentication.
  */
@@ -853,7 +1097,7 @@ export declare class InvokeResponseFactory {
      *
      * @returns {InvokeResponse} An InvokeResponse object.
      */
-    static textMessage(message: string): InvokeResponse_2;
+    static textMessage(message: string): InvokeResponse;
     /**
      * Create an invoke response from an adaptive card.
      *
@@ -865,7 +1109,7 @@ export declare class InvokeResponseFactory {
      *
      * @returns {InvokeResponse} An InvokeResponse object.
      */
-    static adaptiveCard(card: IAdaptiveCard): InvokeResponse_2;
+    static adaptiveCard(card: IAdaptiveCard): InvokeResponse;
     /**
      * Create an invoke response with error code and message.
      *
@@ -879,7 +1123,7 @@ export declare class InvokeResponseFactory {
      *
      * @returns {InvokeResponse} An InvokeResponse object.
      */
-    static errorResponse(errorCode: InvokeResponseErrorCode, errorMessage: string): InvokeResponse_2;
+    static errorResponse(errorCode: InvokeResponseErrorCode, errorMessage: string): InvokeResponse;
     /**
      * Create an invoke response with status code and response value.
      * @param statusCode The status code.
@@ -887,7 +1131,7 @@ export declare class InvokeResponseFactory {
      *
      * @returns {InvokeResponse} An InvokeResponse object.
      */
-    static createInvokeResponse(statusCode: StatusCodes, body?: unknown): InvokeResponse_2;
+    static createInvokeResponse(statusCode: StatusCodes, body?: unknown): InvokeResponse;
 }
 
 /**
@@ -1028,14 +1272,14 @@ export declare class MessageBuilder {
      * });
      * ```
      */
-    static attachAdaptiveCard<TData extends object>(cardTemplate: unknown, data: TData): Partial<Activity_2>;
+    static attachAdaptiveCard<TData extends object>(cardTemplate: unknown, data: TData): Partial<Activity>;
     /**
      * Build a bot message activity attached with an adaptive card.
      *
      * @param card The adaptive card content.
      * @returns A bot message activity attached with an adaptive card.
      */
-    static attachAdaptiveCardWithoutData(card: unknown): Partial<Activity_2>;
+    static attachAdaptiveCardWithoutData(card: unknown): Partial<Activity>;
     /**
      * Build a bot message activity attached with an hero card.
      *
@@ -1056,7 +1300,7 @@ export declare class MessageBuilder {
      * );
      * ```
      */
-    static attachHeroCard(title: string, images?: (CardImage | string)[], buttons?: (CardAction | string)[], other?: Partial<HeroCard>): Partial<Activity_2>;
+    static attachHeroCard(title: string, images?: (CardImage | string)[], buttons?: (CardAction | string)[], other?: Partial<HeroCard>): Partial<Activity>;
     /**
      * Returns an attachment for a sign-in card.
      *
@@ -1069,20 +1313,20 @@ export declare class MessageBuilder {
      * @remarks
      * For channels that don't natively support sign-in cards, an alternative message is rendered.
      */
-    static attachSigninCard(title: string, url: string, text?: string): Partial<Activity_2>;
+    static attachSigninCard(title: string, url: string, text?: string): Partial<Activity>;
     /**
      * Build a bot message activity attached with an Office 365 connector card.
      *
      * @param card A description of the Office 365 connector card.
      * @returns A bot message activity attached with an Office 365 connector card.
      */
-    static attachO365ConnectorCard(card: O365ConnectorCard): Partial<Activity_2>;
+    static attachO365ConnectorCard(card: O365ConnectorCard): Partial<Activity>;
     /**
      * Build a message activity attached with a receipt card.
      * @param card A description of the receipt card.
      * @returns A message activity attached with a receipt card.
      */
-    static AttachReceiptCard(card: ReceiptCard): Partial<Activity_2>;
+    static AttachReceiptCard(card: ReceiptCard): Partial<Activity>;
     /**
      *
      * @param title The card title.
@@ -1092,13 +1336,27 @@ export declare class MessageBuilder {
      * @param other Optional. Any additional properties to include on the card.
      * @returns A message activity attached with a thumbnail card
      */
-    static attachThumbnailCard(title: string, images?: (CardImage | string)[], buttons?: (CardAction | string)[], other?: Partial<ThumbnailCard>): Partial<Activity_2>;
+    static attachThumbnailCard(title: string, images?: (CardImage | string)[], buttons?: (CardAction | string)[], other?: Partial<ThumbnailCard>): Partial<Activity>;
     /**
      * Add an attachement to a bot activity.
      * @param attachement The attachment object to attach.
      * @returns A message activity with an attachment.
      */
-    static attachContent(attachement: Attachment): Partial<Activity_2>;
+    static attachContent(attachement: Attachment): Partial<Activity>;
+}
+
+/**
+ * Token response provided by Teams Bot SSO prompt
+ */
+export declare interface MessageExtensionTokenResponse extends TokenResponse {
+    /**
+     * SSO token for user
+     */
+    ssoToken: string;
+    /**
+     * Expire time of SSO token
+     */
+    ssoTokenExpiration: string;
 }
 
 /**
@@ -1168,6 +1426,43 @@ export declare class NotificationBot {
      * @returns - an array of {@link TeamsBotInstallation}.
      */
     installations(): Promise<TeamsBotInstallation[]>;
+    /**
+     * Returns the first {@link Member} where predicate is true, and undefined otherwise.
+     *
+     * @param predicate find calls predicate once for each member of the installation,
+     * until it finds one where predicate returns true. If such a member is found, find
+     * immediately returns that member. Otherwise, find returns undefined.
+     * @param scope the scope to find members from the installations
+     * (personal chat, group chat, Teams channel).
+     * @returns the first {@link Member} where predicate is true, and undefined otherwise.
+     */
+    findMember(predicate: (member: Member) => Promise<boolean>, scope?: SearchScope): Promise<Member | undefined>;
+    /**
+     * Returns the first {@link Channel} where predicate is true, and undefined otherwise.
+     *
+     * @param predicate find calls predicate once for each channel of the installation,
+     * until it finds one where predicate returns true. If such a channel is found, find
+     * immediately returns that channel. Otherwise, find returns undefined.
+     * @returns the first {@link Channel} where predicate is true, and undefined otherwise.
+     */
+    findChannel(predicate: (channel: Channel, teamDetails: TeamDetails | undefined) => Promise<boolean>): Promise<Channel | undefined>;
+    /**
+     * Returns all {@link Member} where predicate is true, and empty array otherwise.
+     *
+     * @param predicate find calls predicate for each member of the installation.
+     * @param scope the scope to find members from the installations
+     * (personal chat, group chat, Teams channel).
+     * @returns an array of {@link Member} where predicate is true, and empty array otherwise.
+     */
+    findAllMembers(predicate: (member: Member) => Promise<boolean>, scope?: SearchScope): Promise<Member[]>;
+    /**
+     * Returns all {@link Channel} where predicate is true, and empty array otherwise.
+     *
+     * @param predicate find calls predicate for each channel of the installation.
+     * @returns an array of {@link Channel} where predicate is true, and empty array otherwise.
+     */
+    findAllChannels(predicate: (channel: Channel, teamDetails: TeamDetails | undefined) => Promise<boolean>): Promise<Channel[]>;
+    private matchSearchScope;
 }
 
 /**
@@ -1357,6 +1652,30 @@ export declare class OnBehalfOfUserCredential implements TokenCredential {
     private generateAuthServerError;
 }
 
+/**
+ * The search scope when calling {@link NotificationBot.findMember} and {@link NotificationBot.findAllMembers}.
+ * The search scope is a flagged enum and it can be combined with `|`.
+ * For example, to search from personal chat and group chat, use `SearchScope.Person | SearchScope.Group`.
+ */
+export declare enum SearchScope {
+    /**
+     * Search members from the installations in personal chat only.
+     */
+    Person = 1,
+    /**
+     * Search members from the installations in group chat only.
+     */
+    Group = 2,
+    /**
+     * Search members from the installations in Teams channel only.
+     */
+    Channel = 4,
+    /**
+     * Search members from all installations including personal chat, group chat and Teams channel.
+     */
+    All = 7
+}
+
 /**
  * Send an adaptive card message to a notification target.
  *
@@ -1478,6 +1797,12 @@ export declare class TeamsBotInstallation implements NotificationTarget {
      * @returns an array of members from where the bot is installed.
      */
     members(): Promise<Member[]>;
+    /**
+     * Get team details from this bot installation
+     *
+     * @returns the team details if bot is installed into a team, otherwise returns undefined.
+     */
+    getTeamDetails(): Promise<TeamDetails | undefined>;
 }
 
 /**
@@ -1671,7 +1996,7 @@ export declare class TeamsFx implements TeamsFxConfiguration {
      *
      * @throws {@link ErrorCode|IdentityTypeNotSupported} when setting app identity in browser.
      */
-    constructor(identityType?: IdentityType, customConfig?: Record<string, string>);
+    constructor(identityType?: IdentityType, customConfig?: Record<string, string> | AuthenticationConfiguration);
     /**
      * Identity type set by user.
      *
@@ -1690,9 +2015,10 @@ export declare class TeamsFx implements TeamsFxConfiguration {
     getCredential(): TokenCredential;
     /**
      * Get user information.
+     * @param {string[]} resources - The optional list of resources for full trust Teams apps.
      * @returns UserInfo object.
      */
-    getUserInfo(): Promise<UserInfo>;
+    getUserInfo(resources?: string[]): Promise<UserInfo>;
     /**
      * Popup login page to get user's access token with specific scopes.
      *
@@ -1707,13 +2033,14 @@ export declare class TeamsFx implements TeamsFxConfiguration {
      * await teamsfx.login("https://graph.microsoft.com/User.Read Calendars.Read"); // multiple scopes using string
      * ```
      * @param scopes - The list of scopes for which the token will have access, before that, we will request user to consent.
+     * @param {string[]} resources - The optional list of resources for full trust Teams apps.
      *
      * @throws {@link ErrorCode|InternalError} when failed to login with unknown error.
      * @throws {@link ErrorCode|ConsentFailed} when user canceled or failed to consent.
      * @throws {@link ErrorCode|InvalidParameter} when scopes is not a valid string or string array.
      * @throws {@link ErrorCode|RuntimeNotSupported} when runtime is nodeJS.
      */
-    login(scopes: string | string[]): Promise<void>;
+    login(scopes: string | string[], resources?: string[]): Promise<void>;
     /**
      * Set SSO token when using user identity in NodeJS.
      * @param {string} ssoToken - used for on behalf of user flow.
@@ -1803,6 +2130,26 @@ export declare interface TeamsFxBotCommandHandler {
     handleCommandReceived(context: TurnContext, message: CommandMessage): Promise<string | Partial<Activity> | void>;
 }
 
+/**
+ * Interface for a command handler that can process sso command to a TeamsFx bot and return a response.
+ */
+export declare interface TeamsFxBotSsoCommandHandler {
+    /**
+     * The string or regular expression patterns that can trigger this handler.
+     */
+    triggerPatterns: TriggerPatterns;
+    /**
+     * Handles a bot command received activity.
+     *
+     * @param context The bot context.
+     * @param message The command message the user types from Teams.
+     * @param tokenResponse The tokenResponse which contains sso token that can be used to exchange access token for the bot.
+     * @returns A `Promise` representing an activity or text to send as the command response.
+     * Or no return value if developers want to send the response activity by themselves in this method.
+     */
+    handleCommandReceived(context: TurnContext, message: CommandMessage, tokenResponse: TeamsBotSsoPromptTokenResponse): Promise<string | Partial<Activity> | void>;
+}
+
 /**
  * TeamsFx interface that provides credential and configuration.
  */
@@ -1825,9 +2172,10 @@ declare interface TeamsFxConfiguration {
     getCredential(): TokenCredential;
     /**
      * Get user information.
+     * @param {string[]} resources - The optional list of resources for full trust Teams apps.
      * @returns UserInfo object.
      */
-    getUserInfo(): Promise<UserInfo>;
+    getUserInfo(resources?: string[]): Promise<UserInfo>;
     /**
      * Popup login page to get user's access token with specific scopes.
      *
@@ -1842,13 +2190,14 @@ declare interface TeamsFxConfiguration {
      * await teamsfx.login("https://graph.microsoft.com/User.Read Calendars.Read"); // multiple scopes using string
      * ```
      * @param scopes - The list of scopes for which the token will have access, before that, we will request user to consent.
+     * @param {string[]} resources - The optional list of resources for full trust Teams apps.
      *
      * @throws {@link ErrorCode|InternalError} when failed to login with unknown error.
      * @throws {@link ErrorCode|ConsentFailed} when user canceled or failed to consent.
      * @throws {@link ErrorCode|InvalidParameter} when scopes is not a valid string or string array.
      * @throws {@link ErrorCode|RuntimeNotSupported} when runtime is nodeJS.
      */
-    login(scopes: string | string[]): Promise<void>;
+    login(scopes: string | string[], resources?: string[]): Promise<void>;
     /**
      * Set SSO token when using user identity in NodeJS.
      * @param {string} ssoToken - used for on behalf of user flow.
@@ -1889,10 +2238,13 @@ export declare class TeamsUserCredential implements TokenCredential {
     constructor(authConfig: AuthenticationConfiguration);
     /**
      * Popup login page to get user's access token with specific scopes.
+     *
+     * @param {string[]} resources - The optional list of resources for full trust Teams apps.
+     *
      * @remarks
      * Can only be used within Teams.
      */
-    login(scopes: string | string[]): Promise<void>;
+    login(scopes: string | string[], resources?: string[]): Promise<void>;
     /**
      * Get access token from credential.
      * @remarks
@@ -1901,10 +2253,13 @@ export declare class TeamsUserCredential implements TokenCredential {
     getToken(scopes: string | string[], options?: GetTokenOptions): Promise<AccessToken | null>;
     /**
      * Get basic user info from SSO token
+     *
+     * @param {string[]} resources - The optional list of resources for full trust Teams apps.
+     *
      * @remarks
      * Can only be used within Teams.
      */
-    getUserInfo(): Promise<UserInfo>;
+    getUserInfo(resources?: string[]): Promise<UserInfo>;
 }
 
 /**