@skaile/workspaces 1.14.1 → 1.15.1

package/dist/bridge/drivers/codex.js

@@ -1,6 +1,6 @@
 import { fetchProviderModels } from '../../chunk-BMQKMOQY.js';
 import { classifyGenericErrorMessage } from '../../chunk-GAH4YRCI.js';
-import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-HLIN4HRK.js';
+import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-ACWCVB5Q.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';

package/dist/bridge/drivers/continue.js

@@ -1,6 +1,6 @@
-import { SubprocessCliDriver, mapApiKeysToEnv, extractText, extractCost, extractTokens } from '../../chunk-NIZNN42B.js';
+import { SubprocessCliDriver, mapApiKeysToEnv, extractText, extractCost, extractTokens } from '../../chunk-MNKUZUN2.js';
 import '../../chunk-GAH4YRCI.js';
-import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-HLIN4HRK.js';
+import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-ACWCVB5Q.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';

package/dist/bridge/drivers/echo.js

@@ -1,5 +1,5 @@
 import { dispatchCapability } from '../../chunk-RRVQAE5D.js';
-import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-HLIN4HRK.js';
+import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-ACWCVB5Q.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';

package/dist/bridge/drivers/gemini.js

@@ -1,8 +1,8 @@
-export { GeminiDriver, GeminiFamilyDriver, geminiDriverTarget } from '../../chunk-CC6LFFTI.js';
-import '../../chunk-NIZNN42B.js';
+export { GeminiDriver, GeminiFamilyDriver, geminiDriverTarget } from '../../chunk-O5VCUU6D.js';
+import '../../chunk-MNKUZUN2.js';
 import '../../chunk-BMQKMOQY.js';
 import '../../chunk-GAH4YRCI.js';
-import '../../chunk-HLIN4HRK.js';
+import '../../chunk-ACWCVB5Q.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';

package/dist/bridge/drivers/goose.js

@@ -1,6 +1,6 @@
-import { SubprocessCliDriver, mapApiKeysToEnv, extractText, extractCost, extractTokens } from '../../chunk-NIZNN42B.js';
+import { SubprocessCliDriver, mapApiKeysToEnv, extractText, extractCost, extractTokens } from '../../chunk-MNKUZUN2.js';
 import '../../chunk-GAH4YRCI.js';
-import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-HLIN4HRK.js';
+import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-ACWCVB5Q.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';

package/dist/bridge/drivers/omp.js

@@ -1,5 +1,5 @@
 import { classifyGenericErrorMessage } from '../../chunk-GAH4YRCI.js';
-import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-HLIN4HRK.js';
+import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-ACWCVB5Q.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';

package/dist/bridge/drivers/opencode.js

@@ -1,6 +1,6 @@
-import { SubprocessCliDriver, mapApiKeysToEnv, extractText, extractCost, extractTokens } from '../../chunk-NIZNN42B.js';
+import { SubprocessCliDriver, mapApiKeysToEnv, extractText, extractCost, extractTokens } from '../../chunk-MNKUZUN2.js';
 import '../../chunk-GAH4YRCI.js';
-import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-HLIN4HRK.js';
+import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-ACWCVB5Q.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';

package/dist/bridge/drivers/qwen.js

@@ -1,8 +1,8 @@
-import { GeminiFamilyDriver } from '../../chunk-CC6LFFTI.js';
-import '../../chunk-NIZNN42B.js';
+import { GeminiFamilyDriver } from '../../chunk-O5VCUU6D.js';
+import '../../chunk-MNKUZUN2.js';
 import { fetchProviderModels } from '../../chunk-BMQKMOQY.js';
 import '../../chunk-GAH4YRCI.js';
-import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-HLIN4HRK.js';
+import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-ACWCVB5Q.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';

package/dist/bridge/index.js

@@ -1,9 +1,9 @@
-export { BridgeRuntime, EventNormalizer, createRuntime, detectFileChange, detectFileChanges, summarizeToolCall, summarizeToolResult, validateApiKey } from '../chunk-G73FOLLO.js';
+export { BridgeRuntime, EventNormalizer, createRuntime, detectFileChange, detectFileChanges, summarizeToolCall, summarizeToolResult, validateApiKey } from '../chunk-M5GJT3D7.js';
 export { CLOUD_SECRET_ENV_KEYS, SUPPORTED_CLOUDS, buildClaudeCloudEnv } from '../chunk-ISQWMBKD.js';
 export { dispatchCapability, filterRenderCapabilities, renderFallback } from '../chunk-RRVQAE5D.js';
 export { STATIC_MODELS, fetchProviderModels, getModels, getStaticModels } from '../chunk-BMQKMOQY.js';
 export { AccountUnavailableError, AuthError, classifyClaudeSdkError, reclassifyAuthAsAccountUnavailable } from '../chunk-GAH4YRCI.js';
-export { AgentDriver, BUILTIN_DRIVER_CATALOG, DRIVER_CATALOG, createDriver, getBridgeLogger, listDrivers, listModelsForDriver, registerBuiltinDrivers } from '../chunk-HLIN4HRK.js';
+export { AgentDriver, BUILTIN_DRIVER_CATALOG, DRIVER_CATALOG, createDriver, getBridgeLogger, listDrivers, listModelsForDriver, registerBuiltinDrivers } from '../chunk-ACWCVB5Q.js';
 import '../chunk-6E6PKKAD.js';
 import '../chunk-JB35MVBN.js';
 import '../chunk-NSBPE2FW.js';

package/dist/bridge/src/drivers/claude-sdk.d.ts

@@ -2,55 +2,6 @@ import type { TokenUsage } from "@skaile/workspaces/types";
 import type { DriverTarget } from "@skaile/workspaces/plugin-registry";
 import { type ModelEntry } from "../models.js";
 import { type AgentConfig, AgentDriver, type DriverInfo, type SlashCommandInfo } from "../types.js";
-/**
- * Agent driver for the Anthropic Claude Agent SDK.
- *
- * Runs the agent in-process — no subprocess is spawned. Anthropic models only.
- *
- * @remarks
- * **Lazy-loading** — `@anthropic-ai/claude-agent-sdk` is imported dynamically inside
- * `start()` so it remains an optional peer dependency. If the package is not installed
- * an actionable error is thrown. The CJS/ESM `require` polyfill at the top of this file
- * is required because the SDK bundles ajv which uses `require()` internally.
- *
- * **Session continuity** — each `prompt()` tries to feed into a live SDK query via
- * `streamInput()` (persistent multi-turn mode). When no live query exists it starts a
- * new one, applying a three-level resume chain:
- *   1. `resumeSessionId` from config (explicit caller resume)
- *   2. `sessionId` captured from the current driver lifetime
- *   3. `continue: true` (resume most recent session in cwd from disk)
- *
- * **Tool synthesis** — emits `tool_call` and `tool_execution_end` events that the
- * runner's activity tracker needs for file-change detection. These are not native SDK
- * events; they are synthesised from `assistant` and `user` SDK messages.
- *
- * **agentName** — maps to the `agent` SDK query option. The SDK reads
- * `.claude/agents/<agentName>.md` from `cwd` for model, tools, and system prompt.
- * Requires the agent file to have been rendered by `asset-manager` (claudeCodeRenderer)
- * during `skaile install`. Ignored by other drivers.
- *
- * **mcpServers** — `AgentConfig.mcpServers` passes in-process MCP server instances to
- * the SDK's `mcpServers` query option. Used by `workspaces/connectors` to inject
- * resource tools as native `tool_use`. Ignored by other drivers.
- *
- * @docLink packages/bridge/drivers#claude-sdk-driver
- */
-/**
- * One-shot recovery budgets for a single logical {@link ClaudeSdkDriver.prompt}
- * turn. Each recovery path owns an independent budget so an earlier recovery of
- * one kind never starves a later recovery of a different kind — most
- * importantly, a stale-resume retry must not consume the auth self-heal budget,
- * because the fresh session it starts can still hit an expired credential.
- * Total retries stay bounded (at most one per kind).
- */
-interface RetryBudget {
-    /** A stale-resume ("No conversation found") retry has been spent. */
-    staleResume: boolean;
-    /** A poisoned-transcript scrub retry has been spent. */
-    poison: boolean;
-    /** An auth self-heal (`onAuthError`) retry has been spent. */
-    auth: boolean;
-}
 export declare class ClaudeSdkDriver extends AgentDriver {
     readonly driverInfo: DriverInfo;
     private readonly log;
@@ -75,11 +26,10 @@ export declare class ClaudeSdkDriver extends AgentDriver {
     /** Rejects when the current turn errors. */
     private turnReject;
     /**
-     * The in-flight turn's promise, awaited when a new prompt supersedes a pending question.
-     * Deliberately outlives {@link completeTurn} / {@link failTurn} — only {@link prompt}'s
-     * `finally` clears it, and not on a retry recursion. Nulling it earlier reopens #436.
+     * Settled tail for complete logical prompts. Rejections are swallowed only on
+     * the tail so one failed turn cannot wedge later callers.
      */
-    private turnPromise;
+    private promptTail;
     /** Guards against duplicate agent_end emissions per turn. */
     private turnCompleted;
     /** `Date.now()` of the most recent SDK message — the watchdog's liveness signal. */
@@ -92,7 +42,7 @@ export declare class ClaudeSdkDriver extends AgentDriver {
      * been spent. Read by {@link failTurn} to decide whether to defer the
      * `agent-event: error` emission for a self-healable auth error.
      *
-     * Set unconditionally at the top of every {@link prompt} invocation; never
+     * Set unconditionally at the top of every {@link runPrompt} attempt; never
      * reset elsewhere — the next call's set is the only legitimate transition.
      */
     private authSelfHealUsed;
@@ -166,7 +116,14 @@ export declare class ClaudeSdkDriver extends AgentDriver {
      * "No conversation found with session ID …" — a recoverable stale-resume error that
      * occurs after a container crash that prevented the SDK from flushing its session file.
      */
-    prompt(message: string, _budget?: RetryBudget): Promise<void>;
+    prompt(message: string): Promise<void>;
+    /**
+     * Runs one complete logical prompt inside its acquired FIFO slot.
+     *
+     * Retries recurse here rather than through {@link prompt}, so they cannot
+     * enqueue behind themselves and deadlock.
+     */
+    private runPrompt;
     /**
      * Arm the per-turn inactivity watchdog. Self-rescheduling rather than a single
      * absolute timer so any mid-turn SDK message pushes the deadline out; the
@@ -436,5 +393,4 @@ export declare class ClaudeSdkDriver extends AgentDriver {
  * inside `start()` — this target export never pulls it at module top.
  */
 export declare const claudeSdkDriverTarget: DriverTarget<AgentConfig>;
-export {};
 //# sourceMappingURL=claude-sdk.d.ts.map

package/dist/bridge/src/drivers/claude-sdk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-sdk.d.ts","sourceRoot":"","sources":["../../../../bridge/src/drivers/claude-sdk.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAU,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAUnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAUvE,OAAO,EAAuB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAEpE,OAAO,EACL,KAAK,WAAW,EAChB,WAAW,EAIX,KAAK,UAAU,EACf,KAAK,gBAAgB,EAEtB,MAAM,aAAa,CAAC;AAkErB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH;;;;;;;GAOG;AACH,UAAU,WAAW;IACnB,qEAAqE;IACrE,WAAW,EAAE,OAAO,CAAC;IACrB,wDAAwD;IACxD,MAAM,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,IAAI,EAAE,OAAO,CAAC;CACf;AAmCD,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAK7B;IAEF,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAyC;IAC7D,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,GAAG,CAA6C;IACxD,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,QAAQ,CAAM;IACtB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB,CAAK;IAChC,oGAAoG;IACpG,OAAO,CAAC,qBAAqB,CAAS;IAEtC,wEAAwE;IACxE,OAAO,CAAC,KAAK,CAAyB;IACtC,gDAAgD;IAChD,OAAO,CAAC,WAAW,CAA6B;IAChD,4CAA4C;IAC5C,OAAO,CAAC,UAAU,CAAuC;IACzD;;;;OAIG;IACH,OAAO,CAAC,WAAW,CAA8B;IACjD,6DAA6D;IAC7D,OAAO,CAAC,aAAa,CAAS;IAC9B,oFAAoF;IACpF,OAAO,CAAC,gBAAgB,CAAK;IAC7B,oFAAoF;IACpF,OAAO,CAAC,cAAc,CAA8C;IACpE;;;;;;;;OAQG;IACH,OAAO,CAAC,gBAAgB,CAAS;IACjC,sEAAsE;IACtE,OAAO,CAAC,UAAU,CAAS;IAC3B,+DAA+D;IAC/D,OAAO,CAAC,SAAS,CAAM;IACvB;;;;;;;;;OASG;IACH,OAAO,CAAC,eAAe,CAKP;IAChB,qDAAqD;IACrD,OAAO,CAAC,cAAc,CAA0B;IAChD,uDAAuD;IACvD,OAAO,CAAC,WAAW,CAA2B;IAC9C,oEAAoE;IACpE,OAAO,CAAC,cAAc,CAAuB;IAC7C;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB,CAAS;IAErC;;;;;;;;;;;;;;OAcG;gBACS,MAAM,EAAE,WAAW;IAK/B,IAAa,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAElD;IAEQ,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC,GAAG,IAAI;IAMrF,QAAQ,IAAI,MAAM,GAAG,SAAS;IAIvC;;;;;OAKG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAWnC;;;;;;;;;;;;;;OAcG;IACU,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgC,GAAG,OAAO,CAAC,IAAI,CAAC;IAyK9F;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IA4B5B,OAAO,CAAC,uBAAuB;IAO/B;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAarB;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAetB;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IA4B/B;;;;;;;OAOG;IACH,OAAO,CAAC,uBAAuB;IAgD/B;;;;;;;OAOG;YACW,mBAAmB;IA0DjC;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAQ9B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,2BAA2B;IA6BnC;;;;;OAKG;IACH,OAAO,CAAC,YAAY;YAQN,UAAU;IAiJf,gBAAgB,IAAI,gBAAgB,EAAE;IAM/C;;;;;;;;;OASG;IACH,OAAO,CAAC,gBAAgB,CAyCtB;IAEO,kBAAkB,IAAI,OAAO;IAI7B,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO;IAgCnE;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAS3B;;;;;;;;OAQG;YACW,wBAAwB;IAiBtC;;;;;;;OAOG;YACW,wBAAwB;IAwDtC,yDAAyD;YAC3C,kBAAkB;IAmBhC;;;;OAIG;YACW,eAAe;IA2C7B,gFAAgF;IAChF,OAAO,CAAC,gBAAgB;IAWxB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAkC3B;;;;;;;OAOG;IACH,OAAO,CAAC,YAAY;IAkBpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,OAAO,CAAC,QAAQ;IAsChB,OAAO,CAAC,gBAAgB;IAoBxB;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAyB5B,OAAO,CAAC,sBAAsB;IAkC9B,OAAO,CAAC,wBAAwB;IAehC,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,iBAAiB;IAyCzB,OAAO,CAAC,iBAAiB;IAazB,OAAO,CAAC,mBAAmB;IA4B3B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IA4B1B,6EAA6E;IAC7E,OAAO,CAAC,mBAAmB;IAwB3B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAazB;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAgDhC,+CAA+C;IAC/C,OAAO,CAAC,gBAAgB;IAYxB,gEAAgE;YACjD,kBAAkB;IAIjC,OAAO,CAAC,mBAAmB;IAiC3B,OAAO,CAAC,cAAc;IAqBtB;;;;;;;;OAQG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAiCnC,+DAA+D;IAC/D,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED;;;;;OAKG;IACI,IAAI,IAAI,IAAI;IAgBJ,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAczC,aAAa,IAAI,UAAU,GAAG,IAAI;IAIlC,gBAAgB,IAAI,MAAM,GAAG,IAAI;IAIpC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAiBnC;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAuB7B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAazB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,gBAAgB;CAezB;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,EAAE,YAAY,CAAC,WAAW,CAU3D,CAAC"}
+{"version":3,"file":"claude-sdk.d.ts","sourceRoot":"","sources":["../../../../bridge/src/drivers/claude-sdk.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAU,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAUnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAUvE,OAAO,EAAuB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAEpE,OAAO,EACL,KAAK,WAAW,EAChB,WAAW,EAIX,KAAK,UAAU,EACf,KAAK,gBAAgB,EAEtB,MAAM,aAAa,CAAC;AAsJrB,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAK7B;IAEF,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAyC;IAC7D,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,GAAG,CAA6C;IACxD,OAAO,CAAC,YAAY,CAA6B;IACjD,OAAO,CAAC,QAAQ,CAAM;IACtB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB,CAAK;IAChC,oGAAoG;IACpG,OAAO,CAAC,qBAAqB,CAAS;IAEtC,wEAAwE;IACxE,OAAO,CAAC,KAAK,CAAyB;IACtC,gDAAgD;IAChD,OAAO,CAAC,WAAW,CAA6B;IAChD,4CAA4C;IAC5C,OAAO,CAAC,UAAU,CAAuC;IACzD;;;OAGG;IACH,OAAO,CAAC,UAAU,CAAoC;IACtD,6DAA6D;IAC7D,OAAO,CAAC,aAAa,CAAS;IAC9B,oFAAoF;IACpF,OAAO,CAAC,gBAAgB,CAAK;IAC7B,oFAAoF;IACpF,OAAO,CAAC,cAAc,CAA8C;IACpE;;;;;;;;OAQG;IACH,OAAO,CAAC,gBAAgB,CAAS;IACjC,sEAAsE;IACtE,OAAO,CAAC,UAAU,CAAS;IAC3B,+DAA+D;IAC/D,OAAO,CAAC,SAAS,CAAM;IACvB;;;;;;;;;OASG;IACH,OAAO,CAAC,eAAe,CAKP;IAChB,qDAAqD;IACrD,OAAO,CAAC,cAAc,CAA0B;IAChD,uDAAuD;IACvD,OAAO,CAAC,WAAW,CAA2B;IAC9C,oEAAoE;IACpE,OAAO,CAAC,cAAc,CAAuB;IAC7C;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB,CAAS;IAErC;;;;;;;;;;;;;;OAcG;gBACS,MAAM,EAAE,WAAW;IAK/B,IAAa,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAElD;IAEQ,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC,GAAG,IAAI;IAMrF,QAAQ,IAAI,MAAM,GAAG,SAAS;IAIvC;;;;;OAKG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAWnC;;;;;;;;;;;;;;OAcG;IACI,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAY7C;;;;;OAKG;YACW,SAAS;IAmJvB;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IA4B5B,OAAO,CAAC,uBAAuB;IAO/B;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAarB;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAetB;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IA4B/B;;;;;;;OAOG;IACH,OAAO,CAAC,uBAAuB;IAgD/B;;;;;;;OAOG;YACW,mBAAmB;IA0DjC;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAQ9B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,2BAA2B;IA6BnC;;;;;OAKG;IACH,OAAO,CAAC,YAAY;YAQN,UAAU;IAiJf,gBAAgB,IAAI,gBAAgB,EAAE;IAM/C;;;;;;;;;OASG;IACH,OAAO,CAAC,gBAAgB,CAyCtB;IAEO,kBAAkB,IAAI,OAAO;IAI7B,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO;IAgCnE;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAS3B;;;;;;;;OAQG;YACW,wBAAwB;IAiBtC;;;;;;;OAOG;YACW,wBAAwB;IAwDtC,yDAAyD;YAC3C,kBAAkB;IAmBhC;;;;OAIG;YACW,eAAe;IA2C7B,gFAAgF;IAChF,OAAO,CAAC,gBAAgB;IAWxB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAkC3B;;;;;;;OAOG;IACH,OAAO,CAAC,YAAY;IAkBpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+BG;IACH,OAAO,CAAC,QAAQ;IAsChB,OAAO,CAAC,gBAAgB;IAoBxB;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAyB5B,OAAO,CAAC,sBAAsB;IAkC9B,OAAO,CAAC,wBAAwB;IAehC,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,iBAAiB;IAyCzB,OAAO,CAAC,iBAAiB;IAazB,OAAO,CAAC,mBAAmB;IA4B3B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IA4B1B,6EAA6E;IAC7E,OAAO,CAAC,mBAAmB;IAwB3B;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAazB;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAgDhC,+CAA+C;IAC/C,OAAO,CAAC,gBAAgB;IAYxB,gEAAgE;YACjD,kBAAkB;IAIjC,OAAO,CAAC,mBAAmB;IAiC3B,OAAO,CAAC,cAAc;IAqBtB;;;;;;;;OAQG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAmCnC,+DAA+D;IAC/D,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED;;;;;OAKG;IACI,IAAI,IAAI,IAAI;IAgBJ,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAczC,aAAa,IAAI,UAAU,GAAG,IAAI;IAIlC,gBAAgB,IAAI,MAAM,GAAG,IAAI;IAIpC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAiBnC;;;;;;OAMG;IACH,OAAO,CAAC,qBAAqB;IAuB7B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAazB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,gBAAgB;CAezB;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,EAAE,YAAY,CAAC,WAAW,CAU3D,CAAC"}

package/dist/channels/adapters/msteams/activity.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Minimal hand-rolled Bot Framework activity types and their normalization
+ * into the channels core's {@link ChannelMessage} (spec §7.1.2). No botbuilder:
+ * only the fields the adapter actually reads are typed.
+ */
+import type { IdentityPort } from "../../src/ports.js";
+import type { ChannelActor, ChannelMessage, ConversationKey } from "../../src/types.js";
+/** A Bot Framework activity, reduced to the fields the Teams adapter consumes. */
+export type TeamsActivity = {
+    /** "message", "messageReaction", "conversationUpdate", … */
+    type: string;
+    id: string;
+    timestamp?: string;
+    serviceUrl: string;
+    /** Always "msteams" for Teams traffic. */
+    channelId: string;
+    from: {
+        id: string;
+        name?: string;
+        aadObjectId?: string;
+    };
+    conversation: {
+        id: string;
+        tenantId?: string;
+        conversationType?: string;
+    };
+    /** The bot the activity was addressed to. */
+    recipient: {
+        id: string;
+        name?: string;
+    };
+    text?: string;
+    entities?: Array<{
+        type: string;
+        mentioned?: {
+            id: string;
+            name?: string;
+        };
+        text?: string;
+    }>;
+    replyToId?: string;
+    /** Action.Submit payload, e.g. `{ option }` from a question card. */
+    value?: unknown;
+    channelData?: {
+        tenant?: {
+            id: string;
+        };
+    };
+};
+/**
+ * `"19:x@thread;messageid=123"` → key `msteams:19:x@thread/123`; no messageid →
+ * channel-level key.
+ */
+export declare function conversationKeyFromActivity(a: TeamsActivity): ConversationKey;
+/** Teams tenant id — `conversation.tenantId` with the channelData fallback. */
+export declare function tenantIdOfActivity(a: TeamsActivity): string | undefined;
+/** The sending user as a {@link ChannelActor} (AAD object id preferred as externalId). */
+export declare function actorOfActivity(a: TeamsActivity): ChannelActor;
+/**
+ * Normalizes a message activity into a ChannelMessage (spec §7.1.2):
+ * payload { type:"prompt", prompt: textWithMentionTokensStripped },
+ * meta.channel { platform:"msteams", conversationKey, eventId: a.id, tenantId,
+ * actor, messageRef }, meta.mentions via normalize (bot recipient id ⇒ isBot
+ * entity). A text-less Action.Submit (question-card answer) uses its `option`
+ * as the prompt. Returns null for non-message activities and for the bot's own
+ * messages (a.from.id === a.recipient.id — the adapter-level loop filter,
+ * spec §8).
+ */
+export declare function activityToChannelMessage(a: TeamsActivity, identity: IdentityPort): Promise<ChannelMessage | null>;
+//# sourceMappingURL=activity.d.ts.map

package/dist/channels/adapters/msteams/activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.d.ts","sourceRoot":"","sources":["../../../../channels/adapters/msteams/activity.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGvD,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAc,MAAM,oBAAoB,CAAC;AAMpG,kFAAkF;AAClF,MAAM,MAAM,aAAa,GAAG;IAC1B,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,YAAY,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E,6CAA6C;IAC7C,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CAC3C,CAAC;AAEF;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,aAAa,GAAG,eAAe,CAQ7E;AAED,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,aAAa,GAAG,MAAM,GAAG,SAAS,CAEvE;AAED,0FAA0F;AAC1F,wBAAgB,eAAe,CAAC,CAAC,EAAE,aAAa,GAAG,YAAY,CAO9D;AA0CD;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,CAAC,EAAE,aAAa,EAChB,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CA2ChC"}

package/dist/channels/adapters/msteams/client.d.ts

@@ -0,0 +1,46 @@
+/**
+ * The shared bottom-layer Bot Framework REST client (spec §4.1) — written once
+ * here, reused by the later agent-side tool-face step. Raw fetch only; no
+ * botbuilder.
+ */
+/** Options for {@link MsTeamsClient}. */
+export type MsTeamsClientOptions = {
+    appId: string;
+    clientSecret: string;
+    /** Default "https://login.microsoftonline.com/botframework.com" — injectable for mocks. */
+    loginBaseUrl?: string;
+    fetchImpl?: typeof fetch;
+    now?: () => number;
+};
+/** A failed connector-service call, with the HTTP status for callers to branch on. */
+export declare class MsTeamsApiError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}
+/**
+ * Minimal Bot Framework connector-service client: client_credentials token
+ * acquisition (cached) plus activity post/update against a channel-provided
+ * serviceUrl. Honors 429 Retry-After with jittered backoff, max 3 tries.
+ */
+export declare class MsTeamsClient {
+    private readonly opts;
+    private readonly fetchImpl;
+    private readonly now;
+    private token?;
+    constructor(opts: MsTeamsClientOptions);
+    /** client_credentials token for scope https://api.botframework.com/.default; cached until exp-60s. */
+    getToken(): Promise<string>;
+    /** POST {serviceUrl}/v3/conversations/{conversationId}/activities[/{replyToId}] → { id }. */
+    postActivity(serviceUrl: string, conversationId: string, activity: Record<string, unknown>, replyToId?: string): Promise<{
+        id: string;
+    }>;
+    /** PUT {serviceUrl}/v3/conversations/{conversationId}/activities/{activityId}. Same retry policy. */
+    updateActivity(serviceUrl: string, conversationId: string, activityId: string, activity: Record<string, unknown>): Promise<void>;
+    private activitiesUrl;
+    /**
+     * Authorized JSON request honoring 429 Retry-After with jittered backoff,
+     * max 3 tries. One 401 forces a fresh token and a single immediate retry.
+     */
+    private request;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/channels/adapters/msteams/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../channels/adapters/msteams/client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAcH,yCAAyC;AACzC,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,2FAA2F;IAC3F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,CAAC;AAEF,sFAAsF;AACtF,qBAAa,eAAgB,SAAQ,KAAK;IAEtC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM;CAKlB;AAID;;;;GAIG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,KAAK,CAAC,CAAuC;gBAEzC,IAAI,EAAE,oBAAoB;IAMtC,sGAAsG;IAChG,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;IAsBjC,6FAA6F;IACvF,YAAY,CAChB,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAW1B,qGAAqG;IAC/F,cAAc,CAClB,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC,IAAI,CAAC;IAKhB,OAAO,CAAC,aAAa;IAKrB;;;OAGG;YACW,OAAO;CA6BtB"}

package/dist/channels/adapters/msteams/index.d.ts

@@ -0,0 +1,81 @@
+/**
+ * MS Teams {@link ChannelAdapter}: Bot Framework webhook ingress (JWT-verified,
+ * fast-acked) + connector-service egress via {@link MsTeamsClient}. Raw fetch
+ * only — no botbuilder. Identity stays with the engine: the adapter only tags
+ * `isBot` mention entities and never resolves users itself (Decision 16).
+ */
+import type { AdapterContext, ChannelAdapter } from "../../src/adapter.js";
+import type { ActorQuery, ChannelActor, ConversationHealth, ConversationKey, MessageRef, OutboundMessage, ReplyTarget, SurfaceCapabilities } from "../../src/types.js";
+export * from "./activity.js";
+export * from "./client.js";
+export * from "./jwt.js";
+/** Options for {@link MsTeamsAdapter}. */
+export type MsTeamsAdapterOptions = {
+    /** Skaile's multi-tenant Entra app id (non-secret; the secret comes via CredentialPort). */
+    appId: string;
+    /** Default "/channels/msteams/messages". */
+    ingressPath?: string;
+    openIdMetadataUrl?: string;
+    loginBaseUrl?: string;
+    fetchImpl?: typeof fetch;
+};
+/**
+ * The MS Teams adapter (spec §6, plan Task 10). Webhook-style: `start` only
+ * registers the ingress route — there is no outbound socket. Egress posting
+ * requires the conversation to have been seen on ingress (serviceUrl + tenant
+ * are remembered per conversationKey; Bot Framework provides no directory).
+ */
+export declare class MsTeamsAdapter implements ChannelAdapter {
+    readonly platform: "msteams";
+    readonly capabilities: SurfaceCapabilities;
+    private readonly opts;
+    private ctx?;
+    /** tenantId → lazily-created provider client (promise-cached to collapse races). */
+    private readonly clients;
+    /** Ingress-observed conversation facts, keyed by conversationKey (thread AND channel level). */
+    private readonly conversations;
+    /** Ingress-observed actors by externalId — the lookupActor roster. */
+    private readonly roster;
+    /** post() idempotency: dedupeKey → prior ref, TTL {@link DEDUPE_TTL_MS}. */
+    private readonly posted;
+    constructor(opts: MsTeamsAdapterOptions);
+    /** Registers the ingress route on the host; no connection is opened. */
+    start(ctx: AdapterContext): Promise<void>;
+    /** Drops the context and per-tenant clients; the host owns route teardown. */
+    stop(): Promise<void>;
+    /**
+     * The Bot Framework messaging endpoint. Guarded by a `Promise.race` at
+     * `ackDeadlineMs - 1000`: if processing overruns, Teams still gets its 200
+     * and at-least-once redelivery covers the rest.
+     */
+    readonly handleRequest: (req: Request) => Promise<Response>;
+    private processRequest;
+    /** Records serviceUrl + tenant under the thread key AND its channel-level key. */
+    private rememberConversation;
+    /** Grows the lookupActor roster from the sender and mention entities (bot excluded). */
+    private rememberActors;
+    /** Maps a messageReaction activity onto InboundReaction events (one per emoji). */
+    private forwardReactions;
+    /** Posts a message; a repeated `dedupeKey` returns the prior ref with no second side effect. */
+    post(target: ReplyTarget, msg: OutboundMessage, dedupeKey: string): Promise<MessageRef>;
+    /** Replaces a previously posted activity's content in place. */
+    update(ref: MessageRef, msg: OutboundMessage): Promise<void>;
+    /** Native Teams typing indicator — fire-and-forget, never deduped. */
+    indicateTyping(target: ReplyTarget): Promise<void>;
+    /** Preflight: a typing probe proves the bot can post; 403/404 → actionable problem. */
+    verifyConversation(key: ConversationKey): Promise<ConversationHealth>;
+    /** Resolves from the ingress-observed roster only (Graph lookup is platform glue, later). */
+    lookupActor(query: ActorQuery): Promise<ChannelActor | undefined>;
+    /** Decision 11: Adaptive Card for questions with options; markdown text otherwise. */
+    private buildActivity;
+    /** serviceUrl + native conversation id for a target — threadRef.raw first, ingress memory else. */
+    private resolveTarget;
+    /** Conversation facts under the exact key, falling back to its channel-level key. */
+    private infoFor;
+    /** One MsTeamsClient per tenant, built from CredentialPort (kind must be "msteams"). */
+    private clientForConversation;
+    private clientForTenant;
+    /** Live dedupe hit for `key`, sweeping expired entries opportunistically. */
+    private dedupeGet;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/channels/adapters/msteams/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../channels/adapters/msteams/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3E,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,eAAe,EAEf,UAAU,EACV,eAAe,EACf,WAAW,EACX,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAa5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AAiBzB,0CAA0C;AAC1C,MAAM,MAAM,qBAAqB,GAAG;IAClC,4FAA4F;IAC5F,KAAK,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,CAAC;AASF;;;;;GAKG;AACH,qBAAa,cAAe,YAAW,cAAc;IACnD,QAAQ,CAAC,QAAQ,EAAG,SAAS,CAAU;IACvC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAYxC;IAEF,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAwB;IAC7C,OAAO,CAAC,GAAG,CAAC,CAAiB;IAC7B,oFAAoF;IACpF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6C;IACrE,gGAAgG;IAChG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgD;IAC9E,sEAAsE;IACtE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;IAC1D,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6D;gBAExE,IAAI,EAAE,qBAAqB;IAIvC,wEAAwE;IAClE,KAAK,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ/C,8EAA8E;IACxE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAK3B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,GAAU,KAAK,OAAO,KAAG,OAAO,CAAC,QAAQ,CAAC,CAU9D;YAEY,cAAc;IA0C5B,kFAAkF;IAClF,OAAO,CAAC,oBAAoB;IAQ5B,wFAAwF;IACxF,OAAO,CAAC,cAAc;IAgBtB,mFAAmF;YACrE,gBAAgB;IA6B9B,gGAAgG;IAC1F,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAqB7F,gEAAgE;IAC1D,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAelE,sEAAsE;IAChE,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAMxD,uFAAuF;IACjF,kBAAkB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAmB3E,6FAA6F;IACvF,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAWvE,sFAAsF;IACtF,OAAO,CAAC,aAAa;IAoBrB,mGAAmG;IACnG,OAAO,CAAC,aAAa;IAgBrB,qFAAqF;IACrF,OAAO,CAAC,OAAO;IAOf,wFAAwF;IACxF,OAAO,CAAC,qBAAqB;IAY7B,OAAO,CAAC,eAAe;IAuBvB,6EAA6E;IAC7E,OAAO,CAAC,SAAS;CAOlB"}

package/dist/channels/adapters/msteams/jwt.d.ts

@@ -0,0 +1,27 @@
+/** Options for {@link validateBotFrameworkJwt}. */
+export type JwtValidationOptions = {
+    /** The Skaile-published multi-tenant Entra app id — the expected `aud`. */
+    appId: string;
+    /** Default "https://login.botframework.com/v1/.well-known/openidconfiguration". */
+    openIdMetadataUrl?: string;
+    /** Default 300_000 (5 min). */
+    clockSkewMs?: number;
+    fetchImpl?: typeof fetch;
+    now?: () => number;
+};
+/** Outcome of {@link validateBotFrameworkJwt} — `reason` is safe to log, never secret. */
+export type JwtValidationResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Validates a Bot Framework channel→bot JWT (RS256 via the published JWKS):
+ * Bearer present, alg RS256, iss "https://api.botframework.com", aud === appId,
+ * exp/nbf within skew, serviceurl claim === the activity's serviceUrl.
+ * JWKS keys cached in-module by kid for 24h; an unknown kid forces one
+ * rate-limited refetch (key rotation) before the token is rejected.
+ */
+export declare function validateBotFrameworkJwt(authorizationHeader: string | undefined, activityServiceUrl: string, opts: JwtValidationOptions): Promise<JwtValidationResult>;
+//# sourceMappingURL=jwt.d.ts.map

package/dist/channels/adapters/msteams/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../../../channels/adapters/msteams/jwt.ts"],"names":[],"mappings":"AAuBA,mDAAmD;AACnD,MAAM,MAAM,oBAAoB,GAAG;IACjC,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,+BAA+B;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,CAAC;AAEF,0FAA0F;AAC1F,MAAM,MAAM,mBAAmB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AA0E/E;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,mBAAmB,EAAE,MAAM,GAAG,SAAS,EACvC,kBAAkB,EAAE,MAAM,EAC1B,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,mBAAmB,CAAC,CAkD9B"}

package/dist/channels/adapters/msteams.d.ts

@@ -0,0 +1,2 @@
+// Auto-generated by _scripts/emit-dts-sidecars.ts — do not edit by hand.
+export * from "./msteams/index.js";