agent-messenger 2.27.2 → 2.29.0

package/dist/src/platforms/teams/credential-manager.d.ts

@@ -1,4 +1,4 @@
-import type { TeamsAccount, TeamsAccountType, TeamsConfig, TeamsRegion } from './types.js';
+import type { TeamsAccount, TeamsAccountType, TeamsAuthMethod, TeamsConfig, TeamsRegion } from './types.js';
 export declare class TeamsCredentialManager {
     static accountOverride?: TeamsAccountType;
     private configDir;
@@ -18,6 +18,28 @@ export declare class TeamsCredentialManager {
         region?: TeamsRegion;
     } | null>;
     setToken(token: string, accountType: TeamsAccountType, expiresAt?: string): Promise<void>;
+    setDeviceCodeAccount(params: {
+        accountType: TeamsAccountType;
+        token: string;
+        tokenExpiresAt: string;
+        aadRefreshToken?: string;
+        aadClientId?: string;
+        aadTenantId?: string;
+        region?: TeamsRegion;
+        userName?: string;
+        teams: Record<string, {
+            team_id: string;
+            team_name: string;
+        }>;
+        currentTeam: string | null;
+        authMethod?: TeamsAuthMethod;
+        makeCurrent?: boolean;
+    }): Promise<void>;
+    getAadRefresh(accountType: TeamsAccountType): Promise<{
+        refreshToken: string;
+        clientId?: string;
+    } | null>;
+    updateAadRefreshToken(accountType: TeamsAccountType, refreshToken: string, clientId?: string): Promise<void>;
     getCurrentTeam(): Promise<{
         team_id: string;
         team_name: string;

package/dist/src/platforms/teams/credential-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-manager.d.ts","sourceRoot":"","sources":["../../../../src/platforms/teams/credential-manager.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAqB,WAAW,EAAE,MAAM,SAAS,CAAA;AAE1G,qBAAa,sBAAsB;IACjC,MAAM,CAAC,eAAe,CAAC,EAAE,gBAAgB,CAAA;IAEzC,OAAO,CAAC,SAAS,CAAQ;IACzB,OAAO,CAAC,eAAe,CAAQ;gBAEnB,SAAS,CAAC,EAAE,MAAM;IAKxB,UAAU,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAczC,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAKpD,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,iBAAiB;IAInB,iBAAiB,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAQvD,OAAO,CAAC,qBAAqB;IAMvB,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAMlC,kBAAkB,IAAI,OAAO,CAAC;QAClC,KAAK,EAAE,MAAM,CAAA;QACb,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,WAAW,CAAC,EAAE,gBAAgB,CAAA;QAC9B,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GAAG,IAAI,CAAC;IAaH,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBzF,cAAc,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAQxE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU/D,qBAAqB,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAOzD,iBAAiB,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ/D,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAKpD,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAMjC,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC;IAQlC,qBAAqB,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CAO7E"}
+{"version":3,"file":"credential-manager.d.ts","sourceRoot":"","sources":["../../../../src/platforms/teams/credential-manager.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,WAAW,EAEX,WAAW,EACZ,MAAM,SAAS,CAAA;AAEhB,qBAAa,sBAAsB;IACjC,MAAM,CAAC,eAAe,CAAC,EAAE,gBAAgB,CAAA;IAEzC,OAAO,CAAC,SAAS,CAAQ;IACzB,OAAO,CAAC,eAAe,CAAQ;gBAEnB,SAAS,CAAC,EAAE,MAAM;IAKxB,UAAU,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAczC,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAOpD,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,iBAAiB;IAInB,iBAAiB,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAQvD,OAAO,CAAC,qBAAqB;IAMvB,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAMlC,kBAAkB,IAAI,OAAO,CAAC;QAClC,KAAK,EAAE,MAAM,CAAA;QACb,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,WAAW,CAAC,EAAE,gBAAgB,CAAA;QAC9B,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GAAG,IAAI,CAAC;IAaH,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBzF,oBAAoB,CAAC,MAAM,EAAE;QACjC,WAAW,EAAE,gBAAgB,CAAA;QAC7B,KAAK,EAAE,MAAM,CAAA;QACb,cAAc,EAAE,MAAM,CAAA;QACtB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,MAAM,CAAC,EAAE,WAAW,CAAA;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;QAC7D,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;QAC1B,UAAU,CAAC,EAAE,eAAe,CAAA;QAC5B,WAAW,CAAC,EAAE,OAAO,CAAA;KACtB,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBX,aAAa,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAOzG,qBAAqB,CAAC,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW5G,cAAc,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAQxE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU/D,qBAAqB,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAOzD,iBAAiB,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ/D,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAKpD,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAMjC,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC;IAQlC,qBAAqB,CAAC,WAAW,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;CAO7E"}

package/dist/src/platforms/teams/credential-manager.js

@@ -1,5 +1,5 @@
 import { existsSync } from 'node:fs';
-import { mkdir, readFile, rm, writeFile } from 'node:fs/promises';
+import { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { getConfigDir } from '../../shared/utils/config-dir.js';
 export class TeamsCredentialManager {
@@ -25,7 +25,9 @@ export class TeamsCredentialManager {
     }
     async saveConfig(config) {
         await mkdir(this.configDir, { recursive: true });
-        await writeFile(this.credentialsPath, JSON.stringify(config, null, 2), { mode: 0o600 });
+        const tmpPath = `${this.credentialsPath}.tmp`;
+        await writeFile(tmpPath, JSON.stringify(config, null, 2), { mode: 0o600 });
+        await rename(tmpPath, this.credentialsPath);
     }
     migrateIfNeeded(raw) {
         if ('accounts' in raw && raw.accounts) {
@@ -101,6 +103,48 @@ export class TeamsCredentialManager {
         }
         await this.saveConfig(config);
     }
+    async setDeviceCodeAccount(params) {
+        let config = await this.loadConfig();
+        if (!config) {
+            config = { current_account: params.accountType, accounts: {} };
+        }
+        const existing = config.accounts[params.accountType];
+        config.accounts[params.accountType] = {
+            token: params.token,
+            token_expires_at: params.tokenExpiresAt,
+            region: params.region ?? existing?.region,
+            account_type: params.accountType,
+            user_name: params.userName ?? existing?.user_name,
+            current_team: params.currentTeam,
+            teams: params.teams,
+            auth_method: params.authMethod ?? 'device-code',
+            aad_refresh_token: params.aadRefreshToken,
+            aad_client_id: params.aadClientId,
+            aad_tenant_id: params.aadTenantId ?? existing?.aad_tenant_id,
+        };
+        if (params.makeCurrent ?? true) {
+            config.current_account = params.accountType;
+        }
+        await this.saveConfig(config);
+    }
+    async getAadRefresh(accountType) {
+        const config = await this.loadConfig();
+        const account = config?.accounts[accountType];
+        if (!account?.aad_refresh_token)
+            return null;
+        return { refreshToken: account.aad_refresh_token, clientId: account.aad_client_id };
+    }
+    async updateAadRefreshToken(accountType, refreshToken, clientId) {
+        const config = await this.loadConfig();
+        const account = config?.accounts[accountType];
+        if (!config || !account)
+            return;
+        account.aad_refresh_token = refreshToken;
+        if (clientId !== undefined) {
+            account.aad_client_id = clientId;
+        }
+        await this.saveConfig(config);
+    }
     async getCurrentTeam() {
         const config = await this.loadConfig();
         if (!config)

package/dist/src/platforms/teams/credential-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"credential-manager.js","sourceRoot":"","sources":["../../../../src/platforms/teams/credential-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAG5D,MAAM,OAAO,sBAAsB;IACjC,MAAM,CAAC,eAAe,CAAmB;IAEjC,SAAS,CAAQ;IACjB,eAAe,CAAQ;IAE/B,YAAY,SAAkB;QAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,YAAY,EAAE,CAAA;QAC5C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAA;IACvE,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;YAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC/B,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAmB;QAClC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAChD,MAAM,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACzF,CAAC;IAEO,eAAe,CAAC,GAAoC;QAC1D,IAAI,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACtC,OAAO,GAAkB,CAAA;QAC3B,CAAC;QAED,MAAM,MAAM,GAAG,GAAwB,CAAA;QACvC,MAAM,OAAO,GAAiB;YAC5B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,YAAY,EAAE,MAAM;YACpB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAA;QACD,OAAO;YACL,eAAe,EAAE,MAAM;YACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;SAC5B,CAAA;IACH,CAAC;IAEO,iBAAiB,CAAC,MAAmB;QAC3C,OAAO,sBAAsB,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAA;IACzE,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAC1C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAA;IACrC,CAAC;IAEO,qBAAqB,CAAC,MAAmB;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAC1C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,CAAA;IAC1D,CAAC;IAED,KAAK,CAAC,kBAAkB;QAMtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO,EAAE,KAAK;YAAE,OAAO,IAAI,CAAA;QAChC,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,cAAc,EAAE,OAAO,CAAC,gBAAgB;YACxC,WAAW,EAAE,OAAO,CAAC,YAAY;YACjC,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,WAA6B,EAAE,SAAkB;QAC7E,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,EAAE,eAAe,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;QACzD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAC7C,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG;YAC7B,KAAK;YACL,gBAAgB,EAAE,SAAS;YAC3B,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,QAAQ,EAAE,SAAS;YAC9B,YAAY,EAAE,QAAQ,EAAE,YAAY,IAAI,IAAI;YAC5C,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE;SAC7B,CAAA;QACD,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5B,MAAM,CAAC,eAAe,GAAG,WAAW,CAAA;QACtC,CAAC;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO,EAAE,YAAY;YAAE,OAAO,IAAI,CAAA;QACvC,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,IAAI,CAAA;IACpD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,QAAgB;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,OAAO,CAAC,YAAY,GAAG,MAAM,CAAA;QAC7B,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAA;QAChE,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAC1C,OAAQ,GAAwB,IAAI,IAAI,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,WAA6B;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAM;QACzC,MAAM,CAAC,eAAe,GAAG,WAAW,CAAA;QACpC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,OAAO,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,IAAI,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACrC,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO,EAAE,gBAAgB;YAAE,OAAO,IAAI,CAAA;QAC3C,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;IACnE,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,WAA6B;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAC5C,IAAI,CAAC,OAAO,EAAE,gBAAgB;YAAE,OAAO,IAAI,CAAA;QAC3C,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;IACnE,CAAC;CACF"}
+{"version":3,"file":"credential-manager.js","sourceRoot":"","sources":["../../../../src/platforms/teams/credential-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAU5D,MAAM,OAAO,sBAAsB;IACjC,MAAM,CAAC,eAAe,CAAmB;IAEjC,SAAS,CAAQ;IACjB,eAAe,CAAQ;IAE/B,YAAY,SAAkB;QAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,YAAY,EAAE,CAAA;QAC5C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAA;IACvE,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;YAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YAC/B,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAmB;QAClC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAChD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,eAAe,MAAM,CAAA;QAC7C,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1E,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAA;IAC7C,CAAC;IAEO,eAAe,CAAC,GAAoC;QAC1D,IAAI,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACtC,OAAO,GAAkB,CAAA;QAC3B,CAAC;QAED,MAAM,MAAM,GAAG,GAAwB,CAAA;QACvC,MAAM,OAAO,GAAiB;YAC5B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,YAAY,EAAE,MAAM;YACpB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAA;QACD,OAAO;YACL,eAAe,EAAE,MAAM;YACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;SAC5B,CAAA;IACH,CAAC;IAEO,iBAAiB,CAAC,MAAmB;QAC3C,OAAO,sBAAsB,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAA;IACzE,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAC1C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAA;IACrC,CAAC;IAEO,qBAAqB,CAAC,MAAmB;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAC1C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,CAAA;IAC1D,CAAC;IAED,KAAK,CAAC,kBAAkB;QAMtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO,EAAE,KAAK;YAAE,OAAO,IAAI,CAAA;QAChC,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,cAAc,EAAE,OAAO,CAAC,gBAAgB;YACxC,WAAW,EAAE,OAAO,CAAC,YAAY;YACjC,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,WAA6B,EAAE,SAAkB;QAC7E,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,EAAE,eAAe,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;QACzD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAC7C,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG;YAC7B,KAAK;YACL,gBAAgB,EAAE,SAAS;YAC3B,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,QAAQ,EAAE,SAAS;YAC9B,YAAY,EAAE,QAAQ,EAAE,YAAY,IAAI,IAAI;YAC5C,KAAK,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE;SAC7B,CAAA;QACD,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAC5B,MAAM,CAAC,eAAe,GAAG,WAAW,CAAA;QACtC,CAAC;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,MAa1B;QACC,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,EAAE,eAAe,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;QAChE,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QACpD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG;YACpC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,gBAAgB,EAAE,MAAM,CAAC,cAAc;YACvC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,QAAQ,EAAE,MAAM;YACzC,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,SAAS,EAAE,MAAM,CAAC,QAAQ,IAAI,QAAQ,EAAE,SAAS;YACjD,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,aAAa;YAC/C,iBAAiB,EAAE,MAAM,CAAC,eAAe;YACzC,aAAa,EAAE,MAAM,CAAC,WAAW;YACjC,aAAa,EAAE,MAAM,CAAC,WAAW,IAAI,QAAQ,EAAE,aAAa;SAC7D,CAAA;QACD,IAAI,MAAM,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;YAC/B,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,WAAW,CAAA;QAC7C,CAAC;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,WAA6B;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,MAAM,OAAO,GAAG,MAAM,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAA;QAC7C,IAAI,CAAC,OAAO,EAAE,iBAAiB;YAAE,OAAO,IAAI,CAAA;QAC5C,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,iBAAiB,EAAE,QAAQ,EAAE,OAAO,CAAC,aAAa,EAAE,CAAA;IACrF,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,WAA6B,EAAE,YAAoB,EAAE,QAAiB;QAChG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,MAAM,OAAO,GAAG,MAAM,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAA;QAC7C,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;YAAE,OAAM;QAC/B,OAAO,CAAC,iBAAiB,GAAG,YAAY,CAAA;QACxC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,aAAa,GAAG,QAAQ,CAAA;QAClC,CAAC;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO,EAAE,YAAY;YAAE,OAAO,IAAI,CAAA;QACvC,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,IAAI,CAAA;IACpD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,QAAgB;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,OAAO,CAAC,YAAY,GAAG,MAAM,CAAA;QAC7B,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAA;QAChE,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAC1C,OAAQ,GAAwB,IAAI,IAAI,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,WAA6B;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAM;QACzC,MAAM,CAAC,eAAe,GAAG,WAAW,CAAA;QACpC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,OAAO,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,IAAI,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACrC,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO,EAAE,gBAAgB;YAAE,OAAO,IAAI,CAAA;QAC3C,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;IACnE,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,WAA6B;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAC5C,IAAI,CAAC,OAAO,EAAE,gBAAgB;YAAE,OAAO,IAAI,CAAA;QAC3C,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;IACnE,CAAC;CACF"}

package/dist/src/platforms/teams/device-code.d.ts

@@ -0,0 +1,48 @@
+import type { TeamsAccountType, TeamsRegion } from './types.js';
+export interface TeamsTenant {
+    tenantId: string;
+    tenantName?: string;
+    isInvitationRedeemed?: boolean;
+}
+export interface DeviceCodeInfo {
+    deviceCode: string;
+    userCode: string;
+    verificationUri: string;
+    verificationUriComplete: string;
+    expiresIn: number;
+    interval: number;
+}
+export interface AadToken {
+    accessToken: string;
+    refreshToken?: string;
+}
+export interface MintedSkypeToken {
+    skypeToken: string;
+    skypeTokenExpiresAt: string;
+    region?: TeamsRegion;
+}
+export type DeviceTokenResult = {
+    status: 'success';
+    token: AadToken;
+} | {
+    status: 'pending';
+} | {
+    status: 'slow_down';
+} | {
+    status: 'expired';
+} | {
+    status: 'declined';
+} | {
+    status: 'error';
+    message: string;
+};
+export declare function requestDeviceCode(clientId: string, accountType?: TeamsAccountType): Promise<DeviceCodeInfo>;
+export declare function exchangeDeviceCode(deviceCode: string, clientId: string, accountType?: TeamsAccountType): Promise<DeviceTokenResult>;
+export declare function pollDeviceToken(deviceCode: string, interval: number, expiresIn: number, clientId: string, accountType?: TeamsAccountType): Promise<AadToken>;
+export declare function exchangeForSkypeScope(refreshToken: string, clientId: string, accountType?: TeamsAccountType, tenantId?: string): Promise<AadToken>;
+export declare function resolveWorkTenantId(accessToken: string): Promise<string>;
+export declare function decodeJwtTid(token: string): string | undefined;
+export declare function isConsumerTenant(tenantId: string): boolean;
+export declare function mintSkypeToken(spacesAccessToken: string, accountType?: TeamsAccountType): Promise<MintedSkypeToken>;
+export declare function mintConsumerSkypeToken(spacesAccessToken: string): Promise<MintedSkypeToken>;
+//# sourceMappingURL=device-code.d.ts.map

package/dist/src/platforms/teams/device-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-code.d.ts","sourceRoot":"","sources":["../../../../src/platforms/teams/device-code.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAK5D,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,eAAe,EAAE,MAAM,CAAA;IACvB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,GACtC;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GACtB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAexC,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,WAAW,GAAE,gBAA6B,GACzC,OAAO,CAAC,cAAc,CAAC,CAkBzB;AAED,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,WAAW,GAAE,gBAA6B,GACzC,OAAO,CAAC,iBAAiB,CAAC,CAkB5B;AAED,wBAAsB,eAAe,CACnC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,WAAW,GAAE,gBAA6B,GACzC,OAAO,CAAC,QAAQ,CAAC,CAiBnB;AAED,wBAAsB,qBAAqB,CACzC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,WAAW,GAAE,gBAA6B,EAC1C,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,QAAQ,CAAC,CAcnB;AAMD,wBAAsB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAmB9E;AAyBD,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAS9D;AAMD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE1D;AAMD,wBAAsB,cAAc,CAClC,iBAAiB,EAAE,MAAM,EACzB,WAAW,GAAE,gBAA6B,GACzC,OAAO,CAAC,gBAAgB,CAAC,CAqB3B;AAED,wBAAsB,sBAAsB,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAEjG"}

package/dist/src/platforms/teams/device-code.js

@@ -0,0 +1,199 @@
+import { authzUrl, CONSUMER_TENANT_ID, deviceCodeSkypeScope, deviceCodeTeamsScope, deviceCodeTokenUrl, deviceCodeUrl, MICROSOFT_SERVICES_TENANT_ID, TEAMS_TENANTS_URL, WORK_TENANT_ID, } from './app-config.js';
+import { TeamsError } from './types.js';
+const DEFAULT_SKYPE_TOKEN_TTL_SEC = 21600;
+async function postForm(url, params) {
+    const res = await fetch(url, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: new URLSearchParams(params),
+    });
+    const body = (await res.json().catch(() => ({})));
+    return { status: res.status, body };
+}
+export async function requestDeviceCode(clientId, accountType = 'personal') {
+    const { status, body } = await postForm(deviceCodeUrl(accountType), {
+        client_id: clientId,
+        scope: deviceCodeTeamsScope(accountType),
+    });
+    if (status !== 200) {
+        throw new TeamsError(`Device code request failed: ${describeAadError(body, status)}`, 'device_code_failed');
+    }
+    const userCode = String(body.user_code ?? '');
+    const verificationUri = String(body.verification_uri ?? 'https://microsoft.com/devicelogin');
+    return {
+        deviceCode: String(body.device_code ?? ''),
+        userCode,
+        verificationUri,
+        verificationUriComplete: `${verificationUri}?otc=${encodeURIComponent(userCode)}`,
+        expiresIn: Number(body.expires_in ?? 900),
+        interval: Number(body.interval ?? 5),
+    };
+}
+export async function exchangeDeviceCode(deviceCode, clientId, accountType = 'personal') {
+    const { status, body } = await postForm(deviceCodeTokenUrl(accountType), {
+        client_id: clientId,
+        grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+        device_code: deviceCode,
+    });
+    if (status === 200) {
+        return {
+            status: 'success',
+            token: { accessToken: String(body.access_token), refreshToken: body.refresh_token },
+        };
+    }
+    const error = String(body.error ?? '');
+    if (error === 'authorization_pending')
+        return { status: 'pending' };
+    if (error === 'slow_down')
+        return { status: 'slow_down' };
+    if (error === 'expired_token')
+        return { status: 'expired' };
+    if (error === 'authorization_declined')
+        return { status: 'declined' };
+    return { status: 'error', message: describeAadError(body, status) };
+}
+export async function pollDeviceToken(deviceCode, interval, expiresIn, clientId, accountType = 'personal') {
+    const deadline = Date.now() + expiresIn * 1000;
+    let waitMs = Math.max(interval, 1) * 1000;
+    while (Date.now() < deadline) {
+        await new Promise((resolve) => setTimeout(resolve, waitMs));
+        const result = await exchangeDeviceCode(deviceCode, clientId, accountType);
+        if (result.status === 'success')
+            return result.token;
+        if (result.status === 'slow_down') {
+            waitMs += 5000;
+            continue;
+        }
+        if (result.status === 'pending')
+            continue;
+        if (result.status === 'expired')
+            throw new TeamsError('Device code expired before approval.', 'device_code_expired');
+        if (result.status === 'declined')
+            throw new TeamsError('Authorization was declined.', 'device_code_declined');
+        throw new TeamsError(`Device authorization failed: ${result.message}`, 'device_code_failed');
+    }
+    throw new TeamsError('Device code expired before approval.', 'device_code_expired');
+}
+export async function exchangeForSkypeScope(refreshToken, clientId, accountType = 'personal', tenantId) {
+    const { status, body } = await postForm(deviceCodeTokenUrl(accountType, tenantId), {
+        client_id: clientId,
+        grant_type: 'refresh_token',
+        refresh_token: refreshToken,
+        scope: deviceCodeSkypeScope(accountType),
+    });
+    if (status !== 200) {
+        throw new TeamsError(`Token exchange failed: ${describeAadError(body, status)}`, 'token_exchange_failed');
+    }
+    return {
+        accessToken: String(body.access_token),
+        refreshToken: body.refresh_token ?? refreshToken,
+    };
+}
+// Work logins go through the `organizations` authority, so the token's `tid` is
+// a placeholder, not a real tenant GUID. The skype authz endpoint then rejects
+// it with `GuestUserNotRedeemed`. Resolving the concrete tenant lets the
+// skype-scope exchange target the tenant-specific authority and succeed.
+export async function resolveWorkTenantId(accessToken) {
+    const claimTid = decodeJwtTid(accessToken);
+    if (claimTid && !isPlaceholderTenant(claimTid))
+        return claimTid;
+    const tenants = await fetchTenants(accessToken);
+    const redeemed = tenants.find((tenant) => tenant.isInvitationRedeemed !== false) ?? tenants[0];
+    if (!redeemed) {
+        throw new TeamsError('No Microsoft Teams tenant is associated with this account. If this is a personal Microsoft account, run `agent-teams auth login --account-type personal`.', 'teams_tenant_missing');
+    }
+    if (redeemed.isInvitationRedeemed === false) {
+        throw new TeamsError('This Microsoft Teams guest invitation has not been accepted yet. Accept the invite in Teams, then run `agent-teams auth login` again.', 'teams_invitation_not_redeemed');
+    }
+    return redeemed.tenantId;
+}
+async function fetchTenants(accessToken) {
+    const res = await fetch(TEAMS_TENANTS_URL, { headers: { Authorization: `Bearer ${accessToken}` } });
+    if (!res.ok) {
+        throw new TeamsError(`Tenant discovery failed: HTTP ${res.status}`, 'tenant_discovery_failed');
+    }
+    const body = (await res.json().catch(() => []));
+    const rows = Array.isArray(body) ? body : [];
+    return rows
+        .map((row) => {
+        if (typeof row !== 'object' || row === null)
+            return null;
+        const record = row;
+        const tenantId = record.tenantId;
+        if (typeof tenantId !== 'string' || !tenantId)
+            return null;
+        return {
+            tenantId,
+            tenantName: typeof record.tenantName === 'string' ? record.tenantName : undefined,
+            isInvitationRedeemed: typeof record.isInvitationRedeemed === 'boolean' ? record.isInvitationRedeemed : undefined,
+        };
+    })
+        .filter((tenant) => tenant !== null);
+}
+export function decodeJwtTid(token) {
+    const payload = token.split('.')[1];
+    if (!payload)
+        return undefined;
+    try {
+        const claims = JSON.parse(Buffer.from(payload, 'base64url').toString('utf8'));
+        return typeof claims.tid === 'string' ? claims.tid : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+// The consumer tenant unambiguously marks a personal account: it has no org
+// tenant, so a work login carrying it can never resolve a Teams tenant. The
+// Microsoft Services placeholder is intentionally excluded — it also appears on
+// legitimate work tokens, which resolveWorkTenantId() resolves via discovery.
+export function isConsumerTenant(tenantId) {
+    return tenantId === CONSUMER_TENANT_ID;
+}
+function isPlaceholderTenant(tenantId) {
+    return tenantId === WORK_TENANT_ID || tenantId === CONSUMER_TENANT_ID || tenantId === MICROSOFT_SERVICES_TENANT_ID;
+}
+export async function mintSkypeToken(spacesAccessToken, accountType = 'personal') {
+    const res = await fetch(authzUrl(accountType), {
+        method: 'POST',
+        headers: { Authorization: `Bearer ${spacesAccessToken}`, Accept: 'application/json; ver=1.0' },
+    });
+    const body = (await res.json().catch(() => ({})));
+    if (!res.ok) {
+        throw new TeamsError(`Failed to mint skype token: ${describeAuthzError(body, res.status)}`, 'skype_token_failed');
+    }
+    const nested = body.skypeToken;
+    const flat = body.tokens;
+    const skypeToken = nested?.skypetoken ?? flat?.skypeToken;
+    if (!skypeToken) {
+        throw new TeamsError('Consumer authz response did not contain a skype token.', 'skype_token_missing');
+    }
+    const ttlSec = nested?.skypeTokenExpiresIn ?? flat?.expiresIn ?? DEFAULT_SKYPE_TOKEN_TTL_SEC;
+    return {
+        skypeToken,
+        skypeTokenExpiresAt: new Date(Date.now() + ttlSec * 1000).toISOString(),
+        region: parseRegion(body),
+    };
+}
+export async function mintConsumerSkypeToken(spacesAccessToken) {
+    return mintSkypeToken(spacesAccessToken, 'personal');
+}
+function describeAadError(body, status) {
+    const desc = body.error_description ?? body.error;
+    return typeof desc === 'string' ? desc.split('\n')[0] : `HTTP ${status}`;
+}
+function describeAuthzError(body, status) {
+    const statusObj = body.status;
+    const code = String(body.errorCode ?? body.message ?? statusObj?.text ?? `HTTP ${status}`);
+    if (code === 'GuestUserNotRedeemed') {
+        return `${code} (the account has no redeemed Teams tenant — if this is a personal account, run \`agent-teams auth login --account-type personal\`; if you are a guest, accept the Teams invite first)`;
+    }
+    return code;
+}
+function parseRegion(body) {
+    const regionGtms = body.regionGtms;
+    const raw = regionGtms?.region ?? regionGtms?.middleTier ?? regionGtms?.mt;
+    if (raw === 'amer' || raw === 'emea' || raw === 'apac')
+        return raw;
+    return undefined;
+}
+//# sourceMappingURL=device-code.js.map

package/dist/src/platforms/teams/device-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-code.js","sourceRoot":"","sources":["../../../../src/platforms/teams/device-code.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,aAAa,EACb,4BAA4B,EAC5B,iBAAiB,EACjB,cAAc,GACf,MAAM,cAAc,CAAA;AAErB,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAEpC,MAAM,2BAA2B,GAAG,KAAK,CAAA;AAoCzC,KAAK,UAAU,QAAQ,CACrB,GAAW,EACX,MAA8B;IAE9B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC;KAClC,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4B,CAAA;IAC5E,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAA;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAgB,EAChB,cAAgC,UAAU;IAE1C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE;QAClE,SAAS,EAAE,QAAQ;QACnB,KAAK,EAAE,oBAAoB,CAAC,WAAW,CAAC;KACzC,CAAC,CAAA;IACF,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,IAAI,UAAU,CAAC,+BAA+B,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAA;IAC7G,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;IAC7C,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,mCAAmC,CAAC,CAAA;IAC5F,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;QAC1C,QAAQ;QACR,eAAe;QACf,uBAAuB,EAAE,GAAG,eAAe,QAAQ,kBAAkB,CAAC,QAAQ,CAAC,EAAE;QACjF,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC;QACzC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;KACrC,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAkB,EAClB,QAAgB,EAChB,cAAgC,UAAU;IAE1C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE;QACvE,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,8CAA8C;QAC1D,WAAW,EAAE,UAAU;KACxB,CAAC,CAAA;IACF,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,aAAmC,EAAE;SAC1G,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;IACtC,IAAI,KAAK,KAAK,uBAAuB;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IACnE,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;IACzD,IAAI,KAAK,KAAK,eAAe;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAC3D,IAAI,KAAK,KAAK,wBAAwB;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;IACrE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAA;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,UAAkB,EAClB,QAAgB,EAChB,SAAiB,EACjB,QAAgB,EAChB,cAAgC,UAAU;IAE1C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAA;IAC9C,IAAI,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,IAAI,CAAA;IACzC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;QAC3D,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;QAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,KAAK,CAAA;QACpD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,IAAI,CAAA;YACd,SAAQ;QACV,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,SAAQ;QACzC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,UAAU,CAAC,sCAAsC,EAAE,qBAAqB,CAAC,CAAA;QACpH,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAAE,MAAM,IAAI,UAAU,CAAC,6BAA6B,EAAE,sBAAsB,CAAC,CAAA;QAC7G,MAAM,IAAI,UAAU,CAAC,gCAAgC,MAAM,CAAC,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAA;IAC9F,CAAC;IACD,MAAM,IAAI,UAAU,CAAC,sCAAsC,EAAE,qBAAqB,CAAC,CAAA;AACrF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,YAAoB,EACpB,QAAgB,EAChB,cAAgC,UAAU,EAC1C,QAAiB;IAEjB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE;QACjF,SAAS,EAAE,QAAQ;QACnB,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,YAAY;QAC3B,KAAK,EAAE,oBAAoB,CAAC,WAAW,CAAC;KACzC,CAAC,CAAA;IACF,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,IAAI,UAAU,CAAC,0BAA0B,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAA;IAC3G,CAAC;IACD,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;QACtC,YAAY,EAAG,IAAI,CAAC,aAAoC,IAAI,YAAY;KACzE,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,+EAA+E;AAC/E,yEAAyE;AACzE,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IAC3D,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,CAAC,CAAA;IAC1C,IAAI,QAAQ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAA;IAE/D,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,oBAAoB,KAAK,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAA;IAC9F,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,UAAU,CAClB,2JAA2J,EAC3J,sBAAsB,CACvB,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,oBAAoB,KAAK,KAAK,EAAE,CAAC;QAC5C,MAAM,IAAI,UAAU,CAClB,uIAAuI,EACvI,+BAA+B,CAChC,CAAA;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAA;AAC1B,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,WAAmB;IAC7C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,EAAE,CAAC,CAAA;IACnG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,UAAU,CAAC,iCAAiC,GAAG,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAA;IAChG,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAY,CAAA;IAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5C,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,GAAG,EAAsB,EAAE;QAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QACxD,MAAM,MAAM,GAAG,GAA8B,CAAA;QAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;QAChC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QAC1D,OAAO;YACL,QAAQ;YACR,UAAU,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YACjF,oBAAoB,EAClB,OAAO,MAAM,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS;SAC7F,CAAA;IACH,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,MAAM,EAAyB,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAA;AAC/D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACnC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAA;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAsB,CAAA;QAClG,OAAO,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,4EAA4E;AAC5E,gFAAgF;AAChF,8EAA8E;AAC9E,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,QAAQ,KAAK,kBAAkB,CAAA;AACxC,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,OAAO,QAAQ,KAAK,cAAc,IAAI,QAAQ,KAAK,kBAAkB,IAAI,QAAQ,KAAK,4BAA4B,CAAA;AACpH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,iBAAyB,EACzB,cAAgC,UAAU;IAE1C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;QAC7C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,iBAAiB,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE;KAC/F,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4B,CAAA;IAC5E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,UAAU,CAAC,+BAA+B,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAA;IACnH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,UAA+E,CAAA;IACnG,MAAM,IAAI,GAAG,IAAI,CAAC,MAAiE,CAAA;IACnF,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,IAAI,EAAE,UAAU,CAAA;IACzD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,UAAU,CAAC,wDAAwD,EAAE,qBAAqB,CAAC,CAAA;IACvG,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,EAAE,mBAAmB,IAAI,IAAI,EAAE,SAAS,IAAI,2BAA2B,CAAA;IAC5F,OAAO;QACL,UAAU;QACV,mBAAmB,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QACvE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC;KAC1B,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,iBAAyB;IACpE,OAAO,cAAc,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAA;AACtD,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA6B,EAAE,MAAc;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,CAAA;IACjD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAA;AAC1E,CAAC;AAED,SAAS,kBAAkB,CAAC,IAA6B,EAAE,MAAc;IACvE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAuC,CAAA;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,IAAI,SAAS,EAAE,IAAI,IAAI,QAAQ,MAAM,EAAE,CAAC,CAAA;IAC1F,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;QACpC,OAAO,GAAG,IAAI,wLAAwL,CAAA;IACxM,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,UAA+E,CAAA;IACvG,MAAM,GAAG,GAAG,UAAU,EAAE,MAAM,IAAI,UAAU,EAAE,UAAU,IAAI,UAAU,EAAE,EAAE,CAAA;IAC1E,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,GAAG,CAAA;IAClE,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/src/platforms/teams/device-login.d.ts

@@ -0,0 +1,37 @@
+import { TeamsCredentialManager } from './credential-manager.js';
+import { type DeviceCodeInfo } from './device-code.js';
+import { type TeamsAccountType } from './types.js';
+export interface DeviceCodePrompt {
+    verificationUri: string;
+    verificationUriComplete: string;
+    userCode: string;
+    expiresAt: number;
+}
+export interface DeviceLoginResult {
+    accountType: TeamsAccountType;
+    userName: string;
+    teams: Array<{
+        id: string;
+        name: string;
+    }>;
+    current: string | null;
+}
+interface LoginCallbacks {
+    onCode: (prompt: DeviceCodePrompt) => void | Promise<void>;
+    onPending?: () => void;
+    debug?: (message: string) => void;
+    clientId?: string;
+    accountType?: TeamsAccountType;
+}
+export declare function startDeviceCode(clientIdOverride?: string, accountType?: TeamsAccountType): Promise<{
+    info: DeviceCodeInfo;
+    clientId: string;
+}>;
+export declare function completeDeviceCode(deviceCode: string, clientId: string, credManager?: TeamsCredentialManager, accountType?: TeamsAccountType): Promise<DeviceLoginResult>;
+export declare function loginWithDeviceCode(callbacks: LoginCallbacks, credManager?: TeamsCredentialManager): Promise<DeviceLoginResult>;
+export declare function refreshDeviceCodeAccount(accountType: TeamsAccountType, credManager?: TeamsCredentialManager, debug?: (message: string) => void): Promise<boolean>;
+export declare class PendingApprovalError extends Error {
+    constructor();
+}
+export {};
+//# sourceMappingURL=device-login.d.ts.map

package/dist/src/platforms/teams/device-login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-login.d.ts","sourceRoot":"","sources":["../../../../src/platforms/teams/device-login.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC7D,OAAO,EAEL,KAAK,cAAc,EASpB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,KAAK,gBAAgB,EAAc,MAAM,SAAS,CAAA;AAK3D,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,MAAM,CAAA;IACvB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,gBAAgB,CAAA;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC1C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,UAAU,cAAc;IACtB,MAAM,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1D,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;IACtB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,gBAAgB,CAAA;CAC/B;AAED,wBAAsB,eAAe,CACnC,gBAAgB,CAAC,EAAE,MAAM,EACzB,WAAW,GAAE,gBAA6B,GACzC,OAAO,CAAC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AAED,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,WAAW,GAAE,sBAAqD,EAClE,WAAW,GAAE,gBAA6B,GACzC,OAAO,CAAC,iBAAiB,CAAC,CAe5B;AAED,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,cAAc,EACzB,WAAW,GAAE,sBAAqD,GACjE,OAAO,CAAC,iBAAiB,CAAC,CAqB5B;AAgED,wBAAsB,wBAAwB,CAC5C,WAAW,EAAE,gBAAgB,EAC7B,WAAW,GAAE,sBAAqD,EAClE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAChC,OAAO,CAAC,OAAO,CAAC,CAiClB;AAED,qBAAa,oBAAqB,SAAQ,KAAK;;CAK9C"}

package/dist/src/platforms/teams/device-login.js

@@ -0,0 +1,129 @@
+import { getTeamsAppClientId } from './app-config.js';
+import { TeamsClient } from './client.js';
+import { TeamsCredentialManager } from './credential-manager.js';
+import { decodeJwtTid, exchangeDeviceCode, exchangeForSkypeScope, isConsumerTenant, mintSkypeToken, pollDeviceToken, requestDeviceCode, resolveWorkTenantId, } from './device-code.js';
+import { TeamsError } from './types.js';
+const PERSONAL_ACCOUNT_HINT = 'This looks like a personal Microsoft account. Run `agent-teams auth login --account-type personal` to sign in.';
+export async function startDeviceCode(clientIdOverride, accountType = 'personal') {
+    const clientId = clientIdOverride ?? getTeamsAppClientId(accountType).clientId;
+    const info = await requestDeviceCode(clientId, accountType);
+    return { info, clientId };
+}
+export async function completeDeviceCode(deviceCode, clientId, credManager = new TeamsCredentialManager(), accountType = 'personal') {
+    const first = await exchangeDeviceCode(deviceCode, clientId, accountType);
+    if (first.status === 'pending' || first.status === 'slow_down') {
+        throw new PendingApprovalError();
+    }
+    if (first.status !== 'success') {
+        throw new Error(first.status === 'expired'
+            ? 'Device code expired.'
+            : first.status === 'declined'
+                ? 'Authorization declined.'
+                : `Login failed: ${first.message}`);
+    }
+    return finalize(first.token, clientId, accountType, credManager);
+}
+export async function loginWithDeviceCode(callbacks, credManager = new TeamsCredentialManager()) {
+    const accountType = callbacks.accountType ?? 'personal';
+    const { info, clientId } = await startDeviceCode(callbacks.clientId, accountType);
+    await callbacks.onCode({
+        verificationUri: info.verificationUri,
+        verificationUriComplete: info.verificationUriComplete,
+        userCode: info.userCode,
+        expiresAt: Date.now() + info.expiresIn * 1000,
+    });
+    const aad = await pollDeviceToken(info.deviceCode, info.interval, info.expiresIn, clientId, accountType);
+    // A work login can resolve to a personal (MSA) account, whose token carries a
+    // consumer tenant. Such accounts have no org tenant and can't be finished on
+    // the work flow, so stop with an actionable hint rather than fail obscurely.
+    if (accountType === 'work' && isPersonalAccount(aad)) {
+        throw new TeamsError(PERSONAL_ACCOUNT_HINT, 'teams_personal_account_on_work_login');
+    }
+    callbacks.onPending?.();
+    return finalize(aad, clientId, accountType, credManager, callbacks.debug);
+}
+function isPersonalAccount(aad) {
+    const tid = decodeJwtTid(aad.accessToken);
+    return tid !== undefined && isConsumerTenant(tid);
+}
+async function finalize(initialAad, clientId, accountType, credManager, debug) {
+    if (!initialAad.refreshToken) {
+        throw new Error('Sign-in did not return a refresh token (needed to mint the Teams token). Retry `auth login`, or use `auth extract` if this persists.');
+    }
+    let tenantId;
+    if (accountType === 'work') {
+        debug?.('Resolving Teams tenant...');
+        tenantId = await resolveWorkTenantId(initialAad.accessToken);
+    }
+    debug?.('Exchanging token for skype audience...');
+    const skypeScoped = await exchangeForSkypeScope(initialAad.refreshToken, clientId, accountType, tenantId);
+    debug?.('Minting skype token...');
+    const minted = await mintSkypeToken(skypeScoped.accessToken, accountType);
+    const client = await new TeamsClient().login({ token: minted.skypeToken, accountType });
+    const authInfo = await client.testAuth();
+    const teams = await client.listTeams();
+    const teamMap = {};
+    for (const team of teams) {
+        teamMap[team.id] = { team_id: team.id, team_name: team.name };
+    }
+    const currentTeam = teams[0]?.id ?? null;
+    await credManager.setDeviceCodeAccount({
+        accountType,
+        token: minted.skypeToken,
+        tokenExpiresAt: minted.skypeTokenExpiresAt,
+        aadRefreshToken: skypeScoped.refreshToken,
+        aadClientId: clientId,
+        aadTenantId: tenantId,
+        region: minted.region ?? (accountType === 'work' ? client.getRegion() : undefined),
+        userName: authInfo.displayName,
+        teams: teamMap,
+        currentTeam,
+        authMethod: 'device-code',
+    });
+    return {
+        accountType,
+        userName: authInfo.displayName,
+        teams: teams.map((t) => ({ id: t.id, name: t.name })),
+        current: currentTeam,
+    };
+}
+export async function refreshDeviceCodeAccount(accountType, credManager = new TeamsCredentialManager(), debug) {
+    const config = await credManager.loadConfig();
+    const account = config?.accounts[accountType];
+    if (!account || account.auth_method !== 'device-code' || !account.aad_refresh_token) {
+        return false;
+    }
+    const clientId = account.aad_client_id ?? getTeamsAppClientId(accountType).clientId;
+    try {
+        debug?.('Silently refreshing skype token...');
+        const tenantId = accountType === 'work' ? account.aad_tenant_id : undefined;
+        const skypeScoped = await exchangeForSkypeScope(account.aad_refresh_token, clientId, accountType, tenantId);
+        const minted = await mintSkypeToken(skypeScoped.accessToken, accountType);
+        await credManager.setDeviceCodeAccount({
+            accountType,
+            token: minted.skypeToken,
+            tokenExpiresAt: minted.skypeTokenExpiresAt,
+            aadRefreshToken: skypeScoped.refreshToken,
+            aadClientId: clientId,
+            aadTenantId: tenantId,
+            region: minted.region ?? account.region,
+            userName: account.user_name,
+            teams: account.teams,
+            currentTeam: account.current_team,
+            authMethod: 'device-code',
+            makeCurrent: false,
+        });
+        return true;
+    }
+    catch (error) {
+        debug?.(`Silent refresh failed: ${error.message}`);
+        return false;
+    }
+}
+export class PendingApprovalError extends Error {
+    constructor() {
+        super('Authorization pending. Approve in the browser, then retry.');
+        this.name = 'PendingApprovalError';
+    }
+}
+//# sourceMappingURL=device-login.js.map

package/dist/src/platforms/teams/device-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-login.js","sourceRoot":"","sources":["../../../../src/platforms/teams/device-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AACtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC7D,OAAO,EAGL,YAAY,EACZ,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAyB,UAAU,EAAE,MAAM,SAAS,CAAA;AAE3D,MAAM,qBAAqB,GACzB,gHAAgH,CAAA;AAwBlH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,gBAAyB,EACzB,cAAgC,UAAU;IAE1C,MAAM,QAAQ,GAAG,gBAAgB,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAA;IAC9E,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;IAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAkB,EAClB,QAAgB,EAChB,cAAsC,IAAI,sBAAsB,EAAE,EAClE,cAAgC,UAAU;IAE1C,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;IACzE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAC/D,MAAM,IAAI,oBAAoB,EAAE,CAAA;IAClC,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,KAAK,CAAC,MAAM,KAAK,SAAS;YACxB,CAAC,CAAC,sBAAsB;YACxB,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU;gBAC3B,CAAC,CAAC,yBAAyB;gBAC3B,CAAC,CAAC,iBAAiB,KAAK,CAAC,OAAO,EAAE,CACvC,CAAA;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAyB,EACzB,cAAsC,IAAI,sBAAsB,EAAE;IAElE,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,IAAI,UAAU,CAAA;IACvD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;IACjF,MAAM,SAAS,CAAC,MAAM,CAAC;QACrB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI;KAC9C,CAAC,CAAA;IAEF,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;IAExG,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,IAAI,WAAW,KAAK,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,sCAAsC,CAAC,CAAA;IACrF,CAAC;IAED,SAAS,CAAC,SAAS,EAAE,EAAE,CAAA;IACvB,OAAO,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAa;IACtC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACzC,OAAO,GAAG,KAAK,SAAS,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAA;AACnD,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,UAAoB,EACpB,QAAgB,EAChB,WAA6B,EAC7B,WAAmC,EACnC,KAAiC;IAEjC,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,sIAAsI,CACvI,CAAA;IACH,CAAC;IAED,IAAI,QAA4B,CAAA;IAChC,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC3B,KAAK,EAAE,CAAC,2BAA2B,CAAC,CAAA;QACpC,QAAQ,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;IAC9D,CAAC;IAED,KAAK,EAAE,CAAC,wCAAwC,CAAC,CAAA;IACjD,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,UAAU,CAAC,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;IAEzG,KAAK,EAAE,CAAC,wBAAwB,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;IAEzE,MAAM,MAAM,GAAG,MAAM,IAAI,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,CAAA;IACvF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAA;IACxC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAA;IAEtC,MAAM,OAAO,GAA2D,EAAE,CAAA;IAC1E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAA;IAC/D,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAA;IAExC,MAAM,WAAW,CAAC,oBAAoB,CAAC;QACrC,WAAW;QACX,KAAK,EAAE,MAAM,CAAC,UAAU;QACxB,cAAc,EAAE,MAAM,CAAC,mBAAmB;QAC1C,eAAe,EAAE,WAAW,CAAC,YAAY;QACzC,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,QAAQ,EAAE,QAAQ,CAAC,WAAW;QAC9B,KAAK,EAAE,OAAO;QACd,WAAW;QACX,UAAU,EAAE,aAAa;KAC1B,CAAC,CAAA;IAEF,OAAO;QACL,WAAW;QACX,QAAQ,EAAE,QAAQ,CAAC,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,OAAO,EAAE,WAAW;KACrB,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,WAA6B,EAC7B,cAAsC,IAAI,sBAAsB,EAAE,EAClE,KAAiC;IAEjC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,CAAA;IAC7C,MAAM,OAAO,GAAG,MAAM,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAA;IAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,KAAK,aAAa,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACpF,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAA;IAEnF,IAAI,CAAC;QACH,KAAK,EAAE,CAAC,oCAAoC,CAAC,CAAA;QAC7C,MAAM,QAAQ,GAAG,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAA;QAC3E,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,iBAAiB,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;QAC3G,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;QAEzE,MAAM,WAAW,CAAC,oBAAoB,CAAC;YACrC,WAAW;YACX,KAAK,EAAE,MAAM,CAAC,UAAU;YACxB,cAAc,EAAE,MAAM,CAAC,mBAAmB;YAC1C,eAAe,EAAE,WAAW,CAAC,YAAY;YACzC,WAAW,EAAE,QAAQ;YACrB,WAAW,EAAE,QAAQ;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM;YACvC,QAAQ,EAAE,OAAO,CAAC,SAAS;YAC3B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW,EAAE,OAAO,CAAC,YAAY;YACjC,UAAU,EAAE,aAAa;YACzB,WAAW,EAAE,KAAK;SACnB,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,EAAE,CAAC,0BAA2B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAA;QAC7D,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C;QACE,KAAK,CAAC,4DAA4D,CAAC,CAAA;QACnE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;IACpC,CAAC;CACF"}

package/dist/src/platforms/teams/ensure-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ensure-auth.d.ts","sourceRoot":"","sources":["../../../../src/platforms/teams/ensure-auth.ts"],"names":[],"mappings":"AAOA,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAyDrD"}
+{"version":3,"file":"ensure-auth.d.ts","sourceRoot":"","sources":["../../../../src/platforms/teams/ensure-auth.ts"],"names":[],"mappings":"AAQA,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CA2DrD"}

package/dist/src/platforms/teams/ensure-auth.js

@@ -1,6 +1,7 @@
 import { warn } from '../../shared/utils/stderr.js';
 import { TeamsClient } from './client.js';
 import { TeamsCredentialManager } from './credential-manager.js';
+import { refreshDeviceCodeAccount } from './device-login.js';
 import { TeamsTokenExtractor } from './token-extractor.js';
 export async function ensureTeamsAuth() {
     try {
@@ -8,6 +9,8 @@ export async function ensureTeamsAuth() {
         const config = await credManager.loadConfig();
         if (config && hasValidToken(config))
             return;
+        if (config && (await trySilentRefresh(config, credManager)))
+            return;
         const extractor = new TeamsTokenExtractor();
         const extracted = await extractor.extract();
         if (extracted.length === 0)
@@ -78,6 +81,15 @@ async function resolveAccountType(token, extractedType, accountTypeKnown, config
     }
     throw lastError ?? new Error('Token validation failed');
 }
+async function trySilentRefresh(config, credManager) {
+    const key = TeamsCredentialManager.accountOverride ?? config.current_account;
+    if (!key)
+        return false;
+    const account = config.accounts[key];
+    if (account?.auth_method !== 'device-code' || !account.aad_refresh_token)
+        return false;
+    return refreshDeviceCodeAccount(key, credManager);
+}
 function hasValidToken(config) {
     const key = TeamsCredentialManager.accountOverride ?? config.current_account;
     if (!key)