agent-messenger 2.28.0 → 2.29.1

package/dist/src/platforms/teams/app-config.js

@@ -0,0 +1,69 @@
+export const TEAMS_DESKTOP_CLIENT_ID = '1fec8e78-bce4-4aaf-ab1b-5451cc387264';
+export const TEAMS_WEB_CLIENT_ID = '5e3ce6c0-2b1f-4285-8d4b-75ee78787346';
+export const CONSUMER_TENANT_ID = '9188040d-6c67-4c5b-b112-36a304b66dad';
+// The Microsoft Services (MSA passthrough) tenant. Consumer/MSA tokens for the
+// Skype resource carry this `tid`, so it is a placeholder that still requires
+// tenant discovery before the skype-token exchange.
+export const MICROSOFT_SERVICES_TENANT_ID = 'f8cdef31-a31e-4b4a-93e4-5f571e91255a';
+export const WORK_TENANT_ID = 'organizations';
+export const DEVICE_CODE_SCOPE_TEAMS = 'service::api.fl.teams.microsoft.com::MBI_SSL openid profile offline_access';
+export const DEVICE_CODE_SCOPE_SKYPE = 'service::api.fl.spaces.skype.com::MBI_SSL openid profile offline_access';
+export const WORK_DEVICE_CODE_SCOPE_TEAMS = 'https://api.spaces.skype.com/.default openid profile offline_access';
+export const WORK_DEVICE_CODE_SCOPE_SKYPE = 'https://api.spaces.skype.com/.default openid profile offline_access';
+export const SUBSTRATE_SEARCH_URL = 'https://substrate.office.com/searchservice/api/v2/query';
+export const TEAMS_WEB_ORIGIN = 'https://teams.microsoft.com';
+export const AAD_SCOPE_SUBSTRATE = 'https://substrate.office.com/.default offline_access';
+export const AAD_SCOPE_GRAPH = 'https://graph.microsoft.com/.default offline_access';
+export const AAD_AUDIENCE_SUBSTRATE = 'https://substrate.office.com';
+export const AAD_AUDIENCE_GRAPH = 'https://graph.microsoft.com';
+export const AUTHZ_CONSUMER_URL = 'https://teams.live.com/api/auth/v1.0/authz/consumer';
+export const AUTHZ_WORK_URL = 'https://teams.microsoft.com/api/authsvc/v1.0/authz';
+// Control-plane tenant-discovery endpoint. The region segment is not
+// authoritative for this call (it lists every tenant the user belongs to
+// regardless of home region), so we pin the value fossteams uses.
+export const TEAMS_TENANTS_URL = 'https://teams.microsoft.com/api/mt/emea/beta/users/tenants';
+export const GET_CREDENTIAL_TYPE_URL = 'https://login.microsoftonline.com/common/GetCredentialType';
+export function consumerDeviceCodeUrl() {
+    return `https://login.microsoftonline.com/${CONSUMER_TENANT_ID}/oauth2/v2.0/devicecode`;
+}
+export function consumerTokenUrl() {
+    return `https://login.microsoftonline.com/${CONSUMER_TENANT_ID}/oauth2/v2.0/token`;
+}
+export function organizationsDeviceCodeUrl() {
+    return `https://login.microsoftonline.com/${WORK_TENANT_ID}/oauth2/v2.0/devicecode`;
+}
+export function organizationsTokenUrl() {
+    return `https://login.microsoftonline.com/${WORK_TENANT_ID}/oauth2/v2.0/token`;
+}
+export function tenantTokenUrl(tenantId) {
+    return `https://login.microsoftonline.com/${tenantId}/oauth2/v2.0/token`;
+}
+export function deviceCodeUrl(accountType) {
+    return accountType === 'personal' ? consumerDeviceCodeUrl() : organizationsDeviceCodeUrl();
+}
+export function deviceCodeTokenUrl(accountType, tenantId) {
+    if (tenantId)
+        return tenantTokenUrl(tenantId);
+    return accountType === 'personal' ? consumerTokenUrl() : organizationsTokenUrl();
+}
+export function deviceCodeTeamsScope(accountType) {
+    return accountType === 'personal' ? DEVICE_CODE_SCOPE_TEAMS : WORK_DEVICE_CODE_SCOPE_TEAMS;
+}
+export function deviceCodeSkypeScope(accountType) {
+    return accountType === 'personal' ? DEVICE_CODE_SCOPE_SKYPE : WORK_DEVICE_CODE_SCOPE_SKYPE;
+}
+export function authzUrl(accountType) {
+    return accountType === 'personal' ? AUTHZ_CONSUMER_URL : AUTHZ_WORK_URL;
+}
+function parseTrimmed(value) {
+    const normalized = value?.trim();
+    return normalized ? normalized : undefined;
+}
+export function getTeamsAppClientId(accountType = 'personal') {
+    const envClientId = parseTrimmed(process.env.AGENT_TEAMS_CLIENT_ID);
+    if (envClientId) {
+        return { clientId: envClientId, source: 'env' };
+    }
+    return { clientId: accountType === 'work' ? TEAMS_DESKTOP_CLIENT_ID : TEAMS_WEB_CLIENT_ID, source: 'builtin' };
+}
+//# sourceMappingURL=app-config.js.map

package/dist/src/platforms/teams/app-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-config.js","sourceRoot":"","sources":["../../../../src/platforms/teams/app-config.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,uBAAuB,GAAG,sCAAsC,CAAA;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,sCAAsC,CAAA;AAEzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,sCAAsC,CAAA;AACxE,+EAA+E;AAC/E,8EAA8E;AAC9E,oDAAoD;AACpD,MAAM,CAAC,MAAM,4BAA4B,GAAG,sCAAsC,CAAA;AAClF,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAA;AAE7C,MAAM,CAAC,MAAM,uBAAuB,GAAG,4EAA4E,CAAA;AACnH,MAAM,CAAC,MAAM,uBAAuB,GAAG,yEAAyE,CAAA;AAChH,MAAM,CAAC,MAAM,4BAA4B,GAAG,qEAAqE,CAAA;AACjH,MAAM,CAAC,MAAM,4BAA4B,GAAG,qEAAqE,CAAA;AAEjH,MAAM,CAAC,MAAM,oBAAoB,GAAG,yDAAyD,CAAA;AAC7F,MAAM,CAAC,MAAM,gBAAgB,GAAG,6BAA6B,CAAA;AAC7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,sDAAsD,CAAA;AACzF,MAAM,CAAC,MAAM,eAAe,GAAG,qDAAqD,CAAA;AACpF,MAAM,CAAC,MAAM,sBAAsB,GAAG,8BAA8B,CAAA;AACpE,MAAM,CAAC,MAAM,kBAAkB,GAAG,6BAA6B,CAAA;AAE/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,qDAAqD,CAAA;AACvF,MAAM,CAAC,MAAM,cAAc,GAAG,oDAAoD,CAAA;AAElF,qEAAqE;AACrE,yEAAyE;AACzE,kEAAkE;AAClE,MAAM,CAAC,MAAM,iBAAiB,GAAG,4DAA4D,CAAA;AAE7F,MAAM,CAAC,MAAM,uBAAuB,GAAG,4DAA4D,CAAA;AAEnG,MAAM,UAAU,qBAAqB;IACnC,OAAO,qCAAqC,kBAAkB,yBAAyB,CAAA;AACzF,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,qCAAqC,kBAAkB,oBAAoB,CAAA;AACpF,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,OAAO,qCAAqC,cAAc,yBAAyB,CAAA;AACrF,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,qCAAqC,cAAc,oBAAoB,CAAA;AAChF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,OAAO,qCAAqC,QAAQ,oBAAoB,CAAA;AAC1E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,WAA6B;IACzD,OAAO,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAA;AAC5F,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAA6B,EAAE,QAAiB;IACjF,IAAI,QAAQ;QAAE,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAA;IAC7C,OAAO,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAA;AAClF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAA6B;IAChE,OAAO,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,4BAA4B,CAAA;AAC5F,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAA6B;IAChE,OAAO,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,4BAA4B,CAAA;AAC5F,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,WAA6B;IACpD,OAAO,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,cAAc,CAAA;AACzE,CAAC;AAOD,SAAS,YAAY,CAAC,KAAyB;IAC7C,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAA;IAChC,OAAO,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;AAC5C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,cAAgC,UAAU;IAC5E,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;IACnE,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IACjD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,mBAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;AAChH,CAAC"}

package/dist/src/platforms/teams/client.d.ts

@@ -1,12 +1,16 @@
-import type { TeamsAccountType, TeamsChannel, TeamsChat, TeamsFile, TeamsMessage, TeamsRegion, TeamsTeam, TeamsUser } from './types.js';
+import { TeamsCredentialManager } from './credential-manager.js';
+import type { TeamsAccountType, TeamsChannel, TeamsChat, TeamsFile, TeamsMessage, TeamsRegion, TeamsSearchResult, TeamsTeam, TeamsUser } from './types.js';
 export declare class TeamsClient {
+    private credManager;
     private token;
     private tokenExpiresAt?;
     private isPersonalAccount;
     private region;
     private regionDiscovered;
+    private tokenProvider?;
     private buckets;
     private globalRateLimitUntil;
+    constructor(credManager?: TeamsCredentialManager);
     login(credentials?: {
         token: string;
         tokenExpiresAt?: string;
@@ -14,6 +18,9 @@ export declare class TeamsClient {
         region?: TeamsRegion;
     }): Promise<this>;
     getRegion(): TeamsRegion;
+    getToken(): string;
+    getAccountType(): TeamsAccountType;
+    getIdToken(): Promise<string | null>;
     private ensureAuth;
     private isTokenExpired;
     private getBucketKey;
@@ -27,14 +34,21 @@ export declare class TeamsClient {
     private requestFormData;
     testAuth(): Promise<TeamsUser>;
     listTeams(): Promise<TeamsTeam[]>;
+    buildChannelTeamMap(): Promise<Map<string, string>>;
     listChats(): Promise<TeamsChat[]>;
     getChatMessages(chatId: string, limit?: number): Promise<TeamsMessage[]>;
     sendChatMessage(chatId: string, content: string): Promise<TeamsMessage>;
     getTeam(teamId: string): Promise<TeamsTeam>;
     listChannels(teamId: string): Promise<TeamsChannel[]>;
     getChannel(teamId: string, channelId: string): Promise<TeamsChannel>;
-    sendMessage(teamId: string, channelId: string, content: string): Promise<TeamsMessage>;
+    sendMessage(teamId: string, channelId: string, content: string, rootMessageId?: string): Promise<TeamsMessage>;
     getMessages(teamId: string, channelId: string, limit?: number): Promise<TeamsMessage[]>;
+    getThreadReplies(teamId: string, channelId: string, rootMessageId: string, limit?: number): Promise<TeamsMessage[]>;
+    searchMessages(query: string, opts?: {
+        limit?: number;
+        from?: number;
+    }): Promise<TeamsSearchResult[]>;
+    private getTokenProvider;
     getMessage(teamId: string, channelId: string, messageId: string): Promise<TeamsMessage>;
     deleteMessage(teamId: string, channelId: string, messageId: string): Promise<void>;
     addReaction(teamId: string, channelId: string, messageId: string, emoji: string): Promise<void>;
@@ -43,5 +57,9 @@ export declare class TeamsClient {
     getUser(userId: string): Promise<TeamsUser>;
     uploadFile(teamId: string, channelId: string, filePath: string): Promise<TeamsFile>;
     listFiles(teamId: string, channelId: string): Promise<TeamsFile[]>;
+    downloadFile(teamId: string, channelId: string, fileId: string): Promise<{
+        buffer: Buffer;
+        file: TeamsFile;
+    }>;
 }
 //# sourceMappingURL=client.d.ts.map

package/dist/src/platforms/teams/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../src/platforms/teams/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,SAAS,EAET,SAAS,EACT,YAAY,EACZ,WAAW,EACX,SAAS,EACT,SAAS,EACV,MAAM,SAAS,CAAA;AAkDhB,qBAAa,WAAW;IACtB,OAAO,CAAC,KAAK,CAAsB;IACnC,OAAO,CAAC,cAAc,CAAC,CAAM;IAC7B,OAAO,CAAC,iBAAiB,CAAiB;IAC1C,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,gBAAgB,CAAiB;IACzC,OAAO,CAAC,OAAO,CAA0C;IACzD,OAAO,CAAC,oBAAoB,CAAY;IAElC,KAAK,CAAC,WAAW,CAAC,EAAE;QACxB,KAAK,EAAE,MAAM,CAAA;QACb,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,WAAW,CAAC,EAAE,gBAAgB,CAAA;QAC9B,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GAAG,OAAO,CAAC,IAAI,CAAC;IAmCjB,SAAS,IAAI,WAAW;IAIxB,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,YAAY;YAUN,gBAAgB;IAa9B,OAAO,CAAC,YAAY;YAYN,uBAAuB;IASrC,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,aAAa;YAKP,cAAc;YA0Bd,OAAO;YAqEP,eAAe;IAsCvB,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC;IAc9B,SAAS,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAgCjC,SAAS,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAwCjC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAmC5E,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAqBvE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI3C,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAIrD,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IASpE,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAStF,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAS3F,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IASvF,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASlF,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS/F,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASlG,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAI/C,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI3C,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAcnF,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;CAQzE"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../src/platforms/teams/client.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAE7D,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,SAAS,EAET,SAAS,EACT,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,SAAS,EACT,SAAS,EACV,MAAM,SAAS,CAAA;AA6PhB,qBAAa,WAAW;IAUV,OAAO,CAAC,WAAW;IAT/B,OAAO,CAAC,KAAK,CAAsB;IACnC,OAAO,CAAC,cAAc,CAAC,CAAM;IAC7B,OAAO,CAAC,iBAAiB,CAAiB;IAC1C,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,gBAAgB,CAAiB;IACzC,OAAO,CAAC,aAAa,CAAC,CAAoB;IAC1C,OAAO,CAAC,OAAO,CAA0C;IACzD,OAAO,CAAC,oBAAoB,CAAY;gBAEpB,WAAW,GAAE,sBAAqD;IAEhF,KAAK,CAAC,WAAW,CAAC,EAAE;QACxB,KAAK,EAAE,MAAM,CAAA;QACb,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,WAAW,CAAC,EAAE,gBAAgB,CAAA;QAC9B,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuCjB,SAAS,IAAI,WAAW;IAIxB,QAAQ,IAAI,MAAM;IAIlB,cAAc,IAAI,gBAAgB;IAI5B,UAAU,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAM1C,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,YAAY;YAUN,gBAAgB;IAa9B,OAAO,CAAC,YAAY;YAYN,uBAAuB;IASrC,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,aAAa;YAKP,cAAc;YA0Bd,OAAO;YAqEP,eAAe;IAsCvB,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC;IAc9B,SAAS,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAmCjC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAyBnD,SAAS,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAwCjC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAmC5E,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAqBvE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI3C,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAIrD,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IASpE,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAmB9G,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAU3F,gBAAgB,CACpB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,KAAK,GAAE,MAAW,GACjB,OAAO,CAAC,YAAY,EAAE,CAAC;IAUpB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IA0C/G,OAAO,CAAC,gBAAgB;IAKlB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IASvF,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASlF,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS/F,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASlG,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAI/C,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI3C,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAcnF,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IASlE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;CAiCpH"}

package/dist/src/platforms/teams/client.js

@@ -1,6 +1,9 @@
+import { randomUUID } from 'node:crypto';
 import { readFile } from 'node:fs/promises';
 import { basename } from 'node:path';
+import { SUBSTRATE_SEARCH_URL } from './app-config.js';
 import { TeamsCredentialManager } from './credential-manager.js';
+import { TeamsTokenProvider } from './token-provider.js';
 import { TeamsError } from './types.js';
 const PERSONAL_MSG_API_BASE = 'https://msgapi.teams.live.com/v1';
 const CSA_API_BASE = 'https://teams.microsoft.com/api';
@@ -8,6 +11,20 @@ const MAX_RETRIES = 3;
 const BASE_BACKOFF_MS = 100;
 const DEFAULT_REGION = 'amer';
 const REGIONS = ['amer', 'emea', 'apac'];
+const GRAPH_API_BASE = 'https://graph.microsoft.com/v1.0';
+// Personal (Teams for Life) skypetokens carry a consumer `skypeid` (e.g.
+// "live:..." or "8:live:..."); work/school tokens carry an org identity. Used
+// only to guess the account type when a caller logs in with a bare token.
+function isPersonalToken(token) {
+    try {
+        const payload = JSON.parse(Buffer.from(token.split('.')[1], 'base64url').toString('utf8'));
+        const skypeId = payload.skypeid ?? '';
+        return skypeId.includes('live:') || skypeId.startsWith('8:live:');
+    }
+    catch {
+        return false;
+    }
+}
 function stripHtml(content) {
     if (content === undefined)
         return undefined;
@@ -21,6 +38,162 @@ function stripHtml(content) {
         .replace(/\s+/g, ' ')
         .trim();
 }
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function stringFrom(record, keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (typeof value === 'string' && value.length > 0)
+            return value;
+    }
+    return undefined;
+}
+function recordFrom(record, keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (isRecord(value))
+            return value;
+    }
+    return undefined;
+}
+function arrayFrom(record, keys) {
+    for (const key of keys) {
+        const value = record[key];
+        if (Array.isArray(value))
+            return value;
+    }
+    return [];
+}
+function propertyValue(record, names) {
+    const properties = arrayFrom(record, ['Properties', 'properties']);
+    const normalized = names.map((name) => name.toLowerCase());
+    for (const property of properties) {
+        if (!isRecord(property))
+            continue;
+        const name = stringFrom(property, ['Name', 'name', 'Key', 'key']);
+        if (!name || !normalized.includes(name.toLowerCase()))
+            continue;
+        const value = property.Value ?? property.value;
+        if (typeof value === 'string' && value.length > 0)
+            return value;
+    }
+    return undefined;
+}
+function resultString(record, keys) {
+    return stringFrom(record, keys) ?? propertyValue(record, keys);
+}
+function parseSubstrateResult(value) {
+    if (!isRecord(value))
+        return null;
+    const author = recordFrom(value, ['Author', 'author', 'From', 'from']);
+    const id = resultString(value, ['id', 'Id', 'ReferenceId', 'MessageId']);
+    const channelId = resultString(value, ['channel_id', 'ChannelId', 'ConversationId', 'ThreadId']);
+    if (!id || !channelId)
+        return null;
+    return {
+        id,
+        content: stripHtml(resultString(value, ['content', 'Content', 'HitHighlightedSummary', 'Summary', 'Preview'])) ?? '',
+        author: {
+            id: author ? (stringFrom(author, ['id', 'Id', 'ObjectId']) ?? '') : (propertyValue(value, ['AuthorId']) ?? ''),
+            displayName: author
+                ? (stringFrom(author, ['displayName', 'DisplayName', 'Name']) ?? 'Unknown')
+                : (propertyValue(value, ['AuthorDisplayName', 'Author']) ?? 'Unknown'),
+        },
+        channel_id: channelId,
+        thread_id: resultString(value, ['thread_id', 'ThreadId']),
+        team_name: resultString(value, ['team_name', 'TeamName']),
+        channel_name: resultString(value, ['channel_name', 'ChannelName']),
+        timestamp: resultString(value, ['timestamp', 'Timestamp', 'DateTimeSent', 'LastModifiedTime']) ?? '',
+        permalink: resultString(value, ['permalink', 'Permalink', 'WebUrl', 'Url']),
+    };
+}
+function parseSubstrateResults(data) {
+    if (!isRecord(data))
+        return [];
+    const results = [];
+    for (const entitySet of arrayFrom(data, ['EntitySets', 'entitySets'])) {
+        if (!isRecord(entitySet))
+            continue;
+        for (const resultSet of arrayFrom(entitySet, ['ResultSets', 'resultSets'])) {
+            if (!isRecord(resultSet))
+                continue;
+            for (const rawResult of arrayFrom(resultSet, ['Results', 'results'])) {
+                const result = parseSubstrateResult(rawResult);
+                if (result)
+                    results.push(result);
+            }
+        }
+    }
+    return results;
+}
+function validateSearchLimit(value) {
+    if (value === undefined)
+        return 20;
+    if (!Number.isInteger(value) || value < 1) {
+        throw new TeamsError('Search limit must be a positive integer.', 'invalid_pagination');
+    }
+    return value;
+}
+function validateSearchFrom(value) {
+    if (value === undefined)
+        return 0;
+    if (!Number.isInteger(value) || value < 0) {
+        throw new TeamsError('Search from offset must be a non-negative integer.', 'invalid_pagination');
+    }
+    return value;
+}
+function isSharePointOrOneDriveUrl(url) {
+    try {
+        const { hostname } = new URL(url);
+        const normalizedHost = hostname.toLowerCase();
+        return (normalizedHost.includes('sharepoint.com') ||
+            normalizedHost.includes('-my.sharepoint') ||
+            normalizedHost === '1drv.ms' ||
+            normalizedHost.endsWith('.1drv.ms') ||
+            normalizedHost === 'onedrive.live.com' ||
+            normalizedHost.endsWith('.onedrive.live.com'));
+    }
+    catch {
+        return false;
+    }
+}
+// Only these hosts receive the Skype token on a raw download fetch. Teams file
+// metadata can carry arbitrary URLs, so we never attach credentials to a host
+// outside this allowlist — that would leak the token to a third party.
+function isTrustedSkypeDownloadHost(url) {
+    try {
+        const host = new URL(url).hostname.toLowerCase();
+        return (host === 'teams.microsoft.com' ||
+            host.endsWith('.teams.microsoft.com') ||
+            host.endsWith('.asm.skype.com') ||
+            host.endsWith('.asyncgw.teams.microsoft.com') ||
+            host === 'substrate.office.com' ||
+            host.endsWith('.substrate.office.com'));
+    }
+    catch {
+        return false;
+    }
+}
+function getFileDownloadSource(file) {
+    const shareUrl = [file.sharepoint_url, file.url, file.object_url].find((candidate) => Boolean(candidate && isSharePointOrOneDriveUrl(candidate)));
+    if (shareUrl)
+        return { route: 'graph', url: shareUrl };
+    const directUrl = file.object_url ?? file.url;
+    if (!directUrl) {
+        throw new TeamsError(`File has no downloadable URL: ${file.id}`, 'file_url_missing');
+    }
+    if (!isTrustedSkypeDownloadHost(directUrl)) {
+        throw new TeamsError(`Refusing to download ${file.id} from an untrusted host: ${directUrl}`, 'file_url_untrusted');
+    }
+    return { route: 'skype', url: directUrl };
+}
+async function readDownloadResponse(response, codePrefix) {
+    if (!response.ok) {
+        throw new TeamsError(`File download failed with HTTP ${response.status}`, `${codePrefix}_${response.status}`);
+    }
+    return Buffer.from(await response.arrayBuffer());
+}
 function escapeHtml(value) {
     return value
         .replaceAll('&', '&amp;')
@@ -29,6 +202,19 @@ function escapeHtml(value) {
         .replaceAll('"', '&quot;')
         .replaceAll("'", '&#39;');
 }
+function withThreadMetadata(message, rootMessageId) {
+    const { rootMessageId: messageRootMessageId, parentMessageId, ...teamsMessage } = message;
+    const rawRootMessageId = rootMessageId ?? messageRootMessageId;
+    const isThreadReply = Boolean(rootMessageId ||
+        (messageRootMessageId !== undefined && messageRootMessageId !== message.id) ||
+        (parentMessageId !== undefined && parentMessageId !== message.id));
+    return {
+        ...teamsMessage,
+        root_message_id: isThreadReply ? rawRootMessageId : undefined,
+        parent_message_id: isThreadReply ? (parentMessageId ?? rawRootMessageId) : undefined,
+        is_thread_reply: isThreadReply ? true : undefined,
+    };
+}
 // groupId => Teams/channel thread (handled by listTeams). "48:notes"/
 // streamofnotes => the user's self ("to me") chat. Anything else without a
 // non-chat threadType is a normal 1:1 (no topic) or group (has topic) chat.
@@ -42,13 +228,18 @@ function classifyChat(id, tp) {
     return tp?.topic ? 'group' : 'oneOnOne';
 }
 export class TeamsClient {
+    credManager;
     token = null;
     tokenExpiresAt;
     isPersonalAccount = false;
     region = DEFAULT_REGION;
     regionDiscovered = false;
+    tokenProvider;
     buckets = new Map();
     globalRateLimitUntil = 0;
+    constructor(credManager = new TeamsCredentialManager()) {
+        this.credManager = credManager;
+    }
     async login(credentials) {
         if (credentials) {
             if (!credentials.token) {
@@ -58,17 +249,21 @@ export class TeamsClient {
             if (credentials.tokenExpiresAt) {
                 this.tokenExpiresAt = new Date(credentials.tokenExpiresAt);
             }
-            this.isPersonalAccount = credentials.accountType === 'personal';
+            this.isPersonalAccount = credentials.accountType
+                ? credentials.accountType === 'personal'
+                : isPersonalToken(credentials.token);
             if (credentials.region) {
                 this.region = credentials.region;
                 this.regionDiscovered = true;
             }
+            if (credentials.accountType) {
+                this.getTokenProvider().bindAccount(credentials.accountType);
+            }
             return this;
         }
         const { ensureTeamsAuth } = await import('./ensure-auth.js');
         await ensureTeamsAuth();
-        const credManager = new TeamsCredentialManager();
-        const creds = await credManager.getTokenWithExpiry();
+        const creds = await this.credManager.getTokenWithExpiry();
         if (!creds) {
             throw new TeamsError('No Teams credentials found. Make sure Microsoft Teams is logged in via the desktop app or a supported Chromium browser.', 'no_credentials');
         }
@@ -82,6 +277,17 @@ export class TeamsClient {
     getRegion() {
         return this.region;
     }
+    getToken() {
+        return this.ensureAuth();
+    }
+    getAccountType() {
+        return this.isPersonalAccount ? 'personal' : 'work';
+    }
+    async getIdToken() {
+        const { TeamsTokenExtractor } = await import('./token-extractor.js');
+        const extractor = new TeamsTokenExtractor();
+        return extractor.extractIdToken(this.getAccountType());
+    }
     ensureAuth() {
         if (this.token === null) {
             throw new TeamsError('Not authenticated. Call .login() first.', 'not_authenticated');
@@ -162,7 +368,7 @@ export class TeamsClient {
     }
     async request(method, path, body, baseUrl) {
         if (this.isTokenExpired()) {
-            throw new TeamsError('Token has expired. Run "auth extract" to refresh.', 'token_expired');
+            throw new TeamsError('Token has expired. Run "auth login" or "auth extract" to refresh.', 'token_expired');
         }
         if (baseUrl === undefined && !this.regionDiscovered) {
             await this.discoverRegion();
@@ -209,7 +415,7 @@ export class TeamsClient {
     }
     async requestFormData(path, formData, baseUrl) {
         if (this.isTokenExpired()) {
-            throw new TeamsError('Token has expired. Run "auth extract" to refresh.', 'token_expired');
+            throw new TeamsError('Token has expired. Run "auth login" or "auth extract" to refresh.', 'token_expired');
         }
         if (baseUrl === undefined && !this.regionDiscovered) {
             await this.discoverRegion();
@@ -257,6 +463,22 @@ export class TeamsClient {
         }
         return Array.from(teamsMap.values());
     }
+    // Realtime messages only carry a conversation id; a channel's parent teamId
+    // (== groupId) lives on the conversation, so the listener resolves it through
+    // this channelId -> teamId map.
+    async buildChannelTeamMap() {
+        const data = await this.request('GET', '/users/ME/conversations');
+        const channelToTeam = new Map();
+        for (const conv of data.conversations ?? []) {
+            const tp = conv.threadProperties;
+            if (!tp?.groupId)
+                continue;
+            if (!tp.productThreadType?.includes('Teams') && tp.threadType !== 'space')
+                continue;
+            channelToTeam.set(conv.id, tp.groupId);
+        }
+        return channelToTeam;
+    }
     async listChats() {
         const data = await this.request('GET', '/users/ME/conversations?view=msnp24Equivalent&pageSize=500');
         const chats = [];
@@ -317,11 +539,62 @@ export class TeamsClient {
     async getChannel(teamId, channelId) {
         return this.request('GET', `/csa/api/v1/teams/${teamId}/channels/${channelId}`, undefined, CSA_API_BASE);
     }
-    async sendMessage(teamId, channelId, content) {
+    async sendMessage(teamId, channelId, content, rootMessageId) {
+        if (rootMessageId) {
+            const response = await this.request('POST', `/csa/${this.region}/api/v2/teams/${teamId}/channels/${channelId}/messages/${rootMessageId}/replies`, { content, parentMessageId: rootMessageId }, CSA_API_BASE);
+            return withThreadMetadata(response, rootMessageId);
+        }
         return this.request('POST', `/csa/${this.region}/api/v2/teams/${teamId}/channels/${channelId}/messages`, { content }, CSA_API_BASE);
     }
     async getMessages(teamId, channelId, limit = 50) {
-        return this.request('GET', `/csa/${this.region}/api/v2/teams/${teamId}/channels/${channelId}/messages?limit=${limit}`, undefined, CSA_API_BASE);
+        const messages = await this.request('GET', `/csa/${this.region}/api/v2/teams/${teamId}/channels/${channelId}/messages?limit=${limit}`, undefined, CSA_API_BASE);
+        return messages.map((message) => withThreadMetadata(message));
+    }
+    async getThreadReplies(teamId, channelId, rootMessageId, limit = 50) {
+        const replies = await this.request('GET', `/csa/${this.region}/api/v2/teams/${teamId}/channels/${channelId}/messages/${rootMessageId}/replies?limit=${limit}`, undefined, CSA_API_BASE);
+        return replies.map((reply) => withThreadMetadata(reply, rootMessageId));
+    }
+    async searchMessages(query, opts = {}) {
+        const size = validateSearchLimit(opts.limit);
+        const from = validateSearchFrom(opts.from);
+        const tokenProvider = this.getTokenProvider();
+        const substrateToken = await tokenProvider.getSubstrateToken();
+        const tenantId = await tokenProvider.getTenantId();
+        const userId = await tokenProvider.getUserId();
+        const response = await fetch(SUBSTRATE_SEARCH_URL, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${substrateToken}`,
+                'Content-Type': 'application/json',
+                'x-anchormailbox': `Oid:${userId}@${tenantId}`,
+            },
+            body: JSON.stringify({
+                cvid: randomUUID(),
+                logicalId: randomUUID(),
+                query: { queryString: query },
+                entityRequests: [
+                    {
+                        entityType: 'Message',
+                        contentSources: ['Teams'],
+                        from,
+                        size,
+                        query: { queryString: query },
+                    },
+                ],
+            }),
+        });
+        const data = (await response.json().catch(() => ({})));
+        if (!response.ok) {
+            const message = isRecord(data)
+                ? stringFrom(data, ['message', 'Message', 'error_description', 'error'])
+                : undefined;
+            throw new TeamsError(message ?? `HTTP ${response.status}`, `substrate_${response.status}`);
+        }
+        return parseSubstrateResults(data);
+    }
+    getTokenProvider() {
+        this.tokenProvider ??= new TeamsTokenProvider(this.credManager);
+        return this.tokenProvider;
     }
     async getMessage(teamId, channelId, messageId) {
         return this.request('GET', `/csa/${this.region}/api/v2/teams/${teamId}/channels/${channelId}/messages/${messageId}`, undefined, CSA_API_BASE);
@@ -351,5 +624,36 @@ export class TeamsClient {
     async listFiles(teamId, channelId) {
         return this.request('GET', `/csa/${this.region}/api/v2/teams/${teamId}/channels/${channelId}/files`, undefined, CSA_API_BASE);
     }
+    async downloadFile(teamId, channelId, fileId) {
+        const files = await this.listFiles(teamId, channelId);
+        const file = files.find((candidate) => candidate.id === fileId);
+        if (!file) {
+            throw new TeamsError(`File not found: ${fileId}`, 'file_not_found');
+        }
+        const source = getFileDownloadSource(file);
+        if (source.route === 'graph') {
+            const graphToken = await new TeamsTokenProvider(this.credManager).getGraphToken();
+            const shareId = `u!${Buffer.from(source.url).toString('base64url').replace(/=+$/, '')}`;
+            const response = await fetch(`${GRAPH_API_BASE}/shares/${shareId}/driveItem/content`, {
+                headers: {
+                    Authorization: `Bearer ${graphToken}`,
+                },
+                redirect: 'follow',
+            });
+            return { buffer: await readDownloadResponse(response, 'graph_download'), file };
+        }
+        if (this.isTokenExpired()) {
+            throw new TeamsError('Token has expired. Run "auth login" or "auth extract" to refresh.', 'token_expired');
+        }
+        const skypeToken = this.getToken();
+        const response = await fetch(source.url, {
+            headers: {
+                Authorization: `Bearer ${skypeToken}`,
+                'X-Skypetoken': skypeToken,
+            },
+            redirect: 'follow',
+        });
+        return { buffer: await readDownloadResponse(response, 'skype_download'), file };
+    }
 }
 //# sourceMappingURL=client.js.map