n8n 2.44.4 → 2.45.0

package/dist/modules/agents/integrations/platforms/teams/teams-integration.js

@@ -22,8 +22,13 @@ const component_mapper_1 = require("../../component-mapper");
 const credential_claim_1 = require("../../credential-claim");
 const esm_loader_1 = require("../../esm-loader");
 const integration_tool_definitions_1 = require("../../integration-tool-definitions");
+const integration_error_codes_1 = require("../../integration-error-codes");
+const integration_helpers_1 = require("../../integration-helpers");
 const typing_indicator_1 = require("../typing-indicator");
+const teams_cleanup_service_1 = require("./teams-cleanup.service");
 const teams_manifest_service_1 = require("./teams-manifest.service");
+const teams_message_files_1 = require("./teams-message-files");
+const teams_operations_1 = require("./teams-operations");
 const TEAMS_API_URL = 'https://smba.trafficmanager.net/teams';
 const GLOBAL_GRAPH_API_BASE_URL = 'https://graph.microsoft.com';
 const ANSWER_AS_TEXT = 'To answer, write your answer as normal text. It is posted for you. Do not use the respond action for it.';
@@ -54,10 +59,24 @@ function isFromBot(activity) {
     const { id, role } = activity.from;
     return role === 'bot' || (typeof id === 'string' && id.startsWith('28:'));
 }
+const SEND_DENIED = {
+    send_dm: 'Teams did not allow this direct message. The person must have the app installed in Teams first. Ask them, or a Teams admin, to add the app, then try again.',
+    send_channel_message: 'Teams did not allow this post. The app must be added to the team or group chat first. Ask a team owner to add the app, then try again.',
+};
+function canEncodeThreadId(adapter) {
+    return (0, is_record_1.isRecord)(adapter) && typeof adapter.encodeThreadId === 'function';
+}
 const TEAMS_TYPING_REFRESH_MS = 8000;
 const TENANT_ID_GUID = /^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$/;
 const TENANT_ID_DOMAIN = /^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)+$/;
 let TeamsIntegration = class TeamsIntegration extends agent_chat_integration_1.AgentChatIntegration {
+    async onRemove(ctx) {
+        return await di_1.Container.get(teams_cleanup_service_1.TeamsCleanupService).describeLeftovers({
+            user: ctx.user,
+            projectId: ctx.projectId,
+            credentialId: ctx.credentialId,
+        });
+    }
     shouldHandleUnmentionedMessage({ message, integration, }) {
         if (isFromBot(message.raw))
             return false;
@@ -73,6 +92,31 @@ let TeamsIntegration = class TeamsIntegration extends agent_chat_integration_1.A
             return 'required';
         return conversationTypeOf(message.raw) === 'personal' ? 'required' : 'optional';
     }
+    normalizeChannelId(channelId, adapter) {
+        if (!channelId.startsWith('19:') || !canEncodeThreadId(adapter)) {
+            return super.normalizeChannelId(channelId, adapter);
+        }
+        return adapter.encodeThreadId({ conversationId: channelId, serviceUrl: `${TEAMS_API_URL}/` });
+    }
+    describeActionError(action, error) {
+        const message = SEND_DENIED[action];
+        if (!message || !(0, is_record_1.isRecord)(error) || error.code !== 'PERMISSION_DENIED')
+            return undefined;
+        return { code: integration_error_codes_1.INTEGRATION_ERROR_CODES.PERMISSION_NOT_GRANTED, message };
+    }
+    async executeContextQuery(params) {
+        if (!params.chat)
+            return (0, integration_helpers_1.connectionUnavailable)();
+        return await (0, teams_operations_1.executeTeamsContextQuery)({
+            chat: params.chat,
+            query: params.query,
+            input: params.input,
+        });
+    }
+    async fetchInboundAttachments({ thread, message, }) {
+        const http = (0, teams_message_files_1.graphHttpOf)(thread.adapter);
+        return http ? await (0, teams_message_files_1.fetchTeamsMessageFiles)(http, message.raw) : [];
+    }
     constructor(logger, agentRepository) {
         super();
         this.logger = logger;
@@ -86,6 +130,7 @@ let TeamsIntegration = class TeamsIntegration extends agent_chat_integration_1.A
             capabilities: [
                 'Receive Microsoft Teams direct messages, team channel messages and group chat messages as agent triggers.',
                 'Respond in the same Microsoft Teams conversation, and in the same channel thread.',
+                'Send direct messages to people and post new messages to team channels and group chats, including from scheduled tasks with no inbound message.',
                 'In a team channel or group chat, run when @-mentioned. When the setup turns on reading all messages there, run on every message and decide whether to reply, or stay silent.',
                 'Add emoji reactions to messages.',
                 'Render Adaptive Cards with buttons.',
@@ -94,6 +139,7 @@ let TeamsIntegration = class TeamsIntegration extends agent_chat_integration_1.A
                 'The agent should be chatted with from Microsoft Teams or act as a Teams bot.',
                 'The agent needs to reply to Teams users in the same conversation context.',
                 'The agent should take part in a Microsoft Teams channel or group chat.',
+                'A scheduled Agent task should proactively send a Teams direct message or channel message through the connected bot.',
             ],
             useNodeToolWhen: [
                 'Microsoft Teams is only a backend API step and the agent does not need to be connected as a Teams chat surface.',
@@ -107,13 +153,30 @@ let TeamsIntegration = class TeamsIntegration extends agent_chat_integration_1.A
             'fields',
             'image',
         ];
+        this.contextToolDefinitions = (0, integration_tool_definitions_1.resolveIntegrationContextQueryDefinitions)([
+            'get_current_message_context',
+            'get_current_subject',
+            'get_current_user',
+            'get_user',
+            'search_users',
+            'search_channels',
+        ]);
+        this.contextToolGuidance = [
+            'For search_users, pass input.email to find a person by email address. The returned userId works with send_dm.',
+            'search_channels matches team and channel names, for example "Marketing General". The returned channelId works with send_channel_message.',
+        ];
         this.actionToolDefinitions = (0, integration_tool_definitions_1.resolveIntegrationActionDefinitions)([
             'respond',
+            'send_dm',
+            'send_channel_message',
             'edit_message',
             'add_reaction',
             'do_not_respond',
         ]);
         this.actionToolGuidance = [
+            'respond works only in reply to an inbound Teams message. In a scheduled task, or to reach another person or conversation, use send_dm or send_channel_message.',
+            'For send_dm, userId is a Teams user ID (29:...) or the Microsoft Entra object ID of the person, never an email or a name. To reach someone by email, call search_users first.',
+            'For send_channel_message, channelId is a Teams conversation ID such as 19:...@thread.tacv2 for a team channel or 19:...@thread.v2 for a group chat, a channelId from search_channels, or one from get_current_message_context. Each call starts a new post.',
             'For edit_message, pass the messageId returned by a previous Teams action or get_current_message_context. The current Teams conversation is selected automatically.',
             'For add_reaction, use one of thumbs_up, eyes, check, x, rocket, thinking or pin, or a Teams reaction type such as like, heart or laugh.',
             'A channel or group chat message that does not mention you needs no reply. Use do_not_respond unless you have something useful to add.',

package/dist/modules/agents/integrations/platforms/teams/teams-integration.js.map

@@ -1 +1 @@
-{"version":3,"file":"teams-integration.js","sourceRoot":"","sources":["../../../../../../src/modules/agents/integrations/platforms/teams/teams-integration.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,wDAA6C;AAC7C,gCAAkC;AAClC,oDAAgD;AAChD,+CAAyC;AAEzC,6EAAyE;AACzE,yDAA2D;AAC3D,+DAAkF;AAClF,yEAOsC;AACtC,6DAAuF;AACvF,6DAAoE;AACpE,iDAAoD;AACpD,qFAAyF;AAEzF,0DAA2D;AAC3D,qEAA4D;AAG5D,MAAM,aAAa,GAAG,uCAAuC,CAAC;AAE9D,MAAM,yBAAyB,GAAG,6BAA6B,CAAC;AAMhE,MAAM,cAAc,GACnB,0GAA0G,CAAC;AAE5G,MAAM,mBAAmB,GAAG;IAC3B,kBAAkB;IAClB,yGAAyG;IACzG,+FAA+F;IAC/F,cAAc;IACd,2DAA2D;IAC3D,mBAAmB;CACnB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAGb,MAAM,wBAAwB,GAAG;IAChC,kBAAkB;IAClB,oFAAoF;IACpF,iEAAiE;IACjE,cAAc;IACd,gFAAgF;IAChF,mBAAmB;CACnB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,SAAS,kBAAkB,CAAC,QAAiB;IAC5C,OAAO,IAAA,oBAAQ,EAAC,QAAQ,CAAC,IAAI,IAAA,oBAAQ,EAAC,QAAQ,CAAC,YAAY,CAAC;QAC3D,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,gBAAgB;QACxC,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAMD,SAAS,SAAS,CAAC,QAAiB;IACnC,IAAI,CAAC,IAAA,oBAAQ,EAAC,QAAQ,CAAC,IAAI,CAAC,IAAA,oBAAQ,EAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;IACnC,OAAO,IAAI,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3E,CAAC;AAGD,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAWrC,MAAM,cAAc,GAAG,sDAAsD,CAAC;AAC9E,MAAM,gBAAgB,GACrB,qFAAqF,CAAC;AAoBhF,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,6CAAoB;IAmFzD,8BAA8B,CAAC,EAC9B,OAAO,EACP,WAAW,GAIX;QACA,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,yCAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC;QAC7E,OAAO,CACN,UAAU,KAAK,SAAS;YACxB,QAAQ,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,IAAI;YACxC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,IAAI,CACrC,CAAC;IACH,CAAC;IAGD,mBAAmB,CAAC,EACnB,OAAO,EACP,YAAY,GAIZ;QACA,IAAI,YAAY,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;YAAE,OAAO,UAAU,CAAC;QAClE,OAAO,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IACjF,CAAC;IAED,YACkB,MAAc,EACd,eAAgC;QAEjD,KAAK,EAAE,CAAC;QAHS,WAAM,GAAN,MAAM,CAAQ;QACd,oBAAe,GAAf,eAAe,CAAiB;QAlHzC,SAAI,GAAG,OAAO,CAAC;QAEf,oBAAe,GAAG,CAAC,mCAAmC,CAAC,CAAC;QAExD,iBAAY,GAAG,iBAAiB,CAAC;QAEjC,gBAAW,GAAG,OAAO,CAAC;QAGtB,aAAQ,GAAG,IAAI,CAAC;QAEhB,oBAAe,GAAG;YAC1B,YAAY,EAAE;gBACb,2GAA2G;gBAC3G,mFAAmF;gBACnF,8KAA8K;gBAC9K,kCAAkC;gBAClC,qCAAqC;aACrC;YACD,kBAAkB,EAAE;gBACnB,8EAA8E;gBAC9E,2EAA2E;gBAC3E,wEAAwE;aACxE;YACD,eAAe,EAAE;gBAChB,iHAAiH;gBACjH,uIAAuI;aACvI;SACD,CAAC;QAEO,wBAAmB,GAAqC;YAChE,SAAS;YACT,QAAQ;YACR,SAAS;YACT,QAAQ;YACR,OAAO;SACP,CAAC;QAEO,0BAAqB,GAAG,IAAA,kEAAmC,EAAC;YACpE,SAAS;YACT,cAAc;YACd,cAAc;YACd,gBAAgB;SAChB,CAAC,CAAC;QAEM,uBAAkB,GAAG;YAC7B,oKAAoK;YACpK,yIAAyI;YACzI,uIAAuI;YACvI,uJAAuJ;SACvJ,CAAC;QAYO,qCAAgC,GAAG,IAAI,CAAC;QAOxC,qBAAgB,GAAG,KAAK,CAAC;QAMzB,6BAAwB,GAAG,IAAI,CAAC;IA0CzC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAgC;QACnD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvF,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,IAAA,6BAAgB,GAAE,CAAC;QAExD,OAAO,kBAAkB,CAAC;YACzB,KAAK;YACL,WAAW;YACX,WAAW;YACX,MAAM,EAAE,aAAa;YAIrB,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,IAAA,oCAAmB,EAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC;SAC1D,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,GAAoC;QACpE,MAAM,IAAA,6CAA0B,EAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,GAAgC;QACrD,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC;QAG3C,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAQD,mBAAmB,CAAC,UAA8B;QACjD,OAAO,IAAA,yCAAsB,EAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAOD,KAAK,CAAC,4BAA4B,CACjC,MAAkC;QAElC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QACtC,OAAO;YACN,oBAAoB,EAAE,EAAE;YACxB,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,UAAU;gBACzC,CAAC,CAAC;oBACA,cAAc,EAAE,MAAM,CAAC,kBAAkB;wBACxC,CAAC,CAAC,wBAAwB;wBAC1B,CAAC,CAAC,mBAAmB;iBACtB;gBACF,CAAC,CAAC,EAAE,CAAC;YACN,aAAa,EAAE,CAAC,UAAU;YAG1B,YAAY,EACX,MAAM,CAAC,WAAW,KAAK,KAAK;gBAC3B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;SAClE,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,4BAA4B,CAAC,MAIlC;QACA,OAAO;YACN,aAAa,EAAE,IAAI;YACnB,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;SAC5E,CAAC;IACH,CAAC;IAEO,WAAW,CAClB,MAA4C,EAC5C,MAA4C,EAC5C,OAAe;QAEf,OAAO,IAAA,uCAAoB,EAAC,MAAM,EAAE;YACnC,MAAM;YACN,OAAO;YACP,QAAQ,EAAE,iBAAiB;YAC3B,SAAS,EAAE,uBAAuB;SAClC,CAAC,CAAC;IACJ,CAAC;IAOO,qBAAqB,CAAC,UAAmC;QAKhE,IAAI,IAAA,mCAAe,EAAC,UAAU,EAAE,gBAAgB,CAAC,KAAK,aAAa,EAAE,CAAC;YACrE,MAAM,IAAI,wBAAS,CAClB,kEAAkE;gBACjE,+EAA+E,CAChF,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,IAAA,mCAAe,EAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;QACvE,IAAI,eAAe,IAAI,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,yBAAyB,EAAE,CAAC;YAC1F,MAAM,IAAI,wBAAS,CAClB,kEAAkE;gBACjE,wFAAwF,CACzF,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,IAAA,0CAAsB,EACzC,UAAU,EACV,UAAU,EACV,oJAAoJ,CACpJ,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,wBAAS,CAClB,uEAAuE;gBACtE,wGAAwG,CACzG,CAAC;QACH,CAAC;QAED,OAAO;YACN,KAAK,EAAE,IAAA,0CAAsB,EAC5B,UAAU,EACV,UAAU,EACV,uJAAuJ,CACvJ;YACD,WAAW,EAAE,IAAA,0CAAsB,EAClC,UAAU,EACV,cAAc,EACd,6HAA6H,CAC7H;YACD,WAAW;SACX,CAAC;IACH,CAAC;CACD,CAAA;;2BAtQY,gBAAgB;IAD5B,IAAA,YAAO,GAAE;qCAmHiB,uBAAM,EACG,kCAAe;GAnHtC,gBAAgB,CAsQ5B"}
+{"version":3,"file":"teams-integration.js","sourceRoot":"","sources":["../../../../../../src/modules/agents/integrations/platforms/teams/teams-integration.ts"],"names":[],"mappings":";;;;;;;;;;;;AAKA,wDAA6C;AAC7C,gCAA6C;AAC7C,oDAAgD;AAEhD,+CAAyC;AAEzC,6EAAyE;AACzE,yDAA2D;AAC3D,+DAAkF;AAClF,yEASsC;AACtC,6DAAuF;AACvF,6DAAoE;AACpE,iDAAoD;AACpD,qFAG4C;AAC5C,2EAAwE;AACxE,mEAAkE;AAElE,0DAA2D;AAC3D,mEAA8D;AAC9D,qEAA4D;AAC5D,+DAA4E;AAC5E,yDAA8D;AAG9D,MAAM,aAAa,GAAG,uCAAuC,CAAC;AAE9D,MAAM,yBAAyB,GAAG,6BAA6B,CAAC;AAMhE,MAAM,cAAc,GACnB,0GAA0G,CAAC;AAE5G,MAAM,mBAAmB,GAAG;IAC3B,kBAAkB;IAClB,yGAAyG;IACzG,+FAA+F;IAC/F,cAAc;IACd,2DAA2D;IAC3D,mBAAmB;CACnB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAGb,MAAM,wBAAwB,GAAG;IAChC,kBAAkB;IAClB,oFAAoF;IACpF,iEAAiE;IACjE,cAAc;IACd,gFAAgF;IAChF,mBAAmB;CACnB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,SAAS,kBAAkB,CAAC,QAAiB;IAC5C,OAAO,IAAA,oBAAQ,EAAC,QAAQ,CAAC,IAAI,IAAA,oBAAQ,EAAC,QAAQ,CAAC,YAAY,CAAC;QAC3D,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,gBAAgB;QACxC,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAMD,SAAS,SAAS,CAAC,QAAiB;IACnC,IAAI,CAAC,IAAA,oBAAQ,EAAC,QAAQ,CAAC,IAAI,CAAC,IAAA,oBAAQ,EAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;IACnC,OAAO,IAAI,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,WAAW,GAA+C;IAC/D,OAAO,EACN,6JAA6J;IAC9J,oBAAoB,EACnB,wIAAwI;CACzI,CAAC;AAEF,SAAS,iBAAiB,CAAC,OAAgB;IAG1C,OAAO,IAAA,oBAAQ,EAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,cAAc,KAAK,UAAU,CAAC;AAC1E,CAAC;AAGD,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAWrC,MAAM,cAAc,GAAG,sDAAsD,CAAC;AAC9E,MAAM,gBAAgB,GACrB,qFAAqF,CAAC;AAqBhF,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,6CAAoB;IAQzD,KAAK,CAAC,QAAQ,CACb,GAAmC;QAEnC,OAAO,MAAM,cAAS,CAAC,GAAG,CAAC,2CAAmB,CAAC,CAAC,iBAAiB,CAAC;YACjE,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,YAAY,EAAE,GAAG,CAAC,YAAY;SAC9B,CAAC,CAAC;IACJ,CAAC;IAuGD,8BAA8B,CAAC,EAC9B,OAAO,EACP,WAAW,GAIX;QACA,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,yCAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC;QAC7E,OAAO,CACN,UAAU,KAAK,SAAS;YACxB,QAAQ,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,IAAI;YACxC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,IAAI,CACrC,CAAC;IACH,CAAC;IAGD,mBAAmB,CAAC,EACnB,OAAO,EACP,YAAY,GAIZ;QACA,IAAI,YAAY,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;YAAE,OAAO,UAAU,CAAC;QAClE,OAAO,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IACjF,CAAC;IAMD,kBAAkB,CAAC,SAAiB,EAAE,OAAgB;QACrD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;YACjE,OAAO,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,OAAO,CAAC,cAAc,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,aAAa,GAAG,EAAE,CAAC,CAAC;IAC/F,CAAC;IAGD,mBAAmB,CAAC,MAAyB,EAAE,KAAc;QAC5D,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAA,oBAAQ,EAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB;YAAE,OAAO,SAAS,CAAC;QACzF,OAAO,EAAE,IAAI,EAAE,iDAAuB,CAAC,sBAAsB,EAAE,OAAO,EAAE,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAkC;QAC3D,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,OAAO,IAAA,2CAAqB,GAAE,CAAC;QACjD,OAAO,MAAM,IAAA,2CAAwB,EAAC;YACrC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;SACnB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,EAC7B,MAAM,EACN,OAAO,GAIP;QACA,MAAM,IAAI,GAAG,IAAA,iCAAW,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,IAAA,4CAAsB,EAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,CAAC;IAED,YACkB,MAAc,EACd,eAAgC;QAEjD,KAAK,EAAE,CAAC;QAHS,WAAM,GAAN,MAAM,CAAQ;QACd,oBAAe,GAAf,eAAe,CAAiB;QA5LzC,SAAI,GAAG,OAAO,CAAC;QAiBf,oBAAe,GAAG,CAAC,mCAAmC,CAAC,CAAC;QAExD,iBAAY,GAAG,iBAAiB,CAAC;QAEjC,gBAAW,GAAG,OAAO,CAAC;QAGtB,aAAQ,GAAG,IAAI,CAAC;QAEhB,oBAAe,GAAG;YAC1B,YAAY,EAAE;gBACb,2GAA2G;gBAC3G,mFAAmF;gBACnF,gJAAgJ;gBAChJ,8KAA8K;gBAC9K,kCAAkC;gBAClC,qCAAqC;aACrC;YACD,kBAAkB,EAAE;gBACnB,8EAA8E;gBAC9E,2EAA2E;gBAC3E,wEAAwE;gBACxE,qHAAqH;aACrH;YACD,eAAe,EAAE;gBAChB,iHAAiH;gBACjH,uIAAuI;aACvI;SACD,CAAC;QAEO,wBAAmB,GAAqC;YAChE,SAAS;YACT,QAAQ;YACR,SAAS;YACT,QAAQ;YACR,OAAO;SACP,CAAC;QAEO,2BAAsB,GAAG,IAAA,wEAAyC,EAAC;YAC3E,6BAA6B;YAC7B,qBAAqB;YACrB,kBAAkB;YAClB,UAAU;YACV,cAAc;YACd,iBAAiB;SACjB,CAAC,CAAC;QAEM,wBAAmB,GAAG;YAC9B,+GAA+G;YAC/G,0IAA0I;SAC1I,CAAC;QAEO,0BAAqB,GAAG,IAAA,kEAAmC,EAAC;YACpE,SAAS;YACT,SAAS;YACT,sBAAsB;YACtB,cAAc;YACd,cAAc;YACd,gBAAgB;SAChB,CAAC,CAAC;QAEM,uBAAkB,GAAG;YAC7B,gKAAgK;YAChK,+KAA+K;YAC/K,6PAA6P;YAC7P,oKAAoK;YACpK,yIAAyI;YACzI,uIAAuI;YACvI,uJAAuJ;SACvJ,CAAC;QAYO,qCAAgC,GAAG,IAAI,CAAC;QAOxC,qBAAgB,GAAG,KAAK,CAAC;QAMzB,6BAAwB,GAAG,IAAI,CAAC;IAgFzC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAgC;QACnD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvF,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,IAAA,6BAAgB,GAAE,CAAC;QAExD,OAAO,kBAAkB,CAAC;YACzB,KAAK;YACL,WAAW;YACX,WAAW;YACX,MAAM,EAAE,aAAa;YAIrB,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,IAAA,oCAAmB,EAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC;SAC1D,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,GAAoC;QACpE,MAAM,IAAA,6CAA0B,EAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,GAAgC;QACrD,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC;QAG3C,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IAQD,mBAAmB,CAAC,UAA8B;QACjD,OAAO,IAAA,yCAAsB,EAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAOD,KAAK,CAAC,4BAA4B,CACjC,MAAkC;QAElC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QACtC,OAAO;YACN,oBAAoB,EAAE,EAAE;YACxB,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,UAAU;gBACzC,CAAC,CAAC;oBACA,cAAc,EAAE,MAAM,CAAC,kBAAkB;wBACxC,CAAC,CAAC,wBAAwB;wBAC1B,CAAC,CAAC,mBAAmB;iBACtB;gBACF,CAAC,CAAC,EAAE,CAAC;YACN,aAAa,EAAE,CAAC,UAAU;YAG1B,YAAY,EACX,MAAM,CAAC,WAAW,KAAK,KAAK;gBAC3B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;SAClE,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,4BAA4B,CAAC,MAIlC;QACA,OAAO;YACN,aAAa,EAAE,IAAI;YACnB,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;SAC5E,CAAC;IACH,CAAC;IAEO,WAAW,CAClB,MAA4C,EAC5C,MAA4C,EAC5C,OAAe;QAEf,OAAO,IAAA,uCAAoB,EAAC,MAAM,EAAE;YACnC,MAAM;YACN,OAAO;YACP,QAAQ,EAAE,iBAAiB;YAC3B,SAAS,EAAE,uBAAuB;SAClC,CAAC,CAAC;IACJ,CAAC;IAOO,qBAAqB,CAAC,UAAmC;QAKhE,IAAI,IAAA,mCAAe,EAAC,UAAU,EAAE,gBAAgB,CAAC,KAAK,aAAa,EAAE,CAAC;YACrE,MAAM,IAAI,wBAAS,CAClB,kEAAkE;gBACjE,+EAA+E,CAChF,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,IAAA,mCAAe,EAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;QACvE,IAAI,eAAe,IAAI,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,yBAAyB,EAAE,CAAC;YAC1F,MAAM,IAAI,wBAAS,CAClB,kEAAkE;gBACjE,wFAAwF,CACzF,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,IAAA,0CAAsB,EACzC,UAAU,EACV,UAAU,EACV,oJAAoJ,CACpJ,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,wBAAS,CAClB,uEAAuE;gBACtE,wGAAwG,CACzG,CAAC;QACH,CAAC;QAED,OAAO;YACN,KAAK,EAAE,IAAA,0CAAsB,EAC5B,UAAU,EACV,UAAU,EACV,uJAAuJ,CACvJ;YACD,WAAW,EAAE,IAAA,0CAAsB,EAClC,UAAU,EACV,cAAc,EACd,6HAA6H,CAC7H;YACD,WAAW;SACX,CAAC;IACH,CAAC;CACD,CAAA;;2BAhVY,gBAAgB;IAD5B,IAAA,YAAO,GAAE;qCA6LiB,uBAAM,EACG,kCAAe;GA7LtC,gBAAgB,CAgV5B"}

package/dist/modules/agents/integrations/platforms/teams/teams-managed-setup.service.d.ts

@@ -0,0 +1,28 @@
+import type { CreateTeamsManagerCredentialResponse, TeamsManagedSetupState } from '@n8n/api-types';
+import type { User } from '@n8n/db';
+import { CredentialsFinderService } from '@n8n/backend-services';
+import { CredentialsService } from '../../../../../credentials/credentials.service';
+import { CredentialsOverwrites } from '../../../../../credentials-overwrites';
+import { OauthService } from '../../../../../oauth/oauth.service';
+import { NamingService } from '../../../../../services/naming.service';
+export declare const TEAMS_MANAGER_CREDENTIAL_TYPE = "microsoftTeamsManagerOAuth2Api";
+export declare const REQUIRED_MANAGER_SCOPES: readonly ['https://graph.microsoft.com/Application.ReadWrite.All', 'https://graph.microsoft.com/AppCatalog.ReadWrite.All', 'https://graph.microsoft.com/AppCatalog.Submit'];
+export interface TeamsManagedSetupScope {
+    projectId: string;
+    agentId: string;
+    user: User;
+}
+export declare class TeamsManagedSetupService {
+    private readonly credentialsService;
+    private readonly credentialsFinderService;
+    private readonly credentialsOverwrites;
+    private readonly oauthService;
+    private readonly namingService;
+    constructor(credentialsService: CredentialsService, credentialsFinderService: CredentialsFinderService, credentialsOverwrites: CredentialsOverwrites, oauthService: OauthService, namingService: NamingService);
+    isSetupAvailable(): boolean;
+    assertSetupAvailable(): void;
+    adminConsentUrl(): string | null;
+    getSetupState(options: TeamsManagedSetupScope): Promise<TeamsManagedSetupState>;
+    createManagerCredential(options: TeamsManagedSetupScope): Promise<CreateTeamsManagerCredentialResponse>;
+    private summarizeGrant;
+}

package/dist/modules/agents/integrations/platforms/teams/teams-managed-setup.service.js

@@ -0,0 +1,146 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TeamsManagedSetupService = exports.REQUIRED_MANAGER_SCOPES = exports.TEAMS_MANAGER_CREDENTIAL_TYPE = void 0;
+const di_1 = require("@n8n/di");
+const is_record_1 = require("@n8n/utils/is-record");
+const backend_services_1 = require("@n8n/backend-services");
+const credentials_service_1 = require("../../../../../credentials/credentials.service");
+const credentials_overwrites_1 = require("../../../../../credentials-overwrites");
+const oauth_service_1 = require("../../../../../oauth/oauth.service");
+const naming_service_1 = require("../../../../../services/naming.service");
+const errors_1 = require("@n8n/errors");
+const integration_helpers_1 = require("../../integration-helpers");
+exports.TEAMS_MANAGER_CREDENTIAL_TYPE = 'microsoftTeamsManagerOAuth2Api';
+const ADMIN_CONSENT_URL = 'https://login.microsoftonline.com/organizations/v2.0/adminconsent';
+const DEFAULT_MANAGER_CREDENTIAL_NAME = 'Microsoft organization';
+exports.REQUIRED_MANAGER_SCOPES = [
+    'https://graph.microsoft.com/Application.ReadWrite.All',
+    'https://graph.microsoft.com/AppCatalog.ReadWrite.All',
+    'https://graph.microsoft.com/AppCatalog.Submit',
+];
+function childRecord(record, key) {
+    const child = record[key];
+    return (0, is_record_1.isRecord)(child) ? child : undefined;
+}
+function grantedScopes(scope) {
+    if (!scope)
+        return new Set();
+    const granted = new Set();
+    for (const entry of scope.split(' ')) {
+        if (!entry)
+            continue;
+        granted.add(entry);
+        const short = entry.split('/').pop();
+        if (short)
+            granted.add(short);
+    }
+    return granted;
+}
+function isMissingScope(granted, required) {
+    const short = required.split('/').pop();
+    return !granted.has(required) && !(short !== undefined && granted.has(short));
+}
+let TeamsManagedSetupService = class TeamsManagedSetupService {
+    constructor(credentialsService, credentialsFinderService, credentialsOverwrites, oauthService, namingService) {
+        this.credentialsService = credentialsService;
+        this.credentialsFinderService = credentialsFinderService;
+        this.credentialsOverwrites = credentialsOverwrites;
+        this.oauthService = oauthService;
+        this.namingService = namingService;
+    }
+    isSetupAvailable() {
+        const overwrite = this.credentialsOverwrites.getOverwrites(exports.TEAMS_MANAGER_CREDENTIAL_TYPE);
+        return (typeof overwrite?.clientId === 'string' &&
+            overwrite.clientId.trim().length > 0 &&
+            typeof overwrite.clientSecret === 'string' &&
+            overwrite.clientSecret.trim().length > 0);
+    }
+    assertSetupAvailable() {
+        if (!this.isSetupAvailable()) {
+            throw new errors_1.BadRequestError('The recommended Microsoft Teams setup is not available here.');
+        }
+    }
+    adminConsentUrl() {
+        const overwrite = this.credentialsOverwrites.getOverwrites(exports.TEAMS_MANAGER_CREDENTIAL_TYPE);
+        const clientId = typeof overwrite?.clientId === 'string' ? overwrite.clientId.trim() : '';
+        if (!clientId)
+            return null;
+        const query = new URLSearchParams({
+            client_id: clientId,
+            scope: 'https://graph.microsoft.com/.default',
+            redirect_uri: `${this.oauthService.getBaseUrl(2)}/callback`,
+        });
+        return `${ADMIN_CONSENT_URL}?${query.toString()}`;
+    }
+    async getSetupState(options) {
+        if (!this.isSetupAvailable()) {
+            return { managedSetupAvailable: false, managerCredentials: [], adminConsentUrl: null };
+        }
+        const usable = await this.credentialsService.getCredentialsAUserCanUseInAWorkflow(options.user, {
+            projectId: options.projectId,
+        });
+        const managerCredentials = [];
+        for (const candidate of usable) {
+            if (candidate.type !== exports.TEAMS_MANAGER_CREDENTIAL_TYPE)
+                continue;
+            const credential = await this.credentialsFinderService.findCredentialForUser(candidate.id, options.user, ['credential:read']);
+            if (!credential)
+                continue;
+            const rawData = await this.credentialsService.decrypt(credential, true);
+            managerCredentials.push({
+                id: credential.id,
+                name: credential.name,
+                ...this.summarizeGrant(rawData),
+            });
+        }
+        return {
+            managedSetupAvailable: true,
+            managerCredentials,
+            adminConsentUrl: this.adminConsentUrl(),
+        };
+    }
+    async createManagerCredential(options) {
+        this.assertSetupAvailable();
+        const credential = await this.credentialsService.createUnmanagedCredential({
+            name: await this.namingService.getUniqueCredentialName(DEFAULT_MANAGER_CREDENTIAL_NAME),
+            type: exports.TEAMS_MANAGER_CREDENTIAL_TYPE,
+            data: {},
+            projectId: options.projectId,
+        }, options.user);
+        return {
+            id: credential.id,
+            name: credential.name,
+            type: exports.TEAMS_MANAGER_CREDENTIAL_TYPE,
+            isResolvable: false,
+        };
+    }
+    summarizeGrant(rawData) {
+        const data = rawData;
+        const tokenData = childRecord(data, 'oauthTokenData');
+        const connected = typeof (0, integration_helpers_1.stringProperty)(tokenData, 'access_token') === 'string';
+        const granted = grantedScopes((0, integration_helpers_1.stringProperty)(tokenData, 'scope'));
+        const canRefresh = typeof (0, integration_helpers_1.stringProperty)(tokenData, 'refresh_token') === 'string';
+        return {
+            connected,
+            reconnectRequired: connected &&
+                (!canRefresh || exports.REQUIRED_MANAGER_SCOPES.some((scope) => isMissingScope(granted, scope))),
+            organizationName: (0, integration_helpers_1.stringProperty)(data, 'organizationName') ?? null,
+            tenantId: (0, integration_helpers_1.stringProperty)(data, 'tenantId') ?? null,
+        };
+    }
+};
+exports.TeamsManagedSetupService = TeamsManagedSetupService;
+exports.TeamsManagedSetupService = TeamsManagedSetupService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [credentials_service_1.CredentialsService, backend_services_1.CredentialsFinderService, credentials_overwrites_1.CredentialsOverwrites, oauth_service_1.OauthService, naming_service_1.NamingService])
+], TeamsManagedSetupService);
+//# sourceMappingURL=teams-managed-setup.service.js.map

package/dist/modules/agents/integrations/platforms/teams/teams-managed-setup.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"teams-managed-setup.service.js","sourceRoot":"","sources":["../../../../../../src/modules/agents/integrations/platforms/teams/teams-managed-setup.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAMA,gCAAkC;AAClC,oDAAgD;AAGhD,4DAAiE;AACjE,2EAAuE;AACvE,qEAAiE;AACjE,yDAAmE;AACnE,8DAA0D;AAC1D,wCAA8C;AAE9C,mEAA2D;AAE9C,QAAA,6BAA6B,GAAG,gCAAgC,CAAC;AAM9E,MAAM,iBAAiB,GAAG,mEAAmE,CAAC;AAC9F,MAAM,+BAA+B,GAAG,wBAAwB,CAAC;AAYpD,QAAA,uBAAuB,GAAG;IACtC,uDAAuD;IACvD,sDAAsD;IACtD,+CAA+C;CACtC,CAAC;AAQX,SAAS,WAAW,CACnB,MAA+B,EAC/B,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,IAAA,oBAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAGD,SAAS,aAAa,CAAC,KAAyB;IAC/C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACrC,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,OAAoB,EAAE,QAAgB;IAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACxC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/E,CAAC;AAWM,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACpC,YACkB,kBAAsC,EACtC,wBAAkD,EAClD,qBAA4C,EAC5C,YAA0B,EAC1B,aAA4B;kCAJ5B,kBAAkB;wCAClB,wBAAwB;qCACxB,qBAAqB;4BACrB,YAAY;6BACZ,aAAa;IAC5B,CAAC;IAOJ,gBAAgB;QACf,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,QAAA,6BAA6B,CAAC,CAAC;QAC1F,OAAO,CACN,OAAO,SAAS,EAAE,QAAQ,KAAK,QAAQ;YACvC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACpC,OAAO,SAAS,CAAC,YAAY,KAAK,QAAQ;YAC1C,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CACxC,CAAC;IACH,CAAC;IAED,oBAAoB;QACnB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,wBAAe,CAAC,8DAA8D,CAAC,CAAC;QAC3F,CAAC;IACF,CAAC;IAWD,eAAe;QACd,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,QAAA,6BAA6B,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,OAAO,SAAS,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAM3B,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE,sCAAsC;YAC7C,YAAY,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,GAAiB,WAAW;SACzE,CAAC,CAAC;QACH,OAAO,GAAG,iBAAiB,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA+B;QAClD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;YAC9B,OAAO,EAAE,qBAAqB,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;QACxF,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,oCAAoC,CAChF,OAAO,CAAC,IAAI,EACZ;YACC,SAAS,EAAE,OAAO,CAAC,SAAS;SAC5B,CACD,CAAC;QAEF,MAAM,kBAAkB,GAAoC,EAAE,CAAC;QAC/D,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YAChC,IAAI,SAAS,CAAC,IAAI,KAAK,QAAA,6BAA6B;gBAAE,SAAS;YAC/D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,qBAAqB,CAC3E,SAAS,CAAC,EAAE,EACZ,OAAO,CAAC,IAAI,EACZ,CAAC,iBAAiB,CAAC,CACnB,CAAC;YACF,IAAI,CAAC,UAAU;gBAAE,SAAS;YAE1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACxE,kBAAkB,CAAC,IAAI,CAAC;gBACvB,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;aAC/B,CAAC,CAAC;QACJ,CAAC;QAED,OAAO;YACN,qBAAqB,EAAE,IAAI;YAC3B,kBAAkB;YAClB,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE;SACvC,CAAC;IACH,CAAC;IAMD,KAAK,CAAC,uBAAuB,CAC5B,OAA+B;QAE/B,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,yBAAyB,CACzE;YACC,IAAI,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,uBAAuB,CAAC,+BAA+B,CAAC;YACvF,IAAI,EAAE,QAAA,6BAA6B;YACnC,IAAI,EAAE,EAAE;YACR,SAAS,EAAE,OAAO,CAAC,SAAS;SAC5B,EACD,OAAO,CAAC,IAAI,CACZ,CAAC;QACF,OAAO;YACN,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,IAAI,EAAE,QAAA,6BAA6B;YACnC,YAAY,EAAE,KAAK;SACnB,CAAC;IACH,CAAC;IAEO,cAAc,CACrB,OAAuC;QAKvC,MAAM,IAAI,GAAG,OAAkC,CAAC;QAChD,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,OAAO,IAAA,oCAAc,EAAC,SAAS,EAAE,cAAc,CAAC,KAAK,QAAQ,CAAC;QAChF,MAAM,OAAO,GAAG,aAAa,CAAC,IAAA,oCAAc,EAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QAIlE,MAAM,UAAU,GAAG,OAAO,IAAA,oCAAc,EAAC,SAAS,EAAE,eAAe,CAAC,KAAK,QAAQ,CAAC;QAElF,OAAO;YACN,SAAS;YACT,iBAAiB,EAChB,SAAS;gBACT,CAAC,CAAC,UAAU,IAAI,QAAA,uBAAuB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YAGzF,gBAAgB,EAAE,IAAA,oCAAc,EAAC,IAAI,EAAE,kBAAkB,CAAC,IAAI,IAAI;YAClE,QAAQ,EAAE,IAAA,oCAAc,EAAC,IAAI,EAAE,UAAU,CAAC,IAAI,IAAI;SAClD,CAAC;IACH,CAAC;CACD,CAAA;;mCAhJY,wBAAwB;IADpC,IAAA,YAAO,GAAE;qCAG6B,wCAAkB,EACZ,2CAAwB,EAC3B,8CAAqB,EAC9B,4BAAY,EACX,8BAAa;GANlC,wBAAwB,CAgJpC"}

package/dist/modules/agents/integrations/platforms/teams/teams-manager-token.service.d.ts

@@ -0,0 +1,23 @@
+import { OutboundHttp } from '@n8n/backend-network';
+import { Logger } from '@n8n/backend-common';
+import { type CredentialsEntity, CredentialsRepository } from '@n8n/db';
+import { CredentialsService } from '../../../../../credentials/credentials.service';
+import { CredentialsOverwrites } from '../../../../../credentials-overwrites';
+export declare const GRAPH_RESOURCE = "https://graph.microsoft.com";
+export declare const AZURE_RESOURCE = "https://management.azure.com";
+export type ManagerResource = typeof GRAPH_RESOURCE | typeof AZURE_RESOURCE;
+export declare const RESOURCE_SCOPES: Record<ManagerResource, string>;
+export declare class TeamsManagerTokenService {
+    private readonly credentialsService;
+    private readonly credentialsRepository;
+    private readonly credentialsOverwrites;
+    private readonly outboundHttp;
+    private readonly logger;
+    constructor(credentialsService: CredentialsService, credentialsRepository: CredentialsRepository, credentialsOverwrites: CredentialsOverwrites, outboundHttp: OutboundHttp, logger: Logger);
+    private readonly inFlight;
+    acquire(credential: CredentialsEntity, resource: ManagerResource): Promise<string>;
+    private redeem;
+    private persistRotatedRefreshToken;
+    private tokenDataOf;
+    private clientCredentials;
+}

package/dist/modules/agents/integrations/platforms/teams/teams-manager-token.service.js

@@ -0,0 +1,155 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TeamsManagerTokenService = exports.RESOURCE_SCOPES = exports.AZURE_RESOURCE = exports.GRAPH_RESOURCE = void 0;
+const backend_network_1 = require("@n8n/backend-network");
+const backend_common_1 = require("@n8n/backend-common");
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const is_record_1 = require("@n8n/utils/is-record");
+const credentials_service_1 = require("../../../../../credentials/credentials.service");
+const credentials_overwrites_1 = require("../../../../../credentials-overwrites");
+const errors_1 = require("@n8n/errors");
+const n8n_workflow_1 = require("n8n-workflow");
+const teams_managed_setup_service_1 = require("./teams-managed-setup.service");
+const teams_setup_telemetry_service_1 = require("./teams-setup-telemetry.service");
+const integration_helpers_1 = require("../../integration-helpers");
+const TOKEN_ENDPOINT = 'https://login.microsoftonline.com/organizations/oauth2/v2.0/token';
+const TOKEN_TIMEOUT_MS = 30_000;
+exports.GRAPH_RESOURCE = 'https://graph.microsoft.com';
+exports.AZURE_RESOURCE = 'https://management.azure.com';
+function resourceName(resource) {
+    return resource === exports.AZURE_RESOURCE ? 'Azure' : 'Microsoft Graph';
+}
+exports.RESOURCE_SCOPES = {
+    [exports.GRAPH_RESOURCE]: [
+        'offline_access',
+        `${exports.GRAPH_RESOURCE}/Application.ReadWrite.All`,
+        `${exports.GRAPH_RESOURCE}/AppCatalog.ReadWrite.All`,
+        `${exports.GRAPH_RESOURCE}/AppCatalog.Submit`,
+        `${exports.GRAPH_RESOURCE}/User.Read`,
+    ].join(' '),
+    [exports.AZURE_RESOURCE]: ['offline_access', `${exports.AZURE_RESOURCE}/user_impersonation`].join(' '),
+};
+function mergeScopes(stored, granted) {
+    const all = [...(stored ?? '').split(' '), ...granted.split(' ')].filter(Boolean);
+    return [...new Set(all)].join(' ');
+}
+let TeamsManagerTokenService = class TeamsManagerTokenService {
+    constructor(credentialsService, credentialsRepository, credentialsOverwrites, outboundHttp, logger) {
+        this.credentialsService = credentialsService;
+        this.credentialsRepository = credentialsRepository;
+        this.credentialsOverwrites = credentialsOverwrites;
+        this.outboundHttp = outboundHttp;
+        this.logger = logger;
+        this.inFlight = new Map();
+    }
+    async acquire(credential, resource) {
+        if (credential.type !== teams_managed_setup_service_1.TEAMS_MANAGER_CREDENTIAL_TYPE) {
+            throw new errors_1.BadRequestError('That credential is not a Microsoft setup sign-in.');
+        }
+        const running = this.inFlight.get(credential.id);
+        const next = running
+            ? running.then(async () => await this.redeem(credential, resource), async () => await this.redeem(credential, resource))
+            : this.redeem(credential, resource);
+        this.inFlight.set(credential.id, next);
+        next
+            .finally(() => {
+            if (this.inFlight.get(credential.id) === next)
+                this.inFlight.delete(credential.id);
+        })
+            .catch(() => { });
+        return await next;
+    }
+    async redeem(credential, resource) {
+        const current = (await this.credentialsRepository.findOneBy({ id: credential.id })) ?? credential;
+        const rawData = await this.credentialsService.decrypt(current, true);
+        const tokenData = this.tokenDataOf(rawData);
+        const refreshToken = (0, integration_helpers_1.stringProperty)(tokenData, 'refresh_token');
+        if (!refreshToken) {
+            throw (0, teams_setup_telemetry_service_1.withTeamsFailure)(new errors_1.BadRequestError('Sign in with Microsoft again to continue.'), 'not_signed_in');
+        }
+        const client = this.clientCredentials();
+        const response = await this.outboundHttp
+            .requests({ useDefaultSsrfPolicy: 'unsafe' })
+            .request({
+            method: 'POST',
+            url: TOKEN_ENDPOINT,
+            headers: { 'content-type': 'application/x-www-form-urlencoded' },
+            body: new URLSearchParams({
+                grant_type: 'refresh_token',
+                refresh_token: refreshToken,
+                client_id: client.clientId,
+                client_secret: client.clientSecret,
+                scope: exports.RESOURCE_SCOPES[resource],
+            }).toString(),
+            returnFullResponse: true,
+            ignoreHttpStatusErrors: true,
+            timeout: TOKEN_TIMEOUT_MS,
+        });
+        const body = response.body;
+        const accessToken = (0, integration_helpers_1.stringProperty)(body, 'access_token');
+        if (response.statusCode !== 200 || !accessToken) {
+            this.logger.debug('[TeamsManagerToken] Microsoft refused the refresh', {
+                statusCode: response.statusCode,
+                resource,
+                error: (0, integration_helpers_1.stringProperty)(body, 'error'),
+                suberror: (0, integration_helpers_1.stringProperty)(body, 'suberror'),
+                errorDescription: (0, integration_helpers_1.stringProperty)(body, 'error_description'),
+            });
+            if ((0, integration_helpers_1.stringProperty)(body, 'error') === 'invalid_grant') {
+                throw (0, teams_setup_telemetry_service_1.withTeamsFailure)(new errors_1.BadRequestError(`This Microsoft sign-in does not reach ${resourceName(resource)}. Sign in again, and make sure the organisation approved n8n for it.`), 'not_signed_in');
+            }
+            throw new n8n_workflow_1.OperationalError(`Microsoft would not issue a token for ${resourceName(resource)}. Sign in again and retry.`);
+        }
+        await this.persistRotatedRefreshToken(credential, rawData, tokenData, body);
+        return accessToken;
+    }
+    async persistRotatedRefreshToken(credential, rawData, tokenData, body) {
+        const rotated = (0, integration_helpers_1.stringProperty)(body, 'refresh_token');
+        if (!rotated)
+            return;
+        const oauthTokenData = { ...tokenData, refresh_token: rotated };
+        const scope = (0, integration_helpers_1.stringProperty)(body, 'scope');
+        if (scope !== undefined) {
+            oauthTokenData.scope = mergeScopes((0, integration_helpers_1.stringProperty)(tokenData, 'scope'), scope);
+        }
+        const updated = { ...rawData, oauthTokenData };
+        const encrypted = await this.credentialsService.createEncryptedData({
+            id: credential.id,
+            name: credential.name,
+            type: credential.type,
+            data: updated,
+        });
+        await this.credentialsService.update(credential.id, encrypted, { kind: 'system', reason: 'integration' }, updated);
+        if (encrypted.data)
+            credential.data = encrypted.data;
+    }
+    tokenDataOf(rawData) {
+        const tokenData = rawData.oauthTokenData;
+        return (0, is_record_1.isRecord)(tokenData) ? tokenData : {};
+    }
+    clientCredentials() {
+        const overwrite = this.credentialsOverwrites.getOverwrites(teams_managed_setup_service_1.TEAMS_MANAGER_CREDENTIAL_TYPE);
+        const clientId = typeof overwrite?.clientId === 'string' ? overwrite.clientId.trim() : '';
+        const clientSecret = typeof overwrite?.clientSecret === 'string' ? overwrite.clientSecret.trim() : '';
+        if (!clientId || !clientSecret) {
+            throw new errors_1.BadRequestError('The recommended Microsoft Teams setup is not available here.');
+        }
+        return { clientId, clientSecret };
+    }
+};
+exports.TeamsManagerTokenService = TeamsManagerTokenService;
+exports.TeamsManagerTokenService = TeamsManagerTokenService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [credentials_service_1.CredentialsService, db_1.CredentialsRepository, credentials_overwrites_1.CredentialsOverwrites, backend_network_1.OutboundHttp, backend_common_1.Logger])
+], TeamsManagerTokenService);
+//# sourceMappingURL=teams-manager-token.service.js.map

package/dist/modules/agents/integrations/platforms/teams/teams-manager-token.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"teams-manager-token.service.js","sourceRoot":"","sources":["../../../../../../src/modules/agents/integrations/platforms/teams/teams-manager-token.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,0DAAoD;AACpD,wDAA6C;AAC7C,gCAAwE;AACxE,gCAAkC;AAClC,oDAAgD;AAGhD,2EAAuE;AACvE,qEAAiE;AACjE,wCAA8C;AAC9C,+CAAgD;AAEhD,+EAA8E;AAC9E,mFAAmE;AACnE,mEAA2D;AAI3D,MAAM,cAAc,GAAG,mEAAmE,CAAC;AAC3F,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEnB,QAAA,cAAc,GAAG,6BAA6B,CAAC;AAC/C,QAAA,cAAc,GAAG,8BAA8B,CAAC;AAM7D,SAAS,YAAY,CAAC,QAAyB;IAC9C,OAAO,QAAQ,KAAK,QAAA,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC;AAClE,CAAC;AAEY,QAAA,eAAe,GAAoC;IAC/D,CAAC,QAAA,cAAc,CAAC,EAAE;QACjB,gBAAgB;QAChB,GAAG,QAAA,cAAc,4BAA4B;QAC7C,GAAG,QAAA,cAAc,2BAA2B;QAC5C,GAAG,QAAA,cAAc,oBAAoB;QACrC,GAAG,QAAA,cAAc,YAAY;KAC7B,CAAC,IAAI,CAAC,GAAG,CAAC;IACX,CAAC,QAAA,cAAc,CAAC,EAAE,CAAC,gBAAgB,EAAE,GAAG,QAAA,cAAc,qBAAqB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;CACtF,CAAC;AAWF,SAAS,WAAW,CAAC,MAA0B,EAAE,OAAe;IAC/D,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAeM,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACpC,YACkB,kBAAsC,EACtC,qBAA4C,EAC5C,qBAA4C,EAC5C,YAA0B,EAC1B,MAAc;QAJd,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,iBAAY,GAAZ,YAAY,CAAc;QAC1B,WAAM,GAAN,MAAM,CAAQ;QAWf,aAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAV5D,CAAC;IAYJ,KAAK,CAAC,OAAO,CAAC,UAA6B,EAAE,QAAyB;QACrE,IAAI,UAAU,CAAC,IAAI,KAAK,2DAA6B,EAAE,CAAC;YACvD,MAAM,IAAI,wBAAe,CAAC,mDAAmD,CAAC,CAAC;QAChF,CAAC;QAKD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,OAAO;YACnB,CAAC,CAAC,OAAO,CAAC,IAAI,CACZ,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,EACnD,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CACnD;YACF,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAErC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI;aACF,OAAO,CAAC,GAAG,EAAE;YACb,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClB,OAAO,MAAM,IAAI,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,UAA6B,EAAE,QAAyB;QAI5E,MAAM,OAAO,GACZ,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,UAAU,CAAC;QACnF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,IAAA,oCAAc,EAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAChE,IAAI,CAAC,YAAY,EAAE,CAAC;YAGnB,MAAM,IAAA,gDAAgB,EACrB,IAAI,wBAAe,CAAC,2CAA2C,CAAC,EAChE,eAAe,CACf,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY;aAEtC,QAAQ,CAAC,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC;aAC5C,OAAO,CAAC;YACR,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,cAAc;YACnB,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACzB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,YAAY;gBAC3B,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,KAAK,EAAE,QAAA,eAAe,CAAC,QAAQ,CAAC;aAChC,CAAC,CAAC,QAAQ,EAAE;YACb,kBAAkB,EAAE,IAAI;YACxB,sBAAsB,EAAE,IAAI;YAC5B,OAAO,EAAE,gBAAgB;SACzB,CAAC,CAAC;QAEJ,MAAM,IAAI,GAAY,QAAQ,CAAC,IAAI,CAAC;QACpC,MAAM,WAAW,GAAG,IAAA,oCAAc,EAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAKjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,EAAE;gBACtE,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,QAAQ;gBACR,KAAK,EAAE,IAAA,oCAAc,EAAC,IAAI,EAAE,OAAO,CAAC;gBACpC,QAAQ,EAAE,IAAA,oCAAc,EAAC,IAAI,EAAE,UAAU,CAAC;gBAC1C,gBAAgB,EAAE,IAAA,oCAAc,EAAC,IAAI,EAAE,mBAAmB,CAAC;aAC3D,CAAC,CAAC;YAWH,IAAI,IAAA,oCAAc,EAAC,IAAI,EAAE,OAAO,CAAC,KAAK,eAAe,EAAE,CAAC;gBACvD,MAAM,IAAA,gDAAgB,EACrB,IAAI,wBAAe,CAClB,yCAAyC,YAAY,CAAC,QAAQ,CAAC,sEAAsE,CACrI,EACD,eAAe,CACf,CAAC;YACH,CAAC;YACD,MAAM,IAAI,+BAAgB,CACzB,yCAAyC,YAAY,CAAC,QAAQ,CAAC,4BAA4B,CAC3F,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5E,OAAO,WAAW,CAAC;IACpB,CAAC;IAMO,KAAK,CAAC,0BAA0B,CACvC,UAA6B,EAC7B,OAAuC,EACvC,SAAkC,EAClC,IAAa;QAEb,MAAM,OAAO,GAAG,IAAA,oCAAc,EAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,cAAc,GAA4B,EAAE,GAAG,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;QACzF,MAAM,KAAK,GAAG,IAAA,oCAAc,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,cAAc,CAAC,KAAK,GAAG,WAAW,CAAC,IAAA,oCAAc,EAAC,SAAS,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/E,CAAC;QAID,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,cAAc,EAAoC,CAAC;QACjF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAAC;YACnE,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,IAAI,EAAE,OAAO;SACb,CAAC,CAAC;QAIH,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CACnC,UAAU,CAAC,EAAE,EACb,SAAS,EACT,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,EACzC,OAAO,CACP,CAAC;QAKF,IAAI,SAAS,CAAC,IAAI;YAAE,UAAU,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;IACtD,CAAC;IAEO,WAAW,CAAC,OAAuC;QAC1D,MAAM,SAAS,GAAI,OAAmC,CAAC,cAAc,CAAC;QACtE,OAAO,IAAA,oBAAQ,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,CAAC;IAEO,iBAAiB;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,2DAA6B,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,OAAO,SAAS,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,MAAM,YAAY,GACjB,OAAO,SAAS,EAAE,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;YAChC,MAAM,IAAI,wBAAe,CAAC,8DAA8D,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACnC,CAAC;CACD,CAAA;;mCAtLY,wBAAwB;IADpC,IAAA,YAAO,GAAE;qCAG6B,wCAAkB,EACf,0BAAqB,EACrB,8CAAqB,EAC9B,8BAAY,EAClB,uBAAM;GANpB,wBAAwB,CAsLpC"}

package/dist/modules/agents/integrations/platforms/teams/teams-manifest.service.d.ts

@@ -1,10 +1,12 @@
 import { type AgentTeamsIntegrationSettings, type TeamsAgentAppManifest } from '@n8n/api-types';
+import type { TeamsAppIcons } from './teams-app-icons';
 export interface BuildTeamsManifestOptions {
     agentName: string;
     agentId: string;
     botId: string;
     versionAt: Date;
     settings?: AgentTeamsIntegrationSettings;
+    icons?: TeamsAppIcons;
 }
 export declare const READ_PERMISSIONS: readonly [{
     readonly setting: 'readAllChannelMessages';
@@ -19,6 +21,7 @@ export declare const READ_PERMISSIONS: readonly [{
 }];
 export declare class TeamsManifestService {
     buildManifest(options: BuildTeamsManifestOptions): TeamsAgentAppManifest;
+    fingerprint(manifest: TeamsAgentAppManifest, icon?: unknown): string;
     buildPackage(options: BuildTeamsManifestOptions): Promise<Buffer>;
     private buildScopes;
     private buildReadPermissions;

package/dist/modules/agents/integrations/platforms/teams/teams-manifest.service.js

@@ -10,6 +10,7 @@ exports.TeamsManifestService = exports.READ_PERMISSIONS = void 0;
 const api_types_1 = require("@n8n/api-types");
 const di_1 = require("@n8n/di");
 const fflate_1 = require("fflate");
+const node_crypto_1 = require("node:crypto");
 const promises_1 = require("node:fs/promises");
 const node_path_1 = require("node:path");
 const uuid_1 = require("uuid");
@@ -26,6 +27,7 @@ const LIMITS = {
     fullDescription: 4000,
     developerName: 32,
 };
+const RSC_RESOURCE = 'https://RscBasedStoreApp';
 exports.READ_PERMISSIONS = [
     {
         setting: 'readAllChannelMessages',
@@ -71,13 +73,13 @@ let TeamsManifestService = class TeamsManifestService {
                 color: 'color.png',
                 outline: 'outline.png',
             },
-            accentColor: ACCENT_COLOR,
+            accentColor: options.icons?.accentColor ?? ACCENT_COLOR,
             bots: [
                 {
                     botId: options.botId,
                     scopes: this.buildScopes(options.settings),
                     isNotificationOnly: false,
-                    supportsFiles: false,
+                    supportsFiles: true,
                 },
             ],
             permissions: ['identity', 'messageTeamMembers'],
@@ -85,12 +87,20 @@ let TeamsManifestService = class TeamsManifestService {
             ...this.buildReadPermissions(options.botId, options.settings),
         };
     }
+    fingerprint(manifest, icon) {
+        const { version: _version, ...content } = manifest;
+        return (0, node_crypto_1.createHash)('sha256')
+            .update(JSON.stringify({ content, icon: icon ?? null }))
+            .digest('hex');
+    }
     async buildPackage(options) {
         const manifest = this.buildManifest(options);
-        const [color, outline] = await Promise.all([
-            (0, promises_1.readFile)((0, node_path_1.join)(__dirname, 'assets', 'color.png')),
-            (0, promises_1.readFile)((0, node_path_1.join)(__dirname, 'assets', 'outline.png')),
-        ]);
+        const [color, outline] = options.icons
+            ? [options.icons.color, options.icons.outline]
+            : await Promise.all([
+                (0, promises_1.readFile)((0, node_path_1.join)(__dirname, 'assets', 'color.png')),
+                (0, promises_1.readFile)((0, node_path_1.join)(__dirname, 'assets', 'outline.png')),
+            ]);
         return Buffer.from((0, fflate_1.zipSync)({
             'manifest.json': Buffer.from(JSON.stringify(manifest, null, 2), 'utf8'),
             'color.png': color,
@@ -105,11 +115,11 @@ let TeamsManifestService = class TeamsManifestService {
         ];
     }
     buildReadPermissions(botId, availability) {
-        const resourceSpecific = exports.READ_PERMISSIONS.filter(({ setting, requires }) => availability?.[setting] && availability?.[requires]).map(({ name }) => ({ name, type: 'Application' }));
+        const resourceSpecific = exports.READ_PERMISSIONS.filter(({ requires }) => availability?.[requires]).map(({ name }) => ({ name, type: 'Application' }));
         if (resourceSpecific.length === 0)
             return {};
         return {
-            webApplicationInfo: { id: botId },
+            webApplicationInfo: { id: botId, resource: RSC_RESOURCE },
             authorization: { permissions: { resourceSpecific } },
         };
     }