veryfront 0.1.1186 → 0.1.1189

package/esm/src/oauth/providers/google.d.ts

@@ -7,6 +7,8 @@ export declare const calendarConfig: OAuthServiceConfig;
 export declare const sheetsConfig: OAuthServiceConfig;
 /** Configuration used by drive. */
 export declare const driveConfig: OAuthServiceConfig;
+/** Configuration used by Google Docs. */
+export declare const docsGoogleConfig: OAuthServiceConfig;
 export declare const googleServices: {
     readonly gmail: {
         providerId: string;
@@ -21,6 +23,15 @@ export declare const googleServices: {
         additionalAuthParams?: Record<string, string> | undefined;
         additionalTokenParams?: Record<string, string> | undefined;
         useBasicAuth?: boolean | undefined;
+        pkceMode?: string | undefined;
+        runtimeSupport?: string | undefined;
+        tokenRequestFormat?: string | undefined;
+        tokenRequestHeaders?: Record<string, string> | undefined;
+        apiHeaders?: Record<string, string> | undefined;
+        scopeSeparator?: string | undefined;
+        requestTimeoutMs?: number | undefined;
+        maxTokenResponseBytes?: number | undefined;
+        maxApiResponseBytes?: number | undefined;
         tokenResponseMapping?: Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
             accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
             refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
@@ -46,6 +57,15 @@ export declare const googleServices: {
         additionalAuthParams?: Record<string, string> | undefined;
         additionalTokenParams?: Record<string, string> | undefined;
         useBasicAuth?: boolean | undefined;
+        pkceMode?: string | undefined;
+        runtimeSupport?: string | undefined;
+        tokenRequestFormat?: string | undefined;
+        tokenRequestHeaders?: Record<string, string> | undefined;
+        apiHeaders?: Record<string, string> | undefined;
+        scopeSeparator?: string | undefined;
+        requestTimeoutMs?: number | undefined;
+        maxTokenResponseBytes?: number | undefined;
+        maxApiResponseBytes?: number | undefined;
         tokenResponseMapping?: Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
             accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
             refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
@@ -71,6 +91,15 @@ export declare const googleServices: {
         additionalAuthParams?: Record<string, string> | undefined;
         additionalTokenParams?: Record<string, string> | undefined;
         useBasicAuth?: boolean | undefined;
+        pkceMode?: string | undefined;
+        runtimeSupport?: string | undefined;
+        tokenRequestFormat?: string | undefined;
+        tokenRequestHeaders?: Record<string, string> | undefined;
+        apiHeaders?: Record<string, string> | undefined;
+        scopeSeparator?: string | undefined;
+        requestTimeoutMs?: number | undefined;
+        maxTokenResponseBytes?: number | undefined;
+        maxApiResponseBytes?: number | undefined;
         tokenResponseMapping?: Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
             accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
             refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
@@ -96,6 +125,49 @@ export declare const googleServices: {
         additionalAuthParams?: Record<string, string> | undefined;
         additionalTokenParams?: Record<string, string> | undefined;
         useBasicAuth?: boolean | undefined;
+        pkceMode?: string | undefined;
+        runtimeSupport?: string | undefined;
+        tokenRequestFormat?: string | undefined;
+        tokenRequestHeaders?: Record<string, string> | undefined;
+        apiHeaders?: Record<string, string> | undefined;
+        scopeSeparator?: string | undefined;
+        requestTimeoutMs?: number | undefined;
+        maxTokenResponseBytes?: number | undefined;
+        maxApiResponseBytes?: number | undefined;
+        tokenResponseMapping?: Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
+            accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
+            refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
+            expiresIn: import("../../internal-agents/schema.js").Schema<string | undefined>;
+            tokenType: import("../../internal-agents/schema.js").Schema<string | undefined>;
+            scope: import("../../internal-agents/schema.js").Schema<string | undefined>;
+        }>> | undefined;
+    } & {
+        serviceId: string;
+        defaultScopes: string[];
+        apiBaseUrl: string;
+    };
+    readonly "docs-google": {
+        providerId: string;
+        displayName: string;
+        authorizationUrl: string;
+        tokenUrl: string;
+        clientIdEnvVar: string;
+        clientSecretEnvVar: string;
+    } & {
+        userInfoUrl?: string | undefined;
+        revocationUrl?: string | undefined;
+        additionalAuthParams?: Record<string, string> | undefined;
+        additionalTokenParams?: Record<string, string> | undefined;
+        useBasicAuth?: boolean | undefined;
+        pkceMode?: string | undefined;
+        runtimeSupport?: string | undefined;
+        tokenRequestFormat?: string | undefined;
+        tokenRequestHeaders?: Record<string, string> | undefined;
+        apiHeaders?: Record<string, string> | undefined;
+        scopeSeparator?: string | undefined;
+        requestTimeoutMs?: number | undefined;
+        maxTokenResponseBytes?: number | undefined;
+        maxApiResponseBytes?: number | undefined;
         tokenResponseMapping?: Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
             accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
             refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;

package/esm/src/oauth/providers/google.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../../../src/src/oauth/providers/google.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAiBtD,mCAAmC;AACnC,eAAO,MAAM,WAAW,EAAE,kBAazB,CAAC;AAEF,sCAAsC;AACtC,eAAO,MAAM,cAAc,EAAE,kBAS5B,CAAC;AAEF,oCAAoC;AACpC,eAAO,MAAM,YAAY,EAAE,kBAS1B,CAAC;AAEF,mCAAmC;AACnC,eAAO,MAAM,WAAW,EAAE,kBASzB,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAKjB,CAAC"}
+{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../../../src/src/oauth/providers/google.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAkBtD,mCAAmC;AACnC,eAAO,MAAM,WAAW,EAAE,kBAczB,CAAC;AAEF,sCAAsC;AACtC,eAAO,MAAM,cAAc,EAAE,kBAU5B,CAAC;AAEF,oCAAoC;AACpC,eAAO,MAAM,YAAY,EAAE,kBAW1B,CAAC;AAEF,mCAAmC;AACnC,eAAO,MAAM,WAAW,EAAE,kBAOzB,CAAC;AAEF,yCAAyC;AACzC,eAAO,MAAM,gBAAgB,EAAE,kBAW9B,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMjB,CAAC"}

package/esm/src/oauth/providers/google.js

@@ -11,10 +11,12 @@ const googleBase = {
         access_type: "offline",
         prompt: "consent",
     },
+    pkceMode: "supported",
 };
 /** Configuration used by gmail. */
 export const gmailConfig = {
     ...googleBase,
+    additionalAuthParams: { ...googleBase.additionalAuthParams },
     serviceId: "gmail",
     displayName: "Gmail",
     apiBaseUrl: "https://gmail.googleapis.com/gmail/v1",
@@ -22,14 +24,15 @@ export const gmailConfig = {
         "https://www.googleapis.com/auth/gmail.readonly",
         "https://www.googleapis.com/auth/gmail.send",
         "https://www.googleapis.com/auth/gmail.modify",
-        "https://www.googleapis.com/auth/gmail.compose",
         "https://www.googleapis.com/auth/gmail.labels",
+        "https://www.googleapis.com/auth/gmail.compose",
         "https://mail.google.com/",
     ],
 };
 /** Configuration used by calendar. */
 export const calendarConfig = {
     ...googleBase,
+    additionalAuthParams: { ...googleBase.additionalAuthParams },
     serviceId: "calendar",
     displayName: "Google Calendar",
     apiBaseUrl: "https://www.googleapis.com/calendar/v3",
@@ -41,23 +44,36 @@ export const calendarConfig = {
 /** Configuration used by sheets. */
 export const sheetsConfig = {
     ...googleBase,
+    additionalAuthParams: { ...googleBase.additionalAuthParams },
     serviceId: "sheets",
     displayName: "Google Sheets",
     apiBaseUrl: "https://sheets.googleapis.com/v4",
     defaultScopes: [
-        "https://www.googleapis.com/auth/spreadsheets.readonly",
         "https://www.googleapis.com/auth/spreadsheets",
+        "https://www.googleapis.com/auth/drive.readonly",
+        "https://www.googleapis.com/auth/drive.file",
     ],
 };
 /** Configuration used by drive. */
 export const driveConfig = {
     ...googleBase,
+    additionalAuthParams: { ...googleBase.additionalAuthParams },
     serviceId: "drive",
     displayName: "Google Drive",
     apiBaseUrl: "https://www.googleapis.com/drive/v3",
+    defaultScopes: ["https://www.googleapis.com/auth/drive"],
+};
+/** Configuration used by Google Docs. */
+export const docsGoogleConfig = {
+    ...googleBase,
+    additionalAuthParams: { ...googleBase.additionalAuthParams },
+    serviceId: "docs-google",
+    displayName: "Google Docs",
+    apiBaseUrl: "https://docs.googleapis.com/v1",
     defaultScopes: [
+        "https://www.googleapis.com/auth/documents.readonly",
+        "https://www.googleapis.com/auth/documents",
         "https://www.googleapis.com/auth/drive.readonly",
-        "https://www.googleapis.com/auth/drive.file",
     ],
 };
 export const googleServices = {
@@ -65,4 +81,5 @@ export const googleServices = {
     calendar: calendarConfig,
     sheets: sheetsConfig,
     drive: driveConfig,
+    "docs-google": docsGoogleConfig,
 };

package/esm/src/oauth/providers/index.d.ts

@@ -4,9 +4,9 @@
  * @module oauth/providers
  */
 export { type EnvReader, OAuthProvider, OAuthService } from "./base.js";
-export { calendarConfig, driveConfig, gmailConfig, googleServices, sheetsConfig, } from "./google.js";
+export { calendarConfig, docsGoogleConfig, driveConfig, gmailConfig, googleServices, sheetsConfig, } from "./google.js";
 export { microsoftServices, oneDriveConfig, outlookConfig, sharePointConfig, teamsConfig, } from "./microsoft.js";
 export { atlassianServices, bitbucketConfig, confluenceConfig, jiraConfig } from "./atlassian.js";
 export { airtableConfig, asanaConfig, boxConfig, clickupConfig, commonServices, figmaConfig, freshdeskConfig, githubConfig, gitlabConfig, hubspotConfig, intercomConfig, linearConfig, mailchimpConfig, mondayConfig, notionConfig, pipedriveConfig, quickbooksConfig, salesforceConfig, shopifyConfig, slackConfig, trelloConfig, twitterConfig, webexConfig, xeroConfig, zoomConfig, } from "./common.js";
-export type { AuthorizationUrlOptions, OAuthProviderConfig, OAuthServiceConfig, OAuthState, OAuthTokens, TokenExchangeOptions, TokenExchangeResult, TokenStore, } from "../types.js";
+export type { AuthorizationUrlOptions, OAuthProviderConfig, OAuthServiceConfig, OAuthState, OAuthTokens, OAuthTokenSnapshot, RefreshCapableTokenStore, TokenExchangeOptions, TokenExchangeResult, TokenStore, } from "../types.js";
 //# sourceMappingURL=index.d.ts.map

package/esm/src/oauth/providers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/oauth/providers/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAExE,OAAO,EACL,cAAc,EACd,WAAW,EACX,WAAW,EACX,cAAc,EACd,YAAY,GACb,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAElG,OAAO,EACL,cAAc,EACd,WAAW,EACX,SAAS,EACT,aAAa,EACb,cAAc,EACd,WAAW,EACX,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,cAAc,EACd,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,YAAY,EACZ,aAAa,EACb,WAAW,EACX,UAAU,EACV,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,WAAW,EACX,oBAAoB,EACpB,mBAAmB,EACnB,UAAU,GACX,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/oauth/providers/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAExE,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,cAAc,EACd,YAAY,GACb,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAElG,OAAO,EACL,cAAc,EACd,WAAW,EACX,SAAS,EACT,aAAa,EACb,cAAc,EACd,WAAW,EACX,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,cAAc,EACd,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,YAAY,EACZ,aAAa,EACb,WAAW,EACX,UAAU,EACV,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,UAAU,GACX,MAAM,aAAa,CAAC"}

package/esm/src/oauth/providers/index.js

@@ -4,7 +4,7 @@
  * @module oauth/providers
  */
 export { OAuthProvider, OAuthService } from "./base.js";
-export { calendarConfig, driveConfig, gmailConfig, googleServices, sheetsConfig, } from "./google.js";
+export { calendarConfig, docsGoogleConfig, driveConfig, gmailConfig, googleServices, sheetsConfig, } from "./google.js";
 export { microsoftServices, oneDriveConfig, outlookConfig, sharePointConfig, teamsConfig, } from "./microsoft.js";
 export { atlassianServices, bitbucketConfig, confluenceConfig, jiraConfig } from "./atlassian.js";
 export { airtableConfig, asanaConfig, boxConfig, clickupConfig, commonServices, figmaConfig, freshdeskConfig, githubConfig, gitlabConfig, hubspotConfig, intercomConfig, linearConfig, mailchimpConfig, mondayConfig, notionConfig, pipedriveConfig, quickbooksConfig, salesforceConfig, shopifyConfig, slackConfig, trelloConfig, twitterConfig, webexConfig, xeroConfig, zoomConfig, } from "./common.js";

package/esm/src/oauth/providers/microsoft.d.ts

@@ -21,6 +21,15 @@ export declare const microsoftServices: {
         additionalAuthParams?: Record<string, string> | undefined;
         additionalTokenParams?: Record<string, string> | undefined;
         useBasicAuth?: boolean | undefined;
+        pkceMode?: string | undefined;
+        runtimeSupport?: string | undefined;
+        tokenRequestFormat?: string | undefined;
+        tokenRequestHeaders?: Record<string, string> | undefined;
+        apiHeaders?: Record<string, string> | undefined;
+        scopeSeparator?: string | undefined;
+        requestTimeoutMs?: number | undefined;
+        maxTokenResponseBytes?: number | undefined;
+        maxApiResponseBytes?: number | undefined;
         tokenResponseMapping?: Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
             accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
             refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
@@ -46,6 +55,15 @@ export declare const microsoftServices: {
         additionalAuthParams?: Record<string, string> | undefined;
         additionalTokenParams?: Record<string, string> | undefined;
         useBasicAuth?: boolean | undefined;
+        pkceMode?: string | undefined;
+        runtimeSupport?: string | undefined;
+        tokenRequestFormat?: string | undefined;
+        tokenRequestHeaders?: Record<string, string> | undefined;
+        apiHeaders?: Record<string, string> | undefined;
+        scopeSeparator?: string | undefined;
+        requestTimeoutMs?: number | undefined;
+        maxTokenResponseBytes?: number | undefined;
+        maxApiResponseBytes?: number | undefined;
         tokenResponseMapping?: Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
             accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
             refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
@@ -71,6 +89,15 @@ export declare const microsoftServices: {
         additionalAuthParams?: Record<string, string> | undefined;
         additionalTokenParams?: Record<string, string> | undefined;
         useBasicAuth?: boolean | undefined;
+        pkceMode?: string | undefined;
+        runtimeSupport?: string | undefined;
+        tokenRequestFormat?: string | undefined;
+        tokenRequestHeaders?: Record<string, string> | undefined;
+        apiHeaders?: Record<string, string> | undefined;
+        scopeSeparator?: string | undefined;
+        requestTimeoutMs?: number | undefined;
+        maxTokenResponseBytes?: number | undefined;
+        maxApiResponseBytes?: number | undefined;
         tokenResponseMapping?: Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
             accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
             refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
@@ -96,6 +123,15 @@ export declare const microsoftServices: {
         additionalAuthParams?: Record<string, string> | undefined;
         additionalTokenParams?: Record<string, string> | undefined;
         useBasicAuth?: boolean | undefined;
+        pkceMode?: string | undefined;
+        runtimeSupport?: string | undefined;
+        tokenRequestFormat?: string | undefined;
+        tokenRequestHeaders?: Record<string, string> | undefined;
+        apiHeaders?: Record<string, string> | undefined;
+        scopeSeparator?: string | undefined;
+        requestTimeoutMs?: number | undefined;
+        maxTokenResponseBytes?: number | undefined;
+        maxApiResponseBytes?: number | undefined;
         tokenResponseMapping?: Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
             accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
             refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;

package/esm/src/oauth/providers/microsoft.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"microsoft.d.ts","sourceRoot":"","sources":["../../../../src/src/oauth/providers/microsoft.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAiBtD,qCAAqC;AACrC,eAAO,MAAM,aAAa,EAAE,kBAc3B,CAAC;AAEF,mCAAmC;AACnC,eAAO,MAAM,WAAW,EAAE,kBAczB,CAAC;AAEF,yCAAyC;AACzC,eAAO,MAAM,gBAAgB,EAAE,kBAa9B,CAAC;AAEF,uCAAuC;AACvC,eAAO,MAAM,cAAc,EAAE,kBAa5B,CAAC;AAEF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAKpB,CAAC"}
+{"version":3,"file":"microsoft.d.ts","sourceRoot":"","sources":["../../../../src/src/oauth/providers/microsoft.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAkBtD,qCAAqC;AACrC,eAAO,MAAM,aAAa,EAAE,kBAiB3B,CAAC;AAEF,mCAAmC;AACnC,eAAO,MAAM,WAAW,EAAE,kBAczB,CAAC;AAEF,yCAAyC;AACzC,eAAO,MAAM,gBAAgB,EAAE,kBAa9B,CAAC;AAEF,uCAAuC;AACvC,eAAO,MAAM,cAAc,EAAE,kBAa5B,CAAC;AAEF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAKpB,CAAC"}

package/esm/src/oauth/providers/microsoft.js

@@ -10,10 +10,12 @@ const microsoftBase = {
     additionalAuthParams: {
         response_mode: "query",
     },
+    pkceMode: "supported",
 };
 /** Configuration used by outlook. */
 export const outlookConfig = {
     ...microsoftBase,
+    additionalAuthParams: { ...microsoftBase.additionalAuthParams },
     serviceId: "outlook",
     displayName: "Outlook",
     apiBaseUrl: graphApiBaseUrl,
@@ -21,31 +23,34 @@ export const outlookConfig = {
         "Mail.Read",
         "Mail.Send",
         "Mail.ReadWrite",
+        "Mail.Read.Shared",
         "Calendars.Read",
         "Calendars.ReadWrite",
-        "User.Read",
+        "Group.Read.All",
+        "Group-Conversation.Read.All",
         "offline_access",
     ],
 };
 /** Configuration used by teams. */
 export const teamsConfig = {
     ...microsoftBase,
+    additionalAuthParams: { ...microsoftBase.additionalAuthParams },
     serviceId: "teams",
     displayName: "Microsoft Teams",
     apiBaseUrl: graphApiBaseUrl,
     defaultScopes: [
-        "Team.ReadBasic.All",
-        "Channel.ReadBasic.All",
         "Chat.Read",
         "Chat.ReadWrite",
-        "ChannelMessage.Read.All",
-        "User.Read",
+        "ChannelMessage.Send",
+        "Channel.ReadBasic.All",
+        "Team.ReadBasic.All",
         "offline_access",
     ],
 };
 /** Configuration used by share point. */
 export const sharePointConfig = {
     ...microsoftBase,
+    additionalAuthParams: { ...microsoftBase.additionalAuthParams },
     serviceId: "sharepoint",
     displayName: "SharePoint",
     apiBaseUrl: graphApiBaseUrl,
@@ -54,13 +59,13 @@ export const sharePointConfig = {
         "Sites.ReadWrite.All",
         "Files.Read.All",
         "Files.ReadWrite.All",
-        "User.Read",
         "offline_access",
     ],
 };
 /** Configuration used by one drive. */
 export const oneDriveConfig = {
     ...microsoftBase,
+    additionalAuthParams: { ...microsoftBase.additionalAuthParams },
     serviceId: "onedrive",
     displayName: "OneDrive",
     apiBaseUrl: graphApiBaseUrl,
@@ -69,7 +74,6 @@ export const oneDriveConfig = {
         "Files.ReadWrite",
         "Files.Read.All",
         "Files.ReadWrite.All",
-        "User.Read",
         "offline_access",
     ],
 };

package/esm/src/oauth/schemas/index.d.ts

@@ -3,5 +3,5 @@
  *
  * @module oauth/schemas
  */
-export { type AuthorizationUrlOptions, AuthorizationUrlOptionsSchema, type OAuthProviderConfig, OAuthProviderConfigSchema, type OAuthServiceConfig, OAuthServiceConfigSchema, type OAuthState, OAuthStateSchema, type OAuthTokens, OAuthTokensSchema, type TokenExchangeOptions, TokenExchangeOptionsSchema, type TokenExchangeResult, TokenExchangeResultSchema, } from "./oauth.schema.js";
+export { type AuthorizationUrlOptions, AuthorizationUrlOptionsSchema, getAuthorizationUrlOptionsSchema, getOAuthProviderConfigSchema, getOAuthServiceConfigSchema, getOAuthStateSchema, getOAuthTokensSchema, getTokenExchangeOptionsSchema, getTokenExchangeResultSchema, type OAuthProviderConfig, OAuthProviderConfigSchema, type OAuthServiceConfig, OAuthServiceConfigSchema, type OAuthState, OAuthStateSchema, type OAuthTokens, OAuthTokensSchema, type TokenExchangeOptions, TokenExchangeOptionsSchema, type TokenExchangeResult, TokenExchangeResultSchema, } from "./oauth.schema.js";
 //# sourceMappingURL=index.d.ts.map

package/esm/src/oauth/schemas/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/oauth/schemas/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,KAAK,uBAAuB,EAC5B,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,KAAK,UAAU,EACf,gBAAgB,EAChB,KAAK,WAAW,EAChB,iBAAiB,EACjB,KAAK,oBAAoB,EACzB,0BAA0B,EAC1B,KAAK,mBAAmB,EACxB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/oauth/schemas/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,KAAK,uBAAuB,EAC5B,6BAA6B,EAC7B,gCAAgC,EAChC,4BAA4B,EAC5B,2BAA2B,EAC3B,mBAAmB,EACnB,oBAAoB,EACpB,6BAA6B,EAC7B,4BAA4B,EAC5B,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,kBAAkB,EACvB,wBAAwB,EACxB,KAAK,UAAU,EACf,gBAAgB,EAChB,KAAK,WAAW,EAChB,iBAAiB,EACjB,KAAK,oBAAoB,EACzB,0BAA0B,EAC1B,KAAK,mBAAmB,EACxB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC"}

package/esm/src/oauth/schemas/index.js

@@ -3,4 +3,4 @@
  *
  * @module oauth/schemas
  */
-export { AuthorizationUrlOptionsSchema, OAuthProviderConfigSchema, OAuthServiceConfigSchema, OAuthStateSchema, OAuthTokensSchema, TokenExchangeOptionsSchema, TokenExchangeResultSchema, } from "./oauth.schema.js";
+export { AuthorizationUrlOptionsSchema, getAuthorizationUrlOptionsSchema, getOAuthProviderConfigSchema, getOAuthServiceConfigSchema, getOAuthStateSchema, getOAuthTokensSchema, getTokenExchangeOptionsSchema, getTokenExchangeResultSchema, OAuthProviderConfigSchema, OAuthServiceConfigSchema, OAuthStateSchema, OAuthTokensSchema, TokenExchangeOptionsSchema, TokenExchangeResultSchema, } from "./oauth.schema.js";

package/esm/src/oauth/schemas/oauth.schema.d.ts

@@ -1,4 +1,5 @@
 import type { InferSchema } from "../../extensions/schema/index.js";
+import { type OAuthStateMetadata } from "../state-metadata.js";
 export declare const getOAuthProviderConfigSchema: () => import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
     providerId: import("../../internal-agents/schema.js").Schema<string>;
     displayName: import("../../internal-agents/schema.js").Schema<string>;
@@ -11,6 +12,15 @@ export declare const getOAuthProviderConfigSchema: () => import("../../internal-
     additionalAuthParams: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
     additionalTokenParams: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
     useBasicAuth: import("../../internal-agents/schema.js").Schema<boolean | undefined>;
+    pkceMode: import("../../internal-agents/schema.js").Schema<string | undefined>;
+    runtimeSupport: import("../../internal-agents/schema.js").Schema<string | undefined>;
+    tokenRequestFormat: import("../../internal-agents/schema.js").Schema<string | undefined>;
+    tokenRequestHeaders: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
+    apiHeaders: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
+    scopeSeparator: import("../../internal-agents/schema.js").Schema<string | undefined>;
+    requestTimeoutMs: import("../../internal-agents/schema.js").Schema<number | undefined>;
+    maxTokenResponseBytes: import("../../internal-agents/schema.js").Schema<number | undefined>;
+    maxApiResponseBytes: import("../../internal-agents/schema.js").Schema<number | undefined>;
     tokenResponseMapping: import("../../internal-agents/schema.js").Schema<Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
         accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
         refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
@@ -32,6 +42,15 @@ export declare const getOAuthServiceConfigSchema: () => import("../../internal-a
     additionalAuthParams?: Record<string, string> | undefined;
     additionalTokenParams?: Record<string, string> | undefined;
     useBasicAuth?: boolean | undefined;
+    pkceMode?: string | undefined;
+    runtimeSupport?: string | undefined;
+    tokenRequestFormat?: string | undefined;
+    tokenRequestHeaders?: Record<string, string> | undefined;
+    apiHeaders?: Record<string, string> | undefined;
+    scopeSeparator?: string | undefined;
+    requestTimeoutMs?: number | undefined;
+    maxTokenResponseBytes?: number | undefined;
+    maxApiResponseBytes?: number | undefined;
     tokenResponseMapping?: Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
         accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
         refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
@@ -59,7 +78,7 @@ export declare const getOAuthStateSchema: () => import("../../internal-agents/sc
     redirectUri: import("../../internal-agents/schema.js").Schema<string>;
     scopes: import("../../internal-agents/schema.js").Schema<string[]>;
     createdAt: import("../../internal-agents/schema.js").Schema<number>;
-    metadata: import("../../internal-agents/schema.js").Schema<Record<string, unknown> | undefined>;
+    metadata: import("../../internal-agents/schema.js").Schema<OAuthStateMetadata | undefined>;
 }>>;
 export declare const getTokenExchangeResultSchema: () => import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
     success: import("../../internal-agents/schema.js").Schema<boolean>;
@@ -112,6 +131,15 @@ export declare const OAuthProviderConfigSchema: import("../../internal-agents/sc
     additionalAuthParams: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
     additionalTokenParams: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
     useBasicAuth: import("../../internal-agents/schema.js").Schema<boolean | undefined>;
+    pkceMode: import("../../internal-agents/schema.js").Schema<string | undefined>;
+    runtimeSupport: import("../../internal-agents/schema.js").Schema<string | undefined>;
+    tokenRequestFormat: import("../../internal-agents/schema.js").Schema<string | undefined>;
+    tokenRequestHeaders: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
+    apiHeaders: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
+    scopeSeparator: import("../../internal-agents/schema.js").Schema<string | undefined>;
+    requestTimeoutMs: import("../../internal-agents/schema.js").Schema<number | undefined>;
+    maxTokenResponseBytes: import("../../internal-agents/schema.js").Schema<number | undefined>;
+    maxApiResponseBytes: import("../../internal-agents/schema.js").Schema<number | undefined>;
     tokenResponseMapping: import("../../internal-agents/schema.js").Schema<Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
         accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
         refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
@@ -133,6 +161,15 @@ export declare const OAuthServiceConfigSchema: import("../../internal-agents/sch
     additionalAuthParams?: Record<string, string> | undefined;
     additionalTokenParams?: Record<string, string> | undefined;
     useBasicAuth?: boolean | undefined;
+    pkceMode?: string | undefined;
+    runtimeSupport?: string | undefined;
+    tokenRequestFormat?: string | undefined;
+    tokenRequestHeaders?: Record<string, string> | undefined;
+    apiHeaders?: Record<string, string> | undefined;
+    scopeSeparator?: string | undefined;
+    requestTimeoutMs?: number | undefined;
+    maxTokenResponseBytes?: number | undefined;
+    maxApiResponseBytes?: number | undefined;
     tokenResponseMapping?: Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
         accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
         refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
@@ -159,7 +196,7 @@ export declare const OAuthStateSchema: import("../../internal-agents/schema.js")
     redirectUri: import("../../internal-agents/schema.js").Schema<string>;
     scopes: import("../../internal-agents/schema.js").Schema<string[]>;
     createdAt: import("../../internal-agents/schema.js").Schema<number>;
-    metadata: import("../../internal-agents/schema.js").Schema<Record<string, unknown> | undefined>;
+    metadata: import("../../internal-agents/schema.js").Schema<OAuthStateMetadata | undefined>;
 }>>;
 export declare const TokenExchangeResultSchema: import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
     success: import("../../internal-agents/schema.js").Schema<boolean>;

package/esm/src/oauth/schemas/oauth.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.schema.d.ts","sourceRoot":"","sources":["../../../../src/src/oauth/schemas/oauth.schema.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAEpE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;GAwBxC,CAAC;AAEF,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;EAMvC,CAAC;AAEF,eAAO,MAAM,oBAAoB;;;;;;;GAShC,CAAC;AAEF,yCAAyC;AACzC,eAAO,MAAM,mBAAmB;;;;;;;GAS/B,CAAC;AAEF,eAAO,MAAM,4BAA4B;;;;;;;;;;;;GAOxC,CAAC;AAEF,eAAO,MAAM,gCAAgC;;;;;;GAQ5C,CAAC;AAEF,eAAO,MAAM,6BAA6B;;;;GAMzC,CAAC;AAGF,4CAA4C;AAC5C,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,4BAA4B,CAAC,CAAC,CAAC;AAC/F,2CAA2C;AAC3C,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,2BAA2B,CAAC,CAAC,CAAC;AAC7F,4CAA4C;AAC5C,MAAM,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC;AAC/E,uBAAuB;AACvB,MAAM,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC;AAC7E,2CAA2C;AAC3C,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,4BAA4B,CAAC,CAAC,CAAC;AAC/F,6CAA6C;AAC7C,MAAM,MAAM,uBAAuB,GAAG,WAAW,CAC/C,UAAU,CAAC,OAAO,gCAAgC,CAAC,CACpD,CAAC;AACF,0CAA0C;AAC1C,MAAM,MAAM,oBAAoB,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,6BAA6B,CAAC,CAAC,CAAC;AAGjG,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;GAA2C,CAAC;AAClF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;EAA0C,CAAC;AAChF,eAAO,MAAM,iBAAiB;;;;;;;GAAmC,CAAC;AAClE,eAAO,MAAM,gBAAgB;;;;;;;GAAkC,CAAC;AAChE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;GAA2C,CAAC;AAClF,eAAO,MAAM,6BAA6B;;;;;;GAA+C,CAAC;AAC1F,eAAO,MAAM,0BAA0B;;;;GAA4C,CAAC"}
+{"version":3,"file":"oauth.schema.d.ts","sourceRoot":"","sources":["../../../../src/src/oauth/schemas/oauth.schema.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAepE,OAAO,EAAE,KAAK,kBAAkB,EAA8B,MAAM,sBAAsB,CAAC;AAmD3F,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsFxC,CAAC;AAEF,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBvC,CAAC;AAEF,eAAO,MAAM,oBAAoB;;;;;;;GAwBhC,CAAC;AAEF,yCAAyC;AACzC,eAAO,MAAM,mBAAmB;;;;;;;GAY/B,CAAC;AAEF,eAAO,MAAM,4BAA4B;;;;;;;;;;;;GAuCxC,CAAC;AAEF,eAAO,MAAM,gCAAgC;;;;;;GAoB5C,CAAC;AAEF,eAAO,MAAM,6BAA6B;;;;GASzC,CAAC;AAGF,4CAA4C;AAC5C,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,4BAA4B,CAAC,CAAC,CAAC;AAC/F,2CAA2C;AAC3C,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,2BAA2B,CAAC,CAAC,CAAC;AAC7F,4CAA4C;AAC5C,MAAM,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC;AAC/E,uBAAuB;AACvB,MAAM,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC;AAC7E,2CAA2C;AAC3C,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,4BAA4B,CAAC,CAAC,CAAC;AAC/F,6CAA6C;AAC7C,MAAM,MAAM,uBAAuB,GAAG,WAAW,CAC/C,UAAU,CAAC,OAAO,gCAAgC,CAAC,CACpD,CAAC;AACF,0CAA0C;AAC1C,MAAM,MAAM,oBAAoB,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,6BAA6B,CAAC,CAAC,CAAC;AAGjG,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAA2C,CAAC;AAClF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAA0C,CAAC;AAChF,eAAO,MAAM,iBAAiB;;;;;;;GAAmC,CAAC;AAClE,eAAO,MAAM,gBAAgB;;;;;;;GAAkC,CAAC;AAChE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;GAA2C,CAAC;AAClF,eAAO,MAAM,6BAA6B;;;;;;GAA+C,CAAC;AAC1F,eAAO,MAAM,0BAA0B;;;;GAA4C,CAAC"}