microsoft-agent 1.0.1__tar.gz → 2.3.2__tar.gz

microsoft_agent-2.3.2/.env.example

@@ -0,0 +1,100 @@
+# Microsoft identity (values intentionally blank; supply them after app enrollment)
+MICROSOFT_TENANT_ID=
+MICROSOFT_CLIENT_ID=
+MICROSOFT_AUTHORITY_HOST=https://login.microsoftonline.com
+MICROSOFT_GRAPH_BASE_URL=https://graph.microsoft.com/v1.0
+MICROSOFT_GRAPH_TLS_PROFILE=
+MICROSOFT_GRAPH_TLS_PROFILE_REF=
+
+# delegated | application | on_behalf_of | external_token |
+# managed_identity | workload_identity
+MICROSOFT_AUTH_MODE=delegated
+MICROSOFT_LOGIN_METHOD=auto
+MICROSOFT_ENABLE_BROKER=true
+MICROSOFT_ALLOW_DEVICE_CODE=false
+MICROSOFT_REQUIRE_SECURE_CACHE=true
+
+# Named least-privilege bundles. Add device_read/device_admin only for Intune.
+MICROSOFT_PERMISSION_PROFILES=productivity,collaboration
+MICROSOFT_GRAPH_SCOPES=
+
+# Tools are registered, but side effects remain disabled until explicitly enabled.
+MICROSOFT_ENABLED_TOOL_GROUPS=misc,auth,meta,mail,files,calendar,notes,tasks,contacts,user,chat,teams,sites,search,groups,communications,documents,power_platform,windows,intune
+MICROSOFT_ALLOW_WRITES=false
+MICROSOFT_ALLOW_DESTRUCTIVE=false
+
+# Required only for graph projection/ingestion. Resolve from AgentConfig or a
+# secret store; use at least 32 bytes and never reuse an identity credential.
+MICROSOFT_INGESTION_PSEUDONYMIZATION_KEY_REF=
+
+# Complex Power Platform, Intune, and Windows companion allowlists.
+MICROSOFT_INTEGRATIONS_CONFIG_PATH=
+MICROSOFT_DOCUMENT_ARTIFACT_ROOT=
+MICROSOFT_DOCUMENT_TEMPLATE_ROOT=
+MICROSOFT_DATAVERSE_ENVIRONMENT_URL=
+MICROSOFT_DATAVERSE_AUDIENCE=
+MICROSOFT_POWER_AUTOMATE_NAMED_FLOWS_JSON={}
+MICROSOFT_POWER_PLATFORM_ALLOW_LIFECYCLE_CHANGES=false
+MICROSOFT_OFFICE_ADDIN_ORIGINS=
+
+# Confidential modes: prefer a certificate, managed identity, or workload identity.
+MICROSOFT_CLIENT_CERTIFICATE_PATH=
+MICROSOFT_CLIENT_CERTIFICATE_THUMBPRINT=
+MICROSOFT_CLIENT_CERTIFICATE_PASSWORD_REF=
+MICROSOFT_CLIENT_SECRET_REF=
+MICROSOFT_MANAGED_IDENTITY_CLIENT_ID=
+MICROSOFT_WORKLOAD_IDENTITY_TOKEN_FILE=
+AZURE_FEDERATED_TOKEN_FILE=
+
+# Companion relay TLS uses the same deployment-owned trust-profile contract.
+MICROSOFT_COMPANION_TLS_PROFILE=
+MICROSOFT_COMPANION_TLS_PROFILE_REF=
+
+# Per-domain tool registration toggles. Set false to suppress a domain.
+ADMINTOOL=true
+AGREEMENTSTOOL=true
+APPLICATIONSTOOL=true
+AUDITTOOL=true
+AUTHTOOL=true
+CALENDARTOOL=true
+CHATTOOL=true
+COMMUNICATIONSTOOL=true
+CONNECTIONSTOOL=true
+CONTACTSTOOL=true
+DEVICESTOOL=true
+DIRECTORYTOOL=true
+DOCUMENTTOOL=true
+DOMAINSTOOL=true
+EDUCATIONTOOL=true
+EMPLOYEE_EXPERIENCETOOL=true
+FILESTOOL=true
+GROUPSTOOL=true
+IDENTITYTOOL=true
+INTUNETOOL=true
+KGTOOL=true
+MAILTOOL=true
+METATOOL=true
+NOTESTOOL=true
+ORGANIZATIONTOOL=true
+PLACESTOOL=true
+POLICIESTOOL=true
+POWER_PLATFORMTOOL=true
+PRINTTOOL=true
+PRIVACYTOOL=true
+REPORTSTOOL=true
+SEARCHTOOL=true
+SECURITYTOOL=true
+SITESTOOL=true
+SOLUTIONSTOOL=true
+STORAGETOOL=true
+SUBSCRIPTIONSTOOL=true
+TASKSTOOL=true
+TEAMSTOOL=true
+USERTOOL=true
+WINDOWS_COMPANIONTOOL=true
+
+# Local MCP defaults. Require an authenticated transport before non-loopback use.
+TRANSPORT=stdio
+HOST=127.0.0.1
+PORT=8000
+AUTH_TYPE=oidc

microsoft_agent-2.3.2/MANIFEST.in

@@ -0,0 +1,10 @@
+include README.md LICENSE
+include .env.example connector_manifest.yml mkdocs.yml
+recursive-include microsoft_agent *.py *.json *.md *.ttl *.yaml
+recursive-include docs *.md
+recursive-include deployment *.json *.md *.ps1 *.conf *.service *.env
+recursive-include office_addin *.json *.xml *.md *.py *.ts *.cjs *.css *.html *.svg *.b64
+prune microsoft_agent/agent_data
+prune office_addin/node_modules
+prune office_addin/dist
+global-exclude *.py[cod] *.db *.wal __pycache__ .DS_Store