> = {
twitch: "https://docs.spacebot.sh/twitch-setup",
mattermost: "https://docs.spacebot.sh/mattermost-setup",
signal: "https://docs.spacebot.sh/signal-setup",
+ teams: "https://docs.spacebot.sh/teams-setup",
};
// --- Platform Catalog (Left Column) ---
@@ -78,6 +81,7 @@ export function PlatformCatalog({onAddInstance}: PlatformCatalogProps) {
"webhook",
"mattermost",
"signal",
+ "teams",
];
const COMING_SOON = [
@@ -811,6 +815,22 @@ export function AddInstanceCard({
credentials.signal_dm_allowed_users = result.entries.join(",");
}
}
+ } else if (platform === "teams") {
+ if (
+ !credentialInputs.teams_app_id?.trim() ||
+ !credentialInputs.teams_client_secret?.trim() ||
+ !credentialInputs.teams_tenant_id?.trim()
+ ) {
+ setMessage({
+ text: "App ID, client secret, and tenant ID are required",
+ type: "error",
+ });
+ return;
+ }
+ credentials.teams_app_id = credentialInputs.teams_app_id.trim();
+ credentials.teams_client_secret =
+ credentialInputs.teams_client_secret.trim();
+ credentials.teams_tenant_id = credentialInputs.teams_tenant_id.trim();
}
if (!isDefault && !instanceName.trim()) {
@@ -1304,6 +1324,63 @@ export function AddInstanceCard({
)}
+ {platform === "teams" && (
+ <>
+
+
+ App ID
+
+
+
+
+ Client Secret
+
+
+
+
+ Tenant ID
+
+
+
+ )}
+
{platform === "signal" && (
<>
@@ -1521,7 +1598,7 @@ function BindingForm({
)}
- {(platform === "discord" || platform === "slack") && (
+ {(platform === "discord" || platform === "slack" || platform === "teams") && (
Channel IDs
diff --git a/interface/src/components/settings/ChannelsSection.tsx b/interface/src/components/settings/ChannelsSection.tsx
index 3061be822..036ca684f 100644
--- a/interface/src/components/settings/ChannelsSection.tsx
+++ b/interface/src/components/settings/ChannelsSection.tsx
@@ -27,6 +27,8 @@ export function ChannelsSection() {
function isDefaultAdd(): boolean {
if (!addingPlatform) return true;
+ // Teams only supports a single default instance; never show the named-instance form.
+ if (addingPlatform === "teams") return true;
return !instances.some(
(inst) => inst.platform === addingPlatform && inst.name === null,
);
diff --git a/interface/src/components/settings/types.ts b/interface/src/components/settings/types.ts
index 0f4d29ba0..ee4d0cd6d 100644
--- a/interface/src/components/settings/types.ts
+++ b/interface/src/components/settings/types.ts
@@ -22,7 +22,8 @@ export type Platform =
| "email"
| "webhook"
| "mattermost"
- | "signal";
+ | "signal"
+ | "teams";
export interface GlobalSettingsSectionProps {
settings: GlobalSettingsResponse | undefined;
diff --git a/interface/src/lib/platformIcons.tsx b/interface/src/lib/platformIcons.tsx
index a79dca881..5bbe281e0 100644
--- a/interface/src/lib/platformIcons.tsx
+++ b/interface/src/lib/platformIcons.tsx
@@ -1,5 +1,5 @@
import { FontAwesomeIcon } from "@fortawesome/react-fontawesome";
-import { faDiscord, faSlack, faTelegram, faTwitch, faWhatsapp } from "@fortawesome/free-brands-svg-icons";
+import { faDiscord, faSlack, faTelegram, faTwitch, faWhatsapp, faMicrosoft } from "@fortawesome/free-brands-svg-icons";
import { faLink, faEnvelope, faComments, faComment, faServer, faCommentDots } from "@fortawesome/free-solid-svg-icons";
interface PlatformIconProps {
@@ -19,6 +19,7 @@ export function PlatformIcon({ platform, className = "text-ink-faint", size = "1
webhook: faLink,
email: faEnvelope,
mattermost: faServer,
+ teams: faMicrosoft,
whatsapp: faWhatsapp,
signal: faComment,
matrix: faComments,
diff --git a/src/api/messaging.rs b/src/api/messaging.rs
index 6aad16fe3..fd6b2f9aa 100644
--- a/src/api/messaging.rs
+++ b/src/api/messaging.rs
@@ -105,6 +105,13 @@ pub(super) struct InstanceCredentials {
mattermost_base_url: Option,
#[serde(default)]
mattermost_token: Option,
+ // Teams credentials
+ #[serde(default)]
+ teams_app_id: Option,
+ #[serde(default)]
+ teams_client_secret: Option,
+ #[serde(default)]
+ teams_tenant_id: Option,
// Signal credentials
#[serde(default)]
signal_http_url: Option,
@@ -796,6 +803,47 @@ pub(super) async fn messaging_status(
enabled: false,
});
+ // Teams status (single-instance only in v1)
+ let _teams_status = doc
+ .get("messaging")
+ .and_then(|m| m.get("teams"))
+ .map(|t| {
+ let has_app_id = t
+ .get("app_id")
+ .and_then(|v| v.as_str())
+ .is_some_and(|s| !s.is_empty());
+ let has_client_secret = t
+ .get("client_secret")
+ .and_then(|v| v.as_str())
+ .is_some_and(|s| !s.is_empty());
+ let has_tenant_id = t
+ .get("tenant_id")
+ .and_then(|v| v.as_str())
+ .is_some_and(|s| !s.is_empty());
+ let enabled = t.get("enabled").and_then(|v| v.as_bool()).unwrap_or(false);
+ let configured = has_app_id && has_client_secret && has_tenant_id;
+
+ if configured {
+ push_instance_status(
+ &mut instances,
+ bindings,
+ "teams",
+ None,
+ true,
+ enabled,
+ );
+ }
+
+ PlatformStatus {
+ configured,
+ enabled: configured && enabled,
+ }
+ })
+ .unwrap_or(PlatformStatus {
+ configured: false,
+ enabled: false,
+ });
+
// Signal status and instances
let signal_status = doc
.get("messaging")
@@ -1559,6 +1607,41 @@ pub(super) async fn toggle_platform(
}
}
}
+ "teams" => {
+ if let Some(teams_config) = &new_config.messaging.teams
+ && !teams_config.app_id.is_empty()
+ && !teams_config.client_secret.is_empty()
+ && !teams_config.tenant_id.is_empty()
+ {
+ let permissions = {
+ let perms = crate::config::TeamsPermissions::from_config(
+ teams_config,
+ &new_config.bindings,
+ );
+ std::sync::Arc::new(arc_swap::ArcSwap::from_pointee(perms))
+ };
+ let instance_dir = state.instance_dir.load();
+ match crate::messaging::teams::build_teams_adapter(
+ "teams",
+ &teams_config.app_id,
+ &teams_config.client_secret,
+ &teams_config.tenant_id,
+ teams_config.port,
+ &teams_config.bind,
+ permissions,
+ &instance_dir,
+ ) {
+ Ok(adapter) => {
+ if let Err(error) = manager.register_and_start(adapter).await {
+ tracing::error!(%error, "failed to start teams adapter on toggle");
+ }
+ }
+ Err(error) => {
+ tracing::error!(%error, "failed to build teams adapter on toggle");
+ }
+ }
+ }
+ }
_ => {}
}
}
@@ -1627,7 +1710,15 @@ pub(super) async fn create_messaging_instance(
if !matches!(
platform.as_str(),
- "discord" | "slack" | "telegram" | "twitch" | "email" | "webhook" | "mattermost" | "signal"
+ "discord"
+ | "slack"
+ | "telegram"
+ | "twitch"
+ | "email"
+ | "webhook"
+ | "mattermost"
+ | "signal"
+ | "teams"
) {
return Ok(Json(MessagingInstanceActionResponse {
success: false,
@@ -1671,6 +1762,14 @@ pub(super) async fn create_messaging_instance(
}
}
+ // Teams v1: single bot only — named instances not supported yet
+ if platform.as_str() == "teams" && request.name.is_some() {
+ return Ok(Json(MessagingInstanceActionResponse {
+ success: false,
+ message: "Teams supports a single bot in this version; named instances are not available yet.".to_string(),
+ }));
+ }
+
let config_path = state.config_path.read().await.clone();
let content = tokio::fs::read_to_string(&config_path)
.await
@@ -1841,6 +1940,25 @@ pub(super) async fn create_messaging_instance(
}
}
}
+ "teams" => {
+ let app_id = credentials.teams_app_id.as_deref().unwrap_or("").trim();
+ let client_secret = credentials
+ .teams_client_secret
+ .as_deref()
+ .unwrap_or("")
+ .trim();
+ let tenant_id = credentials.teams_tenant_id.as_deref().unwrap_or("").trim();
+ if app_id.is_empty() || client_secret.is_empty() || tenant_id.is_empty() {
+ return Ok(Json(MessagingInstanceActionResponse {
+ success: false,
+ message: "App ID, client secret, and tenant ID are all required"
+ .to_string(),
+ }));
+ }
+ platform_table["app_id"] = toml_edit::value(app_id);
+ platform_table["client_secret"] = toml_edit::value(client_secret);
+ platform_table["tenant_id"] = toml_edit::value(tenant_id);
+ }
_ => {}
}
if let Some(value) = request.enabled {
@@ -2080,7 +2198,15 @@ pub(super) async fn delete_messaging_instance(
if !matches!(
platform.as_str(),
- "discord" | "slack" | "telegram" | "twitch" | "email" | "webhook" | "mattermost" | "signal"
+ "discord"
+ | "slack"
+ | "telegram"
+ | "twitch"
+ | "email"
+ | "webhook"
+ | "mattermost"
+ | "signal"
+ | "teams"
) {
return Ok(Json(MessagingInstanceActionResponse {
success: false,
@@ -2192,6 +2318,12 @@ pub(super) async fn delete_messaging_instance(
table.remove("group_allowed_users");
table.remove("ignore_stories");
}
+ "teams" => {
+ table.remove("app_id");
+ table.remove("client_secret");
+ table.remove("tenant_id");
+ table.remove("dm_allowed_users");
+ }
_ => {}
}
}
From f9224a7b5e2a357351cc1c40e1f1a9acb58bbd6d Mon Sep 17 00:00:00 2001
From: "S.L" <101876007+slvnlrt@users.noreply.github.com>
Date: Mon, 29 Jun 2026 15:46:21 +0200
Subject: [PATCH 5/8] feat(api): Teams app-package builder (manifest + icons +
zip)
---
Cargo.lock | 1 +
Cargo.toml | 3 +
src/api.rs | 1 +
src/api/teams_package.rs | 198 +++++++++++++++++++++++++++++++++++++++
4 files changed, 203 insertions(+)
create mode 100644 src/api/teams_package.rs
diff --git a/Cargo.lock b/Cargo.lock
index bc81e3480..9fb23a9d8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -8506,6 +8506,7 @@ dependencies = [
"futures",
"hex",
"ignore",
+ "image",
"imap",
"indoc",
"jsonwebtoken",
diff --git a/Cargo.toml b/Cargo.toml
index bc89322b2..14757ece8 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -156,6 +156,9 @@ jsonwebtoken = "9.3"
zip = "2"
tempfile = "3"
+# Icon resizing for the generated Teams app package (already in the lockfile transitively).
+image = { version = "0.25", default-features = false, features = ["png"] }
+
# Prometheus metrics (optional, behind "metrics" feature)
prometheus = { version = "0.13", optional = true }
pdf-extract = "0.10.0"
diff --git a/src/api.rs b/src/api.rs
index 7ff078a3a..b63b8d9f8 100644
--- a/src/api.rs
+++ b/src/api.rs
@@ -32,6 +32,7 @@ pub(crate) mod ssh;
mod state;
mod system;
mod tasks;
+mod teams_package;
mod tools;
mod usage;
mod wiki;
diff --git a/src/api/teams_package.rs b/src/api/teams_package.rs
new file mode 100644
index 000000000..f2eb90e15
--- /dev/null
+++ b/src/api/teams_package.rs
@@ -0,0 +1,198 @@
+//! Generates a sideloadable Microsoft Teams app package (manifest + icons, zipped)
+//! so operators don't have to hand-write the manifest. The manifest gotchas
+//! (schema 1.17, distinct app id, lowercase scopes, no packageName, required
+//! accentColor/validDomains) are baked in; default icons are the Spacebot logo.
+
+use std::io::{Cursor, Write as _};
+use std::path::Path;
+
+use image::imageops::FilterType;
+use zip::CompressionMethod;
+use zip::write::SimpleFileOptions;
+
+/// The Spacebot logo, bundled at compile time. 384x384 RGBA PNG.
+const SPACEBOT_LOGO: &[u8] = include_bytes!("../../interface/public/ball.png");
+
+/// Build the Teams app manifest. `app_id` is the bot's App (client) ID
+/// (`bots[].botId`); `manifest_id` is the distinct Teams app id (`id`).
+pub fn teams_manifest_json(app_id: &str, manifest_id: &str) -> serde_json::Value {
+ serde_json::json!({
+ "$schema": "https://developer.microsoft.com/en-us/json-schemas/teams/v1.17/MicrosoftTeams.schema.json",
+ "manifestVersion": "1.17",
+ "version": "1.0.0",
+ "id": manifest_id,
+ "developer": {
+ "name": "Spacebot",
+ "websiteUrl": "https://github.com/spacedriveapp/spacebot",
+ "privacyUrl": "https://github.com/spacedriveapp/spacebot",
+ "termsOfUseUrl": "https://github.com/spacedriveapp/spacebot"
+ },
+ "icons": { "color": "icon-color.png", "outline": "icon-outline.png" },
+ "name": { "short": "Spacebot", "full": "Spacebot — AI assistant" },
+ "description": {
+ "short": "AI assistant powered by Spacebot.",
+ "full": "Chat with your Spacebot agent in Microsoft Teams."
+ },
+ "accentColor": "#6264A7",
+ "bots": [{
+ "botId": app_id,
+ "scopes": ["personal", "team", "groupchat"],
+ "supportsFiles": false,
+ "isNotificationOnly": false
+ }],
+ "validDomains": []
+ })
+}
+// NOTE: do NOT add a `permissions` key. The manifest validated against real
+// Teams (docs/design-docs/teams-setup.md) has no `permissions` field; schema
+// 1.17 rejects undefined/extra properties, and `permissions` is deprecated.
+
+/// Render the two Teams icons from the bundled logo: color 192x192 (the logo
+/// resized) and outline 32x32 (a white silhouette on transparent, per Teams'
+/// outline-icon requirement).
+pub fn render_default_icons() -> anyhow::Result<(Vec, Vec)> {
+ let logo = image::load_from_memory(SPACEBOT_LOGO)?;
+
+ let mut color = Vec::new();
+ logo.resize_exact(192, 192, FilterType::Lanczos3)
+ .write_to(&mut Cursor::new(&mut color), image::ImageFormat::Png)?;
+
+ // Outline: resize to 32x32, then make every non-transparent pixel white
+ // (Teams renders the outline icon monochrome on a transparent background).
+ let mut outline_img = logo.resize_exact(32, 32, FilterType::Lanczos3).to_rgba8();
+ for px in outline_img.pixels_mut() {
+ let alpha = px.0[3];
+ px.0 = [255, 255, 255, alpha];
+ }
+ let mut outline = Vec::new();
+ image::DynamicImage::ImageRgba8(outline_img)
+ .write_to(&mut Cursor::new(&mut outline), image::ImageFormat::Png)?;
+
+ Ok((color, outline))
+}
+
+/// Build the `.zip` package: manifest.json + the two icons at the archive root.
+pub fn build_app_package(app_id: &str, manifest_id: &str) -> anyhow::Result> {
+ let manifest = serde_json::to_vec_pretty(&teams_manifest_json(app_id, manifest_id))?;
+ let (color, outline) = render_default_icons()?;
+
+ let mut cursor = Cursor::new(Vec::new());
+ let mut zip = zip::ZipWriter::new(&mut cursor);
+ let opts = SimpleFileOptions::default()
+ .compression_method(CompressionMethod::Deflated)
+ .unix_permissions(0o644);
+
+ for (name, bytes) in [
+ ("manifest.json", manifest.as_slice()),
+ ("icon-color.png", color.as_slice()),
+ ("icon-outline.png", outline.as_slice()),
+ ] {
+ zip.start_file(name, opts)?;
+ zip.write_all(bytes)?;
+ }
+ zip.finish()?;
+ Ok(cursor.into_inner())
+}
+
+/// Read the persisted Teams app `id`, or generate+persist a fresh GUID. Keeping
+/// it stable means re-downloading produces the same `id`, so re-uploading the
+/// package updates the existing Teams app instead of creating a duplicate.
+pub fn load_or_create_manifest_id(instance_dir: &Path) -> String {
+ let path = instance_dir.join("teams_manifest_id.json");
+ if let Ok(contents) = std::fs::read_to_string(&path)
+ && let Ok(v) = serde_json::from_str::(&contents)
+ && let Some(id) = v.get("manifest_id").and_then(|x| x.as_str())
+ && !id.is_empty()
+ {
+ return id.to_string();
+ }
+ let id = uuid::Uuid::new_v4().to_string();
+ let tmp = path.with_extension("json.tmp");
+ let json = serde_json::json!({ "manifest_id": id }).to_string();
+ if std::fs::write(&tmp, &json).is_ok() {
+ if let Err(e) = std::fs::rename(&tmp, &path) {
+ tracing::warn!(%e, ?path, "teams manifest-id sidecar: rename failed");
+ }
+ } else {
+ tracing::warn!(?path, "teams manifest-id sidecar: write failed");
+ }
+ id
+}
+
+#[cfg(test)]
+mod tests {
+ use super::*;
+ use std::io::Read as _;
+
+ #[test]
+ fn manifest_has_required_fields_and_no_packagename() {
+ let m = teams_manifest_json(
+ "00000000-0000-0000-0000-000000000001",
+ "ffffffff-0000-0000-0000-000000000002",
+ );
+ assert_eq!(m["manifestVersion"], "1.17");
+ assert_eq!(m["id"], "ffffffff-0000-0000-0000-000000000002");
+ // id MUST differ from botId.
+ assert_ne!(m["id"], m["bots"][0]["botId"]);
+ assert_eq!(
+ m["bots"][0]["botId"],
+ "00000000-0000-0000-0000-000000000001"
+ );
+ assert_eq!(m["bots"][0]["scopes"][0], "personal");
+ assert_eq!(m["bots"][0]["scopes"][1], "team");
+ assert_eq!(m["bots"][0]["scopes"][2], "groupchat");
+ assert!(m.get("accentColor").is_some());
+ assert!(m.get("validDomains").is_some());
+ assert!(
+ m.get("packageName").is_none(),
+ "schema 1.17 rejects packageName"
+ );
+ assert_eq!(m["icons"]["color"], "icon-color.png");
+ assert_eq!(m["icons"]["outline"], "icon-outline.png");
+ }
+
+ #[test]
+ fn icons_render_at_required_dimensions() {
+ let (color, outline) = render_default_icons().expect("icons render");
+ let c = image::load_from_memory(&color).expect("color png");
+ assert_eq!((c.width(), c.height()), (192, 192));
+ let o = image::load_from_memory(&outline).expect("outline png");
+ assert_eq!((o.width(), o.height()), (32, 32));
+ }
+
+ #[test]
+ fn package_zip_contains_the_three_root_files() {
+ let bytes = build_app_package(
+ "00000000-0000-0000-0000-000000000001",
+ "ffffffff-0000-0000-0000-000000000002",
+ )
+ .expect("package builds");
+ let mut zip = zip::ZipArchive::new(std::io::Cursor::new(bytes)).expect("zip opens");
+ let names: Vec = (0..zip.len())
+ .map(|i| zip.by_index(i).unwrap().name().to_string())
+ .collect();
+ assert!(names.contains(&"manifest.json".to_string()));
+ assert!(names.contains(&"icon-color.png".to_string()));
+ assert!(names.contains(&"icon-outline.png".to_string()));
+ // manifest.json parses and round-trips the ids.
+ let mut mf = zip.by_name("manifest.json").unwrap();
+ let mut s = String::new();
+ mf.read_to_string(&mut s).unwrap();
+ let parsed: serde_json::Value = serde_json::from_str(&s).unwrap();
+ assert_eq!(
+ parsed["bots"][0]["botId"],
+ "00000000-0000-0000-0000-000000000001"
+ );
+ }
+
+ #[test]
+ fn manifest_id_sidecar_is_stable() {
+ let dir = std::env::temp_dir().join(format!("teams-pkg-test-{}", uuid::Uuid::new_v4()));
+ std::fs::create_dir_all(&dir).unwrap();
+ let a = load_or_create_manifest_id(&dir);
+ let b = load_or_create_manifest_id(&dir);
+ assert_eq!(a, b, "second call reuses the persisted id");
+ assert_eq!(a.len(), 36, "looks like a GUID");
+ std::fs::remove_dir_all(&dir).ok();
+ }
+}
From 1b8bea392a2547c36f679558b7d714f1cbbbc4d2 Mon Sep 17 00:00:00 2001
From: "S.L" <101876007+slvnlrt@users.noreply.github.com>
Date: Mon, 29 Jun 2026 15:58:10 +0200
Subject: [PATCH 6/8] feat(api): GET /messaging/teams/app-package download
endpoint
---
interface/src/api/schema.d.ts | 53 +++++++++++++++++++++++++++++++++
src/api/messaging.rs | 55 +++++++++++++++++++++++++++++++++++
src/api/server.rs | 1 +
3 files changed, 109 insertions(+)
diff --git a/interface/src/api/schema.d.ts b/interface/src/api/schema.d.ts
index 9dbd9cbbc..596325118 100644
--- a/interface/src/api/schema.d.ts
+++ b/interface/src/api/schema.d.ts
@@ -1439,6 +1439,22 @@ export interface paths {
patch?: never;
trace?: never;
};
+ "/messaging/teams/app-package": {
+ parameters: {
+ query?: never;
+ header?: never;
+ path?: never;
+ cookie?: never;
+ };
+ get: operations["download_teams_app_package"];
+ put?: never;
+ post?: never;
+ delete?: never;
+ options?: never;
+ head?: never;
+ patch?: never;
+ trace?: never;
+ };
"/messaging/toggle": {
parameters: {
query?: never;
@@ -8172,6 +8188,43 @@ export interface operations {
};
};
};
+ download_teams_app_package: {
+ parameters: {
+ query: {
+ /** @description Bot App (client) ID */
+ app_id: string;
+ };
+ header?: never;
+ path?: never;
+ cookie?: never;
+ };
+ requestBody?: never;
+ responses: {
+ /** @description Teams app package (zip) */
+ 200: {
+ headers: {
+ [name: string]: unknown;
+ };
+ content: {
+ "application/zip": unknown;
+ };
+ };
+ /** @description Missing or invalid app_id */
+ 400: {
+ headers: {
+ [name: string]: unknown;
+ };
+ content?: never;
+ };
+ /** @description Failed to build package */
+ 500: {
+ headers: {
+ [name: string]: unknown;
+ };
+ content?: never;
+ };
+ };
+ };
toggle_platform: {
parameters: {
query?: never;
diff --git a/src/api/messaging.rs b/src/api/messaging.rs
index fd6b2f9aa..d611fdb1c 100644
--- a/src/api/messaging.rs
+++ b/src/api/messaging.rs
@@ -1,6 +1,7 @@
use super::state::ApiState;
use axum::Json;
+use axum::extract::Query;
use axum::extract::State;
use axum::http::StatusCode;
use serde::{Deserialize, Serialize};
@@ -2432,6 +2433,60 @@ pub(super) async fn delete_messaging_instance(
}))
}
+#[derive(serde::Deserialize)]
+pub(super) struct TeamsPackageQuery {
+ /// The bot App (client) ID — becomes `bots[].botId` in the manifest.
+ app_id: String,
+}
+
+#[utoipa::path(
+ get,
+ path = "/messaging/teams/app-package",
+ params(("app_id" = String, Query, description = "Bot App (client) ID")),
+ responses(
+ (status = 200, description = "Teams app package (zip)", content_type = "application/zip"),
+ (status = 400, description = "Missing or invalid app_id"),
+ (status = 500, description = "Failed to build package"),
+ ),
+ tag = "messaging",
+)]
+pub(super) async fn download_teams_app_package(
+ State(state): State>,
+ Query(query): Query,
+) -> Result {
+ let app_id = query.app_id.trim();
+ if app_id.is_empty() {
+ return Err((
+ axum::http::StatusCode::BAD_REQUEST,
+ "app_id is required".into(),
+ ));
+ }
+
+ let instance_dir = state.instance_dir.load();
+ // `&instance_dir` (a `&Guard>`) coerces to `&Path` via deref,
+ // matching how messaging.rs already uses the guard (it calls `.join()` on it).
+ // Do NOT use `.as_ref()` here — it's ambiguous and won't coerce to `&Path`.
+ let manifest_id = crate::api::teams_package::load_or_create_manifest_id(&instance_dir);
+
+ let bytes =
+ crate::api::teams_package::build_app_package(app_id, &manifest_id).map_err(|error| {
+ tracing::error!(%error, "failed to build teams app package");
+ (
+ axum::http::StatusCode::INTERNAL_SERVER_ERROR,
+ "failed to build teams app package".into(),
+ )
+ })?;
+
+ let headers = [
+ (axum::http::header::CONTENT_TYPE, "application/zip"),
+ (
+ axum::http::header::CONTENT_DISPOSITION,
+ "attachment; filename=spacebot-teams-app.zip",
+ ),
+ ];
+ Ok((headers, bytes))
+}
+
#[cfg(test)]
mod tests {
use super::*;
diff --git a/src/api/server.rs b/src/api/server.rs
index a60cb7ec5..bd3eea49d 100644
--- a/src/api/server.rs
+++ b/src/api/server.rs
@@ -210,6 +210,7 @@ pub fn api_router() -> OpenApiRouter> {
.routes(routes!(messaging::messaging_status))
.routes(routes!(messaging::disconnect_platform))
.routes(routes!(messaging::toggle_platform))
+ .routes(routes!(messaging::download_teams_app_package))
.routes(routes!(
messaging::create_messaging_instance,
messaging::delete_messaging_instance
From 01187647398fde5047b2dbcd3f34455ff468ffc4 Mon Sep 17 00:00:00 2001
From: "S.L" <101876007+slvnlrt@users.noreply.github.com>
Date: Mon, 29 Jun 2026 16:03:58 +0200
Subject: [PATCH 7/8] feat(interface): Download Teams app package button on the
Teams channel card
---
interface/src/api/client.ts | 5 +++++
interface/src/components/ChannelSettingCard.tsx | 17 +++++++++++++++++
2 files changed, 22 insertions(+)
diff --git a/interface/src/api/client.ts b/interface/src/api/client.ts
index 51f4038f8..a80ea816c 100644
--- a/interface/src/api/client.ts
+++ b/interface/src/api/client.ts
@@ -2163,6 +2163,11 @@ export const api = {
);
},
+ teamsAppPackageUrl: (appId: string) => {
+ const params = new URLSearchParams({ app_id: appId });
+ return `${getApiBase()}/messaging/teams/app-package?${params.toString()}`;
+ },
+
attachmentUrl: (agentId: string, attachmentId: string, opts?: { thumbnail?: boolean; download?: boolean }) => {
const params = new URLSearchParams();
if (opts?.thumbnail) params.set("thumbnail", "true");
diff --git a/interface/src/components/ChannelSettingCard.tsx b/interface/src/components/ChannelSettingCard.tsx
index 56354084d..0a0a62198 100644
--- a/interface/src/components/ChannelSettingCard.tsx
+++ b/interface/src/components/ChannelSettingCard.tsx
@@ -1378,6 +1378,23 @@ export function AddInstanceCard({
}}
/>
+ {(credentialInputs.teams_app_id ?? "").trim() !== "" && (
+ <>
+
+
+ The package uses the default Spacebot icon. To use your own, unzip it, replace
+ icon-color.png (192×192) and icon-outline.png (32×32), and re-zip.
+
+
+ )}
)}
From 44f913d122b46321c32a1b0d35d5d809e106a136 Mon Sep 17 00:00:00 2001
From: "S.L" <101876007+slvnlrt@users.noreply.github.com>
Date: Mon, 29 Jun 2026 16:07:09 +0200
Subject: [PATCH 8/8] docs(teams): document the Download-app-package button +
manual/icon-swap path
---
docs/content/docs/(messaging)/teams-setup.mdx | 41 +++++++++++++++++--
1 file changed, 38 insertions(+), 3 deletions(-)
diff --git a/docs/content/docs/(messaging)/teams-setup.mdx b/docs/content/docs/(messaging)/teams-setup.mdx
index 927527fca..a590512a5 100644
--- a/docs/content/docs/(messaging)/teams-setup.mdx
+++ b/docs/content/docs/(messaging)/teams-setup.mdx
@@ -37,13 +37,48 @@ Then open **Channels** and add the **Microsoft Teams** channel.
## Step 3: Build and install the Teams app
-Teams needs an app package (a zip with a `manifest.json` and two icons) to surface the bot to users.
+Teams needs an app package (a zip with a `manifest.json` and two icons).
+
+
+
+
+1. In **Settings → Channels**, open the Microsoft Teams card and enter your **App ID** (Step 1).
+2. Click **Download Teams app package**. Spacebot builds a correct `manifest.json` (with the right schema, a distinct app id, and the Spacebot icon) and downloads `spacebot-teams-app.zip`.
+3. Upload it in Teams (**Apps → Manage your apps → Upload an app**).
+
+The package uses the default Spacebot icon. To use your own, unzip it, replace `icon-color.png` (192×192) and `icon-outline.png` (32×32, transparent), and re-zip.
+
+
+
+
+Build the package by hand if you prefer. The `manifest.json`:
-The manifest `id` (the Teams app id) must be its **own** GUID, distinct from the bot's App ID. `bots[].botId` is the App ID from Step 1. Scopes are lowercase (`personal`, `team`, `groupchat`), and `validDomains` plus an `accentColor` are required.
+The manifest `id` (the Teams app id) must be its **own** GUID, distinct from the bot's App ID. `bots[].botId` is the App ID from Step 1. Scopes are lowercase (`personal`, `team`, `groupchat`); `validDomains` and `accentColor` are required; do **not** add a `packageName` key (schema 1.17 rejects it).
-Upload the package in Teams (**Apps** → **Manage your apps** → **Upload an app**). Most tenants require admin approval: approve it in the **Teams admin center** under **Manage apps**, where you can also restrict who may install it.
+```json
+{
+ "$schema": "https://developer.microsoft.com/en-us/json-schemas/teams/v1.17/MicrosoftTeams.schema.json",
+ "manifestVersion": "1.17",
+ "version": "1.0.0",
+ "id": "GENERATE-A-FRESH-GUID",
+ "developer": { "name": "Spacebot", "websiteUrl": "https://example.com", "privacyUrl": "https://example.com", "termsOfUseUrl": "https://example.com" },
+ "icons": { "color": "icon-color.png", "outline": "icon-outline.png" },
+ "name": { "short": "Spacebot", "full": "Spacebot — AI assistant" },
+ "description": { "short": "AI assistant powered by Spacebot.", "full": "Chat with your Spacebot agent in Microsoft Teams." },
+ "accentColor": "#6264A7",
+ "bots": [{ "botId": "YOUR-APP-ID", "scopes": ["personal", "team", "groupchat"], "supportsFiles": false, "isNotificationOnly": false }],
+ "validDomains": []
+}
+```
+
+Zip `manifest.json` + `icon-color.png` (192×192) + `icon-outline.png` (32×32) at the **root** of the archive.
+
+
+
+
+Most tenants require admin approval: approve it in the **Teams admin center** under **Manage apps**, where you can also restrict who may install it.
## Step 4: Configure Spacebot