Add support for Agentic identity tokens

[benbrown]

Part of #604, this change introduces new methods to obtain new types of agentic token.

These are used when an incoming request contains Agentic identity elements in the recipient object. Rather than create an outbound connection with the default agent identity, this will load the appropriate agentic identity and create access tokens for that app and/or user.

This will allow a single agent application to respond appropriately to multiple agentic identities.

Resolves #627 update the model
Resolves #629 add the APX scope constants
Fixes #626 Connections and Connection Map
Fixes #630
Fixes #605
Fixes #648
Fixes #377
Fixes #466
Fixes #516
Fixes #517
Fixes #628

Breaking changes

• ContinueConversation
  • CloudAdapter.continueConversation adds the botAppIdOrIdentity: string | JwtPayload argument
  • AgentApplication.sendProactiveActivity adds the botAppIdOrIdentity: string | JwtPayload argument
• CloudAdapter getAttachment/getAttachmentInfo/uploadAttachment add a TurnContext argument
• CloudAdapter.ConnectorClient and CloudAdapter.UserTokenClient have been removed. Get current of each via TurnContext.turnState
• AgentApplication.authorization.beginOrContinueFlow removed, AgentApplication.authorization.authHandlers removed.
• oAuthFlow class removed
• All Authorization related classes are internal, never exported in the index.ts.

[Copilot]

Pull Request Overview

This PR adds support for Agentic identity tokens, enabling agent applications to respond appropriately to multiple agentic identities by creating access tokens for specific app and/or user contexts rather than using the default agent identity.

Key changes include:

• Introduction of new authorization system with multiple handler types (Azure Bot and Agentic)
• Addition of agentic token acquisition methods (instance, user, and application tokens)
• Breaking changes to continueConversation and attachment methods requiring additional parameters
• Removal of deprecated OAuth flow components and SSO handlers

Reviewed Changes

Copilot reviewed 71 out of 72 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
test-agents/web-chat/src/webChatSso.ts	Removed entire WebChatSso handler implementation
test-agents/web-chat/src/index.ts	Updated continueConversation call and removed webChatSso case
test-agents/root-agent/src/agent.ts	Updated postActivity call with placeholder config
test-agents/application-style/src/webChatSso.ts	Removed entire application-style WebChatSso handler
samples/teams/teamsInfoExample.ts	Updated to extract tenantId from channel data instead of adapter config
samples/basic/routes.ts	Added agentic route handler example
samples/basic/proactive.ts	Updated continueConversation calls with clientId parameter
packages/agents-hosting/src/cloudAdapter.ts	Major refactor with new connection management and agentic token support

Comments suppressed due to low confidence (2)

packages/agents-hosting/src/cloudAdapter.ts:1

• The magic number 325 should be extracted to a named constant to improve code readability and maintainability. Consider adding a comment explaining why this specific limit exists.

/**

packages/agents-hosting/src/cloudAdapter.ts:1

• Duplicate code: The conversation ID trimming logic appears multiple times. Consider extracting this into a private method to avoid repetition and ensure consistent behavior.

/**

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[benbrown]

Approved pending a few small tweaks as mentioned