Use first-party Agent 365 CLI app for setup

[Krishnadheeraj (DheerajPannala)]

Summary

• default setup and bootstrap to the Microsoft-managed Agent 365 CLI client ID
• resolve the first-party identity through tenant service principals and preserve the tenant-owned custom-app fallback
• validate first-party authorization from acquired token scp claims without modifying Microsoft’s application registration or requiring a tenant-local CLI consent grant
• use WAM on native Windows and device code in WSL, macOS, and Linux, avoiding unsupported localhost browser-response flows for the first-party app
• preserve configured custom apps when Graph lookup failures are inconclusive
• add regression coverage for bootstrap, token validation, mutation guards, cross-platform authentication routing, and custom-app compatibility

Validation

• dotnet test src\tests.proj --configuration Release --no-restore -p:NuGetAudit=false — 1,994 passed, 12 skipped
• authentication regression suite — 105 passed
• manual first-party requirements validation succeeded in two tenants with zero tenant-local CLI oauth2PermissionGrant records
• manual OBO setup completed with 4 of 4 resources reporting effective inheritance

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[Copilot]

Pull request overview

Copilot reviewed 36 out of 36 changed files in this pull request and generated 2 comments.

[Copilot]

Pull request overview

Copilot reviewed 36 out of 36 changed files in this pull request and generated no new comments.

Suppressed comments (2)

Previously missed (2) — in code that hasn't changed since the last review.

src/Microsoft.Agents.A365.DevTools.Cli/Services/ConfigService.cs:570

• User-facing logs should avoid non-ASCII punctuation; the em dash here can render inconsistently across terminals. Use a plain hyphen instead.

                _logger?.LogWarning("Configured clientAppId '{Id}' in a365.config.json is not a valid GUID — ignoring.", configuredId);

src/Microsoft.Agents.A365.DevTools.Cli/Services/GraphApiService.cs:206

• User-facing logs should avoid non-ASCII punctuation; the em dash in this message can render inconsistently across terminals. Prefer a plain hyphen.

            _logger.LogDebug("Cannot acquire an access token for client app {ClientAppId} — no token provider configured.", clientAppId);

[Copilot]

Pull request overview

Copilot reviewed 37 out of 37 changed files in this pull request and generated 2 comments.