# What changed in @microsoft/agents-hosting

> 45 changes in @microsoft/agents-hosting 1 from its official release notes, upgrade guides and advisories: 12 breaking, 1 deprecations, 9 new APIs and options. Each one cited. Sources checked 2026-10-18. HTML: https://unstale.sh/npm/@microsoft/agents-hosting/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @microsoft/agents-hosting 1

### Breaking changes

- M365AttachmentDownloader replaces TeamsAttachmentDownloader. (1.3.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.3.1)
- The ready state is not signaled until the first conversation ID is received. (1.2.0) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.2.0)
- Removed from AgentApplication authorization. (1.1.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.1.1)
- Removed from AgentApplication authorization. (1.1.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.1.1)
- Now requires botAppIdOrIdentity as its first argument: the agent app ID or a JwtPayload from the incoming request. (1.1.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.1.1)
- Removed as a CloudAdapter member; retrieve it from turncontext.turnstate using adapter.ConnectorClientKey. (1.1.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.1.1)
- Now requires botAppIdOrIdentity as its first argument: the agent app ID or a JwtPayload from the incoming request. (1.1.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.1.1)
- Now requires a TurnContext as its first argument. (1.1.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.1.1)
- Now requires a TurnContext as its first argument. (1.1.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.1.1)
- Now requires a TurnContext as its first argument. (1.1.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.1.1)
- Removed as a CloudAdapter member; retrieve it from turncontext.turnstate using adapter.UserTokenClientKey. (1.1.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.1.1)
- The oAuthFlow class was removed. (1.1.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.1.1)

### Deprecations

- The legacy Teams extension package is deprecated but remains available for backward compatibility; existing applications can migrate when convenient. (1.7.2) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.7.2)

### New APIs and options

- Updated APIs cover Teams activities, meetings, messaging extensions, task modules, file consent, and proactive messaging. (1.7.2) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.7.2)
- Activity.toJsonString() accepts a custom replacer. (1.3.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.3.1)
- TeamsAttachmentDownloader was added to Core. (1.2.0) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.2.0)
- Initial support for Microsoft Agent ID was added. (1.1.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.1.1)
- Configure multiple parallel application identities and map connections to service URLs; existing settings automatically create a default Connection when configuration is unchanged. (1.1.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.1.1)
- Now accepts a JwtPayload. (1.1.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.1.1)
- Copilot Studio client can stream returned Activities as they arrive using an AsyncGenerator. (1.1.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.1.1)
- Adds a streaming version of startConversationAsync that returns Activities as they arrive using an AsyncGenerator. (1.1.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.1.1)
- Overrides the UserTokenClient API endpoint through an environment variable. (1.1.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.1.1)

### Behavior and default changes

- UserTokenService requests now include a CorrelationID header. (1.3.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.3.1)
- TurnContext methods now validate activities with Zod. (1.3.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.3.1)
- Scopes are included in the agentic token cache key. (1.2.0) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.2.0)
- StreamingResponse now supports non-streaming channels. (1.2.0) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.2.0)
- Token acquisition logic for agentic scenarios was updated. (1.2.0) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.2.0)

### Fixes and other changes

- Error reporting is improved. (1.7.2) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.7.2)
- Recipient routing for targeted activities is fixed. (1.7.2) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.7.2)
- Teams client setup is improved. (1.7.2) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.7.2)
- For M365 Copilot Web, OAuth token exchange uses the base channel instead of the composite channelId, fixing sign-in behavior. (1.5.3) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.5.3)
- Resolves an issue where background token exchanges could sometimes cause a timeout. (1.4.2) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.4.2)
- Fixes Choice Prompt index recognition, which did not work. (1.3.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.3.1)
- CosmosDB storage error messages now provide actionable context. (1.3.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.3.1)
- Fixes a consent error when using MS Teams with Copilot. (1.3.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.3.1)
- Addresses differences in returned value types between Botbuilder v3/v4 and the Microsoft 365 Agents SDK. (1.3.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.3.1)
- Corrects x5c certificate loading. (1.3.1) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.3.1)
- Fixes the consent flow for Copilot in Teams. (1.2.3) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.2.3)
- Fixes the TeamsInfo class, which had been broken since 1.1. (1.2.3) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.2.3)
- Fixed prompt appendChoices support for the heroCard style. (1.2.0) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.2.0)
- Backwards compatibility was added for the Copilot Studio Client. (1.2.0) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.2.0)
- Fixed FIC authentication for agentic scenarios. (1.2.0) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.2.0)
- MsalTokenProvider was updated to match the AuthProvider interface. (1.2.0) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.2.0)
- Fixed onTurn so its handler is called for every activity. (1.2.0) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.2.0)
- A behavior change in streaming was fixed. (1.2.0) — [release notes](https://github.com/microsoft/Agents-for-js/releases/tag/v1.2.0)