export async function getSsoToken(): Promise<string> {
  try {
    // Try Office SSO via global window to avoid TS globals
    const or = (typeof window !== 'undefined') ? (window as any).OfficeRuntime : undefined;
    if (or && or.auth && typeof or.auth.getAccessToken === 'function') {
      const token = await or.auth.getAccessToken({ allowSignInPrompt: true });
      return token as string;
    }
  } catch (err) {
    // eslint-disable-next-line no-console
    console.warn('OfficeRuntime SSO token failed, falling back to local token', err);
  }
  // Dev fallback: local storage token
  const local = (typeof window !== 'undefined') ? localStorage.getItem('crm-token') : null;
  if (!local) throw new Error('No SSO token available');
  return local;
}