lex-microsoft_teams 0.6.23 → 0.6.25

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cc24206d1c97c648d8c3cf0b5ab0acac653195153903e901e1d89e89445b6618
-  data.tar.gz: 5768ef9650b4bc861d193c8477e80f2e96962501c11246aaf1178b00c43f1432
+  metadata.gz: 42353a2d92e77ba3659f2ab93c24339efca2e869a4ae18d30621b5fb3e3cd947
+  data.tar.gz: 4420f02e9d66c85c673e6411203b06fa49862d9a5a16ef78cf7b55a366da3a8d
 SHA512:
-  metadata.gz: eb531084dcff80d75c9e624ab02f2db647d18758cf7621f7ee3ea8f79be593b5db2d4297aef2ac716aba394a76945e766ee13015b4558ed50b57dacc401d4fff
-  data.tar.gz: f7e5df0a0e9b251043b14e1dac114c24c797b23fc8097402508bfacf326f6903f125ffcbd6df474b9927542b2ba4fd123d8aabf9355ac3b302a1b47cb2510694
+  metadata.gz: b165c26eca6e63b1d181a0aee9a2bfadd72039e2cda558bc33fc08e49a1ba1730af044012dcb6936848c03b02ca7d30c00be6678c5e4e9665070f2811b24ec4a
+  data.tar.gz: bdae821120daca1fcd888c57cc2a2996aced5b8270e88332235dc4c2ee71fe1a0f4533f6b5a28df6761f78f3bb233e7aafb4f92db4c33fec518cf1d39d78584e

data/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 ## [Unreleased]
 
+## [0.6.25] - 2026-03-28
+
+### Fixed
+- `Hooks::Auth` — migrated from v2.0 `Routes::Hooks` pattern to v3.0 `LexDispatch` pattern: replaced instance `route`/`runner_class` overrides with a class-level `self.runner_class`; hook now registers as `POST /api/extensions/microsoft_teams/hooks/auth/handle` (was `/api/hooks/lex/microsoft_teams/auth/callback`)
+- `Runners::Auth` — added `handle` alias for `auth_callback` so LexDispatch's default `:handle` routing resolves correctly
+- `Helpers::BrowserAuth` — updated all three references to the hook redirect URI and probe path from the stale v2.0 path to `/api/extensions/microsoft_teams/hooks/auth/handle`
+
+## [0.6.24] - 2026-03-28
+
+### Added
+- `Actors::AbsorbMeeting` — Subscription actor that listens on `lex.microsoft_teams.absorbers.meeting.absorb` and delegates to `Absorbers::Meeting#absorb`
+- `Helpers::GraphClient` — mixin module wrapping `Helpers::Client#graph_connection` with `graph_get`, `graph_post`, `graph_paginate`, and an inline `GraphError` class for responses other than 200, 201, 204, or 404; 401/403 raise with descriptive messages including the Graph error body when available
+
 ### Fixed
 - `Absorbers::Meeting#graph_token` — rescue now captures the exception as `=> e` and logs a warning, satisfying the rescue-logging lint rule
 

data/CLAUDE.md

@@ -10,7 +10,7 @@ Legion Extension that connects LegionIO to Microsoft Teams via Graph API and Bot
 
 **GitHub**: https://github.com/LegionIO/lex-microsoft_teams
 **License**: MIT
-**Version**: 0.6.23
+**Version**: 0.6.24
 
 ## Architecture
 
@@ -64,7 +64,7 @@ Legion::Extensions::MicrosoftTeams
 │   ├── TraceRetriever    # Retrieves memory traces from the shared store for bot context (2000-token budget, strength-ranked dedup)
 │   └── TransformDefinitions # lex-transformer definitions for conversation extraction and person summary
 ├── Hooks/
-│   └── Auth              # OAuth callback hook (mount '/callback') → /api/hooks/lex/microsoft_teams/auth/callback
+│   └── Auth              # OAuth callback hook (mount '/callback') → /api/extensions/microsoft_teams/hooks/auth/handle
 ├── CLI/
 │   └── Auth              # CLI module for `legion lex exec teams auth login/status`
 └── Client                # Standalone client (includes all runners)
@@ -74,10 +74,10 @@ Legion::Extensions::MicrosoftTeams
 
 Opt-in browser-based OAuth for delegated Microsoft Graph permissions. Two flows:
 
-- **Authorization Code + PKCE** (primary): Opens browser for Entra ID login. When the Legion API is running, uses the hook URL (`/api/hooks/lex/microsoft_teams/auth/callback`) with `Legion::Events` for callback notification; otherwise falls back to an ephemeral local port via `CallbackServer`
+- **Authorization Code + PKCE** (primary): Opens browser for Entra ID login. When the Legion API is running, uses the hook URL (`/api/extensions/microsoft_teams/hooks/auth/handle`) with `Legion::Events` for callback notification; otherwise falls back to an ephemeral local port via `CallbackServer`
 - **Device Code** (fallback): Auto-selected in headless/SSH environments (no `DISPLAY`/`WAYLAND_DISPLAY`)
 
-Tokens stored in Vault at a per-user path (`{USER}/microsoft_teams/delegated_token`, where `{USER}` is the system username) with configurable pre-expiry silent refresh. CLI command: `legion auth teams`. Hook route: `GET|POST /api/hooks/lex/microsoft_teams/auth/callback` for daemon re-auth (routed through Ingress for RBAC/audit).
+Tokens stored in Vault at a per-user path (`{USER}/microsoft_teams/delegated_token`, where `{USER}` is the system username) with configurable pre-expiry silent refresh. CLI command: `legion auth teams`. Hook route: `POST /api/extensions/microsoft_teams/hooks/auth/handle` for daemon re-auth (routed through LexDispatch for RBAC/audit).
 
 Key files: `Helpers::BrowserAuth` (orchestrator), `Helpers::CallbackServer` (ephemeral TCP), `Runners::Auth` (authorize_url, exchange_code, refresh_delegated_token, auth_callback), `Helpers::TokenCache` (delegated slot), `Hooks::Auth` (hook class with mount path).
 

data/lib/legion/extensions/microsoft_teams/actors/absorb_meeting.rb

@@ -0,0 +1,60 @@
+# frozen_string_literal: true
+
+module Legion
+  module Extensions
+    module MicrosoftTeams
+      module Actor
+        class AbsorbMeeting < Legion::Extensions::Actors::Subscription
+          def runner_class    = 'Legion::Extensions::MicrosoftTeams::Absorbers::Meeting'
+          def runner_function = 'absorb'
+          def check_subtask?  = false
+          def generate_task?  = false
+
+          def enabled?
+            defined?(Legion::Extensions::Absorbers::Base) &&
+              defined?(Legion::Extensions::MicrosoftTeams::Absorbers::Meeting)
+          rescue StandardError => e
+            log.debug("AbsorbMeeting#enabled?: #{e.message}")
+            false
+          end
+
+          def work(payload)
+            parsed   = parse_payload(payload)
+            absorber = Absorbers::Meeting.new
+            result   = absorber.absorb(
+              url:      parsed[:url],
+              metadata: parsed[:metadata] || {},
+              context:  parsed[:context] || {}
+            )
+            if result.respond_to?(:[]) && result.key?(:success)
+              if result[:success]
+                ack!
+              else
+                log.error("AbsorbMeeting actor absorb failed: #{result.inspect}")
+                reject!(requeue: false)
+              end
+            else
+              ack!
+            end
+            result
+          rescue StandardError => e
+            log.error("AbsorbMeeting actor error: #{e.message}")
+            reject!(requeue: false)
+          end
+
+          private
+
+          def parse_payload(payload)
+            data = payload.is_a?(String) ? json_load(payload) : payload
+            return {} unless data.is_a?(Hash)
+
+            data.transform_keys(&:to_sym)
+          rescue StandardError => e
+            log.debug("AbsorbMeeting#parse_payload: #{e.message}")
+            {}
+          end
+        end
+      end
+    end
+  end
+end

data/lib/legion/extensions/microsoft_teams/helpers/browser_auth.rb

@@ -72,7 +72,7 @@ module Legion
                    else
                      4567
                    end
-            "http://127.0.0.1:#{port}/api/hooks/lex/microsoft_teams/auth/callback"
+            "http://127.0.0.1:#{port}/api/extensions/microsoft_teams/hooks/auth/handle"
           end
 
           def generate_pkce
@@ -121,9 +121,9 @@ module Legion
           def hook_route_registered?
             return false unless defined?(Legion::API)
 
-            log.debug("Probing hook route at http://127.0.0.1:#{api_port}/api/hooks/lex/microsoft_teams/auth/callback")
+            log.debug("Probing hook route at http://127.0.0.1:#{api_port}/api/extensions/microsoft_teams/hooks/auth/handle")
             conn = Faraday.new(url: "http://127.0.0.1:#{api_port}")
-            resp = conn.head('/api/hooks/lex/microsoft_teams/auth/callback')
+            resp = conn.head('/api/extensions/microsoft_teams/hooks/auth/handle')
             registered = resp.status != 404
             log.debug("Hook route probe returned #{resp.status} (registered=#{registered})")
             registered

data/lib/legion/extensions/microsoft_teams/helpers/graph_client.rb

@@ -0,0 +1,75 @@
+# frozen_string_literal: true
+
+module Legion
+  module Extensions
+    module MicrosoftTeams
+      module Helpers
+        module GraphClient
+          class GraphError < StandardError; end
+
+          def graph_get(path, token:, params: {})
+            connection = graph_connection(token: token)
+            response   = connection.get(path, params)
+            handle_graph_response(response, path)
+          end
+
+          def graph_paginate(path, token:, params: {}, max_pages: 10)
+            results   = []
+            next_link = nil
+            page      = 0
+
+            loop do
+              current_path = next_link || path
+              data         = graph_get(current_path, token: token, params: page.zero? ? params : {})
+              break if data.nil?
+
+              items = data['value'] || data[:value]
+              results.concat(Array(items)) if items
+
+              next_link = data['@odata.nextLink'] || data[:'@odata.nextLink']
+              page     += 1
+              break if next_link.nil? || page >= max_pages
+            end
+
+            results
+          end
+
+          def graph_post(path, token:, body: {})
+            connection = graph_connection(token: token)
+            response   = connection.post(path) do |req|
+              req.body = body
+            end
+            handle_graph_response(response, path)
+          end
+
+          private
+
+          def handle_graph_response(response, path)
+            error_message =
+              if response.body.respond_to?(:dig)
+                response.body.dig('error', 'message') ||
+                  response.body.dig(:error, :message)
+              end
+
+            case response.status
+            when 200, 201
+              response.body
+            when 204, 404
+              nil
+            when 401
+              detail = error_message || 'Access token is missing, expired, or invalid.'
+              raise GraphError, "Graph API 401 Unauthorized on #{path}: #{detail}"
+            when 403
+              detail = error_message || 'Caller does not have sufficient permissions to perform this action.'
+              raise GraphError, "Graph API 403 Forbidden on #{path}: #{detail}"
+            else
+              base_message = "Graph API #{response.status} on #{path}"
+              base_message = "#{base_message}: #{error_message}" if error_message
+              raise GraphError, base_message
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/legion/extensions/microsoft_teams/hooks/auth.rb

@@ -7,11 +7,7 @@ module Legion
         class Auth < Legion::Extensions::Hooks::Base
           mount '/callback'
 
-          def route(_headers, _payload)
-            :auth_callback
-          end
-
-          def runner_class
+          def self.runner_class
             'Legion::Extensions::MicrosoftTeams::Runners::Auth'
           end
         end

data/lib/legion/extensions/microsoft_teams/runners/auth.rb

@@ -124,6 +124,7 @@ module Legion
                           body: callback_success_html }
             }
           end
+          alias handle auth_callback
 
           private
 

data/lib/legion/extensions/microsoft_teams/version.rb

@@ -3,7 +3,7 @@
 module Legion
   module Extensions
     module MicrosoftTeams
-      VERSION = '0.6.23'
+      VERSION = '0.6.25'
     end
   end
 end

data/lib/legion/extensions/microsoft_teams.rb

@@ -33,6 +33,7 @@ require 'legion/extensions/microsoft_teams/helpers/callback_server'
 require 'legion/extensions/microsoft_teams/helpers/browser_auth'
 require 'legion/extensions/microsoft_teams/helpers/permission_guard'
 require 'legion/extensions/microsoft_teams/helpers/transform_definitions'
+require 'legion/extensions/microsoft_teams/helpers/graph_client'
 
 # Transport
 if defined?(Legion::Transport)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: lex-microsoft_teams
 version: !ruby/object:Gem::Version
-  version: 0.6.23
+  version: 0.6.25
 platform: ruby
 authors:
 - Esity
@@ -176,6 +176,7 @@ files:
 - lex-microsoft_teams.gemspec
 - lib/legion/extensions/microsoft_teams.rb
 - lib/legion/extensions/microsoft_teams/absorbers/meeting.rb
+- lib/legion/extensions/microsoft_teams/actors/absorb_meeting.rb
 - lib/legion/extensions/microsoft_teams/actors/api_ingest.rb
 - lib/legion/extensions/microsoft_teams/actors/auth_validator.rb
 - lib/legion/extensions/microsoft_teams/actors/cache_bulk_ingest.rb
@@ -194,6 +195,7 @@ files:
 - lib/legion/extensions/microsoft_teams/helpers/browser_auth.rb
 - lib/legion/extensions/microsoft_teams/helpers/callback_server.rb
 - lib/legion/extensions/microsoft_teams/helpers/client.rb
+- lib/legion/extensions/microsoft_teams/helpers/graph_client.rb
 - lib/legion/extensions/microsoft_teams/helpers/high_water_mark.rb
 - lib/legion/extensions/microsoft_teams/helpers/permission_guard.rb
 - lib/legion/extensions/microsoft_teams/helpers/prompt_resolver.rb