lex-microsoft_teams 0.6.24 → 0.6.26

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 89010807fc32d72ba6fcefdd2239508ae1d384a14162265d3f97b6098d3114ea
-  data.tar.gz: 9b7909be2dfafd3242fb8407acfa2f0cf0d81365bb4d9606e475e0a40061ffa0
+  metadata.gz: fb7445b3bb8025805c3d81e13d2b45a2739d364ae566e722699b200648d2b29b
+  data.tar.gz: 6915059592314205c3d4bbac82188dfe980fa8fc294c14dbc6de30e583c65065
 SHA512:
-  metadata.gz: 32d5556151443500353755e7584ca526f778ebff2bdfeb19cd76ef53fc0f660e4ffc4b4ba6468834e06e5841edfc9b3fd3203f36acf03dc2436e40a82d0bf167
-  data.tar.gz: 5f107a3b5ea8cc0afdd662bf170fc06c74b4ba982e966d57b9d876b0e39bc3f422c43b36dc1f3ede9c502acf914f23f83bf7861ddf10f367df09941032832ae6
+  metadata.gz: 33ce7326e6fd50fe558b43dacaa5808448074901e96d144af1f3ccc28a847d23e9c8c18e82152b3b1874bcf622fa8d6171c5c1bce951663d67e229eb758ec039
+  data.tar.gz: 5cdf2b3081b0c40d59cbc199808ff5bcbd4ae9d0f64cff5365e07c3428621c341c33813db0cbcf396c71034e6356dcf3295efbb0b8fbbc47de2f654f0d581fb2

data/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 ## [Unreleased]
 
+## [0.6.26] - 2026-03-29
+
+### Fixed
+- `Helpers::TokenCache` — replaced direct `Legion::Crypt.get(path)` call with `vault_get` from `Legion::Crypt::Helper` (included via `include Legion::Crypt::Helper`); `vault_path` accepts an optional `_suffix` argument so the helper's delegation pattern is compatible
+
+## [0.6.25] - 2026-03-28
+
+### Fixed
+- `Hooks::Auth` — migrated from v2.0 `Routes::Hooks` pattern to v3.0 `LexDispatch` pattern: replaced instance `route`/`runner_class` overrides with a class-level `self.runner_class`; hook now registers as `POST /api/extensions/microsoft_teams/hooks/auth/handle` (was `/api/hooks/lex/microsoft_teams/auth/callback`)
+- `Runners::Auth` — added `handle` alias for `auth_callback` so LexDispatch's default `:handle` routing resolves correctly
+- `Helpers::BrowserAuth` — updated all three references to the hook redirect URI and probe path from the stale v2.0 path to `/api/extensions/microsoft_teams/hooks/auth/handle`
+
 ## [0.6.24] - 2026-03-28
 
 ### Added

data/CLAUDE.md

@@ -64,7 +64,7 @@ Legion::Extensions::MicrosoftTeams
 │   ├── TraceRetriever    # Retrieves memory traces from the shared store for bot context (2000-token budget, strength-ranked dedup)
 │   └── TransformDefinitions # lex-transformer definitions for conversation extraction and person summary
 ├── Hooks/
-│   └── Auth              # OAuth callback hook (mount '/callback') → /api/hooks/lex/microsoft_teams/auth/callback
+│   └── Auth              # OAuth callback hook (mount '/callback') → /api/extensions/microsoft_teams/hooks/auth/handle
 ├── CLI/
 │   └── Auth              # CLI module for `legion lex exec teams auth login/status`
 └── Client                # Standalone client (includes all runners)
@@ -74,10 +74,10 @@ Legion::Extensions::MicrosoftTeams
 
 Opt-in browser-based OAuth for delegated Microsoft Graph permissions. Two flows:
 
-- **Authorization Code + PKCE** (primary): Opens browser for Entra ID login. When the Legion API is running, uses the hook URL (`/api/hooks/lex/microsoft_teams/auth/callback`) with `Legion::Events` for callback notification; otherwise falls back to an ephemeral local port via `CallbackServer`
+- **Authorization Code + PKCE** (primary): Opens browser for Entra ID login. When the Legion API is running, uses the hook URL (`/api/extensions/microsoft_teams/hooks/auth/handle`) with `Legion::Events` for callback notification; otherwise falls back to an ephemeral local port via `CallbackServer`
 - **Device Code** (fallback): Auto-selected in headless/SSH environments (no `DISPLAY`/`WAYLAND_DISPLAY`)
 
-Tokens stored in Vault at a per-user path (`{USER}/microsoft_teams/delegated_token`, where `{USER}` is the system username) with configurable pre-expiry silent refresh. CLI command: `legion auth teams`. Hook route: `GET|POST /api/hooks/lex/microsoft_teams/auth/callback` for daemon re-auth (routed through Ingress for RBAC/audit).
+Tokens stored in Vault at a per-user path (`{USER}/microsoft_teams/delegated_token`, where `{USER}` is the system username) with configurable pre-expiry silent refresh. CLI command: `legion auth teams`. Hook route: `POST /api/extensions/microsoft_teams/hooks/auth/handle` for daemon re-auth (routed through LexDispatch for RBAC/audit).
 
 Key files: `Helpers::BrowserAuth` (orchestrator), `Helpers::CallbackServer` (ephemeral TCP), `Runners::Auth` (authorize_url, exchange_code, refresh_delegated_token, auth_callback), `Helpers::TokenCache` (delegated slot), `Hooks::Auth` (hook class with mount path).
 

data/lib/legion/extensions/microsoft_teams/actors/auth_validator.rb

@@ -104,7 +104,8 @@ module Legion
 
           def teams_auth_settings
             settings = if defined?(Legion::Settings)
-                         Legion::Settings.dig(:microsoft_teams, :auth) || {}
+                         ms = Legion::Settings[:microsoft_teams]
+                         (ms && ms[:auth]) || {}
                        else
                          {}
                        end

data/lib/legion/extensions/microsoft_teams/actors/token_refresher.rb

@@ -99,7 +99,8 @@ module Legion
 
           def teams_auth_settings
             settings = if defined?(Legion::Settings)
-                         Legion::Settings.dig(:microsoft_teams, :auth) || {}
+                         ms = Legion::Settings[:microsoft_teams]
+                         (ms && ms[:auth]) || {}
                        else
                          {}
                        end

data/lib/legion/extensions/microsoft_teams/helpers/browser_auth.rb

@@ -72,7 +72,7 @@ module Legion
                    else
                      4567
                    end
-            "http://127.0.0.1:#{port}/api/hooks/lex/microsoft_teams/auth/callback"
+            "http://127.0.0.1:#{port}/api/extensions/microsoft_teams/hooks/auth/handle"
           end
 
           def generate_pkce
@@ -121,9 +121,9 @@ module Legion
           def hook_route_registered?
             return false unless defined?(Legion::API)
 
-            log.debug("Probing hook route at http://127.0.0.1:#{api_port}/api/hooks/lex/microsoft_teams/auth/callback")
+            log.debug("Probing hook route at http://127.0.0.1:#{api_port}/api/extensions/microsoft_teams/hooks/auth/handle")
             conn = Faraday.new(url: "http://127.0.0.1:#{api_port}")
-            resp = conn.head('/api/hooks/lex/microsoft_teams/auth/callback')
+            resp = conn.head('/api/extensions/microsoft_teams/hooks/auth/handle')
             registered = resp.status != 404
             log.debug("Hook route probe returned #{resp.status} (registered=#{registered})")
             registered

data/lib/legion/extensions/microsoft_teams/helpers/token_cache.rb

@@ -12,6 +12,7 @@ module Legion
         class TokenCache
           include Legion::Extensions::Helpers::Lex if Legion::Extensions.const_defined?(:Helpers, false) &&
                                                       Legion::Extensions::Helpers.const_defined?(:Lex, false)
+          include Legion::Crypt::Helper if defined?(Legion::Crypt::Helper)
 
           REFRESH_BUFFER = 60
           DEFAULT_LOCAL_DIR = File.join(Dir.home, '.legionio', 'tokens')
@@ -133,7 +134,7 @@ module Legion
           def load_from_vault
             if vault_available?
               log.info("Loading delegated token from Vault (#{vault_path})")
-              data = Legion::Crypt.get(vault_path)
+              data = vault_get
               if data && data[:access_token]
                 @mutex.synchronize do
                   @delegated_cache = {
@@ -270,7 +271,7 @@ module Legion
             delegated[:refresh_buffer] || REFRESH_BUFFER
           end
 
-          def vault_path
+          def vault_path(_suffix = nil)
             settings = teams_auth_settings
             delegated = settings[:delegated]
             custom = delegated[:vault_path] if delegated.is_a?(Hash)
@@ -385,7 +386,8 @@ module Legion
           def teams_auth_settings
             return {} unless defined?(Legion::Settings)
 
-            Legion::Settings.dig(:microsoft_teams, :auth) || {}
+            ms = Legion::Settings[:microsoft_teams]
+            (ms && ms[:auth]) || {}
           end
         end
       end

data/lib/legion/extensions/microsoft_teams/hooks/auth.rb

@@ -7,11 +7,7 @@ module Legion
         class Auth < Legion::Extensions::Hooks::Base
           mount '/callback'
 
-          def route(_headers, _payload)
-            :auth_callback
-          end
-
-          def runner_class
+          def self.runner_class
             'Legion::Extensions::MicrosoftTeams::Runners::Auth'
           end
         end

data/lib/legion/extensions/microsoft_teams/runners/auth.rb

@@ -124,6 +124,7 @@ module Legion
                           body: callback_success_html }
             }
           end
+          alias handle auth_callback
 
           private
 

data/lib/legion/extensions/microsoft_teams/version.rb

@@ -3,7 +3,7 @@
 module Legion
   module Extensions
     module MicrosoftTeams
-      VERSION = '0.6.24'
+      VERSION = '0.6.26'
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: lex-microsoft_teams
 version: !ruby/object:Gem::Version
-  version: 0.6.24
+  version: 0.6.26
 platform: ruby
 authors:
 - Esity