fancy-microsoft-teams 0.2.0__tar.gz

fancy_microsoft_teams-0.2.0/.gitignore

@@ -0,0 +1,24 @@
+node_modules/
+dist/
+vendor/
+.venv/
+__pycache__/
+*.egg-info/
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+
+# Lockfiles are NOT source of a generated repo.
+#
+# The generator cannot emit one -- a lockfile is the result of a network
+# resolve -- and "a provider repo must be generated and re-generatable" is the
+# constraint the whole estate rests on. At a few hundred repos, a committed
+# lockfile each is a few hundred files nothing can regenerate and a few hundred
+# Dependabot surfaces.
+#
+# The trade is real and worth stating: CI resolves fresh on every run, so an
+# upstream release inside the declared range can break a build with no change
+# here. That is early warning rather than a surprise at publish time, and the
+# ranges are deliberately narrow (>=X <2.0, never a caret on a 0.x).
+composer.lock
+package-lock.json

fancy_microsoft_teams-0.2.0/CHANGELOG.md

@@ -0,0 +1,55 @@
+# Changelog — Microsoft Teams
+
+All four packages — `@particle-academy/microsoft-teams-ui`, `@particle-academy/microsoft-teams-js`,
+`particle-academy/microsoft-teams-php` and `fancy-microsoft-teams` — are released together
+under one version. They are generated from one `provider/` definition, so a
+change to it changes all four, and separate version lines would only record
+which of the four somebody remembered to bump.
+
+**Write entries HERE**, in the weaver envelope at `providers/microsoft-teams/CHANGELOG.md`,
+then regenerate. This file is the one thing in a release that cannot be
+derived — somebody has to write what changed — but writing it in the
+provider repo would be a hand-edit that `.weaver.json` flags and the next
+sync destroys.
+
+## [0.2.0] — 2026-11-08
+
+### Added
+
+- **Laravel integration, in this package** (`src/Laravel/`), auto-discovered
+  through composer's `extra.laravel`. Laravel is SUGGESTED, never required:
+  outside a Laravel app none of it loads.
+  - a service provider that merges `config/microsoft-teams.php` under
+    `connectors.microsoft-teams` (credentials from the environment, or per call for a
+    multi-account app);
+  - the `MicrosoftTeams` facade: `MicrosoftTeams::call('<operation>', [...])` runs any action;
+  - `MicrosoftTeams::fake()`, answered from the connector's faker, with
+    `assertSent` / `assertNotSent` / `assertNothingSent` / `assertSentCount`;
+  - its own Pest test of all of it against a booted Laravel app.
+
+### Changed
+
+- **Tests: Pest `^5`**, and `laravel/framework` `^13` as a DEV-ONLY test
+  dependency (the framework this package integrates with; nothing ships in
+  `require`).
+
+## [0.1.0] — 2026-09-16
+
+### Added
+
+- **`meeting_create`** — create a Teams meeting on behalf of a user and get its join link (`POST /users/{userId}/onlineMeetings`, application permission `OnlineMeetings.ReadWrite.All`).
+- **`meeting_get`** — read a meeting's current details (`GET /users/{userId}/onlineMeetings/{meetingId}`).
+- **`transcript_list`** — a finished meeting's transcripts (`GET /users/{userId}/onlineMeetings/{meetingId}/transcripts`, application permission `OnlineMeetingTranscript.Read.All`). Only `transcriptContentUrl` is published, a raw-VTT download reached directly — unlike Google Meet, Graph exposes no structured per-utterance JSON here, so no text-extraction action was built, the same "bytes never pass through the connector" call Resend already made.
+- OAuth2 at `login.microsoftonline.com`, reusing microsoft-outlook's already-verified `refreshTokenRotates: false` reasoning and M365 Developer Program sandbox note. Every operation additionally requires a tenant administrator to grant this app an application access policy naming the target user — consent alone is not enough.
+
+**This is the THIRD and LAST connector prerequisite for Tynn #9 (MOIC's
+meeting bot), after Zoom and Google Meet.** The BOT RUNTIME — a service that
+actually joins a call and streams live media — is the owner's architecture
+decision, not this connector's; Graph's own path there is an
+application-hosted media bot (a .NET/Azure service), not a REST connector.
+What ships here: create a meeting, read it back, and find a finished
+meeting's transcript.
+
+Verified against Microsoft Learn's own reference pages
+(`application-post-onlinemeetings`, `onlinemeeting-get`,
+`onlinemeeting-list-transcripts`) on 2026-09-16.

fancy_microsoft_teams-0.2.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Particle Academy
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

fancy_microsoft_teams-0.2.0/PKG-INFO

@@ -0,0 +1,154 @@
+Metadata-Version: 2.5
+Name: fancy-microsoft-teams
+Version: 0.2.0
+Summary: Microsoft Teams for Python — the service descriptor, its faker, its webhook verification, and one function per operation. Plain HTTP; no vendor SDK.
+Project-URL: Homepage, https://github.com/Fancy-Friends/microsoft-teams
+Project-URL: Issues, https://github.com/Fancy-Friends/microsoft-teams/issues
+Project-URL: Source, https://github.com/Fancy-Friends/microsoft-teams
+Author: Particle Academy
+License-Expression: MIT
+License-File: LICENSE
+Keywords: api,connector,fancy-flow,messaging,microsoft_teams,particle-academy
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Software Development :: Libraries
+Classifier: Typing :: Typed
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+
+# Microsoft Teams
+
+[![Fancified](art/fancified.svg)](https://particle.academy)
+
+Microsoft Teams for [fancy-flow][flow] — as **four imported, versioned packages**, one
+per runtime. Not vendored source: a copy cannot be upgraded, and third-party APIs
+change.
+
+[flow]: https://github.com/Particle-Academy/fancy-flow
+
+| Runtime | Package | Install |
+|---|---|---|
+| Authoring surface (every host) | `@particle-academy/microsoft-teams-ui` | `npm install @particle-academy/microsoft-teams-ui` |
+| Node | `@particle-academy/microsoft-teams-js` | `npm install @particle-academy/microsoft-teams-js` |
+| PHP 8.4+ | `particle-academy/microsoft-teams-php` | `composer require particle-academy/microsoft-teams-php` |
+| Python 3.11+ | `fancy-microsoft-teams` | `pip install fancy-microsoft-teams` |
+
+The `ui` package is the editor surface and is React on every host — a PHP or
+Python project installs it *and* its own runtime package, and never the `js` one.
+
+## What it costs you
+
+One dependency: `@particle-academy/fancy-connector-core` (or
+`particle-academy/fancy-connector-core` on Composer), which the `js` and `php`
+packages pull in themselves. The Python package has **zero** runtime
+dependencies.
+
+**No Microsoft Teams SDK.** Plain HTTP, deliberately: a vendor SDK is third-party code
+subject to the kit's full approval bar, and one per provider is hundreds of
+dependencies nobody is tracking.
+
+## Setting it up
+
+Everything below is generated from `provider/manifest.json`, so it cannot disagree with what the packages do.
+
+### On Microsoft Teams's side
+
+1. **Register an app and add the OAuth redirect URL** — In the Microsoft Entra admin center, App registrations, register (or reuse) an app and add **your host's OAuth redirect URL** under Authentication as a Web redirect URI. Record the Application (client) ID and create a client secret. ([learn.microsoft.com](https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app))
+2. **Grant the app an application access policy naming the target user** — OAuth consent alone does not authorize meeting_create, meeting_get or transcript_list -- Microsoft Graph refuses every call with "No application access policy found for this app" until a tenant administrator runs New-CsApplicationAccessPolicy (with this app's client ID) and Grant-CsApplicationAccessPolicy naming the userId these operations will act on. Changes take up to 30 minutes to reach the Graph REST API. ([learn.microsoft.com](https://learn.microsoft.com/en-us/graph/cloud-communication-online-meeting-application-access-policy))
+
+### Credentials
+
+A Microsoft Teams connection holds 4 values.
+
+**Two kinds of value, and mixing them up matters.** A `provider` credential is ONE value for the whole installation — an OAuth app's client secret serves every connected account. An `account` credential is one per connected account. A host that stores the second where it stores the first lets one account's credentials reach another's.
+
+| Field | Scope | Secret | Where it comes from |
+|---|---|---|---|
+| **Application (client) ID** | per installation | not secret | From the Microsoft Entra admin center -> App registrations. ONE value for the whole installation, not per connected account. |
+| **Client secret** | per installation | **secret** | A client secret of the same app registration. One value for the whole installation; Entra expires them, so record the expiry. |
+| **Access token** | per connected account | **secret** | Per connected Microsoft account, and it expires after about ONE HOUR. The host refreshes it with the refresh token. |
+| **Refresh token** *(optional)* | per connected account | **secret** | Per connected Microsoft account; issued only when the consent request includes offline_access. Every refresh answers with a NEW one -- persist it. |
+
+### Authorising
+
+Microsoft Teams uses OAuth2 (authorization_code). The package DECLARES the exchange; the HOST performs it — a consent screen needs a browser, a redirect URI and somewhere to persist the result, and all three belong to the host.
+
+- **Authorize URL** — https://login.microsoftonline.com/common/oauth2/v2.0/authorize
+- **Token URL** — https://login.microsoftonline.com/common/oauth2/v2.0/token
+- **Scopes** — `OnlineMeetings.ReadWrite.All`, `OnlineMeetingTranscript.Read.All`, `offline_access`
+- **Access token lifetime** — 3600 seconds (1 hours). A host that never refreshes works all afternoon and is broken by morning.
+
+The refresh tokens do **not** rotate: the same one is reusable, so a refresh may safely be retried and may run concurrently. Stated rather than assumed, because the opposite — a provider that spends the token and revokes the grant on a replay — looks identical until it happens.
+
+### The estate
+
+Microsoft Teams has a test estate on the same host, reached with credentials from a SEPARATE test account you register. Selecting sandbox mode uses those credentials.
+
+> Microsoft's test estate is a Microsoft 365 Developer Program sandbox: a separate E5 tenant with its own users and its own OAuth consent, on the SAME host -- the same fact microsoft-outlook already verified for Graph generally. Eligibility is limited (Visual Studio Professional/Enterprise, ISV Success / MAICPP partners, or Premier/Unified Support) and the tenant expires after 90 days of no development activity. Without one, every call reaches a real tenant.
+
+## What it can do
+
+### Actions
+
+#### `meeting_create` — Create meeting
+
+Create a Teams meeting on behalf of a user and get its join link.
+
+`POST /v1.0/users/{userId}/onlineMeetings` · **unsafe to replay** — a retried durable run does it TWICE
+
+| Input | Required | What it is |
+|---|---|---|
+| `userId` | yes | The Microsoft Entra object id of the user the meeting is created on behalf of -- the one named in the application access policy a tenant admin granted this app. |
+| `subject` | no | Subject |
+| `startDateTime` | yes | ISO 8601 with an offset or Z, e.g. 2026-09-22T14:00:00Z. |
+| `endDateTime` | yes | ISO 8601 with an offset or Z. |
+| `passcodeRequired` | no | Passcodes are auto-generated by Teams; a custom one is not supported. Leave off for no passcode. |
+
+#### `meeting_get` — Get meeting
+
+Read a Teams meeting's current details.
+
+`GET /v1.0/users/{userId}/onlineMeetings/{meetingId}` · reads only — safe to replay
+
+| Input | Required | What it is |
+|---|---|---|
+| `userId` | yes | The meeting organizer's Microsoft Entra object id. |
+| `meetingId` | yes | From meeting_create's data.id. |
+
+#### `transcript_list` — List transcripts
+
+List a finished meeting's transcripts and their download URLs.
+
+`GET /v1.0/users/{userId}/onlineMeetings/{meetingId}/transcripts` · reads only — safe to replay
+
+| Input | Required | What it is |
+|---|---|---|
+| `userId` | yes | The meeting organizer's Microsoft Entra object id. |
+| `meetingId` | yes | From meeting_create's data.id. |
+
+## Run it before you have credentials
+
+Every operation ships a **faker**, whether or not Microsoft Teams has a sandbox. Set a
+node's mode to `fake` and it returns the shape Microsoft Teams actually publishes — the
+same field names, deterministically — so you can wire the downstream nodes before
+touching an account, a key, or a network.
+
+## This repository is generated
+
+`provider/` is the source. Everything under `packages/` is emitted from it and
+**must not be hand-edited** — CI regenerates and diffs on every push, and the
+next protocol sync destroys anything it finds. See [`AGENTS.md`](AGENTS.md).
+
+## Two namespaces, which do not match on purpose
+
+The repo is `github.com/Fancy-Friends/microsoft-teams`; the packages publish under
+`particle-academy`. Nothing derives one from the other — the names come from
+weaver's `friends.json` and nowhere else.
+
+## Licence
+
+MIT.

fancy_microsoft_teams-0.2.0/README.md

@@ -0,0 +1,132 @@
+# Microsoft Teams
+
+[![Fancified](art/fancified.svg)](https://particle.academy)
+
+Microsoft Teams for [fancy-flow][flow] — as **four imported, versioned packages**, one
+per runtime. Not vendored source: a copy cannot be upgraded, and third-party APIs
+change.
+
+[flow]: https://github.com/Particle-Academy/fancy-flow
+
+| Runtime | Package | Install |
+|---|---|---|
+| Authoring surface (every host) | `@particle-academy/microsoft-teams-ui` | `npm install @particle-academy/microsoft-teams-ui` |
+| Node | `@particle-academy/microsoft-teams-js` | `npm install @particle-academy/microsoft-teams-js` |
+| PHP 8.4+ | `particle-academy/microsoft-teams-php` | `composer require particle-academy/microsoft-teams-php` |
+| Python 3.11+ | `fancy-microsoft-teams` | `pip install fancy-microsoft-teams` |
+
+The `ui` package is the editor surface and is React on every host — a PHP or
+Python project installs it *and* its own runtime package, and never the `js` one.
+
+## What it costs you
+
+One dependency: `@particle-academy/fancy-connector-core` (or
+`particle-academy/fancy-connector-core` on Composer), which the `js` and `php`
+packages pull in themselves. The Python package has **zero** runtime
+dependencies.
+
+**No Microsoft Teams SDK.** Plain HTTP, deliberately: a vendor SDK is third-party code
+subject to the kit's full approval bar, and one per provider is hundreds of
+dependencies nobody is tracking.
+
+## Setting it up
+
+Everything below is generated from `provider/manifest.json`, so it cannot disagree with what the packages do.
+
+### On Microsoft Teams's side
+
+1. **Register an app and add the OAuth redirect URL** — In the Microsoft Entra admin center, App registrations, register (or reuse) an app and add **your host's OAuth redirect URL** under Authentication as a Web redirect URI. Record the Application (client) ID and create a client secret. ([learn.microsoft.com](https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app))
+2. **Grant the app an application access policy naming the target user** — OAuth consent alone does not authorize meeting_create, meeting_get or transcript_list -- Microsoft Graph refuses every call with "No application access policy found for this app" until a tenant administrator runs New-CsApplicationAccessPolicy (with this app's client ID) and Grant-CsApplicationAccessPolicy naming the userId these operations will act on. Changes take up to 30 minutes to reach the Graph REST API. ([learn.microsoft.com](https://learn.microsoft.com/en-us/graph/cloud-communication-online-meeting-application-access-policy))
+
+### Credentials
+
+A Microsoft Teams connection holds 4 values.
+
+**Two kinds of value, and mixing them up matters.** A `provider` credential is ONE value for the whole installation — an OAuth app's client secret serves every connected account. An `account` credential is one per connected account. A host that stores the second where it stores the first lets one account's credentials reach another's.
+
+| Field | Scope | Secret | Where it comes from |
+|---|---|---|---|
+| **Application (client) ID** | per installation | not secret | From the Microsoft Entra admin center -> App registrations. ONE value for the whole installation, not per connected account. |
+| **Client secret** | per installation | **secret** | A client secret of the same app registration. One value for the whole installation; Entra expires them, so record the expiry. |
+| **Access token** | per connected account | **secret** | Per connected Microsoft account, and it expires after about ONE HOUR. The host refreshes it with the refresh token. |
+| **Refresh token** *(optional)* | per connected account | **secret** | Per connected Microsoft account; issued only when the consent request includes offline_access. Every refresh answers with a NEW one -- persist it. |
+
+### Authorising
+
+Microsoft Teams uses OAuth2 (authorization_code). The package DECLARES the exchange; the HOST performs it — a consent screen needs a browser, a redirect URI and somewhere to persist the result, and all three belong to the host.
+
+- **Authorize URL** — https://login.microsoftonline.com/common/oauth2/v2.0/authorize
+- **Token URL** — https://login.microsoftonline.com/common/oauth2/v2.0/token
+- **Scopes** — `OnlineMeetings.ReadWrite.All`, `OnlineMeetingTranscript.Read.All`, `offline_access`
+- **Access token lifetime** — 3600 seconds (1 hours). A host that never refreshes works all afternoon and is broken by morning.
+
+The refresh tokens do **not** rotate: the same one is reusable, so a refresh may safely be retried and may run concurrently. Stated rather than assumed, because the opposite — a provider that spends the token and revokes the grant on a replay — looks identical until it happens.
+
+### The estate
+
+Microsoft Teams has a test estate on the same host, reached with credentials from a SEPARATE test account you register. Selecting sandbox mode uses those credentials.
+
+> Microsoft's test estate is a Microsoft 365 Developer Program sandbox: a separate E5 tenant with its own users and its own OAuth consent, on the SAME host -- the same fact microsoft-outlook already verified for Graph generally. Eligibility is limited (Visual Studio Professional/Enterprise, ISV Success / MAICPP partners, or Premier/Unified Support) and the tenant expires after 90 days of no development activity. Without one, every call reaches a real tenant.
+
+## What it can do
+
+### Actions
+
+#### `meeting_create` — Create meeting
+
+Create a Teams meeting on behalf of a user and get its join link.
+
+`POST /v1.0/users/{userId}/onlineMeetings` · **unsafe to replay** — a retried durable run does it TWICE
+
+| Input | Required | What it is |
+|---|---|---|
+| `userId` | yes | The Microsoft Entra object id of the user the meeting is created on behalf of -- the one named in the application access policy a tenant admin granted this app. |
+| `subject` | no | Subject |
+| `startDateTime` | yes | ISO 8601 with an offset or Z, e.g. 2026-09-22T14:00:00Z. |
+| `endDateTime` | yes | ISO 8601 with an offset or Z. |
+| `passcodeRequired` | no | Passcodes are auto-generated by Teams; a custom one is not supported. Leave off for no passcode. |
+
+#### `meeting_get` — Get meeting
+
+Read a Teams meeting's current details.
+
+`GET /v1.0/users/{userId}/onlineMeetings/{meetingId}` · reads only — safe to replay
+
+| Input | Required | What it is |
+|---|---|---|
+| `userId` | yes | The meeting organizer's Microsoft Entra object id. |
+| `meetingId` | yes | From meeting_create's data.id. |
+
+#### `transcript_list` — List transcripts
+
+List a finished meeting's transcripts and their download URLs.
+
+`GET /v1.0/users/{userId}/onlineMeetings/{meetingId}/transcripts` · reads only — safe to replay
+
+| Input | Required | What it is |
+|---|---|---|
+| `userId` | yes | The meeting organizer's Microsoft Entra object id. |
+| `meetingId` | yes | From meeting_create's data.id. |
+
+## Run it before you have credentials
+
+Every operation ships a **faker**, whether or not Microsoft Teams has a sandbox. Set a
+node's mode to `fake` and it returns the shape Microsoft Teams actually publishes — the
+same field names, deterministically — so you can wire the downstream nodes before
+touching an account, a key, or a network.
+
+## This repository is generated
+
+`provider/` is the source. Everything under `packages/` is emitted from it and
+**must not be hand-edited** — CI regenerates and diffs on every push, and the
+next protocol sync destroys anything it finds. See [`AGENTS.md`](AGENTS.md).
+
+## Two namespaces, which do not match on purpose
+
+The repo is `github.com/Fancy-Friends/microsoft-teams`; the packages publish under
+`particle-academy`. Nothing derives one from the other — the names come from
+weaver's `friends.json` and nowhere else.
+
+## Licence
+
+MIT.

fancy_microsoft_teams-0.2.0/art/fancified.svg

@@ -0,0 +1,26 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="128" height="28" role="img" aria-label="Fancified — built with Fancy UI">
+  <title>Fancified · built with Fancy UI</title>
+  <defs>
+    <linearGradient id="fcdBg" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#6d28d9"/>
+      <stop offset=".5" stop-color="#9333ea"/>
+      <stop offset="1" stop-color="#d946ef"/>
+    </linearGradient>
+    <linearGradient id="fcdGloss" x1="0" y1="0" x2="0" y2="1">
+      <stop offset="0" stop-color="#ffffff" stop-opacity=".30"/>
+      <stop offset=".55" stop-color="#ffffff" stop-opacity="0"/>
+    </linearGradient>
+    <clipPath id="fcdClip"><rect width="128" height="28" rx="7"/></clipPath>
+  </defs>
+  <g clip-path="url(#fcdClip)">
+    <rect width="128" height="28" fill="url(#fcdBg)"/>
+    <rect width="34" height="28" fill="#3b0764" fill-opacity=".5"/>
+    <rect width="128" height="13" fill="url(#fcdGloss)"/>
+    <g fill="#fff">
+      <path transform="translate(17 14)" d="M0 -7 C.6 -2.2 2.2 -.6 7 0 C2.2 .6 .6 2.2 0 7 C-.6 2.2 -2.2 .6 -7 0 C-2.2 -.6 -.6 -2.2 0 -7 Z"/>
+      <path transform="translate(25.5 7.5) scale(.34)" fill-opacity=".85" d="M0 -7 C.6 -2.2 2.2 -.6 7 0 C2.2 .6 .6 2.2 0 7 C-.6 2.2 -2.2 .6 -7 0 C-2.2 -.6 -.6 -2.2 0 -7 Z"/>
+    </g>
+    <text x="81" y="18.5" fill="#ffffff" text-anchor="middle" font-family="'Segoe UI',Verdana,'DejaVu Sans',sans-serif" font-size="12" font-weight="700" letter-spacing=".3">Fancified</text>
+  </g>
+  <rect x=".5" y=".5" width="127" height="27" rx="6.5" fill="none" stroke="#ffffff" stroke-opacity=".22"/>
+</svg>

fancy_microsoft_teams-0.2.0/pyproject.toml

@@ -0,0 +1,87 @@
+[build-system]
+requires = ["hatchling>=1.27"]
+build-backend = "hatchling.build"
+
+[project]
+name = "fancy-microsoft-teams"
+version = "0.2.0"
+description = "Microsoft Teams for Python — the service descriptor, its faker, its webhook verification, and one function per operation. Plain HTTP; no vendor SDK."
+readme = "README.md"
+# 3.11 matches fancy-flow-py's floor: 3.10 reaches end of life on 2026-10-31,
+# and a floor that dies before the package's second release is not a floor.
+requires-python = ">=3.11"
+license = "MIT"
+license-files = ["LICENSE"]
+authors = [{ name = "Particle Academy" }]
+keywords = ["microsoft_teams", "messaging", "connector", "api", "fancy-flow", "particle-academy"]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Intended Audience :: Developers",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Topic :: Software Development :: Libraries",
+    "Typing :: Typed",
+]
+
+# ZERO runtime dependencies, and that is a design constraint rather than an
+# accident. There is no Python twin of fancy-connector-core to depend on, and a
+# vendor SDK is third-party code subject to the kit's full approval bar — one
+# SDK per provider is hundreds of dependencies nobody is tracking. The HTTP is
+# stdlib `urllib`; the HMAC is stdlib `hmac`.
+dependencies = []
+
+[project.urls]
+Homepage = "https://github.com/Fancy-Friends/microsoft-teams"
+Issues = "https://github.com/Fancy-Friends/microsoft-teams/issues"
+Source = "https://github.com/Fancy-Friends/microsoft-teams"
+
+[dependency-groups]
+# Not optional. A package with no way to run its tests reports green by doing
+# nothing, which is the one defect that hides itself.
+test = ["pytest>=8.0"]
+lint = ["ruff>=0.16"]
+typecheck = ["mypy>=1.11"]
+dev = [{ include-group = "test" }, { include-group = "lint" }, { include-group = "typecheck" }]
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/fancy_microsoft_teams"]
+
+[tool.hatch.build.targets.sdist]
+include = ["/src", "/tests", "/art", "/README.md", "/CHANGELOG.md", "/LICENSE"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+# importlib mode pairs with src-layout: the working tree is never on sys.path,
+# so the tests exercise the INSTALLED package. Under the default mode a missing
+# py.typed or an unshipped file passes locally and breaks for every user.
+addopts = "--import-mode=importlib -ra"
+
+[tool.ruff]
+line-length = 100
+src = ["src", "tests"]
+target-version = "py311"
+
+[tool.ruff.lint]
+# `S` — flake8-bandit — is ON, and it is the one addition worth arguing for: this
+# package handles a credential, builds an HMAC, and opens a URL. Security lint
+# belongs on exactly this code.
+#
+# It also makes the two `# noqa: S310` in _runtime.py MEANINGFUL. Without `S`
+# selected, ruff reports them as unused directives (RUF100) and the obvious fix
+# is to delete them — which quietly removes a security annotation because a
+# linter was not looking for it.
+select = ["E", "F", "I", "UP", "B", "SIM", "RUF", "N", "C4", "PT", "S"]
+
+[tool.ruff.lint.per-file-ignores]
+# pytest's whole idiom is bare `assert`. S101 would fail every test file.
+"tests/*" = ["S101"]
+
+[tool.mypy]
+python_version = "3.11"
+packages = ["fancy_microsoft_teams"]
+mypy_path = "src"
+strict = true
+disallow_any_expr = false
+disallow_any_explicit = false

fancy_microsoft_teams-0.2.0/src/fancy_microsoft_teams/__init__.py

@@ -0,0 +1,41 @@
+# GENERATED FILE — do not edit.
+#
+# Emitted from provider/manifest.json by weaver's generator.
+# A hand-edit here is destroyed by the next protocol sync, which is worse than
+# being rejected, because it works until it silently does not. Fix
+# provider/manifest.json (or weaver's template/) and regenerate:
+#
+# npm run provider -- microsoft_teams
+
+"""Microsoft Teams for Python.
+
+The service descriptor, its faker, its delivery contract, and one function
+per operation — plain HTTP on the stdlib, no vendor SDK and no runtime
+dependency.
+"""
+
+from __future__ import annotations
+
+from ._fake import FakeValues
+from .actions.meeting_create import meeting_create
+from .actions.meeting_get import meeting_get
+from .actions.transcript_list import transcript_list
+from .faker import respond
+from .service import BASE_URLS, CONNECTOR_API_VERSION, REQUIRES, SANDBOX, SERVICE, TITLE, descriptor
+
+__version__ = "0.2.0"
+
+__all__ = [
+    "BASE_URLS",
+    "CONNECTOR_API_VERSION",
+    "REQUIRES",
+    "SANDBOX",
+    "SERVICE",
+    "TITLE",
+    "FakeValues",
+    "descriptor",
+    "meeting_create",
+    "meeting_get",
+    "respond",
+    "transcript_list",
+]