`gjdZddlmZddlZddlZddlZddlZddlZddlm Z m Z m Z ddl m Z  ddlmZdZ dd lmZmZdd lmZdd lmZmZdd lmZdd lmZddlmZm Z ddl!m"Z"m#Z#ddl$m%Z%m&Z&m'Z'm(Z(ddl)m*Z*m+Z+m,Z,dZ-ddl/m0Z0m1Z1ddl2m3Z3ddl4m5Z5m6Z6m7Z7m8Z8m9Z9m:Z:ejve<Z=dZ>dZ?dZ@ddd1dZAe>dd2dZBGddZCGddZDGdd ZEd3d!ZFd3d"ZGd3d#ZHd4d$ZId%ZJeKd&d'hZLddlMZNeNjd(ZPd5d)ZQdddd* d6d+ZRd3d,ZSGd-d.e5ZTd7d/ZUd7d0ZVy#e$rdZdZYwxYw#e$r*dZ-dZdZdZdZdZdZdZdZdZ dZ#dZ"e.Z%dZ&dZ'dZ(dZ*dZ+dZ,YwxYw)8a Microsoft Teams platform adapter for Hermes Agent. Uses the microsoft-teams-apps SDK for authentication and activity processing. Runs an aiohttp webhook server to receive messages from Teams. Proactive messaging (send, typing) uses the SDK's App.send() method. Requires: pip install microsoft-teams-apps aiohttp TEAMS_CLIENT_ID, TEAMS_CLIENT_SECRET, and TEAMS_TENANT_ID env vars Configuration in config.yaml: platforms: teams: enabled: true extra: client_id: "your-client-id" # or TEAMS_CLIENT_ID env var client_secret: "your-secret" # or TEAMS_CLIENT_SECRET env var tenant_id: "your-tenant-id" # or TEAMS_TENANT_ID env var port: 3978 # or TEAMS_PORT env var ) annotationsN)AnyDictOptional)quotewebTFAppActivityContext ClientOptionsMessageActivityConversationReferenceTypingActivityInputAdaptiveCardInvokeActivityAdaptiveCardActionCardResponse!AdaptiveCardActionMessageResponseInvokeResponseAdaptiveCardInvokeResponse HttpMethod HttpRequest HttpResponseHttpRouteHandler AdaptiveCard ExecuteAction TextBlock)PlatformPlatformConfig)MessageDeduplicator)BasePlatformAdapter MessageEvent MessageType SendResultcache_image_from_urlcache_media_bytesiiz /api/messagesdefaultct|tr|St|tr(|jj }|dvry|dvry|S)N>1onyestrueT>0noofffalseF) isinstanceboolstrstriplower)valuer/ normalizeds R/root/.hermes/venv/lib/python3.12/site-packages/plugins/platforms/teams/adapter.py _parse_boolrAosL% %[[]((* 3 3 4 4 NcH t|S#ttf$r|cYSwxYwN)int TypeError ValueError)r>r/s r@ _coerce_portrH{s*5z z "s !!c.eZdZdZddZddd dZd dZy) _StaticAccessTokenProviderzSMinimal token-provider shim so outbound Graph delivery can reuse the shared client.cHt|xsdj|_yN)r;r< _access_token)self access_tokens r@__init__z#_StaticAccessTokenProvider.__init__s !34::<rBF) force_refreshcRK~|js td|jSw)Nz=TEAMS_GRAPH_ACCESS_TOKEN is required for graph delivery mode.)rNrG)rOrRs r@get_access_tokenz+_StaticAccessTokenProvider.get_access_tokens* !!\] ]!!!s%'cyrDrOs r@ clear_cachez&_StaticAccessTokenProvider.clear_cachesrBN)rPr;)rRr:returnr;rYNone)__name__ __module__ __qualname____doc__rQrTrXrVrBr@rJrJs]=?D" rBrJceZdZdZ dddd ddZ d ddZddZ ddZ ddZdd Z dd Z dd Z e dd Z e dd ZeddZy)TeamsSummaryWriteraPipeline-facing Teams outbound delivery surface. This stays inside the existing Teams platform plugin so the meeting-pipeline PR can reuse one Teams integration surface instead of introducing a second adapter elsewhere in the gateway core. N) graph_client transportc.||_||_||_yrD)_platform_config _graph_client _transport)rOplatform_configrbrcs r@rQzTeamsSummaryWriter.__init__s!0)#rBcHK|j|}|r't|jdds t|St |jdxs|jdxsdj j }|sI|jdrd}n5|jd s"|jd r|jd rd }|dk(r|j||d{S|d k(r|j||d{Std 7.7w)N force_resendFr. delivery_modemoderMincoming_webhook_urlincoming_webhookchat_idteam_id channel_idgraphz:Teams delivery_mode must be 'incoming_webhook' or 'graph'.) _resolve_delivery_configrAgetdictr;r<r=#_write_summary_via_incoming_webhook_write_summary_via_graphrG)rOpayloadconfigexisting_recordmergedrls r@ write_summaryz TeamsSummaryWriter.write_summarys ..v6 ;vzz./ISX#Y( (6::o.J&**V2DJKQQSYY[zz01)I& 9%&**\*B % %AA'6RR R 7?66wGG G H  SGs$C-D"/D0D"D D" D"c i}|j}|y|jt|jxsi|jrd|vr|j|d<|j r&|j d|j j|jt|xsitjddtjddtjddtjddtjddtjd dd }|jD]\}}|s |j|r|||<!|S) NrPrqTEAMS_DELIVERY_MODErMTEAMS_INCOMING_WEBHOOK_URLTEAMS_GRAPH_ACCESS_TOKEN TEAMS_TEAM_IDTEAMS_CHANNEL_ID TEAMS_CHAT_ID)rkrmrPrprqro) reupdateruextratoken home_channel setdefaultroosgetenvitemsrt)rOryr{ platform_cfg env_defaultskeyr>s r@rsz+TeamsSummaryWriter._resolve_delivery_configs*!#,,  # MM$|117R8 9!!nF&B)5););~&((!!, 0I0I0Q0QR d6?$$TT__$M ( (QW#[[4[@@H  % % ' ( (0&#//    (@ ( ( ( (sZA2C 4C5C 8C CC $ C /C 0C C  C  CC CC c6K|j|}t|jdxsdj}|rndt |dd}|j |dd|j |di d{}d d ||xsijd |xsijd dSt|jdxsdj}t|jdxsdj}|r|s tddt |ddt |dd}|j |dd|j |di d{}d d|||xsijd |xsijd dS776w)NrorMz/chats/)safez /messagesrhtml) contentTypecontent) json_bodyrrchatidwebUrl)rk target_typero message_idweb_urlrprqzEGraph delivery mode requires chat_id, or both team_id and channel_id.z/teams/z /channels/channel)rkrrprqrr)_build_graph_clientr;rtr<r post_json_render_summary_htmlrG) rOrxryrbropathrrprqs r@rwz+TeamsSummaryWriter._write_summary_via_graphs //7 fjj+1r288: U745Y?D)33!6dF_F_`gFh#ij4H ")%"'~22248$N//9  fjj+1r288:L17R8>>@ jW eG"-.jZb)*) 5 &// v$B[B[\cBdef0   %$$#>r..t4 B++H5   5, s%A;F=F>C"F F!4FFc$|j |jSddlm}ddlm}t |j dxsdj}|r|t||jS||j|jS)Nr)MicrosoftGraphTokenProvider)MicrosoftGraphClientrPrM)rc) rftools.microsoft_graph_authrtools.microsoft_graph_clientrr;rtr<rJrgfrom_env)rOryrrrPs r@rz&TeamsSummaryWriter._build_graph_clients    )%% %JE6::n5;<BBD '*<8// $ ' 0 0 2oo  rBc Ld|j|ddd|jt|dddddg|jt|dddd|jt|d ddd |jt|d d}d j |S) Nz**rMz Summary: summaryNo summary available.zKey decisions: key_decisionsz Action items: action_itemszRisks:risks )_title_textgetattr _bullet_linesjoin)rOrxliness r@rz+TeamsSummaryWriter._render_summary_markdown,sW%&b )  77It#DF]^_ `      $ G H           F G          $ ? @  yyrBc d|jt|dddgfdtt|ddxsgfdtt|ddxsgfdtt|d dxsgfg}d tj|j |d g}|D]\}}|j d tj|d t|dk(r:|dk(r5|j dtjt|ddv|r6djd|D}|j |xrd|dxsd|j ddj|S)NSummaryrrz Key decisionsrz Action itemsrRisksrz

z

z

z

z

rz

rMc3K|]@}t|jsdtjt|dByw)z
  • z
    • N)r;r<rescape).0items r@ z:TeamsSummaryWriter._render_summary_html..Ks9"oD]`ae]f]l]l]nT$++c$i*@)A#G"os A'Az
      z
    z

    None

    ) rrlistrrrappendlenr;r)rOrxsectionsblocksheadingrrendereds r@rz'TeamsSummaryWriter._render_summary_html=sa GGY$EG^_` a d77OT#J#PbQ R T''>4"H"NBO P d77GT:@bA B   T[[%9:;5AB& -NGU MMDW!5 6e< =5zQ7i#7 DKKE!H $>#?tDE77"oTY"oo hAT(5+AR]S m, -wwvrBct|dd}|r t|St|dd}|r t|ddnd}d|xsdS)Ntitle meeting_ref meeting_idzMeeting r)rr;)rxrrrs r@rzTeamsSummaryWriter._titleQsQ$/ u: g}d; ALW[,=RV *1 233rBcHt|xsdj}|xs|SrLr;r<)r>r/rs r@rzTeamsSummaryWriter._textZs#5;B%%'wrBc|xsgDcgc]5}t|jst|j7}}|Dcgc]}d| c}xsdgScc}wcc}w)Nz- z- Noner)clsvaluesrrs r@rz TeamsSummaryWriter._bullet_lines_sX06 "StTART"SS(-."TF .<8*<T.sAA A"rD)rhzPlatformConfig | Nonerbz Any | Nonerczhttpx.AsyncBaseTransport | NonerYr[)rxrrydict[str, Any] | NonerzzOptional[dict[str, Any]]rYdict[str, Any])ryrrYr)rxrryrrYr)ryrrYr)rxrrYr;)r>rr/r;rYr;)rrrYz list[str])r\r]r^r_rQr|rsrvrwrrr staticmethodrr classmethodrrVrBr@raras26 $$(59 $. $! $ 3 $  $59   & 2    40      .* * *   * X $ "(44==rBrac8eZdZdZddZd dZd dZd dZd dZy) _AiohttpBridgeAdaptera3HttpServerAdapter that bridges the Teams SDK into an aiohttp server. Without a custom adapter, ``App()`` unconditionally imports fastapi/uvicorn and allocates a ``FastAPI()`` instance. This bridge captures the SDK's route registrations and wires them into our own aiohttp ``Application``. c||_yrD) _aiohttp_app)rO aiohttp_apps r@rQz_AiohttpBridgeAdapter.__init__ms 'rBc`dfd }|jjj|||y)z2Register an SDK route handler as an aiohttp route.cpK|jd{}t|j}t||d{}|j dd}|j d}|+t j |tj|dSt j |S77lw)N)rheadersstatusrapplication/json)rr content_type)r)rrurrrtr Responsedumps)requestrrresultr resp_bodyhandlers r@_aiohttp_handlerz>_AiohttpBridgeAdapter.register_route.._aiohttp_handlerss 'D7??+G+2;DRY3Z+[%[FZZ#.F 6*I$||!I.!3 <>@M +R0668I -I&D 99\2 & , , .D  t9DL))/4:: GWb ) /RE +,J +r0JIII34V /SU8VM +,J +r0JI -I|}} %& & 99]B ' & % .o>K8234 6   WXX  " "7 +{||  " "9 -noo4YK?QRI#}$5gYkJN GHH4?"'4444@))D)9% 6% 6W||"6!*%2D  ()LM+$  8 8$$+!+!22D#'TU_UfUfTggjkoptqtkujv%wx 8 8 8% 6% 6% 6'1oo&7 7  8 8),,^>?sD9O<,M>(L)M>,!M) LM)#L-4L5L- M)L!M) M>,L$-M>1O2L-L'L- M)L*M)0 M><M=M>O%M)'M(M)+#MMM) M)5M 6M): M>M M> O MM M$ M)/M0M)4 M>?M'M>OM>M)L-!M)$M>'L-*M)-M 3L64M ;M)M>M)M M) M>MM)M$ MM$ M)'M>)M;/M2 0M;7M>>ON=7O8O=OOcXtrtrydd}ddlm}|d|t dS) a^Ensure the Teams SDK is importable, lazy-installing it on first use. Lazy-installs ``microsoft-teams-apps`` via ``tools.lazy_deps.ensure("platform.teams")`` if not present, then rebinds all module-level SDK globals on success. Returns True once the SDK (and aiohttp) are importable, False if they couldn't be installed/imported. Tcddlm}ddlm}m}ddlm}ddlm}m }ddl m }ddl m }ddlm}m} dd lm} m} dd lm} m} m}m}dd lm}m}m}id |d dd|d|d|d|d|d|d|d|d| d| d| d| d| d|d||||ddS)Nrrr r rrrrrrr!r rTr r rrrrrrrrrrrrr )r"r#r$r)r>r microsoft_teams.appsr r "microsoft_teams.common.http.clientrmicrosoft_teams.apirr%microsoft_teams.api.activities.typingr3microsoft_teams.api.activities.invoke.adaptive_cardr(microsoft_teams.api.models.adaptive_cardrr*microsoft_teams.api.models.invoke_responserr!microsoft_teams.apps.http.adapterrrrr microsoft_teams.cardsr"r#r$)_webr r rrrrrrrrrrrrr r"r#r$s r@_importz)check_teams_requirements.._imports'=DNM     QP 4   3    ]     $%:  "#6  )*D  -.L  01R  n  )*D  *  ; L! "  0# $)*"#'+  rBr)ensure_and_bindzplatform.teamsF)prompt)rYru)rrtools.lazy_depsr`globals)r_r`s r@check_teams_requirementsrdts,0/ b0 +Wgi NNrBceZdZdZdZdZdfd ZddddZddZddd Z dd Z dd Z dd Z d d d Z d! d"dZd#d$dZ d% d&dZ d' d(dZ d! d)dZ d' d*dZ d' d+dZ d, d-dZd.dZxZS)/ TeamsAdapterz;Microsoft Teams adapter using the microsoft-teams-apps SDK.`mTc@t||td|jxsi}|j dxst j dd|_|j dxst j dd|_|j dxst j dd|_ t|j d xs#t j d tt|_ d|_d|_t!d |_i|_y) NteamsrrrMrrr rrri)max_size)superrQr%rrtrr _client_id_client_secret _tenant_idrHr; _DEFAULT_PORT_port_app_runnerr'_dedup _conv_refs)rOryr __class__s r@rQzTeamsAdapter.__init__s '!23 "))K0TBII>OQS4T#ii8`BIIF[]_<`))K0TBII>OQS4T! IIf  L<]9K!L  &* 26 )48 +-rBF) is_reconnectc Kttsjdddytsjdddyjrj r j sjdddy tjt}|jjd d tjj j t|td d i _jj dfd }jj" dfd }jj%d{tj&|_j(j+d{tj,j(dj.}|j1d{d_j5t6j9dj.t:y777E#t<$r7}jdd|dt6j?d|Yd}~yd}~wwxYww)N MISSING_SDKzRmicrosoft-teams-apps could not be installed. Run: pip install microsoft-teams-appsF) retryablez/aiohttp not installed. Run: pip install aiohttpMISSING_CREDENTIALSzJTEAMS_CLIENT_ID, TEAMS_CLIENT_SECRET, and TEAMS_TENANT_ID are all required)client_max_sizez/healthc.tjdS)Nok)r)r r)_s r@z&TeamsAdapter.connect..sCLLd._handle_messages&&s+++s   cBKj|d{S7wrD)_on_card_actionrs r@_handle_card_actionz1TeamsAdapter.connect.._handle_card_actions "11#6666s z0.0.0.0Tz0[teams] Webhook server listening on 0.0.0.0:%d%sCONNECT_FAILEDzTeams connection failed: z[teams] Failed to connect: %s)r ActivityContext[MessageActivity])rz+ActivityContext[AdaptiveCardInvokeActivity]rYz1InvokeResponse[AdaptiveCardActionMessageResponse]) rdr_set_fatal_errorrrlrmrnr Application_MAX_BODY_BYTESradd_getr rrrq on_messageon_card_action initialize AppRunnerrrsetupTCPSiterpr_running_mark_connectedrCinfo _WEBHOOK_PATHrr))rOrvrrrsiterQs` r@connectzTeamsAdapter.connects, !""  ! !d "    ! !A "  d&9&9  ! !%\ "  5  ///JK    & &y2S T//"11//$9+$F$lH-EF DIYY ! ! ," ,YY % % 7@ 7B 7& 7))&&( ( (==5DL,,$$& & &;;t||Y CD**,   DM  " KKB    ) '    ! ! +A3/ "  LL8! < siA:I&>CH#H;H#HAH#H!AH#I&H#H#!H## I#,-II&I##I&cKd|_|jr)|jjd{d|_d|_|j t j dy78w)NFz[teams] Disconnected)rrrcleanuprq_mark_disconnectedrCrrWs r@ disconnectzTeamsAdapter.disconnectsV <<,,&&( ( (DL  ! *+ )s1A.A,9A.cZKddlm}ddlm}||s t dddl}|j |dd|gi4d{}|j|d d i d{}|j|jcdddd{S7N737 #1d{7swYyxYww) acDownload attachment bytes with SSRF protection. Teams file attachments carry pre-authenticated SharePoint download URLs (no extra auth header needed). Validates the URL against the SSRF guard and follows redirects through the shared redirect guard, matching the cache_*_from_url helpers in gateway.platforms.base. r) is_safe_url)_ssrf_redirect_guardz/Blocked unsafe attachment URL (SSRF protection)NTr)rfollow_redirects event_hooksrz)Mozilla/5.0 (compatible; HermesAgent/1.0)r) tools.url_safetyrgateway.platforms.baserrGrrrtrr)rOurlrrrrrrs r@_fetch_attachment_bytesz$TeamsAdapter._fetch_attachment_bytes's 1?3NO O$$!#&:%;<% $ $#ZZ%'RS(H  % % '## $ $ $  $ $ $ $sY?B+BB+BBB> B+ B B+BB+B(B B($B+c  K|j}|jr|jjnd}|rt|jdd|k(ryt|dd}|r|j j |ryt|jdd}|r|j|j|<d}t|dr|jr |j}d|vr%ddl }|jdd|j}|j}t|ddxsd} | d k(rd } n| d k(rd } n | d k(rd } nd } |j} t| ddxs t| dd} t| ddxsd} |j|jt|ddxsd| t!| | t|ddxs |j"}g}g}g}t|ddxsgD]i}t|dd}t|ddxsdj%}t|ddxsd}|dvr|sH|j'drZ|dk(r-t|dd}t)|t*st|ddxsi}|j-dxs|j-d}|j-dxs|j-dxsdj/d}|s|xs |rd|nd } |j1|d{}t3||d!}|rR|j5|j6|j5|j8|j5|j:nt<j?d"||r\|j'd$rK tC|d{}|r3|j5||j5||j5d%|s |j1|d{}t3|||!}|rQ|j5|j6|j5|j8|j5|j:ld |vrtDjF}nOd%|vrtDjH}n:d(|vrtDjJ}n%d)|vrtDjL}ntDjN}tQ||||||*}|jS|d{y7#t@$r"}t<j?d#||Yd}~d}~wwxYw7~#t@$r!}t<j?d&|Yd}~ld}~wwxYw7Y#t@$r'}t<j?d'|xs|||Yd}~d}~wwxYw7w)+z>Process an incoming Teams message and dispatch to the gateway.NrrMrzrz[^<]*\s*conversation_typepersonaldm groupChatgroupr aad_object_idrr )ro chat_name chat_typeuser_id user_nameguild_id attachments content_urlr)z text/htmlz text/plainzapplication/vnd.microsoft.cardz2application/vnd.microsoft.teams.file.download.infor__dict__ downloadUrl download_urlfileType file_type.z document.document)filename mime_typez?[teams] Unsupported document type for attachment '%s', skippingz0[teams] Failed to cache file attachment '%s': %szimage/imagez,[teams] Failed to cache image attachment: %sz0[teams] Failed to cache attachment '%s' (%s): %svideoaudio)rsource message_type media_urls media_typesr)*rNrqrrfrom_rs is_duplicate conversationconversation_refrthasattrrresubr< build_sourcer;rnr= startswithr9rurtlstriprr-rr media_typekindrCwarningrr,r*DOCUMENTPHOTOVIDEOAUDIOTEXTr)handle_message)rOrrNbot_idmsg_idconv_idrrconv conv_typer from_accountrrrrr media_kindsattrratt_namerrrrr0cachedrQmsg_typeevents r@rzTeamsAdapter._on_messageCs><<"& ghnndD9VC 4. dkk..v6 (//t< '*';';DOOG $ 8V $==D T> 66.D9??AD$$D"5t<B  "I + %I ) #!II ~~ ,>a',X\^`BaL&$7=2 ""GGdFD17RLT;5H #    8]D9?RB C!#}d;K#C>D"KKMLsFD17RH ::;&&'GHSS"#y$7!'40%gz4@FBG&{{=9XW[[=X $[[4V K8PVTV^^_bc ##]9)I;(?R\ d!%!=!=l!KKD.thRTUF"))&++6#**6+<+<=#**6;;7]$ |66x@V#7 #DDF"))&1#**<8#**73 !%!=!=k!JJD.x<F"))&++6#**6+<+<=#**6;;7{B R  $"++H  #"((H  #"((H  #"((H"''H!!#  !!%(((GL!dNN#UW_abccd E !VNN#QSTUUVK!NNJ /Kq< )sK U*S#S$AU*T5T2A%T5?B U* U( U*S S?S:4U*:S??U*T T/T*$U**T//U*2T55 U%>U U* U%%U*cZKddlm}|jj|}|rP|jrD|j |}|jj j||d{S|jr$|jj||d{Sy757w)zJSend an AdaptiveCard, using a stored ConversationReference when available.r)MessageActivityInputN)rWrrtrtrqadd_cardactivity_sendersend)rOrocardrconv_refrNs r@ _send_cardzTeamsAdapter._send_cards<??&&w/  +-66t)rrTEAMS_ALLOWED_USERSTEAMS_ALLOW_ALL_USERS>r1r3r4us[teams] card action rejected: TEAMS_ALLOWED_USERS not configured and TEAMS_ALLOW_ALL_USERS not set — default denyuB⛔ Approval buttons require TEAMS_ALLOWED_USERS to be configured.rNr,*u3[teams] Unauthorized card action by %s — ignoringu⛔ Not authorized.oncerKalwaysdeny) approve_onceapprove_sessionapprove_alwaysr1.4u,⚠️ Approval already resolved or expired.Trwrapu✅ Allowed (once)u✅ Allowed (session)u✅ Always allowedu ❌ Denied)rrKrrcmddesc ⚠️ Command Approval RequiredBolderrrweight```  ```Reason: rrisSubtle)tools.approvalrrrNr>actionr0rtrrrrr<r=rCrrrsplitrr" with_version with_bodyr$r)rOrrrrr0rr allowed_csv allow_allr clicker_iduid allowed_ids choice_mapchoice label_maprrrs r@rzTeamsAdapter._on_card_actions S##**{{ b"5 hh}b1 K!6=NO ii 5r:@@B II5r:@@BHHJNbb I&:b <<--L EhQ]_cegIhJ2=2C2CC2HX3CIIK399;XKX+%*K*GTV`a%:AVW #(&   .!6=NO  %[1!3&.!\%(Y /]dh ijk  !f5).*  hhub!xx#  KK 'IPT]ef g KK se5'9E F  KK $'8tdS T I9V#44QR/"n11%8BB4H  cYsEL!LL/F2L!c K|js tddSt|dkDr|dddzn|}|t|dkDr|dddzn||d} td d i| d d id g} |sH| j tdd i| d di|r#| j tdd i| d di| j tdd i| d didt dddt d|ddt d|ddg} |r| j t d dt jd!j| j| } |j|| d{} | r t| d"dnd}td|#S7"#t$r9}tjd$|d%tdt|d&cYd}~Sd}~wwxYww)'z>Send an Adaptive Card approval prompt with Allow/Deny buttons.FTeams app not initializedr7r)iNz...r)rrrz Allow Oncehermes_approverrpositive)rverbr0stylez Allow Sessionr)rrr0z Always AllowrDenyr destructiverTrrrr rr r z>Smart DENY: owner override applies to this one operation only.rrr6z%[teams] send_exec_approval failed: %sr8r7r)ry)rqr+rr#rr$r"rr with_actionsrrrrCr)r;)rOrocommandr descriptionmetadataallow_permanent smart_denied cmd_preview btn_data_baseactionsrrrrrQs r@send_exec_approvalzTeamsAdapter.send_exec_approvalFsyye3NO O03G t0Cgetnu, ',/L3,>74C=5(G !%5CMC?NC:   NN=%,<J J8IJ }(/?MMM?t4DJdzB B: K LL@!dL Se3q6TJ J KsHEGF.F/!FGF G.G G GGGcK|js tddS|j|}|j|}d}|D]r} |r<|j r,|dk7r' |jj |||d{} n$|jj||d{} t| dd}ttd| S7E#t $rE} tjd| |jj||d{7} Yd} ~ gd} ~ wwxYw7s#t $r#} tdt| dcYd} ~ cSd} ~ wwxYww) NFrrr5z3Teams reply() failed, falling back to flat send: %srTr#r6) rqr+format_messagetruncate_messageisdigitreplyrrCrDrrr;) rOrorreply_tor' formattedchunkslast_message_idchunkr reply_errrQs r@rzTeamsAdapter.sends4yye3NO O''0 &&y1 OE O 0 0 2x3 F'+yyw%'P!P$(99>>'5#AAF")&$"=! O($?CC!"Q$F Q%(,yy~~gu'E!E!EFB O!%s1vNN OsAED C>C?C D#D$D5EC D5DDD DDD E"E8E9EEEcK|jsy |jj|td{y7#t$rYywxYwwrD)rqrrr)rOror's r@ send_typingzTeamsAdapter.send_typingsByy  ))..*=*?@ @ @   s5A'A>AAA A  A A  AcK|js tddS ddl}ddl}ddlm}m} |jds|jdr-|} |j|jd ddxs|} nq|jd } |j| dxs|} t| d 5} d | d |j| jj} ddd||  }| j|}|r|j!|}|j"j%|}|r/|jj&j)||d{}n$|jj)||d{}tdt+|ddS#1swYxYw7M7*#t,$r:}t.j1d||dtdt3|dcYd}~Sd}~wwxYww)aSend any media file/URL as a Teams attachment. Remote ``http(s)://`` URLs are attached by reference; local paths (with optional ``file://`` prefix) are base64-encoded into a data URI. MIME type is guessed from the path/extension, falling back to ``default_mime``. Shared by send_image / send_video / send_voice / send_document so every media kind uses the same Attachment path. FrrrN) Attachmentrzhttp://zhttps://?zfile://rbzdata:z;base64,)rrTrr6z[teams] send_%s failed: %sr8r#)rqr+base64 mimetypesrWr<rr guess_typer removeprefixopen b64encodereaddecodeadd_attachmentsadd_textrtrtrrrrrCr)r;)rOror default_mimecaption media_labelr?r@r<rrrrf attachmentrNrrrQs r@_send_media_attachmentz#TeamsAdapter._send_media_attachments yye3NO O K   L  +v/@/@/L$ %00c1B11EFqIY\ **95%006q9I\ $%c$))HV=M=Maffh=W=^=^=`BF814F(%BF8&F4'$F8 F6 F8'G>(F1-F86F88 G;/G60G;1G>6G;;G>cJK|j||d|dd{S7w)Nz image/pngrrorrIrJrKrN)rOro image_urlrJr3r's r@ send_imagezTeamsAdapter.send_images900$ 1    #!#cHK|j||||d{S7w)N)rorRrJr3)rS)rOro image_pathrJr3kwargss r@send_image_filezTeamsAdapter.send_image_files4__  %    s " "cJK|j||d|dd{S7w)Nz video/mp4rrPrQ)rOro video_pathrJr3r'rWs r@ send_videozTeamsAdapter.send_videos900$ 1    rTcJK|j||d|dd{S7w)Nz audio/mpegvoicerPrQ)rOro audio_pathrJr3r'rWs r@ send_voicezTeamsAdapter.send_voices900% 1    rTcJK|j||d|dd{S7w)Nzapplication/octet-streamrrPrQ)rOro file_pathrJ file_namer3r'rWs r@ send_documentzTeamsAdapter.send_document s9003" 1    rTcK|d|dSw)Nunknown)rr3rorV)rOros r@ get_chat_infozTeamsAdapter.get_chat_info2swGGs )ryr&)rvr:rYr:rZ)g>@)rr;rfloatrYbytes)rrrYr[)ror;rz'AdaptiveCard'rYz'Any')rz-'ActivityContext[AdaptiveCardInvokeActivity]'rYz3'InvokeResponse[AdaptiveCardActionMessageResponse]')zdangerous commandNTF)ror;r%r;rr;r&r;r'Optional[Dict[str, Any]]r(r:r)r:rYr+)NN) ror;rr;r3 Optional[str]r'rirYr+rD)ror;r'rirYr[)Nmedia) ror;rr;rIr;rJrjrKr;rYr+)NNN) ror;rRr;rJrjr3rjr'rirYr+) ror;rVr;rJrjr3rjrYr+) ror;rZr;rJrjr3rjr'rirYr+) ror;r^r;rJrjr3rjr'rirYr+)NNNN)ror;rar;rJrjrbrjr3rjr'rirYr+)ror;rYru)r\r]r^r_MAX_MESSAGE_LENGTHsplits_long_messagesrQrrrrrrr-rr:rNrSrXr[r_rcrf __classcell__)rus@r@rfrfsE- 5:Qf,$8V)p ] @] <] H/-1 $"9K9K9K 9K  9K + 9K9K9K 9K~#'-1 "D"D"D "D + "D  "DH"&" 0K0K0K 0K  0K  0K 0Kl"&"&-1        +    ("&"&             &"&"&-1        +    *"&"&-1        +    *"&#'"&-1     !    +   $HrBrfcvddlm}m}ddlm}m}m}m}m}|d}|r|d|d|ddsy |d |d |d t|d |d|dt|dt|d|xsd}|s |dy |d|j|d|dxsdd} | s |dy |d| j|d|dxsd} | s |dy |d| jt|d|ddrB|d|d xsd} | r"|d | jd!d|d"n|d dn|d#d$|d%t|d&|d'|d(y ))z7Guide the user through Teams setup using the Teams CLI.r) get_env_valuesave_env_value)ra prompt_yes_no print_info print_success print_warningrz#Teams: already configured (app ID: )zReconfigure Teams?FNz2You'll need the Teams CLI. If you haven't already:z- npm install -g @microsoft/teams.cli@previewz teams loginzAThen expose port 3978 publicly (devtunnel / ngrok / cloudflared),zand create your bot:zM teams app create --name "Hermes" --endpoint "https:///api/messages"zMThe CLI will print CLIENT_ID, CLIENT_SECRET, and TENANT_ID. Paste them below.z Client IDrMr.u.Client ID is required — skipping Teams setupz Client secretrT)r/passwordu2Client secret is required — skipping Teams setupz Tenant IDru.Tenant ID is required — skipping Teams setupzDTo find your AAD object ID for the allowlist: teams status --verbosez0Restrict access to specific users? (recommended)z(Allowed AAD object IDs (comma-separated)r zAllowlist configuredrr4uF⚠️ Open access — anyone who can message the bot can command it.z+Teams configuration saved to ~/.hermes/.envz>Install the app in Teams: teams app install --id z1Restart the gateway: hermes gateway restart) hermes_cli.configrprqhermes_cli.cli_outputrarrrsrtruprintr<replace) rprqrarrrsrtru existing_idrrr alloweds r@interactive_setupr8s 12K8 QGH159 CD>? GRS%&bc G^_ G{K,=2>I FG$ioo&78?MBW4X4^\^imnM JK(-*=*=*?@{M:K,L,RPRSI FG$ioo&78 GUVGN 6!"78>B   0'//#r2J K 0 1 0" 5.7^_ G?@OPBCrBc|jdddtttgddtt dt ddd d d d y)u:Plugin entry point — called by the Hermes plugin system.rizMicrosoft Teamsct|SrD)rf)cfgs r@rzregister..s L$5rB)rrrz(pip install microsoft-teams-apps aiohttprrrrgu💼TuYou are chatting via Microsoft Teams. Teams renders a subset of markdown — bold (**text**), italic (*text*), and inline code (`code`) work, but complex tables or raw HTML do not. Keep responses clear and professional.)rlabeladapter_factorycheck_fnr r  required_env install_hintsetup_fnenv_enablement_fncron_deliver_env_varstandalone_sender_fnallowed_users_env allow_all_envmax_message_lengthemojiallow_update_command platform_hintN)register_platformrr r rrrR)rs r@registerrsT 5#'!R?"*2./- ! 0A%rB)r>rr/r:rYr:)r>rr/rErYrE)rYr:)rYz dict | None)r"r;rYrj) ror;r1r;r%rjr&zOptional[list]r'r:rYzDict[str, Any]rZ)Wr_ __future__rrArrloggingrtypingrrrrrr>r r ImportErrorrUr r rVrrWrrrXrrYrrZrrr[rrr\rrrr r]r"r#r$rr;gateway.configr%r&gateway.platforms.helpersr'rr(r)r*r+r,r- getLoggerr\rCrorrrArHrJrarrr r rr: frozensetr r _re_teamscompiler<r$rRrdrfrrrVrBr@rs:,#  && '9@JI^f ML,49   8 $  05 0=   P=P=f% % P5 ;# $VF )'* %I%%&=>8 $"& w? w?w?  w?  w?w?w?@>OB~ H&~ HFDDR'g* C0M COO !%%)"(,%!%NJKLLMI's#EA E EE+FF