JjmdZddlmZddlZddlZddlZddlZddlZddlm Z m Z m Z ddl m Z  ddlmZdZn#e$rdZdZYnwxYw dd lmZmZdd lmZdd lmZmZdd lmZdd lmZddlmZm Z ddl!m"Z"m#Z#ddl$m%Z%m&Z&m'Z'm(Z(ddl)m*Z*m+Z+m,Z,dZ-n1#e$r)dZ-dZdZdZdZdZdZdZdZdZ dZ#dZ"e.Z%dZ&dZ'dZ(dZ*dZ+dZ,YnwxYwddl/m0Z0m1Z1ddl2m3Z3ddl4m5Z5m6Z6m7Z7m8Z8m9Z9m:Z:ej;e<Z=dZ>dZ?dZ@dddCdZAe>ddDd ZBGd!d"ZCGd#d$ZDGd%d&ZEdEd'ZFdEd(ZGdEd)ZHdFd+ZId,ZJeKd-d.hZLddlMZNeNjOd/ZPdGd3ZQdddd4dHd<ZRdEd=ZSGd>d?e5ZTdIdAZUdIdBZVdS)Ja Microsoft Teams platform adapter for Hermes Agent. Uses the microsoft-teams-apps SDK for authentication and activity processing. Runs an aiohttp webhook server to receive messages from Teams. Proactive messaging (send, typing) uses the SDK's App.send() method. Requires: pip install microsoft-teams-apps aiohttp TEAMS_CLIENT_ID, TEAMS_CLIENT_SECRET, and TEAMS_TENANT_ID env vars Configuration in config.yaml: platforms: teams: enabled: true extra: client_id: "your-client-id" # or TEAMS_CLIENT_ID env var client_secret: "your-secret" # or TEAMS_CLIENT_SECRET env var tenant_id: "your-tenant-id" # or TEAMS_TENANT_ID env var port: 3978 # or TEAMS_PORT env var ) annotationsN)AnyDictOptional)quotewebTFAppActivityContext ClientOptionsMessageActivityConversationReferenceTypingActivityInputAdaptiveCardInvokeActivityAdaptiveCardActionCardResponse!AdaptiveCardActionMessageResponseInvokeResponseAdaptiveCardInvokeResponse HttpMethod HttpRequest HttpResponseHttpRouteHandler AdaptiveCard ExecuteAction TextBlock)PlatformPlatformConfig)MessageDeduplicator)BasePlatformAdapter MessageEvent MessageType SendResultcache_image_from_urlcache_media_bytesiiz /api/messagesdefaultvaluerr/boolreturnct|tr|St|tr2|}|dvrdS|dvrdS|S)N>1onyestrueT>0noofffalseF) isinstancer1strstriplower)r0r/ normalizeds E/home/rurouni/.hermes/hermes-agent/plugins/platforms/teams/adapter.py _parse_boolrBosk% %[[]]((** 3 3 34 4 4 45 NintcT t|S#ttf$r|cYSwxYwN)rD TypeError ValueError)r0r/s rA _coerce_portrI{s<5zz z "s ''c0eZdZdZddZdddd Zdd Zd S)_StaticAccessTokenProviderzSMinimal token-provider shim so outbound Graph delivery can reuse the shared client. access_tokenr=cVt|pd|_dSN)r=r> _access_token)selfrLs rA__init__z#_StaticAccessTokenProvider.__init__s) !344::<<rCF) force_refreshrSr1r2cBK~|jstd|jS)Nz=TEAMS_GRAPH_ACCESS_TOKEN is required for graph delivery mode.)rPrH)rQrSs rAget_access_tokenz+_StaticAccessTokenProvider.get_access_tokens- ! ^\]] ]!!rCNonecdSrFrQs rA clear_cachez&_StaticAccessTokenProvider.clear_cachestrCN)rLr=)rSr1r2r=r2rV)__name__ __module__ __qualname____doc__rRrUrZrXrCrArKrKsf]]====?D"""""" rCrKceZdZdZ d#dddd$d Z d#d%dZd&dZd'dZd'dZd(dZ d)dZ d)dZ e d)dZ e d*dZed+d"ZdS),TeamsSummaryWriteraPipeline-facing Teams outbound delivery surface. This stays inside the existing Teams platform plugin so the meeting-pipeline PR can reuse one Teams integration surface instead of introducing a second adapter elsewhere in the gateway core. N) graph_client transportplatform_configPlatformConfig | Nonerb Any | Nonerchttpx.AsyncBaseTransport | Noner2rVc0||_||_||_dSrF)_platform_config _graph_client _transport)rQrdrbrcs rArRzTeamsSummaryWriter.__init__s!0)#rCpayloadrconfigdict[str, Any] | Noneexisting_recordOptional[dict[str, Any]]dict[str, Any]cK||}|r3t|ddst|St |dp|dpd}|sY|drd}nA|d s*|d r|d rd }|dkr|||d{VS|d kr|||d{VStd )N force_resendFr. delivery_modemoderOincoming_webhook_urlincoming_webhookchat_idteam_id channel_idgraphz:Teams delivery_mode must be 'incoming_webhook' or 'graph'.) _resolve_delivery_configrBgetdictr=r>r?#_write_summary_via_incoming_webhook_write_summary_via_graphrH)rQrlrmromergedrus rA write_summaryz TeamsSummaryWriter.write_summarysz ..v66  );vzz./I/ISX#Y#Y#Y )(( (6::o..J&**V2D2DJKKQQSSYY[[ zz011 )I&&  9%% *0**\*B*B  % % %AA'6RRRRRRRR R 7??66wGGGGGGGG G H   rCc i}|j}|e|t|jpi|jrd|vr |j|d<|jr |d|jj|t|pitj ddtj ddtj ddtj ddtj ddtj d dd }| D]!\}}|r| |s|||<"|S) NrLrzTEAMS_DELIVERY_MODErOTEAMS_INCOMING_WEBHOOK_URLTEAMS_GRAPH_ACCESS_TOKEN TEAMS_TEAM_IDTEAMS_CHANNEL_ID TEAMS_CHAT_ID)rtrvrLryrzrx) riupdater~extratoken home_channel setdefaultrxosgetenvitemsr})rQrmr platform_cfg env_defaultskeyr0s rAr|z+TeamsSummaryWriter._resolve_delivery_configsT!#,  # MM$|17R88 9 9 9! rH_render_summary_markdown AsyncClientrkpostraise_for_statusr)rQrlrmrrbodyclientresponses rArz6TeamsSummaryWriter._write_summary_via_incoming_webhooks  &**%;<<BCCIIKK  b`aa a55g>>?$$TT_$MM ( ( ( ( ( ( (QW#[[4[@@@@@@@@H  % % ' ' ' ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( (0&#/    s2C  CCcK||}t|dpd}|r|dt |dd}||dd||di d{V}d d ||pid |pid dSt|dpd}t|dpd}|r|stddt |ddt |dd}||dd||di d{V}d d|||pid |pid dS)NrxrOz/chats/)safez /messagesrhtml) contentTypecontent) json_bodyr{chatidwebUrl)rt target_typerx message_idweb_urlryrzzEGraph delivery mode requires chat_id, or both team_id and channel_id.z/teams/z /channels/channel)rtrryrzrr)_build_graph_clientr=r}r>r post_json_render_summary_htmlrH) rQrlrmrbrxpathrryrzs rArz+TeamsSummaryWriter._write_summary_via_graphsg //77 fjj++1r2288::  ?U7444???D)33!6dF_F_`gFhFh#i#ij4H ")%"'~222488$N//99  fjj++1r2288::L117R88>>@@  j W  5eG"--- 5 5Zb))) 5 5 5 &// v$B[B[\cBdBdeef0         %$$#>r..t44 B++H55    rCc,|j|jSddlm}ddlm}t |dpd}|r|t||j S|| |j S)Nr)MicrosoftGraphTokenProvider)MicrosoftGraphClientrLrO)rc) rjtools.microsoft_graph_authrtools.microsoft_graph_clientrr=r}r>rKrkfrom_env)rQrmrrrLs rArz&TeamsSummaryWriter._build_graph_clients   )% %JJJJJJEEEEEE6::n55;<<BBDD  ''*<88/ $# ' 0 0 2 2o    rCr=c d||ddd|t|dddddg|t|dddd|t|d ddd |t|d d}d |S) Nz**rOz Summary: summaryNo summary available.zKey decisions: key_decisionsz Action items: action_itemszRisks:risks )_title_textgetattr _bullet_linesjoin)rQrlliness rArz+TeamsSummaryWriter._render_summary_markdown,s )W%% ) ) )  ` 77It#D#DF]^^ ` `      $ G G H H           F F G G          $ ? ? @ @  yyrCc Zd|t|dddgfdtt|ddpgfdtt|ddpgfdtt|d dpgfg}d tj||d g}|D]\}}|d tj|d t|dkrE|dkr?|dtjt|dd|r=d d|D}||rd|dpd|dd |S)NSummaryrrz Key decisionsrz Action itemsrRisksrz

z

z

z

z

rz

rOc3K|]J}t|#dtjt|dVKdS)z
  • z
    • N)r=r>rescape.0items rA z:TeamsSummaryWriter._render_summary_html..KsY"o"oD]`ae]f]f]l]l]n]n"o#G$+c$ii*@*@#G#G#G"o"o"o"o"o"orCz
      z
    z

    None

    ) rrlistrrrappendlenr=r)rQrlsectionsblocksheadingrrendereds rArz'TeamsSummaryWriter._render_summary_html=s GGY$E$EG^__` a d77OT#J#J#PbQQ R T''>4"H"H"NBOO P d77GT::@bAA B   BT[[%9%9::AAAB& - -NGU MM<W!5!5<<< = = =5zzQ7i#7#7 DDKE!H $>$>DDDEEE -77"o"oTY"o"o"ooo hA+A(+A+A+AR]SSSS m,,,,wwvrCct|dd}|rt|St|dd}|rt|ddnd}d|pdS)Ntitle meeting_ref meeting_idzMeeting r)rr=)rlrrrs rArzTeamsSummaryWriter._titleQsg$//  u:: g}d;; ALVW[,===RV 3*1 333rCr0r/cPt|pd}|p|SrNr=r>)r0r/rs rArzTeamsSummaryWriter._textZs)5;B%%''wrCvalues list[str]c<d|pgD}d|DpdgS)Ncg|]D}t|#t|ESrXrrs rA z4TeamsSummaryWriter._bullet_lines..as=SSStTARARST""SSSrCcg|]}d|S)z- rXrs rArz4TeamsSummaryWriter._bullet_lines..bs... T ...rCz- NonerX)clsrrs rArz TeamsSummaryWriter._bullet_lines_s4SS "SSS.....<8*_AiohttpBridgeAdapter.register_route.._aiohttp_handlerss ''''''D7?++G+27;DRY3Z3Z3Z+[+[%[%[%[%[%[%[FZZ#..F 6**I$|!I..!3 rDrH)rrrseedrrhomes rA_env_enablementr&sl +R006688II3R88>>@@M +R006688I -It&D 9\2 & & , , . .D  t99DLL    D )/44::< GWb ) ) /RE +,,J +r0J0JII344V /SU8V8VM +,,J +r0J0JI ~-~I~|}} %&& & 99]B ' ' & % .o>>K 6233 6 6   YWXX  " "7 + +}{||  " "9 - -pnooRYRRRI#JJgJJJN IGHH4?""""'4444@@))D)99% 6% 6% 6% 6% 6% 6% 6W||"6!*%2D  ()LM+$   8 8 8 8 8 8 8 8$++!+!2!2222222D#%wU_Uf%w%wkoptqtptku%w%wx 8 8 8 8 8 8 8 8 8 8 8 8 8% 6% 6% 6% 6% 6% 6% 6% 6% 6% 6% 6% 6% 6% 6'1oo&7&7 7 7 7 7 7 7  8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8),,^<>>>>>>?s6N 'M3+M*O O cltr trdSd d}ddlm}|d|t d S) a^Ensure the Teams SDK is importable, lazy-installing it on first use. Lazy-installs ``microsoft-teams-apps`` via ``tools.lazy_deps.ensure("platform.teams")`` if not present, then rebinds all module-level SDK globals on success. Returns True once the SDK (and aiohttp) are importable, False if they couldn't be installed/imported. Tr2r~cddlm}ddlm}m}ddlm}ddlm}m }ddl m }ddl m }ddlm}m} dd lm} m} dd lm} m} m}m}dd lm}m}m}id |d dd|d|d|d|d|d|d|d|d| d| d| d| d| d|d||||ddS)Nrrr r rrrrrrr!r rTr r rrrrrrrrrrrrr )r"r#r$r)rPr microsoft_teams.appsr r "microsoft_teams.common.http.clientrmicrosoft_teams.apirr%microsoft_teams.api.activities.typingr3microsoft_teams.api.activities.invoke.adaptive_cardr(microsoft_teams.api.models.adaptive_cardrr*microsoft_teams.api.models.invoke_responserr!microsoft_teams.apps.http.adapterrrrr microsoft_teams.cardsr"r#r$)_webr r rrrrrrrrrrrrr r"r#r$s rA_importz)check_teams_requirements.._imports)''''''========DDDDDDNNNNNNNNMMMMMM                                  QPPPPPPPPP 4   3    ]     $%:  "#6  )*D  -.L  01R  n  )*D  *  ; L! "  0# $)*"#'+    rCr)ensure_and_bindzplatform.teamsF)prompt)r2r~)rrtools.lazy_depsrrglobals)rqrrs rAcheck_teams_requirementsrvts`0t/ / / / b0///// ?+Wgii N N NNrCceZdZdZdZdZdBfd ZdddCd ZdDdZdEdFdZ dGdZ dHdZ dId Z dJdKd)Z dLdMd-ZdNdOd.Z dPdQd4Z dRdSd6Z dLdTd8Z dRdUd:Z dRdVd<Z dWdXd?ZdYdAZxZS)Z TeamsAdapterz;Microsoft Teams adapter using the microsoft-teams-apps SDK.`mTrmr&ct|td|jpi}|dpt jdd|_|dpt jdd|_|dpt jdd|_ t|d p&t jd tt|_ d|_d|_t!d |_i|_dS) NteamsrrrOrrrrrri)max_size)superrRr%rr}rr _client_id_client_secret _tenant_idrIr= _DEFAULT_PORT_port_app_runnerr'_dedup _conv_refs)rQrmr __class__s rArRzTeamsAdapter.__init__s  '!2!2333 "))K00TBI>OQS4T4T#ii88`BIF[]_<`<`))K00TBI>OQS4T4T! IIf   L<]9K9K!L!L   &* 26 )4888 +-rCF) is_reconnectrr1r2c KttsddddStsddddSjrjrjsddddS tjt}|j d d tjjjt|td d i _jjdfd }jjdfd }jd{Vtj|_jd{Vtjjdj}|d{Vd_t6djt:dS#t<$rA}dd|dt6d|Yd}~dSd}~wwxYw)N MISSING_SDKzRmicrosoft-teams-apps could not be installed. Run: pip install microsoft-teams-appsF) retryablez/aiohttp not installed. Run: pip install aiohttpMISSING_CREDENTIALSzJTEAMS_CLIENT_ID, TEAMS_CLIENT_SECRET, and TEAMS_TENANT_ID are all required)client_max_sizez/healthc,tjdS)Nok)r)r r)_s rAz&TeamsAdapter.connect..sCLd._handle_messages3&&s+++++++++++rC+ActivityContext[AdaptiveCardInvokeActivity]r21InvokeResponse[AdaptiveCardActionMessageResponse]c>K|d{VSrF)_on_card_actionrs rA_handle_card_actionz1TeamsAdapter.connect.._handle_card_actions/"11#666666666rCz0.0.0.0Tz0[teams] Webhook server listening on 0.0.0.0:%d%sCONNECT_FAILEDzTeams connection failed: z[teams] Failed to connect: %s)rr)rrr2r) rvr_set_fatal_errorrr~rrr Application_MAX_BODY_BYTESradd_getr rrr on_messageon_card_action initialize AppRunnerrsetupTCPSiterr _running_mark_connectedrUinfo _WEBHOOK_PATHr.r<)rQrrrrsitercs` rAconnectzTeamsAdapter.connects !""""   ! !d "    5    ! !A "    5 d&9    ! !%\ "    55  //JJJK   & &y2S2S T T T/"1/$9+$F$F$lH-EFFF DIY ! , , , , ," ! ,Y % 7 7 7 7 7& % 7)&&(( ( ( ( ( ( ( (=55DL,$$&& & & & & & & &;t|Y CCD**,,        DM  " " " KKB     4     ! ! /A// "    LL8! < < <55555 sE=H I 6I  IrVcKd|_|jr&|jd{Vd|_d|_|t ddS)NFz[teams] Disconnected)rrcleanupr_mark_disconnectedrUrrYs rA disconnectzTeamsAdapter.disconnectsv < ,&&(( ( ( ( ( ( ( (DL  !!! *+++++rC>@urlr=rfloatbytesc^Kddlm}ddlm}||st dddl}||dd|gi4d{V }||d d i d{V}||j cdddd{VS#1d{VswxYwYdS) acDownload attachment bytes with SSRF protection. Teams file attachments carry pre-authenticated SharePoint download URLs (no extra auth header needed). Validates the URL against the SSRF guard and follows redirects through the shared redirect guard, matching the cache_*_from_url helpers in gateway.platforms.base. r) is_safe_url)_ssrf_redirect_guardz/Blocked unsafe attachment URL (SSRF protection)NTr)rfollow_redirects event_hooksrz)Mozilla/5.0 (compatible; HermesAgent/1.0)r) tools.url_safetyrgateway.platforms.baserrHrrr}rr)rQrrrrrrrs rA_fetch_attachment_bytesz$TeamsAdapter._fetch_attachment_bytes's 100000??????{3 PNOO O $$!#&:%;<%  $ $ $ $ $ $ $ $#ZZ%'RS(H  % % ' ' '# $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $s:B B&)B&rrc * K|j}|jr |jjnd}|rt|jdd|krdSt|dd}|r|j|rdSt|jdd}|r|j|j |<d}t|dr|j r|j }d|vr-ddl }| dd|}|j}t|ddpd} | d krd } n| d krd } n | d krd } nd } |j} t| ddpt| dd} t| ddpd} ||jt|ddpd| t!| | t|ddp|j}g}g}g}t|ddpgD]M}t|dd}t|ddpd}t|ddpd}|dvr|sS|dri|dkrt|dd}t)|t*st|ddpi}|dp|d}|dp|dpdd}|s|p|rd|nd } ||d{V}t3||d!}|rO||j||j||jnt<d"|n3#t@$r&}t<d#||Yd}~nd}~wwxYw|r|d$r tC|d{V}|r?|||||d%n2#t@$r%}t<d&|Yd}~nd}~wwxYw|r ||d{V}t3|||!}|rN||j||j||j#t@$r*}t<d'|p|||Yd}~Ed}~wwxYwOd |vr tDj#}n?d%|vr tDj$}n.d(|vr tDj%}nd)|vr tDj&}n tDj'}tQ||||||*}|)|d{VdS)+z>Process an incoming Teams message and dispatch to the gateway.NrrOrzrz[^<]*\s*conversation_typepersonaldm groupChatgroupr aad_object_idr#r)rx chat_name chat_typeuser_id user_nameguild_id attachments content_urlr)z text/htmlz text/plainzapplication/vnd.microsoft.cardz2application/vnd.microsoft.teams.file.download.infor__dict__ downloadUrl download_urlfileType file_type.z document.document)filename mime_typez?[teams] Unsupported document type for attachment '%s', skippingz0[teams] Failed to cache file attachment '%s': %szimage/imagez,[teams] Failed to cache image attachment: %sz0[teams] Failed to cache attachment '%s' (%s): %svideoaudio)rsource message_type media_urls media_typesr)*r`rrrfrom_r is_duplicate conversationconversation_refrhasattrrresubr> build_sourcer=rr? startswithr<r~r}lstriprr-rr media_typekindrUwarningr.r,r*DOCUMENTPHOTOVIDEOAUDIOTEXTr)handle_message)rQrr`bot_idmsg_idconv_idrrconv conv_typer from_accountrrrrr media_kindsattrratt_namerrrrrCcachedrcmsg_typeevents rArzTeamsAdapter._on_messageCs<"&4  ghndD99VCC F4..  dk..v66  F(/t<<  <'*';DOG $ 8V $ $ ! !=D T>> III66.D99??AAD$D"5t<<B  " "II + % %II ) # #!III ~ ,>>a',X\^`BaBaL&$77=2 ""GdFD117RLLT;55H #     8]D99?RB B C!#}d;;K#C>>D"KKMMLsFD117RH :::;:&&'GHH SSS"#y$77!'400G%gz4@@FBG&{{=99XW[[=X=X $[[44V K8P8PVTV^^_bcc ##]9(\(?I(?(?(?R\ d!%!=!=l!K!KKKKKKKD.thRTUUUF"))&+666#**6+<===#**6;7777]$!dddNN#UW_abccccccccd |66x@@ V#7 #D#DDDDDDDF4"))&111#**<888#**7333 VVVNN#QSTUUUUUUUUV  !%!=!=k!J!JJJJJJJD.x<F8"))&+666#**6+<===#**6;777 NNJ /Kq ,  $ $"+HH  # #"(HH  # #"(HH  # #"(HH"'H!!#    !!%(((((((((((sK&BN N0 N++N0 AP$$ Q.QQA=S T$T  Trxcard'AdaptiveCard''Any'c2Kddlm}|j|}|rJ|jrC||}|jj||d{VS|jr!|j||d{VSdS)zJSend an AdaptiveCard, using a stored ConversationReference when available.r)MessageActivityInputN)rirrr}radd_cardactivity_sendersend)rQrxrrconv_refr`s rA _send_cardzTeamsAdapter._send_cards<<<<<<?&&w//  7  7++--66t<| | vr:td| tdtd Sddddd} | |}|stdtd S||satdt't)dt/ddg S|||d d!d"d#d$}|d%d}|d&d}g}|rM|t/d'dd()|t/d*|d+d|r(|t/d,|dd-|t/||dd()tdt't)d| S).z4Handle an Adaptive Card Action.Execute button click.r)resolve_gateway_approvalhas_blocking_approval hermes_actionrO session_keyrzUnknown action.)r0)rrTEAMS_ALLOWED_USERSTEAMS_ALLOW_ALL_USERS>r4r6r7us[teams] card action rejected: TEAMS_ALLOWED_USERS not configured and TEAMS_ALLOW_ALL_USERS not set — default denyuB⛔ Approval buttons require TEAMS_ALLOWED_USERS to be configured.rNrc^h|]*}||+SrX)r>)ruids rA z/TeamsAdapter._on_card_action..s-XXX3CIIKKX399;;XXXrC,*u3[teams] Unauthorized card action by %s — ignoringu⛔ Not authorized.oncer]alwaysdeny) approve_onceapprove_sessionapprove_alwaysr1.4u,⚠️ Approval already resolved or expired.Trwrapu✅ Allowed (once)u✅ Allowed (session)u✅ Always allowedu ❌ Denied)rr]rrcmddesc ⚠️ Command Approval RequiredBolderrrweight```  ```Reason: rrisSubtle)tools.approvalr r r`r0actionrCr}rrrrr>r?rUrrrsplitrr" with_version with_bodyr$r)rQrr r r,rCrr allowed_csv allow_allr clicker_id allowed_ids choice_mapchoice label_mapr r!rs rArzTeamsAdapter._on_card_actions SRRRRRRR#*{ b"55 hh}b11  K !6=NOOO i 5r::@@BB I5r::@@BBHHJJNbb   I&:b <-L EEhQ]_cegIhIhJXX+2C2CC2H2HXXXK+%%*K*G*GTV`aaa%:AVWWW #(&    .. !6=NOOO  %$[11 !3&..!\%((Y /]dh i i ijkk  ! f555).*   hhub!!xx##  G KK 'IPT]efff g g g KK '9s'9'9'9EEE F F F  U KK '8$'8'8tdSSS T T T I9V#44QQQRRR/"nn11%88BB4HH    rCdangerous commandNcommandr descriptionmetadataOptional[Dict[str, Any]]r+c K|jstddSt|dkr |dddzn|}|t|dkr |dddzn||d}td t d d d t d|dd t d|d d gtddi|ddidtddi|dditddi|dditddi|ddid g} | ||d{V} | rt| d!dnd} td | "S#t$rF} t d#| d $tdt| d %cYd} ~ Sd} ~ wwxYw)&z>Send an Adaptive Card approval prompt with Allow/Deny buttons.FTeams app not initializedrIr<iNz...r)rr r!rr"Tr#r$r&r'rr(r)z Allow Oncehermes_approverrpositive)rverbrCstylez Allow Sessionr)rrArCz Always AllowrDenyr destructiverrHz%[teams] send_exec_approval failed: %srJrIr<r)rr+rr"r.r/r$ with_actionsr#rrr.rUr<r=) rQrxr8rr9r: cmd_preview btn_data_baserrrrcs rAsend_exec_approvalzTeamsAdapter.send_exec_approvalFsy Pe3NOOO O03G t0C0Cgetenu,, ',/LL3,>,>74C4=5((G   NN \% YAU]^^^9{999EEE7+77dTRRR \&)KMK?NKK$  ))NMN?Ht444DJdzBBB B K K K LL@!dL S S Se3q66TJJJ J J J J J J KsAF G;G GGrreply_tor(cK|jstddS||}||}d}|D]} |r|r}|dkrw |j|||d{V} nt#t $rF} td| |j ||d{V} Yd} ~ n)d} ~ wwxYw|j ||d{V} t| dd}#t $r+} tdt| dcYd} ~ cSd} ~ wwxYwtd| S) NFr=r>r8z3Teams reply() failed, falling back to flat send: %srTrErH) rr+format_messagetruncate_messageisdigitreplyr.rUrVrrr=) rQrxrrJr: formattedchunkslast_message_idchunkr reply_errrcs rArzTeamsAdapter.sendsy Pe3NOOO O''00 &&y11 O OE O B 0 0 2 2 Bx3 F'+yw%'P'P!P!P!P!P!P!P$FFF Q%(,y~~gu'E'E!E!E!E!E!E!EF$(9>>'5#A#AAAAAAAF")&$"="= O O O!%s1vvNNNNNNNNNNN O$?CCCCsH D*"B  D CrN) Attachmentrzhttp://zhttps://?zfile://rbzdata:z;base64,)rrTrrHz[teams] send_%s failed: %srJrE)rr+base64 mimetypesrir\rr guess_typer- removeprefixopen b64encodereaddecodeadd_attachmentsadd_textrr}rrrr.rUr<r=)rQrxrrXrYrZr_r`r\rrrrf attachmentr`rrrcs rA_send_media_attachmentz#TeamsAdapter._send_media_attachments y Pe3NOOO O K MMM     L L L L L L L L  ++ cv/@/@/L/L c$ %00c1B1B11EFFqIY\ **955%0066q9I\ $%%c"b)"b"bV=M=Maffhh=W=W=^=^=`=`"b"bKccccccccccccccc$ TTTJ++--==jIIH 6#,,W55**733H A#y8==hQQQQQQQQ#y~~gx@@@@@@@@dwvtT7R7RSSS S K K K LL5{APTL U U Ue3q66TJJJ J J J J J J KsDB5G-AD G-D!!G-$D!%CG-- H>79H> image_urlcFK|||d|dd{VS)Nz image/pngrrxrrXrYrZrk)rQrxrlrYrJr:s rA send_imagezTeamsAdapter.send_imagesR00$ 1         rC image_pathcDK|||||d{VS)N)rxrlrYrJ)rp)rQrxrqrYrJkwargss rAsend_image_filezTeamsAdapter.send_image_filesM__  %         rC video_pathcFK|||d|dd{VS)Nz video/mp4rrnro)rQrxrurYrJr:rss rA send_videozTeamsAdapter.send_videosR00$ 1         rC audio_pathcFK|||d|dd{VS)Nz audio/mpegvoicernro)rQrxrxrYrJr:rss rA send_voicezTeamsAdapter.send_voicesR00% 1         rC file_path file_namecFK|||d|dd{VS)Nzapplication/octet-streamrrnro)rQrxr|rYr}rJr:rss rA send_documentzTeamsAdapter.send_document#sR003" 1         rCr~cK|d|dS)Nunknown)r#rErxrX)rQrxs rA get_chat_infozTeamsAdapter.get_chat_info5swGGGrC)rmr&)rr1r2r1r[)r)rr=rrr2r)rrr2rV)rxr=rrr2r)rr r2r )r7N) rxr=r8r=rr=r9r=r:r;r2r+)NN) rxr=rr=rJr(r:r;r2r+rF)rxr=r:r;r2rV)NrW) rxr=rr=rXr=rYr(rZr=r2r+)NNN) rxr=rlr=rYr(rJr(r:r;r2r+) rxr=rqr=rYr(rJr(r2r+) rxr=rur=rYr(rJr(r:r;r2r+) rxr=rxr=rYr(rJr(r:r;r2r+)NNNN)rxr=r|r=rYr(r}r(rJr(r:r;r2r+)rxr=r2r~)r\r]r^r_MAX_MESSAGE_LENGTHsplits_long_messagesrRrrrrrrrIrrVrkrprtrwr{rr __classcell__)rs@rArxrxsJEE------ 5:QQQQQQf,,,,$$$$$8V)V)V)V)p    ] ] ] ] H/-1 <K<K<K<K<KD#'-1 "D"D"D"D"DH"&" 0K0K0K0K0Kl"&"&-1      ("&"&      &"&"&-1      *"&"&-1      *"&#'"&-1     $HHHHHHHHrCrxrVc~ddlm}m}ddlm}m}m}m}m}|d}|r|d|d|ddsd S|d |d |d t|d |d|dt|dt|d|pd}|s |dd S|d| |d|dpdd} | s |dd S|d| |d|dpd} | s |dd S|d| t|d|ddrS|d|d pd} | r,|d | d!d|d"n$|d dn|d#d$|d%t|d&|d'|d(d S))z7Guide the user through Teams setup using the Teams CLI.r) get_env_valuesave_env_value)rs prompt_yes_no print_info print_success print_warningrz#Teams: already configured (app ID: )zReconfigure Teams?FNz2You'll need the Teams CLI. If you haven't already:z- npm install -g @microsoft/teams.cli@previewz teams loginzAThen expose port 3978 publicly (devtunnel / ngrok / cloudflared),zand create your bot:zM teams app create --name "Hermes" --endpoint "https:///api/messages"zMThe CLI will print CLIENT_ID, CLIENT_SECRET, and TENANT_ID. Paste them below.z Client IDrOr.u.Client ID is required — skipping Teams setupz Client secretrT)r/passwordu2Client secret is required — skipping Teams setupz Tenant IDru.Tenant ID is required — skipping Teams setupzDTo find your AAD object ID for the allowlist: teams status --verbosez0Restrict access to specific users? (recommended)z(Allowed AAD object IDs (comma-separated)r zAllowlist configuredrr7uF⚠️ Open access — anyone who can message the bot can command it.z+Teams configuration saved to ~/.hermes/.envz>Install the app in Teams: teams app install --id z1Restart the gateway: hermes gateway restart) hermes_cli.configrrhermes_cli.cli_outputrsrrrrprintr>replace) rrrsrrrr existing_idrrralloweds rAinteractive_setupr;s - 122K GGGGHHH}1599  FJCDDDJ>???J GGGJRSSSJ%&&&Jbccc GGGJ^___ GGG{K,=2>>>I  FGGGN$ioo&7&7888F?MMBW4X4X4^\^imnnnM  JKKKN(-*=*=*?*?@@@{MM:K,L,L,RPRSSSI  FGGGN$ioo&7&7888 GGGJUVVV}GNN `& 6!M"788>B     6 N0'//#r2J2J K K K M0 1 1 1 1 N0" 5 5 5 5.777 ^___ GGGM?@@@JOPPPJBCCCCCrCc|dddtttgddtt dt ddd d d d dS)u:Plugin entry point — called by the Hermes plugin system.r{zMicrosoft Teamsc t|SrF)rx)cfgs rArzregister..sL$5$5rC)rrrz(pip install microsoft-teams-apps aiohttpr rrryu💼TuYou are chatting via Microsoft Teams. Teams renders a subset of markdown — bold (**text**), italic (*text*), and inline code (`code`) work, but complex tables or raw HTML do not. Keep responses clear and professional.)r#labeladapter_factorycheck_fnrr required_env install_hintsetup_fnenv_enablement_fncron_deliver_env_varstandalone_sender_fnallowed_users_env allow_all_envmax_message_lengthemojiallow_update_command platform_hintN)register_platformrrrrr&rd)rs rAregisterrsq 55#'!RRR?"*2./- ! 0A%%%%%rC)r0rr/r1r2r1)r0rr/rDr2rD)r2r1)r2r)r'r=r2r() rxr=r8r=r5r(r6r9r7r1r2r:r[)Wr_ __future__rrSrrloggingrtypingrrrr-rrPr r ImportErrorrgr r rhrrirrrjrrkrrlrrrmrrrnrrrr ror"r#r$rr=gateway.configr%r&gateway.platforms.helpersr'rr(r)r*r+r,r- getLoggerr\rUrrrrBrIrKrarrrrr&rL frozensetr1r _re_teamscompilerNr4rdrvrxrrrXrCrArs<,#"""""  &&&&&&&&&& CCC'99999999@@@@@@JJJJJJJJIIIIII^^^^^^feeeeeee MLLLLLLLLLM COO !%%)"(,%!%NJKLLMIII'*43333333999999  8 $ $  05      0=         P=P=P=P=P=P=P=P=f% % % % % % % % P5555 ;;;;#### $$$$VF )y'*  %I%&=>>8 $"& w?w?w?w?w?w?@>O>O>O>OBA HA HA HA HA H&A HA HA HLDDDDDDDDR''''''s"7 AAA B+C?C