j ,dZddlZddlmZmZmZddlZddlmZddlm Z ddl m Z eje ZdZdZd Zd efd Zd ed efd ZdZefdededefdZdededefdZddededefdZy)atA tenant's connected Microsoft Teams account: reading it, refreshing its access token when expired, and everything below this module needs to call Microsoft Graph. Same shape as google_calendar.py, and the same connect flow -- written by a different service into the tenant's own galaxiq_tenants schema, provider value 'teams'. This module only ever reads what it wrote. N)datetime timedeltatimezone)sql)settings)get_db_connectionz:https://login.microsoftonline.com/common/oauth2/v2.0/tokenz https://graph.microsoft.com/v1.0teams tenant_idc t} |j 5}|j t jdjt j|tdf|j}ddd|jsy|\}}}|5|tjtj krt#||}|sydd|i} t%j&t(d|d } | j+| j-} t%j&t(d |d } | j+| j-} || j'd xs| j'dxsd| j'dxsddS#t$r%}tjd|d|Yd}~yd}~wwxYw#1swYPxYw#t$r5}tjd|d|Yd}~|jyd}~wwxYw#|jwxYw#t$r%}tjd |d|Yd}~yd}~wwxYw)a`This tenant's active Microsoft Teams connection, refreshed if its access token has expired. Returns {"access_token", "user_email", "timezone"} -- everything check_availability/create_event/cancel_event need. None covers every reason it cannot be used: no connection, a disconnected one, or a refresh failure (revoked consent). z(Could not read the Teams connection for : NzjSELECT "accessToken", "refreshToken", "expiresAt" FROM {}.integrations WHERE provider = %s AND status = %sACTIVE AuthorizationBearer z/me/mailboxSettingsheaderstimeoutz/mez+Could not read Microsoft Graph profile for mailuserPrincipalNametimeZoneUTC) access_token user_emailr)r ExceptionloggererrorcursorexecuterSQLformat IdentifierPROVIDERfetchoneclosernowrutc_refreshhttpxget GRAPH_BASEraise_for_statusjson) r connexcurrowr refresh_token expires_atrsettings_responsemailbox_settings me_responsemes >/var/www/html/strategist-ai/app/services/integrations/teams.pyget_teams_connectionr9s* "  [[] !c KKNOy128$  & ,,.C  ! .1+L-* X\\0J"J =9 ', 89G !IIl- .M**,,113ii:,c 2GRP $$&     %ffVnI/B(CIr$((4= S  ? {"RDQR  ! !  ? {"RDQR  *  B9+RPRtTUsq FGAG ;GA>H, G!GG GG HH:HHHH), I5IIr2c $ tjttjtj |dddd}|j |j}|jd }|sytjtjt!|jd xsd z} t#} |j%5}|j't)j*dj-t)j.|||t0fddd|j3|j7|S#t$r%}tjd|d|Yd}~yd}~wwxYw#t$r'}tjd |d||cYd}~Sd}~wwxYw#1swYxYw#t$r5}|j5tjd |d|Yd}~d}~wwxYw#|j7wxYw)ztExchanges a refresh token for a new access token, and writes it back onto the same row. Returns None on failure.r2z$https://graph.microsoft.com/.default) client_id client_secretr2 grant_typescoper)datarz&Could not refresh the Teams token for r Nr expires_ini)secondsz0Could not persist the refreshed Teams token for zSUPDATE {}.integrations SET "accessToken" = %s, "expiresAt" = %s WHERE provider = %s)r)post TOKEN_URLrMS_TEAMS_CLIENT_IDMS_TEAMS_CLIENT_SECRETr,r-rrrr*rr&rr'rrrrrr r!r"r#commitrollbackr%) r r2responsepayloadr/rr3r.r0s r8r(r(Us:: %88!)!@!@!.-?    !!#--/ ;;~.L hll+i L)1T/33J "  [[] 6c KK?@y12z84  6 6 ?  =i[2$OP  G {RTUWTXYZ  6 6 [  G {RTUWTXYZZ[ syAE 8 E=F<AF0"F< E:E55E:= F-F("F-(F-0F95F<< G:+G50G=5G::G==H connectionduration_minutesreturnc   |jtj}|jtj}tjt ddd|di|dg|j ddd|j dddd d }|j|jd d jdxsg}g}|D]} | jddk7r|jtj| ddjtjtj| ddjtjfg} | t|} | z|kr< | zt fd|Ds| j d | z | z|kr<| S#t $r$} t"j%d| gcYd} ~ Sd} ~ wwxYw)zOpen duration_minutes-long slots inside [start, end]. Returns [] on any API failure, same safe-failure reasoning as the Google Calendar module.z/me/calendar/getSchedulerrrr%Y-%m-%dT%H:%M:%SrdateTimer) schedules startTimeendTimerrr-rvaluer scheduleItemsstatusbusystartrQ)tzinfoend)minutesc3<K|]\}}|kxr|kDywN).0b_startb_endrslot_ends r8 z%check_availability..s&X%v~<(W*<<Xs)rZr\z$Could not check Teams availability: N) astimezonerr'r)rBr+strftimer,r-r*appendr fromisoformatreplaceranyrrr)rKrZr\rL start_utcend_utcrHitemsrYitemslotsstepr/rrds @@r8check_availabilityrrs$$$X\\2 ...::l2 3$ >0J/K&LM(67*3*<*<=P*Q_de(/(8(89L(M[`a    !!# (+//@FB Dxx!V+ KK&&tG}Z'@AIIQYQ]Q]I^&&tE{:'>?GGx||G\  !12tms"}HXSWXX vh?@ dNF tms"   ;B4@A s$F=GG G1 G,&G1,G1 visitor_email visitor_namec z |jtj}|jtj}tjt ddd|did||j ddd|j ddd||d d d gd d dd}|j|j}|jd} | stjdy|jdxsi} | | jddS#t$r"} tjd| Yd} ~ yd} ~ wwxYw)zBooks the slot and creates the Teams meeting in one call (isOnlineMeeting=true) -- Graph returns the join link on the created event. Returns None on failure. /me/eventsrrrz Meeting with rOrrP)addressnamerequired) emailAddresstypeTteamsForBusiness)subjectrZr\ attendeesisOnlineMeetingonlineMeetingProviderrrUidz7Could not create the Teams event: response missing 'id'N onlineMeetingjoinUrl)event_id meeting_linkz"Could not create the Teams event: ) rfrr'r)rBr+rgr,r-r*rrr) rKrZr\rsrtrlrmrHeventronline_meetingr/s r8 create_eventrs>$$X\\2 ...::l* %$ >0J/K&LM*<.9&/&8&89L&M[`a$+$4$45H$IW\]0=|$T&$();   !!# 99T? LLR S?39r$n6H6H6STT  9">?sC#D&(D D:D55D:c ||tdz jtj}|tdzjtj}t j t ddd|di|jd|jdd d }n't j t d dd|did }|j|jj dxsg}|j}g}|D]} t| ts| j d} t| ts6d} | D]_} t| ts| j d} t| ts6| j dxsdj|k(s]d} n| s|j|  t%|dk7ry t j&t d|dddd|did }|jy#t$r"}t j#d|Yd}~yd}~wwxYw#t$r"}t j#d|Yd}~yd}~wwxYw)aHFinds the event by attendee email (narrowed to a window around near_time when given) and deletes it. Returns False when zero or more than one event matches -- does not guess. Attendee matching is done client-side in Python, not via Graph's $filter -- `$filter=attendees/any(...)` is not a supported OData expression for the events collection and would likely 400. near_time narrowing uses /me/calendarView (the only endpoint that honours startDateTime/endDateTime as a time window) rather than /me/events, which silently ignores those two params. N)hoursz/me/calendarViewrrrrO) startDateTime endDateTimer)rparamsrrvrrVr~FrzrwrTz0Could not search Teams events for cancellation: z /me/events/rrz"Could not delete the Teams event: )rrfrr'r)r*r+rgr,r-lower isinstancedictlistrhrrrlendelete)rKrs near_time window_start window_endrH candidatesvisitor_email_lowerrnrr~matchedattendee email_addressr/s r8 cancel_eventrsr0  % (::FFx||TL#ia&88DDX\\RJyy,./(GJ~4N3O*PQ%1%:%:;N%O#-#6#67J#KHyy,j)(GJ~4N3O*PQH !!#]]_((17R ,113 $EeT* +.Ii.G% !(D1 ( ^ < !-6!%%i06B==?CVV"G  U## $, 5zQ <<l+eAhtn%5 6$ >0J/K&LM  !!#  GtLM  9">?s<F(H+H3H?I I H==I I0I++I0r_)__doc__loggingrrrr)psycopg2rapp.core.configrapp.services.infra.databaser getLogger__name__rrCr+r#strr9r( SLOT_MINUTESrintrrrrboolrr`r8rs22 $9   8 $ H / 8C8v00C0f NZ(4(s(^b(V!T!c!QT!HKTK#K$Kr