Verbose Graph errors, Fix Graph endpoints, Log webhook activity

.claude/settings.local.json

@@ -15,7 +15,9 @@
       "mcp__Claude_in_Chrome__tabs_context_mcp",
       "Bash(xargs grep *)",
       "Bash(curl -s -b /tmp/wp_c2.txt -H 'Content-Type: application/json' -H 'X-WP-Nonce: cdc16f767b' -d '{\"prompt\":\"What is your role?\",\"page\":\"sa-orchestration\"}' http://wordpress.localhost/wp-json/sa-orch/v1/sara/invoke)",
-      "Bash(curl -s -b /tmp/wp_c2.txt -H 'Content-Type: application/json' -H 'X-WP-Nonce: cdc16f767b' -d '{\"board_id\":1,\"topic\":\"jno-verification\"}' http://wordpress.localhost/wp-json/sa-orch/v1/seed/generate)"
+      "Bash(curl -s -b /tmp/wp_c2.txt -H 'Content-Type: application/json' -H 'X-WP-Nonce: cdc16f767b' -d '{\"board_id\":1,\"topic\":\"jno-verification\"}' http://wordpress.localhost/wp-json/sa-orch/v1/seed/generate)",
+      "Bash(git config *)",
+      "Bash(gh repo *)"
     ]
   }
 }

app/classifier.py

@@ -15,7 +15,7 @@ _KEYWORD_MAP = (
 DocType = str  # 'po' | 'invoice' | 'mtr' | 'quote' | 'unknown'
 
 
-def classify(subject: str, filename: str, file_bytes: bytes) -> DocType:
+def classify(subject: str, filename: str, file_bytes: bytes, content_type: str = "") -> DocType:
     subject_lower = subject.lower() if subject else ""
     filename_lower = filename.lower() if filename else ""
 
@@ -24,6 +24,9 @@ def classify(subject: str, filename: str, file_bytes: bytes) -> DocType:
     if "mtr" in filename_lower:
         return "mtr"
 
+    if content_type and not content_type.startswith("application/pdf"):
+        return "unknown"
+
     text = _ocr_pdf(file_bytes)
     if not text:
         return "unknown"

app/graph_client.py

@@ -1,4 +1,5 @@
 import asyncio
+import logging
 
 import httpx
 
@@ -6,6 +7,14 @@ from app.auth import GraphAuthProvider
 
 _BASE_URL = "https://graph.microsoft.com/v1.0"
 
+logger = logging.getLogger(__name__)
+
+
+def _raise_with_detail(resp: httpx.Response) -> None:
+    if resp.is_error:
+        logger.error("Graph %s %s → %s: %s", resp.request.method, resp.request.url, resp.status_code, resp.text)
+    resp.raise_for_status()
+
 
 class GraphClient:
     def __init__(self, auth: GraphAuthProvider) -> None:
@@ -20,35 +29,35 @@ class GraphClient:
         resp = await self._client.get(
             f"{_BASE_URL}{path}", headers=await self._headers(), params=params
         )
-        resp.raise_for_status()
+        _raise_with_detail(resp)
         return resp.json()
 
     async def get_raw(self, path: str) -> bytes:
         resp = await self._client.get(
             f"{_BASE_URL}{path}", headers=await self._headers()
         )
-        resp.raise_for_status()
+        _raise_with_detail(resp)
         return resp.content
 
     async def post(self, path: str, body: dict) -> dict:
         resp = await self._client.post(
             f"{_BASE_URL}{path}", headers=await self._headers(), json=body
         )
-        resp.raise_for_status()
+        _raise_with_detail(resp)
         return resp.json()
 
     async def patch(self, path: str, body: dict) -> dict:
         resp = await self._client.patch(
             f"{_BASE_URL}{path}", headers=await self._headers(), json=body
         )
-        resp.raise_for_status()
+        _raise_with_detail(resp)
         return resp.json()
 
     async def delete(self, path: str) -> None:
         resp = await self._client.delete(
             f"{_BASE_URL}{path}", headers=await self._headers()
         )
-        resp.raise_for_status()
+        _raise_with_detail(resp)
 
     async def aclose(self) -> None:
         await self._client.aclose()

app/processor.py

@@ -100,7 +100,7 @@ async def _process_notification(
             final_status = "routing_error"
             continue
 
-        doc_type = classify(subject, filename, file_bytes)
+        doc_type = classify(subject, filename, file_bytes, att.get("content_type", ""))
         logger.info("Notification %d / %s → %s", notif_id, filename, doc_type)
 
         if doc_type in _ROUTABLE:

app/scheduler.py

@@ -13,8 +13,14 @@ class RenewalScheduler:
         self._manager = subscription_manager
         self._settings = settings
 
+    def _renewal_interval_seconds(self) -> int:
+        # Renew at 80% of the subscription lifetime minus 15 minutes.
+        # With the default 4230-minute expiry that fires roughly every 53.5 hours,
+        # well before Graph's expiry and the 60-minute cutoff in ensure_subscription.
+        return int(self._settings.subscription_expiry_minutes * 60 * 0.80) - 900
+
     def start(self, subscription_id: str) -> None:
-        interval_seconds = int(self._settings.subscription_expiry_minutes * 60 * 0.80)
+        interval_seconds = self._renewal_interval_seconds()
         self._scheduler.add_job(
             self._renew_job,
             trigger="interval",
@@ -53,7 +59,7 @@ class RenewalScheduler:
         raise RuntimeError("No active subscription found to determine folder_id for recreation")
 
     def _reschedule(self, new_subscription_id: str) -> None:
-        interval_seconds = int(self._settings.subscription_expiry_minutes * 60 * 0.80)
+        interval_seconds = self._renewal_interval_seconds()
         self._scheduler.reschedule_job(
             "subscription_renewal",
             trigger="interval",

app/subscription.py

@@ -50,7 +50,7 @@ class SubscriptionManager:
         body = {
             "changeType": "created",
             "notificationUrl": str(self._settings.notification_url),
-            "resource": f"me/mailFolders/{folder_id}/messages",
+            "resource": f"users/{self._settings.mailbox_user}/mailFolders/{folder_id}/messages",
             "expirationDateTime": expiry_str,
             "clientState": client_state,
         }

app/webhook.py

@@ -37,7 +37,10 @@ async def _process_notifications(request: Request, body: dict) -> None:
     db_path = settings.database_path
     storage_path = settings.email_storage_path
 
-    for notification in body.get("value", []):
+    notifications = body.get("value", [])
+    logger.info("Webhook received %d notification(s)", len(notifications))
+
+    for notification in notifications:
         change_type = notification.get("changeType", "")
         if change_type != "created":
             logger.debug("Skipping notification with changeType=%s", change_type)