@brigid/mcp-apple-calendar 0.0.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 shadowgate15
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,55 @@
+# @brigid/mcp-apple-calendar
+
+A read-only Apple Calendar [Model Context Protocol](https://modelcontextprotocol.io) (MCP) server.
+It is the **reference implementation** of brigid's
+[calendar capability contract](../../docs/contracts/calendar.md) — it exposes only the tool the
+brigid GTD skills need (`find-events`), using the contract's canonical tool name so the skills
+detect and use it automatically.
+
+**macOS only.** It reads Apple Calendar via macOS **EventKit** — the same store `Calendar.app`
+shows, so it sees every account you've added there (iCloud, Google, Exchange, …). See
+[ADR 0002](../../docs/adr/0002-calendar-connector-eventkit-reference.md) for why.
+
+## Conformance
+
+| Capability group                    | Status         |
+| ----------------------------------- | -------------- |
+| **Core** (`find-events`, read-only) | ✅ implemented |
+
+Write (event creation/moves) is intentionally out of scope for v1 — see the contract and ADR 0002.
+
+## Permissions
+
+No API token or configuration is needed. The first time `find-events` runs, macOS will prompt you
+to grant Calendar access to whatever process is invoking the server; grant it in the dialog, or
+after the fact via **System Settings → Privacy & Security → Calendars**. Access persists across
+runs once granted.
+
+If access is denied, not yet granted, or the prompt times out, `find-events` returns an explicit
+tool error — it never reports an empty calendar as a way of papering over a permission problem.
+
+## Structure
+
+- `src/index.ts` — `createServer()`, the reusable/testable server factory (registers `find-events`, no transport).
+- `src/bin.ts` — the executable entry (`bin`), which attaches the stdio transport and runs the server.
+- `src/eventkit.ts` — the Node-side bridge to the native shim; translates its output into the contract's `Event` shape.
+- `src/native/find-events.jxa.js` — the JXA (JavaScript for Automation) script that bridges into macOS EventKit. Not compiled by tsc; copied to `dist` as a build asset.
+
+## Develop
+
+```sh
+nx build mcp-apple-calendar        # compile to dist/packages/mcp-apple-calendar
+nx lint mcp-apple-calendar --fix    # lint + sync package.json deps from the root (single-version policy)
+```
+
+## Run
+
+After building, launch the server over stdio (macOS only):
+
+```sh
+node dist/packages/mcp-apple-calendar/src/bin.js
+```
+
+Or, once published, via `npx @brigid/mcp-apple-calendar`.
+
+🚀

package/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "@brigid/mcp-apple-calendar",
+  "version": "0.0.3",
+  "description": "Read-only Apple Calendar MCP server (via macOS EventKit) — the reference implementation of brigid's calendar capability contract.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./src/index.js",
+  "types": "./src/index.d.ts",
+  "bin": {
+    "mcp-apple-calendar": "./src/bin.js"
+  },
+  "files": [
+    "src",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "zod": "^4.4.3"
+  },
+  "module": "./src/index.js"
+}

package/src/bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=bin.d.ts.map

package/src/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../../../../packages/mcp-apple-calendar/src/bin.ts"],"names":[],"mappings":""}

package/src/bin.js

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { createServer } from './index.js';
+/**
+ * Executable entry point: runs the Apple Calendar MCP server over stdio.
+ * Registered as the package `bin`, so it can be launched via `npx @brigid/mcp-apple-calendar`.
+ */
+async function main() {
+    const server = createServer();
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+main().catch((error) => {
+    // stderr only — stdout is reserved for the JSON-RPC protocol stream.
+    console.error('Fatal error running mcp-apple-calendar server:', error);
+    process.exit(1);
+});
+//# sourceMappingURL=bin.js.map

package/src/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../../../packages/mcp-apple-calendar/src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C;;;GAGG;AACH,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,qEAAqE;IACrE,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/src/eventkit.d.ts

@@ -0,0 +1,19 @@
+export interface Event {
+    id: string;
+    title: string;
+    start: string;
+    end: string;
+    allDay: boolean;
+    location?: string;
+}
+export interface DateRange {
+    from: string;
+    to: string;
+}
+export interface EventWindow {
+    date?: string;
+    dateRange?: DateRange;
+}
+/** Run the JXA shim and parse its single-line JSON result. Never returns a partial/empty-on-error result. */
+export declare function findEvents(window: EventWindow): Promise<Event[]>;
+//# sourceMappingURL=eventkit.d.ts.map

package/src/eventkit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eventkit.d.ts","sourceRoot":"","sources":["../../../../packages/mcp-apple-calendar/src/eventkit.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAeD,6GAA6G;AAC7G,wBAAsB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAwBtE"}

package/src/eventkit.js

@@ -0,0 +1,34 @@
+/**
+ * Thin bridge to the JXA/EventKit shim in native/find-events.jxa.js — the only place that knows
+ * how to reach Apple Calendar. This module speaks the neutral capability-contract Event shape; see
+ * docs/contracts/calendar.md for the contract this implements.
+ */
+import { execFile } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+const SCRIPT_PATH = join(dirname(fileURLToPath(import.meta.url)), 'native', 'find-events.jxa.js');
+/** Run the JXA shim and parse its single-line JSON result. Never returns a partial/empty-on-error result. */
+export async function findEvents(window) {
+    const stdout = await new Promise((resolve, reject) => {
+        execFile('osascript', ['-l', 'JavaScript', SCRIPT_PATH, JSON.stringify(window)], 
+        // maxBuffer raised well above the 1 MB default: a wide dateRange over a dense calendar can
+        // emit more than that, and the default would surface as an opaque "stdout maxBuffer exceeded".
+        { timeout: 35_000, maxBuffer: 16 * 1024 * 1024 }, (error, out, stderr) => {
+            if (error)
+                reject(new Error(`osascript failed: ${stderr || error.message}`));
+            else
+                resolve(out);
+        });
+    });
+    let result;
+    try {
+        result = JSON.parse(stdout);
+    }
+    catch {
+        throw new Error(`Unparseable response from the calendar shim: ${stdout}`);
+    }
+    if (!result.ok)
+        throw new Error(`[${result.reason}] ${result.message}`);
+    return result.events;
+}
+//# sourceMappingURL=eventkit.js.map

package/src/eventkit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eventkit.js","sourceRoot":"","sources":["../../../../packages/mcp-apple-calendar/src/eventkit.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC;AAkClG,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAmB;IAClD,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3D,QAAQ,CACN,WAAW,EACX,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzD,2FAA2F;QAC3F,+FAA+F;QAC/F,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,EAChD,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;YACrB,IAAI,KAAK;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;;gBACxE,OAAO,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAe,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gDAAgD,MAAM,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC"}

package/src/index.d.ts

@@ -0,0 +1,13 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+/**
+ * Package version, kept in sync with package.json by `nx release`.
+ * Bump lives in package.json; this constant is the runtime source.
+ */
+export declare const version = "0.0.1";
+/**
+ * Create and configure the Apple Calendar MCP server — the reference implementation of the
+ * calendar capability contract. Registers the Core (read-only) tool under its canonical name; no
+ * transport is attached here, so callers (bin, tests) decide how to run it.
+ */
+export declare function createServer(): McpServer;
+//# sourceMappingURL=index.d.ts.map

package/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../packages/mcp-apple-calendar/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAKpE;;;GAGG;AACH,eAAO,MAAM,OAAO,UAAU,CAAC;AAa/B;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,SAAS,CA8BxC"}

package/src/index.js

@@ -0,0 +1,49 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { z } from 'zod';
+import { findEvents } from './eventkit.js';
+/**
+ * Package version, kept in sync with package.json by `nx release`.
+ * Bump lives in package.json; this constant is the runtime source.
+ */
+export const version = '0.0.1';
+/** Serialize a successful tool result as JSON text (skills read the JSON). */
+function ok(value) {
+    return { content: [{ type: 'text', text: JSON.stringify(value, null, 2) }] };
+}
+/** Turn a thrown error into a readable, non-fatal tool error for the skill to handle. */
+function fail(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return { content: [{ type: 'text', text: message }], isError: true };
+}
+/**
+ * Create and configure the Apple Calendar MCP server — the reference implementation of the
+ * calendar capability contract. Registers the Core (read-only) tool under its canonical name; no
+ * transport is attached here, so callers (bin, tests) decide how to run it.
+ */
+export function createServer() {
+    const server = new McpServer({ name: 'mcp-apple-calendar', version });
+    server.registerTool('find-events', {
+        title: 'Find events',
+        description: 'Query calendar events overlapping a date window.',
+        inputSchema: {
+            date: z.string().optional().describe('YYYY-MM-DD — mutually exclusive with dateRange'),
+            dateRange: z
+                .object({ from: z.string(), to: z.string() })
+                .optional()
+                .describe('Inclusive YYYY-MM-DD span — mutually exclusive with date'),
+        },
+    }, async ({ date, dateRange }) => {
+        try {
+            // Fail fast at the tool boundary — reject an ambiguous window before spawning the subprocess.
+            if (Boolean(date) === Boolean(dateRange)) {
+                throw new Error('Provide exactly one of "date" or "dateRange".');
+            }
+            return ok({ events: await findEvents({ date, dateRange }) });
+        }
+        catch (error) {
+            return fail(error);
+        }
+    });
+    return server;
+}
+//# sourceMappingURL=index.js.map

package/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/mcp-apple-calendar/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C;;;GAGG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B,8EAA8E;AAC9E,SAAS,EAAE,CAAC,KAAc;IACxB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,yFAAyF;AACzF,SAAS,IAAI,CAAC,KAAc;IAC1B,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC;IAEtE,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,kDAAkD;QAC/D,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;YACtF,SAAS,EAAE,CAAC;iBACT,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;iBAC5C,QAAQ,EAAE;iBACV,QAAQ,CAAC,0DAA0D,CAAC;SACxE;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,8FAA8F;YAC9F,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/src/native/find-events.jxa.js

@@ -0,0 +1,159 @@
+/* eslint-disable */
+// JXA (JavaScript for Automation) script, run via `osascript -l JavaScript`. Not compiled by tsc —
+// copied verbatim to dist by the build (see project.json assets). Bridges into macOS EventKit to
+// read calendar events. Always returns exactly one line of JSON on stdout, even on failure; never
+// throws uncaught, so the Node side (../eventkit.ts) has a single, reliable parse path.
+//
+// Contract with the Node caller: argv[0] is `{"date":"YYYY-MM-DD"}` or
+// `{"dateRange":{"from":"YYYY-MM-DD","to":"YYYY-MM-DD"}}`. Output is
+// `{"ok":true,"events":[...]}` or `{"ok":false,"reason":"...","message":"..."}`.
+ObjC.import('EventKit');
+
+function pad(n) {
+  return n < 10 ? '0' + n : '' + n;
+}
+
+function parseWindow(input) {
+  if (input.date && input.dateRange) {
+    throw { reason: 'bad-input', message: '"date" and "dateRange" are mutually exclusive.' };
+  }
+  if (!input.date && !input.dateRange) {
+    throw { reason: 'bad-input', message: 'One of "date" or "dateRange" is required.' };
+  }
+  if (input.dateRange && (!input.dateRange.from || !input.dateRange.to)) {
+    throw { reason: 'bad-input', message: 'dateRange requires both "from" and "to".' };
+  }
+  // Reject reversed bounds: an inverted predicate window returns [] on EventKit, which would
+  // masquerade as a genuinely empty result and break the "empty means truly empty" guarantee.
+  if (input.dateRange && input.dateRange.from > input.dateRange.to) {
+    throw { reason: 'bad-input', message: 'dateRange "from" must not be after "to".' };
+  }
+  return input.date ? { from: input.date, to: input.date } : input.dateRange;
+}
+
+function localMidnight(isoDate) {
+  var parts = isoDate.split('-').map(Number);
+  var comps = $.NSDateComponents.alloc.init;
+  comps.year = parts[0];
+  comps.month = parts[1];
+  comps.day = parts[2];
+  comps.hour = 0;
+  comps.minute = 0;
+  comps.second = 0;
+  var date = $.NSCalendar.currentCalendar.dateFromComponents(comps);
+  if (!date) throw { reason: 'bad-input', message: 'Invalid date: ' + isoDate };
+  return date;
+}
+
+function addDays(date, n) {
+  var comps = $.NSDateComponents.alloc.init;
+  comps.day = n;
+  return $.NSCalendar.currentCalendar.dateByAddingComponentsToDateOptions(comps, date, 0);
+}
+
+function ymd(date) {
+  var units = $.NSCalendarUnitYear | $.NSCalendarUnitMonth | $.NSCalendarUnitDay;
+  var comps = $.NSCalendar.currentCalendar.componentsFromDate(units, date);
+  return comps.year + '-' + pad(comps.month) + '-' + pad(comps.day);
+}
+
+/** Authorized/fullAccess is EKAuthorizationStatus 3 on every macOS version that supports it. */
+function isAuthorized(status) {
+  return Number(status) === 3;
+}
+
+/**
+ * Ensure calendar read access, prompting the user if this is the first run. Returns once resolved;
+ * throws a structured {reason, message} on denial or on an unresolved prompt (no UI session, or the
+ * user hasn't responded within the bound). Never hangs indefinitely.
+ */
+function ensureAccess(store) {
+  var status = $.EKEventStore.authorizationStatusForEntityType($.EKEntityTypeEvent);
+  if (isAuthorized(status)) return;
+
+  var granted = null;
+  store.requestAccessToEntityTypeCompletion($.EKEntityTypeEvent, function (g) {
+    granted = g;
+  });
+
+  var waited = 0;
+  var boundSeconds = 30;
+  while (granted === null && waited < boundSeconds) {
+    delay(0.25);
+    waited += 0.25;
+  }
+
+  if (granted === null) {
+    throw {
+      reason: 'permission-timeout',
+      message:
+        'Calendar access prompt did not resolve within ' +
+        boundSeconds +
+        's. Grant access in System Settings → Privacy & Security → Calendars, then retry.',
+    };
+  }
+  if (!granted) {
+    throw {
+      reason: 'permission-denied',
+      message:
+        'Calendar access was not granted. Enable it in System Settings → Privacy & Security → Calendars.',
+    };
+  }
+}
+
+function findEvents(input) {
+  var window = parseWindow(input);
+  var store = $.EKEventStore.alloc.init;
+
+  ensureAccess(store);
+
+  var calendars = store.calendarsForEntityType($.EKEntityTypeEvent);
+  if (calendars.count === 0) {
+    throw {
+      reason: 'no-calendars',
+      message: 'Calendar access is granted but no calendars are available to read.',
+    };
+  }
+
+  var start = localMidnight(window.from);
+  var end = addDays(localMidnight(window.to), 1);
+
+  var predicate = store.predicateForEventsWithStartDateEndDateCalendars(start, end, calendars);
+  var events = store.eventsMatchingPredicate(predicate);
+
+  var isoFmt = $.NSISO8601DateFormatter.alloc.init;
+  isoFmt.formatOptions =
+    $.NSISO8601DateFormatWithInternetDateTime | $.NSISO8601DateFormatWithColonSeparatorInTimeZone;
+  isoFmt.timeZone = $.NSTimeZone.localTimeZone;
+
+  var out = [];
+  for (var i = 0; i < events.count; i++) {
+    var ev = events.objectAtIndex(i);
+    var allDay = Boolean(ObjC.unwrap(ev.isAllDay));
+    var location = ev.location;
+    var event = {
+      id: ObjC.unwrap(ev.eventIdentifier),
+      title: ObjC.unwrap(ev.title),
+      allDay: allDay,
+      start: allDay ? ymd(ev.startDate) : isoFmt.stringFromDate(ev.startDate).js,
+      end: allDay ? ymd(ev.endDate) : isoFmt.stringFromDate(ev.endDate).js,
+    };
+    if (location) event.location = ObjC.unwrap(location);
+    out.push(event);
+  }
+
+  return out;
+}
+
+function run(argv) {
+  try {
+    var input = JSON.parse(argv[0] || '{}');
+    var events = findEvents(input);
+    return JSON.stringify({ ok: true, events: events });
+  } catch (error) {
+    if (error && error.reason) {
+      return JSON.stringify({ ok: false, reason: error.reason, message: error.message });
+    }
+    return JSON.stringify({ ok: false, reason: 'error', message: String(error) });
+  }
+}