@chrischall/office-outlook-mcp 0.6.0 → 0.6.2

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Outlook / Microsoft 365 — mail, calendar, contacts and tasks via natural language",
-    "version": "0.6.0"
+    "version": "0.6.2"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "Outlook (Microsoft 365)",
       "source": "./",
       "description": "MCP server for Outlook / Microsoft 365 — triage unread mail, reply, answer meeting invites and schedule meetings, plus folders, calendar, contacts and tasks, with confirmation before anything is sent",
-      "version": "0.6.0",
+      "version": "0.6.2",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/mcp.json

@@ -1,8 +1,8 @@
 {
   "mcpServers": {
     "outlook": {
-      "command": "node",
-      "args": ["${CLAUDE_PLUGIN_ROOT}/dist/bundle.js"],
+      "command": "npx",
+      "args": ["-y", "@chrischall/office-outlook-mcp"],
       "env": {
         "OUTLOOK_ACCESS_TOKEN": "${OUTLOOK_ACCESS_TOKEN}"
       }

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "office-outlook-mcp",
   "displayName": "Outlook (Microsoft 365)",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "Outlook / Microsoft 365 for Claude — triage unread mail, reply, answer meeting invites and schedule meetings, plus folders, calendar, contacts and tasks, with confirmation before anything is sent, using your signed-in browser session",
   "author": {
     "name": "Chris Hall",

package/README.md

@@ -119,8 +119,9 @@ Everything is optional — with nothing set, the server captures from the browse
 `outlook_update_message`, `outlook_move_message`, `outlook_create_event`,
 `outlook_update_event`, `outlook_respond_to_invite`, `outlook_delete_event`,
 `outlook_reply`.
-Three skip the confirmation when nothing reaches anyone else:
-`outlook_reply` with `draftOnly: true` (the reply stays in Drafts),
+Some skip the confirmation because nothing reaches anyone else:
+`outlook_create_draft` (the draft stays in Drafts until you send it from
+Outlook), `outlook_reply` with `draftOnly: true` (the reply stays in Drafts),
 `outlook_respond_to_invite` with `sendResponse: false`, and
 `outlook_delete_event` on your own appointment with no attendees or on a
 meeting the organizer already cancelled (in each, only your calendar
@@ -129,9 +130,12 @@ changes).
 **Meetings** — `outlook_find_meeting_times` asks Outlook's Scheduling
 Assistant for slots when everyone is free, and `outlook_get_schedule` shows
 each person's busy blocks. Each suggested slot carries `createEventArgs`,
-which `outlook_create_event` accepts unchanged. `outlook_create_event` and
-`outlook_update_event` attach a Microsoft Teams meeting by default and return
-its join link; pass `teamsMeeting: false` to leave it off. Only the organizer
+which `outlook_create_event` accepts unchanged. `outlook_create_event`
+attaches a Microsoft Teams meeting by default and returns its join link; pass
+`teamsMeeting: false` to leave it off. `outlook_update_event` never changes how
+people join a meeting unless asked: pass `teamsMeeting: true` to add a Teams
+meeting to an event that lacks one, and the confirmation says so in plain
+words. Only the organizer
 can update a meeting. `outlook_respond_to_invite` accepts, tentatively accepts
 or declines an invite, by its message id or its event id.
 `outlook_delete_event` deletes an event you organize — one occurrence by the
@@ -217,7 +221,8 @@ or repeated across pages, and marking mail read between pages loses nothing.
 ## Confirmations
 
 Every write asks you to confirm before anything is sent or changed (except a
-draft-only reply and a silent invite response — see [Tools](#tools)). A client
+new draft, a draft-only reply and a silent invite response — see
+[Tools](#tools)). A client
 that can show a confirmation prompt (Claude Code) shows one. On a client that
 cannot, the first call does nothing and returns a `confirmation-required`
 preview plus a `confirmToken`; only a repeat call with that token performs the

package/dist/auth-fetchproxy.js

@@ -24,9 +24,19 @@
  * cannot drive. Capture is the only path, which is why a failed capture is a
  * hard error with actionable guidance rather than a fallback.
  */
-import { createBootstrapOpts, createFetchproxyTransport, } from '@chrischall/mcp-utils/fetchproxy';
+import { captureBearerHeader } from '@chrischall/mcp-utils/fetchproxy';
 import { readPortEnv, readTtlMsEnv } from '@chrischall/mcp-utils';
 import { PACKAGE_NAME, VERSION } from './version.js';
+/**
+ * `raceCaptures` settles the per-host attempts under ONE overall deadline:
+ * `Promise.any` alone is not enough, because the bridge serializes the two
+ * hosts behind its single connection, so the wait was the sum rather than the
+ * max — measured live at 14.4s for a 5s window and 36s for a 20s one. At the
+ * 30s default that lands past the 60s request timeout an MCP client uses by
+ * default. Re-exported (it is mcp-utils', lifted from here) for the test that
+ * pins that bound.
+ */
+export { raceCaptures, stripBearer } from '@chrischall/mcp-utils/fetchproxy';
 /**
  * The fetchproxy concentrator port.
  *
@@ -87,81 +97,6 @@ export const TRUST_DOMAINS = [...CAPTURE_HOSTS];
  * enough that an idle tab does not hang a tool call for minutes.
  */
 const CAPTURE_TIMEOUT_MS = readTtlMsEnv('OUTLOOK_CAPTURE_TIMEOUT', 30_000);
-/**
- * The transport-wide deadline, derived from the capture window rather than left
- * at the library default.
- *
- * `captureRequestHeader`'s own `timeoutMs` is silently capped by
- * `fetchTimeoutMs`: a window raised past the deadline fails early at the
- * deadline's number, which reads as a timeout nobody configured. Deriving it
- * means the two cannot disagree.
- */
-const BRIDGE_DEADLINE_MS = Math.max(CAPTURE_TIMEOUT_MS + 15_000, 30_000);
-/**
- * Shortest plausible token. Real ones are ~5 KB of JWT; this only guards
- * against an empty or echoed header, not against a wrong-audience token.
- */
-const MIN_TOKEN_LENGTH = 100;
-/**
- * Add `fetch` to the derived capability set.
- *
- * `createBootstrapOpts` infers capabilities from the bootstrap DECLARATIONS and
- * the field REPLACES the server's defaults rather than extending them, so a
- * declaration-only set can silently lose `fetch`.
- */
-function withFetch(opts) {
-    const derived = opts.capabilities ?? [];
-    return {
-        ...opts,
-        capabilities: derived.includes('fetch')
-            ? derived
-            : [...derived, 'fetch'],
-    };
-}
-/**
- * Settle a set of per-host capture attempts under ONE overall deadline.
- *
- * `Promise.any` alone is not enough. The two declared hosts are documented as
- * raced, but the bridge serializes them behind its single connection, so the
- * wait was the sum rather than the max — measured live at 14.4s for a 5s window
- * and 36s for a 20s one. At the 30s default that lands past the 60s request
- * timeout an MCP client uses by default, so the host gave up before this code
- * could report the real reason. The window is a promise about total wait, and
- * this is what keeps it.
- *
- * Exported for the test that pins that bound.
- */
-export async function raceCaptures(attempts, windowMs) {
-    // A rejection that loses the race must not surface as an unhandled rejection
-    // once the winner has already settled the caller.
-    for (const a of attempts)
-        a.catch(() => { });
-    let timer;
-    const expiry = new Promise((_, reject) => {
-        timer = setTimeout(() => reject(new Error(`timed out after ${Math.round(windowMs / 1000)}s waiting for the page to ` +
-            'make a request we could read')), windowMs);
-    });
-    try {
-        // `any` resolves on the first SUCCESS rather than the first settle, so the
-        // host the user is not on failing does not sink the one they are on.
-        return await Promise.race([
-            Promise.any(attempts).catch((e) => {
-                throw new Error(e instanceof AggregateError
-                    ? e.errors.map((x) => x.message).join('; ')
-                    : e.message);
-            }),
-            expiry,
-        ]);
-    }
-    finally {
-        clearTimeout(timer);
-    }
-}
-/** Normalise a captured header to a bare token, dropping any `Bearer ` prefix. */
-export function stripBearer(raw) {
-    const m = /^\s*Bearer\s+(.+)$/i.exec(raw);
-    return (m ? m[1] : raw).trim();
-}
 /**
  * Capture an Outlook access token from the user's signed-in browser tab.
  *
@@ -171,54 +106,23 @@ export function stripBearer(raw) {
  * Returns the bare token (no `Bearer ` prefix).
  */
 export async function captureTokenViaFetchproxy() {
-    const transport = createFetchproxyTransport({
-        ...withFetch(createBootstrapOpts({
-            domains: [...TRUST_DOMAINS],
-            bootstrap: {
-                captureHeaders: [{ ...CAPTURE_DECL_CLOUD }, { ...CAPTURE_DECL_OFFICE }],
-            },
-        })),
+    // `captureBearerHeader` declares only `capture_request_header` beside the
+    // `fetch` base verb, derives the bridge deadline from the window (window +
+    // 15 s, never under 30 s) so a raised window is not cut off early, starts the
+    // transport (skipping `start()` makes the first verb throw "ensureConnected
+    // called before listen()", which reads like a pairing problem), rejects a
+    // header too short to be a token (real ones are ~5 KB of JWT), and closes
+    // the transport whatever happened.
+    return captureBearerHeader({
+        captures: [CAPTURE_DECL_CLOUD, CAPTURE_DECL_OFFICE],
+        domains: TRUST_DOMAINS,
+        windowMs: CAPTURE_TIMEOUT_MS,
         port: getWsPort(),
-        fetchTimeoutMs: BRIDGE_DEADLINE_MS,
         serverName: PACKAGE_NAME,
         version: VERSION,
+        what: 'an Outlook token',
+        guidance: 'Open a signed-in Outlook tab (outlook.cloud.microsoft or ' +
+            'outlook.office.com), leave it in the foreground for a moment so the ' +
+            'page makes a request, and retry.',
     });
-    try {
-        // `start()` loads the identity keypair. It does not bind the port or dial —
-        // that stays lazy until the first verb — but skipping it makes the first
-        // verb throw "ensureConnected called before listen()", which reads exactly
-        // like a pairing problem and is not one.
-        await transport.start();
-        const attempts = [CAPTURE_DECL_CLOUD, CAPTURE_DECL_OFFICE].map((decl) => transport.server
-            .captureRequestHeader({ ...decl, timeoutMs: CAPTURE_TIMEOUT_MS })
-            .then((raw) => {
-            if (typeof raw !== 'string') {
-                throw new Error(`${decl.host}: capture returned no header`);
-            }
-            const token = stripBearer(raw);
-            if (token.length < MIN_TOKEN_LENGTH) {
-                throw new Error(`${decl.host}: authorization header was present but too short to be a ` +
-                    `token (${token.length} chars)`);
-            }
-            return token;
-        }));
-        try {
-            return await raceCaptures(attempts, CAPTURE_TIMEOUT_MS);
-        }
-        catch (e) {
-            const detail = e.message;
-            throw new Error(`could not capture an Outlook token from the browser (${detail}). ` +
-                'Open a signed-in Outlook tab (outlook.cloud.microsoft or ' +
-                'outlook.office.com), leave it in the foreground for a moment so the ' +
-                'page makes a request, and retry.');
-        }
-    }
-    finally {
-        try {
-            await transport.close();
-        }
-        catch {
-            /* the token, or the original failure, is what matters */
-        }
-    }
 }