@chrischall/office-outlook-mcp 0.6.0 → 0.6.2

package/dist/bundle.js

@@ -248,6 +248,7 @@ __export(util_exports, {
   required: () => required,
   safeExtend: () => safeExtend,
   shallowClone: () => shallowClone,
+  sizeCaps: () => sizeCaps,
   slugify: () => slugify,
   stringifyPrimitive: () => stringifyPrimitive,
   toZod: () => toZod,
@@ -671,6 +672,18 @@ function prefixIssues(path, issues) {
 function unwrapMessage(message) {
   return typeof message === "string" ? message : message?.message;
 }
+function sizeCaps(defChecks) {
+  const caps = [];
+  for (const ch of defChecks ?? []) {
+    const d = ch._zod.def;
+    if (!/_(length|size)$|_equals$/.test(d.check))
+      break;
+    const max = d.maximum ?? d.length ?? d.size;
+    if (max >= 0)
+      caps.push([max, ch]);
+  }
+  return caps;
+}
 function attachSchema(issues, start, inst) {
   var _a3;
   for (let i = start; i < issues.length; i++) {
@@ -2234,7 +2247,7 @@ var init_versions = __esm({
     version = {
       major: 4,
       minor: 6,
-      patch: 5
+      patch: 7
     };
   }
 });
@@ -2396,6 +2409,28 @@ function isValidJWT(token, algorithm = null) {
     return false;
   }
 }
+function capSize(inst, size) {
+  const caps = sizeCaps(inst._zod.def.checks);
+  if (!caps.length)
+    return;
+  const cap = Math.min(...caps.map((c) => c[0]));
+  const parse3 = inst._zod.parse;
+  inst._zod.parse = (payload, ctx) => {
+    const n = size(payload.value);
+    if (n > cap && !ctx?.skipChecks && ctx?.direction !== "backward") {
+      for (const [max, ch] of sizeCaps(inst._zod.def.checks)) {
+        if (n > max && ch._zod.def.when(payload)) {
+          const start = payload.issues.length;
+          ch._zod.check(payload);
+          payload.issues[start].continue = false;
+          attachSchema(payload.issues, start, inst);
+          return payload;
+        }
+      }
+    }
+    return parse3(payload, ctx);
+  };
+}
 function handleArrayResult(result, final, index) {
   if (result.issues.length) {
     final.issues.push(...prefixIssues(index, result.issues));
@@ -2896,7 +2931,7 @@ function handleRefineResult(result, payload, input2, inst) {
     payload.issues.push(issue(_iss));
   }
 }
-var $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodMAC, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, CC_SANITIZE, $ZodCreditCard, $ZodIBAN, $ZodJWT, $ZodCustomStringFormat, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodBigInt, $ZodBigIntFormat, $ZodSymbol, $ZodUndefined, $ZodNull, $ZodAny, $ZodUnknown, $ZodNever, $ZodVoid, $ZodDate, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodXor, $ZodDiscriminatedUnion, $ZodIntersection, $ZodTuple, $ZodRecord, $ZodMap, $ZodSet, $ZodEnum, $ZodLiteral, $ZodFile, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodSuccess, $ZodCatch, $ZodNaN, $ZodPipe, $ZodCodec, $ZodPreprocess, $ZodReadonly, $ZodTemplateLiteral, $ZodFunction, $ZodPromise, $ZodLazy, $ZodCustom;
+var $ZodType, toStandardResult, $ZodString, $ZodStringFormat, $ZodGUID, $ZodUUID, $ZodEmail, URL_BAD_FORMAT, URL_UNPARSEABLE, asciiTabOrNewline, $ZodURL, $ZodEmoji, $ZodNanoID, $ZodCUID, $ZodCUID2, $ZodULID, $ZodXID, $ZodKSUID, $ZodISODateTime, $ZodISODate, $ZodISOTime, $ZodISODuration, $ZodIPv4, ipv6Alphabet, $ZodIPv6, $ZodMAC, $ZodCIDRv4, $ZodCIDRv6, base64Charset, $ZodBase64, base64urlCharset, $ZodBase64URL, $ZodE164, CC_SANITIZE, $ZodCreditCard, $ZodIBAN, $ZodJWT, $ZodCustomStringFormat, $ZodNumber, $ZodNumberFormat, $ZodBoolean, $ZodBigInt, $ZodBigIntFormat, $ZodSymbol, $ZodUndefined, $ZodNull, $ZodAny, $ZodUnknown, $ZodNever, $ZodVoid, $ZodDate, arraySize, mapSize, setSize, $ZodArray, NO_SYMBOL_KEYS, $ZodObject, $ZodObjectJIT, $ZodUnion, $ZodXor, $ZodDiscriminatedUnion, $ZodIntersection, $ZodTuple, $ZodRecord, $ZodMap, $ZodSet, $ZodEnum, $ZodLiteral, $ZodFile, $ZodTransform, $ZodOptional, $ZodExactOptional, $ZodNullable, $ZodDefault, $ZodPrefault, $ZodNonOptional, $ZodSuccess, $ZodCatch, $ZodNaN, $ZodPipe, $ZodCodec, $ZodPreprocess, $ZodReadonly, $ZodTemplateLiteral, $ZodFunction, $ZodPromise, $ZodLazy, $ZodCustom;
 var init_schemas = __esm({
   "node_modules/zod/v4/core/schemas.js"() {
     init_checks();
@@ -3503,6 +3538,9 @@ var init_schemas = __esm({
         return payload;
       };
     });
+    arraySize = (input2) => Array.isArray(input2) ? input2.length : -1;
+    mapSize = (input2) => input2 instanceof Map ? input2.size : -1;
+    setSize = (input2) => input2 instanceof Set ? input2.size : -1;
     $ZodArray = /* @__PURE__ */ $constructor("$ZodArray", (inst, def) => {
       $ZodType.init(inst, def);
       const memo3 = globalConfig.memoizer;
@@ -3540,6 +3578,7 @@ var init_schemas = __esm({
         }
         return payload;
       };
+      capSize(inst, arraySize);
     });
     NO_SYMBOL_KEYS = [];
     $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
@@ -4178,6 +4217,7 @@ var init_schemas = __esm({
           return Promise.all(proms).then(() => payload);
         return payload;
       };
+      capSize(inst, mapSize);
     });
     $ZodSet = /* @__PURE__ */ $constructor("$ZodSet", (inst, def) => {
       $ZodType.init(inst, def);
@@ -4214,6 +4254,7 @@ var init_schemas = __esm({
           return Promise.all(proms).then(() => payload);
         return payload;
       };
+      capSize(inst, setSize);
     });
     $ZodEnum = /* @__PURE__ */ $constructor("$ZodEnum", (inst, def) => {
       $ZodType.init(inst, def);
@@ -14003,9 +14044,15 @@ function generateNullableCheck(doc, ctx, schema, accessor, buildsValue = true) {
   doc.write(`}`);
   return outputVar;
 }
+function generateSizeGate(doc, schema, size) {
+  for (const [max, check2] of sizeCaps(schema._zod.def.checks)) {
+    doc.write(`if (${size} > ${numericOperand(max, check2._zod.def.check)}) return INVALID;`);
+  }
+}
 function generateArrayCheck(doc, ctx, schema, accessor, buildsValue = true) {
   const def = schema._zod.def;
   doc.write(`if (!Array.isArray(${accessor})) return INVALID;`);
+  generateSizeGate(doc, schema, `${accessor}.length`);
   const outputVar = buildsValue ? newVar(ctx) : null;
   const iVar = newVar(ctx);
   const elemVar = newVar(ctx);
@@ -14405,6 +14452,7 @@ function literalPropertyKey(ctx, key) {
 function generateMapCheck(doc, ctx, schema, accessor) {
   const def = schema._zod.def;
   doc.write(`if (!(${accessor} instanceof Map)) return INVALID;`);
+  generateSizeGate(doc, schema, `${accessor}.size`);
   const outputVar = newVar(ctx);
   const kVar = newVar(ctx);
   const valVar = newVar(ctx);
@@ -14421,6 +14469,7 @@ function generateMapCheck(doc, ctx, schema, accessor) {
 function generateSetCheck(doc, ctx, schema, accessor) {
   const def = schema._zod.def;
   doc.write(`if (!(${accessor} instanceof Set)) return INVALID;`);
+  generateSizeGate(doc, schema, `${accessor}.size`);
   const outputVar = newVar(ctx);
   const valVar = newVar(ctx);
   doc.write(`const ${outputVar} = new Set();`);
@@ -35372,10 +35421,33 @@ function redactJsonCookie(quote) {
 function redactSecrets(text) {
   return text.replace(BEARER_RE, "$1[REDACTED]").replace(BASIC_AUTH_RE, "$1[REDACTED]").replace(SET_COOKIE_RE, "$1$2=[REDACTED]").replace(COOKIE_HEADER_RE, (_m, prefix, pairs) => `${prefix}${pairs.replace(/=[^;,\s]*/g, "=[REDACTED]")}`).replace(API_KEY_RE, "[REDACTED]").replace(GOOGLE_OAUTH_TOKEN_RE, "[REDACTED]").replace(HEADER_SECRET_RE, "$1[REDACTED]").replace(QUERY_SECRET_RE, "$1[REDACTED]").replace(OAUTH_CODE_RE, "$1[REDACTED]").replace(FORM_PASSWORD_RE, "$1[REDACTED]").replace(AWS_SIGV4_RE, "$1[REDACTED]").replace(JSON_COOKIE_DQ_RE, redactJsonCookie('"')).replace(JSON_COOKIE_SQ_RE, redactJsonCookie("'")).replace(JSON_SECRET_DQ_RE, "$1[REDACTED]$2").replace(JSON_SECRET_SQ_RE, "$1[REDACTED]$2").replace(JSON_SECRET_NUM_RE, "$1[REDACTED]").replace(JWT_RE, "[REDACTED]");
 }
-function truncateErrorMessage(text, max = DEFAULT_ERROR_MESSAGE_MAX) {
+function redactValues(text, values, opts = {}) {
+  const placeholder = opts.placeholder ?? "[REDACTED]";
+  const minLength = Math.max(1, opts.minLength ?? 1);
+  const needles = /* @__PURE__ */ new Set();
+  for (const value of values) {
+    if (typeof value !== "string" || value.length < minLength)
+      continue;
+    needles.add(value);
+    if (opts.jsonEscaped !== false) {
+      const escaped = JSON.stringify(value).slice(1, -1);
+      if (escaped !== value && escaped.length >= minLength)
+        needles.add(escaped);
+    }
+  }
+  let out = String(text ?? "");
+  for (const needle of [...needles].sort((a, b) => b.length - a.length)) {
+    if (out.includes(needle))
+      out = out.split(needle).join(placeholder);
+  }
+  return out;
+}
+function truncateErrorMessage(text, max = DEFAULT_ERROR_MESSAGE_MAX, opts = {}) {
   const str = text === null || text === void 0 ? "" : String(text);
   const cap = Math.max(ERROR_REDACTION_INPUT_MAX, max);
-  const redacted = redactSecrets(str.length > cap ? str.slice(0, cap) : str);
+  const capped = str.length > cap ? str.slice(0, cap) : str;
+  const scrubbed = opts.values !== void 0 ? redactValues(capped, opts.values, opts.placeholder !== void 0 ? { placeholder: opts.placeholder } : {}) : capped;
+  const redacted = redactSecrets(scrubbed);
   if (redacted.length <= max)
     return redacted;
   return `${redacted.slice(0, max)}\u2026 [truncated]`;
@@ -35482,7 +35554,7 @@ var init_errors3 = __esm({
       // webhook signing secret (Stripe-style)
     ].map((p) => `\\b${p}`).join("|"), "g");
     GOOGLE_OAUTH_TOKEN_RE = /(?<![A-Za-z0-9+/])(?:ya29\.|1\/\/)[A-Za-z0-9._-]{8,}/g;
-    QUERY_SECRET_RE = new RegExp(`([?&](?:(?:access|refresh|id|auth|session|csrf|xsrf)[_-]?token|client[_-]?secret|api[_-]?secret|api[_-]?key|password|passwd|signature|token|key|sig|(?:code[_-]?)?verifier|(?:php|j)?sess(?:ion)?[_-]?id|sid|x[-_]${HEADER_NAME_RUN}?(?:api[-_]?key|token|secret|auth)${HEADER_NAME_RUN})=)[^&#\\s"'<>\`]+`, "gi");
+    QUERY_SECRET_RE = new RegExp(`([?&#;](?:(?:access|refresh|id|auth|session|csrf|xsrf|api)[_-]?token|client[_-]?secret|api[_-]?secret|api[_-]?key|password|passwd|signature|secret|token|auth|key|sig|(?:code[_-]?)?verifier|(?:php|j)?sess(?:ion)?[_-]?id|sid|x[-_]${HEADER_NAME_RUN}?(?:api[-_]?key|token|secret|auth)${HEADER_NAME_RUN})=)[^&#\\s"'<>\`]+`, "gi");
     OAUTH_CODE_RE = /([?&]code=)(?=[^&#\s"'<>`]{16,})[^&#\s"'<>`]+/gi;
     FORM_PASSWORD_RE = /((?:^|[\s,;:"'(\[{])(?:password|passwd)=)[^&#\s"'<>`]+/gim;
     HEADER_SECRET_RE = new RegExp(`(\\b(?:x[-_]${HEADER_NAME_RUN}?(?:api[-_]?key|token|secret|auth)${HEADER_NAME_RUN}|api[-_]?key)\\s*:\\s*)[^\\s,;"'<>\`]+`, "gi");
@@ -35493,6 +35565,8 @@ var init_errors3 = __esm({
       "api[_-]?secret",
       "(?:x[_-])?api[_-]?key",
       "private[_-]?key",
+      "aws[_-]?secret[_-]?access[_-]?key",
+      // fleet-audit#1297
       "code[_-]?verifier",
       // PKCE; a bare `verifier` key is too generic for JSON
       `x[_-]${HEADER_NAME_RUN}?(?:api[_-]?key|token|secret|auth)${HEADER_NAME_RUN}`,
@@ -35522,6 +35596,16 @@ var init_zod = __esm({
   }
 });
 
+// node_modules/@chrischall/mcp-utils/dist/response/media.js
+var MEDIA_NOUN, MEDIA_QUALIFIER, MEDIA_KEY;
+var init_media = __esm({
+  "node_modules/@chrischall/mcp-utils/dist/response/media.js"() {
+    MEDIA_NOUN = "(?:avatar|picture|photo|thumbnail|thumb|image|icon|banner|profile_pic(?:ture)?|logo)";
+    MEDIA_QUALIFIER = "(?:primary|secondary|main|default|cover|hero|profile|master|rendered|small|medium|large|full|original|tall)";
+    MEDIA_KEY = new RegExp(`^(?:(?:${MEDIA_QUALIFIER}|${MEDIA_NOUN})[_-]?)?${MEDIA_NOUN}s?(?:[_-]?(?:link|uri|url|src)s?)?$`, "i");
+  }
+});
+
 // node_modules/@chrischall/mcp-utils/dist/response/view.js
 function viewParam(honoured, opts = {}) {
   if (honoured.length < 2) {
@@ -35560,6 +35644,7 @@ var VIEWS, DEFAULT_VIEW, BLURB;
 var init_view = __esm({
   "node_modules/@chrischall/mcp-utils/dist/response/view.js"() {
     init_zod();
+    init_media();
     VIEWS = ["compact", "full", "raw"];
     DEFAULT_VIEW = "compact";
     BLURB = {
@@ -35570,16 +35655,6 @@ var init_view = __esm({
   }
 });
 
-// node_modules/@chrischall/mcp-utils/dist/response/media.js
-var MEDIA_NOUN, MEDIA_QUALIFIER, MEDIA_KEY;
-var init_media = __esm({
-  "node_modules/@chrischall/mcp-utils/dist/response/media.js"() {
-    MEDIA_NOUN = "(?:avatar|picture|photo|thumbnail|thumb|image|icon|banner|profile_pic(?:ture)?|logo)";
-    MEDIA_QUALIFIER = "(?:primary|secondary|main|default|cover|hero|profile|master|rendered|small|medium|large|full|original|tall)";
-    MEDIA_KEY = new RegExp(`^(?:(?:${MEDIA_QUALIFIER}|${MEDIA_NOUN})[_-]?)?${MEDIA_NOUN}s?(?:[_-]?(?:link|uri|url|src)s?)?$`, "i");
-  }
-});
-
 // node_modules/@chrischall/mcp-utils/dist/response/untrusted.js
 function isPlainObject3(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value))
@@ -36651,6 +36726,9 @@ var init_headers = __esm({
 });
 
 // node_modules/@chrischall/mcp-utils/dist/internal/ascii.js
+function asciiLower(s) {
+  return s.replace(/[A-Z]+/g, (m) => m.toLowerCase());
+}
 var init_ascii = __esm({
   "node_modules/@chrischall/mcp-utils/dist/internal/ascii.js"() {
   }
@@ -36662,16 +36740,42 @@ var init_code_point = __esm({
   }
 });
 
+// node_modules/@chrischall/mcp-utils/dist/internal/tags.js
+var init_tags = __esm({
+  "node_modules/@chrischall/mcp-utils/dist/internal/tags.js"() {
+  }
+});
+
 // node_modules/@chrischall/mcp-utils/dist/scrape/index.js
 function isCloudflareChallenge(html) {
-  return /_cf_chl_opt/.test(html) || /<title[^>]*>\s*Just a moment/i.test(html);
+  return html.includes("_cf_chl_opt") || hasJustAMomentTitle(html);
+}
+function hasJustAMomentTitle(html) {
+  const lower2 = asciiLower(html);
+  let i = 0;
+  for (; ; ) {
+    const open2 = lower2.indexOf("<title", i);
+    if (open2 < 0)
+      return false;
+    const gt = lower2.indexOf(">", open2 + 6);
+    if (gt < 0)
+      return false;
+    let j = gt + 1;
+    while (j < lower2.length && /\s/.test(lower2[j]))
+      j++;
+    if (lower2.startsWith(JUST_A_MOMENT, j))
+      return true;
+    i = gt + 1;
+  }
 }
-var NEXT_DATA_MAX_CHARS;
+var NEXT_DATA_MAX_CHARS, JUST_A_MOMENT;
 var init_scrape = __esm({
   "node_modules/@chrischall/mcp-utils/dist/scrape/index.js"() {
     init_ascii();
     init_code_point();
+    init_tags();
     NEXT_DATA_MAX_CHARS = 16 * 1024 * 1024;
+    JUST_A_MOMENT = "just a moment";
   }
 });
 
@@ -36707,7 +36811,7 @@ var init_net_atoms = __esm({
 // node_modules/@chrischall/mcp-utils/dist/http/body-limit.js
 async function readBytesCapped(res, maxBytes, service, bounded) {
   if (maxBytes !== void 0) {
-    const declared = Number(res.headers.get("content-length") ?? NaN);
+    const declared = Number(responseHeader(res, "content-length") ?? NaN);
     if (Number.isFinite(declared) && declared > maxBytes) {
       cancelStream(res.body);
       throw new ResponseTooLargeError(service, maxBytes);
@@ -36752,6 +36856,7 @@ var ResponseTooLargeError;
 var init_body_limit = __esm({
   "node_modules/@chrischall/mcp-utils/dist/http/body-limit.js"() {
     init_errors3();
+    init_headers();
     ResponseTooLargeError = class extends McpToolError {
       maxBytes;
       constructor(service, maxBytes) {
@@ -36811,6 +36916,126 @@ var init_url_safety = __esm({
   }
 });
 
+// node_modules/@chrischall/mcp-utils/dist/http/transport-failure.js
+function codeOf(e) {
+  if (e === null || typeof e !== "object")
+    return void 0;
+  const code2 = e.code;
+  return typeof code2 === "string" && code2 !== "" ? code2 : void 0;
+}
+function causes(err) {
+  const out = [];
+  let at = err;
+  for (let depth = 0; depth < MAX_CAUSE_DEPTH && at !== void 0 && at !== null; depth++) {
+    out.push(at);
+    if (at instanceof AggregateError)
+      out.push(...at.errors);
+    at = at.cause;
+  }
+  return out;
+}
+function transportCauseCode(err) {
+  for (const e of causes(err)) {
+    const code2 = codeOf(e);
+    if (code2 !== void 0)
+      return code2;
+  }
+  return void 0;
+}
+function causeMessage(err) {
+  const chain = causes(err).slice(1);
+  for (let i = chain.length - 1; i >= 0; i--) {
+    const e = chain[i];
+    if (e instanceof Error && e.message !== "")
+      return e.message;
+  }
+  return void 0;
+}
+function isFetchFailedError(err) {
+  return err instanceof TypeError && err.message === "fetch failed";
+}
+function proxyRefusalStatus(err) {
+  for (const e of causes(err)) {
+    if (codeOf(e) === "ERR_PROXY_TUNNEL") {
+      const m = /\b(\d{3})\b/.exec(e instanceof Error ? e.message.slice(0, 500) : "");
+      return m ? Number(m[1]) : "unknown";
+    }
+    if (e instanceof Error) {
+      const m = /^Proxy response \((\d{3})\) !== 200 when HTTP Tunneling/.exec(e.message);
+      if (m)
+        return Number(m[1]);
+    }
+  }
+  return void 0;
+}
+function classify(err, code2) {
+  const refused = proxyRefusalStatus(err);
+  if (refused !== void 0) {
+    return { cls: refused === 403 || refused === 407 || refused === "unknown" ? "egress" : "proxy", proxyStatus: refused };
+  }
+  if (code2 !== void 0 && DNS_CODES.has(code2))
+    return { cls: "dns" };
+  if (code2 !== void 0 && CERT_CODES.has(code2))
+    return { cls: "tls" };
+  if (code2 !== void 0 && CONNECT_CODES.has(code2))
+    return { cls: "connect" };
+  return { cls: "other" };
+}
+function describeTransportFailure(err, url2, service, opts = {}) {
+  if (!isFetchFailedError(err))
+    return void 0;
+  let host;
+  try {
+    host = new URL(url2).hostname;
+  } catch {
+    host = "(unknown host)";
+  }
+  const code2 = transportCauseCode(err);
+  const detail = [code2, causeMessage(err)].filter((s) => s !== void 0);
+  const why = detail.length > 0 ? ` (${[...new Set(detail)].join(": ")})` : "";
+  const { cls, proxyStatus } = classify(err, code2);
+  const ctx = { host, service, code: code2, ...proxyStatus !== void 0 ? { proxyStatus } : {} };
+  const hint = (opts.hints?.[cls] ?? DEFAULT_HINTS[cls])(host, ctx);
+  return new McpToolError(`Could not reach ${service} at ${host}${why}.`, { kind: "transport", hint, cause: err });
+}
+var MAX_CAUSE_DEPTH, DNS_CODES, CONNECT_CODES, CERT_CODES, DEFAULT_HINTS;
+var init_transport_failure = __esm({
+  "node_modules/@chrischall/mcp-utils/dist/http/transport-failure.js"() {
+    init_errors3();
+    MAX_CAUSE_DEPTH = 5;
+    DNS_CODES = /* @__PURE__ */ new Set(["ENOTFOUND", "EAI_AGAIN", "EAI_FAIL", "EAI_NONAME"]);
+    CONNECT_CODES = /* @__PURE__ */ new Set([
+      "ECONNREFUSED",
+      "ECONNRESET",
+      "ETIMEDOUT",
+      "ENETUNREACH",
+      "EHOSTUNREACH",
+      "EPIPE",
+      "UND_ERR_CONNECT_TIMEOUT",
+      "UND_ERR_SOCKET",
+      "UND_ERR_HEADERS_TIMEOUT"
+    ]);
+    CERT_CODES = /* @__PURE__ */ new Set([
+      "UNABLE_TO_GET_ISSUER_CERT_LOCALLY",
+      "UNABLE_TO_GET_ISSUER_CERT",
+      "UNABLE_TO_VERIFY_LEAF_SIGNATURE",
+      "SELF_SIGNED_CERT_IN_CHAIN",
+      "DEPTH_ZERO_SELF_SIGNED_CERT",
+      "CERT_HAS_EXPIRED",
+      "CERT_NOT_YET_VALID",
+      "ERR_TLS_CERT_ALTNAME_INVALID"
+    ]);
+    DEFAULT_HINTS = {
+      egress: (host) => `The outbound proxy this server runs behind refused the connection to ${host}: its egress policy does not allow that host. On a hosted (mcp-host) registration, the host must be on the registration's egress allow-list \u2014 the owner accepts the manifest's egress proposal (or adds the host) on the registration, then retries. Elsewhere, ask whoever runs the proxy to allow it.`,
+      proxy: (host, ctx) => `The outbound proxy this server runs behind could not open a connection to ${host} (it answered ${String(ctx.proxyStatus)}). Retry; if it persists, check the proxy can reach the host.`,
+      dns: (host) => `This machine could not resolve ${host}. Check DNS and VPN: a split-tunnel VPN that resolves some of a service's hosts but not others fails exactly like this. \`nslookup ${host}\` on the machine running this server tells you which.`,
+      tls: (host) => `Node did not trust the TLS certificate ${host} presented. On a corporate network this is usually TLS inspection: export your proxy's root CA as PEM and start this server with NODE_EXTRA_CA_CERTS=/path/to/ca.pem (Node does not read the system keychain). If the certificate is expired or not yet valid, also check the machine's clock.`,
+      connect: (host, ctx) => `The connection to ${host} was refused, reset or timed out before ${ctx.service} answered \u2014 usually a firewall, or a network that only lets traffic out through a proxy. Node's fetch ignores proxy settings unless told: start this server with HTTPS_PROXY=<your proxy URL> and NODE_USE_ENV_PROXY=1 (Node 22.21+ / 24.5+), or allow the host through the firewall.`,
+      other: (host) => `No response from ${host}. Check this machine can reach it (VPN, proxy, firewall); \`curl -sI https://${host}/\` from the same machine is a quick test.`
+    };
+  }
+});
+
 // node_modules/@chrischall/mcp-utils/dist/internal/retry-after.js
 function retryAfterToMs(header, now = Date.now()) {
   if (header == null)
@@ -36831,6 +37056,27 @@ var init_retry_after = __esm({
 });
 
 // node_modules/@chrischall/mcp-utils/dist/http/index.js
+function withoutCredentials(headers, tokenHeader) {
+  const drop = new Set(CROSS_ORIGIN_DROPPED_HEADERS);
+  if (tokenHeader !== void 0)
+    drop.add(tokenHeader.toLowerCase());
+  const out = {};
+  for (const [k, v] of Object.entries(headers))
+    if (!drop.has(k.toLowerCase()))
+      out[k] = v;
+  return out;
+}
+function joinQuery(path, query) {
+  if (!query)
+    return path;
+  const hashAt = path.indexOf("#");
+  const head = hashAt < 0 ? path : path.slice(0, hashAt);
+  const fragment = hashAt < 0 ? "" : path.slice(hashAt);
+  if (!head.includes("?"))
+    return `${head}${query}${fragment}`;
+  const sep = head.endsWith("?") || head.endsWith("&") ? "" : "&";
+  return `${head}${sep}${query.slice(1)}${fragment}`;
+}
 function cancelBody(res) {
   try {
     const body = res.body;
@@ -36839,6 +37085,27 @@ function cancelBody(res) {
   } catch {
   }
 }
+function writeOutcomeStatus(err) {
+  const status = err.cause?.status;
+  return typeof status === "number" ? status : void 0;
+}
+function unknownOutcomeReason(err, opts = {}) {
+  if (err.timedOut)
+    return "it did not answer in time";
+  const status = writeOutcomeStatus(err);
+  if (status !== void 0)
+    return `it answered HTTP ${status} after ${opts.sent ?? "the request"} was sent`;
+  return "the connection dropped";
+}
+async function writeOrUnknown(run, onUnknown) {
+  try {
+    return { ok: true, value: await run() };
+  } catch (err) {
+    if (!(err instanceof WriteOutcomeUnknownError))
+      throw err;
+    return { ok: false, result: await onUnknown(err, unknownOutcomeReason(err)) };
+  }
+}
 function headerOf(headers, name) {
   if (headers === void 0)
     return void 0;
@@ -36959,7 +37226,9 @@ function createApiClient(opts) {
   const retryStatuses = retry.statuses ?? [429];
   const timeoutMs = opts.timeout === false ? 0 : opts.timeout ?? DEFAULT_REQUEST_TIMEOUT_MS;
   const redirectMode = opts.redirect;
-  const maxRedirects = opts.maxRedirects ?? DEFAULT_MAX_REDIRECTS;
+  const stripCrossOrigin = redirectMode === void 0 && opts.tokenHeader !== void 0;
+  const manualRedirects = redirectMode === "same-origin" || stripCrossOrigin;
+  const maxRedirects = opts.maxRedirects ?? (stripCrossOrigin ? FETCH_MAX_REDIRECTS : DEFAULT_MAX_REDIRECTS);
   const reportWriteOutcome = opts.writeOutcomeUnknown !== false;
   const defaultMaxBytes = checkMaxBytes("maxResponseBytes", opts.maxResponseBytes);
   if (!Number.isSafeInteger(maxRedirects) || maxRedirects < 0) {
@@ -37061,7 +37330,7 @@ function createApiClient(opts) {
         `Refusing request to ${service}: path ${JSON.stringify(path.split(/[?#]/, 1)[0])} contains a ${hazard}, which URL normalisation would rewrite. Build paths with apiPath\`...\` so each value is one encoded segment.`
       );
     }
-    const url2 = `${base}${path}${query}`;
+    const url2 = `${base}${joinQuery(path, query)}`;
     if (baseOrigin === void 0)
       return url2;
     let parsed;
@@ -37075,14 +37344,21 @@ function createApiClient(opts) {
     }
     return url2;
   }
-  function sameOriginHop(location, from) {
-    let next;
+  function resolveLocation(location, from) {
     try {
-      next = new URL(location, from);
+      return new URL(location, from).href;
     } catch {
       throw new RedirectRefusedError(`Refusing redirect from ${service}: the Location header is not a valid URL.`);
     }
-    if (baseOrigin === void 0 || next.origin !== baseOrigin || next.username !== baseParts?.username || next.password !== baseParts?.password) {
+  }
+  function onBaseOrigin(href) {
+    const next = new URL(href);
+    return baseOrigin !== void 0 && next.origin === baseOrigin && next.username === baseParts?.username && next.password === baseParts?.password;
+  }
+  function sameOriginHop(location, from) {
+    const href = resolveLocation(location, from);
+    const next = new URL(href);
+    if (!onBaseOrigin(href)) {
       throw new RedirectRefusedError(`Refusing redirect from ${service} to ${next.origin}: it leaves the base origin ${baseOrigin ?? "(unparseable)"}, and following it would re-send the credential there.`);
     }
     return next.href;
@@ -37092,20 +37368,21 @@ function createApiClient(opts) {
     const query = opt.query ? buildQueryString(opt.query) : "";
     const url2 = resolveUrl(path, query);
     const bodyInit = reqBody !== void 0 ? { body: reqBody } : {};
-    const fetchHop = (hopUrl, hopMethod, withBody, token, signal) => {
+    const fetchHop = (hopUrl, hopMethod, withBody, token, signal, credentialed = true) => {
       if (!signal?.aborted)
         dispatch.sent = true;
+      const headers = {
+        Accept: "application/json",
+        ...withBody && contentType !== void 0 ? { "Content-Type": contentType } : {},
+        ...typeof opts.baseHeaders === "function" ? opts.baseHeaders() : opts.baseHeaders,
+        ...authHeader(token || void 0),
+        ...opt.headers
+      };
       return doFetch(hopUrl, {
         method: hopMethod,
-        headers: {
-          Accept: "application/json",
-          ...withBody && contentType !== void 0 ? { "Content-Type": contentType } : {},
-          ...opts.baseHeaders,
-          ...authHeader(token || void 0),
-          ...opt.headers
-        },
+        headers: credentialed ? headers : withoutCredentials(headers, opts.tokenHeader),
         ...signal ? { signal } : {},
-        ...redirectMode !== void 0 ? { redirect: redirectMode === "same-origin" ? "manual" : redirectMode } : {},
+        ...manualRedirects ? { redirect: "manual" } : redirectMode !== void 0 ? { redirect: redirectMode } : {},
         ...withBody ? bodyInit : {}
       }).catch((err) => {
         markTransportFailure(err);
@@ -37113,13 +37390,14 @@ function createApiClient(opts) {
       });
     };
     const fetchWith = async (token, signal) => {
-      if (redirectMode !== "same-origin")
+      if (!manualRedirects)
         return fetchHop(url2, method, true, token, signal);
       let hopUrl = url2;
       let hopMethod = method;
       let withBody = true;
+      let credentialed = true;
       for (let hops = 0; ; hops += 1) {
-        const res = await fetchHop(hopUrl, hopMethod, withBody, token, signal);
+        const res = await fetchHop(hopUrl, hopMethod, withBody, token, signal, credentialed);
         const location = REDIRECT_STATUSES.has(res.status) ? responseHeader(res, "location") : void 0;
         if (location === void 0 || location === null)
           return res;
@@ -37127,7 +37405,13 @@ function createApiClient(opts) {
         if (hops >= maxRedirects) {
           throw new RedirectRefusedError(`Refusing request to ${service}: too many redirects (more than ${maxRedirects}).`);
         }
-        hopUrl = sameOriginHop(location, hopUrl);
+        if (stripCrossOrigin) {
+          hopUrl = resolveLocation(location, hopUrl);
+          if (credentialed && !onBaseOrigin(hopUrl))
+            credentialed = false;
+        } else {
+          hopUrl = sameOriginHop(location, hopUrl);
+        }
         if (res.status === 303 || (res.status === 301 || res.status === 302) && hopMethod === "POST") {
           if (hopMethod !== "HEAD")
             hopMethod = "GET";
@@ -37204,24 +37488,62 @@ function createApiClient(opts) {
       throw err;
     }
   }
-  const fetchJson = (method, path, opt = {}) => guardWrite(method, opt, (dispatch) => fetchJsonOnce(method, path, opt, dispatch));
-  const fetchHtml = (method, path, opt = {}) => guardWrite(method, opt, (dispatch) => fetchHtmlOnce(method, path, opt, dispatch));
-  const fetchRaw = (method, path, opt = {}) => guardWrite(method, opt, (dispatch) => fetchRawOnce(method, path, opt, dispatch));
+  function withIdempotency(opt) {
+    const name = opts.idempotencyHeader;
+    if (name === void 0 || name === "")
+      return opt;
+    const lower2 = name.toLowerCase();
+    if (opt.headers && Object.keys(opt.headers).some((k) => k.toLowerCase() === lower2))
+      return opt;
+    const key = opt.idempotencyKey ?? globalThis.crypto.randomUUID();
+    return { ...opt, headers: { ...opt.headers, [name]: key } };
+  }
+  async function errorFor(res, text, method, path, retried) {
+    const edge = detectEdgeBlock({ body: text, headers: res.headers, status: res.status });
+    if (edge)
+      return new EdgeBlockedError(res.status, edge.vendor, { service, method, path });
+    if (opts.onErrorResponse) {
+      const decision = await opts.onErrorResponse({ status: res.status, method, path, headers: res.headers, body: text, retried });
+      if (decision instanceof Error)
+        return decision;
+      if (decision === "retry" && !retried)
+        return "retry";
+    }
+    return httpError(res, text, method, path, service);
+  }
+  const fetchJson = (method, path, opt = {}) => {
+    const o = withIdempotency(opt);
+    return guardWrite(method, o, (dispatch) => fetchJsonOnce(method, path, o, dispatch));
+  };
+  const fetchHtml = (method, path, opt = {}) => {
+    const o = withIdempotency(opt);
+    return guardWrite(method, o, (dispatch) => fetchHtmlOnce(method, path, o, dispatch));
+  };
+  const fetchRaw = (method, path, opt = {}) => {
+    const o = withIdempotency(opt);
+    return guardWrite(method, o, (dispatch) => fetchRawOnce(method, path, o, dispatch));
+  };
   async function fetchJsonOnce(method, path, opt, dispatch) {
     const maxBytes = capOf(opt);
-    const attempt = await send(method, path, opt, dispatch);
-    const res = attempt.res;
-    if (res.status === 401)
-      throw await unauthorizedOrEdge(attempt, method, path, maxBytes);
-    if (res.status === 429)
-      throw await rateLimitedError(attempt, method, path, maxBytes);
-    if (res.status === 204) {
-      discard(attempt);
-      return parseJsonBody("", { expect: opt.expect, service, method, path, status: 204 });
-    }
-    if (!res.ok) {
-      throw httpError(res, await readErrorText(attempt, maxBytes), method, path, service);
+    let attempt;
+    for (let retried = false; ; retried = true) {
+      attempt = await send(method, path, opt, dispatch);
+      const res2 = attempt.res;
+      if (res2.status === 401)
+        throw await unauthorizedOrEdge(attempt, method, path, maxBytes);
+      if (res2.status === 429)
+        throw await rateLimitedError(attempt, method, path, maxBytes);
+      if (res2.status === 204) {
+        discard(attempt);
+        return parseJsonBody("", { expect: opt.expect, service, method, path, status: 204 });
+      }
+      if (res2.ok)
+        break;
+      const failure2 = await errorFor(res2, await readErrorText(attempt, maxBytes), method, path, retried);
+      if (failure2 !== "retry")
+        throw failure2;
     }
+    const res = attempt.res;
     const text = await readText(attempt, maxBytes);
     return parseJsonBody(text, {
       expect: opt.expect,
@@ -37235,34 +37557,43 @@ function createApiClient(opts) {
   async function fetchHtmlOnce(method, path, opt, dispatch) {
     const maxBytes = capOf(opt);
     const headers = { Accept: "text/html,*/*", ...opt.headers };
-    const attempt = await send(method, path, { ...opt, headers }, dispatch);
-    const res = attempt.res;
-    if (res.status === 401)
-      throw await unauthorizedOrEdge(attempt, method, path, maxBytes);
-    if (res.status === 429)
-      throw await rateLimitedError(attempt, method, path, maxBytes);
-    if (!res.ok) {
-      throw httpError(res, await readErrorText(attempt, maxBytes), method, path, service);
+    for (let retried = false; ; retried = true) {
+      const attempt = await send(method, path, { ...opt, headers }, dispatch);
+      const res = attempt.res;
+      if (res.status === 401)
+        throw await unauthorizedOrEdge(attempt, method, path, maxBytes);
+      if (res.status === 429)
+        throw await rateLimitedError(attempt, method, path, maxBytes);
+      if (res.ok)
+        return readText(attempt, maxBytes);
+      const failure2 = await errorFor(res, await readErrorText(attempt, maxBytes), method, path, retried);
+      if (failure2 !== "retry")
+        throw failure2;
     }
-    return readText(attempt, maxBytes);
   }
   async function fetchRawOnce(method, path, opt, dispatch) {
     const maxBytes = capOf(opt);
     const headers = { Accept: "*/*", ...opt.headers };
-    const attempt = await send(method, path, { ...opt, headers }, dispatch);
-    const res = attempt.res;
-    if (res.status === 401)
-      throw await unauthorizedOrEdge(attempt, method, path, maxBytes);
-    if (res.status === 429)
-      throw await rateLimitedError(attempt, method, path, maxBytes);
-    if (!res.ok) {
+    let attempt;
+    for (let retried = false; ; retried = true) {
+      attempt = await send(method, path, { ...opt, headers }, dispatch);
+      const res2 = attempt.res;
+      if (res2.status === 401)
+        throw await unauthorizedOrEdge(attempt, method, path, maxBytes);
+      if (res2.status === 429)
+        throw await rateLimitedError(attempt, method, path, maxBytes);
+      if (res2.ok)
+        break;
       const text = await readText(attempt, maxBytes).catch((err) => {
         if (err instanceof RequestTimeoutError)
           throw err;
         return "";
       });
-      throw httpError(res, text, method, path, service);
+      const failure2 = await errorFor(res2, text, method, path, retried);
+      if (failure2 !== "retry")
+        throw failure2;
     }
+    const res = attempt.res;
     const bytes = await readBytes(attempt, maxBytes);
     return {
       status: res.status,
@@ -37331,7 +37662,7 @@ function decodeJwtExp(token) {
   }
   return exp;
 }
-var DEFAULT_RETRY, defaultSleep, DEFAULT_REQUEST_TIMEOUT_MS, DEFAULT_MAX_REDIRECTS, REDIRECT_STATUSES, UnauthorizedError, RateLimitedError, RequestTimeoutError, DEFAULT_WRITE_OUTCOME_HINT, WriteOutcomeUnknownError, SAFE_METHODS, ApiError, EdgeBlockedError, EDGE_BLOCK_SCAN_MAX, EDGE_BLOCK_MARKERS;
+var DEFAULT_RETRY, defaultSleep, DEFAULT_REQUEST_TIMEOUT_MS, DEFAULT_MAX_REDIRECTS, FETCH_MAX_REDIRECTS, CROSS_ORIGIN_DROPPED_HEADERS, REDIRECT_STATUSES, UnauthorizedError, RateLimitedError, RequestTimeoutError, DEFAULT_WRITE_OUTCOME_HINT, WriteOutcomeUnknownError, SAFE_METHODS, ApiError, EdgeBlockedError, EDGE_BLOCK_SCAN_MAX, EDGE_BLOCK_MARKERS;
 var init_http = __esm({
   "node_modules/@chrischall/mcp-utils/dist/http/index.js"() {
     init_headers();
@@ -37343,6 +37674,7 @@ var init_http = __esm({
     init_net_atoms();
     init_fetch_bounded();
     init_url_safety();
+    init_transport_failure();
     init_body_limit();
     init_net_atoms();
     init_url_safety();
@@ -37351,6 +37683,8 @@ var init_http = __esm({
     defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
     DEFAULT_REQUEST_TIMEOUT_MS = 3e4;
     DEFAULT_MAX_REDIRECTS = 5;
+    FETCH_MAX_REDIRECTS = 20;
+    CROSS_ORIGIN_DROPPED_HEADERS = ["authorization", "cookie", "proxy-authorization"];
     REDIRECT_STATUSES = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]);
     UnauthorizedError = class extends Error {
       status = 401;
@@ -37588,7 +37922,7 @@ var init_version = __esm({
   "src/version.ts"() {
     "use strict";
     PACKAGE_NAME = "office-outlook-mcp";
-    VERSION = "0.6.0";
+    VERSION = "0.6.2";
   }
 });
 
@@ -38143,6 +38477,21 @@ var init_public_suffix = __esm({
   }
 });
 
+// node_modules/@fetchproxy/protocol/dist/ip-literal.js
+function isIpLiteralHost(host) {
+  if (host.includes(":") || host.startsWith("["))
+    return true;
+  const labels = host.split(".");
+  if (labels.length > 1 && labels[labels.length - 1] === "")
+    labels.pop();
+  const last = labels[labels.length - 1] ?? "";
+  return /^[0-9]+$/.test(last) || /^0x[0-9a-f]*$/i.test(last);
+}
+var init_ip_literal = __esm({
+  "node_modules/@fetchproxy/protocol/dist/ip-literal.js"() {
+  }
+});
+
 // node_modules/@fetchproxy/protocol/dist/validate.js
 function assertObject(x, label) {
   if (typeof x !== "object" || x === null || Array.isArray(x)) {
@@ -38592,6 +38941,9 @@ function validateHello(raw) {
       if (!HOSTNAME_RE.test(d)) {
         throw new ProtocolError3(`hello.domains: invalid hostname ${JSON.stringify(d)}`);
       }
+      if (isIpLiteralHost(d)) {
+        throw new ProtocolError3(`hello.domains: ${JSON.stringify(d)} is an IP address \u2014 declare the site's DNS hostname; IP-literal origins (LAN, loopback, link-local) are not reachable through the bridge`);
+      }
       if (isPublicSuffix(d)) {
         throw new ProtocolError3(`hello.domains: ${JSON.stringify(d)} is a public suffix \u2014 declare a registrable domain (e.g. "example.${d}"), not the suffix every site under it shares`);
       }
@@ -39365,6 +39717,7 @@ var init_validate = __esm({
     init_account_attest();
     init_json_pointer();
     init_public_suffix();
+    init_ip_literal();
     ProtocolError3 = class extends Error {
       constructor(message) {
         super(message);
@@ -39544,6 +39897,7 @@ var init_dist3 = __esm({
     init_seal();
     init_encoding();
     init_public_suffix();
+    init_ip_literal();
     init_json_pointer();
   }
 });
@@ -44514,7 +44868,7 @@ async function startHost(opts) {
             if (ownRetryableRefusal)
               resetSessionPromise();
             resolveOwnSession(ownSession);
-          } else {
+          } else if (identified === "extension" && extensionWs === ws) {
             const slot = peers.get(frame.mcpId);
             if (slot)
               slot.ws.send(JSON.stringify(frame));
@@ -45602,6 +45956,9 @@ var init_ws_server = __esm({
           throw new Error("FetchproxyServer: opts.domains must be a non-empty array of hostnames");
         }
         for (const d of opts.domains) {
+          if (typeof d === "string" && isIpLiteralHost(d)) {
+            throw new Error(`FetchproxyServer: opts.domains entry ${JSON.stringify(d)} is an IP address \u2014 declare the site's DNS hostname; IP-literal origins (LAN, loopback, link-local) are not reachable through the bridge`);
+          }
           if (typeof d === "string" && isPublicSuffix(d)) {
             throw new Error(`FetchproxyServer: opts.domains entry ${JSON.stringify(d)} is a public suffix \u2014 declare a registrable domain (e.g. "example.${d}"), not the suffix every site under it shares`);
           }
@@ -47547,8 +47904,10 @@ var init_bulk = __esm({
 });
 
 // node_modules/@fetchproxy/server/dist/bot-wall.js
+var CLOUDFLARE_TITLE_SCAN_MAX;
 var init_bot_wall = __esm({
   "node_modules/@fetchproxy/server/dist/bot-wall.js"() {
+    CLOUDFLARE_TITLE_SCAN_MAX = 64 * 1024;
   }
 });
 
@@ -47909,6 +48268,71 @@ function createBootstrapOpts(args) {
     ...nonEmpty(b.domSelectors) ? { domSelectors: b.domSelectors } : {}
   };
 }
+function stripBearer(raw) {
+  const m = /^\s*Bearer\s+(.+)$/i.exec(raw);
+  return (m?.[1] ?? raw).trim();
+}
+async function raceCaptures(attempts, windowMs) {
+  for (const a of attempts)
+    a.catch(() => {
+    });
+  let timer;
+  const expiry = new Promise((_resolve, reject) => {
+    timer = setTimeout(() => reject(new Error(`timed out after ${Math.round(windowMs / 1e3)}s waiting for the page to make a request we could read`)), windowMs);
+  });
+  try {
+    return await Promise.race([
+      Promise.any(attempts).catch((e) => {
+        throw new Error(e instanceof AggregateError ? e.errors.map((x) => messageOf(x)).join("; ") : messageOf(e));
+      }),
+      expiry
+    ]);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function captureBearerHeader(opts) {
+  if (opts.captures.length === 0)
+    throw new Error("captureBearerHeader: at least one capture declaration is required.");
+  const minLength = opts.minLength ?? 100;
+  const normalise = opts.normalise ?? stripBearer;
+  const domains = opts.domains ?? [...new Set(opts.captures.map((c) => c.host))];
+  const build2 = opts.createTransport ?? ((o) => createFetchproxyTransport(o));
+  const transport = build2({
+    ...opts.transportOptions,
+    ...createBootstrapOpts({ domains: [...domains], bootstrap: { captureHeaders: opts.captures.map((c) => ({ ...c })) } }),
+    ...opts.port !== void 0 ? { port: opts.port } : {},
+    // Both: the explicit deadline for every bridge version, and the declared
+    // window so the transport's own derivation agrees with it.
+    fetchTimeoutMs: deadlineForCaptureWindow(void 0, opts.windowMs) ?? SERVER_DEFAULT_FETCH_TIMEOUT_MS,
+    captureWindowMs: opts.windowMs,
+    serverName: opts.serverName,
+    version: opts.version
+  });
+  const one = async (decl) => {
+    const raw = await transport.server.captureRequestHeader({ ...decl, timeoutMs: opts.windowMs });
+    if (typeof raw !== "string")
+      throw new Error(`${decl.host}: capture returned no header`);
+    const token = normalise(raw);
+    if (token.length < minLength) {
+      throw new Error(`${decl.host}: ${decl.headerName} header was present but too short to be a token (${token.length} chars)`);
+    }
+    return token;
+  };
+  try {
+    await transport.start();
+    try {
+      return opts.captures.length === 1 ? await one(opts.captures[0]) : await raceCaptures(opts.captures.map(one), opts.windowMs);
+    } catch (e) {
+      throw new Error(`could not capture ${opts.what} from the browser (${messageOf(e)}). ${opts.guidance}`);
+    }
+  } finally {
+    try {
+      await transport.close();
+    } catch {
+    }
+  }
+}
 var PLACEHOLDER_RE2, SERVER_DEFAULT_FETCH_TIMEOUT_MS, CAPTURE_DEADLINE_MARGIN_MS;
 var init_fetchproxy = __esm({
   "node_modules/@chrischall/mcp-utils/dist/fetchproxy/index.js"() {
@@ -47937,97 +48361,26 @@ __export(auth_fetchproxy_exports, {
 function getWsPort() {
   return readPortEnv("OUTLOOK_WS_PORT", DEFAULT_WS_PORT);
 }
-function withFetch(opts) {
-  const derived2 = opts.capabilities ?? [];
-  return {
-    ...opts,
-    capabilities: derived2.includes("fetch") ? derived2 : [...derived2, "fetch"]
-  };
-}
-async function raceCaptures(attempts, windowMs) {
-  for (const a of attempts) a.catch(() => {
-  });
-  let timer;
-  const expiry = new Promise((_, reject) => {
-    timer = setTimeout(
-      () => reject(
-        new Error(
-          `timed out after ${Math.round(windowMs / 1e3)}s waiting for the page to make a request we could read`
-        )
-      ),
-      windowMs
-    );
-  });
-  try {
-    return await Promise.race([
-      Promise.any(attempts).catch((e) => {
-        throw new Error(
-          e instanceof AggregateError ? e.errors.map((x) => x.message).join("; ") : e.message
-        );
-      }),
-      expiry
-    ]);
-  } finally {
-    clearTimeout(timer);
-  }
-}
-function stripBearer(raw) {
-  const m = /^\s*Bearer\s+(.+)$/i.exec(raw);
-  return (m ? m[1] : raw).trim();
-}
 async function captureTokenViaFetchproxy() {
-  const transport = createFetchproxyTransport({
-    ...withFetch(
-      createBootstrapOpts({
-        domains: [...TRUST_DOMAINS],
-        bootstrap: {
-          captureHeaders: [{ ...CAPTURE_DECL_CLOUD }, { ...CAPTURE_DECL_OFFICE }]
-        }
-      })
-    ),
+  return captureBearerHeader({
+    captures: [CAPTURE_DECL_CLOUD, CAPTURE_DECL_OFFICE],
+    domains: TRUST_DOMAINS,
+    windowMs: CAPTURE_TIMEOUT_MS,
     port: getWsPort(),
-    fetchTimeoutMs: BRIDGE_DEADLINE_MS,
     serverName: PACKAGE_NAME,
-    version: VERSION
+    version: VERSION,
+    what: "an Outlook token",
+    guidance: "Open a signed-in Outlook tab (outlook.cloud.microsoft or outlook.office.com), leave it in the foreground for a moment so the page makes a request, and retry."
   });
-  try {
-    await transport.start();
-    const attempts = [CAPTURE_DECL_CLOUD, CAPTURE_DECL_OFFICE].map(
-      (decl) => transport.server.captureRequestHeader({ ...decl, timeoutMs: CAPTURE_TIMEOUT_MS }).then((raw) => {
-        if (typeof raw !== "string") {
-          throw new Error(`${decl.host}: capture returned no header`);
-        }
-        const token = stripBearer(raw);
-        if (token.length < MIN_TOKEN_LENGTH) {
-          throw new Error(
-            `${decl.host}: authorization header was present but too short to be a token (${token.length} chars)`
-          );
-        }
-        return token;
-      })
-    );
-    try {
-      return await raceCaptures(attempts, CAPTURE_TIMEOUT_MS);
-    } catch (e) {
-      const detail = e.message;
-      throw new Error(
-        `could not capture an Outlook token from the browser (${detail}). Open a signed-in Outlook tab (outlook.cloud.microsoft or outlook.office.com), leave it in the foreground for a moment so the page makes a request, and retry.`
-      );
-    }
-  } finally {
-    try {
-      await transport.close();
-    } catch {
-    }
-  }
 }
-var DEFAULT_WS_PORT, CAPTURE_DECL_CLOUD, CAPTURE_DECL_OFFICE, CAPTURE_HOSTS, TRUST_DOMAINS, CAPTURE_TIMEOUT_MS, BRIDGE_DEADLINE_MS, MIN_TOKEN_LENGTH;
+var DEFAULT_WS_PORT, CAPTURE_DECL_CLOUD, CAPTURE_DECL_OFFICE, CAPTURE_HOSTS, TRUST_DOMAINS, CAPTURE_TIMEOUT_MS;
 var init_auth_fetchproxy = __esm({
   "src/auth-fetchproxy.ts"() {
     "use strict";
     init_fetchproxy();
     init_dist2();
     init_version();
+    init_fetchproxy();
     DEFAULT_WS_PORT = 37149;
     CAPTURE_DECL_CLOUD = {
       host: "outlook.cloud.microsoft",
@@ -48042,8 +48395,6 @@ var init_auth_fetchproxy = __esm({
     CAPTURE_HOSTS = [CAPTURE_DECL_CLOUD.host, CAPTURE_DECL_OFFICE.host];
     TRUST_DOMAINS = [...CAPTURE_HOSTS];
     CAPTURE_TIMEOUT_MS = readTtlMsEnv("OUTLOOK_CAPTURE_TIMEOUT", 3e4);
-    BRIDGE_DEADLINE_MS = Math.max(CAPTURE_TIMEOUT_MS + 15e3, 3e4);
-    MIN_TOKEN_LENGTH = 100;
   }
 });
 
@@ -48625,6 +48976,46 @@ var TokenManager = class {
     return res;
   }
 };
+var RECAPTURE_SENTINEL = "fetchproxy:recapture";
+var UNKNOWN_CAPTURED_TOKEN_TTL_MS = 10 * 60 * 1e3;
+function capturedBearerTokens(accessToken, opts = {}) {
+  const now = opts.now ?? Date.now;
+  let expiresAt;
+  try {
+    expiresAt = decodeJwtExp(accessToken) * 1e3;
+  } catch {
+    expiresAt = now() + (opts.unknownTtlMs ?? UNKNOWN_CAPTURED_TOKEN_TTL_MS);
+  }
+  return { accessToken, refreshToken: RECAPTURE_SENTINEL, expiresAt };
+}
+function createCapturedTokenManager(opts) {
+  const { direct } = opts;
+  const wrap = (token) => capturedBearerTokens(token, {
+    ...opts.unknownTtlMs !== void 0 ? { unknownTtlMs: opts.unknownTtlMs } : {},
+    ...opts.now !== void 0 ? { now: opts.now } : {}
+  });
+  const persistence = direct === void 0 ? opts.persistence ?? void 0 : void 0;
+  return new TokenManager({
+    initial: async () => wrap(direct ?? await opts.capture()),
+    refresh: async () => {
+      if (direct !== void 0) {
+        throw opts.onDirectRejected ? opts.onDirectRejected() : new McpToolError("The directly supplied access token was rejected (401).", {
+          status: 401,
+          kind: "credential_rejected",
+          hint: "A directly supplied token cannot be refreshed automatically. Replace it with a current one, or unset it to capture from a signed-in browser tab instead."
+        });
+      }
+      return wrap(await opts.capture());
+    },
+    ...persistence !== void 0 ? { persistence } : {},
+    // Never fatal: the token is in hand and re-capturable.
+    onPersistError: (err) => {
+      opts.onPersistError?.(err);
+    },
+    ...opts.skewMs !== void 0 ? { skewMs: opts.skewMs } : {},
+    ...opts.now !== void 0 ? { now: opts.now } : {}
+  });
+}
 
 // src/token-cache.ts
 init_dist2();
@@ -48636,11 +49027,6 @@ function tokenCachePath(env = process.env) {
     fileName: "token.json"
   });
 }
-function isToken(raw) {
-  if (raw === null || typeof raw !== "object") return false;
-  const t = raw;
-  return typeof t.accessToken === "string" && t.accessToken !== "" && typeof t.expiresAt === "number" && (t.refreshToken === void 0 || typeof t.refreshToken === "string");
-}
 function bindingFor(env) {
   if (readEnvVar("OUTLOOK_ACCESS_TOKEN", { env }) !== void 0) return null;
   if (parseBoolEnv("OUTLOOK_DISABLE_FETCHPROXY", { env })) return null;
@@ -48653,7 +49039,7 @@ function createTokenCache(env = process.env) {
   return createFileStatePersistence({
     filePath: tokenCachePath(env),
     boundTo,
-    validate: (raw) => isToken(raw) ? raw : null
+    validate: (raw) => isBearerTokens(raw) ? raw : null
   });
 }
 function reportCacheWriteFailure(err) {
@@ -48669,16 +49055,9 @@ async function captureTokenLazily() {
   return mod.captureTokenViaFetchproxy();
 }
 var DEFAULT_API_BASE = "https://outlook.office.com/api/v2.0";
-var UNKNOWN_TOKEN_TTL_MS = 10 * 60 * 1e3;
-var RECAPTURE_SENTINEL = "fetchproxy:recapture";
-function toBearerTokens(accessToken) {
-  let expiresAt;
-  try {
-    expiresAt = decodeJwtExp(accessToken) * 1e3;
-  } catch {
-    expiresAt = Date.now() + UNKNOWN_TOKEN_TTL_MS;
-  }
-  return { accessToken, refreshToken: RECAPTURE_SENTINEL, expiresAt };
+function urlOf(input2) {
+  if (typeof input2 === "string") return input2;
+  return input2 instanceof URL ? input2.href : input2.url;
 }
 function isCredentialFailure(e) {
   const kind = errorKindOf(e);
@@ -48703,7 +49082,14 @@ var OutlookClient = class {
   constructor(opts = {}) {
     this.#env = opts.env ?? process.env;
     this.#capture = opts.captureToken ?? captureTokenLazily;
-    this.#fetchImpl = opts.fetchImpl ?? ((input2, init) => fetch(input2, init));
+    const fetchImpl = opts.fetchImpl ?? ((input2, init) => fetch(input2, init));
+    this.#fetchImpl = async (input2, init) => {
+      try {
+        return await fetchImpl(input2, init);
+      } catch (e) {
+        throw describeTransportFailure(e, urlOf(input2), "Outlook") ?? e;
+      }
+    };
     this.#baseUrl = readEnvVar("OUTLOOK_API_BASE", { env: this.#env }) ?? DEFAULT_API_BASE;
     const direct = readEnvVar("OUTLOOK_ACCESS_TOKEN", { env: this.#env });
     const bridgeOff = parseBoolEnv("OUTLOOK_DISABLE_FETCHPROXY", { env: this.#env });
@@ -48726,51 +49112,17 @@ var OutlookClient = class {
     if (this.#configError) throw this.#configError;
   }
   #tokenManager() {
-    if (this.#tokens) return this.#tokens;
     const direct = readEnvVar("OUTLOOK_ACCESS_TOKEN", { env: this.#env });
-    const persistence = direct === void 0 ? createTokenCache(this.#env) : null;
-    const mint = async () => toBearerTokens(direct ?? await this.#capture());
-    this.#tokens = new TokenManager({
-      initial: mint,
-      // There is no refresh grant — re-capture instead. The sentinel argument
-      // is ignored by design.
-      //
-      // But a token supplied as OUTLOOK_ACCESS_TOKEN must NOT be "refreshed" by
-      // reaching for the browser: that silently swaps the credential the
-      // operator chose for whichever account a tab happens to be signed into,
-      // and on a machine with no bridge it just hangs for the capture window on
-      // every 401. Say what is wrong instead.
-      refresh: async () => {
-        if (direct !== void 0) {
-          throw new McpToolError("OUTLOOK_ACCESS_TOKEN was rejected by Outlook.", {
-            hint: "A directly-supplied token cannot be refreshed automatically. Replace OUTLOOK_ACCESS_TOKEN with a current one, or unset it to capture from a signed-in Outlook browser tab instead.",
-            status: 401,
-            kind: "credential_rejected"
-          });
-        }
-        return toBearerTokens(await this.#capture());
-      },
-      // A failed cache write must not fail the call that triggered it: the
-      // token is in hand and re-capturable, so a read-only data dir should cost
-      // the next cold start a capture, not this request.
-      ...persistence ? {
-        persistence: {
-          load: () => persistence.load(),
-          save: (t) => {
-            try {
-              persistence.save(t);
-            } catch (e) {
-              reportCacheWriteFailure(e);
-            }
-          },
-          clear: () => {
-            try {
-              persistence.clear();
-            } catch {
-            }
-          }
-        }
-      } : {}
+    this.#tokens ??= createCapturedTokenManager({
+      capture: () => this.#capture(),
+      direct,
+      onDirectRejected: () => new McpToolError("OUTLOOK_ACCESS_TOKEN was rejected by Outlook.", {
+        hint: "A directly-supplied token cannot be refreshed automatically. Replace OUTLOOK_ACCESS_TOKEN with a current one, or unset it to capture from a signed-in Outlook browser tab instead.",
+        status: 401,
+        kind: "credential_rejected"
+      }),
+      persistence: direct === void 0 ? createTokenCache(this.#env) : null,
+      onPersistError: reportCacheWriteFailure
     });
     return this.#tokens;
   }
@@ -49928,6 +50280,9 @@ function messageBody(subject, body, html) {
 }
 var TEAMS = { IsOnlineMeeting: true, OnlineMeetingProvider: "TeamsForBusiness" };
 var teamsMeetingParam = external_exports.boolean().optional().describe("Attach a Microsoft Teams meeting (default true). false leaves it off.");
+var addTeamsMeetingParam = external_exports.boolean().optional().describe(
+  "true adds a Microsoft Teams meeting to an event that lacks one (default false: the way people join is left as it is)."
+);
 var EVENT_STATE_SELECT = "Id,Subject,IsOrganizer,Start,End,Location,Attendees,IsOnlineMeeting,OnlineMeetingProvider,OnlineMeeting";
 function attendee(Address, Type) {
   return { Type, EmailAddress: { Address } };
@@ -49949,19 +50304,14 @@ function dateTimeTimeZone2(value, zone) {
   return { DateTime: value, TimeZone: zone };
 }
 var TIMEOUT_SENTENCE = 'If Outlook does not answer in time (or the connection drops) the result has status "unknown": the write may well have gone through, so check before retrying \u2014 never resend blindly.';
-async function writeOrUnknown(run, checkWhere) {
-  try {
-    return { ok: true, value: await run() };
-  } catch (e) {
-    if (!(e instanceof WriteOutcomeUnknownError)) throw e;
-    return {
-      ok: false,
-      result: minifiedResult({
-        status: "unknown",
-        warning: `Outlook did not confirm this write (${e.timedOut ? "it did not answer in time" : "the connection dropped"}), so it may already have happened. Check ${checkWhere} before retrying; do not resend blindly.`
-      })
-    };
-  }
+function writeOrUnknown2(run, checkWhere) {
+  return writeOrUnknown(
+    run,
+    (e) => minifiedResult({
+      status: "unknown",
+      warning: `Outlook did not confirm this write (${unknownOutcomeReason(e)}), so it may already have happened. Check ${checkWhere} before retrying; do not resend blindly.`
+    })
+  );
 }
 var INVITE_EVENT_SELECT = "Id,Subject,IsOrganizer,IsCancelled,Start,End,Organizer,ResponseStatus";
 var DELETE_EVENT_SELECT = "Id,Subject,IsOrganizer,IsCancelled,ResponseStatus,Type,SeriesMasterId,Start,End,Organizer,Attendees";
@@ -50069,7 +50419,7 @@ function registerWriteTools(server, client2) {
         confirmToken
       });
       if (gate) return gate;
-      const sent = await writeOrUnknown(() => client2.write("POST", "/me/sendmail", payload), "Sent Items");
+      const sent = await writeOrUnknown2(() => client2.write("POST", "/me/sendmail", payload), "Sent Items");
       if (!sent.ok) return sent.result;
       return minifiedResult({ sent: true, subject, recipients: recipients || null });
     }
@@ -50077,39 +50427,30 @@ function registerWriteTools(server, client2) {
   server.registerTool(
     "outlook_create_draft",
     {
-      description: "Create a draft message in the Drafts folder without sending it. Returns the created draft, which can be reviewed and sent from Outlook. " + CONFIRM_FLOW_SENTENCE,
-      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
+      description: "Create a draft message in the Drafts folder without sending it. Returns the created draft, which can be reviewed and sent from Outlook. It does not ask to confirm: a draft reaches nobody until it is sent from Outlook. Calling it twice leaves two drafts. " + TIMEOUT_SENTENCE,
+      // Self-only and additive, like outlook_reply with draftOnly: nothing is
+      // overwritten or sent. Not idempotent: a repeat creates a second draft.
+      annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
       inputSchema: external_exports.object({
         to: recipientList,
         cc: recipientList,
         subject: external_exports.string().describe("Subject line"),
         body: external_exports.string().describe("Message body"),
-        html: external_exports.boolean().optional().describe("Compose the body as HTML (default: plain text)"),
-        confirmToken: confirmTokenParam
+        html: external_exports.boolean().optional().describe("Compose the body as HTML (default: plain text)")
       })
     },
-    async ({ to, cc, subject, body, html, confirmToken }, ctx) => {
+    async ({ to, cc, subject, body, html }) => {
       const payload = {
         ...messageBody(subject, body, html),
         ToRecipients: toRecipients(to),
         ...cc?.length ? { CcRecipients: toRecipients(cc) } : {}
       };
-      const gate = await confirmWrite(ctx, {
-        tool: "outlook_create_draft",
-        action: "mail.create_draft",
-        message: "Review and confirm this draft:",
-        summary: `Create draft "${subject}"`,
-        // One signed-in mailbox per server process.
-        account: void 0,
-        request: { method: "POST", path: "/me/messages", body: payload },
-        confirmToken
-      });
-      if (gate) return gate;
-      const created = await client2.write(
-        "POST",
-        "/me/messages",
-        payload
+      const create = await writeOrUnknown2(
+        () => client2.write("POST", "/me/messages", payload),
+        "Drafts"
       );
+      if (!create.ok) return create.result;
+      const created = create.value;
       return minifiedResult({ created: true, Id: created?.Id, WebLink: created?.WebLink });
     }
   );
@@ -50300,7 +50641,7 @@ function registerWriteTools(server, client2) {
         confirmToken
       });
       if (gate) return gate;
-      const write = await writeOrUnknown(
+      const write = await writeOrUnknown2(
         () => client2.write("POST", "/me/events", payload),
         "the calendar (outlook_list_events)"
       );
@@ -50326,7 +50667,7 @@ function registerWriteTools(server, client2) {
   server.registerTool(
     "outlook_update_event",
     {
-      description: "Update a meeting you organize: retitle, move, relocate, edit the description, or add/remove attendees. Moving only `start` keeps the meeting's length. A Microsoft Teams meeting is added if the event lacks one (`teamsMeeting: false` to skip). Attendees are sent an updated invitation. Only the organizer can update a meeting \u2014 an attendee's edit would change their own copy alone, so it is refused. The result is verified by re-reading the event. " + CONFIRM_FLOW_SENTENCE + " " + CONFIRM_INJECTION_RULE,
+      description: "Update a meeting you organize: retitle, move, relocate, edit the description, or add/remove attendees. Moving only `start` keeps the meeting's length. It does not add a Microsoft Teams meeting unless you pass `teamsMeeting: true` (on an event that lacks one). Attendees are sent an updated invitation. Only the organizer can update a meeting \u2014 an attendee's edit would change their own copy alone, so it is refused. The result is verified by re-reading the event. " + CONFIRM_FLOW_SENTENCE + " " + CONFIRM_INJECTION_RULE,
       annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: true },
       inputSchema: external_exports.object({
         id: external_exports.string().min(1).describe("Event Id from outlook_list_events or outlook_get_event"),
@@ -50339,7 +50680,7 @@ function registerWriteTools(server, client2) {
         addAttendees: recipientList.describe("Required attendees to add"),
         addOptionalAttendees: recipientList.describe("Optional attendees to add"),
         removeAttendees: recipientList.describe("Attendees to remove"),
-        teamsMeeting: teamsMeetingParam,
+        teamsMeeting: addTeamsMeetingParam,
         confirmToken: confirmTokenParam
       })
     },
@@ -50392,18 +50733,21 @@ function registerWriteTools(server, client2) {
         }
         payload.Attendees = next;
       }
-      const addTeams = args.teamsMeeting !== false && !(current && isTeams(current));
+      const addTeams = args.teamsMeeting === true && !(current && isTeams(current));
       if (addTeams) Object.assign(payload, TEAMS);
       if (Object.keys(payload).length === 0) {
         throw new McpToolError("Nothing to update.", {
-          hint: "Pass at least one of subject, start, end, location, body, or attendee changes."
+          hint: "Pass at least one of subject, start, end, location, body, attendee changes, or teamsMeeting: true."
         });
       }
       const gate = await confirmWrite(ctx, {
         tool: "outlook_update_event",
         action: "calendar.update_event",
-        message: "Review and confirm this change (attendees are sent an updated invitation):",
-        summary: `Update "${current?.Subject ?? args.id}": ${Object.keys(payload).join(", ")}`,
+        message: addTeams ? "Review and confirm this change (attendees are sent an updated invitation). This will also make it a Microsoft Teams meeting: attendees get a Teams join link." : "Review and confirm this change (attendees are sent an updated invitation):",
+        summary: `Update "${current?.Subject ?? args.id}": ${[
+          Object.keys(payload).filter((k) => !(k in TEAMS)).join(", "),
+          addTeams ? "this will also make it a Microsoft Teams meeting" : ""
+        ].filter((part) => part !== "").join("; ")}`,
         // One signed-in mailbox per server process.
         account: void 0,
         target: args.id,
@@ -50518,7 +50862,7 @@ function registerWriteTools(server, client2) {
         });
         if (gate) return gate;
       }
-      const write = await writeOrUnknown(
+      const write = await writeOrUnknown2(
         () => client2.write("POST", path, payload),
         "the event's response (outlook_get_event)"
       );
@@ -50601,7 +50945,7 @@ function registerWriteTools(server, client2) {
         });
         if (gate) return gate;
       }
-      const write = await writeOrUnknown(
+      const write = await writeOrUnknown2(
         () => client2.write("DELETE", path),
         "the calendar (outlook_get_event)"
       );
@@ -50654,7 +50998,7 @@ function registerWriteTools(server, client2) {
       const base = `/me/messages/${encodeURIComponent(messageId)}`;
       const forwardTo = mode === "forward" ? { ToRecipients: toRecipients(to) } : {};
       if (draftOnly === true) {
-        const create = await writeOrUnknown(
+        const create = await writeOrUnknown2(
           () => client2.write(
             "POST",
             `${base}/${draft}`,
@@ -50721,7 +51065,7 @@ function registerWriteTools(server, client2) {
         confirmToken
       });
       if (gate) return gate;
-      const sent = await writeOrUnknown(() => client2.write("POST", path, payload), "Sent Items");
+      const sent = await writeOrUnknown2(() => client2.write("POST", path, payload), "Sent Items");
       if (!sent.ok) return sent.result;
       return mailboxUntrusted({
         sent: true,