npm - @circuitwall/jarela - Versions diffs - 2.2.0 → 2.3.0 - Mend

@circuitwall/jarela 2.2.0 → 2.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (683) hide show

package/.next/standalone/.next/server/app/api/v1/integrations/outlook/oauth/status/route.js CHANGED Viewed

@@ -167,1062 +167,1062 @@ module.exports = require("node:child_process");
 /***/ }),
-/***/ 33873:
-/***/ ((module) => {
-module.exports = require("path");
-/***/ }),
-/***/ 37067:
-/***/ ((module) => {
+/***/ 32587:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-module.exports = require("node:http");
+__webpack_require__.r(__webpack_exports__);
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   handler: () => (/* binding */ handler),
+/* harmony export */   patchFetch: () => (/* binding */ patchFetch),
+/* harmony export */   routeModule: () => (/* binding */ routeModule),
+/* harmony export */   serverHooks: () => (/* binding */ serverHooks),
+/* harmony export */   workAsyncStorage: () => (/* binding */ workAsyncStorage),
+/* harmony export */   workUnitAsyncStorage: () => (/* binding */ workUnitAsyncStorage)
+/* harmony export */ });
+/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(19225);
+/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__);
+/* harmony import */ var next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(84006);
+/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(8317);
+/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__);
+/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(99373);
+/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__);
+/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(34775);
+/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__);
+/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(24235);
+/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__);
+/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(261);
+/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__);
+/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(54365);
+/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__);
+/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(90771);
+/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__);
+/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(73461);
+/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__);
+/* harmony import */ var next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(67798);
+/* harmony import */ var next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(92280);
+/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(62018);
+/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__);
+/* harmony import */ var next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(45696);
+/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__ = __webpack_require__(47929);
+/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14___default = /*#__PURE__*/__webpack_require__.n(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__);
+/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__ = __webpack_require__(86439);
+/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__);
+/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(10246);
+/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__);
+/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(37527);
+/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__);
-/***/ }),
-/***/ 38522:
-/***/ ((module) => {
-module.exports = require("node:zlib");
-/***/ }),
-/***/ 44708:
-/***/ ((module) => {
-module.exports = require("node:https");
-/***/ }),
-/***/ 44870:
-/***/ ((module) => {
-module.exports = require("next/dist/compiled/next-server/app-route.runtime.prod.js");
-/***/ }),
-/***/ 48161:
-/***/ ((module) => {
-module.exports = require("node:os");
-/***/ }),
-/***/ 51455:
-/***/ ((module) => {
-module.exports = require("node:fs/promises");
-/***/ }),
-/***/ 53638:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   p: () => (/* binding */ parseJsonSafe)
-/* harmony export */ });
-// JSON.parse with a fallback value when the input is malformed (or empty).
-// Used everywhere we read responses from external APIs — they're contractually
-// JSON but a transient 502 / proxy interstitial occasionally returns HTML.
-function parseJsonSafe(text, fallback) {
-    try {
-        return JSON.parse(text);
-    } catch  {
-        return fallback;
-    }
+// We inject the nextConfigOutput here so that we can use them in the route
+// module.
+const nextConfigOutput = "standalone"
+const routeModule = new next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__.AppRouteRouteModule({
+    definition: {
+        kind: next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__.RouteKind.APP_ROUTE,
+        page: "/api/v1/integrations/outlook/oauth/status/route",
+        pathname: "/api/v1/integrations/outlook/oauth/status",
+        filename: "route",
+        bundlePath: "app/api/v1/integrations/outlook/oauth/status/route"
+    },
+    distDir: ".next" || 0,
+    relativeProjectDir:  false || '',
+    resolvedPagePath: "/home/runner/work/jarela/jarela/app/api/v1/integrations/outlook/oauth/status/route.ts",
+    nextConfigOutput,
+    // The lazy require factory ensures that:
+    // - In dev: devRequestTimingInternalsEnd is set before userland executes,
+    //   correctly attributing module load time to application-code rather than
+    //   framework internals.
+    // - In all modes: async modules (route files with top-level await) are
+    //   handled correctly — require() returns a Promise for such modules, which
+    //   ensureUserland() awaits before the first request is handled.
+    userland: ()=>__webpack_require__(7161),
+    // In Turbopack dev mode, also provide a synchronous per-request getter so
+    // server HMR updates are picked up without re-executing the entry chunk.
+    // Using require() (synchronous) avoids adding async overhead that would be
+    // incorrectly attributed to application-code time in devRequestTiming.
+    ... false ? 0 : {}
+});
+// Pull out the exports that we need to expose from the module. This should
+// be eliminated when we've moved the other routes to the new format. These
+// are used to hook into the route.
+const { workAsyncStorage, workUnitAsyncStorage, serverHooks } = routeModule;
+function patchFetch() {
+    return (0,next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__.patchFetch)({
+        workAsyncStorage,
+        workUnitAsyncStorage
+    });
 }
-/***/ }),
-/***/ 55511:
-/***/ ((module) => {
-module.exports = require("crypto");
-/***/ }),
-/***/ 55591:
-/***/ ((module) => {
-module.exports = require("https");
-/***/ }),
-/***/ 56362:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   R: () => (/* binding */ createOAuthFlowStore)
-/* harmony export */ });
-/* harmony import */ var node_crypto__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(77598);
-/* harmony import */ var node_crypto__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(node_crypto__WEBPACK_IMPORTED_MODULE_0__);
-/* harmony import */ var _lib_utils_global_state__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(15559);
-// Ephemeral state store for in-app OAuth flows (Gmail, Microsoft, ...).
-//
-// Why this exists: the user types client_id + client_secret in the
-// Integrations panel, we POST to /oauth/start, stash them here keyed by a
-// random `state`, and return the provider's authorize URL. The browser
-// bounces back to /oauth/callback with `?code&state`, we exchange, and
-// persist the integration. Meanwhile the panel polls /oauth/status.
-//
-// Pinned to globalThis so HMR in dev doesn't lose pending flows.
-//
-// Same shape used by both gmail-oauth.ts and microsoft-oauth.ts — pass a
-// unique `globalKey` per provider so they don't share a Map.
-const DEFAULT_TTL_MS = 10 * 60 * 1000;
-const DEFAULT_MAX_FLOWS = 32;
-function createOAuthFlowStore(opts) {
-    const ttlMs = opts.ttlMs ?? DEFAULT_TTL_MS;
-    const maxFlows = opts.maxFlows ?? DEFAULT_MAX_FLOWS;
-    const flows = (0,_lib_utils_global_state__WEBPACK_IMPORTED_MODULE_1__/* .getOrCreateGlobal */ .X)(opts.globalKey, ()=>new Map());
-    function gc() {
-        const now = Date.now();
-        for (const [k, v] of flows){
-            if (now - v.createdAt > ttlMs) flows.delete(k);
-        }
-        // Hard cap so a stuck UI can't grow this unbounded.
-        if (flows.size > maxFlows) {
-            const oldest = [
-                ...flows.entries()
-            ].sort((a, b)=>a[1].createdAt - b[1].createdAt);
-            for(let i = 0; i < oldest.length - maxFlows; i++)flows.delete(oldest[i][0]);
-        }
+async function handler(req, res, ctx) {
+    if (ctx.requestMeta) {
+        (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.setRequestMeta)(req, ctx.requestMeta);
     }
-    return {
-        create (input) {
-            gc();
-            const state = (0,node_crypto__WEBPACK_IMPORTED_MODULE_0__.randomBytes)(16).toString("hex");
-            const flow = {
-                createdAt: Date.now(),
-                status: "pending",
-                ...input
-            };
-            flows.set(state, flow);
-            return {
-                state,
-                flow
-            };
-        },
-        get (state) {
-            gc();
-            return flows.get(state);
-        },
-        update (state, patch) {
-            const f = flows.get(state);
-            if (f) Object.assign(f, patch);
-        },
-        delete (state) {
-            flows.delete(state);
+    if (routeModule.isDev) {
+        (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.addRequestMeta)(req, 'devRequestTimingInternalsEnd', process.hrtime.bigint());
+    }
+    let srcPage = "/api/v1/integrations/outlook/oauth/status/route";
+    // turbopack doesn't normalize `/index` in the page name
+    // so we need to to process dynamic routes properly
+    // TODO: fix turbopack providing differing value from webpack
+    if (false) {} else if (srcPage === '/index') {
+        // we always normalize /index specifically
+        srcPage = '/';
+    }
+    const multiZoneDraftMode = false;
+    const prepareResult = await routeModule.prepare(req, res, {
+        srcPage,
+        multiZoneDraftMode
+    });
+    if (!prepareResult) {
+        res.statusCode = 400;
+        res.end('Bad Request');
+        ctx.waitUntil == null ? void 0 : ctx.waitUntil.call(ctx, Promise.resolve());
+        return null;
+    }
+    const { buildId, deploymentId, params, nextConfig, parsedUrl, isDraftMode, prerenderManifest, routerServerContext, isOnDemandRevalidate, revalidateOnlyGenerated, resolvedPathname, clientReferenceManifest, serverActionsManifest, previewProps } = prepareResult;
+    const normalizedSrcPage = (0,next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__.normalizeAppPath)(srcPage);
+    // Only this route's prerenders can establish ISR or admit generated params.
+    const isPrerendered = Boolean(prerenderManifest.routes[resolvedPathname]) && (routeModule.isDev || (0,next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__.isRouteCacheOwner)(resolvedPathname, routeModule.cacheOwner, prerenderManifest.routes[resolvedPathname]));
+    let isIsr = Boolean(prerenderManifest.dynamicRoutes[normalizedSrcPage] || isPrerendered);
+    const render404 = async ()=>{
+        // TODO: should route-module itself handle rendering the 404
+        if (routerServerContext == null ? void 0 : routerServerContext.render404) {
+            await routerServerContext.render404(req, res, parsedUrl, false);
+        } else {
+            res.end('This page could not be found');
         }
+        return null;
     };
-}
-/***/ }),
-/***/ 57075:
-/***/ ((module) => {
-module.exports = require("node:stream");
-/***/ }),
-/***/ 57975:
-/***/ ((module) => {
-module.exports = require("node:util");
-/***/ }),
-/***/ 63033:
-/***/ ((module) => {
-module.exports = require("next/dist/server/app-render/work-unit-async-storage.external.js");
-/***/ }),
-/***/ 73024:
-/***/ ((module) => {
-module.exports = require("node:fs");
-/***/ }),
-/***/ 75919:
-/***/ ((module) => {
-module.exports = require("node:worker_threads");
-/***/ }),
-/***/ 76760:
-/***/ ((module) => {
-module.exports = require("node:path");
-/***/ }),
-/***/ 77598:
-/***/ ((module) => {
-module.exports = require("node:crypto");
-/***/ }),
-/***/ 79428:
-/***/ ((module) => {
-module.exports = require("buffer");
-/***/ }),
+    if (isIsr && !isDraftMode) {
+        const prerenderInfo = prerenderManifest.dynamicRoutes[normalizedSrcPage];
+        if (prerenderInfo) {
+            if (prerenderInfo.fallback === false && !isPrerendered) {
+                if (nextConfig.adapterPath) {
+                    return await render404();
+                }
+                throw new next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__.NoFallbackError();
+            }
+        }
+    }
+    let cacheKey = null;
+    if (isIsr && !routeModule.isDev && !isDraftMode) {
+        cacheKey = resolvedPathname;
+        // ensure /index and / is normalized to one key
+        cacheKey = cacheKey === '/index' ? '/' : cacheKey;
+    }
+    // Before rendering (which initializes component tree modules), we have to
+    // set the reference manifests to our global store so Server Action's
+    // encryption util can access to them at the top level of the page module.
+    if (serverActionsManifest && clientReferenceManifest) {
+        (0,next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__.setManifestsSingleton)({
+            page: srcPage,
+            clientReferenceManifest,
+            serverActionsManifest
+        });
+    }
+    const method = req.method || 'GET';
+    const tracer = (0,next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.getTracer)();
+    const activeSpan = tracer.getActiveScopeSpan();
+    const isWrappedByNextServer = Boolean(routerServerContext == null ? void 0 : routerServerContext.isWrappedByNextServer);
+    const isMinimalMode = Boolean((0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'minimalMode'));
+    const incrementalCache = (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'incrementalCache') || await routeModule.getIncrementalCache(req, nextConfig, previewProps, prerenderManifest, isMinimalMode);
+    incrementalCache == null ? void 0 : incrementalCache.resetRequestCache();
+    globalThis.__incrementalCache = incrementalCache;
+    const context = {
+        params,
+        previewProps,
+        renderOpts: {
+            experimental: {
+                authInterrupts: Boolean(nextConfig.experimental.authInterrupts),
+                useCacheTimeout: nextConfig.experimental.useCacheTimeout,
+                durableUseCacheEntries: Boolean(nextConfig.experimental.durableUseCacheEntries)
+            },
+            cacheComponents: Boolean(nextConfig.cacheComponents),
+            validationLevel: nextConfig.experimental.instantInsights.validationLevel,
+            isDraftMode,
+            incrementalCache,
+            hmrRefreshHash: (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'hmrRefreshHash'),
+            cacheLifeProfiles: nextConfig.cacheLife,
+            staticPageGenerationTimeout: nextConfig.staticPageGenerationTimeout,
+            waitUntil: ctx.waitUntil,
+            onClose: (cb)=>{
+                res.on('close', cb);
+            },
+            onAfterTaskError: undefined
+        },
+        sharedContext: {
+            buildId,
+            deploymentId
+        }
+    };
+    const nodeNextReq = new next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__.NodeNextRequest(req);
+    const nodeNextRes = new next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__.NodeNextResponse(res);
+    const nextReq = next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__.NextRequestAdapter.fromNodeNextRequest(nodeNextReq, (0,next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__.signalFromNodeResponse)(res));
+    const responseGenerator = async ({ previousCacheEntry })=>{
+        try {
+            if (!isMinimalMode && isOnDemandRevalidate && revalidateOnlyGenerated && !previousCacheEntry) {
+                res.statusCode = 404;
+                // on-demand revalidate always sets this header
+                res.setHeader('x-nextjs-cache', 'REVALIDATED');
+                res.end('This page could not be found');
+                return null;
+            }
+            const response = cacheKey === null ? await routeModule.handle(nextReq, context) : await routeModule.prerender(nextReq, context);
+            req.fetchMetrics = context.renderOpts.fetchMetrics;
+            let pendingWaitUntil = context.renderOpts.pendingWaitUntil;
+            // Attempt using provided waitUntil if available
+            // if it's not we fallback to sendResponse's handling
+            if (pendingWaitUntil) {
+                if (ctx.waitUntil) {
+                    ctx.waitUntil(pendingWaitUntil);
+                    pendingWaitUntil = undefined;
+                }
+            }
+            const cacheTags = context.renderOpts.collectedTags;
+            // If the request is for a static response, we can cache it so long
+            // as it's not edge.
+            if (isIsr) {
+                const blob = await response.blob();
+                // Copy the headers from the response.
+                const headers = (0,next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__.toNodeOutgoingHttpHeaders)(response.headers);
+                if (cacheTags) {
+                    headers[next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.NEXT_CACHE_TAGS_HEADER] = cacheTags;
+                }
+                if (!headers['content-type'] && blob.type) {
+                    headers['content-type'] = blob.type;
+                }
+                const revalidate = typeof context.renderOpts.collectedRevalidate === 'undefined' || context.renderOpts.collectedRevalidate >= next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.INFINITE_CACHE ? false : context.renderOpts.collectedRevalidate;
+                const expire = typeof context.renderOpts.collectedExpire === 'undefined' || context.renderOpts.collectedExpire >= next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.INFINITE_CACHE ? // route has a numeric `revalidate` but didn't declare an
+                // explicit `expire` (e.g. via `cacheLife`). This mirrors the
+                // build-time fallback in `build/index.ts` so cache entries
+                // and the response Cache-Control header agree on the route's
+                // effective expire. Routes that opt out of revalidation
+                // (`revalidate: false`) or that are dynamic (`revalidate: 0`)
+                // keep `expire: undefined`.
+                revalidate !== false && revalidate > 0 ? nextConfig.expireTime : undefined : context.renderOpts.collectedExpire;
+                // Create the cache entry for the response.
+                const cacheEntry = {
+                    value: {
+                        kind: next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__.CachedRouteKind.APP_ROUTE,
+                        status: response.status,
+                        body: Buffer.from(await blob.arrayBuffer()),
+                        headers
+                    },
+                    cacheControl: {
+                        revalidate,
+                        expire
+                    }
+                };
+                return cacheEntry;
+            } else {
+                // send response without caching if not ISR
+                await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, response, pendingWaitUntil);
+                return null;
+            }
+        } catch (err) {
+            // if this is a background revalidate we need to report
+            // the request error here as it won't be bubbled
+            if (previousCacheEntry == null ? void 0 : previousCacheEntry.isStale) {
+                const silenceLog = false;
+                await routeModule.onRequestError(req, err, {
+                    routerKind: 'App Router',
+                    routePath: srcPage,
+                    routeType: 'route',
+                    revalidateReason: (0,next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__.getRevalidateReason)({
+                        isStaticGeneration: cacheKey !== null,
+                        isOnDemandRevalidate
+                    })
+                }, silenceLog, routerServerContext);
+            }
+            throw err;
+        }
+    };
+    const handleResponse = async (currentSpan, parentSpan)=>{
+        try {
+            var _cacheEntry_value;
+            const cacheEntry = await routeModule.handleResponse({
+                req,
+                nextConfig,
+                cacheKey,
+                routeKind: next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__.RouteKind.APP_ROUTE,
+                isFallback: false,
+                previewProps,
+                prerenderManifest,
+                isRoutePPREnabled: false,
+                isOnDemandRevalidate,
+                revalidateOnlyGenerated,
+                responseGenerator,
+                waitUntil: ctx.waitUntil,
+                isMinimalMode
+            });
+            if (cacheEntry !== null && 'error' in cacheEntry) {
+                throw cacheEntry.error;
+            }
+            // we don't create a cacheEntry for ISR
+            if (!isIsr) {
+                return;
+            }
+            if ((cacheEntry == null ? void 0 : (_cacheEntry_value = cacheEntry.value) == null ? void 0 : _cacheEntry_value.kind) !== next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__.CachedRouteKind.APP_ROUTE) {
+                var _cacheEntry_value1;
+                throw new Error(`Invariant: app-route received invalid cache entry ${cacheEntry == null ? void 0 : (_cacheEntry_value1 = cacheEntry.value) == null ? void 0 : _cacheEntry_value1.kind}`);
+            }
+            if (!isMinimalMode) {
+                res.setHeader('x-nextjs-cache', isOnDemandRevalidate ? 'REVALIDATED' : cacheEntry.isMiss ? 'MISS' : cacheEntry.isStale ? 'STALE' : 'HIT');
+            }
+            // Draft mode should never be cached
+            if (isDraftMode) {
+                res.setHeader('Cache-Control', 'private, no-cache, no-store, max-age=0, must-revalidate');
+            }
+            const headers = (0,next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__.fromNodeOutgoingHttpHeaders)(cacheEntry.value.headers);
+            if (!(isMinimalMode && isIsr)) {
+                headers.delete(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.NEXT_CACHE_TAGS_HEADER);
+            }
+            // If cache control is already set on the response we don't
+            // override it to allow users to customize it via next.config
+            if (cacheEntry.cacheControl && !res.getHeader('Cache-Control') && !headers.get('Cache-Control')) {
+                headers.set('Cache-Control', (0,next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__.getCacheControlHeader)(cacheEntry.cacheControl));
+            }
+            await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, // @ts-expect-error - Argument of type 'Buffer<ArrayBufferLike>' is not assignable to parameter of type 'BodyInit | null | undefined'.
+            new Response(cacheEntry.value.body, {
+                headers,
+                status: cacheEntry.value.status || 200
+            }));
+            return;
+        } catch (err) {
+            if (!(err instanceof next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__.NoFallbackError)) {
+                const silenceLog = false;
+                await routeModule.onRequestError(req, err, {
+                    routerKind: 'App Router',
+                    routePath: normalizedSrcPage,
+                    routeType: 'route',
+                    revalidateReason: (0,next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__.getRevalidateReason)({
+                        isStaticGeneration: cacheKey !== null,
+                        isOnDemandRevalidate
+                    })
+                }, silenceLog, routerServerContext);
+            }
+            // rethrow so that we can handle serving error page
+            // If this is during static generation, throw the error again.
+            if (isIsr) throw err;
+            // Otherwise, send a 500 response unless the original response has
+            // already committed. In that case, preserve its status code for
+            // telemetry while still recording the failure and terminating a response
+            // that the failed pipeline left open.
+            if (res.headersSent) {
+                if (currentSpan) {
+                    const error = err instanceof Error ? err : new Error('Unknown app route error');
+                    currentSpan.recordException(error);
+                    currentSpan.setStatus({
+                        code: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanStatusCode.ERROR,
+                        message: error.message
+                    });
+                    currentSpan.setAttribute('error.type', error.name);
+                }
+                if (!res.writableEnded && !res.destroyed) {
+                    res.end();
+                }
+            } else {
+                await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, new Response(null, {
+                    status: 500
+                }));
+            }
+            return;
+        } finally{
+            ;
+            (()=>{
+                if (!currentSpan) {
+                    return;
+                }
+                let statusCode = res.statusCode;
+                currentSpan.setAttributes({
+                    'http.status_code': statusCode,
+                    'next.rsc': false
+                });
+                if (statusCode && statusCode >= 500) {
+                    // For 5xx status codes: SHOULD be set to 'Error' span status.
+                    // x-ref: https://opentelemetry.io/docs/specs/semconv/http/http-spans/#status
+                    currentSpan.setStatus({
+                        code: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanStatusCode.ERROR
+                    });
+                    // For span status 'Error', SHOULD set 'error.type' attribute.
+                    currentSpan.setAttribute('error.type', statusCode.toString());
+                }
+                const rootSpanAttributes = tracer.getRootSpanAttributes();
+                // We were unable to get attributes, probably OTEL is not enabled
+                if (!rootSpanAttributes) {
+                    return;
+                }
+                if (rootSpanAttributes.get('next.span_type') !== next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__.BaseServerSpan.handleRequest) {
+                    console.warn(`Unexpected root span type '${rootSpanAttributes.get('next.span_type')}'. Please report this Next.js issue https://github.com/vercel/next.js`);
+                    return;
+                }
+                const route = rootSpanAttributes.get('next.route') || normalizedSrcPage;
+                const name = `${method} ${route}`;
+                currentSpan.setAttributes({
+                    'next.route': route,
+                    'http.route': route,
+                    'next.span_name': name
+                });
+                currentSpan.updateName(name);
+                // Propagate http.route to the parent span if one exists (e.g.
+                // a platform-created HTTP span in adapter deployments).
+                if (parentSpan && parentSpan !== currentSpan) {
+                    parentSpan.setAttribute('http.route', route);
+                    parentSpan.updateName(name);
+                }
+            })();
+        }
+    };
+    // TODO: activeSpan code path is for when wrapped by
+    // next-server can be removed when this is no longer used
+    if (isWrappedByNextServer && activeSpan) {
+        await handleResponse(activeSpan, undefined);
+    } else {
+        let parentSpan = tracer.getActiveScopeSpan();
+        await tracer.withPropagatedContext(req.headers, ()=>tracer.trace(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__.BaseServerSpan.handleRequest, {
+                spanName: `${method} ${srcPage}`,
+                kind: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanKind.SERVER,
+                attributes: {
+                    'http.method': method,
+                    'http.target': req.url
+                }
+            }, (span)=>handleResponse(span, parentSpan)), undefined, !isWrappedByNextServer);
+    }
+}
-/***/ 80099:
-/***/ ((module) => {
+//# sourceMappingURL=app-route.js.map
-module.exports = require("node:sqlite");
 /***/ }),
-/***/ 80481:
+/***/ 33873:
 /***/ ((module) => {
-module.exports = require("node:readline");
+module.exports = require("path");
 /***/ }),
-/***/ 81630:
+/***/ 37067:
 /***/ ((module) => {
-module.exports = require("http");
+module.exports = require("node:http");
 /***/ }),
-/***/ 86439:
+/***/ 38522:
 /***/ ((module) => {
-module.exports = require("next/dist/shared/lib/no-fallback-error.external");
+module.exports = require("node:zlib");
 /***/ }),
-/***/ 89080:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+/***/ 44708:
+/***/ ((module) => {
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   Ah: () => (/* binding */ updateFlow),
-/* harmony export */   Dd: () => (/* binding */ exchangeCode),
-/* harmony export */   F8: () => (/* binding */ createFlow),
-/* harmony export */   i8: () => (/* binding */ getMicrosoftAccessToken),
-/* harmony export */   jG: () => (/* binding */ resolveMicrosoftAuth),
-/* harmony export */   lv: () => (/* binding */ getFlow),
-/* harmony export */   op: () => (/* binding */ graphPaged),
-/* harmony export */   xj: () => (/* binding */ buildAuthorizeUrl),
-/* harmony export */   z$: () => (/* binding */ graphFetch)
-/* harmony export */ });
-/* unused harmony export MICROSOFT_SCOPES */
-/* harmony import */ var _lib_stores_integrations__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(78228);
-/* harmony import */ var _lib_utils_oauth_flow_store__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(56362);
-/* harmony import */ var _lib_utils_json__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(53638);
-/* harmony import */ var _lib_utils_error__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(22032);
-/* harmony import */ var _lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(22632);
-// Ephemeral state store + shared auth helpers for the in-app Microsoft OAuth
-// flow. Mirrors lib/integrations/gmail-oauth.ts but targets the Microsoft
-// identity platform (v2.0 endpoint, common tenant by default) and Microsoft
-// Graph as the downstream API surface (Outlook Mail + Calendar in v1).
-//
-// The user types client_id + client_secret in the Integrations panel and
-// clicks "Connect Outlook". We POST those to /oauth/start, which stashes
-// them here keyed by a random `state` token and returns the Microsoft
-// authorize URL. The browser opens that URL; MS bounces back to
-// /oauth/callback with `?code&state`, which exchanges the code for a
-// refresh_token (granted because we asked for `offline_access`) and
-// persists the integration. The panel polls /oauth/status separately.
-//
-// Pinned to globalThis so HMR in dev doesn't lose pending flows.
+module.exports = require("node:https");
+/***/ }),
+/***/ 44870:
+/***/ ((module) => {
+module.exports = require("next/dist/compiled/next-server/app-route.runtime.prod.js");
+/***/ }),
-const flowStore = (0,_lib_utils_oauth_flow_store__WEBPACK_IMPORTED_MODULE_1__/* .createOAuthFlowStore */ .R)({
-    globalKey: "__msOauthFlows"
-});
-const createFlow = flowStore.create;
-const getFlow = flowStore.get;
-const updateFlow = flowStore.update;
-// Tenant selector. `common` accepts both personal Microsoft accounts
-// (@outlook.com, @hotmail.com, @live.com) and work/school M365 accounts.
-// Switch to `consumers` to lock to personal only, or `organizations` for
-// work/school only. We expose this as an env override for power users but
-// don't surface it in the UI yet.
-const TENANT = process.env.OUTLOOK_TENANT?.trim() || "common";
-// Delegated Graph scopes the agent needs. Keep narrow:
-//   - offline_access  → required for a refresh_token (MS counterpart of
-//                       Google's access_type=offline).
-//   - User.Read       → used by the test endpoint to call /me.
-//   - Mail.ReadWrite  → search/read mail, create drafts, mark read,
-//                       move to folders (incl. DeletedItems).
-//   - Mail.Send       → send mail when the user explicitly asks for it.
-//   - Calendars.ReadWrite → list/get/create/update/delete events on the
-//                           user's existing calendars.
-//   - Tasks.ReadWrite → list/get/create/update/complete/delete Microsoft
-//                       To Do tasks and lists (ms_todo_* tools).
-//   - People.Read     → resolve "who is X" / frequent contacts via
-//                       /me/people (ms_people_resolve tool).
-const MICROSOFT_SCOPES = [
-    "offline_access",
-    "User.Read",
-    "Mail.ReadWrite",
-    "Mail.Send",
-    "Calendars.ReadWrite",
-    "Tasks.ReadWrite",
-    "People.Read"
-];
-function buildAuthorizeUrl(opts) {
-    const p = new URLSearchParams({
-        client_id: opts.clientId,
-        redirect_uri: opts.redirectUri,
-        response_type: "code",
-        response_mode: "query",
-        scope: MICROSOFT_SCOPES.join(" "),
-        // Force consent so a returning user actually re-grants any newly-added
-        // scope (otherwise MS silently reuses the prior grant minus the new bit).
-        prompt: "consent",
-        state: opts.state
-    });
-    return `https://login.microsoftonline.com/${TENANT}/oauth2/v2.0/authorize?${p.toString()}`;
-}
-// NOTE: Unlike Google, MS v2 endpoint **requires** the `scope` parameter on
-// every grant_type call (both authorization_code and refresh_token). Leaving
-// it out yields `AADSTS900144: The request body must contain the following
-// parameter: 'scope'.`. We always pass the full scope set.
-async function exchangeCode(opts) {
-    const clientId = (0,_lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__/* .sanitizeOAuthInput */ .d)(opts.clientId) ?? "";
-    const clientSecret = (0,_lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__/* .sanitizeOAuthInput */ .d)(opts.clientSecret) ?? "";
-    const body = new URLSearchParams({
-        code: opts.code,
-        client_id: clientId,
-        client_secret: clientSecret,
-        redirect_uri: opts.redirectUri,
-        grant_type: "authorization_code",
-        scope: MICROSOFT_SCOPES.join(" ")
-    });
-    const res = await fetch(`https://login.microsoftonline.com/${TENANT}/oauth2/v2.0/token`, {
-        method: "POST",
-        headers: {
-            "Content-Type": "application/x-www-form-urlencoded"
-        },
-        body: body.toString(),
-        signal: AbortSignal.timeout(30000)
-    });
-    const text = await res.text();
-    const parsed = (0,_lib_utils_json__WEBPACK_IMPORTED_MODULE_3__/* .parseJsonSafe */ .p)(text, {});
-    if (!res.ok) {
-        const err = parsed["error_description"] || parsed["error"] || text || `HTTP ${res.status}`;
-        console.error(`[microsoft-oauth] token exchange rejected (${res.status}): ${err} | client_id ${(0,_lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__/* .secretFingerprint */ .n)(clientId)} | client_secret ${(0,_lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__/* .secretFingerprint */ .n)(clientSecret)}`);
-        throw new Error(err);
-    }
-    return parsed;
-}
-function resolveMicrosoftAuth() {
-    const envId = process.env.OUTLOOK_CLIENT_ID;
-    const envSecret = process.env.OUTLOOK_CLIENT_SECRET;
-    const envRefresh = process.env.OUTLOOK_REFRESH_TOKEN;
-    if (envId && envSecret && envRefresh) {
-        return {
-            client_id: envId,
-            client_secret: envSecret,
-            refresh_token: envRefresh
-        };
-    }
-    const saved = (0,_lib_stores_integrations__WEBPACK_IMPORTED_MODULE_0__/* .getIntegrationRaw */ .$G)("outlook");
-    if (saved?.client_id && saved.client_secret && saved.refresh_token) {
-        return {
-            client_id: saved.client_id,
-            client_secret: saved.client_secret,
-            refresh_token: saved.refresh_token
-        };
-    }
-    return {
-        error: "Microsoft account not connected. Open the gear menu → Integrations tab → " + "Outlook card and click Connect Outlook to authorize Mail, Mail.Send, Calendar, Tasks, and People access."
-    };
-}
-const accessTokenCache = new Map();
-function cacheKey(auth) {
-    return auth.refresh_token.slice(0, 20);
-}
-// Force-evict a cached access token (e.g. after a 401). The next call to
-// getMicrosoftAccessToken will refresh against the v2 token endpoint.
-function bustAccessToken(auth) {
-    accessTokenCache.delete(cacheKey(auth));
-}
-async function getMicrosoftAccessToken(auth) {
-    const key = cacheKey(auth);
-    const cached = accessTokenCache.get(key);
-    if (cached && cached.expires_at > Date.now() + 60000) return cached.token;
-    const body = new URLSearchParams({
-        client_id: auth.client_id,
-        client_secret: auth.client_secret,
-        refresh_token: auth.refresh_token,
-        grant_type: "refresh_token",
-        // Required on the v2 endpoint even for refresh_token grants.
-        scope: MICROSOFT_SCOPES.join(" ")
-    });
-    try {
-        const res = await fetch(`https://login.microsoftonline.com/${TENANT}/oauth2/v2.0/token`, {
-            method: "POST",
-            headers: {
-                "Content-Type": "application/x-www-form-urlencoded"
-            },
-            body: body.toString(),
-            signal: AbortSignal.timeout(30000)
-        });
-        const text = await res.text();
-        if (!res.ok) {
-            accessTokenCache.delete(key);
-            return {
-                error: `Microsoft OAuth refresh failed (${res.status}): ${text.slice(0, 300)}`
-            };
-        }
-        const parsed = JSON.parse(text);
-        if (!parsed.access_token) return {
-            error: "OAuth response missing access_token"
-        };
-        const expires_at = Date.now() + (parsed.expires_in ?? 3000) * 1000;
-        accessTokenCache.set(key, {
-            token: parsed.access_token,
-            expires_at
-        });
-        return parsed.access_token;
-    } catch (err) {
-        return {
-            error: `Microsoft OAuth refresh threw: ${(0,_lib_utils_error__WEBPACK_IMPORTED_MODULE_4__/* .errorMessage */ .g)(err)}`
-        };
-    }
-}
-// Path-prefix → required Graph scope. Used to render helpful 403 messages
-// pointing the user at the exact scope they need to reconnect with.
-const SCOPE_HINTS = [
-    {
-        prefix: "/me/messages",
-        scope: "Mail.ReadWrite"
-    },
-    {
-        prefix: "/me/mailFolders",
-        scope: "Mail.ReadWrite"
-    },
-    {
-        prefix: "/me/sendMail",
-        scope: "Mail.Send"
-    },
-    {
-        prefix: "/me/events",
-        scope: "Calendars.ReadWrite"
-    },
-    {
-        prefix: "/me/calendar",
-        scope: "Calendars.ReadWrite"
-    },
-    {
-        prefix: "/me/calendars",
-        scope: "Calendars.ReadWrite"
-    },
-    {
-        prefix: "/me/todo",
-        scope: "Tasks.ReadWrite"
-    },
-    {
-        prefix: "/me/people",
-        scope: "People.Read"
-    },
-    {
-        prefix: "/me/contacts",
-        scope: "Contacts.Read"
-    },
-    {
-        prefix: "/me/drive",
-        scope: "Files.Read"
-    },
-    {
-        prefix: "/me/insights",
-        scope: "Sites.Read.All"
-    },
-    {
-        prefix: "/search/query",
-        scope: "Mail.Read Files.Read.All"
-    },
-    {
-        prefix: "/me",
-        scope: "User.Read"
-    }
-];
-function scopeHintFor(path) {
-    const p = path.startsWith("http") ? new URL(path).pathname.replace(/^\/v1\.0/, "") : path;
-    for (const { prefix, scope } of SCOPE_HINTS){
-        if (p.startsWith(prefix)) return scope;
+/***/ 48161:
+/***/ ((module) => {
+module.exports = require("node:os");
+/***/ }),
+/***/ 51455:
+/***/ ((module) => {
+module.exports = require("node:fs/promises");
+/***/ }),
+/***/ 53638:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   p: () => (/* binding */ parseJsonSafe)
+/* harmony export */ });
+// JSON.parse with a fallback value when the input is malformed (or empty).
+// Used everywhere we read responses from external APIs — they're contractually
+// JSON but a transient 502 / proxy interstitial occasionally returns HTML.
+function parseJsonSafe(text, fallback) {
+    try {
+        return JSON.parse(text);
+    } catch  {
+        return fallback;
     }
-    return null;
-}
-function parseRetryAfter(headerVal) {
-    if (!headerVal) return 0;
-    const secs = Number.parseInt(headerVal, 10);
-    if (Number.isFinite(secs) && secs >= 0) return Math.min(secs, 30) * 1000;
-    const ts = Date.parse(headerVal);
-    if (!Number.isNaN(ts)) return Math.max(0, Math.min(ts - Date.now(), 30000));
-    return 0;
-}
-function backoffFor(attempt) {
-    return Math.min(500 * 2 ** attempt, 4000);
 }
-// Shared Graph fetch helper. Used by lib/tools/outlook.ts,
-// lib/tools/outlook-calendar.ts, lib/tools/ms-todo.ts, lib/tools/ms-graph.ts.
-// Returns parsed JSON or { error: string, url? }. 204 No Content returns
-// { ok: true }.
+/***/ }),
+/***/ 55511:
+/***/ ((module) => {
+module.exports = require("crypto");
+/***/ }),
+/***/ 55591:
+/***/ ((module) => {
+module.exports = require("https");
+/***/ }),
+/***/ 56362:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   R: () => (/* binding */ createOAuthFlowStore)
+/* harmony export */ });
+/* harmony import */ var node_crypto__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(77598);
+/* harmony import */ var node_crypto__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(node_crypto__WEBPACK_IMPORTED_MODULE_0__);
+/* harmony import */ var _lib_utils_global_state__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(15559);
+// Ephemeral state store for in-app OAuth flows (Gmail, Microsoft, ...).
 //
-// Built-in resilience:
-//   - 401 Unauthorized → drop the cached access token and retry once with a
-//     freshly refreshed one (covers token-revoked-mid-cache edge cases).
-//   - 429 / 503 → honour the `Retry-After` header (capped at 30s) or fall
-//     back to exponential backoff. Retries up to 3 times.
-//   - 403 Forbidden → surface a scope hint ("reconnect with X") so the
-//     operator knows what to grant.
-async function graphFetch(auth, path, init) {
-    const url = path.startsWith("http") ? path : `https://graph.microsoft.com/v1.0${path}`;
-    let attempt = 0;
-    let triedReauth = false;
-    while(true){
-        const token = await getMicrosoftAccessToken(auth);
-        if (typeof token !== "string") return token;
-        let res;
-        try {
-            res = await fetch(url, {
-                ...init,
-                headers: {
-                    Authorization: `Bearer ${token}`,
-                    Accept: "application/json",
-                    "Content-Type": "application/json",
-                    ...init?.headers ?? {}
-                },
-                signal: AbortSignal.timeout(30000)
-            });
-        } catch (err) {
-            return {
-                error: `Graph fetch threw: ${(0,_lib_utils_error__WEBPACK_IMPORTED_MODULE_4__/* .errorMessage */ .g)(err)}`,
-                url
-            };
-        }
-        if (res.status === 204) return {
-            ok: true
-        };
-        if (res.status === 401 && !triedReauth) {
-            triedReauth = true;
-            bustAccessToken(auth);
-            continue;
+// Why this exists: the user types client_id + client_secret in the
+// Integrations panel, we POST to /oauth/start, stash them here keyed by a
+// random `state`, and return the provider's authorize URL. The browser
+// bounces back to /oauth/callback with `?code&state`, we exchange, and
+// persist the integration. Meanwhile the panel polls /oauth/status.
+//
+// Pinned to globalThis so HMR in dev doesn't lose pending flows.
+//
+// Same shape used by both gmail-oauth.ts and microsoft-oauth.ts — pass a
+// unique `globalKey` per provider so they don't share a Map.
+const DEFAULT_TTL_MS = 10 * 60 * 1000;
+const DEFAULT_MAX_FLOWS = 32;
+function createOAuthFlowStore(opts) {
+    const ttlMs = opts.ttlMs ?? DEFAULT_TTL_MS;
+    const maxFlows = opts.maxFlows ?? DEFAULT_MAX_FLOWS;
+    const flows = (0,_lib_utils_global_state__WEBPACK_IMPORTED_MODULE_1__/* .getOrCreateGlobal */ .X)(opts.globalKey, ()=>new Map());
+    function gc() {
+        const now = Date.now();
+        for (const [k, v] of flows){
+            if (now - v.createdAt > ttlMs) flows.delete(k);
         }
-        if ((res.status === 429 || res.status === 503) && attempt < 3) {
-            const waitMs = parseRetryAfter(res.headers.get("Retry-After")) ?? backoffFor(attempt);
-            attempt += 1;
-            await new Promise((r)=>setTimeout(r, waitMs));
-            continue;
+        // Hard cap so a stuck UI can't grow this unbounded.
+        if (flows.size > maxFlows) {
+            const oldest = [
+                ...flows.entries()
+            ].sort((a, b)=>a[1].createdAt - b[1].createdAt);
+            for(let i = 0; i < oldest.length - maxFlows; i++)flows.delete(oldest[i][0]);
         }
-        const text = await res.text();
-        if (!res.ok) {
-            let msg = `Graph ${res.status}: ${text.slice(0, 500)}`;
-            if (res.status === 403) {
-                const hint = scopeHintFor(path);
-                if (hint) {
-                    msg += ` — reconnect the Microsoft integration with scope: ${hint}`;
-                }
-            }
+    }
+    return {
+        create (input) {
+            gc();
+            const state = (0,node_crypto__WEBPACK_IMPORTED_MODULE_0__.randomBytes)(16).toString("hex");
+            const flow = {
+                createdAt: Date.now(),
+                status: "pending",
+                ...input
+            };
+            flows.set(state, flow);
             return {
-                error: msg,
-                url
+                state,
+                flow
             };
+        },
+        get (state) {
+            gc();
+            return flows.get(state);
+        },
+        update (state, patch) {
+            const f = flows.get(state);
+            if (f) Object.assign(f, patch);
+        },
+        delete (state) {
+            flows.delete(state);
         }
-        try {
-            return JSON.parse(text);
-        } catch  {
-            return text;
-        }
-    }
-}
-// Follow @odata.nextLink across pages and concatenate `value` arrays.
-// Stops at `maxPages` (default 5) to bound context cost. Returns the same
-// shape as graphFetch (object with `.value`) but with the merged array, or
-// the original error shape if any page errored.
-async function graphPaged(auth, path, opts) {
-    const maxPages = opts?.maxPages ?? 5;
-    let current = path;
-    const merged = [];
-    let pages = 0;
-    while(current && pages < maxPages){
-        const page = await graphFetch(auth, current, opts?.init);
-        if (page && typeof page === "object" && "error" in page) return page;
-        const body = page;
-        if (Array.isArray(body.value)) merged.push(...body.value);
-        current = typeof body["@odata.nextLink"] === "string" ? body["@odata.nextLink"] : null;
-        pages += 1;
-    }
-    return {
-        value: merged,
-        pages
     };
 }
 /***/ }),
-/***/ 94735:
+/***/ 57075:
 /***/ ((module) => {
-module.exports = require("events");
+module.exports = require("node:stream");
+/***/ }),
+/***/ 57975:
+/***/ ((module) => {
+module.exports = require("node:util");
+/***/ }),
+/***/ 63033:
+/***/ ((module) => {
+module.exports = require("next/dist/server/app-render/work-unit-async-storage.external.js");
+/***/ }),
+/***/ 73024:
+/***/ ((module) => {
+module.exports = require("node:fs");
+/***/ }),
+/***/ 75919:
+/***/ ((module) => {
+module.exports = require("node:worker_threads");
+/***/ }),
+/***/ 76760:
+/***/ ((module) => {
+module.exports = require("node:path");
+/***/ }),
+/***/ 77598:
+/***/ ((module) => {
+module.exports = require("node:crypto");
+/***/ }),
+/***/ 79428:
+/***/ ((module) => {
+module.exports = require("buffer");
 /***/ }),
-/***/ 97937:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-__webpack_require__.r(__webpack_exports__);
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   handler: () => (/* binding */ handler),
-/* harmony export */   patchFetch: () => (/* binding */ patchFetch),
-/* harmony export */   routeModule: () => (/* binding */ routeModule),
-/* harmony export */   serverHooks: () => (/* binding */ serverHooks),
-/* harmony export */   workAsyncStorage: () => (/* binding */ workAsyncStorage),
-/* harmony export */   workUnitAsyncStorage: () => (/* binding */ workUnitAsyncStorage)
-/* harmony export */ });
-/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(19225);
-/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__);
-/* harmony import */ var next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(84006);
-/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(8317);
-/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__);
-/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(99373);
-/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__);
-/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(34775);
-/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__);
-/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(24235);
-/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__);
-/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(261);
-/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__);
-/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(54365);
-/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__);
-/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(90771);
-/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__);
-/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(73461);
-/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__);
-/* harmony import */ var next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(67798);
-/* harmony import */ var next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(92280);
-/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(62018);
-/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__);
-/* harmony import */ var next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(45696);
-/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__ = __webpack_require__(47929);
-/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14___default = /*#__PURE__*/__webpack_require__.n(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__);
-/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__ = __webpack_require__(86439);
-/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__);
-/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(10246);
-/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__);
-/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(37527);
-/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__);
+/***/ 80099:
+/***/ ((module) => {
+module.exports = require("node:sqlite");
+/***/ }),
+/***/ 80481:
+/***/ ((module) => {
+module.exports = require("node:readline");
+/***/ }),
+/***/ 81630:
+/***/ ((module) => {
+module.exports = require("http");
+/***/ }),
+/***/ 86439:
+/***/ ((module) => {
+module.exports = require("next/dist/shared/lib/no-fallback-error.external");
+/***/ }),
+/***/ 89080:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   Ah: () => (/* binding */ updateFlow),
+/* harmony export */   Dd: () => (/* binding */ exchangeCode),
+/* harmony export */   F8: () => (/* binding */ createFlow),
+/* harmony export */   i8: () => (/* binding */ getMicrosoftAccessToken),
+/* harmony export */   jG: () => (/* binding */ resolveMicrosoftAuth),
+/* harmony export */   lv: () => (/* binding */ getFlow),
+/* harmony export */   op: () => (/* binding */ graphPaged),
+/* harmony export */   xj: () => (/* binding */ buildAuthorizeUrl),
+/* harmony export */   z$: () => (/* binding */ graphFetch)
+/* harmony export */ });
+/* unused harmony export MICROSOFT_SCOPES */
+/* harmony import */ var _lib_stores_integrations__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(78228);
+/* harmony import */ var _lib_utils_oauth_flow_store__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(56362);
+/* harmony import */ var _lib_utils_json__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(53638);
+/* harmony import */ var _lib_utils_error__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(22032);
+/* harmony import */ var _lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(22632);
+// Ephemeral state store + shared auth helpers for the in-app Microsoft OAuth
+// flow. Mirrors lib/integrations/gmail-oauth.ts but targets the Microsoft
+// identity platform (v2.0 endpoint, common tenant by default) and Microsoft
+// Graph as the downstream API surface (Outlook Mail + Calendar in v1).
+//
+// The user types client_id + client_secret in the Integrations panel and
+// clicks "Connect Outlook". We POST those to /oauth/start, which stashes
+// them here keyed by a random `state` token and returns the Microsoft
+// authorize URL. The browser opens that URL; MS bounces back to
+// /oauth/callback with `?code&state`, which exchanges the code for a
+// refresh_token (granted because we asked for `offline_access`) and
+// persists the integration. The panel polls /oauth/status separately.
+//
+// Pinned to globalThis so HMR in dev doesn't lose pending flows.
-// We inject the nextConfigOutput here so that we can use them in the route
-// module.
-const nextConfigOutput = "standalone"
-const routeModule = new next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__.AppRouteRouteModule({
-    definition: {
-        kind: next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__.RouteKind.APP_ROUTE,
-        page: "/api/v1/integrations/outlook/oauth/status/route",
-        pathname: "/api/v1/integrations/outlook/oauth/status",
-        filename: "route",
-        bundlePath: "app/api/v1/integrations/outlook/oauth/status/route"
-    },
-    distDir: ".next" || 0,
-    relativeProjectDir:  false || '',
-    resolvedPagePath: "/home/runner/work/jarela/jarela/app/api/v1/integrations/outlook/oauth/status/route.ts",
-    nextConfigOutput,
-    // The lazy require factory ensures that:
-    // - In dev: devRequestTimingInternalsEnd is set before userland executes,
-    //   correctly attributing module load time to application-code rather than
-    //   framework internals.
-    // - In all modes: async modules (route files with top-level await) are
-    //   handled correctly — require() returns a Promise for such modules, which
-    //   ensureUserland() awaits before the first request is handled.
-    userland: ()=>__webpack_require__(7161),
-    // In Turbopack dev mode, also provide a synchronous per-request getter so
-    // server HMR updates are picked up without re-executing the entry chunk.
-    // Using require() (synchronous) avoids adding async overhead that would be
-    // incorrectly attributed to application-code time in devRequestTiming.
-    ... false ? 0 : {}
+const flowStore = (0,_lib_utils_oauth_flow_store__WEBPACK_IMPORTED_MODULE_1__/* .createOAuthFlowStore */ .R)({
+    globalKey: "__msOauthFlows"
 });
-// Pull out the exports that we need to expose from the module. This should
-// be eliminated when we've moved the other routes to the new format. These
-// are used to hook into the route.
-const { workAsyncStorage, workUnitAsyncStorage, serverHooks } = routeModule;
-function patchFetch() {
-    return (0,next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__.patchFetch)({
-        workAsyncStorage,
-        workUnitAsyncStorage
+const createFlow = flowStore.create;
+const getFlow = flowStore.get;
+const updateFlow = flowStore.update;
+// Tenant selector. `common` accepts both personal Microsoft accounts
+// (@outlook.com, @hotmail.com, @live.com) and work/school M365 accounts.
+// Switch to `consumers` to lock to personal only, or `organizations` for
+// work/school only. We expose this as an env override for power users but
+// don't surface it in the UI yet.
+const TENANT = process.env.OUTLOOK_TENANT?.trim() || "common";
+// Delegated Graph scopes the agent needs. Keep narrow:
+//   - offline_access  → required for a refresh_token (MS counterpart of
+//                       Google's access_type=offline).
+//   - User.Read       → used by the test endpoint to call /me.
+//   - Mail.ReadWrite  → search/read mail, create drafts, mark read,
+//                       move to folders (incl. DeletedItems).
+//   - Mail.Send       → send mail when the user explicitly asks for it.
+//   - Calendars.ReadWrite → list/get/create/update/delete events on the
+//                           user's existing calendars.
+//   - Tasks.ReadWrite → list/get/create/update/complete/delete Microsoft
+//                       To Do tasks and lists (ms_todo_* tools).
+//   - People.Read     → resolve "who is X" / frequent contacts via
+//                       /me/people (ms_people_resolve tool).
+const MICROSOFT_SCOPES = [
+    "offline_access",
+    "User.Read",
+    "Mail.ReadWrite",
+    "Mail.Send",
+    "Calendars.ReadWrite",
+    "Tasks.ReadWrite",
+    "People.Read"
+];
+function buildAuthorizeUrl(opts) {
+    const p = new URLSearchParams({
+        client_id: opts.clientId,
+        redirect_uri: opts.redirectUri,
+        response_type: "code",
+        response_mode: "query",
+        scope: MICROSOFT_SCOPES.join(" "),
+        // Force consent so a returning user actually re-grants any newly-added
+        // scope (otherwise MS silently reuses the prior grant minus the new bit).
+        prompt: "consent",
+        state: opts.state
     });
+    return `https://login.microsoftonline.com/${TENANT}/oauth2/v2.0/authorize?${p.toString()}`;
 }
-async function handler(req, res, ctx) {
-    if (ctx.requestMeta) {
-        (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.setRequestMeta)(req, ctx.requestMeta);
-    }
-    if (routeModule.isDev) {
-        (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.addRequestMeta)(req, 'devRequestTimingInternalsEnd', process.hrtime.bigint());
-    }
-    let srcPage = "/api/v1/integrations/outlook/oauth/status/route";
-    // turbopack doesn't normalize `/index` in the page name
-    // so we need to to process dynamic routes properly
-    // TODO: fix turbopack providing differing value from webpack
-    if (false) {} else if (srcPage === '/index') {
-        // we always normalize /index specifically
-        srcPage = '/';
-    }
-    const multiZoneDraftMode = false;
-    const prepareResult = await routeModule.prepare(req, res, {
-        srcPage,
-        multiZoneDraftMode
+// NOTE: Unlike Google, MS v2 endpoint **requires** the `scope` parameter on
+// every grant_type call (both authorization_code and refresh_token). Leaving
+// it out yields `AADSTS900144: The request body must contain the following
+// parameter: 'scope'.`. We always pass the full scope set.
+async function exchangeCode(opts) {
+    const clientId = (0,_lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__/* .sanitizeOAuthInput */ .d)(opts.clientId) ?? "";
+    const clientSecret = (0,_lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__/* .sanitizeOAuthInput */ .d)(opts.clientSecret) ?? "";
+    const body = new URLSearchParams({
+        code: opts.code,
+        client_id: clientId,
+        client_secret: clientSecret,
+        redirect_uri: opts.redirectUri,
+        grant_type: "authorization_code",
+        scope: MICROSOFT_SCOPES.join(" ")
     });
-    if (!prepareResult) {
-        res.statusCode = 400;
-        res.end('Bad Request');
-        ctx.waitUntil == null ? void 0 : ctx.waitUntil.call(ctx, Promise.resolve());
-        return null;
-    }
-    const { buildId, deploymentId, params, nextConfig, parsedUrl, isDraftMode, prerenderManifest, routerServerContext, isOnDemandRevalidate, revalidateOnlyGenerated, resolvedPathname, clientReferenceManifest, serverActionsManifest, previewProps } = prepareResult;
-    const normalizedSrcPage = (0,next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__.normalizeAppPath)(srcPage);
-    // Only this route's prerenders can establish ISR or admit generated params.
-    const isPrerendered = Boolean(prerenderManifest.routes[resolvedPathname]) && (routeModule.isDev || (0,next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__.isRouteCacheOwner)(resolvedPathname, routeModule.cacheOwner, prerenderManifest.routes[resolvedPathname]));
-    let isIsr = Boolean(prerenderManifest.dynamicRoutes[normalizedSrcPage] || isPrerendered);
-    const render404 = async ()=>{
-        // TODO: should route-module itself handle rendering the 404
-        if (routerServerContext == null ? void 0 : routerServerContext.render404) {
-            await routerServerContext.render404(req, res, parsedUrl, false);
-        } else {
-            res.end('This page could not be found');
-        }
-        return null;
-    };
-    if (isIsr && !isDraftMode) {
-        const prerenderInfo = prerenderManifest.dynamicRoutes[normalizedSrcPage];
-        if (prerenderInfo) {
-            if (prerenderInfo.fallback === false && !isPrerendered) {
-                if (nextConfig.adapterPath) {
-                    return await render404();
-                }
-                throw new next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__.NoFallbackError();
-            }
-        }
-    }
-    let cacheKey = null;
-    if (isIsr && !routeModule.isDev && !isDraftMode) {
-        cacheKey = resolvedPathname;
-        // ensure /index and / is normalized to one key
-        cacheKey = cacheKey === '/index' ? '/' : cacheKey;
+    const res = await fetch(`https://login.microsoftonline.com/${TENANT}/oauth2/v2.0/token`, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/x-www-form-urlencoded"
+        },
+        body: body.toString(),
+        signal: AbortSignal.timeout(30000)
+    });
+    const text = await res.text();
+    const parsed = (0,_lib_utils_json__WEBPACK_IMPORTED_MODULE_3__/* .parseJsonSafe */ .p)(text, {});
+    if (!res.ok) {
+        const err = parsed["error_description"] || parsed["error"] || text || `HTTP ${res.status}`;
+        console.error(`[microsoft-oauth] token exchange rejected (${res.status}): ${err} | client_id ${(0,_lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__/* .secretFingerprint */ .n)(clientId)} | client_secret ${(0,_lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__/* .secretFingerprint */ .n)(clientSecret)}`);
+        throw new Error(err);
     }
-    // Before rendering (which initializes component tree modules), we have to
-    // set the reference manifests to our global store so Server Action's
-    // encryption util can access to them at the top level of the page module.
-    if (serverActionsManifest && clientReferenceManifest) {
-        (0,next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__.setManifestsSingleton)({
-            page: srcPage,
-            clientReferenceManifest,
-            serverActionsManifest
-        });
+    return parsed;
+}
+function resolveMicrosoftAuth() {
+    const envId = process.env.OUTLOOK_CLIENT_ID;
+    const envSecret = process.env.OUTLOOK_CLIENT_SECRET;
+    const envRefresh = process.env.OUTLOOK_REFRESH_TOKEN;
+    if (envId && envSecret && envRefresh) {
+        return {
+            client_id: envId,
+            client_secret: envSecret,
+            refresh_token: envRefresh
+        };
     }
-    const method = req.method || 'GET';
-    const tracer = (0,next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.getTracer)();
-    const activeSpan = tracer.getActiveScopeSpan();
-    const isWrappedByNextServer = Boolean(routerServerContext == null ? void 0 : routerServerContext.isWrappedByNextServer);
-    const isMinimalMode = Boolean((0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'minimalMode'));
-    const incrementalCache = (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'incrementalCache') || await routeModule.getIncrementalCache(req, nextConfig, previewProps, prerenderManifest, isMinimalMode);
-    incrementalCache == null ? void 0 : incrementalCache.resetRequestCache();
-    globalThis.__incrementalCache = incrementalCache;
-    const context = {
-        params,
-        previewProps,
-        renderOpts: {
-            experimental: {
-                authInterrupts: Boolean(nextConfig.experimental.authInterrupts),
-                useCacheTimeout: nextConfig.experimental.useCacheTimeout,
-                durableUseCacheEntries: Boolean(nextConfig.experimental.durableUseCacheEntries)
-            },
-            cacheComponents: Boolean(nextConfig.cacheComponents),
-            validationLevel: nextConfig.experimental.instantInsights.validationLevel,
-            isDraftMode,
-            incrementalCache,
-            hmrRefreshHash: (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'hmrRefreshHash'),
-            cacheLifeProfiles: nextConfig.cacheLife,
-            staticPageGenerationTimeout: nextConfig.staticPageGenerationTimeout,
-            waitUntil: ctx.waitUntil,
-            onClose: (cb)=>{
-                res.on('close', cb);
-            },
-            onAfterTaskError: undefined
-        },
-        sharedContext: {
-            buildId,
-            deploymentId
-        }
+    const saved = (0,_lib_stores_integrations__WEBPACK_IMPORTED_MODULE_0__/* .getIntegrationRaw */ .$G)("outlook");
+    if (saved?.client_id && saved.client_secret && saved.refresh_token) {
+        return {
+            client_id: saved.client_id,
+            client_secret: saved.client_secret,
+            refresh_token: saved.refresh_token
+        };
+    }
+    return {
+        error: "Microsoft account not connected. Open the gear menu → Integrations tab → " + "Outlook card and click Connect Outlook to authorize Mail, Mail.Send, Calendar, Tasks, and People access."
     };
-    const nodeNextReq = new next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__.NodeNextRequest(req);
-    const nodeNextRes = new next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__.NodeNextResponse(res);
-    const nextReq = next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__.NextRequestAdapter.fromNodeNextRequest(nodeNextReq, (0,next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__.signalFromNodeResponse)(res));
-    const responseGenerator = async ({ previousCacheEntry })=>{
-        try {
-            if (!isMinimalMode && isOnDemandRevalidate && revalidateOnlyGenerated && !previousCacheEntry) {
-                res.statusCode = 404;
-                // on-demand revalidate always sets this header
-                res.setHeader('x-nextjs-cache', 'REVALIDATED');
-                res.end('This page could not be found');
-                return null;
-            }
-            const response = cacheKey === null ? await routeModule.handle(nextReq, context) : await routeModule.prerender(nextReq, context);
-            req.fetchMetrics = context.renderOpts.fetchMetrics;
-            let pendingWaitUntil = context.renderOpts.pendingWaitUntil;
-            // Attempt using provided waitUntil if available
-            // if it's not we fallback to sendResponse's handling
-            if (pendingWaitUntil) {
-                if (ctx.waitUntil) {
-                    ctx.waitUntil(pendingWaitUntil);
-                    pendingWaitUntil = undefined;
-                }
-            }
-            const cacheTags = context.renderOpts.collectedTags;
-            // If the request is for a static response, we can cache it so long
-            // as it's not edge.
-            if (isIsr) {
-                const blob = await response.blob();
-                // Copy the headers from the response.
-                const headers = (0,next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__.toNodeOutgoingHttpHeaders)(response.headers);
-                if (cacheTags) {
-                    headers[next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.NEXT_CACHE_TAGS_HEADER] = cacheTags;
-                }
-                if (!headers['content-type'] && blob.type) {
-                    headers['content-type'] = blob.type;
-                }
-                const revalidate = typeof context.renderOpts.collectedRevalidate === 'undefined' || context.renderOpts.collectedRevalidate >= next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.INFINITE_CACHE ? false : context.renderOpts.collectedRevalidate;
-                const expire = typeof context.renderOpts.collectedExpire === 'undefined' || context.renderOpts.collectedExpire >= next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.INFINITE_CACHE ? // route has a numeric `revalidate` but didn't declare an
-                // explicit `expire` (e.g. via `cacheLife`). This mirrors the
-                // build-time fallback in `build/index.ts` so cache entries
-                // and the response Cache-Control header agree on the route's
-                // effective expire. Routes that opt out of revalidation
-                // (`revalidate: false`) or that are dynamic (`revalidate: 0`)
-                // keep `expire: undefined`.
-                revalidate !== false && revalidate > 0 ? nextConfig.expireTime : undefined : context.renderOpts.collectedExpire;
-                // Create the cache entry for the response.
-                const cacheEntry = {
-                    value: {
-                        kind: next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__.CachedRouteKind.APP_ROUTE,
-                        status: response.status,
-                        body: Buffer.from(await blob.arrayBuffer()),
-                        headers
-                    },
-                    cacheControl: {
-                        revalidate,
-                        expire
-                    }
-                };
-                return cacheEntry;
-            } else {
-                // send response without caching if not ISR
-                await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, response, pendingWaitUntil);
-                return null;
-            }
-        } catch (err) {
-            // if this is a background revalidate we need to report
-            // the request error here as it won't be bubbled
-            if (previousCacheEntry == null ? void 0 : previousCacheEntry.isStale) {
-                const silenceLog = false;
-                await routeModule.onRequestError(req, err, {
-                    routerKind: 'App Router',
-                    routePath: srcPage,
-                    routeType: 'route',
-                    revalidateReason: (0,next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__.getRevalidateReason)({
-                        isStaticGeneration: cacheKey !== null,
-                        isOnDemandRevalidate
-                    })
-                }, silenceLog, routerServerContext);
-            }
-            throw err;
+}
+const accessTokenCache = new Map();
+function cacheKey(auth) {
+    return auth.refresh_token.slice(0, 20);
+}
+// Force-evict a cached access token (e.g. after a 401). The next call to
+// getMicrosoftAccessToken will refresh against the v2 token endpoint.
+function bustAccessToken(auth) {
+    accessTokenCache.delete(cacheKey(auth));
+}
+async function getMicrosoftAccessToken(auth) {
+    const key = cacheKey(auth);
+    const cached = accessTokenCache.get(key);
+    if (cached && cached.expires_at > Date.now() + 60000) return cached.token;
+    const body = new URLSearchParams({
+        client_id: auth.client_id,
+        client_secret: auth.client_secret,
+        refresh_token: auth.refresh_token,
+        grant_type: "refresh_token",
+        // Required on the v2 endpoint even for refresh_token grants.
+        scope: MICROSOFT_SCOPES.join(" ")
+    });
+    try {
+        const res = await fetch(`https://login.microsoftonline.com/${TENANT}/oauth2/v2.0/token`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/x-www-form-urlencoded"
+            },
+            body: body.toString(),
+            signal: AbortSignal.timeout(30000)
+        });
+        const text = await res.text();
+        if (!res.ok) {
+            accessTokenCache.delete(key);
+            return {
+                error: `Microsoft OAuth refresh failed (${res.status}): ${text.slice(0, 300)}`
+            };
         }
-    };
-    const handleResponse = async (currentSpan, parentSpan)=>{
+        const parsed = JSON.parse(text);
+        if (!parsed.access_token) return {
+            error: "OAuth response missing access_token"
+        };
+        const expires_at = Date.now() + (parsed.expires_in ?? 3000) * 1000;
+        accessTokenCache.set(key, {
+            token: parsed.access_token,
+            expires_at
+        });
+        return parsed.access_token;
+    } catch (err) {
+        return {
+            error: `Microsoft OAuth refresh threw: ${(0,_lib_utils_error__WEBPACK_IMPORTED_MODULE_4__/* .errorMessage */ .g)(err)}`
+        };
+    }
+}
+// Path-prefix → required Graph scope. Used to render helpful 403 messages
+// pointing the user at the exact scope they need to reconnect with.
+const SCOPE_HINTS = [
+    {
+        prefix: "/me/messages",
+        scope: "Mail.ReadWrite"
+    },
+    {
+        prefix: "/me/mailFolders",
+        scope: "Mail.ReadWrite"
+    },
+    {
+        prefix: "/me/sendMail",
+        scope: "Mail.Send"
+    },
+    {
+        prefix: "/me/events",
+        scope: "Calendars.ReadWrite"
+    },
+    {
+        prefix: "/me/calendar",
+        scope: "Calendars.ReadWrite"
+    },
+    {
+        prefix: "/me/calendars",
+        scope: "Calendars.ReadWrite"
+    },
+    {
+        prefix: "/me/todo",
+        scope: "Tasks.ReadWrite"
+    },
+    {
+        prefix: "/me/people",
+        scope: "People.Read"
+    },
+    {
+        prefix: "/me/contacts",
+        scope: "Contacts.Read"
+    },
+    {
+        prefix: "/me/drive",
+        scope: "Files.Read"
+    },
+    {
+        prefix: "/me/insights",
+        scope: "Sites.Read.All"
+    },
+    {
+        prefix: "/search/query",
+        scope: "Mail.Read Files.Read.All"
+    },
+    {
+        prefix: "/me",
+        scope: "User.Read"
+    }
+];
+function scopeHintFor(path) {
+    const p = path.startsWith("http") ? new URL(path).pathname.replace(/^\/v1\.0/, "") : path;
+    for (const { prefix, scope } of SCOPE_HINTS){
+        if (p.startsWith(prefix)) return scope;
+    }
+    return null;
+}
+function parseRetryAfter(headerVal) {
+    if (!headerVal) return 0;
+    const secs = Number.parseInt(headerVal, 10);
+    if (Number.isFinite(secs) && secs >= 0) return Math.min(secs, 30) * 1000;
+    const ts = Date.parse(headerVal);
+    if (!Number.isNaN(ts)) return Math.max(0, Math.min(ts - Date.now(), 30000));
+    return 0;
+}
+function backoffFor(attempt) {
+    return Math.min(500 * 2 ** attempt, 4000);
+}
+// Shared Graph fetch helper. Used by lib/tools/outlook.ts,
+// lib/tools/outlook-calendar.ts, lib/tools/ms-todo.ts, lib/tools/ms-graph.ts.
+// Returns parsed JSON or { error: string, url? }. 204 No Content returns
+// { ok: true }.
+//
+// Built-in resilience:
+//   - 401 Unauthorized → drop the cached access token and retry once with a
+//     freshly refreshed one (covers token-revoked-mid-cache edge cases).
+//   - 429 / 503 → honour the `Retry-After` header (capped at 30s) or fall
+//     back to exponential backoff. Retries up to 3 times.
+//   - 403 Forbidden → surface a scope hint ("reconnect with X") so the
+//     operator knows what to grant.
+async function graphFetch(auth, path, init) {
+    const url = path.startsWith("http") ? path : `https://graph.microsoft.com/v1.0${path}`;
+    let attempt = 0;
+    let triedReauth = false;
+    while(true){
+        const token = await getMicrosoftAccessToken(auth);
+        if (typeof token !== "string") return token;
+        let res;
         try {
-            var _cacheEntry_value;
-            const cacheEntry = await routeModule.handleResponse({
-                req,
-                nextConfig,
-                cacheKey,
-                routeKind: next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__.RouteKind.APP_ROUTE,
-                isFallback: false,
-                previewProps,
-                prerenderManifest,
-                isRoutePPREnabled: false,
-                isOnDemandRevalidate,
-                revalidateOnlyGenerated,
-                responseGenerator,
-                waitUntil: ctx.waitUntil,
-                isMinimalMode
+            res = await fetch(url, {
+                ...init,
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                    Accept: "application/json",
+                    "Content-Type": "application/json",
+                    ...init?.headers ?? {}
+                },
+                signal: AbortSignal.timeout(30000)
             });
-            if (cacheEntry !== null && 'error' in cacheEntry) {
-                throw cacheEntry.error;
-            }
-            // we don't create a cacheEntry for ISR
-            if (!isIsr) {
-                return;
-            }
-            if ((cacheEntry == null ? void 0 : (_cacheEntry_value = cacheEntry.value) == null ? void 0 : _cacheEntry_value.kind) !== next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__.CachedRouteKind.APP_ROUTE) {
-                var _cacheEntry_value1;
-                throw new Error(`Invariant: app-route received invalid cache entry ${cacheEntry == null ? void 0 : (_cacheEntry_value1 = cacheEntry.value) == null ? void 0 : _cacheEntry_value1.kind}`);
-            }
-            if (!isMinimalMode) {
-                res.setHeader('x-nextjs-cache', isOnDemandRevalidate ? 'REVALIDATED' : cacheEntry.isMiss ? 'MISS' : cacheEntry.isStale ? 'STALE' : 'HIT');
-            }
-            // Draft mode should never be cached
-            if (isDraftMode) {
-                res.setHeader('Cache-Control', 'private, no-cache, no-store, max-age=0, must-revalidate');
-            }
-            const headers = (0,next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__.fromNodeOutgoingHttpHeaders)(cacheEntry.value.headers);
-            if (!(isMinimalMode && isIsr)) {
-                headers.delete(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.NEXT_CACHE_TAGS_HEADER);
-            }
-            // If cache control is already set on the response we don't
-            // override it to allow users to customize it via next.config
-            if (cacheEntry.cacheControl && !res.getHeader('Cache-Control') && !headers.get('Cache-Control')) {
-                headers.set('Cache-Control', (0,next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__.getCacheControlHeader)(cacheEntry.cacheControl));
-            }
-            await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, // @ts-expect-error - Argument of type 'Buffer<ArrayBufferLike>' is not assignable to parameter of type 'BodyInit | null | undefined'.
-            new Response(cacheEntry.value.body, {
-                headers,
-                status: cacheEntry.value.status || 200
-            }));
-            return;
         } catch (err) {
-            if (!(err instanceof next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__.NoFallbackError)) {
-                const silenceLog = false;
-                await routeModule.onRequestError(req, err, {
-                    routerKind: 'App Router',
-                    routePath: normalizedSrcPage,
-                    routeType: 'route',
-                    revalidateReason: (0,next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__.getRevalidateReason)({
-                        isStaticGeneration: cacheKey !== null,
-                        isOnDemandRevalidate
-                    })
-                }, silenceLog, routerServerContext);
-            }
-            // rethrow so that we can handle serving error page
-            // If this is during static generation, throw the error again.
-            if (isIsr) throw err;
-            // Otherwise, send a 500 response unless the original response has
-            // already committed. In that case, preserve its status code for
-            // telemetry while still recording the failure and terminating a response
-            // that the failed pipeline left open.
-            if (res.headersSent) {
-                if (currentSpan) {
-                    const error = err instanceof Error ? err : new Error('Unknown app route error');
-                    currentSpan.recordException(error);
-                    currentSpan.setStatus({
-                        code: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanStatusCode.ERROR,
-                        message: error.message
-                    });
-                    currentSpan.setAttribute('error.type', error.name);
-                }
-                if (!res.writableEnded && !res.destroyed) {
-                    res.end();
+            return {
+                error: `Graph fetch threw: ${(0,_lib_utils_error__WEBPACK_IMPORTED_MODULE_4__/* .errorMessage */ .g)(err)}`,
+                url
+            };
+        }
+        if (res.status === 204) return {
+            ok: true
+        };
+        if (res.status === 401 && !triedReauth) {
+            triedReauth = true;
+            bustAccessToken(auth);
+            continue;
+        }
+        if ((res.status === 429 || res.status === 503) && attempt < 3) {
+            const waitMs = parseRetryAfter(res.headers.get("Retry-After")) ?? backoffFor(attempt);
+            attempt += 1;
+            await new Promise((r)=>setTimeout(r, waitMs));
+            continue;
+        }
+        const text = await res.text();
+        if (!res.ok) {
+            let msg = `Graph ${res.status}: ${text.slice(0, 500)}`;
+            if (res.status === 403) {
+                const hint = scopeHintFor(path);
+                if (hint) {
+                    msg += ` — reconnect the Microsoft integration with scope: ${hint}`;
                 }
-            } else {
-                await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, new Response(null, {
-                    status: 500
-                }));
             }
-            return;
-        } finally{
-            ;
-            (()=>{
-                if (!currentSpan) {
-                    return;
-                }
-                let statusCode = res.statusCode;
-                currentSpan.setAttributes({
-                    'http.status_code': statusCode,
-                    'next.rsc': false
-                });
-                if (statusCode && statusCode >= 500) {
-                    // For 5xx status codes: SHOULD be set to 'Error' span status.
-                    // x-ref: https://opentelemetry.io/docs/specs/semconv/http/http-spans/#status
-                    currentSpan.setStatus({
-                        code: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanStatusCode.ERROR
-                    });
-                    // For span status 'Error', SHOULD set 'error.type' attribute.
-                    currentSpan.setAttribute('error.type', statusCode.toString());
-                }
-                const rootSpanAttributes = tracer.getRootSpanAttributes();
-                // We were unable to get attributes, probably OTEL is not enabled
-                if (!rootSpanAttributes) {
-                    return;
-                }
-                if (rootSpanAttributes.get('next.span_type') !== next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__.BaseServerSpan.handleRequest) {
-                    console.warn(`Unexpected root span type '${rootSpanAttributes.get('next.span_type')}'. Please report this Next.js issue https://github.com/vercel/next.js`);
-                    return;
-                }
-                const route = rootSpanAttributes.get('next.route') || normalizedSrcPage;
-                const name = `${method} ${route}`;
-                currentSpan.setAttributes({
-                    'next.route': route,
-                    'http.route': route,
-                    'next.span_name': name
-                });
-                currentSpan.updateName(name);
-                // Propagate http.route to the parent span if one exists (e.g.
-                // a platform-created HTTP span in adapter deployments).
-                if (parentSpan && parentSpan !== currentSpan) {
-                    parentSpan.setAttribute('http.route', route);
-                    parentSpan.updateName(name);
-                }
-            })();
+            return {
+                error: msg,
+                url
+            };
         }
-    };
-    // TODO: activeSpan code path is for when wrapped by
-    // next-server can be removed when this is no longer used
-    if (isWrappedByNextServer && activeSpan) {
-        await handleResponse(activeSpan, undefined);
-    } else {
-        let parentSpan = tracer.getActiveScopeSpan();
-        await tracer.withPropagatedContext(req.headers, ()=>tracer.trace(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__.BaseServerSpan.handleRequest, {
-                spanName: `${method} ${srcPage}`,
-                kind: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanKind.SERVER,
-                attributes: {
-                    'http.method': method,
-                    'http.target': req.url
-                }
-            }, (span)=>handleResponse(span, parentSpan)), undefined, !isWrappedByNextServer);
+        try {
+            return JSON.parse(text);
+        } catch  {
+            return text;
+        }
+    }
+}
+// Follow @odata.nextLink across pages and concatenate `value` arrays.
+// Stops at `maxPages` (default 5) to bound context cost. Returns the same
+// shape as graphFetch (object with `.value`) but with the merged array, or
+// the original error shape if any page errored.
+async function graphPaged(auth, path, opts) {
+    const maxPages = opts?.maxPages ?? 5;
+    let current = path;
+    const merged = [];
+    let pages = 0;
+    while(current && pages < maxPages){
+        const page = await graphFetch(auth, current, opts?.init);
+        if (page && typeof page === "object" && "error" in page) return page;
+        const body = page;
+        if (Array.isArray(body.value)) merged.push(...body.value);
+        current = typeof body["@odata.nextLink"] === "string" ? body["@odata.nextLink"] : null;
+        pages += 1;
     }
+    return {
+        value: merged,
+        pages
+    };
 }
-//# sourceMappingURL=app-route.js.map
+/***/ }),
+/***/ 94735:
+/***/ ((module) => {
+module.exports = require("events");
 /***/ }),
@@ -1240,7 +1240,7 @@ module.exports = import("@huggingface/transformers");;
 var __webpack_require__ = require("../../../../../../../webpack-runtime.js");
 __webpack_require__.C(exports);
 var __webpack_exec__ = (moduleId) => (__webpack_require__(__webpack_require__.s = moduleId))
-var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(97937)));
+var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(32587)));
 module.exports = __webpack_exports__;
 })();