@circuitwall/jarela 2.2.1 → 2.3.0

package/.next/standalone/.next/server/app/api/v1/integrations/outlook/oauth/callback/route.js

@@ -413,953 +413,953 @@ module.exports = require("http");
 
 /***/ }),
 
-/***/ 86439:
-/***/ ((module) => {
-
-module.exports = require("next/dist/shared/lib/no-fallback-error.external");
-
-/***/ }),
-
-/***/ 89052:
+/***/ 82637:
 /***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
 __webpack_require__.r(__webpack_exports__);
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   GET: () => (/* binding */ GET)
+/* harmony export */   handler: () => (/* binding */ handler),
+/* harmony export */   patchFetch: () => (/* binding */ patchFetch),
+/* harmony export */   routeModule: () => (/* binding */ routeModule),
+/* harmony export */   serverHooks: () => (/* binding */ serverHooks),
+/* harmony export */   workAsyncStorage: () => (/* binding */ workAsyncStorage),
+/* harmony export */   workUnitAsyncStorage: () => (/* binding */ workUnitAsyncStorage)
 /* harmony export */ });
-/* harmony import */ var _lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(89080);
-/* harmony import */ var _lib_stores_integrations__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(78228);
-/* harmony import */ var _lib_stores_credentials__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(67637);
-/* harmony import */ var _app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(41044);
-/* harmony import */ var _lib_utils_error__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(22032);
+/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(19225);
+/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__);
+/* harmony import */ var next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(84006);
+/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(8317);
+/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__);
+/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(99373);
+/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__);
+/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(34775);
+/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__);
+/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(24235);
+/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__);
+/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(261);
+/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__);
+/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(54365);
+/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__);
+/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(90771);
+/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__);
+/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(73461);
+/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__);
+/* harmony import */ var next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(67798);
+/* harmony import */ var next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(92280);
+/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(62018);
+/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__);
+/* harmony import */ var next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(45696);
+/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__ = __webpack_require__(47929);
+/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14___default = /*#__PURE__*/__webpack_require__.n(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__);
+/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__ = __webpack_require__(86439);
+/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__);
+/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(10246);
+/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__);
+/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(37527);
+/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__);
 
 
 
 
 
-// GET /api/v1/integrations/outlook/oauth/callback?code=…&state=…
-//
-// Microsoft redirects the user's browser here after consent. We look up the
-// pending flow by `state`, exchange the auth code for a refresh_token,
-// persist the integration, and return a small HTML page telling the user
-// they can close the tab. The Integrations panel polls /oauth/status.
-async function GET(req) {
-    const url = req.nextUrl;
-    const state = url.searchParams.get("state") ?? "";
-    const code = url.searchParams.get("code") ?? "";
-    const errParam = url.searchParams.get("error");
-    const errDesc = url.searchParams.get("error_description");
-    const flow = state ? (0,_lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__/* .getFlow */ .lv)(state) : undefined;
-    if (!flow) {
-        return (0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .oauthHtmlResponse */ .m)("Authorization session not found or expired. Please retry from Jarela.", true);
-    }
-    if (errParam) {
-        const msg = errDesc ? `${errParam}: ${errDesc}` : errParam;
-        (0,_lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__/* .updateFlow */ .Ah)(state, {
-            status: "error",
-            error: msg
-        });
-        return (0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .oauthHtmlResponse */ .m)(`Microsoft reported an error: ${(0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .escapeHtml */ .Z)(msg)}. You can close this tab.`, true);
-    }
-    if (!code) {
-        (0,_lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__/* .updateFlow */ .Ah)(state, {
-            status: "error",
-            error: "no code returned"
-        });
-        return (0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .oauthHtmlResponse */ .m)("Microsoft did not return an authorization code.", true);
-    }
-    try {
-        const tok = await (0,_lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__/* .exchangeCode */ .Dd)({
-            code,
-            clientId: flow.clientId,
-            clientSecret: flow.clientSecret,
-            redirectUri: flow.redirectUri
-        });
-        if (!tok.refresh_token) {
-            const msg = "Microsoft did not return a refresh_token. Make sure your Azure app " + "registration includes the offline_access scope and that the consent " + "screen approves it.";
-            (0,_lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__/* .updateFlow */ .Ah)(state, {
-                status: "error",
-                error: msg
-            });
-            return (0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .oauthHtmlResponse */ .m)(msg, true);
-        }
-        const saved = persistRefreshToken({
-            credentialId: flow.credentialId,
-            clientId: flow.clientId,
-            clientSecret: flow.clientSecret,
-            refreshToken: tok.refresh_token
-        });
-        if ("error" in saved) {
-            (0,_lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__/* .updateFlow */ .Ah)(state, {
-                status: "error",
-                error: saved.error
-            });
-            return (0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .oauthHtmlResponse */ .m)(`Failed to save: ${(0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .escapeHtml */ .Z)(saved.error)}`, true);
-        }
-        (0,_lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__/* .updateFlow */ .Ah)(state, {
-            status: "done"
-        });
-        return (0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .oauthHtmlResponse */ .m)("Outlook connected. You can close this tab and return to Jarela.", false);
-    } catch (e) {
-        const msg = (0,_lib_utils_error__WEBPACK_IMPORTED_MODULE_4__/* .errorMessage */ .g)(e);
-        (0,_lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__/* .updateFlow */ .Ah)(state, {
-            status: "error",
-            error: msg
-        });
-        return (0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .oauthHtmlResponse */ .m)(`Token exchange failed: ${(0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .escapeHtml */ .Z)(msg)}`, true);
-    }
-}
-function persistRefreshToken(input) {
-    if (input.credentialId) {
-        const cred = (0,_lib_stores_credentials__WEBPACK_IMPORTED_MODULE_2__/* .getCredential */ .w_)(input.credentialId);
-        if (!cred || cred.provider !== "outlook") {
-            return {
-                error: "credential not found"
-            };
-        }
-        const merged = {
-            ...(0,_lib_stores_credentials__WEBPACK_IMPORTED_MODULE_2__/* .getCredentialParams */ .WY)(cred),
-            client_id: input.clientId,
-            client_secret: input.clientSecret,
-            refresh_token: input.refreshToken
-        };
-        (0,_lib_stores_credentials__WEBPACK_IMPORTED_MODULE_2__/* .updateCredential */ .nZ)(input.credentialId, {
-            auth_method: "oauth",
-            params: merged
-        });
-        return {
-            ok: true
-        };
-    }
-    const saved = (0,_lib_stores_integrations__WEBPACK_IMPORTED_MODULE_1__/* .saveIntegration */ .oO)("outlook", {
-        client_id: input.clientId,
-        client_secret: input.clientSecret,
-        refresh_token: input.refreshToken
-    });
-    if ("error" in saved) return saved;
-    return {
-        ok: true
-    };
-}
 
 
-/***/ }),
 
-/***/ 89080:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   Ah: () => (/* binding */ updateFlow),
-/* harmony export */   Dd: () => (/* binding */ exchangeCode),
-/* harmony export */   F8: () => (/* binding */ createFlow),
-/* harmony export */   i8: () => (/* binding */ getMicrosoftAccessToken),
-/* harmony export */   jG: () => (/* binding */ resolveMicrosoftAuth),
-/* harmony export */   lv: () => (/* binding */ getFlow),
-/* harmony export */   op: () => (/* binding */ graphPaged),
-/* harmony export */   xj: () => (/* binding */ buildAuthorizeUrl),
-/* harmony export */   z$: () => (/* binding */ graphFetch)
-/* harmony export */ });
-/* unused harmony export MICROSOFT_SCOPES */
-/* harmony import */ var _lib_stores_integrations__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(78228);
-/* harmony import */ var _lib_utils_oauth_flow_store__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(56362);
-/* harmony import */ var _lib_utils_json__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(53638);
-/* harmony import */ var _lib_utils_error__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(22032);
-/* harmony import */ var _lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(22632);
-// Ephemeral state store + shared auth helpers for the in-app Microsoft OAuth
-// flow. Mirrors lib/integrations/gmail-oauth.ts but targets the Microsoft
-// identity platform (v2.0 endpoint, common tenant by default) and Microsoft
-// Graph as the downstream API surface (Outlook Mail + Calendar in v1).
-//
-// The user types client_id + client_secret in the Integrations panel and
-// clicks "Connect Outlook". We POST those to /oauth/start, which stashes
-// them here keyed by a random `state` token and returns the Microsoft
-// authorize URL. The browser opens that URL; MS bounces back to
-// /oauth/callback with `?code&state`, which exchanges the code for a
-// refresh_token (granted because we asked for `offline_access`) and
-// persists the integration. The panel polls /oauth/status separately.
-//
-// Pinned to globalThis so HMR in dev doesn't lose pending flows.
 
 
 
 
 
-const flowStore = (0,_lib_utils_oauth_flow_store__WEBPACK_IMPORTED_MODULE_1__/* .createOAuthFlowStore */ .R)({
-    globalKey: "__msOauthFlows"
+
+
+
+
+// We inject the nextConfigOutput here so that we can use them in the route
+// module.
+const nextConfigOutput = "standalone"
+const routeModule = new next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__.AppRouteRouteModule({
+    definition: {
+        kind: next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__.RouteKind.APP_ROUTE,
+        page: "/api/v1/integrations/outlook/oauth/callback/route",
+        pathname: "/api/v1/integrations/outlook/oauth/callback",
+        filename: "route",
+        bundlePath: "app/api/v1/integrations/outlook/oauth/callback/route"
+    },
+    distDir: ".next" || 0,
+    relativeProjectDir:  false || '',
+    resolvedPagePath: "/home/runner/work/jarela/jarela/app/api/v1/integrations/outlook/oauth/callback/route.ts",
+    nextConfigOutput,
+    // The lazy require factory ensures that:
+    // - In dev: devRequestTimingInternalsEnd is set before userland executes,
+    //   correctly attributing module load time to application-code rather than
+    //   framework internals.
+    // - In all modes: async modules (route files with top-level await) are
+    //   handled correctly — require() returns a Promise for such modules, which
+    //   ensureUserland() awaits before the first request is handled.
+    userland: ()=>__webpack_require__(89052),
+    // In Turbopack dev mode, also provide a synchronous per-request getter so
+    // server HMR updates are picked up without re-executing the entry chunk.
+    // Using require() (synchronous) avoids adding async overhead that would be
+    // incorrectly attributed to application-code time in devRequestTiming.
+    ... false ? 0 : {}
 });
-const createFlow = flowStore.create;
-const getFlow = flowStore.get;
-const updateFlow = flowStore.update;
-// Tenant selector. `common` accepts both personal Microsoft accounts
-// (@outlook.com, @hotmail.com, @live.com) and work/school M365 accounts.
-// Switch to `consumers` to lock to personal only, or `organizations` for
-// work/school only. We expose this as an env override for power users but
-// don't surface it in the UI yet.
-const TENANT = process.env.OUTLOOK_TENANT?.trim() || "common";
-// Delegated Graph scopes the agent needs. Keep narrow:
-//   - offline_access  → required for a refresh_token (MS counterpart of
-//                       Google's access_type=offline).
-//   - User.Read       → used by the test endpoint to call /me.
-//   - Mail.ReadWrite  → search/read mail, create drafts, mark read,
-//                       move to folders (incl. DeletedItems).
-//   - Mail.Send       → send mail when the user explicitly asks for it.
-//   - Calendars.ReadWrite → list/get/create/update/delete events on the
-//                           user's existing calendars.
-//   - Tasks.ReadWrite → list/get/create/update/complete/delete Microsoft
-//                       To Do tasks and lists (ms_todo_* tools).
-//   - People.Read     → resolve "who is X" / frequent contacts via
-//                       /me/people (ms_people_resolve tool).
-const MICROSOFT_SCOPES = [
-    "offline_access",
-    "User.Read",
-    "Mail.ReadWrite",
-    "Mail.Send",
-    "Calendars.ReadWrite",
-    "Tasks.ReadWrite",
-    "People.Read"
-];
-function buildAuthorizeUrl(opts) {
-    const p = new URLSearchParams({
-        client_id: opts.clientId,
-        redirect_uri: opts.redirectUri,
-        response_type: "code",
-        response_mode: "query",
-        scope: MICROSOFT_SCOPES.join(" "),
-        // Force consent so a returning user actually re-grants any newly-added
-        // scope (otherwise MS silently reuses the prior grant minus the new bit).
-        prompt: "consent",
-        state: opts.state
+// Pull out the exports that we need to expose from the module. This should
+// be eliminated when we've moved the other routes to the new format. These
+// are used to hook into the route.
+const { workAsyncStorage, workUnitAsyncStorage, serverHooks } = routeModule;
+function patchFetch() {
+    return (0,next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__.patchFetch)({
+        workAsyncStorage,
+        workUnitAsyncStorage
     });
-    return `https://login.microsoftonline.com/${TENANT}/oauth2/v2.0/authorize?${p.toString()}`;
 }
-// NOTE: Unlike Google, MS v2 endpoint **requires** the `scope` parameter on
-// every grant_type call (both authorization_code and refresh_token). Leaving
-// it out yields `AADSTS900144: The request body must contain the following
-// parameter: 'scope'.`. We always pass the full scope set.
-async function exchangeCode(opts) {
-    const clientId = (0,_lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__/* .sanitizeOAuthInput */ .d)(opts.clientId) ?? "";
-    const clientSecret = (0,_lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__/* .sanitizeOAuthInput */ .d)(opts.clientSecret) ?? "";
-    const body = new URLSearchParams({
-        code: opts.code,
-        client_id: clientId,
-        client_secret: clientSecret,
-        redirect_uri: opts.redirectUri,
-        grant_type: "authorization_code",
-        scope: MICROSOFT_SCOPES.join(" ")
-    });
-    const res = await fetch(`https://login.microsoftonline.com/${TENANT}/oauth2/v2.0/token`, {
-        method: "POST",
-        headers: {
-            "Content-Type": "application/x-www-form-urlencoded"
-        },
-        body: body.toString(),
-        signal: AbortSignal.timeout(30000)
-    });
-    const text = await res.text();
-    const parsed = (0,_lib_utils_json__WEBPACK_IMPORTED_MODULE_3__/* .parseJsonSafe */ .p)(text, {});
-    if (!res.ok) {
-        const err = parsed["error_description"] || parsed["error"] || text || `HTTP ${res.status}`;
-        console.error(`[microsoft-oauth] token exchange rejected (${res.status}): ${err} | client_id ${(0,_lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__/* .secretFingerprint */ .n)(clientId)} | client_secret ${(0,_lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__/* .secretFingerprint */ .n)(clientSecret)}`);
-        throw new Error(err);
+
+async function handler(req, res, ctx) {
+    if (ctx.requestMeta) {
+        (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.setRequestMeta)(req, ctx.requestMeta);
     }
-    return parsed;
-}
-function resolveMicrosoftAuth() {
-    const envId = process.env.OUTLOOK_CLIENT_ID;
-    const envSecret = process.env.OUTLOOK_CLIENT_SECRET;
-    const envRefresh = process.env.OUTLOOK_REFRESH_TOKEN;
-    if (envId && envSecret && envRefresh) {
-        return {
-            client_id: envId,
-            client_secret: envSecret,
-            refresh_token: envRefresh
-        };
+    if (routeModule.isDev) {
+        (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.addRequestMeta)(req, 'devRequestTimingInternalsEnd', process.hrtime.bigint());
     }
-    const saved = (0,_lib_stores_integrations__WEBPACK_IMPORTED_MODULE_0__/* .getIntegrationRaw */ .$G)("outlook");
-    if (saved?.client_id && saved.client_secret && saved.refresh_token) {
-        return {
-            client_id: saved.client_id,
-            client_secret: saved.client_secret,
-            refresh_token: saved.refresh_token
-        };
+    let srcPage = "/api/v1/integrations/outlook/oauth/callback/route";
+    // turbopack doesn't normalize `/index` in the page name
+    // so we need to to process dynamic routes properly
+    // TODO: fix turbopack providing differing value from webpack
+    if (false) {} else if (srcPage === '/index') {
+        // we always normalize /index specifically
+        srcPage = '/';
     }
-    return {
-        error: "Microsoft account not connected. Open the gear menu → Integrations tab → " + "Outlook card and click Connect Outlook to authorize Mail, Mail.Send, Calendar, Tasks, and People access."
-    };
-}
-const accessTokenCache = new Map();
-function cacheKey(auth) {
-    return auth.refresh_token.slice(0, 20);
-}
-// Force-evict a cached access token (e.g. after a 401). The next call to
-// getMicrosoftAccessToken will refresh against the v2 token endpoint.
-function bustAccessToken(auth) {
-    accessTokenCache.delete(cacheKey(auth));
-}
-async function getMicrosoftAccessToken(auth) {
-    const key = cacheKey(auth);
-    const cached = accessTokenCache.get(key);
-    if (cached && cached.expires_at > Date.now() + 60000) return cached.token;
-    const body = new URLSearchParams({
-        client_id: auth.client_id,
-        client_secret: auth.client_secret,
-        refresh_token: auth.refresh_token,
-        grant_type: "refresh_token",
-        // Required on the v2 endpoint even for refresh_token grants.
-        scope: MICROSOFT_SCOPES.join(" ")
+    const multiZoneDraftMode = false;
+    const prepareResult = await routeModule.prepare(req, res, {
+        srcPage,
+        multiZoneDraftMode
     });
-    try {
-        const res = await fetch(`https://login.microsoftonline.com/${TENANT}/oauth2/v2.0/token`, {
-            method: "POST",
-            headers: {
-                "Content-Type": "application/x-www-form-urlencoded"
-            },
-            body: body.toString(),
-            signal: AbortSignal.timeout(30000)
-        });
-        const text = await res.text();
-        if (!res.ok) {
-            accessTokenCache.delete(key);
-            return {
-                error: `Microsoft OAuth refresh failed (${res.status}): ${text.slice(0, 300)}`
-            };
+    if (!prepareResult) {
+        res.statusCode = 400;
+        res.end('Bad Request');
+        ctx.waitUntil == null ? void 0 : ctx.waitUntil.call(ctx, Promise.resolve());
+        return null;
+    }
+    const { buildId, deploymentId, params, nextConfig, parsedUrl, isDraftMode, prerenderManifest, routerServerContext, isOnDemandRevalidate, revalidateOnlyGenerated, resolvedPathname, clientReferenceManifest, serverActionsManifest, previewProps } = prepareResult;
+    const normalizedSrcPage = (0,next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__.normalizeAppPath)(srcPage);
+    // Only this route's prerenders can establish ISR or admit generated params.
+    const isPrerendered = Boolean(prerenderManifest.routes[resolvedPathname]) && (routeModule.isDev || (0,next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__.isRouteCacheOwner)(resolvedPathname, routeModule.cacheOwner, prerenderManifest.routes[resolvedPathname]));
+    let isIsr = Boolean(prerenderManifest.dynamicRoutes[normalizedSrcPage] || isPrerendered);
+    const render404 = async ()=>{
+        // TODO: should route-module itself handle rendering the 404
+        if (routerServerContext == null ? void 0 : routerServerContext.render404) {
+            await routerServerContext.render404(req, res, parsedUrl, false);
+        } else {
+            res.end('This page could not be found');
+        }
+        return null;
+    };
+    if (isIsr && !isDraftMode) {
+        const prerenderInfo = prerenderManifest.dynamicRoutes[normalizedSrcPage];
+        if (prerenderInfo) {
+            if (prerenderInfo.fallback === false && !isPrerendered) {
+                if (nextConfig.adapterPath) {
+                    return await render404();
+                }
+                throw new next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__.NoFallbackError();
+            }
         }
-        const parsed = JSON.parse(text);
-        if (!parsed.access_token) return {
-            error: "OAuth response missing access_token"
-        };
-        const expires_at = Date.now() + (parsed.expires_in ?? 3000) * 1000;
-        accessTokenCache.set(key, {
-            token: parsed.access_token,
-            expires_at
-        });
-        return parsed.access_token;
-    } catch (err) {
-        return {
-            error: `Microsoft OAuth refresh threw: ${(0,_lib_utils_error__WEBPACK_IMPORTED_MODULE_4__/* .errorMessage */ .g)(err)}`
-        };
     }
-}
-// Path-prefix → required Graph scope. Used to render helpful 403 messages
-// pointing the user at the exact scope they need to reconnect with.
-const SCOPE_HINTS = [
-    {
-        prefix: "/me/messages",
-        scope: "Mail.ReadWrite"
-    },
-    {
-        prefix: "/me/mailFolders",
-        scope: "Mail.ReadWrite"
-    },
-    {
-        prefix: "/me/sendMail",
-        scope: "Mail.Send"
-    },
-    {
-        prefix: "/me/events",
-        scope: "Calendars.ReadWrite"
-    },
-    {
-        prefix: "/me/calendar",
-        scope: "Calendars.ReadWrite"
-    },
-    {
-        prefix: "/me/calendars",
-        scope: "Calendars.ReadWrite"
-    },
-    {
-        prefix: "/me/todo",
-        scope: "Tasks.ReadWrite"
-    },
-    {
-        prefix: "/me/people",
-        scope: "People.Read"
-    },
-    {
-        prefix: "/me/contacts",
-        scope: "Contacts.Read"
-    },
-    {
-        prefix: "/me/drive",
-        scope: "Files.Read"
-    },
-    {
-        prefix: "/me/insights",
-        scope: "Sites.Read.All"
-    },
-    {
-        prefix: "/search/query",
-        scope: "Mail.Read Files.Read.All"
-    },
-    {
-        prefix: "/me",
-        scope: "User.Read"
+    let cacheKey = null;
+    if (isIsr && !routeModule.isDev && !isDraftMode) {
+        cacheKey = resolvedPathname;
+        // ensure /index and / is normalized to one key
+        cacheKey = cacheKey === '/index' ? '/' : cacheKey;
     }
-];
-function scopeHintFor(path) {
-    const p = path.startsWith("http") ? new URL(path).pathname.replace(/^\/v1\.0/, "") : path;
-    for (const { prefix, scope } of SCOPE_HINTS){
-        if (p.startsWith(prefix)) return scope;
+    // Before rendering (which initializes component tree modules), we have to
+    // set the reference manifests to our global store so Server Action's
+    // encryption util can access to them at the top level of the page module.
+    if (serverActionsManifest && clientReferenceManifest) {
+        (0,next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__.setManifestsSingleton)({
+            page: srcPage,
+            clientReferenceManifest,
+            serverActionsManifest
+        });
     }
-    return null;
-}
-function parseRetryAfter(headerVal) {
-    if (!headerVal) return 0;
-    const secs = Number.parseInt(headerVal, 10);
-    if (Number.isFinite(secs) && secs >= 0) return Math.min(secs, 30) * 1000;
-    const ts = Date.parse(headerVal);
-    if (!Number.isNaN(ts)) return Math.max(0, Math.min(ts - Date.now(), 30000));
-    return 0;
-}
-function backoffFor(attempt) {
-    return Math.min(500 * 2 ** attempt, 4000);
-}
-// Shared Graph fetch helper. Used by lib/tools/outlook.ts,
-// lib/tools/outlook-calendar.ts, lib/tools/ms-todo.ts, lib/tools/ms-graph.ts.
-// Returns parsed JSON or { error: string, url? }. 204 No Content returns
-// { ok: true }.
-//
-// Built-in resilience:
-//   - 401 Unauthorized → drop the cached access token and retry once with a
-//     freshly refreshed one (covers token-revoked-mid-cache edge cases).
-//   - 429 / 503 → honour the `Retry-After` header (capped at 30s) or fall
-//     back to exponential backoff. Retries up to 3 times.
-//   - 403 Forbidden → surface a scope hint ("reconnect with X") so the
-//     operator knows what to grant.
-async function graphFetch(auth, path, init) {
-    const url = path.startsWith("http") ? path : `https://graph.microsoft.com/v1.0${path}`;
-    let attempt = 0;
-    let triedReauth = false;
-    while(true){
-        const token = await getMicrosoftAccessToken(auth);
-        if (typeof token !== "string") return token;
-        let res;
-        try {
-            res = await fetch(url, {
-                ...init,
-                headers: {
-                    Authorization: `Bearer ${token}`,
-                    Accept: "application/json",
-                    "Content-Type": "application/json",
-                    ...init?.headers ?? {}
-                },
-                signal: AbortSignal.timeout(30000)
-            });
-        } catch (err) {
-            return {
-                error: `Graph fetch threw: ${(0,_lib_utils_error__WEBPACK_IMPORTED_MODULE_4__/* .errorMessage */ .g)(err)}`,
-                url
-            };
-        }
-        if (res.status === 204) return {
-            ok: true
-        };
-        if (res.status === 401 && !triedReauth) {
-            triedReauth = true;
-            bustAccessToken(auth);
-            continue;
-        }
-        if ((res.status === 429 || res.status === 503) && attempt < 3) {
-            const waitMs = parseRetryAfter(res.headers.get("Retry-After")) ?? backoffFor(attempt);
-            attempt += 1;
-            await new Promise((r)=>setTimeout(r, waitMs));
-            continue;
+    const method = req.method || 'GET';
+    const tracer = (0,next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.getTracer)();
+    const activeSpan = tracer.getActiveScopeSpan();
+    const isWrappedByNextServer = Boolean(routerServerContext == null ? void 0 : routerServerContext.isWrappedByNextServer);
+    const isMinimalMode = Boolean((0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'minimalMode'));
+    const incrementalCache = (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'incrementalCache') || await routeModule.getIncrementalCache(req, nextConfig, previewProps, prerenderManifest, isMinimalMode);
+    incrementalCache == null ? void 0 : incrementalCache.resetRequestCache();
+    globalThis.__incrementalCache = incrementalCache;
+    const context = {
+        params,
+        previewProps,
+        renderOpts: {
+            experimental: {
+                authInterrupts: Boolean(nextConfig.experimental.authInterrupts),
+                useCacheTimeout: nextConfig.experimental.useCacheTimeout,
+                durableUseCacheEntries: Boolean(nextConfig.experimental.durableUseCacheEntries)
+            },
+            cacheComponents: Boolean(nextConfig.cacheComponents),
+            validationLevel: nextConfig.experimental.instantInsights.validationLevel,
+            isDraftMode,
+            incrementalCache,
+            hmrRefreshHash: (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'hmrRefreshHash'),
+            cacheLifeProfiles: nextConfig.cacheLife,
+            staticPageGenerationTimeout: nextConfig.staticPageGenerationTimeout,
+            waitUntil: ctx.waitUntil,
+            onClose: (cb)=>{
+                res.on('close', cb);
+            },
+            onAfterTaskError: undefined
+        },
+        sharedContext: {
+            buildId,
+            deploymentId
         }
-        const text = await res.text();
-        if (!res.ok) {
-            let msg = `Graph ${res.status}: ${text.slice(0, 500)}`;
-            if (res.status === 403) {
-                const hint = scopeHintFor(path);
-                if (hint) {
-                    msg += ` — reconnect the Microsoft integration with scope: ${hint}`;
+    };
+    const nodeNextReq = new next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__.NodeNextRequest(req);
+    const nodeNextRes = new next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__.NodeNextResponse(res);
+    const nextReq = next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__.NextRequestAdapter.fromNodeNextRequest(nodeNextReq, (0,next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__.signalFromNodeResponse)(res));
+    const responseGenerator = async ({ previousCacheEntry })=>{
+        try {
+            if (!isMinimalMode && isOnDemandRevalidate && revalidateOnlyGenerated && !previousCacheEntry) {
+                res.statusCode = 404;
+                // on-demand revalidate always sets this header
+                res.setHeader('x-nextjs-cache', 'REVALIDATED');
+                res.end('This page could not be found');
+                return null;
+            }
+            const response = cacheKey === null ? await routeModule.handle(nextReq, context) : await routeModule.prerender(nextReq, context);
+            req.fetchMetrics = context.renderOpts.fetchMetrics;
+            let pendingWaitUntil = context.renderOpts.pendingWaitUntil;
+            // Attempt using provided waitUntil if available
+            // if it's not we fallback to sendResponse's handling
+            if (pendingWaitUntil) {
+                if (ctx.waitUntil) {
+                    ctx.waitUntil(pendingWaitUntil);
+                    pendingWaitUntil = undefined;
                 }
             }
-            return {
-                error: msg,
-                url
-            };
-        }
-        try {
-            return JSON.parse(text);
-        } catch  {
-            return text;
+            const cacheTags = context.renderOpts.collectedTags;
+            // If the request is for a static response, we can cache it so long
+            // as it's not edge.
+            if (isIsr) {
+                const blob = await response.blob();
+                // Copy the headers from the response.
+                const headers = (0,next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__.toNodeOutgoingHttpHeaders)(response.headers);
+                if (cacheTags) {
+                    headers[next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.NEXT_CACHE_TAGS_HEADER] = cacheTags;
+                }
+                if (!headers['content-type'] && blob.type) {
+                    headers['content-type'] = blob.type;
+                }
+                const revalidate = typeof context.renderOpts.collectedRevalidate === 'undefined' || context.renderOpts.collectedRevalidate >= next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.INFINITE_CACHE ? false : context.renderOpts.collectedRevalidate;
+                const expire = typeof context.renderOpts.collectedExpire === 'undefined' || context.renderOpts.collectedExpire >= next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.INFINITE_CACHE ? // route has a numeric `revalidate` but didn't declare an
+                // explicit `expire` (e.g. via `cacheLife`). This mirrors the
+                // build-time fallback in `build/index.ts` so cache entries
+                // and the response Cache-Control header agree on the route's
+                // effective expire. Routes that opt out of revalidation
+                // (`revalidate: false`) or that are dynamic (`revalidate: 0`)
+                // keep `expire: undefined`.
+                revalidate !== false && revalidate > 0 ? nextConfig.expireTime : undefined : context.renderOpts.collectedExpire;
+                // Create the cache entry for the response.
+                const cacheEntry = {
+                    value: {
+                        kind: next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__.CachedRouteKind.APP_ROUTE,
+                        status: response.status,
+                        body: Buffer.from(await blob.arrayBuffer()),
+                        headers
+                    },
+                    cacheControl: {
+                        revalidate,
+                        expire
+                    }
+                };
+                return cacheEntry;
+            } else {
+                // send response without caching if not ISR
+                await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, response, pendingWaitUntil);
+                return null;
+            }
+        } catch (err) {
+            // if this is a background revalidate we need to report
+            // the request error here as it won't be bubbled
+            if (previousCacheEntry == null ? void 0 : previousCacheEntry.isStale) {
+                const silenceLog = false;
+                await routeModule.onRequestError(req, err, {
+                    routerKind: 'App Router',
+                    routePath: srcPage,
+                    routeType: 'route',
+                    revalidateReason: (0,next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__.getRevalidateReason)({
+                        isStaticGeneration: cacheKey !== null,
+                        isOnDemandRevalidate
+                    })
+                }, silenceLog, routerServerContext);
+            }
+            throw err;
         }
-    }
-}
-// Follow @odata.nextLink across pages and concatenate `value` arrays.
-// Stops at `maxPages` (default 5) to bound context cost. Returns the same
-// shape as graphFetch (object with `.value`) but with the merged array, or
-// the original error shape if any page errored.
-async function graphPaged(auth, path, opts) {
-    const maxPages = opts?.maxPages ?? 5;
-    let current = path;
-    const merged = [];
-    let pages = 0;
-    while(current && pages < maxPages){
-        const page = await graphFetch(auth, current, opts?.init);
-        if (page && typeof page === "object" && "error" in page) return page;
-        const body = page;
-        if (Array.isArray(body.value)) merged.push(...body.value);
-        current = typeof body["@odata.nextLink"] === "string" ? body["@odata.nextLink"] : null;
-        pages += 1;
-    }
-    return {
-        value: merged,
-        pages
     };
-}
-
-
-/***/ }),
-
-/***/ 94735:
-/***/ ((module) => {
-
-module.exports = require("events");
-
-/***/ }),
-
-/***/ 98671:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-
-__webpack_require__.r(__webpack_exports__);
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   handler: () => (/* binding */ handler),
-/* harmony export */   patchFetch: () => (/* binding */ patchFetch),
-/* harmony export */   routeModule: () => (/* binding */ routeModule),
-/* harmony export */   serverHooks: () => (/* binding */ serverHooks),
-/* harmony export */   workAsyncStorage: () => (/* binding */ workAsyncStorage),
-/* harmony export */   workUnitAsyncStorage: () => (/* binding */ workUnitAsyncStorage)
-/* harmony export */ });
-/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(19225);
-/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__);
-/* harmony import */ var next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(84006);
-/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(8317);
-/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__);
-/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(99373);
-/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__);
-/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(34775);
-/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__);
-/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(24235);
-/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__);
-/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(261);
-/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__);
-/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(54365);
-/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__);
-/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(90771);
-/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__);
-/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(73461);
-/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__);
-/* harmony import */ var next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(67798);
-/* harmony import */ var next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(92280);
-/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(62018);
-/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__);
-/* harmony import */ var next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(45696);
-/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__ = __webpack_require__(47929);
-/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14___default = /*#__PURE__*/__webpack_require__.n(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__);
-/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__ = __webpack_require__(86439);
-/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__);
-/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(10246);
-/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__);
-/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(37527);
-/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__);
-
-
-
-
-
-
+    const handleResponse = async (currentSpan, parentSpan)=>{
+        try {
+            var _cacheEntry_value;
+            const cacheEntry = await routeModule.handleResponse({
+                req,
+                nextConfig,
+                cacheKey,
+                routeKind: next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__.RouteKind.APP_ROUTE,
+                isFallback: false,
+                previewProps,
+                prerenderManifest,
+                isRoutePPREnabled: false,
+                isOnDemandRevalidate,
+                revalidateOnlyGenerated,
+                responseGenerator,
+                waitUntil: ctx.waitUntil,
+                isMinimalMode
+            });
+            if (cacheEntry !== null && 'error' in cacheEntry) {
+                throw cacheEntry.error;
+            }
+            // we don't create a cacheEntry for ISR
+            if (!isIsr) {
+                return;
+            }
+            if ((cacheEntry == null ? void 0 : (_cacheEntry_value = cacheEntry.value) == null ? void 0 : _cacheEntry_value.kind) !== next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__.CachedRouteKind.APP_ROUTE) {
+                var _cacheEntry_value1;
+                throw new Error(`Invariant: app-route received invalid cache entry ${cacheEntry == null ? void 0 : (_cacheEntry_value1 = cacheEntry.value) == null ? void 0 : _cacheEntry_value1.kind}`);
+            }
+            if (!isMinimalMode) {
+                res.setHeader('x-nextjs-cache', isOnDemandRevalidate ? 'REVALIDATED' : cacheEntry.isMiss ? 'MISS' : cacheEntry.isStale ? 'STALE' : 'HIT');
+            }
+            // Draft mode should never be cached
+            if (isDraftMode) {
+                res.setHeader('Cache-Control', 'private, no-cache, no-store, max-age=0, must-revalidate');
+            }
+            const headers = (0,next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__.fromNodeOutgoingHttpHeaders)(cacheEntry.value.headers);
+            if (!(isMinimalMode && isIsr)) {
+                headers.delete(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.NEXT_CACHE_TAGS_HEADER);
+            }
+            // If cache control is already set on the response we don't
+            // override it to allow users to customize it via next.config
+            if (cacheEntry.cacheControl && !res.getHeader('Cache-Control') && !headers.get('Cache-Control')) {
+                headers.set('Cache-Control', (0,next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__.getCacheControlHeader)(cacheEntry.cacheControl));
+            }
+            await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, // @ts-expect-error - Argument of type 'Buffer<ArrayBufferLike>' is not assignable to parameter of type 'BodyInit | null | undefined'.
+            new Response(cacheEntry.value.body, {
+                headers,
+                status: cacheEntry.value.status || 200
+            }));
+            return;
+        } catch (err) {
+            if (!(err instanceof next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__.NoFallbackError)) {
+                const silenceLog = false;
+                await routeModule.onRequestError(req, err, {
+                    routerKind: 'App Router',
+                    routePath: normalizedSrcPage,
+                    routeType: 'route',
+                    revalidateReason: (0,next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__.getRevalidateReason)({
+                        isStaticGeneration: cacheKey !== null,
+                        isOnDemandRevalidate
+                    })
+                }, silenceLog, routerServerContext);
+            }
+            // rethrow so that we can handle serving error page
+            // If this is during static generation, throw the error again.
+            if (isIsr) throw err;
+            // Otherwise, send a 500 response unless the original response has
+            // already committed. In that case, preserve its status code for
+            // telemetry while still recording the failure and terminating a response
+            // that the failed pipeline left open.
+            if (res.headersSent) {
+                if (currentSpan) {
+                    const error = err instanceof Error ? err : new Error('Unknown app route error');
+                    currentSpan.recordException(error);
+                    currentSpan.setStatus({
+                        code: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanStatusCode.ERROR,
+                        message: error.message
+                    });
+                    currentSpan.setAttribute('error.type', error.name);
+                }
+                if (!res.writableEnded && !res.destroyed) {
+                    res.end();
+                }
+            } else {
+                await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, new Response(null, {
+                    status: 500
+                }));
+            }
+            return;
+        } finally{
+            ;
+            (()=>{
+                if (!currentSpan) {
+                    return;
+                }
+                let statusCode = res.statusCode;
+                currentSpan.setAttributes({
+                    'http.status_code': statusCode,
+                    'next.rsc': false
+                });
+                if (statusCode && statusCode >= 500) {
+                    // For 5xx status codes: SHOULD be set to 'Error' span status.
+                    // x-ref: https://opentelemetry.io/docs/specs/semconv/http/http-spans/#status
+                    currentSpan.setStatus({
+                        code: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanStatusCode.ERROR
+                    });
+                    // For span status 'Error', SHOULD set 'error.type' attribute.
+                    currentSpan.setAttribute('error.type', statusCode.toString());
+                }
+                const rootSpanAttributes = tracer.getRootSpanAttributes();
+                // We were unable to get attributes, probably OTEL is not enabled
+                if (!rootSpanAttributes) {
+                    return;
+                }
+                if (rootSpanAttributes.get('next.span_type') !== next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__.BaseServerSpan.handleRequest) {
+                    console.warn(`Unexpected root span type '${rootSpanAttributes.get('next.span_type')}'. Please report this Next.js issue https://github.com/vercel/next.js`);
+                    return;
+                }
+                const route = rootSpanAttributes.get('next.route') || normalizedSrcPage;
+                const name = `${method} ${route}`;
+                currentSpan.setAttributes({
+                    'next.route': route,
+                    'http.route': route,
+                    'next.span_name': name
+                });
+                currentSpan.updateName(name);
+                // Propagate http.route to the parent span if one exists (e.g.
+                // a platform-created HTTP span in adapter deployments).
+                if (parentSpan && parentSpan !== currentSpan) {
+                    parentSpan.setAttribute('http.route', route);
+                    parentSpan.updateName(name);
+                }
+            })();
+        }
+    };
+    // TODO: activeSpan code path is for when wrapped by
+    // next-server can be removed when this is no longer used
+    if (isWrappedByNextServer && activeSpan) {
+        await handleResponse(activeSpan, undefined);
+    } else {
+        let parentSpan = tracer.getActiveScopeSpan();
+        await tracer.withPropagatedContext(req.headers, ()=>tracer.trace(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__.BaseServerSpan.handleRequest, {
+                spanName: `${method} ${srcPage}`,
+                kind: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanKind.SERVER,
+                attributes: {
+                    'http.method': method,
+                    'http.target': req.url
+                }
+            }, (span)=>handleResponse(span, parentSpan)), undefined, !isWrappedByNextServer);
+    }
+}
 
+//# sourceMappingURL=app-route.js.map
 
 
+/***/ }),
 
+/***/ 86439:
+/***/ ((module) => {
 
+module.exports = require("next/dist/shared/lib/no-fallback-error.external");
 
+/***/ }),
 
+/***/ 89052:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
+__webpack_require__.r(__webpack_exports__);
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   GET: () => (/* binding */ GET)
+/* harmony export */ });
+/* harmony import */ var _lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(89080);
+/* harmony import */ var _lib_stores_integrations__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(78228);
+/* harmony import */ var _lib_stores_credentials__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(67637);
+/* harmony import */ var _app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(41044);
+/* harmony import */ var _lib_utils_error__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(22032);
 
 
 
 
-// We inject the nextConfigOutput here so that we can use them in the route
-// module.
-const nextConfigOutput = "standalone"
-const routeModule = new next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__.AppRouteRouteModule({
-    definition: {
-        kind: next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__.RouteKind.APP_ROUTE,
-        page: "/api/v1/integrations/outlook/oauth/callback/route",
-        pathname: "/api/v1/integrations/outlook/oauth/callback",
-        filename: "route",
-        bundlePath: "app/api/v1/integrations/outlook/oauth/callback/route"
-    },
-    distDir: ".next" || 0,
-    relativeProjectDir:  false || '',
-    resolvedPagePath: "/home/runner/work/jarela/jarela/app/api/v1/integrations/outlook/oauth/callback/route.ts",
-    nextConfigOutput,
-    // The lazy require factory ensures that:
-    // - In dev: devRequestTimingInternalsEnd is set before userland executes,
-    //   correctly attributing module load time to application-code rather than
-    //   framework internals.
-    // - In all modes: async modules (route files with top-level await) are
-    //   handled correctly — require() returns a Promise for such modules, which
-    //   ensureUserland() awaits before the first request is handled.
-    userland: ()=>__webpack_require__(89052),
-    // In Turbopack dev mode, also provide a synchronous per-request getter so
-    // server HMR updates are picked up without re-executing the entry chunk.
-    // Using require() (synchronous) avoids adding async overhead that would be
-    // incorrectly attributed to application-code time in devRequestTiming.
-    ... false ? 0 : {}
-});
-// Pull out the exports that we need to expose from the module. This should
-// be eliminated when we've moved the other routes to the new format. These
-// are used to hook into the route.
-const { workAsyncStorage, workUnitAsyncStorage, serverHooks } = routeModule;
-function patchFetch() {
-    return (0,next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__.patchFetch)({
-        workAsyncStorage,
-        workUnitAsyncStorage
-    });
-}
 
-async function handler(req, res, ctx) {
-    if (ctx.requestMeta) {
-        (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.setRequestMeta)(req, ctx.requestMeta);
+// GET /api/v1/integrations/outlook/oauth/callback?code=…&state=…
+//
+// Microsoft redirects the user's browser here after consent. We look up the
+// pending flow by `state`, exchange the auth code for a refresh_token,
+// persist the integration, and return a small HTML page telling the user
+// they can close the tab. The Integrations panel polls /oauth/status.
+async function GET(req) {
+    const url = req.nextUrl;
+    const state = url.searchParams.get("state") ?? "";
+    const code = url.searchParams.get("code") ?? "";
+    const errParam = url.searchParams.get("error");
+    const errDesc = url.searchParams.get("error_description");
+    const flow = state ? (0,_lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__/* .getFlow */ .lv)(state) : undefined;
+    if (!flow) {
+        return (0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .oauthHtmlResponse */ .m)("Authorization session not found or expired. Please retry from Jarela.", true);
     }
-    if (routeModule.isDev) {
-        (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.addRequestMeta)(req, 'devRequestTimingInternalsEnd', process.hrtime.bigint());
+    if (errParam) {
+        const msg = errDesc ? `${errParam}: ${errDesc}` : errParam;
+        (0,_lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__/* .updateFlow */ .Ah)(state, {
+            status: "error",
+            error: msg
+        });
+        return (0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .oauthHtmlResponse */ .m)(`Microsoft reported an error: ${(0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .escapeHtml */ .Z)(msg)}. You can close this tab.`, true);
     }
-    let srcPage = "/api/v1/integrations/outlook/oauth/callback/route";
-    // turbopack doesn't normalize `/index` in the page name
-    // so we need to to process dynamic routes properly
-    // TODO: fix turbopack providing differing value from webpack
-    if (false) {} else if (srcPage === '/index') {
-        // we always normalize /index specifically
-        srcPage = '/';
+    if (!code) {
+        (0,_lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__/* .updateFlow */ .Ah)(state, {
+            status: "error",
+            error: "no code returned"
+        });
+        return (0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .oauthHtmlResponse */ .m)("Microsoft did not return an authorization code.", true);
     }
-    const multiZoneDraftMode = false;
-    const prepareResult = await routeModule.prepare(req, res, {
-        srcPage,
-        multiZoneDraftMode
-    });
-    if (!prepareResult) {
-        res.statusCode = 400;
-        res.end('Bad Request');
-        ctx.waitUntil == null ? void 0 : ctx.waitUntil.call(ctx, Promise.resolve());
-        return null;
-    }
-    const { buildId, deploymentId, params, nextConfig, parsedUrl, isDraftMode, prerenderManifest, routerServerContext, isOnDemandRevalidate, revalidateOnlyGenerated, resolvedPathname, clientReferenceManifest, serverActionsManifest, previewProps } = prepareResult;
-    const normalizedSrcPage = (0,next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__.normalizeAppPath)(srcPage);
-    // Only this route's prerenders can establish ISR or admit generated params.
-    const isPrerendered = Boolean(prerenderManifest.routes[resolvedPathname]) && (routeModule.isDev || (0,next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__.isRouteCacheOwner)(resolvedPathname, routeModule.cacheOwner, prerenderManifest.routes[resolvedPathname]));
-    let isIsr = Boolean(prerenderManifest.dynamicRoutes[normalizedSrcPage] || isPrerendered);
-    const render404 = async ()=>{
-        // TODO: should route-module itself handle rendering the 404
-        if (routerServerContext == null ? void 0 : routerServerContext.render404) {
-            await routerServerContext.render404(req, res, parsedUrl, false);
-        } else {
-            res.end('This page could not be found');
+    try {
+        const tok = await (0,_lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__/* .exchangeCode */ .Dd)({
+            code,
+            clientId: flow.clientId,
+            clientSecret: flow.clientSecret,
+            redirectUri: flow.redirectUri
+        });
+        if (!tok.refresh_token) {
+            const msg = "Microsoft did not return a refresh_token. Make sure your Azure app " + "registration includes the offline_access scope and that the consent " + "screen approves it.";
+            (0,_lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__/* .updateFlow */ .Ah)(state, {
+                status: "error",
+                error: msg
+            });
+            return (0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .oauthHtmlResponse */ .m)(msg, true);
         }
-        return null;
-    };
-    if (isIsr && !isDraftMode) {
-        const prerenderInfo = prerenderManifest.dynamicRoutes[normalizedSrcPage];
-        if (prerenderInfo) {
-            if (prerenderInfo.fallback === false && !isPrerendered) {
-                if (nextConfig.adapterPath) {
-                    return await render404();
-                }
-                throw new next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__.NoFallbackError();
-            }
+        const saved = persistRefreshToken({
+            credentialId: flow.credentialId,
+            clientId: flow.clientId,
+            clientSecret: flow.clientSecret,
+            refreshToken: tok.refresh_token
+        });
+        if ("error" in saved) {
+            (0,_lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__/* .updateFlow */ .Ah)(state, {
+                status: "error",
+                error: saved.error
+            });
+            return (0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .oauthHtmlResponse */ .m)(`Failed to save: ${(0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .escapeHtml */ .Z)(saved.error)}`, true);
         }
+        (0,_lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__/* .updateFlow */ .Ah)(state, {
+            status: "done"
+        });
+        return (0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .oauthHtmlResponse */ .m)("Outlook connected. You can close this tab and return to Jarela.", false);
+    } catch (e) {
+        const msg = (0,_lib_utils_error__WEBPACK_IMPORTED_MODULE_4__/* .errorMessage */ .g)(e);
+        (0,_lib_integrations_microsoft_oauth__WEBPACK_IMPORTED_MODULE_0__/* .updateFlow */ .Ah)(state, {
+            status: "error",
+            error: msg
+        });
+        return (0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .oauthHtmlResponse */ .m)(`Token exchange failed: ${(0,_app_api_v1_integrations_oauth_callback__WEBPACK_IMPORTED_MODULE_3__/* .escapeHtml */ .Z)(msg)}`, true);
     }
-    let cacheKey = null;
-    if (isIsr && !routeModule.isDev && !isDraftMode) {
-        cacheKey = resolvedPathname;
-        // ensure /index and / is normalized to one key
-        cacheKey = cacheKey === '/index' ? '/' : cacheKey;
-    }
-    // Before rendering (which initializes component tree modules), we have to
-    // set the reference manifests to our global store so Server Action's
-    // encryption util can access to them at the top level of the page module.
-    if (serverActionsManifest && clientReferenceManifest) {
-        (0,next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__.setManifestsSingleton)({
-            page: srcPage,
-            clientReferenceManifest,
-            serverActionsManifest
+}
+function persistRefreshToken(input) {
+    if (input.credentialId) {
+        const cred = (0,_lib_stores_credentials__WEBPACK_IMPORTED_MODULE_2__/* .getCredential */ .w_)(input.credentialId);
+        if (!cred || cred.provider !== "outlook") {
+            return {
+                error: "credential not found"
+            };
+        }
+        const merged = {
+            ...(0,_lib_stores_credentials__WEBPACK_IMPORTED_MODULE_2__/* .getCredentialParams */ .WY)(cred),
+            client_id: input.clientId,
+            client_secret: input.clientSecret,
+            refresh_token: input.refreshToken
+        };
+        (0,_lib_stores_credentials__WEBPACK_IMPORTED_MODULE_2__/* .updateCredential */ .nZ)(input.credentialId, {
+            auth_method: "oauth",
+            params: merged
         });
+        return {
+            ok: true
+        };
     }
-    const method = req.method || 'GET';
-    const tracer = (0,next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.getTracer)();
-    const activeSpan = tracer.getActiveScopeSpan();
-    const isWrappedByNextServer = Boolean(routerServerContext == null ? void 0 : routerServerContext.isWrappedByNextServer);
-    const isMinimalMode = Boolean((0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'minimalMode'));
-    const incrementalCache = (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'incrementalCache') || await routeModule.getIncrementalCache(req, nextConfig, previewProps, prerenderManifest, isMinimalMode);
-    incrementalCache == null ? void 0 : incrementalCache.resetRequestCache();
-    globalThis.__incrementalCache = incrementalCache;
-    const context = {
-        params,
-        previewProps,
-        renderOpts: {
-            experimental: {
-                authInterrupts: Boolean(nextConfig.experimental.authInterrupts),
-                useCacheTimeout: nextConfig.experimental.useCacheTimeout,
-                durableUseCacheEntries: Boolean(nextConfig.experimental.durableUseCacheEntries)
-            },
-            cacheComponents: Boolean(nextConfig.cacheComponents),
-            validationLevel: nextConfig.experimental.instantInsights.validationLevel,
-            isDraftMode,
-            incrementalCache,
-            hmrRefreshHash: (0,next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__.getRequestMeta)(req, 'hmrRefreshHash'),
-            cacheLifeProfiles: nextConfig.cacheLife,
-            staticPageGenerationTimeout: nextConfig.staticPageGenerationTimeout,
-            waitUntil: ctx.waitUntil,
-            onClose: (cb)=>{
-                res.on('close', cb);
-            },
-            onAfterTaskError: undefined
+    const saved = (0,_lib_stores_integrations__WEBPACK_IMPORTED_MODULE_1__/* .saveIntegration */ .oO)("outlook", {
+        client_id: input.clientId,
+        client_secret: input.clientSecret,
+        refresh_token: input.refreshToken
+    });
+    if ("error" in saved) return saved;
+    return {
+        ok: true
+    };
+}
+
+
+/***/ }),
+
+/***/ 89080:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   Ah: () => (/* binding */ updateFlow),
+/* harmony export */   Dd: () => (/* binding */ exchangeCode),
+/* harmony export */   F8: () => (/* binding */ createFlow),
+/* harmony export */   i8: () => (/* binding */ getMicrosoftAccessToken),
+/* harmony export */   jG: () => (/* binding */ resolveMicrosoftAuth),
+/* harmony export */   lv: () => (/* binding */ getFlow),
+/* harmony export */   op: () => (/* binding */ graphPaged),
+/* harmony export */   xj: () => (/* binding */ buildAuthorizeUrl),
+/* harmony export */   z$: () => (/* binding */ graphFetch)
+/* harmony export */ });
+/* unused harmony export MICROSOFT_SCOPES */
+/* harmony import */ var _lib_stores_integrations__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(78228);
+/* harmony import */ var _lib_utils_oauth_flow_store__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(56362);
+/* harmony import */ var _lib_utils_json__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(53638);
+/* harmony import */ var _lib_utils_error__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(22032);
+/* harmony import */ var _lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(22632);
+// Ephemeral state store + shared auth helpers for the in-app Microsoft OAuth
+// flow. Mirrors lib/integrations/gmail-oauth.ts but targets the Microsoft
+// identity platform (v2.0 endpoint, common tenant by default) and Microsoft
+// Graph as the downstream API surface (Outlook Mail + Calendar in v1).
+//
+// The user types client_id + client_secret in the Integrations panel and
+// clicks "Connect Outlook". We POST those to /oauth/start, which stashes
+// them here keyed by a random `state` token and returns the Microsoft
+// authorize URL. The browser opens that URL; MS bounces back to
+// /oauth/callback with `?code&state`, which exchanges the code for a
+// refresh_token (granted because we asked for `offline_access`) and
+// persists the integration. The panel polls /oauth/status separately.
+//
+// Pinned to globalThis so HMR in dev doesn't lose pending flows.
+
+
+
+
+
+const flowStore = (0,_lib_utils_oauth_flow_store__WEBPACK_IMPORTED_MODULE_1__/* .createOAuthFlowStore */ .R)({
+    globalKey: "__msOauthFlows"
+});
+const createFlow = flowStore.create;
+const getFlow = flowStore.get;
+const updateFlow = flowStore.update;
+// Tenant selector. `common` accepts both personal Microsoft accounts
+// (@outlook.com, @hotmail.com, @live.com) and work/school M365 accounts.
+// Switch to `consumers` to lock to personal only, or `organizations` for
+// work/school only. We expose this as an env override for power users but
+// don't surface it in the UI yet.
+const TENANT = process.env.OUTLOOK_TENANT?.trim() || "common";
+// Delegated Graph scopes the agent needs. Keep narrow:
+//   - offline_access  → required for a refresh_token (MS counterpart of
+//                       Google's access_type=offline).
+//   - User.Read       → used by the test endpoint to call /me.
+//   - Mail.ReadWrite  → search/read mail, create drafts, mark read,
+//                       move to folders (incl. DeletedItems).
+//   - Mail.Send       → send mail when the user explicitly asks for it.
+//   - Calendars.ReadWrite → list/get/create/update/delete events on the
+//                           user's existing calendars.
+//   - Tasks.ReadWrite → list/get/create/update/complete/delete Microsoft
+//                       To Do tasks and lists (ms_todo_* tools).
+//   - People.Read     → resolve "who is X" / frequent contacts via
+//                       /me/people (ms_people_resolve tool).
+const MICROSOFT_SCOPES = [
+    "offline_access",
+    "User.Read",
+    "Mail.ReadWrite",
+    "Mail.Send",
+    "Calendars.ReadWrite",
+    "Tasks.ReadWrite",
+    "People.Read"
+];
+function buildAuthorizeUrl(opts) {
+    const p = new URLSearchParams({
+        client_id: opts.clientId,
+        redirect_uri: opts.redirectUri,
+        response_type: "code",
+        response_mode: "query",
+        scope: MICROSOFT_SCOPES.join(" "),
+        // Force consent so a returning user actually re-grants any newly-added
+        // scope (otherwise MS silently reuses the prior grant minus the new bit).
+        prompt: "consent",
+        state: opts.state
+    });
+    return `https://login.microsoftonline.com/${TENANT}/oauth2/v2.0/authorize?${p.toString()}`;
+}
+// NOTE: Unlike Google, MS v2 endpoint **requires** the `scope` parameter on
+// every grant_type call (both authorization_code and refresh_token). Leaving
+// it out yields `AADSTS900144: The request body must contain the following
+// parameter: 'scope'.`. We always pass the full scope set.
+async function exchangeCode(opts) {
+    const clientId = (0,_lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__/* .sanitizeOAuthInput */ .d)(opts.clientId) ?? "";
+    const clientSecret = (0,_lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__/* .sanitizeOAuthInput */ .d)(opts.clientSecret) ?? "";
+    const body = new URLSearchParams({
+        code: opts.code,
+        client_id: clientId,
+        client_secret: clientSecret,
+        redirect_uri: opts.redirectUri,
+        grant_type: "authorization_code",
+        scope: MICROSOFT_SCOPES.join(" ")
+    });
+    const res = await fetch(`https://login.microsoftonline.com/${TENANT}/oauth2/v2.0/token`, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/x-www-form-urlencoded"
         },
-        sharedContext: {
-            buildId,
-            deploymentId
-        }
+        body: body.toString(),
+        signal: AbortSignal.timeout(30000)
+    });
+    const text = await res.text();
+    const parsed = (0,_lib_utils_json__WEBPACK_IMPORTED_MODULE_3__/* .parseJsonSafe */ .p)(text, {});
+    if (!res.ok) {
+        const err = parsed["error_description"] || parsed["error"] || text || `HTTP ${res.status}`;
+        console.error(`[microsoft-oauth] token exchange rejected (${res.status}): ${err} | client_id ${(0,_lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__/* .secretFingerprint */ .n)(clientId)} | client_secret ${(0,_lib_utils_oauth_input__WEBPACK_IMPORTED_MODULE_2__/* .secretFingerprint */ .n)(clientSecret)}`);
+        throw new Error(err);
+    }
+    return parsed;
+}
+function resolveMicrosoftAuth() {
+    const envId = process.env.OUTLOOK_CLIENT_ID;
+    const envSecret = process.env.OUTLOOK_CLIENT_SECRET;
+    const envRefresh = process.env.OUTLOOK_REFRESH_TOKEN;
+    if (envId && envSecret && envRefresh) {
+        return {
+            client_id: envId,
+            client_secret: envSecret,
+            refresh_token: envRefresh
+        };
+    }
+    const saved = (0,_lib_stores_integrations__WEBPACK_IMPORTED_MODULE_0__/* .getIntegrationRaw */ .$G)("outlook");
+    if (saved?.client_id && saved.client_secret && saved.refresh_token) {
+        return {
+            client_id: saved.client_id,
+            client_secret: saved.client_secret,
+            refresh_token: saved.refresh_token
+        };
+    }
+    return {
+        error: "Microsoft account not connected. Open the gear menu → Integrations tab → " + "Outlook card and click Connect Outlook to authorize Mail, Mail.Send, Calendar, Tasks, and People access."
     };
-    const nodeNextReq = new next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__.NodeNextRequest(req);
-    const nodeNextRes = new next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__.NodeNextResponse(res);
-    const nextReq = next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__.NextRequestAdapter.fromNodeNextRequest(nodeNextReq, (0,next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__.signalFromNodeResponse)(res));
-    const responseGenerator = async ({ previousCacheEntry })=>{
-        try {
-            if (!isMinimalMode && isOnDemandRevalidate && revalidateOnlyGenerated && !previousCacheEntry) {
-                res.statusCode = 404;
-                // on-demand revalidate always sets this header
-                res.setHeader('x-nextjs-cache', 'REVALIDATED');
-                res.end('This page could not be found');
-                return null;
-            }
-            const response = cacheKey === null ? await routeModule.handle(nextReq, context) : await routeModule.prerender(nextReq, context);
-            req.fetchMetrics = context.renderOpts.fetchMetrics;
-            let pendingWaitUntil = context.renderOpts.pendingWaitUntil;
-            // Attempt using provided waitUntil if available
-            // if it's not we fallback to sendResponse's handling
-            if (pendingWaitUntil) {
-                if (ctx.waitUntil) {
-                    ctx.waitUntil(pendingWaitUntil);
-                    pendingWaitUntil = undefined;
-                }
-            }
-            const cacheTags = context.renderOpts.collectedTags;
-            // If the request is for a static response, we can cache it so long
-            // as it's not edge.
-            if (isIsr) {
-                const blob = await response.blob();
-                // Copy the headers from the response.
-                const headers = (0,next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__.toNodeOutgoingHttpHeaders)(response.headers);
-                if (cacheTags) {
-                    headers[next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.NEXT_CACHE_TAGS_HEADER] = cacheTags;
-                }
-                if (!headers['content-type'] && blob.type) {
-                    headers['content-type'] = blob.type;
-                }
-                const revalidate = typeof context.renderOpts.collectedRevalidate === 'undefined' || context.renderOpts.collectedRevalidate >= next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.INFINITE_CACHE ? false : context.renderOpts.collectedRevalidate;
-                const expire = typeof context.renderOpts.collectedExpire === 'undefined' || context.renderOpts.collectedExpire >= next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.INFINITE_CACHE ? // route has a numeric `revalidate` but didn't declare an
-                // explicit `expire` (e.g. via `cacheLife`). This mirrors the
-                // build-time fallback in `build/index.ts` so cache entries
-                // and the response Cache-Control header agree on the route's
-                // effective expire. Routes that opt out of revalidation
-                // (`revalidate: false`) or that are dynamic (`revalidate: 0`)
-                // keep `expire: undefined`.
-                revalidate !== false && revalidate > 0 ? nextConfig.expireTime : undefined : context.renderOpts.collectedExpire;
-                // Create the cache entry for the response.
-                const cacheEntry = {
-                    value: {
-                        kind: next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__.CachedRouteKind.APP_ROUTE,
-                        status: response.status,
-                        body: Buffer.from(await blob.arrayBuffer()),
-                        headers
-                    },
-                    cacheControl: {
-                        revalidate,
-                        expire
-                    }
-                };
-                return cacheEntry;
-            } else {
-                // send response without caching if not ISR
-                await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, response, pendingWaitUntil);
-                return null;
-            }
-        } catch (err) {
-            // if this is a background revalidate we need to report
-            // the request error here as it won't be bubbled
-            if (previousCacheEntry == null ? void 0 : previousCacheEntry.isStale) {
-                const silenceLog = false;
-                await routeModule.onRequestError(req, err, {
-                    routerKind: 'App Router',
-                    routePath: srcPage,
-                    routeType: 'route',
-                    revalidateReason: (0,next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__.getRevalidateReason)({
-                        isStaticGeneration: cacheKey !== null,
-                        isOnDemandRevalidate
-                    })
-                }, silenceLog, routerServerContext);
-            }
-            throw err;
+}
+const accessTokenCache = new Map();
+function cacheKey(auth) {
+    return auth.refresh_token.slice(0, 20);
+}
+// Force-evict a cached access token (e.g. after a 401). The next call to
+// getMicrosoftAccessToken will refresh against the v2 token endpoint.
+function bustAccessToken(auth) {
+    accessTokenCache.delete(cacheKey(auth));
+}
+async function getMicrosoftAccessToken(auth) {
+    const key = cacheKey(auth);
+    const cached = accessTokenCache.get(key);
+    if (cached && cached.expires_at > Date.now() + 60000) return cached.token;
+    const body = new URLSearchParams({
+        client_id: auth.client_id,
+        client_secret: auth.client_secret,
+        refresh_token: auth.refresh_token,
+        grant_type: "refresh_token",
+        // Required on the v2 endpoint even for refresh_token grants.
+        scope: MICROSOFT_SCOPES.join(" ")
+    });
+    try {
+        const res = await fetch(`https://login.microsoftonline.com/${TENANT}/oauth2/v2.0/token`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/x-www-form-urlencoded"
+            },
+            body: body.toString(),
+            signal: AbortSignal.timeout(30000)
+        });
+        const text = await res.text();
+        if (!res.ok) {
+            accessTokenCache.delete(key);
+            return {
+                error: `Microsoft OAuth refresh failed (${res.status}): ${text.slice(0, 300)}`
+            };
         }
-    };
-    const handleResponse = async (currentSpan, parentSpan)=>{
+        const parsed = JSON.parse(text);
+        if (!parsed.access_token) return {
+            error: "OAuth response missing access_token"
+        };
+        const expires_at = Date.now() + (parsed.expires_in ?? 3000) * 1000;
+        accessTokenCache.set(key, {
+            token: parsed.access_token,
+            expires_at
+        });
+        return parsed.access_token;
+    } catch (err) {
+        return {
+            error: `Microsoft OAuth refresh threw: ${(0,_lib_utils_error__WEBPACK_IMPORTED_MODULE_4__/* .errorMessage */ .g)(err)}`
+        };
+    }
+}
+// Path-prefix → required Graph scope. Used to render helpful 403 messages
+// pointing the user at the exact scope they need to reconnect with.
+const SCOPE_HINTS = [
+    {
+        prefix: "/me/messages",
+        scope: "Mail.ReadWrite"
+    },
+    {
+        prefix: "/me/mailFolders",
+        scope: "Mail.ReadWrite"
+    },
+    {
+        prefix: "/me/sendMail",
+        scope: "Mail.Send"
+    },
+    {
+        prefix: "/me/events",
+        scope: "Calendars.ReadWrite"
+    },
+    {
+        prefix: "/me/calendar",
+        scope: "Calendars.ReadWrite"
+    },
+    {
+        prefix: "/me/calendars",
+        scope: "Calendars.ReadWrite"
+    },
+    {
+        prefix: "/me/todo",
+        scope: "Tasks.ReadWrite"
+    },
+    {
+        prefix: "/me/people",
+        scope: "People.Read"
+    },
+    {
+        prefix: "/me/contacts",
+        scope: "Contacts.Read"
+    },
+    {
+        prefix: "/me/drive",
+        scope: "Files.Read"
+    },
+    {
+        prefix: "/me/insights",
+        scope: "Sites.Read.All"
+    },
+    {
+        prefix: "/search/query",
+        scope: "Mail.Read Files.Read.All"
+    },
+    {
+        prefix: "/me",
+        scope: "User.Read"
+    }
+];
+function scopeHintFor(path) {
+    const p = path.startsWith("http") ? new URL(path).pathname.replace(/^\/v1\.0/, "") : path;
+    for (const { prefix, scope } of SCOPE_HINTS){
+        if (p.startsWith(prefix)) return scope;
+    }
+    return null;
+}
+function parseRetryAfter(headerVal) {
+    if (!headerVal) return 0;
+    const secs = Number.parseInt(headerVal, 10);
+    if (Number.isFinite(secs) && secs >= 0) return Math.min(secs, 30) * 1000;
+    const ts = Date.parse(headerVal);
+    if (!Number.isNaN(ts)) return Math.max(0, Math.min(ts - Date.now(), 30000));
+    return 0;
+}
+function backoffFor(attempt) {
+    return Math.min(500 * 2 ** attempt, 4000);
+}
+// Shared Graph fetch helper. Used by lib/tools/outlook.ts,
+// lib/tools/outlook-calendar.ts, lib/tools/ms-todo.ts, lib/tools/ms-graph.ts.
+// Returns parsed JSON or { error: string, url? }. 204 No Content returns
+// { ok: true }.
+//
+// Built-in resilience:
+//   - 401 Unauthorized → drop the cached access token and retry once with a
+//     freshly refreshed one (covers token-revoked-mid-cache edge cases).
+//   - 429 / 503 → honour the `Retry-After` header (capped at 30s) or fall
+//     back to exponential backoff. Retries up to 3 times.
+//   - 403 Forbidden → surface a scope hint ("reconnect with X") so the
+//     operator knows what to grant.
+async function graphFetch(auth, path, init) {
+    const url = path.startsWith("http") ? path : `https://graph.microsoft.com/v1.0${path}`;
+    let attempt = 0;
+    let triedReauth = false;
+    while(true){
+        const token = await getMicrosoftAccessToken(auth);
+        if (typeof token !== "string") return token;
+        let res;
         try {
-            var _cacheEntry_value;
-            const cacheEntry = await routeModule.handleResponse({
-                req,
-                nextConfig,
-                cacheKey,
-                routeKind: next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__.RouteKind.APP_ROUTE,
-                isFallback: false,
-                previewProps,
-                prerenderManifest,
-                isRoutePPREnabled: false,
-                isOnDemandRevalidate,
-                revalidateOnlyGenerated,
-                responseGenerator,
-                waitUntil: ctx.waitUntil,
-                isMinimalMode
+            res = await fetch(url, {
+                ...init,
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                    Accept: "application/json",
+                    "Content-Type": "application/json",
+                    ...init?.headers ?? {}
+                },
+                signal: AbortSignal.timeout(30000)
             });
-            if (cacheEntry !== null && 'error' in cacheEntry) {
-                throw cacheEntry.error;
-            }
-            // we don't create a cacheEntry for ISR
-            if (!isIsr) {
-                return;
-            }
-            if ((cacheEntry == null ? void 0 : (_cacheEntry_value = cacheEntry.value) == null ? void 0 : _cacheEntry_value.kind) !== next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__.CachedRouteKind.APP_ROUTE) {
-                var _cacheEntry_value1;
-                throw new Error(`Invariant: app-route received invalid cache entry ${cacheEntry == null ? void 0 : (_cacheEntry_value1 = cacheEntry.value) == null ? void 0 : _cacheEntry_value1.kind}`);
-            }
-            if (!isMinimalMode) {
-                res.setHeader('x-nextjs-cache', isOnDemandRevalidate ? 'REVALIDATED' : cacheEntry.isMiss ? 'MISS' : cacheEntry.isStale ? 'STALE' : 'HIT');
-            }
-            // Draft mode should never be cached
-            if (isDraftMode) {
-                res.setHeader('Cache-Control', 'private, no-cache, no-store, max-age=0, must-revalidate');
-            }
-            const headers = (0,next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__.fromNodeOutgoingHttpHeaders)(cacheEntry.value.headers);
-            if (!(isMinimalMode && isIsr)) {
-                headers.delete(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__.NEXT_CACHE_TAGS_HEADER);
-            }
-            // If cache control is already set on the response we don't
-            // override it to allow users to customize it via next.config
-            if (cacheEntry.cacheControl && !res.getHeader('Cache-Control') && !headers.get('Cache-Control')) {
-                headers.set('Cache-Control', (0,next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__.getCacheControlHeader)(cacheEntry.cacheControl));
-            }
-            await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, // @ts-expect-error - Argument of type 'Buffer<ArrayBufferLike>' is not assignable to parameter of type 'BodyInit | null | undefined'.
-            new Response(cacheEntry.value.body, {
-                headers,
-                status: cacheEntry.value.status || 200
-            }));
-            return;
         } catch (err) {
-            if (!(err instanceof next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__.NoFallbackError)) {
-                const silenceLog = false;
-                await routeModule.onRequestError(req, err, {
-                    routerKind: 'App Router',
-                    routePath: normalizedSrcPage,
-                    routeType: 'route',
-                    revalidateReason: (0,next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__.getRevalidateReason)({
-                        isStaticGeneration: cacheKey !== null,
-                        isOnDemandRevalidate
-                    })
-                }, silenceLog, routerServerContext);
-            }
-            // rethrow so that we can handle serving error page
-            // If this is during static generation, throw the error again.
-            if (isIsr) throw err;
-            // Otherwise, send a 500 response unless the original response has
-            // already committed. In that case, preserve its status code for
-            // telemetry while still recording the failure and terminating a response
-            // that the failed pipeline left open.
-            if (res.headersSent) {
-                if (currentSpan) {
-                    const error = err instanceof Error ? err : new Error('Unknown app route error');
-                    currentSpan.recordException(error);
-                    currentSpan.setStatus({
-                        code: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanStatusCode.ERROR,
-                        message: error.message
-                    });
-                    currentSpan.setAttribute('error.type', error.name);
-                }
-                if (!res.writableEnded && !res.destroyed) {
-                    res.end();
+            return {
+                error: `Graph fetch threw: ${(0,_lib_utils_error__WEBPACK_IMPORTED_MODULE_4__/* .errorMessage */ .g)(err)}`,
+                url
+            };
+        }
+        if (res.status === 204) return {
+            ok: true
+        };
+        if (res.status === 401 && !triedReauth) {
+            triedReauth = true;
+            bustAccessToken(auth);
+            continue;
+        }
+        if ((res.status === 429 || res.status === 503) && attempt < 3) {
+            const waitMs = parseRetryAfter(res.headers.get("Retry-After")) ?? backoffFor(attempt);
+            attempt += 1;
+            await new Promise((r)=>setTimeout(r, waitMs));
+            continue;
+        }
+        const text = await res.text();
+        if (!res.ok) {
+            let msg = `Graph ${res.status}: ${text.slice(0, 500)}`;
+            if (res.status === 403) {
+                const hint = scopeHintFor(path);
+                if (hint) {
+                    msg += ` — reconnect the Microsoft integration with scope: ${hint}`;
                 }
-            } else {
-                await (0,next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__/* .sendResponse */ .I)(nodeNextReq, nodeNextRes, new Response(null, {
-                    status: 500
-                }));
             }
-            return;
-        } finally{
-            ;
-            (()=>{
-                if (!currentSpan) {
-                    return;
-                }
-                let statusCode = res.statusCode;
-                currentSpan.setAttributes({
-                    'http.status_code': statusCode,
-                    'next.rsc': false
-                });
-                if (statusCode && statusCode >= 500) {
-                    // For 5xx status codes: SHOULD be set to 'Error' span status.
-                    // x-ref: https://opentelemetry.io/docs/specs/semconv/http/http-spans/#status
-                    currentSpan.setStatus({
-                        code: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanStatusCode.ERROR
-                    });
-                    // For span status 'Error', SHOULD set 'error.type' attribute.
-                    currentSpan.setAttribute('error.type', statusCode.toString());
-                }
-                const rootSpanAttributes = tracer.getRootSpanAttributes();
-                // We were unable to get attributes, probably OTEL is not enabled
-                if (!rootSpanAttributes) {
-                    return;
-                }
-                if (rootSpanAttributes.get('next.span_type') !== next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__.BaseServerSpan.handleRequest) {
-                    console.warn(`Unexpected root span type '${rootSpanAttributes.get('next.span_type')}'. Please report this Next.js issue https://github.com/vercel/next.js`);
-                    return;
-                }
-                const route = rootSpanAttributes.get('next.route') || normalizedSrcPage;
-                const name = `${method} ${route}`;
-                currentSpan.setAttributes({
-                    'next.route': route,
-                    'http.route': route,
-                    'next.span_name': name
-                });
-                currentSpan.updateName(name);
-                // Propagate http.route to the parent span if one exists (e.g.
-                // a platform-created HTTP span in adapter deployments).
-                if (parentSpan && parentSpan !== currentSpan) {
-                    parentSpan.setAttribute('http.route', route);
-                    parentSpan.updateName(name);
-                }
-            })();
+            return {
+                error: msg,
+                url
+            };
         }
-    };
-    // TODO: activeSpan code path is for when wrapped by
-    // next-server can be removed when this is no longer used
-    if (isWrappedByNextServer && activeSpan) {
-        await handleResponse(activeSpan, undefined);
-    } else {
-        let parentSpan = tracer.getActiveScopeSpan();
-        await tracer.withPropagatedContext(req.headers, ()=>tracer.trace(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__.BaseServerSpan.handleRequest, {
-                spanName: `${method} ${srcPage}`,
-                kind: next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__.SpanKind.SERVER,
-                attributes: {
-                    'http.method': method,
-                    'http.target': req.url
-                }
-            }, (span)=>handleResponse(span, parentSpan)), undefined, !isWrappedByNextServer);
+        try {
+            return JSON.parse(text);
+        } catch  {
+            return text;
+        }
+    }
+}
+// Follow @odata.nextLink across pages and concatenate `value` arrays.
+// Stops at `maxPages` (default 5) to bound context cost. Returns the same
+// shape as graphFetch (object with `.value`) but with the merged array, or
+// the original error shape if any page errored.
+async function graphPaged(auth, path, opts) {
+    const maxPages = opts?.maxPages ?? 5;
+    let current = path;
+    const merged = [];
+    let pages = 0;
+    while(current && pages < maxPages){
+        const page = await graphFetch(auth, current, opts?.init);
+        if (page && typeof page === "object" && "error" in page) return page;
+        const body = page;
+        if (Array.isArray(body.value)) merged.push(...body.value);
+        current = typeof body["@odata.nextLink"] === "string" ? body["@odata.nextLink"] : null;
+        pages += 1;
     }
+    return {
+        value: merged,
+        pages
+    };
 }
 
-//# sourceMappingURL=app-route.js.map
 
+/***/ }),
+
+/***/ 94735:
+/***/ ((module) => {
+
+module.exports = require("events");
 
 /***/ }),
 
@@ -1377,7 +1377,7 @@ module.exports = import("@huggingface/transformers");;
 var __webpack_require__ = require("../../../../../../../webpack-runtime.js");
 __webpack_require__.C(exports);
 var __webpack_exec__ = (moduleId) => (__webpack_require__(__webpack_require__.s = moduleId))
-var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(98671)));
+var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(82637)));
 module.exports = __webpack_exports__;
 
 })();