@goforgeit/mcp-microsoft-365 0.4.11 → 0.4.19

package/dist/index.js

@@ -17,7 +17,9 @@ var ForgeOAuthTokensSchema = z.object({
   connectedAt: z.string(),
   scope: z.string().optional(),
   email: z.string().optional(),
-  accountId: z.string().optional()
+  accountId: z.string().optional(),
+  /** User-level access token (Slack xoxp-* token for search operations) */
+  userAccessToken: z.string().optional()
 });
 var DEFAULT_REFRESH_BUFFER_MS = 5 * 60 * 1e3;
 function createForgeTokenManager(options) {
@@ -99,6 +101,12 @@ function createForgeTokenManager(options) {
       }
       return cachedTokens.accessToken;
     },
+    async getUserAccessToken() {
+      if (!cachedTokens) {
+        await this.getAccessToken();
+      }
+      return cachedTokens?.userAccessToken ?? null;
+    },
     getTokenInfo() {
       return cachedTokens;
     },

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../../shared/src/mcp-auth/forge-token-manager.ts"],"sourcesContent":["/**\n * @goforgeit/mcp-microsoft-365 — MCP server for Microsoft 365\n *\n * Provides Outlook, Calendar, and OneDrive tools via stdio transport.\n * Uses Microsoft Graph REST API directly (no SDK dependency).\n */\n\nimport { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport { z } from 'zod';\nimport { createForgeTokenManager } from '@forge/shared/mcp-auth';\n\nconst MS_TOKEN_URL = 'https://login.microsoftonline.com/common/oauth2/v2.0/token';\nconst GRAPH_BASE = 'https://graph.microsoft.com/v1.0';\n\nexport interface Microsoft365MCPOptions {\n  tokenPath: string;\n  clientId: string;\n  clientSecret: string;\n}\n\ninterface ToolHandler {\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  handler: (args: any) => Promise<{ content: Array<{ type: 'text'; text: string }> }>;\n}\n\ninterface Microsoft365MCPServer {\n  server: McpServer;\n  getRegisteredTools(): Record<string, ToolHandler>;\n  start(): Promise<void>;\n}\n\nexport function createMicrosoft365MCPServer(\n  options: Microsoft365MCPOptions,\n): Microsoft365MCPServer {\n  const tokenManager = createForgeTokenManager({\n    tokenPath: options.tokenPath,\n    clientId: options.clientId,\n    clientSecret: options.clientSecret,\n    tokenUrl: MS_TOKEN_URL,\n  });\n\n  const server = new McpServer({\n    name: '@goforgeit/mcp-microsoft-365',\n    version: '0.1.0',\n  });\n\n  const registeredTools: Record<string, ToolHandler> = {};\n\n  function registerTool(\n    name: string,\n    description: string,\n    schema: Record<string, z.ZodType>,\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    handler: (args: any) => Promise<{ content: Array<{ type: 'text'; text: string }> }>,\n  ) {\n    registeredTools[name] = { handler };\n    server.tool(name, description, schema, handler);\n  }\n\n  async function graphRequest(\n    path: string,\n    method: 'GET' | 'POST' | 'PATCH' | 'DELETE' = 'GET',\n    body?: unknown,\n  ): Promise<unknown> {\n    const token = await tokenManager.getAccessToken();\n    const options: RequestInit = {\n      method,\n      headers: {\n        Authorization: `Bearer ${token}`,\n        'Content-Type': 'application/json',\n      },\n    };\n    if (body) options.body = JSON.stringify(body);\n\n    const response = await fetch(`${GRAPH_BASE}${path}`, options);\n\n    if (!response.ok) {\n      const errorText = await response.text();\n      throw new Error(`Microsoft Graph API error (${response.status}): ${errorText}`);\n    }\n\n    if (response.status === 204) return {};\n    return response.json();\n  }\n\n  // --- Outlook Tools ---\n\n  registerTool(\n    'search_emails',\n    'Search Outlook emails',\n    {\n      query: z.string().describe('Search query (OData $search syntax)'),\n      top: z.number().optional().default(10).describe('Maximum results'),\n    },\n    async (args: { query: string; top?: number }) => {\n      const top = args.top || 10;\n      const data = (await graphRequest(\n        `/me/messages?$search=\"${encodeURIComponent(args.query)}\"&$top=${top}&$select=id,subject,from,receivedDateTime,bodyPreview,isRead`,\n      )) as { value: unknown[] };\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: JSON.stringify({ messages: data.value }),\n          },\n        ],\n      };\n    },\n  );\n\n  registerTool(\n    'get_email',\n    'Get full email details by message ID',\n    {\n      messageId: z.string().describe('Outlook message ID'),\n    },\n    async (args: { messageId: string }) => {\n      const data = await graphRequest(`/me/messages/${args.messageId}`);\n      return {\n        content: [{ type: 'text' as const, text: JSON.stringify(data) }],\n      };\n    },\n  );\n\n  registerTool('list_folders', 'List Outlook mail folders', {}, async () => {\n    const data = (await graphRequest('/me/mailFolders?$top=50')) as { value: unknown[] };\n    return {\n      content: [\n        {\n          type: 'text' as const,\n          text: JSON.stringify({ folders: data.value }),\n        },\n      ],\n    };\n  });\n\n  // --- Outlook Write Tools ---\n\n  registerTool(\n    'create_draft',\n    'Create an Outlook draft email',\n    {\n      to: z.string().describe('Recipient email address'),\n      subject: z.string().describe('Email subject'),\n      body: z.string().describe('Email body (plain text)'),\n    },\n    async (args: { to: string; subject: string; body: string }) => {\n      const data = await graphRequest('/me/messages', 'POST', {\n        subject: args.subject,\n        body: { contentType: 'Text', content: args.body },\n        toRecipients: [{ emailAddress: { address: args.to } }],\n      });\n      return {\n        content: [{ type: 'text' as const, text: JSON.stringify(data) }],\n      };\n    },\n  );\n\n  registerTool(\n    'archive_email',\n    'Move an Outlook email to Archive folder',\n    {\n      messageId: z.string().describe('Outlook message ID to archive'),\n    },\n    async (args: { messageId: string }) => {\n      const data = await graphRequest(`/me/messages/${args.messageId}/move`, 'POST', {\n        destinationId: 'archive',\n      });\n      return {\n        content: [{ type: 'text' as const, text: JSON.stringify(data) }],\n      };\n    },\n  );\n\n  // --- Calendar Tools ---\n\n  registerTool(\n    'list_events',\n    'List calendar events in a date range',\n    {\n      startDateTime: z.string().optional().describe('Start of range (ISO 8601)'),\n      endDateTime: z.string().optional().describe('End of range (ISO 8601)'),\n      top: z.number().optional().default(25).describe('Maximum events'),\n    },\n    async (args: { startDateTime?: string; endDateTime?: string; top?: number }) => {\n      let path = '/me/events?$orderby=start/dateTime';\n      path += `&$top=${args.top || 25}`;\n      if (args.startDateTime) {\n        path += `&$filter=start/dateTime ge '${args.startDateTime}'`;\n        if (args.endDateTime) {\n          path += ` and end/dateTime le '${args.endDateTime}'`;\n        }\n      }\n      path +=\n        '&$select=id,subject,start,end,location,attendees,bodyPreview,webLink,isAllDay,organizer';\n\n      const data = (await graphRequest(path)) as { value: unknown[] };\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: JSON.stringify({ events: data.value }),\n          },\n        ],\n      };\n    },\n  );\n\n  registerTool(\n    'get_event',\n    'Get a specific calendar event by ID',\n    {\n      eventId: z.string().describe('Calendar event ID'),\n    },\n    async (args: { eventId: string }) => {\n      const data = await graphRequest(`/me/events/${args.eventId}`);\n      return {\n        content: [{ type: 'text' as const, text: JSON.stringify(data) }],\n      };\n    },\n  );\n\n  // --- Calendar Write Tools ---\n\n  registerTool(\n    'create_event',\n    'Create a new calendar event in Outlook',\n    {\n      subject: z.string().describe('Event title'),\n      startDateTime: z.string().describe('Start time (ISO 8601)'),\n      endDateTime: z.string().describe('End time (ISO 8601)'),\n      body: z.string().optional().describe('Event description'),\n      location: z.string().optional().describe('Event location'),\n      attendeeEmails: z.array(z.string()).optional().describe('Attendee email addresses'),\n    },\n    async (args: {\n      subject: string;\n      startDateTime: string;\n      endDateTime: string;\n      body?: string;\n      location?: string;\n      attendeeEmails?: string[];\n    }) => {\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const event: Record<string, any> = {\n        subject: args.subject,\n        start: { dateTime: args.startDateTime, timeZone: 'UTC' },\n        end: { dateTime: args.endDateTime, timeZone: 'UTC' },\n      };\n      if (args.body) event.body = { contentType: 'Text', content: args.body };\n      if (args.location) event.location = { displayName: args.location };\n      if (args.attendeeEmails) {\n        event.attendees = args.attendeeEmails.map((email) => ({\n          emailAddress: { address: email },\n          type: 'required',\n        }));\n      }\n\n      const data = await graphRequest('/me/events', 'POST', event);\n      return {\n        content: [{ type: 'text' as const, text: JSON.stringify(data) }],\n      };\n    },\n  );\n\n  registerTool(\n    'update_event',\n    'Update an existing Outlook calendar event',\n    {\n      eventId: z.string().describe('Calendar event ID'),\n      subject: z.string().optional().describe('New event title'),\n      startDateTime: z.string().optional().describe('New start time (ISO 8601)'),\n      endDateTime: z.string().optional().describe('New end time (ISO 8601)'),\n      body: z.string().optional().describe('New event description'),\n      location: z.string().optional().describe('New event location'),\n    },\n    async (args: {\n      eventId: string;\n      subject?: string;\n      startDateTime?: string;\n      endDateTime?: string;\n      body?: string;\n      location?: string;\n    }) => {\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const patch: Record<string, any> = {};\n      if (args.subject) patch.subject = args.subject;\n      if (args.body) patch.body = { contentType: 'Text', content: args.body };\n      if (args.location) patch.location = { displayName: args.location };\n      if (args.startDateTime) patch.start = { dateTime: args.startDateTime, timeZone: 'UTC' };\n      if (args.endDateTime) patch.end = { dateTime: args.endDateTime, timeZone: 'UTC' };\n\n      const data = await graphRequest(`/me/events/${args.eventId}`, 'PATCH', patch);\n      return {\n        content: [{ type: 'text' as const, text: JSON.stringify(data) }],\n      };\n    },\n  );\n\n  registerTool(\n    'delete_event',\n    'Delete an Outlook calendar event',\n    {\n      eventId: z.string().describe('Calendar event ID to delete'),\n    },\n    async (args: { eventId: string }) => {\n      await graphRequest(`/me/events/${args.eventId}`, 'DELETE');\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: JSON.stringify({ deleted: true, eventId: args.eventId }),\n          },\n        ],\n      };\n    },\n  );\n\n  // --- OneDrive Tools ---\n\n  registerTool(\n    'search_files',\n    'Search OneDrive files',\n    {\n      query: z.string().describe('Search query'),\n      top: z.number().optional().default(20).describe('Maximum results'),\n    },\n    async (args: { query: string; top?: number }) => {\n      const top = args.top || 20;\n      const data = (await graphRequest(\n        `/me/drive/root/search(q='${encodeURIComponent(args.query)}')?$top=${top}&$select=id,name,file,size,lastModifiedDateTime,webUrl`,\n      )) as { value: unknown[] };\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: JSON.stringify({ files: data.value }),\n          },\n        ],\n      };\n    },\n  );\n\n  registerTool(\n    'get_file_content',\n    'Get OneDrive file metadata by item ID',\n    {\n      itemId: z.string().describe('OneDrive item ID'),\n    },\n    async (args: { itemId: string }) => {\n      const data = await graphRequest(`/me/drive/items/${args.itemId}`);\n      return {\n        content: [{ type: 'text' as const, text: JSON.stringify(data) }],\n      };\n    },\n  );\n\n  return {\n    server,\n    getRegisteredTools() {\n      return registeredTools;\n    },\n    async start() {\n      const transport = new StdioServerTransport();\n      await server.connect(transport);\n    },\n  };\n}\n\n// CLI entry point\nconst isMainModule =\n  process.argv[1] && import.meta.url.endsWith(process.argv[1].replace(/\\\\/g, '/'));\nif (isMainModule || process.env.FORGE_MCP_START === 'true') {\n  const tokenPath = process.env.FORGE_TOKEN_PATH;\n  const clientId = process.env.FORGE_CLIENT_ID;\n  const clientSecret = process.env.FORGE_CLIENT_SECRET;\n\n  if (!tokenPath || !clientId || !clientSecret) {\n    console.error(\n      'Required environment variables: FORGE_TOKEN_PATH, FORGE_CLIENT_ID, FORGE_CLIENT_SECRET',\n    );\n    process.exit(1);\n  }\n\n  const mcpServer = createMicrosoft365MCPServer({ tokenPath, clientId, clientSecret });\n  mcpServer.start().catch((err) => {\n    console.error('Failed to start MCP server:', err);\n    process.exit(1);\n  });\n}\n","/**\n * Forge Token Manager — reads Forge's OAuthTokens format and handles refresh.\n *\n * Used by @forge/mcp-* packages to get valid access tokens for API calls.\n * Reads from FORGE_TOKEN_PATH, validates with Zod, and refreshes when\n * the token is expired or within 5 minutes of expiry.\n */\n\nimport * as fs from 'node:fs/promises';\nimport * as path from 'node:path';\nimport { z } from 'zod';\n\n/** Zod schema for Forge's OAuth token file format */\nexport const ForgeOAuthTokensSchema = z.object({\n  accessToken: z.string(),\n  refreshToken: z.string().optional(),\n  expiresAt: z.number(),\n  providerId: z.string(),\n  connectedAt: z.string(),\n  scope: z.string().optional(),\n  email: z.string().optional(),\n  accountId: z.string().optional(),\n});\n\nexport type ForgeOAuthTokens = z.infer<typeof ForgeOAuthTokensSchema>;\n\nexport interface ForgeTokenManagerOptions {\n  /** Path to the Forge OAuth token JSON file */\n  tokenPath: string;\n  /** OAuth client ID for token refresh */\n  clientId: string;\n  /** OAuth client secret for token refresh */\n  clientSecret: string;\n  /** OAuth token endpoint URL for refresh requests */\n  tokenUrl: string;\n  /** Buffer in ms before expiry to trigger refresh (default: 5 minutes) */\n  refreshBufferMs?: number;\n}\n\nexport interface ForgeTokenManager {\n  /** Returns a valid access token, refreshing if needed */\n  getAccessToken(): Promise<string>;\n  /** Returns the current token data, or null if not yet loaded */\n  getTokenInfo(): ForgeOAuthTokens | null;\n  /** Register a callback for when tokens are refreshed */\n  onRefresh(callback: (tokens: ForgeOAuthTokens) => void): void;\n}\n\nconst DEFAULT_REFRESH_BUFFER_MS = 5 * 60 * 1000; // 5 minutes\n\nexport function createForgeTokenManager(options: ForgeTokenManagerOptions): ForgeTokenManager {\n  const {\n    tokenPath,\n    clientId,\n    clientSecret,\n    tokenUrl,\n    refreshBufferMs = DEFAULT_REFRESH_BUFFER_MS,\n  } = options;\n\n  let cachedTokens: ForgeOAuthTokens | null = null;\n  const refreshCallbacks: Array<(tokens: ForgeOAuthTokens) => void> = [];\n\n  function isExpiredOrNearExpiry(tokens: ForgeOAuthTokens): boolean {\n    return Date.now() >= tokens.expiresAt - refreshBufferMs;\n  }\n\n  async function readTokenFile(): Promise<ForgeOAuthTokens> {\n    let raw: string;\n    try {\n      raw = await fs.readFile(tokenPath, 'utf-8');\n    } catch (err: unknown) {\n      if (err && typeof err === 'object' && 'code' in err && err.code === 'ENOENT') {\n        throw new Error(`Token file not found: ${tokenPath}`);\n      }\n      throw err;\n    }\n\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(raw);\n    } catch {\n      throw new Error(`Invalid JSON in token file: ${tokenPath}`);\n    }\n\n    const result = ForgeOAuthTokensSchema.safeParse(parsed);\n    if (!result.success) {\n      throw new Error(`Invalid token file format: ${result.error.message}`);\n    }\n\n    return result.data;\n  }\n\n  async function refreshToken(tokens: ForgeOAuthTokens): Promise<ForgeOAuthTokens> {\n    if (!tokens.refreshToken) {\n      throw new Error('No refresh token available — cannot refresh expired token');\n    }\n\n    const body = new URLSearchParams({\n      grant_type: 'refresh_token',\n      refresh_token: tokens.refreshToken,\n      client_id: clientId,\n      client_secret: clientSecret,\n    });\n\n    const response = await fetch(tokenUrl, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n      body: body.toString(),\n    });\n\n    if (!response.ok) {\n      const errorText = await response.text();\n      throw new Error(`Token refresh failed (${response.status}): ${errorText}`);\n    }\n\n    const data = await response.json();\n\n    const refreshedTokens: ForgeOAuthTokens = {\n      ...tokens,\n      accessToken: data.access_token,\n      refreshToken: data.refresh_token || tokens.refreshToken,\n      expiresAt: Date.now() + data.expires_in * 1000,\n    };\n\n    // Write refreshed tokens back to file\n    await fs.mkdir(path.dirname(tokenPath), { recursive: true });\n    await fs.writeFile(tokenPath, JSON.stringify(refreshedTokens), { mode: 0o600 });\n\n    // Notify listeners\n    for (const cb of refreshCallbacks) {\n      cb(refreshedTokens);\n    }\n\n    return refreshedTokens;\n  }\n\n  return {\n    async getAccessToken(): Promise<string> {\n      if (cachedTokens && !isExpiredOrNearExpiry(cachedTokens)) {\n        return cachedTokens.accessToken;\n      }\n\n      const tokens = cachedTokens || (await readTokenFile());\n\n      if (isExpiredOrNearExpiry(tokens)) {\n        if (tokens.refreshToken) {\n          cachedTokens = await refreshToken(tokens);\n        } else {\n          // No refresh token — return the access token as-is.\n          // Some providers (e.g. Slack bot tokens) issue non-expiring tokens\n          // without refresh tokens, so the expiresAt may be unreliable.\n          cachedTokens = tokens;\n        }\n      } else {\n        cachedTokens = tokens;\n      }\n\n      return cachedTokens.accessToken;\n    },\n\n    getTokenInfo(): ForgeOAuthTokens | null {\n      return cachedTokens;\n    },\n\n    onRefresh(callback: (tokens: ForgeOAuthTokens) => void): void {\n      refreshCallbacks.push(callback);\n    },\n  };\n}\n\n/**\n * Create a ForgeTokenManager from standard environment variables.\n *\n * Expected env vars:\n * - FORGE_TOKEN_PATH: path to the OAuth token JSON file\n * - FORGE_CLIENT_ID: OAuth client ID\n * - FORGE_CLIENT_SECRET: OAuth client secret\n *\n * @param tokenUrl The provider's token endpoint URL\n */\nexport function createForgeTokenManagerFromEnv(tokenUrl: string): ForgeTokenManager {\n  const tokenPath = process.env.FORGE_TOKEN_PATH;\n  const clientId = process.env.FORGE_CLIENT_ID;\n  const clientSecret = process.env.FORGE_CLIENT_SECRET;\n\n  if (!tokenPath) throw new Error('FORGE_TOKEN_PATH environment variable is required');\n  if (!clientId) throw new Error('FORGE_CLIENT_ID environment variable is required');\n  if (!clientSecret) throw new Error('FORGE_CLIENT_SECRET environment variable is required');\n\n  return createForgeTokenManager({ tokenPath, clientId, clientSecret, tokenUrl });\n}\n"],"mappings":";;;AAOA,SAAS,iBAAiB;AAC1B,SAAS,4BAA4B;AACrC,SAAS,KAAAA,UAAS;;;ACDlB,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,SAAS,SAAS;AAGX,IAAM,yBAAyB,EAAE,OAAO;EAC7C,aAAa,EAAE,OAAM;EACrB,cAAc,EAAE,OAAM,EAAG,SAAQ;EACjC,WAAW,EAAE,OAAM;EACnB,YAAY,EAAE,OAAM;EACpB,aAAa,EAAE,OAAM;EACrB,OAAO,EAAE,OAAM,EAAG,SAAQ;EAC1B,OAAO,EAAE,OAAM,EAAG,SAAQ;EAC1B,WAAW,EAAE,OAAM,EAAG,SAAQ;CAC/B;AA0BD,IAAM,4BAA4B,IAAI,KAAK;AAErC,SAAU,wBAAwB,SAAiC;AACvE,QAAM,EACJ,WACA,UACA,cACA,UACA,kBAAkB,0BAAyB,IACzC;AAEJ,MAAI,eAAwC;AAC5C,QAAM,mBAA8D,CAAA;AAEpE,WAAS,sBAAsB,QAAwB;AACrD,WAAO,KAAK,IAAG,KAAM,OAAO,YAAY;EAC1C;AAEA,iBAAe,gBAAa;AAC1B,QAAI;AACJ,QAAI;AACF,YAAM,MAAS,YAAS,WAAW,OAAO;IAC5C,SAAS,KAAc;AACrB,UAAI,OAAO,OAAO,QAAQ,YAAY,UAAU,OAAO,IAAI,SAAS,UAAU;AAC5E,cAAM,IAAI,MAAM,yBAAyB,SAAS,EAAE;MACtD;AACA,YAAM;IACR;AAEA,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,GAAG;IACzB,QAAQ;AACN,YAAM,IAAI,MAAM,+BAA+B,SAAS,EAAE;IAC5D;AAEA,UAAM,SAAS,uBAAuB,UAAU,MAAM;AACtD,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,IAAI,MAAM,8BAA8B,OAAO,MAAM,OAAO,EAAE;IACtE;AAEA,WAAO,OAAO;EAChB;AAEA,iBAAe,aAAa,QAAwB;AAClD,QAAI,CAAC,OAAO,cAAc;AACxB,YAAM,IAAI,MAAM,gEAA2D;IAC7E;AAEA,UAAM,OAAO,IAAI,gBAAgB;MAC/B,YAAY;MACZ,eAAe,OAAO;MACtB,WAAW;MACX,eAAe;KAChB;AAED,UAAM,WAAW,MAAM,MAAM,UAAU;MACrC,QAAQ;MACR,SAAS,EAAE,gBAAgB,oCAAmC;MAC9D,MAAM,KAAK,SAAQ;KACpB;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAI;AACrC,YAAM,IAAI,MAAM,yBAAyB,SAAS,MAAM,MAAM,SAAS,EAAE;IAC3E;AAEA,UAAM,OAAO,MAAM,SAAS,KAAI;AAEhC,UAAM,kBAAoC;MACxC,GAAG;MACH,aAAa,KAAK;MAClB,cAAc,KAAK,iBAAiB,OAAO;MAC3C,WAAW,KAAK,IAAG,IAAK,KAAK,aAAa;;AAI5C,UAAS,SAAW,aAAQ,SAAS,GAAG,EAAE,WAAW,KAAI,CAAE;AAC3D,UAAS,aAAU,WAAW,KAAK,UAAU,eAAe,GAAG,EAAE,MAAM,IAAK,CAAE;AAG9E,eAAW,MAAM,kBAAkB;AACjC,SAAG,eAAe;IACpB;AAEA,WAAO;EACT;AAEA,SAAO;IACL,MAAM,iBAAc;AAClB,UAAI,gBAAgB,CAAC,sBAAsB,YAAY,GAAG;AACxD,eAAO,aAAa;MACtB;AAEA,YAAM,SAAS,gBAAiB,MAAM,cAAa;AAEnD,UAAI,sBAAsB,MAAM,GAAG;AACjC,YAAI,OAAO,cAAc;AACvB,yBAAe,MAAM,aAAa,MAAM;QAC1C,OAAO;AAIL,yBAAe;QACjB;MACF,OAAO;AACL,uBAAe;MACjB;AAEA,aAAO,aAAa;IACtB;IAEA,eAAY;AACV,aAAO;IACT;IAEA,UAAU,UAA4C;AACpD,uBAAiB,KAAK,QAAQ;IAChC;;AAEJ;;;AD5JA,IAAM,eAAe;AACrB,IAAM,aAAa;AAmBZ,SAAS,4BACd,SACuB;AACvB,QAAM,eAAe,wBAAwB;AAAA,IAC3C,WAAW,QAAQ;AAAA,IACnB,UAAU,QAAQ;AAAA,IAClB,cAAc,QAAQ;AAAA,IACtB,UAAU;AAAA,EACZ,CAAC;AAED,QAAM,SAAS,IAAI,UAAU;AAAA,IAC3B,MAAM;AAAA,IACN,SAAS;AAAA,EACX,CAAC;AAED,QAAM,kBAA+C,CAAC;AAEtD,WAAS,aACP,MACA,aACA,QAEA,SACA;AACA,oBAAgB,IAAI,IAAI,EAAE,QAAQ;AAClC,WAAO,KAAK,MAAM,aAAa,QAAQ,OAAO;AAAA,EAChD;AAEA,iBAAe,aACbC,OACA,SAA8C,OAC9C,MACkB;AAClB,UAAM,QAAQ,MAAM,aAAa,eAAe;AAChD,UAAMC,WAAuB;AAAA,MAC3B;AAAA,MACA,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,gBAAgB;AAAA,MAClB;AAAA,IACF;AACA,QAAI,KAAM,CAAAA,SAAQ,OAAO,KAAK,UAAU,IAAI;AAE5C,UAAM,WAAW,MAAM,MAAM,GAAG,UAAU,GAAGD,KAAI,IAAIC,QAAO;AAE5D,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,YAAM,IAAI,MAAM,8BAA8B,SAAS,MAAM,MAAM,SAAS,EAAE;AAAA,IAChF;AAEA,QAAI,SAAS,WAAW,IAAK,QAAO,CAAC;AACrC,WAAO,SAAS,KAAK;AAAA,EACvB;AAIA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,OAAOC,GAAE,OAAO,EAAE,SAAS,qCAAqC;AAAA,MAChE,KAAKA,GAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS,iBAAiB;AAAA,IACnE;AAAA,IACA,OAAO,SAA0C;AAC/C,YAAM,MAAM,KAAK,OAAO;AACxB,YAAM,OAAQ,MAAM;AAAA,QAClB,yBAAyB,mBAAmB,KAAK,KAAK,CAAC,UAAU,GAAG;AAAA,MACtE;AAEA,aAAO;AAAA,QACL,SAAS;AAAA,UACP;AAAA,YACE,MAAM;AAAA,YACN,MAAM,KAAK,UAAU,EAAE,UAAU,KAAK,MAAM,CAAC;AAAA,UAC/C;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,WAAWA,GAAE,OAAO,EAAE,SAAS,oBAAoB;AAAA,IACrD;AAAA,IACA,OAAO,SAAgC;AACrC,YAAM,OAAO,MAAM,aAAa,gBAAgB,KAAK,SAAS,EAAE;AAChE,aAAO;AAAA,QACL,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAEA,eAAa,gBAAgB,6BAA6B,CAAC,GAAG,YAAY;AACxE,UAAM,OAAQ,MAAM,aAAa,yBAAyB;AAC1D,WAAO;AAAA,MACL,SAAS;AAAA,QACP;AAAA,UACE,MAAM;AAAA,UACN,MAAM,KAAK,UAAU,EAAE,SAAS,KAAK,MAAM,CAAC;AAAA,QAC9C;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AAID;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAIA,GAAE,OAAO,EAAE,SAAS,yBAAyB;AAAA,MACjD,SAASA,GAAE,OAAO,EAAE,SAAS,eAAe;AAAA,MAC5C,MAAMA,GAAE,OAAO,EAAE,SAAS,yBAAyB;AAAA,IACrD;AAAA,IACA,OAAO,SAAwD;AAC7D,YAAM,OAAO,MAAM,aAAa,gBAAgB,QAAQ;AAAA,QACtD,SAAS,KAAK;AAAA,QACd,MAAM,EAAE,aAAa,QAAQ,SAAS,KAAK,KAAK;AAAA,QAChD,cAAc,CAAC,EAAE,cAAc,EAAE,SAAS,KAAK,GAAG,EAAE,CAAC;AAAA,MACvD,CAAC;AACD,aAAO;AAAA,QACL,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAEA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,WAAWA,GAAE,OAAO,EAAE,SAAS,+BAA+B;AAAA,IAChE;AAAA,IACA,OAAO,SAAgC;AACrC,YAAM,OAAO,MAAM,aAAa,gBAAgB,KAAK,SAAS,SAAS,QAAQ;AAAA,QAC7E,eAAe;AAAA,MACjB,CAAC;AACD,aAAO;AAAA,QACL,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAIA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,eAAeA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,2BAA2B;AAAA,MACzE,aAAaA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,yBAAyB;AAAA,MACrE,KAAKA,GAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS,gBAAgB;AAAA,IAClE;AAAA,IACA,OAAO,SAAyE;AAC9E,UAAIF,QAAO;AACX,MAAAA,SAAQ,SAAS,KAAK,OAAO,EAAE;AAC/B,UAAI,KAAK,eAAe;AACtB,QAAAA,SAAQ,+BAA+B,KAAK,aAAa;AACzD,YAAI,KAAK,aAAa;AACpB,UAAAA,SAAQ,yBAAyB,KAAK,WAAW;AAAA,QACnD;AAAA,MACF;AACA,MAAAA,SACE;AAEF,YAAM,OAAQ,MAAM,aAAaA,KAAI;AACrC,aAAO;AAAA,QACL,SAAS;AAAA,UACP;AAAA,YACE,MAAM;AAAA,YACN,MAAM,KAAK,UAAU,EAAE,QAAQ,KAAK,MAAM,CAAC;AAAA,UAC7C;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,SAASE,GAAE,OAAO,EAAE,SAAS,mBAAmB;AAAA,IAClD;AAAA,IACA,OAAO,SAA8B;AACnC,YAAM,OAAO,MAAM,aAAa,cAAc,KAAK,OAAO,EAAE;AAC5D,aAAO;AAAA,QACL,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAIA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,SAASA,GAAE,OAAO,EAAE,SAAS,aAAa;AAAA,MAC1C,eAAeA,GAAE,OAAO,EAAE,SAAS,uBAAuB;AAAA,MAC1D,aAAaA,GAAE,OAAO,EAAE,SAAS,qBAAqB;AAAA,MACtD,MAAMA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,mBAAmB;AAAA,MACxD,UAAUA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gBAAgB;AAAA,MACzD,gBAAgBA,GAAE,MAAMA,GAAE,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,0BAA0B;AAAA,IACpF;AAAA,IACA,OAAO,SAOD;AAEJ,YAAM,QAA6B;AAAA,QACjC,SAAS,KAAK;AAAA,QACd,OAAO,EAAE,UAAU,KAAK,eAAe,UAAU,MAAM;AAAA,QACvD,KAAK,EAAE,UAAU,KAAK,aAAa,UAAU,MAAM;AAAA,MACrD;AACA,UAAI,KAAK,KAAM,OAAM,OAAO,EAAE,aAAa,QAAQ,SAAS,KAAK,KAAK;AACtE,UAAI,KAAK,SAAU,OAAM,WAAW,EAAE,aAAa,KAAK,SAAS;AACjE,UAAI,KAAK,gBAAgB;AACvB,cAAM,YAAY,KAAK,eAAe,IAAI,CAAC,WAAW;AAAA,UACpD,cAAc,EAAE,SAAS,MAAM;AAAA,UAC/B,MAAM;AAAA,QACR,EAAE;AAAA,MACJ;AAEA,YAAM,OAAO,MAAM,aAAa,cAAc,QAAQ,KAAK;AAC3D,aAAO;AAAA,QACL,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAEA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,SAASA,GAAE,OAAO,EAAE,SAAS,mBAAmB;AAAA,MAChD,SAASA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,iBAAiB;AAAA,MACzD,eAAeA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,2BAA2B;AAAA,MACzE,aAAaA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,yBAAyB;AAAA,MACrE,MAAMA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,uBAAuB;AAAA,MAC5D,UAAUA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,oBAAoB;AAAA,IAC/D;AAAA,IACA,OAAO,SAOD;AAEJ,YAAM,QAA6B,CAAC;AACpC,UAAI,KAAK,QAAS,OAAM,UAAU,KAAK;AACvC,UAAI,KAAK,KAAM,OAAM,OAAO,EAAE,aAAa,QAAQ,SAAS,KAAK,KAAK;AACtE,UAAI,KAAK,SAAU,OAAM,WAAW,EAAE,aAAa,KAAK,SAAS;AACjE,UAAI,KAAK,cAAe,OAAM,QAAQ,EAAE,UAAU,KAAK,eAAe,UAAU,MAAM;AACtF,UAAI,KAAK,YAAa,OAAM,MAAM,EAAE,UAAU,KAAK,aAAa,UAAU,MAAM;AAEhF,YAAM,OAAO,MAAM,aAAa,cAAc,KAAK,OAAO,IAAI,SAAS,KAAK;AAC5E,aAAO;AAAA,QACL,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAEA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,SAASA,GAAE,OAAO,EAAE,SAAS,6BAA6B;AAAA,IAC5D;AAAA,IACA,OAAO,SAA8B;AACnC,YAAM,aAAa,cAAc,KAAK,OAAO,IAAI,QAAQ;AACzD,aAAO;AAAA,QACL,SAAS;AAAA,UACP;AAAA,YACE,MAAM;AAAA,YACN,MAAM,KAAK,UAAU,EAAE,SAAS,MAAM,SAAS,KAAK,QAAQ,CAAC;AAAA,UAC/D;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,OAAOA,GAAE,OAAO,EAAE,SAAS,cAAc;AAAA,MACzC,KAAKA,GAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS,iBAAiB;AAAA,IACnE;AAAA,IACA,OAAO,SAA0C;AAC/C,YAAM,MAAM,KAAK,OAAO;AACxB,YAAM,OAAQ,MAAM;AAAA,QAClB,4BAA4B,mBAAmB,KAAK,KAAK,CAAC,WAAW,GAAG;AAAA,MAC1E;AAEA,aAAO;AAAA,QACL,SAAS;AAAA,UACP;AAAA,YACE,MAAM;AAAA,YACN,MAAM,KAAK,UAAU,EAAE,OAAO,KAAK,MAAM,CAAC;AAAA,UAC5C;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,QAAQA,GAAE,OAAO,EAAE,SAAS,kBAAkB;AAAA,IAChD;AAAA,IACA,OAAO,SAA6B;AAClC,YAAM,OAAO,MAAM,aAAa,mBAAmB,KAAK,MAAM,EAAE;AAChE,aAAO;AAAA,QACL,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA,qBAAqB;AACnB,aAAO;AAAA,IACT;AAAA,IACA,MAAM,QAAQ;AACZ,YAAM,YAAY,IAAI,qBAAqB;AAC3C,YAAM,OAAO,QAAQ,SAAS;AAAA,IAChC;AAAA,EACF;AACF;AAGA,IAAM,eACJ,QAAQ,KAAK,CAAC,KAAK,YAAY,IAAI,SAAS,QAAQ,KAAK,CAAC,EAAE,QAAQ,OAAO,GAAG,CAAC;AACjF,IAAI,gBAAgB,QAAQ,IAAI,oBAAoB,QAAQ;AAC1D,QAAM,YAAY,QAAQ,IAAI;AAC9B,QAAM,WAAW,QAAQ,IAAI;AAC7B,QAAM,eAAe,QAAQ,IAAI;AAEjC,MAAI,CAAC,aAAa,CAAC,YAAY,CAAC,cAAc;AAC5C,YAAQ;AAAA,MACN;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,YAAY,4BAA4B,EAAE,WAAW,UAAU,aAAa,CAAC;AACnF,YAAU,MAAM,EAAE,MAAM,CAAC,QAAQ;AAC/B,YAAQ,MAAM,+BAA+B,GAAG;AAChD,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACH;","names":["z","path","options","z"]}
+{"version":3,"sources":["../src/index.ts","../../shared/src/mcp-auth/forge-token-manager.ts"],"sourcesContent":["/**\n * @goforgeit/mcp-microsoft-365 — MCP server for Microsoft 365\n *\n * Provides Outlook, Calendar, and OneDrive tools via stdio transport.\n * Uses Microsoft Graph REST API directly (no SDK dependency).\n */\n\nimport { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport { z } from 'zod';\nimport { createForgeTokenManager } from '@forge/shared/mcp-auth';\n\nconst MS_TOKEN_URL = 'https://login.microsoftonline.com/common/oauth2/v2.0/token';\nconst GRAPH_BASE = 'https://graph.microsoft.com/v1.0';\n\nexport interface Microsoft365MCPOptions {\n  tokenPath: string;\n  clientId: string;\n  clientSecret: string;\n}\n\ninterface ToolHandler {\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  handler: (args: any) => Promise<{ content: Array<{ type: 'text'; text: string }> }>;\n}\n\ninterface Microsoft365MCPServer {\n  server: McpServer;\n  getRegisteredTools(): Record<string, ToolHandler>;\n  start(): Promise<void>;\n}\n\nexport function createMicrosoft365MCPServer(\n  options: Microsoft365MCPOptions,\n): Microsoft365MCPServer {\n  const tokenManager = createForgeTokenManager({\n    tokenPath: options.tokenPath,\n    clientId: options.clientId,\n    clientSecret: options.clientSecret,\n    tokenUrl: MS_TOKEN_URL,\n  });\n\n  const server = new McpServer({\n    name: '@goforgeit/mcp-microsoft-365',\n    version: '0.1.0',\n  });\n\n  const registeredTools: Record<string, ToolHandler> = {};\n\n  function registerTool(\n    name: string,\n    description: string,\n    schema: Record<string, z.ZodType>,\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    handler: (args: any) => Promise<{ content: Array<{ type: 'text'; text: string }> }>,\n  ) {\n    registeredTools[name] = { handler };\n    server.tool(name, description, schema, handler);\n  }\n\n  async function graphRequest(\n    path: string,\n    method: 'GET' | 'POST' | 'PATCH' | 'DELETE' = 'GET',\n    body?: unknown,\n  ): Promise<unknown> {\n    const token = await tokenManager.getAccessToken();\n    const options: RequestInit = {\n      method,\n      headers: {\n        Authorization: `Bearer ${token}`,\n        'Content-Type': 'application/json',\n      },\n    };\n    if (body) options.body = JSON.stringify(body);\n\n    const response = await fetch(`${GRAPH_BASE}${path}`, options);\n\n    if (!response.ok) {\n      const errorText = await response.text();\n      throw new Error(`Microsoft Graph API error (${response.status}): ${errorText}`);\n    }\n\n    if (response.status === 204) return {};\n    return response.json();\n  }\n\n  // --- Outlook Tools ---\n\n  registerTool(\n    'search_emails',\n    'Search Outlook emails',\n    {\n      query: z.string().describe('Search query (OData $search syntax)'),\n      top: z.number().optional().default(10).describe('Maximum results'),\n    },\n    async (args: { query: string; top?: number }) => {\n      const top = args.top || 10;\n      const data = (await graphRequest(\n        `/me/messages?$search=\"${encodeURIComponent(args.query)}\"&$top=${top}&$select=id,subject,from,receivedDateTime,bodyPreview,isRead`,\n      )) as { value: unknown[] };\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: JSON.stringify({ messages: data.value }),\n          },\n        ],\n      };\n    },\n  );\n\n  registerTool(\n    'get_email',\n    'Get full email details by message ID',\n    {\n      messageId: z.string().describe('Outlook message ID'),\n    },\n    async (args: { messageId: string }) => {\n      const data = await graphRequest(`/me/messages/${args.messageId}`);\n      return {\n        content: [{ type: 'text' as const, text: JSON.stringify(data) }],\n      };\n    },\n  );\n\n  registerTool('list_folders', 'List Outlook mail folders', {}, async () => {\n    const data = (await graphRequest('/me/mailFolders?$top=50')) as { value: unknown[] };\n    return {\n      content: [\n        {\n          type: 'text' as const,\n          text: JSON.stringify({ folders: data.value }),\n        },\n      ],\n    };\n  });\n\n  // --- Outlook Write Tools ---\n\n  registerTool(\n    'create_draft',\n    'Create an Outlook draft email',\n    {\n      to: z.string().describe('Recipient email address'),\n      subject: z.string().describe('Email subject'),\n      body: z.string().describe('Email body (plain text)'),\n    },\n    async (args: { to: string; subject: string; body: string }) => {\n      const data = await graphRequest('/me/messages', 'POST', {\n        subject: args.subject,\n        body: { contentType: 'Text', content: args.body },\n        toRecipients: [{ emailAddress: { address: args.to } }],\n      });\n      return {\n        content: [{ type: 'text' as const, text: JSON.stringify(data) }],\n      };\n    },\n  );\n\n  registerTool(\n    'archive_email',\n    'Move an Outlook email to Archive folder',\n    {\n      messageId: z.string().describe('Outlook message ID to archive'),\n    },\n    async (args: { messageId: string }) => {\n      const data = await graphRequest(`/me/messages/${args.messageId}/move`, 'POST', {\n        destinationId: 'archive',\n      });\n      return {\n        content: [{ type: 'text' as const, text: JSON.stringify(data) }],\n      };\n    },\n  );\n\n  // --- Calendar Tools ---\n\n  registerTool(\n    'list_events',\n    'List calendar events in a date range',\n    {\n      startDateTime: z.string().optional().describe('Start of range (ISO 8601)'),\n      endDateTime: z.string().optional().describe('End of range (ISO 8601)'),\n      top: z.number().optional().default(25).describe('Maximum events'),\n    },\n    async (args: { startDateTime?: string; endDateTime?: string; top?: number }) => {\n      let path = '/me/events?$orderby=start/dateTime';\n      path += `&$top=${args.top || 25}`;\n      if (args.startDateTime) {\n        path += `&$filter=start/dateTime ge '${args.startDateTime}'`;\n        if (args.endDateTime) {\n          path += ` and end/dateTime le '${args.endDateTime}'`;\n        }\n      }\n      path +=\n        '&$select=id,subject,start,end,location,attendees,bodyPreview,webLink,isAllDay,organizer';\n\n      const data = (await graphRequest(path)) as { value: unknown[] };\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: JSON.stringify({ events: data.value }),\n          },\n        ],\n      };\n    },\n  );\n\n  registerTool(\n    'get_event',\n    'Get a specific calendar event by ID',\n    {\n      eventId: z.string().describe('Calendar event ID'),\n    },\n    async (args: { eventId: string }) => {\n      const data = await graphRequest(`/me/events/${args.eventId}`);\n      return {\n        content: [{ type: 'text' as const, text: JSON.stringify(data) }],\n      };\n    },\n  );\n\n  // --- Calendar Write Tools ---\n\n  registerTool(\n    'create_event',\n    'Create a new calendar event in Outlook',\n    {\n      subject: z.string().describe('Event title'),\n      startDateTime: z.string().describe('Start time (ISO 8601)'),\n      endDateTime: z.string().describe('End time (ISO 8601)'),\n      body: z.string().optional().describe('Event description'),\n      location: z.string().optional().describe('Event location'),\n      attendeeEmails: z.array(z.string()).optional().describe('Attendee email addresses'),\n    },\n    async (args: {\n      subject: string;\n      startDateTime: string;\n      endDateTime: string;\n      body?: string;\n      location?: string;\n      attendeeEmails?: string[];\n    }) => {\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const event: Record<string, any> = {\n        subject: args.subject,\n        start: { dateTime: args.startDateTime, timeZone: 'UTC' },\n        end: { dateTime: args.endDateTime, timeZone: 'UTC' },\n      };\n      if (args.body) event.body = { contentType: 'Text', content: args.body };\n      if (args.location) event.location = { displayName: args.location };\n      if (args.attendeeEmails) {\n        event.attendees = args.attendeeEmails.map((email) => ({\n          emailAddress: { address: email },\n          type: 'required',\n        }));\n      }\n\n      const data = await graphRequest('/me/events', 'POST', event);\n      return {\n        content: [{ type: 'text' as const, text: JSON.stringify(data) }],\n      };\n    },\n  );\n\n  registerTool(\n    'update_event',\n    'Update an existing Outlook calendar event',\n    {\n      eventId: z.string().describe('Calendar event ID'),\n      subject: z.string().optional().describe('New event title'),\n      startDateTime: z.string().optional().describe('New start time (ISO 8601)'),\n      endDateTime: z.string().optional().describe('New end time (ISO 8601)'),\n      body: z.string().optional().describe('New event description'),\n      location: z.string().optional().describe('New event location'),\n    },\n    async (args: {\n      eventId: string;\n      subject?: string;\n      startDateTime?: string;\n      endDateTime?: string;\n      body?: string;\n      location?: string;\n    }) => {\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const patch: Record<string, any> = {};\n      if (args.subject) patch.subject = args.subject;\n      if (args.body) patch.body = { contentType: 'Text', content: args.body };\n      if (args.location) patch.location = { displayName: args.location };\n      if (args.startDateTime) patch.start = { dateTime: args.startDateTime, timeZone: 'UTC' };\n      if (args.endDateTime) patch.end = { dateTime: args.endDateTime, timeZone: 'UTC' };\n\n      const data = await graphRequest(`/me/events/${args.eventId}`, 'PATCH', patch);\n      return {\n        content: [{ type: 'text' as const, text: JSON.stringify(data) }],\n      };\n    },\n  );\n\n  registerTool(\n    'delete_event',\n    'Delete an Outlook calendar event',\n    {\n      eventId: z.string().describe('Calendar event ID to delete'),\n    },\n    async (args: { eventId: string }) => {\n      await graphRequest(`/me/events/${args.eventId}`, 'DELETE');\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: JSON.stringify({ deleted: true, eventId: args.eventId }),\n          },\n        ],\n      };\n    },\n  );\n\n  // --- OneDrive Tools ---\n\n  registerTool(\n    'search_files',\n    'Search OneDrive files',\n    {\n      query: z.string().describe('Search query'),\n      top: z.number().optional().default(20).describe('Maximum results'),\n    },\n    async (args: { query: string; top?: number }) => {\n      const top = args.top || 20;\n      const data = (await graphRequest(\n        `/me/drive/root/search(q='${encodeURIComponent(args.query)}')?$top=${top}&$select=id,name,file,size,lastModifiedDateTime,webUrl`,\n      )) as { value: unknown[] };\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: JSON.stringify({ files: data.value }),\n          },\n        ],\n      };\n    },\n  );\n\n  registerTool(\n    'get_file_content',\n    'Get OneDrive file metadata by item ID',\n    {\n      itemId: z.string().describe('OneDrive item ID'),\n    },\n    async (args: { itemId: string }) => {\n      const data = await graphRequest(`/me/drive/items/${args.itemId}`);\n      return {\n        content: [{ type: 'text' as const, text: JSON.stringify(data) }],\n      };\n    },\n  );\n\n  return {\n    server,\n    getRegisteredTools() {\n      return registeredTools;\n    },\n    async start() {\n      const transport = new StdioServerTransport();\n      await server.connect(transport);\n    },\n  };\n}\n\n// CLI entry point\nconst isMainModule =\n  process.argv[1] && import.meta.url.endsWith(process.argv[1].replace(/\\\\/g, '/'));\nif (isMainModule || process.env.FORGE_MCP_START === 'true') {\n  const tokenPath = process.env.FORGE_TOKEN_PATH;\n  const clientId = process.env.FORGE_CLIENT_ID;\n  const clientSecret = process.env.FORGE_CLIENT_SECRET;\n\n  if (!tokenPath || !clientId || !clientSecret) {\n    console.error(\n      'Required environment variables: FORGE_TOKEN_PATH, FORGE_CLIENT_ID, FORGE_CLIENT_SECRET',\n    );\n    process.exit(1);\n  }\n\n  const mcpServer = createMicrosoft365MCPServer({ tokenPath, clientId, clientSecret });\n  mcpServer.start().catch((err) => {\n    console.error('Failed to start MCP server:', err);\n    process.exit(1);\n  });\n}\n","/**\n * Forge Token Manager — reads Forge's OAuthTokens format and handles refresh.\n *\n * Used by @goforgeit/mcp-* packages to get valid access tokens for API calls.\n * Reads from FORGE_TOKEN_PATH, validates with Zod, and refreshes when\n * the token is expired or within 5 minutes of expiry.\n */\n\nimport * as fs from 'node:fs/promises';\nimport * as path from 'node:path';\nimport { z } from 'zod';\n\n/** Zod schema for Forge's OAuth token file format */\nexport const ForgeOAuthTokensSchema = z.object({\n  accessToken: z.string(),\n  refreshToken: z.string().optional(),\n  expiresAt: z.number(),\n  providerId: z.string(),\n  connectedAt: z.string(),\n  scope: z.string().optional(),\n  email: z.string().optional(),\n  accountId: z.string().optional(),\n  /** User-level access token (Slack xoxp-* token for search operations) */\n  userAccessToken: z.string().optional(),\n});\n\nexport type ForgeOAuthTokens = z.infer<typeof ForgeOAuthTokensSchema>;\n\nexport interface ForgeTokenManagerOptions {\n  /** Path to the Forge OAuth token JSON file */\n  tokenPath: string;\n  /** OAuth client ID for token refresh */\n  clientId: string;\n  /** OAuth client secret for token refresh */\n  clientSecret: string;\n  /** OAuth token endpoint URL for refresh requests */\n  tokenUrl: string;\n  /** Buffer in ms before expiry to trigger refresh (default: 5 minutes) */\n  refreshBufferMs?: number;\n}\n\nexport interface ForgeTokenManager {\n  /** Returns a valid access token, refreshing if needed */\n  getAccessToken(): Promise<string>;\n  /** Returns the user-level access token if available (e.g., Slack xoxp-* for search) */\n  getUserAccessToken(): Promise<string | null>;\n  /** Returns the current token data, or null if not yet loaded */\n  getTokenInfo(): ForgeOAuthTokens | null;\n  /** Register a callback for when tokens are refreshed */\n  onRefresh(callback: (tokens: ForgeOAuthTokens) => void): void;\n}\n\nconst DEFAULT_REFRESH_BUFFER_MS = 5 * 60 * 1000; // 5 minutes\n\nexport function createForgeTokenManager(options: ForgeTokenManagerOptions): ForgeTokenManager {\n  const {\n    tokenPath,\n    clientId,\n    clientSecret,\n    tokenUrl,\n    refreshBufferMs = DEFAULT_REFRESH_BUFFER_MS,\n  } = options;\n\n  let cachedTokens: ForgeOAuthTokens | null = null;\n  const refreshCallbacks: Array<(tokens: ForgeOAuthTokens) => void> = [];\n\n  function isExpiredOrNearExpiry(tokens: ForgeOAuthTokens): boolean {\n    return Date.now() >= tokens.expiresAt - refreshBufferMs;\n  }\n\n  async function readTokenFile(): Promise<ForgeOAuthTokens> {\n    let raw: string;\n    try {\n      raw = await fs.readFile(tokenPath, 'utf-8');\n    } catch (err: unknown) {\n      if (err && typeof err === 'object' && 'code' in err && err.code === 'ENOENT') {\n        throw new Error(`Token file not found: ${tokenPath}`);\n      }\n      throw err;\n    }\n\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(raw);\n    } catch {\n      throw new Error(`Invalid JSON in token file: ${tokenPath}`);\n    }\n\n    const result = ForgeOAuthTokensSchema.safeParse(parsed);\n    if (!result.success) {\n      throw new Error(`Invalid token file format: ${result.error.message}`);\n    }\n\n    return result.data;\n  }\n\n  async function refreshToken(tokens: ForgeOAuthTokens): Promise<ForgeOAuthTokens> {\n    if (!tokens.refreshToken) {\n      throw new Error('No refresh token available — cannot refresh expired token');\n    }\n\n    const body = new URLSearchParams({\n      grant_type: 'refresh_token',\n      refresh_token: tokens.refreshToken,\n      client_id: clientId,\n      client_secret: clientSecret,\n    });\n\n    const response = await fetch(tokenUrl, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n      body: body.toString(),\n    });\n\n    if (!response.ok) {\n      const errorText = await response.text();\n      throw new Error(`Token refresh failed (${response.status}): ${errorText}`);\n    }\n\n    const data = await response.json();\n\n    const refreshedTokens: ForgeOAuthTokens = {\n      ...tokens,\n      accessToken: data.access_token,\n      refreshToken: data.refresh_token || tokens.refreshToken,\n      expiresAt: Date.now() + data.expires_in * 1000,\n    };\n\n    // Write refreshed tokens back to file\n    await fs.mkdir(path.dirname(tokenPath), { recursive: true });\n    await fs.writeFile(tokenPath, JSON.stringify(refreshedTokens), { mode: 0o600 });\n\n    // Notify listeners\n    for (const cb of refreshCallbacks) {\n      cb(refreshedTokens);\n    }\n\n    return refreshedTokens;\n  }\n\n  return {\n    async getAccessToken(): Promise<string> {\n      if (cachedTokens && !isExpiredOrNearExpiry(cachedTokens)) {\n        return cachedTokens.accessToken;\n      }\n\n      const tokens = cachedTokens || (await readTokenFile());\n\n      if (isExpiredOrNearExpiry(tokens)) {\n        if (tokens.refreshToken) {\n          cachedTokens = await refreshToken(tokens);\n        } else {\n          // No refresh token — return the access token as-is.\n          // Some providers (e.g. Slack bot tokens) issue non-expiring tokens\n          // without refresh tokens, so the expiresAt may be unreliable.\n          cachedTokens = tokens;\n        }\n      } else {\n        cachedTokens = tokens;\n      }\n\n      return cachedTokens.accessToken;\n    },\n\n    async getUserAccessToken(): Promise<string | null> {\n      // Ensure tokens are loaded\n      if (!cachedTokens) {\n        await this.getAccessToken();\n      }\n      return cachedTokens?.userAccessToken ?? null;\n    },\n\n    getTokenInfo(): ForgeOAuthTokens | null {\n      return cachedTokens;\n    },\n\n    onRefresh(callback: (tokens: ForgeOAuthTokens) => void): void {\n      refreshCallbacks.push(callback);\n    },\n  };\n}\n\n/**\n * Create a ForgeTokenManager from standard environment variables.\n *\n * Expected env vars:\n * - FORGE_TOKEN_PATH: path to the OAuth token JSON file\n * - FORGE_CLIENT_ID: OAuth client ID\n * - FORGE_CLIENT_SECRET: OAuth client secret\n *\n * @param tokenUrl The provider's token endpoint URL\n */\nexport function createForgeTokenManagerFromEnv(tokenUrl: string): ForgeTokenManager {\n  const tokenPath = process.env.FORGE_TOKEN_PATH;\n  const clientId = process.env.FORGE_CLIENT_ID;\n  const clientSecret = process.env.FORGE_CLIENT_SECRET;\n\n  if (!tokenPath) throw new Error('FORGE_TOKEN_PATH environment variable is required');\n  if (!clientId) throw new Error('FORGE_CLIENT_ID environment variable is required');\n  if (!clientSecret) throw new Error('FORGE_CLIENT_SECRET environment variable is required');\n\n  return createForgeTokenManager({ tokenPath, clientId, clientSecret, tokenUrl });\n}\n"],"mappings":";;;AAOA,SAAS,iBAAiB;AAC1B,SAAS,4BAA4B;AACrC,SAAS,KAAAA,UAAS;;;ACDlB,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,SAAS,SAAS;AAGX,IAAM,yBAAyB,EAAE,OAAO;EAC7C,aAAa,EAAE,OAAM;EACrB,cAAc,EAAE,OAAM,EAAG,SAAQ;EACjC,WAAW,EAAE,OAAM;EACnB,YAAY,EAAE,OAAM;EACpB,aAAa,EAAE,OAAM;EACrB,OAAO,EAAE,OAAM,EAAG,SAAQ;EAC1B,OAAO,EAAE,OAAM,EAAG,SAAQ;EAC1B,WAAW,EAAE,OAAM,EAAG,SAAQ;;EAE9B,iBAAiB,EAAE,OAAM,EAAG,SAAQ;CACrC;AA4BD,IAAM,4BAA4B,IAAI,KAAK;AAErC,SAAU,wBAAwB,SAAiC;AACvE,QAAM,EACJ,WACA,UACA,cACA,UACA,kBAAkB,0BAAyB,IACzC;AAEJ,MAAI,eAAwC;AAC5C,QAAM,mBAA8D,CAAA;AAEpE,WAAS,sBAAsB,QAAwB;AACrD,WAAO,KAAK,IAAG,KAAM,OAAO,YAAY;EAC1C;AAEA,iBAAe,gBAAa;AAC1B,QAAI;AACJ,QAAI;AACF,YAAM,MAAS,YAAS,WAAW,OAAO;IAC5C,SAAS,KAAc;AACrB,UAAI,OAAO,OAAO,QAAQ,YAAY,UAAU,OAAO,IAAI,SAAS,UAAU;AAC5E,cAAM,IAAI,MAAM,yBAAyB,SAAS,EAAE;MACtD;AACA,YAAM;IACR;AAEA,QAAI;AACJ,QAAI;AACF,eAAS,KAAK,MAAM,GAAG;IACzB,QAAQ;AACN,YAAM,IAAI,MAAM,+BAA+B,SAAS,EAAE;IAC5D;AAEA,UAAM,SAAS,uBAAuB,UAAU,MAAM;AACtD,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,IAAI,MAAM,8BAA8B,OAAO,MAAM,OAAO,EAAE;IACtE;AAEA,WAAO,OAAO;EAChB;AAEA,iBAAe,aAAa,QAAwB;AAClD,QAAI,CAAC,OAAO,cAAc;AACxB,YAAM,IAAI,MAAM,gEAA2D;IAC7E;AAEA,UAAM,OAAO,IAAI,gBAAgB;MAC/B,YAAY;MACZ,eAAe,OAAO;MACtB,WAAW;MACX,eAAe;KAChB;AAED,UAAM,WAAW,MAAM,MAAM,UAAU;MACrC,QAAQ;MACR,SAAS,EAAE,gBAAgB,oCAAmC;MAC9D,MAAM,KAAK,SAAQ;KACpB;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAI;AACrC,YAAM,IAAI,MAAM,yBAAyB,SAAS,MAAM,MAAM,SAAS,EAAE;IAC3E;AAEA,UAAM,OAAO,MAAM,SAAS,KAAI;AAEhC,UAAM,kBAAoC;MACxC,GAAG;MACH,aAAa,KAAK;MAClB,cAAc,KAAK,iBAAiB,OAAO;MAC3C,WAAW,KAAK,IAAG,IAAK,KAAK,aAAa;;AAI5C,UAAS,SAAW,aAAQ,SAAS,GAAG,EAAE,WAAW,KAAI,CAAE;AAC3D,UAAS,aAAU,WAAW,KAAK,UAAU,eAAe,GAAG,EAAE,MAAM,IAAK,CAAE;AAG9E,eAAW,MAAM,kBAAkB;AACjC,SAAG,eAAe;IACpB;AAEA,WAAO;EACT;AAEA,SAAO;IACL,MAAM,iBAAc;AAClB,UAAI,gBAAgB,CAAC,sBAAsB,YAAY,GAAG;AACxD,eAAO,aAAa;MACtB;AAEA,YAAM,SAAS,gBAAiB,MAAM,cAAa;AAEnD,UAAI,sBAAsB,MAAM,GAAG;AACjC,YAAI,OAAO,cAAc;AACvB,yBAAe,MAAM,aAAa,MAAM;QAC1C,OAAO;AAIL,yBAAe;QACjB;MACF,OAAO;AACL,uBAAe;MACjB;AAEA,aAAO,aAAa;IACtB;IAEA,MAAM,qBAAkB;AAEtB,UAAI,CAAC,cAAc;AACjB,cAAM,KAAK,eAAc;MAC3B;AACA,aAAO,cAAc,mBAAmB;IAC1C;IAEA,eAAY;AACV,aAAO;IACT;IAEA,UAAU,UAA4C;AACpD,uBAAiB,KAAK,QAAQ;IAChC;;AAEJ;;;ADxKA,IAAM,eAAe;AACrB,IAAM,aAAa;AAmBZ,SAAS,4BACd,SACuB;AACvB,QAAM,eAAe,wBAAwB;AAAA,IAC3C,WAAW,QAAQ;AAAA,IACnB,UAAU,QAAQ;AAAA,IAClB,cAAc,QAAQ;AAAA,IACtB,UAAU;AAAA,EACZ,CAAC;AAED,QAAM,SAAS,IAAI,UAAU;AAAA,IAC3B,MAAM;AAAA,IACN,SAAS;AAAA,EACX,CAAC;AAED,QAAM,kBAA+C,CAAC;AAEtD,WAAS,aACP,MACA,aACA,QAEA,SACA;AACA,oBAAgB,IAAI,IAAI,EAAE,QAAQ;AAClC,WAAO,KAAK,MAAM,aAAa,QAAQ,OAAO;AAAA,EAChD;AAEA,iBAAe,aACbC,OACA,SAA8C,OAC9C,MACkB;AAClB,UAAM,QAAQ,MAAM,aAAa,eAAe;AAChD,UAAMC,WAAuB;AAAA,MAC3B;AAAA,MACA,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,gBAAgB;AAAA,MAClB;AAAA,IACF;AACA,QAAI,KAAM,CAAAA,SAAQ,OAAO,KAAK,UAAU,IAAI;AAE5C,UAAM,WAAW,MAAM,MAAM,GAAG,UAAU,GAAGD,KAAI,IAAIC,QAAO;AAE5D,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,YAAM,IAAI,MAAM,8BAA8B,SAAS,MAAM,MAAM,SAAS,EAAE;AAAA,IAChF;AAEA,QAAI,SAAS,WAAW,IAAK,QAAO,CAAC;AACrC,WAAO,SAAS,KAAK;AAAA,EACvB;AAIA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,OAAOC,GAAE,OAAO,EAAE,SAAS,qCAAqC;AAAA,MAChE,KAAKA,GAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS,iBAAiB;AAAA,IACnE;AAAA,IACA,OAAO,SAA0C;AAC/C,YAAM,MAAM,KAAK,OAAO;AACxB,YAAM,OAAQ,MAAM;AAAA,QAClB,yBAAyB,mBAAmB,KAAK,KAAK,CAAC,UAAU,GAAG;AAAA,MACtE;AAEA,aAAO;AAAA,QACL,SAAS;AAAA,UACP;AAAA,YACE,MAAM;AAAA,YACN,MAAM,KAAK,UAAU,EAAE,UAAU,KAAK,MAAM,CAAC;AAAA,UAC/C;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,WAAWA,GAAE,OAAO,EAAE,SAAS,oBAAoB;AAAA,IACrD;AAAA,IACA,OAAO,SAAgC;AACrC,YAAM,OAAO,MAAM,aAAa,gBAAgB,KAAK,SAAS,EAAE;AAChE,aAAO;AAAA,QACL,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAEA,eAAa,gBAAgB,6BAA6B,CAAC,GAAG,YAAY;AACxE,UAAM,OAAQ,MAAM,aAAa,yBAAyB;AAC1D,WAAO;AAAA,MACL,SAAS;AAAA,QACP;AAAA,UACE,MAAM;AAAA,UACN,MAAM,KAAK,UAAU,EAAE,SAAS,KAAK,MAAM,CAAC;AAAA,QAC9C;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AAID;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAIA,GAAE,OAAO,EAAE,SAAS,yBAAyB;AAAA,MACjD,SAASA,GAAE,OAAO,EAAE,SAAS,eAAe;AAAA,MAC5C,MAAMA,GAAE,OAAO,EAAE,SAAS,yBAAyB;AAAA,IACrD;AAAA,IACA,OAAO,SAAwD;AAC7D,YAAM,OAAO,MAAM,aAAa,gBAAgB,QAAQ;AAAA,QACtD,SAAS,KAAK;AAAA,QACd,MAAM,EAAE,aAAa,QAAQ,SAAS,KAAK,KAAK;AAAA,QAChD,cAAc,CAAC,EAAE,cAAc,EAAE,SAAS,KAAK,GAAG,EAAE,CAAC;AAAA,MACvD,CAAC;AACD,aAAO;AAAA,QACL,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAEA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,WAAWA,GAAE,OAAO,EAAE,SAAS,+BAA+B;AAAA,IAChE;AAAA,IACA,OAAO,SAAgC;AACrC,YAAM,OAAO,MAAM,aAAa,gBAAgB,KAAK,SAAS,SAAS,QAAQ;AAAA,QAC7E,eAAe;AAAA,MACjB,CAAC;AACD,aAAO;AAAA,QACL,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAIA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,eAAeA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,2BAA2B;AAAA,MACzE,aAAaA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,yBAAyB;AAAA,MACrE,KAAKA,GAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS,gBAAgB;AAAA,IAClE;AAAA,IACA,OAAO,SAAyE;AAC9E,UAAIF,QAAO;AACX,MAAAA,SAAQ,SAAS,KAAK,OAAO,EAAE;AAC/B,UAAI,KAAK,eAAe;AACtB,QAAAA,SAAQ,+BAA+B,KAAK,aAAa;AACzD,YAAI,KAAK,aAAa;AACpB,UAAAA,SAAQ,yBAAyB,KAAK,WAAW;AAAA,QACnD;AAAA,MACF;AACA,MAAAA,SACE;AAEF,YAAM,OAAQ,MAAM,aAAaA,KAAI;AACrC,aAAO;AAAA,QACL,SAAS;AAAA,UACP;AAAA,YACE,MAAM;AAAA,YACN,MAAM,KAAK,UAAU,EAAE,QAAQ,KAAK,MAAM,CAAC;AAAA,UAC7C;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,SAASE,GAAE,OAAO,EAAE,SAAS,mBAAmB;AAAA,IAClD;AAAA,IACA,OAAO,SAA8B;AACnC,YAAM,OAAO,MAAM,aAAa,cAAc,KAAK,OAAO,EAAE;AAC5D,aAAO;AAAA,QACL,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAIA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,SAASA,GAAE,OAAO,EAAE,SAAS,aAAa;AAAA,MAC1C,eAAeA,GAAE,OAAO,EAAE,SAAS,uBAAuB;AAAA,MAC1D,aAAaA,GAAE,OAAO,EAAE,SAAS,qBAAqB;AAAA,MACtD,MAAMA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,mBAAmB;AAAA,MACxD,UAAUA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gBAAgB;AAAA,MACzD,gBAAgBA,GAAE,MAAMA,GAAE,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,0BAA0B;AAAA,IACpF;AAAA,IACA,OAAO,SAOD;AAEJ,YAAM,QAA6B;AAAA,QACjC,SAAS,KAAK;AAAA,QACd,OAAO,EAAE,UAAU,KAAK,eAAe,UAAU,MAAM;AAAA,QACvD,KAAK,EAAE,UAAU,KAAK,aAAa,UAAU,MAAM;AAAA,MACrD;AACA,UAAI,KAAK,KAAM,OAAM,OAAO,EAAE,aAAa,QAAQ,SAAS,KAAK,KAAK;AACtE,UAAI,KAAK,SAAU,OAAM,WAAW,EAAE,aAAa,KAAK,SAAS;AACjE,UAAI,KAAK,gBAAgB;AACvB,cAAM,YAAY,KAAK,eAAe,IAAI,CAAC,WAAW;AAAA,UACpD,cAAc,EAAE,SAAS,MAAM;AAAA,UAC/B,MAAM;AAAA,QACR,EAAE;AAAA,MACJ;AAEA,YAAM,OAAO,MAAM,aAAa,cAAc,QAAQ,KAAK;AAC3D,aAAO;AAAA,QACL,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAEA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,SAASA,GAAE,OAAO,EAAE,SAAS,mBAAmB;AAAA,MAChD,SAASA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,iBAAiB;AAAA,MACzD,eAAeA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,2BAA2B;AAAA,MACzE,aAAaA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,yBAAyB;AAAA,MACrE,MAAMA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,uBAAuB;AAAA,MAC5D,UAAUA,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,oBAAoB;AAAA,IAC/D;AAAA,IACA,OAAO,SAOD;AAEJ,YAAM,QAA6B,CAAC;AACpC,UAAI,KAAK,QAAS,OAAM,UAAU,KAAK;AACvC,UAAI,KAAK,KAAM,OAAM,OAAO,EAAE,aAAa,QAAQ,SAAS,KAAK,KAAK;AACtE,UAAI,KAAK,SAAU,OAAM,WAAW,EAAE,aAAa,KAAK,SAAS;AACjE,UAAI,KAAK,cAAe,OAAM,QAAQ,EAAE,UAAU,KAAK,eAAe,UAAU,MAAM;AACtF,UAAI,KAAK,YAAa,OAAM,MAAM,EAAE,UAAU,KAAK,aAAa,UAAU,MAAM;AAEhF,YAAM,OAAO,MAAM,aAAa,cAAc,KAAK,OAAO,IAAI,SAAS,KAAK;AAC5E,aAAO;AAAA,QACL,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAEA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,SAASA,GAAE,OAAO,EAAE,SAAS,6BAA6B;AAAA,IAC5D;AAAA,IACA,OAAO,SAA8B;AACnC,YAAM,aAAa,cAAc,KAAK,OAAO,IAAI,QAAQ;AACzD,aAAO;AAAA,QACL,SAAS;AAAA,UACP;AAAA,YACE,MAAM;AAAA,YACN,MAAM,KAAK,UAAU,EAAE,SAAS,MAAM,SAAS,KAAK,QAAQ,CAAC;AAAA,UAC/D;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,OAAOA,GAAE,OAAO,EAAE,SAAS,cAAc;AAAA,MACzC,KAAKA,GAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS,iBAAiB;AAAA,IACnE;AAAA,IACA,OAAO,SAA0C;AAC/C,YAAM,MAAM,KAAK,OAAO;AACxB,YAAM,OAAQ,MAAM;AAAA,QAClB,4BAA4B,mBAAmB,KAAK,KAAK,CAAC,WAAW,GAAG;AAAA,MAC1E;AAEA,aAAO;AAAA,QACL,SAAS;AAAA,UACP;AAAA,YACE,MAAM;AAAA,YACN,MAAM,KAAK,UAAU,EAAE,OAAO,KAAK,MAAM,CAAC;AAAA,UAC5C;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,MACE,QAAQA,GAAE,OAAO,EAAE,SAAS,kBAAkB;AAAA,IAChD;AAAA,IACA,OAAO,SAA6B;AAClC,YAAM,OAAO,MAAM,aAAa,mBAAmB,KAAK,MAAM,EAAE;AAChE,aAAO;AAAA,QACL,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA,qBAAqB;AACnB,aAAO;AAAA,IACT;AAAA,IACA,MAAM,QAAQ;AACZ,YAAM,YAAY,IAAI,qBAAqB;AAC3C,YAAM,OAAO,QAAQ,SAAS;AAAA,IAChC;AAAA,EACF;AACF;AAGA,IAAM,eACJ,QAAQ,KAAK,CAAC,KAAK,YAAY,IAAI,SAAS,QAAQ,KAAK,CAAC,EAAE,QAAQ,OAAO,GAAG,CAAC;AACjF,IAAI,gBAAgB,QAAQ,IAAI,oBAAoB,QAAQ;AAC1D,QAAM,YAAY,QAAQ,IAAI;AAC9B,QAAM,WAAW,QAAQ,IAAI;AAC7B,QAAM,eAAe,QAAQ,IAAI;AAEjC,MAAI,CAAC,aAAa,CAAC,YAAY,CAAC,cAAc;AAC5C,YAAQ;AAAA,MACN;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,YAAY,4BAA4B,EAAE,WAAW,UAAU,aAAa,CAAC;AACnF,YAAU,MAAM,EAAE,MAAM,CAAC,QAAQ;AAC/B,YAAQ,MAAM,+BAA+B,GAAG;AAChD,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACH;","names":["z","path","options","z"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goforgeit/mcp-microsoft-365",
-  "version": "0.4.11",
+  "version": "0.4.19",
   "type": "module",
   "description": "Forge MCP server for Microsoft 365 (Outlook, Calendar, OneDrive)",
   "bin": {
@@ -8,24 +8,17 @@
   },
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
-  "publishConfig": {
-    "access": "public"
-  },
-  "files": [
-    "dist",
-    "README.md"
-  ],
   "scripts": {
     "build": "tsup",
     "typecheck": "tsc --noEmit",
     "test": "vitest run"
   },
   "dependencies": {
+    "@forge/shared": "workspace:*",
     "@modelcontextprotocol/sdk": "^1.12.1",
     "zod": "^4.2.1"
   },
   "devDependencies": {
-    "@forge/shared": "workspace:*",
     "@types/node": "^22.10.2",
     "tsup": "^8.0.0",
     "vitest": "^3.2.4"

package/src/index.test.ts

@@ -0,0 +1,319 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { createMicrosoft365MCPServer } from './index';
+
+vi.mock('@forge/shared/mcp-auth', () => ({
+  createForgeTokenManager: () => ({
+    getAccessToken: vi.fn().mockResolvedValue('mock-ms-token'),
+    getTokenInfo: () => null,
+    onRefresh: vi.fn(),
+  }),
+}));
+
+const mockFetch = vi.fn();
+global.fetch = mockFetch;
+
+describe('createMicrosoft365MCPServer', () => {
+  beforeEach(() => vi.clearAllMocks());
+
+  it('creates a server with registered tools', () => {
+    const server = createMicrosoft365MCPServer({
+      tokenPath: '/tmp/ms.json',
+      clientId: 'id',
+      clientSecret: 'secret',
+    });
+    expect(server).toBeDefined();
+    const tools = server.getRegisteredTools();
+    expect(tools).toHaveProperty('search_emails');
+    expect(tools).toHaveProperty('get_email');
+    expect(tools).toHaveProperty('list_folders');
+    expect(tools).toHaveProperty('create_draft');
+    expect(tools).toHaveProperty('archive_email');
+    expect(tools).toHaveProperty('list_events');
+    expect(tools).toHaveProperty('get_event');
+    expect(tools).toHaveProperty('create_event');
+    expect(tools).toHaveProperty('update_event');
+    expect(tools).toHaveProperty('delete_event');
+    expect(tools).toHaveProperty('search_files');
+    expect(tools).toHaveProperty('get_file_content');
+  });
+});
+
+describe('Outlook Tools', () => {
+  beforeEach(() => vi.clearAllMocks());
+
+  it('search_emails queries Microsoft Graph', async () => {
+    mockFetch.mockResolvedValue({
+      ok: true,
+      json: () =>
+        Promise.resolve({
+          value: [
+            {
+              id: 'msg-1',
+              subject: 'Test Email',
+              from: { emailAddress: { address: 'sender@example.com', name: 'Sender' } },
+              receivedDateTime: '2026-02-28T10:00:00Z',
+              bodyPreview: 'Preview text...',
+            },
+          ],
+        }),
+    });
+
+    const server = createMicrosoft365MCPServer({
+      tokenPath: '/tmp/ms.json',
+      clientId: 'id',
+      clientSecret: 'secret',
+    });
+    const tools = server.getRegisteredTools();
+    const result = await tools.search_emails.handler({ query: 'test', top: 10 });
+    const parsed = JSON.parse(result.content[0].text);
+    expect(parsed.messages).toHaveLength(1);
+    expect(parsed.messages[0].subject).toBe('Test Email');
+    expect(mockFetch).toHaveBeenCalledWith(
+      expect.stringContaining('graph.microsoft.com'),
+      expect.objectContaining({
+        headers: expect.objectContaining({
+          Authorization: 'Bearer mock-ms-token',
+        }),
+      }),
+    );
+  });
+
+  it('get_email returns full message details', async () => {
+    mockFetch.mockResolvedValue({
+      ok: true,
+      json: () =>
+        Promise.resolve({
+          id: 'msg-1',
+          subject: 'Detailed Email',
+          body: { content: '<p>Hello</p>', contentType: 'html' },
+          from: { emailAddress: { address: 'from@test.com', name: 'From' } },
+          toRecipients: [{ emailAddress: { address: 'to@test.com', name: 'To' } }],
+          receivedDateTime: '2026-02-28T10:00:00Z',
+        }),
+    });
+
+    const server = createMicrosoft365MCPServer({
+      tokenPath: '/tmp/ms.json',
+      clientId: 'id',
+      clientSecret: 'secret',
+    });
+    const tools = server.getRegisteredTools();
+    const result = await tools.get_email.handler({ messageId: 'msg-1' });
+    const parsed = JSON.parse(result.content[0].text);
+    expect(parsed.subject).toBe('Detailed Email');
+  });
+
+  it('list_folders returns mail folders', async () => {
+    mockFetch.mockResolvedValue({
+      ok: true,
+      json: () =>
+        Promise.resolve({
+          value: [
+            { id: 'folder-1', displayName: 'Inbox', totalItemCount: 100 },
+            { id: 'folder-2', displayName: 'Sent Items', totalItemCount: 50 },
+          ],
+        }),
+    });
+
+    const server = createMicrosoft365MCPServer({
+      tokenPath: '/tmp/ms.json',
+      clientId: 'id',
+      clientSecret: 'secret',
+    });
+    const tools = server.getRegisteredTools();
+    const result = await tools.list_folders.handler({});
+    const parsed = JSON.parse(result.content[0].text);
+    expect(parsed.folders).toHaveLength(2);
+  });
+});
+
+describe('Outlook Write Tools', () => {
+  beforeEach(() => vi.clearAllMocks());
+
+  it('create_draft creates an Outlook draft', async () => {
+    mockFetch.mockResolvedValue({
+      ok: true,
+      status: 201,
+      json: () => Promise.resolve({ id: 'draft-1', subject: 'Draft Test' }),
+    });
+
+    const server = createMicrosoft365MCPServer({
+      tokenPath: '/tmp/ms.json',
+      clientId: 'id',
+      clientSecret: 'secret',
+    });
+    const tools = server.getRegisteredTools();
+    const result = await tools.create_draft.handler({
+      to: 'user@example.com',
+      subject: 'Draft Test',
+      body: 'Body',
+    });
+    const parsed = JSON.parse(result.content[0].text);
+    expect(parsed.id).toBe('draft-1');
+  });
+
+  it('archive_email moves to archive folder', async () => {
+    mockFetch.mockResolvedValue({
+      ok: true,
+      status: 200,
+      json: () => Promise.resolve({ id: 'msg-1' }),
+    });
+
+    const server = createMicrosoft365MCPServer({
+      tokenPath: '/tmp/ms.json',
+      clientId: 'id',
+      clientSecret: 'secret',
+    });
+    const tools = server.getRegisteredTools();
+    await tools.archive_email.handler({ messageId: 'msg-1' });
+    expect(mockFetch).toHaveBeenCalledWith(
+      expect.stringContaining('/me/messages/msg-1/move'),
+      expect.objectContaining({ method: 'POST' }),
+    );
+  });
+});
+
+describe('Calendar Tools', () => {
+  beforeEach(() => vi.clearAllMocks());
+
+  it('list_events returns calendar events', async () => {
+    mockFetch.mockResolvedValue({
+      ok: true,
+      json: () =>
+        Promise.resolve({
+          value: [
+            {
+              id: 'evt-1',
+              subject: 'Team Standup',
+              start: { dateTime: '2026-02-28T09:00:00', timeZone: 'UTC' },
+              end: { dateTime: '2026-02-28T09:30:00', timeZone: 'UTC' },
+              location: { displayName: 'Zoom' },
+            },
+          ],
+        }),
+    });
+
+    const server = createMicrosoft365MCPServer({
+      tokenPath: '/tmp/ms.json',
+      clientId: 'id',
+      clientSecret: 'secret',
+    });
+    const tools = server.getRegisteredTools();
+    const result = await tools.list_events.handler({
+      startDateTime: '2026-02-28T00:00:00Z',
+      endDateTime: '2026-02-28T23:59:59Z',
+    });
+    const parsed = JSON.parse(result.content[0].text);
+    expect(parsed.events).toHaveLength(1);
+    expect(parsed.events[0].subject).toBe('Team Standup');
+  });
+});
+
+describe('Calendar Write Tools', () => {
+  beforeEach(() => vi.clearAllMocks());
+
+  it('create_event creates a calendar event', async () => {
+    mockFetch.mockResolvedValue({
+      ok: true,
+      status: 201,
+      json: () =>
+        Promise.resolve({ id: 'evt-new', subject: 'Lunch', webLink: 'https://outlook/evt-new' }),
+    });
+
+    const server = createMicrosoft365MCPServer({
+      tokenPath: '/tmp/ms.json',
+      clientId: 'id',
+      clientSecret: 'secret',
+    });
+    const tools = server.getRegisteredTools();
+    const result = await tools.create_event.handler({
+      subject: 'Lunch',
+      startDateTime: '2026-03-01T12:00:00Z',
+      endDateTime: '2026-03-01T13:00:00Z',
+    });
+    const parsed = JSON.parse(result.content[0].text);
+    expect(parsed.id).toBe('evt-new');
+    expect(mockFetch).toHaveBeenCalledWith(
+      expect.stringContaining('/me/events'),
+      expect.objectContaining({ method: 'POST' }),
+    );
+  });
+
+  it('update_event patches an existing event', async () => {
+    mockFetch.mockResolvedValue({
+      ok: true,
+      status: 200,
+      json: () => Promise.resolve({ id: 'evt-1', subject: 'Updated' }),
+    });
+
+    const server = createMicrosoft365MCPServer({
+      tokenPath: '/tmp/ms.json',
+      clientId: 'id',
+      clientSecret: 'secret',
+    });
+    const tools = server.getRegisteredTools();
+    const result = await tools.update_event.handler({
+      eventId: 'evt-1',
+      subject: 'Updated',
+    });
+    const parsed = JSON.parse(result.content[0].text);
+    expect(parsed.subject).toBe('Updated');
+    expect(mockFetch).toHaveBeenCalledWith(
+      expect.stringContaining('/me/events/evt-1'),
+      expect.objectContaining({ method: 'PATCH' }),
+    );
+  });
+
+  it('delete_event deletes a calendar event', async () => {
+    mockFetch.mockResolvedValue({ ok: true, status: 204 });
+
+    const server = createMicrosoft365MCPServer({
+      tokenPath: '/tmp/ms.json',
+      clientId: 'id',
+      clientSecret: 'secret',
+    });
+    const tools = server.getRegisteredTools();
+    const result = await tools.delete_event.handler({ eventId: 'evt-1' });
+    const parsed = JSON.parse(result.content[0].text);
+    expect(parsed.deleted).toBe(true);
+    expect(mockFetch).toHaveBeenCalledWith(
+      expect.stringContaining('/me/events/evt-1'),
+      expect.objectContaining({ method: 'DELETE' }),
+    );
+  });
+});
+
+describe('OneDrive Tools', () => {
+  beforeEach(() => vi.clearAllMocks());
+
+  it('search_files searches OneDrive', async () => {
+    mockFetch.mockResolvedValue({
+      ok: true,
+      json: () =>
+        Promise.resolve({
+          value: [
+            {
+              id: 'file-1',
+              name: 'Budget.xlsx',
+              file: {
+                mimeType: 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+              },
+              size: 12345,
+              lastModifiedDateTime: '2026-02-28T12:00:00Z',
+            },
+          ],
+        }),
+    });
+
+    const server = createMicrosoft365MCPServer({
+      tokenPath: '/tmp/ms.json',
+      clientId: 'id',
+      clientSecret: 'secret',
+    });
+    const tools = server.getRegisteredTools();
+    const result = await tools.search_files.handler({ query: 'Budget' });
+    const parsed = JSON.parse(result.content[0].text);
+    expect(parsed.files).toHaveLength(1);
+    expect(parsed.files[0].name).toBe('Budget.xlsx');
+  });
+});

package/src/index.ts

@@ -0,0 +1,393 @@
+/**
+ * @goforgeit/mcp-microsoft-365 — MCP server for Microsoft 365
+ *
+ * Provides Outlook, Calendar, and OneDrive tools via stdio transport.
+ * Uses Microsoft Graph REST API directly (no SDK dependency).
+ */
+
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { z } from 'zod';
+import { createForgeTokenManager } from '@forge/shared/mcp-auth';
+
+const MS_TOKEN_URL = 'https://login.microsoftonline.com/common/oauth2/v2.0/token';
+const GRAPH_BASE = 'https://graph.microsoft.com/v1.0';
+
+export interface Microsoft365MCPOptions {
+  tokenPath: string;
+  clientId: string;
+  clientSecret: string;
+}
+
+interface ToolHandler {
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  handler: (args: any) => Promise<{ content: Array<{ type: 'text'; text: string }> }>;
+}
+
+interface Microsoft365MCPServer {
+  server: McpServer;
+  getRegisteredTools(): Record<string, ToolHandler>;
+  start(): Promise<void>;
+}
+
+export function createMicrosoft365MCPServer(
+  options: Microsoft365MCPOptions,
+): Microsoft365MCPServer {
+  const tokenManager = createForgeTokenManager({
+    tokenPath: options.tokenPath,
+    clientId: options.clientId,
+    clientSecret: options.clientSecret,
+    tokenUrl: MS_TOKEN_URL,
+  });
+
+  const server = new McpServer({
+    name: '@goforgeit/mcp-microsoft-365',
+    version: '0.1.0',
+  });
+
+  const registeredTools: Record<string, ToolHandler> = {};
+
+  function registerTool(
+    name: string,
+    description: string,
+    schema: Record<string, z.ZodType>,
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    handler: (args: any) => Promise<{ content: Array<{ type: 'text'; text: string }> }>,
+  ) {
+    registeredTools[name] = { handler };
+    server.tool(name, description, schema, handler);
+  }
+
+  async function graphRequest(
+    path: string,
+    method: 'GET' | 'POST' | 'PATCH' | 'DELETE' = 'GET',
+    body?: unknown,
+  ): Promise<unknown> {
+    const token = await tokenManager.getAccessToken();
+    const options: RequestInit = {
+      method,
+      headers: {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json',
+      },
+    };
+    if (body) options.body = JSON.stringify(body);
+
+    const response = await fetch(`${GRAPH_BASE}${path}`, options);
+
+    if (!response.ok) {
+      const errorText = await response.text();
+      throw new Error(`Microsoft Graph API error (${response.status}): ${errorText}`);
+    }
+
+    if (response.status === 204) return {};
+    return response.json();
+  }
+
+  // --- Outlook Tools ---
+
+  registerTool(
+    'search_emails',
+    'Search Outlook emails',
+    {
+      query: z.string().describe('Search query (OData $search syntax)'),
+      top: z.number().optional().default(10).describe('Maximum results'),
+    },
+    async (args: { query: string; top?: number }) => {
+      const top = args.top || 10;
+      const data = (await graphRequest(
+        `/me/messages?$search="${encodeURIComponent(args.query)}"&$top=${top}&$select=id,subject,from,receivedDateTime,bodyPreview,isRead`,
+      )) as { value: unknown[] };
+
+      return {
+        content: [
+          {
+            type: 'text' as const,
+            text: JSON.stringify({ messages: data.value }),
+          },
+        ],
+      };
+    },
+  );
+
+  registerTool(
+    'get_email',
+    'Get full email details by message ID',
+    {
+      messageId: z.string().describe('Outlook message ID'),
+    },
+    async (args: { messageId: string }) => {
+      const data = await graphRequest(`/me/messages/${args.messageId}`);
+      return {
+        content: [{ type: 'text' as const, text: JSON.stringify(data) }],
+      };
+    },
+  );
+
+  registerTool('list_folders', 'List Outlook mail folders', {}, async () => {
+    const data = (await graphRequest('/me/mailFolders?$top=50')) as { value: unknown[] };
+    return {
+      content: [
+        {
+          type: 'text' as const,
+          text: JSON.stringify({ folders: data.value }),
+        },
+      ],
+    };
+  });
+
+  // --- Outlook Write Tools ---
+
+  registerTool(
+    'create_draft',
+    'Create an Outlook draft email',
+    {
+      to: z.string().describe('Recipient email address'),
+      subject: z.string().describe('Email subject'),
+      body: z.string().describe('Email body (plain text)'),
+    },
+    async (args: { to: string; subject: string; body: string }) => {
+      const data = await graphRequest('/me/messages', 'POST', {
+        subject: args.subject,
+        body: { contentType: 'Text', content: args.body },
+        toRecipients: [{ emailAddress: { address: args.to } }],
+      });
+      return {
+        content: [{ type: 'text' as const, text: JSON.stringify(data) }],
+      };
+    },
+  );
+
+  registerTool(
+    'archive_email',
+    'Move an Outlook email to Archive folder',
+    {
+      messageId: z.string().describe('Outlook message ID to archive'),
+    },
+    async (args: { messageId: string }) => {
+      const data = await graphRequest(`/me/messages/${args.messageId}/move`, 'POST', {
+        destinationId: 'archive',
+      });
+      return {
+        content: [{ type: 'text' as const, text: JSON.stringify(data) }],
+      };
+    },
+  );
+
+  // --- Calendar Tools ---
+
+  registerTool(
+    'list_events',
+    'List calendar events in a date range',
+    {
+      startDateTime: z.string().optional().describe('Start of range (ISO 8601)'),
+      endDateTime: z.string().optional().describe('End of range (ISO 8601)'),
+      top: z.number().optional().default(25).describe('Maximum events'),
+    },
+    async (args: { startDateTime?: string; endDateTime?: string; top?: number }) => {
+      let path = '/me/events?$orderby=start/dateTime';
+      path += `&$top=${args.top || 25}`;
+      if (args.startDateTime) {
+        path += `&$filter=start/dateTime ge '${args.startDateTime}'`;
+        if (args.endDateTime) {
+          path += ` and end/dateTime le '${args.endDateTime}'`;
+        }
+      }
+      path +=
+        '&$select=id,subject,start,end,location,attendees,bodyPreview,webLink,isAllDay,organizer';
+
+      const data = (await graphRequest(path)) as { value: unknown[] };
+      return {
+        content: [
+          {
+            type: 'text' as const,
+            text: JSON.stringify({ events: data.value }),
+          },
+        ],
+      };
+    },
+  );
+
+  registerTool(
+    'get_event',
+    'Get a specific calendar event by ID',
+    {
+      eventId: z.string().describe('Calendar event ID'),
+    },
+    async (args: { eventId: string }) => {
+      const data = await graphRequest(`/me/events/${args.eventId}`);
+      return {
+        content: [{ type: 'text' as const, text: JSON.stringify(data) }],
+      };
+    },
+  );
+
+  // --- Calendar Write Tools ---
+
+  registerTool(
+    'create_event',
+    'Create a new calendar event in Outlook',
+    {
+      subject: z.string().describe('Event title'),
+      startDateTime: z.string().describe('Start time (ISO 8601)'),
+      endDateTime: z.string().describe('End time (ISO 8601)'),
+      body: z.string().optional().describe('Event description'),
+      location: z.string().optional().describe('Event location'),
+      attendeeEmails: z.array(z.string()).optional().describe('Attendee email addresses'),
+    },
+    async (args: {
+      subject: string;
+      startDateTime: string;
+      endDateTime: string;
+      body?: string;
+      location?: string;
+      attendeeEmails?: string[];
+    }) => {
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      const event: Record<string, any> = {
+        subject: args.subject,
+        start: { dateTime: args.startDateTime, timeZone: 'UTC' },
+        end: { dateTime: args.endDateTime, timeZone: 'UTC' },
+      };
+      if (args.body) event.body = { contentType: 'Text', content: args.body };
+      if (args.location) event.location = { displayName: args.location };
+      if (args.attendeeEmails) {
+        event.attendees = args.attendeeEmails.map((email) => ({
+          emailAddress: { address: email },
+          type: 'required',
+        }));
+      }
+
+      const data = await graphRequest('/me/events', 'POST', event);
+      return {
+        content: [{ type: 'text' as const, text: JSON.stringify(data) }],
+      };
+    },
+  );
+
+  registerTool(
+    'update_event',
+    'Update an existing Outlook calendar event',
+    {
+      eventId: z.string().describe('Calendar event ID'),
+      subject: z.string().optional().describe('New event title'),
+      startDateTime: z.string().optional().describe('New start time (ISO 8601)'),
+      endDateTime: z.string().optional().describe('New end time (ISO 8601)'),
+      body: z.string().optional().describe('New event description'),
+      location: z.string().optional().describe('New event location'),
+    },
+    async (args: {
+      eventId: string;
+      subject?: string;
+      startDateTime?: string;
+      endDateTime?: string;
+      body?: string;
+      location?: string;
+    }) => {
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      const patch: Record<string, any> = {};
+      if (args.subject) patch.subject = args.subject;
+      if (args.body) patch.body = { contentType: 'Text', content: args.body };
+      if (args.location) patch.location = { displayName: args.location };
+      if (args.startDateTime) patch.start = { dateTime: args.startDateTime, timeZone: 'UTC' };
+      if (args.endDateTime) patch.end = { dateTime: args.endDateTime, timeZone: 'UTC' };
+
+      const data = await graphRequest(`/me/events/${args.eventId}`, 'PATCH', patch);
+      return {
+        content: [{ type: 'text' as const, text: JSON.stringify(data) }],
+      };
+    },
+  );
+
+  registerTool(
+    'delete_event',
+    'Delete an Outlook calendar event',
+    {
+      eventId: z.string().describe('Calendar event ID to delete'),
+    },
+    async (args: { eventId: string }) => {
+      await graphRequest(`/me/events/${args.eventId}`, 'DELETE');
+      return {
+        content: [
+          {
+            type: 'text' as const,
+            text: JSON.stringify({ deleted: true, eventId: args.eventId }),
+          },
+        ],
+      };
+    },
+  );
+
+  // --- OneDrive Tools ---
+
+  registerTool(
+    'search_files',
+    'Search OneDrive files',
+    {
+      query: z.string().describe('Search query'),
+      top: z.number().optional().default(20).describe('Maximum results'),
+    },
+    async (args: { query: string; top?: number }) => {
+      const top = args.top || 20;
+      const data = (await graphRequest(
+        `/me/drive/root/search(q='${encodeURIComponent(args.query)}')?$top=${top}&$select=id,name,file,size,lastModifiedDateTime,webUrl`,
+      )) as { value: unknown[] };
+
+      return {
+        content: [
+          {
+            type: 'text' as const,
+            text: JSON.stringify({ files: data.value }),
+          },
+        ],
+      };
+    },
+  );
+
+  registerTool(
+    'get_file_content',
+    'Get OneDrive file metadata by item ID',
+    {
+      itemId: z.string().describe('OneDrive item ID'),
+    },
+    async (args: { itemId: string }) => {
+      const data = await graphRequest(`/me/drive/items/${args.itemId}`);
+      return {
+        content: [{ type: 'text' as const, text: JSON.stringify(data) }],
+      };
+    },
+  );
+
+  return {
+    server,
+    getRegisteredTools() {
+      return registeredTools;
+    },
+    async start() {
+      const transport = new StdioServerTransport();
+      await server.connect(transport);
+    },
+  };
+}
+
+// CLI entry point
+const isMainModule =
+  process.argv[1] && import.meta.url.endsWith(process.argv[1].replace(/\\/g, '/'));
+if (isMainModule || process.env.FORGE_MCP_START === 'true') {
+  const tokenPath = process.env.FORGE_TOKEN_PATH;
+  const clientId = process.env.FORGE_CLIENT_ID;
+  const clientSecret = process.env.FORGE_CLIENT_SECRET;
+
+  if (!tokenPath || !clientId || !clientSecret) {
+    console.error(
+      'Required environment variables: FORGE_TOKEN_PATH, FORGE_CLIENT_ID, FORGE_CLIENT_SECRET',
+    );
+    process.exit(1);
+  }
+
+  const mcpServer = createMicrosoft365MCPServer({ tokenPath, clientId, clientSecret });
+  mcpServer.start().catch((err) => {
+    console.error('Failed to start MCP server:', err);
+    process.exit(1);
+  });
+}

package/tsconfig.json

@@ -0,0 +1,8 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "./dist",
+    "rootDir": "./src"
+  },
+  "include": ["src/**/*"]
+}

package/tsup.config.ts

@@ -0,0 +1,15 @@
+import { defineConfig } from 'tsup';
+
+export default defineConfig({
+  entry: ['src/index.ts'],
+  format: ['esm'],
+  target: 'node20',
+  outDir: 'dist',
+  clean: true,
+  dts: true,
+  sourcemap: true,
+  noExternal: ['@forge/shared'],
+  banner: {
+    js: '#!/usr/bin/env node',
+  },
+});