@jbctechsolutions/mcp-office365 2.5.1 → 4.0.0

package/dist/state/store.js

@@ -0,0 +1,321 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * Durable state store (U4) — a better-sqlite3-backed store at
+ * `~/.mcp-office365/state.db` holding durable-ID aliases and two-phase approval
+ * tokens. Provides the concurrency (WAL + busy_timeout + atomic consume, D7),
+ * at-rest (0700/0600 permissions, D18), account-stamping (D7), and
+ * degradation (in-memory fallback, D15) semantics the rest of v3 builds on.
+ *
+ * This unit is the storage layer only; wiring into the ID resolver (U5) and the
+ * approval manager (U9) lands in those units.
+ */
+import Database from 'better-sqlite3';
+import { chmodSync, existsSync, mkdirSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { runMigrations, migrateLegacyTokens } from './migrate.js';
+import { APPROVAL_RETENTION_MS } from './schema.js';
+import { DeltaStore } from './delta-store.js';
+const DEFAULT_DIR = join(homedir(), '.mcp-office365');
+const LEGACY_DIR = join(homedir(), '.outlook-mcp');
+const DB_FILENAME = 'state.db';
+export class StateStore {
+    /** True when running from an in-memory fallback (durability degraded). */
+    degraded;
+    /** The db path, or ':memory:' when degraded. */
+    path;
+    /** Effective `journal_mode` pragma (e.g. 'wal'). */
+    journalMode;
+    /** Effective `busy_timeout` pragma in ms. */
+    busyTimeout;
+    /** Delta-sync mirror storage (U12), sharing this store's connection. */
+    delta;
+    db;
+    now;
+    constructor(db, path, degraded, now) {
+        this.db = db;
+        this.path = path;
+        this.degraded = degraded;
+        this.now = now;
+        this.journalMode = String(db.pragma('journal_mode', { simple: true }));
+        this.busyTimeout = Number(db.pragma('busy_timeout', { simple: true }));
+        this.delta = new DeltaStore(db, now);
+    }
+    /**
+     * Opens (creating if needed) the durable store. On any failure to use the
+     * on-disk db (corrupt/locked file, unwritable dir) it degrades to an in-memory
+     * store, emits a stderr warning, and reports `degraded = true` — the server
+     * stays usable, only durability is lost for the run.
+     */
+    static open(options = {}) {
+        const dir = options.dir ?? DEFAULT_DIR;
+        const legacyDir = options.legacyDir ?? LEGACY_DIR;
+        const now = options.now ?? (() => Date.now());
+        const warn = options.warn ?? ((msg) => void process.stderr.write(`${msg}\n`));
+        let fileDb;
+        try {
+            // Directory: create 0700, or repair perms if it already exists (D18).
+            if (!existsSync(dir)) {
+                mkdirSync(dir, { recursive: true, mode: 0o700 });
+            }
+            else {
+                safeChmod(dir, 0o700, warn);
+            }
+            const dbPath = join(dir, DB_FILENAME);
+            fileDb = new Database(dbPath);
+            configurePragmas(fileDb);
+            runMigrations(fileDb); // executes DDL — surfaces a corrupt/newer file here
+            // The file (and its -wal/-shm sidecars) may have just been created;
+            // enforce 0600 across all three (and repair a loose one).
+            safeChmod(dbPath, 0o600, warn);
+            safeChmod(`${dbPath}-wal`, 0o600, warn);
+            safeChmod(`${dbPath}-shm`, 0o600, warn);
+            const store = new StateStore(fileDb, dbPath, false, now);
+            // The legacy token copy and boot purge are conveniences — a failure in
+            // either must NOT discard an otherwise-healthy on-disk store, so they run
+            // outside the degrade-governing path (warn-and-continue).
+            try {
+                migrateLegacyTokens(fileDb, dir, legacyDir);
+            }
+            catch (e) {
+                warn(`[mcp-office365] legacy token migration skipped (${e instanceof Error ? e.message : String(e)}).`);
+            }
+            try {
+                store.purgeExpired(now());
+            }
+            catch (e) {
+                warn(`[mcp-office365] boot purge skipped (${e instanceof Error ? e.message : String(e)}).`);
+            }
+            return store;
+        }
+        catch (error) {
+            // Release the on-disk handle (and its WAL lock) before degrading, so a
+            // failed open does not leak a file descriptor / lock for the process.
+            if (fileDb !== undefined) {
+                try {
+                    fileDb.close();
+                }
+                catch {
+                    /* best-effort */
+                }
+            }
+            const reason = error instanceof Error ? error.message : String(error);
+            warn(`[mcp-office365] state store unavailable (${reason}); running in-memory (durability degraded).`);
+            const mem = new Database(':memory:');
+            configurePragmas(mem);
+            runMigrations(mem);
+            return new StateStore(mem, ':memory:', true, now);
+        }
+    }
+    // ---- Aliases (D3) --------------------------------------------------------
+    /** Inserts or replaces a durable-ID alias. */
+    putAlias(input) {
+        this.db
+            .prepare(`INSERT INTO aliases (token, graph_id, entity_type, account_id, mutable, created_at)
+         VALUES (@token, @graphId, @entityType, @accountId, @mutable, @createdAt)
+         ON CONFLICT(token) DO UPDATE SET
+           graph_id = excluded.graph_id,
+           entity_type = excluded.entity_type,
+           account_id = excluded.account_id,
+           mutable = excluded.mutable`)
+            .run({
+            token: input.token,
+            graphId: input.graphId,
+            entityType: input.entityType,
+            accountId: input.accountId,
+            mutable: input.mutable === true ? 1 : 0,
+            createdAt: input.createdAt ?? this.now(),
+        });
+    }
+    /**
+     * Resolves an alias token, scoped to `accountId` (D7 account stamping). The
+     * account is a mandatory, fail-closed argument: a row minted under a different
+     * account is invisible, so no caller can accidentally resolve a foreign
+     * account's durable ID into a live Graph ID by omitting the scope.
+     */
+    getAlias(token, accountId) {
+        const raw = this.db
+            .prepare('SELECT * FROM aliases WHERE token = ? AND account_id = ?')
+            .get(token, accountId);
+        if (raw === undefined) {
+            return null;
+        }
+        return {
+            token: raw.token,
+            graphId: raw.graph_id,
+            entityType: raw.entity_type,
+            accountId: raw.account_id,
+            mutable: raw.mutable !== 0,
+            createdAt: raw.created_at,
+        };
+    }
+    /**
+     * Atomically registers an alias with D1a collision enforcement, in a single
+     * IMMEDIATE transaction so the check-and-write is not a read-then-write race:
+     * two concurrent immutable registrations of the same token cannot both pass
+     * the check and then clobber each other. Returns `'collision'` when a
+     * *different* Graph ID already occupies the token for an immutable entity
+     * (neither the stored nor the new row is mutable); otherwise upserts and
+     * returns `'ok'`.
+     */
+    registerAlias(input) {
+        const run = this.db.transaction(() => {
+            const existing = this.getAliasUnscoped(input.token);
+            if (existing !== null &&
+                existing.graphId !== input.graphId &&
+                !existing.mutable &&
+                input.mutable !== true) {
+                return 'collision';
+            }
+            this.putAlias(input);
+            return 'ok';
+        });
+        return run.immediate();
+    }
+    /**
+     * Returns an alias row regardless of account, or null. Reserved for two
+     * internal uses that must see across accounts: foreign-account disambiguation
+     * during resolution, and collision detection at mint time (D1a). It is NOT a
+     * resolution path — {@link getAlias} (account-scoped) is the only one of those.
+     */
+    getAliasUnscoped(token) {
+        const raw = this.db.prepare('SELECT * FROM aliases WHERE token = ?').get(token);
+        if (raw === undefined) {
+            return null;
+        }
+        return {
+            token: raw.token,
+            graphId: raw.graph_id,
+            entityType: raw.entity_type,
+            accountId: raw.account_id,
+            mutable: raw.mutable !== 0,
+            createdAt: raw.created_at,
+        };
+    }
+    /**
+     * Returns the account a token was minted under (any account), or null when the
+     * token is unknown. Distinguishes "foreign account" from "unknown" during
+     * resolution so a foreign token yields a typed ID_FOREIGN_ACCOUNT.
+     */
+    getAliasAccount(token) {
+        return this.getAliasUnscoped(token)?.accountId ?? null;
+    }
+    // ---- Approval tokens (D7/D8) --------------------------------------------
+    /**
+     * Reads an approval token scoped to `accountId` (or null). A read view for
+     * validation/preview; redemption still goes through {@link consumeApprovalToken}
+     * so the atomic guard is never bypassed.
+     */
+    getApprovalToken(token, accountId) {
+        const raw = this.db
+            .prepare('SELECT token, action, target_json, content_hash, expires_at, redeemed_at, receipt_json, created_at FROM approval_tokens WHERE token = ? AND account_id = ?')
+            .get(token, accountId);
+        if (raw === undefined) {
+            return null;
+        }
+        return {
+            token: raw.token,
+            action: raw.action,
+            targetJson: raw.target_json,
+            contentHash: raw.content_hash,
+            expiresAt: raw.expires_at,
+            redeemedAt: raw.redeemed_at,
+            receiptJson: raw.receipt_json,
+            createdAt: raw.created_at,
+        };
+    }
+    /** Stages a two-phase approval token. */
+    putApprovalToken(input) {
+        this.db
+            .prepare(`INSERT INTO approval_tokens
+           (token, operation_key, action, target_json, content_hash, account_id, expires_at, created_at)
+         VALUES (@token, @operationKey, @action, @targetJson, @contentHash, @accountId, @expiresAt, @createdAt)`)
+            .run({
+            token: input.token,
+            operationKey: input.operationKey ?? null,
+            action: input.action,
+            targetJson: input.targetJson,
+            contentHash: input.contentHash ?? null,
+            accountId: input.accountId,
+            expiresAt: input.expiresAt,
+            createdAt: input.createdAt ?? this.now(),
+        });
+    }
+    /**
+     * Atomically consumes an approval token (D8). The guarded `UPDATE … WHERE
+     * redeemed_at IS NULL AND expires_at > now RETURNING` means only one caller —
+     * across processes sharing the db — can win the redemption; the loser sees
+     * `already_redeemed` and can return the stored receipt. Expiry is enforced
+     * here at the trust boundary (not left to callers): an expired token that
+     * still authorizes a send/delete would defeat the whole point of a time-boxed
+     * two-phase approval. Foreign-account tokens are refused.
+     */
+    consumeApprovalToken(args) {
+        const now = args.now ?? this.now();
+        const updated = this.db
+            .prepare(`UPDATE approval_tokens
+           SET redeemed_at = ?, receipt_json = ?
+         WHERE token = ? AND account_id = ? AND redeemed_at IS NULL AND expires_at > ?
+         RETURNING receipt_json`)
+            .get(now, args.receiptJson ?? null, args.token, args.accountId, now);
+        if (updated !== undefined) {
+            return { status: 'consumed', receiptJson: updated.receipt_json };
+        }
+        // Classify why the guarded update matched nothing.
+        const row = this.db
+            .prepare('SELECT account_id, redeemed_at, receipt_json, expires_at FROM approval_tokens WHERE token = ?')
+            .get(args.token);
+        if (row === undefined) {
+            return { status: 'not_found' };
+        }
+        if (row.account_id !== args.accountId) {
+            return { status: 'foreign_account' };
+        }
+        // Redemption takes precedence over expiry so an idempotent re-consume of an
+        // already-redeemed token still returns its receipt.
+        if (row.redeemed_at !== null) {
+            return { status: 'already_redeemed', receiptJson: row.receipt_json };
+        }
+        return { status: 'expired' };
+    }
+    // ---- Maintenance ---------------------------------------------------------
+    /**
+     * Deletes approval tokens whose expiry is older than the retention window
+     * (D8, 90 days). Recently-expired receipts linger so idempotent redemption
+     * still returns them. Returns the number of rows purged.
+     */
+    purgeExpired(now) {
+        const cutoff = now - APPROVAL_RETENTION_MS;
+        const result = this.db.prepare('DELETE FROM approval_tokens WHERE expires_at < ?').run(cutoff);
+        return result.changes;
+    }
+    close() {
+        this.db.close();
+    }
+}
+function configurePragmas(db) {
+    db.pragma('journal_mode = WAL');
+    db.pragma('busy_timeout = 5000');
+}
+/**
+ * chmod that never throws. Windows/filesystems without POSIX modes fail benignly
+ * and are ignored; a genuine failure on a POSIX host (e.g. EPERM) means the file
+ * may sit with looser-than-intended permissions, so we surface it via `warn`
+ * rather than swallow silently — the at-rest exposure should be observable.
+ * A missing sidecar (-wal/-shm not yet created) is not a failure worth noting.
+ */
+function safeChmod(target, mode, warn) {
+    try {
+        chmodSync(target, mode);
+    }
+    catch (error) {
+        const code = error.code;
+        if (process.platform !== 'win32' && code !== 'ENOENT' && warn != null) {
+            warn(`[mcp-office365] could not set permissions on ${target} (${code ?? 'error'}); it may be readable by other local users.`);
+        }
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/state/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/state/store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;GASG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAI9C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,CAAC;AACtD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AACnD,MAAM,WAAW,GAAG,UAAU,CAAC;AA2E/B,MAAM,OAAO,UAAU;IACrB,0EAA0E;IACjE,QAAQ,CAAU;IAC3B,gDAAgD;IACvC,IAAI,CAAS;IACtB,oDAAoD;IAC3C,WAAW,CAAS;IAC7B,6CAA6C;IACpC,WAAW,CAAS;IAC7B,wEAAwE;IAC/D,KAAK,CAAa;IAEV,EAAE,CAAK;IACP,GAAG,CAAe;IAEnC,YAAoB,EAAM,EAAE,IAAY,EAAE,QAAiB,EAAE,GAAiB;QAC5E,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,IAAI,CAAC,UAA6B,EAAE;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC;QACvC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,GAAW,EAAQ,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;QAE5F,IAAI,MAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,sEAAsE;YACtE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAC9B,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACtC,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC9B,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACzB,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,oDAAoD;YAC3E,oEAAoE;YACpE,0DAA0D;YAC1D,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAC/B,SAAS,CAAC,GAAG,MAAM,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACxC,SAAS,CAAC,GAAG,MAAM,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAExC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAEzD,uEAAuE;YACvE,0EAA0E;YAC1E,0DAA0D;YAC1D,IAAI,CAAC;gBACH,mBAAmB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,mDAAmD,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1G,CAAC;YACD,IAAI,CAAC;gBACH,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,uCAAuC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9F,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uEAAuE;YACvE,sEAAsE;YACtE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC;gBAAC,MAAM,CAAC;oBACP,iBAAiB;gBACnB,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,IAAI,CAAC,4CAA4C,MAAM,6CAA6C,CAAC,CAAC;YACtG,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC;YACrC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACtB,aAAa,CAAC,GAAG,CAAC,CAAC;YACnB,OAAO,IAAI,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,6EAA6E;IAE7E,8CAA8C;IAC9C,QAAQ,CAAC,KAAiB;QACxB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;;;;sCAM8B,CAC/B;aACA,GAAG,CAAC;YACH,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;SACzC,CAAC,CAAC;IACP,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,KAAa,EAAE,SAAiB;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,0DAA0D,CAAC;aACnE,GAAG,CAAC,KAAK,EAAE,SAAS,CAA4B,CAAC;QACpD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC;YAC1B,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,aAAa,CAAC,KAAiB;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAuB,EAAE;YACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpD,IACE,QAAQ,KAAK,IAAI;gBACjB,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;gBAClC,CAAC,QAAQ,CAAC,OAAO;gBACjB,KAAK,CAAC,OAAO,KAAK,IAAI,EACtB,CAAC;gBACD,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,SAAS,EAAE,CAAC;IACzB,CAAC;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,KAAa;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC,GAAG,CAAC,KAAK,CAEjE,CAAC;QACd,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC;YAC1B,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,KAAa;QAC3B,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,SAAS,IAAI,IAAI,CAAC;IACzD,CAAC;IAED,4EAA4E;IAE5E;;;;OAIG;IACH,gBAAgB,CAAC,KAAa,EAAE,SAAiB;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN,4JAA4J,CAC7J;aACA,GAAG,CAAC,KAAK,EAAE,SAAS,CAWV,CAAC;QACd,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,gBAAgB,CAAC,KAAyB;QACxC,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;gHAEwG,CACzG;aACA,GAAG,CAAC;YACH,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;YACxC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YACtC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;SACzC,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;;OAQG;IACH,oBAAoB,CAAC,IAKpB;QACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE;aACpB,OAAO,CACN;;;gCAGwB,CACzB;aACA,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,CAExD,CAAC;QAEd,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;QACnE,CAAC;QAED,mDAAmD;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN,+FAA+F,CAChG;aACA,GAAG,CAAC,IAAI,CAAC,KAAK,CAEJ,CAAC;QACd,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACjC,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QACvC,CAAC;QACD,4EAA4E;QAC5E,oDAAoD;QACpD,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,6EAA6E;IAE7E;;;;OAIG;IACH,YAAY,CAAC,GAAW;QACtB,MAAM,MAAM,GAAG,GAAG,GAAG,qBAAqB,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/F,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,EAAM;IAC9B,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,MAAc,EAAE,IAAY,EAAE,IAAgC;IAC/E,IAAI,CAAC;QACH,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA2B,CAAC,IAAI,CAAC;QAC/C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;YACtE,IAAI,CAAC,gDAAgD,MAAM,KAAK,IAAI,IAAI,OAAO,6CAA6C,CAAC,CAAC;QAChI,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/tools/calendar-graph.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * Graph-backend calendar tools (v3 registry-driven architecture, U2 — dual
+ * backend). Holds the calendar logic that previously lived inline in the
+ * `handleGraphToolCall` switch, so the registry handlers stay thin and branch
+ * on `ctx.backend`.
+ */
+import type { GraphRepository } from '../graph/repository.js';
+import type { GraphContentReaders } from '../graph/content-readers.js';
+import { type ApprovalTokenManager } from '../approval/index.js';
+import type { ToolResult } from '../registry/types.js';
+import type { ListEventsParams, GetEventParams, SearchEventsParams, CreateEventGraphParams, UpdateEventParams, DeleteEventParams, RespondToEventParams, ListEventInstancesParams, PrepareDeleteEventParams, ConfirmDeleteEventParams, CreateCalendarGroupParams, ListRoomsParams } from './calendar.js';
+/**
+ * Graph calendar tools. Each method mirrors the extracted inline graph case
+ * body and returns an MCP `ToolResult`.
+ */
+export declare class GraphCalendarTools {
+    private readonly repository;
+    private readonly contentReaders;
+    private readonly tokenManager;
+    constructor(repository: GraphRepository, contentReaders: GraphContentReaders, tokenManager: ApprovalTokenManager);
+    listCalendars(): Promise<ToolResult>;
+    listEvents(params: ListEventsParams): Promise<ToolResult>;
+    getEvent(params: GetEventParams): Promise<ToolResult>;
+    searchEvents(params: SearchEventsParams): Promise<ToolResult>;
+    createEvent(params: CreateEventGraphParams): Promise<ToolResult>;
+    updateEvent(params: UpdateEventParams): Promise<ToolResult>;
+    respondToEvent(params: RespondToEventParams): Promise<ToolResult>;
+    deleteEvent(params: DeleteEventParams): Promise<ToolResult>;
+    listEventInstances(params: ListEventInstancesParams): Promise<ToolResult>;
+    prepareDeleteEvent(params: PrepareDeleteEventParams): Promise<ToolResult>;
+    confirmDeleteEvent(params: ConfirmDeleteEventParams): Promise<ToolResult>;
+    listCalendarGroups(): Promise<ToolResult>;
+    createCalendarGroup(params: CreateCalendarGroupParams): Promise<ToolResult>;
+    listRoomLists(): Promise<ToolResult>;
+    listRooms(params: ListRoomsParams): Promise<ToolResult>;
+}
+//# sourceMappingURL=calendar-graph.d.ts.map

package/dist/tools/calendar-graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar-graph.d.ts","sourceRoot":"","sources":["../../src/tools/calendar-graph.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAGvE,OAAO,EAAwB,KAAK,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAEV,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EACzB,eAAe,EAChB,MAAM,eAAe,CAAC;AA4DvB;;;GAGG;AACH,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAFZ,UAAU,EAAE,eAAe,EAC3B,cAAc,EAAE,mBAAmB,EACnC,YAAY,EAAE,oBAAoB;IAG/C,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC;IAKpC,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAczD,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC;IAUrD,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC;IAsB7D,WAAW,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,UAAU,CAAC;IAoDhE,WAAW,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC;IAiC3D,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC;IAejE,WAAW,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC;IAO3D,kBAAkB,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,UAAU,CAAC;IAKzE,kBAAkB,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,UAAU,CAAC;IA6BzE,kBAAkB,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,UAAU,CAAC;IAqCzE,kBAAkB,IAAI,OAAO,CAAC,UAAU,CAAC;IAKzC,mBAAmB,CAAC,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,UAAU,CAAC;IAK3E,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC;IAKpC,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAI9D"}