@jbctechsolutions/mcp-office365 2.5.1

package/dist/database/repository.js

@@ -0,0 +1,199 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+import * as queries from './queries.js';
+import { isoToAppleTimestamp } from '../utils/dates.js';
+// =============================================================================
+// Repository Implementation
+// =============================================================================
+/**
+ * Repository implementation using better-sqlite3.
+ */
+export class OutlookRepository {
+    connection;
+    constructor(connection) {
+        this.connection = connection;
+    }
+    // ---------------------------------------------------------------------------
+    // Folders
+    // ---------------------------------------------------------------------------
+    listFolders() {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.LIST_FOLDERS);
+            return stmt.all();
+        });
+    }
+    getFolder(id) {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.GET_FOLDER);
+            return stmt.get(id);
+        });
+    }
+    // ---------------------------------------------------------------------------
+    // Emails
+    // ---------------------------------------------------------------------------
+    listEmails(folderId, limit, offset) {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.LIST_EMAILS);
+            return stmt.all(folderId, limit, offset);
+        });
+    }
+    listUnreadEmails(folderId, limit, offset) {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.LIST_UNREAD_EMAILS);
+            return stmt.all(folderId, limit, offset);
+        });
+    }
+    searchEmails(query, limit) {
+        return this.connection.execute((db) => {
+            const pattern = `%${query}%`;
+            const stmt = db.prepare(queries.SEARCH_EMAILS);
+            return stmt.all(pattern, pattern, pattern, limit);
+        });
+    }
+    searchEmailsInFolder(folderId, query, limit) {
+        return this.connection.execute((db) => {
+            const pattern = `%${query}%`;
+            const stmt = db.prepare(queries.SEARCH_EMAILS_IN_FOLDER);
+            return stmt.all(folderId, pattern, pattern, pattern, limit);
+        });
+    }
+    getEmail(id) {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.GET_EMAIL);
+            return stmt.get(id);
+        });
+    }
+    getUnreadCount() {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.GET_UNREAD_COUNT);
+            const row = stmt.get();
+            return row?.count ?? 0;
+        });
+    }
+    getUnreadCountByFolder(folderId) {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.GET_UNREAD_COUNT_BY_FOLDER);
+            const row = stmt.get(folderId);
+            return row?.count ?? 0;
+        });
+    }
+    // ---------------------------------------------------------------------------
+    // Calendar
+    // ---------------------------------------------------------------------------
+    listCalendars() {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.LIST_CALENDARS);
+            return stmt.all();
+        });
+    }
+    listEvents(limit) {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.LIST_EVENTS);
+            return stmt.all(limit);
+        });
+    }
+    listEventsByFolder(folderId, limit) {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.LIST_EVENTS_BY_FOLDER);
+            return stmt.all(folderId, limit);
+        });
+    }
+    listEventsByDateRange(startDate, endDate, limit) {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.LIST_EVENTS_BY_DATE_RANGE);
+            return stmt.all(startDate, endDate, limit);
+        });
+    }
+    searchEvents(query, startDate, endDate, limit) {
+        // SQLite doesn't have event titles in the database, so we can only filter by date range here.
+        // Title filtering must be done at a higher layer using content readers.
+        if (startDate != null && endDate != null) {
+            const startTs = isoToAppleTimestamp(startDate);
+            const endTs = isoToAppleTimestamp(endDate);
+            if (startTs != null && endTs != null) {
+                return this.listEventsByDateRange(startTs, endTs, limit);
+            }
+        }
+        return this.listEvents(limit);
+    }
+    getEvent(id) {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.GET_EVENT);
+            return stmt.get(id);
+        });
+    }
+    // ---------------------------------------------------------------------------
+    // Contacts
+    // ---------------------------------------------------------------------------
+    listContacts(limit, offset) {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.LIST_CONTACTS);
+            return stmt.all(limit, offset);
+        });
+    }
+    searchContacts(query, limit) {
+        return this.connection.execute((db) => {
+            const pattern = `%${query}%`;
+            const stmt = db.prepare(queries.SEARCH_CONTACTS);
+            return stmt.all(pattern, pattern, limit);
+        });
+    }
+    getContact(id) {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.GET_CONTACT);
+            return stmt.get(id);
+        });
+    }
+    // ---------------------------------------------------------------------------
+    // Tasks
+    // ---------------------------------------------------------------------------
+    listTasks(limit, offset) {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.LIST_TASKS);
+            return stmt.all(limit, offset);
+        });
+    }
+    listIncompleteTasks(limit, offset) {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.LIST_INCOMPLETE_TASKS);
+            return stmt.all(limit, offset);
+        });
+    }
+    searchTasks(query, limit) {
+        return this.connection.execute((db) => {
+            const pattern = `%${query}%`;
+            const stmt = db.prepare(queries.SEARCH_TASKS);
+            return stmt.all(pattern, limit);
+        });
+    }
+    getTask(id) {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.GET_TASK);
+            return stmt.get(id);
+        });
+    }
+    // ---------------------------------------------------------------------------
+    // Notes
+    // ---------------------------------------------------------------------------
+    listNotes(limit, offset) {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.LIST_NOTES);
+            return stmt.all(limit, offset);
+        });
+    }
+    getNote(id) {
+        return this.connection.execute((db) => {
+            const stmt = db.prepare(queries.GET_NOTE);
+            return stmt.get(id);
+        });
+    }
+}
+/**
+ * Creates a repository with the given connection.
+ */
+export function createRepository(connection) {
+    return new OutlookRepository(connection);
+}
+//# sourceMappingURL=repository.js.map

package/dist/database/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../src/database/repository.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAwMxD,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACC;IAA7B,YAA6B,UAAuB;QAAvB,eAAU,GAAV,UAAU,CAAa;IAAG,CAAC;IAExD,8EAA8E;IAC9E,UAAU;IACV,8EAA8E;IAE9E,WAAW;QACT,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC,GAAG,EAAiB,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,EAAU;QAClB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAA0B,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,SAAS;IACT,8EAA8E;IAE9E,UAAU,CAAC,QAAgB,EAAE,KAAa,EAAE,MAAc;QACxD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAe,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CAAC,QAAgB,EAAE,KAAa,EAAE,MAAc;QAC9D,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAe,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,KAAa,EAAE,KAAa;QACvC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,OAAO,GAAG,IAAI,KAAK,GAAG,CAAC;YAC7B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAe,CAAC;QAClE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB,CAAC,QAAgB,EAAE,KAAa,EAAE,KAAa;QACjE,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,OAAO,GAAG,IAAI,KAAK,GAAG,CAAC;YAC7B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAe,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,EAAU;QACjB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAyB,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAA0B,CAAC;YAC/C,OAAO,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB,CAAC,QAAgB;QACrC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAyB,CAAC;YACvD,OAAO,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,WAAW;IACX,8EAA8E;IAE9E,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,GAAG,EAAiB,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,KAAa;QACtB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAe,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAAC,QAAgB,EAAE,KAAa;QAChD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAe,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qBAAqB,CAAC,SAAiB,EAAE,OAAe,EAAE,KAAa;QACrE,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAe,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,KAAoB,EAAE,SAAwB,EAAE,OAAsB,EAAE,KAAa;QAChG,8FAA8F;QAC9F,wEAAwE;QACxE,IAAI,SAAS,IAAI,IAAI,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,OAAO,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBACrC,OAAO,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,QAAQ,CAAC,EAAU;QACjB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAyB,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,WAAW;IACX,8EAA8E;IAE9E,YAAY,CAAC,KAAa,EAAE,MAAc;QACxC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAiB,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CAAC,KAAa,EAAE,KAAa;QACzC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,OAAO,GAAG,IAAI,KAAK,GAAG,CAAC;YAC7B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAiB,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,EAAU;QACnB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAA2B,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,QAAQ;IACR,8EAA8E;IAE9E,SAAS,CAAC,KAAa,EAAE,MAAc;QACrC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAc,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,KAAa,EAAE,MAAc;QAC/C,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAc,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,KAAa,EAAE,KAAa;QACtC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,OAAO,GAAG,IAAI,KAAK,GAAG,CAAC;YAC7B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAc,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAwB,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,QAAQ;IACR,8EAA8E;IAE9E,SAAS,CAAC,KAAa,EAAE,MAAc;QACrC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAc,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAwB,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAuB;IACtD,OAAO,IAAI,iBAAiB,CAAC,UAAU,CAAC,CAAC;AAC3C,CAAC"}

package/dist/graph/attachments.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+import type { GraphClient } from './client/index.js';
+/**
+ * Returns the download directory for attachments.
+ *
+ * Reads `MCP_OUTLOOK_DOWNLOAD_DIR` env var, falls back to `os.tmpdir()`.
+ * Creates a subdirectory `mcp-outlook-attachments` inside it.
+ */
+export declare function getDownloadDir(): string;
+/**
+ * Sanitizes a filename to prevent path traversal attacks.
+ *
+ * Strips directory separators (`/`, `\`), strips `..` segments,
+ * and trims whitespace. Falls back to `'attachment'` if result is empty.
+ */
+export declare function sanitizeFilename(name: string): string;
+/**
+ * Generates a unique file path in the given directory.
+ *
+ * Sanitizes the filename, then checks if it already exists.
+ * If it does, appends a numeric suffix (e.g., `file(1).txt`, `file(2).txt`).
+ */
+export declare function resolveFilePath(downloadDir: string, filename: string): string;
+/**
+ * Uploads a file as an attachment to a message.
+ *
+ * Routes based on file size:
+ * - <= 3MB: Inline base64 upload via `client.addAttachment`
+ * - > 3MB: Chunked upload session via `client.createUploadSession` + raw fetch
+ *
+ * @param client - The Graph API client
+ * @param messageId - The message to attach the file to
+ * @param filePath - Local path to the file to upload
+ * @param name - Optional display name (defaults to basename of filePath)
+ * @param contentType - Optional MIME type (defaults to 'application/octet-stream')
+ */
+export declare function uploadAttachment(client: GraphClient, messageId: string, filePath: string, name?: string, contentType?: string): Promise<void>;
+/**
+ * Uploads a file as an inline attachment (e.g. for cid: references in HTML body).
+ *
+ * Use this when the HTML body references the image via <img src="cid:contentId">.
+ * Keeps the body small by not embedding base64 in the MCP payload.
+ *
+ * Only supports files <= 3MB (same as regular inline upload).
+ *
+ * @param client - The Graph API client
+ * @param messageId - The message to attach the file to
+ * @param filePath - Local path to the image file
+ * @param contentId - Content-ID used in HTML (e.g. "logo" for cid:logo)
+ * @param contentType - Optional MIME type (defaults from file extension or image/png)
+ */
+export declare function uploadInlineAttachment(client: GraphClient, messageId: string, filePath: string, contentId: string, contentType?: string): Promise<void>;
+/**
+ * Downloads an attachment from a message and saves it to disk.
+ *
+ * Decodes `contentBytes` from base64 and writes the file to the download directory.
+ *
+ * @param client - The Graph API client
+ * @param messageId - The message containing the attachment
+ * @param attachmentId - The attachment to download
+ * @returns Metadata about the downloaded file including its local path
+ */
+export declare function downloadAttachment(client: GraphClient, messageId: string, attachmentId: string): Promise<{
+    filePath: string;
+    name: string;
+    size: number;
+    contentType: string;
+}>;
+//# sourceMappingURL=attachments.d.ts.map

package/dist/graph/attachments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.d.ts","sourceRoot":"","sources":["../../src/graph/attachments.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgBH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAQrD;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAKvC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAcrD;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAmB7E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAsDf;AAWD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAqBhF"}

package/dist/graph/attachments.js

@@ -0,0 +1,207 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * Attachment upload and download helpers for Microsoft Graph API.
+ *
+ * Handles:
+ * - File I/O for reading/writing attachments
+ * - Size-based routing (inline vs chunked upload)
+ * - Chunked upload sessions for large files (> 3MB)
+ * - Safe filename resolution with path traversal prevention
+ */
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+/** 3MB threshold for inline vs chunked upload. */
+const INLINE_MAX_BYTES = 3 * 1024 * 1024;
+/** Microsoft's recommended chunk size (~3.75MB). */
+const CHUNK_SIZE = 3932160;
+/**
+ * Returns the download directory for attachments.
+ *
+ * Reads `MCP_OUTLOOK_DOWNLOAD_DIR` env var, falls back to `os.tmpdir()`.
+ * Creates a subdirectory `mcp-outlook-attachments` inside it.
+ */
+export function getDownloadDir() {
+    const base = process.env['MCP_OUTLOOK_DOWNLOAD_DIR'] ?? os.tmpdir();
+    const dir = path.join(base, 'mcp-outlook-attachments');
+    fs.mkdirSync(dir, { recursive: true });
+    return dir;
+}
+/**
+ * Sanitizes a filename to prevent path traversal attacks.
+ *
+ * Strips directory separators (`/`, `\`), strips `..` segments,
+ * and trims whitespace. Falls back to `'attachment'` if result is empty.
+ */
+export function sanitizeFilename(name) {
+    // Strip .. segments
+    let sanitized = name.replace(/\.\./g, '');
+    // Take only the last component after any path separator
+    const forwardSlashIdx = sanitized.lastIndexOf('/');
+    if (forwardSlashIdx >= 0) {
+        sanitized = sanitized.substring(forwardSlashIdx + 1);
+    }
+    const backslashIdx = sanitized.lastIndexOf('\\');
+    if (backslashIdx >= 0) {
+        sanitized = sanitized.substring(backslashIdx + 1);
+    }
+    sanitized = sanitized.trim();
+    return sanitized.length > 0 ? sanitized : 'attachment';
+}
+/**
+ * Generates a unique file path in the given directory.
+ *
+ * Sanitizes the filename, then checks if it already exists.
+ * If it does, appends a numeric suffix (e.g., `file(1).txt`, `file(2).txt`).
+ */
+export function resolveFilePath(downloadDir, filename) {
+    const safeName = sanitizeFilename(filename);
+    let candidate = path.join(downloadDir, safeName);
+    if (!fs.existsSync(candidate)) {
+        return candidate;
+    }
+    const ext = path.extname(safeName);
+    const base = safeName.substring(0, safeName.length - ext.length);
+    let counter = 1;
+    for (;;) { // eslint-disable-line no-constant-condition
+        candidate = path.join(downloadDir, `${base}(${counter})${ext}`);
+        if (!fs.existsSync(candidate)) {
+            return candidate;
+        }
+        counter++;
+    }
+}
+/**
+ * Uploads a file as an attachment to a message.
+ *
+ * Routes based on file size:
+ * - <= 3MB: Inline base64 upload via `client.addAttachment`
+ * - > 3MB: Chunked upload session via `client.createUploadSession` + raw fetch
+ *
+ * @param client - The Graph API client
+ * @param messageId - The message to attach the file to
+ * @param filePath - Local path to the file to upload
+ * @param name - Optional display name (defaults to basename of filePath)
+ * @param contentType - Optional MIME type (defaults to 'application/octet-stream')
+ */
+export async function uploadAttachment(client, messageId, filePath, name, contentType) {
+    const fileName = name ?? path.basename(filePath);
+    const mimeType = contentType ?? 'application/octet-stream';
+    const stat = fs.statSync(filePath);
+    const fileSize = stat.size;
+    if (fileSize <= INLINE_MAX_BYTES) {
+        // Inline upload: read file, base64 encode, POST as attachment
+        const fileContent = fs.readFileSync(filePath);
+        const base64 = fileContent.toString('base64');
+        await client.addAttachment(messageId, {
+            '@odata.type': '#microsoft.graph.fileAttachment',
+            name: fileName,
+            contentBytes: base64,
+            contentType: mimeType,
+        });
+    }
+    else {
+        // Chunked upload session for large files
+        const session = await client.createUploadSession(messageId, {
+            AttachmentItem: {
+                attachmentType: 'file',
+                name: fileName,
+                size: fileSize,
+            },
+        });
+        const uploadUrl = session.uploadUrl;
+        const fileContent = fs.readFileSync(filePath);
+        let offset = 0;
+        while (offset < fileSize) {
+            const end = Math.min(offset + CHUNK_SIZE, fileSize);
+            const chunk = fileContent.subarray(offset, end);
+            const contentRange = `bytes ${offset}-${end - 1}/${fileSize}`;
+            const response = await fetch(uploadUrl, {
+                method: 'PUT',
+                headers: {
+                    'Content-Range': contentRange,
+                    'Content-Length': String(chunk.length),
+                },
+                body: chunk,
+            });
+            if (!response.ok) {
+                throw new Error(`Upload chunk failed: ${response.status} ${response.statusText}`);
+            }
+            offset = end;
+        }
+    }
+}
+/** MIME type by extension for inline images. */
+const IMAGE_EXT_TO_MIME = {
+    '.png': 'image/png',
+    '.jpg': 'image/jpeg',
+    '.jpeg': 'image/jpeg',
+    '.gif': 'image/gif',
+    '.webp': 'image/webp',
+};
+/**
+ * Uploads a file as an inline attachment (e.g. for cid: references in HTML body).
+ *
+ * Use this when the HTML body references the image via <img src="cid:contentId">.
+ * Keeps the body small by not embedding base64 in the MCP payload.
+ *
+ * Only supports files <= 3MB (same as regular inline upload).
+ *
+ * @param client - The Graph API client
+ * @param messageId - The message to attach the file to
+ * @param filePath - Local path to the image file
+ * @param contentId - Content-ID used in HTML (e.g. "logo" for cid:logo)
+ * @param contentType - Optional MIME type (defaults from file extension or image/png)
+ */
+export async function uploadInlineAttachment(client, messageId, filePath, contentId, contentType) {
+    const fileName = path.basename(filePath);
+    const ext = path.extname(filePath).toLowerCase();
+    const mimeType = contentType ?? IMAGE_EXT_TO_MIME[ext] ?? 'image/png';
+    const stat = fs.statSync(filePath);
+    const fileSize = stat.size;
+    if (fileSize > INLINE_MAX_BYTES) {
+        throw new Error(`Inline image too large (${fileSize} bytes). Max ${INLINE_MAX_BYTES} bytes. Use a smaller image or attach as regular attachment.`);
+    }
+    const fileContent = fs.readFileSync(filePath);
+    const base64 = fileContent.toString('base64');
+    await client.addAttachment(messageId, {
+        '@odata.type': '#microsoft.graph.fileAttachment',
+        name: fileName,
+        contentBytes: base64,
+        contentType: mimeType,
+        isInline: true,
+        contentId,
+    });
+}
+/**
+ * Downloads an attachment from a message and saves it to disk.
+ *
+ * Decodes `contentBytes` from base64 and writes the file to the download directory.
+ *
+ * @param client - The Graph API client
+ * @param messageId - The message containing the attachment
+ * @param attachmentId - The attachment to download
+ * @returns Metadata about the downloaded file including its local path
+ */
+export async function downloadAttachment(client, messageId, attachmentId) {
+    const attachment = await client.getAttachment(messageId, attachmentId);
+    const rawName = attachment.name ?? '';
+    const safeName = sanitizeFilename(rawName);
+    const size = attachment.size ?? 0;
+    const attachmentContentType = attachment.contentType ?? 'application/octet-stream';
+    const downloadDir = getDownloadDir();
+    const filePath = resolveFilePath(downloadDir, safeName);
+    const contentBytes = attachment.contentBytes ?? '';
+    const buffer = Buffer.from(contentBytes, 'base64');
+    fs.writeFileSync(filePath, buffer);
+    return {
+        filePath,
+        name: safeName,
+        size,
+        contentType: attachmentContentType,
+    };
+}
+//# sourceMappingURL=attachments.js.map

package/dist/graph/attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../../src/graph/attachments.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAI7B,kDAAkD;AAClD,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzC,oDAAoD;AACpD,MAAM,UAAU,GAAG,OAAO,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;IACpE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;IACvD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,oBAAoB;IACpB,IAAI,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1C,wDAAwD;IACxD,MAAM,eAAe,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,eAAe,IAAI,CAAC,EAAE,CAAC;QACzB,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,YAAY,GAAG,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QACtB,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,QAAgB;IACnE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAEjD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IAEjE,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,SAAS,CAAC,CAAC,4CAA4C;QACrD,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAmB,EACnB,SAAiB,EACjB,QAAgB,EAChB,IAAa,EACb,WAAoB;IAEpB,MAAM,QAAQ,GAAG,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,WAAW,IAAI,0BAA0B,CAAC;IAC3D,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;IAE3B,IAAI,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACjC,8DAA8D;QAC9D,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE9C,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE;YACpC,aAAa,EAAE,iCAAiC;YAChD,IAAI,EAAE,QAAQ;YACd,YAAY,EAAE,MAAM;YACpB,WAAW,EAAE,QAAQ;SACtB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,yCAAyC;QACzC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE;YAC1D,cAAc,EAAE;gBACd,cAAc,EAAE,MAAM;gBACtB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,QAAQ;aACf;SACF,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAE9C,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,QAAQ,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,UAAU,EAAE,QAAQ,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAChD,MAAM,YAAY,GAAG,SAAS,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC;YAE9D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;gBACtC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,eAAe,EAAE,YAAY;oBAC7B,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;iBACvC;gBACD,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,CAAC;QACf,CAAC;IACH,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,MAAM,iBAAiB,GAA2B;IAChD,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;CACtB,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAmB,EACnB,SAAiB,EACjB,QAAgB,EAChB,SAAiB,EACjB,WAAoB;IAEpB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,WAAW,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC;IACtE,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;IAE3B,IAAI,QAAQ,GAAG,gBAAgB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,2BAA2B,QAAQ,gBAAgB,gBAAgB,8DAA8D,CAClI,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE9C,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE;QACpC,aAAa,EAAE,iCAAiC;QAChD,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,QAAQ;QACrB,QAAQ,EAAE,IAAI;QACd,SAAS;KACV,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAmB,EACnB,SAAiB,EACjB,YAAoB;IAEpB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAEvE,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC;IAClC,MAAM,qBAAqB,GAAG,UAAU,CAAC,WAAW,IAAI,0BAA0B,CAAC;IAEnF,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAExD,MAAM,YAAY,GAAI,UAAwC,CAAC,YAAY,IAAI,EAAE,CAAC;IAClF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACnD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEnC,OAAO;QACL,QAAQ;QACR,IAAI,EAAE,QAAQ;QACd,IAAI;QACJ,WAAW,EAAE,qBAAqB;KACnC,CAAC;AACJ,CAAC"}

package/dist/graph/auth/config.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * Microsoft Graph API scopes required for Outlook access.
+ *
+ * Includes read/write permissions for mail and calendars to support
+ * future implementation of email sending and event management features.
+ */
+export declare const GRAPH_SCOPES: readonly ["Mail.ReadWrite", "Calendars.ReadWrite", "Contacts.ReadWrite", "Tasks.ReadWrite", "User.Read", "offline_access", "ChannelMessage.Read.All", "ChannelMessage.Send", "Channel.ReadBasic.All", "Team.ReadBasic.All", "Chat.ReadWrite", "ChatMessage.Send", "People.Read", "User.ReadBasic.All", "Presence.Read.All", "Group.Read.All"];
+/**
+ * Microsoft Graph API configuration.
+ */
+export interface GraphAuthConfig {
+    /** Azure AD application (client) ID */
+    readonly clientId: string;
+    /** Azure AD tenant ID (default: 'common' for multi-tenant) */
+    readonly tenantId: string;
+    /** OAuth2 scopes to request */
+    readonly scopes: readonly string[];
+}
+/**
+ * Loads the Graph API configuration.
+ *
+ * Uses embedded defaults but allows override via environment variables
+ * for users who want to use their own Azure AD app registration.
+ */
+export declare function loadGraphConfig(): GraphAuthConfig;
+/**
+ * Gets the Azure AD authority URL for the configured tenant.
+ */
+export declare function getAuthorityUrl(config: GraphAuthConfig): string;
+//# sourceMappingURL=config.d.ts.map

package/dist/graph/auth/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/graph/auth/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAuBH;;;;;GAKG;AACH,eAAO,MAAM,YAAY,+UAqBf,CAAC;AAEX;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,uCAAuC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+BAA+B;IAC/B,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,eAAe,CAiBjD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAE/D"}

package/dist/graph/auth/config.js

@@ -0,0 +1,78 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * Microsoft Graph API configuration.
+ *
+ * Contains Azure AD app registration settings for the device code flow.
+ * The client ID is embedded in the package - users don't need to configure anything.
+ */
+/**
+ * Default client ID for the Outlook MCP Server Azure AD app.
+ *
+ * This is a public client application registered in Azure AD by JBC Tech Solutions.
+ * Multi-tenant configuration supports both personal and work/school Microsoft accounts.
+ *
+ * Users can override this with their own app registration by setting:
+ * - OUTLOOK_MCP_CLIENT_ID environment variable
+ * - OUTLOOK_MCP_TENANT_ID environment variable (default: 'common')
+ *
+ * For setup instructions: https://github.com/jbctechsolutions/mcp-office365#custom-azure-ad-setup
+ */
+const DEFAULT_CLIENT_ID = '681fbb29-5afa-47b1-9c16-0cd2be01754d';
+/**
+ * Microsoft Graph API scopes required for Outlook access.
+ *
+ * Includes read/write permissions for mail and calendars to support
+ * future implementation of email sending and event management features.
+ */
+export const GRAPH_SCOPES = [
+    // Outlook
+    'Mail.ReadWrite',
+    'Calendars.ReadWrite',
+    'Contacts.ReadWrite',
+    'Tasks.ReadWrite',
+    'User.Read',
+    'offline_access',
+    // Teams
+    'ChannelMessage.Read.All',
+    'ChannelMessage.Send',
+    'Channel.ReadBasic.All',
+    'Team.ReadBasic.All',
+    'Chat.ReadWrite',
+    'ChatMessage.Send',
+    // People & Presence
+    'People.Read',
+    'User.ReadBasic.All',
+    'Presence.Read.All',
+    // Planner
+    'Group.Read.All',
+];
+/**
+ * Loads the Graph API configuration.
+ *
+ * Uses embedded defaults but allows override via environment variables
+ * for users who want to use their own Azure AD app registration.
+ */
+export function loadGraphConfig() {
+    const clientId = process.env['OUTLOOK_MCP_CLIENT_ID'] ?? DEFAULT_CLIENT_ID;
+    const tenantId = process.env['OUTLOOK_MCP_TENANT_ID'] ?? 'common';
+    if (clientId === 'YOUR_AZURE_APP_CLIENT_ID') {
+        throw new Error('Azure AD app not configured. Either:\n' +
+            '1. Set OUTLOOK_MCP_CLIENT_ID environment variable, or\n' +
+            '2. The package maintainer needs to embed the client ID in config.ts');
+    }
+    return {
+        clientId,
+        tenantId,
+        scopes: [...GRAPH_SCOPES],
+    };
+}
+/**
+ * Gets the Azure AD authority URL for the configured tenant.
+ */
+export function getAuthorityUrl(config) {
+    return `https://login.microsoftonline.com/${config.tenantId}`;
+}
+//# sourceMappingURL=config.js.map

package/dist/graph/auth/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/graph/auth/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;GAKG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,iBAAiB,GAAG,sCAAsC,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,UAAU;IACV,gBAAgB;IAChB,qBAAqB;IACrB,oBAAoB;IACpB,iBAAiB;IACjB,WAAW;IACX,gBAAgB;IAChB,QAAQ;IACR,yBAAyB;IACzB,qBAAqB;IACrB,uBAAuB;IACvB,oBAAoB;IACpB,gBAAgB;IAChB,kBAAkB;IAClB,oBAAoB;IACpB,aAAa;IACb,oBAAoB;IACpB,mBAAmB;IACnB,UAAU;IACV,gBAAgB;CACR,CAAC;AAcX;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,iBAAiB,CAAC;IAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,QAAQ,CAAC;IAElE,IAAI,QAAQ,KAAK,0BAA0B,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,wCAAwC;YACtC,yDAAyD;YACzD,qEAAqE,CACxE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ;QACR,QAAQ;QACR,MAAM,EAAE,CAAC,GAAG,YAAY,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAAuB;IACrD,OAAO,qCAAqC,MAAM,CAAC,QAAQ,EAAE,CAAC;AAChE,CAAC"}