@jbctechsolutions/mcp-office365 2.5.1

package/dist/graph/auth/device-code-flow.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * Microsoft Authentication Library (MSAL) device code flow implementation.
+ *
+ * Uses the device code flow for authentication, which is ideal for CLI tools:
+ * 1. User is shown a code and URL
+ * 2. User visits URL in browser and enters code
+ * 3. User authenticates with Microsoft
+ * 4. Application receives tokens
+ */
+import { type AuthenticationResult, type AccountInfo } from '@azure/msal-node';
+/**
+ * Callback type for device code messages.
+ */
+export type DeviceCodeCallback = (userCode: string, verificationUri: string, message: string) => void;
+/**
+ * Acquires a token using the device code flow.
+ *
+ * This will prompt the user to authenticate if needed.
+ */
+export declare function acquireTokenInteractive(deviceCodeCallback?: DeviceCodeCallback): Promise<AuthenticationResult>;
+/**
+ * Acquires a token silently using cached credentials.
+ *
+ * Returns null if no cached token is available or if refresh fails.
+ */
+export declare function acquireTokenSilent(): Promise<AuthenticationResult | null>;
+/**
+ * Gets an access token, prompting for login if needed.
+ *
+ * This is the main entry point for getting a token:
+ * 1. First tries to get a cached/refreshed token silently
+ * 2. If that fails, prompts for device code authentication
+ */
+export declare function getAccessToken(deviceCodeCallback?: DeviceCodeCallback): Promise<string>;
+/**
+ * Checks if the user is authenticated (has cached tokens).
+ */
+export declare function isAuthenticated(): Promise<boolean>;
+/**
+ * Gets the currently authenticated account info.
+ */
+export declare function getAccount(): Promise<AccountInfo | null>;
+/**
+ * Signs out by clearing the token cache.
+ */
+export declare function signOut(): Promise<void>;
+/**
+ * Resets the MSAL instance (mainly for testing).
+ */
+export declare function resetMsalInstance(): void;
+//# sourceMappingURL=device-code-flow.d.ts.map

package/dist/graph/auth/device-code-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-code-flow.d.ts","sourceRoot":"","sources":["../../../src/graph/auth/device-code-flow.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;GAQG;AAEH,OAAO,EAEL,KAAK,oBAAoB,EAEzB,KAAK,WAAW,EACjB,MAAM,kBAAkB,CAAC;AA8C1B;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAiBtG;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,kBAAkB,GAAE,kBAA8C,GACjE,OAAO,CAAC,oBAAoB,CAAC,CAgB/B;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAsB/E;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,kBAAkB,GAAE,kBAA8C,GACjE,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAYxD;AAED;;GAEG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAS9D;AAED;;GAEG;AACH,wBAAsB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAW7C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAGxC"}

package/dist/graph/auth/device-code-flow.js

@@ -0,0 +1,180 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * Microsoft Authentication Library (MSAL) device code flow implementation.
+ *
+ * Uses the device code flow for authentication, which is ideal for CLI tools:
+ * 1. User is shown a code and URL
+ * 2. User visits URL in browser and enters code
+ * 3. User authenticates with Microsoft
+ * 4. Application receives tokens
+ */
+import { PublicClientApplication, } from '@azure/msal-node';
+import { loadGraphConfig, getAuthorityUrl } from './config.js';
+import { createTokenCachePlugin, hasTokenCache } from './token-cache.js';
+/**
+ * Singleton MSAL application instance.
+ */
+let msalInstance = null;
+/**
+ * Cached configuration.
+ */
+let cachedConfig = null;
+/**
+ * Gets or creates the MSAL PublicClientApplication instance.
+ */
+function getMsalInstance() {
+    if (msalInstance == null) {
+        cachedConfig = loadGraphConfig();
+        msalInstance = new PublicClientApplication({
+            auth: {
+                clientId: cachedConfig.clientId,
+                authority: getAuthorityUrl(cachedConfig),
+            },
+            cache: {
+                cachePlugin: createTokenCachePlugin(),
+            },
+        });
+    }
+    return msalInstance;
+}
+/**
+ * Gets the cached configuration.
+ */
+function getConfig() {
+    if (cachedConfig == null) {
+        getMsalInstance(); // This will initialize cachedConfig
+    }
+    return cachedConfig;
+}
+/**
+ * Default callback that outputs to stderr.
+ * stderr is used because stdout is reserved for MCP JSON-RPC communication.
+ */
+const defaultDeviceCodeCallback = (userCode, verificationUri, _message) => {
+    console.error('\n' + '='.repeat(60));
+    console.error('Microsoft Graph API Authentication Required');
+    console.error('='.repeat(60));
+    console.error(`\nTo sign in, use a web browser to open the page:`);
+    console.error(`  ${verificationUri}`);
+    console.error(`\nAnd enter the code:`);
+    console.error(`  ${userCode}`);
+    console.error('\n' + '='.repeat(60) + '\n');
+};
+/**
+ * Acquires a token using the device code flow.
+ *
+ * This will prompt the user to authenticate if needed.
+ */
+export async function acquireTokenInteractive(deviceCodeCallback = defaultDeviceCodeCallback) {
+    const msal = getMsalInstance();
+    const config = getConfig();
+    const request = {
+        scopes: [...config.scopes],
+        deviceCodeCallback: (response) => {
+            deviceCodeCallback(response.userCode, response.verificationUri, response.message);
+        },
+    };
+    const result = await msal.acquireTokenByDeviceCode(request);
+    if (result == null) {
+        throw new Error('Device code authentication failed');
+    }
+    return result;
+}
+/**
+ * Acquires a token silently using cached credentials.
+ *
+ * Returns null if no cached token is available or if refresh fails.
+ */
+export async function acquireTokenSilent() {
+    const msal = getMsalInstance();
+    const config = getConfig();
+    // Get accounts from cache
+    const accounts = await msal.getTokenCache().getAllAccounts();
+    // Use the first account (most common case)
+    const account = accounts[0];
+    if (account == null) {
+        return null;
+    }
+    try {
+        return await msal.acquireTokenSilent({
+            account,
+            scopes: [...config.scopes],
+        });
+    }
+    catch {
+        // Token refresh failed, will need interactive auth
+        return null;
+    }
+}
+/**
+ * Gets an access token, prompting for login if needed.
+ *
+ * This is the main entry point for getting a token:
+ * 1. First tries to get a cached/refreshed token silently
+ * 2. If that fails, prompts for device code authentication
+ */
+export async function getAccessToken(deviceCodeCallback = defaultDeviceCodeCallback) {
+    // Try silent first
+    let result = await acquireTokenSilent();
+    // If silent fails, do interactive
+    if (result == null) {
+        result = await acquireTokenInteractive(deviceCodeCallback);
+    }
+    return result.accessToken;
+}
+/**
+ * Checks if the user is authenticated (has cached tokens).
+ */
+export async function isAuthenticated() {
+    if (!hasTokenCache()) {
+        return false;
+    }
+    try {
+        const msal = getMsalInstance();
+        const accounts = await msal.getTokenCache().getAllAccounts();
+        return accounts.length > 0;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Gets the currently authenticated account info.
+ */
+export async function getAccount() {
+    try {
+        const msal = getMsalInstance();
+        const accounts = await msal.getTokenCache().getAllAccounts();
+        const account = accounts[0];
+        return account != null ? account : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Signs out by clearing the token cache.
+ */
+export async function signOut() {
+    try {
+        const msal = getMsalInstance();
+        const accounts = await msal.getTokenCache().getAllAccounts();
+        for (const account of accounts) {
+            await msal.getTokenCache().removeAccount(account);
+        }
+    }
+    catch {
+        // Ignore errors during sign out
+    }
+}
+/**
+ * Resets the MSAL instance (mainly for testing).
+ */
+export function resetMsalInstance() {
+    msalInstance = null;
+    cachedConfig = null;
+}
+//# sourceMappingURL=device-code-flow.js.map

package/dist/graph/auth/device-code-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-code-flow.js","sourceRoot":"","sources":["../../../src/graph/auth/device-code-flow.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;GAQG;AAEH,OAAO,EACL,uBAAuB,GAIxB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,eAAe,EAAE,eAAe,EAAwB,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEzE;;GAEG;AACH,IAAI,YAAY,GAAmC,IAAI,CAAC;AAExD;;GAEG;AACH,IAAI,YAAY,GAA2B,IAAI,CAAC;AAEhD;;GAEG;AACH,SAAS,eAAe;IACtB,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;QACzB,YAAY,GAAG,eAAe,EAAE,CAAC;QAEjC,YAAY,GAAG,IAAI,uBAAuB,CAAC;YACzC,IAAI,EAAE;gBACJ,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,SAAS,EAAE,eAAe,CAAC,YAAY,CAAC;aACzC;YACD,KAAK,EAAE;gBACL,WAAW,EAAE,sBAAsB,EAAE;aACtC;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAS,SAAS;IAChB,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;QACzB,eAAe,EAAE,CAAC,CAAC,oCAAoC;IACzD,CAAC;IACD,OAAO,YAAa,CAAC;AACvB,CAAC;AAOD;;;GAGG;AACH,MAAM,yBAAyB,GAAuB,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,EAAE;IAC5F,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACrC,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC7D,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACnE,OAAO,CAAC,KAAK,CAAC,KAAK,eAAe,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACvC,OAAO,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC/B,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9C,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,qBAAyC,yBAAyB;IAElE,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,MAAM,OAAO,GAAsB;QACjC,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QAC1B,kBAAkB,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC/B,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpF,CAAC;KACF,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAE3B,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,cAAc,EAAE,CAAC;IAE7D,2CAA2C;IAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC;YACnC,OAAO;YACP,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;SAC3B,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,qBAAyC,yBAAyB;IAElE,mBAAmB;IACnB,IAAI,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAExC,kCAAkC;IAClC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,MAAM,GAAG,MAAM,uBAAuB,CAAC,kBAAkB,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,cAAc,EAAE,CAAC;QAC7D,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,cAAc,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5B,OAAO,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO;IAC3B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,cAAc,EAAE,CAAC;QAE7D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,YAAY,GAAG,IAAI,CAAC;IACpB,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC"}

package/dist/graph/auth/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * Microsoft Graph authentication module.
+ *
+ * Exports authentication utilities for the device code flow.
+ */
+export { loadGraphConfig, getAuthorityUrl, GRAPH_SCOPES, type GraphAuthConfig } from './config.js';
+export { createTokenCachePlugin, hasTokenCache, clearTokenCache, getTokenCacheDir, getTokenCacheFile, } from './token-cache.js';
+export { acquireTokenInteractive, acquireTokenSilent, getAccessToken, isAuthenticated, getAccount, signOut, resetMsalInstance, type DeviceCodeCallback, } from './device-code-flow.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/graph/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/graph/auth/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnG,OAAO,EACL,sBAAsB,EACtB,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,UAAU,EACV,OAAO,EACP,iBAAiB,EACjB,KAAK,kBAAkB,GACxB,MAAM,uBAAuB,CAAC"}

package/dist/graph/auth/index.js

@@ -0,0 +1,13 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * Microsoft Graph authentication module.
+ *
+ * Exports authentication utilities for the device code flow.
+ */
+export { loadGraphConfig, getAuthorityUrl, GRAPH_SCOPES } from './config.js';
+export { createTokenCachePlugin, hasTokenCache, clearTokenCache, getTokenCacheDir, getTokenCacheFile, } from './token-cache.js';
+export { acquireTokenInteractive, acquireTokenSilent, getAccessToken, isAuthenticated, getAccount, signOut, resetMsalInstance, } from './device-code-flow.js';
+//# sourceMappingURL=index.js.map

package/dist/graph/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/graph/auth/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,EAAwB,MAAM,aAAa,CAAC;AAEnG,OAAO,EACL,sBAAsB,EACtB,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,UAAU,EACV,OAAO,EACP,iBAAiB,GAElB,MAAM,uBAAuB,CAAC"}

package/dist/graph/auth/token-cache.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+import type { ICachePlugin, TokenCacheContext } from '@azure/msal-node';
+/**
+ * MSAL cache plugin implementation that persists tokens to disk.
+ */
+export declare class FileTokenCachePlugin implements ICachePlugin {
+    /**
+     * Called by MSAL before accessing the cache.
+     * Loads the cache from disk into MSAL's in-memory cache.
+     */
+    beforeCacheAccess(context: TokenCacheContext): Promise<void>;
+    /**
+     * Called by MSAL after modifying the cache.
+     * Persists the cache to disk.
+     */
+    afterCacheAccess(context: TokenCacheContext): Promise<void>;
+}
+/**
+ * Creates a new file-based token cache plugin.
+ */
+export declare function createTokenCachePlugin(): ICachePlugin;
+/**
+ * Checks if a token cache file exists.
+ */
+export declare function hasTokenCache(): boolean;
+/**
+ * Clears the token cache file.
+ */
+export declare function clearTokenCache(): void;
+/**
+ * Gets the token cache directory path.
+ */
+export declare function getTokenCacheDir(): string;
+/**
+ * Gets the token cache file path.
+ */
+export declare function getTokenCacheFile(): string;
+//# sourceMappingURL=token-cache.d.ts.map

package/dist/graph/auth/token-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-cache.d.ts","sourceRoot":"","sources":["../../../src/graph/auth/token-cache.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAYH,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAqBxE;;GAEG;AACH,qBAAa,oBAAqB,YAAW,YAAY;IACvD;;;OAGG;IAEG,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAWlE;;;OAGG;IAEG,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;CAWlE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,YAAY,CAErD;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAQtC;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}

package/dist/graph/auth/token-cache.js

@@ -0,0 +1,105 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * MSAL token cache plugin for persistent token storage.
+ *
+ * Stores tokens in ~/.outlook-mcp/tokens.json for persistence
+ * across application restarts.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+/**
+ * Directory where tokens are stored.
+ */
+const TOKEN_CACHE_DIR = join(homedir(), '.outlook-mcp');
+/**
+ * Path to the token cache file.
+ */
+const TOKEN_CACHE_FILE = join(TOKEN_CACHE_DIR, 'tokens.json');
+/**
+ * Ensures the token cache directory exists.
+ */
+function ensureCacheDir() {
+    if (!existsSync(TOKEN_CACHE_DIR)) {
+        mkdirSync(TOKEN_CACHE_DIR, { recursive: true, mode: 0o700 });
+    }
+}
+/**
+ * MSAL cache plugin implementation that persists tokens to disk.
+ */
+export class FileTokenCachePlugin {
+    /**
+     * Called by MSAL before accessing the cache.
+     * Loads the cache from disk into MSAL's in-memory cache.
+     */
+    // eslint-disable-next-line @typescript-eslint/require-await
+    async beforeCacheAccess(context) {
+        try {
+            if (existsSync(TOKEN_CACHE_FILE)) {
+                const data = readFileSync(TOKEN_CACHE_FILE, 'utf-8');
+                context.tokenCache.deserialize(data);
+            }
+        }
+        catch {
+            // If we can't read the cache, start fresh
+        }
+    }
+    /**
+     * Called by MSAL after modifying the cache.
+     * Persists the cache to disk.
+     */
+    // eslint-disable-next-line @typescript-eslint/require-await
+    async afterCacheAccess(context) {
+        if (context.cacheHasChanged) {
+            try {
+                ensureCacheDir();
+                const data = context.tokenCache.serialize();
+                writeFileSync(TOKEN_CACHE_FILE, data, { mode: 0o600 });
+            }
+            catch {
+                // If we can't write, tokens won't persist (user will need to re-auth)
+            }
+        }
+    }
+}
+/**
+ * Creates a new file-based token cache plugin.
+ */
+export function createTokenCachePlugin() {
+    return new FileTokenCachePlugin();
+}
+/**
+ * Checks if a token cache file exists.
+ */
+export function hasTokenCache() {
+    return existsSync(TOKEN_CACHE_FILE);
+}
+/**
+ * Clears the token cache file.
+ */
+export function clearTokenCache() {
+    try {
+        if (existsSync(TOKEN_CACHE_FILE)) {
+            writeFileSync(TOKEN_CACHE_FILE, '{}', { mode: 0o600 });
+        }
+    }
+    catch {
+        // Ignore errors
+    }
+}
+/**
+ * Gets the token cache directory path.
+ */
+export function getTokenCacheDir() {
+    return TOKEN_CACHE_DIR;
+}
+/**
+ * Gets the token cache file path.
+ */
+export function getTokenCacheFile() {
+    return TOKEN_CACHE_FILE;
+}
+//# sourceMappingURL=token-cache.js.map

package/dist/graph/auth/token-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-cache.js","sourceRoot":"","sources":["../../../src/graph/auth/token-cache.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC;;GAEG;AACH,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AAExD;;GAEG;AACH,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;AAE9D;;GAEG;AACH,SAAS,cAAc;IACrB,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACjC,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,oBAAoB;IAC/B;;;OAGG;IACH,4DAA4D;IAC5D,KAAK,CAAC,iBAAiB,CAAC,OAA0B;QAChD,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;gBACrD,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,4DAA4D;IAC5D,KAAK,CAAC,gBAAgB,CAAC,OAA0B;QAC/C,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,cAAc,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;gBAC5C,aAAa,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,sEAAsE;YACxE,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO,IAAI,oBAAoB,EAAE,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACjC,aAAa,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,gBAAgB,CAAC;AAC1B,CAAC"}

package/dist/graph/client/batch.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * Microsoft Graph $batch request utilities.
+ * Supports batching up to 20 requests per batch (Graph API limit).
+ */
+export interface BatchRequest {
+    id: string;
+    method: string;
+    url: string;
+    headers?: Record<string, string>;
+    body?: unknown;
+}
+export interface BatchResponseItem {
+    id: string;
+    status: number;
+    headers?: Record<string, string>;
+    body: unknown;
+}
+/**
+ * Builds a $batch request payload from an array of individual requests.
+ */
+export declare function buildBatchPayload(requests: BatchRequest[]): {
+    requests: BatchRequest[];
+};
+/**
+ * Splits requests into batches of the given size (default 20, the Graph API limit).
+ */
+export declare function splitIntoBatches(requests: BatchRequest[], maxPerBatch?: number): BatchRequest[][];
+/**
+ * Parses a $batch response into a Map keyed by request ID.
+ */
+export declare function parseBatchResponse(response: {
+    responses: BatchResponseItem[];
+}): Map<string, BatchResponseItem>;
+//# sourceMappingURL=batch.d.ts.map

package/dist/graph/client/batch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch.d.ts","sourceRoot":"","sources":["../../../src/graph/client/batch.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AAEH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG;IAAE,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,CAExF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,WAAW,GAAE,MAAW,GAAG,YAAY,EAAE,EAAE,CAOrG;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE;IAAE,SAAS,EAAE,iBAAiB,EAAE,CAAA;CAAE,GAAG,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAM/G"}

package/dist/graph/client/batch.js

@@ -0,0 +1,33 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * Builds a $batch request payload from an array of individual requests.
+ */
+export function buildBatchPayload(requests) {
+    return { requests };
+}
+/**
+ * Splits requests into batches of the given size (default 20, the Graph API limit).
+ */
+export function splitIntoBatches(requests, maxPerBatch = 20) {
+    if (requests.length === 0)
+        return [];
+    const batches = [];
+    for (let i = 0; i < requests.length; i += maxPerBatch) {
+        batches.push(requests.slice(i, i + maxPerBatch));
+    }
+    return batches;
+}
+/**
+ * Parses a $batch response into a Map keyed by request ID.
+ */
+export function parseBatchResponse(response) {
+    const map = new Map();
+    for (const item of response.responses) {
+        map.set(item.id, item);
+    }
+    return map;
+}
+//# sourceMappingURL=batch.js.map

package/dist/graph/client/batch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch.js","sourceRoot":"","sources":["../../../src/graph/client/batch.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAsBH;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAwB;IACxD,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAwB,EAAE,cAAsB,EAAE;IACjF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAA4C;IAC7E,MAAM,GAAG,GAAG,IAAI,GAAG,EAA6B,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/graph/client/cache.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * Default TTL values in milliseconds.
+ */
+export declare const CacheTTL: {
+    /** Folders are relatively static */
+    readonly FOLDERS: 60000;
+    /** Emails change more frequently */
+    readonly EMAILS: 30000;
+    /** Events are fairly static */
+    readonly EVENTS: 30000;
+    /** Contacts rarely change */
+    readonly CONTACTS: 120000;
+    /** Tasks change frequently */
+    readonly TASKS: 30000;
+};
+/**
+ * Simple in-memory cache with TTL support.
+ */
+export declare class ResponseCache {
+    private readonly cache;
+    private readonly defaultTtl;
+    constructor(defaultTtl?: number);
+    /**
+     * Gets a cached value if it exists and hasn't expired.
+     */
+    get<T>(key: string): T | undefined;
+    /**
+     * Sets a cached value with optional TTL.
+     */
+    set<T>(key: string, value: T, ttl?: number): void;
+    /**
+     * Checks if a key exists and hasn't expired.
+     */
+    has(key: string): boolean;
+    /**
+     * Removes a specific key from the cache.
+     */
+    delete(key: string): boolean;
+    /**
+     * Clears all entries from the cache.
+     */
+    clear(): void;
+    /**
+     * Removes all expired entries from the cache.
+     */
+    prune(): number;
+    /**
+     * Gets the current number of entries in the cache.
+     */
+    get size(): number;
+}
+/**
+ * Creates a cache key from a method and parameters.
+ */
+export declare function createCacheKey(method: string, ...params: unknown[]): string;
+/**
+ * Invalidates cache entries matching a prefix.
+ */
+export declare function invalidateByPrefix(cache: ResponseCache, _prefix: string): void;
+//# sourceMappingURL=cache.d.ts.map

package/dist/graph/client/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/graph/client/cache.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgBH;;GAEG;AACH,eAAO,MAAM,QAAQ;IACnB,oCAAoC;;IAEpC,oCAAoC;;IAEpC,+BAA+B;;IAE/B,6BAA6B;;IAE7B,8BAA8B;;CAEtB,CAAC;AAEX;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0C;IAChE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,UAAU,GAAE,MAAwB;IAIhD;;OAEG;IACH,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS;IAelC;;OAEG;IACH,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,GAAE,MAAwB,GAAG,IAAI;IAOlE;;OAEG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIzB;;OAEG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAI5B;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,KAAK,IAAI,MAAM;IAcf;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAK3E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAI9E"}