@jbctechsolutions/mcp-office365 3.0.0 → 4.0.1

package/dist/ids/resolver.js

@@ -2,14 +2,18 @@
  * Copyright (c) 2026 JBC Tech Solutions, LLC
  * Licensed under the MIT License. See LICENSE file in the project root.
  */
-import { IdForeignAccountError, IdUnknownError, NumericIdUnsupportedError, } from '../utils/errors.js';
+import { IdForeignAccountError, IdUnknownError, IdEntityMismatchError, NumericIdUnsupportedError, } from '../utils/errors.js';
 import { parseToken } from './token.js';
 /**
  * Resolves an ID parameter to a Graph ID for the given signed-in account.
  * Throws a typed {@link import('../utils/errors.js').OutlookMcpError} on failure.
  */
-export function resolveId(id, accountId, store) {
-    if (typeof id === 'number') {
+export function resolveId(id, accountId, store, expectedEntityType) {
+    // A bare all-digits string is a legacy v2 hash id (Graph ids and durable
+    // tokens are never purely numeric), so surface the same actionable
+    // NUMERIC_ID_UNSUPPORTED rather than passing it through to Graph as an opaque
+    // id that only 404s. Covers callers whose schema is string-only (U6).
+    if (/^\d+$/.test(id)) {
         throw new NumericIdUnsupportedError(id);
     }
     const parsed = parseToken(id);
@@ -17,10 +21,21 @@ export function resolveId(id, accountId, store) {
         // Not a known token — treat as an opaque Graph ID the caller supplied.
         return { graphId: id, mutable: false };
     }
+    // A durable token for the wrong entity kind (e.g. a folder token passed as a
+    // contact id) must not resolve — otherwise it decodes to a foreign Graph id
+    // and the safety rests only on Graph 404-ing the mismatched collection.
+    if (expectedEntityType != null && parsed.entityType !== expectedEntityType) {
+        throw new IdEntityMismatchError(id, expectedEntityType, parsed.entityType);
+    }
     if (parsed.kind === 'self') {
-        // graphId is always present for a self-encoding parse.
+        // graphId is always present for a self-encoding parse. Self-encoding tokens
+        // decode with zero storage, so no store is required to resolve them.
         return { graphId: parsed.graphId, mutable: false };
     }
+    // Alias-backed tokens need the store. Without one they can't be resolved.
+    if (store == null) {
+        throw new IdUnknownError(id);
+    }
     // Alias-backed: resolve against the store, scoped to the account.
     const row = store.getAlias(id, accountId);
     if (row !== null) {

package/dist/ids/resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../src/ids/resolver.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAiBH,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AASxC;;;GAGG;AACH,MAAM,UAAU,SAAS,CACvB,EAAmB,EACnB,SAAiB,EACjB,KAAiB;IAEjB,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,yBAAyB,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,uEAAuE;QACvE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,uDAAuD;QACvD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC/D,CAAC;IAED,kEAAkE;IAClE,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IACxD,CAAC;IAED,6EAA6E;IAC7E,6CAA6C;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,qBAAqB,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,IAAI,cAAc,CAAC,EAAE,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../src/ids/resolver.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAiBH,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAmB,MAAM,YAAY,CAAC;AASzD;;;GAGG;AACH,MAAM,UAAU,SAAS,CACvB,EAAU,EACV,SAAiB,EACjB,KAA6B,EAC7B,kBAA+B;IAE/B,yEAAyE;IACzE,mEAAmE;IACnE,8EAA8E;IAC9E,sEAAsE;IACtE,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,yBAAyB,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,uEAAuE;QACvE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,wEAAwE;IACxE,IAAI,kBAAkB,IAAI,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,kBAAkB,EAAE,CAAC;QAC3E,MAAM,IAAI,qBAAqB,CAAC,EAAE,EAAE,kBAAkB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,4EAA4E;QAC5E,qEAAqE;QACrE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC/D,CAAC;IAED,0EAA0E;IAC1E,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,cAAc,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,kEAAkE;IAClE,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IACxD,CAAC;IAED,6EAA6E;IAC7E,6CAA6C;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,qBAAqB,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,IAAI,cAAc,CAAC,EAAE,CAAC,CAAC;AAC/B,CAAC"}

package/dist/ids/schema.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * Canonical per-entity Zod id schemas (U6).
+ *
+ * Every tool that accepts a durable-ID param should reference the shared schema
+ * for its entity (`Id.task`, `Id.plan`, …) instead of an ad-hoc
+ * `z.string().min(1).describe(...)`. This gives one place to define:
+ *
+ * - **normalization** — `.trim()` so a copy/pasted id with stray whitespace
+ *   still resolves; `.min(1)` so an empty/whitespace-only id fails fast.
+ * - **a consistent, prefix-named description** — derived from the token tables
+ *   (`prefixForEntity`), so the param doc always names the token shape (e.g.
+ *   "a `td_` token") and where to get it.
+ *
+ * Deliberately NOT here: classification of the id (numeric-vs-token, wrong
+ * entity, alias store lookup). That stays in {@link resolveId} at execution
+ * time, which is the single source of truth and emits the specific typed codes
+ * (`NUMERIC_ID_UNSUPPORTED`, `ID_ENTITY_MISMATCH`, `ID_UNKNOWN`) agents key on.
+ * The schema is string-only (a JSON-number legacy id is a type error); a numeric
+ * *string* still passes and reaches `resolveId` for the specific message.
+ */
+import { z } from 'zod';
+import { type EntityType } from './token.js';
+/** Human label + the tools that mint an entity's id, for the description. */
+interface EntityMeta {
+    readonly label: string;
+    readonly from: string;
+}
+/**
+ * Per-entity description metadata. Only entities actually exposed as tool id
+ * params need an entry; others fall back to a generic description. Exported so a
+ * contract test can cross-check every `from` tool name against the registry,
+ * catching drift when a tool is renamed.
+ */
+export declare const ENTITY_META: Partial<Record<EntityType, EntityMeta>>;
+/** Builds the canonical, prefix-named description for an entity id. */
+export declare function describeId(entityType: EntityType): string;
+/**
+ * The canonical required id schema for an entity: a trimmed, non-empty string
+ * with a prefix-named description. Classification stays in `resolveId`.
+ */
+export declare function idSchema(entityType: EntityType): z.ZodString;
+/** The canonical optional id schema for an entity. */
+export declare function optionalIdSchema(entityType: EntityType): z.ZodOptional<z.ZodString>;
+/**
+ * Canonical required id schemas keyed by entity. Tools reference these directly
+ * (`Id.task`, `Id.plan`, …). A per-call `.describe()` may override the default
+ * description where a param needs extra context.
+ */
+export declare const Id: {
+    readonly message: z.ZodString;
+    readonly event: z.ZodString;
+    readonly contact: z.ZodString;
+    readonly folder: z.ZodString;
+    readonly driveItem: z.ZodString;
+    readonly task: z.ZodString;
+    readonly taskList: z.ZodString;
+    readonly plan: z.ZodString;
+    readonly plannerBucket: z.ZodString;
+    readonly plannerTask: z.ZodString;
+    readonly attachment: z.ZodString;
+    readonly checklistItem: z.ZodString;
+    readonly linkedResource: z.ZodString;
+    readonly taskAttachment: z.ZodString;
+    readonly chat: z.ZodString;
+    readonly team: z.ZodString;
+    readonly channel: z.ZodString;
+    readonly chatMessage: z.ZodString;
+    readonly channelMessage: z.ZodString;
+    readonly contactFolder: z.ZodString;
+    readonly mailRule: z.ZodString;
+    readonly category: z.ZodString;
+    readonly focusedOverride: z.ZodString;
+    readonly calendarPermission: z.ZodString;
+    readonly onlineMeeting: z.ZodString;
+    readonly recording: z.ZodString;
+    readonly transcript: z.ZodString;
+    readonly site: z.ZodString;
+    readonly documentLibrary: z.ZodString;
+    readonly libraryDriveItem: z.ZodString;
+    readonly sharePointList: z.ZodString;
+    readonly sharePointListItem: z.ZodString;
+    readonly noteNotebook: z.ZodString;
+    readonly noteSection: z.ZodString;
+    readonly notePage: z.ZodString;
+};
+export {};
+//# sourceMappingURL=schema.d.ts.map

package/dist/ids/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/ids/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAE9D,6EAA6E;AAC7E,UAAU,UAAU;IAClB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CAoC/D,CAAC;AAEF,uEAAuE;AACvE,wBAAgB,UAAU,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAMzD;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,CAAC,CAAC,SAAS,CAE5D;AAED,sDAAsD;AACtD,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAEnF;AAED;;;;GAIG;AACH,eAAO,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCiC,CAAC"}

package/dist/ids/schema.js

@@ -0,0 +1,131 @@
+/**
+ * Copyright (c) 2026 JBC Tech Solutions, LLC
+ * Licensed under the MIT License. See LICENSE file in the project root.
+ */
+/**
+ * Canonical per-entity Zod id schemas (U6).
+ *
+ * Every tool that accepts a durable-ID param should reference the shared schema
+ * for its entity (`Id.task`, `Id.plan`, …) instead of an ad-hoc
+ * `z.string().min(1).describe(...)`. This gives one place to define:
+ *
+ * - **normalization** — `.trim()` so a copy/pasted id with stray whitespace
+ *   still resolves; `.min(1)` so an empty/whitespace-only id fails fast.
+ * - **a consistent, prefix-named description** — derived from the token tables
+ *   (`prefixForEntity`), so the param doc always names the token shape (e.g.
+ *   "a `td_` token") and where to get it.
+ *
+ * Deliberately NOT here: classification of the id (numeric-vs-token, wrong
+ * entity, alias store lookup). That stays in {@link resolveId} at execution
+ * time, which is the single source of truth and emits the specific typed codes
+ * (`NUMERIC_ID_UNSUPPORTED`, `ID_ENTITY_MISMATCH`, `ID_UNKNOWN`) agents key on.
+ * The schema is string-only (a JSON-number legacy id is a type error); a numeric
+ * *string* still passes and reaches `resolveId` for the specific message.
+ */
+import { z } from 'zod';
+import { prefixForEntity } from './token.js';
+/**
+ * Per-entity description metadata. Only entities actually exposed as tool id
+ * params need an entry; others fall back to a generic description. Exported so a
+ * contract test can cross-check every `from` tool name against the registry,
+ * catching drift when a tool is renamed.
+ */
+export const ENTITY_META = {
+    message: { label: 'email message', from: 'list_emails / search_emails' },
+    event: { label: 'calendar event', from: 'list_events / search_events' },
+    contact: { label: 'contact', from: 'list_contacts / search_contacts' },
+    folder: { label: 'mail folder', from: 'list_folders' },
+    driveItem: { label: 'OneDrive item', from: 'list_drive_items / search_drive_items' },
+    task: { label: 'To Do task', from: 'list_tasks / search_tasks' },
+    taskList: { label: 'To Do task list', from: 'list_task_lists' },
+    plan: { label: 'Planner plan', from: 'list_plans' },
+    plannerBucket: { label: 'Planner bucket', from: 'list_buckets' },
+    plannerTask: { label: 'Planner task', from: 'list_planner_tasks' },
+    attachment: { label: 'email attachment', from: 'list_attachments' },
+    checklistItem: { label: 'task checklist item', from: 'list_checklist_items' },
+    linkedResource: { label: 'task linked resource', from: 'list_linked_resources' },
+    taskAttachment: { label: 'task attachment', from: 'list_task_attachments' },
+    chat: { label: 'Teams chat', from: 'list_chats' },
+    team: { label: 'team', from: 'list_teams' },
+    channel: { label: 'Teams channel', from: 'list_channels' },
+    chatMessage: { label: 'chat message', from: 'list_chat_messages' },
+    channelMessage: { label: 'channel message', from: 'list_channel_messages' },
+    contactFolder: { label: 'contact folder', from: 'list_contact_folders' },
+    mailRule: { label: 'inbox rule', from: 'list_mail_rules' },
+    category: { label: 'master category', from: 'list_categories' },
+    focusedOverride: { label: 'focused-inbox override', from: 'list_focused_overrides' },
+    calendarPermission: { label: 'calendar permission', from: 'list_calendar_permissions' },
+    onlineMeeting: { label: 'online meeting', from: 'list_online_meetings' },
+    recording: { label: 'meeting recording', from: 'list_meeting_recordings' },
+    transcript: { label: 'meeting transcript', from: 'list_meeting_transcripts' },
+    site: { label: 'SharePoint site', from: 'list_sites / search_sites' },
+    documentLibrary: { label: 'document library', from: 'list_document_libraries' },
+    libraryDriveItem: { label: 'library item', from: 'list_library_items' },
+    sharePointList: { label: 'SharePoint list', from: 'list_lists' },
+    sharePointListItem: { label: 'SharePoint list item', from: 'list_list_items' },
+    noteNotebook: { label: 'OneNote notebook', from: 'list_notebooks' },
+    noteSection: { label: 'OneNote section', from: 'list_note_sections' },
+    notePage: { label: 'OneNote page', from: 'list_note_pages / search_note_pages' },
+};
+/** Builds the canonical, prefix-named description for an entity id. */
+export function describeId(entityType) {
+    const prefix = prefixForEntity(entityType);
+    const meta = ENTITY_META[entityType];
+    const label = meta?.label ?? entityType;
+    const source = meta != null ? ` from ${meta.from}` : '';
+    return `Durable ${label} ID — a \`${prefix}_\` token${source}. A raw Graph id is also accepted.`;
+}
+/**
+ * The canonical required id schema for an entity: a trimmed, non-empty string
+ * with a prefix-named description. Classification stays in `resolveId`.
+ */
+export function idSchema(entityType) {
+    return z.string().trim().min(1).describe(describeId(entityType));
+}
+/** The canonical optional id schema for an entity. */
+export function optionalIdSchema(entityType) {
+    return idSchema(entityType).optional();
+}
+/**
+ * Canonical required id schemas keyed by entity. Tools reference these directly
+ * (`Id.task`, `Id.plan`, …). A per-call `.describe()` may override the default
+ * description where a param needs extra context.
+ */
+export const Id = {
+    message: idSchema('message'),
+    event: idSchema('event'),
+    contact: idSchema('contact'),
+    folder: idSchema('folder'),
+    driveItem: idSchema('driveItem'),
+    task: idSchema('task'),
+    taskList: idSchema('taskList'),
+    plan: idSchema('plan'),
+    plannerBucket: idSchema('plannerBucket'),
+    plannerTask: idSchema('plannerTask'),
+    attachment: idSchema('attachment'),
+    checklistItem: idSchema('checklistItem'),
+    linkedResource: idSchema('linkedResource'),
+    taskAttachment: idSchema('taskAttachment'),
+    chat: idSchema('chat'),
+    team: idSchema('team'),
+    channel: idSchema('channel'),
+    chatMessage: idSchema('chatMessage'),
+    channelMessage: idSchema('channelMessage'),
+    contactFolder: idSchema('contactFolder'),
+    mailRule: idSchema('mailRule'),
+    category: idSchema('category'),
+    focusedOverride: idSchema('focusedOverride'),
+    calendarPermission: idSchema('calendarPermission'),
+    onlineMeeting: idSchema('onlineMeeting'),
+    recording: idSchema('recording'),
+    transcript: idSchema('transcript'),
+    site: idSchema('site'),
+    documentLibrary: idSchema('documentLibrary'),
+    libraryDriveItem: idSchema('libraryDriveItem'),
+    sharePointList: idSchema('sharePointList'),
+    sharePointListItem: idSchema('sharePointListItem'),
+    noteNotebook: idSchema('noteNotebook'),
+    noteSection: idSchema('noteSection'),
+    notePage: idSchema('notePage'),
+};
+//# sourceMappingURL=schema.js.map

package/dist/ids/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/ids/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAmB,MAAM,YAAY,CAAC;AAQ9D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAA4C;IAClE,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,6BAA6B,EAAE;IACxE,KAAK,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,6BAA6B,EAAE;IACvE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,iCAAiC,EAAE;IACtE,MAAM,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE;IACtD,SAAS,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,uCAAuC,EAAE;IACpF,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,2BAA2B,EAAE;IAChE,QAAQ,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC/D,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE;IACnD,aAAa,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,EAAE;IAChE,WAAW,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,oBAAoB,EAAE;IAClE,UAAU,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,kBAAkB,EAAE;IACnE,aAAa,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE;IAC7E,cAAc,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAChF,cAAc,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAC3E,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE;IACjD,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE;IAC3C,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE;IAC1D,WAAW,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,oBAAoB,EAAE;IAClE,cAAc,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAC3E,aAAa,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACxE,QAAQ,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC1D,QAAQ,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC/D,eAAe,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACpF,kBAAkB,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,2BAA2B,EAAE;IACvF,aAAa,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACxE,SAAS,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,yBAAyB,EAAE;IAC1E,UAAU,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,0BAA0B,EAAE;IAC7E,IAAI,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,2BAA2B,EAAE;IACrE,eAAe,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,yBAAyB,EAAE;IAC/E,gBAAgB,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACvE,cAAc,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE;IAChE,kBAAkB,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC9E,YAAY,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,gBAAgB,EAAE;IACnE,WAAW,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACrE,QAAQ,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,qCAAqC,EAAE;CACjF,CAAC;AAEF,uEAAuE;AACvE,MAAM,UAAU,UAAU,CAAC,UAAsB;IAC/C,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,UAAU,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,OAAO,WAAW,KAAK,aAAa,MAAM,YAAY,MAAM,oCAAoC,CAAC;AACnG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,UAAsB;IAC7C,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,gBAAgB,CAAC,UAAsB;IACrD,OAAO,QAAQ,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,EAAE,GAAG;IAChB,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC;IAC5B,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC;IACxB,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC;IAC5B,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC1B,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC;IAChC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;IACtB,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC;IAC9B,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;IACtB,aAAa,EAAE,QAAQ,CAAC,eAAe,CAAC;IACxC,WAAW,EAAE,QAAQ,CAAC,aAAa,CAAC;IACpC,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC;IAClC,aAAa,EAAE,QAAQ,CAAC,eAAe,CAAC;IACxC,cAAc,EAAE,QAAQ,CAAC,gBAAgB,CAAC;IAC1C,cAAc,EAAE,QAAQ,CAAC,gBAAgB,CAAC;IAC1C,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;IACtB,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;IACtB,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC;IAC5B,WAAW,EAAE,QAAQ,CAAC,aAAa,CAAC;IACpC,cAAc,EAAE,QAAQ,CAAC,gBAAgB,CAAC;IAC1C,aAAa,EAAE,QAAQ,CAAC,eAAe,CAAC;IACxC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC;IAC9B,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC;IAC9B,eAAe,EAAE,QAAQ,CAAC,iBAAiB,CAAC;IAC5C,kBAAkB,EAAE,QAAQ,CAAC,oBAAoB,CAAC;IAClD,aAAa,EAAE,QAAQ,CAAC,eAAe,CAAC;IACxC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC;IAChC,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC;IAClC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;IACtB,eAAe,EAAE,QAAQ,CAAC,iBAAiB,CAAC;IAC5C,gBAAgB,EAAE,QAAQ,CAAC,kBAAkB,CAAC;IAC9C,cAAc,EAAE,QAAQ,CAAC,gBAAgB,CAAC;IAC1C,kBAAkB,EAAE,QAAQ,CAAC,oBAAoB,CAAC;IAClD,YAAY,EAAE,QAAQ,CAAC,cAAc,CAAC;IACtC,WAAW,EAAE,QAAQ,CAAC,aAAa,CAAC;IACpC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC;CACgB,CAAC"}

package/dist/ids/token.d.ts

@@ -3,7 +3,7 @@
  * Licensed under the MIT License. See LICENSE file in the project root.
  */
 /** Entity kinds addressable by a durable-ID token. */
-export type EntityType = 'message' | 'event' | 'contact' | 'folder' | 'driveItem' | 'task' | 'plan' | 'plannerTask' | 'chat' | 'team' | 'attachment' | 'channel' | 'chatMessage' | 'checklistItem';
+export type EntityType = 'message' | 'event' | 'contact' | 'folder' | 'driveItem' | 'task' | 'taskList' | 'plan' | 'plannerBucket' | 'plannerTask' | 'chat' | 'team' | 'attachment' | 'channel' | 'chatMessage' | 'channelMessage' | 'checklistItem' | 'linkedResource' | 'taskAttachment' | 'noteNotebook' | 'noteSection' | 'notePage' | 'mailRule' | 'contactFolder' | 'category' | 'focusedOverride' | 'calendarPermission' | 'onlineMeeting' | 'recording' | 'transcript' | 'site' | 'documentLibrary' | 'libraryDriveItem' | 'sharePointList' | 'sharePointListItem';
 /** How a token encodes its target. */
 export type TokenKind = 'self' | 'alias';
 /**
@@ -27,6 +27,12 @@ export interface ParsedToken {
 }
 /** True when a prefix is a known self-encoding or alias prefix. */
 export declare function isKnownPrefix(prefix: string): boolean;
+/**
+ * The 2-char token prefix for an entity type (e.g. `task` → `td`). Lets callers
+ * (canonical id schemas, next-action hints) name the token shape without
+ * duplicating the prefix tables. Throws for an entity with no allocated prefix.
+ */
+export declare function prefixForEntity(entityType: EntityType): string;
 /**
  * Mints a self-encoding token carrying the immutable Graph ID (D1). Determin­istic.
  */

package/dist/ids/token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../src/ids/token.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAqBH,sDAAsD;AACtD,MAAM,MAAM,UAAU,GAClB,SAAS,GACT,OAAO,GACP,SAAS,GACT,QAAQ,GACR,WAAW,GACX,MAAM,GACN,MAAM,GACN,aAAa,GACb,MAAM,GACN,MAAM,GACN,YAAY,GACZ,SAAS,GACT,aAAa,GACb,eAAe,CAAC;AAEpB,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;AAEzC;;;;;;GAMG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAUvE,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAY/D,CAAC;AAoBF,iCAAiC;AACjC,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE,UAAU,CAAC;IACvB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAW/E;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAMlF;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAMpG;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CA0B5D;AAED,iFAAiF;AACjF,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9C"}
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../src/ids/token.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA2BH,sDAAsD;AACtD,MAAM,MAAM,UAAU,GAClB,SAAS,GACT,OAAO,GACP,SAAS,GACT,QAAQ,GACR,WAAW,GACX,MAAM,GACN,UAAU,GACV,MAAM,GACN,eAAe,GACf,aAAa,GACb,MAAM,GACN,MAAM,GACN,YAAY,GACZ,SAAS,GACT,aAAa,GACb,gBAAgB,GAChB,eAAe,GACf,gBAAgB,GAChB,gBAAgB,GAChB,cAAc,GACd,aAAa,GACb,UAAU,GACV,UAAU,GACV,eAAe,GACf,UAAU,GACV,iBAAiB,GACjB,oBAAoB,GACpB,eAAe,GACf,WAAW,GACX,YAAY,GACZ,MAAM,GACN,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,oBAAoB,CAAC;AAEzB,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;AAEzC;;;;;;GAMG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAYvE,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CA+B/D,CAAC;AAoBF,iCAAiC;AACjC,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE,UAAU,CAAC;IACvB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAM9D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAW/E;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAMlF;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAMpG;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CA0B5D;AAED,iFAAiF;AACjF,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9C"}

package/dist/ids/token.js

@@ -5,15 +5,21 @@
 /**
  * Durable-ID tokens (U5 / D1). Two shapes:
  *
- * - **Self-encoding** (`em_`, `ev_`, `ct_`, `fd_`, `dr_`, `td_`): the token
- *   carries the immutable Graph ID directly — `<prefix>_<base64url(graphId)>`.
+ * - **Self-encoding** (`em_`, `ev_`, `ct_`, `fd_`, `dr_`, `nb_`, `ns_`,
+ *   `np_`): the token carries the immutable Graph ID directly —
+ *   `<prefix>_<base64url(graphId)>`.
  *   Resolution is a decode with zero storage, so it survives a cold/lost
  *   `state.db` and resolves on any machine (the core cold-state fix).
  *
- * - **Alias-backed** (`pl_`, `pt_`, `ch_`, `tm_`, `at_`, composite tuples): the
- *   token is a short deterministic digest of the entity's canonical key —
- *   `<prefix>_<base32(sha256(canonicalKey))[0..13]>` (70 bits) — backed by the
- *   alias table (D3). These are machine-scoped: a cold store yields `ID_UNKNOWN`.
+ * - **Alias-backed** (`pl_`, `pb_`, `pt_`, `ch_`, `tm_`, `at_`, `td_`, `tl_`, `mr_`,
+ *   `cf_`, `cg_`, `fo_`, `cp_`, `om_`, `rc_`, `tr_`, `si_`, `dl_`, `li_`, `sl_`, `sn_`, composite tuples): the token is a short deterministic digest of the
+ *   entity's canonical key — `<prefix>_<base32(sha256(canonicalKey))[0..13]>`
+ *   (70 bits) — backed by the alias table (D3). These are machine-scoped: a
+ *   cold store yields `ID_UNKNOWN`.
+ *
+ * Calendar groups are an **orphan** entity: minted for display but never
+ * resolved back (no Graph URL takes a calendar-group id as a path segment),
+ * so they are returned as the raw Graph id string rather than a token.
  *
  * Determinism is a hard requirement: the same Graph ID / canonical key always
  * mints a byte-identical token.
@@ -33,18 +39,39 @@ export const SELF_ENCODING_PREFIXES = Object.assign(Object.create(null), {
     ct: 'contact',
     fd: 'folder',
     dr: 'driveItem',
-    td: 'task',
+    nb: 'noteNotebook',
+    ns: 'noteSection',
+    np: 'notePage',
 });
 /** Alias-backed prefixes → entity type (the token is a digest; needs the store). */
 export const ALIAS_PREFIXES = Object.assign(Object.create(null), {
     pl: 'plan',
+    pb: 'plannerBucket',
     pt: 'plannerTask',
     ch: 'chat',
     tm: 'team',
     at: 'attachment',
     cn: 'channel',
     cm: 'chatMessage',
+    xm: 'channelMessage',
     ci: 'checklistItem',
+    lr: 'linkedResource',
+    ta: 'taskAttachment',
+    td: 'task',
+    tl: 'taskList',
+    mr: 'mailRule',
+    cf: 'contactFolder',
+    cg: 'category',
+    fo: 'focusedOverride',
+    cp: 'calendarPermission',
+    om: 'onlineMeeting',
+    rc: 'recording',
+    tr: 'transcript',
+    si: 'site',
+    dl: 'documentLibrary',
+    li: 'libraryDriveItem',
+    sl: 'sharePointList',
+    sn: 'sharePointListItem',
 });
 const ENTITY_TO_PREFIX = buildReverse();
 function buildReverse() {
@@ -65,6 +92,18 @@ const COMPOSITE_DIGEST_CHARS = 14;
 export function isKnownPrefix(prefix) {
     return prefix in SELF_ENCODING_PREFIXES || prefix in ALIAS_PREFIXES;
 }
+/**
+ * The 2-char token prefix for an entity type (e.g. `task` → `td`). Lets callers
+ * (canonical id schemas, next-action hints) name the token shape without
+ * duplicating the prefix tables. Throws for an entity with no allocated prefix.
+ */
+export function prefixForEntity(entityType) {
+    const prefix = ENTITY_TO_PREFIX[entityType];
+    if (prefix == null) {
+        throw new Error(`Entity type "${entityType}" has no allocated token prefix.`);
+    }
+    return prefix;
+}
 /**
  * Mints a self-encoding token carrying the immutable Graph ID (D1). Determin­istic.
  */

package/dist/ids/token.js.map

@@ -1 +1 @@
-{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/ids/token.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAsBzC;;;;;;GAMG;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,sBAAsB,GAAyC,MAAM,CAAC,MAAM,CACvF,MAAM,CAAC,MAAM,CAAC,IAAI,CAA+B,EACjD;IACE,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,WAAW;IACf,EAAE,EAAE,MAAM;CAC0B,CACvC,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAyC,MAAM,CAAC,MAAM,CAC/E,MAAM,CAAC,MAAM,CAAC,IAAI,CAA+B,EACjD;IACE,EAAE,EAAE,MAAM;IACV,EAAE,EAAE,aAAa;IACjB,EAAE,EAAE,MAAM;IACV,EAAE,EAAE,MAAM;IACV,EAAE,EAAE,YAAY;IAChB,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,aAAa;IACjB,EAAE,EAAE,eAAe;CACiB,CACvC,CAAC;AAEF,MAAM,gBAAgB,GAAyC,YAAY,EAAE,CAAC;AAE9E,SAAS,YAAY;IACnB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA+B,CAAC;IAC9D,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACvB,CAAC;IACD,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACvB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,eAAe,GAAG,kCAAkC,CAAC;AAC3D,oEAAoE;AACpE,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAWlC,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,OAAO,MAAM,IAAI,sBAAsB,IAAI,MAAM,IAAI,cAAc,CAAC;AACtE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,UAAsB,EAAE,OAAe;IACrE,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,MAAM,IAAI,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,sBAAsB,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,gBAAgB,UAAU,yBAAyB,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,4EAA4E;QAC5E,8EAA8E;QAC9E,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,UAAsB,EAAE,YAAoB;IACxE,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,MAAM,IAAI,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,cAAc,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,gBAAgB,UAAU,wBAAwB,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,MAAM,IAAI,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,UAAsB,EAAE,KAAuC;IAC1F,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SAC9B,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;SAC5E,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,GAAG,UAAU,IAAI,MAAM,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;IAC5D,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,OAAO,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;AACpC,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IACjE,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QAC5B,IAAI,IAAI,CAAC,CAAC;QACV,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,eAAe,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,CAAC;YACV,IAAI,MAAM,CAAC,MAAM,KAAK,sBAAsB,EAAE,CAAC;gBAC7C,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,2EAA2E;IAC3E,8CAA8C;IAC9C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,+EAA+E;IAC/E,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,OAAO,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/ids/token.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA2CzC;;;;;;GAMG;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,sBAAsB,GAAyC,MAAM,CAAC,MAAM,CACvF,MAAM,CAAC,MAAM,CAAC,IAAI,CAA+B,EACjD;IACE,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,OAAO;IACX,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,WAAW;IACf,EAAE,EAAE,cAAc;IAClB,EAAE,EAAE,aAAa;IACjB,EAAE,EAAE,UAAU;CACsB,CACvC,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAyC,MAAM,CAAC,MAAM,CAC/E,MAAM,CAAC,MAAM,CAAC,IAAI,CAA+B,EACjD;IACE,EAAE,EAAE,MAAM;IACV,EAAE,EAAE,eAAe;IACnB,EAAE,EAAE,aAAa;IACjB,EAAE,EAAE,MAAM;IACV,EAAE,EAAE,MAAM;IACV,EAAE,EAAE,YAAY;IAChB,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,aAAa;IACjB,EAAE,EAAE,gBAAgB;IACpB,EAAE,EAAE,eAAe;IACnB,EAAE,EAAE,gBAAgB;IACpB,EAAE,EAAE,gBAAgB;IACpB,EAAE,EAAE,MAAM;IACV,EAAE,EAAE,UAAU;IACd,EAAE,EAAE,UAAU;IACd,EAAE,EAAE,eAAe;IACnB,EAAE,EAAE,UAAU;IACd,EAAE,EAAE,iBAAiB;IACrB,EAAE,EAAE,oBAAoB;IACxB,EAAE,EAAE,eAAe;IACnB,EAAE,EAAE,WAAW;IACf,EAAE,EAAE,YAAY;IAChB,EAAE,EAAE,MAAM;IACV,EAAE,EAAE,iBAAiB;IACrB,EAAE,EAAE,kBAAkB;IACtB,EAAE,EAAE,gBAAgB;IACpB,EAAE,EAAE,oBAAoB;CACY,CACvC,CAAC;AAEF,MAAM,gBAAgB,GAAyC,YAAY,EAAE,CAAC;AAE9E,SAAS,YAAY;IACnB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA+B,CAAC;IAC9D,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACvB,CAAC;IACD,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACvB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,eAAe,GAAG,kCAAkC,CAAC;AAC3D,oEAAoE;AACpE,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAWlC,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,OAAO,MAAM,IAAI,sBAAsB,IAAI,MAAM,IAAI,cAAc,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,UAAsB;IACpD,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,gBAAgB,UAAU,kCAAkC,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,UAAsB,EAAE,OAAe;IACrE,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,MAAM,IAAI,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,sBAAsB,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,gBAAgB,UAAU,yBAAyB,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,4EAA4E;QAC5E,8EAA8E;QAC9E,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,UAAsB,EAAE,YAAoB;IACxE,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,MAAM,IAAI,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,cAAc,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,gBAAgB,UAAU,wBAAwB,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,MAAM,IAAI,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,UAAsB,EAAE,KAAuC;IAC1F,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SAC9B,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;SAC5E,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,GAAG,UAAU,IAAI,MAAM,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;IAC5D,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,OAAO,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;AACpC,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IACjE,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QAC5B,IAAI,IAAI,CAAC,CAAC;QACV,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,eAAe,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,CAAC;YACV,IAAI,MAAM,CAAC,MAAM,KAAK,sBAAsB,EAAE,CAAC;gBAC7C,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,2EAA2E;IAC3E,8CAA8C;IAC9C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,+EAA+E;IAC/E,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,OAAO,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/index.d.ts

@@ -7,14 +7,10 @@
  * Office 365 MCP Server
  *
  * A Model Context Protocol server that provides full read/write access to
- * Microsoft 365 via Microsoft Graph API or legacy AppleScript.
- *
- * Backend selection:
- * - Graph API is the default (full-featured, cross-platform)
- * - Set USE_APPLESCRIPT=1 to use legacy AppleScript backend (macOS + classic Outlook only)
+ * Microsoft 365 via the Microsoft Graph API.
  */
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
-import type { SurfaceOptions } from './registry/index.js';
+import type { SurfaceOptions, ConfirmMode } from './registry/index.js';
 /**
  * Creates and configures the MCP server.
  */
@@ -22,6 +18,8 @@ import type { SurfaceOptions } from './registry/index.js';
 export interface ServerOptions {
     readonly presets?: SurfaceOptions['presets'];
     readonly readOnly?: boolean;
+    /** Destructive-confirm mode (U11): 'token' (default) or 'elicit'. */
+    readonly confirmMode?: ConfirmMode;
 }
 export declare function createServer(options?: ServerOptions): Server;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;GAGG;AACH;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAgCnE,OAAO,KAAK,EAAe,cAAc,EAAE,MAAM,qBAAqB,CAAC;AA0FvE;;GAEG;AACH,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IAC7C,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAgB,YAAY,CAAC,OAAO,GAAE,aAAkB,GAAG,MAAM,CA+ShE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;GAGG;AACH;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAsBnE,OAAO,KAAK,EAAe,cAAc,EAAE,WAAW,EAAY,MAAM,qBAAqB,CAAC;AAoE9F;;GAEG;AACH,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IAC7C,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC;AAED,wBAAgB,YAAY,CAAC,OAAO,GAAE,aAAkB,GAAG,MAAM,CA8RhE"}