@littlebearapps/outlook-assistant 3.5.2 → 3.7.0

package/email/mime.js

@@ -30,7 +30,7 @@ function parseMimeHeaders(mimeContent) {
   lines.forEach((line) => {
     if (line.startsWith(' ') || line.startsWith('\t')) {
       // Continuation of previous header
-      currentValue += ' ' + line.trim();
+      currentValue += ` ${line.trim()}`;
     } else {
       // Save previous header
       if (currentHeader) {
@@ -57,6 +57,12 @@ function parseMimeHeaders(mimeContent) {
   };
 }
 
+function formatBytes(bytes) {
+  if (bytes < 1024) return `${bytes} B`;
+  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
+  return `${(bytes / (1024 * 1024)).toFixed(2)} MB`;
+}
+
 /**
  * Get MIME content size info
  * @param {string} mimeContent - Raw MIME content
@@ -68,12 +74,7 @@ function getMimeStats(mimeContent) {
 
   return {
     bytes,
-    formattedSize:
-      bytes < 1024
-        ? `${bytes} B`
-        : bytes < 1024 * 1024
-          ? `${(bytes / 1024).toFixed(1)} KB`
-          : `${(bytes / (1024 * 1024)).toFixed(2)} MB`,
+    formattedSize: formatBytes(bytes),
     lines,
   };
 }
@@ -184,17 +185,17 @@ async function handleGetMimeContent(args) {
       }
 
       // Build response
-      let output = [];
+      const output = [];
       output.push(`# MIME Content${headersOnly ? ' (Headers Only)' : ''}\n`);
       output.push(`**Size**: ${stats.formattedSize}`);
       output.push(`**Lines**: ${stats.lines}`);
 
       // Show key headers
-      if (parsed.headers['Subject']) {
-        output.push(`**Subject**: ${parsed.headers['Subject']}`);
+      if (parsed.headers.Subject) {
+        output.push(`**Subject**: ${parsed.headers.Subject}`);
       }
-      if (parsed.headers['From']) {
-        output.push(`**From**: ${parsed.headers['From']}`);
+      if (parsed.headers.From) {
+        output.push(`**From**: ${parsed.headers.From}`);
       }
       if (parsed.headers['Content-Type']) {
         output.push(

package/email/search.js

@@ -166,7 +166,7 @@ async function progressiveSearch(
   ) {
     // Skip directly to boolean-only filter (step 3) — combined search is redundant
     console.error('Only boolean filters provided, skipping combined search');
-  } else
+  } else {
     try {
       const params = buildSearchParams(
         searchTerms,
@@ -193,6 +193,7 @@ async function progressiveSearch(
     } catch (error) {
       console.error(`Combined search failed: ${error.message}`);
     }
+  }
 
   // 2. Try each search term individually, starting with most specific
   const searchPriority = ['from', 'to', 'subject', 'query'];
@@ -545,7 +546,7 @@ function formatSearchResults(response, folder, verbosity) {
   const meta = {
     returned: response.value.length,
     totalAvailable: response['@odata.count'] || null,
-    hasMore: !!response['@odata.nextLink'],
+    hasMore: Boolean(response['@odata.nextLink']),
     verbosity: verbosity,
   };
 

package/email/send.js

@@ -138,7 +138,7 @@ async function handleSendEmail(args) {
           content: [
             {
               type: 'text',
-              text: tipsText + '\n\n---\n\n' + preview.content[0].text,
+              text: `${tipsText}\n\n---\n\n${preview.content[0].text}`,
             },
           ],
           _meta: { mailTips: tipsResult._meta },

package/folder/list.js

@@ -272,7 +272,7 @@ function formatFolderHierarchy(folders, includeItemCounts) {
     // Add children
     const childLines = folder.children
       .map((childId) => formatSubtree(childId, level + 1))
-      .filter((line) => line.length > 0)
+      .filter((childLine) => childLine.length > 0)
       .join('\n');
 
     return childLines.length > 0 ? `${line}\n${childLines}` : line;

package/llms.txt

@@ -11,12 +11,12 @@ Built by [Little Bear Apps](https://littlebearapps.com).
 - **License**: MIT
 - **Node.js**: >= 18.0.0
 - **Authentication**: OAuth 2.0 with Microsoft Graph API (requires Azure app registration)
-- **Tools**: 21 tools across 9 modules (reduced from 55 for optimal AI performance)
+- **Tools**: 22 tools across 9 modules (reduced from 55 for optimal AI performance)
 
 ## Why Outlook Assistant?
 
 - Read, search, send, and export emails directly from Claude instead of switching apps
-- 7 email tools covering search, conversations, attachments, bulk export, and pre-send mail tips
+- 8 email tools covering search, conversations, attachments, bulk export, pre-send mail tips, and draft management
 - Manage calendar events, contacts, rules, categories, and mailbox settings in one place
 - Export to multiple formats: MIME/EML, MBOX, Markdown, JSON, HTML
 
@@ -31,9 +31,10 @@ Built by [Little Bear Apps](https://littlebearapps.com).
 
 ## Safety & Token Efficiency
 
-- **MCP safety annotations** on all 21 tools — AI clients auto-approve reads and prompt for destructive operations
+- **MCP safety annotations** on all 22 tools — AI clients auto-approve reads and prompt for destructive operations
 - **Send-email protections**: pre-send mail tips, dry-run preview, session rate limiting, recipient allowlist
-- **Token-optimised**: 21 tools instead of 55 saves ~11,000 tokens per turn (~64% reduction), improving AI accuracy and context efficiency
+- **Rule protections**: dry-run preview on create/update, rate limiting, recipient allowlist on forward/redirect, no permanent-delete action
+- **Token-optimised**: 22 tools instead of 55 saves ~11,000 tokens per turn (~64% reduction), improving AI accuracy and context efficiency
 - These safeguards reduce risk but are not foolproof — always review actions before approving
 
 ## Quick Start
@@ -58,11 +59,11 @@ Requires an Azure app registration with Microsoft Graph delegated permissions. S
 ## Tool Categories
 
 - **Authentication (1 tool)**: `auth` — OAuth flow, status, about
-- **Email (7 tools)**: `search-emails`, `read-email`, `send-email`, `update-email`, `attachments`, `export`, `get-mail-tips`
+- **Email (8 tools)**: `search-emails`, `read-email`, `send-email`, `draft`, `update-email`, `attachments`, `export`, `get-mail-tips`
 - **Calendar (3 tools)**: `list-events`, `create-event`, `manage-event`
 - **Contacts (2 tools)**: `manage-contact`, `search-people`
 - **Folders (1 tool)**: `folders` — list, create, move, stats
-- **Rules (1 tool)**: `manage-rules` — list, create, reorder
+- **Rules (1 tool)**: `manage-rules` — list, create, update, reorder, delete
 - **Categories (3 tools)**: `manage-category`, `apply-category`, `manage-focused-inbox`
 - **Settings (1 tool)**: `mailbox-settings` — get, set auto-replies, set working hours
 - **Advanced (2 tools)**: `access-shared-mailbox`, `find-meeting-rooms`
@@ -70,7 +71,7 @@ Requires an Azure app registration with Microsoft Graph delegated permissions. S
 ## Documentation
 
 - [README](https://raw.githubusercontent.com/littlebearapps/outlook-assistant/main/README.md): Full documentation including setup, Azure configuration, and usage
-- [Tools Reference](https://raw.githubusercontent.com/littlebearapps/outlook-assistant/main/docs/quickrefs/tools-reference.md): All 21 tools with parameters and safety annotations
+- [Tools Reference](https://raw.githubusercontent.com/littlebearapps/outlook-assistant/main/docs/quickrefs/tools-reference.md): All 22 tools with parameters and safety annotations
 - [CLAUDE.md](https://raw.githubusercontent.com/littlebearapps/outlook-assistant/main/CLAUDE.md): Quick reference for development
 - [CONTRIBUTING](https://raw.githubusercontent.com/littlebearapps/outlook-assistant/main/CONTRIBUTING.md): Contribution guidelines
 - [CHANGELOG](https://raw.githubusercontent.com/littlebearapps/outlook-assistant/main/CHANGELOG.md): Version history

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@littlebearapps/outlook-assistant",
-  "version": "3.5.2",
+  "version": "3.7.0",
   "mcpName": "io.github.littlebearapps/outlook-assistant",
-  "description": "Outlook Assistant — MCP server with 21 tools for email, calendar, contacts, and settings via Microsoft Graph API",
+  "description": "Outlook Assistant — MCP server with 22 tools for email, calendar, contacts, and settings via Microsoft Graph API",
   "main": "index.js",
   "bin": {
     "outlook-assistant": "./index.js"

package/rules/create.js

@@ -3,8 +3,16 @@
  */
 const { callGraphAPI } = require('../utils/graph-api');
 const { ensureAuthenticated } = require('../auth');
-const { getFolderIdByName } = require('../email/folder-utils');
+const { checkRateLimit } = require('../utils/safety');
+const { formatRuleDryRunPreview } = require('../utils/safety');
 const { getInboxRules } = require('./list');
+const {
+  buildConditions,
+  buildActions,
+  buildExceptions,
+  hasAnyCondition,
+  hasAnyAction,
+} = require('./rule-builder');
 
 /**
  * Create rule handler
@@ -12,18 +20,13 @@ const { getInboxRules } = require('./list');
  * @returns {object} - MCP response
  */
 async function handleCreateRule(args) {
-  const {
-    name,
-    fromAddresses,
-    containsSubject,
-    hasAttachments,
-    moveToFolder,
-    markAsRead,
-    isEnabled = true,
-    sequence,
-  } = args;
+  const { name, isEnabled = true, sequence, dryRun } = args;
 
-  // Add validation for sequence parameter
+  // Rate limit rule creation
+  const rateLimitError = checkRateLimit('manage-rules');
+  if (rateLimitError) return rateLimitError;
+
+  // Validate sequence parameter
   if (sequence !== undefined && (isNaN(sequence) || sequence < 1)) {
     return {
       content: [
@@ -46,202 +49,96 @@ async function handleCreateRule(args) {
     };
   }
 
-  // Validate that at least one condition or action is specified
-  const hasCondition =
-    fromAddresses || containsSubject || hasAttachments === true;
-  const hasAction = moveToFolder || markAsRead === true;
-
-  if (!hasCondition) {
+  if (!hasAnyCondition(args)) {
     return {
       content: [
         {
           type: 'text',
-          text: 'At least one condition is required. Specify fromAddresses, containsSubject, or hasAttachments.',
+          text: 'At least one condition is required. Available conditions: fromAddresses, containsSubject, bodyContains, bodyOrSubjectContains, senderContains, recipientContains, sentToAddresses, hasAttachments, importance, sensitivity, sentToMe, sentOnlyToMe, sentCcMe, isAutomaticReply.',
         },
       ],
     };
   }
 
-  if (!hasAction) {
+  if (!hasAnyAction(args)) {
     return {
       content: [
         {
           type: 'text',
-          text: 'At least one action is required. Specify moveToFolder or markAsRead.',
+          text: 'At least one action is required. Available actions: moveToFolder, copyToFolder, markAsRead, markImportance, forwardTo, redirectTo, assignCategories, stopProcessingRules, deleteMessage.',
         },
       ],
     };
   }
 
   try {
-    // Get access token
     const accessToken = await ensureAuthenticated();
 
-    // Create rule
-    const result = await createInboxRule(accessToken, {
-      name,
-      fromAddresses,
-      containsSubject,
-      hasAttachments,
-      moveToFolder,
-      markAsRead,
-      isEnabled,
-      sequence,
-    });
-
-    let responseText = result.message;
+    // Build rule components
+    const { conditions, warnings: condWarnings } = buildConditions(args);
+    const { actions, warnings: actWarnings } = await buildActions(
+      args,
+      accessToken
+    );
+    const { exceptions, warnings: excWarnings } = buildExceptions(args);
 
-    // Add a tip about sequence if it wasn't provided
-    if (!sequence && !result.error) {
-      responseText +=
-        "\n\nTip: You can specify a 'sequence' parameter when creating rules to control their execution order. Lower sequence numbers run first.";
-    }
+    const allWarnings = [...condWarnings, ...actWarnings, ...excWarnings];
 
-    return {
-      content: [
-        {
-          type: 'text',
-          text: responseText,
-        },
-      ],
-    };
-  } catch (error) {
-    if (error.message === 'Authentication required') {
+    // Check for fatal warnings (folder not found = no valid action)
+    const folderNotFound = actWarnings.some((w) => w.includes('not found'));
+    if (folderNotFound && Object.keys(actions).length === 0) {
       return {
         content: [
           {
             type: 'text',
-            text: "Authentication required. Please use the 'authenticate' tool first.",
+            text: actWarnings.filter((w) => w.includes('not found')).join('\n'),
           },
         ],
       };
     }
 
-    return {
-      content: [
-        {
-          type: 'text',
-          text: `Error creating rule: ${error.message}`,
-        },
-      ],
-    };
-  }
-}
-
-/**
- * Create a new inbox rule
- * @param {string} accessToken - Access token
- * @param {object} ruleOptions - Rule creation options
- * @returns {Promise<object>} - Result object with status and message
- */
-async function createInboxRule(accessToken, ruleOptions) {
-  try {
-    const {
-      name,
-      fromAddresses,
-      containsSubject,
-      hasAttachments,
-      moveToFolder,
-      markAsRead,
-      isEnabled,
-      sequence,
-    } = ruleOptions;
-
-    // Get existing rules to determine sequence if not provided
+    // Determine sequence
     let ruleSequence = sequence;
     if (!ruleSequence) {
+      ruleSequence = 100;
       try {
-        // Default to 100 if we can't get existing rules
-        ruleSequence = 100;
-
-        // Get existing rules to find highest sequence
         const existingRules = await getInboxRules(accessToken);
         if (existingRules && existingRules.length > 0) {
-          // Find the highest sequence
           const highestSequence = Math.max(
             ...existingRules.map((r) => r.sequence || 0)
           );
-          // Set new rule sequence to be higher
           ruleSequence = Math.max(highestSequence + 1, 100);
-          console.error(
-            `Auto-generated sequence: ${ruleSequence} (based on highest existing: ${highestSequence})`
-          );
         }
-      } catch (sequenceError) {
-        console.error(
-          `Error determining rule sequence: ${sequenceError.message}`
-        );
-        // Fall back to default value
+      } catch (_sequenceError) {
         ruleSequence = 100;
       }
     }
-
-    console.error(`Using rule sequence: ${ruleSequence}`);
-
-    // Make sure sequence is a positive integer
     ruleSequence = Math.max(1, Math.floor(ruleSequence));
 
-    // Build rule object with sequence
+    // Build the rule object
     const rule = {
       displayName: name,
       isEnabled: isEnabled === true,
       sequence: ruleSequence,
-      conditions: {},
-      actions: {},
+      conditions,
+      actions,
     };
 
-    // Add conditions
-    if (fromAddresses) {
-      // Parse email addresses
-      const emailAddresses = fromAddresses
-        .split(',')
-        .map((email) => email.trim())
-        .filter((email) => email)
-        .map((email) => ({
-          emailAddress: {
-            address: email,
-          },
-        }));
-
-      if (emailAddresses.length > 0) {
-        rule.conditions.fromAddresses = emailAddresses;
-      }
-    }
-
-    if (containsSubject) {
-      rule.conditions.subjectContains = [containsSubject];
-    }
-
-    if (hasAttachments === true) {
-      rule.conditions.hasAttachment = true;
+    // Add exceptions if any were specified
+    if (Object.keys(exceptions).length > 0) {
+      rule.exceptions = exceptions;
     }
 
-    // Add actions
-    if (moveToFolder) {
-      // Get folder ID
-      try {
-        const folderId = await getFolderIdByName(accessToken, moveToFolder);
-        if (!folderId) {
-          return {
-            success: false,
-            message: `Target folder "${moveToFolder}" not found. Please specify a valid folder name.`,
-          };
-        }
-
-        rule.actions.moveToFolder = folderId;
-      } catch (folderError) {
-        console.error(
-          `Error resolving folder "${moveToFolder}": ${folderError.message}`
-        );
-        return {
-          success: false,
-          message: `Error resolving folder "${moveToFolder}": ${folderError.message}`,
-        };
+    // Dry-run: preview without creating
+    if (dryRun) {
+      const preview = formatRuleDryRunPreview(rule);
+      let text = `DRY RUN — Rule preview (not created):\n\n${preview}`;
+      if (allWarnings.length > 0) {
+        text += `\n\nWarnings:\n${allWarnings.map((w) => `- ${w}`).join('\n')}`;
       }
-    }
-
-    if (markAsRead === true) {
-      rule.actions.markAsRead = true;
+      return {
+        content: [{ type: 'text', text }],
+      };
     }
 
     // Create the rule
@@ -253,20 +150,47 @@ async function createInboxRule(accessToken, ruleOptions) {
     );
 
     if (response && response.id) {
+      let text = `Successfully created rule "${name}" with sequence ${ruleSequence}.`;
+      if (allWarnings.length > 0) {
+        text += `\n\nNotes:\n${allWarnings.map((w) => `- ${w}`).join('\n')}`;
+      }
+      if (!sequence) {
+        text +=
+          "\n\nTip: You can specify a 'sequence' parameter when creating rules to control their execution order. Lower sequence numbers run first.";
+      }
       return {
-        success: true,
-        message: `Successfully created rule "${name}" with sequence ${ruleSequence}.`,
-        ruleId: response.id,
+        content: [{ type: 'text', text }],
       };
-    } else {
+    }
+
+    return {
+      content: [
+        {
+          type: 'text',
+          text: "Failed to create rule. The server didn't return a rule ID.",
+        },
+      ],
+    };
+  } catch (error) {
+    if (error.message === 'Authentication required') {
       return {
-        success: false,
-        message: "Failed to create rule. The server didn't return a rule ID.",
+        content: [
+          {
+            type: 'text',
+            text: "Authentication required. Please use the 'auth' tool with action=authenticate first.",
+          },
+        ],
       };
     }
-  } catch (error) {
-    console.error(`Error creating rule: ${error.message}`);
-    throw error;
+
+    return {
+      content: [
+        {
+          type: 'text',
+          text: `Error creating rule: ${error.message}`,
+        },
+      ],
+    };
   }
 }