@littlebearapps/outlook-assistant 3.6.0 → 3.7.0

package/README.md

@@ -67,7 +67,7 @@ Outlook Assistant connects AI assistants to your Microsoft Outlook account throu
 | **Categories** | 3 | `manage-category` (CRUD), `apply-category`, `manage-focused-inbox` |
 | **Settings** | 1 | `mailbox-settings` (get/set auto-replies/set working hours) |
 | **Folder** | 1 | `folders` (list/create/move/stats/delete) |
-| **Rules** | 1 | `manage-rules` (list/create/reorder/delete) |
+| **Rules** | 1 | `manage-rules` (list/create/update/reorder/delete) |
 | **Advanced** | 2 | `access-shared-mailbox`, `find-meeting-rooms` |
 | **Auth** | 1 | `auth` (status/authenticate/about) |
 

package/advanced/index.js

@@ -96,7 +96,7 @@ async function handleAccessSharedMailbox(args) {
       };
     }
 
-    let output = [];
+    const output = [];
     output.push(`# Shared Mailbox: ${sharedMailbox}`);
     output.push(`**Folder**: ${mailFolder} | **Count**: ${messages.length}\n`);
 
@@ -241,7 +241,7 @@ async function handleSetMessageFlag(args) {
           timeZone: DEFAULT_TIMEZONE,
         };
       } else {
-        const startOfDay = dueDt.split('T')[0] + 'T09:00:00';
+        const startOfDay = `${dueDt.split('T')[0]}T09:00:00`;
         flag.startDateTime = {
           dateTime: startOfDay,
           timeZone: DEFAULT_TIMEZONE,
@@ -269,7 +269,7 @@ async function handleSetMessageFlag(args) {
       }
     }
 
-    let output = [];
+    const output = [];
 
     if (results.length > 0) {
       output.push(`Flagged ${results.length} message(s) for follow-up`);
@@ -377,7 +377,7 @@ async function handleClearMessageFlag(args) {
     }
 
     const action = markComplete ? 'marked complete' : 'cleared';
-    let output = [];
+    const output = [];
 
     if (results.length > 0) {
       output.push(`${results.length} message(s) ${action}`);
@@ -504,7 +504,7 @@ async function handleFindMeetingRooms(args) {
       };
     }
 
-    let output = [];
+    const output = [];
     output.push(`# Meeting Rooms (${rooms.length})\n`);
 
     if (verbosity === 'minimal') {

package/auth/device-code.js

@@ -92,7 +92,9 @@ async function pollForToken(clientId, deviceCode, interval, expiresIn) {
   let pollInterval = interval;
 
   while (Date.now() < deadline) {
-    await new Promise((resolve) => setTimeout(resolve, pollInterval * 1000));
+    await new Promise((resolve) => {
+      setTimeout(resolve, pollInterval * 1000);
+    });
 
     const postData = querystring.stringify({
       client_id: clientId,

package/auth/oauth-server.js

@@ -112,16 +112,16 @@ function setupOAuthRoutes(
     // Since this is a module, actual session handling is outside its direct scope,
     // but it's crucial for the consuming application to handle state verification.
 
-    const authorizationUrl =
-      `${authConfig.authEndpoint}?` +
-      querystring.stringify({
+    const authorizationUrl = `${authConfig.authEndpoint}?${querystring.stringify(
+      {
         client_id: authConfig.clientId,
         response_type: 'code',
         redirect_uri: authConfig.redirectUri,
         scope: authConfig.scopes.join(' '),
         response_mode: 'query',
         state: state,
-      });
+      }
+    )}`;
     res.redirect(authorizationUrl);
   });
 

package/auth/token-manager.js

@@ -88,8 +88,8 @@ function getAccessToken() {
  */
 function createTestTokens() {
   const testTokens = {
-    access_token: 'test_access_token_' + Date.now(),
-    refresh_token: 'test_refresh_token_' + Date.now(),
+    access_token: `test_access_token_${Date.now()}`,
+    refresh_token: `test_refresh_token_${Date.now()}`,
     expires_at: Date.now() + 3600 * 1000, // 1 hour
   };
 

package/calendar/list.js

@@ -18,7 +18,7 @@ async function handleListEvents(args) {
     const accessToken = await ensureAuthenticated();
 
     // Build API endpoint
-    let endpoint = 'me/events';
+    const endpoint = 'me/events';
 
     // Add query parameters
     const queryParams = {
@@ -54,10 +54,10 @@ async function handleListEvents(args) {
       .map((event, index) => {
         const startDt = event.start.dateTime.endsWith('Z')
           ? event.start.dateTime
-          : event.start.dateTime + 'Z';
+          : `${event.start.dateTime}Z`;
         const endDt = event.end.dateTime.endsWith('Z')
           ? event.end.dateTime
-          : event.end.dateTime + 'Z';
+          : `${event.end.dateTime}Z`;
         const startDate = new Date(startDt).toLocaleString('en-AU', {
           timeZone: tz,
           dateStyle: 'medium',

package/categories/index.js

@@ -106,7 +106,7 @@ async function handleListCategories(args) {
     }
 
     // Format output based on verbosity
-    let output = [];
+    const output = [];
     output.push(`# Master Categories (${categories.length})\n`);
 
     if (outputVerbosity === 'minimal') {
@@ -117,7 +117,7 @@ async function handleListCategories(args) {
       categories.forEach((cat) => {
         const colorName = COLOR_NAMES[cat.color] || cat.color;
         const idDisplay =
-          outputVerbosity === 'full' ? cat.id : cat.id.substring(0, 8) + '...';
+          outputVerbosity === 'full' ? cat.id : `${cat.id.substring(0, 8)}...`;
         output.push(`| ${cat.displayName} | ${colorName} | ${idDisplay} |`);
       });
     }
@@ -503,7 +503,7 @@ async function handleApplyCategory(args) {
       }
     }
 
-    let output = [];
+    const output = [];
 
     if (results.length > 0) {
       output.push(
@@ -591,7 +591,7 @@ async function handleGetFocusedInboxOverrides(args) {
       };
     }
 
-    let output = [];
+    const output = [];
     output.push(`# Focused Inbox Overrides (${overrides.length})\n`);
 
     // Group by classification

package/contacts/index.js

@@ -66,10 +66,12 @@ function formatContact(contact, verbosity = 'standard') {
     // Phone numbers
     const phones = [];
     if (contact.mobilePhone) phones.push(`Mobile: ${contact.mobilePhone}`);
-    if (contact.businessPhones?.length > 0)
+    if (contact.businessPhones?.length > 0) {
       phones.push(`Work: ${contact.businessPhones[0]}`);
-    if (contact.homePhones?.length > 0)
+    }
+    if (contact.homePhones?.length > 0) {
       phones.push(`Home: ${contact.homePhones[0]}`);
+    }
     if (phones.length > 0) {
       lines.push(`**Phone**: ${phones.join(' | ')}`);
     }
@@ -86,8 +88,9 @@ function formatContact(contact, verbosity = 'standard') {
   // Full verbosity extras
   if (verbosity === 'full') {
     if (contact.department) lines.push(`**Department**: ${contact.department}`);
-    if (contact.officeLocation)
+    if (contact.officeLocation) {
       lines.push(`**Office**: ${contact.officeLocation}`);
+    }
     if (contact.birthday) lines.push(`**Birthday**: ${contact.birthday}`);
 
     // Addresses
@@ -130,12 +133,7 @@ async function handleListContacts(args) {
   try {
     const accessToken = await ensureAuthenticated();
 
-    const fields =
-      verbosity === 'full'
-        ? CONTACT_FIELDS.full
-        : verbosity === 'minimal'
-          ? CONTACT_FIELDS.minimal
-          : CONTACT_FIELDS.list;
+    const fields = CONTACT_FIELDS[verbosity] || CONTACT_FIELDS.list;
     const endpoint = folder
       ? `me/contactFolders/${folder}/contacts`
       : 'me/contacts';
@@ -155,7 +153,7 @@ async function handleListContacts(args) {
     );
     const contacts = response.value || [];
 
-    let output = [];
+    const output = [];
     output.push(`# Contacts\n`);
     output.push(`**Total**: ${contacts.length}`);
     output.push('');
@@ -202,12 +200,7 @@ async function handleSearchContacts(args) {
   try {
     const accessToken = await ensureAuthenticated();
 
-    const fields =
-      verbosity === 'full'
-        ? CONTACT_FIELDS.full
-        : verbosity === 'minimal'
-          ? CONTACT_FIELDS.minimal
-          : CONTACT_FIELDS.list;
+    const fields = CONTACT_FIELDS[verbosity] || CONTACT_FIELDS.list;
     const endpoint = 'me/contacts';
 
     // Build filter for name — emailAddresses/any() lambda is unreliable on personal accounts
@@ -259,7 +252,7 @@ async function handleSearchContacts(args) {
     }
     const contacts = response.value || [];
 
-    let output = [];
+    const output = [];
     output.push(`# Contact Search Results\n`);
     output.push(`**Query**: "${query}"`);
     output.push(`**Found**: ${contacts.length}`);
@@ -559,7 +552,7 @@ async function handleSearchPeople(args) {
     );
     const people = response.value || [];
 
-    let output = [];
+    const output = [];
     output.push(`# People Search Results\n`);
     output.push(`**Query**: "${query}"`);
     output.push(`**Found**: ${people.length} (sorted by relevance)`);

package/email/conversations.js

@@ -175,12 +175,12 @@ async function handleListConversations(args) {
     });
 
     // Convert to array and sort by most recent
-    let conversationList = Array.from(conversations.values())
+    const conversationList = Array.from(conversations.values())
       .sort((a, b) => new Date(b.lastDate) - new Date(a.lastDate))
       .slice(0, count);
 
     // Format output
-    let output = [];
+    const output = [];
     output.push(`# Email Conversations\n`);
     output.push(`**Folder**: ${folder}`);
     output.push(`**Conversations**: ${conversationList.length}`);
@@ -314,7 +314,7 @@ async function handleGetConversation(args) {
     }
 
     // Format output
-    let output = [];
+    const output = [];
     output.push(`# Email Conversation\n`);
     output.push(`**Subject**: ${messages[0].subject || '(no subject)'}`);
     output.push(`**Messages**: ${messages.length}`);
@@ -463,8 +463,8 @@ async function handleExportConversation(args) {
     const date = formatDateForFilename(messages[0].receivedDateTime);
     const filenameBase = `${date}_${subject}_conversation`;
 
-    let exportedFiles = [];
-    let exportStats = { messages: messages.length, attachments: 0, bytes: 0 };
+    const exportedFiles = [];
+    const exportStats = { messages: messages.length, attachments: 0, bytes: 0 };
 
     switch (format) {
       case 'eml': {
@@ -497,8 +497,8 @@ async function handleExportConversation(args) {
         for (const msg of messages) {
           const mimeContent = await callGraphAPIRaw(accessToken, msg.id);
           const from = msg.from?.emailAddress?.address || 'unknown@unknown.com';
-          const date = new Date(msg.receivedDateTime);
-          const mboxDate = date.toUTCString().replace('GMT', '+0000');
+          const msgDate = new Date(msg.receivedDateTime);
+          const mboxDate = msgDate.toUTCString().replace('GMT', '+0000');
 
           // MBOX format: From line + MIME content + blank line
           mboxContent += `From ${from} ${mboxDate}\n`;
@@ -515,7 +515,7 @@ async function handleExportConversation(args) {
       case 'markdown': {
         // Export as threaded Markdown document
         const mdPath = path.join(resolvedDir, `${filenameBase}.md`);
-        let mdContent = [];
+        const mdContent = [];
 
         mdContent.push(
           `# Email Conversation: ${messages[0].subject || '(no subject)'}\n`
@@ -600,7 +600,7 @@ async function handleExportConversation(args) {
       case 'html': {
         // Export as HTML document
         const htmlPath = path.join(resolvedDir, `${filenameBase}.html`);
-        let htmlContent = [];
+        const htmlContent = [];
 
         htmlContent.push('<!DOCTYPE html>');
         htmlContent.push('<html><head>');
@@ -674,14 +674,16 @@ async function handleExportConversation(args) {
     }
 
     // Format result
-    const sizeFormatted =
-      exportStats.bytes < 1024
-        ? `${exportStats.bytes} B`
-        : exportStats.bytes < 1024 * 1024
-          ? `${(exportStats.bytes / 1024).toFixed(1)} KB`
-          : `${(exportStats.bytes / (1024 * 1024)).toFixed(2)} MB`;
-
-    let output = [];
+    let sizeFormatted;
+    if (exportStats.bytes < 1024) {
+      sizeFormatted = `${exportStats.bytes} B`;
+    } else if (exportStats.bytes < 1024 * 1024) {
+      sizeFormatted = `${(exportStats.bytes / 1024).toFixed(1)} KB`;
+    } else {
+      sizeFormatted = `${(exportStats.bytes / (1024 * 1024)).toFixed(2)} MB`;
+    }
+
+    const output = [];
     output.push(`# Conversation Exported\n`);
     output.push(`**Subject**: ${messages[0].subject || '(no subject)'}`);
     output.push(`**Format**: ${format.toUpperCase()}`);

package/email/delta.js

@@ -88,7 +88,7 @@ async function handleListEmailsDelta(args) {
 
     // Build response
     const isInitialSync = !deltaToken;
-    const hasMoreChanges = !!nextLink;
+    const hasMoreChanges = Boolean(nextLink);
     const newDeltaToken = deltaLink || nextLink;
 
     // Format output based on verbosity

package/email/draft.js

@@ -83,8 +83,9 @@ function formatDraftResponse(draft, actionLabel) {
   text += `**ID**: \`${draft.id}\`\n`;
   if (draft.subject) text += `**Subject**: ${draft.subject}\n`;
   if (to) text += `**To**: ${to}\n`;
-  if (draft.lastModifiedDateTime)
+  if (draft.lastModifiedDateTime) {
     text += `**Modified**: ${draft.lastModifiedDateTime}\n`;
+  }
   if (draft.hasAttachments) text += `**Attachments**: yes\n`;
 
   return {
@@ -169,13 +170,10 @@ async function handleCreateDraft(args) {
         content: [
           {
             type: 'text',
-            text:
-              tipsText +
-              '\n\n---\n\n' +
-              preview.content[0].text.replace(
-                'Email NOT sent',
-                'Draft NOT saved'
-              ),
+            text: `${tipsText}\n\n---\n\n${preview.content[0].text.replace(
+              'Email NOT sent',
+              'Draft NOT saved'
+            )}`,
           },
         ],
         _meta: { mailTips: tipsResult._meta },

package/email/folder-utils.js

@@ -54,7 +54,7 @@ const WELL_KNOWN_FOLDERS = {
 async function resolveFolderPath(accessToken, folderName) {
   // Default to inbox if no folder specified
   if (!folderName) {
-    return WELL_KNOWN_FOLDERS['inbox'];
+    return WELL_KNOWN_FOLDERS.inbox;
   }
 
   // Check if it's a well-known folder (case-insensitive)

package/email/headers.js

@@ -49,7 +49,7 @@ function formatHeaders(headers, options = {}) {
     return '*No headers available*';
   }
 
-  let output = [];
+  const output = [];
 
   if (groupByType) {
     // Group headers by category
@@ -65,7 +65,7 @@ function formatHeaders(headers, options = {}) {
     headers.forEach((h) => {
       const name = h.name;
       if (['Message-ID', 'In-Reply-To', 'References'].includes(name)) {
-        groups['Threading'].push(h);
+        groups.Threading.push(h);
       } else if (
         [
           'Authentication-Results',
@@ -74,9 +74,9 @@ function formatHeaders(headers, options = {}) {
           'Received-SPF',
         ].includes(name)
       ) {
-        groups['Authentication'].push(h);
+        groups.Authentication.push(h);
       } else if (name === 'Received' || name.startsWith('X-MS-Exchange')) {
-        groups['Delivery'].push(h);
+        groups.Delivery.push(h);
       } else if (
         name.includes('Antispam') ||
         name.includes('SCL') ||
@@ -88,9 +88,9 @@ function formatHeaders(headers, options = {}) {
           name
         )
       ) {
-        groups['Content'].push(h);
+        groups.Content.push(h);
       } else {
-        groups['Other'].push(h);
+        groups.Other.push(h);
       }
     });
 
@@ -100,7 +100,7 @@ function formatHeaders(headers, options = {}) {
         groupHeaders.forEach((h) => {
           // Truncate very long values
           const value =
-            h.value.length > 500 ? h.value.substring(0, 500) + '...' : h.value;
+            h.value.length > 500 ? `${h.value.substring(0, 500)}...` : h.value;
           output.push(`**${h.name}**: \`${value}\``);
         });
       }
@@ -123,7 +123,7 @@ function formatHeaders(headers, options = {}) {
       output.push('## Key Headers\n');
       importantHeaders.forEach((h) => {
         const value =
-          h.value.length > 300 ? h.value.substring(0, 300) + '...' : h.value;
+          h.value.length > 300 ? `${h.value.substring(0, 300)}...` : h.value;
         output.push(`**${h.name}**:`);
         output.push('```');
         output.push(value);
@@ -135,7 +135,7 @@ function formatHeaders(headers, options = {}) {
       output.push('\n## All Other Headers\n');
       otherHeaders.forEach((h) => {
         const value =
-          h.value.length > 200 ? h.value.substring(0, 200) + '...' : h.value;
+          h.value.length > 200 ? `${h.value.substring(0, 200)}...` : h.value;
         output.push(`- **${h.name}**: \`${value}\``);
       });
     }
@@ -249,7 +249,7 @@ async function handleGetEmailHeaders(args) {
       }
 
       // Build formatted output
-      let output = [];
+      const output = [];
       output.push(`# Email Headers\n`);
       output.push(`**Subject**: ${email.subject || '(no subject)'}`);
       output.push(

package/email/list.js

@@ -89,7 +89,7 @@ async function handleListEmails(args) {
     const meta = {
       returned: response.value.length,
       totalAvailable: response['@odata.count'] || null,
-      hasMore: !!response['@odata.nextLink'],
+      hasMore: Boolean(response['@odata.nextLink']),
       verbosity: verbosity,
     };
 

package/email/mime.js

@@ -30,7 +30,7 @@ function parseMimeHeaders(mimeContent) {
   lines.forEach((line) => {
     if (line.startsWith(' ') || line.startsWith('\t')) {
       // Continuation of previous header
-      currentValue += ' ' + line.trim();
+      currentValue += ` ${line.trim()}`;
     } else {
       // Save previous header
       if (currentHeader) {
@@ -57,6 +57,12 @@ function parseMimeHeaders(mimeContent) {
   };
 }
 
+function formatBytes(bytes) {
+  if (bytes < 1024) return `${bytes} B`;
+  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
+  return `${(bytes / (1024 * 1024)).toFixed(2)} MB`;
+}
+
 /**
  * Get MIME content size info
  * @param {string} mimeContent - Raw MIME content
@@ -68,12 +74,7 @@ function getMimeStats(mimeContent) {
 
   return {
     bytes,
-    formattedSize:
-      bytes < 1024
-        ? `${bytes} B`
-        : bytes < 1024 * 1024
-          ? `${(bytes / 1024).toFixed(1)} KB`
-          : `${(bytes / (1024 * 1024)).toFixed(2)} MB`,
+    formattedSize: formatBytes(bytes),
     lines,
   };
 }
@@ -184,17 +185,17 @@ async function handleGetMimeContent(args) {
       }
 
       // Build response
-      let output = [];
+      const output = [];
       output.push(`# MIME Content${headersOnly ? ' (Headers Only)' : ''}\n`);
       output.push(`**Size**: ${stats.formattedSize}`);
       output.push(`**Lines**: ${stats.lines}`);
 
       // Show key headers
-      if (parsed.headers['Subject']) {
-        output.push(`**Subject**: ${parsed.headers['Subject']}`);
+      if (parsed.headers.Subject) {
+        output.push(`**Subject**: ${parsed.headers.Subject}`);
       }
-      if (parsed.headers['From']) {
-        output.push(`**From**: ${parsed.headers['From']}`);
+      if (parsed.headers.From) {
+        output.push(`**From**: ${parsed.headers.From}`);
       }
       if (parsed.headers['Content-Type']) {
         output.push(

package/email/search.js

@@ -166,7 +166,7 @@ async function progressiveSearch(
   ) {
     // Skip directly to boolean-only filter (step 3) — combined search is redundant
     console.error('Only boolean filters provided, skipping combined search');
-  } else
+  } else {
     try {
       const params = buildSearchParams(
         searchTerms,
@@ -193,6 +193,7 @@ async function progressiveSearch(
     } catch (error) {
       console.error(`Combined search failed: ${error.message}`);
     }
+  }
 
   // 2. Try each search term individually, starting with most specific
   const searchPriority = ['from', 'to', 'subject', 'query'];
@@ -545,7 +546,7 @@ function formatSearchResults(response, folder, verbosity) {
   const meta = {
     returned: response.value.length,
     totalAvailable: response['@odata.count'] || null,
-    hasMore: !!response['@odata.nextLink'],
+    hasMore: Boolean(response['@odata.nextLink']),
     verbosity: verbosity,
   };
 

package/email/send.js

@@ -138,7 +138,7 @@ async function handleSendEmail(args) {
           content: [
             {
               type: 'text',
-              text: tipsText + '\n\n---\n\n' + preview.content[0].text,
+              text: `${tipsText}\n\n---\n\n${preview.content[0].text}`,
             },
           ],
           _meta: { mailTips: tipsResult._meta },

package/folder/list.js

@@ -272,7 +272,7 @@ function formatFolderHierarchy(folders, includeItemCounts) {
     // Add children
     const childLines = folder.children
       .map((childId) => formatSubtree(childId, level + 1))
-      .filter((line) => line.length > 0)
+      .filter((childLine) => childLine.length > 0)
       .join('\n');
 
     return childLines.length > 0 ? `${line}\n${childLines}` : line;

package/llms.txt

@@ -33,6 +33,7 @@ Built by [Little Bear Apps](https://littlebearapps.com).
 
 - **MCP safety annotations** on all 22 tools — AI clients auto-approve reads and prompt for destructive operations
 - **Send-email protections**: pre-send mail tips, dry-run preview, session rate limiting, recipient allowlist
+- **Rule protections**: dry-run preview on create/update, rate limiting, recipient allowlist on forward/redirect, no permanent-delete action
 - **Token-optimised**: 22 tools instead of 55 saves ~11,000 tokens per turn (~64% reduction), improving AI accuracy and context efficiency
 - These safeguards reduce risk but are not foolproof — always review actions before approving
 
@@ -62,7 +63,7 @@ Requires an Azure app registration with Microsoft Graph delegated permissions. S
 - **Calendar (3 tools)**: `list-events`, `create-event`, `manage-event`
 - **Contacts (2 tools)**: `manage-contact`, `search-people`
 - **Folders (1 tool)**: `folders` — list, create, move, stats
-- **Rules (1 tool)**: `manage-rules` — list, create, reorder
+- **Rules (1 tool)**: `manage-rules` — list, create, update, reorder, delete
 - **Categories (3 tools)**: `manage-category`, `apply-category`, `manage-focused-inbox`
 - **Settings (1 tool)**: `mailbox-settings` — get, set auto-replies, set working hours
 - **Advanced (2 tools)**: `access-shared-mailbox`, `find-meeting-rooms`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@littlebearapps/outlook-assistant",
-  "version": "3.6.0",
+  "version": "3.7.0",
   "mcpName": "io.github.littlebearapps/outlook-assistant",
   "description": "Outlook Assistant — MCP server with 22 tools for email, calendar, contacts, and settings via Microsoft Graph API",
   "main": "index.js",