@mcp-z/mcp-outlook 1.0.0

package/dist/esm/setup/config.js

@@ -0,0 +1,180 @@
+import { parseDcrConfig, parseConfig as parseOAuthConfig } from '@mcp-z/oauth-microsoft';
+import { parseConfig as parseTransportConfig } from '@mcp-z/server';
+import * as fs from 'fs';
+import moduleRoot from 'module-root-sync';
+import { homedir } from 'os';
+import * as path from 'path';
+import * as url from 'url';
+import { parseArgs } from 'util';
+import { MS_SCOPE } from '../constants.js';
+const pkg = JSON.parse(fs.readFileSync(path.join(moduleRoot(url.fileURLToPath(import.meta.url)), 'package.json'), 'utf-8'));
+const HELP_TEXT = `
+Usage: mcp-outlook [options]
+
+MCP server for Outlook/Microsoft email management with OAuth authentication.
+
+Options:
+  --version              Show version number
+  --help                 Show this help message
+  --auth=<mode>          Authentication mode (default: loopback-oauth)
+                         Modes: loopback-oauth, device-code, dcr
+  --headless             Disable browser auto-open, return auth URL instead
+  --redirect-uri=<uri>   OAuth redirect URI (default: ephemeral loopback)
+  --tenant-id=<id>       Microsoft tenant ID (overrides MS_TENANT_ID env var)
+  --dcr-mode=<mode>      DCR mode (self-hosted or external, default: self-hosted)
+  --dcr-verify-url=<url> External verification endpoint (required for external mode)
+  --dcr-store-uri=<uri>  DCR client storage URI (required for self-hosted mode)
+  --port=<port>          Enable HTTP transport on specified port
+  --stdio                Enable stdio transport (default if no port)
+  --log-level=<level>    Logging level (default: info)
+  --storage-dir=<path>   Directory for CSV file storage (default: .mcp-z/files)
+  --base-url=<url>       Base URL for HTTP file serving (default: http://localhost for HTTP transports)
+
+Environment Variables:
+  MS_CLIENT_ID           OAuth client ID (REQUIRED)
+  MS_TENANT_ID           Microsoft tenant ID (REQUIRED)
+  MS_CLIENT_SECRET       OAuth client secret (optional)
+  AUTH_MODE              Default authentication mode (optional)
+  HEADLESS               Disable browser auto-open (optional)
+  DCR_MODE               DCR mode (optional, same format as --dcr-mode)
+  DCR_VERIFY_URL         External verification URL (optional, same as --dcr-verify-url)
+  DCR_STORE_URI          DCR storage URI (optional, same as --dcr-store-uri)
+  PORT                   Default HTTP port (optional)
+  LOG_LEVEL              Default logging level (optional)
+  STORAGE_DIR            Directory for CSV file storage (optional)
+  BASE_URL               Base URL for HTTP file serving (optional)
+
+OAuth Scopes:
+  openid profile offline_access https://graph.microsoft.com/User.Read https://graph.microsoft.com/Mail.ReadWrite https://graph.microsoft.com/Mail.Send https://graph.microsoft.com/MailboxSettings.ReadWrite
+
+Examples:
+  mcp-outlook                           # Use default settings
+  mcp-outlook --auth=device-code        # Use device code auth
+  mcp-outlook --port=3000               # HTTP transport on port 3000
+  mcp-outlook --tenant-id=xxx           # Set tenant ID
+  mcp-outlook --storage-dir=./emails    # Custom storage directory
+  MS_CLIENT_ID=xxx mcp-outlook          # Set client ID via env var
+`.trim();
+/**
+ * Handle --version and --help flags before config parsing.
+ * These should work without requiring any configuration.
+ */ export function handleVersionHelp(args) {
+    const { values } = parseArgs({
+        args,
+        options: {
+            version: {
+                type: 'boolean'
+            },
+            help: {
+                type: 'boolean'
+            }
+        },
+        strict: false
+    });
+    if (values.version) return {
+        handled: true,
+        output: pkg.version
+    };
+    if (values.help) return {
+        handled: true,
+        output: HELP_TEXT
+    };
+    return {
+        handled: false
+    };
+}
+/**
+ * Parse Outlook server configuration from CLI arguments and environment.
+ *
+ * CLI Arguments (all optional):
+ * - --auth=<mode>          Authentication mode (default: loopback-oauth)
+ *                          Modes: loopback-oauth, device-code, dcr
+ * - --headless             Disable browser auto-open, return auth URL instead
+ * - --redirect-uri=<uri>   OAuth redirect URI (default: ephemeral loopback)
+ * - --tenant-id=<id>       Microsoft tenant ID (overrides MS_TENANT_ID env var)
+ * - --dcr-mode=<mode>      DCR mode (self-hosted or external, default: self-hosted)
+ * - --dcr-verify-url=<url> External verification endpoint (required for external mode)
+ * - --dcr-store-uri=<uri>  DCR client storage URI (required for self-hosted mode)
+ * - --port=<port>          Enable HTTP transport on specified port
+ * - --stdio                Enable stdio transport (default if no port)
+ * - --log-level=<level>    Logging level (default: info)
+ * - --storage-dir=<path>   Directory for CSV file storage (default: .mcp-z/files)
+ * - --base-url=<url>       Base URL for HTTP file serving (default: http://localhost for HTTP transports)
+ *
+ * Environment Variables:
+ * - MS_CLIENT_ID           OAuth client ID (REQUIRED)
+ * - MS_TENANT_ID           Microsoft tenant ID (REQUIRED)
+ * - MS_CLIENT_SECRET       OAuth client secret (optional)
+ * - AUTH_MODE              Default authentication mode (optional)
+ * - HEADLESS               Disable browser auto-open (optional)
+ * - DCR_MODE               DCR mode (optional, same format as --dcr-mode)
+ * - DCR_VERIFY_URL         External verification URL (optional, same as --dcr-verify-url)
+ * - DCR_STORE_URI          DCR storage URI (optional, same as --dcr-store-uri)
+ * - PORT                   Default HTTP port (optional)
+ * - LOG_LEVEL              Default logging level (optional)
+ * - STORAGE_DIR            Directory for CSV file storage (optional)
+ * - BASE_URL               Base URL for HTTP file serving (optional)
+ *
+ * OAuth Scopes (from constants.ts):
+ * openid profile offline_access https://graph.microsoft.com/User.Read https://graph.microsoft.com/Mail.ReadWrite https://graph.microsoft.com/Mail.Send https://graph.microsoft.com/MailboxSettings.ReadWrite
+ */ export function parseConfig(args, env) {
+    var _ref, _ref1, _ref2;
+    const transportConfig = parseTransportConfig(args, env);
+    const oauthConfig = parseOAuthConfig(args, env);
+    // Parse DCR configuration if DCR mode is enabled
+    const dcrConfig = oauthConfig.auth === 'dcr' ? parseDcrConfig(args, env, MS_SCOPE) : undefined;
+    // Parse application-level config (LOG_LEVEL, storage options)
+    const { values } = parseArgs({
+        args,
+        options: {
+            'log-level': {
+                type: 'string'
+            },
+            'storage-dir': {
+                type: 'string'
+            },
+            'base-url': {
+                type: 'string'
+            }
+        },
+        strict: false,
+        allowPositionals: true
+    });
+    const name = pkg.name.replace(/^@[^/]+\//, '');
+    // Parse repository URL from package.json, stripping git+ prefix and .git suffix
+    const rawRepoUrl = typeof pkg.repository === 'object' ? pkg.repository.url : pkg.repository;
+    const repositoryUrl = (_ref = rawRepoUrl === null || rawRepoUrl === void 0 ? void 0 : rawRepoUrl.replace(/^git\+/, '').replace(/\.git$/, '')) !== null && _ref !== void 0 ? _ref : `https://github.com/mcp-z/${name}`;
+    const rootDir = process.cwd() === '/' ? homedir() : process.cwd();
+    const baseDir = path.join(rootDir, '.mcp-z');
+    const cliLogLevel = typeof values['log-level'] === 'string' ? values['log-level'] : undefined;
+    const envLogLevel = env.LOG_LEVEL;
+    const logLevel = (_ref1 = cliLogLevel !== null && cliLogLevel !== void 0 ? cliLogLevel : envLogLevel) !== null && _ref1 !== void 0 ? _ref1 : 'info';
+    // Parse file storage configuration
+    const cliStorageDir = typeof values['storage-dir'] === 'string' ? values['storage-dir'] : undefined;
+    const envStorageDir = env.STORAGE_DIR;
+    let storageDir = (_ref2 = cliStorageDir !== null && cliStorageDir !== void 0 ? cliStorageDir : envStorageDir) !== null && _ref2 !== void 0 ? _ref2 : path.join(baseDir, name, 'files');
+    if (storageDir.startsWith('~')) storageDir = storageDir.replace(/^~/, homedir());
+    const cliBaseUrl = typeof values['base-url'] === 'string' ? values['base-url'] : undefined;
+    const envBaseUrl = env.BASE_URL;
+    const baseUrl = cliBaseUrl !== null && cliBaseUrl !== void 0 ? cliBaseUrl : envBaseUrl;
+    // Combine configs
+    const result = {
+        ...oauthConfig,
+        transport: transportConfig.transport,
+        logLevel,
+        baseDir,
+        name,
+        version: pkg.version,
+        repositoryUrl,
+        storageDir: path.resolve(storageDir)
+    };
+    if (baseUrl !== undefined) result.baseUrl = baseUrl;
+    if (dcrConfig !== undefined) result.dcrConfig = dcrConfig;
+    return result;
+}
+/**
+ * Build production configuration from process globals.
+ * Entry point for production server.
+ */ export function createConfig() {
+    return parseConfig(process.argv, process.env);
+}

package/dist/esm/setup/config.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/kevin/Dev/Projects/ai/mcp-z/servers/mcp-outlook/src/setup/config.ts"],"sourcesContent":["import { parseDcrConfig, parseConfig as parseOAuthConfig } from '@mcp-z/oauth-microsoft';\nimport { parseConfig as parseTransportConfig } from '@mcp-z/server';\nimport * as fs from 'fs';\nimport moduleRoot from 'module-root-sync';\nimport { homedir } from 'os';\nimport * as path from 'path';\nimport * as url from 'url';\nimport { parseArgs } from 'util';\nimport { MS_SCOPE } from '../constants.ts';\nimport type { ServerConfig } from '../types.js';\n\nconst pkg = JSON.parse(fs.readFileSync(path.join(moduleRoot(url.fileURLToPath(import.meta.url)), 'package.json'), 'utf-8'));\n\nconst HELP_TEXT = `\nUsage: mcp-outlook [options]\n\nMCP server for Outlook/Microsoft email management with OAuth authentication.\n\nOptions:\n  --version              Show version number\n  --help                 Show this help message\n  --auth=<mode>          Authentication mode (default: loopback-oauth)\n                         Modes: loopback-oauth, device-code, dcr\n  --headless             Disable browser auto-open, return auth URL instead\n  --redirect-uri=<uri>   OAuth redirect URI (default: ephemeral loopback)\n  --tenant-id=<id>       Microsoft tenant ID (overrides MS_TENANT_ID env var)\n  --dcr-mode=<mode>      DCR mode (self-hosted or external, default: self-hosted)\n  --dcr-verify-url=<url> External verification endpoint (required for external mode)\n  --dcr-store-uri=<uri>  DCR client storage URI (required for self-hosted mode)\n  --port=<port>          Enable HTTP transport on specified port\n  --stdio                Enable stdio transport (default if no port)\n  --log-level=<level>    Logging level (default: info)\n  --storage-dir=<path>   Directory for CSV file storage (default: .mcp-z/files)\n  --base-url=<url>       Base URL for HTTP file serving (default: http://localhost for HTTP transports)\n\nEnvironment Variables:\n  MS_CLIENT_ID           OAuth client ID (REQUIRED)\n  MS_TENANT_ID           Microsoft tenant ID (REQUIRED)\n  MS_CLIENT_SECRET       OAuth client secret (optional)\n  AUTH_MODE              Default authentication mode (optional)\n  HEADLESS               Disable browser auto-open (optional)\n  DCR_MODE               DCR mode (optional, same format as --dcr-mode)\n  DCR_VERIFY_URL         External verification URL (optional, same as --dcr-verify-url)\n  DCR_STORE_URI          DCR storage URI (optional, same as --dcr-store-uri)\n  PORT                   Default HTTP port (optional)\n  LOG_LEVEL              Default logging level (optional)\n  STORAGE_DIR            Directory for CSV file storage (optional)\n  BASE_URL               Base URL for HTTP file serving (optional)\n\nOAuth Scopes:\n  openid profile offline_access https://graph.microsoft.com/User.Read https://graph.microsoft.com/Mail.ReadWrite https://graph.microsoft.com/Mail.Send https://graph.microsoft.com/MailboxSettings.ReadWrite\n\nExamples:\n  mcp-outlook                           # Use default settings\n  mcp-outlook --auth=device-code        # Use device code auth\n  mcp-outlook --port=3000               # HTTP transport on port 3000\n  mcp-outlook --tenant-id=xxx           # Set tenant ID\n  mcp-outlook --storage-dir=./emails    # Custom storage directory\n  MS_CLIENT_ID=xxx mcp-outlook          # Set client ID via env var\n`.trim();\n\n/**\n * Handle --version and --help flags before config parsing.\n * These should work without requiring any configuration.\n */\nexport function handleVersionHelp(args: string[]): { handled: boolean; output?: string } {\n  const { values } = parseArgs({\n    args,\n    options: {\n      version: { type: 'boolean' },\n      help: { type: 'boolean' },\n    },\n    strict: false,\n  });\n\n  if (values.version) return { handled: true, output: pkg.version };\n  if (values.help) return { handled: true, output: HELP_TEXT };\n  return { handled: false };\n}\n\n/**\n * Parse Outlook server configuration from CLI arguments and environment.\n *\n * CLI Arguments (all optional):\n * - --auth=<mode>          Authentication mode (default: loopback-oauth)\n *                          Modes: loopback-oauth, device-code, dcr\n * - --headless             Disable browser auto-open, return auth URL instead\n * - --redirect-uri=<uri>   OAuth redirect URI (default: ephemeral loopback)\n * - --tenant-id=<id>       Microsoft tenant ID (overrides MS_TENANT_ID env var)\n * - --dcr-mode=<mode>      DCR mode (self-hosted or external, default: self-hosted)\n * - --dcr-verify-url=<url> External verification endpoint (required for external mode)\n * - --dcr-store-uri=<uri>  DCR client storage URI (required for self-hosted mode)\n * - --port=<port>          Enable HTTP transport on specified port\n * - --stdio                Enable stdio transport (default if no port)\n * - --log-level=<level>    Logging level (default: info)\n * - --storage-dir=<path>   Directory for CSV file storage (default: .mcp-z/files)\n * - --base-url=<url>       Base URL for HTTP file serving (default: http://localhost for HTTP transports)\n *\n * Environment Variables:\n * - MS_CLIENT_ID           OAuth client ID (REQUIRED)\n * - MS_TENANT_ID           Microsoft tenant ID (REQUIRED)\n * - MS_CLIENT_SECRET       OAuth client secret (optional)\n * - AUTH_MODE              Default authentication mode (optional)\n * - HEADLESS               Disable browser auto-open (optional)\n * - DCR_MODE               DCR mode (optional, same format as --dcr-mode)\n * - DCR_VERIFY_URL         External verification URL (optional, same as --dcr-verify-url)\n * - DCR_STORE_URI          DCR storage URI (optional, same as --dcr-store-uri)\n * - PORT                   Default HTTP port (optional)\n * - LOG_LEVEL              Default logging level (optional)\n * - STORAGE_DIR            Directory for CSV file storage (optional)\n * - BASE_URL               Base URL for HTTP file serving (optional)\n *\n * OAuth Scopes (from constants.ts):\n * openid profile offline_access https://graph.microsoft.com/User.Read https://graph.microsoft.com/Mail.ReadWrite https://graph.microsoft.com/Mail.Send https://graph.microsoft.com/MailboxSettings.ReadWrite\n */\nexport function parseConfig(args: string[], env: Record<string, string | undefined>): ServerConfig {\n  const transportConfig = parseTransportConfig(args, env);\n  const oauthConfig = parseOAuthConfig(args, env);\n\n  // Parse DCR configuration if DCR mode is enabled\n  const dcrConfig = oauthConfig.auth === 'dcr' ? parseDcrConfig(args, env, MS_SCOPE) : undefined;\n\n  // Parse application-level config (LOG_LEVEL, storage options)\n  const { values } = parseArgs({\n    args,\n    options: {\n      'log-level': { type: 'string' },\n      'storage-dir': { type: 'string' },\n      'base-url': { type: 'string' },\n    },\n    strict: false, // Allow other arguments\n    allowPositionals: true,\n  });\n\n  const name = pkg.name.replace(/^@[^/]+\\//, '');\n  // Parse repository URL from package.json, stripping git+ prefix and .git suffix\n  const rawRepoUrl = typeof pkg.repository === 'object' ? pkg.repository.url : pkg.repository;\n  const repositoryUrl = rawRepoUrl?.replace(/^git\\+/, '').replace(/\\.git$/, '') ?? `https://github.com/mcp-z/${name}`;\n  const rootDir = process.cwd() === '/' ? homedir() : process.cwd();\n  const baseDir = path.join(rootDir, '.mcp-z');\n  const cliLogLevel = typeof values['log-level'] === 'string' ? values['log-level'] : undefined;\n  const envLogLevel = env.LOG_LEVEL;\n  const logLevel = cliLogLevel ?? envLogLevel ?? 'info';\n\n  // Parse file storage configuration\n  const cliStorageDir = typeof values['storage-dir'] === 'string' ? values['storage-dir'] : undefined;\n  const envStorageDir = env.STORAGE_DIR;\n  let storageDir = cliStorageDir ?? envStorageDir ?? path.join(baseDir, name, 'files');\n  if (storageDir.startsWith('~')) storageDir = storageDir.replace(/^~/, homedir());\n\n  const cliBaseUrl = typeof values['base-url'] === 'string' ? values['base-url'] : undefined;\n  const envBaseUrl = env.BASE_URL;\n  const baseUrl = cliBaseUrl ?? envBaseUrl;\n\n  // Combine configs\n  const result: ServerConfig = {\n    ...oauthConfig, // Includes clientId, auth, headless, redirectUri\n    transport: transportConfig.transport,\n    logLevel,\n    baseDir,\n    name,\n    version: pkg.version,\n    repositoryUrl,\n    storageDir: path.resolve(storageDir),\n  };\n  if (baseUrl !== undefined) result.baseUrl = baseUrl;\n  if (dcrConfig !== undefined) result.dcrConfig = dcrConfig;\n  return result;\n}\n\n/**\n * Build production configuration from process globals.\n * Entry point for production server.\n */\nexport function createConfig(): ServerConfig {\n  return parseConfig(process.argv, process.env);\n}\n"],"names":["parseDcrConfig","parseConfig","parseOAuthConfig","parseTransportConfig","fs","moduleRoot","homedir","path","url","parseArgs","MS_SCOPE","pkg","JSON","parse","readFileSync","join","fileURLToPath","HELP_TEXT","trim","handleVersionHelp","args","values","options","version","type","help","strict","handled","output","env","cliLogLevel","cliStorageDir","transportConfig","oauthConfig","dcrConfig","auth","undefined","allowPositionals","name","replace","rawRepoUrl","repository","repositoryUrl","rootDir","process","cwd","baseDir","envLogLevel","LOG_LEVEL","logLevel","envStorageDir","STORAGE_DIR","storageDir","startsWith","cliBaseUrl","envBaseUrl","BASE_URL","baseUrl","result","transport","resolve","createConfig","argv"],"mappings":"AAAA,SAASA,cAAc,EAAEC,eAAeC,gBAAgB,QAAQ,yBAAyB;AACzF,SAASD,eAAeE,oBAAoB,QAAQ,gBAAgB;AACpE,YAAYC,QAAQ,KAAK;AACzB,OAAOC,gBAAgB,mBAAmB;AAC1C,SAASC,OAAO,QAAQ,KAAK;AAC7B,YAAYC,UAAU,OAAO;AAC7B,YAAYC,SAAS,MAAM;AAC3B,SAASC,SAAS,QAAQ,OAAO;AACjC,SAASC,QAAQ,QAAQ,kBAAkB;AAG3C,MAAMC,MAAMC,KAAKC,KAAK,CAACT,GAAGU,YAAY,CAACP,KAAKQ,IAAI,CAACV,WAAWG,IAAIQ,aAAa,CAAC,YAAYR,GAAG,IAAI,iBAAiB;AAElH,MAAMS,YAAY,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8CnB,CAAC,CAACC,IAAI;AAEN;;;CAGC,GACD,OAAO,SAASC,kBAAkBC,IAAc;IAC9C,MAAM,EAAEC,MAAM,EAAE,GAAGZ,UAAU;QAC3BW;QACAE,SAAS;YACPC,SAAS;gBAAEC,MAAM;YAAU;YAC3BC,MAAM;gBAAED,MAAM;YAAU;QAC1B;QACAE,QAAQ;IACV;IAEA,IAAIL,OAAOE,OAAO,EAAE,OAAO;QAAEI,SAAS;QAAMC,QAAQjB,IAAIY,OAAO;IAAC;IAChE,IAAIF,OAAOI,IAAI,EAAE,OAAO;QAAEE,SAAS;QAAMC,QAAQX;IAAU;IAC3D,OAAO;QAAEU,SAAS;IAAM;AAC1B;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCC,GACD,OAAO,SAAS1B,YAAYmB,IAAc,EAAES,GAAuC;cA2BhEC,OAKAC;IA/BjB,MAAMC,kBAAkB7B,qBAAqBiB,MAAMS;IACnD,MAAMI,cAAc/B,iBAAiBkB,MAAMS;IAE3C,iDAAiD;IACjD,MAAMK,YAAYD,YAAYE,IAAI,KAAK,QAAQnC,eAAeoB,MAAMS,KAAKnB,YAAY0B;IAErF,8DAA8D;IAC9D,MAAM,EAAEf,MAAM,EAAE,GAAGZ,UAAU;QAC3BW;QACAE,SAAS;YACP,aAAa;gBAAEE,MAAM;YAAS;YAC9B,eAAe;gBAAEA,MAAM;YAAS;YAChC,YAAY;gBAAEA,MAAM;YAAS;QAC/B;QACAE,QAAQ;QACRW,kBAAkB;IACpB;IAEA,MAAMC,OAAO3B,IAAI2B,IAAI,CAACC,OAAO,CAAC,aAAa;IAC3C,gFAAgF;IAChF,MAAMC,aAAa,OAAO7B,IAAI8B,UAAU,KAAK,WAAW9B,IAAI8B,UAAU,CAACjC,GAAG,GAAGG,IAAI8B,UAAU;IAC3F,MAAMC,wBAAgBF,uBAAAA,iCAAAA,WAAYD,OAAO,CAAC,UAAU,IAAIA,OAAO,CAAC,UAAU,0CAAO,CAAC,yBAAyB,EAAED,MAAM;IACnH,MAAMK,UAAUC,QAAQC,GAAG,OAAO,MAAMvC,YAAYsC,QAAQC,GAAG;IAC/D,MAAMC,UAAUvC,KAAKQ,IAAI,CAAC4B,SAAS;IACnC,MAAMb,cAAc,OAAOT,MAAM,CAAC,YAAY,KAAK,WAAWA,MAAM,CAAC,YAAY,GAAGe;IACpF,MAAMW,cAAclB,IAAImB,SAAS;IACjC,MAAMC,YAAWnB,QAAAA,wBAAAA,yBAAAA,cAAeiB,yBAAfjB,mBAAAA,QAA8B;IAE/C,mCAAmC;IACnC,MAAMC,gBAAgB,OAAOV,MAAM,CAAC,cAAc,KAAK,WAAWA,MAAM,CAAC,cAAc,GAAGe;IAC1F,MAAMc,gBAAgBrB,IAAIsB,WAAW;IACrC,IAAIC,cAAarB,QAAAA,0BAAAA,2BAAAA,gBAAiBmB,2BAAjBnB,mBAAAA,QAAkCxB,KAAKQ,IAAI,CAAC+B,SAASR,MAAM;IAC5E,IAAIc,WAAWC,UAAU,CAAC,MAAMD,aAAaA,WAAWb,OAAO,CAAC,MAAMjC;IAEtE,MAAMgD,aAAa,OAAOjC,MAAM,CAAC,WAAW,KAAK,WAAWA,MAAM,CAAC,WAAW,GAAGe;IACjF,MAAMmB,aAAa1B,IAAI2B,QAAQ;IAC/B,MAAMC,UAAUH,uBAAAA,wBAAAA,aAAcC;IAE9B,kBAAkB;IAClB,MAAMG,SAAuB;QAC3B,GAAGzB,WAAW;QACd0B,WAAW3B,gBAAgB2B,SAAS;QACpCV;QACAH;QACAR;QACAf,SAASZ,IAAIY,OAAO;QACpBmB;QACAU,YAAY7C,KAAKqD,OAAO,CAACR;IAC3B;IACA,IAAIK,YAAYrB,WAAWsB,OAAOD,OAAO,GAAGA;IAC5C,IAAIvB,cAAcE,WAAWsB,OAAOxB,SAAS,GAAGA;IAChD,OAAOwB;AACT;AAEA;;;CAGC,GACD,OAAO,SAASG;IACd,OAAO5D,YAAY2C,QAAQkB,IAAI,EAAElB,QAAQf,GAAG;AAC9C"}

package/dist/esm/setup/http.d.ts

@@ -0,0 +1,8 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { RuntimeOverrides, ServerConfig } from '../types.js';
+export declare function createHTTPServer(config: ServerConfig, overrides?: RuntimeOverrides): Promise<{
+    httpServer: import("node:http").Server<typeof import("node:http").IncomingMessage, typeof import("node:http").ServerResponse>;
+    mcpServer: McpServer;
+    logger: import("@mcp-z/server").Logger;
+    close: () => Promise<void>;
+}>;

package/dist/esm/setup/http.js

@@ -0,0 +1,61 @@
+import { composeMiddleware, connectHttp, createFileServingRouter, registerPrompts, registerResources, registerTools } from '@mcp-z/server';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import cors from 'cors';
+import express from 'express';
+import { createDefaultRuntime } from './runtime.js';
+export async function createHTTPServer(config, overrides) {
+    const runtime = await createDefaultRuntime(config, overrides);
+    const modules = runtime.createDomainModules();
+    const layers = runtime.middlewareFactories.map((factory)=>factory(runtime.deps));
+    const composed = composeMiddleware(modules, layers);
+    const logger = runtime.deps.logger;
+    const port = config.transport.port;
+    if (!port) throw new Error('Port is required for HTTP transport');
+    const tools = [
+        ...composed.tools,
+        ...runtime.deps.oauthAdapters.accountTools
+    ];
+    const prompts = [
+        ...composed.prompts,
+        ...runtime.deps.oauthAdapters.accountPrompts
+    ];
+    const mcpServer = new McpServer({
+        name: config.name,
+        version: config.version
+    });
+    registerTools(mcpServer, tools);
+    registerResources(mcpServer, composed.resources);
+    registerPrompts(mcpServer, prompts);
+    const app = express();
+    app.use(cors());
+    app.use(express.json({
+        limit: '10mb'
+    }));
+    const fileRouter = createFileServingRouter({
+        storageDir: config.storageDir
+    }, {
+        contentType: 'text/csv',
+        contentDisposition: 'attachment'
+    });
+    app.use('/files', fileRouter);
+    if (runtime.deps.oauthAdapters.dcrRouter) {
+        app.use('/', runtime.deps.oauthAdapters.dcrRouter);
+        logger.info('Mounted DCR router with OAuth endpoints');
+    }
+    logger.info(`Starting ${config.name} MCP server (http)`);
+    const { close, httpServer } = await connectHttp(mcpServer, {
+        logger,
+        app,
+        port
+    });
+    logger.info('http transport ready');
+    return {
+        httpServer,
+        mcpServer,
+        logger,
+        close: async ()=>{
+            await close();
+            await runtime.close();
+        }
+    };
+}

package/dist/esm/setup/http.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/kevin/Dev/Projects/ai/mcp-z/servers/mcp-outlook/src/setup/http.ts"],"sourcesContent":["import { composeMiddleware, connectHttp, createFileServingRouter, registerPrompts, registerResources, registerTools } from '@mcp-z/server';\nimport { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport cors from 'cors';\nimport express from 'express';\nimport type { RuntimeOverrides, ServerConfig } from '../types.js';\nimport { createDefaultRuntime } from './runtime.js';\n\nexport async function createHTTPServer(config: ServerConfig, overrides?: RuntimeOverrides) {\n  const runtime = await createDefaultRuntime(config, overrides);\n  const modules = runtime.createDomainModules();\n  const layers = runtime.middlewareFactories.map((factory) => factory(runtime.deps));\n  const composed = composeMiddleware(modules, layers);\n  const logger = runtime.deps.logger;\n  const port = config.transport.port;\n  if (!port) throw new Error('Port is required for HTTP transport');\n\n  const tools = [...composed.tools, ...runtime.deps.oauthAdapters.accountTools];\n  const prompts = [...composed.prompts, ...runtime.deps.oauthAdapters.accountPrompts];\n\n  const mcpServer = new McpServer({ name: config.name, version: config.version });\n  registerTools(mcpServer, tools);\n  registerResources(mcpServer, composed.resources);\n  registerPrompts(mcpServer, prompts);\n\n  const app = express();\n  app.use(cors());\n  app.use(express.json({ limit: '10mb' }));\n\n  const fileRouter = createFileServingRouter({ storageDir: config.storageDir }, { contentType: 'text/csv', contentDisposition: 'attachment' });\n  app.use('/files', fileRouter);\n\n  if (runtime.deps.oauthAdapters.dcrRouter) {\n    app.use('/', runtime.deps.oauthAdapters.dcrRouter);\n    logger.info('Mounted DCR router with OAuth endpoints');\n  }\n\n  logger.info(`Starting ${config.name} MCP server (http)`);\n  const { close, httpServer } = await connectHttp(mcpServer, { logger, app, port });\n  logger.info('http transport ready');\n\n  return {\n    httpServer,\n    mcpServer,\n    logger,\n    close: async () => {\n      await close();\n      await runtime.close();\n    },\n  };\n}\n"],"names":["composeMiddleware","connectHttp","createFileServingRouter","registerPrompts","registerResources","registerTools","McpServer","cors","express","createDefaultRuntime","createHTTPServer","config","overrides","runtime","modules","createDomainModules","layers","middlewareFactories","map","factory","deps","composed","logger","port","transport","Error","tools","oauthAdapters","accountTools","prompts","accountPrompts","mcpServer","name","version","resources","app","use","json","limit","fileRouter","storageDir","contentType","contentDisposition","dcrRouter","info","close","httpServer"],"mappings":"AAAA,SAASA,iBAAiB,EAAEC,WAAW,EAAEC,uBAAuB,EAAEC,eAAe,EAAEC,iBAAiB,EAAEC,aAAa,QAAQ,gBAAgB;AAC3I,SAASC,SAAS,QAAQ,0CAA0C;AACpE,OAAOC,UAAU,OAAO;AACxB,OAAOC,aAAa,UAAU;AAE9B,SAASC,oBAAoB,QAAQ,eAAe;AAEpD,OAAO,eAAeC,iBAAiBC,MAAoB,EAAEC,SAA4B;IACvF,MAAMC,UAAU,MAAMJ,qBAAqBE,QAAQC;IACnD,MAAME,UAAUD,QAAQE,mBAAmB;IAC3C,MAAMC,SAASH,QAAQI,mBAAmB,CAACC,GAAG,CAAC,CAACC,UAAYA,QAAQN,QAAQO,IAAI;IAChF,MAAMC,WAAWrB,kBAAkBc,SAASE;IAC5C,MAAMM,SAAST,QAAQO,IAAI,CAACE,MAAM;IAClC,MAAMC,OAAOZ,OAAOa,SAAS,CAACD,IAAI;IAClC,IAAI,CAACA,MAAM,MAAM,IAAIE,MAAM;IAE3B,MAAMC,QAAQ;WAAIL,SAASK,KAAK;WAAKb,QAAQO,IAAI,CAACO,aAAa,CAACC,YAAY;KAAC;IAC7E,MAAMC,UAAU;WAAIR,SAASQ,OAAO;WAAKhB,QAAQO,IAAI,CAACO,aAAa,CAACG,cAAc;KAAC;IAEnF,MAAMC,YAAY,IAAIzB,UAAU;QAAE0B,MAAMrB,OAAOqB,IAAI;QAAEC,SAAStB,OAAOsB,OAAO;IAAC;IAC7E5B,cAAc0B,WAAWL;IACzBtB,kBAAkB2B,WAAWV,SAASa,SAAS;IAC/C/B,gBAAgB4B,WAAWF;IAE3B,MAAMM,MAAM3B;IACZ2B,IAAIC,GAAG,CAAC7B;IACR4B,IAAIC,GAAG,CAAC5B,QAAQ6B,IAAI,CAAC;QAAEC,OAAO;IAAO;IAErC,MAAMC,aAAarC,wBAAwB;QAAEsC,YAAY7B,OAAO6B,UAAU;IAAC,GAAG;QAAEC,aAAa;QAAYC,oBAAoB;IAAa;IAC1IP,IAAIC,GAAG,CAAC,UAAUG;IAElB,IAAI1B,QAAQO,IAAI,CAACO,aAAa,CAACgB,SAAS,EAAE;QACxCR,IAAIC,GAAG,CAAC,KAAKvB,QAAQO,IAAI,CAACO,aAAa,CAACgB,SAAS;QACjDrB,OAAOsB,IAAI,CAAC;IACd;IAEAtB,OAAOsB,IAAI,CAAC,CAAC,SAAS,EAAEjC,OAAOqB,IAAI,CAAC,kBAAkB,CAAC;IACvD,MAAM,EAAEa,KAAK,EAAEC,UAAU,EAAE,GAAG,MAAM7C,YAAY8B,WAAW;QAAET;QAAQa;QAAKZ;IAAK;IAC/ED,OAAOsB,IAAI,CAAC;IAEZ,OAAO;QACLE;QACAf;QACAT;QACAuB,OAAO;YACL,MAAMA;YACN,MAAMhC,QAAQgC,KAAK;QACrB;IACF;AACF"}

package/dist/esm/setup/index.d.ts

@@ -0,0 +1,5 @@
+export { createConfig, parseConfig } from './config.js';
+export { createHTTPServer } from './http.js';
+export { createOAuthAdapters } from './oauth-microsoft.js';
+export * from './runtime.js';
+export { createStdioServer } from './stdio.js';

package/dist/esm/setup/index.js

@@ -0,0 +1,5 @@
+export { createConfig, parseConfig } from './config.js';
+export { createHTTPServer } from './http.js';
+export { createOAuthAdapters } from './oauth-microsoft.js';
+export * from './runtime.js';
+export { createStdioServer } from './stdio.js';

package/dist/esm/setup/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/kevin/Dev/Projects/ai/mcp-z/servers/mcp-outlook/src/setup/index.ts"],"sourcesContent":["export { createConfig, parseConfig } from './config.js';\nexport { createHTTPServer } from './http.js';\nexport { createOAuthAdapters } from './oauth-microsoft.js';\nexport * from './runtime.js';\nexport { createStdioServer } from './stdio.js';\n"],"names":["createConfig","parseConfig","createHTTPServer","createOAuthAdapters","createStdioServer"],"mappings":"AAAA,SAASA,YAAY,EAAEC,WAAW,QAAQ,cAAc;AACxD,SAASC,gBAAgB,QAAQ,YAAY;AAC7C,SAASC,mBAAmB,QAAQ,uBAAuB;AAC3D,cAAc,eAAe;AAC7B,SAASC,iBAAiB,QAAQ,aAAa"}

package/dist/esm/setup/oauth-microsoft.d.ts

@@ -0,0 +1,43 @@
+import { type AuthEmailProvider } from '@mcp-z/oauth';
+import { DcrOAuthProvider, DeviceCodeProvider, LoopbackOAuthProvider } from '@mcp-z/oauth-microsoft';
+import type { Logger, PromptModule, ToolModule } from '@mcp-z/server';
+import type { Router } from 'express';
+import type { Keyv } from 'keyv';
+import type { ServerConfig } from '../types.js';
+/**
+ * Outlook OAuth runtime dependencies
+ */
+export interface OAuthRuntimeDeps {
+    logger: Logger;
+    tokenStore: Keyv<unknown>;
+    dcrStore?: Keyv<unknown>;
+}
+/**
+ * Auth middleware wrapper with withToolAuth/withResourceAuth/withPromptAuth methods
+ */
+export interface AuthMiddleware {
+    withToolAuth<T extends ToolModule>(module: T): T;
+    withResourceAuth<T>(module: T): T;
+    withPromptAuth<T>(module: T): T;
+}
+/**
+ * Result of OAuth adapter creation
+ */
+export interface OAuthAdapters {
+    primary: LoopbackOAuthProvider | DeviceCodeProvider | DcrOAuthProvider;
+    middleware: AuthMiddleware;
+    authAdapter: AuthEmailProvider;
+    accountTools: ToolModule[];
+    accountPrompts: PromptModule[];
+    dcrRouter?: Router;
+}
+/**
+ * Create Outlook OAuth adapters based on transport configuration
+ *
+ * Returns primary adapter, pre-configured middleware, auth email provider,
+ * and pre-selected account tools based on auth mode.
+ * @param config - Outlook server configuration
+ * @param deps - Runtime dependencies (logger, tokenStore, etc.)
+ * @returns OAuth adapters with pre-configured middleware and account tools
+ */
+export declare function createOAuthAdapters(config: ServerConfig, deps: OAuthRuntimeDeps, baseUrl?: string): Promise<OAuthAdapters>;

package/dist/esm/setup/oauth-microsoft.js

@@ -0,0 +1,169 @@
+import { AccountServer } from '@mcp-z/oauth';
+import { createDcrRouter, DcrOAuthProvider, DeviceCodeProvider, LoopbackOAuthProvider } from '@mcp-z/oauth-microsoft';
+import { MS_SCOPE } from '../constants.js';
+/**
+ * Create Outlook OAuth adapters based on transport configuration
+ *
+ * Returns primary adapter, pre-configured middleware, auth email provider,
+ * and pre-selected account tools based on auth mode.
+ * @param config - Outlook server configuration
+ * @param deps - Runtime dependencies (logger, tokenStore, etc.)
+ * @returns OAuth adapters with pre-configured middleware and account tools
+ */ export async function createOAuthAdapters(config, deps, baseUrl) {
+    const { logger, tokenStore, dcrStore } = deps;
+    const oauthStaticConfig = {
+        service: config.name,
+        clientId: config.clientId,
+        clientSecret: config.clientSecret,
+        scope: MS_SCOPE,
+        tenantId: config.tenantId,
+        auth: config.auth,
+        headless: config.headless,
+        redirectUri: config.transport.type === 'stdio' ? undefined : config.redirectUri,
+        ...baseUrl && {
+            baseUrl
+        }
+    };
+    let primary;
+    // DCR mode - Dynamic Client Registration with HTTP-only support
+    if (oauthStaticConfig.auth === 'dcr') {
+        logger.debug('Creating DCR provider', {
+            service: oauthStaticConfig.service
+        });
+        // DCR requires dcrStore and baseUrl
+        if (!dcrStore) {
+            throw new Error('DCR mode requires dcrStore to be configured');
+        }
+        if (!oauthStaticConfig.baseUrl) {
+            throw new Error('DCR mode requires baseUrl to be configured');
+        }
+        // Create DcrOAuthProvider (stateless provider that receives tokens from verification context)
+        primary = new DcrOAuthProvider({
+            clientId: oauthStaticConfig.clientId,
+            ...oauthStaticConfig.clientSecret && {
+                clientSecret: oauthStaticConfig.clientSecret
+            },
+            tenantId: oauthStaticConfig.tenantId,
+            scope: oauthStaticConfig.scope,
+            verifyEndpoint: `${oauthStaticConfig.baseUrl}/oauth/verify`,
+            logger
+        });
+        // Create DCR OAuth router with authorization server endpoints
+        const dcrRouter = createDcrRouter({
+            store: dcrStore,
+            issuerUrl: oauthStaticConfig.baseUrl,
+            baseUrl: oauthStaticConfig.baseUrl,
+            scopesSupported: oauthStaticConfig.scope.split(' '),
+            clientConfig: {
+                clientId: oauthStaticConfig.clientId,
+                ...oauthStaticConfig.clientSecret && {
+                    clientSecret: oauthStaticConfig.clientSecret
+                },
+                tenantId: oauthStaticConfig.tenantId
+            }
+        });
+        // DCR uses bearer token authentication with middleware validation
+        const middleware = primary.authMiddleware();
+        // Create auth email provider (stateless, no token storage)
+        const authAdapter = {
+            getUserEmail: ()=>{
+                throw new Error('DCR mode does not support getUserEmail - tokens are provided via bearer auth');
+            }
+        };
+        // No account management tools for DCR (multi-user management at client registration level)
+        const accountTools = [];
+        const accountPrompts = [];
+        logger.info('DCR provider created for Outlook', {
+            service: oauthStaticConfig.service,
+            baseUrl: oauthStaticConfig.baseUrl
+        });
+        return {
+            primary,
+            middleware: middleware,
+            authAdapter,
+            accountTools,
+            accountPrompts,
+            dcrRouter
+        };
+    }
+    // Device code mode - similar to service accounts (single static identity)
+    if (oauthStaticConfig.auth === 'device-code') {
+        logger.debug('Creating device code provider', {
+            service: oauthStaticConfig.service
+        });
+        const deviceCodeProvider = new DeviceCodeProvider({
+            service: oauthStaticConfig.service,
+            clientId: oauthStaticConfig.clientId,
+            tenantId: oauthStaticConfig.tenantId,
+            scope: oauthStaticConfig.scope,
+            logger,
+            tokenStore,
+            headless: oauthStaticConfig.headless
+        });
+        primary = deviceCodeProvider;
+        // Device code uses single-user middleware (no account management needed)
+        const middleware = deviceCodeProvider.authMiddleware();
+        // Create auth email provider
+        const authAdapter = {
+            getUserEmail: (accountId)=>deviceCodeProvider.getUserEmail(accountId)
+        };
+        // No account management tools for device code (like service accounts)
+        const accountTools = [];
+        const accountPrompts = [];
+        logger.info('Device code provider created for Outlook', {
+            service: oauthStaticConfig.service
+        });
+        return {
+            primary,
+            middleware: middleware,
+            authAdapter,
+            accountTools,
+            accountPrompts
+        };
+    }
+    // Always create primary adapter for file-based OAuth (loopback mode)
+    primary = new LoopbackOAuthProvider({
+        service: oauthStaticConfig.service,
+        clientId: oauthStaticConfig.clientId,
+        clientSecret: oauthStaticConfig.clientSecret,
+        scope: oauthStaticConfig.scope,
+        tenantId: oauthStaticConfig.tenantId,
+        headless: oauthStaticConfig.headless,
+        logger,
+        tokenStore,
+        ...oauthStaticConfig.redirectUri !== undefined && {
+            redirectUri: oauthStaticConfig.redirectUri
+        }
+    });
+    // Create auth email provider (used by account management tools)
+    const authAdapter = {
+        getUserEmail: (accountId)=>primary.getUserEmail(accountId),
+        ...primary.authenticateNewAccount && {
+            authenticateNewAccount: ()=>{
+                var _primary_authenticateNewAccount;
+                return (_primary_authenticateNewAccount = primary.authenticateNewAccount) === null || _primary_authenticateNewAccount === void 0 ? void 0 : _primary_authenticateNewAccount.call(primary);
+            }
+        }
+    };
+    // Select middleware AND account tools based on auth mode
+    const middleware = primary.authMiddleware();
+    // Loopback OAuth - multi-account mode
+    const result = AccountServer.createLoopback({
+        service: oauthStaticConfig.service,
+        store: tokenStore,
+        logger,
+        auth: authAdapter
+    });
+    const accountTools = result.tools;
+    const accountPrompts = result.prompts;
+    logger.debug('Loopback OAuth (multi-account mode)', {
+        service: oauthStaticConfig.service
+    });
+    return {
+        primary,
+        middleware: middleware,
+        authAdapter,
+        accountTools,
+        accountPrompts
+    };
+}

package/dist/esm/setup/oauth-microsoft.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/kevin/Dev/Projects/ai/mcp-z/servers/mcp-outlook/src/setup/oauth-microsoft.ts"],"sourcesContent":["import { AccountServer, type AuthEmailProvider } from '@mcp-z/oauth';\nimport { createDcrRouter, DcrOAuthProvider, DeviceCodeProvider, LoopbackOAuthProvider } from '@mcp-z/oauth-microsoft';\nimport type { Logger, PromptModule, ToolModule } from '@mcp-z/server';\nimport type { Router } from 'express';\nimport type { Keyv } from 'keyv';\nimport { MS_SCOPE } from '../constants.ts';\nimport type { ServerConfig } from '../types.js';\n\n/**\n * Outlook OAuth runtime dependencies\n */\nexport interface OAuthRuntimeDeps {\n  logger: Logger;\n  tokenStore: Keyv<unknown>;\n  dcrStore?: Keyv<unknown>;\n}\n\n/**\n * Auth middleware wrapper with withToolAuth/withResourceAuth/withPromptAuth methods\n */\nexport interface AuthMiddleware {\n  withToolAuth<T extends ToolModule>(module: T): T;\n  withResourceAuth<T>(module: T): T;\n  withPromptAuth<T>(module: T): T;\n}\n\n/**\n * Result of OAuth adapter creation\n */\nexport interface OAuthAdapters {\n  primary: LoopbackOAuthProvider | DeviceCodeProvider | DcrOAuthProvider;\n  middleware: AuthMiddleware;\n  authAdapter: AuthEmailProvider;\n  accountTools: ToolModule[];\n  accountPrompts: PromptModule[];\n  dcrRouter?: Router; // DCR OAuth endpoints (only for dcr mode)\n}\n\n/**\n * Create Outlook OAuth adapters based on transport configuration\n *\n * Returns primary adapter, pre-configured middleware, auth email provider,\n * and pre-selected account tools based on auth mode.\n * @param config - Outlook server configuration\n * @param deps - Runtime dependencies (logger, tokenStore, etc.)\n * @returns OAuth adapters with pre-configured middleware and account tools\n */\nexport async function createOAuthAdapters(config: ServerConfig, deps: OAuthRuntimeDeps, baseUrl?: string): Promise<OAuthAdapters> {\n  const { logger, tokenStore, dcrStore } = deps;\n  const oauthStaticConfig = {\n    service: config.name,\n    clientId: config.clientId,\n    clientSecret: config.clientSecret,\n    scope: MS_SCOPE,\n    tenantId: config.tenantId,\n    auth: config.auth,\n    headless: config.headless,\n    redirectUri: config.transport.type === 'stdio' ? undefined : config.redirectUri,\n    ...(baseUrl && { baseUrl }),\n  };\n\n  let primary: LoopbackOAuthProvider | DeviceCodeProvider | DcrOAuthProvider;\n\n  // DCR mode - Dynamic Client Registration with HTTP-only support\n  if (oauthStaticConfig.auth === 'dcr') {\n    logger.debug('Creating DCR provider', { service: oauthStaticConfig.service });\n\n    // DCR requires dcrStore and baseUrl\n    if (!dcrStore) {\n      throw new Error('DCR mode requires dcrStore to be configured');\n    }\n    if (!oauthStaticConfig.baseUrl) {\n      throw new Error('DCR mode requires baseUrl to be configured');\n    }\n\n    // Create DcrOAuthProvider (stateless provider that receives tokens from verification context)\n    primary = new DcrOAuthProvider({\n      clientId: oauthStaticConfig.clientId,\n      ...(oauthStaticConfig.clientSecret && { clientSecret: oauthStaticConfig.clientSecret }),\n      tenantId: oauthStaticConfig.tenantId,\n      scope: oauthStaticConfig.scope,\n      verifyEndpoint: `${oauthStaticConfig.baseUrl}/oauth/verify`,\n      logger,\n    });\n\n    // Create DCR OAuth router with authorization server endpoints\n    const dcrRouter = createDcrRouter({\n      store: dcrStore,\n      issuerUrl: oauthStaticConfig.baseUrl,\n      baseUrl: oauthStaticConfig.baseUrl,\n      scopesSupported: oauthStaticConfig.scope.split(' '), // Convert space-separated scope to array\n      clientConfig: {\n        clientId: oauthStaticConfig.clientId,\n        ...(oauthStaticConfig.clientSecret && { clientSecret: oauthStaticConfig.clientSecret }),\n        tenantId: oauthStaticConfig.tenantId,\n      },\n    });\n\n    // DCR uses bearer token authentication with middleware validation\n    const middleware = primary.authMiddleware();\n\n    // Create auth email provider (stateless, no token storage)\n    const authAdapter: AuthEmailProvider = {\n      getUserEmail: () => {\n        throw new Error('DCR mode does not support getUserEmail - tokens are provided via bearer auth');\n      },\n    };\n\n    // No account management tools for DCR (multi-user management at client registration level)\n    const accountTools: ToolModule[] = [];\n    const accountPrompts: PromptModule[] = [];\n\n    logger.info('DCR provider created for Outlook', {\n      service: oauthStaticConfig.service,\n      baseUrl: oauthStaticConfig.baseUrl,\n    });\n\n    return { primary, middleware: middleware as AuthMiddleware, authAdapter, accountTools, accountPrompts, dcrRouter };\n  }\n\n  // Device code mode - similar to service accounts (single static identity)\n  if (oauthStaticConfig.auth === 'device-code') {\n    logger.debug('Creating device code provider', { service: oauthStaticConfig.service });\n    const deviceCodeProvider = new DeviceCodeProvider({\n      service: oauthStaticConfig.service,\n      clientId: oauthStaticConfig.clientId,\n      tenantId: oauthStaticConfig.tenantId,\n      scope: oauthStaticConfig.scope,\n      logger,\n      tokenStore,\n      headless: oauthStaticConfig.headless,\n    });\n    primary = deviceCodeProvider;\n\n    // Device code uses single-user middleware (no account management needed)\n    const middleware = deviceCodeProvider.authMiddleware();\n\n    // Create auth email provider\n    const authAdapter: AuthEmailProvider = {\n      getUserEmail: (accountId) => deviceCodeProvider.getUserEmail(accountId),\n      // No authenticateNewAccount for device code (single account)\n    };\n\n    // No account management tools for device code (like service accounts)\n    const accountTools: ToolModule[] = [];\n    const accountPrompts: PromptModule[] = [];\n\n    logger.info('Device code provider created for Outlook', {\n      service: oauthStaticConfig.service,\n    });\n\n    return { primary, middleware: middleware as AuthMiddleware, authAdapter, accountTools, accountPrompts };\n  }\n\n  // Always create primary adapter for file-based OAuth (loopback mode)\n  primary = new LoopbackOAuthProvider({\n    service: oauthStaticConfig.service,\n    clientId: oauthStaticConfig.clientId,\n    clientSecret: oauthStaticConfig.clientSecret,\n    scope: oauthStaticConfig.scope,\n    tenantId: oauthStaticConfig.tenantId,\n    headless: oauthStaticConfig.headless,\n    logger,\n    tokenStore,\n    ...(oauthStaticConfig.redirectUri !== undefined && { redirectUri: oauthStaticConfig.redirectUri }),\n  });\n\n  // Create auth email provider (used by account management tools)\n  const authAdapter: AuthEmailProvider = {\n    getUserEmail: (accountId) => primary.getUserEmail(accountId),\n    ...(primary.authenticateNewAccount && {\n      authenticateNewAccount: () => primary.authenticateNewAccount?.(),\n    }),\n  };\n\n  // Select middleware AND account tools based on auth mode\n  const middleware: ReturnType<LoopbackOAuthProvider['authMiddleware']> = primary.authMiddleware();\n\n  // Loopback OAuth - multi-account mode\n  const result = AccountServer.createLoopback({\n    service: oauthStaticConfig.service,\n    store: tokenStore,\n    logger,\n    auth: authAdapter,\n  });\n  const accountTools: ToolModule[] = result.tools as ToolModule[];\n  const accountPrompts: PromptModule[] = result.prompts as PromptModule[];\n  logger.debug('Loopback OAuth (multi-account mode)', { service: oauthStaticConfig.service });\n\n  return { primary, middleware: middleware as AuthMiddleware, authAdapter, accountTools, accountPrompts };\n}\n"],"names":["AccountServer","createDcrRouter","DcrOAuthProvider","DeviceCodeProvider","LoopbackOAuthProvider","MS_SCOPE","createOAuthAdapters","config","deps","baseUrl","logger","tokenStore","dcrStore","oauthStaticConfig","service","name","clientId","clientSecret","scope","tenantId","auth","headless","redirectUri","transport","type","undefined","primary","debug","Error","verifyEndpoint","dcrRouter","store","issuerUrl","scopesSupported","split","clientConfig","middleware","authMiddleware","authAdapter","getUserEmail","accountTools","accountPrompts","info","deviceCodeProvider","accountId","authenticateNewAccount","result","createLoopback","tools","prompts"],"mappings":"AAAA,SAASA,aAAa,QAAgC,eAAe;AACrE,SAASC,eAAe,EAAEC,gBAAgB,EAAEC,kBAAkB,EAAEC,qBAAqB,QAAQ,yBAAyB;AAItH,SAASC,QAAQ,QAAQ,kBAAkB;AAiC3C;;;;;;;;CAQC,GACD,OAAO,eAAeC,oBAAoBC,MAAoB,EAAEC,IAAsB,EAAEC,OAAgB;IACtG,MAAM,EAAEC,MAAM,EAAEC,UAAU,EAAEC,QAAQ,EAAE,GAAGJ;IACzC,MAAMK,oBAAoB;QACxBC,SAASP,OAAOQ,IAAI;QACpBC,UAAUT,OAAOS,QAAQ;QACzBC,cAAcV,OAAOU,YAAY;QACjCC,OAAOb;QACPc,UAAUZ,OAAOY,QAAQ;QACzBC,MAAMb,OAAOa,IAAI;QACjBC,UAAUd,OAAOc,QAAQ;QACzBC,aAAaf,OAAOgB,SAAS,CAACC,IAAI,KAAK,UAAUC,YAAYlB,OAAOe,WAAW;QAC/E,GAAIb,WAAW;YAAEA;QAAQ,CAAC;IAC5B;IAEA,IAAIiB;IAEJ,gEAAgE;IAChE,IAAIb,kBAAkBO,IAAI,KAAK,OAAO;QACpCV,OAAOiB,KAAK,CAAC,yBAAyB;YAAEb,SAASD,kBAAkBC,OAAO;QAAC;QAE3E,oCAAoC;QACpC,IAAI,CAACF,UAAU;YACb,MAAM,IAAIgB,MAAM;QAClB;QACA,IAAI,CAACf,kBAAkBJ,OAAO,EAAE;YAC9B,MAAM,IAAImB,MAAM;QAClB;QAEA,8FAA8F;QAC9FF,UAAU,IAAIxB,iBAAiB;YAC7Bc,UAAUH,kBAAkBG,QAAQ;YACpC,GAAIH,kBAAkBI,YAAY,IAAI;gBAAEA,cAAcJ,kBAAkBI,YAAY;YAAC,CAAC;YACtFE,UAAUN,kBAAkBM,QAAQ;YACpCD,OAAOL,kBAAkBK,KAAK;YAC9BW,gBAAgB,GAAGhB,kBAAkBJ,OAAO,CAAC,aAAa,CAAC;YAC3DC;QACF;QAEA,8DAA8D;QAC9D,MAAMoB,YAAY7B,gBAAgB;YAChC8B,OAAOnB;YACPoB,WAAWnB,kBAAkBJ,OAAO;YACpCA,SAASI,kBAAkBJ,OAAO;YAClCwB,iBAAiBpB,kBAAkBK,KAAK,CAACgB,KAAK,CAAC;YAC/CC,cAAc;gBACZnB,UAAUH,kBAAkBG,QAAQ;gBACpC,GAAIH,kBAAkBI,YAAY,IAAI;oBAAEA,cAAcJ,kBAAkBI,YAAY;gBAAC,CAAC;gBACtFE,UAAUN,kBAAkBM,QAAQ;YACtC;QACF;QAEA,kEAAkE;QAClE,MAAMiB,aAAaV,QAAQW,cAAc;QAEzC,2DAA2D;QAC3D,MAAMC,cAAiC;YACrCC,cAAc;gBACZ,MAAM,IAAIX,MAAM;YAClB;QACF;QAEA,2FAA2F;QAC3F,MAAMY,eAA6B,EAAE;QACrC,MAAMC,iBAAiC,EAAE;QAEzC/B,OAAOgC,IAAI,CAAC,oCAAoC;YAC9C5B,SAASD,kBAAkBC,OAAO;YAClCL,SAASI,kBAAkBJ,OAAO;QACpC;QAEA,OAAO;YAAEiB;YAASU,YAAYA;YAA8BE;YAAaE;YAAcC;YAAgBX;QAAU;IACnH;IAEA,0EAA0E;IAC1E,IAAIjB,kBAAkBO,IAAI,KAAK,eAAe;QAC5CV,OAAOiB,KAAK,CAAC,iCAAiC;YAAEb,SAASD,kBAAkBC,OAAO;QAAC;QACnF,MAAM6B,qBAAqB,IAAIxC,mBAAmB;YAChDW,SAASD,kBAAkBC,OAAO;YAClCE,UAAUH,kBAAkBG,QAAQ;YACpCG,UAAUN,kBAAkBM,QAAQ;YACpCD,OAAOL,kBAAkBK,KAAK;YAC9BR;YACAC;YACAU,UAAUR,kBAAkBQ,QAAQ;QACtC;QACAK,UAAUiB;QAEV,yEAAyE;QACzE,MAAMP,aAAaO,mBAAmBN,cAAc;QAEpD,6BAA6B;QAC7B,MAAMC,cAAiC;YACrCC,cAAc,CAACK,YAAcD,mBAAmBJ,YAAY,CAACK;QAE/D;QAEA,sEAAsE;QACtE,MAAMJ,eAA6B,EAAE;QACrC,MAAMC,iBAAiC,EAAE;QAEzC/B,OAAOgC,IAAI,CAAC,4CAA4C;YACtD5B,SAASD,kBAAkBC,OAAO;QACpC;QAEA,OAAO;YAAEY;YAASU,YAAYA;YAA8BE;YAAaE;YAAcC;QAAe;IACxG;IAEA,qEAAqE;IACrEf,UAAU,IAAItB,sBAAsB;QAClCU,SAASD,kBAAkBC,OAAO;QAClCE,UAAUH,kBAAkBG,QAAQ;QACpCC,cAAcJ,kBAAkBI,YAAY;QAC5CC,OAAOL,kBAAkBK,KAAK;QAC9BC,UAAUN,kBAAkBM,QAAQ;QACpCE,UAAUR,kBAAkBQ,QAAQ;QACpCX;QACAC;QACA,GAAIE,kBAAkBS,WAAW,KAAKG,aAAa;YAAEH,aAAaT,kBAAkBS,WAAW;QAAC,CAAC;IACnG;IAEA,gEAAgE;IAChE,MAAMgB,cAAiC;QACrCC,cAAc,CAACK,YAAclB,QAAQa,YAAY,CAACK;QAClD,GAAIlB,QAAQmB,sBAAsB,IAAI;YACpCA,wBAAwB;oBAAMnB;wBAAAA,kCAAAA,QAAQmB,sBAAsB,cAA9BnB,sDAAAA,qCAAAA;;QAChC,CAAC;IACH;IAEA,yDAAyD;IACzD,MAAMU,aAAkEV,QAAQW,cAAc;IAE9F,sCAAsC;IACtC,MAAMS,SAAS9C,cAAc+C,cAAc,CAAC;QAC1CjC,SAASD,kBAAkBC,OAAO;QAClCiB,OAAOpB;QACPD;QACAU,MAAMkB;IACR;IACA,MAAME,eAA6BM,OAAOE,KAAK;IAC/C,MAAMP,iBAAiCK,OAAOG,OAAO;IACrDvC,OAAOiB,KAAK,CAAC,uCAAuC;QAAEb,SAASD,kBAAkBC,OAAO;IAAC;IAEzF,OAAO;QAAEY;QAASU,YAAYA;QAA8BE;QAAaE;QAAcC;IAAe;AACxG"}

package/dist/esm/setup/runtime.d.ts

@@ -0,0 +1,11 @@
+import type { Logger, MiddlewareLayer } from '@mcp-z/server';
+import type { CommonRuntime, RuntimeOverrides, ServerConfig, StorageContext } from '../types.js';
+import { type OAuthAdapters } from './oauth-microsoft.js';
+export declare function createLogger(config: ServerConfig): Logger;
+export declare function createTokenStore(baseDir: string): Promise<import("keyv").Keyv<unknown>>;
+export declare function createDcrStore(baseDir: string, required: boolean): Promise<import("keyv").Keyv<unknown>>;
+export declare function createAuthLayer(authMiddleware: OAuthAdapters['middleware']): MiddlewareLayer;
+export declare function createLoggingLayer(logger: Logger): MiddlewareLayer;
+export declare function createStorageLayer(storageContext: StorageContext): MiddlewareLayer;
+export declare function assertStorageConfig(config: ServerConfig): void;
+export declare function createDefaultRuntime(config: ServerConfig, overrides?: RuntimeOverrides): Promise<CommonRuntime>;