@mj-biz-apps/common-activity-sync 5.42.0 → 5.44.0

package/dist/providers/MSGraphActivitySyncProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"MSGraphActivitySyncProvider.js","sourceRoot":"","sources":["../../src/providers/MSGraphActivitySyncProvider.ts"],"names":[],"mappings":";;;;;;;;;AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAE1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAOrE,MAAM,CAAC,MAAM,kBAAkB,GAC3B,uFAAuF;IACvF,qFAAqF;IACrF,mFAAmF;IACnF,+EAA+E,CAAC;AAEpF,MAAM,CAAC,MAAM,oBAAoB,GAC7B,gGAAgG;IAChG,gDAAgD,CAAC;AAErD,MAAM,CAAC,MAAM,yBAAyB,GAClC,4FAA4F;IAC5F,2FAA2F;IAC3F,uBAAuB,CAAC;AAGrB,IAAM,2BAA2B,GAAjC,MAAM,2BAA4B,SAAQ,wBAAwB;IAIrE;;;;;;;;;;OAUG;IACH,IAAW,MAAM;QACb,OAAO,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED;IACI;;;;;;OAMG;IACc,iBAA0B,KAAK;IAChD,0FAA0F;IAClF,SAAoC;IAC5C,6EAA6E;IAC5D,OAAkC;QAEnD,KAAK,EAAE,CAAC;QANS,mBAAc,GAAd,cAAc,CAAiB;QAExC,cAAS,GAAT,SAAS,CAA2B;QAE3B,YAAO,GAAP,OAAO,CAA2B;QA9BvC,SAAI,GAAG,SAAkB,CAAC;QAC1B,qBAAgB,GAAG,cAAc,CAAC;QAkClD,4FAA4F;QACpF,yBAAoB,GAAkB,IAAI,CAAC;IAHnD,CAAC;IAKD;;;;;;;;;;;OAWG;IACa,SAAS,CAAC,OAAiC;QACvD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,OAAO;QACX,CAAC;QAED,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,IAAI,CAAC,oBAAoB,GAAG,yBAAyB,CAAC;YACtD,OAAO;QACX,CAAC;QACD,2FAA2F;QAC3F,+EAA+E;QAC/E,oCAAoC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,4BAA4B,EAAE,CAAC;QAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,IAAI,CAAC,oBAAoB;gBACrB,qCAAqC,GAAG,+CAA+C;oBACvF,kDAAkD,CAAC;YACvD,OAAO;QACX,CAAC;QAED,yFAAyF;QACzF,wEAAwE;QACxE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,IAAI,CAAC,oBAAoB;gBACrB,6DAA6D,GAAG,cAAc;oBAC9E,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC;YAChC,OAAO;QACX,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;IACrC,CAAC;IAES,KAAK,CAAC,QAAQ,CAAC,KAA0B;QAC/C,0FAA0F;QAC1F,4FAA4F;QAC5F,oFAAoF;QACpF,qEAAqE;QACrE,EAAE;QACF,6FAA6F;QAC7F,4FAA4F;QAC5F,gFAAgF;QAChF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3D,qFAAqF;YACrF,uFAAuF;YACvF,kFAAkF;YAClF,qFAAqF;YACrF,kFAAkF;YAClF,uFAAuF;YACvF,gDAAgD;YAChD,MAAM,MAAM,GAAG,CAAC,kBAAkB,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC/C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,yFAAyF;YACzF,wFAAwF;YACxF,2EAA2E;YAC3E,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,oBAAoB,IAAI,oBAAoB,CAAC,EAAE,CAAC;QACzF,CAAC;QAED,yFAAyF;QACzF,6FAA6F;QAC7F,qFAAqF;QACrF,iDAAiD;QACjD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAES,SAAS,CAAC,GAAa,EAAE,KAA0B;QACzD,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEzC,uFAAuF;QACvF,kDAAkD;QAClD,EAAE;QACF,yFAAyF;QACzF,6FAA6F;QAC7F,4FAA4F;QAC5F,2FAA2F;QAC3F,0FAA0F;QAC1F,4FAA4F;QAC5F,0DAA0D;QAC1D,EAAE;QACF,yFAAyF;QACzF,0FAA0F;QAC1F,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChE,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAE,IAA4B,CAAC,KAAK,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACjF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACzD,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC;IACrG,CAAC;CACJ,CAAA;AAlJY,2BAA2B;IADvC,aAAa,CAAC,wBAAwB,EAAE,cAAc,CAAC;;GAC3C,2BAA2B,CAkJvC"}
+{"version":3,"file":"MSGraphActivitySyncProvider.js","sourceRoot":"","sources":["../../src/providers/MSGraphActivitySyncProvider.ts"],"names":[],"mappings":";;;;;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAE1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAOjG;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAC3B,uFAAuF;IACvF,qFAAqF;IACrF,4FAA4F;IAC5F,gFAAgF;IAChF,8FAA8F;IAC9F,6FAA6F;IAC7F,4FAA4F;IAC5F,+FAA+F;IAC/F,uDAAuD,CAAC;AAE5D,MAAM,CAAC,MAAM,oBAAoB,GAC7B,gGAAgG;IAChG,gDAAgD,CAAC;AAErD,MAAM,CAAC,MAAM,yBAAyB,GAClC,4FAA4F;IAC5F,2FAA2F;IAC3F,uBAAuB,CAAC;AAGrB,IAAM,2BAA2B,GAAjC,MAAM,2BAA4B,SAAQ,wBAAwB;IAIrE;;;;;;;;;;OAUG;IACH,IAAW,MAAM;QACb,OAAO,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED;IACI;;;;;;;;;;;;;;OAcG;IACc,iBAA0B,0BAA0B,EAAE;IACvE,0FAA0F;IAClF,SAAoC;IAC5C,6EAA6E;IAC5D,OAAkC;QAEnD,KAAK,EAAE,CAAC;QANS,mBAAc,GAAd,cAAc,CAAwC;QAE/D,cAAS,GAAT,SAAS,CAA2B;QAE3B,YAAO,GAAP,OAAO,CAA2B;QAtCvC,SAAI,GAAG,SAAkB,CAAC;QAC1B,qBAAgB,GAAG,cAAc,CAAC;QA0ClD,4FAA4F;QACpF,yBAAoB,GAAkB,IAAI,CAAC;IAHnD,CAAC;IAKD;;;;;;;;;;;OAWG;IACa,SAAS,CAAC,OAAiC;QACvD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,OAAO;QACX,CAAC;QAED,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,IAAI,CAAC,oBAAoB,GAAG,yBAAyB,CAAC;YACtD,OAAO;QACX,CAAC;QACD,2FAA2F;QAC3F,+EAA+E;QAC/E,oCAAoC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,4BAA4B,EAAE,CAAC;QAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,IAAI,CAAC,oBAAoB;gBACrB,qCAAqC,GAAG,+CAA+C;oBACvF,kDAAkD,CAAC;YACvD,OAAO;QACX,CAAC;QAED,yFAAyF;QACzF,wEAAwE;QACxE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,IAAI,CAAC,oBAAoB;gBACrB,6DAA6D,GAAG,cAAc;oBAC9E,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC;YAChC,OAAO;QACX,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;IACrC,CAAC;IAES,KAAK,CAAC,QAAQ,CAAC,KAA0B;QAC/C,0FAA0F;QAC1F,4FAA4F;QAC5F,oFAAoF;QACpF,qEAAqE;QACrE,EAAE;QACF,6FAA6F;QAC7F,4FAA4F;QAC5F,gFAAgF;QAChF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3D,qFAAqF;YACrF,uFAAuF;YACvF,kFAAkF;YAClF,qFAAqF;YACrF,kFAAkF;YAClF,uFAAuF;YACvF,gDAAgD;YAChD,MAAM,MAAM,GAAG,CAAC,kBAAkB,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC/C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,yFAAyF;YACzF,wFAAwF;YACxF,2EAA2E;YAC3E,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,oBAAoB,IAAI,oBAAoB,CAAC,EAAE,CAAC;QACzF,CAAC;QAED,yFAAyF;QACzF,6FAA6F;QAC7F,qFAAqF;QACrF,iDAAiD;QACjD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAES,SAAS,CAAC,GAAa,EAAE,KAA0B;QACzD,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEzC,uFAAuF;QACvF,kDAAkD;QAClD,EAAE;QACF,yFAAyF;QACzF,6FAA6F;QAC7F,4FAA4F;QAC5F,2FAA2F;QAC3F,0FAA0F;QAC1F,4FAA4F;QAC5F,0DAA0D;QAC1D,EAAE;QACF,yFAAyF;QACzF,0FAA0F;QAC1F,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChE,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAE,IAA4B,CAAC,KAAK,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACjF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACzD,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC;IACrG,CAAC;CACJ,CAAA;AA1JY,2BAA2B;IADvC,aAAa,CAAC,wBAAwB,EAAE,cAAc,CAAC;;GAC3C,2BAA2B,CA0JvC"}

package/dist/providers/MSGraphCalendarSyncProvider.d.ts

@@ -1,6 +1,9 @@
 import { BaseActivitySyncProvider } from '../BaseActivitySyncProvider.js';
 import type { ActivitySourceQuery, NormalizedItem, RawBatch } from '../types.js';
+import type { ActivityMessageTransport, ActivityTransportContext, ActivityTransportFactory } from './MessageTransport.js';
 export declare const LIVE_GRAPH_CALENDAR_REFUSAL: string;
+export declare const NO_CALENDAR_TRANSPORT_REFUSAL: string;
+export declare const NO_CALENDAR_CREDENTIAL_REF_REFUSAL: string;
 export interface GraphAttendeeLike {
     type?: string;
     emailAddress?: {
@@ -33,27 +36,65 @@ export interface GraphEventLike {
     attendees?: GraphAttendeeLike[];
     isCancelled?: boolean;
     seriesMasterId?: string;
-}
-export interface GraphEventFetcher {
-    GetEvents(params: {
-        Mailbox: string;
-        Since: Date | null;
-        Top: number;
-    }): Promise<{
-        Success?: boolean;
-        ErrorMessage?: string;
-        Events?: GraphEventLike[];
-    }>;
+    /** Graph's own flag. An .ics or a deck attached to the invite lands here. */
+    hasAttachments?: boolean;
 }
 /** Map one Graph event. Exported so a check can prove the mapping without a mailbox. */
 export declare function MapGraphEvent(event: GraphEventLike, issues: string[]): NormalizedItem | null;
 export declare class MSGraphCalendarSyncProvider extends BaseActivitySyncProvider {
+    /**
+     * Defaults to the HOST'S ATTESTATION, and to the same one mail uses.
+     *
+     * A bare `false` made this unreachable in the only way that ships — `ClassFactory` passes no
+     * arguments — so live calendar fetch could be enabled by tests and nothing else. It is the
+     * same Exchange Application Access Policy that scopes `Mail.Read` and `Calendars.Read`, so a
+     * host that has attested for one has attested for both; a second switch would let someone
+     * record half a decision.
+     */
     private readonly AllowLiveFetch;
-    private readonly fetcher?;
+    /** Where events come from. Without one this provider refuses rather than pretending. */
+    private Transport?;
+    /** How a host builds a transport for a connection. See {@link Configure}. */
+    private readonly Factory?;
     readonly Kind: "Calendar";
     readonly ProviderTypeCode = "Microsoft365";
-    readonly IsLive = true;
-    constructor(AllowLiveFetch?: boolean, fetcher?: GraphEventFetcher | undefined);
+    /**
+     * Reflects the TRANSPORT rather than being hard-coded true.
+     *
+     * The engine refuses to write `Source: 'Integration'` rows from a non-live provider. While this
+     * class always claimed `IsLive = true`, a replayed calendar run would have been indistinguishable
+     * from a real one in the database afterwards — the exact confusion the flag exists to prevent.
+     * Defaults to true with no transport, so an unconfigured provider is treated as the stricter case.
+     */
+    get IsLive(): boolean;
+    constructor(
+    /**
+     * Defaults to the HOST'S ATTESTATION, and to the same one mail uses.
+     *
+     * A bare `false` made this unreachable in the only way that ships — `ClassFactory` passes no
+     * arguments — so live calendar fetch could be enabled by tests and nothing else. It is the
+     * same Exchange Application Access Policy that scopes `Mail.Read` and `Calendars.Read`, so a
+     * host that has attested for one has attested for both; a second switch would let someone
+     * record half a decision.
+     */
+    AllowLiveFetch?: boolean, 
+    /** Where events come from. Without one this provider refuses rather than pretending. */
+    Transport?: ActivityMessageTransport | undefined, 
+    /** How a host builds a transport for a connection. See {@link Configure}. */
+    Factory?: ActivityTransportFactory | undefined);
+    /** Why this provider cannot fetch, decided at Configure time and reported at fetch time. */
+    private ConfigurationRefusal;
+    /**
+     * Reads `ActivitySyncConnection.CredentialsRef` and builds this connection's transport from it.
+     *
+     * Identical in shape to the message provider's, and deliberately so: a connection configures ONE
+     * credential, and both of its surfaces resolve through it. A calendar-specific path would let the
+     * two disagree about which credential a connection uses.
+     *
+     * A transport passed to the CONSTRUCTOR wins and is never replaced — a database row must not be
+     * able to reach in and swap it.
+     */
+    Configure(context: ActivityTransportContext): void;
     protected FetchRaw(query: ActivitySourceQuery): Promise<RawBatch>;
     protected Normalize(raw: RawBatch): NormalizedItem[];
 }

package/dist/providers/MSGraphCalendarSyncProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MSGraphCalendarSyncProvider.d.ts","sourceRoot":"","sources":["../../src/providers/MSGraphCalendarSyncProvider.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,KAAK,EAAE,mBAAmB,EAAmB,cAAc,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAElG,eAAO,MAAM,2BAA2B,QAImC,CAAC;AAE5E,MAAM,WAAW,iBAAiB;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACtD;AAED,MAAM,WAAW,cAAc;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,GAAG,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,QAAQ,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,SAAS,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACnE,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAChC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAC9B,SAAS,CAAC,MAAM,EAAE;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAA;KAAE,CAAC,CAAC;CACxF;AAiBD,wFAAwF;AACxF,wBAAgB,aAAa,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,GAAG,IAAI,CAgD5F;AAED,qBACa,2BAA4B,SAAQ,wBAAwB;IAMjE,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAN7B,SAAgB,IAAI,EAAG,UAAU,CAAU;IAC3C,SAAgB,gBAAgB,kBAAkB;IAClD,SAAgB,MAAM,QAAQ;gBAGT,cAAc,GAAE,OAAe,EAC/B,OAAO,CAAC,EAAE,iBAAiB,YAAA;cAKhC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAmCvE,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,GAAG,cAAc,EAAE;CAQvD"}
+{"version":3,"file":"MSGraphCalendarSyncProvider.d.ts","sourceRoot":"","sources":["../../src/providers/MSGraphCalendarSyncProvider.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,KAAK,EAAE,mBAAmB,EAAmB,cAAc,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAElG,OAAO,KAAK,EACR,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EAC3B,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,2BAA2B,QAKwC,CAAC;AAEjF,eAAO,MAAM,6BAA6B,QAEU,CAAC;AAErD,eAAO,MAAM,kCAAkC,QAGpB,CAAC;AAE5B,MAAM,WAAW,iBAAiB;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACtD;AAED,MAAM,WAAW,cAAc;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,GAAG,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,QAAQ,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,SAAS,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACnE,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAChC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,OAAO,CAAC;CAC5B;AAiBD,wFAAwF;AACxF,wBAAgB,aAAa,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,GAAG,IAAI,CAiD5F;AAED,qBACa,2BAA4B,SAAQ,wBAAwB;IAiBjE;;;;;;;;OAQG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,wFAAwF;IACxF,OAAO,CAAC,SAAS,CAAC;IAClB,6EAA6E;IAC7E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IA7B7B,SAAgB,IAAI,EAAG,UAAU,CAAU;IAC3C,SAAgB,gBAAgB,kBAAkB;IAElD;;;;;;;OAOG;IACH,IAAW,MAAM,IAAI,OAAO,CAE3B;;IAGG;;;;;;;;OAQG;IACc,cAAc,GAAE,OAAsC;IACvE,wFAAwF;IAChF,SAAS,CAAC,EAAE,wBAAwB,YAAA;IAC5C,6EAA6E;IAC5D,OAAO,CAAC,EAAE,wBAAwB,YAAA;IAKvD,4FAA4F;IAC5F,OAAO,CAAC,oBAAoB,CAAuB;IAEnD;;;;;;;;;OASG;IACa,SAAS,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI;cA6BlD,QAAQ,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC;IA0BvE,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,GAAG,cAAc,EAAE;CAQvD"}

package/dist/providers/MSGraphCalendarSyncProvider.js

@@ -8,17 +8,37 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 /**
- * Microsoft Graph calendar. Written, typechecked, and refused until an Exchange
- * Application Access Policy scopes app-only Calendars.Read. Same tenant-wide
- * grant as Mail.Read; fixture is how the engine is exercised.
+ * Microsoft Graph calendar.
+ *
+ * WHAT CHANGED. This class declared a `GraphEventFetcher` seam that NOTHING IMPLEMENTED, reachable
+ * only as the second constructor argument — which `MJGlobal.ClassFactory` never passes, because it
+ * builds plugins with no arguments. So through the engine every calendar fetch returned
+ * `Payloads: []` and logged "no transport is wired". Written, typechecked, exported and refused:
+ * the same defect `MSGraphActivitySyncProvider` had before its transport landed, one surface over.
+ *
+ * It now uses the same `ActivityMessageTransport` seam as mail, served by the same host factory,
+ * which dispatches on `DriverClass`. `GraphCalendarTransport` wraps MJ's `GetEvents`; a recorded
+ * transport replays captured payloads through the same mapper.
+ *
+ * THE TENANT-WIDE READ IS STILL REFUSED BY DEFAULT, and for the same reason as mail: app-only
+ * `Calendars.Read` reads EVERY calendar in the tenant until an Exchange policy scopes the app
+ * registration. It is the SAME policy and the SAME attestation — a host that has confirmed it for
+ * mail has confirmed it for calendar, so this reads `AllowLiveMailboxFetch` rather than inventing a
+ * second switch someone could set to only half the truth.
  */
-import { LogError } from '@memberjunction/core';
 import { RegisterClass } from '@memberjunction/global';
 import { BaseActivitySyncProvider } from '../BaseActivitySyncProvider.js';
+import { HostActivityTransportFactory, HostAllowsLiveMailboxFetch } from './MessageTransport.js';
 export const LIVE_GRAPH_CALENDAR_REFUSAL = 'Live Graph calendar fetch is disabled. App-only auth makes Calendars.Read tenant-wide, ' +
     'so it reads EVERY calendar until an Exchange Application Access Policy scopes the app ' +
     'registration to a security group — the same policy Mail.Read needs. Confirm it exists ' +
-    'before enabling this, and use FixtureActivitySyncProvider until then.';
+    'before enabling this, and use FixtureActivitySyncProvider until then. Once confirmed, call ' +
+    'AllowLiveMailboxFetch() at host bootstrap with the group the policy names.';
+export const NO_CALENDAR_TRANSPORT_REFUSAL = 'No calendar transport was supplied. Construct this provider with a GraphCalendarTransport ' +
+    '(live) or a RecordedMessageTransport (replay).';
+export const NO_CALENDAR_CREDENTIAL_REF_REFUSAL = 'This ActivitySyncConnection names no credential. Set its CredentialsRef to the NAME of an ' +
+    '"Azure Service Principal" credential in MJ — that column holds a Credentials engine key, ' +
+    'never a secret value.';
 function normalize(value) {
     const trimmed = value?.trim().toLowerCase();
     return trimmed ? trimmed : null;
@@ -72,6 +92,7 @@ export function MapGraphEvent(event, issues) {
         ExternalID: externalID,
         ExternalThreadID: event.seriesMasterId?.trim() || null,
         TypeCode: 'Meeting',
+        HasAttachments: event.hasAttachments === true,
         Subject: event.subject?.trim() || '(no subject)',
         Body: event.bodyPreview ?? null,
         StartedAt: startedAt,
@@ -84,48 +105,101 @@ export function MapGraphEvent(event, issues) {
     };
 }
 let MSGraphCalendarSyncProvider = class MSGraphCalendarSyncProvider extends BaseActivitySyncProvider {
-    constructor(AllowLiveFetch = false, fetcher) {
+    /**
+     * Reflects the TRANSPORT rather than being hard-coded true.
+     *
+     * The engine refuses to write `Source: 'Integration'` rows from a non-live provider. While this
+     * class always claimed `IsLive = true`, a replayed calendar run would have been indistinguishable
+     * from a real one in the database afterwards — the exact confusion the flag exists to prevent.
+     * Defaults to true with no transport, so an unconfigured provider is treated as the stricter case.
+     */
+    get IsLive() {
+        return this.Transport?.IsLive ?? true;
+    }
+    constructor(
+    /**
+     * Defaults to the HOST'S ATTESTATION, and to the same one mail uses.
+     *
+     * A bare `false` made this unreachable in the only way that ships — `ClassFactory` passes no
+     * arguments — so live calendar fetch could be enabled by tests and nothing else. It is the
+     * same Exchange Application Access Policy that scopes `Mail.Read` and `Calendars.Read`, so a
+     * host that has attested for one has attested for both; a second switch would let someone
+     * record half a decision.
+     */
+    AllowLiveFetch = HostAllowsLiveMailboxFetch(), 
+    /** Where events come from. Without one this provider refuses rather than pretending. */
+    Transport, 
+    /** How a host builds a transport for a connection. See {@link Configure}. */
+    Factory) {
         super();
         this.AllowLiveFetch = AllowLiveFetch;
-        this.fetcher = fetcher;
+        this.Transport = Transport;
+        this.Factory = Factory;
         this.Kind = 'Calendar';
         this.ProviderTypeCode = 'Microsoft365';
-        this.IsLive = true;
+        /** Why this provider cannot fetch, decided at Configure time and reported at fetch time. */
+        this.ConfigurationRefusal = null;
     }
-    async FetchRaw(query) {
-        if (!this.AllowLiveFetch) {
-            return { Payloads: [], Issues: [LIVE_GRAPH_CALENDAR_REFUSAL] };
+    /**
+     * Reads `ActivitySyncConnection.CredentialsRef` and builds this connection's transport from it.
+     *
+     * Identical in shape to the message provider's, and deliberately so: a connection configures ONE
+     * credential, and both of its surfaces resolve through it. A calendar-specific path would let the
+     * two disagree about which credential a connection uses.
+     *
+     * A transport passed to the CONSTRUCTOR wins and is never replaced — a database row must not be
+     * able to reach in and swap it.
+     */
+    Configure(context) {
+        if (this.Transport) {
+            return;
+        }
+        const ref = (context.CredentialsRef ?? '').trim();
+        if (!ref) {
+            this.ConfigurationRefusal = NO_CALENDAR_CREDENTIAL_REF_REFUSAL;
+            return;
         }
-        if (!this.fetcher) {
-            LogError(`MSGraphCalendarSyncProvider.FetchRaw was enabled for ${query.Mailbox} — no transport is wired.`);
-            return {
-                Payloads: [],
-                Issues: [
-                    'Live Graph calendar fetch was opted in but no mailbox transport is wired in this package. ' +
-                        'Keep AllowLiveFetch false and use FixtureActivitySyncProvider.',
-                ],
-            };
+        const factory = this.Factory ?? HostActivityTransportFactory();
+        if (!factory) {
+            this.ConfigurationRefusal =
+                `This connection names credential "${ref}", but no transport factory is registered in ` +
+                    'this host, so the credential cannot be resolved.';
+            return;
         }
-        try {
-            const response = await this.fetcher.GetEvents({
-                Mailbox: query.Mailbox,
-                Since: query.Since,
-                Top: query.Limit,
-            });
-            if (response?.Success === false) {
-                return {
-                    Payloads: [],
-                    Issues: [`Graph refused the calendar read: ${response.ErrorMessage ?? 'no reason given'}`],
-                };
+        // NOT caught. A factory that throws is a host wiring fault, and swallowing it here would
+        // recreate the silent misconfiguration this change exists to end.
+        const built = factory(context);
+        if (!built) {
+            this.ConfigurationRefusal =
+                `The transport factory served no transport for credential "${ref}" on driver ` +
+                    `"${context.DriverClass}".`;
+            return;
+        }
+        this.Transport = built;
+        this.ConfigurationRefusal = null;
+    }
+    async FetchRaw(query) {
+        // THE TENANT-WIDE REFUSAL IS CHECKED FIRST, matching the message provider. With no transport
+        // and no attestation — the default construction — the useful thing to say is WHY live fetch
+        // is off, not that a transport is missing. A recorded transport is exempt: the refusal exists
+        // to prevent reading calendars we are not scoped to, and a replay reads none.
+        if ((this.Transport?.IsLive ?? true) && !this.AllowLiveFetch) {
+            const issues = [LIVE_GRAPH_CALENDAR_REFUSAL];
+            if (!this.Transport && this.ConfigurationRefusal) {
+                // ALSO true, and with a DIFFERENT fix. Reporting only the first sends an operator to
+                // chase an Exchange policy when what is missing is a CredentialsRef or a factory.
+                issues.push(this.ConfigurationRefusal);
             }
-            return {
-                Payloads: (response?.Events ?? []),
-                Issues: [],
-            };
+            return { Payloads: [], Issues: issues };
         }
-        catch (err) {
-            return { Payloads: [], Issues: [`Graph calendar read failed: ${String(err)}`] };
+        if (!this.Transport) {
+            return { Payloads: [], Issues: [this.ConfigurationRefusal ?? NO_CALENDAR_TRANSPORT_REFUSAL] };
         }
+        // Deliberately NOT caught. `BaseActivitySyncProvider.Fetch` already distinguishes a throw
+        // ("could not look" — Failed, watermark preserved) from an empty batch ("looked, found
+        // nothing"). Swallowing a transport failure into an empty batch would report a successful
+        // sync of a calendar we never reached, and advance the watermark past it.
+        return await this.Transport.Fetch(query);
     }
     Normalize(raw) {
         const items = [];
@@ -139,7 +213,7 @@ let MSGraphCalendarSyncProvider = class MSGraphCalendarSyncProvider extends Base
 };
 MSGraphCalendarSyncProvider = __decorate([
     RegisterClass(BaseActivitySyncProvider, 'Microsoft365.Calendar'),
-    __metadata("design:paramtypes", [Boolean, Object])
+    __metadata("design:paramtypes", [Boolean, Object, Function])
 ], MSGraphCalendarSyncProvider);
 export { MSGraphCalendarSyncProvider };
 //# sourceMappingURL=MSGraphCalendarSyncProvider.js.map

package/dist/providers/MSGraphCalendarSyncProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"MSGraphCalendarSyncProvider.js","sourceRoot":"","sources":["../../src/providers/MSGraphCalendarSyncProvider.ts"],"names":[],"mappings":";;;;;;;;;AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAG1E,MAAM,CAAC,MAAM,2BAA2B,GACpC,yFAAyF;IACzF,wFAAwF;IACxF,wFAAwF;IACxF,uEAAuE,CAAC;AA6B5E,SAAS,SAAS,CAAC,KAAgC;IAC/C,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACpC,CAAC;AAED,SAAS,SAAS,CAAC,IAA0D;IACzE,MAAM,GAAG,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5D,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1D,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,KAAqB,EAAE,MAAgB;IACjE,MAAM,UAAU,GAAG,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,SAAS,UAAU,4CAA4C,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,YAAY,GAAsB,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IACpE,IAAI,SAAS,EAAE,CAAC;QACZ,YAAY,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,IAAI,IAAI;YACjD,IAAI,EAAE,WAAW;YACjB,YAAY,EAAE,OAAO;SACxB,CAAC,CAAC;IACP,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QAChD,YAAY,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,QAAQ,CAAC,YAAY,EAAE,IAAI,IAAI,IAAI;YACzC,IAAI,EAAE,UAAU;YAChB,YAAY,EAAE,OAAO;SACxB,CAAC,CAAC;IACP,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO;QACH,UAAU,EAAE,UAAU;QACtB,gBAAgB,EAAE,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,IAAI;QACtD,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,cAAc;QAChD,IAAI,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;QAC/B,SAAS,EAAE,SAAS;QACpB,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QAC7E,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,IAAI;QACrD,SAAS,EAAE,UAAU;QACrB,YAAY,EAAE,YAAY;QAC1B,SAAS,EAAE,KAAK,CAAC,WAAW,KAAK,IAAI;QACrC,GAAG,EAAE,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE;KACpD,CAAC;AACN,CAAC;AAGM,IAAM,2BAA2B,GAAjC,MAAM,2BAA4B,SAAQ,wBAAwB;IAKrE,YACqB,iBAA0B,KAAK,EAC/B,OAA2B;QAE5C,KAAK,EAAE,CAAC;QAHS,mBAAc,GAAd,cAAc,CAAiB;QAC/B,YAAO,GAAP,OAAO,CAAoB;QANhC,SAAI,GAAG,UAAmB,CAAC;QAC3B,qBAAgB,GAAG,cAAc,CAAC;QAClC,WAAM,GAAG,IAAI,CAAC;IAO9B,CAAC;IAES,KAAK,CAAC,QAAQ,CAAC,KAA0B;QAC/C,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACvB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,2BAA2B,CAAC,EAAE,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,QAAQ,CAAC,wDAAwD,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;YAC3G,OAAO;gBACH,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE;oBACJ,4FAA4F;wBACxF,gEAAgE;iBACvE;aACJ,CAAC;QACN,CAAC;QACD,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;gBAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;YACH,IAAI,QAAQ,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;gBAC9B,OAAO;oBACH,QAAQ,EAAE,EAAE;oBACZ,MAAM,EAAE,CAAC,oCAAoC,QAAQ,CAAC,YAAY,IAAI,iBAAiB,EAAE,CAAC;iBAC7F,CAAC;YACN,CAAC;YACD,OAAO;gBACH,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,CAA8B;gBAC/D,MAAM,EAAE,EAAE;aACb,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,+BAA+B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACpF,CAAC;IACL,CAAC;IAES,SAAS,CAAC,GAAa;QAC7B,MAAM,KAAK,GAAqB,EAAE,CAAC;QACnC,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAyB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACpE,IAAI,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ,CAAA;AAvDY,2BAA2B;IADvC,aAAa,CAAC,wBAAwB,EAAE,uBAAuB,CAAC;;GACpD,2BAA2B,CAuDvC"}
+{"version":3,"file":"MSGraphCalendarSyncProvider.js","sourceRoot":"","sources":["../../src/providers/MSGraphCalendarSyncProvider.ts"],"names":[],"mappings":";;;;;;;;;AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAE1E,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAOjG,MAAM,CAAC,MAAM,2BAA2B,GACpC,yFAAyF;IACzF,wFAAwF;IACxF,wFAAwF;IACxF,6FAA6F;IAC7F,4EAA4E,CAAC;AAEjF,MAAM,CAAC,MAAM,6BAA6B,GACtC,4FAA4F;IAC5F,gDAAgD,CAAC;AAErD,MAAM,CAAC,MAAM,kCAAkC,GAC3C,4FAA4F;IAC5F,2FAA2F;IAC3F,uBAAuB,CAAC;AAuB5B,SAAS,SAAS,CAAC,KAAgC;IAC/C,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACpC,CAAC;AAED,SAAS,SAAS,CAAC,IAA0D;IACzE,MAAM,GAAG,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5D,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1D,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,KAAqB,EAAE,MAAgB;IACjE,MAAM,UAAU,GAAG,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,SAAS,UAAU,4CAA4C,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,YAAY,GAAsB,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IACpE,IAAI,SAAS,EAAE,CAAC;QACZ,YAAY,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,IAAI,IAAI;YACjD,IAAI,EAAE,WAAW;YACjB,YAAY,EAAE,OAAO;SACxB,CAAC,CAAC;IACP,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QAChD,YAAY,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,QAAQ,CAAC,YAAY,EAAE,IAAI,IAAI,IAAI;YACzC,IAAI,EAAE,UAAU;YAChB,YAAY,EAAE,OAAO;SACxB,CAAC,CAAC;IACP,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO;QACH,UAAU,EAAE,UAAU;QACtB,gBAAgB,EAAE,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,IAAI;QACtD,QAAQ,EAAE,SAAS;QACnB,cAAc,EAAE,KAAK,CAAC,cAAc,KAAK,IAAI;QAC7C,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,cAAc;QAChD,IAAI,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;QAC/B,SAAS,EAAE,SAAS;QACpB,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QAC7E,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,IAAI;QACrD,SAAS,EAAE,UAAU;QACrB,YAAY,EAAE,YAAY;QAC1B,SAAS,EAAE,KAAK,CAAC,WAAW,KAAK,IAAI;QACrC,GAAG,EAAE,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE;KACpD,CAAC;AACN,CAAC;AAGM,IAAM,2BAA2B,GAAjC,MAAM,2BAA4B,SAAQ,wBAAwB;IAIrE;;;;;;;OAOG;IACH,IAAW,MAAM;QACb,OAAO,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED;IACI;;;;;;;;OAQG;IACc,iBAA0B,0BAA0B,EAAE;IACvE,wFAAwF;IAChF,SAAoC;IAC5C,6EAA6E;IAC5D,OAAkC;QAEnD,KAAK,EAAE,CAAC;QANS,mBAAc,GAAd,cAAc,CAAwC;QAE/D,cAAS,GAAT,SAAS,CAA2B;QAE3B,YAAO,GAAP,OAAO,CAA2B;QA7BvC,SAAI,GAAG,UAAmB,CAAC;QAC3B,qBAAgB,GAAG,cAAc,CAAC;QAiClD,4FAA4F;QACpF,yBAAoB,GAAkB,IAAI,CAAC;IAHnD,CAAC;IAKD;;;;;;;;;OASG;IACa,SAAS,CAAC,OAAiC;QACvD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,OAAO;QACX,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,IAAI,CAAC,oBAAoB,GAAG,kCAAkC,CAAC;YAC/D,OAAO;QACX,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,4BAA4B,EAAE,CAAC;QAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,IAAI,CAAC,oBAAoB;gBACrB,qCAAqC,GAAG,+CAA+C;oBACvF,kDAAkD,CAAC;YACvD,OAAO;QACX,CAAC;QACD,yFAAyF;QACzF,kEAAkE;QAClE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,IAAI,CAAC,oBAAoB;gBACrB,6DAA6D,GAAG,cAAc;oBAC9E,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC;YAChC,OAAO;QACX,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;IACrC,CAAC;IAES,KAAK,CAAC,QAAQ,CAAC,KAA0B;QAC/C,6FAA6F;QAC7F,4FAA4F;QAC5F,8FAA8F;QAC9F,8EAA8E;QAC9E,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,CAAC,2BAA2B,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC/C,qFAAqF;gBACrF,kFAAkF;gBAClF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,oBAAoB,IAAI,6BAA6B,CAAC,EAAE,CAAC;QAClG,CAAC;QAED,0FAA0F;QAC1F,uFAAuF;QACvF,0FAA0F;QAC1F,0EAA0E;QAC1E,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAES,SAAS,CAAC,GAAa;QAC7B,MAAM,KAAK,GAAqB,EAAE,CAAC;QACnC,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAyB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACpE,IAAI,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ,CAAA;AA/GY,2BAA2B;IADvC,aAAa,CAAC,wBAAwB,EAAE,uBAAuB,CAAC;;GACpD,2BAA2B,CA+GvC"}

package/dist/providers/MessageTransport.d.ts

@@ -78,4 +78,94 @@ export type ActivityTransportFactory = (context: ActivityTransportContext) => Ac
 export declare function RegisterActivityTransportFactory(factory: ActivityTransportFactory | null): void;
 /** The registered factory, or null when this host serves none. */
 export declare function HostActivityTransportFactory(): ActivityTransportFactory | null;
+/**
+ * WHAT A HOST MUST WRITE DOWN BEFORE IT MAY READ A REAL MAILBOX.
+ *
+ * `MSGraphProvider` authenticates app-only, so the `Mail.Read` APPLICATION permission is granted
+ * against the tenant and not against a mailbox: it reads EVERY mailbox in the organisation. The
+ * `Mailbox` on a connection narrows what we ASK for, not what we are ALLOWED to read. The only thing
+ * that narrows the grant is an Exchange Application Access Policy binding the app registration to a
+ * mail-enabled security group.
+ *
+ * So the opt-in is not a boolean. A boolean records that somebody wanted live fetch; this records
+ * that somebody CHECKED, which group they found, and who is answerable for it — the things an audit
+ * actually asks for, and the things a person is forced to look up rather than guess. `Confirmed` is
+ * the literal `true` rather than `boolean` deliberately: a variable that happens to be false will
+ * not type-check, so the attestation cannot be satisfied by passing a flag through.
+ */
+interface AttestationBase {
+    /** Literal `true`. See above — a `boolean` variable is rejected by the compiler. */
+    Confirmed: true;
+    /** Who decided. A person, so the decision has an owner. */
+    ConfirmedBy: string;
+    /** When they decided. Policies get deleted; a stale attestation should be visible as stale. */
+    ConfirmedAt: Date;
+}
+/**
+ * The app registration is restricted, and this names the restriction.
+ */
+export interface ScopedMailboxAttestation extends AttestationBase {
+    Scope: 'RestrictedToGroup';
+    /** The mail-enabled security group the Exchange assignment binds the app to. */
+    ScopedToGroup: string;
+}
+/**
+ * The tenant-wide grant was looked at and ACCEPTED. A real outcome, not a failure state.
+ *
+ * WHY THIS EXISTS AT ALL. The first version of this type demanded `ScopedToGroup`, which quietly
+ * assumed every deployment would create an Exchange RBAC assignment. Most do not — adding an API
+ * permission in Entra is one team's five-minute job, and Exchange RBAC for Applications is a
+ * different system that often nobody owns. A gate that only accepts "scoped" leaves an organisation
+ * that decided otherwise with two options: invent a group name, or bypass the gate. Both are worse
+ * than what it was protecting, because both destroy the record.
+ *
+ * So the shape now matches the decisions people actually make. What stays impossible is the third
+ * state — nobody looked — because neither variant can be satisfied without a name, a date, and
+ * either a group or a written reason.
+ */
+export interface TenantWideMailboxAttestation extends AttestationBase {
+    Scope: 'TenantWideAccepted';
+    /**
+     * What is being accepted, in the deciding person's own words.
+     *
+     * Free text and REQUIRED, deliberately. A boolean here would be a tick-box, and a tick-box records
+     * that somebody clicked rather than that somebody understood. Writing the sentence is the point:
+     * it is what an audit reads, and what the next person finds when they ask why this app can read
+     * every mailbox in the tenant.
+     */
+    AcceptedRisk: string;
+}
+export type LiveMailboxPolicyAttestation = ScopedMailboxAttestation | TenantWideMailboxAttestation;
+/**
+ * Record that this host is scoped, and may therefore read real mailboxes. Pass null to revoke.
+ *
+ * DELIBERATELY NOT DRIVEN BY DATA. `ActivitySyncConnection` is an ordinary editable entity, and
+ * anyone who can edit a row could otherwise turn on tenant-wide mail reading by typing in a form.
+ * The same reasoning already applies to the transport itself — "a database row should not be able to
+ * reach in and swap it" — and it applies with more force here. This is a bootstrap-time decision in
+ * code, made by whoever deploys the host.
+ *
+ * The blank checks are the point rather than defensive noise: an attestation with an empty group or
+ * no name records nothing, and silently accepting one would turn this back into a boolean.
+ *
+ * ── EVERY INVARIANT IS ENFORCED HERE, NOT ONLY IN THE ENV LOADER ────────────────────────────────
+ *
+ * `LoadLiveMailboxPolicyFromEnv` validates all of this and is the path a deployment takes. It is not
+ * the only path: this function is exported, and a host bootstrap, a `.mjs` harness or any TypeScript
+ * caller with a cast reaches it directly — where `Confirmed: true` and `ConfirmedAt: Date` are
+ * compile-time shapes that enforce nothing at runtime. Checking them only in the loader made the
+ * guarantee a property of one caller rather than of the gate, so an attestation with no date, or with
+ * `Confirmed: false`, was accepted and opened tenant-wide mail AND calendar for the whole host.
+ *
+ * WHAT IS DELIBERATELY NOT CHECKED is staleness. An attestation that expired on a date boundary would
+ * turn live fetch off on a working deployment with no one having changed anything, which trades a
+ * reviewed decision for a silent outage. The date is required so the record is honest about WHEN, not
+ * so it can lapse.
+ */
+export declare function AllowLiveMailboxFetch(attestation: LiveMailboxPolicyAttestation | null): void;
+/** The recorded attestation, or null when this host has not opted in. */
+export declare function HostLiveMailboxPolicy(): LiveMailboxPolicyAttestation | null;
+/** Whether this host has attested that its app registration is scoped. */
+export declare function HostAllowsLiveMailboxFetch(): boolean;
+export {};
 //# sourceMappingURL=MessageTransport.d.ts.map

package/dist/providers/MessageTransport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MessageTransport.d.ts","sourceRoot":"","sources":["../../src/providers/MessageTransport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEjE;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACrC,oGAAoG;IACpG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAEzB,KAAK,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACxD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACrC,oGAAoG;IACpG,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,2FAA2F;IAC3F,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,gGAAgG;IAChG,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,EAAE,wBAAwB,KAAK,wBAAwB,GAAG,IAAI,CAAC;AAmB9G;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,GAAG,IAAI,CAE/F;AAED,kEAAkE;AAClE,wBAAgB,4BAA4B,IAAI,wBAAwB,GAAG,IAAI,CAE9E"}
+{"version":3,"file":"MessageTransport.d.ts","sourceRoot":"","sources":["../../src/providers/MessageTransport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEjE;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACrC,oGAAoG;IACpG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAEzB,KAAK,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACxD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACrC,oGAAoG;IACpG,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,2FAA2F;IAC3F,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,gGAAgG;IAChG,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,QAAQ,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,EAAE,wBAAwB,KAAK,wBAAwB,GAAG,IAAI,CAAC;AAmB9G;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,GAAG,IAAI,CAE/F;AAED,kEAAkE;AAClE,wBAAgB,4BAA4B,IAAI,wBAAwB,GAAG,IAAI,CAE9E;AAED;;;;;;;;;;;;;;GAcG;AACH,UAAU,eAAe;IACrB,oFAAoF;IACpF,SAAS,EAAE,IAAI,CAAC;IAChB,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,+FAA+F;IAC/F,WAAW,EAAE,IAAI,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAyB,SAAQ,eAAe;IAC7D,KAAK,EAAE,mBAAmB,CAAC;IAC3B,gFAAgF;IAChF,aAAa,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,4BAA6B,SAAQ,eAAe;IACjE,KAAK,EAAE,oBAAoB,CAAC;IAC5B;;;;;;;OAOG;IACH,YAAY,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,4BAA4B,GAAG,wBAAwB,GAAG,4BAA4B,CAAC;AAInG;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,4BAA4B,GAAG,IAAI,GAAG,IAAI,CA2C5F;AAED,yEAAyE;AACzE,wBAAgB,qBAAqB,IAAI,4BAA4B,GAAG,IAAI,CAE3E;AAED,0EAA0E;AAC1E,wBAAgB,0BAA0B,IAAI,OAAO,CAEpD"}

package/dist/providers/MessageTransport.js

@@ -27,4 +27,76 @@ export function RegisterActivityTransportFactory(factory) {
 export function HostActivityTransportFactory() {
     return hostFactory;
 }
+let hostLivePolicy = null;
+/**
+ * Record that this host is scoped, and may therefore read real mailboxes. Pass null to revoke.
+ *
+ * DELIBERATELY NOT DRIVEN BY DATA. `ActivitySyncConnection` is an ordinary editable entity, and
+ * anyone who can edit a row could otherwise turn on tenant-wide mail reading by typing in a form.
+ * The same reasoning already applies to the transport itself — "a database row should not be able to
+ * reach in and swap it" — and it applies with more force here. This is a bootstrap-time decision in
+ * code, made by whoever deploys the host.
+ *
+ * The blank checks are the point rather than defensive noise: an attestation with an empty group or
+ * no name records nothing, and silently accepting one would turn this back into a boolean.
+ *
+ * ── EVERY INVARIANT IS ENFORCED HERE, NOT ONLY IN THE ENV LOADER ────────────────────────────────
+ *
+ * `LoadLiveMailboxPolicyFromEnv` validates all of this and is the path a deployment takes. It is not
+ * the only path: this function is exported, and a host bootstrap, a `.mjs` harness or any TypeScript
+ * caller with a cast reaches it directly — where `Confirmed: true` and `ConfirmedAt: Date` are
+ * compile-time shapes that enforce nothing at runtime. Checking them only in the loader made the
+ * guarantee a property of one caller rather than of the gate, so an attestation with no date, or with
+ * `Confirmed: false`, was accepted and opened tenant-wide mail AND calendar for the whole host.
+ *
+ * WHAT IS DELIBERATELY NOT CHECKED is staleness. An attestation that expired on a date boundary would
+ * turn live fetch off on a working deployment with no one having changed anything, which trades a
+ * reviewed decision for a silent outage. The date is required so the record is honest about WHEN, not
+ * so it can lapse.
+ */
+export function AllowLiveMailboxFetch(attestation) {
+    if (attestation === null) {
+        hostLivePolicy = null;
+        return;
+    }
+    // `Confirmed: true` is a literal type, so TypeScript rejects `false` at a typed call site and
+    // nothing rejects it anywhere else. An unconfirmed attestation is a decision not yet made.
+    if (attestation.Confirmed !== true) {
+        throw new Error('AllowLiveMailboxFetch requires Confirmed === true. An attestation that does not confirm ' +
+            'anything is not a decision, and live fetch stays off until one is made.');
+    }
+    if (!attestation.ConfirmedBy?.trim()) {
+        throw new Error('AllowLiveMailboxFetch requires ConfirmedBy — who made this decision.');
+    }
+    // WHEN, and a real date. The whole point of the record is that someone can later ask when this was
+    // agreed; an Invalid Date answers that question with silence.
+    const confirmedAt = attestation.ConfirmedAt;
+    if (!(confirmedAt instanceof Date) || Number.isNaN(confirmedAt.getTime())) {
+        throw new Error('AllowLiveMailboxFetch requires ConfirmedAt — a valid Date saying when this was decided. ' +
+            'Reading the mail of an entire organisation on an undated say-so is not auditable.');
+    }
+    if (attestation.Scope === 'RestrictedToGroup') {
+        if (!attestation.ScopedToGroup?.trim()) {
+            throw new Error('A RestrictedToGroup attestation requires ScopedToGroup — the mail-enabled security ' +
+                'group the Exchange assignment binds the app registration to. Run ' +
+                'Get-ManagementRoleAssignment (or Get-ApplicationAccessPolicy on older tenants) to find it.');
+        }
+    }
+    else {
+        if (!attestation.AcceptedRisk?.trim()) {
+            throw new Error('A TenantWideAccepted attestation requires AcceptedRisk — a sentence saying what is ' +
+                'being accepted. Accepting that this app can read every mailbox in the tenant is a ' +
+                'legitimate decision; recording it as a bare flag is not.');
+        }
+    }
+    hostLivePolicy = attestation;
+}
+/** The recorded attestation, or null when this host has not opted in. */
+export function HostLiveMailboxPolicy() {
+    return hostLivePolicy;
+}
+/** Whether this host has attested that its app registration is scoped. */
+export function HostAllowsLiveMailboxFetch() {
+    return hostLivePolicy !== null;
+}
 //# sourceMappingURL=MessageTransport.js.map

package/dist/providers/MessageTransport.js.map

@@ -1 +1 @@
-{"version":3,"file":"MessageTransport.js","sourceRoot":"","sources":["../../src/providers/MessageTransport.ts"],"names":[],"mappings":"AA8EA;;;;;;;;;;;;;;GAcG;AACH,IAAI,WAAW,GAAoC,IAAI,CAAC;AAExD;;;;;GAKG;AACH,MAAM,UAAU,gCAAgC,CAAC,OAAwC;IACrF,WAAW,GAAG,OAAO,CAAC;AAC1B,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,4BAA4B;IACxC,OAAO,WAAW,CAAC;AACvB,CAAC"}
+{"version":3,"file":"MessageTransport.js","sourceRoot":"","sources":["../../src/providers/MessageTransport.ts"],"names":[],"mappings":"AA8EA;;;;;;;;;;;;;;GAcG;AACH,IAAI,WAAW,GAAoC,IAAI,CAAC;AAExD;;;;;GAKG;AACH,MAAM,UAAU,gCAAgC,CAAC,OAAwC;IACrF,WAAW,GAAG,OAAO,CAAC;AAC1B,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,4BAA4B;IACxC,OAAO,WAAW,CAAC;AACvB,CAAC;AAgED,IAAI,cAAc,GAAwC,IAAI,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAgD;IAClF,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACvB,cAAc,GAAG,IAAI,CAAC;QACtB,OAAO;IACX,CAAC;IACD,8FAA8F;IAC9F,2FAA2F;IAC3F,IAAI,WAAW,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACX,0FAA0F;YACtF,yEAAyE,CAChF,CAAC;IACN,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC5F,CAAC;IACD,mGAAmG;IACnG,8DAA8D;IAC9D,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;IAC5C,IAAI,CAAC,CAAC,WAAW,YAAY,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CACX,0FAA0F;YACtF,mFAAmF,CAC1F,CAAC;IACN,CAAC;IACD,IAAI,WAAW,CAAC,KAAK,KAAK,mBAAmB,EAAE,CAAC;QAC5C,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACX,qFAAqF;gBACjF,mEAAmE;gBACnE,4FAA4F,CACnG,CAAC;QACN,CAAC;IACL,CAAC;SAAM,CAAC;QACJ,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACX,qFAAqF;gBACjF,oFAAoF;gBACpF,0DAA0D,CACjE,CAAC;QACN,CAAC;IACL,CAAC;IACD,cAAc,GAAG,WAAW,CAAC;AACjC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,qBAAqB;IACjC,OAAO,cAAc,CAAC;AAC1B,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,0BAA0B;IACtC,OAAO,cAAc,KAAK,IAAI,CAAC;AACnC,CAAC"}

package/dist/providers/RecordedMessageTransport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RecordedMessageTransport.d.ts","sourceRoot":"","sources":["../../src/providers/RecordedMessageTransport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEtE,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC5B,6FAA6F;IAC7F,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACpC,8FAA8F;IAC9F,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,wBAAyB,YAAW,wBAAwB;IACrE,SAAgB,QAAQ,EAAE,MAAM,CAAC;IAEjC;;;OAGG;IACH,SAAgB,MAAM,SAAS;IAE/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;gBAEtC,UAAU,EAAE,eAAe,EAAE;IAKnC,KAAK,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC;CA6CpE"}
+{"version":3,"file":"RecordedMessageTransport.d.ts","sourceRoot":"","sources":["../../src/providers/RecordedMessageTransport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEtE,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC5B,6FAA6F;IAC7F,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACpC,8FAA8F;IAC9F,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,wBAAyB,YAAW,wBAAwB;IACrE,SAAgB,QAAQ,EAAE,MAAM,CAAC;IAEjC;;;OAGG;IACH,SAAgB,MAAM,SAAS;IAE/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;gBAEtC,UAAU,EAAE,eAAe,EAAE;IAKnC,KAAK,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC;CA2DpE"}

package/dist/providers/RecordedMessageTransport.js

@@ -30,20 +30,34 @@ export class RecordedMessageTransport {
                 `${recording.Payloads.length - query.Limit} were not returned.`);
         }
         /**
-         * A CAPPED REPLAY WITHHOLDS THE WATERMARK TOO, and not only for symmetry.
+         * A CAPPED REPLAY WITHHOLDS THE WATERMARK. ON EVERY RUN, INCLUDING THE FIRST.
          *
-         * The live transport already does this: Graph returns newest-first, so a truncated live batch
-         * strands everything between the old watermark and its oldest item. A replay truncates the
-         * other way — `slice(0, Limit)` takes the FIRST N of the recording — so if a recording happens
-         * to be ordered oldest-first, the batch IS contiguous with the watermark and advancing would
-         * be safe.
+         * This used to read `capped && !!query.Since`, on the reasoning that a first run has no
+         * watermark and so nothing to strand behind one. That reasoning is wrong, and the way it is
+         * wrong is worth writing down, because it is the same shape as the live-path defect this
+         * package was just fixed for.
          *
-         * That safety is an accident of file order, and nothing enforces it. A recording captured
-         * newest-first, or re-sorted by an editor, silently becomes the live bug with no code change
-         * anywhere. Withholding costs a re-read that de-duplication absorbs, so the flag is set
-         * whenever the limit binds and a watermark is in play, exactly as on the live path.
+         * The loss on a first run is not about an EXISTING watermark. It is about the watermark the
+         * run CREATES. Nothing enforces the order of a recording, and a NEWEST-FIRST one truncated to
+         * Limit returns the newest N and withholds the oldest; a watermark computed from what it DID
+         * return is then NEWER than the payloads it did not, and those are buried behind a mark that
+         * claims to cover them. That is the live bug exactly, reached without a prior watermark.
+         *
+         * It matters past the fixture because the mark is DURABLE and the transport behind it is
+         * swappable: a host that replays a truncated recording and later points the same connection
+         * at the live transport inherits the claim, and the live run skips real mail.
+         *
+         * So the flag is set whenever the limit binds, exactly as the live path now does. Withholding
+         * costs a re-read that de-duplication absorbs. Advancing costs correctness of the watermark.
+         *
+         * WHAT THIS DOES NOT FIX, so nobody reads more into it. `slice(0, Limit)` is POSITIONAL and
+         * the window is applied downstream, so a truncated replay re-takes the same first N payloads
+         * on every run whatever `Since` says. A recording longer than Limit cannot be replayed in
+         * full, in any order, capped or not — measured, not assumed. This flag keeps that from
+         * becoming a false watermark in the database; giving the fixture transport real paging is a
+         * separate change, and the Issues above already name the shortfall on every run.
          */
-        return { Payloads: payloads, Issues: issues, Capped: capped && !!query.Since };
+        return { Payloads: payloads, Issues: issues, Capped: capped };
     }
 }
 //# sourceMappingURL=RecordedMessageTransport.js.map

package/dist/providers/RecordedMessageTransport.js.map

@@ -1 +1 @@
-{"version":3,"file":"RecordedMessageTransport.js","sourceRoot":"","sources":["../../src/providers/RecordedMessageTransport.ts"],"names":[],"mappings":"AAsCA,MAAM,OAAO,wBAAwB;IAWjC,YAAmB,UAA6B;QARhD;;;WAGG;QACa,WAAM,GAAG,KAAK,CAAC;QAK3B,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,QAAQ,GAAG,4BAA4B,UAAU,CAAC,MAAM,eAAe,CAAC;IACjF,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,KAA0B;QACzC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE1C,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,sFAAsF;YACtF,mFAAmF;YACnF,wDAAwD;YACxD,MAAM,IAAI,KAAK,CACX,qCAAqC,KAAK,CAAC,OAAO,KAAK;gBACnD,uBAAuB,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG,CAClF,CAAC;QACN,CAAC;QAED,6FAA6F;QAC7F,iEAAiE;QACjE,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG;YACX,uBAAuB,SAAS,CAAC,UAAU,oDAAoD;SAClG,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;QACvD,IAAI,MAAM,EAAE,CAAC;YACT,MAAM,CAAC,IAAI,CACP,mBAAmB,SAAS,CAAC,QAAQ,CAAC,MAAM,yBAAyB,KAAK,CAAC,KAAK,OAAO;gBACnF,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,qBAAqB,CACtE,CAAC;QACN,CAAC;QAED;;;;;;;;;;;;;WAaG;QACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACnF,CAAC;CACJ"}
+{"version":3,"file":"RecordedMessageTransport.js","sourceRoot":"","sources":["../../src/providers/RecordedMessageTransport.ts"],"names":[],"mappings":"AAsCA,MAAM,OAAO,wBAAwB;IAWjC,YAAmB,UAA6B;QARhD;;;WAGG;QACa,WAAM,GAAG,KAAK,CAAC;QAK3B,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,QAAQ,GAAG,4BAA4B,UAAU,CAAC,MAAM,eAAe,CAAC;IACjF,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,KAA0B;QACzC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE1C,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,sFAAsF;YACtF,mFAAmF;YACnF,wDAAwD;YACxD,MAAM,IAAI,KAAK,CACX,qCAAqC,KAAK,CAAC,OAAO,KAAK;gBACnD,uBAAuB,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG,CAClF,CAAC;QACN,CAAC;QAED,6FAA6F;QAC7F,iEAAiE;QACjE,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG;YACX,uBAAuB,SAAS,CAAC,UAAU,oDAAoD;SAClG,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;QACvD,IAAI,MAAM,EAAE,CAAC;YACT,MAAM,CAAC,IAAI,CACP,mBAAmB,SAAS,CAAC,QAAQ,CAAC,MAAM,yBAAyB,KAAK,CAAC,KAAK,OAAO;gBACnF,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,qBAAqB,CACtE,CAAC;QACN,CAAC;QAED;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2BG;QACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClE,CAAC;CACJ"}

package/dist/stages.d.ts

@@ -44,6 +44,17 @@ export interface RuleRow {
     DateTo: Date | string | null;
     ParticipantScope: ParticipantScope | null;
     ActivitySyncRuleSetID: string | null;
+    /**
+     * `1 = also pull attachments into ActivityFile rows` — the column's own description.
+     *
+     * On the RULE rather than the connection because it is a per-decision choice: a rule that files
+     * customer threads may well want the contract attached, while one filing internal chatter does
+     * not. It is read at WRITE time from the rule that decided, not at fetch time, because rules run
+     * after the fetch.
+     */
+    IncludeAttachments: boolean;
+    /** Attachments larger than this are skipped and REPORTED. Null means no cap. */
+    MaxAttachmentBytes: number | null;
 }
 export interface KnownAddressHit {
     Address: string;