@particle-academy/microsoft-outlook-js 0.0.0 → 0.2.0

package/dist/index.d.cts

@@ -0,0 +1,342 @@
+import { ServiceDescriptor, PreparedRequest, ConnectorMode, ConnectorFaker, RequestedMode, Transport, ConnectorResult, TriggerDescriptor, ChallengeHandshake, LeaseDeclaration, SharedTokenScheme, handshakeResponse, InboundDelivery, WebhookVerification } from '@particle-academy/fancy-connector-core';
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/manifest.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/manifest.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- microsoft_outlook
+ */
+/**
+ * Microsoft Outlook, as one service descriptor shared by every Microsoft
+ * Outlook operation.
+ *
+ * @particle-academy/fancy-connector-core carries what is true of ALL
+ * connectors. This carries what is true of Microsoft Outlook: its base URL,
+ * its auth scheme, its idempotency header, and its faker.
+ *
+ * ## The sandbox trap, written down where it is used
+ *
+ * Microsoft's test estate is a Microsoft 365 Developer Program sandbox: a
+ * separate E5 tenant with its own users, its own calendars and its own OAuth
+ * consent, on the SAME host. Eligibility is limited -- Visual Studio
+ * Professional or Enterprise subscribers, ISV Success / Microsoft AI Cloud
+ * Partner Program members, or Premier/Unified Support customers -- and the
+ * tenant expires after 90 days of no development activity. Without one, every
+ * call reaches a real mailbox.
+ */
+
+/**
+ * The connector API version this package was GENERATED against.
+ *
+ * A literal, never imported. An imported constant lets an upgrade rewrite the
+ * very claim it exists to detect, after which the copy agrees with itself
+ * forever.
+ */
+declare const CONNECTOR_API_VERSION = 1;
+declare const MICROSOFT_OUTLOOK_BASE_URLS: {
+    readonly live: "https://graph.microsoft.com";
+    readonly sandbox: "https://graph.microsoft.com";
+};
+/** Credential keys a remote call cannot proceed without. */
+declare const MICROSOFT_OUTLOOK_REQUIRES: readonly ["accessToken", "refreshToken", "clientId", "clientSecret"];
+/**
+ * Apply Microsoft Outlook's auth scheme to an outgoing request.
+ *
+ *
+ *
+ * The mode is passed in because for some providers auth and estate are the
+ * same decision expressed in the URL; here it is unused, and saying so is
+ * cheaper than wondering later whether it was forgotten.
+ */
+declare function microsoftOutlookAuthorize(credentials: Record<string, string | undefined>, request: PreparedRequest, _mode: ConnectorMode): void;
+/** The Microsoft Outlook service, for the TypeScript runtime. */
+declare const MICROSOFT_OUTLOOK: ServiceDescriptor;
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/fixtures/ by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/fixtures/ (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- microsoft_outlook
+ */
+/**
+ * The Microsoft Outlook faker.
+ *
+ * Shapes, not behaviour: the goal is that a downstream node sees the field
+ * NAMES Microsoft Outlook actually publishes, so an author can wire {{
+ * $json.data.id }} against a fake and have it keep working against the real
+ * thing.
+ *
+ * Deterministic — same inputs, same output. A faker returning a fresh uuid
+ * every call cannot be asserted on, so its fixtures degrade to "it did not
+ * throw", which is the assertion that catches nothing.
+ */
+
+declare const microsoftOutlookFaker: ConnectorFaker;
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/actions/event-get.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/actions/event-get.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- microsoft_outlook
+ */
+/**
+ * Read one event from the connected account's Outlook calendar.
+ *
+ * GET /v1.0/me/events/{id} —
+ * https://learn.microsoft.com/en-us/graph/api/event-get?view=graph-rest-1.0
+ *
+ * Notice what is NOT here: no key, no base URL, no mode check, no retry loop,
+ * no fake/real branch. This describes the request; callConnector resolves the
+ * connection, picks the estate, and either calls Microsoft Outlook or calls
+ * the faker.
+ */
+
+declare const EVENT_GET_OPERATION = "event_get";
+type EventGetOptions = {
+    /** The node's resolved config. Keys: id. */
+    config: Record<string, unknown>;
+    credentials?: Record<string, string | undefined>;
+    mode?: RequestedMode;
+    connectionId?: string | null;
+    input?: unknown;
+    attempts?: number;
+    /** Override the transport. The only way to exercise this without a network. */
+    transport?: Transport;
+};
+declare function microsoftOutlookEventGet(options: EventGetOptions): Promise<ConnectorResult>;
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/actions/event-list.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/actions/event-list.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- microsoft_outlook
+ */
+/**
+ * List events from the connected account's Outlook calendar.
+ *
+ * GET /v1.0/me/events —
+ * https://learn.microsoft.com/en-us/graph/api/user-list-events?view=graph-rest-1.0
+ *
+ * Notice what is NOT here: no key, no base URL, no mode check, no retry loop,
+ * no fake/real branch. This describes the request; callConnector resolves the
+ * connection, picks the estate, and either calls Microsoft Outlook or calls
+ * the faker.
+ */
+
+declare const EVENT_LIST_OPERATION = "event_list";
+type EventListOptions = {
+    /** The node's resolved config. Keys: top, filter, orderby, select. */
+    config: Record<string, unknown>;
+    credentials?: Record<string, string | undefined>;
+    mode?: RequestedMode;
+    connectionId?: string | null;
+    input?: unknown;
+    attempts?: number;
+    /** Override the transport. The only way to exercise this without a network. */
+    transport?: Transport;
+};
+declare function microsoftOutlookEventList(options: EventListOptions): Promise<ConnectorResult>;
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/actions/subscription-create.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/actions/subscription-create.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- microsoft_outlook
+ */
+/**
+ * Subscribe to change notifications on the connected account's calendar
+ * events. The host's subscription machinery calls this; it is not a node most
+ * workflows need.
+ *
+ * POST /v1.0/subscriptions —
+ * https://learn.microsoft.com/en-us/graph/api/subscription-post-subscriptions?view=graph-rest-1.0
+ *
+ * Notice what is NOT here: no key, no base URL, no mode check, no retry loop,
+ * no fake/real branch. This describes the request; callConnector resolves the
+ * connection, picks the estate, and either calls Microsoft Outlook or calls
+ * the faker.
+ *
+ * sideEffects: unsafe-to-replay.
+ */
+
+declare const SUBSCRIPTION_CREATE_OPERATION = "subscription_create";
+type SubscriptionCreateOptions = {
+    /** The node's resolved config. Keys: changeType, resource, notificationUrl, lifecycleNotificationUrl, expirationDateTime, clientState. */
+    config: Record<string, unknown>;
+    credentials?: Record<string, string | undefined>;
+    mode?: RequestedMode;
+    connectionId?: string | null;
+    input?: unknown;
+    attempts?: number;
+    /** Override the transport. The only way to exercise this without a network. */
+    transport?: Transport;
+};
+declare function microsoftOutlookSubscriptionCreate(options: SubscriptionCreateOptions): Promise<ConnectorResult>;
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/actions/subscription-delete.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/actions/subscription-delete.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- microsoft_outlook
+ */
+/**
+ * Delete a change-notification subscription. The host's subscription machinery
+ * calls this when a trigger is removed.
+ *
+ * DELETE /v1.0/subscriptions/{id} —
+ * https://learn.microsoft.com/en-us/graph/api/subscription-delete?view=graph-rest-1.0
+ *
+ * Notice what is NOT here: no key, no base URL, no mode check, no retry loop,
+ * no fake/real branch. This describes the request; callConnector resolves the
+ * connection, picks the estate, and either calls Microsoft Outlook or calls
+ * the faker.
+ */
+
+declare const SUBSCRIPTION_DELETE_OPERATION = "subscription_delete";
+type SubscriptionDeleteOptions = {
+    /** The node's resolved config. Keys: id. */
+    config: Record<string, unknown>;
+    credentials?: Record<string, string | undefined>;
+    mode?: RequestedMode;
+    connectionId?: string | null;
+    input?: unknown;
+    attempts?: number;
+    /** Override the transport. The only way to exercise this without a network. */
+    transport?: Transport;
+};
+declare function microsoftOutlookSubscriptionDelete(options: SubscriptionDeleteOptions): Promise<ConnectorResult>;
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/actions/subscription-renew.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/actions/subscription-renew.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- microsoft_outlook
+ */
+/**
+ * Extend a change-notification subscription before it expires. The host's
+ * subscription machinery calls this when the lease is due.
+ *
+ * PATCH /v1.0/subscriptions/{id} —
+ * https://learn.microsoft.com/en-us/graph/api/subscription-update?view=graph-rest-1.0
+ *
+ * Notice what is NOT here: no key, no base URL, no mode check, no retry loop,
+ * no fake/real branch. This describes the request; callConnector resolves the
+ * connection, picks the estate, and either calls Microsoft Outlook or calls
+ * the faker.
+ */
+
+declare const SUBSCRIPTION_RENEW_OPERATION = "subscription_renew";
+type SubscriptionRenewOptions = {
+    /** The node's resolved config. Keys: id, expirationDateTime. */
+    config: Record<string, unknown>;
+    credentials?: Record<string, string | undefined>;
+    mode?: RequestedMode;
+    connectionId?: string | null;
+    input?: unknown;
+    attempts?: number;
+    /** Override the transport. The only way to exercise this without a network. */
+    transport?: Transport;
+};
+declare function microsoftOutlookSubscriptionRenew(options: SubscriptionRenewOptions): Promise<ConnectorResult>;
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/triggers/calendar-changed.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/triggers/calendar-changed.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- microsoft_outlook
+ */
+/**
+ * Microsoft Outlook's subscription trigger — the delivery contract.
+ *
+ * Kept beside the service descriptor rather than inside a node, because the
+ * way a delivery is verified is a fact about MICROSOFT OUTLOOK. Two Microsoft
+ * Outlook triggers must not be able to disagree about how a delivery is
+ * verified.
+ *
+ * A SUBSCRIPTION: Microsoft Outlook stops delivering unless somebody renews
+ * it, forever, and if nobody does the workflow stops firing with no error
+ * anywhere. The lease below says where the expiry is read from and how early
+ * to renew; the host runs ONE renewal scheduler for every expiring trigger.
+ */
+
+/** Where Microsoft Outlook echoes the token it was given when the subscription was created. */
+declare const MICROSOFT_OUTLOOK_CALENDAR_CHANGED_TOKEN_SCHEME: SharedTokenScheme;
+/**
+ * Microsoft Outlook's challenge before it delivers anything: a request
+ * carrying `?validationToken=…` must be answered with that value as plain
+ * text, or the subscription is never created.
+ * `answerMicrosoftOutlookHandshake` is the pure half; the host's routing layer
+ * asks it before mounting the route.
+ */
+declare const MICROSOFT_OUTLOOK_CALENDAR_CHANGED_HANDSHAKE: ChallengeHandshake;
+/**
+ * The lease this subscription carries: where the provider's expiry sits in the
+ * `subscription_create` response (`expirationDateTime`, rfc3339), how early
+ * the host renews, and what it calls when the lease is due. The host builds
+ * the value with the core's `leaseFromResponse` and runs one scheduler for
+ * every expiring trigger.
+ */
+declare const MICROSOFT_OUTLOOK_CALENDAR_CHANGED_LEASE: LeaseDeclaration;
+/**
+ * Which of this package's actions create, renew and stop the subscription.
+ * `renew` is null where the provider cannot renew and the host calls create
+ * again — after stopping the old one, and after re-listing, because
+ * notifications during the gap are gone.
+ */
+declare const MICROSOFT_OUTLOOK_CALENDAR_CHANGED_SUBSCRIPTION: {
+    readonly create: "subscription_create";
+    readonly renew: "subscription_renew";
+    readonly stop: "subscription_delete";
+};
+declare const MICROSOFT_OUTLOOK_CALENDAR_CHANGED: TriggerDescriptor;
+/**
+ * Verify one inbound Microsoft Outlook delivery.
+ *
+ * The host calls this BEFORE starting a run, with the body exactly as
+ * received. Re-serialised JSON changes key order and whitespace, and produces
+ * a mismatch that looks precisely like a wrong secret — hours of debugging the
+ * wrong thing.
+ *
+ * The secret is the connection's `clientState`.
+ */
+declare function verifyMicrosoftOutlookDelivery(delivery: InboundDelivery, clientState: string | undefined, now?: number): Promise<WebhookVerification>;
+/**
+ * Answer Microsoft Outlook's challenge — what to send back (200, text/plain,
+ * the decoded `validationToken`), or undefined when the request is not a
+ * challenge at all.
+ */
+declare function answerMicrosoftOutlookHandshake(query: Record<string, string | string[] | undefined>): ReturnType<typeof handshakeResponse>;
+
+export { CONNECTOR_API_VERSION, EVENT_GET_OPERATION, EVENT_LIST_OPERATION, type EventGetOptions, type EventListOptions, MICROSOFT_OUTLOOK, MICROSOFT_OUTLOOK_BASE_URLS, MICROSOFT_OUTLOOK_CALENDAR_CHANGED, MICROSOFT_OUTLOOK_CALENDAR_CHANGED_HANDSHAKE, MICROSOFT_OUTLOOK_CALENDAR_CHANGED_LEASE, MICROSOFT_OUTLOOK_CALENDAR_CHANGED_SUBSCRIPTION, MICROSOFT_OUTLOOK_CALENDAR_CHANGED_TOKEN_SCHEME, MICROSOFT_OUTLOOK_REQUIRES, SUBSCRIPTION_CREATE_OPERATION, SUBSCRIPTION_DELETE_OPERATION, SUBSCRIPTION_RENEW_OPERATION, type SubscriptionCreateOptions, type SubscriptionDeleteOptions, type SubscriptionRenewOptions, answerMicrosoftOutlookHandshake, microsoftOutlookAuthorize, microsoftOutlookEventGet, microsoftOutlookEventList, microsoftOutlookFaker, microsoftOutlookSubscriptionCreate, microsoftOutlookSubscriptionDelete, microsoftOutlookSubscriptionRenew, verifyMicrosoftOutlookDelivery };

package/dist/index.d.ts

@@ -0,0 +1,342 @@
+import { ServiceDescriptor, PreparedRequest, ConnectorMode, ConnectorFaker, RequestedMode, Transport, ConnectorResult, TriggerDescriptor, ChallengeHandshake, LeaseDeclaration, SharedTokenScheme, handshakeResponse, InboundDelivery, WebhookVerification } from '@particle-academy/fancy-connector-core';
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/manifest.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/manifest.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- microsoft_outlook
+ */
+/**
+ * Microsoft Outlook, as one service descriptor shared by every Microsoft
+ * Outlook operation.
+ *
+ * @particle-academy/fancy-connector-core carries what is true of ALL
+ * connectors. This carries what is true of Microsoft Outlook: its base URL,
+ * its auth scheme, its idempotency header, and its faker.
+ *
+ * ## The sandbox trap, written down where it is used
+ *
+ * Microsoft's test estate is a Microsoft 365 Developer Program sandbox: a
+ * separate E5 tenant with its own users, its own calendars and its own OAuth
+ * consent, on the SAME host. Eligibility is limited -- Visual Studio
+ * Professional or Enterprise subscribers, ISV Success / Microsoft AI Cloud
+ * Partner Program members, or Premier/Unified Support customers -- and the
+ * tenant expires after 90 days of no development activity. Without one, every
+ * call reaches a real mailbox.
+ */
+
+/**
+ * The connector API version this package was GENERATED against.
+ *
+ * A literal, never imported. An imported constant lets an upgrade rewrite the
+ * very claim it exists to detect, after which the copy agrees with itself
+ * forever.
+ */
+declare const CONNECTOR_API_VERSION = 1;
+declare const MICROSOFT_OUTLOOK_BASE_URLS: {
+    readonly live: "https://graph.microsoft.com";
+    readonly sandbox: "https://graph.microsoft.com";
+};
+/** Credential keys a remote call cannot proceed without. */
+declare const MICROSOFT_OUTLOOK_REQUIRES: readonly ["accessToken", "refreshToken", "clientId", "clientSecret"];
+/**
+ * Apply Microsoft Outlook's auth scheme to an outgoing request.
+ *
+ *
+ *
+ * The mode is passed in because for some providers auth and estate are the
+ * same decision expressed in the URL; here it is unused, and saying so is
+ * cheaper than wondering later whether it was forgotten.
+ */
+declare function microsoftOutlookAuthorize(credentials: Record<string, string | undefined>, request: PreparedRequest, _mode: ConnectorMode): void;
+/** The Microsoft Outlook service, for the TypeScript runtime. */
+declare const MICROSOFT_OUTLOOK: ServiceDescriptor;
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/fixtures/ by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/fixtures/ (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- microsoft_outlook
+ */
+/**
+ * The Microsoft Outlook faker.
+ *
+ * Shapes, not behaviour: the goal is that a downstream node sees the field
+ * NAMES Microsoft Outlook actually publishes, so an author can wire {{
+ * $json.data.id }} against a fake and have it keep working against the real
+ * thing.
+ *
+ * Deterministic — same inputs, same output. A faker returning a fresh uuid
+ * every call cannot be asserted on, so its fixtures degrade to "it did not
+ * throw", which is the assertion that catches nothing.
+ */
+
+declare const microsoftOutlookFaker: ConnectorFaker;
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/actions/event-get.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/actions/event-get.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- microsoft_outlook
+ */
+/**
+ * Read one event from the connected account's Outlook calendar.
+ *
+ * GET /v1.0/me/events/{id} —
+ * https://learn.microsoft.com/en-us/graph/api/event-get?view=graph-rest-1.0
+ *
+ * Notice what is NOT here: no key, no base URL, no mode check, no retry loop,
+ * no fake/real branch. This describes the request; callConnector resolves the
+ * connection, picks the estate, and either calls Microsoft Outlook or calls
+ * the faker.
+ */
+
+declare const EVENT_GET_OPERATION = "event_get";
+type EventGetOptions = {
+    /** The node's resolved config. Keys: id. */
+    config: Record<string, unknown>;
+    credentials?: Record<string, string | undefined>;
+    mode?: RequestedMode;
+    connectionId?: string | null;
+    input?: unknown;
+    attempts?: number;
+    /** Override the transport. The only way to exercise this without a network. */
+    transport?: Transport;
+};
+declare function microsoftOutlookEventGet(options: EventGetOptions): Promise<ConnectorResult>;
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/actions/event-list.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/actions/event-list.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- microsoft_outlook
+ */
+/**
+ * List events from the connected account's Outlook calendar.
+ *
+ * GET /v1.0/me/events —
+ * https://learn.microsoft.com/en-us/graph/api/user-list-events?view=graph-rest-1.0
+ *
+ * Notice what is NOT here: no key, no base URL, no mode check, no retry loop,
+ * no fake/real branch. This describes the request; callConnector resolves the
+ * connection, picks the estate, and either calls Microsoft Outlook or calls
+ * the faker.
+ */
+
+declare const EVENT_LIST_OPERATION = "event_list";
+type EventListOptions = {
+    /** The node's resolved config. Keys: top, filter, orderby, select. */
+    config: Record<string, unknown>;
+    credentials?: Record<string, string | undefined>;
+    mode?: RequestedMode;
+    connectionId?: string | null;
+    input?: unknown;
+    attempts?: number;
+    /** Override the transport. The only way to exercise this without a network. */
+    transport?: Transport;
+};
+declare function microsoftOutlookEventList(options: EventListOptions): Promise<ConnectorResult>;
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/actions/subscription-create.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/actions/subscription-create.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- microsoft_outlook
+ */
+/**
+ * Subscribe to change notifications on the connected account's calendar
+ * events. The host's subscription machinery calls this; it is not a node most
+ * workflows need.
+ *
+ * POST /v1.0/subscriptions —
+ * https://learn.microsoft.com/en-us/graph/api/subscription-post-subscriptions?view=graph-rest-1.0
+ *
+ * Notice what is NOT here: no key, no base URL, no mode check, no retry loop,
+ * no fake/real branch. This describes the request; callConnector resolves the
+ * connection, picks the estate, and either calls Microsoft Outlook or calls
+ * the faker.
+ *
+ * sideEffects: unsafe-to-replay.
+ */
+
+declare const SUBSCRIPTION_CREATE_OPERATION = "subscription_create";
+type SubscriptionCreateOptions = {
+    /** The node's resolved config. Keys: changeType, resource, notificationUrl, lifecycleNotificationUrl, expirationDateTime, clientState. */
+    config: Record<string, unknown>;
+    credentials?: Record<string, string | undefined>;
+    mode?: RequestedMode;
+    connectionId?: string | null;
+    input?: unknown;
+    attempts?: number;
+    /** Override the transport. The only way to exercise this without a network. */
+    transport?: Transport;
+};
+declare function microsoftOutlookSubscriptionCreate(options: SubscriptionCreateOptions): Promise<ConnectorResult>;
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/actions/subscription-delete.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/actions/subscription-delete.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- microsoft_outlook
+ */
+/**
+ * Delete a change-notification subscription. The host's subscription machinery
+ * calls this when a trigger is removed.
+ *
+ * DELETE /v1.0/subscriptions/{id} —
+ * https://learn.microsoft.com/en-us/graph/api/subscription-delete?view=graph-rest-1.0
+ *
+ * Notice what is NOT here: no key, no base URL, no mode check, no retry loop,
+ * no fake/real branch. This describes the request; callConnector resolves the
+ * connection, picks the estate, and either calls Microsoft Outlook or calls
+ * the faker.
+ */
+
+declare const SUBSCRIPTION_DELETE_OPERATION = "subscription_delete";
+type SubscriptionDeleteOptions = {
+    /** The node's resolved config. Keys: id. */
+    config: Record<string, unknown>;
+    credentials?: Record<string, string | undefined>;
+    mode?: RequestedMode;
+    connectionId?: string | null;
+    input?: unknown;
+    attempts?: number;
+    /** Override the transport. The only way to exercise this without a network. */
+    transport?: Transport;
+};
+declare function microsoftOutlookSubscriptionDelete(options: SubscriptionDeleteOptions): Promise<ConnectorResult>;
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/actions/subscription-renew.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/actions/subscription-renew.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- microsoft_outlook
+ */
+/**
+ * Extend a change-notification subscription before it expires. The host's
+ * subscription machinery calls this when the lease is due.
+ *
+ * PATCH /v1.0/subscriptions/{id} —
+ * https://learn.microsoft.com/en-us/graph/api/subscription-update?view=graph-rest-1.0
+ *
+ * Notice what is NOT here: no key, no base URL, no mode check, no retry loop,
+ * no fake/real branch. This describes the request; callConnector resolves the
+ * connection, picks the estate, and either calls Microsoft Outlook or calls
+ * the faker.
+ */
+
+declare const SUBSCRIPTION_RENEW_OPERATION = "subscription_renew";
+type SubscriptionRenewOptions = {
+    /** The node's resolved config. Keys: id, expirationDateTime. */
+    config: Record<string, unknown>;
+    credentials?: Record<string, string | undefined>;
+    mode?: RequestedMode;
+    connectionId?: string | null;
+    input?: unknown;
+    attempts?: number;
+    /** Override the transport. The only way to exercise this without a network. */
+    transport?: Transport;
+};
+declare function microsoftOutlookSubscriptionRenew(options: SubscriptionRenewOptions): Promise<ConnectorResult>;
+
+/**
+ * GENERATED FILE — do not edit.
+ *
+ * Emitted from provider/triggers/calendar-changed.json by weaver's generator.
+ * A hand-edit here is destroyed by the next protocol sync, which is worse than
+ * being rejected, because it works until it silently does not. Fix
+ * provider/triggers/calendar-changed.json (or weaver's template/) and regenerate:
+ *
+ *     npm run provider -- microsoft_outlook
+ */
+/**
+ * Microsoft Outlook's subscription trigger — the delivery contract.
+ *
+ * Kept beside the service descriptor rather than inside a node, because the
+ * way a delivery is verified is a fact about MICROSOFT OUTLOOK. Two Microsoft
+ * Outlook triggers must not be able to disagree about how a delivery is
+ * verified.
+ *
+ * A SUBSCRIPTION: Microsoft Outlook stops delivering unless somebody renews
+ * it, forever, and if nobody does the workflow stops firing with no error
+ * anywhere. The lease below says where the expiry is read from and how early
+ * to renew; the host runs ONE renewal scheduler for every expiring trigger.
+ */
+
+/** Where Microsoft Outlook echoes the token it was given when the subscription was created. */
+declare const MICROSOFT_OUTLOOK_CALENDAR_CHANGED_TOKEN_SCHEME: SharedTokenScheme;
+/**
+ * Microsoft Outlook's challenge before it delivers anything: a request
+ * carrying `?validationToken=…` must be answered with that value as plain
+ * text, or the subscription is never created.
+ * `answerMicrosoftOutlookHandshake` is the pure half; the host's routing layer
+ * asks it before mounting the route.
+ */
+declare const MICROSOFT_OUTLOOK_CALENDAR_CHANGED_HANDSHAKE: ChallengeHandshake;
+/**
+ * The lease this subscription carries: where the provider's expiry sits in the
+ * `subscription_create` response (`expirationDateTime`, rfc3339), how early
+ * the host renews, and what it calls when the lease is due. The host builds
+ * the value with the core's `leaseFromResponse` and runs one scheduler for
+ * every expiring trigger.
+ */
+declare const MICROSOFT_OUTLOOK_CALENDAR_CHANGED_LEASE: LeaseDeclaration;
+/**
+ * Which of this package's actions create, renew and stop the subscription.
+ * `renew` is null where the provider cannot renew and the host calls create
+ * again — after stopping the old one, and after re-listing, because
+ * notifications during the gap are gone.
+ */
+declare const MICROSOFT_OUTLOOK_CALENDAR_CHANGED_SUBSCRIPTION: {
+    readonly create: "subscription_create";
+    readonly renew: "subscription_renew";
+    readonly stop: "subscription_delete";
+};
+declare const MICROSOFT_OUTLOOK_CALENDAR_CHANGED: TriggerDescriptor;
+/**
+ * Verify one inbound Microsoft Outlook delivery.
+ *
+ * The host calls this BEFORE starting a run, with the body exactly as
+ * received. Re-serialised JSON changes key order and whitespace, and produces
+ * a mismatch that looks precisely like a wrong secret — hours of debugging the
+ * wrong thing.
+ *
+ * The secret is the connection's `clientState`.
+ */
+declare function verifyMicrosoftOutlookDelivery(delivery: InboundDelivery, clientState: string | undefined, now?: number): Promise<WebhookVerification>;
+/**
+ * Answer Microsoft Outlook's challenge — what to send back (200, text/plain,
+ * the decoded `validationToken`), or undefined when the request is not a
+ * challenge at all.
+ */
+declare function answerMicrosoftOutlookHandshake(query: Record<string, string | string[] | undefined>): ReturnType<typeof handshakeResponse>;
+
+export { CONNECTOR_API_VERSION, EVENT_GET_OPERATION, EVENT_LIST_OPERATION, type EventGetOptions, type EventListOptions, MICROSOFT_OUTLOOK, MICROSOFT_OUTLOOK_BASE_URLS, MICROSOFT_OUTLOOK_CALENDAR_CHANGED, MICROSOFT_OUTLOOK_CALENDAR_CHANGED_HANDSHAKE, MICROSOFT_OUTLOOK_CALENDAR_CHANGED_LEASE, MICROSOFT_OUTLOOK_CALENDAR_CHANGED_SUBSCRIPTION, MICROSOFT_OUTLOOK_CALENDAR_CHANGED_TOKEN_SCHEME, MICROSOFT_OUTLOOK_REQUIRES, SUBSCRIPTION_CREATE_OPERATION, SUBSCRIPTION_DELETE_OPERATION, SUBSCRIPTION_RENEW_OPERATION, type SubscriptionCreateOptions, type SubscriptionDeleteOptions, type SubscriptionRenewOptions, answerMicrosoftOutlookHandshake, microsoftOutlookAuthorize, microsoftOutlookEventGet, microsoftOutlookEventList, microsoftOutlookFaker, microsoftOutlookSubscriptionCreate, microsoftOutlookSubscriptionDelete, microsoftOutlookSubscriptionRenew, verifyMicrosoftOutlookDelivery };