@rubytech/create-maxy-code 0.1.439 → 0.1.441

package/payload/platform/plugins/outlook/mcp/dist/tools/account-register.js

@@ -7,6 +7,19 @@ import { log } from "../lib/log.js";
  * the result. Returns immediately — no blocking wait.
  */
 export async function runAccountRegisterStart(args) {
+    // Single-slot pending: one device-code flow in flight per account. A live
+    // pending entry means a registration is mid-sign-in; refuse rather than
+    // overwrite its device code (which would strand the operator's open browser).
+    // An expired entry is stale and gets replaced. Genuinely-concurrent flows are
+    // out of scope — see .tasks/1594.
+    const existing = args.pendingStore.read();
+    if (existing && Date.now() <= existing.expiresAtMs) {
+        log({ event: "register-in-progress", account: args.accountId });
+        return {
+            status: "in-progress",
+            message: "An Outlook registration is already in progress for this account. Finish that sign-in at microsoft.com/devicelogin, or wait for its code to expire, before starting another.",
+        };
+    }
     const start = await startDeviceCode({ clientId: args.clientId, tenantId: args.tenantId });
     const now = Date.now();
     args.pendingStore.write({
@@ -88,17 +101,23 @@ export async function runAccountRegisterPoll(args) {
     }
     const me = (await meResp.json());
     const graphUserId = me.id ?? me.mail ?? me.userPrincipalName ?? "unknown";
-    args.tokenStore.store(tokenResponse.access_token, tokenResponse.refresh_token ?? null, tokenResponse.expires_in, { graphUserId, scopes });
-    const tokenExpSec = Math.floor((args.tokenStore.read()?.accessTokenExpiry ?? 0) / 1000);
+    const mail = me.mail ?? me.userPrincipalName ?? null;
+    // Store under the resolved mailbox identity, so a second registration adds a
+    // mailbox rather than overwriting the first. Re-registering the same
+    // graphUserId updates that mailbox in place (no duplicate).
+    const store = args.registry.storeFor(graphUserId);
+    store.store(tokenResponse.access_token, tokenResponse.refresh_token ?? null, tokenResponse.expires_in, { graphUserId, mail, scopes });
+    const tokenExpSec = Math.floor((store.read()?.accessTokenExpiry ?? 0) / 1000);
     log({
         event: "auth-ok",
         account: args.accountId,
         graphUserId,
+        mail: mail ?? "",
         scopes: scopes.join(","),
         tokenExpSec,
     });
     clearPending(args);
-    return { status: "registered", graphUserId, scopes, tokenExpSec };
+    return { status: "registered", graphUserId, mail, scopes, tokenExpSec };
 }
 /** Verified clear + census on every terminal poll outcome. */
 function clearPending(args) {

package/payload/platform/plugins/outlook/mcp/dist/tools/account-register.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-register.js","sourceRoot":"","sources":["../../src/tools/account-register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAG1E,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAuBpC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAK7C;IACC,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,GAAG,GAAG,KAAK,CAAC,YAAY,GAAG,IAAI;QAC5C,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;IACH,GAAG,CAAC;QACF,KAAK,EAAE,mBAAmB;QAC1B,OAAO,EAAE,IAAI,CAAC,SAAS;QACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU,EAAE,KAAK,CAAC,YAAY;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClG,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAM5C;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,kFAAkF;SAC5F,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;IAEjE,IAAI,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAC9B,GAAG,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1E,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,eAAe,CACnC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EACpD,OAAO,CAAC,UAAU,CACnB,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1F,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,GAAG,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1G,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1E,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,GAAG,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QACzE,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAED,yCAAyC;IACzC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,KAAK,CACxB,uEAAuE,EACvE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,aAAa,CAAC,YAAY,EAAE,EAAE,EAAE,CACvE,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,sEAAsE;QACtE,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,oDAAoD,MAAM,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAoB,CAAC;IACpD,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,iBAAiB,IAAI,SAAS,CAAC;IAE1E,IAAI,CAAC,UAAU,CAAC,KAAK,CACnB,aAAa,CAAC,YAAY,EAC1B,aAAa,CAAC,aAAa,IAAI,IAAI,EACnC,aAAa,CAAC,UAAU,EACxB,EAAE,WAAW,EAAE,MAAM,EAAE,CACxB,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,iBAAiB,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACxF,GAAG,CAAC;QACF,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,IAAI,CAAC,SAAS;QACvB,WAAW;QACX,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QACxB,WAAW;KACZ,CAAC,CAAC;IACH,YAAY,CAAC,IAAI,CAAC,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACpE,CAAC;AAED,8DAA8D;AAC9D,SAAS,YAAY,CAAC,IAAuD;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;IACnD,GAAG,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrE,GAAG,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpG,CAAC"}
+{"version":3,"file":"account-register.js","sourceRoot":"","sources":["../../src/tools/account-register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAG1E,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAyBpC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAK7C;IACC,0EAA0E;IAC1E,wEAAwE;IACxE,8EAA8E;IAC9E,8EAA8E;IAC9E,kCAAkC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QACnD,GAAG,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAChE,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,OAAO,EACL,6KAA6K;SAChL,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,GAAG,GAAG,KAAK,CAAC,YAAY,GAAG,IAAI;QAC5C,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;IACH,GAAG,CAAC;QACF,KAAK,EAAE,mBAAmB;QAC1B,OAAO,EAAE,IAAI,CAAC,SAAS;QACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU,EAAE,KAAK,CAAC,YAAY;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClG,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAM5C;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,kFAAkF;SAC5F,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;IAEjE,IAAI,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAC9B,GAAG,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1E,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,eAAe,CACnC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EACpD,OAAO,CAAC,UAAU,CACnB,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1F,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,GAAG,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1G,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1E,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,GAAG,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QACzE,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAED,yCAAyC;IACzC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,KAAK,CACxB,uEAAuE,EACvE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,aAAa,CAAC,YAAY,EAAE,EAAE,EAAE,CACvE,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,sEAAsE;QACtE,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,oDAAoD,MAAM,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAoB,CAAC;IACpD,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,iBAAiB,IAAI,SAAS,CAAC;IAC1E,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,iBAAiB,IAAI,IAAI,CAAC;IAErD,6EAA6E;IAC7E,qEAAqE;IACrE,4DAA4D;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClD,KAAK,CAAC,KAAK,CACT,aAAa,CAAC,YAAY,EAC1B,aAAa,CAAC,aAAa,IAAI,IAAI,EACnC,aAAa,CAAC,UAAU,EACxB,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAC9B,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,iBAAiB,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9E,GAAG,CAAC;QACF,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,IAAI,CAAC,SAAS;QACvB,WAAW;QACX,IAAI,EAAE,IAAI,IAAI,EAAE;QAChB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QACxB,WAAW;KACZ,CAAC,CAAC;IACH,YAAY,CAAC,IAAI,CAAC,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAC1E,CAAC;AAED,8DAA8D;AAC9D,SAAS,YAAY,CAAC,IAAuD;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;IACnD,GAAG,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrE,GAAG,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpG,CAAC"}

package/payload/platform/plugins/outlook/mcp/dist/tools/mail-list.d.ts

@@ -3,6 +3,23 @@ export interface MailListArgs {
     top?: number;
     folder?: string;
 }
+/**
+ * Map a caller-supplied `folder` value to the Graph `/me/mailFolders/{id}`
+ * path segment.
+ *
+ * Graph accepts only a well-known token (a single word, no spaces:
+ * `inbox`, `sentitems`, `drafts`, `deleteditems`, `junkemail`, `archive`,
+ * `outbox`) or a real folder id in that segment. A human display name such as
+ * "Sent Items" is neither, so Graph rejects it with "Id is malformed". This
+ * normalizes the full well-known set plus common aliases — case-insensitively
+ * and space-insensitively — to the Graph token. Any value not in the alias
+ * table is assumed to be a raw folder id and returned unchanged (`asRawId`),
+ * preserving the prior pass-through behaviour.
+ */
+export declare function resolveFolder(folder: string): {
+    token: string;
+    asRawId: boolean;
+};
 export interface MailListItem {
     id: string;
     subject: string | null;

package/payload/platform/plugins/outlook/mcp/dist/tools/mail-list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mail-list.d.ts","sourceRoot":"","sources":["../../src/tools/mail-list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAIhE,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;CACjB;AAiBD,wBAAsB,WAAW,CAC/B,MAAM,EAAE,iBAAiB,EACzB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,YAAY,EAAE,CAAC,CA+BzB"}
+{"version":3,"file":"mail-list.d.ts","sourceRoot":"","sources":["../../src/tools/mail-list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAIhE,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IAMb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAUjF;AAsBD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;CACjB;AAiBD,wBAAsB,WAAW,CAC/B,MAAM,EAAE,iBAAiB,EACzB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,YAAY,EAAE,CAAC,CAiDzB"}

package/payload/platform/plugins/outlook/mcp/dist/tools/mail-list.js

@@ -1,30 +1,93 @@
 import { callGraph } from "../lib/graph-client.js";
 import { log } from "../lib/log.js";
+/**
+ * Map a caller-supplied `folder` value to the Graph `/me/mailFolders/{id}`
+ * path segment.
+ *
+ * Graph accepts only a well-known token (a single word, no spaces:
+ * `inbox`, `sentitems`, `drafts`, `deleteditems`, `junkemail`, `archive`,
+ * `outbox`) or a real folder id in that segment. A human display name such as
+ * "Sent Items" is neither, so Graph rejects it with "Id is malformed". This
+ * normalizes the full well-known set plus common aliases — case-insensitively
+ * and space-insensitively — to the Graph token. Any value not in the alias
+ * table is assumed to be a raw folder id and returned unchanged (`asRawId`),
+ * preserving the prior pass-through behaviour.
+ */
+export function resolveFolder(folder) {
+    const key = folder.toLowerCase().replace(/\s+/g, "");
+    // Own-key check only: a bare `WELL_KNOWN_ALIASES[key]` would also read
+    // inherited members, so `folder` values like "constructor" or "__proto__"
+    // would resolve to an Object.prototype member instead of passing through as
+    // raw ids.
+    if (Object.hasOwn(WELL_KNOWN_ALIASES, key)) {
+        return { token: WELL_KNOWN_ALIASES[key], asRawId: false };
+    }
+    return { token: folder, asRawId: true };
+}
+// Lookup keys are already lowercased and space-stripped. Inbox maps to the
+// capitalized "Inbox" segment the tool has always used (Graph is
+// case-insensitive on well-known names); the rest map to the lowercase Graph
+// tokens. "" (and whitespace-only) collapses to the key "" → Inbox, folding in
+// the former lone-inbox special case.
+const WELL_KNOWN_ALIASES = {
+    "": "Inbox",
+    inbox: "Inbox",
+    sentitems: "sentitems",
+    sent: "sentitems",
+    drafts: "drafts",
+    deleteditems: "deleteditems",
+    trash: "deleteditems",
+    junkemail: "junkemail",
+    junk: "junkemail",
+    spam: "junkemail",
+    archive: "archive",
+    outbox: "outbox",
+};
 const FIELDS = "id,subject,from,receivedDateTime,bodyPreview,isRead";
 export async function runMailList(config, args) {
     const top = clampTop(args.top, 25);
-    const folder = args.folder ?? "Inbox";
+    const folderIn = args.folder ?? "Inbox";
+    const { token: folderResolved, asRawId } = resolveFolder(folderIn);
     const startMs = Date.now();
-    const result = await callGraph(config, async (client) => {
-        const path = folder.toLowerCase() === "inbox" || folder === ""
-            ? "/me/mailFolders/Inbox/messages"
-            : `/me/mailFolders/${encodeURIComponent(folder)}/messages`;
-        return (await client
-            .api(path)
-            .top(top)
-            .orderby("receivedDateTime DESC")
-            .select(FIELDS)
-            .get());
-    }, { tool: "mail-list" });
-    const items = result.value.map(shapeMessage);
-    log({
-        event: "mail-list",
-        account: config.accountId,
-        folder,
-        count: items.length,
-        elapsedMs: Date.now() - startMs,
-    });
-    return items;
+    try {
+        const result = await callGraph(config, async (client) => {
+            const path = `/me/mailFolders/${encodeURIComponent(folderResolved)}/messages`;
+            return (await client
+                .api(path)
+                .top(top)
+                .orderby("receivedDateTime DESC")
+                .select(FIELDS)
+                .get());
+        }, { tool: "mail-list" });
+        const items = result.value.map(shapeMessage);
+        log({
+            event: "mail-list",
+            op: "resolve",
+            account: config.accountId,
+            folderIn,
+            folderResolved,
+            asRawId,
+            count: items.length,
+            elapsedMs: Date.now() - startMs,
+        });
+        return items;
+    }
+    catch (err) {
+        // callGraph already logged the graph-error line (status/code, e.g. the 400
+        // "Id is malformed"); this line attaches the folder resolution so the
+        // failing input and the token it mapped to are visible on the error path.
+        log({
+            event: "mail-list",
+            op: "resolve",
+            account: config.accountId,
+            folderIn,
+            folderResolved,
+            asRawId,
+            error: err.message,
+            elapsedMs: Date.now() - startMs,
+        });
+        throw err;
+    }
 }
 function shapeMessage(msg) {
     return {

package/payload/platform/plugins/outlook/mcp/dist/tools/mail-list.js.map

@@ -1 +1 @@
-{"version":3,"file":"mail-list.js","sourceRoot":"","sources":["../../src/tools/mail-list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AA6BpC,MAAM,MAAM,GAAG,qDAAqD,CAAC;AAErE,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAyB,EACzB,IAAkB;IAElB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE3B,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,MAAM,EACN,KAAK,EAAE,MAAM,EAAE,EAAE;QACf,MAAM,IAAI,GACR,MAAM,CAAC,WAAW,EAAE,KAAK,OAAO,IAAI,MAAM,KAAK,EAAE;YAC/C,CAAC,CAAC,gCAAgC;YAClC,CAAC,CAAC,mBAAmB,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC;QAC/D,OAAO,CAAC,MAAM,MAAM;aACjB,GAAG,CAAC,IAAI,CAAC;aACT,GAAG,CAAC,GAAG,CAAC;aACR,OAAO,CAAC,uBAAuB,CAAC;aAChC,MAAM,CAAC,MAAM,CAAC;aACd,GAAG,EAAE,CAA8B,CAAC;IACzC,CAAC,EACD,EAAE,IAAI,EAAE,WAAW,EAAE,CACtB,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC7C,GAAG,CAAC;QACF,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,MAAM,CAAC,SAAS;QACzB,MAAM;QACN,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;KAChC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,GAAe;IACnC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;QAC5B,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,IAAI,IAAI;QAC7C,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,WAAW,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;QACnD,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB,EAAE,QAAgB;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1E,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACxB,IAAI,KAAK,GAAG,GAAG;QAAE,OAAO,GAAG,CAAC;IAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"mail-list.js","sourceRoot":"","sources":["../../src/tools/mail-list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAYpC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,uEAAuE;IACvE,0EAA0E;IAC1E,4EAA4E;IAC5E,WAAW;IACX,IAAI,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,2EAA2E;AAC3E,iEAAiE;AACjE,6EAA6E;AAC7E,+EAA+E;AAC/E,sCAAsC;AACtC,MAAM,kBAAkB,GAA2B;IACjD,EAAE,EAAE,OAAO;IACX,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,WAAW;IACjB,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,cAAc;IAC5B,KAAK,EAAE,cAAc;IACrB,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;CACjB,CAAC;AAwBF,MAAM,MAAM,GAAG,qDAAqD,CAAC;AAErE,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAyB,EACzB,IAAkB;IAElB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC;IACxC,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,MAAM,EACN,KAAK,EAAE,MAAM,EAAE,EAAE;YACf,MAAM,IAAI,GAAG,mBAAmB,kBAAkB,CAAC,cAAc,CAAC,WAAW,CAAC;YAC9E,OAAO,CAAC,MAAM,MAAM;iBACjB,GAAG,CAAC,IAAI,CAAC;iBACT,GAAG,CAAC,GAAG,CAAC;iBACR,OAAO,CAAC,uBAAuB,CAAC;iBAChC,MAAM,CAAC,MAAM,CAAC;iBACd,GAAG,EAAE,CAA8B,CAAC;QACzC,CAAC,EACD,EAAE,IAAI,EAAE,WAAW,EAAE,CACtB,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7C,GAAG,CAAC;YACF,KAAK,EAAE,WAAW;YAClB,EAAE,EAAE,SAAS;YACb,OAAO,EAAE,MAAM,CAAC,SAAS;YACzB,QAAQ;YACR,cAAc;YACd,OAAO;YACP,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SAChC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2EAA2E;QAC3E,sEAAsE;QACtE,0EAA0E;QAC1E,GAAG,CAAC;YACF,KAAK,EAAE,WAAW;YAClB,EAAE,EAAE,SAAS;YACb,OAAO,EAAE,MAAM,CAAC,SAAS;YACzB,QAAQ;YACR,cAAc;YACd,OAAO;YACP,KAAK,EAAG,GAAa,CAAC,OAAO;YAC7B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SAChC,CAAC,CAAC;QACH,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAe;IACnC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI;QAC5B,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,IAAI,IAAI;QAC7C,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,WAAW,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;QACnD,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB,EAAE,QAAgB;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1E,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACxB,IAAI,KAAK,GAAG,GAAG;QAAE,OAAO,GAAG,CAAC;IAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC"}

package/payload/platform/plugins/outlook/mcp/dist/tools/mailbox-list.d.ts

@@ -0,0 +1,26 @@
+export interface MailboxListItem {
+    /** Opaque directory handle under mailboxes/ — stable even when unreadable. */
+    mailboxKey: string;
+    /** The mailbox email address, when the blob is readable. */
+    mailbox: string | null;
+    graphUserId: string | null;
+    scopes: string[];
+    tokenExpSec: number | null;
+    refreshExpired: boolean;
+    readable: boolean;
+}
+export interface MailboxListResult {
+    count: number;
+    /** How many blobs are on disk but do not decrypt/parse — an orphaned store. */
+    unreadable: number;
+    mailboxes: MailboxListItem[];
+}
+/**
+ * List every Outlook mailbox attached to this account. Local only — reads the
+ * on-disk stores, never Graph — so it reconciles what is stored against what the
+ * agent can address even when Graph is unreachable. An unreadable blob is
+ * surfaced (`readable:false`) rather than dropped, closing the no-event blind
+ * spot where a mailbox silently falls out of addressability.
+ */
+export declare function runMailboxList(accountId: string, accountsDir: string): MailboxListResult;
+//# sourceMappingURL=mailbox-list.d.ts.map

package/payload/platform/plugins/outlook/mcp/dist/tools/mailbox-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailbox-list.d.ts","sourceRoot":"","sources":["../../src/tools/mailbox-list.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,eAAe;IAC9B,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,eAAe,EAAE,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,iBAAiB,CAiBxF"}

package/payload/platform/plugins/outlook/mcp/dist/tools/mailbox-list.js

@@ -0,0 +1,28 @@
+import { MailboxRegistry } from "../auth/mailbox-registry.js";
+import { log } from "../lib/log.js";
+/**
+ * List every Outlook mailbox attached to this account. Local only — reads the
+ * on-disk stores, never Graph — so it reconciles what is stored against what the
+ * agent can address even when Graph is unreachable. An unreadable blob is
+ * surfaced (`readable:false`) rather than dropped, closing the no-event blind
+ * spot where a mailbox silently falls out of addressability.
+ */
+export function runMailboxList(accountId, accountsDir) {
+    const boxes = new MailboxRegistry(accountId, accountsDir).list();
+    const unreadable = boxes.filter((b) => !b.readable).length;
+    log({ event: "mailbox-list", account: accountId, count: boxes.length, unreadable });
+    return {
+        count: boxes.length,
+        unreadable,
+        mailboxes: boxes.map((b) => ({
+            mailboxKey: b.mailboxKey,
+            mailbox: b.mail,
+            graphUserId: b.graphUserId,
+            scopes: b.scopes,
+            tokenExpSec: b.tokenExpSec,
+            refreshExpired: b.refreshExpired,
+            readable: b.readable,
+        })),
+    };
+}
+//# sourceMappingURL=mailbox-list.js.map

package/payload/platform/plugins/outlook/mcp/dist/tools/mailbox-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailbox-list.js","sourceRoot":"","sources":["../../src/tools/mailbox-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAqBpC;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,WAAmB;IACnE,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IACjE,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IAC3D,GAAG,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACpF,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,UAAU;QACV,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,OAAO,EAAE,CAAC,CAAC,IAAI;YACf,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/outlook/references/auth.md

@@ -72,8 +72,8 @@ operator                                        plugin
    |                                              | < authorization_pending  → pending   |
    |                                              | < tokens (once consented) → success  |
    |                                              | <----------------------------------- |
-   |                                              | encrypt → write {tokens.enc}         |
-   |                                              | GET /me  (record graphUserId)        |
+   |                                              | GET /me  (resolve graphUserId + mail) |
+   |                                              | encrypt → write mailboxes/<id>/tokens.enc |
    |                                              | clear pending (verified re-stat)     |
    | { status: "registered", graphUserId, ... }   |                                     |
    |<---------------------------------------------|                                     |
@@ -83,16 +83,33 @@ operator                                        plugin
 
 ## Token store layout
 
-Per-account, mode 0700 directory + mode 0600 files:
+One account can hold several mailboxes. Each mailbox owns its own `tokens.enc`
+under `mailboxes/<graphUserId>/`, and they share the one account-level AES `.key`.
+Account isolation is unchanged — the key is per-account, never shared across
+accounts — while mailboxes within one account share it. Per-account, mode 0700
+directories + mode 0600 files:
 
 ```
 data/accounts/<accountId>/secrets/outlook/
-├── .key                    # 32 random bytes, base64-encoded — the AES-256-CBC key
-├── tokens.enc              # AES-256-CBC ciphertext: "<iv-hex>:<cipher-hex>" of the token JSON blob
-└── pending-devicecode.enc  # transient — the device_code between register + poll; cleared on any terminal outcome
+├── .key                              # 32 random bytes, base64 — the AES-256-CBC key, shared by every mailbox on this account
+├── mailboxes/
+│   ├── <graphUserId-A>/tokens.enc    # AES-256-CBC "<iv-hex>:<cipher-hex>" of mailbox A's token JSON blob
+│   └── <graphUserId-B>/tokens.enc    # mailbox B — coexists, never overwritten by A
+└── pending-devicecode.enc            # transient — the device_code between register + poll; cleared on any terminal outcome
 ```
 
-The pending file reuses the same `.key`. It is written by `outlook-account-register` and removed (verified by re-stat) when polling reaches `registered`, `expired`, or `denied`, so a device_code never lingers.
+**Migration.** A pre-multi-mailbox install has a single `tokens.enc` at the
+account root. On first read the registry moves it into
+`mailboxes/<graphUserId>/tokens.enc`. Because the AES key is unchanged, the
+ciphertext is valid as-is — the migration is a file move, never a re-encrypt,
+and never forces a re-auth.
+
+**One registration at a time.** The pending file is single-slot per account and
+reuses the same `.key`. `outlook-account-register` refuses with an `in-progress`
+signal when a live device-code flow already exists, rather than overwriting it.
+The entry is removed (verified by re-stat) when polling reaches `registered`,
+`expired`, or `denied`, so a device_code never lingers. Genuinely-concurrent
+registrations are out of scope — see `.tasks/1594`.
 
 The JSON blob shape:
 
@@ -103,13 +120,24 @@ The JSON blob shape:
   accessTokenExpiry: number;        // unix ms
   refreshTokenExpiry: number;       // unix ms; ~90 days from issue
   lastRefresh: number;              // unix ms
-  graphUserId: string | null;       // from /me.id
+  graphUserId: string | null;       // from /me.id — also the mailbox directory key
+  mail: string | null;              // from /me.mail (or userPrincipalName) — the selectable address
   scopes: string[];                 // granted scopes from token response
 }
 ```
 
 Atomic write: temp + rename. Either old or new tokens, never partial.
 
+## Mailbox selection
+
+Every operational tool takes an optional `mailbox` argument (an email address or
+graphUserId). Resolution order: explicit `mailbox` → the sole connected mailbox →
+a typed refusal listing the connected mailboxes when two or more are attached and
+none is named. Each resolution logs `cred-resolve account=<id> mailbox=<id>
+source=arg|sole|none|refused`, so a wrong or absent selector is diagnosable from
+one line. `outlook-mailbox-list` enumerates every mailbox on the account from the
+local stores (no network) and flags any whose blob cannot be read.
+
 ## Refresh
 
 Triggered automatically when the access token is within `5 minutes` of expiry (`refreshThresholdMs`). Failure → terminal `token-refresh-failed`, tokens cleared, operator must re-register. Refresh tokens last 90 days.

package/payload/platform/plugins/outlook/references/graph-surfaces.md

@@ -6,7 +6,21 @@ Microsoft Graph endpoints used by each tool, with the response shape and the fie
 
 **Endpoint (Inbox):** `GET /me/mailFolders/Inbox/messages?$top={N}&$orderby=receivedDateTime DESC&$select=id,subject,from,receivedDateTime,bodyPreview,isRead`
 
-**Endpoint (other folder):** `GET /me/mailFolders/{folderId-or-displayName}/messages?...`
+**Endpoint (other folder):** `GET /me/mailFolders/{well-known-token-or-folderId}/messages?...`
+
+The `folder` arg is normalized before the path is built. Graph's `{id}` segment accepts only a well-known token (single word, no spaces) or a real folder id — a display name like "Sent Items" is rejected with "Id is malformed". The tool maps the full well-known set plus common aliases, case- and space-insensitively, to the Graph token:
+
+| Input (any case/spacing) | Graph token |
+|---|---|
+| `Inbox`, `` (empty) | `Inbox` |
+| `Sent Items`, `sent` | `sentitems` |
+| `Drafts` | `drafts` |
+| `Deleted Items`, `trash` | `deleteditems` |
+| `Junk Email`, `junk`, `spam` | `junkemail` |
+| `Archive` | `archive` |
+| `Outbox` | `outbox` |
+
+Any value not in this table is treated as a raw folder id and passed through unchanged. A custom folder's display name (e.g. "Projects") is therefore not resolved — resolving custom folders by name would need a `/me/mailFolders` lookup and is out of scope.
 
 **Returned shape:**
 ```typescript

package/payload/platform/plugins/scheduling/mcp/dist/scripts/publish-availability.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Dispatcher script: publish-availability
+ *
+ * Self-contained, like reconcile-bookings. Publishes the install account's
+ * computed free/busy into its Cloudflare D1 `availability_snapshot` table so the
+ * public booking page's edge Function keeps serving open times while the device
+ * is offline. Runs while the device is ONLINE; when the device is off it simply
+ * does not run and the edge keeps serving the last snapshot until it returns.
+ *
+ * It reads the device's own free/busy from the always-running local server
+ * (127.0.0.1:$MAXY_UI_INTERNAL_PORT/api/calendar/free-busy — a gate-exempt public
+ * path), so it needs no Neo4j and no tunnel/DNS. The account whose free/busy the
+ * endpoint serves is the one the server resolved and hands in via
+ * PUBLISH_ACCOUNT_DIR / PUBLISH_ACCOUNT_ID.
+ *
+ * If the local endpoint is unreachable it makes NO D1 write (result=skipped-
+ * unreachable), leaving the last edge snapshot intact. A PID lock prevents
+ * overlapping runs. Each run records the outcome to a local last-publish.json so
+ * the server's audit tick can report snapshot age independent of this job.
+ *
+ * Observability — one [calendar-availability] op=publish line per run.
+ *
+ *   PLATFORM_ROOT=... MAXY_UI_INTERNAL_PORT=... PUBLISH_ACCOUNT_DIR=... \
+ *   PUBLISH_ACCOUNT_ID=... node dist/scripts/publish-availability.js
+ */
+export {};
+//# sourceMappingURL=publish-availability.d.ts.map

package/payload/platform/plugins/scheduling/mcp/dist/scripts/publish-availability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-availability.d.ts","sourceRoot":"","sources":["../../src/scripts/publish-availability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG"}