@rubytech/create-sitedesk-code 0.1.414 → 0.1.417

package/payload/platform/plugins/outlook/mcp/dist/tools/draft-send.d.ts

@@ -0,0 +1,17 @@
+import type { GraphClientConfig } from "../lib/graph-client.js";
+export interface DraftSendArgs {
+    draftId: string;
+}
+export interface DraftSendResult {
+    status: "sent";
+    draftId: string;
+    httpStatus: number;
+}
+/**
+ * Send an existing draft via Graph `POST /me/messages/{id}/send` (empty body).
+ * Graph consumes the draft and returns 202. Success is asserted on the 202
+ * status. The draft-created / draft-sent id pairing in the logs is the orphan
+ * diagnostic: a draft-created id with no matching draft-sent is an orphan.
+ */
+export declare function runDraftSend(config: GraphClientConfig, args: DraftSendArgs): Promise<DraftSendResult>;
+//# sourceMappingURL=draft-send.d.ts.map

package/payload/platform/plugins/outlook/mcp/dist/tools/draft-send.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"draft-send.d.ts","sourceRoot":"","sources":["../../src/tools/draft-send.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAIhE,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,iBAAiB,EACzB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,eAAe,CAAC,CAoB1B"}

package/payload/platform/plugins/outlook/mcp/dist/tools/draft-send.js

@@ -0,0 +1,26 @@
+import { postGraph } from "../lib/graph-client.js";
+import { log } from "../lib/log.js";
+/**
+ * Send an existing draft via Graph `POST /me/messages/{id}/send` (empty body).
+ * Graph consumes the draft and returns 202. Success is asserted on the 202
+ * status. The draft-created / draft-sent id pairing in the logs is the orphan
+ * diagnostic: a draft-created id with no matching draft-sent is an orphan.
+ */
+export async function runDraftSend(config, args) {
+    const account = config.accountId;
+    const draftId = args.draftId.trim();
+    if (!draftId) {
+        throw new Error("outlook-draft-send: draftId is required.");
+    }
+    log({ event: "draft-send-request", account, id: draftId });
+    try {
+        const { status } = await postGraph(config, `/me/messages/${encodeURIComponent(draftId)}/send`, undefined, { tool: "draft-send" });
+        log({ event: "draft-sent", account, id: draftId, status });
+        return { status: "sent", draftId, httpStatus: status };
+    }
+    catch (err) {
+        log({ event: "draft-send-failed", account, id: draftId, error: err.message });
+        throw err;
+    }
+}
+//# sourceMappingURL=draft-send.js.map

package/payload/platform/plugins/outlook/mcp/dist/tools/draft-send.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"draft-send.js","sourceRoot":"","sources":["../../src/tools/draft-send.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAYpC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAyB,EACzB,IAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,GAAG,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAChC,MAAM,EACN,gBAAgB,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAClD,SAAS,EACT,EAAE,IAAI,EAAE,YAAY,EAAE,CACvB,CAAC;QACF,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACzF,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/payload/platform/plugins/outlook/mcp/dist/tools/draft.d.ts

@@ -0,0 +1,11 @@
+import type { GraphClientConfig } from "../lib/graph-client.js";
+import { type MessageInput } from "../lib/message.js";
+export interface DraftResult {
+    draftId: string;
+}
+/**
+ * Create a draft via Graph `POST /me/messages`. Graph returns 201 with the
+ * created message, whose `id` is the stable handle passed to outlook-draft-send.
+ */
+export declare function runDraft(config: GraphClientConfig, input: MessageInput): Promise<DraftResult>;
+//# sourceMappingURL=draft.d.ts.map

package/payload/platform/plugins/outlook/mcp/dist/tools/draft.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"draft.d.ts","sourceRoot":"","sources":["../../src/tools/draft.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGpE,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,iBAAiB,EACzB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,WAAW,CAAC,CAgBtB"}

package/payload/platform/plugins/outlook/mcp/dist/tools/draft.js

@@ -0,0 +1,26 @@
+import { postGraph } from "../lib/graph-client.js";
+import { buildMessage } from "../lib/message.js";
+import { log } from "../lib/log.js";
+/**
+ * Create a draft via Graph `POST /me/messages`. Graph returns 201 with the
+ * created message, whose `id` is the stable handle passed to outlook-draft-send.
+ */
+export async function runDraft(config, input) {
+    const account = config.accountId;
+    log({ event: "draft-request", account });
+    const message = buildMessage(input);
+    try {
+        const { json } = await postGraph(config, "/me/messages", message, { tool: "draft" });
+        const draftId = json?.id;
+        if (!draftId) {
+            throw new Error("outlook-draft: Graph created the draft but returned no id.");
+        }
+        log({ event: "draft-created", account, id: draftId });
+        return { draftId };
+    }
+    catch (err) {
+        log({ event: "draft-failed", account, error: err.message });
+        throw err;
+    }
+}
+//# sourceMappingURL=draft.js.map

package/payload/platform/plugins/outlook/mcp/dist/tools/draft.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"draft.js","sourceRoot":"","sources":["../../src/tools/draft.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAqB,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAMpC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAyB,EACzB,KAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC;IACjC,GAAG,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACrF,MAAM,OAAO,GAAI,IAA+B,EAAE,EAAE,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,GAAG,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/payload/platform/plugins/outlook/mcp/dist/tools/mail-send.d.ts

@@ -0,0 +1,14 @@
+import type { GraphClientConfig } from "../lib/graph-client.js";
+import { type MessageInput } from "../lib/message.js";
+export interface MailSendResult {
+    status: "sent";
+    httpStatus: number;
+    messageId: string | null;
+}
+/**
+ * Send a message via Graph `POST /me/sendMail`. Graph returns 202 with no body,
+ * so `messageId` is null unless a body is ever returned. Success is asserted on
+ * the 202 status, not on the absence of a throw.
+ */
+export declare function runMailSend(config: GraphClientConfig, input: MessageInput): Promise<MailSendResult>;
+//# sourceMappingURL=mail-send.d.ts.map

package/payload/platform/plugins/outlook/mcp/dist/tools/mail-send.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mail-send.d.ts","sourceRoot":"","sources":["../../src/tools/mail-send.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGpE,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,iBAAiB,EACzB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,cAAc,CAAC,CAoBzB"}

package/payload/platform/plugins/outlook/mcp/dist/tools/mail-send.js

@@ -0,0 +1,26 @@
+import { postGraph } from "../lib/graph-client.js";
+import { buildMessage } from "../lib/message.js";
+import { log } from "../lib/log.js";
+/**
+ * Send a message via Graph `POST /me/sendMail`. Graph returns 202 with no body,
+ * so `messageId` is null unless a body is ever returned. Success is asserted on
+ * the 202 status, not on the absence of a throw.
+ */
+export async function runMailSend(config, input) {
+    const account = config.accountId;
+    log({ event: "send-request", account, to: input.to.length, subjLen: input.subject.length });
+    const message = buildMessage(input);
+    const recipients = input.to.length + (input.cc?.length ?? 0) + (input.bcc?.length ?? 0);
+    log({ event: "send-args", account, recipients, hasBody: input.body.length > 0 });
+    try {
+        const { status, json } = await postGraph(config, "/me/sendMail", { message, saveToSentItems: true }, { tool: "mail-send" });
+        const messageId = json?.id ?? null;
+        log({ event: "sent", account, status, messageId });
+        return { status: "sent", httpStatus: status, messageId };
+    }
+    catch (err) {
+        log({ event: "send-failed", account, error: err.message });
+        throw err;
+    }
+}
+//# sourceMappingURL=mail-send.js.map

package/payload/platform/plugins/outlook/mcp/dist/tools/mail-send.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mail-send.js","sourceRoot":"","sources":["../../src/tools/mail-send.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAqB,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAQpC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAyB,EACzB,KAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC;IACjC,GAAG,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;IACxF,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CACtC,MAAM,EACN,cAAc,EACd,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,EAClC,EAAE,IAAI,EAAE,WAAW,EAAE,CACtB,CAAC;QACF,MAAM,SAAS,GAAI,IAA+B,EAAE,EAAE,IAAI,IAAI,CAAC;QAC/D,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACnD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/payload/platform/plugins/outlook/mcp/scripts/verify-doc-impl.sh

@@ -45,8 +45,8 @@ TOOLS_REGISTERED=$(grep -oE '"outlook-[a-z\-]+",' "$INDEX_TS" \
 # Tool names referenced in outlook-guide.md (backtick-wrapped)
 TOOLS_IN_GUIDE=$(grep -oE '`outlook-[a-z\-]+`' "$GUIDE" | tr -d '`' | sort -u)
 
-# Tool names in PLUGIN.md frontmatter (lines starting with "  - outlook-")
-TOOLS_IN_PLUGIN_MD=$(grep -E '^\s+- outlook-' "$PLUGIN_MD" | sed -E 's/^[[:space:]]*-[[:space:]]+//' | sort -u)
+# Tool names in PLUGIN.md frontmatter (lines shaped "  - name: outlook-...")
+TOOLS_IN_PLUGIN_MD=$(grep -E '^[[:space:]]+- name: outlook-' "$PLUGIN_MD" | sed -E 's/^[[:space:]]*-[[:space:]]+name:[[:space:]]*//' | sort -u)
 
 # Set 1: every tool in guide must be registered
 while IFS= read -r tool; do

package/payload/platform/plugins/outlook/references/auth.md

@@ -1,102 +1,99 @@
 # Outlook Auth Reference
 
-## Vendored upstream
+## Provenance
 
-The PKCE flow and encrypted token store are adapted from:
+The device-code register flow is **bespoke to SiteDesk**, not vendored. It is not the `nsakki55/outlook-mcp` loopback `authManager` — that ran an HTTP server on the box and required consent in a browser on the same machine, which is impossible on a headless/remote install. `device-flow.ts` talks to Microsoft's `/devicecode` and `/token` endpoints directly.
 
-- **Repo:** [`nsakki55/outlook-mcp`](https://github.com/nsakki55/outlook-mcp)
-- **Pinned commit:** `e49d8e68ac8d69db653c25803127dc3b98626cda`
-- **License:** MIT
-
-Adaptations:
+The **encrypted token store** (`token-store.ts`) is still adapted from [`nsakki55/outlook-mcp`](https://github.com/nsakki55/outlook-mcp) (commit `e49d8e68ac8d69db653c25803127dc3b98626cda`, MIT):
 
 - Per-account paths (`{ACCOUNTS_DIR}/{accountId}/secrets/outlook/`) instead of upstream's single-user `~/.outlook-mcp/`
 - `keytar` fallback removed (Pi runs headless; no Secret Service)
 - `node-persist` removed; single JSON blob written atomically (temp + rename)
-- Loopback callback port is **ephemeral** via `server.listen(0)` (upstream uses fixed `49152`)
-- No `xdg-open` browser auto-launch; auth URL is logged + returned to the operator for the VNC browser
-- `outlook-account-register` awaits the full PKCE flow synchronously (5-min timeout)
 
-To re-vendor at a newer SHA:
+## Client ID model: one vendor app per brand
+
+End users never register an Azure app. The `OUTLOOK_CLIENT_ID` is a **public, non-secret** value (a PKCE public-client app has no client secret), and the app is **multi-tenant** (`/common`), so **one vendor-owned Entra app per brand** serves every install and every mailbox on that brand. End users only complete the OAuth consent screen; per-mailbox tokens stay per-account and encrypted, so a shared client ID does not weaken isolation.
 
-1. Fetch `tokenManager.ts` and `authManager.ts` from the new SHA.
-2. Apply the adaptations above.
-3. Update the **Pinned commit** line above.
-4. Bump `@maxy/outlook` version.
-5. Run the test suite.
+The value ships as the brand default: `brands/<brand>/brand.json#outlookClientId`. The installer stamps it onto the `-claude-session-manager` unit env as `OUTLOOK_CLIENT_ID` (+ `OUTLOOK_TENANT_ID=common`), and the plugin resolves it through the PLUGIN.md `mcp.env` passthrough. A brand that ships the field empty has the plugin inert (register refuses) until its vendor app exists — no operator action makes it work.
 
-## Entra app registration (one-time per SiteDesk install)
+**Per-install override (escape hatch, not required):** setting `OUTLOOK_CLIENT_ID` in the install's env overrides the brand default. This is only for a vendor testing a replacement app; normal installs need nothing.
 
-The plugin requires an Azure AD ("Entra ID") app the operator owns. Steps:
+### Vendor provisioning runbook (one-time per brand)
 
-1. Sign in to the [Azure portal](https://portal.azure.com) with a Microsoft account.
+Run once per brand to mint the app whose ID goes in that brand's `brand.json`. Not an end-user step.
+
+1. Sign in to the [Azure portal](https://portal.azure.com) with the brand's Microsoft account.
 2. Go to **Microsoft Entra ID → App registrations → New registration**.
-3. **Name:** `SiteDesk Outlook` (or any name the operator prefers).
-4. **Supported account types:** *Accounts in any organizational directory and personal Microsoft accounts*.
-5. **Redirect URI** (Platform: *Mobile and desktop applications*): `http://localhost`
-   - **Note:** no port is specified. Microsoft Identity Platform treats native-app loopback redirects with port-flexible matching, allowing the plugin to use an ephemeral port.
-6. Click **Register**. Copy the **Application (client) ID** — this is `OUTLOOK_CLIENT_ID`.
-7. Go to **API permissions → Add a permission → Microsoft Graph → Delegated permissions**, add:
+3. **Name:** the brand's product name plus "Outlook" (e.g. `SiteDesk Outlook`).
+4. **Supported account types:** *Accounts in any organizational directory and personal Microsoft accounts* (multi-tenant is required — one app serves every end user's tenant).
+5. Leave **Redirect URI** empty. The device-code flow does not use one.
+6. Click **Register**. Copy the **Application (client) ID** — this is the brand's `outlookClientId`.
+7. Go to **Authentication → Advanced settings → Allow public client flows** and set it to **Yes**. The device-code grant is a public-client flow and fails with `AADSTS7000218` if this is off.
+8. Go to **API permissions → Add a permission → Microsoft Graph → Delegated permissions**, add:
    - `offline_access`
    - `User.Read`
-   - `Mail.Read`
+   - `Mail.ReadWrite`
+   - `Mail.Send`
    - `Calendars.Read`
    - `Contacts.Read`
-8. Click **Grant admin consent for <tenant>** if applicable. Personal accounts auto-consent at first sign-in.
-9. Set the env var on the Pi:
-   ```
-   OUTLOOK_CLIENT_ID=<the Application (client) ID copied above>
-   OUTLOOK_TENANT_ID=common   # or your tenant GUID for single-tenant
+9. Leave admin consent to the end user: with delegated scopes on a multi-tenant app, each end user consents for their own mailbox at first sign-in. (Frictionless cross-tenant consent is smoother once the app is publisher-verified via MPN — a separate enabling step.)
+10. Set the value in the brand's `brand.json` and re-bundle:
+   ```jsonc
+   // brands/<brand>/brand.json
+   "outlookClientId": "<the Application (client) ID copied above>"
    ```
+   `OUTLOOK_TENANT_ID` is always `common`; the installer stamps it and no brand field is needed.
 
-## PKCE flow (per-account)
+## Device-code flow (per-account)
 
-Triggered by `outlook-account-register`. Sequence:
+Two tools: `outlook-account-register` starts the flow, `outlook-account-register-poll` completes it. No loopback server, no same-machine constraint — the operator consents on any device.
 
 ```
 operator                                        plugin                              Microsoft
    |                                              |                                     |
    | outlook-account-register                     |                                     |
-   |--------------------------------------------->|                                     |
-   |                                              | bind 127.0.0.1:<ephemeral-port>     |
-   |                                              | generate code_verifier (32 bytes)   |
-   |                                              | code_challenge = SHA256(verifier)   |
-   |                                              | state = randomBytes(16)             |
-   |                                              |                                     |
-   | { authUrl, status: "pending" }               |                                     |
+   |--------------------------------------------->| POST /devicecode (client_id+scope)  |
+   |                                              | -----------------------------------> |
+   |                                              | < device_code, user_code,           |
+   |                                              |   verification_uri, expires_in,     |
+   |                                              |   interval                          |
+   |                                              | <----------------------------------- |
+   |                                              | encrypt → write {pending-devicecode.enc}
+   | { status: "pending", userCode,               |                                     |
+   |   verificationUri, ... }                     |                                     |
    |<---------------------------------------------|                                     |
    |                                              |                                     |
-   | open authUrl in VNC browser                  |                                     |
-   |--------------------------------------------------------------------------------->  |
+   | open microsoft.com/devicelogin on ANY device |                                     |
+   | enter userCode, sign in, consent ------------------------------------------------> |
    |                                              |                                     |
-   |                                  consent ←--------------------------------------- |
-   |                                              |                                     |
-   |                                              | GET /callback?code=...&state=...   |
-   |                                              | <----------------------------------|
-   |                                              |                                     |
-   |                                              | verify state                        |
-   |                                              | POST /token (code + verifier)       |
+   | outlook-account-register-poll  (repeat)      |                                     |
+   |--------------------------------------------->| POST /token (device_code grant)     |
    |                                              | -----------------------------------> |
-   |                                              | < tokens                             |
+   |                                              | < authorization_pending  → pending   |
+   |                                              | < tokens (once consented) → success  |
    |                                              | <----------------------------------- |
    |                                              | encrypt → write {tokens.enc}         |
    |                                              | GET /me  (record graphUserId)        |
-   |                                              | -----------------------------------> |
-   |                                              |                                     |
+   |                                              | clear pending (verified re-stat)     |
    | { status: "registered", graphUserId, ... }   |                                     |
    |<---------------------------------------------|                                     |
 ```
 
+`poll` maps Microsoft's polling errors: `authorization_pending` → `pending` (wait `intervalSec`, poll again), `slow_down` → `pending` with a bumped interval, `expired_token` → `expired`, `access_denied` → `denied`.
+
 ## Token store layout
 
 Per-account, mode 0700 directory + mode 0600 files:
 
 ```
 data/accounts/<accountId>/secrets/outlook/
-├── .key          # 32 random bytes, base64-encoded — the AES-256-CBC key
-└── tokens.enc    # AES-256-CBC ciphertext: "<iv-hex>:<cipher-hex>" of JSON blob
+├── .key                    # 32 random bytes, base64-encoded — the AES-256-CBC key
+├── tokens.enc              # AES-256-CBC ciphertext: "<iv-hex>:<cipher-hex>" of the token JSON blob
+└── pending-devicecode.enc  # transient — the device_code between register + poll; cleared on any terminal outcome
 ```
 
+The pending file reuses the same `.key`. It is written by `outlook-account-register` and removed (verified by re-stat) when polling reaches `registered`, `expired`, or `denied`, so a device_code never lingers.
+
 The JSON blob shape:
 
 ```typescript

package/payload/platform/plugins/outlook/references/graph-surfaces.md

@@ -28,6 +28,42 @@ Array<{
 
 **Returned shape:** identical to `outlook-mail-list`.
 
+## outlook-mail-send
+
+**Endpoint:** `POST /me/sendMail`
+
+**Request body:**
+```json
+{
+  "message": {
+    "subject": "…",
+    "body": { "contentType": "Text | HTML", "content": "…" },
+    "toRecipients": [{ "emailAddress": { "address": "a@example.com" } }],
+    "ccRecipients": [ … ],
+    "bccRecipients": [ … ]
+  },
+  "saveToSentItems": true
+}
+```
+
+**Success:** HTTP `202 Accepted`, empty body. No message id is returned. The tool asserts on the 202 — an empty body is not proof of send.
+
+## outlook-draft
+
+**Endpoint:** `POST /me/messages`
+
+**Request body:** the `message` object above (no `saveToSentItems` wrapper).
+
+**Success:** HTTP `201 Created` with the created message JSON; `id` is the stable handle for `outlook-draft-send`.
+
+## outlook-draft-send
+
+**Endpoint:** `POST /me/messages/{id}/send`
+
+**Request body:** none.
+
+**Success:** HTTP `202 Accepted`, empty body. Graph consumes the draft (it moves out of Drafts on send).
+
 ## outlook-calendar-list
 
 **Endpoint:** `GET /me/calendarView?startDateTime={now}&endDateTime={now+rangeDays}&$top={N}&$orderby=start/dateTime ASC&$select=id,subject,start,end,location,attendees,isAllDay,organizer`
@@ -59,6 +95,54 @@ Array<{
 }
 ```
 
+## outlook-calendar-create
+
+**Endpoint:** `POST /me/events` (`ResponseType.RAW`; success asserted on HTTP 201).
+
+**Request body:** `subject`, `start`/`end` (`{ dateTime, timeZone }`), and optionally `body` (`{ contentType: "HTML", content }`), `location` (`{ displayName }`), `attendees` (`{ emailAddress: { address, name }, type }`), `isOnlineMeeting`, `recurrence` (Graph recurrence object, passed through).
+
+**Returned shape:** `{ eventId: string; webLink: string | null }`.
+
+## outlook-calendar-update
+
+**Endpoint:** `PATCH /me/events/{eventId}` (`ResponseType.RAW`; success asserted on HTTP 200).
+
+**Request body:** only the supplied fields, same shapes as create.
+
+**Returned shape:** `{ eventId: string; updated: true }`.
+
+## outlook-calendar-cancel
+
+**Endpoint:** determined by a pre-GET on `GET /me/events/{eventId}?$select=isOrganizer,attendees`.
+- Organiser of a meeting with attendees: `POST /me/events/{eventId}/cancel` with `{ Comment }` (HTTP 202); attendees are notified.
+- Otherwise: `DELETE /me/events/{eventId}` (HTTP 204).
+
+**Returned shape:** `{ eventId: string; mode: "cancel" | "delete" }`.
+
+## outlook-calendar-respond
+
+**Endpoint:** `POST /me/events/{eventId}/{accept|decline|tentativelyAccept}` with `{ Comment, SendResponse }` (HTTP 202). `action=tentative` maps to `tentativelyAccept`.
+
+**Returned shape:** `{ eventId: string; action: "accept" | "decline" | "tentative" }`.
+
+## outlook-calendar-freebusy
+
+**Endpoint:** `POST /me/calendar/getSchedule` with `{ schedules, startTime, endTime, availabilityViewInterval }` (HTTP 200).
+
+**Returned shape:**
+```typescript
+{
+  requested: number;
+  resolved: number;              // count of error-free entries; resolved < requested flags a failed address
+  availability: Array<{
+    address: string;             // scheduleId
+    availabilityView: string;
+    busy: Array<{ start: string; end: string; status: string }>;
+    error: string | null;        // Graph FreeBusyError message when the address could not be resolved
+  }>;
+}
+```
+
 ## outlook-contacts-list
 
 **Endpoint:** `GET /me/contacts?$top={N}&$select=id,displayName,emailAddresses,businessPhones,homePhones,mobilePhone,jobTitle,companyName`
@@ -94,19 +178,28 @@ Array<{
 
 ## outlook-account-register
 
-No Graph endpoint of its own. The flow exchanges an authorization code at:
+Starts the device-code flow. No Graph endpoint of its own:
+
+- `POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/devicecode` (client_id + scope)
+
+Returns `{ status: "pending", userCode, verificationUri, verificationUriComplete, expiresInSec, intervalSec }` immediately and writes an encrypted pending entry. Does not block.
+
+## outlook-account-register-poll
+
+One token poll per call:
 
-- `POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token`
+- `POST https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token` with `grant_type=urn:ietf:params:oauth:grant-type:device_code`
 
-After the token exchange, the tool fetches `GET /me?$select=id,mail,userPrincipalName` to record `graphUserId`.
+Returns `pending` / `registered` / `expired` / `denied`. On `registered`, the tool fetches `GET /me?$select=id,mail,userPrincipalName` to record `graphUserId`, persists tokens, and clears the pending entry.
 
 ## Error classification
 
-All tool failures route through `lib/graph-client.ts:classifyGraphError`. Decisions key off **status code + Graph `error.code` field + headers**, never the error `message` body.
+All tool failures route through `lib/graph-client.ts:classifyGraphError`. Decisions key off **status code + Graph `error.code` field + headers**, never the error `message` body. Read tools use `callGraph` (the Graph SDK throws on non-2xx); write tools use `postGraph` / `patchGraph` / `deleteGraph` (one `writeGraph` core), which request `ResponseType.RAW` so a non-2xx status is returned rather than thrown, normalize it into the shape `classifyGraphError` reads, and re-throw it through `callGraph`'s loop — success is asserted on the status code.
 
 | HTTP status | Graph `error.code` | Class | Action |
 |---|---|---|---|
 | 401 | (any) | `auth` | Refresh once, retry; if still 401 → terminal `auth-required` |
+| 403 | (any) | `scope-insufficient` | Terminal: name the scope the failing tool needs (`Mail.Send`, `Mail.ReadWrite`, or `Calendars.ReadWrite` for a calendar write) and route the operator to `outlook-account-register` |
 | 429 | (any) — header `Retry-After` present | `rate-limit-recoverable` | Backoff per header, retry once |
 | 429 | (any) — header `Retry-After` absent | `rate-limit-terminal` | Terminal abort |
 | 503 | `MailboxNotEnabledForRESTAPI` | `on-prem` | Terminal: route operator to IMAP plugin |

package/payload/platform/plugins/outlook/skills/outlook/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: outlook
-description: "Microsoft 365 / Outlook.com via Microsoft Graph (read-only). Use when the user asks about their Outlook mail, calendar, or contacts — listing, searching, or checking events. First-time use requires outlook-account-register; subsequent use is transparent. Tools — outlook-mail-list / outlook-mail-search (inbox), outlook-calendar-list / outlook-calendar-event (calendar), outlook-contacts-list (contacts), outlook-mailbox-info (health), outlook-account-register (PKCE register)."
+description: "Microsoft 365 / Outlook.com via Microsoft Graph. Mail is read, draft, and send; contacts are read-only; the calendar is read plus control. Use when the user asks about their Outlook mail, calendar, or contacts, wants to send or draft a message, or asks to book, move, cancel, or accept a calendar event. First-time use requires outlook-account-register plus outlook-account-register-poll; subsequent use is transparent. Tools: outlook-mail-list / outlook-mail-search (inbox), outlook-mail-send / outlook-draft / outlook-draft-send (compose and send), outlook-calendar-list / outlook-calendar-event (read calendar), outlook-calendar-create / outlook-calendar-update / outlook-calendar-cancel / outlook-calendar-respond / outlook-calendar-freebusy (control calendar), outlook-contacts-list (contacts), outlook-mailbox-info (health), outlook-account-register / outlook-account-register-poll (device-code register)."
 ---
 
 # Outlook (Microsoft Graph)
 
 Invoked from `specialists:personal-assistant`.
 
-Read-only access to the user's Outlook.com or Microsoft 365 mailbox via Microsoft Graph. Per-account OAuth, encrypted token storage, refresh handled automatically.
+Access to the user's Outlook.com or Microsoft 365 mailbox via Microsoft Graph. Mail is read, draft, and send; contacts are read-only. The calendar is read plus control: the agent can book, reschedule, cancel, and respond to events, and check availability. Per-account OAuth, encrypted token storage, refresh handled automatically.
 
 ## When to activate
 
@@ -21,29 +21,52 @@ Do **not** activate for:
 
 - IMAP-only providers (Gmail, iCloud, custom domains not on Microsoft 365) — use the `email` plugin instead.
 - On-premises Exchange — Microsoft Graph deprecated hybrid REST 2023-07. The plugin detects on-prem mailboxes and emits a clear error pointing to the IMAP path.
-- Sending / drafting / modifying messages or events — out of scope. Read-only.
+- Moving, flagging, or deleting messages, or writing to contacts — out of scope. Mail read, draft, and send are supported, and the calendar is read plus control; contacts stay read-only.
 
 ## First-time setup (one-time per account)
 
-The Outlook plugin needs an **Entra app registration** in the operator's Microsoft tenant. This is a one-time-per-install step (not per-account), documented at [`references/auth.md`](references/auth.md).
+The client ID ships with the brand, so there is no app to register and no Azure work. End users only consent to the mailbox they want to connect. The vendor app that backs the brand is provisioned once per brand and documented at [`references/auth.md`](references/auth.md); end users never touch it.
 
-Once the Entra app exists and `OUTLOOK_CLIENT_ID` is set in the SiteDesk installation, run:
+Connect a mailbox via the device-code flow. The operator never needs the box's browser and never screen-shares.
 
-1. **`outlook-account-register`** — the tool returns an `authUrl`. The operator opens this URL in the VNC browser, signs in with the Microsoft account they want to connect, and consents to the requested scopes (`offline_access`, `User.Read`, `Mail.Read`, `Calendars.Read`, `Contacts.Read`).
-2. Tool returns `{ status: "registered", graphUserId, scopes, tokenExpSec }` once consent completes.
+1. Call **`outlook-account-register`**. It returns immediately with `{ status: "pending", userCode, verificationUri, verificationUriComplete, expiresInSec, intervalSec }`. Relay the `userCode` and `verificationUri` to the operator in your reply.
+2. The operator opens `verificationUri` (`microsoft.com/devicelogin`) on any device (their phone or laptop), enters the `userCode`, signs in with the Microsoft account they want to connect, and consents to the requested scopes (`offline_access`, `User.Read`, `Mail.ReadWrite`, `Mail.Send`, `Calendars.ReadWrite`, `Contacts.Read`). `Mail.Send` enables sending and `Calendars.ReadWrite` enables calendar control; a mailbox last consented on an older read-only scope set must re-register before send or any calendar write succeeds.
+3. Call **`outlook-account-register-poll`** once per check. While it returns `{ status: "pending" }`, wait `intervalSec` seconds and call it again. It returns `{ status: "registered", graphUserId, scopes, tokenExpSec }` once consent completes, `{ status: "expired" }` if the code timed out (restart at step 1), or `{ status: "denied" }` if the operator declined.
 
 Subsequent tool calls use the persisted refresh token to mint access tokens transparently. Re-register is only needed if the refresh token expires (90 days) or the user revokes consent.
 
+If the brand ships no vendor app yet, `outlook-account-register` reports that the client ID is not configured. There is no per-install workaround; the brand's vendor app has to exist first.
+
+**Microsoft mail does not use IMAP or app passwords.** Microsoft retired Basic auth for Exchange Online and app passwords stopped working. Never route a Microsoft mailbox through the `email` plugin's IMAP path, and never suggest an app password. The device-code flow above is the only supported connection.
+
 ## Reading mail
 
 - `outlook-mail-list` — recent mail, default top=25, folder=Inbox.
 - `outlook-mail-search query=<keyword>` — Microsoft Graph `$search` over the mailbox.
 
+## Sending and drafting
+
+- `outlook-mail-send` — send a message. `to` is an array of addresses (at least one); `cc`/`bcc` optional arrays; `subject`; `body`; `isHtml` true for an HTML body, otherwise plain text. A copy is saved to Sent Items. Success is confirmed on Graph's 202 response.
+- `outlook-draft` — create a draft in the Drafts folder (same fields as send). Returns the draft's id.
+- `outlook-draft-send draftId=<id>` — send a draft created earlier. Graph consumes the draft on send.
+
+If the mailbox was registered before send was available, the first send returns "re-register to grant send" — run `outlook-account-register` again and consent to the send scopes.
+
 ## Reading calendar
 
 - `outlook-calendar-list rangeDays=<N>` — events in the next N days (default 7, max 365).
 - `outlook-calendar-event eventId=<id>` — single event with full body and attendees.
 
+## Controlling calendar
+
+All calendar writes need the `Calendars.ReadWrite` consent (see setup above). Times are `{ dateTime, timeZone }`, for example `{ "dateTime": "2026-07-10T09:00:00", "timeZone": "Europe/London" }`.
+
+- `outlook-calendar-create` — book an event. Requires `subject`, `start`, `end`. Optional `body`, `attendees` (each `{ email, name?, type? }`), `location`, `isOnlineMeeting`, and a Graph `recurrence` object. Returns the new `eventId` and `webLink`.
+- `outlook-calendar-update eventId=<id>` — reschedule or edit. Pass only the fields to change.
+- `outlook-calendar-cancel eventId=<id>` — cancel. When the account organises a meeting with attendees, this posts a cancellation that notifies them (optional `comment` is the message); otherwise it deletes the event from the calendar. The chosen mode is reported back.
+- `outlook-calendar-respond eventId=<id> action=<accept|decline|tentative>` — reply to an invite. Optional `comment`; `sendResponse` defaults to true.
+- `outlook-calendar-freebusy schedules=[<address>...]` — availability for one or more addresses over a `start`/`end` window (optional `intervalMinutes`, default 60). Each address Graph cannot resolve comes back with an `error` (not counted in `resolved`), so a `resolved` count below `requested` flags a bad or inaccessible address rather than reading it as free.
+
 ## Reading contacts
 
 - `outlook-contacts-list` — top contacts, default top=50.
@@ -56,14 +79,16 @@ Subsequent tool calls use the persisted refresh token to mint access tokens tran
 
 | Error | Meaning | Operator action |
 |---|---|---|
-| `auth-required` | Account not registered, or refresh token expired | Run `outlook-account-register` |
+| `auth-required` | Account not registered, or refresh token expired | Run `outlook-account-register`, then `outlook-account-register-poll` |
+| `Calendars.ReadWrite scope not granted` | Mailbox last consented on the old read-only calendar scope | Re-run `outlook-account-register` + `outlook-account-register-poll` to re-consent with calendar write |
 | `Outlook token refresh failed` | Network down or refresh token invalidated | Verify connectivity; re-run register if persistent |
 | `Microsoft Graph does not support on-premises Exchange` | Mailbox is on hybrid Exchange | Use the `email` plugin (IMAP) |
+| `Outlook send scope not granted (missing Mail.Send)` | Mailbox registered under the old read-only consent | Re-run `outlook-account-register` and consent to the send scopes |
 | `Outlook rate-limited without Retry-After hint` | Graph 429 with no backoff guidance | Retry later; if persistent, file a bug |
 
 ## Reference files
 
 Open each with the `plugin-read` tool (`file="references/auth.md"`), which resolves the path at the plugin root. A plain `Read` of `references/auth.md` against this skill's base directory misses, because these files live one level up at the plugin root, not under the skill.
 
-- [`references/auth.md`](references/auth.md) — Entra app registration + PKCE flow + re-vendor procedure
+- [`references/auth.md`](references/auth.md) — vendor app model (one per brand) + device-code flow + public-client requirement
 - [`references/graph-surfaces.md`](references/graph-surfaces.md) — Graph endpoint and response shape per tool

package/payload/platform/services/claude-session-manager/dist/canonical-tool-names.generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-tool-names.generated.d.ts","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAQA,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAqB7C,CAAA;AAED,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAkQtD,CAAA"}
+{"version":3,"file":"canonical-tool-names.generated.d.ts","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAQA,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAqB7C,CAAA;AAED,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EA2QtD,CAAA"}

package/payload/platform/services/claude-session-manager/dist/canonical-tool-names.generated.js

@@ -216,11 +216,20 @@ export const CANONICAL_MAXY_TOOL_NAMES = [
     "mcp__plugin_memory_memory__session-compact",
     "mcp__plugin_memory_memory__session-compact-status",
     "mcp__plugin_outlook_outlook__outlook-account-register",
+    "mcp__plugin_outlook_outlook__outlook-account-register-poll",
+    "mcp__plugin_outlook_outlook__outlook-calendar-cancel",
+    "mcp__plugin_outlook_outlook__outlook-calendar-create",
     "mcp__plugin_outlook_outlook__outlook-calendar-event",
+    "mcp__plugin_outlook_outlook__outlook-calendar-freebusy",
     "mcp__plugin_outlook_outlook__outlook-calendar-list",
+    "mcp__plugin_outlook_outlook__outlook-calendar-respond",
+    "mcp__plugin_outlook_outlook__outlook-calendar-update",
     "mcp__plugin_outlook_outlook__outlook-contacts-list",
+    "mcp__plugin_outlook_outlook__outlook-draft",
+    "mcp__plugin_outlook_outlook__outlook-draft-send",
     "mcp__plugin_outlook_outlook__outlook-mail-list",
     "mcp__plugin_outlook_outlook__outlook-mail-search",
+    "mcp__plugin_outlook_outlook__outlook-mail-send",
     "mcp__plugin_outlook_outlook__outlook-mailbox-info",
     "mcp__plugin_quickbooks_quickbooks__quickbooks-authorize-url",
     "mcp__plugin_quickbooks_quickbooks__quickbooks-bill-create",

package/payload/platform/services/claude-session-manager/dist/canonical-tool-names.generated.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-tool-names.generated.js","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,kEAAkE;AAClE,yDAAyD;AACzD,kFAAkF;AAClF,EAAE;AACF,yEAAyE;AACzE,6DAA6D;AAE7D,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,OAAO;IACP,KAAK;IACL,SAAS;IACT,WAAW;IACX,UAAU;IACV,OAAO;IACP,YAAY;IACZ,OAAO;IACP,cAAc;IACd,UAAU;IACV,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,UAAU;IACV,SAAS;IACT,UAAU;IACV,MAAM;IACN,WAAW;CACZ,CAAA;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,yCAAyC;IACzC,yCAAyC;IACzC,kDAAkD;IAClD,sDAAsD;IACtD,yCAAyC;IACzC,yCAAyC;IACzC,uCAAuC;IACvC,wCAAwC;IACxC,yCAAyC;IACzC,sCAAsC;IACtC,yCAAyC;IACzC,wCAAwC;IACxC,oCAAoC;IACpC,yCAAyC;IACzC,qCAAqC;IACrC,uCAAuC;IACvC,2CAA2C;IAC3C,4CAA4C;IAC5C,qCAAqC;IACrC,yCAAyC;IACzC,4CAA4C;IAC5C,oCAAoC;IACpC,sCAAsC;IACtC,0CAA0C;IAC1C,uCAAuC;IACvC,sCAAsC;IACtC,sDAAsD;IACtD,mDAAmD;IACnD,6CAA6C;IAC7C,wCAAwC;IACxC,yCAAyC;IACzC,qCAAqC;IACrC,uCAAuC;IACvC,sCAAsC;IACtC,wCAAwC;IACxC,+BAA+B;IAC/B,qCAAqC;IACrC,sCAAsC;IACtC,yCAAyC;IACzC,4CAA4C;IAC5C,uDAAuD;IACvD,+CAA+C;IAC/C,2CAA2C;IAC3C,gDAAgD;IAChD,oDAAoD;IACpD,4CAA4C;IAC5C,+CAA+C;IAC/C,+CAA+C;IAC/C,gDAAgD;IAChD,6CAA6C;IAC7C,6CAA6C;IAC7C,iDAAiD;IACjD,oDAAoD;IACpD,+CAA+C;IAC/C,2CAA2C;IAC3C,2CAA2C;IAC3C,+CAA+C;IAC/C,iDAAiD;IACjD,uDAAuD;IACvD,iDAAiD;IACjD,qDAAqD;IACrD,+CAA+C;IAC/C,+CAA+C;IAC/C,8CAA8C;IAC9C,+CAA+C;IAC/C,6CAA6C;IAC7C,+CAA+C;IAC/C,+CAA+C;IAC/C,6CAA6C;IAC7C,6CAA6C;IAC7C,uCAAuC;IACvC,sCAAsC;IACtC,2CAA2C;IAC3C,2CAA2C;IAC3C,sCAAsC;IACtC,2CAA2C;IAC3C,4CAA4C;IAC5C,uCAAuC;IACvC,4CAA4C;IAC5C,8CAA8C;IAC9C,qCAAqC;IACrC,sCAAsC;IACtC,uCAAuC;IACvC,qCAAqC;IACrC,sCAAsC;IACtC,uCAAuC;IACvC,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,+CAA+C;IAC/C,qDAAqD;IACrD,sDAAsD;IACtD,uDAAuD;IACvD,wDAAwD;IACxD,sDAAsD;IACtD,mDAAmD;IACnD,oDAAoD;IACpD,sDAAsD;IACtD,iEAAiE;IACjE,2DAA2D;IAC3D,yDAAyD;IACzD,yDAAyD;IACzD,sDAAsD;IACtD,uDAAuD;IACvD,yDAAyD;IACzD,sDAAsD;IACtD,uDAAuD;IACvD,2DAA2D;IAC3D,0DAA0D;IAC1D,wDAAwD;IACxD,qDAAqD;IACrD,sDAAsD;IACtD,gEAAgE;IAChE,qDAAqD;IACrD,oDAAoD;IACpD,iDAAiD;IACjD,kDAAkD;IAClD,wDAAwD;IACxD,oDAAoD;IACpD,wDAAwD;IACxD,wDAAwD;IACxD,qDAAqD;IACrD,uDAAuD;IACvD,sDAAsD;IACtD,mDAAmD;IACnD,oDAAoD;IACpD,qDAAqD;IACrD,kDAAkD;IAClD,mDAAmD;IACnD,qDAAqD;IACrD,0DAA0D;IAC1D,wDAAwD;IACxD,0DAA0D;IAC1D,sDAAsD;IACtD,sDAAsD;IACtD,sDAAsD;IACtD,mDAAmD;IACnD,8DAA8D;IAC9D,sDAAsD;IACtD,iEAAiE;IACjE,kEAAkE;IAClE,6DAA6D;IAC7D,8CAA8C;IAC9C,wDAAwD;IACxD,gDAAgD;IAChD,qDAAqD;IACrD,sDAAsD;IACtD,wDAAwD;IACxD,wCAAwC;IACxC,wCAAwC;IACxC,iDAAiD;IACjD,wDAAwD;IACxD,0DAA0D;IAC1D,0CAA0C;IAC1C,6CAA6C;IAC7C,wCAAwC;IACxC,mDAAmD;IACnD,+CAA+C;IAC/C,mDAAmD;IACnD,0CAA0C;IAC1C,kDAAkD;IAClD,8CAA8C;IAC9C,oDAAoD;IACpD,kDAAkD;IAClD,+CAA+C;IAC/C,mDAAmD;IACnD,2CAA2C;IAC3C,qDAAqD;IACrD,+CAA+C;IAC/C,sDAAsD;IACtD,gDAAgD;IAChD,2CAA2C;IAC3C,gDAAgD;IAChD,0CAA0C;IAC1C,0CAA0C;IAC1C,kDAAkD;IAClD,yCAAyC;IACzC,kDAAkD;IAClD,2CAA2C;IAC3C,yCAAyC;IACzC,2CAA2C;IAC3C,4CAA4C;IAC5C,mDAAmD;IACnD,uDAAuD;IACvD,qDAAqD;IACrD,oDAAoD;IACpD,oDAAoD;IACpD,gDAAgD;IAChD,kDAAkD;IAClD,mDAAmD;IACnD,6DAA6D;IAC7D,2DAA2D;IAC3D,2DAA2D;IAC3D,+DAA+D;IAC/D,+DAA+D;IAC/D,+DAA+D;IAC/D,0DAA0D;IAC1D,6DAA6D;IAC7D,6DAA6D;IAC7D,8DAA8D;IAC9D,8DAA8D;IAC9D,8DAA8D;IAC9D,qDAAqD;IACrD,sDAAsD;IACtD,2DAA2D;IAC3D,iDAAiD;IACjD,sDAAsD;IACtD,uDAAuD;IACvD,yDAAyD;IACzD,oDAAoD;IACpD,mDAAmD;IACnD,wDAAwD;IACxD,iDAAiD;IACjD,wDAAwD;IACxD,kDAAkD;IAClD,oDAAoD;IACpD,iDAAiD;IACjD,wCAAwC;IACxC,gDAAgD;IAChD,0DAA0D;IAC1D,sCAAsC;IACtC,kDAAkD;IAClD,gDAAgD;IAChD,kEAAkE;IAClE,uDAAuD;IACvD,oDAAoD;IACpD,oDAAoD;IACpD,qDAAqD;IACrD,oDAAoD;IACpD,kDAAkD;IAClD,oDAAoD;IACpD,gDAAgD;IAChD,yCAAyC;IACzC,uCAAuC;IACvC,oCAAoC;IACpC,qCAAqC;IACrC,uCAAuC;IACvC,qCAAqC;IACrC,yCAAyC;IACzC,qCAAqC;IACrC,sCAAsC;IACtC,oCAAoC;IACpC,iCAAiC;IACjC,kCAAkC;IAClC,mCAAmC;IACnC,oCAAoC;IACpC,oCAAoC;IACpC,kDAAkD;IAClD,kDAAkD;IAClD,mDAAmD;IACnD,+CAA+C;IAC/C,gDAAgD;IAChD,gDAAgD;IAChD,kDAAkD;IAClD,oDAAoD;CACrD,CAAA"}
+{"version":3,"file":"canonical-tool-names.generated.js","sourceRoot":"","sources":["../src/canonical-tool-names.generated.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,kEAAkE;AAClE,yDAAyD;AACzD,kFAAkF;AAClF,EAAE;AACF,yEAAyE;AACzE,6DAA6D;AAE7D,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,OAAO;IACP,KAAK;IACL,SAAS;IACT,WAAW;IACX,UAAU;IACV,OAAO;IACP,YAAY;IACZ,OAAO;IACP,cAAc;IACd,UAAU;IACV,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,UAAU;IACV,SAAS;IACT,UAAU;IACV,MAAM;IACN,WAAW;CACZ,CAAA;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAsB;IAC1D,yCAAyC;IACzC,yCAAyC;IACzC,kDAAkD;IAClD,sDAAsD;IACtD,yCAAyC;IACzC,yCAAyC;IACzC,uCAAuC;IACvC,wCAAwC;IACxC,yCAAyC;IACzC,sCAAsC;IACtC,yCAAyC;IACzC,wCAAwC;IACxC,oCAAoC;IACpC,yCAAyC;IACzC,qCAAqC;IACrC,uCAAuC;IACvC,2CAA2C;IAC3C,4CAA4C;IAC5C,qCAAqC;IACrC,yCAAyC;IACzC,4CAA4C;IAC5C,oCAAoC;IACpC,sCAAsC;IACtC,0CAA0C;IAC1C,uCAAuC;IACvC,sCAAsC;IACtC,sDAAsD;IACtD,mDAAmD;IACnD,6CAA6C;IAC7C,wCAAwC;IACxC,yCAAyC;IACzC,qCAAqC;IACrC,uCAAuC;IACvC,sCAAsC;IACtC,wCAAwC;IACxC,+BAA+B;IAC/B,qCAAqC;IACrC,sCAAsC;IACtC,yCAAyC;IACzC,4CAA4C;IAC5C,uDAAuD;IACvD,+CAA+C;IAC/C,2CAA2C;IAC3C,gDAAgD;IAChD,oDAAoD;IACpD,4CAA4C;IAC5C,+CAA+C;IAC/C,+CAA+C;IAC/C,gDAAgD;IAChD,6CAA6C;IAC7C,6CAA6C;IAC7C,iDAAiD;IACjD,oDAAoD;IACpD,+CAA+C;IAC/C,2CAA2C;IAC3C,2CAA2C;IAC3C,+CAA+C;IAC/C,iDAAiD;IACjD,uDAAuD;IACvD,iDAAiD;IACjD,qDAAqD;IACrD,+CAA+C;IAC/C,+CAA+C;IAC/C,8CAA8C;IAC9C,+CAA+C;IAC/C,6CAA6C;IAC7C,+CAA+C;IAC/C,+CAA+C;IAC/C,6CAA6C;IAC7C,6CAA6C;IAC7C,uCAAuC;IACvC,sCAAsC;IACtC,2CAA2C;IAC3C,2CAA2C;IAC3C,sCAAsC;IACtC,2CAA2C;IAC3C,4CAA4C;IAC5C,uCAAuC;IACvC,4CAA4C;IAC5C,8CAA8C;IAC9C,qCAAqC;IACrC,sCAAsC;IACtC,uCAAuC;IACvC,qCAAqC;IACrC,sCAAsC;IACtC,uCAAuC;IACvC,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,8CAA8C;IAC9C,+CAA+C;IAC/C,qDAAqD;IACrD,sDAAsD;IACtD,uDAAuD;IACvD,wDAAwD;IACxD,sDAAsD;IACtD,mDAAmD;IACnD,oDAAoD;IACpD,sDAAsD;IACtD,iEAAiE;IACjE,2DAA2D;IAC3D,yDAAyD;IACzD,yDAAyD;IACzD,sDAAsD;IACtD,uDAAuD;IACvD,yDAAyD;IACzD,sDAAsD;IACtD,uDAAuD;IACvD,2DAA2D;IAC3D,0DAA0D;IAC1D,wDAAwD;IACxD,qDAAqD;IACrD,sDAAsD;IACtD,gEAAgE;IAChE,qDAAqD;IACrD,oDAAoD;IACpD,iDAAiD;IACjD,kDAAkD;IAClD,wDAAwD;IACxD,oDAAoD;IACpD,wDAAwD;IACxD,wDAAwD;IACxD,qDAAqD;IACrD,uDAAuD;IACvD,sDAAsD;IACtD,mDAAmD;IACnD,oDAAoD;IACpD,qDAAqD;IACrD,kDAAkD;IAClD,mDAAmD;IACnD,qDAAqD;IACrD,0DAA0D;IAC1D,wDAAwD;IACxD,0DAA0D;IAC1D,sDAAsD;IACtD,sDAAsD;IACtD,sDAAsD;IACtD,mDAAmD;IACnD,8DAA8D;IAC9D,sDAAsD;IACtD,iEAAiE;IACjE,kEAAkE;IAClE,6DAA6D;IAC7D,8CAA8C;IAC9C,wDAAwD;IACxD,gDAAgD;IAChD,qDAAqD;IACrD,sDAAsD;IACtD,wDAAwD;IACxD,wCAAwC;IACxC,wCAAwC;IACxC,iDAAiD;IACjD,wDAAwD;IACxD,0DAA0D;IAC1D,0CAA0C;IAC1C,6CAA6C;IAC7C,wCAAwC;IACxC,mDAAmD;IACnD,+CAA+C;IAC/C,mDAAmD;IACnD,0CAA0C;IAC1C,kDAAkD;IAClD,8CAA8C;IAC9C,oDAAoD;IACpD,kDAAkD;IAClD,+CAA+C;IAC/C,mDAAmD;IACnD,2CAA2C;IAC3C,qDAAqD;IACrD,+CAA+C;IAC/C,sDAAsD;IACtD,gDAAgD;IAChD,2CAA2C;IAC3C,gDAAgD;IAChD,0CAA0C;IAC1C,0CAA0C;IAC1C,kDAAkD;IAClD,yCAAyC;IACzC,kDAAkD;IAClD,2CAA2C;IAC3C,yCAAyC;IACzC,2CAA2C;IAC3C,4CAA4C;IAC5C,mDAAmD;IACnD,uDAAuD;IACvD,4DAA4D;IAC5D,sDAAsD;IACtD,sDAAsD;IACtD,qDAAqD;IACrD,wDAAwD;IACxD,oDAAoD;IACpD,uDAAuD;IACvD,sDAAsD;IACtD,oDAAoD;IACpD,4CAA4C;IAC5C,iDAAiD;IACjD,gDAAgD;IAChD,kDAAkD;IAClD,gDAAgD;IAChD,mDAAmD;IACnD,6DAA6D;IAC7D,2DAA2D;IAC3D,2DAA2D;IAC3D,+DAA+D;IAC/D,+DAA+D;IAC/D,+DAA+D;IAC/D,0DAA0D;IAC1D,6DAA6D;IAC7D,6DAA6D;IAC7D,8DAA8D;IAC9D,8DAA8D;IAC9D,8DAA8D;IAC9D,qDAAqD;IACrD,sDAAsD;IACtD,2DAA2D;IAC3D,iDAAiD;IACjD,sDAAsD;IACtD,uDAAuD;IACvD,yDAAyD;IACzD,oDAAoD;IACpD,mDAAmD;IACnD,wDAAwD;IACxD,iDAAiD;IACjD,wDAAwD;IACxD,kDAAkD;IAClD,oDAAoD;IACpD,iDAAiD;IACjD,wCAAwC;IACxC,gDAAgD;IAChD,0DAA0D;IAC1D,sCAAsC;IACtC,kDAAkD;IAClD,gDAAgD;IAChD,kEAAkE;IAClE,uDAAuD;IACvD,oDAAoD;IACpD,oDAAoD;IACpD,qDAAqD;IACrD,oDAAoD;IACpD,kDAAkD;IAClD,oDAAoD;IACpD,gDAAgD;IAChD,yCAAyC;IACzC,uCAAuC;IACvC,oCAAoC;IACpC,qCAAqC;IACrC,uCAAuC;IACvC,qCAAqC;IACrC,yCAAyC;IACzC,qCAAqC;IACrC,sCAAsC;IACtC,oCAAoC;IACpC,iCAAiC;IACjC,kCAAkC;IAClC,mCAAmC;IACnC,oCAAoC;IACpC,oCAAoC;IACpC,kDAAkD;IAClD,kDAAkD;IAClD,mDAAmD;IACnD,+CAA+C;IAC/C,gDAAgD;IAChD,gDAAgD;IAChD,kDAAkD;IAClD,oDAAoD;CACrD,CAAA"}