@rubytech/create-sitedesk-code 0.1.521 → 0.1.523

package/payload/platform/plugins/outlook/mcp/dist/__tests__/mailbox-list-delegated.test.js

@@ -0,0 +1,120 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { runMailboxList } from "../tools/mailbox-list.js";
+import { DelegatedStore } from "../auth/delegated-store.js";
+import { TokenStore } from "../auth/token-store.js";
+function makeAccountsDir() {
+    const dir = mkdtempSync(join(tmpdir(), "outlook-list-delegated-"));
+    return { dir, cleanup: () => rmSync(dir, { recursive: true, force: true }) };
+}
+function connect(dir) {
+    new TokenStore("acct-A", dir, "user-1").store("access", "refresh", 3600, {
+        graphUserId: "user-1",
+        mail: "admin@muvin.co.uk",
+        scopes: ["Mail.ReadWrite.Shared"],
+    });
+}
+test("a delegated entry is listed with its kind and delegator", async () => {
+    const { dir, cleanup } = makeAccountsDir();
+    try {
+        connect(dir);
+        new DelegatedStore("acct-A", dir).add("team@muvin.co.uk", "user-1", 1);
+        const result = await runMailboxList("acct-A", dir);
+        assert.equal(result.count, 2);
+        assert.equal(result.delegated, 1);
+        assert.equal(result.addressable, 1, "a delegated entry is not a signed-in mailbox");
+        const shared = result.mailboxes.find((m) => m.mailbox === "team@muvin.co.uk");
+        assert.ok(shared);
+        assert.equal(shared.kind, "delegated");
+        assert.equal(shared.via, "admin@muvin.co.uk");
+        assert.equal(shared.status, "delegated");
+        assert.equal(shared.reachable, null);
+        const own = result.mailboxes.find((m) => m.mailbox === "admin@muvin.co.uk");
+        assert.equal(own.kind, "signed-in");
+        assert.equal(own.via, null);
+    }
+    finally {
+        cleanup();
+    }
+});
+test("verify probes each delegated entry and reports reachability", async () => {
+    const { dir, cleanup } = makeAccountsDir();
+    try {
+        connect(dir);
+        new DelegatedStore("acct-A", dir).add("team@muvin.co.uk", "user-1", 1);
+        const seen = [];
+        const result = await runMailboxList("acct-A", dir, {
+            verify: true,
+            probe: async (address) => {
+                seen.push(address);
+                return false;
+            },
+        });
+        assert.deepEqual(seen, ["team@muvin.co.uk"]);
+        assert.equal(result.mailboxes.find((m) => m.mailbox === "team@muvin.co.uk").reachable, false);
+        assert.equal(result.mailboxes.find((m) => m.mailbox === "admin@muvin.co.uk").reachable, null, "a signed-in mailbox is never probed by this flag");
+    }
+    finally {
+        cleanup();
+    }
+});
+test("without verify, nothing is probed", async () => {
+    const { dir, cleanup } = makeAccountsDir();
+    try {
+        connect(dir);
+        new DelegatedStore("acct-A", dir).add("team@muvin.co.uk", "user-1", 1);
+        let probed = 0;
+        await runMailboxList("acct-A", dir, {
+            probe: async () => {
+                probed += 1;
+                return true;
+            },
+        });
+        assert.equal(probed, 0);
+    }
+    finally {
+        cleanup();
+    }
+});
+test("a delegated entry whose delegator is gone is listed as delegator-missing", async () => {
+    const { dir, cleanup } = makeAccountsDir();
+    try {
+        connect(dir);
+        new DelegatedStore("acct-A", dir).add("team@muvin.co.uk", "user-gone", 1);
+        let probed = 0;
+        const result = await runMailboxList("acct-A", dir, {
+            verify: true,
+            probe: async () => {
+                probed += 1;
+                return true;
+            },
+        });
+        const shared = result.mailboxes.find((m) => m.mailbox === "team@muvin.co.uk");
+        assert.equal(shared.status, "delegator-missing");
+        assert.equal(shared.via, "user-gone");
+        assert.equal(shared.readable, false);
+        assert.equal(probed, 0, "there is no token to probe with");
+    }
+    finally {
+        cleanup();
+    }
+});
+test("an account with no delegated entries reports the same shape as before", async () => {
+    const { dir, cleanup } = makeAccountsDir();
+    try {
+        connect(dir);
+        const result = await runMailboxList("acct-A", dir);
+        assert.equal(result.count, 1);
+        assert.equal(result.delegated, 0);
+        assert.equal(result.addressable, 1);
+        assert.equal(result.unreadable, 0);
+        assert.equal(result.mailboxes[0].kind, "signed-in");
+    }
+    finally {
+        cleanup();
+    }
+});
+//# sourceMappingURL=mailbox-list-delegated.test.js.map

package/payload/platform/plugins/outlook/mcp/dist/__tests__/mailbox-list-delegated.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailbox-list-delegated.test.js","sourceRoot":"","sources":["../../src/__tests__/mailbox-list-delegated.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACnE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;QACvE,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,CAAC,uBAAuB,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;IACzE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,CAAC;QACb,IAAI,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,8CAA8C,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,kBAAkB,CAAC,CAAC;QAC9E,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAClB,MAAM,CAAC,KAAK,CAAC,MAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,MAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,MAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,mBAAmB,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,GAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,GAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;IAC7E,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,CAAC;QACb,IAAI,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE;YACjD,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACvB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACnB,OAAO,KAAK,CAAC;YACf,CAAC;SACF,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,kBAAkB,CAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC/F,MAAM,CAAC,KAAK,CACV,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,mBAAmB,CAAE,CAAC,SAAS,EAC1E,IAAI,EACJ,kDAAkD,CACnD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;IACnD,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,CAAC;QACb,IAAI,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE;YAClC,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,MAAM,IAAI,CAAC,CAAC;gBACZ,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1B,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,CAAC;QACb,IAAI,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAC1E,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE;YACjD,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,MAAM,IAAI,CAAC,CAAC;gBACZ,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,kBAAkB,CAAE,CAAC;QAC/E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,iCAAiC,CAAC,CAAC;IAC7D,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;IACvF,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACtD,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/outlook/mcp/dist/__tests__/mailbox-list.test.js

@@ -9,10 +9,10 @@ function makeAccountsDir() {
     const dir = mkdtempSync(join(tmpdir(), "outlook-list-"));
     return { dir, cleanup: () => rmSync(dir, { recursive: true, force: true }) };
 }
-test("runMailboxList reports zero mailboxes for a fresh account", () => {
+test("runMailboxList reports zero mailboxes for a fresh account", async () => {
     const { dir, cleanup } = makeAccountsDir();
     try {
-        const result = runMailboxList("acct", dir);
+        const result = await runMailboxList("acct", dir);
         assert.equal(result.count, 0);
         assert.deepEqual(result.mailboxes, []);
     }
@@ -20,7 +20,7 @@ test("runMailboxList reports zero mailboxes for a fresh account", () => {
         cleanup();
     }
 });
-test("runMailboxList lists connected mailboxes with identity and token health", () => {
+test("runMailboxList lists connected mailboxes with identity and token health", async () => {
     const { dir, cleanup } = makeAccountsDir();
     try {
         new TokenStore("acct", dir, "rob-guid").store("a", "r", 3600, {
@@ -29,7 +29,7 @@ test("runMailboxList lists connected mailboxes with identity and token health",
         new TokenStore("acct", dir, "info-guid").store("a", "r", 3600, {
             graphUserId: "info-guid", mail: "info@ecolecltd.co.uk", scopes: ["Mail.Read"],
         });
-        const result = runMailboxList("acct", dir);
+        const result = await runMailboxList("acct", dir);
         assert.equal(result.count, 2);
         const rob = result.mailboxes.find((m) => m.mailbox === "rob@ecolecltd.co.uk");
         assert.ok(rob);
@@ -41,7 +41,7 @@ test("runMailboxList lists connected mailboxes with identity and token health",
         cleanup();
     }
 });
-test("runMailboxList reports addressable count and per-mailbox status; a blank-email record is not a healthy count", () => {
+test("runMailboxList reports addressable count and per-mailbox status; a blank-email record is not a healthy count", async () => {
     const { dir, cleanup } = makeAccountsDir();
     try {
         new TokenStore("acct", dir, "ok-guid").store("a", "r", 3600, {
@@ -52,7 +52,7 @@ test("runMailboxList reports addressable count and per-mailbox status; a blank-e
         new TokenStore("acct", dir, "blank-guid").store("a", "r", 3600, {
             graphUserId: "blank-guid", mail: "", scopes: [],
         });
-        const result = runMailboxList("acct", dir);
+        const result = await runMailboxList("acct", dir);
         assert.equal(result.count, 2, "both records are present");
         assert.equal(result.addressable, 1, "only the ok record is addressable");
         const ok = result.mailboxes.find((m) => m.mailboxKey === "ok-guid");
@@ -64,7 +64,7 @@ test("runMailboxList reports addressable count and per-mailbox status; a blank-e
         cleanup();
     }
 });
-test("runMailboxList reconciles an unreadable blob rather than hiding it", () => {
+test("runMailboxList reconciles an unreadable blob rather than hiding it", async () => {
     const { dir, cleanup } = makeAccountsDir();
     try {
         new TokenStore("acct", dir, "good-guid").store("a", "r", 3600, {
@@ -73,7 +73,7 @@ test("runMailboxList reconciles an unreadable blob rather than hiding it", () =>
         const badDir = join(dir, "acct", "secrets", "outlook", "mailboxes", "bad-guid");
         mkdirSync(badDir, { recursive: true });
         writeFileSync(join(badDir, "tokens.enc"), "garbage");
-        const result = runMailboxList("acct", dir);
+        const result = await runMailboxList("acct", dir);
         assert.equal(result.count, 2);
         const bad = result.mailboxes.find((m) => m.mailboxKey === "bad-guid");
         assert.ok(bad);

package/payload/platform/plugins/outlook/mcp/dist/__tests__/mailbox-list.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"mailbox-list.test.js","sourceRoot":"","sources":["../../src/__tests__/mailbox-list.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACzD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,GAAG,EAAE;IACnF,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;YAC5D,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC;SAC5E,CAAC,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;YAC7D,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC;SAC9E,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,qBAAqB,CAAC,CAAC;QAC9E,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,GAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,GAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,SAAS,CAAC,GAAI,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC/C,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8GAA8G,EAAE,GAAG,EAAE;IACxH,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;YAC3D,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC;SAC3E,CAAC,CAAC;QACH,6EAA6E;QAC7E,sDAAsD;QACtD,IAAI,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;YAC9D,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;SAChD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,0BAA0B,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,mCAAmC,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAE,CAAC;QACrE,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,YAAY,CAAE,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC5C,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;IAC9E,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;YAC7D,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE;SACzD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;QAChF,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;QACtE,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,GAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"mailbox-list.test.js","sourceRoot":"","sources":["../../src/__tests__/mailbox-list.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACzD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;IAC3E,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;YAC5D,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC;SAC5E,CAAC,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;YAC7D,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC;SAC9E,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,qBAAqB,CAAC,CAAC;QAC9E,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,GAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,GAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,SAAS,CAAC,GAAI,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC/C,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8GAA8G,EAAE,KAAK,IAAI,EAAE;IAC9H,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;YAC3D,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC;SAC3E,CAAC,CAAC;QACH,6EAA6E;QAC7E,sDAAsD;QACtD,IAAI,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;YAC9D,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;SAChD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,0BAA0B,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,mCAAmC,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAE,CAAC;QACrE,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,YAAY,CAAE,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC5C,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IACpF,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;YAC7D,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE;SACzD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;QAChF,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;QACtE,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,GAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/outlook/mcp/dist/__tests__/mailbox-path-prefix.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mailbox-path-prefix.test.d.ts.map

package/payload/platform/plugins/outlook/mcp/dist/__tests__/mailbox-path-prefix.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailbox-path-prefix.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/mailbox-path-prefix.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/outlook/mcp/dist/__tests__/mailbox-path-prefix.test.js

@@ -0,0 +1,27 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { applyMailboxPrefix, sharedMailboxPrefix } from "../lib/graph-client.js";
+test("sharedMailboxPrefix encodes the address", () => {
+    assert.equal(sharedMailboxPrefix("team@muvin.co.uk"), "/users/team%40muvin.co.uk");
+});
+test("the default prefix leaves every path untouched", () => {
+    assert.equal(applyMailboxPrefix("/me/messages/AAA", "/me"), "/me/messages/AAA");
+    assert.equal(applyMailboxPrefix("/me", "/me"), "/me");
+});
+test("a delegated prefix replaces a leading /me", () => {
+    const p = sharedMailboxPrefix("team@muvin.co.uk");
+    assert.equal(applyMailboxPrefix("/me/messages/AAA", p), "/users/team%40muvin.co.uk/messages/AAA");
+    assert.equal(applyMailboxPrefix("/me/mailFolders/Inbox/messages", p), "/users/team%40muvin.co.uk/mailFolders/Inbox/messages");
+    assert.equal(applyMailboxPrefix("/me", p), "/users/team%40muvin.co.uk");
+});
+test("a delegated prefix leaves a nextLink cursor URL untouched", () => {
+    const p = sharedMailboxPrefix("team@muvin.co.uk");
+    const cursor = "https://graph.microsoft.com/v1.0/me/messages?$skiptoken=ABC";
+    assert.equal(applyMailboxPrefix(cursor, p), cursor);
+});
+test("a delegated prefix does not touch a path that only starts with the letters me", () => {
+    const p = sharedMailboxPrefix("team@muvin.co.uk");
+    assert.equal(applyMailboxPrefix("/members/1", p), "/members/1");
+    assert.equal(applyMailboxPrefix("/messages", p), "/messages");
+});
+//# sourceMappingURL=mailbox-path-prefix.test.js.map

package/payload/platform/plugins/outlook/mcp/dist/__tests__/mailbox-path-prefix.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailbox-path-prefix.test.js","sourceRoot":"","sources":["../../src/__tests__/mailbox-path-prefix.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAEjF,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACnD,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,EAAE,2BAA2B,CAAC,CAAC;AACrF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC1D,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,KAAK,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACrD,MAAM,CAAC,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,wCAAwC,CAAC,CAAC;IAClG,MAAM,CAAC,KAAK,CACV,kBAAkB,CAAC,gCAAgC,EAAE,CAAC,CAAC,EACvD,sDAAsD,CACvD,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,CAAC,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,6DAA6D,CAAC;IAC7E,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+EAA+E,EAAE,GAAG,EAAE;IACzF,MAAM,CAAC,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IAChE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;AAChE,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/outlook/mcp/dist/__tests__/shared-mail-only-guard.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=shared-mail-only-guard.test.d.ts.map

package/payload/platform/plugins/outlook/mcp/dist/__tests__/shared-mail-only-guard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-mail-only-guard.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/shared-mail-only-guard.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/outlook/mcp/dist/__tests__/shared-mail-only-guard.test.js

@@ -0,0 +1,70 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { callGraph, sharedMailboxPrefix } from "../lib/graph-client.js";
+import { TokenStore } from "../auth/token-store.js";
+function configFor(prefix) {
+    const dir = mkdtempSync(join(tmpdir(), "outlook-guard-"));
+    const store = new TokenStore("acct-A", dir, "user-1");
+    store.store("access", "refresh", 3600, {
+        graphUserId: "user-1",
+        mail: "admin@muvin.co.uk",
+        scopes: [],
+    });
+    return {
+        config: {
+            clientId: "c",
+            tenantId: "common",
+            accountId: "acct-A",
+            tokenStore: store,
+            mailboxPathPrefix: prefix,
+        },
+        cleanup: () => rmSync(dir, { recursive: true, force: true }),
+    };
+}
+test("a calendar tool is refused under a delegated prefix and never invokes Graph", async () => {
+    const { config, cleanup } = configFor(sharedMailboxPrefix("team@muvin.co.uk"));
+    try {
+        let invoked = false;
+        await assert.rejects(() => callGraph(config, async () => {
+            invoked = true;
+            return null;
+        }, { tool: "calendar-list" }), /covers mail only/);
+        assert.equal(invoked, false, "the guard must fire before any request is built");
+    }
+    finally {
+        cleanup();
+    }
+});
+test("a contacts tool is refused under a delegated prefix", async () => {
+    const { config, cleanup } = configFor(sharedMailboxPrefix("team@muvin.co.uk"));
+    try {
+        await assert.rejects(() => callGraph(config, async () => null, { tool: "contacts-list" }), /covers mail only/);
+    }
+    finally {
+        cleanup();
+    }
+});
+test("a mail tool proceeds under a delegated prefix", async () => {
+    const { config, cleanup } = configFor(sharedMailboxPrefix("team@muvin.co.uk"));
+    try {
+        const result = await callGraph(config, async () => "reached", { tool: "mail-list" });
+        assert.equal(result, "reached");
+    }
+    finally {
+        cleanup();
+    }
+});
+test("a calendar tool proceeds on the signed-in mailbox", async () => {
+    const { config, cleanup } = configFor(undefined);
+    try {
+        const result = await callGraph(config, async () => "reached", { tool: "calendar-list" });
+        assert.equal(result, "reached");
+    }
+    finally {
+        cleanup();
+    }
+});
+//# sourceMappingURL=shared-mail-only-guard.test.js.map

package/payload/platform/plugins/outlook/mcp/dist/__tests__/shared-mail-only-guard.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-mail-only-guard.test.js","sourceRoot":"","sources":["../../src/__tests__/shared-mail-only-guard.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAA0B,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,SAAS,SAAS,CAAC,MAA0B;IAC3C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtD,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;QACrC,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,EAAE;KACX,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE;YACN,QAAQ,EAAE,GAAG;YACb,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,QAAQ;YACnB,UAAU,EAAE,KAAK;YACjB,iBAAiB,EAAE,MAAM;SAC1B;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;IAC7F,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC;QACH,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CACH,SAAS,CACP,MAAM,EACN,KAAK,IAAI,EAAE;YACT,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC,EACD,EAAE,IAAI,EAAE,eAAe,EAAE,CAC1B,EACH,kBAAkB,CACnB,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,iDAAiD,CAAC,CAAC;IAClF,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;IACrE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EACpE,kBAAkB,CACnB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;IAC/D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;IACnE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/outlook/mcp/dist/__tests__/shared-mailbox-add.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=shared-mailbox-add.test.d.ts.map

package/payload/platform/plugins/outlook/mcp/dist/__tests__/shared-mailbox-add.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-mailbox-add.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/shared-mailbox-add.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/outlook/mcp/dist/__tests__/shared-mailbox-add.test.js

@@ -0,0 +1,152 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { runSharedMailboxAdd, SHARED_MAIL_SCOPE, } from "../tools/shared-mailbox-add.js";
+import { runSharedMailboxRemove } from "../tools/shared-mailbox-remove.js";
+import { DelegatedStore } from "../auth/delegated-store.js";
+import { TokenStore } from "../auth/token-store.js";
+/** A probe that resolves, or throws an error shaped like the Graph SDK's. */
+function probeThat(behaviour) {
+    const seen = [];
+    return {
+        seen,
+        probe: async (probeConfig, address) => {
+            seen.push({ prefix: probeConfig.mailboxPathPrefix, address });
+            if (behaviour === "ok")
+                return;
+            const err = new Error(`Graph ${behaviour}`);
+            err.statusCode = behaviour;
+            throw err;
+        },
+    };
+}
+function makeDeps(scopes, probe) {
+    const dir = mkdtempSync(join(tmpdir(), "outlook-shared-add-"));
+    const store = new TokenStore("acct-A", dir, "user-1");
+    store.store("access", "refresh", 3600, {
+        graphUserId: "user-1",
+        mail: "admin@muvin.co.uk",
+        scopes,
+    });
+    return {
+        dir,
+        deps: {
+            config: { clientId: "c", tenantId: "common", accountId: "acct-A", tokenStore: store },
+            accountsDir: dir,
+            viaMailboxKey: "user-1",
+            viaIdentity: "admin@muvin.co.uk",
+            viaScopes: scopes,
+            nowMs: 1753724400000,
+            probe,
+        },
+        cleanup: () => rmSync(dir, { recursive: true, force: true }),
+    };
+}
+test("a delegator without the shared scope is refused, and nothing is probed or written", async () => {
+    const { probe, seen } = probeThat("ok");
+    const { deps, dir, cleanup } = makeDeps(["Mail.ReadWrite"], probe);
+    try {
+        await assert.rejects(() => runSharedMailboxAdd(deps, { address: "team@muvin.co.uk" }), new RegExp(SHARED_MAIL_SCOPE.replace(/\./g, "\\.")));
+        assert.deepEqual(seen, [], "the scope check must precede the network call");
+        assert.deepEqual(new DelegatedStore("acct-A", dir).read(), {});
+    }
+    finally {
+        cleanup();
+    }
+});
+test("the probe runs against the shared prefix the real tools will use", async () => {
+    const { probe, seen } = probeThat("ok");
+    const { deps, cleanup } = makeDeps(["Mail.ReadWrite", SHARED_MAIL_SCOPE], probe);
+    try {
+        await runSharedMailboxAdd(deps, { address: "team@muvin.co.uk" });
+        assert.deepEqual(seen, [
+            { prefix: "/users/team%40muvin.co.uk", address: "team@muvin.co.uk" },
+        ]);
+    }
+    finally {
+        cleanup();
+    }
+});
+test("a 403 from Graph names Full Access and writes nothing", async () => {
+    const { probe } = probeThat(403);
+    const { deps, dir, cleanup } = makeDeps(["Mail.ReadWrite", SHARED_MAIL_SCOPE], probe);
+    try {
+        await assert.rejects(() => runSharedMailboxAdd(deps, { address: "team@muvin.co.uk" }), /Full Access/);
+        assert.deepEqual(new DelegatedStore("acct-A", dir).read(), {});
+    }
+    finally {
+        cleanup();
+    }
+});
+test("a 404 from Graph names the tenant and writes nothing", async () => {
+    const { probe } = probeThat(404);
+    const { deps, dir, cleanup } = makeDeps(["Mail.ReadWrite", SHARED_MAIL_SCOPE], probe);
+    try {
+        await assert.rejects(() => runSharedMailboxAdd(deps, { address: "nobody@muvin.co.uk" }), /no mailbox with this address/);
+        assert.deepEqual(new DelegatedStore("acct-A", dir).read(), {});
+    }
+    finally {
+        cleanup();
+    }
+});
+test("a successful probe writes exactly one entry, keyed lowercase", async () => {
+    const { probe } = probeThat("ok");
+    const { deps, dir, cleanup } = makeDeps(["Mail.ReadWrite", SHARED_MAIL_SCOPE], probe);
+    try {
+        const result = await runSharedMailboxAdd(deps, { address: "Team@Muvin.co.uk" });
+        assert.equal(result.address, "team@muvin.co.uk");
+        assert.equal(result.via, "admin@muvin.co.uk");
+        assert.equal(result.alreadyAttached, false);
+        assert.deepEqual(new DelegatedStore("acct-A", dir).read(), {
+            "team@muvin.co.uk": { viaMailboxKey: "user-1", addedAt: 1753724400000 },
+        });
+    }
+    finally {
+        cleanup();
+    }
+});
+test("re-adding the same address reports alreadyAttached and keeps one entry", async () => {
+    const { probe } = probeThat("ok");
+    const { deps, dir, cleanup } = makeDeps(["Mail.ReadWrite", SHARED_MAIL_SCOPE], probe);
+    try {
+        await runSharedMailboxAdd(deps, { address: "team@muvin.co.uk" });
+        const again = await runSharedMailboxAdd(deps, { address: "team@muvin.co.uk" });
+        assert.equal(again.alreadyAttached, true);
+        assert.equal(Object.keys(new DelegatedStore("acct-A", dir).read()).length, 1);
+    }
+    finally {
+        cleanup();
+    }
+});
+test("a 500 propagates rather than being reported as a permission problem", async () => {
+    const { probe } = probeThat(500);
+    const { deps, dir, cleanup } = makeDeps(["Mail.ReadWrite", SHARED_MAIL_SCOPE], probe);
+    try {
+        await assert.rejects(() => runSharedMailboxAdd(deps, { address: "team@muvin.co.uk" }), /Graph 500/);
+        assert.deepEqual(new DelegatedStore("acct-A", dir).read(), {});
+    }
+    finally {
+        cleanup();
+    }
+});
+test("remove drops the entry once", async () => {
+    const { probe } = probeThat("ok");
+    const { deps, dir, cleanup } = makeDeps(["Mail.ReadWrite", SHARED_MAIL_SCOPE], probe);
+    try {
+        await runSharedMailboxAdd(deps, { address: "team@muvin.co.uk" });
+        assert.deepEqual(runSharedMailboxRemove("acct-A", dir, "TEAM@muvin.co.uk"), {
+            address: "team@muvin.co.uk",
+            removed: true,
+        });
+        assert.deepEqual(runSharedMailboxRemove("acct-A", dir, "team@muvin.co.uk"), {
+            address: "team@muvin.co.uk",
+            removed: false,
+        });
+    }
+    finally {
+        cleanup();
+    }
+});
+//# sourceMappingURL=shared-mailbox-add.test.js.map

package/payload/platform/plugins/outlook/mcp/dist/__tests__/shared-mailbox-add.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-mailbox-add.test.js","sourceRoot":"","sources":["../../src/__tests__/shared-mailbox-add.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAElB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGpD,6EAA6E;AAC7E,SAAS,SAAS,CAAC,SAAiC;IAIlD,MAAM,IAAI,GAA2D,EAAE,CAAC;IACxE,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,KAAK,EAAE,WAA8B,EAAE,OAAe,EAAE,EAAE;YAC/D,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9D,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO;YAC/B,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,SAAS,SAAS,EAAE,CAAmC,CAAC;YAC9E,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC;YAC3B,MAAM,GAAG,CAAC;QACZ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,MAAgB,EAChB,KAA6B;IAE7B,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtD,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;QACrC,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,mBAAmB;QACzB,MAAM;KACP,CAAC,CAAC;IACH,OAAO;QACL,GAAG;QACH,IAAI,EAAE;YACJ,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE;YACrF,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,QAAQ;YACvB,WAAW,EAAE,mBAAmB;YAChC,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,aAAa;YACpB,KAAK;SACN;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;IACnG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAE,KAAK,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,EAChE,IAAI,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CACpD,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,+CAA+C,CAAC,CAAC;QAC5E,MAAM,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;IAClF,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,EAAE,KAAK,CAAC,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,mBAAmB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE;YACrB,EAAE,MAAM,EAAE,2BAA2B,EAAE,OAAO,EAAE,kBAAkB,EAAE;SACrE,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;IACvE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,EAAE,KAAK,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,EAChE,aAAa,CACd,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;IACtE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,EAAE,KAAK,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,EAClE,8BAA8B,CAC/B,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;IAC9E,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,EAAE,KAAK,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACzD,kBAAkB,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE;SACxE,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;IACxF,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,EAAE,KAAK,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,mBAAmB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,EAAE,KAAK,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,EAChE,WAAW,CACZ,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;IAC7C,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,EAAE,KAAK,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,mBAAmB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,QAAQ,EAAE,GAAG,EAAE,kBAAkB,CAAC,EAAE;YAC1E,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,QAAQ,EAAE,GAAG,EAAE,kBAAkB,CAAC,EAAE;YAC1E,OAAO,EAAE,kBAAkB;YAC3B,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/outlook/mcp/dist/auth/delegated-store.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Per-account registry of DELEGATED mailboxes — shared mailboxes the signed-in
+ * user can reach through Exchange Full Access.
+ *
+ * A delegated mailbox never signs in, so it has no tokens of its own and cannot
+ * live in `mailboxes/<graphUserId>/tokens.enc` like a registered mailbox does.
+ * What is stored is a pointer: the shared address, and the mailbox key of the
+ * signed-in mailbox whose tokens address it. Holding no secret, this file is
+ * plain JSON rather than an encrypted blob, but it sits under the same 0700
+ * secrets directory and is written 0600 so its permissions never widen the
+ * directory's.
+ */
+export interface DelegatedEntry {
+    /** The `mailboxKey` of the signed-in mailbox whose tokens reach this address. */
+    viaMailboxKey: string;
+    /** Unix ms, supplied by the caller so the write is deterministic under test. */
+    addedAt: number;
+}
+export type DelegatedMap = Record<string, DelegatedEntry>;
+/** The one address form used as a key, everywhere. */
+export declare function normalizeAddress(address: string): string;
+export declare class DelegatedStore {
+    readonly accountId: string;
+    private readonly secretsDir;
+    private readonly filePath;
+    constructor(accountId: string, accountsDir: string);
+    /**
+     * Every delegated mailbox on this account. An absent or unparseable file
+     * reads as empty: a delegated record carries no credential, so a corrupt one
+     * costs the operator a re-add, and refusing to list the readable mailboxes
+     * beside it would be the larger failure. An entry missing either field is
+     * dropped rather than surfaced half-formed, since a record without a
+     * delegator cannot address anything.
+     */
+    read(): DelegatedMap;
+    add(address: string, viaMailboxKey: string, nowMs: number): void;
+    /** True when an entry was removed, false when there was nothing to remove. */
+    remove(address: string): boolean;
+    /**
+     * Read, change, write under an exclusive lock.
+     *
+     * Each write is atomic on its own, but add and remove are read-modify-write,
+     * so two processes attaching different mailboxes at the same moment would
+     * each write a map built from the state before the other's write and one
+     * record would be lost while both reported success. The MCP server runs one
+     * process per spawn and an account can hold several at once, so this is
+     * reachable. The lock is a directory, whose creation is atomic on every
+     * filesystem this runs on, and a holder older than the timeout is stolen so a
+     * process killed mid-write cannot wedge the account permanently.
+     */
+    private mutate;
+    /** Atomic: temp plus rename, so a reader sees either the old map or the new
+     * one and never a partial write. The temp name carries this writer's pid, so
+     * two processes on one account never share a temp path. */
+    private write;
+}
+//# sourceMappingURL=delegated-store.d.ts.map

package/payload/platform/plugins/outlook/mcp/dist/auth/delegated-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegated-store.d.ts","sourceRoot":"","sources":["../../src/auth/delegated-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA6BH,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,aAAa,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AAE1D,sDAAsD;AACtD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,qBAAa,cAAc;aAKP,SAAS,EAAE,MAAM;IAJnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAGhB,SAAS,EAAE,MAAM,EACjC,WAAW,EAAE,MAAM;IAMrB;;;;;;;OAOG;IACH,IAAI,IAAI,YAAY;IAiBpB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAOhE,8EAA8E;IAC9E,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAShC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,MAAM;IA0Cd;;+DAE2D;IAC3D,OAAO,CAAC,KAAK;CAed"}