@sam2kb/m365-mcp 1.0.0

package/dist/auth.js

@@ -0,0 +1,288 @@
+/**
+ * OAuth 2.0 Device Code Flow + Multi-Account Token Management
+ *
+ * Uses delegated permissions — the app acts AS YOU, not as the tenant.
+ * Tokens stored in ~/.m365-mcp/auth/ by default with 0600 permissions.
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import * as os from "node:os";
+export function resolveAuthDir(env = process.env, homeDir = os.homedir()) {
+    const configuredDir = env.M365_MCP_AUTH_DIR?.trim();
+    return configuredDir ? path.resolve(configuredDir) : path.join(homeDir, ".m365-mcp", "auth");
+}
+const AUTH_DIR = resolveAuthDir();
+const ACCOUNTS_PATH = path.join(AUTH_DIR, "accounts.json");
+const TOKENS_DIR = path.join(AUTH_DIR, "tokens");
+// Scopes for delegated access — reads/writes YOUR data only, not the whole tenant
+const SCOPES = [
+    "offline_access",
+    "User.Read",
+    "Mail.Read",
+    "Mail.ReadWrite",
+    "Mail.Send",
+    "Calendars.Read",
+    "Calendars.ReadWrite",
+    "Contacts.Read",
+    "Contacts.ReadWrite",
+    "Files.Read.All",
+    "Tasks.ReadWrite",
+    "Chat.Read",
+    "Chat.ReadWrite",
+].join(" ");
+// ─── helpers ────────────────────────────────────────────────────────
+export function ensureDirs() {
+    fs.mkdirSync(AUTH_DIR, { recursive: true, mode: 0o700 });
+    fs.mkdirSync(TOKENS_DIR, { recursive: true, mode: 0o700 });
+}
+export function getTokenPath(accountName) {
+    return path.join(TOKENS_DIR, `${accountName}.json`);
+}
+// ─── account store ──────────────────────────────────────────────────
+export function loadAccounts() {
+    ensureDirs();
+    if (!fs.existsSync(ACCOUNTS_PATH)) {
+        return { default: null, accounts: {} };
+    }
+    try {
+        return JSON.parse(fs.readFileSync(ACCOUNTS_PATH, "utf8"));
+    }
+    catch {
+        return { default: null, accounts: {} };
+    }
+}
+function saveAccounts(store) {
+    ensureDirs();
+    fs.writeFileSync(ACCOUNTS_PATH, JSON.stringify(store, null, 2), { mode: 0o600 });
+}
+export function addAccount(name, tenantId, clientId, email, description) {
+    const store = loadAccounts();
+    store.accounts[name] = {
+        tenantId,
+        clientId,
+        email,
+        description,
+        addedAt: store.accounts[name]?.addedAt ?? new Date().toISOString(),
+    };
+    if (!store.default)
+        store.default = name;
+    saveAccounts(store);
+}
+export function removeAccount(name) {
+    const store = loadAccounts();
+    delete store.accounts[name];
+    const tokenPath = getTokenPath(name);
+    if (fs.existsSync(tokenPath))
+        fs.unlinkSync(tokenPath);
+    if (store.default === name) {
+        store.default = Object.keys(store.accounts)[0] ?? null;
+    }
+    saveAccounts(store);
+}
+export function setDefaultAccount(name) {
+    const store = loadAccounts();
+    if (!store.accounts[name])
+        throw new Error(`Account "${name}" not found`);
+    store.default = name;
+    saveAccounts(store);
+}
+export function resolveAccount(accountName) {
+    const store = loadAccounts();
+    const name = accountName ?? store.default;
+    if (!name)
+        throw new Error("No account configured. Run: m365-mcp-auth add <name> <tenantId> <clientId>");
+    const acc = store.accounts[name];
+    if (!acc)
+        throw new Error(`Account "${name}" not found`);
+    return { name, ...acc, tokenPath: getTokenPath(name) };
+}
+export function listAccounts() {
+    const store = loadAccounts();
+    return {
+        default: store.default,
+        accounts: Object.entries(store.accounts).map(([name, acc]) => ({
+            ...acc,
+            name,
+            isDefault: name === store.default,
+            tokenPath: getTokenPath(name),
+        })),
+    };
+}
+// ─── token store ────────────────────────────────────────────────────
+export function loadTokens(config) {
+    if (!fs.existsSync(config.tokenPath))
+        return null;
+    try {
+        const data = JSON.parse(fs.readFileSync(config.tokenPath, "utf8"));
+        if (!data.access_token || !data.refresh_token)
+            return null;
+        return data;
+    }
+    catch {
+        return null;
+    }
+}
+function saveTokens(config, tokens) {
+    ensureDirs();
+    // Preemptively rotate the refresh token — store, don't re-use the old one
+    const data = {
+        access_token: tokens.access_token,
+        refresh_token: tokens.refresh_token,
+        expires_at: tokens.expires_at,
+        scope: tokens.scope ?? SCOPES,
+    };
+    fs.writeFileSync(config.tokenPath, JSON.stringify(data, null, 2), { mode: 0o600 });
+    return data;
+}
+// ─── HTTPS helper ───────────────────────────────────────────────────
+async function httpsPost(url, body) {
+    const resp = await fetch(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body: body.toString(),
+    });
+    const data = await resp.json();
+    if (!resp.ok) {
+        throw new Error(`Auth error: ${data.error_description ?? data.error ?? resp.statusText}`);
+    }
+    return data;
+}
+// ─── device code flow ───────────────────────────────────────────────
+export async function requestDeviceCode(config) {
+    return httpsPost(`https://login.microsoftonline.com/${config.tenantId}/oauth2/v2.0/devicecode`, new URLSearchParams({ client_id: config.clientId, scope: SCOPES }));
+}
+async function pollForToken(deviceCode, config) {
+    const data = await httpsPost(`https://login.microsoftonline.com/${config.tenantId}/oauth2/v2.0/token`, new URLSearchParams({
+        grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+        client_id: config.clientId,
+        device_code: deviceCode,
+    }));
+    return {
+        access_token: data.access_token,
+        refresh_token: data.refresh_token,
+        expires_at: Date.now() + (data.expires_in - 60) * 1000,
+        scope: data.scope,
+    };
+}
+// ─── token refresh ──────────────────────────────────────────────────
+async function refreshAccessToken(config, refreshToken) {
+    const data = await httpsPost(`https://login.microsoftonline.com/${config.tenantId}/oauth2/v2.0/token`, new URLSearchParams({
+        grant_type: "refresh_token",
+        client_id: config.clientId,
+        refresh_token: refreshToken,
+        scope: SCOPES,
+    }));
+    return {
+        access_token: data.access_token,
+        // OAuth servers may omit refresh_token when they do not rotate it.
+        refresh_token: data.refresh_token ?? refreshToken,
+        expires_at: Date.now() + (data.expires_in - 60) * 1000,
+        scope: data.scope,
+    };
+}
+// ─── public API ─────────────────────────────────────────────────────
+/** Serialises refresh attempts per account without mixing tokens across accounts. */
+const refreshLocks = new Map();
+/**
+ * Get a valid access token (auto-refresh if expired or within 5 min of expiry).
+ * Uses a mutex to avoid concurrent refresh races.
+ */
+export async function getAccessToken(accountName) {
+    const config = resolveAccount(accountName);
+    let tokens = loadTokens(config);
+    if (!tokens) {
+        throw new Error(`Not authenticated for account "${config.name}". Run: m365-mcp-auth login [--account=${config.name}]`);
+    }
+    // Still valid with 5-minute buffer
+    if (tokens.expires_at > Date.now() + 5 * 60 * 1000) {
+        return tokens.access_token;
+    }
+    // Serialise refresh — if another caller is already refreshing, wait for it
+    let refreshLock = refreshLocks.get(config.tokenPath);
+    if (!refreshLock) {
+        refreshLock = doRefresh(config, tokens.refresh_token).finally(() => {
+            refreshLocks.delete(config.tokenPath);
+        });
+        refreshLocks.set(config.tokenPath, refreshLock);
+    }
+    return refreshLock;
+}
+async function doRefresh(config, refreshToken) {
+    // Double-check tokens haven't been refreshed by a concurrent caller
+    const current = loadTokens(config);
+    if (current && current.expires_at > Date.now() + 5 * 60 * 1000) {
+        return current.access_token;
+    }
+    let attempt = 0;
+    let delay = 1000;
+    while (attempt < 3) {
+        try {
+            const fresh = await refreshAccessToken(config, current?.refresh_token ?? refreshToken);
+            saveTokens(config, fresh);
+            return fresh.access_token;
+        }
+        catch (err) {
+            attempt++;
+            if (err.message.includes("expired") || err.message.includes("invalid_grant")) {
+                throw new Error(`Refresh token expired for "${config.name}". Re-authenticate: m365-mcp-auth login`);
+            }
+            if (attempt >= 3)
+                throw err;
+            await new Promise((r) => setTimeout(r, delay));
+            delay *= 2;
+        }
+    }
+    throw new Error(`Failed to refresh token after 3 attempts`);
+}
+/**
+ * Full device-code authentication flow.
+ * Calls onPrompt(verificationUrl, userCode) so the caller can display instructions.
+ */
+export async function authenticate(accountName, onPrompt) {
+    const config = resolveAccount(accountName);
+    // Check existing
+    const existing = loadTokens(config);
+    if (existing && existing.expires_at > Date.now() + 5 * 60 * 1000) {
+        return existing;
+    }
+    // Request device code
+    const dc = await requestDeviceCode(config);
+    onPrompt(dc.verification_uri, dc.user_code);
+    // Poll
+    const deadline = Date.now() + dc.expires_in * 1000;
+    while (Date.now() < deadline) {
+        await new Promise((r) => setTimeout(r, dc.interval * 1000));
+        try {
+            const tokens = await pollForToken(dc.device_code, config);
+            return saveTokens(config, tokens);
+        }
+        catch (err) {
+            if (err.message.includes("authorization_pending")) {
+                continue;
+            }
+            if (err.message.includes("authorization_declined") ||
+                err.message.includes("access_denied")) {
+                throw new Error("User declined authorization.");
+            }
+            if (err.message.includes("expired_token") ||
+                err.message.includes("AADSTS70019")) {
+                throw new Error("Device code expired. Please try again.");
+            }
+            throw err;
+        }
+    }
+    throw new Error("Authentication timed out.");
+}
+export async function getTokenStatus(accountName) {
+    const config = resolveAccount(accountName);
+    const tokens = loadTokens(config);
+    if (!tokens)
+        return { account: config.name, valid: false, expires: null };
+    const valid = tokens.expires_at > Date.now();
+    return {
+        account: config.name,
+        valid,
+        expires: new Date(tokens.expires_at).toISOString(),
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAG9B,MAAM,UAAU,cAAc,CAC5B,MAAyB,OAAO,CAAC,GAAG,EACpC,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE;IAEtB,MAAM,aAAa,GAAG,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACpD,OAAO,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;AAClC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;AAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAEjD,kFAAkF;AAClF,MAAM,MAAM,GAAG;IACb,gBAAgB;IAChB,WAAW;IACX,WAAW;IACX,gBAAgB;IAChB,WAAW;IACX,gBAAgB;IAChB,qBAAqB;IACrB,eAAe;IACf,oBAAoB;IACpB,gBAAgB;IAChB,iBAAiB;IACjB,WAAW;IACX,gBAAgB;CACjB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,uEAAuE;AAEvE,MAAM,UAAU,UAAU;IACxB,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,WAAmB;IAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,WAAW,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,uEAAuE;AAEvE,MAAM,UAAU,YAAY;IAC1B,UAAU,EAAE,CAAC;IACb,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB;IACxC,UAAU,EAAE,CAAC;IACb,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,QAAgB,EAChB,QAAgB,EAChB,KAAc,EACd,WAAoB;IAEpB,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG;QACrB,QAAQ;QACR,QAAQ;QACR,KAAK;QACL,WAAW;QACX,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnE,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IACzC,YAAY,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC3B,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACzD,CAAC;IACD,YAAY,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,aAAa,CAAC,CAAC;IAC1E,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IACrB,YAAY,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,WAAoB;IACjD,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC;IAC1C,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CACxB,4EAA4E,CAC7E,CAAC;IACF,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,aAAa,CAAC,CAAC;IACzD,OAAO,EAAE,IAAI,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7D,GAAG,GAAG;YACN,IAAI;YACJ,SAAS,EAAE,IAAI,KAAK,KAAK,CAAC,OAAO;YACjC,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC;SAC9B,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,uEAAuE;AAEvE,MAAM,UAAU,UAAU,CAAC,MAAqB;IAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,MAAqB,EAAE,MAAiB;IAC1D,UAAU,EAAE,CAAC;IACb,0EAA0E;IAC1E,MAAM,IAAI,GAAc;QACtB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM;KAC9B,CAAC;IACF,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uEAAuE;AAEvE,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,IAAqB;IACzD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC5B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uEAAuE;AAEvE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAqB;IAO3D,OAAO,SAAS,CACd,qCAAqC,MAAM,CAAC,QAAQ,yBAAyB,EAC7E,IAAI,eAAe,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CACnE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,UAAkB,EAClB,MAAqB;IAErB,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,qCAAqC,MAAM,CAAC,QAAQ,oBAAoB,EACxE,IAAI,eAAe,CAAC;QAClB,UAAU,EAAE,8CAA8C;QAC1D,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,UAAU;KACxB,CAAC,CACH,CAAC;IACF,OAAO;QACL,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,GAAG,IAAI;QACtD,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC;AACJ,CAAC;AAED,uEAAuE;AAEvE,KAAK,UAAU,kBAAkB,CAAC,MAAqB,EAAE,YAAoB;IAC3E,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,qCAAqC,MAAM,CAAC,QAAQ,oBAAoB,EACxE,IAAI,eAAe,CAAC;QAClB,UAAU,EAAE,eAAe;QAC3B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,aAAa,EAAE,YAAY;QAC3B,KAAK,EAAE,MAAM;KACd,CAAC,CACH,CAAC;IACF,OAAO;QACL,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,mEAAmE;QACnE,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,YAAY;QACjD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,GAAG,IAAI;QACtD,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC;AACJ,CAAC;AAED,uEAAuE;AAEvE,qFAAqF;AACrF,MAAM,YAAY,GAAG,IAAI,GAAG,EAA2B,CAAC;AAExD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,WAAoB;IACvD,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,CAAC,IAAI,0CAA0C,MAAM,CAAC,IAAI,GAAG,CACtG,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,IAAI,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QACnD,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,2EAA2E;IAC3E,IAAI,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,WAAW,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACjE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QACH,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,MAAqB,EAAE,YAAoB;IAClE,oEAAoE;IACpE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,OAAO,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAC/D,OAAO,OAAO,CAAC,YAAY,CAAC;IAC9B,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,OAAO,OAAO,GAAG,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,IAAI,YAAY,CAAC,CAAC;YACvF,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC1B,OAAO,KAAK,CAAC,YAAY,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,EAAE,CAAC;YACV,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CACb,8BAA8B,MAAM,CAAC,IAAI,yCAAyC,CACnF,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,IAAI,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC5B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YAC/C,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,WAA+B,EAC/B,QAA6D;IAE7D,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAE3C,iBAAiB;IACjB,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QACjE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,sBAAsB;IACtB,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,EAAE,CAAC,gBAAgB,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;IAE5C,OAAO;IACP,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,UAAU,GAAG,IAAI,CAAC;IACnD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC1D,OAAO,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;gBAClD,SAAS;YACX,CAAC;YACD,IACE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC;gBAC9C,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EACrC,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;YACD,IACE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;gBACrC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EACnC,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAoB;IAEpB,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7C,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,IAAI;QACpB,KAAK;QACL,OAAO,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;KACnD,CAAC;AACJ,CAAC"}

package/dist/graph.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Typed Microsoft Graph API client with:
+ * - Automatic pagination (@odata.nextLink)
+ * - Rate-limit handling (429 → exponential backoff + retry)
+ * - Transient error retry (5xx)
+ * - Configurable timezone
+ */
+export declare class GraphClient {
+    private accountName?;
+    timezone: string;
+    constructor(timezone?: string, accountName?: string | undefined);
+    private request;
+    /** Single-page GET */
+    get<T>(path: string): Promise<T>;
+    /** GET that follows @odata.nextLink pagination, collecting all results */
+    getAll<T>(path: string, maxPages?: number, maxItems?: number): Promise<T[]>;
+    /** Paginated GET — yields pages lazily */
+    paginate<T>(path: string, maxPages?: number): AsyncGenerator<T[]>;
+    /** POST */
+    post<T>(path: string, body: unknown): Promise<T>;
+    /** PATCH */
+    patch<T>(path: string, body: unknown): Promise<T>;
+    /** DELETE */
+    delete(path: string): Promise<void>;
+    /** Download raw file content with retry on transient failures */
+    download(url: string, maxBytes?: number): Promise<string>;
+    /** Format a dateTimeTimeZone object for Graph API */
+    dateTimeStr(iso: string): {
+        dateTime: string;
+        timeZone: string;
+    };
+}

package/dist/graph.js

@@ -0,0 +1,189 @@
+/**
+ * Typed Microsoft Graph API client with:
+ * - Automatic pagination (@odata.nextLink)
+ * - Rate-limit handling (429 → exponential backoff + retry)
+ * - Transient error retry (5xx)
+ * - Configurable timezone
+ */
+import { getAccessToken } from "./auth.js";
+const GRAPH_BASE = "https://graph.microsoft.com/v1.0";
+const MAX_RETRIES = 4;
+const RETRY_BACKOFF_MS = 1000;
+function retryDelayMs(retryAfter, fallbackMs) {
+    if (!retryAfter)
+        return fallbackMs;
+    const seconds = Number(retryAfter);
+    if (Number.isFinite(seconds) && seconds >= 0)
+        return seconds * 1000;
+    const retryAt = Date.parse(retryAfter);
+    return Number.isNaN(retryAt) ? fallbackMs : Math.max(0, retryAt - Date.now());
+}
+export class GraphClient {
+    accountName;
+    timezone;
+    constructor(timezone = "UTC", accountName) {
+        this.accountName = accountName;
+        this.timezone = timezone;
+    }
+    // ─── request ────────────────────────────────────────────────────
+    async request(path, method = "GET", body, raw = false) {
+        const token = await getAccessToken(this.accountName);
+        const url = path.startsWith("https://") ? path : `${GRAPH_BASE}${path}`;
+        if (new URL(url).origin !== new URL(GRAPH_BASE).origin) {
+            throw new Error("Graph API request URL must use graph.microsoft.com");
+        }
+        let attempt = 0;
+        let delay = RETRY_BACKOFF_MS;
+        while (true) {
+            const opts = {
+                method,
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                    "Content-Type": "application/json",
+                    Accept: "application/json",
+                    Prefer: `outlook.timezone="${this.timezone}"`,
+                },
+            };
+            if (body && method !== "GET") {
+                opts.body = JSON.stringify(body);
+            }
+            let resp;
+            try {
+                resp = await fetch(url, opts);
+            }
+            catch (error) {
+                if (attempt >= MAX_RETRIES)
+                    throw error;
+                await new Promise((r) => setTimeout(r, delay));
+                attempt++;
+                delay *= 2;
+                continue;
+            }
+            // 204 No Content
+            if (resp.status === 204)
+                return undefined;
+            // Rate-limited — retry with Retry-After header or exponential backoff
+            if (resp.status === 429) {
+                if (attempt >= MAX_RETRIES) {
+                    throw new Error(`Rate limited after ${MAX_RETRIES} retries`);
+                }
+                const retryAfter = resp.headers.get("Retry-After");
+                const waitMs = retryDelayMs(retryAfter, delay);
+                await new Promise((r) => setTimeout(r, waitMs));
+                attempt++;
+                delay *= 2;
+                continue;
+            }
+            // Transient server error — retry
+            if (resp.status >= 500 && resp.status < 600) {
+                if (attempt >= MAX_RETRIES) {
+                    throw new Error(`Graph API server error ${resp.status} after ${MAX_RETRIES} retries`);
+                }
+                await new Promise((r) => setTimeout(r, delay));
+                attempt++;
+                delay *= 2;
+                continue;
+            }
+            // Parse response
+            if (raw && resp.ok) {
+                return resp;
+            }
+            let parsed;
+            try {
+                parsed = await resp.json();
+            }
+            catch {
+                // Graph action endpoints such as sendMail commonly return 202 with
+                // an empty body. A successful empty response is not an error.
+                if (resp.ok)
+                    return undefined;
+                throw new Error(`Graph API ${resp.status}: unable to parse response`);
+            }
+            if (!resp.ok) {
+                const err = parsed?.error;
+                throw new Error(`Graph API ${resp.status}: ${err?.message ?? resp.statusText}`);
+            }
+            return parsed;
+        }
+    }
+    // ─── public methods ──────────────────────────────────────────────
+    /** Single-page GET */
+    async get(path) {
+        return this.request(path);
+    }
+    /** GET that follows @odata.nextLink pagination, collecting all results */
+    async getAll(path, maxPages = 10, maxItems = Infinity) {
+        const results = [];
+        let url = path;
+        let pages = 0;
+        while (url && pages < maxPages && results.length < maxItems) {
+            // If url is a nextLink, it's already absolute
+            const data = await this.request(url);
+            if (data.value)
+                results.push(...data.value.slice(0, maxItems - results.length));
+            url = data["@odata.nextLink"];
+            pages++;
+        }
+        return results;
+    }
+    /** Paginated GET — yields pages lazily */
+    async *paginate(path, maxPages = 10) {
+        let url = path;
+        let pages = 0;
+        while (url && pages < maxPages) {
+            const data = await this.request(url);
+            if (data.value)
+                yield data.value;
+            url = data["@odata.nextLink"];
+            pages++;
+        }
+    }
+    /** POST */
+    async post(path, body) {
+        return this.request(path, "POST", body);
+    }
+    /** PATCH */
+    async patch(path, body) {
+        return this.request(path, "PATCH", body);
+    }
+    /** DELETE */
+    async delete(path) {
+        await this.request(path, "DELETE");
+    }
+    /** Download raw file content with retry on transient failures */
+    async download(url, maxBytes = 50_000) {
+        const token = await getAccessToken(this.accountName);
+        let attempt = 0;
+        let delay = RETRY_BACKOFF_MS;
+        while (true) {
+            const resp = await fetch(url, {
+                headers: { Authorization: `Bearer ${token}` },
+            });
+            if (resp.status === 429 && attempt < MAX_RETRIES) {
+                const retryAfter = resp.headers.get("Retry-After");
+                await new Promise((r) => setTimeout(r, retryDelayMs(retryAfter, delay)));
+                attempt++;
+                delay *= 2;
+                continue;
+            }
+            if (resp.status >= 500 && resp.status < 600 && attempt < MAX_RETRIES) {
+                await new Promise((r) => setTimeout(r, delay));
+                attempt++;
+                delay *= 2;
+                continue;
+            }
+            if (!resp.ok) {
+                throw new Error(`Download failed: ${resp.status} ${resp.statusText}`);
+            }
+            const buf = await resp.arrayBuffer();
+            // Truncate to text-safe size
+            const slice = buf.byteLength > maxBytes ? buf.slice(0, maxBytes) : buf;
+            return new TextDecoder().decode(slice);
+        }
+    }
+    /** Format a dateTimeTimeZone object for Graph API */
+    dateTimeStr(iso) {
+        return { dateTime: iso, timeZone: this.timezone };
+    }
+}
+//# sourceMappingURL=graph.js.map

package/dist/graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph.js","sourceRoot":"","sources":["../src/graph.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,MAAM,UAAU,GAAG,kCAAkC,CAAC;AACtD,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,SAAS,YAAY,CAAC,UAAyB,EAAE,UAAkB;IACjE,IAAI,CAAC,UAAU;QAAE,OAAO,UAAU,CAAC;IAEnC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,OAAO,GAAG,IAAI,CAAC;IAEpE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,OAAO,WAAW;IAGgB;IAFtC,QAAQ,CAAS;IAEjB,YAAY,QAAQ,GAAG,KAAK,EAAU,WAAoB;QAApB,gBAAW,GAAX,WAAW,CAAS;QACxD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,mEAAmE;IAE3D,KAAK,CAAC,OAAO,CACnB,IAAY,EACZ,MAAM,GAAG,KAAK,EACd,IAAc,EACd,GAAG,GAAG,KAAK;QAEX,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,IAAI,EAAE,CAAC;QACxE,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,KAAK,GAAG,gBAAgB,CAAC;QAE7B,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAgB;gBACxB,MAAM;gBACN,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,KAAK,EAAE;oBAChC,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,kBAAkB;oBAC1B,MAAM,EAAE,qBAAqB,IAAI,CAAC,QAAQ,GAAG;iBAC9C;aACF,CAAC;YACF,IAAI,IAAI,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;YAED,IAAI,IAAc,CAAC;YACnB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,OAAO,IAAI,WAAW;oBAAE,MAAM,KAAK,CAAC;gBACxC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC/C,OAAO,EAAE,CAAC;gBACV,KAAK,IAAI,CAAC,CAAC;gBACX,SAAS;YACX,CAAC;YAED,iBAAiB;YACjB,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,SAAc,CAAC;YAE/C,sEAAsE;YACtE,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACxB,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CAAC,sBAAsB,WAAW,UAAU,CAAC,CAAC;gBAC/D,CAAC;gBACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACnD,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBAC/C,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;gBAChD,OAAO,EAAE,CAAC;gBACV,KAAK,IAAI,CAAC,CAAC;gBACX,SAAS;YACX,CAAC;YAED,iCAAiC;YACjC,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC5C,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,MAAM,UAAU,WAAW,UAAU,CAAC,CAAC;gBACxF,CAAC;gBACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC/C,OAAO,EAAE,CAAC;gBACV,KAAK,IAAI,CAAC,CAAC;gBACX,SAAS;YACX,CAAC;YAED,iBAAiB;YACjB,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBACnB,OAAO,IAAoB,CAAC;YAC9B,CAAC;YAED,IAAI,MAAW,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;gBACnE,8DAA8D;gBAC9D,IAAI,IAAI,CAAC,EAAE;oBAAE,OAAO,SAAc,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,MAAM,4BAA4B,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,MAAM,EAAE,KAAwC,CAAC;gBAC7D,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,CAC/D,CAAC;YACJ,CAAC;YAED,OAAO,MAAW,CAAC;QACrB,CAAC;IACH,CAAC;IAED,oEAAoE;IAEpE,sBAAsB;IACtB,KAAK,CAAC,GAAG,CAAI,IAAY;QACvB,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,MAAM,CAAI,IAAY,EAAE,QAAQ,GAAG,EAAE,EAAE,QAAQ,GAAG,QAAQ;QAC9D,MAAM,OAAO,GAAQ,EAAE,CAAC;QACxB,IAAI,GAAG,GAAuB,IAAI,CAAC;QACnC,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,OAAO,GAAG,IAAI,KAAK,GAAG,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YAC5D,8CAA8C;YAC9C,MAAM,IAAI,GAAyB,MAAM,IAAI,CAAC,OAAO,CAAuB,GAAG,CAAC,CAAC;YACjF,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAChF,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,KAAK,EAAE,CAAC;QACV,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,CAAC,QAAQ,CAAI,IAAY,EAAE,QAAQ,GAAG,EAAE;QAC5C,IAAI,GAAG,GAAuB,IAAI,CAAC;QACnC,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,OAAO,GAAG,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAyB,MAAM,IAAI,CAAC,OAAO,CAAuB,GAAG,CAAC,CAAC;YACjF,IAAI,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC;YACjC,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IAED,WAAW;IACX,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAa;QACvC,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,YAAY;IACZ,KAAK,CAAC,KAAK,CAAI,IAAY,EAAE,IAAa;QACxC,OAAO,IAAI,CAAC,OAAO,CAAI,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,aAAa;IACb,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,QAAQ,GAAG,MAAM;QAC3C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAErD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,KAAK,GAAG,gBAAgB,CAAC;QAE7B,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC5B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;aAC9C,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;gBACjD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACnD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;gBACzE,OAAO,EAAE,CAAC;gBACV,KAAK,IAAI,CAAC,CAAC;gBACX,SAAS;YACX,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;gBACrE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC/C,OAAO,EAAE,CAAC;gBACV,KAAK,IAAI,CAAC,CAAC;gBACX,SAAS;YACX,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACrC,6BAA6B;YAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACvE,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,WAAW,CAAC,GAAW;QACrB,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IACpD,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+/**
+ * m365-mcp — Production-grade Microsoft 365 MCP server
+ *
+ * Delegated OAuth device-code flow | Multi-account | Pagination | Rate-limit handling
+ *
+ * Covers: Email, Calendar, Contacts, OneDrive, Teams, Tasks, Users
+ */
+export {};