m365-agent-cli 1.2.0

package/src/test/ews-client.test.ts

@@ -0,0 +1,268 @@
+import { afterEach, describe, expect, it, mock } from 'bun:test';
+
+const okUpdateResponse = `<?xml version="1.0" encoding="utf-8"?>
+<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types">
+  <soap:Body>
+    <m:UpdateItemResponse>
+      <m:ResponseMessages>
+        <m:UpdateItemResponseMessage ResponseClass="Success">
+          <m:ResponseCode>NoError</m:ResponseCode>
+          <m:Items>
+            <t:CalendarItem>
+              <t:ItemId Id="updated-id" ChangeKey="new-ck" />
+            </t:CalendarItem>
+          </m:Items>
+        </m:UpdateItemResponseMessage>
+      </m:ResponseMessages>
+    </m:UpdateItemResponse>
+  </soap:Body>
+</soap:Envelope>`;
+
+describe('ews-client safety and conflict behavior', () => {
+  const originalFetch = globalThis.fetch;
+
+  afterEach(() => {
+    globalThis.fetch = originalFetch;
+    mock.restore();
+  });
+
+  it('retries updateEvent with AlwaysOverwrite after conflict when ChangeKey is provided', async () => {
+    const fetchCalls: string[] = [];
+    let callCount = 0;
+
+    globalThis.fetch = mock(async (_input: RequestInfo | URL, init?: RequestInit) => {
+      const body = String(init?.body || '');
+      fetchCalls.push(body);
+      callCount += 1;
+
+      if (callCount === 1) {
+        return new Response(
+          `<?xml version="1.0" encoding="utf-8"?>
+<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages">
+  <soap:Body>
+    <m:UpdateItemResponse>
+      <m:ResponseMessages>
+        <m:UpdateItemResponseMessage ResponseClass="Error">
+          <m:ResponseCode>ErrorIrresolvableConflict</m:ResponseCode>
+          <m:MessageText>The change key passed in the request does not match.</m:MessageText>
+        </m:UpdateItemResponseMessage>
+      </m:ResponseMessages>
+    </m:UpdateItemResponse>
+  </soap:Body>
+</soap:Envelope>`,
+          { status: 200 }
+        );
+      }
+
+      return new Response(okUpdateResponse, { status: 200 });
+    }) as unknown as typeof fetch;
+
+    const { updateEvent } = await import('../lib/ews-client.js');
+    const result = await updateEvent({
+      token: 'token',
+      eventId: 'event-id',
+      subject: 'Updated title',
+      changeKey: 'client-ck'
+    });
+
+    expect(result.ok).toBe(true);
+    expect(fetchCalls.length).toBe(2);
+    expect(fetchCalls[0]).toContain('ConflictResolution="AutoResolve"');
+    expect(fetchCalls[0]).toContain('<t:ItemId Id="event-id" ChangeKey="client-ck" />');
+    expect(fetchCalls[1]).toContain('ConflictResolution="AlwaysOverwrite"');
+    expect(fetchCalls[1]).toContain('<t:ItemId Id="event-id" />');
+  });
+
+  it('sanitizes EWS QueryString control syntax in getEmails search', async () => {
+    const fetchCalls: string[] = [];
+
+    globalThis.fetch = mock(async (_input: RequestInfo | URL, init?: RequestInit) => {
+      const body = String(init?.body || '');
+      fetchCalls.push(body);
+      return new Response(
+        `<?xml version="1.0" encoding="utf-8"?>
+<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages">
+  <soap:Body>
+    <m:FindItemResponse>
+      <m:ResponseMessages>
+        <m:FindItemResponseMessage ResponseClass="Success">
+          <m:ResponseCode>NoError</m:ResponseCode>
+          <m:RootFolder IncludesLastItemInRange="true" TotalItemsInView="0" IndexedPagingOffset="0" />
+        </m:FindItemResponseMessage>
+      </m:ResponseMessages>
+    </m:FindItemResponse>
+  </soap:Body>
+</soap:Envelope>`,
+        { status: 200 }
+      );
+    }) as unknown as typeof fetch;
+
+    const { getEmails } = await import('../lib/ews-client.js');
+    const query = 'urgent OR from:bob@example.com AND "project x"';
+    const result = await getEmails({ token: 'token', search: query });
+
+    expect(result.ok).toBe(true);
+    expect(fetchCalls.length).toBe(1);
+    expect(fetchCalls[0]).toContain(
+      '<m:QueryString>urgent OR from:bob@example.com AND &quot;project x&quot;</m:QueryString>'
+    );
+  });
+
+  it('returns explicit error when getOwaUserInfo fails instead of silent fallback', async () => {
+    globalThis.fetch = mock(async () => {
+      return new Response('gateway timeout', { status: 504 });
+    }) as unknown as typeof fetch;
+
+    const { getOwaUserInfo } = await import('../lib/ews-client.js');
+    const result = await getOwaUserInfo('token');
+
+    expect(result.ok).toBe(false);
+    expect(result.error?.code).toBe('EWS_ERROR');
+    expect(result.error?.message).toContain('Failed to resolve OWA user info');
+  });
+
+  it('parses TimeZone correctly from CalendarItem StartTimeZone and EndTimeZone', async () => {
+    globalThis.fetch = mock(async () => {
+      return new Response(
+        `<?xml version="1.0" encoding="utf-8"?>
+<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types">
+  <soap:Body>
+    <m:GetItemResponse>
+      <m:ResponseMessages>
+        <m:GetItemResponseMessage ResponseClass="Success">
+          <m:ResponseCode>NoError</m:ResponseCode>
+          <m:Items>
+            <t:CalendarItem>
+              <t:ItemId Id="event-id" ChangeKey="ck" />
+              <t:Subject>Timezone Test Event</t:Subject>
+              <t:Start>2026-03-30T10:00:00Z</t:Start>
+              <t:End>2026-03-30T11:00:00Z</t:End>
+              <t:StartTimeZone Id="Pacific Standard Time" />
+              <t:EndTimeZone Id="Pacific Standard Time" />
+              <t:IsAllDayEvent>false</t:IsAllDayEvent>
+              <t:IsCancelled>false</t:IsCancelled>
+              <t:Organizer><t:Mailbox><t:Name>Bob</t:Name><t:EmailAddress>bob@example.com</t:EmailAddress></t:Mailbox></t:Organizer>
+            </t:CalendarItem>
+          </m:Items>
+        </m:GetItemResponseMessage>
+      </m:ResponseMessages>
+    </m:GetItemResponse>
+  </soap:Body>
+</soap:Envelope>`,
+        { status: 200 }
+      );
+    }) as unknown as typeof fetch;
+
+    const { getCalendarEvent } = await import('../lib/ews-client.js');
+    const result = await getCalendarEvent('token', 'event-id');
+
+    expect(result.ok).toBe(true);
+    expect(result.data?.Start.TimeZone).toBe('Pacific Standard Time');
+    expect(result.data?.End.TimeZone).toBe('Pacific Standard Time');
+  });
+
+  it('replyToEmail sends ReferenceItemId with ChangeKey after GetItem', async () => {
+    const fetchCalls: string[] = [];
+    let callCount = 0;
+
+    globalThis.fetch = mock(async (_input: RequestInfo | URL, init?: RequestInit) => {
+      const body = String(init?.body || '');
+      fetchCalls.push(body);
+      callCount += 1;
+      if (callCount === 1) {
+        return new Response(
+          `<?xml version="1.0" encoding="utf-8"?>
+<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types">
+  <soap:Body>
+    <m:ResponseCode>NoError</m:ResponseCode>
+    <m:GetItemResponse>
+      <m:Items>
+        <t:Message>
+          <t:ItemId Id="msg-1" ChangeKey="ck-from-get" />
+          <t:Subject>Subj</t:Subject>
+        </t:Message>
+      </m:Items>
+    </m:GetItemResponse>
+  </soap:Body>
+</soap:Envelope>`,
+          { status: 200 }
+        );
+      }
+      return new Response(
+        `<?xml version="1.0" encoding="utf-8"?>
+<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages">
+  <soap:Body>
+    <m:ResponseCode>NoError</m:ResponseCode>
+  </soap:Body>
+</soap:Envelope>`,
+        { status: 200 }
+      );
+    }) as unknown as typeof fetch;
+
+    const { replyToEmail } = await import('../lib/ews-client.js');
+    const result = await replyToEmail('token', 'msg-1', 'Thanks', false, false, undefined);
+
+    expect(result.ok).toBe(true);
+    expect(fetchCalls.length).toBe(2);
+    expect(fetchCalls[0]).toContain('<m:GetItem>');
+    expect(fetchCalls[1]).toContain('ReferenceItemId');
+    expect(fetchCalls[1]).toContain('ChangeKey="ck-from-get"');
+    expect(fetchCalls[1]).toContain('Id="msg-1"');
+  });
+
+  it('replyToEmailDraft sends ReferenceItemId with ChangeKey after GetItem', async () => {
+    const fetchCalls: string[] = [];
+    let callCount = 0;
+
+    globalThis.fetch = mock(async (_input: RequestInfo | URL, init?: RequestInit) => {
+      const body = String(init?.body || '');
+      fetchCalls.push(body);
+      callCount += 1;
+      if (callCount === 1) {
+        return new Response(
+          `<?xml version="1.0" encoding="utf-8"?>
+<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types">
+  <soap:Body>
+    <m:ResponseCode>NoError</m:ResponseCode>
+    <m:GetItemResponse>
+      <m:Items>
+        <t:Message>
+          <t:ItemId Id="msg-2" ChangeKey="ck-draft" />
+          <t:Subject>Subj</t:Subject>
+        </t:Message>
+      </m:Items>
+    </m:GetItemResponse>
+  </soap:Body>
+</soap:Envelope>`,
+          { status: 200 }
+        );
+      }
+      return new Response(
+        `<?xml version="1.0" encoding="utf-8"?>
+<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types">
+  <soap:Body>
+    <m:ResponseCode>NoError</m:ResponseCode>
+    <m:CreateItemResponse>
+      <m:Items>
+        <t:Message>
+          <t:ItemId Id="reply-draft-x" ChangeKey="rck" />
+        </t:Message>
+      </m:Items>
+    </m:CreateItemResponse>
+  </soap:Body>
+</soap:Envelope>`,
+        { status: 200 }
+      );
+    }) as unknown as typeof fetch;
+
+    const { replyToEmailDraft } = await import('../lib/ews-client.js');
+    const result = await replyToEmailDraft('token', 'msg-2', 'Draft reply', false, false, undefined);
+
+    expect(result.ok).toBe(true);
+    expect(result.data?.draftId).toBe('reply-draft-x');
+    expect(fetchCalls.length).toBe(2);
+    expect(fetchCalls[0]).toContain('<m:GetItem>');
+    expect(fetchCalls[1]).toContain('ChangeKey="ck-draft"');
+    expect(fetchCalls[1]).toContain('MessageDisposition="SaveOnly"');
+  });
+});

package/src/test/mocks/index.ts

@@ -0,0 +1,375 @@
+/**
+ * Mock fetch setup for CLI integration tests.
+ * Intercepts all HTTP calls and returns mock responses based on URL and request body.
+ */
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import {
+  makeGetCalendarItemDetailResponse,
+  mockAddAttachmentResponse,
+  mockCalendarEventsEmptyResponse,
+  mockCalendarEventsResponse,
+  mockCancelEventSuccessResponse,
+  mockCreateDraftResponse,
+  mockCreateEventResponse,
+  mockCreateMailFolderResponse,
+  mockDeleteEventSuccessResponse,
+  mockDeleteMailFolderResponse,
+  mockForwardEmailResponse,
+  mockGetAttachmentsResponse,
+  mockGetDraftsResponse,
+  mockGetEmailDetailResponse,
+  mockGetEmailsResponse,
+  mockGetMailFoldersResponse,
+  mockGetRoomsFromListResponse,
+  mockGetRoomsResponse,
+  mockGetScheduleResponse,
+  mockGraphCheckinResponse,
+  mockGraphCreateUploadSessionResponse,
+  mockGraphDeleteResponse,
+  mockGraphGetFileMetadataResponse,
+  mockGraphListFilesResponse,
+  mockGraphSearchFilesResponse,
+  mockGraphShareResponse,
+  mockGraphUploadResponse,
+  mockMoveEmailResponse,
+  mockOAuthTokenResponse,
+  mockReplyToEmailResponse,
+  mockResolveNamesPeopleResponse,
+  mockResolveNamesResponse,
+  mockRespondListResponse,
+  mockRespondSuccessResponse,
+  mockSearchRoomsResponse,
+  mockSendEmailResponse,
+  mockUpdateEmailResponse,
+  mockUpdateEventResponse,
+  mockUpdateMailFolderResponse
+} from './responses.js';
+
+const REPO_ROOT = join(dirname(fileURLToPath(import.meta.url)), '../../..');
+
+function npmRegistryMockLatestVersion(): string {
+  try {
+    const raw = readFileSync(join(REPO_ROOT, 'package.json'), 'utf8');
+    return (JSON.parse(raw) as { version: string }).version;
+  } catch {
+    return '1.0.0';
+  }
+}
+
+type MockFn = (url: string, request: Request) => { status: number; body: string; contentType: string } | null;
+
+let mockFetchImpl: MockFn | null = null;
+
+export function setMockFetch(impl: MockFn): void {
+  mockFetchImpl = impl;
+}
+
+export function clearMockFetch(): void {
+  mockFetchImpl = null;
+}
+
+function makeResponse(body: string, status = 200, contentType = 'text/xml'): Response {
+  return new Response(body, {
+    status,
+    headers: { 'content-type': contentType }
+  });
+}
+
+function makeJsonResponse(body: object, status = 200): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { 'content-type': 'application/json' }
+  });
+}
+
+function extractSoapAction(body: string): string {
+  // Extract the first child element of soap:Body
+  const match = body.match(/<soap:Body[^>]*>([\s\S]*?)<\/soap:Body>/i);
+  if (!match) return '';
+  const inner = match[1].trim();
+  // Find the first tag name
+  const tagMatch = inner.match(/<(?:m:|t:)?(\w+)/);
+  return tagMatch ? tagMatch[1] : '';
+}
+
+function hasTag(body: string, tag: string): boolean {
+  return body.includes(`<${tag}`) || body.includes(`<m:${tag}`) || body.includes(`<t:${tag}`);
+}
+
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+export function createMockFetch(): any {
+  return async (input: string | URL | Request, init?: RequestInit) => {
+    const url = typeof input === 'string' ? input : input instanceof URL ? input.toString() : input.url;
+    const body = typeof init?.body === 'string' ? init.body : '';
+
+    // Let custom mock take priority
+    if (mockFetchImpl) {
+      const custom = mockFetchImpl(url, new Request(url, init as RequestInit));
+      if (custom) return makeResponse(custom.body, custom.status, custom.contentType);
+    }
+
+    // OAuth token endpoint
+    // Uses URL hostname parsing (not string includes) to avoid CodeQL injection alert
+    // and to be more precise — login.microsoftonline.com must be the actual host, not a query string value
+    try {
+      if (new URL(url).hostname === 'login.microsoftonline.com' && url.includes('/token')) {
+        return makeJsonResponse(JSON.parse(mockOAuthTokenResponse));
+      }
+    } catch {
+      // Not a valid URL, skip OAuth check
+    }
+
+    if (url.includes('registry.npmjs.org/m365-agent-cli/latest')) {
+      return makeJsonResponse({ version: npmRegistryMockLatestVersion() });
+    }
+
+    // EWS endpoint
+    if (url.includes('outlook.office365.com/EWS/Exchange.asmx')) {
+      const action = extractSoapAction(body);
+
+      // Auth check / ResolveNames (used by whoami and find)
+      if (action === 'ResolveNames' && hasTag(body, 'UnresolvedEntry')) {
+        // Check if this is calendar-related (respond list uses DistinguishedFolderId)
+        if (hasTag(body, 'DistinguishedFolderId') && hasTag(body, 'CalendarView')) {
+          return makeResponse(mockRespondListResponse);
+        }
+
+        // Distinguish whoami from find:
+        // - whoami: getOwaUserInfo calls ResolveNames with EWS_USERNAME (empty in tests)
+        // - find: resolveNames calls ResolveNames with the search query
+        // whoami has empty UnresolvedEntry + no RequiredAttendees
+        // find has (non-empty UnresolvedEntry) OR (has RequiredAttendees)
+        const unresolvedContent = body.match(/<m:UnresolvedEntry>([^<]*)<\/m:UnresolvedEntry>/)?.[1] || '';
+        const isPeopleSearch = hasTag(body, 'RequiredAttendees') || unresolvedContent.length > 0;
+
+        if (isPeopleSearch) {
+          return makeResponse(mockResolveNamesPeopleResponse);
+        }
+        // whoami gets here (empty UnresolvedEntry, no RequiredAttendees)
+        return makeResponse(mockResolveNamesResponse);
+      }
+
+      // Calendar events (used by calendar, respond, delete-event, update-event)
+      if (hasTag(body, 'FindItem') && hasTag(body, 'CalendarView')) {
+        // Check for specific event IDs (for respond)
+        if (body.includes('invite-')) {
+          return makeResponse(mockRespondListResponse);
+        }
+        // Default calendar events
+        return makeResponse(mockCalendarEventsResponse);
+      }
+
+      // Create calendar item
+      if (hasTag(body, 'CreateItem') && hasTag(body, 'CalendarItem')) {
+        return makeResponse(mockCreateEventResponse);
+      }
+
+      // CreateItem (new mail draft — SaveOnly Message; reply/forward use ReplyToItem/ForwardItem instead)
+      if (
+        hasTag(body, 'CreateItem') &&
+        hasTag(body, 'Message') &&
+        body.includes('MessageDisposition="SaveOnly"') &&
+        !hasTag(body, 'ReplyToItem') &&
+        !hasTag(body, 'ForwardItem')
+      ) {
+        return makeResponse(mockCreateDraftResponse);
+      }
+
+      // Update calendar item
+      if (hasTag(body, 'UpdateItem') && hasTag(body, 'CalendarItem')) {
+        return makeResponse(mockUpdateEventResponse);
+      }
+
+      // Delete calendar item
+      if (hasTag(body, 'DeleteItem')) {
+        return makeResponse(mockDeleteEventSuccessResponse);
+      }
+
+      // Cancel calendar item
+      if (hasTag(body, 'CancelItem')) {
+        return makeResponse(mockCancelEventSuccessResponse);
+      }
+
+      // Respond to item
+      if (
+        hasTag(body, 'RespondToItem') ||
+        hasTag(body, 'AcceptItem') ||
+        hasTag(body, 'DeclineItem') ||
+        hasTag(body, 'TentativelyAcceptItem')
+      ) {
+        return makeResponse(mockRespondSuccessResponse);
+      }
+
+      // FindItem for mail folders / emails
+      if (hasTag(body, 'FindItem') && hasTag(body, 'ItemShape')) {
+        // Check if it's a drafts query
+        if (hasTag(body, 'drafts') || body.includes('Drafts')) {
+          return makeResponse(mockGetDraftsResponse);
+        }
+        if (hasTag(body, 'sentitems') || body.includes('SentItems')) {
+          return makeResponse(mockGetEmailsResponse);
+        }
+        return makeResponse(mockGetEmailsResponse);
+      }
+
+      // GetItem: calendar vs mail (calendar flows prefetch ChangeKey before CreateItem/DeleteItem)
+      if (hasTag(body, 'GetItem')) {
+        const idMatch = body.match(/<t:ItemId\s+[^>]*Id="([^"]+)"/);
+        const reqId = idMatch?.[1] ?? '';
+        if (
+          reqId.startsWith('invite-') ||
+          reqId.startsWith('event-') ||
+          reqId.startsWith('new-event-id') ||
+          reqId === 'event-id' ||
+          reqId.startsWith('occurrence-') ||
+          reqId.startsWith('exception-') ||
+          reqId.startsWith('series-') ||
+          reqId.startsWith('cal-')
+        ) {
+          return makeResponse(makeGetCalendarItemDetailResponse(reqId));
+        }
+        return makeResponse(mockGetEmailDetailResponse);
+      }
+
+      // GetAttachment
+      if (hasTag(body, 'GetAttachment')) {
+        return makeResponse(mockGetAttachmentsResponse);
+      }
+
+      // UpdateItem for email (mark read/unread/flag)
+      if (hasTag(body, 'UpdateItem') && hasTag(body, 'Message')) {
+        return makeResponse(mockUpdateEmailResponse);
+      }
+
+      // MoveItem
+      if (hasTag(body, 'MoveItem')) {
+        return makeResponse(mockMoveEmailResponse);
+      }
+
+      // SendItem
+      if (hasTag(body, 'SendItem')) {
+        return makeResponse(mockSendEmailResponse);
+      }
+
+      // CreateItem (reply/forward draft)
+      if (hasTag(body, 'CreateItem') && (hasTag(body, 'ReplyToItem') || hasTag(body, 'ForwardItem'))) {
+        if (hasTag(body, 'ForwardItem')) {
+          return makeResponse(mockForwardEmailResponse);
+        }
+        return makeResponse(mockReplyToEmailResponse);
+      }
+
+      // GetFolder (mail folders)
+      if (hasTag(body, 'GetFolder') || (hasTag(body, 'FindFolder') && hasTag(body, 'DistinguishedFolderId'))) {
+        return makeResponse(mockGetMailFoldersResponse);
+      }
+
+      // CreateFolder
+      if (hasTag(body, 'CreateFolder')) {
+        return makeResponse(mockCreateMailFolderResponse);
+      }
+
+      // UpdateFolder (rename)
+      if (hasTag(body, 'UpdateFolder')) {
+        return makeResponse(mockUpdateMailFolderResponse);
+      }
+
+      // DeleteFolder
+      if (hasTag(body, 'DeleteFolder')) {
+        return makeResponse(mockDeleteMailFolderResponse);
+      }
+
+      // GetRoomLists
+      if (hasTag(body, 'GetRoomLists')) {
+        return makeResponse(mockGetRoomsResponse);
+      }
+
+      // GetRooms
+      if (hasTag(body, 'GetRooms')) {
+        return makeResponse(mockGetRoomsFromListResponse);
+      }
+
+      // ExpandDL (search rooms)
+      if (hasTag(body, 'ExpandDL')) {
+        return makeResponse(mockSearchRoomsResponse);
+      }
+
+      // GetSchedule (findtime)
+      if (hasTag(body, 'GetSchedule')) {
+        return makeResponse(mockGetScheduleResponse);
+      }
+
+      // CreateAttachment
+      if (hasTag(body, 'CreateAttachment')) {
+        return makeResponse(mockAddAttachmentResponse);
+      }
+
+      // Default: return empty calendar
+      return makeResponse(mockCalendarEventsEmptyResponse);
+    }
+
+    // Microsoft Graph API (files commands)
+    if (url.includes('graph.microsoft.com/v1.0')) {
+      // List files
+      if (url.includes('/me/drive/root/children') || (url.includes('/me/drive/items') && url.includes('/children'))) {
+        return makeJsonResponse(mockGraphListFilesResponse);
+      }
+      // Search files
+      if (url.includes('/me/drive/root/search')) {
+        return makeJsonResponse(mockGraphSearchFilesResponse);
+      }
+      // Upload file
+      if (url.includes('/me/drive/items/') && url.includes('/content')) {
+        return makeJsonResponse(mockGraphUploadResponse);
+      }
+      // Get file metadata
+      if (
+        url.includes('/me/drive/items/') &&
+        !url.includes('/children') &&
+        !url.includes('/content') &&
+        !url.includes('/createLink') &&
+        !url.includes('/checkin') &&
+        !url.includes('/checkout') &&
+        !url.includes('/createUploadSession')
+      ) {
+        return makeJsonResponse(mockGraphGetFileMetadataResponse);
+      }
+      // Create upload session
+      if (url.includes('/createUploadSession')) {
+        return makeJsonResponse(mockGraphCreateUploadSessionResponse);
+      }
+      // Delete file
+      if ((url.includes('/me/drive/items/') || url.includes('/me/drive/')) && init?.method === 'DELETE') {
+        return makeJsonResponse(mockGraphDeleteResponse);
+      }
+      // Share file / Office collaboration
+      if (url.includes('/me/drive/items/') && url.includes('/createLink')) {
+        return makeJsonResponse(mockGraphShareResponse);
+      }
+      // Checkin
+      if (url.includes('/me/drive/items/') && url.includes('/checkin')) {
+        return makeJsonResponse(mockGraphCheckinResponse);
+      }
+      // Checkout
+      if (url.includes('/me/drive/items/') && url.includes('/checkout')) {
+        return makeJsonResponse({});
+      }
+      return makeJsonResponse({ value: [] });
+    }
+
+    // Default: 404
+    return new Response('Not found', { status: 404 });
+  };
+}
+
+// Setup/teardown helpers for use in tests
+export function setupMockFetch(): void {
+  globalThis.fetch = createMockFetch() as typeof fetch;
+}
+
+export function teardownMockFetch(): void {
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  (globalThis as any).fetch = undefined;
+}