Microsoft Graph Gateway

{
  "method": "POST",
  "path": "/me/events/{event-id}/accept",
  "apiVersion": "v1.0",
  "permissionProfile": "calendar-write",
  "intentSummary": "Accept a meeting request",
  "body": {
    "comment": "Accepted.",
    "sendResponse": true
  }
}

{
  "method": "POST",
  "path": "/me/events",
  "apiVersion": "v1.0",
  "permissionProfile": "calendar-write",
  "intentSummary": "Create a short calendar smoke-test event",
  "body": {
    "subject": "[Graph Gateway Test] Calendar smoke test",
    "body": {
      "contentType": "Text",
      "content": "Temporary calendar smoke test created by the Microsoft Graph gateway."
    },
    "start": {
      "dateTime": "2026-05-21T18:00:00",
      "timeZone": "Tokyo Standard Time"
    },
    "end": {
      "dateTime": "2026-05-21T18:15:00",
      "timeZone": "Tokyo Standard Time"
    }
  }
}

MSGRAPH_CLIENT_ID=<your-entra-app-client-id>
MSGRAPH_TENANT_ID=<your-tenant-id-or-domain>
GRAPH_GATEWAY_RUNNER=<path-to-msgraph-runner>

{
  "method": "POST",
  "path": "/me/events/{event-id}/decline",
  "apiVersion": "v1.0",
  "permissionProfile": "calendar-write",
  "intentSummary": "Decline a meeting request",
  "body": {
    "comment": "Declined.",
    "sendResponse": true
  }
}

{
  "method": "GET",
  "path": "/me/events",
  "apiVersion": "v1.0",
  "query": {
    "select": "subject,start,end,organizer,responseStatus",
    "top": 10,
    "orderby": "start/dateTime"
  },
  "permissionProfile": "calendar-read-basic",
  "intentSummary": "List upcoming events with a minimal useful projection"
}

{
  "method": "GET",
  "path": "/me/messages",
  "apiVersion": "v1.0",
  "query": {
    "select": "subject,from,receivedDateTime",
    "top": 5
  },
  "permissionProfile": "mail-read-basic",
  "intentSummary": "Read the latest messages with a minimal projection"
}

{
  "method": "POST",
  "path": "/me/sendMail",
  "apiVersion": "v1.0",
  "permissionProfile": "mail-write",
  "intentSummary": "Send a short status email to the project group",
  "body": {
    "message": {
      "subject": "Status update",
      "body": {
        "contentType": "Text",
        "content": "All checks passed."
      }
    }
  }
}

{
  "method": "POST",
  "path": "/me/events/{event-id}/tentativelyAccept",
  "apiVersion": "v1.0",
  "permissionProfile": "calendar-write",
  "intentSummary": "Tentatively accept a meeting request",
  "body": {
    "comment": "Tentative.",
    "sendResponse": true
  }
}

# Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International (CC BY-NC-SA 4.0)

## English

Copyright (c) 2026 yamapan (aktsmm)

This work is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 4.0
International License.

You are free to:

- **Share** — copy and redistribute the material in any medium or format
- **Adapt** — remix, transform, and build upon the material

Under the following terms:

- **Attribution** — You must give appropriate credit, provide a link to the
  license, and indicate if changes were made. You may do so in any reasonable manner,
  but not in any way that suggests the licensor endorses you or your use.

- **NonCommercial** — You may not use the material for commercial purposes.
  *(Please contact the author if you wish to use this material for commercial purposes.)*

- **ShareAlike** — If you remix, transform, or build upon the material, you must
  distribute your contributions under the same license as the original.

No additional restrictions — You may not apply legal terms or technological
measures that legally restrict others from doing anything the license permits.

**AI/ML Training Restriction** — Use of this content for AI/ML training, data
mining, or other analytical purposes is prohibited without explicit permission.

Full license text: https://creativecommons.org/licenses/by-nc-sa/4.0/legalcode

---

## 日本語

Copyright (c) 2026 yamapan (aktsmm)

この作品はクリエイティブ・コモンズ 表示-非営利-継承 4.0 国際ライセンスの下に提供されています。

あなたは以下の条件に従う限り、自由に：

- **共有** — どのようなメディアやフォーマットでも資料を複製・再配布できます
- **翻案** — 資料をリミックス、変形、および加工することができます

以下の条件に従ってください：

- **表示** — あなたは適切なクレジットを表示し、ライセンスへのリンクを提供し、
  変更があったらその旨を示さなければなりません。これらは合理的であればどのような方法で
  行っても構いませんが、許諾者があなたやあなたの利用行為を支持していると示唆するような
  方法は除きます。

- **非営利** — あなたは営利目的でこの資料を利用してはなりません。
  （※商用利用をご希望の場合は、別途ご連絡ください。）

- **継承** — もしあなたがこの資料をリミックス、変形、または加工した場合、
  あなたはあなたの貢献部分を元の作品と同じライセンスの下で配布しなければなりません。

追加的な制約は課せません — あなたは、このライセンスが他の者に許諾することを法的に
制限するような法的条項や技術的手段を適用してはなりません。

**AI/MLトレーニング制限** — 本コンテンツをAI/MLモデルのトレーニング、データマイニング、
その他の解析目的での使用は明示的な許可なく禁止されています。

ライセンス全文: https://creativecommons.org/licenses/by-nc-sa/4.0/legalcode.ja

---

## Special Permission for Microsoft Employees / Microsoft 社員向け特別許諾

### English

Microsoft Corporation employees are granted permission to use, copy, modify, and
distribute this material for any purpose within the scope of their employment
duties at Microsoft, including internal business use and customer-facing
activities, without the NonCommercial restriction of this license.

This special permission applies only to work performed as part of official
Microsoft business activities.

### 日本語

Microsoft Corporation の社員は、Microsoft での業務の範疇において、本資料を社内業務
および顧客対応を含むあらゆる目的で使用、複製、改変、配布することが許諾されます。
この場合、本ライセンスの「非営利」制限は適用されません。

この特別許諾は、Microsoft の公式な業務活動の一環として行われる作業にのみ適用されます。

---

## Disclaimer / 免責事項

### English

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR
A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

### 日本語

本ソフトウェアは「現状のまま」で提供され、明示または黙示を問わず、商品性、
特定目的への適合性、および権利非侵害についての保証を含むがこれに限定されない、
いかなる種類の保証も伴いません。作者または著作権者は、契約行為、不法行為、
またはそれ以外であろうと、ソフトウェアに起因または関連し、あるいはソフトウェアの
使用またはその他の扱いによって生じる一切の請求、損害、その他の責任について
責任を負いません。

#!/usr/bin/env bash
set -euo pipefail

SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"

if ! command -v pwsh >/dev/null 2>&1; then
  echo "pwsh was not found. Install PowerShell 7+ to use the Microsoft Graph gateway on macOS or Linux." >&2
  exit 1
fi

pwsh -NoLogo -NoProfile -File "$SCRIPT_DIR/Get-GraphGatewayRunnerStatus.ps1" "$@"

param(
    [string]$RunnerPath
)

$ErrorActionPreference = 'Stop'

function Resolve-RunnerPath {
    param(
        [string]$ExplicitRunnerPath
    )

    if ($ExplicitRunnerPath) {
        return $ExplicitRunnerPath
    }

    if ($env:GRAPH_GATEWAY_RUNNER) {
        return $env:GRAPH_GATEWAY_RUNNER
    }

    if ($env:MSGRAPH_RUNNER) {
        return $env:MSGRAPH_RUNNER
    }

    $runner = Get-Command 'msgraph' -ErrorAction SilentlyContinue
    if ($runner) {
        return $runner.Source
    }

    return $null
}

$resolvedRunner = Resolve-RunnerPath -ExplicitRunnerPath $RunnerPath
$authStatus = $null
$authError = $null

if ($resolvedRunner) {
    try {
        $authStatus = & $resolvedRunner auth status 2>&1
    } catch {
        $authError = $_.Exception.Message
    }
}

[pscustomobject]@{
    runnerPath = $resolvedRunner
    runnerDetected = [bool]$resolvedRunner
    graphGatewayRunnerEnv = $env:GRAPH_GATEWAY_RUNNER
    msgraphRunnerEnv = $env:MSGRAPH_RUNNER
    authStatus = $authStatus
    authError = $authError
}

param(
    [string]$InstallRoot = '.tools\msgraph-runner',
    [switch]$AddToProcessEnv,
    [switch]$Force
)

$ErrorActionPreference = 'Stop'

$resolvedInstallRoot = if ([System.IO.Path]::IsPathRooted($InstallRoot)) {
    $InstallRoot
} else {
    Join-Path (Get-Location) $InstallRoot
}

$zipPath = Join-Path $resolvedInstallRoot 'msgraph.zip'
$extractRoot = Join-Path $resolvedInstallRoot 'msgraph'
$releaseUrl = 'https://github.com/merill/msgraph/releases/latest/download/msgraph.zip'

if ((Test-Path -LiteralPath $extractRoot) -and -not $Force) {
    throw "Install root already contains an extracted runner. Use -Force to overwrite: $extractRoot"
}

New-Item -ItemType Directory -Force -Path $resolvedInstallRoot | Out-Null

Invoke-WebRequest -Uri $releaseUrl -OutFile $zipPath

if (Test-Path -LiteralPath $extractRoot) {
    Remove-Item -LiteralPath $extractRoot -Recurse -Force
}

Expand-Archive -LiteralPath $zipPath -DestinationPath $extractRoot -Force

$packageRoot = Get-ChildItem -LiteralPath $extractRoot -Recurse -Directory |
    Where-Object { $_.Name -eq 'msgraph' } |
    Select-Object -First 1

if (-not $packageRoot) {
    throw 'The extracted package root was not found.'
}

$runnerCandidate = if ($IsWindows) {
    Get-ChildItem -LiteralPath $packageRoot.FullName -Recurse -File |
        Where-Object { $_.Name -eq 'run.ps1' } |
        Select-Object -First 1
} else {
    Get-ChildItem -LiteralPath $packageRoot.FullName -Recurse -File |
        Where-Object { $_.Name -eq 'run.sh' } |
        Select-Object -First 1
}

if (-not $runnerCandidate) {
    throw 'The platform-specific msgraph runner wrapper was not found after extraction.'
}

if ($AddToProcessEnv) {
    $env:GRAPH_GATEWAY_RUNNER = $runnerCandidate.FullName
}

[pscustomobject]@{
    installRoot = $resolvedInstallRoot
    extractedRoot = $extractRoot
    runnerPath = $runnerCandidate.FullName
    graphGatewayRunnerEnv = if ($AddToProcessEnv) { $env:GRAPH_GATEWAY_RUNNER } else { $null }
}

#!/usr/bin/env bash
set -euo pipefail

SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"

if ! command -v pwsh >/dev/null 2>&1; then
  echo "pwsh was not found. Install PowerShell 7+ to use the Microsoft Graph gateway on macOS or Linux." >&2
  exit 1
fi

pwsh -NoLogo -NoProfile -File "$SCRIPT_DIR/Invoke-GraphGateway.ps1" "$@"

param(
    [ValidateSet('GET', 'POST', 'PATCH', 'PUT', 'DELETE')]
    [string]$Method,

    [string]$Path,

    [ValidateSet('v1.0', 'beta')]
    [string]$ApiVersion = 'v1.0',

    [string]$Select,

    [string]$Filter,

    [int]$Top,

    [string]$Expand,

    [string]$OrderBy,

    [string[]]$Headers,

    [string]$BodyJson,

    [string]$PermissionProfile,

    [string]$IntentSummary,

    [switch]$AllowWrites,

    [switch]$DryRun,

    [string]$RunnerPath,

    [string]$RequestFile
)

$ErrorActionPreference = 'Stop'

function Get-RequestValue {
    param(
        [object]$ExplicitValue,
        [object]$FileValue,
        [switch]$AllowEmptyString
    )

    if ($null -ne $ExplicitValue) {
        if ($AllowEmptyString -or $ExplicitValue -ne '') {
            return $ExplicitValue
        }
    }

    return $FileValue
}

function Resolve-RunnerCommand {
    param(
        [string]$ExplicitRunnerPath
    )

    if ($ExplicitRunnerPath) {
        return $ExplicitRunnerPath
    }

    if ($env:GRAPH_GATEWAY_RUNNER) {
        return $env:GRAPH_GATEWAY_RUNNER
    }

    if ($env:MSGRAPH_RUNNER) {
        return $env:MSGRAPH_RUNNER
    }

    $runner = Get-Command 'msgraph' -ErrorAction SilentlyContinue
    if ($runner) {
        return $runner.Source
    }

    throw 'Microsoft Graph runner was not found. Set -RunnerPath, GRAPH_GATEWAY_RUNNER, or MSGRAPH_RUNNER, or install a runner that exposes the msgraph command.'
}

function Assert-Request {
    param(
        [string]$ResolvedMethod,
        [string]$ResolvedPath,
        [bool]$IsWrite,
        [bool]$AllowWriteExecution
    )

    if ([string]::IsNullOrWhiteSpace($ResolvedMethod)) {
        throw 'Method is required.'
    }

    if ([string]::IsNullOrWhiteSpace($ResolvedPath)) {
        throw 'Path is required.'
    }

    if (-not $ResolvedPath.StartsWith('/')) {
        throw 'Path must start with /. Example: /me/messages'
    }

    if ($ResolvedMethod -eq 'DELETE') {
        throw 'DELETE is blocked by the current Microsoft Graph gateway policy.'
    }

    if ($IsWrite -and -not $AllowWriteExecution) {
        throw 'Write execution requires -AllowWrites.'
    }
}

function Get-ImportantBodyFields {
    param(
        [object]$ResolvedBody
    )

    if ($null -eq $ResolvedBody) {
        return @()
    }

    if ($ResolvedBody -is [string]) {
        if ([string]::IsNullOrWhiteSpace($ResolvedBody)) {
            return @()
        }

        try {
            $parsedBody = $ResolvedBody | ConvertFrom-Json -Depth 20
        } catch {
            return @('Body JSON could not be parsed for summary generation')
        }
    } else {
        $parsedBody = $ResolvedBody
    }

    if ($parsedBody -isnot [psobject]) {
        return @()
    }

    return @($parsedBody.PSObject.Properties.Name | Select-Object -First 8)
}

function New-ConfirmationPreview {
    param(
        [string]$ResolvedMethod,
        [string]$ResolvedPath,
        [string]$ResolvedApiVersion,
        [string]$ResolvedPermissionProfile,
        [string]$ResolvedIntentSummary,
        [object]$ResolvedBody
    )

    $isWrite = $ResolvedMethod -ne 'GET'
    $importantFields = Get-ImportantBodyFields -ResolvedBody $ResolvedBody

    [pscustomobject]@{
        isWrite            = $isWrite
        target             = $ResolvedPath
        method             = $ResolvedMethod
        apiVersion         = $ResolvedApiVersion
        permissionProfile  = $ResolvedPermissionProfile
        intentSummary      = $ResolvedIntentSummary
        importantBodyFields = $importantFields
    }
}

$requestFromFile = $null
if ($RequestFile) {
    if (-not (Test-Path -LiteralPath $RequestFile)) {
        throw "Request file was not found: $RequestFile"
    }

    $requestFromFile = Get-Content -LiteralPath $RequestFile -Raw -Encoding UTF8 | ConvertFrom-Json -Depth 20
}

$resolvedMethod = Get-RequestValue -ExplicitValue $Method -FileValue $requestFromFile.method
$resolvedPath = Get-RequestValue -ExplicitValue $Path -FileValue $requestFromFile.path
$resolvedApiVersion = Get-RequestValue -ExplicitValue $ApiVersion -FileValue $requestFromFile.apiVersion
$resolvedSelect = Get-RequestValue -ExplicitValue $Select -FileValue $requestFromFile.query.select -AllowEmptyString
$resolvedFilter = Get-RequestValue -ExplicitValue $Filter -FileValue $requestFromFile.query.filter -AllowEmptyString
$resolvedTop = Get-RequestValue -ExplicitValue $Top -FileValue $requestFromFile.query.top
$resolvedExpand = Get-RequestValue -ExplicitValue $Expand -FileValue $requestFromFile.query.expand -AllowEmptyString
$resolvedOrderBy = Get-RequestValue -ExplicitValue $OrderBy -FileValue $requestFromFile.query.orderBy -AllowEmptyString
$resolvedHeaders = Get-RequestValue -ExplicitValue $Headers -FileValue $requestFromFile.headers
$resolvedBody = Get-RequestValue -ExplicitValue $BodyJson -FileValue $requestFromFile.body
$resolvedPermissionProfile = Get-RequestValue -ExplicitValue $PermissionProfile -FileValue $requestFromFile.permissionProfile
$resolvedIntentSummary = Get-RequestValue -ExplicitValue $IntentSummary -FileValue $requestFromFile.intentSummary

$isWrite = $resolvedMethod -ne 'GET'
Assert-Request -ResolvedMethod $resolvedMethod -ResolvedPath $resolvedPath -IsWrite $isWrite -AllowWriteExecution $AllowWrites.IsPresent

$argumentList = [System.Collections.Generic.List[string]]::new()
$argumentList.Add('graph-call')
$argumentList.Add($resolvedMethod)
$argumentList.Add($resolvedPath)

if ($resolvedApiVersion) {
    $argumentList.Add('--api-version')
    $argumentList.Add($resolvedApiVersion)
}

if ($resolvedSelect) {
    $argumentList.Add('--select')
    $argumentList.Add($resolvedSelect)
}

if ($resolvedFilter) {
    $argumentList.Add('--filter')
    $argumentList.Add($resolvedFilter)
}

if ($resolvedTop) {
    $argumentList.Add('--top')
    $argumentList.Add([string]$resolvedTop)
}

if ($resolvedExpand) {
    $argumentList.Add('--expand')
    $argumentList.Add($resolvedExpand)
}

if ($resolvedOrderBy) {
    $argumentList.Add('--orderby')
    $argumentList.Add($resolvedOrderBy)
}

if ($resolvedHeaders) {
    foreach ($header in @($resolvedHeaders)) {
        $argumentList.Add('--headers')
        $argumentList.Add([string]$header)
    }
}

if ($null -ne $resolvedBody -and ($resolvedBody -ne '')) {
    $bodyArgument = if ($resolvedBody -is [string]) { $resolvedBody } else { $resolvedBody | ConvertTo-Json -Depth 20 -Compress }
    $argumentList.Add('--body')
    $argumentList.Add($bodyArgument)
}

if ($isWrite) {
    $argumentList.Add('--allow-writes')
}

$preview = New-ConfirmationPreview `
    -ResolvedMethod $resolvedMethod `
    -ResolvedPath $resolvedPath `
    -ResolvedApiVersion $resolvedApiVersion `
    -ResolvedPermissionProfile $resolvedPermissionProfile `
    -ResolvedIntentSummary $resolvedIntentSummary `
    -ResolvedBody $resolvedBody

if ($DryRun) {
    [pscustomobject]@{
        runnerCommand = if ($RunnerPath) { $RunnerPath } elseif ($env:GRAPH_GATEWAY_RUNNER) { $env:GRAPH_GATEWAY_RUNNER } elseif ($env:MSGRAPH_RUNNER) { $env:MSGRAPH_RUNNER } else { $null }
        arguments = @($argumentList)
        preview = $preview
    }
    return
}

$runnerCommand = Resolve-RunnerCommand -ExplicitRunnerPath $RunnerPath

& $runnerCommand @argumentList

param(
    [Parameter(Mandatory = $true)]
    [ValidateSet('accept', 'decline', 'tentativelyAccept')]
    [string]$ResponseType,

    [Parameter(Mandatory = $true)]
    [string]$EventId,

    [string]$ScopePath = '/me/events',

    [string]$Comment,

    [bool]$SendResponse = $true,

    [switch]$AsJson
)

$ErrorActionPreference = 'Stop'

if (-not $ScopePath.StartsWith('/')) {
    throw 'ScopePath must start with /. Example: /me/events or /users/user@example.com/events'
}

$normalizedScopePath = $ScopePath.TrimEnd('/')
$requestObject = [ordered]@{
    method = 'POST'
    path = "$normalizedScopePath/$EventId/$ResponseType"
    apiVersion = 'v1.0'
    permissionProfile = 'calendar-write'
    intentSummary = switch ($ResponseType) {
        'accept' { 'Accept a meeting request' }
        'decline' { 'Decline a meeting request' }
        'tentativelyAccept' { 'Tentatively accept a meeting request' }
    }
    body = [ordered]@{
        comment = $Comment
        sendResponse = $SendResponse
    }
}

if ($AsJson) {
    $requestObject | ConvertTo-Json -Depth 20
    return
}

[pscustomobject]$requestObject

param(
    [Parameter(Mandatory = $true)]
    [string]$ClientId,

    [Parameter(Mandatory = $true)]
    [string]$TenantId,

    [ValidateSet('powershell', 'bash', 'json')]
    [string]$Format = 'powershell',

    [string]$RunnerPath
)

$ErrorActionPreference = 'Stop'

$resolvedRunnerPath = if ($RunnerPath) {
    $RunnerPath
} elseif ($env:GRAPH_GATEWAY_RUNNER) {
    $env:GRAPH_GATEWAY_RUNNER
} elseif ($env:MSGRAPH_RUNNER) {
    $env:MSGRAPH_RUNNER
} else {
    '$GRAPH_GATEWAY_RUNNER'
}

switch ($Format) {
    'powershell' {
        @(
            "$env:MSGRAPH_CLIENT_ID = '$ClientId'"
            "$env:MSGRAPH_TENANT_ID = '$TenantId'"
            "$env:GRAPH_GATEWAY_RUNNER = '$resolvedRunnerPath'"
        ) -join [Environment]::NewLine
    }
    'bash' {
        @(
            "export MSGRAPH_CLIENT_ID='$ClientId'"
            "export MSGRAPH_TENANT_ID='$TenantId'"
            "export GRAPH_GATEWAY_RUNNER='$resolvedRunnerPath'"
        ) -join [Environment]::NewLine
    }
    'json' {
        [pscustomobject]@{
            MSGRAPH_CLIENT_ID = $ClientId
            MSGRAPH_TENANT_ID = $TenantId
            GRAPH_GATEWAY_RUNNER = $resolvedRunnerPath
        } | ConvertTo-Json -Depth 5
    }
}

param(
    [Parameter(Mandatory = $true)]
    [ValidateSet('POST', 'PATCH', 'PUT')]
    [string]$Method,

    [Parameter(Mandatory = $true)]
    [string]$Path,

    [ValidateSet('v1.0', 'beta')]
    [string]$ApiVersion = 'v1.0',

    [string]$PermissionProfile,

    [string]$IntentSummary,

    [string]$BodyJson
)

$ErrorActionPreference = 'Stop'

function Get-BodyPreview {
    param(
        [object]$ResolvedBody
    )

    if ($null -eq $ResolvedBody) {
        return @()
    }

    if ($ResolvedBody -is [string]) {
        if ([string]::IsNullOrWhiteSpace($ResolvedBody)) {
            return @()
        }

        try {
            $parsedBody = $ResolvedBody | ConvertFrom-Json -Depth 20
        } catch {
            return @('Body JSON could not be parsed')
        }
    } else {
        $parsedBody = $ResolvedBody
    }

    if ($parsedBody -isnot [psobject]) {
        return @('Body content is not an object payload')
    }

    $lines = [System.Collections.Generic.List[string]]::new()
    foreach ($property in $parsedBody.PSObject.Properties | Select-Object -First 10) {
        $valuePreview = $property.Value
        if ($valuePreview -is [System.Array]) {
            $valuePreview = "Array[$($valuePreview.Count)]"
        } elseif ($valuePreview -is [psobject]) {
            $valuePreview = 'Object'
        }

        $lines.Add("- $($property.Name): $valuePreview")
    }

    return @($lines)
}

$summaryLines = [System.Collections.Generic.List[string]]::new()
$summaryLines.Add("Target: $Path")
$summaryLines.Add("Action: $Method")
$summaryLines.Add("API version: $ApiVersion")

if ($PermissionProfile) {
    $summaryLines.Add("Permission profile: $PermissionProfile")
}

if ($IntentSummary) {
    $summaryLines.Add("Intent: $IntentSummary")
}

if ($ApiVersion -eq 'beta') {
    $summaryLines.Add('Risk: beta API requested')
}

$summaryLines.Add('Body preview:')
foreach ($line in Get-BodyPreview -ResolvedBody $BodyJson) {
    $summaryLines.Add($line)
}

$summaryLines -join [Environment]::NewLine

#!/usr/bin/env bash
set -euo pipefail

SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"

if ! command -v pwsh >/dev/null 2>&1; then
  echo "pwsh was not found. Install PowerShell 7+ to use the Microsoft Graph gateway on macOS or Linux." >&2
  exit 1
fi

pwsh -NoLogo -NoProfile -File "$SCRIPT_DIR/Test-GraphGatewayScaffold.ps1" "$@"

param()

$ErrorActionPreference = 'Stop'

$skillRoot = Split-Path -Parent $PSScriptRoot
$invokeScript = Join-Path $PSScriptRoot 'Invoke-GraphGateway.ps1'
$confirmScript = Join-Path $PSScriptRoot 'New-GraphWriteConfirmation.ps1'
$eventResponseScript = Join-Path $PSScriptRoot 'New-GraphEventResponseRequest.ps1'
$appConfigScript = Join-Path $PSScriptRoot 'New-GraphGatewayAppConfig.ps1'
$readRequest = Join-Path $skillRoot 'assets\read-mail.request.json'
$writeRequest = Join-Path $skillRoot 'assets\send-mail.request.json'

$dryRunResult = & $invokeScript -RequestFile $readRequest -DryRun
if (-not $dryRunResult) {
    throw 'Dry-run result was empty.'
}

if ($dryRunResult.preview.target -ne '/me/messages') {
    throw 'Dry-run preview target did not match the expected path.'
}

if ($dryRunResult.preview.permissionProfile -ne 'mail-read-basic') {
    throw 'Dry-run preview permission profile did not match the expected value.'
}

$writeRequestObject = Get-Content -LiteralPath $writeRequest -Raw -Encoding UTF8 | ConvertFrom-Json -Depth 20
$confirmationSummary = & $confirmScript `
    -Method $writeRequestObject.method `
    -Path $writeRequestObject.path `
    -ApiVersion $writeRequestObject.apiVersion `
    -PermissionProfile $writeRequestObject.permissionProfile `
    -IntentSummary $writeRequestObject.intentSummary `
    -BodyJson ($writeRequestObject.body | ConvertTo-Json -Depth 20 -Compress)

if ($confirmationSummary -notmatch 'Target: /me/sendMail') {
    throw 'Confirmation summary did not include the expected target.'
}

if ($confirmationSummary -notmatch 'Permission profile: mail-write') {
    throw 'Confirmation summary did not include the expected permission profile.'
}

$acceptRequest = & $eventResponseScript -ResponseType accept -EventId 'sample-event-id'
if ($acceptRequest.path -ne '/me/events/sample-event-id/accept') {
    throw 'Accept event request path did not match the expected value.'
}

if ($acceptRequest.permissionProfile -ne 'calendar-write') {
    throw 'Accept event request permission profile did not match the expected value.'
}

$appConfig = & $appConfigScript -ClientId '11111111-1111-1111-1111-111111111111' -TenantId 'contoso.onmicrosoft.com' -Format json | ConvertFrom-Json
if ($appConfig.MSGRAPH_CLIENT_ID -ne '11111111-1111-1111-1111-111111111111') {
    throw 'Custom app config did not preserve the expected client ID.'
}

if ($appConfig.MSGRAPH_TENANT_ID -ne 'contoso.onmicrosoft.com') {
    throw 'Custom app config did not preserve the expected tenant ID.'
}

[pscustomobject]@{
    dryRunVerified = $true
    confirmationVerified = $true
    eventResponseVerified = $true
    appConfigVerified = $true
    readRequest = $readRequest
    writeRequest = $writeRequest
}