From 83cb30ef0eb9dbbe42d7f94bbbd26ce93a134e84 Mon Sep 17 00:00:00 2001
From: iamdoubz <>
Date: Tue, 7 Jul 2026 17:49:25 -0500
Subject: [PATCH] feat(calendar): add graph-calendar OAuth provider (T8.9,
 M4.4)

---
 src-tauri/src/sync/oauth.rs | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/src-tauri/src/sync/oauth.rs b/src-tauri/src/sync/oauth.rs
index 3fd45f5..e67075a 100644
--- a/src-tauri/src/sync/oauth.rs
+++ b/src-tauri/src/sync/oauth.rs
@@ -46,6 +46,15 @@ pub fn provider_for(kind: &str) -> Option<OAuthProvider> {
             scopes: &["root_readwrite"],
             client_id_env: "WA_OAUTH_BOX_CLIENT_ID",
         }),
+        // Same identity platform as "onedrive", read-only calendar scope only
+        // (M4.4, T8.9, FR-CAL-6) — WA never requests file/mail access here.
+        "graph-calendar" => Some(OAuthProvider {
+            kind: "graph-calendar",
+            auth_endpoint: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
+            token_endpoint: "https://login.microsoftonline.com/common/oauth2/v2.0/token",
+            scopes: &["offline_access", "Calendars.Read", "User.Read"],
+            client_id_env: "WA_OAUTH_GRAPH_CALENDAR_CLIENT_ID",
+        }),
         _ => None,
     }
 }