EXTENSIONS

Broad Microsoft Graph extension — nine model types over one shared app-only client: calendar (room/user calendarView, current/next meeting), places (room resources), users (Entra directory reads, manager, memberOf), groups, mail (Outlook messages), teams (chats/teams/channels/messages), presence, sharepoint (document-library navigation, search, and file download, working under either Sites.Read.All or Sites.Selected), and intune (enrolled devices, compliance policies, configuration profiles and settings catalog, remediation scripts, confirmation-gated device actions, and async report exports). Token caching, automatic paging, and a raw-bytes downloader; app credentials supplied from a vault. Supersedes the narrow ms-graph-calendar and absorbs azure-ad-user's lookup.

Careful, non-destructive administration of a Stalwart mail server (v0.16+) over its JMAP-over-HTTP management API, authenticated with a scoped admin API key. Read/audit of domains, accounts, aliases, groups, DMARC/TLS reports, the outbound queue and server health; idempotent provisioning of accounts and aliases, groups, mailing lists and roles; spam-filter configuration; certificate install + reload and config reload; and reversible deactivate/reactivate. No hard deletes — the only "off switch" is the reversible set-state pair. Secrets (account passwords, certificate keys) are sent once and never read back.