feat(outlook): add Calendars.ReadWrite and MailboxSettings.Read scopes

Extend the shared outlook OAuth service with delegated Graph calendar scopes so
one Microsoft connection covers mail and calendar. Existing connected users must
reconnect to be granted the new scopes (noted in a code comment). Adds human-readable
scope descriptions and test assertions.

Author: mzxchandra

apps/sim/lib/oauth/oauth.ts

@@ -392,10 +392,16 @@ export const OAUTH_PROVIDERS: Record<string, OAuthProviderConfig> = {
       },
       outlook: {
         name: 'Outlook',
-        description: 'Connect to Outlook and manage emails.',
+        description: 'Connect to Outlook and manage emails and calendar events.',
         providerId: 'outlook',
         icon: OutlookIcon,
         baseProviderIcon: MicrosoftIcon,
+        /**
+         * Calendars.ReadWrite and MailboxSettings.Read were added to support the Outlook
+         * calendar operations. Microsoft only grants newly-added scopes on a fresh
+         * authorization, so users who connected Outlook before these scopes existed must
+         * reconnect (re-consent) their account before the calendar operations will work.
+         */
         scopes: [
           'openid',
           'profile',
@@ -404,6 +410,8 @@ export const OAUTH_PROVIDERS: Record<string, OAuthProviderConfig> = {
           'Mail.ReadBasic',
           'Mail.Read',
           'Mail.Send',
+          'Calendars.ReadWrite',
+          'MailboxSettings.Read',
           'offline_access',
         ],
       },

apps/sim/lib/oauth/utils.test.ts

@@ -335,6 +335,7 @@ describe('getCanonicalScopesForProvider', () => {
 
     expect(outlookScopes.length).toBeGreaterThan(0)
     expect(outlookScopes).toContain('Mail.ReadWrite')
+    expect(outlookScopes).toContain('Calendars.ReadWrite')
 
     const excelScopes = getCanonicalScopesForProvider('microsoft-excel')
 
@@ -618,6 +619,7 @@ describe('getScopesForService', () => {
 
     expect(scopes.length).toBeGreaterThan(0)
     expect(scopes).toContain('Mail.ReadWrite')
+    expect(scopes).toContain('Calendars.ReadWrite')
   })
 
   it.concurrent('should return empty array for empty string', () => {

apps/sim/lib/oauth/utils.ts

@@ -237,6 +237,8 @@ export const SCOPE_DESCRIPTIONS: Record<string, string> = {
   'Mail.ReadBasic': 'Read Microsoft emails',
   'Mail.Read': 'Read Microsoft emails',
   'Mail.Send': 'Send emails',
+  'Calendars.ReadWrite': 'Read and manage Outlook calendar events',
+  'MailboxSettings.Read': 'Read mailbox settings (timezone, working hours)',
   'Files.Read': 'Read OneDrive files',
   'Files.ReadWrite': 'Read and write OneDrive files',
   'Tasks.ReadWrite': 'Read and manage Planner tasks',