# Draft commit message (do not commit until reviewed)

```
feat(outlook-mcp): shared mailbox targeting, discovery, and scopes (v1.1.0)

Add optional mailbox (UPN/SMTP) routing on email/folder/thread tools via
users/{upn}/... and X-AnchorMailbox. New list-mailboxes probes primary,
OUTLOOK_SHARED_MAILBOXES seeds, cache, and candidates. Send supports
mailbox-rooted sendMail and onBehalfOf. MSAL requests Mail.*.Shared;
check-auth-status reports token scp gaps. Docs, env example, tests.
```

## Files touched (summary)

New:
- utils/mailbox.js
- mailbox/list.js, mailbox/index.js
- tests/mailbox-path.test.js, tests/mailbox-send-path.test.js
- CHANGELOG.md

Modified:
- config.js, package.json, index.js
- utils/graph-api.js
- email/* (folder-utils, list, search, read, read-multiple, send, index)
- folder/* (list, create, move, index)
- tools/get-email-thread.js
- auth/tools.js
- README.md, .env.example

## Operator follow-up (not in this commit)

1. Entra: add delegated Mail.Read.Shared, Mail.ReadWrite.Shared, Mail.Send.Shared; admin consent
2. hermes gateway restart + session reset so tool schemas reload
3. Re-auth work (and personal if shared enabled) via device code
4. Optional: set OUTLOOK_SHARED_MAILBOXES on work instance
5. Update Hermes skills outlook-mcp-setup / send-email-quirks when ready