PocketBase + Microsoft Graph OAuth capture app. Frontend is a Tailwind-powered note and audio capture page; backend is a Bun/Hono server that validates PocketBase tokens and can mint Graph tokens (client credentials flow).

What you get

server.ts — Bun + Hono server with /health, /api/graph/status, /api/submit, and static index.html serving.
index.html — Microsoft OAuth via PocketBase plus note/audio capture UI.
tsconfig.json, package.json, bun.lock — project configuration.

Setup

Install Bun (https://bun.sh).
Add a .env file at the project root with the variables below.
Install deps: bun install
Run dev server: bun run --watch server.ts (default port 3030).

Open http://localhost:3030 and sign in with Microsoft.

Environment variables

Name	Description
`CLIENT_ID`	Azure AD app (client) ID
`CLIENT_SECRET`	Azure AD client secret
`TENANT_ID`	Azure AD tenant ID
`REDIRECT_URI`	Redirect URI configured in the Azure app
`PB_DB`	PocketBase URL (e.g., http://127.0.0.1:8090)
`PB_COLLECTION`	Collection to store submissions (default `Job_Info_TestEnv`)
`PB_AUTH_COLLECTION`	Auth collection for token refresh (default `Users`)
`PORT`	Server port (default 3030, enforced in package.json `dev` script)

Notes

getGraphToken() in server.ts is ready for Graph API calls; extend with additional routes as needed.
/api/submit validates the provided pbToken then writes the payload to PB_COLLECTION; adjust fields to match your schema.
Static file serving uses index.html from the repo root.

OneNote sync (append MVP)

Backend endpoint: POST /api/onenote/append
Required headers:
- Authorization: Bearer <delegated Microsoft access token>
- x-pb-token: <PocketBase user token>
Current hardcoded target in server.ts:
- Host: czflex.sharepoint.com
- Site path: /sites/Team
- Section ID: ed504699-67be-47a3-838a-e01ec17198fb
- Page ID: addbbca7-18ce-4d8d-833e-96cc08d990bc
Frontend buttons:
- New note: Submit + Sync OneNote
- Note detail: Sync to OneNote

Important: sync requires a delegated Microsoft token with OneNote write permissions. The UI captures this from PocketBase Microsoft OAuth metadata when available.