{
    "generatedAt":  "2026-06-30T10:31:19.9189268Z",
    "status":  "runbook ready - apply required",
    "tenant":  "ravefocus.onmicrosoft.com",
    "apply":  false,
    "runRetryAfter":  false,
    "allowFormsLive":  false,
    "purpose":  "Refresh stale Microsoft/Azure sign-in before SharePoint List creation, Planner Premium ID capture, Power Automate flow setup, or final launch retry.",
    "commands":  {
                     "dryRun":  "npm.cmd run reauth:microsoft",
                     "apply":  "npm.cmd run reauth:microsoft -- -Apply",
                     "applyAndRetry":  "npm.cmd run reauth:microsoft -- -Apply -RunRetryAfter",
                     "azLogin":  "az login --tenant ravefocus.onmicrosoft.com --allow-no-subscriptions --use-device-code",
                     "tokenProbe":  "az account get-access-token --tenant ravefocus.onmicrosoft.com --resource-type ms-graph --output json",
                     "retry":  "npm.cmd run retry:microsoft"
                 },
    "tokenProbe":  {
                       "passed":  false,
                       "expiresOn":  "",
                       "tenant":  "ravefocus.onmicrosoft.com",
                       "tokenStored":  false
                   },
    "totals":  {
                   "steps":  1,
                   "failedSteps":  0
               },
    "nextActions":  [
                        "run npm.cmd run reauth:microsoft -- -Apply -RunRetryAfter from an owner/admin session",
                        "approve SharePoint PnP admin consent only after confirming the tenant is ravefocus.onmicrosoft.com and the PnP app ID matches the consent runbook",
                        "do not switch worker forms live until final preflight has zero blocked gates"
                    ],
    "rules":  [
                  "does not store access tokens, passwords, recovery codes, payment details, private records, ID photos, billing data, bank data, payout settings, or private fan/customer info",
                  "does not switch worker forms live",
                  "does not create SharePoint Lists, Premium plans, Planner tasks, or Power Automate flows by itself",
                  "owner/admin must verify tenant and consent app before continuing",
                  "no proof = no payout; no assigned task = not payable"
              ],
    "steps":  [
                  {
                      "name":  "dry-run guard",
                      "command":  "npm.cmd run reauth:microsoft -- -Apply -RunRetryAfter",
                      "status":  "not run",
                      "exitCode":  0,
                      "message":  "Report-only mode. Re-run with -Apply to refresh Microsoft sign-in, then optionally -RunRetryAfter to rerun the Microsoft retry check.",
                      "startedAt":  "2026-06-30T10:31:19.8590811Z",
                      "endedAt":  "2026-06-30T10:31:19.8800314Z",
                      "durationSeconds":  0
                  }
              ]
}