MS Forms Auto

Automate Microsoft Forms submission with Playwright, dual-calendar auto-fill, and M365 number-matching MFA support.

Quick Start

1. Install Dependencies

cd <skill-directory>
npm install
npx playwright install chromium

2. Set Up Credentials (one-time)

node scripts/setup-credentials.js

Creates config/credentials.json (gitignored) with M365 email/password.

3. First Login with MFA

xvfb-run --auto-servernum node scripts/mfa-login.js

When prompted, enter the 6-digit code from your Authenticator app. Saves auth state to config/storageState.json for headless reuse.

4. Fetch Calendar Data

node scripts/calendar-fetch.js              # Today (SGT)
node scripts/calendar-fetch.js --date 2026-03-18  # Specific date

Returns JSON with all form fields auto-populated from both calendars.

5. Submit the Form

node scripts/submit-daily.js

Reads today's entry from daily-entries/YYYY-MM-DD.json and submits.

Architecture

Dual Calendar System

Field Logic

Fallback Defaults (if calendars fail)

Scripts

Automated Pipeline (via OpenClaw Cron)

5:45 PM SGT → Pre-Fill cron (isolated) → calendar-fetch.js → draft entry JSON
6:00 PM SGT → Submit cron (main session) → asks Master for MFA code → 
              submit-with-mfa.js --code CODE → login + submit in one session → done

Why main session? The submit job runs in the main session so it can ask Master Phil for the 6-digit Authenticator code. Speed is critical — the MFA code expires in ~30 seconds, so the login and submit happen in a single browser session via submit-with-mfa.js.

Configuration Files

MFA Handling (Improved)

This skill now intelligently handles both MFA and non-MFA scenarios:

Smart Behavior

1. Auto-detection: The script attempts credential login first, then checks if MFA is required
2. Flexible invocation:
• node scripts/submit-with-mfa.js - Tries credentials only; if MFA appears, waits 30s for manual code entry or exits with code 2
• node scripts/submit-with-mfa.js --code XXXXXX - Provides MFA code upfront; uses it if MFA appears, otherwise proceeds
3. Graceful fallback: If credentials alone are sufficient (no MFA prompt), it works without requiring a code
4. Exit codes:
• 0 — Success
• 1 — General error / invalid credentials
• 2 — MFA required but no code provided (use --code flag)
• 3 — MFA code wrong or expired
• 4 — Form submission failed

Recommended Usage

For daily cron (6 PM SGT):

node scripts/submit-with-mfa.js --code [MFA_CODE_HERE]

This ensures speed (code ready) and handles both cases:

• If MFA appears → code is used immediately
• If no MFA → code is ignored, submission proceeds

For manual testing (unknown MFA requirement):

node scripts/submit-with-mfa.js

The script will wait 30 seconds on the MFA screen if needed, allowing you to manually type the code from your Authenticator app.

Why This Works

Microsoft's M365 authentication can be inconsistent:

• Sometimes the OIDC cookie from previous login is still valid → no MFA needed
• Sometimes the cookie expired → MFA required
• Sometimes conditional access policies trigger MFA based on IP/device

The new logic eliminates the "always ask for MFA" problem by making the code optional and only using it when the MFA prompt actually appears.

Troubleshooting

• Auth expired: Run xvfb-run --auto-servernum node scripts/mfa-login.js with a fresh Authenticator code
• Calendar fetch fails: Script uses graceful fallbacks (0/NA defaults), form still submits
• Form URL changed: Update the URL in scripts/submit-daily.js
• Wrong field values: Run node scripts/calendar-fetch.js --date YYYY-MM-DD to verify calendar data
• Detailed test plan: See references/TESTING_AUTH_WORKFLOW.md for comprehensive authentication workflow testing scenarios