docs: Add SharePoint-lists demo GIF via erpl-web extension

- flapi-demo-sharepoint.gif: live Microsoft 365 SharePoint list attached
  as a DuckDB catalog (erpl_web, ATTACH ... TYPE sharepoint_lists), served
  as an MCP tool, analyzed by Claude Code — all real, credentials only via
  {{env.*}} references
- demo-projects/sharepoint/: reproducible config tree (no secrets)
- Playbook §6: add the Microsoft 365/SharePoint wedge alongside SAP
- assets/README.md: recording notes incl. seeded tracker rows and the
  Number >= 10 filter that hides erpl-web CI fixture rows

Author: jrosskopf

docs/PROMOTION_STRATEGY.md

@@ -127,6 +127,7 @@ is pitching them a SQL-to-API+MCP tool:
 - **Locally Optimistic / dbt Slack / Data Twitter(X)** — the analytics-engineering crowd. Frame: "let analysts ship read-only APIs without begging a backend team."
 - **MotherDuck / DuckDB office hours & meetups** — lightning-talk or demo slot. This community *is* your ICP.
 - **ERPL / SAP-on-DuckDB niche** — flAPI can expose **SAP ERP & BW** via ERPL. Almost nobody offers "SAP data as a governed REST/MCP API from a YAML file." SAP developer communities (SAP Community, r/SAP, SAP-focused Discords/LinkedIn groups) are an untapped, high-value, low-competition audience. This is arguably flAPI's most differentiated single wedge.
+- **Microsoft 365 / SharePoint niche** — via the [erpl-web](https://github.com/DataZooDE/erpl-web) DuckDB extension, flAPI serves **SharePoint lists** (plus Entra ID, Teams, Business Central, Dataverse) as REST + MCP tools — working demo recorded (`docs/promotion/assets/flapi-demo-sharepoint.gif`). "Your team's SharePoint list as an AI tool, no Power Platform needed" is untapped: r/Office365, r/sharepoint, Microsoft Tech Community, M365 admin Discords. Same low-competition logic as the SAP wedge.
 - **LLM tooling Discords** (Claude/Anthropic dev community, Cursor, LangChain, LlamaIndex) — wherever people wire up MCP servers, "expose your warehouse as governed MCP tools" is on-topic.
 - **AI engineering newsletters** (Latent Space, tldr.ai, Ben's Bites, Data Engineering Weekly) — pitch the MCP-governance angle; these curate tools weekly and are hungry for concrete demos.
 

docs/promotion/TRACKER.md

@@ -17,7 +17,7 @@ copy-paste material lives in [SUBMISSION_KIT.md](SUBMISSION_KIT.md) and
 - [x] Fix wheel license metadata (Apache-2.0 → BUSL-1.1) — [PR #99](https://github.com/DataZooDE/flapi/pull/99), closes #97 (needs a patch release to land on PyPI)
 - [x] Add `mcp-name: io.github.datazoode/flapi` marker to PyPI README — included in PR #99
 - [x] Record demo GIF — `docs/promotion/assets/flapi-demo.gif` (36 s, 825 KB, VHS; embedded at the top of Readme.md). Re-record anytime: `vhs docs/promotion/assets/demo.tape`
-- [x] Three more scenario GIFs (all real recordings; see `assets/README.md`): **agent-over-MCP** (`flapi-demo-agent.gif` — Claude Code answering via `customer_lookup`), **agent on BigQuery** (`flapi-demo-bigquery.gif` — public dataset, typed params, "the model never writes SQL"), **self-packaging deploy** (`flapi-demo-pack.gif`). SAP and SharePoint scenarios documented as blocked (no live SAP system / no DuckDB SharePoint connector) rather than faked.
+- [x] Four more scenario GIFs (all real recordings; see `assets/README.md`): **agent-over-MCP** (`flapi-demo-agent.gif` — Claude Code answering via `customer_lookup`), **agent on BigQuery** (`flapi-demo-bigquery.gif` — public dataset, typed params, "the model never writes SQL"), **self-packaging deploy** (`flapi-demo-pack.gif`), **SharePoint lists** (`flapi-demo-sharepoint.gif` — live Microsoft 365 list via the erpl-web extension's `ATTACH ... TYPE sharepoint_lists`, agent analyzes the tracker). SAP remains blocked (no live ABAP system) rather than faked.
 - [x] Filed + fixed two launch-blocking bugs found while recording: [#100](https://github.com/DataZooDE/flapi/issues/100) MCP `logging: null` breaks the Claude Code handshake ([PR #102](https://github.com/DataZooDE/flapi/pull/102)); [#101](https://github.com/DataZooDE/flapi/issues/101) `read_parquet` fails on `embed://` bundles ([PR #103](https://github.com/DataZooDE/flapi/pull/103)). **Both must merge + ship in a release before the MCP launch angle works for real users.**
 - [ ] README polish: lead with the MCP angle
 

docs/promotion/assets/README.md

@@ -10,6 +10,7 @@ comment header in each tape says where to run it from and what it needs.
 | `flapi-demo-agent.gif` | Claude Code as an agent on flAPI MCP tools (Basic auth, per-tool RBAC) | 38 s | trunk build with fix [#100](https://github.com/DataZooDE/flapi/issues/100) |
 | `flapi-demo-bigquery.gif` | An AI agent on top of BigQuery: one YAML tool, typed params, "the model never writes SQL" | 35 s | trunk build with fix #100; needs Google ADC |
 | `flapi-demo-pack.gif` | `flapi pack`: fold config + SQL + data into one binary, deploy = scp | 29 s | released v26.07.13 (`uvx`) |
+| `flapi-demo-sharepoint.gif` | A SharePoint list as REST + MCP tool via the [erpl-web](https://github.com/DataZooDE/erpl-web) DuckDB extension (`ATTACH ... TYPE sharepoint_lists`), agent analyzes the live list | 34 s | trunk build with fix #100; needs Azure app credentials (Graph) |
 
 Demo project trees used by the recordings are in `demo-projects/`
 (`pack-myapi/` for the pack demo — CSV data, see #101 for why not parquet;
@@ -25,8 +26,17 @@ shows it).
   release containing the fixes ships.
 - Port 8080 was occupied on the recording machine, hence 8084/8085/8086 in
   the tapes.
-- Scenarios considered and NOT recorded, honestly: **SAP/ERPL** (the example
-  targets a localhost ABAP trial system that wasn't running; the ERPL demo
-  needs a live SAP box — record `examples/sqls/sap/` flows when one is up)
-  and **SharePoint lists** (no DuckDB connector; would need a Microsoft
-  Graph + `httpfs`/`read_json` recipe and a real tenant — do not fake it).
+- The SharePoint demo runs on the **erpl_web** community extension
+  (`INSTALL erpl_web FROM community` — works on flAPI's embedded DuckDB
+  1.5.3 despite the erpl-web README saying 1.5.4+). Credentials come from
+  erpl-web's `.env.microsoft` (`ERPL_MS_*` vars, Azure app with Graph
+  client-credentials); the committed `demo-projects/sharepoint/flapi.yaml`
+  only references `{{env.*}}` — no secrets. The "project tracker" rows
+  (items 54–59 in TestList on clouddatazoo.sharepoint.com) were seeded for
+  the demo via `graph_sharepoint_create_item`; the query filters
+  `Number >= 10` so the pre-existing Foo/Bar/Baz CI fixture rows stay
+  untouched and invisible.
+- Scenario considered and NOT recorded, honestly: **SAP/ERPL** — the
+  example targets a localhost ABAP trial system that wasn't running; the
+  ERPL demo needs a live SAP box. Record `examples/sqls/sap/` flows when
+  one is up.

docs/promotion/assets/demo-projects/sharepoint/flapi.yaml

@@ -0,0 +1,26 @@
+project-name: sharepoint-api
+project-description: SharePoint lists as REST + MCP via erpl_web
+
+template:
+  path: './sqls'
+  environment-whitelist:
+    - '^ERPL_MS_.*'
+
+connections:
+  sharepoint:
+    init: |
+      INSTALL erpl_web FROM community;
+      LOAD erpl_web;
+      CREATE OR REPLACE SECRET ms_graph (
+        TYPE microsoft_graph,
+        PROVIDER client_credentials,
+        tenant_id '{{env.ERPL_MS_TENANT_ID}}',
+        client_id '{{env.ERPL_MS_CLIENT_ID}}',
+        client_secret '{{env.ERPL_MS_CLIENT_SECRET}}'
+      );
+      ATTACH 'Kommunikationswebsite' AS sp (TYPE sharepoint_lists, SECRET 'ms_graph');
+    properties:
+      list: 'TestList'
+
+duckdb:
+  db_path: ':memory:'

docs/promotion/assets/demo-projects/sharepoint/sqls/items.sql

@@ -0,0 +1,5 @@
+SELECT id, Title AS project, Number AS pct_complete, Date AS due
+FROM sp.main."{{{ conn.list }}}"
+WHERE Title IS NOT NULL
+  AND Number >= {{#params.min_pct}}{{ params.min_pct }}{{/params.min_pct}}{{^params.min_pct}}10{{/params.min_pct}}
+ORDER BY Number

docs/promotion/assets/demo-projects/sharepoint/sqls/items.yaml

@@ -0,0 +1,17 @@
+mcp-tool:
+  name: project_tracker
+  description: The team's SharePoint project tracker — project, % complete, due date
+
+request:
+  - field-name: min_pct
+    field-in: query
+    description: Only projects at least this % complete
+    required: false
+    validators:
+      - type: int
+        min: 10
+        max: 100
+
+template-source: items.sql
+connection:
+  - sharepoint

docs/promotion/assets/flapi-demo-sharepoint.gif

@@ -0,0 +1,45 @@
+# flAPI SharePoint-lists agent demo — record from /tmp/spdemo.
+# Needs: locally built flapi (>= fix #100) on PATH, erpl-web .env.microsoft
+# credentials (Azure app w/ Graph Sites.Read), claude CLI, port 8087 free.
+Output flapi-demo-sharepoint.gif
+
+Set FontSize 17
+Set Width 1200
+Set Height 720
+Set Padding 12
+Set Theme "Catppuccin Mocha"
+Set TypingSpeed 35ms
+Set Shell bash
+
+Hide
+Type `export PATH=/home/jr/Projects/datazoo/flapi/build/debug:$PATH; set -a; source /home/jr/Projects/datazoo/erpl-web/.env.microsoft; set +a; claude mcp remove flapi >/dev/null 2>&1; clear`
+Enter
+Sleep 2s
+Show
+
+Type `# Your team's SharePoint list as an API + AI tool (DuckDB + erpl-web):`
+Enter
+Sleep 1.5s
+Type `sed -n '/init:/,/list:/p' flapi.yaml`
+Enter
+Sleep 4.5s
+
+Type `flapi -c flapi.yaml --port 8087 > /tmp/flapi.log 2>&1 &`
+Enter
+Hide
+Sleep 65s
+Show
+Type `claude mcp add --transport http flapi http://localhost:8087/mcp/jsonrpc`
+Enter
+Sleep 3s
+
+Type `claude -p "Which projects in our SharePoint tracker are less than 50% complete, and when are they due? Use the flapi tools." --allowedTools mcp__flapi__project_tracker`
+Enter
+Hide
+Sleep 75s
+Show
+Sleep 2s
+
+Type `# Live Microsoft 365 data — OAuth2 via DuckDB secrets. The model never writes SQL.`
+Enter
+Sleep 4s