@softeria/ms-365-mcp-server 0.128.0 → 0.128.2

package/dist/auth.js

@@ -31,6 +31,36 @@ function createMsalConfig(secrets) {
     }
   };
 }
+function buildDiskCoherencyCachePlugin(storage) {
+  return {
+    beforeCacheAccess: async (context) => {
+      try {
+        const cacheRaw = await storage.load("token-cache");
+        if (cacheRaw) {
+          context.tokenCache.deserialize(unwrapCache(cacheRaw).data);
+        }
+      } catch (error) {
+        logger.error(`Error reloading token cache: ${error.message}`);
+        if (storage.failClosed) {
+          throw error;
+        }
+      }
+    },
+    afterCacheAccess: async (context) => {
+      if (!context.cacheHasChanged) {
+        return;
+      }
+      try {
+        await storage.save("token-cache", wrapCache(context.tokenCache.serialize()));
+      } catch (error) {
+        logger.error(`Error saving token cache: ${error.message}`);
+        if (storage.failClosed) {
+          throw error;
+        }
+      }
+    }
+  };
+}
 const SCOPE_HIERARCHY = {
   "Mail.ReadWrite": ["Mail.Read"],
   "Calendars.ReadWrite": ["Calendars.Read"],
@@ -312,8 +342,15 @@ function consumersAuthorityHint(error, account, authority) {
 class AuthManager {
   constructor(config, scopes = [], expectedAccount, storage) {
     logger.info(`And scopes are ${scopes.join(", ")}`, scopes);
-    this.config = config;
     this.scopes = scopes;
+    this.storage = storage ?? new DefaultTokenCacheStorage();
+    this.config = {
+      ...config,
+      cache: {
+        ...config.cache,
+        cachePlugin: buildDiskCoherencyCachePlugin(this.storage)
+      }
+    };
     this.msalApp = new PublicClientApplication(this.config);
     this.accessToken = null;
     this.tokenExpiry = null;
@@ -323,7 +360,6 @@ class AuthManager {
     this.expectedHomeAccountId = this.normalizeExpectedHomeAccountId(
       expectedAccount?.expectedHomeAccountId
     );
-    this.storage = storage ?? new DefaultTokenCacheStorage();
     const oauthTokenFromEnv = process.env.MS365_MCP_OAUTH_TOKEN;
     this.oauthToken = oauthTokenFromEnv ?? null;
     this.isOAuthMode = oauthTokenFromEnv != null;
@@ -367,17 +403,6 @@ class AuthManager {
       }
     }
   }
-  async saveTokenCache() {
-    try {
-      const stamped = wrapCache(this.msalApp.getTokenCache().serialize());
-      await this.storage.save("token-cache", stamped);
-    } catch (error) {
-      logger.error(`Error saving token cache: ${error.message}`);
-      if (this.storage.failClosed) {
-        throw error;
-      }
-    }
-  }
   async saveSelectedAccount() {
     try {
       const stamped = wrapCache(JSON.stringify({ accountId: this.selectedAccountId }));
@@ -491,7 +516,10 @@ class AuthManager {
       try {
         await this.msalApp.getTokenCache().removeAccount(account);
       } catch (error) {
-        logger.warn(`Failed to remove unexpected account from cache: ${error.message}`);
+        logger.error(`Failed to remove unexpected account from cache: ${error.message}`);
+        throw new Error(
+          `Authenticated Microsoft account '${this.describeAccount(account)}' does not match expected Microsoft account '${this.expectedAccountLabel()}', and it could not be removed from the token cache (${error.message}). Its tokens may remain persisted - run --logout to clear the cache, then re-login.`
+        );
       }
       throw new Error(
         `Authenticated Microsoft account '${this.describeAccount(account)}' does not match expected Microsoft account '${this.expectedAccountLabel()}'. Login was not persisted.`
@@ -522,7 +550,6 @@ class AuthManager {
         const response = await this.msalApp.acquireTokenSilent(silentRequest);
         this.accessToken = response.accessToken;
         this.tokenExpiry = response.expiresOn ? new Date(response.expiresOn).getTime() : null;
-        await this.saveTokenCache();
         return this.accessToken;
       } catch (error) {
         const hint = consumersAuthorityHint(error, currentAccount, this.config.auth.authority);
@@ -584,7 +611,6 @@ class AuthManager {
         await this.saveSelectedAccount();
         logger.info(`Auto-selected new account: ${response.account.username}`);
       }
-      await this.saveTokenCache();
       return this.accessToken;
     } catch (error) {
       logger.error(`Error in device code flow: ${error.message}`);
@@ -626,7 +652,6 @@ class AuthManager {
         await this.saveSelectedAccount();
         logger.info(`Auto-selected new account: ${response.account.username}`);
       }
-      await this.saveTokenCache();
       return this.accessToken;
     } catch (error) {
       logger.error(`Error in interactive browser flow: ${error.message}`);
@@ -842,7 +867,6 @@ class AuthManager {
     };
     try {
       const response = await this.msalApp.acquireTokenSilent(silentRequest);
-      await this.saveTokenCache();
       return response.accessToken;
     } catch (error) {
       const hint = consumersAuthorityHint(error, targetAccount, this.config.auth.authority);
@@ -858,6 +882,7 @@ class AuthManager {
 var auth_default = AuthManager;
 export {
   buildAllowedScopeDiagnostics,
+  buildDiskCoherencyCachePlugin,
   buildScopeDiagnostics,
   buildScopesFromEndpoints,
   collapseScopeHierarchy,

package/dist/endpoints.json

@@ -359,6 +359,7 @@
     "toolName": "create-calendar-event",
     "presets": ["calendar", "outlook", "personal"],
     "scopes": ["Calendars.ReadWrite"],
+    "descriptionOverride": "Create (schedule) a new calendar event — a meeting or appointment — on the user's calendar. Set subject, start/end times, time zone, location, body, and attendees; supports online meetings and recurrence.",
     "llmTip": "CRITICAL: Do not try to guess the email address of the recipients. Use the list-users tool to find the email address of the recipients."
   },
   {

package/dist/graph-client.js

@@ -75,6 +75,8 @@ class GraphClient {
         const text = await response.text();
         if (text === "") {
           result = { message: "OK!" };
+        } else if (options.rawResponse) {
+          result = { message: "OK!", rawResponse: text };
         } else {
           try {
             result = JSON.parse(text);

package/dist/graph-tools.js

@@ -170,7 +170,10 @@ const UTILITY_TOOLS = [
         if (authManager && !authManager.isOAuthModeEnabled() && !getRequestTokens()) {
           accountAccessToken = await authManager.getTokenForAccount(accountParam);
         }
-        return await graphClient.graphRequest(target, { accessToken: accountAccessToken });
+        return await graphClient.graphRequest(target, {
+          accessToken: accountAccessToken,
+          rawResponse: true
+        });
       } catch (error) {
         return {
           content: [{ type: "text", text: JSON.stringify({ error: error.message }) }],
@@ -823,7 +826,7 @@ function registerGraphTools(server, graphClient, readOnly = false, enabledToolsP
       ).optional();
     }
     let toolDescription = withApiVersionPrefix(
-      tool.description || `Execute ${tool.method.toUpperCase()} request to ${tool.path}`,
+      (endpointConfig?.descriptionOverride ?? tool.description) || `Execute ${tool.method.toUpperCase()} request to ${tool.path}`,
       endpointConfig
     );
     if (endpointConfig?.llmTip) {
@@ -920,7 +923,10 @@ function buildDiscoverySearchIndex(toolsRegistry, utilityTools = []) {
     const nt = tokenize(name);
     nameTokens.set(name, new Set(nt));
     const pathTokens = tokenize(tool.path);
-    const descTokens = tokenize(tool.description).slice(0, DESC_CAP_TOKENS);
+    const descTokens = tokenize(config?.descriptionOverride ?? tool.description).slice(
+      0,
+      DESC_CAP_TOKENS
+    );
     const tipTokens = tokenize(config?.llmTip).slice(0, TIP_EXCERPT_TOKENS);
     const tokens = [
       ...nt,
@@ -1032,7 +1038,7 @@ function registerDiscoveryTools(server, graphClient, readOnly = false, orgMode =
         method: tool.method.toUpperCase(),
         path: tool.path,
         description: withApiVersionPrefix(
-          tool.description || `${tool.method.toUpperCase()} ${tool.path}`,
+          (config?.descriptionOverride ?? tool.description) || `${tool.method.toUpperCase()} ${tool.path}`,
           config
         ),
         ...config?.llmTip ? { llmTip: config.llmTip } : {}
@@ -1111,7 +1117,11 @@ function registerDiscoveryTools(server, graphClient, readOnly = false, orgMode =
     async ({ tool_name }) => {
       const entry = toolsRegistry.get(tool_name);
       if (entry) {
-        const schema = describeToolSchema(entry.tool, entry.config?.llmTip);
+        const schema = describeToolSchema(
+          entry.tool,
+          entry.config?.llmTip,
+          entry.config?.descriptionOverride
+        );
         return {
           content: [{ type: "text", text: JSON.stringify(schema, null, 2) }]
         };

package/dist/lib/tool-schema.js

@@ -7,7 +7,7 @@ function unwrapOptional(schema) {
   }
   return { inner: schema, optional: false };
 }
-function describeToolSchema(tool, llmTip) {
+function describeToolSchema(tool, llmTip, descriptionOverride) {
   const params = (tool.parameters ?? []).map((p) => {
     const { inner, optional } = unwrapOptional(p.schema);
     const isPath = p.type === "Path";
@@ -25,7 +25,7 @@ function describeToolSchema(tool, llmTip) {
     name: tool.alias,
     method: tool.method.toUpperCase(),
     path: tool.path,
-    description: tool.description ?? "",
+    description: descriptionOverride ?? tool.description ?? "",
     ...llmTip ? { llmTip } : {},
     parameters: params
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softeria/ms-365-mcp-server",
-  "version": "0.128.0",
+  "version": "0.128.2",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",

package/src/endpoints.json

@@ -359,6 +359,7 @@
     "toolName": "create-calendar-event",
     "presets": ["calendar", "outlook", "personal"],
     "scopes": ["Calendars.ReadWrite"],
+    "descriptionOverride": "Create (schedule) a new calendar event — a meeting or appointment — on the user's calendar. Set subject, start/end times, time zone, location, body, and attendees; supports online meetings and recurrence.",
     "llmTip": "CRITICAL: Do not try to guess the email address of the recipients. Use the list-users tool to find the email address of the recipients."
   },
   {