@softeria/ms-365-mcp-server 0.145.0 → 0.145.2

package/dist/endpoints.json

@@ -212,7 +212,7 @@
     "toolName": "add-mail-attachment",
     "presets": ["mail", "outlook", "personal"],
     "scopes": ["Mail.ReadWrite"],
-    "llmTip": "Max 3MB. Body requires @odata.type: {\"@odata.type\": \"#microsoft.graph.fileAttachment\", \"name\": \"file.pdf\", \"contentBytes\": \"<base64>\"}."
+    "llmTip": "The only path for attachments under 3MB. contentBytes must carry the complete base64 verbatim; a truncated argument fails with 400 UnableToDeserializePostBody. At 3MB and above use create-mail-attachment-upload-session, which rejects anything smaller. Body requires @odata.type: {\"@odata.type\": \"#microsoft.graph.fileAttachment\", \"name\": \"file.pdf\", \"contentBytes\": \"<base64>\"}."
   },
   {
     "pathPattern": "/me/messages/{message-id}/attachments/createUploadSession",
@@ -220,7 +220,7 @@
     "toolName": "create-mail-attachment-upload-session",
     "presets": ["mail", "outlook", "personal"],
     "scopes": ["Mail.ReadWrite"],
-    "llmTip": "For large attachments (3-150MB). Body: { AttachmentItem: { attachmentType: 'file', name: 'report.pdf', size: 5000000 } }. Returns a pre-authenticated uploadUrl for direct PUT of file bytes."
+    "llmTip": "For attachments 3MB to 150MB. Graph rejects smaller files with ErrorAttachmentSizeShouldNotBeLessThanMinimumSize, so under 3MB use add-mail-attachment instead. Body: { AttachmentItem: { attachmentType: 'file', name: 'report.pdf', size: 5000000 } }. Returns a pre-authenticated uploadUrl; the caller PUTs the bytes there itself in ranges up to 4MB. This server does not perform the PUT."
   },
   {
     "pathPattern": "/me/messages/{message-id}/attachments",
@@ -607,7 +607,7 @@
     "toolName": "upload-file-content",
     "presets": ["files", "onedrive", "personal"],
     "scopes": ["Files.ReadWrite"],
-    "llmTip": "Body is a base64-encoded string of the file bytes; the server decodes it before PUT. Max 4MB inline (use create-upload-session above 4MB). For new files use path format: /items/root:/path/to/file.txt:/content. Overwrites existing files without warning."
+    "llmTip": "Body is a base64-encoded string of the file bytes; the server decodes it before PUT. Graph accepts up to 250MB here, but the whole string travels as a tool argument and a truncated one decodes to a truncated file with no error, so use create-upload-session rather than emitting a large base64 string. For new files use path format: /items/root:/path/to/file.txt:/content. Overwrites existing files without warning."
   },
   {
     "pathPattern": "/drives/{drive-id}/items/{driveItem-id}/createUploadSession",
@@ -615,7 +615,7 @@
     "toolName": "create-upload-session",
     "presets": ["files", "onedrive", "personal"],
     "scopes": ["Files.ReadWrite"],
-    "llmTip": "For large file uploads (no size limit). Returns a pre-authenticated uploadUrl for direct PUT of file bytes. For new files use path: /items/{parentId}:/{fileName}:/createUploadSession. Body (optional): { item: { '@microsoft.graph.conflictBehavior': 'rename' } }."
+    "llmTip": "For large file uploads (no size limit, and no minimum unlike the Outlook attachment session). Returns a pre-authenticated uploadUrl; the caller PUTs the bytes there itself. This server does not perform the PUT. For new files use path: /items/{parentId}:/{fileName}:/createUploadSession. Body (optional): { item: { '@microsoft.graph.conflictBehavior': 'rename' } }."
   },
   {
     "pathPattern": "/drives/{drive-id}/items/{driveItem-id}",
@@ -2609,7 +2609,7 @@
     "presets": ["personal"],
     "scopes": ["User.ReadWrite"],
     "contentType": "image/jpeg",
-    "llmTip": "Uploads a new profile photo for the signed-in user. Body is a base64-encoded string of the image bytes (the server decodes before PUT). Photo must be JPEG, max 4 MB. Microsoft 365 generates HD downsized variants automatically (48x48, 64x64, 96x96, 120x120, 240x240, 360x360, 432x432, 504x504, 648x648). For work or school accounts, ProfilePhoto.ReadWrite.All is the more granular alternative permission. Use download-bytes with target=/me/photo/$value to retrieve the current photo."
+    "llmTip": "Uploads a new profile photo for the signed-in user. Body is a base64-encoded string of the image bytes (the server decodes before PUT). Photo must be JPEG, max 4 MB; the base64 travels as a tool argument and a truncated one is written without error, so resize before encoding instead of emitting a large string. Microsoft 365 generates HD downsized variants automatically (48x48, 64x64, 96x96, 120x120, 240x240, 360x360, 432x432, 504x504, 648x648). For work or school accounts, ProfilePhoto.ReadWrite.All is the more granular alternative permission. Use download-bytes with target=/me/photo/$value to retrieve the current photo."
   },
   {
     "pathPattern": "/me/todo/lists",

package/dist/generated/client.js

@@ -448,7 +448,9 @@ const microsoft_graph_chat = z.object({
   permissionGrants: z.array(microsoft_graph_resourceSpecificPermissionGrant).describe("A collection of permissions granted to apps for the chat.").optional(),
   pinnedMessages: z.array(microsoft_graph_pinnedChatMessageInfo).describe("A collection of all the pinned messages in the chat. Nullable.").optional(),
   tabs: z.array(microsoft_graph_teamsTab).describe("A collection of all the tabs in the chat. Nullable.").optional(),
-  targetedMessages: z.array(microsoft_graph_targetedChatMessage).optional()
+  targetedMessages: z.array(microsoft_graph_targetedChatMessage).describe(
+    "A collection of targeted messages in the chat that are visible only to specific users. Nullable. You can't expand this relationship using $expand. Targeted messages can also be retrieved via the userTeamwork: getAllTargetedMessages API."
+  ).optional()
 }).passthrough();
 const microsoft_graph_ODataErrors_ErrorDetails = z.object({ code: z.string(), message: z.string(), target: z.string().nullish() }).passthrough();
 const microsoft_graph_ODataErrors_InnerError = z.object({

package/dist/mcp-instructions.js

@@ -6,7 +6,7 @@ function buildGeneralMcpInstructions(opts) {
     "When you need an organizational user or recipient address, resolve it with list-users (or another directory tool); do not invent SMTP addresses.",
     "Directory $search on collections such as /users or /groups requires ConsistencyLevel: eventual when the tool exposes that header.",
     "Teams chat and channel messages: prefer HTML contentType in the body; plain text is often mangled by Graph.",
-    "Files / binary content: for large drive/SharePoint file content, prefer get-download-url to resolve a pre-authenticated URL for out-of-band download. Use download-bytes for authenticated byte reads such as mail attachments, profile photos, Teams hosted content, and meeting recordings. In stdio mode, download-bytes-to-file writes those same authenticated bytes straight to a local absolute path instead of returning base64 \u2014 the only out-of-band option for large mail attachments and meeting recordings, which get-download-url cannot handle. These tools take relative Microsoft Graph paths, not absolute URLs. For uploads, upload-file-content takes a base64 string body up to 4MB; use create-upload-session above that."
+    "Files / binary content: for large drive/SharePoint file content, prefer get-download-url to resolve a pre-authenticated URL for out-of-band download. Use download-bytes for authenticated byte reads such as mail attachments, profile photos, Teams hosted content, and meeting recordings. In stdio mode, download-bytes-to-file writes those same authenticated bytes straight to a local absolute path instead of returning base64 \u2014 the only out-of-band option for large mail attachments and meeting recordings, which get-download-url cannot handle. These tools take relative Microsoft Graph paths, not absolute URLs. For uploads, upload-file-content takes a base64 string body (Graph allows 250MB, but the whole string passes through the agent context and a truncated one is written without error); use create-upload-session for anything but small files."
   ];
   if (opts.readOnly) parts.push("This server is read-only; write operations are disabled.");
   if (opts.multiAccount)

package/dist/normalize-tool-schema.js

@@ -1,5 +1,6 @@
 import { ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
 import logger from "./logger.js";
+const MAX_INLINE_GROWTH = 2;
 function unescapePointer(token) {
   return token.replace(/~1/g, "/").replace(/~0/g, "~");
 }
@@ -51,6 +52,78 @@ function repointRefs(node, nameFor) {
     }
   }
 }
+function hasDef(defs, name) {
+  return Object.prototype.hasOwnProperty.call(defs, name);
+}
+function defRefName(value) {
+  const prefix = "#/$defs/";
+  return typeof value === "string" && value.startsWith(prefix) ? value.slice(prefix.length) : null;
+}
+function collectDefRefNames(node, out) {
+  if (!node || typeof node !== "object") return;
+  if (Array.isArray(node)) {
+    for (const item of node) collectDefRefNames(item, out);
+    return;
+  }
+  for (const [key, value] of Object.entries(node)) {
+    const name = key === "$ref" ? defRefName(value) : null;
+    if (name === null) collectDefRefNames(value, out);
+    else out.add(name);
+  }
+}
+function collectSiblingRefNames(node, out) {
+  if (!node || typeof node !== "object") return;
+  if (Array.isArray(node)) {
+    for (const item of node) collectSiblingRefNames(item, out);
+    return;
+  }
+  const record = node;
+  const name = defRefName(record.$ref);
+  if (name !== null && Object.keys(record).length > 1) out.add(name);
+  for (const value of Object.values(record)) collectSiblingRefNames(value, out);
+}
+function findCyclicDefs(defs) {
+  const edges = /* @__PURE__ */ new Map();
+  for (const [name, value] of Object.entries(defs)) {
+    const out = /* @__PURE__ */ new Set();
+    collectDefRefNames(value, out);
+    edges.set(name, out);
+  }
+  const cyclic = /* @__PURE__ */ new Set();
+  for (const start of edges.keys()) {
+    const seen = /* @__PURE__ */ new Set();
+    const stack = [...edges.get(start) ?? []];
+    while (stack.length > 0) {
+      const next = stack.pop();
+      if (next === start) {
+        cyclic.add(start);
+        break;
+      }
+      if (seen.has(next)) continue;
+      seen.add(next);
+      for (const onward of edges.get(next) ?? []) stack.push(onward);
+    }
+  }
+  return cyclic;
+}
+function inlineDefRefs(node, defs, pinned, expand) {
+  if (!node || typeof node !== "object") return node;
+  if (Array.isArray(node)) return node.map((item) => inlineDefRefs(item, defs, pinned, expand));
+  const record = node;
+  const name = defRefName(record.$ref);
+  if (name !== null && hasDef(defs, name) && !pinned.has(name)) {
+    const siblings = {};
+    for (const [key, value] of Object.entries(record)) {
+      if (key !== "$ref") siblings[key] = inlineDefRefs(value, defs, pinned, expand);
+    }
+    return { ...structuredClone(expand(name)), ...siblings };
+  }
+  const out = {};
+  for (const [key, value] of Object.entries(record)) {
+    out[key] = inlineDefRefs(value, defs, pinned, expand);
+  }
+  return out;
+}
 function normalizeToolSchemaRefs(schema) {
   const targets = /* @__PURE__ */ new Set();
   collectBadRefTargets(schema, targets);
@@ -85,8 +158,37 @@ function normalizeToolSchemaRefs(schema) {
   repointRefs(clone, nameFor);
   for (const name of Object.keys(defs)) repointRefs(defs[name], nameFor);
   const existingDefs = clone.$defs ?? {};
+  delete clone.$defs;
+  const pinned = findCyclicDefs(defs);
+  collectSiblingRefNames(clone, pinned);
+  for (const value of Object.values(defs)) collectSiblingRefNames(value, pinned);
+  for (const value of Object.values(existingDefs)) collectSiblingRefNames(value, pinned);
+  for (const name of [...pinned]) {
+    if (!hasDef(defs, name)) pinned.delete(name);
+  }
+  if (pinned.size > 0) {
+    clone.$defs = { ...existingDefs, ...defs };
+    return clone;
+  }
+  const memo = /* @__PURE__ */ new Map();
+  const expand = (name) => {
+    if (memo.has(name)) return memo.get(name);
+    const value = inlineDefRefs(defs[name], defs, pinned, expand);
+    memo.set(name, value);
+    return value;
+  };
+  const inlined = inlineDefRefs(clone, defs, pinned, expand);
+  if (Object.keys(existingDefs).length > 0) {
+    inlined.$defs = Object.fromEntries(
+      Object.entries(existingDefs).map(([name, value]) => [
+        name,
+        inlineDefRefs(value, defs, pinned, expand)
+      ])
+    );
+  }
   clone.$defs = { ...existingDefs, ...defs };
-  return clone;
+  const grewTooMuch = JSON.stringify(inlined).length > JSON.stringify(clone).length * MAX_INLINE_GROWTH;
+  return grewTooMuch ? clone : inlined;
 }
 function installToolSchemaRefNormalization(server) {
   const lowLevel = server.server;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@softeria/ms-365-mcp-server",
   "mcpName": "io.github.Softeria/ms-365-mcp-server",
-  "version": "0.145.0",
+  "version": "0.145.2",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",

package/src/endpoints.json

@@ -212,7 +212,7 @@
     "toolName": "add-mail-attachment",
     "presets": ["mail", "outlook", "personal"],
     "scopes": ["Mail.ReadWrite"],
-    "llmTip": "Max 3MB. Body requires @odata.type: {\"@odata.type\": \"#microsoft.graph.fileAttachment\", \"name\": \"file.pdf\", \"contentBytes\": \"<base64>\"}."
+    "llmTip": "The only path for attachments under 3MB. contentBytes must carry the complete base64 verbatim; a truncated argument fails with 400 UnableToDeserializePostBody. At 3MB and above use create-mail-attachment-upload-session, which rejects anything smaller. Body requires @odata.type: {\"@odata.type\": \"#microsoft.graph.fileAttachment\", \"name\": \"file.pdf\", \"contentBytes\": \"<base64>\"}."
   },
   {
     "pathPattern": "/me/messages/{message-id}/attachments/createUploadSession",
@@ -220,7 +220,7 @@
     "toolName": "create-mail-attachment-upload-session",
     "presets": ["mail", "outlook", "personal"],
     "scopes": ["Mail.ReadWrite"],
-    "llmTip": "For large attachments (3-150MB). Body: { AttachmentItem: { attachmentType: 'file', name: 'report.pdf', size: 5000000 } }. Returns a pre-authenticated uploadUrl for direct PUT of file bytes."
+    "llmTip": "For attachments 3MB to 150MB. Graph rejects smaller files with ErrorAttachmentSizeShouldNotBeLessThanMinimumSize, so under 3MB use add-mail-attachment instead. Body: { AttachmentItem: { attachmentType: 'file', name: 'report.pdf', size: 5000000 } }. Returns a pre-authenticated uploadUrl; the caller PUTs the bytes there itself in ranges up to 4MB. This server does not perform the PUT."
   },
   {
     "pathPattern": "/me/messages/{message-id}/attachments",
@@ -607,7 +607,7 @@
     "toolName": "upload-file-content",
     "presets": ["files", "onedrive", "personal"],
     "scopes": ["Files.ReadWrite"],
-    "llmTip": "Body is a base64-encoded string of the file bytes; the server decodes it before PUT. Max 4MB inline (use create-upload-session above 4MB). For new files use path format: /items/root:/path/to/file.txt:/content. Overwrites existing files without warning."
+    "llmTip": "Body is a base64-encoded string of the file bytes; the server decodes it before PUT. Graph accepts up to 250MB here, but the whole string travels as a tool argument and a truncated one decodes to a truncated file with no error, so use create-upload-session rather than emitting a large base64 string. For new files use path format: /items/root:/path/to/file.txt:/content. Overwrites existing files without warning."
   },
   {
     "pathPattern": "/drives/{drive-id}/items/{driveItem-id}/createUploadSession",
@@ -615,7 +615,7 @@
     "toolName": "create-upload-session",
     "presets": ["files", "onedrive", "personal"],
     "scopes": ["Files.ReadWrite"],
-    "llmTip": "For large file uploads (no size limit). Returns a pre-authenticated uploadUrl for direct PUT of file bytes. For new files use path: /items/{parentId}:/{fileName}:/createUploadSession. Body (optional): { item: { '@microsoft.graph.conflictBehavior': 'rename' } }."
+    "llmTip": "For large file uploads (no size limit, and no minimum unlike the Outlook attachment session). Returns a pre-authenticated uploadUrl; the caller PUTs the bytes there itself. This server does not perform the PUT. For new files use path: /items/{parentId}:/{fileName}:/createUploadSession. Body (optional): { item: { '@microsoft.graph.conflictBehavior': 'rename' } }."
   },
   {
     "pathPattern": "/drives/{drive-id}/items/{driveItem-id}",
@@ -2609,7 +2609,7 @@
     "presets": ["personal"],
     "scopes": ["User.ReadWrite"],
     "contentType": "image/jpeg",
-    "llmTip": "Uploads a new profile photo for the signed-in user. Body is a base64-encoded string of the image bytes (the server decodes before PUT). Photo must be JPEG, max 4 MB. Microsoft 365 generates HD downsized variants automatically (48x48, 64x64, 96x96, 120x120, 240x240, 360x360, 432x432, 504x504, 648x648). For work or school accounts, ProfilePhoto.ReadWrite.All is the more granular alternative permission. Use download-bytes with target=/me/photo/$value to retrieve the current photo."
+    "llmTip": "Uploads a new profile photo for the signed-in user. Body is a base64-encoded string of the image bytes (the server decodes before PUT). Photo must be JPEG, max 4 MB; the base64 travels as a tool argument and a truncated one is written without error, so resize before encoding instead of emitting a large string. Microsoft 365 generates HD downsized variants automatically (48x48, 64x64, 96x96, 120x120, 240x240, 360x360, 432x432, 504x504, 648x648). For work or school accounts, ProfilePhoto.ReadWrite.All is the more granular alternative permission. Use download-bytes with target=/me/photo/$value to retrieve the current photo."
   },
   {
     "pathPattern": "/me/todo/lists",