@softeria/ms-365-mcp-server 0.145.2 → 0.146.0

package/dist/__tests__/graph-tools.test.js

@@ -333,6 +333,99 @@ describe("graph-tools", () => {
       );
     });
   });
+  describe("audit recipient metadata", () => {
+    const draftEndpoint = () => {
+      const endpoint = makeEndpoint({
+        method: "post",
+        path: "/me/messages",
+        alias: "create-draft-email",
+        parameters: [{ name: "body", type: "Body", schema: z.object({}).passthrough() }]
+      });
+      const config = makeConfig({
+        pathPattern: "/me/messages",
+        method: "post",
+        toolName: "create-draft-email"
+      });
+      mockEndpoints.push(endpoint);
+      mockEndpointsJson = [config];
+    };
+    const runDraft = async (body) => {
+      const graphClient = createMockGraphClient([
+        {
+          content: [{ type: "text", text: JSON.stringify({ id: "draft-1" }) }],
+          _meta: { http_status: 201 }
+        }
+      ]);
+      const server = createMockServer();
+      const { registerGraphTools } = await loadModule();
+      registerGraphTools(
+        server,
+        graphClient
+      );
+      await server.tools.get("create-draft-email").handler({ body });
+      return auditLogMock.mock.calls[0][0];
+    };
+    it("records recipient count and domains, deduplicated and sorted", async () => {
+      draftEndpoint();
+      const payload = await runDraft({
+        toRecipients: [
+          { emailAddress: { address: "someone@example.com" } },
+          { emailAddress: { address: "Another@Example.com" } }
+        ],
+        ccRecipients: [{ emailAddress: { address: "auditor@partner.co.uk" } }]
+      });
+      expect(payload).toMatchObject({
+        tool: "create-draft-email",
+        recipient_count: 3,
+        recipient_domains: ["example.com", "partner.co.uk"]
+      });
+    });
+    it("reads recipients nested under a camelCase message, as createReply sends them", async () => {
+      draftEndpoint();
+      const payload = await runDraft({
+        comment: "forwarding this on",
+        message: { toRecipients: [{ emailAddress: { address: "outside@gmail.com" } }] }
+      });
+      expect(payload).toMatchObject({ recipient_count: 1, recipient_domains: ["gmail.com"] });
+    });
+    it("reads PascalCase fields, as the Graph action endpoints send them", async () => {
+      draftEndpoint();
+      const payload = await runDraft({
+        Comment: "fyi",
+        ToRecipients: [{ emailAddress: { address: "partner@vendor.com" } }],
+        Message: { CcRecipients: [{ emailAddress: { address: "watcher@vendor.com" } }] }
+      });
+      expect(payload).toMatchObject({ recipient_count: 2, recipient_domains: ["vendor.com"] });
+    });
+    it("records calendar attendees, not just mail recipients", async () => {
+      draftEndpoint();
+      const payload = await runDraft({
+        subject: "sync",
+        attendees: [
+          { emailAddress: { address: "colleague@example.com" }, type: "required" },
+          { emailAddress: { address: "guest@external.org" }, type: "optional" }
+        ]
+      });
+      expect(payload).toMatchObject({
+        recipient_count: 2,
+        recipient_domains: ["example.com", "external.org"]
+      });
+    });
+    it("logs domains only, never the local part of an address", async () => {
+      draftEndpoint();
+      const payload = await runDraft({
+        toRecipients: [{ emailAddress: { address: "confidential.name@example.com" } }]
+      });
+      expect(payload.recipient_domains).toEqual(["example.com"]);
+      expect(JSON.stringify(payload)).not.toContain("confidential.name");
+    });
+    it("omits both fields when a request has no recipients", async () => {
+      draftEndpoint();
+      const payload = await runDraft({ subject: "a draft with no recipients yet" });
+      expect(payload).not.toHaveProperty("recipient_count");
+      expect(payload).not.toHaveProperty("recipient_domains");
+    });
+  });
   describe("$count advanced query mode", () => {
     it("should set ConsistencyLevel: eventual header when $count=true", async () => {
       const endpoint = makeEndpoint();

package/dist/graph-tools.js

@@ -115,6 +115,39 @@ function graphResponseAuditFields(response) {
     ...graphBatchErrorCodeCounts !== void 0 ? { graph_batch_error_code_counts: graphBatchErrorCodeCounts } : {}
   };
 }
+const RECIPIENT_FIELDS = /* @__PURE__ */ new Set(["torecipients", "ccrecipients", "bccrecipients", "attendees"]);
+const NESTED_BODY_FIELDS = /* @__PURE__ */ new Set(["message"]);
+const MAX_BODY_DEPTH = 3;
+function collectRecipients(node, domains, counter, depth = 0) {
+  if (!node || typeof node !== "object" || depth > MAX_BODY_DEPTH) return;
+  for (const [key, value] of Object.entries(node)) {
+    const name = key.toLowerCase();
+    if (NESTED_BODY_FIELDS.has(name)) {
+      collectRecipients(value, domains, counter, depth + 1);
+      continue;
+    }
+    if (!RECIPIENT_FIELDS.has(name) || !Array.isArray(value)) continue;
+    for (const entry of value) {
+      const address = entry?.emailAddress?.address;
+      if (typeof address !== "string") continue;
+      counter.count += 1;
+      const at = address.lastIndexOf("@");
+      if (at > 0 && at < address.length - 1) {
+        domains.add(address.slice(at + 1).toLowerCase());
+      }
+    }
+  }
+}
+function recipientAuditFields(body) {
+  const domains = /* @__PURE__ */ new Set();
+  const counter = { count: 0 };
+  collectRecipients(body, domains, counter);
+  if (counter.count === 0) return {};
+  return {
+    recipient_count: counter.count,
+    ...domains.size > 0 ? { recipient_domains: [...domains].sort() } : {}
+  };
+}
 function thrownErrorAuditFields(error) {
   const err = error;
   const httpStatus = auditHttpStatus(err?.httpStatus ?? err?.status);
@@ -1130,7 +1163,8 @@ async function executeGraphTool(tool, config, graphClient, params, authManager)
       status: response.isError ? "error" : "success",
       duration_ms: Date.now() - startTime,
       ...targetResource ? { target_resource: targetResource } : {},
-      ...graphResponseAuditFields(response)
+      ...graphResponseAuditFields(response),
+      ...recipientAuditFields(body)
     });
     return {
       content,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@softeria/ms-365-mcp-server",
   "mcpName": "io.github.Softeria/ms-365-mcp-server",
-  "version": "0.145.2",
+  "version": "0.146.0",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",