@softeria/ms-365-mcp-server 0.158.0 → 0.158.2

package/dist/generated/client-beta.js

@@ -748,6 +748,7 @@ const microsoft_graph_customEmojiFromIdentitySet = z.object({
   user: microsoft_graph_identity.optional()
 }).passthrough();
 const microsoft_graph_teamworkCustomEmoji = z.object({
+  id: z.string().describe("The unique identifier for an entity. Read-only.").optional(),
   contentBytes: z.string().describe(
     "The base64-encoded image content of the emoji. Supported formats include PNG and GIF."
   ).nullish(),

package/dist/generated/client.js

@@ -2688,7 +2688,16 @@ const microsoft_graph_subscription = z.object({
   ).nullish(),
   resource: z.string().describe(
     "Required. Specifies the resource that is monitored for changes. Don't include the base URL (https://graph.microsoft.com/v1.0/). See the possible resource path values for each supported resource."
-  ).optional()
+  ).optional(),
+  vapidPublicKey: z.string().describe(
+    "Optional. The application server's VAPID public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained by calling the getVapidPublicKey function on the subscription collection. The browser passes this value to PushManager.subscribe({ applicationServerKey: vapidPublicKey }) to bind the push subscription to this server identity. Required when notificationUrl targets a known Web Push service origin (for example, *.push.apple.com, fcm.googleapis.com, updates.push.services.mozilla.com); rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8292."
+  ).nullish(),
+  webPushEncryptionP256dhPublicKey: z.string().describe(
+    "Optional. The subscriber's ECDH public key, base64url-encoded (P-256 uncompressed point, 65 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey('p256dh'). Used as the peer public key during ECDH key agreement to derive the per-message content encryption key for RFC 8291 payload encryption. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3."
+  ).nullish(),
+  webPushEncryptionSecret: z.string().describe(
+    "Optional. The subscriber's auth secret, base64url-encoded (16 bytes pre-encoding). Obtained from the browser via PushSubscription.getKey('auth'). Used as the HMAC-SHA-256 salt for the HKDF combine step that derives key material for RFC 8291 payload encryption. Write-only: this value is never returned in GET responses (returned as null). Treat as a secret. Required when notificationUrl targets a known Web Push service origin; rejected with 400 Bad Request if supplied on a standard webhook subscription. For more information, see RFC 8291 Section 3."
+  ).nullish()
 }).passthrough();
 const microsoft_graph_list = z.lazy(
   () => z.object({

package/dist/graph-tools.js

@@ -18,6 +18,7 @@ import { getAttachmentMinting } from "./lib/attachment-minting.js";
 import {
   buildAttachmentUrl,
   isPlainGraphPath,
+  isUnalteredGraphPath,
   TicketStoreFullError
 } from "./lib/attachment-tickets.js";
 import { buildBM25Index, scoreQuery, tokenize } from "./lib/bm25.js";
@@ -685,6 +686,8 @@ const UTILITY_TOOLS = [
           isError: true
         };
       }
+      const alteredTarget = unalteredTargetError(target);
+      if (alteredTarget) return alteredTarget;
       const restrictedTarget = userProfilePassthroughError(target, userFields);
       if (restrictedTarget) return restrictedTarget;
       try {
@@ -782,6 +785,8 @@ const UTILITY_TOOLS = [
           isError: true
         };
       }
+      const alteredTarget = unalteredTargetError(target);
+      if (alteredTarget) return alteredTarget;
       const restrictedTarget = userProfilePassthroughError(target, userFields);
       if (restrictedTarget) return restrictedTarget;
       if (!path.isAbsolute(outputPath)) {
@@ -907,6 +912,8 @@ const UTILITY_TOOLS = [
           isError: true
         };
       }
+      const alteredTarget = unalteredTargetError(target);
+      if (alteredTarget) return alteredTarget;
       const restrictedTarget = userProfilePassthroughError(target, userFields);
       if (restrictedTarget) return restrictedTarget;
       const queryIdx = target.indexOf("?");
@@ -1193,6 +1200,36 @@ function describeParamsForLog(params) {
     return `[unserializable: ${error instanceof Error ? error.name : "unknown error"}]`;
   }
 }
+function escapeIfStringLiteral(template, names, value) {
+  const quoted = names.some((n) => template.includes(`'{${n}}'`) || template.includes(`':${n}'`));
+  return quoted ? String(value).replace(/'/g, "''") : String(value);
+}
+function rawValueAddsSegments(template, names, value) {
+  const isTail = names.some((n) => template.endsWith(`/{${n}}`) || template.endsWith(`/:${n}`));
+  return isTail ? value.includes(":") : value.includes("/");
+}
+function invalidPathParameter(message) {
+  return {
+    content: [
+      { type: "text", text: JSON.stringify({ error: "invalid_path_parameter", message }) }
+    ],
+    isError: true
+  };
+}
+function unalteredTargetError(target) {
+  if (isUnalteredGraphPath(target.split("?")[0])) return void 0;
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify({
+          error: 'target must not contain "." or ".." segments, a fragment or a backslash.'
+        })
+      }
+    ],
+    isError: true
+  };
+}
 async function executeGraphTool(tool, config, graphClient, params, authManager, userFields) {
   logger.info(`Tool ${tool.alias} called with params: ${describeParamsForLog(params)}`);
   if (isConfirmGateEnabled() && isDestructiveOperation(tool.method, config) && params.confirm !== true) {
@@ -1314,8 +1351,17 @@ async function executeGraphTool(tool, config, graphClient, params, authManager,
         switch (paramDef.type) {
           case "Path": {
             const shouldSkipEncoding = config?.skipEncoding?.includes(paramName) ?? false;
-            const encodedValue = shouldSkipEncoding ? paramValue : encodeURIComponent(paramValue).replace(/%3D/g, "=");
-            path2 = path2.replace(`{${paramName}}`, encodedValue).replace(`:${paramName}`, encodedValue).replace(`{${camelCaseParamName}}`, encodedValue).replace(`:${camelCaseParamName}`, encodedValue);
+            const names = [paramName, camelCaseParamName];
+            if (shouldSkipEncoding && rawValueAddsSegments(tool.path, names, `${paramValue}`)) {
+              return invalidPathParameter(
+                `'${paramName}' cannot add path segments to this endpoint: no "/" in a value, and no ":" in a site path.`
+              );
+            }
+            const encodedValue = shouldSkipEncoding ? paramValue : encodeURIComponent(escapeIfStringLiteral(tool.path, names, paramValue)).replace(
+              /%3D/g,
+              "="
+            );
+            path2 = path2.replace(`{${paramName}}`, () => encodedValue).replace(`:${paramName}`, () => encodedValue).replace(`{${camelCaseParamName}}`, () => encodedValue).replace(`:${camelCaseParamName}`, () => encodedValue);
             break;
           }
           case "Query":
@@ -1352,8 +1398,10 @@ async function executeGraphTool(tool, config, graphClient, params, authManager,
         body = paramValue;
         logger.info(`Set body param: ${JSON.stringify(body)}`);
       } else if (path2.includes(`:${paramName}`) || path2.includes(`{${paramName}}`) || path2.includes(`:${camelCaseParamName}`) || path2.includes(`{${camelCaseParamName}}`)) {
-        const encodedValue = encodeURIComponent(paramValue).replace(/%3D/g, "=");
-        path2 = path2.replace(`{${paramName}}`, encodedValue).replace(`:${paramName}`, encodedValue).replace(`{${camelCaseParamName}}`, encodedValue).replace(`:${camelCaseParamName}`, encodedValue);
+        const encodedValue = encodeURIComponent(
+          escapeIfStringLiteral(tool.path, [paramName, camelCaseParamName], paramValue)
+        ).replace(/%3D/g, "=");
+        path2 = path2.replace(`{${paramName}}`, () => encodedValue).replace(`:${paramName}`, () => encodedValue).replace(`{${camelCaseParamName}}`, () => encodedValue).replace(`:${camelCaseParamName}`, () => encodedValue);
         logger.info(`Path param fallback: replaced :${camelCaseParamName} with encoded value`);
       } else if (paramName.toLowerCase() === "accept" && config?.acceptType) {
         headers["Accept"] = `${paramValue}`;
@@ -1370,6 +1418,11 @@ async function executeGraphTool(tool, config, graphClient, params, authManager,
         logger.warn(`Dropping unrecognized parameter '${paramName}' for tool ${tool.alias}`);
       }
     }
+    if (!isUnalteredGraphPath(path2)) {
+      return invalidPathParameter(
+        'A path parameter would send this request to a different endpoint. Path parameters cannot be "." or "..", or contain "/../", "?", "#" or a backslash. Percent-encode "?" and "#" that are part of a name.'
+      );
+    }
     if (isPlainObject(body) && bodyShape != null && hasOwn(bodyShape, "body") && !Object.keys(body).some((k) => k.toLowerCase() === "body")) {
       const nestedShape = bodySchemaShape(bodyShape.body);
       if (nestedShape != null) {

package/dist/lib/attachment-tickets.js

@@ -24,6 +24,15 @@ function isPlainGraphPath(target) {
   }
   return resolved.origin === PROBE_ORIGIN && resolved.search === "" && resolved.hash === "" && resolved.pathname === PROBE_PREFIX + target;
 }
+function isUnalteredGraphPath(path) {
+  const decode = (s) => decodeURIComponent(s.replace(/%(?![0-9a-f]{2})/gi, "%25"));
+  try {
+    const resolved = new URL(PROBE_ORIGIN + PROBE_PREFIX + path);
+    return resolved.origin === PROBE_ORIGIN && resolved.search === "" && resolved.hash === "" && decode(resolved.pathname) === decode(PROBE_PREFIX + path);
+  } catch {
+    return false;
+  }
+}
 const MAX_LIVE_TICKETS = 256;
 const TICKET_BYTES = 32;
 class TicketStoreFullError extends Error {
@@ -94,5 +103,6 @@ export {
   TICKET_PARAM,
   TicketStoreFullError,
   buildAttachmentUrl,
-  isPlainGraphPath
+  isPlainGraphPath,
+  isUnalteredGraphPath
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@softeria/ms-365-mcp-server",
   "mcpName": "io.github.Softeria/ms-365-mcp-server",
-  "version": "0.158.0",
+  "version": "0.158.2",
   "description": " A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
   "type": "module",
   "main": "dist/index.js",