@teamnetwork/m365-mcp-server 1.0.1 → 1.0.2

package/dist/graph/calendar.js

@@ -22,7 +22,7 @@ export async function listEvents(client, email, params) {
             startDateTime: params.startDate,
             endDateTime: params.endDate,
         })
-            .select('id,subject,start,end,location,organizer,attendees,isOnlineMeeting,onlineMeetingUrl')
+            .select(params.select)
             .top(params.maxResults)
             .orderby('start/dateTime')
             .get();

package/dist/graph/email.js

@@ -23,7 +23,7 @@ export async function listMessages(client, email, params) {
         const folderId = params.folderId === 'Inbox' ? 'Inbox' : params.folderId;
         let req = client
             .api(`/users/${email}/mailFolders/${folderId}/messages`)
-            .select('id,subject,from,receivedDateTime,bodyPreview,hasAttachments,isRead')
+            .select(params.select)
             .top(params.maxResults)
             .orderby('receivedDateTime desc');
         if (params.bodySearch) {

package/dist/tools/calendar/listEvents.js

@@ -2,19 +2,31 @@ import { ListEventsSchema } from '../schemas.js';
 import { createGraphClient } from '../../graph/clientFactory.js';
 import { listEvents } from '../../graph/calendar.js';
 import { assertMailboxConfigured } from '../../middleware/readonlyGuard.js';
-import { errorResponse } from '../../utils/errors.js';
+import { errorResponse, ToolError } from '../../utils/errors.js';
 import { logger } from '../../utils/logger.js';
+import { resolveSelect, SelectValidationError, EVENT_SELECT_FIELDS, EVENT_SELECT_DEFAULT } from '../../utils/selectFields.js';
 export function registerListEvents(server, config, auth) {
     server.tool('list_events', 'List calendar events within a date range. Recurring events are expanded into individual instances.', ListEventsSchema.shape, async (params) => {
         logger.info('list_events', { accountId: params.accountId, mailbox: params.mailbox });
         try {
             assertMailboxConfigured(config, params.accountId, params.mailbox);
+            let select;
+            try {
+                select = resolveSelect(params.select, EVENT_SELECT_FIELDS, EVENT_SELECT_DEFAULT);
+            }
+            catch (err) {
+                if (err instanceof SelectValidationError) {
+                    return errorResponse(new ToolError(err.message, 'INVALID_SELECT_FIELD'));
+                }
+                throw err;
+            }
             const token = await auth.getAccessToken(params.accountId);
             const client = createGraphClient(token);
             const result = await listEvents(client, params.mailbox, {
                 startDate: params.startDate,
                 endDate: params.endDate,
                 maxResults: params.maxResults,
+                select,
                 ...(params.calendarId !== undefined && { calendarId: params.calendarId }),
             });
             return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };

package/dist/tools/email/listMessages.js

@@ -2,8 +2,9 @@ import { ListMessagesSchema } from '../schemas.js';
 import { createGraphClient } from '../../graph/clientFactory.js';
 import { listMessages } from '../../graph/email.js';
 import { assertMailboxConfigured } from '../../middleware/readonlyGuard.js';
-import { errorResponse } from '../../utils/errors.js';
+import { errorResponse, ToolError } from '../../utils/errors.js';
 import { logger } from '../../utils/logger.js';
+import { resolveSelect, SelectValidationError, MESSAGE_SELECT_FIELDS, MESSAGE_SELECT_DEFAULT } from '../../utils/selectFields.js';
 export function registerListMessages(server, config, auth) {
     server.tool('list_messages', 'List email messages in a mailbox folder with optional filters for date range, subject, body content, and sender. Returns message metadata (not full body) to keep response size small.', ListMessagesSchema.shape, async (params) => {
         logger.info('list_messages', {
@@ -14,11 +15,22 @@ export function registerListMessages(server, config, auth) {
         });
         try {
             assertMailboxConfigured(config, params.accountId, params.mailbox);
+            let select;
+            try {
+                select = resolveSelect(params.select, MESSAGE_SELECT_FIELDS, MESSAGE_SELECT_DEFAULT);
+            }
+            catch (err) {
+                if (err instanceof SelectValidationError) {
+                    return errorResponse(new ToolError(err.message, 'INVALID_SELECT_FIELD'));
+                }
+                throw err;
+            }
             const token = await auth.getAccessToken(params.accountId);
             const client = createGraphClient(token);
             const result = await listMessages(client, params.mailbox, {
                 folderId: params.folderId,
                 maxResults: params.maxResults,
+                select,
                 ...(params.startDate !== undefined && { startDate: params.startDate }),
                 ...(params.endDate !== undefined && { endDate: params.endDate }),
                 ...(params.subject !== undefined && { subject: params.subject }),

package/dist/tools/schemas.js

@@ -19,6 +19,7 @@ export const ListMessagesSchema = AccountMailbox.extend({
     bodySearch: z.string().optional().describe('Full-text search in message body. Note: cannot be combined with $filter — date/sender filters are applied client-side when this is used.'),
     sender: z.string().email().optional().describe('Filter messages from this sender email address'),
     maxResults: z.number().int().min(1).max(100).default(25).describe('Maximum number of messages to return (1–100)'),
+    select: z.array(z.string()).optional().describe('Fields to return. Omit for defaults (subject, from, receivedDateTime, isRead, hasAttachments, bodyPreview). Valid fields: id, subject, from, toRecipients, ccRecipients, bccRecipients, receivedDateTime, sentDateTime, bodyPreview, body, hasAttachments, attachmentCount, importance, isRead, isDraft, webLink, parentFolderId, conversationId'),
 });
 export const GetMessageSchema = AccountMailbox.extend({
     messageId: z.string().describe('The message ID'),
@@ -50,6 +51,7 @@ export const ListEventsSchema = AccountMailbox.extend({
     startDate: z.string().datetime().describe('Start of the date range (ISO 8601). Recurring events are expanded within this window.'),
     endDate: z.string().datetime().describe('End of the date range (ISO 8601)'),
     maxResults: z.number().int().min(1).max(100).default(25),
+    select: z.array(z.string()).optional().describe('Fields to return. Omit for defaults (subject, start, end, location, isOnlineMeeting). Valid fields: id, subject, start, end, location, isOnlineMeeting, onlineMeetingUrl, organizer, attendees, body, bodyPreview, categories, isRecurring, recurrence, sensitivity, showAs, uid'),
 });
 export const GetEventSchema = AccountMailbox.extend({
     eventId: z.string().describe('The event ID'),

package/dist/utils/selectFields.js

@@ -0,0 +1,83 @@
+// Allowed $select field lists and validation for list_messages and list_events.
+// id is always forced into the select regardless of what the caller requests.
+export const MESSAGE_SELECT_FIELDS = new Set([
+    'id',
+    'subject',
+    'from',
+    'toRecipients',
+    'ccRecipients',
+    'bccRecipients',
+    'receivedDateTime',
+    'sentDateTime',
+    'bodyPreview',
+    'body',
+    'hasAttachments',
+    'attachmentCount',
+    'importance',
+    'isRead',
+    'isDraft',
+    'webLink',
+    'parentFolderId',
+    'conversationId',
+]);
+export const EVENT_SELECT_FIELDS = new Set([
+    'id',
+    'subject',
+    'start',
+    'end',
+    'location',
+    'isOnlineMeeting',
+    'onlineMeetingUrl',
+    'organizer',
+    'attendees',
+    'body',
+    'bodyPreview',
+    'categories',
+    'isRecurring',
+    'recurrence',
+    'sensitivity',
+    'showAs',
+    'uid',
+]);
+export const MESSAGE_SELECT_DEFAULT = [
+    'subject',
+    'from',
+    'receivedDateTime',
+    'isRead',
+    'hasAttachments',
+    'bodyPreview',
+];
+export const EVENT_SELECT_DEFAULT = [
+    'subject',
+    'start',
+    'end',
+    'location',
+    'isOnlineMeeting',
+];
+/**
+ * Validate, normalise, and force-include `id` in a select list.
+ * Returns the final comma-separated string for Graph API $select,
+ * or throws with a descriptive message listing valid fields.
+ */
+export function resolveSelect(rawSelect, allowed, defaults) {
+    // Empty array → treat as omitted, use defaults
+    const fields = rawSelect && rawSelect.length > 0
+        ? rawSelect.map((f) => f.trim()).filter(Boolean)
+        : defaults;
+    // Validate each field
+    for (const field of fields) {
+        if (!allowed.has(field)) {
+            throw new SelectValidationError(field, allowed);
+        }
+    }
+    // id must always be present
+    const withId = fields.includes('id') ? fields : ['id', ...fields];
+    return withId.join(',');
+}
+export class SelectValidationError extends Error {
+    constructor(invalidField, allowed) {
+        const validList = [...allowed].sort().join(', ');
+        super(`Invalid select field: "${invalidField}". Valid fields: ${validList}`);
+        this.name = 'SelectValidationError';
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@teamnetwork/m365-mcp-server",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "MCP server for Microsoft 365 Email and Calendar access using client credentials (app-only auth). Supports multiple accounts, shared mailboxes, per-mailbox read-only access, folder navigation, and date/content filtering.",
   "type": "module",
   "main": "./dist/index.js",