brightspace-mcp-server 3.7.5 → 3.7.8

package/build/utils/config.js

@@ -26,9 +26,9 @@ export async function loadConfig() {
             ? expandTilde(store.sessionDir)
             : path.join(os.homedir(), ".d2l-session");
     // Code-entry and other interactive MFA methods need a visible browser.
-    const headless = process.env.D2L_HEADLESS !== undefined
-        ? process.env.D2L_HEADLESS !== "false"
-        : store?.headless ?? true;
+    const headless = envBoolean(process.env.D2L_HEADLESS, "D2L_HEADLESS")
+        ?? store?.headless
+        ?? true;
     // Resolve tokenTtl: env > store > default (3600)
     const tokenTtl = positiveSeconds(process.env.D2L_TOKEN_TTL, "D2L_TOKEN_TTL")
         ?? positiveSeconds(store?.tokenTtl, "tokenTtl in config.json")
@@ -42,10 +42,9 @@ export async function loadConfig() {
         ? process.env.D2L_EXCLUDE_COURSES.split(',').map(s => parseInt(s.trim(), 10)).filter(n => !isNaN(n))
         : store?.excludeCourses;
     // Resolve activeOnly: env > store > default (true)
-    let activeOnly = store?.activeOnly ?? true;
-    if (process.env.D2L_ACTIVE_ONLY !== undefined) {
-        activeOnly = process.env.D2L_ACTIVE_ONLY !== 'false';
-    }
+    const activeOnly = envBoolean(process.env.D2L_ACTIVE_ONLY, "D2L_ACTIVE_ONLY")
+        ?? store?.activeOnly
+        ?? true;
     const configuredUrl = new URL(process.env.D2L_BASE_URL || store?.baseUrl || "https://purdue.brightspace.com");
     if (configuredUrl.protocol !== "https:" || configuredUrl.username || configuredUrl.password) {
         throw new Error("The Brightspace URL must be an HTTPS school URL without embedded credentials.");
@@ -93,6 +92,24 @@ function positiveSeconds(value, source) {
     console.error(`[config] Ignoring ${source}=${JSON.stringify(value)}: expected a positive whole number of seconds`);
     return undefined;
 }
+/**
+ * An on/off environment variable. Comparing against the exact string "false"
+ * read "0", "no", "False" and a typo as true, so D2L_HEADLESS=0 kept the
+ * browser hidden from a user who needed it to enter an MFA code. An empty
+ * value counts as unset, and anything unrecognized is ignored with a warning
+ * so config.json or the default applies, as positiveSeconds does.
+ */
+function envBoolean(value, source) {
+    const text = value?.trim().toLowerCase();
+    if (!text)
+        return undefined;
+    if (["true", "1", "yes", "on"].includes(text))
+        return true;
+    if (["false", "0", "no", "off"].includes(text))
+        return false;
+    console.error(`[config] Ignoring ${source}=${JSON.stringify(value)}: expected true or false`);
+    return undefined;
+}
 function expandTilde(filePath) {
     if (filePath.startsWith("~")) {
         return path.join(os.homedir(), filePath.slice(1));

package/build/utils/self-update.js

@@ -18,6 +18,10 @@
  * from inside a live process, which is the thing this package deliberately
  * does not do.
  *
+ * Automatic sign-in (`--automatic`, spawned by the server's AuthRunner) never
+ * re-execs: it must run the auth CLI shipped alongside that server, not
+ * whatever npm calls latest. Only a user-run `auth` self-updates.
+ *
  * Opt out with D2L_NO_UPDATE_CHECK.
  */
 import { spawn } from "node:child_process";
@@ -61,10 +65,12 @@ export async function reexecLatestIfStale(deps = {}) {
     const { env = process.env, argv = process.argv, installedVersion, fetchImpl = fetch, runningFromNpxCache = ownNpxCacheDir() !== null, platform = process.platform, spawnImpl = spawn, } = deps;
     if (installedVersion === undefined)
         return null;
-    // Cheap local checks first, so an opted-out or npx-launched run never even
-    // touches the network.
+    // Cheap local checks first, so an opted-out, npx-launched, or automatic run
+    // never even touches the network.
     if (env[REEXEC_SENTINEL] || env.D2L_NO_UPDATE_CHECK || runningFromNpxCache)
         return null;
+    if (argv.includes("--automatic"))
+        return null; // stay on the server's sibling version
     const latest = await fetchLatestVersion(fetchImpl);
     if (!shouldReexec({ env, latest, installedVersion, runningFromNpxCache }))
         return null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brightspace-mcp-server",
-  "version": "3.7.5",
+  "version": "3.7.8",
   "mcpName": "io.github.rohanmuppa/brightspace",
   "description": "MCP server for Brightspace (D2L). Check grades, due dates, assignments, announcements, syllabus, rosters and more via Claude, ChatGPT, Cursor, Windsurf, or any MCP client.",
   "type": "module",