brightspace-mcp-server 3.8.3 → 3.8.5

package/README.md

@@ -103,6 +103,8 @@ Claude Desktop uses a separate configuration, which the setup wizard can update
 
 </details>
 
+**Running from a source checkout or fork?** When a newer release is published, the server tells a source checkout to `git pull` and `npm run build` rather than to install the npm package. For a fork you maintain, set `D2L_NO_UPDATE_CHECK=1` in the server's environment to turn off upstream update notices.
+
 ## Session Expired?
 
 There's no login step — asking a question signs you in.

package/build/auth/purdue-sso.js

@@ -318,6 +318,12 @@ export class PurdueSSOFlow {
         let resendNotFoundWarned = false;
         try {
             while (Date.now() < deadline) {
+                // A verified session outranks whatever challenge controls linger on
+                // screen: answering them would prompt or announce for nothing.
+                if (await this.isAuthenticated(page)) {
+                    log("INFO", "Login successful - verified Brightspace home");
+                    return;
+                }
                 if (await this.duoMfa.handle(page))
                     challenged = true;
                 if (await this.submitMfaCode(page))
@@ -349,10 +355,6 @@ export class PurdueSSOFlow {
                     numberVanishedAt = null;
                     resendNotFoundWarned = false;
                 }
-                if (await this.isAuthenticated(page)) {
-                    log("INFO", "Login successful - verified Brightspace home");
-                    return;
-                }
                 // Fix 2: Entra's number-match request itself times out (or the user
                 // taps Deny) well before the 5-minute budget above. Once that has
                 // happened, ask Entra for another one instead of polling a dead

package/build/utils/update-checker.js

@@ -18,6 +18,10 @@
  * caller happens to read it first. A one-shot notice is invisible in practice:
  * it gets swallowed by a single background tool call and never seen again.
  *
+ * A source checkout gets different advice: installing the npm package would
+ * update some other copy, and for a fork it would mean leaving its changes
+ * behind. Such a checkout is told to pull and rebuild, or to opt out.
+ *
  * Set D2L_NO_UPDATE_CHECK to any value to switch the check off entirely.
  */
 import { readFileSync } from "node:fs";
@@ -54,8 +58,17 @@ export function ownNpxCacheDir(root = projectRoot) {
     const match = new RegExp(`^(.*/_npx/[^/]+)/node_modules/${PACKAGE_NAME}`).exec(normalized);
     return match ? resolve(match[1]) : null;
 }
-function isNpxCache() {
-    return ownNpxCacheDir() !== null;
+/**
+ * Classify the package directory this process runs from. npm only ever puts
+ * the package under a `node_modules` directory, so anything else is a checkout
+ * someone built by hand, possibly a fork.
+ */
+export function installKindOf(root = projectRoot) {
+    if (ownNpxCacheDir(root) !== null)
+        return "npx-cache";
+    return root.split(sep).join("/").split("/").includes("node_modules")
+        ? "npm-install"
+        : "source-checkout";
 }
 /**
  * Remove npx cache entries holding a copy of this package, so the next
@@ -155,7 +168,7 @@ export async function fetchLatestVersion(fetchImpl = fetch) {
  * swallowed, because a version check must not affect the server.
  */
 export async function initUpdateChecker(deps = {}) {
-    const { fetchImpl = fetch, env = process.env, installedVersion = getInstalledVersion(), runningFromNpxCache = isNpxCache(), clearCaches = () => clearAllNpxCaches(), } = deps;
+    const { fetchImpl = fetch, env = process.env, installedVersion = getInstalledVersion(), installKind = installKindOf(), clearCaches = () => clearAllNpxCaches(), } = deps;
     if (env.D2L_NO_UPDATE_CHECK)
         return;
     try {
@@ -168,7 +181,7 @@ export async function initUpdateChecker(deps = {}) {
         const to = safeVersionLabel(latest);
         const headline = `Update available: v${from} to v${to}.`;
         let text;
-        if (runningFromNpxCache) {
+        if (installKind === "npx-cache") {
             const count = await clearCaches();
             const cleanup = count > 0
                 ? `Cleared ${count} stale npx cache director${count === 1 ? "y" : "ies"} for ${PACKAGE_NAME} ` +
@@ -176,6 +189,11 @@ export async function initUpdateChecker(deps = {}) {
                 : "";
             text = `${headline} ${cleanup}Restart your MCP client to pick up v${to}.`;
         }
+        else if (installKind === "source-checkout") {
+            text = `${headline} This server runs from a source checkout, so update that checkout ` +
+                `(git pull, then npm run build) and restart your MCP client. ` +
+                `If it is a fork you maintain, set D2L_NO_UPDATE_CHECK=1 to turn off upstream update notices.`;
+        }
         else {
             text = `${headline} Run: ${GLOBAL_INSTALL_COMMAND}` +
                 `, then ${CLEAR_NPX_CACHE_COMMAND} and restart your MCP client.`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brightspace-mcp-server",
-  "version": "3.8.3",
+  "version": "3.8.5",
   "mcpName": "io.github.rohanmuppa/brightspace",
   "description": "MCP server for Brightspace (D2L). Check grades, due dates, assignments, announcements, syllabus, rosters and more via Claude, ChatGPT, Cursor, Windsurf, or any MCP client.",
   "type": "module",