brightspace-mcp-server 3.9.11 → 3.9.13

package/build/auth/purdue-sso.js

@@ -295,11 +295,18 @@ export class PurdueSSOFlow {
         return await this.hasCoVisiblePassword(page) && !await this.anyVisible(page, EMAIL_SELECTORS);
     }
     async hasPostCredentialChallenge(page) {
+        // Entra can land directly on its bare verification-code form - no
+        // number-match digits, no #idDiv_SAOTCAS_Title/#idDiv_SAOTCC_Title
+        // heading - when resuming a restored session. Without MFA_CODE_SELECTORS
+        // here, login() concluded no challenge was present and re-ran
+        // enterCredentials against a page with no username/password field.
+        // Idea from ElliotDrel/brightspace-mcp (branch codex/purdue-totp).
         return this.duoMfa.isChallenge(page) || await this.anyVisible(page, [
             NUMBER_MATCH_SELECTOR,
             "#idDiv_SAOTCAS_Title",
             "#idDiv_SAOTCC_Title",
             "#KmsiCheckboxField",
+            ...MFA_CODE_SELECTORS,
         ]);
     }
     /** Brightspace Bar's bounded number/auth/KMSI polling loop. */

package/build/tools/get-roster.js

@@ -13,6 +13,14 @@ import { log } from "../utils/logger.js";
 // Discover by fetching classlist for a known course and inspecting RoleId values.
 const INSTRUCTOR_ROLE_ID = 109;
 const TA_ROLE_ID = 135;
+// When the role-ID fast path above returns nothing — a non-Purdue tenant
+// where those IDs belong to different roles or none at all — staff are found
+// instead by matching the role name the tenant itself reports. Role-name
+// fallback adapted from matthewliu10/brightspace-mcp-server (MIT).
+const TEACHING_ROLE_NAME = /\b(instructor|professor|lecturer|teaching assistant|coordinator|grader|ta)\b/i;
+function isTeachingRoleByName(user) {
+    return TEACHING_ROLE_NAME.test(user.ClasslistRoleDisplayName ?? "");
+}
 /**
  * Fetch every classlist user matching the optional filters, across all pages.
  *
@@ -48,6 +56,7 @@ export function registerGetRoster(server, apiClient) {
             // Parse and validate input
             const { courseId, includeStudents, searchTerm, limit } = GetRosterSchema.parse(args);
             const allUsers = [];
+            let roleFallbackUsed = false;
             if (!includeStudents) {
                 // Fetch instructors and TAs in parallel
                 const [instructorResult, taResult] = await Promise.allSettled([
@@ -77,6 +86,20 @@ export function registerGetRoster(server, apiClient) {
                         error: taResult.reason,
                     });
                 }
+                // Purdue's role IDs found nobody — on a non-Purdue tenant they
+                // likely mean a different role, or none. Fall back to one
+                // unfiltered classlist fetch and match on the role display name
+                // the tenant itself reports instead of an institution-specific ID.
+                // A genuine failure of this fetch is intentionally not caught
+                // here: it should surface as a tool error rather than silently
+                // producing an empty staff list.
+                if (allUsers.length === 0) {
+                    const everyone = await fetchClasslistUsers(apiClient, courseId, {
+                        searchTerm,
+                    });
+                    allUsers.push(...everyone.filter(isTeachingRoleByName));
+                    roleFallbackUsed = true;
+                }
             }
             else {
                 // Fetch all users
@@ -110,6 +133,11 @@ export function registerGetRoster(server, apiClient) {
                 ...(truncated
                     ? { note: `Showing ${users.length} of ${total}. Raise the limit argument to see more.` }
                     : {}),
+                ...(roleFallbackUsed
+                    ? {
+                        roleFilter: "No users matched the default instructor/TA role IDs, so staff were found by matching role display names (instructor, professor, lecturer, teaching assistant, coordinator, grader, TA) instead.",
+                    }
+                    : {}),
                 users,
             });
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brightspace-mcp-server",
-  "version": "3.9.11",
+  "version": "3.9.13",
   "mcpName": "io.github.rohanmuppa/brightspace",
   "description": "MCP server for Brightspace (D2L). Check grades, due dates, assignments, announcements, syllabus, rosters and more via Claude, ChatGPT, Cursor, Windsurf, or any MCP client.",
   "type": "module",