brightspace-mcp-server 4.0.3 → 4.0.5

package/build/auth/microsoft-session.js

@@ -7,6 +7,15 @@ import * as fs from "node:fs/promises";
 import * as path from "node:path";
 import { writeFileAtomic } from "../utils/atomic-write.js";
 import { BROWSER_STATE_FILE } from "./browser-state-store.js";
+const STAY_SIGNED_IN_NOTE = "Stay signed in keeps the Microsoft sign-in only; your school can still ask for 2FA on a new sign-in.";
+/** One sentence for each Don't ask again outcome, after STAY_SIGNED_IN_NOTE. */
+const REMEMBER_MFA_NOTES = {
+    ticked: "\"Don't ask again\" was ticked, so Microsoft may skip 2FA for a while; your school decides how long.",
+    already: "\"Don't ask again\" was already on, so Microsoft may skip 2FA for a while; your school decides how long.",
+    absent: "Your school's sign-in page didn't offer \"Don't ask again\", so 2FA is asked whenever your school requires it.",
+    unknown: "Whether \"Don't ask again\" applied isn't known yet; it is recorded at the next sign-in that reaches 2FA.",
+    off: "\"Don't ask again\" is off. To be asked less often, rerun setup and pick \"Less often\" (or set D2L_REMEMBER_MFA=true).",
+};
 /** The plain summary, relative to its session directory. */
 export const MICROSOFT_SESSION_FILE = "microsoft-session.json";
 const ENTRA_HOST = "login.microsoftonline.com";
@@ -80,5 +89,6 @@ export async function readMicrosoftSession(sessionDir, now = Date.now()) {
         staySignedInExpires: staySignedIn && expires > 0 ? new Date(expires * 1000).toISOString() : null,
         rememberMfa: summary.rememberMfa?.outcome ?? "unknown",
         rememberMfaAt: summary.rememberMfa?.at ?? null,
+        note: `${STAY_SIGNED_IN_NOTE} ${REMEMBER_MFA_NOTES[summary.rememberMfa?.outcome ?? "unknown"]}`,
     };
 }

package/build/tools/get-server-info.js

@@ -57,7 +57,7 @@ export function registerGetServerInfo(server, config, version, apiClient, readSi
     server.registerTool("get_server_info", {
         title: "Get Server Info",
         annotations: { readOnlyHint: true },
-        description: "Report which version of the Brightspace MCP server is running, the Node.js runtime, platform, config file path, session state directory, configured school URL, whether a credential is stored, the server's local timezone and UTC offset, (once a browser sign-in has been saved) what Microsoft remembered: stay-signed-in and the Don't ask again MFA checkbox, (when signed in) the account's uniqueName/displayName as signedInAs, and this process's request counters (requests: responses by status class, network errors, cache hits/misses, coalesced joins, and token refreshes). Use this for troubleshooting, when the user asks which version they have, or what timezone/account dates are being computed against. Never contacts Brightspace and never returns secrets.",
+        description: "Report which version of the Brightspace MCP server is running, the Node.js runtime, platform, config file path, session state directory, configured school URL, whether a credential is stored, the server's local timezone and UTC offset, (once a browser sign-in has been saved) what Microsoft remembered: stay-signed-in (which keeps the Microsoft sign-in but does not by itself skip 2FA) and the Don't ask again MFA checkbox, with a plain-language note on what that means for 2FA to relay to the user, (when signed in) the account's uniqueName/displayName as signedInAs, and this process's request counters (requests: responses by status class, network errors, cache hits/misses, coalesced joins, and token refreshes). Use this for troubleshooting, when the user asks which version they have, or what timezone/account dates are being computed against. Never contacts Brightspace and never returns secrets.",
         inputSchema: GetServerInfoSchema,
     }, async () => {
         const [microsoftSession, signedInAs] = await Promise.all([

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brightspace-mcp-server",
-  "version": "4.0.3",
+  "version": "4.0.5",
   "mcpName": "io.github.RohanMuppa/brightspace",
   "description": "MCP server for Brightspace (D2L). Check grades, due dates, assignments, announcements, syllabus, rosters and more via Claude, ChatGPT, Cursor, Windsurf, or any MCP client.",
   "type": "module",