brightspace-mcp-server 5.1.16 → 5.1.18

package/build/server.js

@@ -91,7 +91,7 @@ export function createMcpServer(runtime) {
     registerGetRoster(server, apiClient);
     registerGetMyGroups(server, apiClient);
     registerGetSyllabus(server, apiClient);
-    registerGetDiscussions(server, apiClient);
+    registerGetDiscussions(server, apiClient, config.baseUrl);
     registerGetVideoTranscript(server, apiClient);
     registerGetServerInfo(server, config, version, apiClient);
     registerSearchCourse(server, apiClient);

package/build/tools/get-discussions.js

@@ -8,6 +8,7 @@ import { GetDiscussionsSchema } from "./schemas.js";
 import { toolResponse, sanitizeError, errorResponse } from "./tool-helpers.js";
 import { convertHtmlToMarkdown } from "../utils/html-converter.js";
 import { log } from "../utils/logger.js";
+import { discussionUrl } from "../utils/deep-links.js";
 /**
  * Fetch a course's discussion forums. Shared with search_course so both
  * tools hit the same endpoint (and cache entry) instead of duplicating it.
@@ -31,7 +32,7 @@ export async function fetchForumTopics(apiClient, courseId, forumId) {
 /**
  * Register get_discussions tool
  */
-export function registerGetDiscussions(server, apiClient) {
+export function registerGetDiscussions(server, apiClient, baseUrl) {
     server.registerTool("get_discussions", {
         title: "Get Discussions",
         annotations: { readOnlyHint: true },
@@ -47,7 +48,7 @@ export function registerGetDiscussions(server, apiClient) {
             }
             // Specific topic — get posts
             if (forumId !== undefined && topicId !== undefined) {
-                return await getTopicPosts(apiClient, courseId, forumId, topicId);
+                return await getTopicPosts(apiClient, courseId, forumId, topicId, baseUrl);
             }
             // Specific forum — get its topics + posts
             if (forumId !== undefined) {
@@ -169,40 +170,82 @@ async function getForumDetail(apiClient, courseId, forumId) {
     });
 }
 /**
- * Get all posts for a specific topic.
+ * Fetch one topic's metadata. The forum's topic list comes first: it is the
+ * route get_discussions already lists topics from (and caches), and some
+ * tenants refuse a student the per-topic route for a topic that list shows
+ * (#364). The per-topic route is the fallback for a topic the list omits or
+ * a list the tenant refuses.
  */
-async function getTopicPosts(apiClient, courseId, forumId, topicId) {
-    // Fetch topic info
+async function fetchTopic(apiClient, courseId, forumId, topicId) {
+    try {
+        const listed = (await fetchForumTopics(apiClient, courseId, forumId)).find((t) => t.TopicId === topicId);
+        if (listed)
+            return listed;
+    }
+    catch (error) {
+        log("DEBUG", `Topic list for forum ${forumId} unavailable, trying topic ${topicId} directly`, error);
+    }
     const topicPath = apiClient.le(courseId, `/discussions/forums/${forumId}/topics/${topicId}`);
-    const topic = await apiClient.get(topicPath, {
+    return apiClient.get(topicPath, {
         ttl: DEFAULT_CACHE_TTLS.courseContent,
     });
-    // Fetch posts
+}
+/**
+ * Get all posts for a specific topic. A posts read the tenant refuses (403)
+ * still returns the topic, with posts null and postsUnavailable naming the
+ * failed step, so a permission restriction never reads as "no posts".
+ */
+async function getTopicPosts(apiClient, courseId, forumId, topicId, baseUrl) {
+    const topic = await fetchTopic(apiClient, courseId, forumId, topicId);
     const postsPath = apiClient.le(courseId, `/discussions/forums/${forumId}/topics/${topicId}/posts/`);
-    const posts = await apiClient.get(postsPath, {
-        ttl: DEFAULT_CACHE_TTLS.announcements,
-    });
+    let posts;
+    try {
+        posts = await apiClient.get(postsPath, {
+            ttl: DEFAULT_CACHE_TTLS.announcements,
+        });
+    }
+    catch (error) {
+        if (error?.status !== 403)
+            throw error;
+        log("INFO", `get_discussions: Posts for topic ${topicId} in forum ${forumId} refused (403)`);
+        return toolResponse({
+            courseId,
+            forumId,
+            topic: formatTopic(topic),
+            postCount: null,
+            posts: null,
+            postsUnavailable: {
+                operation: "listPosts",
+                status: 403,
+                reason: "Brightspace refused this account's request for the topic's posts. The posts may exist; open the topic in a browser to see what this account can read.",
+                url: baseUrl ? discussionUrl(baseUrl, courseId, topicId) : null,
+            },
+        });
+    }
     // Count what is returned: formatPosts drops deleted posts.
     const formatted = formatPosts(posts);
     log("INFO", `get_discussions: Retrieved ${formatted.length} posts for topic ${topicId} in forum ${forumId}`);
     return toolResponse({
         courseId,
         forumId,
-        topic: {
-            topicId: topic.TopicId,
-            name: topic.Name,
-            description: topic.Description?.Html
-                ? convertHtmlToMarkdown(topic.Description.Html).markdown
-                : topic.Description?.Text ?? null,
-            dueDate: topic.DueDate,
-            isLocked: topic.IsLocked,
-            mustPostToParticipate: topic.MustPostToParticipate,
-            scoreOutOf: topic.ScoreOutOf,
-        },
+        topic: formatTopic(topic),
         postCount: formatted.length,
         posts: formatted,
     });
 }
+function formatTopic(topic) {
+    return {
+        topicId: topic.TopicId,
+        name: topic.Name,
+        description: topic.Description?.Html
+            ? convertHtmlToMarkdown(topic.Description.Html).markdown
+            : topic.Description?.Text ?? null,
+        dueDate: topic.DueDate,
+        isLocked: topic.IsLocked,
+        mustPostToParticipate: topic.MustPostToParticipate,
+        scoreOutOf: topic.ScoreOutOf,
+    };
+}
 /**
  * Format posts into a clean thread structure.
  */

package/build/utils/deep-links.js

@@ -6,16 +6,11 @@
 /**
  * Deep links into the Brightspace web UI.
  *
- * The dropbox, quiz and gradebook templates were harvested from live
- * Brightspace markup: they are the same URLs the course pages themselves link
- * to, so they open the item directly.
- *
- * `discussionUrl` was NOT -- it was written from the shape of the others
- * without live markup to check it against, and no one has confirmed it against
- * a real tenant since. Treat it as unverified: if a student reports that a
- * discussion link lands on the wrong page or a "not found", harvest the real
- * URL from a course's own discussion list and fix the template here rather
- * than assuming this one is right.
+ * Every template here was harvested from live Brightspace markup: they are
+ * the same URLs the course pages themselves link to, so they open the item
+ * directly. The discussion template was first written from the shape of the
+ * others and answered 404 on a real tenant; it now uses the link the course's
+ * own Discussions List page gives each topic.
  */
 /** Drop trailing slashes so the templates below join cleanly. */
 function trimBaseUrl(baseUrl) {
@@ -40,15 +35,9 @@ export function contentTopicUrl(baseUrl, courseId, topicId) {
 export function gradebookUrl(baseUrl, courseId) {
     return `${trimBaseUrl(baseUrl)}/d2l/lms/grades/my_grades/main.d2l?ou=${courseId}`;
 }
-/**
- * Link to the thread list of a discussion topic.
- *
- * Unverified against a live tenant -- see the note at the top of this file.
- * The topic's forum id is available at every call site, so if the real
- * template turns out to need one, it can be threaded through.
- */
+/** Link to a discussion topic's page, which lists its threads. */
 export function discussionUrl(baseUrl, courseId, topicId) {
-    return `${trimBaseUrl(baseUrl)}/d2l/lms/discussions/threadlist.d2l?ou=${courseId}&tId=${topicId}`;
+    return `${trimBaseUrl(baseUrl)}/d2l/le/${courseId}/discussions/topics/${topicId}/View`;
 }
 /**
  * Link to a course's calendar. Calendar events have no per-event student page

package/build/utils/html-attributes.js

@@ -7,15 +7,20 @@
 function codePoint(whole, code) {
     return code <= 0x10ffff ? String.fromCodePoint(code) : whole;
 }
-/** Decode the character references Brightspace's HTML editor writes into attribute values. */
+const NAMED = { quot: '"', lt: "<", gt: ">", amp: "&" };
+/**
+ * Decode the character references Brightspace's HTML editor writes into
+ * attribute values, in one pass so a decoded `&` never starts another
+ * reference: `&#38;lt;` is the text `&lt;`, not `<` (issue #360).
+ */
 export function decodeEntities(value) {
-    return value
-        .replace(/&#x([0-9a-f]+);/gi, (whole, hex) => codePoint(whole, parseInt(hex, 16)))
-        .replace(/&#(\d+);/g, (whole, dec) => codePoint(whole, parseInt(dec, 10)))
-        .replace(/&quot;/g, '"')
-        .replace(/&lt;/g, "<")
-        .replace(/&gt;/g, ">")
-        .replace(/&amp;/g, "&");
+    return value.replace(/&(?:#[xX]([0-9a-fA-F]+)|#(\d+)|(quot|lt|gt|amp));/g, (whole, hex, dec, name) => {
+        if (hex !== undefined)
+            return codePoint(whole, parseInt(hex, 16));
+        if (dec !== undefined)
+            return codePoint(whole, parseInt(dec, 10));
+        return NAMED[name];
+    });
 }
 /**
  * The attributes of every `<tag>` element in `html`, names lowercased and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brightspace-mcp-server",
-  "version": "5.1.16",
+  "version": "5.1.18",
   "mcpName": "io.github.RohanMuppa/brightspace",
   "description": "MCP server for Brightspace (D2L). Check grades, due dates, assignments, announcements, syllabus, rosters and more via Claude, ChatGPT, Cursor, Windsurf, or any MCP client.",
   "type": "module",