canvas-lms-mcp 2.0.0 → 2.2.0

package/README.md

@@ -11,7 +11,7 @@
 
 MCP server for [Canvas LMS](https://www.instructure.com/canvas). Read courses, assignments, submissions, rubrics, quizzes; grade, comment, manage course content, and handle Canvas admin workflows from any AI agent.
 
-169 tools across Canvas courses, assignments, submissions, gradebook history, rubrics, quizzes, New Quizzes (LTI), files, users, groups, enrollments, discussions, modules, pages, calendar, conversations, peer reviews, accounts, analytics, outcomes, grading standards, grade projection, link audit, accessibility audit, content exports, content migrations, quiz accommodations, appointment groups, student workflows, student search, dashboard, instructor attention workflows, and health checks. Three deployment modes: stdio, HTTP, and library import.
+172 tools across Canvas courses, assignments, submissions, gradebook history, rubrics, quizzes, New Quizzes (LTI), files, users, groups, enrollments, discussions, modules, pages, calendar, conversations, peer reviews, accounts, analytics, outcomes, grading standards, grade projection, link audit, accessibility audit, content exports, content migrations, quiz accommodations, appointment groups, student workflows, student search, dashboard, instructor attention workflows, and health checks. Three deployment modes: stdio, HTTP, and library import.
 
 ## One-click install (Claude Desktop)
 
@@ -45,7 +45,7 @@ Installs the MCP server (via `npx canvas-lms-mcp`) and all 16 [Agent Skills](#ag
 | | canvas-lms-mcp | [vishalsachdev/canvas-mcp](https://github.com/vishalsachdev/canvas-mcp) | [DMontgomery40/mcp-canvas-lms](https://github.com/DMontgomery40/mcp-canvas-lms) |
 |---|---|---|---|
 | Language | TypeScript | Python | TypeScript |
-| Tools | 169 | 80+ | 54 |
+| Tools | 172 | 80+ | 54 |
 | License | [![License: MIT](https://img.shields.io/github/license/bruchris/canvas-lms-mcp)](https://github.com/bruchris/canvas-lms-mcp/blob/main/LICENSE) | [![License](https://img.shields.io/github/license/vishalsachdev/canvas-mcp)](https://github.com/vishalsachdev/canvas-mcp/blob/main/LICENSE) | [![License](https://img.shields.io/github/license/DMontgomery40/mcp-canvas-lms)](https://github.com/DMontgomery40/mcp-canvas-lms/blob/main/LICENSE) |
 | Last commit | [![Last commit](https://img.shields.io/github/last-commit/bruchris/canvas-lms-mcp)](https://github.com/bruchris/canvas-lms-mcp) | [![Last commit](https://img.shields.io/github/last-commit/vishalsachdev/canvas-mcp)](https://github.com/vishalsachdev/canvas-mcp) | [![Last commit](https://img.shields.io/github/last-commit/DMontgomery40/mcp-canvas-lms)](https://github.com/DMontgomery40/mcp-canvas-lms) |
 
@@ -152,7 +152,7 @@ Once configured, try these prompts with your AI client:
 | Attention | `list_submission_comments_needing_attention`, `list_students_needing_attention` |
 | FERPA (conditional) | `resolve_pseudonym` — stdio only, registered when `CANVAS_PSEUDONYMIZE_STUDENTS=true` and `CANVAS_PSEUDONYMIZE_REVERSE_LOOKUP=true` |
 
-117 tools are read-only and 52 tools perform Canvas write operations. When FERPA mode is enabled **on the stdio transport**, `resolve_pseudonym` is registered as the 170th tool overall (118th read tool). The HTTP transport never registers it — see [FERPA mode](#ferpa-mode-student-pseudonymization).
+120 tools are read-only and 52 tools perform Canvas write operations. When FERPA mode is enabled **on the stdio transport**, `resolve_pseudonym` is registered as the 173rd tool overall (121st read tool). The HTTP transport never registers it — see [FERPA mode](#ferpa-mode-student-pseudonymization).
 
 All write tools require appropriate Canvas permissions. Canvas enforces its own permission model -- the MCP server does not bypass it.
 
@@ -545,8 +545,8 @@ Three roles, plus the default of "unset = every tool":
 
 | `CANVAS_ROLE` | Tools exposed | Typical use |
 |---------------|---------------|-------------|
-| _(unset)_ | all (~169) | default; backwards-compatible |
-| `student` | ~58 | a student's own courses, grades, submissions, and read-only course content |
+| _(unset)_ | all (~172) | default; backwards-compatible |
+| `student` | ~61 | a student's own courses, grades, submissions, and read-only course content |
 | `teacher` | ~149 | grading, roster, content authoring, analytics |
 | `admin` | ~161 | everything `teacher` sees plus account-level tools (`enroll_user`, `list_account_users`, …) |
 

package/dist/canvas/activity-stream.d.ts

@@ -0,0 +1,35 @@
+import type { CanvasHttpClient } from './client';
+import type { CanvasActivityStreamEntry, CanvasActivityStreamSummaryEntry } from './types';
+export interface ActivityStreamQuery {
+    onlyActiveCourses?: boolean;
+    /**
+     * Stop following `Link: rel="next"` once this many items have accumulated.
+     * Bounds the WORK, not just the result: `paginate()` otherwise follows every
+     * page to exhaustion (up to `maxPaginationPages`, default 1000) before
+     * returning, so slicing afterwards would still have fetched up to 100,000
+     * items.
+     */
+    maxItems?: number;
+}
+export declare class ActivityStreamModule {
+    private client;
+    constructor(client: CanvasHttpClient);
+    /**
+     * `GET /users/self/activity_stream/summary` is the one stream endpoint Canvas
+     * does not paginate (`api_render_stream_summary` has no `Api.paginate` call),
+     * so this uses `request()` rather than `paginate()` — the inverse of every
+     * other activity-stream endpoint.
+     */
+    getSummary(onlyActiveCourses?: boolean): Promise<CanvasActivityStreamSummaryEntry[]>;
+    /**
+     * `GET /users/self/activity_stream` — the cross-course stream itself.
+     *
+     * Uses `paginate()`, which is not interchangeable with `request()` here:
+     * Canvas renders this endpoint through `Api.paginate(scope, self, …,
+     * default_per_page: 21)`, so a `request()` call would silently return 21
+     * items with no error and no `Link` header followed. `paginate()` sets
+     * `per_page=100` (Canvas's `MAX_PER_PAGE`) and follows the links.
+     */
+    getStream(query?: ActivityStreamQuery): Promise<CanvasActivityStreamEntry[]>;
+}
+//# sourceMappingURL=activity-stream.d.ts.map

package/dist/canvas/activity-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-stream.d.ts","sourceRoot":"","sources":["../../src/canvas/activity-stream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAChD,OAAO,KAAK,EAAE,yBAAyB,EAAE,gCAAgC,EAAE,MAAM,SAAS,CAAA;AAE1F,MAAM,WAAW,mBAAmB;IAClC,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,qBAAa,oBAAoB;IACnB,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,gBAAgB;IAE5C;;;;;OAKG;IACG,UAAU,CAAC,iBAAiB,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,gCAAgC,EAAE,CAAC;IAO1F;;;;;;;;OAQG;IACG,SAAS,CAAC,KAAK,GAAE,mBAAwB,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC;CAOvF"}

package/dist/canvas/client.d.ts

@@ -25,7 +25,9 @@ export declare class CanvasHttpClient {
      * which is the expected response for DELETE operations.
      */
     request<T>(endpoint: string, options?: CanvasRequestOptions): Promise<T>;
-    paginate<T>(endpoint: string, params?: CanvasQueryParams): Promise<T[]>;
+    paginate<T>(endpoint: string, params?: CanvasQueryParams, options?: {
+        maxItems?: number;
+    }): Promise<T[]>;
     paginateEnvelope<T>(endpoint: string, envelopeKey: string, params?: CanvasQueryParams): Promise<T[]>;
     /**
      * The header block every Canvas request shares. Defining it in one place is

package/dist/canvas/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/canvas/client.ts"],"names":[],"mappings":"AAEA,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAEnE,OAAO,KAAK,EAAE,kBAAkB,EAAuB,MAAM,SAAS,CAAA;AAEtE,qBAAa,cAAe,SAAQ,KAAK;IACvC,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;gBAEJ,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAM9D;AAKD,MAAM,WAAW,oBAAqB,SAAQ,WAAW;IACvD;;;;OAIG;IACH,KAAK,CAAC,EAAE,iBAAiB,CAAA;CAC1B;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,KAAK,CAAQ;IACrB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,kBAAkB,CAAQ;gBAEtB,MAAM,EAAE,kBAAkB;IAMtC,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED;;;;OAIG;IACG,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,CAAC,CAAC;IA2C5E,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAkCvE,gBAAgB,CAAC,CAAC,EACtB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,iBAAiB,GACzB,OAAO,CAAC,CAAC,EAAE,CAAC;IAsCf;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IAQrB;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,aAAa;CAKtB"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/canvas/client.ts"],"names":[],"mappings":"AAEA,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAEnE,OAAO,KAAK,EAAE,kBAAkB,EAAuB,MAAM,SAAS,CAAA;AAEtE,qBAAa,cAAe,SAAQ,KAAK;IACvC,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;gBAEJ,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAM9D;AAKD,MAAM,WAAW,oBAAqB,SAAQ,WAAW;IACvD;;;;OAIG;IACH,KAAK,CAAC,EAAE,iBAAiB,CAAA;CAC1B;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,KAAK,CAAQ;IACrB,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,kBAAkB,CAAQ;gBAEtB,MAAM,EAAE,kBAAkB;IAMtC,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED;;;;OAIG;IACG,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,CAAC,CAAC;IA2C5E,QAAQ,CAAC,CAAC,EACd,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9B,OAAO,CAAC,CAAC,EAAE,CAAC;IA6CT,gBAAgB,CAAC,CAAC,EACtB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,iBAAiB,GACzB,OAAO,CAAC,CAAC,EAAE,CAAC;IAsCf;;;;;;;OAOG;IACH,OAAO,CAAC,aAAa;IAQrB;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,aAAa;CAKtB"}

package/dist/canvas/index.cjs

@@ -6,13 +6,13 @@
 
 
 
-var _chunk66PSR2DZcjs = require('../chunk-66PSR2DZ.cjs');
+var _chunkEMIO4XD4cjs = require('../chunk-EMIO4XD4.cjs');
 
 
 
 
 
-var _chunkKNYGBEL5cjs = require('../chunk-KNYGBEL5.cjs');
+var _chunkC2C3TYWDcjs = require('../chunk-C2C3TYWD.cjs');
 
 
 
@@ -25,5 +25,5 @@ var _chunkKNYGBEL5cjs = require('../chunk-KNYGBEL5.cjs');
 
 
 
-exports.CANVAS_MAX_ID = _chunk66PSR2DZcjs.CANVAS_MAX_ID; exports.CanvasApiError = _chunkKNYGBEL5cjs.CanvasApiError; exports.CanvasClient = _chunk66PSR2DZcjs.CanvasClient; exports.CanvasHttpClient = _chunkKNYGBEL5cjs.CanvasHttpClient; exports.MAX_SAFE_CANVAS_NUMBER_ID = _chunk66PSR2DZcjs.MAX_SAFE_CANVAS_NUMBER_ID; exports.appendCanvasQuery = _chunkKNYGBEL5cjs.appendCanvasQuery; exports.canvasIdInput = _chunk66PSR2DZcjs.canvasIdInput; exports.canvasIdList = _chunk66PSR2DZcjs.canvasIdList; exports.compareCanvasIds = _chunk66PSR2DZcjs.compareCanvasIds; exports.normalizeCanvasIdInput = _chunk66PSR2DZcjs.normalizeCanvasIdInput; exports.toCanvasQuery = _chunkKNYGBEL5cjs.toCanvasQuery;
+exports.CANVAS_MAX_ID = _chunkEMIO4XD4cjs.CANVAS_MAX_ID; exports.CanvasApiError = _chunkC2C3TYWDcjs.CanvasApiError; exports.CanvasClient = _chunkEMIO4XD4cjs.CanvasClient; exports.CanvasHttpClient = _chunkC2C3TYWDcjs.CanvasHttpClient; exports.MAX_SAFE_CANVAS_NUMBER_ID = _chunkEMIO4XD4cjs.MAX_SAFE_CANVAS_NUMBER_ID; exports.appendCanvasQuery = _chunkC2C3TYWDcjs.appendCanvasQuery; exports.canvasIdInput = _chunkEMIO4XD4cjs.canvasIdInput; exports.canvasIdList = _chunkEMIO4XD4cjs.canvasIdList; exports.compareCanvasIds = _chunkEMIO4XD4cjs.compareCanvasIds; exports.normalizeCanvasIdInput = _chunkEMIO4XD4cjs.normalizeCanvasIdInput; exports.toCanvasQuery = _chunkC2C3TYWDcjs.toCanvasQuery;
 //# sourceMappingURL=index.cjs.map

package/dist/canvas/index.d.ts

@@ -25,6 +25,8 @@ import { ContentMigrationsModule } from './content-migrations';
 import { GradingStandardsModule } from './grading-standards';
 import { LatePolicyModule } from './late-policy';
 import { AppointmentGroupsModule } from './appointment-groups';
+import { ActivityStreamModule } from './activity-stream';
+import { PlannerModule } from './planner';
 /**
  * Standalone Canvas REST API client. Composed of modular per-domain classes
  * sharing a `CanvasHttpClient`. Throws `CanvasApiError` on Canvas-side failures.
@@ -65,6 +67,8 @@ export declare class CanvasClient {
     gradingStandards: GradingStandardsModule;
     latePolicy: LatePolicyModule;
     appointmentGroups: AppointmentGroupsModule;
+    activityStream: ActivityStreamModule;
+    planner: PlannerModule;
     constructor(config: CanvasClientConfig);
 }
 export { CanvasHttpClient, CanvasApiError } from './client';

package/dist/canvas/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/canvas/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAE9D;;;;;;;;;;;GAWG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,EAAE,aAAa,CAAA;IACtB,WAAW,EAAE,iBAAiB,CAAA;IAC9B,WAAW,EAAE,iBAAiB,CAAA;IAC9B,OAAO,EAAE,aAAa,CAAA;IACtB,OAAO,EAAE,aAAa,CAAA;IACtB,KAAK,EAAE,WAAW,CAAA;IAClB,KAAK,EAAE,WAAW,CAAA;IAClB,MAAM,EAAE,YAAY,CAAA;IACpB,WAAW,EAAE,iBAAiB,CAAA;IAC9B,WAAW,EAAE,iBAAiB,CAAA;IAC9B,OAAO,EAAE,aAAa,CAAA;IACtB,KAAK,EAAE,WAAW,CAAA;IAClB,QAAQ,EAAE,cAAc,CAAA;IACxB,aAAa,EAAE,mBAAmB,CAAA;IAClC,WAAW,EAAE,iBAAiB,CAAA;IAC9B,QAAQ,EAAE,cAAc,CAAA;IACxB,SAAS,EAAE,eAAe,CAAA;IAC1B,SAAS,EAAE,eAAe,CAAA;IAC1B,QAAQ,EAAE,cAAc,CAAA;IACxB,gBAAgB,EAAE,sBAAsB,CAAA;IACxC,UAAU,EAAE,gBAAgB,CAAA;IAC5B,cAAc,EAAE,oBAAoB,CAAA;IACpC,iBAAiB,EAAE,uBAAuB,CAAA;IAC1C,gBAAgB,EAAE,sBAAsB,CAAA;IACxC,UAAU,EAAE,gBAAgB,CAAA;IAC5B,iBAAiB,EAAE,uBAAuB,CAAA;gBAE9B,MAAM,EAAE,kBAAkB;CA6BvC;AAED,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAC3D,YAAY,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC1D,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AACxF;;;;;;;;GAQG;AACH,OAAO,EACL,aAAa,EACb,YAAY,EACZ,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,EACb,yBAAyB,GAC1B,MAAM,MAAM,CAAA;AACb,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,MAAM,CAAA;AACxE,mBAAmB,SAAS,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/canvas/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAEzC;;;;;;;;;;;GAWG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,EAAE,aAAa,CAAA;IACtB,WAAW,EAAE,iBAAiB,CAAA;IAC9B,WAAW,EAAE,iBAAiB,CAAA;IAC9B,OAAO,EAAE,aAAa,CAAA;IACtB,OAAO,EAAE,aAAa,CAAA;IACtB,KAAK,EAAE,WAAW,CAAA;IAClB,KAAK,EAAE,WAAW,CAAA;IAClB,MAAM,EAAE,YAAY,CAAA;IACpB,WAAW,EAAE,iBAAiB,CAAA;IAC9B,WAAW,EAAE,iBAAiB,CAAA;IAC9B,OAAO,EAAE,aAAa,CAAA;IACtB,KAAK,EAAE,WAAW,CAAA;IAClB,QAAQ,EAAE,cAAc,CAAA;IACxB,aAAa,EAAE,mBAAmB,CAAA;IAClC,WAAW,EAAE,iBAAiB,CAAA;IAC9B,QAAQ,EAAE,cAAc,CAAA;IACxB,SAAS,EAAE,eAAe,CAAA;IAC1B,SAAS,EAAE,eAAe,CAAA;IAC1B,QAAQ,EAAE,cAAc,CAAA;IACxB,gBAAgB,EAAE,sBAAsB,CAAA;IACxC,UAAU,EAAE,gBAAgB,CAAA;IAC5B,cAAc,EAAE,oBAAoB,CAAA;IACpC,iBAAiB,EAAE,uBAAuB,CAAA;IAC1C,gBAAgB,EAAE,sBAAsB,CAAA;IACxC,UAAU,EAAE,gBAAgB,CAAA;IAC5B,iBAAiB,EAAE,uBAAuB,CAAA;IAC1C,cAAc,EAAE,oBAAoB,CAAA;IACpC,OAAO,EAAE,aAAa,CAAA;gBAEV,MAAM,EAAE,kBAAkB;CA+BvC;AAED,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAC3D,YAAY,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC1D,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AACxF;;;;;;;;GAQG;AACH,OAAO,EACL,aAAa,EACb,YAAY,EACZ,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,EACb,yBAAyB,GAC1B,MAAM,MAAM,CAAA;AACb,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,MAAM,CAAA;AACxE,mBAAmB,SAAS,CAAA"}

package/dist/canvas/index.js

@@ -6,13 +6,13 @@ import {
   canvasIdList,
   compareCanvasIds,
   normalizeCanvasIdInput
-} from "../chunk-5B3JDDYC.js";
+} from "../chunk-FP4A34TD.js";
 import {
   CanvasApiError,
   CanvasHttpClient,
   appendCanvasQuery,
   toCanvasQuery
-} from "../chunk-VVIZW7HE.js";
+} from "../chunk-W5DF5YBG.js";
 export {
   CANVAS_MAX_ID,
   CanvasApiError,

package/dist/canvas/planner.d.ts

@@ -0,0 +1,31 @@
+import type { CanvasHttpClient } from './client';
+import type { CanvasPlannerItem } from './types';
+export interface PlannerItemsQuery {
+    startDate?: string;
+    endDate?: string;
+    contextCodes?: string[];
+    filter?: 'new_activity' | 'incomplete_items' | 'complete_items';
+    /**
+     * Stop following `Link: rel="next"` once this many items have accumulated.
+     * Same rationale as `ActivityStreamQuery.maxItems`: bounds the WORK, not
+     * just the result.
+     */
+    maxItems?: number;
+}
+export declare class PlannerModule {
+    private client;
+    constructor(client: CanvasHttpClient);
+    /**
+     * `GET /planner/items` — unions nine Canvas collections (assignments,
+     * ungraded quizzes, planner notes, wiki pages, ungraded discussions,
+     * calendar events, peer reviews, sub-assignments, peer-review
+     * sub-assignments) into one cross-course/cross-group feed.
+     *
+     * Uses `paginate()`: `Api.paginate(items, self, …)` sets no
+     * `default_per_page`, so Canvas falls back to `Api::PER_PAGE = 10` absent an
+     * explicit `per_page` (BRU-2797 §3.2) — the same `request()`-vs-`paginate()`
+     * hazard as the activity stream.
+     */
+    listItems(query?: PlannerItemsQuery): Promise<CanvasPlannerItem[]>;
+}
+//# sourceMappingURL=planner.d.ts.map

package/dist/canvas/planner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"planner.d.ts","sourceRoot":"","sources":["../../src/canvas/planner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAChD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAEhD,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,MAAM,CAAC,EAAE,cAAc,GAAG,kBAAkB,GAAG,gBAAgB,CAAA;IAC/D;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,qBAAa,aAAa;IACZ,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,gBAAgB;IAE5C;;;;;;;;;;OAUG;IACG,SAAS,CAAC,KAAK,GAAE,iBAAsB,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;CAY7E"}

package/dist/canvas/types.d.ts

@@ -285,12 +285,69 @@ export interface CanvasAttachment {
     content_type: string;
     size: number;
 }
+/**
+ * Canvas's `user_display_json` (`lib/api/v1/user.rb`): `{id, anonymous_id,
+ * display_name, avatar_image_url, html_url, pronouns}`, where `display_name` is
+ * `user.short_name` — a REAL NAME. It is returned `{}` when the user is nil, so
+ * every field is optional.
+ *
+ * This shape shows up wherever Canvas wants "enough to render a byline", and it
+ * is easy to miss because it spells the name `display_name` rather than `name`:
+ * a wrapper that looks for `name` / `user_name` / `author_name` walks straight
+ * past it. The pseudonymizer rewrites `display_name` and nulls the sibling
+ * `avatar_image_url` / `pronouns` — a face and a pronoun set beside a masked
+ * name are the same leak — but never `id` / `anonymous_id` / `html_url`, which
+ * are identifiers, and identifiers are preserved everywhere in this layer.
+ */
+export interface CanvasUserDisplay {
+    id?: CanvasId;
+    anonymous_id?: string;
+    display_name?: string;
+    avatar_image_url?: string | null;
+    html_url?: string;
+    pronouns?: string | null;
+    [key: string]: unknown;
+}
 export interface CanvasSubmissionComment {
     id: CanvasId;
-    author_id: CanvasId;
+    /**
+     * `null` when the viewer lacks `:read_author` on the comment:
+     * `submission_comment_json`'s `else` branch sets `author_id: nil` together
+     * with `author: {}` and `author_name: "Anonymous User"`
+     * (lib/api/v1/submission_comment.rb:68-72 at the pinned Canvas SHA
+     * 1c9f0bb8013ed69c4f2efe11fd483025469b7e6c).
+     *
+     * ~~Declared non-null.~~ Widened 2026-10-10 (BRU-2865): the declaration had
+     * contradicted that branch since the branch was first cited, and the two
+     * sites that key a pseudonym off this field were written against the
+     * declaration rather than the serializer. Derive the key with
+     * `submissionCommentAuthorKey` rather than `String(author_id)` — `null`
+     * means "this comment carries no identity at all", not "key the map on the
+     * string `null`".
+     */
+    author_id: CanvasId | null;
     author_name: string;
     comment: string;
     created_at: string;
+    /**
+     * `submission_comment_json` sets this to `user_display_json(comment.author,
+     * …)` whenever the viewer holds `:read_author` — so a comment normally
+     * carries the author's `display_name` BESIDE `author_name`, and masking only
+     * `author_name` leaves the real name one key over.
+     *
+     * ~~Optional because the anonymous-moderated branch replaces it with `{}`.~~
+     * Corrected 2026-10-10 (BRU-2864): it is `submission_comment_json`'s OWN
+     * `else` branch that sets `author: {}`, together with `author_id: nil` and
+     * `author_name: "Anonymous User"`, when the viewer lacks `:read_author`
+     * (lib/api/v1/submission_comment.rb:68-72 at the pinned Canvas SHA
+     * 1c9f0bb8013ed69c4f2efe11fd483025469b7e6c).
+     * `anonymous_moderated_submission_comments_json` — the serializer that does
+     * `json.delete(:author_id)` — never emits this key at all, because
+     * `ANONYMOUS_MODERATED_JSON_ATTRIBUTES` (lines 24-36) has no `author` entry.
+     * So there is no shape in either serializer where `author.id` survives an
+     * absent `author_id`, and this key is never a fallback source for it.
+     */
+    author?: CanvasUserDisplay;
 }
 export interface CanvasGradebookHistoryGrader {
     id: CanvasId;
@@ -873,6 +930,274 @@ export interface CanvasActivityStreamItem {
     count: number;
     unread_count: number;
 }
+/**
+ * One entry from GET /users/self/activity_stream/summary — `{type, count,
+ * unread_count}`. `CanvasActivityStreamItem` above already models this exact
+ * shape under a misleading name (it is used for the *course* activity stream
+ * summary, not a stream item); this is the correctly-named declaration for the
+ * cross-course summary endpoint. Renaming the existing type is tracked
+ * separately (BRU-2797 §1 C2, §11 Q4) and is not bundled here.
+ */
+export interface CanvasActivityStreamSummaryEntry {
+    type: string;
+    count: number;
+    unread_count: number;
+}
+/**
+ * One `root_discussion_entries[]` entry on a `DiscussionTopic` / `Announcement`
+ * activity-stream item. Canvas caps the array at `StreamItem::LATEST_ENTRY_LIMIT`
+ * (3) at write time, and the nested `user` is the only place the stream spells a
+ * discussion author with an identifier beside the name.
+ *
+ * `user_id` can be missing or `null` — the pinned serializer SHA
+ * (1c9f0bb8013ed69c4f2efe11fd483025469b7e6c) can emit this nested `user`
+ * object with no usable identity (BRU-2868). There is nothing to key a stable
+ * pseudonym on in that case; see `anonymizeActivityStreamEntry`.
+ */
+export interface CanvasActivityStreamRootEntry {
+    user: {
+        user_id?: CanvasId | null;
+        user_name: string;
+    };
+    message: string | null;
+}
+/**
+ * One `latest_messages[]` entry on a `Conversation` activity-stream item, built
+ * by `StreamItem#prepare_conversation`: `{id, created_at, author_id, message,
+ * participating_user_ids}`.
+ *
+ * Note what is NOT here: no name of any kind. The stream's conversation arm
+ * carries identifiers and message text only, which is why
+ * `Pseudonymizer.anonymizeActivityStream` has nothing to rewrite on it (the
+ * pseudonymizer rewrites names, never ids — `applyPseudonymToUser` preserves
+ * `user.id`). The message body is handled by provenance fencing instead.
+ */
+export interface CanvasActivityStreamConversationMessage {
+    id: CanvasId;
+    created_at: string;
+    author_id: CanvasId;
+    message: string;
+    participating_user_ids: CanvasId[];
+}
+/**
+ * One `discussion_entries[]` entry on the activity stream's `Submission` arm.
+ *
+ * `submission_attempt_json` emits `discussion_entries` for any submission to a
+ * `discussion_topic` assignment — it is in the default-on
+ * `SUBMISSION_OTHER_FIELDS`, and the stream narrows nothing — by calling
+ * `discussion_entry_api_json(entries, topic.context, user, session)` with four
+ * arguments, i.e. under the default `includes = %i[user_name subentries
+ * display_user]`.
+ *
+ * All three identity surfaces below can carry a real name, and they do NOT
+ * appear together. Per `serialize_entry`, `user_name` and `user_id` are both
+ * omitted when the entry is deleted, while `user` is emitted whenever
+ * `:display_user` is in includes — that guard has no `deleted?` check. So a
+ * deleted entry is `{user: {id, display_name, …}}` with no `user_id` and no
+ * `user_name`: keying off `user_name` alone silently passes that name through.
+ *
+ * `recent_replies` is the recursion and the only subentry key upstream emits
+ * (`discussion_entry_subentries`, capped at 10 with `has_more_replies`).
+ * Upstream nests exactly one level — the method returns `{}` unless
+ * `entry.root_entry_id.nil?` — but this type and its pseudonymizer are
+ * recursive regardless, because a depth assumption is not worth a leak.
+ */
+export interface CanvasSubmissionDiscussionEntry {
+    id?: CanvasId;
+    created_at?: string;
+    updated_at?: string;
+    parent_id?: CanvasId | null;
+    /** Omitted when the entry is deleted. */
+    user_id?: CanvasId;
+    /** Omitted when the entry is deleted. */
+    user_name?: string;
+    /** Present even on a deleted entry — see the note above. */
+    user?: CanvasUserDisplay;
+    editor_id?: CanvasId;
+    message?: string;
+    deleted?: boolean;
+    recent_replies?: CanvasSubmissionDiscussionEntry[];
+    has_more_replies?: boolean;
+    [key: string]: unknown;
+}
+/**
+ * One entry from `GET /users/self/activity_stream`.
+ *
+ * `context_type` is `"Course"` | `"Group"` and EXACTLY ONE of `course_id` /
+ * `group_id` is present — the key name is derived from the context type by
+ * Canvas's `Api::V1::Context#context_data`, so the other key is ABSENT, not
+ * null. Canvas's own doc block shows both keys with `group_id: null`; it is
+ * wrong. Every optional field is therefore `?` and never `| null`: a
+ * `null`-checking consumer cannot detect an absent key.
+ *
+ * The index signature is deliberate, not laziness. The `Submission` arm merges a
+ * whole `submission_json(submission, assignment, …, includes = %w[submission_comments
+ * assignment course html_url user])` into the item, so the key set of that one arm
+ * is as wide as Canvas's submission serializer and grows with it. The fields named
+ * below are the ones this server reads, pseudonymizes or fences; everything else
+ * passes through untyped rather than being silently dropped from the declaration.
+ */
+export interface CanvasActivityStreamEntry {
+    /** The stream item's own id, not the underlying object's. */
+    id: CanvasId;
+    created_at: string;
+    updated_at: string;
+    title: string | null;
+    message: string | null;
+    /**
+     * A Ruby class name (`stream_item.data.class.name`), overwritten to
+     * `"WebConference"` / `"Collaboration"` for those arms. Not a closed set —
+     * `(string & {})` keeps it open, because the value is computed at runtime and
+     * the serializer's `else` arm raises rather than enumerating.
+     */
+    type: 'DiscussionTopic' | 'Announcement' | 'Conversation' | 'Message' | 'Submission' | 'WebConference' | 'Collaboration' | 'AssessmentRequest' | 'DiscussionEntry' | (string & {});
+    /** Re-derived from `conversation_participants` on the `Conversation` arm, where it may be null. */
+    read_state: boolean | null;
+    context_type?: 'Course' | 'Group' | (string & {});
+    course_id?: CanvasId;
+    group_id?: CanvasId;
+    html_url?: string;
+    /** `Message` items set `url` alongside `html_url`, both from `data.url`. */
+    url?: string;
+    discussion_topic_id?: CanvasId;
+    announcement_id?: CanvasId;
+    total_root_discussion_entries?: number;
+    require_initial_post?: boolean | null;
+    user_has_posted?: boolean | null;
+    root_discussion_entries?: CanvasActivityStreamRootEntry[];
+    conversation_id?: CanvasId;
+    private?: boolean;
+    participant_count?: number;
+    latest_messages?: CanvasActivityStreamConversationMessage[];
+    message_id?: CanvasId;
+    notification_category?: string | null;
+    submission_id?: CanvasId;
+    assignment_id?: CanvasId;
+    user_id?: CanvasId;
+    grader_id?: CanvasId | null;
+    body?: string | null;
+    user?: CanvasUser;
+    submission_comments?: CanvasSubmissionComment[];
+    /**
+     * Discussion-topic submissions only, but default-on when they occur — see
+     * {@link CanvasSubmissionDiscussionEntry}. Name-bearing and recursive.
+     */
+    discussion_entries?: CanvasSubmissionDiscussionEntry[];
+    /**
+     * `attempt.proxy_submitter.short_name` — a BARE STRING, not a user object,
+     * emitted with its `proxy_submitter_id` sibling whenever
+     * `attempt.proxy_submission?`. Because it is a naked string there is no
+     * `user`-shaped container for a generic walker to find.
+     */
+    proxy_submitter?: string;
+    proxy_submitter_id?: CanvasId;
+    web_conference_id?: CanvasId;
+    collaboration_id?: CanvasId;
+    assessment_request_id?: CanvasId;
+    /**
+     * `DiscussionEntry` only. The serializer emits this name with NO accompanying
+     * identifier (`hash["author_name"] = discussion_entry.author_name` is the whole
+     * arm beside `message`), so a stable pseudonym is not derivable for it — see
+     * `Pseudonymizer.anonymizeActivityStream`.
+     */
+    author_name?: string;
+    [key: string]: unknown;
+}
+/**
+ * `PlannerOverride` json from `planner_override_json` — present only when the
+ * student has toggled an item's planner visibility ("mark as done" /
+ * "dismiss"). It is `api_json` on the AR record plus a re-derived
+ * `plannable_type` and `assignment_id`. None of its fields identify anyone
+ * but the authenticated caller — it is their own planner override.
+ */
+export interface CanvasPlannerOverride {
+    id: CanvasId;
+    plannable_id: CanvasId;
+    plannable_type: string;
+    user_id: CanvasId;
+    assignment_id: CanvasId | null;
+    marked_complete: boolean;
+    dismissed: boolean;
+    created_at: string;
+    updated_at: string;
+    deleted_at: string | null;
+    [key: string]: unknown;
+}
+/**
+ * The caller's own submission status on a planner item's underlying
+ * Assignment / SubAssignment / PeerReviewSubAssignment, from
+ * `submission_statuses_for` → `submission_statuses`.
+ */
+export interface CanvasPlannerSubmissionStatus {
+    submitted?: boolean;
+    excused?: boolean;
+    graded?: boolean;
+    posted_at?: string | null;
+    late?: boolean;
+    missing?: boolean;
+    needs_grading?: boolean;
+    has_feedback?: boolean;
+    redo_request?: boolean;
+    feedback?: {
+        comment: string;
+        is_media: boolean;
+        author_name?: string;
+        author_avatar_url?: string | null;
+    };
+    [key: string]: unknown;
+}
+/**
+ * One entry from `GET /planner/items`.
+ *
+ * `context_type` / `course_id` / `group_id` share the exact derivation and
+ * absent-not-null caveat as {@link CanvasActivityStreamEntry}
+ * (`Api::V1::Context#context_data`, BRU-2797 §1 C7) — a group-context item
+ * has no `course_id` key at all, not a null one.
+ *
+ * `plannable` is the polymorphic underlying object; its shape is keyed by
+ * `plannable_type` and varies per arm (`lib/api/v1/planner_item.rb`
+ * `planner_item_json`, pinned SHA 1c9f0bb8013ed69c4f2efe11fd483025469b7e6c).
+ * No arm carries a third-party user record — the richest is `planner_note`,
+ * whose own `user_id` is the authenticated caller's own id, never another
+ * student's (BRU-2797 §6.1) — so this is declared as a loose object rather
+ * than a per-arm union.
+ */
+export interface CanvasPlannerItem {
+    context_type?: 'Course' | 'Group' | (string & {});
+    course_id?: CanvasId;
+    group_id?: CanvasId;
+    /** The caller's own course nickname when set, else the course name — join on `course_id`, never this. */
+    context_name?: string;
+    context_image?: string | null;
+    plannable_id: CanvasId;
+    /**
+     * A `PlannerHelper::PLANNABLE_TYPES` key — snake_case, NOT the Ruby class
+     * name, unlike the activity stream's `type`. Not a closed set — kept open
+     * with `(string & {})` for the same reason as the activity stream's `type`.
+     */
+    plannable_type: 'assignment' | 'quiz' | 'planner_note' | 'wiki_page' | 'discussion_topic' | 'announcement' | 'calendar_event' | 'assessment_request' | 'sub_assignment' | 'peer_review_sub_assignment' | (string & {});
+    /** `null` unless the student has toggled this item's planner visibility. */
+    planner_override: CanvasPlannerOverride | null;
+    /**
+     * `false` or an object — a union, not a nullable object. Canvas initialises
+     * `submission_status = { submissions: false }` and only replaces it with a
+     * hash for a submittable plannable; a consumer writing
+     * `item.submissions?.graded` would silently read `undefined` on the
+     * boolean arm if this were declared `CanvasPlannerSubmissionStatus | null`.
+     */
+    submissions: false | CanvasPlannerSubmissionStatus;
+    new_activity: boolean;
+    plannable_date: string;
+    /** The polymorphic underlying object. Shape varies by `plannable_type`; no arm carries a third-party user record. */
+    plannable: Record<string, unknown>;
+    /** Absent for `planner_note` items — Canvas has no html_url for individual planner notes. */
+    html_url?: string;
+    /** `sub_assignment` discussion-checkpoint items only. */
+    details?: {
+        reply_to_entry_required_count: number;
+    };
+    [key: string]: unknown;
+}
 export interface CanvasStudentSummary {
     id: CanvasId;
     page_views: number;