infinitecampus-mcp 2.5.0 → 2.5.1

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Infinite Campus (Campus Parent) — grades, attendance, assignments, messages, documents",
-    "version": "2.5.0"
+    "version": "2.5.1"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "Infinite Campus",
       "source": "./",
       "description": "Infinite Campus (Campus Parent) MCP server for Claude — grades, attendance, assignments, messages, and documents via natural language",
-      "version": "2.5.0",
+      "version": "2.5.1",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "infinitecampus-mcp",
   "displayName": "Infinite Campus",
-  "version": "2.5.0",
+  "version": "2.5.1",
   "description": "Infinite Campus (Campus Parent) MCP server for Claude — grades, attendance, assignments, messages, and documents",
   "author": {
     "name": "Chris Hall",

package/dist/bundle.js

@@ -39045,7 +39045,7 @@ function loadAccount(env = process.env) {
 // package.json
 var package_default = {
   name: "infinitecampus-mcp",
-  version: "2.5.0",
+  version: "2.5.1",
   mcpName: "io.github.chrischall/infinitecampus-mcp",
   description: "Infinite Campus (Campus Parent) MCP server \u2014 multi-district read + message/document write",
   author: "Claude Code (AI) <https://www.anthropic.com/claude>",
@@ -41007,7 +41007,7 @@ try {
 }
 var COMMON = {
   name: "infinitecampus",
-  version: "2.5.0"
+  version: "2.5.1"
   // x-release-please-version
 };
 if (account) {

package/dist/index.js

@@ -57,7 +57,7 @@ catch (e) {
 // actionable stderr message (banner) instead of a crash loop.
 const COMMON = {
     name: 'infinitecampus',
-    version: '2.5.0', // x-release-please-version
+    version: '2.5.1', // x-release-please-version
 };
 if (account) {
     const client = new ICClient(account, { refreshSession });

package/mint.yaml

@@ -64,9 +64,32 @@ state:
     again. Fetchproxy sessions are deliberately NOT cached: they carry no
     identity to bind a record to, so a restored one could belong to a different
     IC account at the same instance.
-# egress: intentionally NOT declared.
-#
-# This server's upstream host is per-deployment, so no fixed allowlist can
-# be correct here. On the isolated tier, allow:
-#   your district's Infinite Campus host, from IC_BASE_URL (districts are each on their own host, e.g. <district>.infinitecampus.org)
-# Everything else in this file applies regardless of which host that is.
+egress:
+  allow:
+    # Only hosts the SERVER process actually fetches. Hosts that appear
+    # solely in a URL this server BUILDS and returns are excluded.
+    #
+    # Every IC call is a plain Node `fetch()` from this process against the
+    # host in IC_BASE_URL (login POST, every API read, document downloads).
+    # The fetchproxy bridge is bootstrap-only: it lifts the signed-in tab's
+    # cookies over the host's loopback bridge port and is not in the request
+    # path, so it dials nothing outbound. The IC host is PER DEPLOYMENT, so
+    # the two entries below cover the populations we know and are
+    # wildcards on purpose — the tenant is the leading label:
+    - '*.infinitecampus.org'   # Infinite Campus-hosted districts (<district>.infinitecampus.org)
+    - '*.ncsis.gov'            # North Carolina's statewide instance (<LEA>.ncsis.gov)
+    #
+    # If your IC_BASE_URL host is neither (a self-hosted district, e.g.
+    # campus.district.k12.example.us), replace these with that host.
+    # Matching is exact per label: no apex is dialled, and a district host
+    # answers directly (no www redirect observed).
+    #
+    # NOTE — this server also reaches hosts determined at RUNTIME, which
+    # cannot appear as literals here:
+    #   - each CUPS-linked district's own host, taken from the
+    #     `districtLoginUrl` the primary district's API returns (the CUPS
+    #     verify.jsp POST and every call to that district go straight there)
+    #   - fully-qualified document URLs the API returns (report cards from
+    #     ic_list_documents are downloaded from wherever they point)
+    # Confirm the concrete host(s) against a live run and add them, or the
+    # fence will block those calls while the primary district keeps working.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "infinitecampus-mcp",
-  "version": "2.5.0",
+  "version": "2.5.1",
   "mcpName": "io.github.chrischall/infinitecampus-mcp",
   "description": "Infinite Campus (Campus Parent) MCP server — multi-district read + message/document write",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/infinitecampus-mcp",
     "source": "github"
   },
-  "version": "2.5.0",
+  "version": "2.5.1",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "infinitecampus-mcp",
-      "version": "2.5.0",
+      "version": "2.5.1",
       "transport": {
         "type": "stdio"
       },