microsoft-graph-client 1.0.32 → 1.0.34

package/dist/types/message.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"message.d.ts","sourceRoot":"","sources":["../../src/types/message.ts"],"names":[],"mappings":"AACA,YAAY,EACV,WAAW,EACX,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,QAAQ,GACT,MAAM,kCAAkC,CAAC;AAM1C,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE;QACL,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,EAAE,mBAAmB,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,SAAS,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE;QACR,aAAa,EAAE,MAAM,CAAC;QACtB,EAAE,EAAE,MAAM,CAAC;QACX,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAE9B,IAAI,CAAC,EAAE;YACL,YAAY,CAAC,EAAE;gBACb,IAAI,CAAC,EAAE,MAAM,CAAC;gBACd,OAAO,CAAC,EAAE,MAAM,CAAC;aAClB,CAAC;SACH,CAAC;QACF,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,eAAe,CAAC,EAAE;YAChB,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,SAAS,CAAC,EAAE,MAAM,CAAC;SACpB,CAAC;QAEF,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE;gBAAE,WAAW,CAAC,EAAE,MAAM,CAAC;gBAAC,KAAK,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;QAChE,cAAc,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE;gBAAE,WAAW,CAAC,EAAE,MAAM,CAAC;gBAAC,KAAK,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;QACrE,eAAe,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC3E,CAAC;CACH;AAMD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,KAAK,GAAG,UAAU,GAAG,OAAO,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB"}
+{"version":3,"file":"message.d.ts","sourceRoot":"","sources":["../../src/types/message.ts"],"names":[],"mappings":"AACA,YAAY,EACV,WAAW,EACX,qBAAqB,EACrB,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,QAAQ,GACT,MAAM,kCAAkC,CAAC;AAM1C,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE;QACL,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,EAAE,mBAAmB,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,SAAS,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE;QACR,aAAa,EAAE,MAAM,CAAC;QACtB,EAAE,EAAE,MAAM,CAAC;QACX,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAE9B,IAAI,CAAC,EAAE;YACL,YAAY,CAAC,EAAE;gBACb,IAAI,CAAC,EAAE,MAAM,CAAC;gBACd,OAAO,CAAC,EAAE,MAAM,CAAC;aAClB,CAAC;SACH,CAAC;QACF,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;;;WAIG;QACH,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,eAAe,CAAC,EAAE;YAChB,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,SAAS,CAAC,EAAE,MAAM,CAAC;SACpB,CAAC;QAEF,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE;gBAAE,WAAW,CAAC,EAAE,MAAM,CAAC;gBAAC,KAAK,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;QAChE,cAAc,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE;gBAAE,WAAW,CAAC,EAAE,MAAM,CAAC;gBAAC,KAAK,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC;QACrE,eAAe,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC3E,CAAC;CACH;AAMD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uGAAuG;IACvG,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,OAAO,kCAAkC,EAAE,WAAW,EAAE,CAAC;IACnE,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;CACvC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+FAA+F;IAC/F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4FAA4F;IAC5F,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,yCAAyC;IACzC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd"}

package/dist/utils/index.d.ts

@@ -1,5 +1,5 @@
 export { markdownToHtml, sanitizeHtml } from './markdown.js';
-export { escapeODataString } from './odata.js';
+export { escapeODataLiteral, escapeODataString, odataFilterValue } from './odata.js';
 export { encodeSharePointUrl } from './sharepoint.js';
 export { extractChatIdFromJoinUrl, extractMeetingInfoFromJoinUrl } from './teams.js';
 export type { MeetingInfo } from './teams.js';

package/dist/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC;AACrF,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC;AACrF,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/utils/index.js

@@ -1,5 +1,5 @@
 export { markdownToHtml, sanitizeHtml } from './markdown.js';
-export { escapeODataString } from './odata.js';
+export { escapeODataLiteral, escapeODataString, odataFilterValue } from './odata.js';
 export { encodeSharePointUrl } from './sharepoint.js';
 export { extractChatIdFromJoinUrl, extractMeetingInfoFromJoinUrl } from './teams.js';
 //# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,MAAM,YAAY,CAAC"}

package/dist/utils/odata.d.ts

@@ -1,17 +1,68 @@
 /**
- * Utilities for working with OData queries
+ * Utilities for building OData query parameter values that the Microsoft Graph
+ * SDK won't mangle.
+ *
+ * There are TWO distinct escaping layers when you put a user-supplied string
+ * inside an OData filter clause that gets sent to Graph as a query parameter:
+ *
+ *   1. OData literal escaping — single quotes inside a string literal must be
+ *      doubled, otherwise the OData parser breaks. This is `escapeODataLiteral`.
+ *
+ *   2. URL encoding of reserved characters — the Microsoft Graph SDK's
+ *      `.filter()` and `.query()` builders DO NOT URL-encode the *value* of
+ *      query parameters. As a result, characters like `&`, `+`, `#`, `?` get
+ *      passed through verbatim and break the URL parsing on the server side.
+ *
+ *      Empirically verified 2026-04-07: a topic filter for `'fm & fd'` failed
+ *      with `Invalid filter clause: There is an unterminated string literal at
+ *      position 28 in 'contains(tolower(topic), 'fm'.` because the SDK sent
+ *      `?$filter=...'fm & fd'...` and the server parsed the `&` as a query
+ *      param separator. See test/probe-encoding.mts for the verification.
+ *
+ * Use `escapeODataLiteral` when you control the URL building yourself (rare).
+ * Use `odataFilterValue` when you're going through the SDK's `.filter()` /
+ * `.query()` methods, which is what every API class in this package does.
+ *
+ * @see https://learn.microsoft.com/en-us/graph/filter-query-parameter
+ */
+/**
+ * Escapes single quotes in an OData string literal.
+ *
+ * Use this only if you are constructing a fully-formed URL yourself and your
+ * URL builder will handle URL encoding separately. In most cases, prefer
+ * `odataFilterValue` which combines both layers.
+ *
+ * @example
+ * escapeODataLiteral("Let's Talk")  // → "Let''s Talk"
  */
+export declare function escapeODataLiteral(value: string): string;
 /**
- * Escapes a string for use in OData filter expressions.
- * Single quotes are escaped by doubling them (' → '').
+ * Prepares a string for safe use as an OData filter value passed through the
+ * Microsoft Graph SDK's `.filter()` builder.
+ *
+ * Applies BOTH escaping layers:
+ *   1. OData literal escape (`'` → `''`)
+ *   2. URL-encode the result so reserved characters don't break the request URL
  *
- * @param value - The string to escape
- * @returns The escaped string safe for OData filters
+ * @example
+ * // Building a topic filter:
+ * const value = odataFilterValue("FM & FD");
+ * client.api('/me/chats').filter(`contains(tolower(topic), '${value}')`).get();
+ * // The SDK sends: ?$filter=contains(tolower(topic), 'fm%20%26%20fd')
  *
  * @example
- * // "Let's Talk" → "Let''s Talk"
- * const escaped = escapeODataString("Let's Talk");
- * const filter = `contains(topic, '${escaped}')`;
+ * // Filtering by a name with an apostrophe:
+ * const value = odataFilterValue("O'Brien");
+ * client.api('/me/chats').filter(`contains(displayName, '${value}')`).get();
+ * // → 'O%27%27Brien' (literal escape gives O''Brien, URL encode gives O%27%27Brien)
+ */
+export declare function odataFilterValue(value: string): string;
+/**
+ * @deprecated Use `escapeODataLiteral` (same behavior) for the literal escape,
+ * or `odataFilterValue` for the combined literal-escape + URL-encode that you
+ * almost always want when going through the Graph SDK builders.
+ *
+ * Kept temporarily for backwards compatibility with the old name.
  */
 export declare function escapeODataString(value: string): string;
 //# sourceMappingURL=odata.d.ts.map

package/dist/utils/odata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"odata.d.ts","sourceRoot":"","sources":["../../src/utils/odata.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvD"}
+{"version":3,"file":"odata.d.ts","sourceRoot":"","sources":["../../src/utils/odata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvD"}

package/dist/utils/odata.js

@@ -1,19 +1,74 @@
 /**
- * Utilities for working with OData queries
+ * Utilities for building OData query parameter values that the Microsoft Graph
+ * SDK won't mangle.
+ *
+ * There are TWO distinct escaping layers when you put a user-supplied string
+ * inside an OData filter clause that gets sent to Graph as a query parameter:
+ *
+ *   1. OData literal escaping — single quotes inside a string literal must be
+ *      doubled, otherwise the OData parser breaks. This is `escapeODataLiteral`.
+ *
+ *   2. URL encoding of reserved characters — the Microsoft Graph SDK's
+ *      `.filter()` and `.query()` builders DO NOT URL-encode the *value* of
+ *      query parameters. As a result, characters like `&`, `+`, `#`, `?` get
+ *      passed through verbatim and break the URL parsing on the server side.
+ *
+ *      Empirically verified 2026-04-07: a topic filter for `'fm & fd'` failed
+ *      with `Invalid filter clause: There is an unterminated string literal at
+ *      position 28 in 'contains(tolower(topic), 'fm'.` because the SDK sent
+ *      `?$filter=...'fm & fd'...` and the server parsed the `&` as a query
+ *      param separator. See test/probe-encoding.mts for the verification.
+ *
+ * Use `escapeODataLiteral` when you control the URL building yourself (rare).
+ * Use `odataFilterValue` when you're going through the SDK's `.filter()` /
+ * `.query()` methods, which is what every API class in this package does.
+ *
+ * @see https://learn.microsoft.com/en-us/graph/filter-query-parameter
  */
 /**
- * Escapes a string for use in OData filter expressions.
- * Single quotes are escaped by doubling them (' → '').
+ * Escapes single quotes in an OData string literal.
  *
- * @param value - The string to escape
- * @returns The escaped string safe for OData filters
+ * Use this only if you are constructing a fully-formed URL yourself and your
+ * URL builder will handle URL encoding separately. In most cases, prefer
+ * `odataFilterValue` which combines both layers.
  *
  * @example
- * // "Let's Talk" → "Let''s Talk"
- * const escaped = escapeODataString("Let's Talk");
- * const filter = `contains(topic, '${escaped}')`;
+ * escapeODataLiteral("Let's Talk")  // → "Let''s Talk"
  */
-export function escapeODataString(value) {
+export function escapeODataLiteral(value) {
     return value.replace(/'/g, "''");
 }
+/**
+ * Prepares a string for safe use as an OData filter value passed through the
+ * Microsoft Graph SDK's `.filter()` builder.
+ *
+ * Applies BOTH escaping layers:
+ *   1. OData literal escape (`'` → `''`)
+ *   2. URL-encode the result so reserved characters don't break the request URL
+ *
+ * @example
+ * // Building a topic filter:
+ * const value = odataFilterValue("FM & FD");
+ * client.api('/me/chats').filter(`contains(tolower(topic), '${value}')`).get();
+ * // The SDK sends: ?$filter=contains(tolower(topic), 'fm%20%26%20fd')
+ *
+ * @example
+ * // Filtering by a name with an apostrophe:
+ * const value = odataFilterValue("O'Brien");
+ * client.api('/me/chats').filter(`contains(displayName, '${value}')`).get();
+ * // → 'O%27%27Brien' (literal escape gives O''Brien, URL encode gives O%27%27Brien)
+ */
+export function odataFilterValue(value) {
+    return encodeURIComponent(escapeODataLiteral(value));
+}
+/**
+ * @deprecated Use `escapeODataLiteral` (same behavior) for the literal escape,
+ * or `odataFilterValue` for the combined literal-escape + URL-encode that you
+ * almost always want when going through the Graph SDK builders.
+ *
+ * Kept temporarily for backwards compatibility with the old name.
+ */
+export function escapeODataString(value) {
+    return escapeODataLiteral(value);
+}
 //# sourceMappingURL=odata.js.map

package/dist/utils/odata.js.map

@@ -1 +1 @@
-{"version":3,"file":"odata.js","sourceRoot":"","sources":["../../src/utils/odata.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC"}
+{"version":3,"file":"odata.js","sourceRoot":"","sources":["../../src/utils/odata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,kBAAkB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "microsoft-graph-client",
-  "version": "1.0.32",
+  "version": "1.0.34",
   "publish": true,
   "description": "TypeScript client library for Microsoft Graph API with built-in authentication",
   "type": "module",