msteams-mcp 0.22.3 → 0.23.1

package/dist/api/calendar-api.js

@@ -7,8 +7,7 @@ import { httpRequest } from '../utils/http.js';
 import { CALENDAR_API, getTeamsHeaders } from '../utils/api-config.js';
 import { ok, err } from '../types/result.js';
 import { ErrorCode, createError } from '../types/errors.js';
-import { requireCalendarAuth } from '../utils/auth-guards.js';
-import { extractRegionConfig } from '../auth/token-extractor.js';
+import { requireSkypeSpacesAuth, getRegionConfig } from '../utils/auth-guards.js';
 import { DEFAULT_MEETING_LIMIT, DEFAULT_MEETING_DAYS_AHEAD, } from '../constants.js';
 // ─────────────────────────────────────────────────────────────────────────────
 // Helpers
@@ -119,13 +118,12 @@ function getSelectFields() {
  * @returns List of meetings
  */
 export async function getCalendarView(options = {}) {
-    const authResult = requireCalendarAuth();
+    const authResult = requireSkypeSpacesAuth();
     if (!authResult.ok) {
         return authResult;
     }
     const { skypeToken, spacesToken } = authResult.value;
-    // Get the user's region/partition from session discovery config
-    const regionConfig = extractRegionConfig();
+    const regionConfig = getRegionConfig();
     if (!regionConfig) {
         return err(createError(ErrorCode.AUTH_REQUIRED, 'Could not determine region. Please run teams_login to authenticate.', { suggestions: ['Call teams_login to authenticate'] }));
     }
@@ -135,7 +133,7 @@ export async function getCalendarView(options = {}) {
     defaultEnd.setDate(defaultEnd.getDate() + DEFAULT_MEETING_DAYS_AHEAD);
     const startDate = options.startDate || now.toISOString();
     const endDate = options.endDate || defaultEnd.toISOString();
-    const limit = options.limit || DEFAULT_MEETING_LIMIT;
+    const limit = options.limit ?? DEFAULT_MEETING_LIMIT;
     // Build query parameters
     const params = new URLSearchParams({
         startDate,

package/dist/api/chatsvc-activity.d.ts

@@ -43,7 +43,11 @@ export interface GetActivityResult {
 /**
  * Gets the activity feed (notifications) for the current user.
  * Includes mentions, reactions, replies, and other notifications.
+ *
+ * @param options.limit - Maximum items to return (default: 50, max: 200)
+ * @param options.syncState - Pagination token from previous response for next page
  */
 export declare function getActivityFeed(options?: {
     limit?: number;
+    syncState?: string;
 }): Promise<Result<GetActivityResult>>;

package/dist/api/chatsvc-activity.js

@@ -43,6 +43,9 @@ function detectActivityType(msg) {
 /**
  * Gets the activity feed (notifications) for the current user.
  * Includes mentions, reactions, replies, and other notifications.
+ *
+ * @param options.limit - Maximum items to return (default: 50, max: 200)
+ * @param options.syncState - Pagination token from previous response for next page
  */
 export async function getActivityFeed(options = {}) {
     const authResult = requireMessageAuthWithConfig();
@@ -53,6 +56,9 @@ export async function getActivityFeed(options = {}) {
     const limit = options.limit ?? DEFAULT_ACTIVITY_LIMIT;
     let url = CHATSVC_API.activityFeed(region, baseUrl);
     url += `?view=msnp24Equivalent&pageSize=${limit}`;
+    if (options.syncState) {
+        url += `&syncState=${encodeURIComponent(options.syncState)}`;
+    }
     const response = await httpRequest(url, {
         method: 'GET',
         headers: getSkypeAuthHeaders(auth.skypeToken, auth.authToken, baseUrl),
@@ -61,7 +67,18 @@ export async function getActivityFeed(options = {}) {
         return response;
     }
     const rawMessages = response.value.data.messages;
-    const syncState = response.value.data.syncState;
+    // syncState is in _metadata as a full URL — extract just the token
+    const metadata = response.value.data._metadata;
+    let syncState;
+    if (metadata?.syncState) {
+        try {
+            const metaUrl = new URL(metadata.syncState);
+            syncState = metaUrl.searchParams.get('syncState') ?? undefined;
+        }
+        catch {
+            syncState = metadata.syncState;
+        }
+    }
     if (!Array.isArray(rawMessages)) {
         return ok({
             activities: [],

package/dist/api/chatsvc-messaging.d.ts

@@ -48,6 +48,13 @@ export interface DeleteMessageResult {
     messageId: string;
     conversationId: string;
 }
+/** A mention to include in a message. */
+export interface Mention {
+    /** The user's MRI (e.g., '8:orgid:uuid') or tag MRI (e.g., 'tag:abc123'). */
+    mri: string;
+    /** Display name to show for the mention. */
+    displayName: string;
+}
 /** Options for sending a message. */
 export interface SendMessageOptions {
     /**
@@ -177,3 +184,23 @@ export declare function getOneOnOneChatId(otherUserIdentifier: string): Result<G
  * ```
  */
 export declare function createGroupChat(memberIdentifiers: string[], topic?: string): Promise<Result<CreateGroupChatResult>>;
+/**
+ * Builds the HTML for a single mention.
+ *
+ * Tag mentions use a span-only format; person mentions include a readonly wrapper.
+ */
+export declare function buildMentionHtml(displayName: string, itemId: number, mri: string): string;
+/**
+ * Builds the mentions property array for the API request.
+ *
+ * Tag mentions use mentionType 'tag' with the raw tag ID (without 'tag:' prefix).
+ */
+export declare function buildMentionsProperty(mentions: Mention[]): string;
+/**
+ * Parses content for both mentions @[Name](mri) and links [text](url).
+ * Processes them in a single pass to avoid escaping conflicts.
+ */
+export declare function parseContentWithMentionsAndLinks(content: string): {
+    html: string;
+    mentions: Mention[];
+};

package/dist/api/chatsvc-messaging.js

@@ -13,6 +13,14 @@ import { requireMessageAuth, requireMessageAuthWithConfig, getTeamsBaseUrl, getT
 import { stripHtml, extractLinks, buildMessageLink, buildOneOnOneConversationId, extractObjectId, markdownToTeamsHtml, escapeHtmlChars } from '../utils/parsers.js';
 import { SELF_CHAT_ID, MRI_ORGID_PREFIX } from '../constants.js';
 import { formatHumanReadableDate } from './chatsvc-common.js';
+/** Returns true if the MRI refers to a channel tag (e.g., 'tag:abc123'). */
+function isTagMention(mri) {
+    return mri.startsWith('tag:');
+}
+/** Returns the actual MRI to send in the API payload (strips 'tag:' prefix for tags). */
+function getActualMri(mri) {
+    return isTagMention(mri) ? mri.substring(4) : mri;
+}
 // ─────────────────────────────────────────────────────────────────────────────
 // Message Sending
 // ─────────────────────────────────────────────────────────────────────────────
@@ -34,8 +42,7 @@ export async function sendMessage(conversationId, content, options = {}) {
     const { auth, region, baseUrl } = authResult.value;
     const { replyToMessageId } = options;
     const displayName = getUserDisplayName() || 'User';
-    // Generate unique message ID
-    const clientMessageId = Date.now().toString();
+    const clientMessageId = crypto.randomUUID();
     // Process content: handle mentions, links, and markdown formatting.
     // Always convert through markdown→HTML pipeline (never pass user content through
     // without sanitization, as Teams requires proper block-level wrapping like <p> tags)
@@ -618,19 +625,27 @@ function timestampFromIdOrNow(id) {
 }
 /**
  * Builds the HTML for a single mention.
+ *
+ * Tag mentions use a span-only format; person mentions include a readonly wrapper.
  */
-function buildMentionHtml(displayName, itemId) {
-    return `<readonly class="skipProofing" itemtype="http://schema.skype.com/Mention" contenteditable="false" spellcheck="false"><span itemtype="http://schema.skype.com/Mention" itemscope itemid="${itemId}">${escapeHtmlChars(displayName)}</span></readonly>`;
+export function buildMentionHtml(displayName, itemId, mri) {
+    const spanHtml = `<span itemtype="http://schema.skype.com/Mention" itemscope itemid="${itemId}">${escapeHtmlChars(displayName)}</span>`;
+    if (isTagMention(mri)) {
+        return spanHtml;
+    }
+    return `<readonly class="skipProofing" itemtype="http://schema.skype.com/Mention" contenteditable="false" spellcheck="false">${spanHtml}</readonly>`;
 }
 /**
  * Builds the mentions property array for the API request.
+ *
+ * Tag mentions use mentionType 'tag' with the raw tag ID (without 'tag:' prefix).
  */
-function buildMentionsProperty(mentions) {
+export function buildMentionsProperty(mentions) {
     const mentionObjects = mentions.map((mention, index) => ({
         '@type': 'http://schema.skype.com/Mention',
         'itemid': String(index),
-        'mri': mention.mri,
-        'mentionType': 'person',
+        'mri': getActualMri(mention.mri),
+        'mentionType': isTagMention(mention.mri) ? 'tag' : 'person',
         'displayName': mention.displayName,
     }));
     return JSON.stringify(mentionObjects);
@@ -639,7 +654,7 @@ function buildMentionsProperty(mentions) {
  * Parses content for both mentions @[Name](mri) and links [text](url).
  * Processes them in a single pass to avoid escaping conflicts.
  */
-function parseContentWithMentionsAndLinks(content) {
+export function parseContentWithMentionsAndLinks(content) {
     // Patterns for mentions and links
     // Note: Link pattern uses [^)\s] to reject URLs with spaces
     const mentionPattern = /@\[([^\]]+)\]\(([^)]+)\)/g;
@@ -684,7 +699,7 @@ function parseContentWithMentionsAndLinks(content) {
         let html;
         if (m.type === 'mention') {
             mentions.push({ mri: m.target, displayName: m.text });
-            html = buildMentionHtml(m.text, mentionId);
+            html = buildMentionHtml(m.text, mentionId, m.target);
             mentionId++;
         }
         else {

package/dist/api/chatsvc-messaging.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Unit tests for mention and content parsing in chatsvc-messaging.
+ *
+ * Tests the tag vs person mention differentiation, HTML generation,
+ * and mentions property serialisation.
+ */
+export {};

package/dist/api/chatsvc-messaging.test.js

@@ -0,0 +1,129 @@
+/**
+ * Unit tests for mention and content parsing in chatsvc-messaging.
+ *
+ * Tests the tag vs person mention differentiation, HTML generation,
+ * and mentions property serialisation.
+ */
+import { describe, it, expect } from 'vitest';
+import { buildMentionHtml, buildMentionsProperty, parseContentWithMentionsAndLinks, } from './chatsvc-messaging.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// buildMentionHtml
+// ─────────────────────────────────────────────────────────────────────────────
+describe('buildMentionHtml', () => {
+    it('wraps person mentions in readonly + span', () => {
+        const html = buildMentionHtml('Alice', 0, '8:orgid:abc-123');
+        expect(html).toContain('<readonly');
+        expect(html).toContain('skipProofing');
+        expect(html).toContain('<span');
+        expect(html).toContain('itemid="0"');
+        expect(html).toContain('Alice');
+    });
+    it('uses span-only format for tag mentions', () => {
+        const html = buildMentionHtml('engineering', 0, 'tag:txk8gOnia');
+        expect(html).not.toContain('<readonly');
+        expect(html).toContain('<span');
+        expect(html).toContain('itemid="0"');
+        expect(html).toContain('engineering');
+    });
+    it('escapes HTML characters in display name', () => {
+        const html = buildMentionHtml('O\'Brien & Co <team>', 1, 'tag:abc');
+        expect(html).toContain('&amp;');
+        expect(html).toContain('&lt;');
+        expect(html).toContain('&gt;');
+        expect(html).not.toContain('& ');
+        expect(html).not.toContain('<team>');
+    });
+    it('uses correct itemId for sequential mentions', () => {
+        const first = buildMentionHtml('Tag1', 0, 'tag:a');
+        const second = buildMentionHtml('Person', 1, '8:orgid:xyz');
+        expect(first).toContain('itemid="0"');
+        expect(second).toContain('itemid="1"');
+    });
+});
+// ─────────────────────────────────────────────────────────────────────────────
+// buildMentionsProperty
+// ─────────────────────────────────────────────────────────────────────────────
+describe('buildMentionsProperty', () => {
+    it('sets mentionType "person" for regular MRIs', () => {
+        const result = JSON.parse(buildMentionsProperty([
+            { mri: '8:orgid:abc-123', displayName: 'Alice' },
+        ]));
+        expect(result).toHaveLength(1);
+        expect(result[0].mentionType).toBe('person');
+        expect(result[0].mri).toBe('8:orgid:abc-123');
+    });
+    it('sets mentionType "tag" and strips prefix for tag MRIs', () => {
+        const result = JSON.parse(buildMentionsProperty([
+            { mri: 'tag:txk8gOnia', displayName: 'engineering' },
+        ]));
+        expect(result).toHaveLength(1);
+        expect(result[0].mentionType).toBe('tag');
+        expect(result[0].mri).toBe('txk8gOnia');
+        expect(result[0].displayName).toBe('engineering');
+    });
+    it('handles mixed person and tag mentions', () => {
+        const result = JSON.parse(buildMentionsProperty([
+            { mri: '8:orgid:abc', displayName: 'Alice' },
+            { mri: 'tag:xyz', displayName: 'my-tag' },
+        ]));
+        expect(result).toHaveLength(2);
+        expect(result[0].mentionType).toBe('person');
+        expect(result[0].mri).toBe('8:orgid:abc');
+        expect(result[1].mentionType).toBe('tag');
+        expect(result[1].mri).toBe('xyz');
+    });
+    it('assigns sequential itemids', () => {
+        const result = JSON.parse(buildMentionsProperty([
+            { mri: '8:orgid:a', displayName: 'A' },
+            { mri: 'tag:b', displayName: 'B' },
+            { mri: '8:orgid:c', displayName: 'C' },
+        ]));
+        expect(result[0].itemid).toBe('0');
+        expect(result[1].itemid).toBe('1');
+        expect(result[2].itemid).toBe('2');
+    });
+});
+// ─────────────────────────────────────────────────────────────────────────────
+// parseContentWithMentionsAndLinks - tag mentions
+// ─────────────────────────────────────────────────────────────────────────────
+describe('parseContentWithMentionsAndLinks', () => {
+    it('parses a person mention', () => {
+        const { html, mentions } = parseContentWithMentionsAndLinks('Hey @[Alice](8:orgid:abc), check this');
+        expect(mentions).toHaveLength(1);
+        expect(mentions[0].mri).toBe('8:orgid:abc');
+        expect(html).toContain('<readonly');
+        expect(html).toContain('Alice');
+    });
+    it('parses a tag mention with span-only HTML', () => {
+        const { html, mentions } = parseContentWithMentionsAndLinks('Hey @[engineering](tag:txk8gOnia), please review');
+        expect(mentions).toHaveLength(1);
+        expect(mentions[0].mri).toBe('tag:txk8gOnia');
+        expect(mentions[0].displayName).toBe('engineering');
+        expect(html).not.toContain('<readonly');
+        expect(html).toContain('<span');
+        expect(html).toContain('engineering');
+    });
+    it('handles mixed person and tag mentions in order', () => {
+        const { html, mentions } = parseContentWithMentionsAndLinks('@[Alice](8:orgid:abc) and @[my-tag](tag:xyz123) - thoughts?');
+        expect(mentions).toHaveLength(2);
+        expect(mentions[0].mri).toBe('8:orgid:abc');
+        expect(mentions[1].mri).toBe('tag:xyz123');
+        // Person mention should have readonly wrapper
+        expect(html).toContain('<readonly');
+        // Both names present
+        expect(html).toContain('Alice');
+        expect(html).toContain('my-tag');
+    });
+    it('returns markdown-converted HTML when no mentions or links', () => {
+        const { html, mentions } = parseContentWithMentionsAndLinks('Just plain text');
+        expect(mentions).toHaveLength(0);
+        expect(html).toContain('Just plain text');
+    });
+    it('handles links alongside tag mentions', () => {
+        const { html, mentions } = parseContentWithMentionsAndLinks('@[my-tag](tag:abc) see [docs](https://example.com)');
+        expect(mentions).toHaveLength(1);
+        expect(mentions[0].mri).toBe('tag:abc');
+        expect(html).toContain('<a href="https://example.com">docs</a>');
+        expect(html).toContain('my-tag');
+    });
+});

package/dist/api/chatsvc-readstatus.d.ts

@@ -37,6 +37,9 @@ export declare function markAsRead(conversationId: string, messageId: string): P
 /**
  * Gets unread count for a conversation by comparing consumption horizon
  * with recent messages.
+ *
+ * If the consumption horizon endpoint fails, falls back to message-only
+ * checking (reports recent messages from others without precise read position).
  */
 export declare function getUnreadStatus(conversationId: string): Promise<Result<{
     conversationId: string;
@@ -44,3 +47,26 @@ export declare function getUnreadStatus(conversationId: string): Promise<Result<
     lastReadMessageId?: string;
     latestMessageId?: string;
 }>>;
+/** An unread conversation from the bulk check. */
+export interface UnreadConversation {
+    conversationId: string;
+    displayName?: string;
+    isChannel: boolean;
+    lastMessageFrom?: string;
+    lastMessageTime: number;
+    readUpTo: number;
+}
+/** Result of the bulk unread conversations check. */
+export interface UnreadConversationsResult {
+    unreadChats: UnreadConversation[];
+    unreadChannels: UnreadConversation[];
+    totalChecked: number;
+}
+/**
+ * Gets all unread conversations in a single API call.
+ *
+ * Uses the conversations list endpoint which returns each conversation's
+ * consumptionhorizon inline, avoiding N+1 API calls. Compares the last
+ * message timestamp against the read horizon to determine unread state.
+ */
+export declare function getUnreadConversations(): Promise<Result<UnreadConversationsResult>>;

package/dist/api/chatsvc-readstatus.js

@@ -86,19 +86,19 @@ export async function markAsRead(conversationId, messageId) {
 /**
  * Gets unread count for a conversation by comparing consumption horizon
  * with recent messages.
+ *
+ * If the consumption horizon endpoint fails, falls back to message-only
+ * checking (reports recent messages from others without precise read position).
  */
 export async function getUnreadStatus(conversationId) {
-    // Get consumption horizon
+    // Get consumption horizon — non-fatal if it fails
     const horizonResult = await getConsumptionHorizon(conversationId);
-    if (!horizonResult.ok) {
-        return horizonResult;
-    }
+    const lastReadId = horizonResult.ok ? horizonResult.value.lastReadMessageId : undefined;
     // Get recent messages
     const messagesResult = await getThreadMessages(conversationId, { limit: 50 });
     if (!messagesResult.ok) {
         return messagesResult;
     }
-    const lastReadId = horizonResult.value.lastReadMessageId;
     const messages = messagesResult.value.messages;
     // Count messages after the last read position
     let unreadCount = 0;
@@ -125,3 +125,83 @@ export async function getUnreadStatus(conversationId) {
         latestMessageId,
     });
 }
+/**
+ * Gets all unread conversations in a single API call.
+ *
+ * Uses the conversations list endpoint which returns each conversation's
+ * consumptionhorizon inline, avoiding N+1 API calls. Compares the last
+ * message timestamp against the read horizon to determine unread state.
+ */
+export async function getUnreadConversations() {
+    const authResult = requireMessageAuthWithConfig();
+    if (!authResult.ok) {
+        return authResult;
+    }
+    const { auth, region, baseUrl } = authResult.value;
+    const url = CHATSVC_API.conversations(region, baseUrl);
+    const response = await httpRequest(url, {
+        method: 'GET',
+        headers: getSkypeAuthHeaders(auth.skypeToken, auth.authToken, baseUrl),
+    });
+    if (!response.ok) {
+        return response;
+    }
+    const data = response.value.data;
+    const convs = data?.conversations || [];
+    const unreadChats = [];
+    const unreadChannels = [];
+    for (const raw of convs) {
+        const c = raw;
+        const props = (c.properties || {});
+        const tp = (c.threadProperties || {});
+        const lastMsg = c.lastMessage;
+        if (!lastMsg?.id)
+            continue;
+        const lastMsgTime = parseInt(lastMsg.id, 10);
+        const fromMe = lastMsg.from?.includes(auth.userMri);
+        const isChannel = tp.threadType === 'channel' || c.id.includes('@thread.tacv2');
+        const displayName = tp.topic || lastMsg.imdisplayname;
+        const horizon = props.consumptionhorizon;
+        if (!horizon) {
+            // Never-opened conversation — only flag DMs where last message isn't from us
+            if (fromMe || isChannel)
+                continue;
+            unreadChats.push({
+                conversationId: c.id,
+                displayName,
+                isChannel: false,
+                lastMessageFrom: lastMsg.imdisplayname,
+                lastMessageTime: lastMsgTime,
+                readUpTo: 0,
+            });
+            continue;
+        }
+        const readUpTo = parseInt(horizon.split(';')[0], 10);
+        if (lastMsgTime <= readUpTo)
+            continue; // Already read
+        // For channels, preserve original behavior (skip if last msg is ours).
+        // For chats, only skip if read horizon is within 2s of our reply —
+        // a larger gap means unread messages exist before our reply.
+        if (fromMe && (isChannel || (lastMsgTime - readUpTo) < 2000))
+            continue;
+        const entry = {
+            conversationId: c.id,
+            displayName,
+            isChannel,
+            lastMessageFrom: lastMsg.imdisplayname,
+            lastMessageTime: lastMsgTime,
+            readUpTo,
+        };
+        if (isChannel) {
+            unreadChannels.push(entry);
+        }
+        else {
+            unreadChats.push(entry);
+        }
+    }
+    return ok({
+        unreadChats,
+        unreadChannels,
+        totalChecked: convs.length,
+    });
+}

package/dist/api/graph-api.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Microsoft Graph API - Spike for sending messages.
+ *
+ * This is a spike/experiment to test whether we can use the Graph API
+ * with tokens extracted from the Teams browser session (no Azure App
+ * registration required).
+ *
+ * Graph API send message endpoint:
+ * POST https://graph.microsoft.com/v1.0/chats/{chatId}/messages
+ *
+ * Note: Graph API uses a different chat ID format than chatsvc. The
+ * conversationId from Teams (e.g., "19:xxx@thread.v2") should work
+ * directly as the Graph chatId.
+ */
+import { type Result } from '../types/result.js';
+/** Result of sending a message via Graph API. */
+export interface GraphSendMessageResult {
+    /** The Graph-assigned message ID. */
+    id: string;
+    /** When the message was created (ISO 8601). */
+    createdDateTime?: string;
+    /** The web URL for the message (if returned). */
+    webUrl?: string;
+    /** Raw Graph API response for debugging in spike. */
+    _raw?: unknown;
+}
+/**
+ * Sends a message to a Teams chat via the Microsoft Graph API.
+ *
+ * This is a spike to test Graph API access using tokens from the Teams
+ * browser session. The Graph API endpoint is:
+ * POST /v1.0/chats/{chatId}/messages
+ *
+ * For channel messages, the endpoint would be:
+ * POST /v1.0/teams/{teamId}/channels/{channelId}/messages
+ *
+ * @param chatId - The Teams conversation ID (e.g., "19:xxx@thread.v2")
+ * @param content - The message content (plain text or HTML)
+ * @param contentType - "text" for plain text, "html" for HTML (default: "text")
+ */
+export declare function graphSendMessage(chatId: string, content: string, contentType?: 'text' | 'html'): Promise<Result<GraphSendMessageResult>>;
+/**
+ * Sends a message to a Teams channel via the Microsoft Graph API.
+ *
+ * POST /v1.0/teams/{teamId}/channels/{channelId}/messages
+ *
+ * Note: For channels, we need the teamId (group ID) and channelId separately.
+ * This is different from the chatsvc API which uses a single conversationId.
+ *
+ * @param teamId - The team's group ID (GUID)
+ * @param channelId - The channel ID (e.g., "19:xxx@thread.tacv2")
+ * @param content - The message content
+ * @param contentType - "text" for plain text, "html" for HTML (default: "text")
+ */
+export declare function graphSendChannelMessage(teamId: string, channelId: string, content: string, contentType?: 'text' | 'html'): Promise<Result<GraphSendMessageResult>>;