msteams-mcp 0.26.0 → 0.27.0

package/README.md

@@ -1,4 +1,4 @@
-# Teams MCP Server
+# Teams MCP Server & CLI
 
 [![CI](https://github.com/m0nkmaster/msteams-mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/m0nkmaster/msteams-mcp/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)

package/dist/auth/session-store.d.ts

@@ -83,5 +83,10 @@ export declare function clearTokenCache(): void;
 /**
  * Gets the Teams origin from session state.
  * Checks multiple known Teams domains to support government clouds.
+ *
+ * Prefers an origin that has a SubstrateSearch token so Outlook/email and
+ * Substrate search keep working when both teams.cloud.microsoft and
+ * teams.microsoft.com are present in the saved session (common after the
+ * New Teams host migration).
  */
 export declare function getTeamsOrigin(state: SessionState): SessionState['origins'][number] | null;

package/dist/auth/session-store.js

@@ -208,18 +208,45 @@ export function clearTokenCache() {
  * Used to find the correct origin in session state.
  */
 const TEAMS_ORIGINS = [
-    'https://teams.microsoft.com', // Commercial
+    'https://teams.cloud.microsoft', // New Teams URL (often holds SubstrateSearch tokens)
+    'https://teams.microsoft.com', // Commercial legacy
     'https://teams.microsoft.us', // GCC-High
     'https://dod.teams.microsoft.us', // DoD
-    'https://teams.cloud.microsoft', // New Teams URL
 ];
+/**
+ * Returns true if localStorage has a SubstrateSearch MSAL token entry.
+ */
+function hasSubstrateSearchToken(localStorage) {
+    for (const item of localStorage ?? []) {
+        try {
+            const entry = JSON.parse(item.value);
+            if (entry.target?.includes('SubstrateSearch') &&
+                typeof entry.secret === 'string' &&
+                entry.secret.startsWith('ey')) {
+                return true;
+            }
+        }
+        catch {
+            // ignore non-JSON localStorage values
+        }
+    }
+    return false;
+}
 /**
  * Gets the Teams origin from session state.
  * Checks multiple known Teams domains to support government clouds.
+ *
+ * Prefers an origin that has a SubstrateSearch token so Outlook/email and
+ * Substrate search keep working when both teams.cloud.microsoft and
+ * teams.microsoft.com are present in the saved session (common after the
+ * New Teams host migration).
  */
 export function getTeamsOrigin(state) {
     if (!state.origins)
         return null;
+    const withSubstrate = state.origins.find(o => hasSubstrateSearchToken(o.localStorage));
+    if (withSubstrate)
+        return withSubstrate;
     // Try known Teams origins in priority order
     for (const knownOrigin of TEAMS_ORIGINS) {
         const origin = state.origins.find(o => o.origin === knownOrigin);

package/dist/auth/session-store.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for getTeamsOrigin — especially New Teams (teams.cloud.microsoft)
+ * SubstrateSearch token selection when multiple origins are present.
+ */
+export {};

package/dist/auth/session-store.test.js

@@ -0,0 +1,69 @@
+/**
+ * Tests for getTeamsOrigin — especially New Teams (teams.cloud.microsoft)
+ * SubstrateSearch token selection when multiple origins are present.
+ */
+import { describe, it, expect } from 'vitest';
+import { getTeamsOrigin } from './session-store.js';
+function makeOrigin(origin, localStorage = []) {
+    return { origin, localStorage };
+}
+function makeSubstrateEntry(target = 'https://substrate.office.com/SubstrateSearch-Internal.ReadWrite') {
+    return {
+        name: 'msal-substrate-token',
+        value: JSON.stringify({
+            credentialType: 'AccessToken',
+            target,
+            // JWT-shaped secret (header.payload.sig) — extractor only checks prefix
+            secret: 'eyJhbGciOiJub25lIn0.eyJzdWIiOiJ0ZXN0In0.sig',
+        }),
+    };
+}
+function makeChatSvcEntry() {
+    return {
+        name: 'msal-chatsvc-token',
+        value: JSON.stringify({
+            credentialType: 'AccessToken',
+            target: 'https://chatsvcagg.teams.microsoft.com/.default',
+            secret: 'eyJhbGciOiJub25lIn0.eyJzdWIiOiJjaGF0In0.sig',
+        }),
+    };
+}
+describe('getTeamsOrigin', () => {
+    it('prefers the origin that holds a SubstrateSearch token', () => {
+        const state = {
+            cookies: [],
+            origins: [
+                makeOrigin('https://teams.microsoft.com', [makeChatSvcEntry()]),
+                makeOrigin('https://teams.cloud.microsoft', [makeSubstrateEntry()]),
+            ],
+        };
+        const chosen = getTeamsOrigin(state);
+        expect(chosen?.origin).toBe('https://teams.cloud.microsoft');
+    });
+    it('falls back to teams.cloud.microsoft when no Substrate token exists', () => {
+        const state = {
+            cookies: [],
+            origins: [
+                makeOrigin('https://teams.microsoft.com', [makeChatSvcEntry()]),
+                makeOrigin('https://teams.cloud.microsoft', [makeChatSvcEntry()]),
+            ],
+        };
+        const chosen = getTeamsOrigin(state);
+        expect(chosen?.origin).toBe('https://teams.cloud.microsoft');
+    });
+    it('returns teams.microsoft.com when it is the only known origin', () => {
+        const state = {
+            cookies: [],
+            origins: [makeOrigin('https://teams.microsoft.com', [makeChatSvcEntry()])],
+        };
+        const chosen = getTeamsOrigin(state);
+        expect(chosen?.origin).toBe('https://teams.microsoft.com');
+    });
+    it('returns null when no Teams origins are present', () => {
+        const state = {
+            cookies: [],
+            origins: [makeOrigin('https://login.microsoftonline.com', [])],
+        };
+        expect(getTeamsOrigin(state)).toBeNull();
+    });
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "msteams-mcp",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "description": "MCP server for Microsoft Teams - search messages, send replies, manage favourites",
   "type": "module",
   "main": "dist/index.js",