fix(microsoft): zero-drift fixes from verification — dedicated subBlock ids, restored legacy outputs and caps

Author: waleedlatif1

apps/docs/content/docs/integrations/microsoft_dataverse.mdx

@@ -346,7 +346,7 @@ Query and list records from a Microsoft Dataverse table. Supports OData query op
 | `expand` | string | No | Navigation properties to expand \(OData $expand\) |
 | `count` | string | No | Set to "true" to include total record count in response \(OData $count\) |
 | `pageSize` | number | No | Records per page \(Prefer: odata.maxpagesize, 1-5000\). Defaults to 100 when Max Results is not set. Dataverse ignores $top when a page size is sent. When following nextLink, pass the same pageSize used for the first page, as Dataverse requires. |
-| `nextLink` | string | No | nextLink returned by a previous page. When set, the other query options are ignored and the same page size must be used. |
+| `nextLink` | string | No | nextLink returned by a previous page. When set, the other query options are ignored and the same page size must be used. It is empty on the last page; stop when empty. |
 
 #### Output
 

apps/docs/content/docs/integrations/microsoft_teams.mdx

@@ -112,6 +112,8 @@ Write or update content in a Microsoft Teams chat
 | `createdTime` | string | Timestamp when message was created |
 | `url` | string | Web URL to the message |
 | `updatedContent` | boolean | Whether content was successfully updated |
+| `content` | string | Content of the sent message |
+| `attachmentCount` | number | Number of attachments sent with the message |
 | `files` | file[] | Files attached to the message |
 
 </ReferenceDetails>
@@ -129,7 +131,7 @@ Read content from a Microsoft Teams channel
 | `teamId` | string | Yes | The ID of the team to read from \(e.g., "12345678-abcd-1234-efgh-123456789012" - a GUID from team listings\) |
 | `channelId` | string | Yes | The ID of the channel to read from \(e.g., "19:abc123def456@thread.tacv2" - from channel listings\) |
 | `includeAttachments` | boolean | No | Download and include message attachments \(hosted contents\) into storage |
-| `includeReplies` | boolean | No | Include thread replies for each root message \(Graph returns up to 1,000 replies per message\) |
+| `includeReplies` | boolean | No | Include thread replies for each root message \(Graph caps the replies returned per message; hasMoreReplies is true when more exist\) |
 | `top` | number | No | Number of root messages to return per page \(1-50, default 50\) |
 | `pageToken` | string | No | Page token from a previous read \(nextPageToken\) to fetch the next page |
 
@@ -178,6 +180,8 @@ Write or send a message to a Microsoft Teams channel
 | `createdTime` | string | Timestamp when message was created |
 | `url` | string | Web URL to the message |
 | `updatedContent` | boolean | Whether content was successfully updated |
+| `content` | string | Content of the sent message |
+| `attachmentCount` | number | Number of attachments sent with the message |
 | `files` | file[] | Files attached to the message |
 
 </ReferenceDetails>

apps/docs/content/docs/integrations/onedrive.mdx

@@ -52,7 +52,7 @@ Upload a file to OneDrive
 | `content` | string | No | The text content to upload \(if no file is provided\) |
 | `mimeType` | string | No | The MIME type of the file to create \(e.g., text/plain for .txt, application/vnd.openxmlformats-officedocument.spreadsheetml.sheet for .xlsx\) |
 | `folderId` | string | No | Folder ID to upload the file to \(e.g., "01BYE5RZ6QN3ZWBTUFOFD3GSPGOHDJD36M"\) |
-| `conflictBehavior` | string | No | What to do when a file with the same name exists: "replace" \(Graph default\), "rename", or "fail" |
+| `conflictBehavior` | string | No | What to do when a file with the same name exists: "replace" \(used when unset\), "rename", or "fail" |
 
 #### Output
 

apps/sim/blocks/blocks/azure_devops.ts

@@ -195,15 +195,31 @@ export const AzureDevOpsBlock: BlockConfig = {
       title: 'Max Results',
       type: 'short-input',
       placeholder: '50',
-      condition: {
-        field: 'operation',
-        value: [
-          'azure_devops_list_builds',
-          'azure_devops_list_pipelines',
-          'azure_devops_query_work_items',
-          'azure_devops_get_comments',
-        ],
-      },
+      condition: { field: 'operation', value: 'azure_devops_list_builds' },
+      mode: 'advanced',
+    },
+    {
+      id: 'pipelinesTop',
+      title: 'Max Results',
+      type: 'short-input',
+      placeholder: 'Server default when empty',
+      condition: { field: 'operation', value: 'azure_devops_list_pipelines' },
+      mode: 'advanced',
+    },
+    {
+      id: 'queryTop',
+      title: 'Max Results',
+      type: 'short-input',
+      placeholder: 'Server default when empty',
+      condition: { field: 'operation', value: 'azure_devops_query_work_items' },
+      mode: 'advanced',
+    },
+    {
+      id: 'commentsTop',
+      title: 'Max Results',
+      type: 'short-input',
+      placeholder: 'Server default when empty',
+      condition: { field: 'operation', value: 'azure_devops_get_comments' },
       mode: 'advanced',
     },
     {
@@ -606,10 +622,15 @@ export const AzureDevOpsBlock: BlockConfig = {
       title: 'Iteration Path',
       type: 'short-input',
       placeholder: 'e.g. MyProject\\Sprint 1',
-      condition: {
-        field: 'operation',
-        value: ['azure_devops_create_work_item', 'azure_devops_update_work_item'],
-      },
+      condition: { field: 'operation', value: 'azure_devops_create_work_item' },
+      mode: 'advanced',
+    },
+    {
+      id: 'updateIterationPath',
+      title: 'Iteration Path',
+      type: 'short-input',
+      placeholder: 'e.g. MyProject\\Sprint 2',
+      condition: { field: 'operation', value: 'azure_devops_update_work_item' },
       mode: 'advanced',
     },
     {
@@ -688,7 +709,7 @@ export const AzureDevOpsBlock: BlockConfig = {
           case 'azure_devops_list_pipelines':
             return {
               ...base,
-              top: params.top ? Number(params.top) : undefined,
+              top: params.pipelinesTop ? Number(params.pipelinesTop) : undefined,
               continuationToken: (params.continuationToken as string) || undefined,
             }
           case 'azure_devops_get_pipeline':
@@ -734,7 +755,7 @@ export const AzureDevOpsBlock: BlockConfig = {
             return {
               ...base,
               wiqlQuery: params.wiqlQuery as string,
-              top: params.top ? Number(params.top) : undefined,
+              top: params.queryTop ? Number(params.queryTop) : undefined,
             }
           case 'azure_devops_get_work_item':
             return { ...base, workItemId: Number(params.workItemId) }
@@ -774,7 +795,7 @@ export const AzureDevOpsBlock: BlockConfig = {
               completedWork: params.completedWork ? Number(params.completedWork) : undefined,
               description: (params.description as string) || undefined,
               areaPath: (params.areaPath as string) || undefined,
-              iterationPath: (params.iterationPath as string) || undefined,
+              iterationPath: (params.updateIterationPath as string) || undefined,
               tags: (params.tags as string) || undefined,
             }
           case 'azure_devops_add_comment':
@@ -788,7 +809,7 @@ export const AzureDevOpsBlock: BlockConfig = {
             return {
               ...base,
               workItemId: Number(params.workItemId),
-              top: params.top ? Number(params.top) : undefined,
+              top: params.commentsTop ? Number(params.commentsTop) : undefined,
               continuationToken: (params.continuationToken as string) || undefined,
             }
           default:
@@ -807,6 +828,9 @@ export const AzureDevOpsBlock: BlockConfig = {
     runId: { type: 'number', description: 'Pipeline run ID' },
     resultFilter: { type: 'string', description: 'Build result filter' },
     top: { type: 'number', description: 'Maximum number of results' },
+    pipelinesTop: { type: 'number', description: 'Maximum pipelines to return (list pipelines)' },
+    queryTop: { type: 'number', description: 'Maximum work items to return (query work items)' },
+    commentsTop: { type: 'number', description: 'Maximum comments to return (get comments)' },
     buildId: { type: 'number', description: 'Build ID' },
     logId: { type: 'number', description: 'Build log ID' },
     fromBuildId: { type: 'number', description: 'Starting build ID for work item range' },
@@ -847,6 +871,7 @@ export const AzureDevOpsBlock: BlockConfig = {
     },
     areaPath: { type: 'string', description: 'Area path' },
     iterationPath: { type: 'string', description: 'Iteration path' },
+    updateIterationPath: { type: 'string', description: 'New iteration path (update work item)' },
     tags: { type: 'string', description: 'Semicolon-separated tags' },
     state: {
       type: 'string',

apps/sim/blocks/blocks/microsoft_ad.ts

@@ -1182,7 +1182,7 @@ export const MicrosoftAdBlockMeta = {
       description:
         'Disable an Azure AD account and strip its group memberships when someone leaves. Use for secure offboarding.',
       content:
-        '# Offboard User\n\nRevoke access for a departing user.\n\n## Steps\n1. Resolve the account with Get User by user principal name or id.\n2. Use Update User to set Account Enabled to No so the user can no longer sign in.\n3. Use List User Memberships with the user id to enumerate everything the user belongs to directly.\n4. For each membership whose odataType is #microsoft.graph.group, call Remove Group Member with the user id. For each one whose odataType is #microsoft.graph.directoryRole, call Remove Directory Role Member with the role id and user id. List any other types (such as administrative units) for manual follow-up.\n\n## Output\nReturn the disabled user id and the groups and directory roles the user was removed from. Note any group where removal failed so it can be handled manually, and recommend writing the action to an audit record.',
+        '# Offboard User\n\nRevoke access for a departing user.\n\n## Steps\n1. Resolve the account with Get User by user principal name or id.\n2. Use Update User to set Account Enabled to No so the user can no longer sign in.\n3. Use List User Memberships with the user id to enumerate everything the user belongs to directly.\n4. For each membership whose odataType is #microsoft.graph.group, call Remove Group Member with the user id. For each one whose odataType is #microsoft.graph.directoryRole, call Remove Directory Role Member with the role id and user id. List any other types (such as administrative units) for manual follow-up.\n\n## Output\nReturn the disabled user id and the groups and directory roles the user was removed from. Note any group or role where removal failed so it can be handled manually, and recommend writing the action to an audit record.',
     },
     {
       name: 'audit-group-membership',

apps/sim/blocks/blocks/microsoft_dataverse.ts

@@ -555,7 +555,7 @@ Return ONLY the orderby expression - no $orderby= prefix, no explanations.`,
       id: 'nextLink',
       title: 'Next Page Link',
       type: 'short-input',
-      placeholder: 'nextLink output from the previous page',
+      placeholder: 'nextLink from the previous page (empty on the last page; stop when empty)',
       condition: { field: 'operation', value: 'list_records' },
       mode: 'advanced',
     },

apps/sim/blocks/blocks/sharepoint.ts

@@ -1240,10 +1240,19 @@ Return ONLY the filter expression - no explanations, no quotes around the whole
       placeholder: 'Comma-separated column names, e.g. Title,Status,DueDate',
       condition: {
         field: 'operation',
-        value: ['sharepoint_get_list', 'sharepoint_get_list_item'],
+        value: 'sharepoint_get_list',
+        and: { field: 'includeColumns', value: 'true', not: true },
       },
       mode: 'advanced',
     },
+    {
+      id: 'itemSelectFields',
+      title: 'Fields to Return',
+      type: 'short-input',
+      placeholder: 'Comma-separated column names, e.g. Title,Status,DueDate',
+      condition: { field: 'operation', value: 'sharepoint_get_list_item' },
+      mode: 'advanced',
+    },
     {
       id: 'listDisplayName',
       title: 'List Display Name',
@@ -1477,6 +1486,10 @@ Return ONLY the JSON object - no explanations, no markdown, no extra text.`,
           result.top = undefined
           result.selectFields = undefined
         }
+        if (rest.operation === 'sharepoint_get_list_item') {
+          result.selectFields = cleanString(result.itemSelectFields)
+        }
+        result.itemSelectFields = undefined
 
         if (columnDefinitions && rest.operation === 'sharepoint_create_list') {
           result.pageContent = columnDefinitions
@@ -1505,6 +1518,10 @@ Return ONLY the JSON object - no explanations, no markdown, no extra text.`,
     filter: { type: 'string', description: 'OData $filter for list items' },
     top: { type: 'number', description: 'Maximum list items per page' },
     selectFields: { type: 'string', description: 'Comma-separated item field names to return' },
+    itemSelectFields: {
+      type: 'string',
+      description: 'Comma-separated field names to return (get list item)',
+    },
     includeColumns: { type: 'boolean', description: 'Include columns in response' },
     includeItems: { type: 'boolean', description: 'Include items in response' },
     listDisplayName: { type: 'string', description: 'List display name' },

apps/sim/lib/internal/azure-data-explorer/client.ts

@@ -34,11 +34,12 @@ const MAX_ERROR_MESSAGE_LENGTH = 2000
 const MAX_TOKEN_RESPONSE_BYTES = 256 * 1024
 const MAX_PROJECTED_ROWS = 10_000
 /**
- * Serialized bytes the projected rows and records may take together. The projection carries each
- * row twice (positional and keyed), so it is bounded below the inline tool response cap rather
- * than left to fail there with a generic size error.
+ * Serialized bytes the projected tables may take together. The projection carries each row twice
+ * (positional and keyed), so it is bounded by the inline tool response cap, minus each table's
+ * actual envelope and a small margin for the response wrapper, rather than left to fail there
+ * with a generic size error.
  */
-const MAX_PROJECTED_BYTES = MAX_TOOL_RESPONSE_BODY_BYTES - 512 * 1024
+const MAX_PROJECTED_BYTES = MAX_TOOL_RESPONSE_BODY_BYTES - 16 * 1024
 
 interface CachedToken {
   accessToken: string
@@ -245,6 +246,16 @@ function projectTable(
   const allRows = table.Rows ?? []
   const rows: unknown[][] = []
   const records: Array<Record<string, unknown>> = []
+  const envelope: AzureDataExplorerResultTable = {
+    tableName: table.TableName ?? null,
+    columns,
+    rows: [],
+    records: [],
+    rowCount: allRows.length,
+    totalRowCount: allRows.length,
+    truncated: false,
+  }
+  budget.bytes -= Buffer.byteLength(JSON.stringify(envelope))
   for (const row of allRows) {
     if (budget.rows <= 0) break
     const record: Record<string, unknown> = {}

apps/sim/lib/internal/sharepoint/operations.ts

@@ -85,6 +85,10 @@ function buildUploadUrl(
   input: SharePointUploadFileInput,
   fileName: string
 ): { url: string; replaceUrl: string } {
+  const trimmedName = fileName.trim()
+  if (trimmedName === '.' || trimmedName === '..') {
+    throw new Error('File name cannot be "." or ".."')
+  }
   const folderPath = input.folderPath?.trim() || ''
   const normalizedPath = folderPath.startsWith('/') ? folderPath : `/${folderPath}`
   const cleanPath = normalizedPath.endsWith('/') ? normalizedPath.slice(0, -1) : normalizedPath

apps/sim/lib/webhooks/polling/outlook.ts

@@ -422,6 +422,7 @@ async function processOutlookEmails(
                 {
                   fetchImpl: (url, init) => fetchWithRetry(url, init),
                   keepPartialOnLimit: true,
+                  preferMetadataSize: true,
                   onFailure: (stage, status) =>
                     logger.warn('Outlook attachment request failed', {
                       emailId: email.id,