fix(microsoft): reserve ADX table envelopes up front, log skipped Outlook attachments, tighten SharePoint upload path

Author: waleedlatif1

apps/sim/blocks/blocks/azure_devops.ts

@@ -241,6 +241,7 @@ export const AzureDevOpsBlock: BlockConfig = {
         { label: 'Cancelling', id: 'cancelling' },
         { label: 'Postponed', id: 'postponed' },
         { label: 'Not Started', id: 'notStarted' },
+        { label: 'No Status', id: 'none' },
       ],
       condition: { field: 'operation', value: 'azure_devops_list_builds' },
       mode: 'advanced',

apps/sim/lib/internal/azure-data-explorer/client.ts

@@ -233,29 +233,40 @@ interface ProjectionBudget {
   bytes: number
 }
 
+function projectColumns(table: KustoTable): AzureDataExplorerResultTable['columns'] {
+  return (table.Columns ?? []).map((column) => ({
+    name: column.ColumnName ?? '',
+    type: column.ColumnType ?? null,
+    dataType: column.DataType ?? null,
+  }))
+}
+
+/** Serialized size of a table's projection without its rows, reserved before any rows are kept. */
+function envelopeBytes(table: KustoTable | null): number {
+  if (!table) return Buffer.byteLength(JSON.stringify(EMPTY_PROJECTION))
+  const rowTotal = (table.Rows ?? []).length
+  return Buffer.byteLength(
+    JSON.stringify({
+      tableName: table.TableName ?? null,
+      columns: projectColumns(table),
+      rows: [],
+      records: [],
+      rowCount: rowTotal,
+      totalRowCount: rowTotal,
+      truncated: false,
+    })
+  )
+}
+
 function projectTable(
   table: KustoTable | null,
   budget: ProjectionBudget
 ): AzureDataExplorerResultTable {
   if (!table) return EMPTY_PROJECTION
-  const columns = (table.Columns ?? []).map((column) => ({
-    name: column.ColumnName ?? '',
-    type: column.ColumnType ?? null,
-    dataType: column.DataType ?? null,
-  }))
+  const columns = projectColumns(table)
   const allRows = table.Rows ?? []
   const rows: unknown[][] = []
   const records: Array<Record<string, unknown>> = []
-  const envelope: AzureDataExplorerResultTable = {
-    tableName: table.TableName ?? null,
-    columns,
-    rows: [],
-    records: [],
-    rowCount: allRows.length,
-    totalRowCount: allRows.length,
-    truncated: false,
-  }
-  budget.bytes -= Buffer.byteLength(JSON.stringify(envelope))
   for (const row of allRows) {
     if (budget.rows <= 0) break
     const record: Record<string, unknown> = {}
@@ -288,9 +299,16 @@ function projectResults(
   tables: KustoTable[],
   contents: TableOfContents | null
 ): AzureDataExplorerTable {
-  const budget: ProjectionBudget = { rows: MAX_PROJECTED_ROWS, bytes: MAX_PROJECTED_BYTES }
-  const primary = projectTable(selectPrimaryTable(tables, contents), budget)
+  const primaryTable = selectPrimaryTable(tables, contents)
   const additionalOrdinals = contents?.resultOrdinals.slice(1) ?? []
+  const reserved = [primaryTable, ...additionalOrdinals.map((ordinal) => tables[ordinal] ?? null)]
+    .map(envelopeBytes)
+    .reduce((total, bytes) => total + bytes, 0)
+  const budget: ProjectionBudget = {
+    rows: MAX_PROJECTED_ROWS,
+    bytes: MAX_PROJECTED_BYTES - reserved,
+  }
+  const primary = projectTable(primaryTable, budget)
   if (additionalOrdinals.length === 0) return primary
   return {
     ...primary,

apps/sim/lib/internal/sharepoint/operations.ts

@@ -93,6 +93,9 @@ function buildUploadUrl(
   const normalizedPath = folderPath.startsWith('/') ? folderPath : `/${folderPath}`
   const cleanPath = normalizedPath.endsWith('/') ? normalizedPath.slice(0, -1) : normalizedPath
   const uploadPath = folderPath ? `${cleanPath}/${fileName}` : `/${fileName}`
+  if (uploadPath.split('/').some((segment) => segment.trim() === '.' || segment.trim() === '..')) {
+    throw new Error('Upload path cannot contain "." or ".." segments')
+  }
   const encodedPath = uploadPath
     .split('/')
     .map((segment) => (segment ? encodeURIComponent(segment) : ''))

apps/sim/lib/webhooks/polling/outlook.ts

@@ -423,6 +423,12 @@ async function processOutlookEmails(
                   fetchImpl: (url, init) => fetchWithRetry(url, init),
                   keepPartialOnLimit: true,
                   preferMetadataSize: true,
+                  onSkip: (attachmentName, declaredSize) =>
+                    logger.warn('Skipping Outlook attachment over the per-email byte budget', {
+                      emailId: email.id,
+                      attachmentName,
+                      declaredSize,
+                    }),
                   onFailure: (stage, status) =>
                     logger.warn('Outlook attachment request failed', {
                       emailId: email.id,

apps/sim/tools/azure_devops/utils.ts

@@ -31,8 +31,8 @@ function pathSegment(value: string, paramName: string): string {
 export const WORK_ITEMS_BATCH_SIZE = 200
 
 /**
- * Fetches one Work Items - List chunk with `$expand=all`, bounded to the inline
- * tool response size and cancelled with the tool call.
+ * Fetches one Work Items - List chunk with `$expand=all`, bounded to the buffered
+ * transfer cap (100 MB) and cancelled with the tool call.
  */
 export async function fetchWorkItemsChunk(
   params: { organization: string; project: string; accessToken: string },

apps/sim/tools/generated/tool-outputs.ts

@@ -96,27 +96,37 @@ export const ONEDRIVE_FILE_OUTPUT_PROPERTIES: Record<string, OutputProperty> = {
     type: 'number',
     description: 'Number of direct children (folders only)',
     optional: true,
+    nullable: true,
   },
   description: {
     type: 'string',
     description: 'User-visible description (OneDrive Personal only)',
     optional: true,
+    nullable: true,
+  },
+  eTag: {
+    type: 'string',
+    description: 'eTag for the item (metadata and content)',
+    optional: true,
+    nullable: true,
   },
-  eTag: { type: 'string', description: 'eTag for the item (metadata and content)', optional: true },
   parentReference: {
     type: 'object',
     description: 'Parent location (id, driveId, driveType, name, path, siteId)',
     optional: true,
+    nullable: true,
   },
   createdBy: {
     type: 'object',
     description: 'Identity that created the item (id, displayName)',
     optional: true,
+    nullable: true,
   },
   lastModifiedBy: {
     type: 'object',
     description: 'Identity that last modified the item (id, displayName)',
     optional: true,
+    nullable: true,
   },
 }
 

apps/sim/tools/onedrive/utils.ts

@@ -34,6 +34,8 @@ export interface OutlookAttachmentDownloadOptions {
   preferMetadataSize?: boolean
   /** Called when Graph answers a metadata or content request with a non-OK status. */
   onFailure?: (stage: 'metadata' | 'content', status: number) => void
+  /** Called for each attachment skipped because it exceeds the byte budget (with keepPartialOnLimit). */
+  onSkip?: (attachmentName: string, declaredSize: number | undefined) => void
 }
 
 /** Fetch metadata separately from raw file bytes, sharing the budget across messages. */
@@ -46,9 +48,10 @@ export async function downloadAttachments(
   const fetchImpl = options.fetchImpl ?? ((url: string, init: RequestInit) => fetch(url, init))
   const attachments: OutlookAttachment[] = []
   const path = `https://graph.microsoft.com/v1.0/me/messages/${encodeURIComponent(messageId)}/attachments`
-  const handleError = (error: unknown) => {
+  const handleError = (error: unknown, attachment?: OutlookDownloadAttachmentMetadata) => {
     if (options.keepPartialOnLimit && isPayloadSizeLimitError(error)) {
       budget.signal?.throwIfAborted()
+      options.onSkip?.(attachment?.name || 'attachment', attachment?.size)
       return
     }
     rethrowAttachmentDownloadError(error, budget.signal)
@@ -98,7 +101,7 @@ export async function downloadAttachments(
             : buffer.byteLength,
         })
       } catch (error) {
-        handleError(error)
+        handleError(error, attachment)
       }
     }
   } catch (error) {