@mcp-consultant-tools/powerplatform-core 26.0.0-beta.2

package/build/auth/service-principal-auth.js

@@ -0,0 +1,60 @@
+/**
+ * Service Principal Authentication Provider
+ *
+ * Uses ConfidentialClientApplication (client credentials flow)
+ * for app-to-app authentication with client_id + client_secret.
+ *
+ * This is the existing authentication mechanism, refactored into the auth module.
+ */
+import { ConfidentialClientApplication } from '@azure/msal-node';
+export class ServicePrincipalAuth {
+    config;
+    msalClient;
+    accessToken = null;
+    tokenExpirationTime = 0;
+    constructor(config) {
+        this.config = config;
+        this.msalClient = new ConfidentialClientApplication({
+            auth: {
+                clientId: this.config.clientId,
+                clientSecret: this.config.clientSecret,
+                authority: `https://login.microsoftonline.com/${this.config.tenantId}`,
+            },
+        });
+    }
+    getAuthMode() {
+        return 'service-principal';
+    }
+    async getAccessToken(resource) {
+        const currentTime = Date.now();
+        // If we have a token that isn't expired, return it
+        if (this.accessToken && this.tokenExpirationTime > currentTime) {
+            return this.accessToken;
+        }
+        try {
+            // Get a new token using client credentials flow
+            const result = await this.msalClient.acquireTokenByClientCredential({
+                scopes: [`${resource}/.default`],
+            });
+            if (!result || !result.accessToken) {
+                throw new Error('Failed to acquire access token');
+            }
+            this.accessToken = result.accessToken;
+            // Set expiration time (subtract 5 minutes to refresh early)
+            if (result.expiresOn) {
+                this.tokenExpirationTime = result.expiresOn.getTime() - 5 * 60 * 1000;
+            }
+            return this.accessToken;
+        }
+        catch (error) {
+            const errorMessage = error.message || 'Unknown error';
+            console.error('Service Principal authentication failed:', errorMessage);
+            throw new Error(`Service Principal authentication failed: ${errorMessage}`);
+        }
+    }
+    async getUserInfo() {
+        // Service principal doesn't have user info
+        return null;
+    }
+}
+//# sourceMappingURL=service-principal-auth.js.map

package/build/auth/service-principal-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-principal-auth.js","sourceRoot":"","sources":["../../src/auth/service-principal-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAUjE,MAAM,OAAO,oBAAoB;IACvB,MAAM,CAAyB;IAC/B,UAAU,CAAgC;IAC1C,WAAW,GAAkB,IAAI,CAAC;IAClC,mBAAmB,GAAW,CAAC,CAAC;IAExC,YAAY,MAA8B;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,IAAI,CAAC,UAAU,GAAG,IAAI,6BAA6B,CAAC;YAClD,IAAI,EAAE;gBACJ,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC9B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBACtC,SAAS,EAAE,qCAAqC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;aACvE;SACF,CAAC,CAAC;IACL,CAAC;IAED,WAAW;QACT,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE/B,mDAAmD;QACnD,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,mBAAmB,GAAG,WAAW,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC,WAAW,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC;YACH,gDAAgD;YAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,8BAA8B,CAAC;gBAClE,MAAM,EAAE,CAAC,GAAG,QAAQ,WAAW,CAAC;aACjC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YAED,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;YAEtC,4DAA4D;YAC5D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YACxE,CAAC;YAED,OAAO,IAAI,CAAC,WAAW,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,IAAI,eAAe,CAAC;YACtD,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,YAAY,CAAC,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,4CAA4C,YAAY,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW;QACf,2CAA2C;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/build/auth/token-cache.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Token Cache for Interactive Authentication
+ *
+ * Provides encrypted file-based storage for MSAL tokens.
+ * Tokens are encrypted using AES-256-GCM with a machine-specific key.
+ *
+ * Storage location: ~/.mcp-consultant-tools/token-cache-{clientId}.enc
+ */
+import type { ICachePlugin } from '@azure/msal-node';
+export declare class TokenCache {
+    private cacheFile;
+    private encryptionKey;
+    private cacheDir;
+    constructor(clientId: string);
+    /**
+     * Create MSAL cache plugin for automatic token persistence
+     */
+    createPlugin(): ICachePlugin;
+    /**
+     * Encrypt data using AES-256-GCM
+     */
+    private encrypt;
+    /**
+     * Decrypt data using AES-256-GCM
+     */
+    private decrypt;
+    /**
+     * Clear the token cache (logout)
+     */
+    clear(): void;
+    /**
+     * Check if a token cache exists
+     */
+    exists(): boolean;
+    /**
+     * Get the cache file path (for diagnostics)
+     */
+    getCachePath(): string;
+}
+//# sourceMappingURL=token-cache.d.ts.map

package/build/auth/token-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-cache.d.ts","sourceRoot":"","sources":["../../src/auth/token-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAqB,MAAM,kBAAkB,CAAC;AAMxE,qBAAa,UAAU;IACrB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAS;gBAEb,QAAQ,EAAE,MAAM;IAgB5B;;OAEG;IACH,YAAY,IAAI,YAAY;IA6B5B;;OAEG;IACH,OAAO,CAAC,OAAO;IASf;;OAEG;IACH,OAAO,CAAC,OAAO;IAef;;OAEG;IACH,KAAK,IAAI,IAAI;IAMb;;OAEG;IACH,MAAM,IAAI,OAAO;IAIjB;;OAEG;IACH,YAAY,IAAI,MAAM;CAGvB"}

package/build/auth/token-cache.js

@@ -0,0 +1,108 @@
+/**
+ * Token Cache for Interactive Authentication
+ *
+ * Provides encrypted file-based storage for MSAL tokens.
+ * Tokens are encrypted using AES-256-GCM with a machine-specific key.
+ *
+ * Storage location: ~/.mcp-consultant-tools/token-cache-{clientId}.enc
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import crypto from 'node:crypto';
+export class TokenCache {
+    cacheFile;
+    encryptionKey;
+    cacheDir;
+    constructor(clientId) {
+        this.cacheDir = path.join(os.homedir(), '.mcp-consultant-tools');
+        // Create cache directory if it doesn't exist
+        if (!fs.existsSync(this.cacheDir)) {
+            fs.mkdirSync(this.cacheDir, { recursive: true, mode: 0o700 });
+        }
+        this.cacheFile = path.join(this.cacheDir, `token-cache-${clientId}.enc`);
+        // Derive encryption key from machine-specific data
+        // Uses hostname + username as salt for key derivation
+        const machineId = os.hostname() + os.userInfo().username;
+        this.encryptionKey = crypto.scryptSync(machineId, 'mcp-powerplatform-auth', 32);
+    }
+    /**
+     * Create MSAL cache plugin for automatic token persistence
+     */
+    createPlugin() {
+        return {
+            beforeCacheAccess: async (context) => {
+                if (fs.existsSync(this.cacheFile)) {
+                    try {
+                        const encrypted = fs.readFileSync(this.cacheFile);
+                        const decrypted = this.decrypt(encrypted);
+                        context.tokenCache.deserialize(decrypted);
+                    }
+                    catch (error) {
+                        // Cache corrupted or from different machine, ignore
+                        // MSAL will proceed with empty cache
+                        console.error('Token cache read error (will re-authenticate):', error.message);
+                    }
+                }
+            },
+            afterCacheAccess: async (context) => {
+                if (context.cacheHasChanged) {
+                    try {
+                        const data = context.tokenCache.serialize();
+                        const encrypted = this.encrypt(data);
+                        fs.writeFileSync(this.cacheFile, encrypted, { mode: 0o600 });
+                    }
+                    catch (error) {
+                        console.error('Token cache write error:', error.message);
+                    }
+                }
+            },
+        };
+    }
+    /**
+     * Encrypt data using AES-256-GCM
+     */
+    encrypt(data) {
+        const iv = crypto.randomBytes(16);
+        const cipher = crypto.createCipheriv('aes-256-gcm', this.encryptionKey, iv);
+        const encrypted = Buffer.concat([cipher.update(data, 'utf8'), cipher.final()]);
+        const tag = cipher.getAuthTag();
+        // Format: IV (16 bytes) + Auth Tag (16 bytes) + Encrypted Data
+        return Buffer.concat([iv, tag, encrypted]);
+    }
+    /**
+     * Decrypt data using AES-256-GCM
+     */
+    decrypt(data) {
+        if (data.length < 33) {
+            throw new Error('Invalid encrypted data: too short');
+        }
+        const iv = data.subarray(0, 16);
+        const tag = data.subarray(16, 32);
+        const encrypted = data.subarray(32);
+        const decipher = crypto.createDecipheriv('aes-256-gcm', this.encryptionKey, iv);
+        decipher.setAuthTag(tag);
+        return decipher.update(encrypted) + decipher.final('utf8');
+    }
+    /**
+     * Clear the token cache (logout)
+     */
+    clear() {
+        if (fs.existsSync(this.cacheFile)) {
+            fs.unlinkSync(this.cacheFile);
+        }
+    }
+    /**
+     * Check if a token cache exists
+     */
+    exists() {
+        return fs.existsSync(this.cacheFile);
+    }
+    /**
+     * Get the cache file path (for diagnostics)
+     */
+    getCachePath() {
+        return this.cacheFile;
+    }
+}
+//# sourceMappingURL=token-cache.js.map

package/build/auth/token-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-cache.js","sourceRoot":"","sources":["../../src/auth/token-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,OAAO,UAAU;IACb,SAAS,CAAS;IAClB,aAAa,CAAS;IACtB,QAAQ,CAAS;IAEzB,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,uBAAuB,CAAC,CAAC;QAEjE,6CAA6C;QAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,QAAQ,MAAM,CAAC,CAAC;QAEzE,mDAAmD;QACnD,sDAAsD;QACtD,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACzD,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,wBAAwB,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO;YACL,iBAAiB,EAAE,KAAK,EAAE,OAA0B,EAAE,EAAE;gBACtD,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;oBAClC,IAAI,CAAC;wBACH,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;wBAC1C,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;oBAC5C,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,oDAAoD;wBACpD,qCAAqC;wBACrC,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;oBAC5F,CAAC;gBACH,CAAC;YACH,CAAC;YACD,gBAAgB,EAAE,KAAK,EAAE,OAA0B,EAAE,EAAE;gBACrD,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;wBAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBACrC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC/D,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;oBACtE,CAAC;gBACH,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,OAAO,CAAC,IAAY;QAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAChC,+DAA+D;QAC/D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACK,OAAO,CAAC,IAAY;QAC1B,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAEpC,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAChF,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAEzB,OAAO,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/build/client/PowerPlatformClient.d.ts

@@ -0,0 +1,78 @@
+/**
+ * PowerPlatformClient
+ *
+ * Core HTTP client for PowerPlatform/Dataverse API.
+ * Handles authentication (service principal or interactive) and HTTP requests.
+ *
+ * All modular services use this client for API access.
+ */
+import { type AuthProvider } from '../auth/index.js';
+import type { PowerPlatformConfig } from './types.js';
+export declare class PowerPlatformClient {
+    private config;
+    private authProvider;
+    private environmentId;
+    /**
+     * Create a new PowerPlatformClient
+     * @param config - PowerPlatform configuration
+     * @param authProvider - Optional custom auth provider (uses createAuthProvider if not provided)
+     */
+    constructor(config: PowerPlatformConfig, authProvider?: AuthProvider);
+    /**
+     * Get the organization URL
+     */
+    getOrganizationUrl(): string;
+    /**
+     * Get the full configuration
+     */
+    getConfig(): PowerPlatformConfig;
+    /**
+     * Get the authentication mode being used
+     */
+    getAuthMode(): 'service-principal' | 'interactive';
+    /**
+     * Get information about the authenticated user (if using interactive auth)
+     */
+    getUserInfo(): Promise<{
+        name: string;
+        email: string;
+        oid: string;
+    } | null>;
+    /**
+     * Clear cached tokens (logout) - only applicable for interactive auth
+     */
+    logout(): Promise<void>;
+    /**
+     * Get an access token for the PowerPlatform API
+     */
+    getAccessToken(): Promise<string>;
+    /**
+     * Get the environment ID from the organization URL
+     */
+    getEnvironmentId(): Promise<string>;
+    /**
+     * Make an authenticated request to the PowerPlatform API
+     *
+     * @param endpoint - API endpoint (relative to organization URL)
+     * @param method - HTTP method
+     * @param data - Request body data
+     * @param additionalHeaders - Additional HTTP headers
+     * @returns Response data
+     */
+    makeRequest<T>(endpoint: string, method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE', data?: unknown, additionalHeaders?: Record<string, string>): Promise<T>;
+    /**
+     * Make a request and return the full response (including headers)
+     * Useful for operations that need to check response headers
+     */
+    makeRequestWithResponse<T>(endpoint: string, method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE', data?: unknown, additionalHeaders?: Record<string, string>): Promise<{
+        data: T;
+        headers: Record<string, string>;
+        status: number;
+    }>;
+    /**
+     * Make a request that returns no content (204 response)
+     * Used for DELETE operations and some updates
+     */
+    makeRequestNoContent(endpoint: string, method?: 'POST' | 'PUT' | 'PATCH' | 'DELETE', data?: unknown, additionalHeaders?: Record<string, string>): Promise<void>;
+}
+//# sourceMappingURL=PowerPlatformClient.d.ts.map

package/build/client/PowerPlatformClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PowerPlatformClient.d.ts","sourceRoot":"","sources":["../../src/client/PowerPlatformClient.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,kBAAkB,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,aAAa,CAAuB;IAE5C;;;;OAIG;gBACS,MAAM,EAAE,mBAAmB,EAAE,YAAY,CAAC,EAAE,YAAY;IAcpE;;OAEG;IACH,kBAAkB,IAAI,MAAM;IAI5B;;OAEG;IACH,SAAS,IAAI,mBAAmB;IAIhC;;OAEG;IACH,WAAW,IAAI,mBAAmB,GAAG,aAAa;IAIlD;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAOjF;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAM7B;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IAIvC;;OAEG;IACG,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC;IAezC;;;;;;;;OAQG;IACG,WAAW,CAAC,CAAC,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAgB,EAC3D,IAAI,CAAC,EAAE,OAAO,EACd,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACzC,OAAO,CAAC,CAAC,CAAC;IAkDb;;;OAGG;IACG,uBAAuB,CAAC,CAAC,EAC7B,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAgB,EAC3D,IAAI,CAAC,EAAE,OAAO,EACd,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACzC,OAAO,CAAC;QAAE,IAAI,EAAE,CAAC,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IA6CxE;;;OAGG;IACG,oBAAoB,CACxB,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAmB,EACtD,IAAI,CAAC,EAAE,OAAO,EACd,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACzC,OAAO,CAAC,IAAI,CAAC;CAsCjB"}

package/build/client/PowerPlatformClient.js

@@ -0,0 +1,198 @@
+/**
+ * PowerPlatformClient
+ *
+ * Core HTTP client for PowerPlatform/Dataverse API.
+ * Handles authentication (service principal or interactive) and HTTP requests.
+ *
+ * All modular services use this client for API access.
+ */
+import axios from 'axios';
+import { createAuthProvider } from '../auth/index.js';
+export class PowerPlatformClient {
+    config;
+    authProvider;
+    environmentId = null;
+    /**
+     * Create a new PowerPlatformClient
+     * @param config - PowerPlatform configuration
+     * @param authProvider - Optional custom auth provider (uses createAuthProvider if not provided)
+     */
+    constructor(config, authProvider) {
+        this.config = config;
+        // Use provided auth provider or create one based on config
+        this.authProvider =
+            authProvider ||
+                createAuthProvider({
+                    organizationUrl: config.organizationUrl,
+                    clientId: config.clientId,
+                    clientSecret: config.clientSecret,
+                    tenantId: config.tenantId,
+                });
+    }
+    /**
+     * Get the organization URL
+     */
+    getOrganizationUrl() {
+        return this.config.organizationUrl;
+    }
+    /**
+     * Get the full configuration
+     */
+    getConfig() {
+        return this.config;
+    }
+    /**
+     * Get the authentication mode being used
+     */
+    getAuthMode() {
+        return this.authProvider.getAuthMode();
+    }
+    /**
+     * Get information about the authenticated user (if using interactive auth)
+     */
+    async getUserInfo() {
+        if (this.authProvider.getUserInfo) {
+            return this.authProvider.getUserInfo();
+        }
+        return null;
+    }
+    /**
+     * Clear cached tokens (logout) - only applicable for interactive auth
+     */
+    async logout() {
+        if (this.authProvider.clearCache) {
+            await this.authProvider.clearCache();
+        }
+    }
+    /**
+     * Get an access token for the PowerPlatform API
+     */
+    async getAccessToken() {
+        return this.authProvider.getAccessToken(this.config.organizationUrl);
+    }
+    /**
+     * Get the environment ID from the organization URL
+     */
+    async getEnvironmentId() {
+        if (this.environmentId) {
+            return this.environmentId;
+        }
+        // Extract from organization URL or fetch from API
+        const orgUrl = this.config.organizationUrl;
+        const match = orgUrl.match(/https:\/\/([^.]+)\./);
+        if (match) {
+            this.environmentId = match[1];
+        }
+        return this.environmentId || '';
+    }
+    /**
+     * Make an authenticated request to the PowerPlatform API
+     *
+     * @param endpoint - API endpoint (relative to organization URL)
+     * @param method - HTTP method
+     * @param data - Request body data
+     * @param additionalHeaders - Additional HTTP headers
+     * @returns Response data
+     */
+    async makeRequest(endpoint, method = 'GET', data, additionalHeaders) {
+        try {
+            const token = await this.getAccessToken();
+            const headers = {
+                Authorization: `Bearer ${token}`,
+                Accept: 'application/json',
+                'OData-MaxVersion': '4.0',
+                'OData-Version': '4.0',
+                ...additionalHeaders,
+            };
+            // Add Content-Type for POST/PUT/PATCH requests
+            if (method !== 'GET' && method !== 'DELETE' && data) {
+                headers['Content-Type'] = 'application/json';
+            }
+            const response = await axios({
+                method,
+                url: `${this.config.organizationUrl}/${endpoint}`,
+                headers,
+                data,
+            });
+            return response.data;
+        }
+        catch (error) {
+            const axiosError = error;
+            const errorDetails = axiosError.response?.data?.error || axiosError.response?.data || axiosError.message;
+            console.error('PowerPlatform API request failed:', {
+                endpoint,
+                method,
+                status: axiosError.response?.status,
+                statusText: axiosError.response?.statusText,
+                error: errorDetails,
+            });
+            throw new Error(`PowerPlatform API request failed: ${axiosError.message} - ${JSON.stringify(errorDetails)}`);
+        }
+    }
+    /**
+     * Make a request and return the full response (including headers)
+     * Useful for operations that need to check response headers
+     */
+    async makeRequestWithResponse(endpoint, method = 'GET', data, additionalHeaders) {
+        try {
+            const token = await this.getAccessToken();
+            const headers = {
+                Authorization: `Bearer ${token}`,
+                Accept: 'application/json',
+                'OData-MaxVersion': '4.0',
+                'OData-Version': '4.0',
+                ...additionalHeaders,
+            };
+            if (method !== 'GET' && method !== 'DELETE' && data) {
+                headers['Content-Type'] = 'application/json';
+            }
+            const response = await axios({
+                method,
+                url: `${this.config.organizationUrl}/${endpoint}`,
+                headers,
+                data,
+            });
+            return {
+                data: response.data,
+                headers: response.headers,
+                status: response.status,
+            };
+        }
+        catch (error) {
+            const axiosError = error;
+            const errorDetails = axiosError.response?.data?.error || axiosError.response?.data || axiosError.message;
+            throw new Error(`PowerPlatform API request failed: ${axiosError.message} - ${JSON.stringify(errorDetails)}`);
+        }
+    }
+    /**
+     * Make a request that returns no content (204 response)
+     * Used for DELETE operations and some updates
+     */
+    async makeRequestNoContent(endpoint, method = 'DELETE', data, additionalHeaders) {
+        try {
+            const token = await this.getAccessToken();
+            const headers = {
+                Authorization: `Bearer ${token}`,
+                Accept: 'application/json',
+                'OData-MaxVersion': '4.0',
+                'OData-Version': '4.0',
+                ...additionalHeaders,
+            };
+            if (data) {
+                headers['Content-Type'] = 'application/json';
+            }
+            await axios({
+                method,
+                url: `${this.config.organizationUrl}/${endpoint}`,
+                headers,
+                data,
+            });
+        }
+        catch (error) {
+            const axiosError = error;
+            const errorDetails = axiosError.response?.data?.error || axiosError.response?.data || axiosError.message;
+            throw new Error(`PowerPlatform API request failed: ${axiosError.message} - ${JSON.stringify(errorDetails)}`);
+        }
+    }
+}
+//# sourceMappingURL=PowerPlatformClient.js.map

package/build/client/PowerPlatformClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PowerPlatformClient.js","sourceRoot":"","sources":["../../src/client/PowerPlatformClient.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAqB,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAGzE,MAAM,OAAO,mBAAmB;IACtB,MAAM,CAAsB;IAC5B,YAAY,CAAe;IAC3B,aAAa,GAAkB,IAAI,CAAC;IAE5C;;;;OAIG;IACH,YAAY,MAA2B,EAAE,YAA2B;QAClE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,2DAA2D;QAC3D,IAAI,CAAC,YAAY;YACf,YAAY;gBACZ,kBAAkB,CAAC;oBACjB,eAAe,EAAE,MAAM,CAAC,eAAe;oBACvC,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;QACzC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB;QACpB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;QAED,kDAAkD;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAClD,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;IAClC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,WAAW,CACf,QAAgB,EAChB,SAAsD,KAAK,EAC3D,IAAc,EACd,iBAA0C;QAE1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAE1C,MAAM,OAAO,GAA2B;gBACtC,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,MAAM,EAAE,kBAAkB;gBAC1B,kBAAkB,EAAE,KAAK;gBACzB,eAAe,EAAE,KAAK;gBACtB,GAAG,iBAAiB;aACrB,CAAC;YAEF,+CAA+C;YAC/C,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ,IAAI,IAAI,EAAE,CAAC;gBACpD,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC/C,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC;gBAC3B,MAAM;gBACN,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,QAAQ,EAAE;gBACjD,OAAO;gBACP,IAAI;aACL,CAAC,CAAC;YAEH,OAAO,QAAQ,CAAC,IAAS,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,KAQlB,CAAC;YACF,MAAM,YAAY,GAChB,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,UAAU,CAAC,QAAQ,EAAE,IAAI,IAAI,UAAU,CAAC,OAAO,CAAC;YACtF,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE;gBACjD,QAAQ;gBACR,MAAM;gBACN,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM;gBACnC,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU;gBAC3C,KAAK,EAAE,YAAY;aACpB,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CACb,qCAAqC,UAAU,CAAC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,uBAAuB,CAC3B,QAAgB,EAChB,SAAsD,KAAK,EAC3D,IAAc,EACd,iBAA0C;QAE1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAE1C,MAAM,OAAO,GAA2B;gBACtC,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,MAAM,EAAE,kBAAkB;gBAC1B,kBAAkB,EAAE,KAAK;gBACzB,eAAe,EAAE,KAAK;gBACtB,GAAG,iBAAiB;aACrB,CAAC;YAEF,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ,IAAI,IAAI,EAAE,CAAC;gBACpD,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC/C,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC;gBAC3B,MAAM;gBACN,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,QAAQ,EAAE;gBACjD,OAAO;gBACP,IAAI;aACL,CAAC,CAAC;YAEH,OAAO;gBACL,IAAI,EAAE,QAAQ,CAAC,IAAS;gBACxB,OAAO,EAAE,QAAQ,CAAC,OAAiC;gBACnD,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,KAOlB,CAAC;YACF,MAAM,YAAY,GAChB,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,UAAU,CAAC,QAAQ,EAAE,IAAI,IAAI,UAAU,CAAC,OAAO,CAAC;YACtF,MAAM,IAAI,KAAK,CACb,qCAAqC,UAAU,CAAC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,oBAAoB,CACxB,QAAgB,EAChB,SAA8C,QAAQ,EACtD,IAAc,EACd,iBAA0C;QAE1C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAE1C,MAAM,OAAO,GAA2B;gBACtC,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,MAAM,EAAE,kBAAkB;gBAC1B,kBAAkB,EAAE,KAAK;gBACzB,eAAe,EAAE,KAAK;gBACtB,GAAG,iBAAiB;aACrB,CAAC;YAEF,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC/C,CAAC;YAED,MAAM,KAAK,CAAC;gBACV,MAAM;gBACN,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,QAAQ,EAAE;gBACjD,OAAO;gBACP,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,KAOlB,CAAC;YACF,MAAM,YAAY,GAChB,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,UAAU,CAAC,QAAQ,EAAE,IAAI,IAAI,UAAU,CAAC,OAAO,CAAC;YACtF,MAAM,IAAI,KAAK,CACb,qCAAqC,UAAU,CAAC,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/build/client/index.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Client module exports
+ */
+export { PowerPlatformClient } from './PowerPlatformClient.js';
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/build/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,cAAc,YAAY,CAAC"}

package/build/client/index.js

@@ -0,0 +1,6 @@
+/**
+ * Client module exports
+ */
+export { PowerPlatformClient } from './PowerPlatformClient.js';
+export * from './types.js';
+//# sourceMappingURL=index.js.map

package/build/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,cAAc,YAAY,CAAC"}