@microsoft/apps-cli 0.0.1 → 0.4.0

package/dist/ArgumentProvider.js

@@ -0,0 +1,376 @@
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+import { getAuthResource, initializePlayerServices, updateRegion } from '@microsoft/apps-actions';
+import { Clouds, cloudToRegion, } from '@microsoft/apps-common/services';
+import { Command } from 'commander';
+import packageJson from '../package.json' with { type: 'json' };
+import { getSettings } from './CliSettings.js';
+import { getAuthority } from './CliUtils.js';
+import { CLI_BINARY_NAME } from './Constants/CliConstants.js';
+import { COMMAND_TREE } from './Constants/CommandRegistry.js';
+import { HelpStrings } from './Constants/HelpStrings.js';
+import { UsageError } from './Errors/CliError.js';
+import { buildNounHelpText, buildTypedSubcommandHelpText, buildVerbDescriptionTable, } from './Utils/BuildVerbDescriptionTable.js';
+import { printInfo } from './Utils/ConsoleOutput.js';
+import { cliEnvVarFullName, getCliEnvVar } from './Utils/EnvVars.js';
+import { hasTypedSubcommands, isKnownNoun, resolveCommand } from './Utils/ResolveCommand.js';
+import { GlobalArguments } from './Verbs/VerbConstants.js';
+export class ArgumentProvider {
+    _httpClient;
+    _logger;
+    _authenticationProvider;
+    _environmentId;
+    _cloud;
+    _region;
+    _verb;
+    _resolvedCommand;
+    _tokensConsumed = 0;
+    _program;
+    _options = {};
+    _positionalArgs = [];
+    _positionalArgNames = [];
+    _isParsed = false;
+    constructor(_httpClient, _logger, _authenticationProvider) {
+        this._httpClient = _httpClient;
+        this._logger = _logger;
+        this._authenticationProvider = _authenticationProvider;
+        // Resolve command using multi-token matching against the command registry
+        this._resolvedCommand = resolveCommand(process.argv, COMMAND_TREE);
+        if (this._resolvedCommand) {
+            // Use the command path as the verb identifier for telemetry and internal checks
+            this._verb = this._resolvedCommand.path.join(' ');
+            this._tokensConsumed = this._resolvedCommand.tokensConsumed;
+        }
+        this._program = new Command();
+        // Add the --non-interactive switch as a global option
+        this._program.option('--non-interactive', 'Run in non-interactive mode (no prompts, all parameters must be provided via flags or environment variables)');
+        this._program.option('--json', 'Format output as JSON');
+        this._program.option('--no-color', 'Disable colored output');
+        // If a command was resolved, show the full command path in help/usage.
+        // Otherwise show the generic top-level help.
+        if (this._resolvedCommand) {
+            this._program.name(`${CLI_BINARY_NAME} ${this._verb}`);
+        }
+        else {
+            this._program.name(CLI_BINARY_NAME);
+            this._program.usage('[option] [command] [<args>]');
+        }
+        this._program.version(packageJson.version, '-v, --version', 'output the current version');
+        this._program.description(HelpStrings.global.programDescription);
+        // Register custom help text to show verb table on global --help
+        // This uses Commander's addHelpText hook which runs when help is displayed
+        this._program.addHelpText('after', (_context) => {
+            // Only show verb table for global help (not verb-specific help)
+            if (!this._resolvedCommand) {
+                return '\n' + buildVerbDescriptionTable() + '\n';
+            }
+            return '';
+        });
+        const settings = getSettings();
+        // Environment ID resolution order: ms.config.json (the supported user flow) →
+        // MAAF_DEBUG_ENVIRONMENT_ID env var (debug-only override). There is no CLI flag —
+        // `app create` resolves it via the PDE routing API; other verbs require
+        // ms.config.json. The debug env var lets developers run any verb against a
+        // known environment without scaffolding a config first.
+        this._environmentId = settings.appConfig?.environmentId;
+        const debugEnvironmentId = getCliEnvVar('MAAF_DEBUG_ENVIRONMENT_ID');
+        if (!this._environmentId && debugEnvironmentId) {
+            this._environmentId = debugEnvironmentId;
+            printInfo(`[debug] ${cliEnvVarFullName('MAAF_DEBUG_ENVIRONMENT_ID')} is set; using '${this._environmentId}' as environment id.`);
+        }
+        const configCloud = settings.appConfig?.cloud;
+        if (configCloud) {
+            const normalized = configCloud.toLowerCase();
+            if (!Clouds.includes(normalized)) {
+                throw new UsageError(`Invalid cloud value '${configCloud}' in ms.config.json. Valid values are: ${Clouds.join(', ')}.`);
+            }
+            this._cloud = normalized;
+            this._region = cloudToRegion(this._cloud);
+        }
+        if (!this._cloud) {
+            // Do not provide a prompt, default to public
+            this.addOption({
+                flags: {
+                    key: GlobalArguments.Cloud.name,
+                },
+                env: GlobalArguments.Cloud.envVar,
+                default: 'public',
+                description: HelpStrings.global.cloud,
+            });
+        }
+        initializePlayerServices({
+            httpClient: this._httpClient,
+            logger: this._logger,
+            region: this._region ?? cloudToRegion('public'),
+            environmentName: this._environmentId || 'default',
+        });
+    }
+    addSwitch(cliOption) {
+        this._createOption(cliOption, false);
+    }
+    addSwitches(cliOptions) {
+        cliOptions.forEach((cliOption) => this._createOption(cliOption, false));
+    }
+    /**
+     * Consumes the next positional token from process.argv before Commander parses flags.
+     * Increments the internal token counter so runVerb() excludes this token from Commander's
+     * args, and updates the usage string so --help shows the argument name.
+     *
+     * Must be called before runVerb().
+     */
+    consumePositionalArg(name) {
+        const value = process.argv[2 + this._tokensConsumed];
+        // Skip flags (e.g. --help, -h) — leave them in the args for Commander to handle.
+        if (value !== undefined && !/^-[a-zA-Z-]/.test(value)) {
+            this._tokensConsumed++;
+            this._positionalArgs.push(value);
+        }
+        else {
+            this._positionalArgs.push(undefined);
+        }
+        this._positionalArgNames.push(name);
+        this._program.usage(`${this._positionalArgNames.join(' ')} [options]`);
+    }
+    getPositionalArg(index) {
+        return this._positionalArgs[index];
+    }
+    addOption(cliOption) {
+        this._createOption(cliOption);
+    }
+    addOptions(cliOptions) {
+        cliOptions.forEach((cliOption) => this._createOption(cliOption));
+    }
+    async runVerb() {
+        // Commander needs to see only the flag arguments, so strip the command path
+        // tokens that were consumed by the resolver (e.g., 1 for 'init', 2 for 'app init',
+        // 3 for 'app add table'). Global flag paths skip this method entirely.
+        if (this._tokensConsumed > 0) {
+            const args = [
+                process.argv[0],
+                process.argv[1],
+                ...process.argv.slice(2 + this._tokensConsumed),
+            ];
+            this._program.parse(args);
+        }
+        else {
+            this._program.parse();
+        }
+        this._isParsed = true;
+        await this._getRequiredVariables();
+        if (!this._region) {
+            throw new UsageError(`Region is not set. Use --cloud or set the ${cliEnvVarFullName('CLOUD_INSTANCE')} environment variable.`);
+        }
+        await this._authenticationProvider.initAsync(this._region);
+        await this._logger.initializeTelemetry(this._authenticationProvider);
+        this._logger.trackActivityEvent('Initialize', {
+            verb: this._verb,
+        });
+    }
+    // Handles scenarios where only global flags (e.g., --help/--version) are provided,
+    // or partial commands that should show contextual help (e.g., 'app', 'app add').
+    handleGlobalHelpOrFlagsAndExit() {
+        const firstToken = process.argv[2];
+        if (!firstToken) {
+            this._program.help(); // No arguments at all — show help and exit
+        }
+        // If the first token is a flag (e.g., --version, --help), let Commander handle it
+        if (firstToken.startsWith('-')) {
+            this._program.parse(process.argv);
+            this._isParsed = true;
+            return;
+        }
+        // If no command resolved, check for partial matches that should show contextual help
+        if (!this._resolvedCommand) {
+            const secondToken = process.argv[3];
+            const thirdToken = process.argv[4];
+            // Check for noun + verb with typed subcommands (e.g., 'app add')
+            if (secondToken &&
+                !secondToken.startsWith('-') &&
+                isKnownNoun(firstToken, COMMAND_TREE) &&
+                hasTypedSubcommands(firstToken, secondToken, COMMAND_TREE)) {
+                // Third token present but not a valid type → error
+                if (thirdToken && !thirdToken.startsWith('-')) {
+                    throw new UsageError(`Unknown type '${thirdToken}' for '${CLI_BINARY_NAME} ${firstToken} ${secondToken}'. Run "${CLI_BINARY_NAME} ${firstToken} ${secondToken} --help" for available types.`);
+                }
+                printInfo(buildTypedSubcommandHelpText(firstToken, secondToken));
+                process.exit(0);
+            }
+            // Check for noun-only (e.g., 'app')
+            if (isKnownNoun(firstToken, COMMAND_TREE)) {
+                // Second token present but not a valid command → error
+                if (secondToken && !secondToken.startsWith('-')) {
+                    throw new UsageError(`Unknown command '${secondToken}' under '${CLI_BINARY_NAME} ${firstToken}'. Run "${CLI_BINARY_NAME} ${firstToken} --help" for available commands.`);
+                }
+                printInfo(buildNounHelpText(firstToken));
+                process.exit(0);
+            }
+            // Unrecognised top-level token (not a known noun, not a registered command)
+            throw new UsageError(`Unknown command '${firstToken}'. Run "${CLI_BINARY_NAME} --help" for available commands.`);
+        }
+    }
+    getVerb() {
+        if (!this._resolvedCommand) {
+            throw new UsageError(`No command specified. Run "${CLI_BINARY_NAME} --help" for available commands.`);
+        }
+        return this._verb;
+    }
+    getResolvedCommand() {
+        return this._resolvedCommand;
+    }
+    async getOption(key, ignorePrompt) {
+        const settings = getSettings();
+        let value = this._program.getOptionValue(key);
+        const option = this._options[key];
+        // Fallback to environment variable if not provided via CLI
+        if (value === undefined && option && option.env) {
+            value = getCliEnvVar(option.env);
+        }
+        // Fallback to default value if not provided via CLI or Env
+        if (value === undefined && option && option.default !== undefined) {
+            value = option.default;
+        }
+        if (!value && !ignorePrompt && option?.customPrompt) {
+            if (!settings.interactive) {
+                if (option.optionalInNonInteractive) {
+                    // Option is optional — return undefined and let the actions layer handle it.
+                }
+                else {
+                    const flagName = option.flags.key;
+                    const alias = option.flags.alias;
+                    const flagHint = alias ? `--${flagName} (-${alias})` : `--${flagName}`;
+                    const envHint = option.env ? ` or environment variable (${option.env})` : '';
+                    throw new UsageError(`Missing required option ${flagHint}${envHint}. In non-interactive mode, all parameters must be provided via flags or environment variables.`);
+                }
+            }
+            else {
+                value = await option.customPrompt();
+            }
+        }
+        // Option could be undefined by design, so just return it.
+        return value;
+    }
+    getAuthenticationProvider() {
+        return this._authenticationProvider;
+    }
+    getHttpClient() {
+        return this._httpClient;
+    }
+    /**
+     * Returns the tenant ID for the authenticated user, acquiring a token first if needed.
+     *
+     * NodeMsalAuthenticationProvider only populates _tenantId after getAccessTokenForResource()
+     * is called. This method pre-acquires a token for the Power Platform resource so the tenant
+     * ID is always available after runVerb() completes.
+     */
+    async getTenantIdAsync() {
+        // Fast path: provider already knows the tenant ID (e.g. ServicePrincipalAuthenticationProvider).
+        const existing = this._authenticationProvider.getUserTenantId();
+        if (existing)
+            return existing;
+        // Acquire a token to populate the tenant ID from the MSAL token response.
+        if (this._region && this._region !== 'local' && this._region !== 'dev') {
+            const resource = getAuthResource()[this._region];
+            await this._authenticationProvider.getAccessTokenForResource(resource);
+        }
+        return this._authenticationProvider.getUserTenantId();
+    }
+    getAuthResourceUrl() {
+        const region = this._region ?? cloudToRegion('public');
+        if (region === 'local' || region === 'dev')
+            return getAuthResource()['test'];
+        return getAuthResource()[region];
+    }
+    getCloud() {
+        return this._cloud;
+    }
+    getLoginAuthority(tenantId) {
+        return getAuthority(this._region, tenantId);
+    }
+    /**
+     * Sets the description for the current command context.
+     * This is used to display help information specific to the verb being executed.
+     *
+     * @param {string} description - The description to set for the program.
+     */
+    setDescription(description) {
+        this._program.description(description);
+    }
+    isJsonMode() {
+        // Once Commander has parsed, opts() is the source of truth and won't
+        // confuse `--json` as a flag with `--json` as a value to another option.
+        // Pre-parse (e.g. a UsageError thrown from handleGlobalHelpOrFlagsAndExit
+        // before parse runs) we have no choice but to peek argv directly.
+        if (this._isParsed) {
+            return this._program.opts().json === true;
+        }
+        return process.argv.includes('--json');
+    }
+    addExamples(examples) {
+        if (!examples || examples.length === 0)
+            return;
+        this._program.addHelpText('after', () => {
+            const lines = ['', 'Examples:'];
+            examples.forEach((example) => {
+                lines.push(`  $ ${example}`);
+            });
+            return lines.join('\n');
+        });
+    }
+    getRegisteredFlags() {
+        const flags = new Set();
+        for (const option of this._program.options) {
+            if (option.long)
+                flags.add(option.long);
+            // Commander also accepts the positive form of negated options (--color for --no-color)
+            if (option.negate && option.long?.startsWith('--no-')) {
+                flags.add(`--${option.long.slice('--no-'.length)}`);
+            }
+        }
+        return flags;
+    }
+    getEnvironmentId() {
+        return this._environmentId;
+    }
+    async _getRequiredVariables() {
+        if (!this._cloud) {
+            const rawCloud = await this.getOption('cloud');
+            if (rawCloud) {
+                const normalized = rawCloud.toLowerCase();
+                if (!Clouds.includes(normalized)) {
+                    throw new UsageError(`Invalid --cloud value '${rawCloud}'. Valid values are: ${Clouds.join(', ')}.`);
+                }
+                this._cloud = normalized;
+                this._region = cloudToRegion(this._cloud);
+                updateRegion(this._region);
+            }
+        }
+    }
+    /**
+     * @param {CliOption} cliOption
+     * @param {boolean} [hasValue=true] true if the option requires a value, false for a switch such as --help
+     */
+    _createOption(cliOption, hasValue = true) {
+        const option = this._program.createOption(hasValue ? this._createFlags(cliOption.flags) : this._createSwitchFlags(cliOption.flags), cliOption.description);
+        // We do not set the env or default here because we want to handle it manually in getOption
+        // This allows us to hide the env variable from the help text
+        // Hide global options from help output when showing global help
+        // This prevents --environment-id and --cloud from showing up in the global help
+        if (!this._resolvedCommand || cliOption.hidden) {
+            option.hideHelp();
+        }
+        this._program.addOption(option);
+        // Map to CliOption using Commander's camelCase attribute name so
+        // getOption('environmentId') finds the option registered as --environment-id.
+        this._options[option.attributeName()] = cliOption;
+    }
+    _createFlags(flags) {
+        const { key, alias } = flags;
+        return alias ? `-${alias}, --${key} <${key}>` : `--${key} <${key}>`;
+    }
+    _createSwitchFlags(flags) {
+        const { key, alias } = flags;
+        return alias ? `-${alias}, --${key}` : `--${key}`;
+    }
+}
+//# sourceMappingURL=ArgumentProvider.js.map

package/dist/ArgumentProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArgumentProvider.js","sourceRoot":"","sources":["../src/ArgumentProvider.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAClG,OAAO,EAEL,MAAM,EACN,aAAa,GAGd,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,WAAW,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAK/C,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AA4BxD,MAAM,OAAO,gBAAgB;IAcjB;IACA;IACA;IAfF,cAAc,CAAqB;IACnC,MAAM,CAAoB;IAC1B,OAAO,CAAqB;IAC5B,KAAK,CAAqB;IAC1B,gBAAgB,CAAyB;IACzC,eAAe,GAAG,CAAC,CAAC;IACpB,QAAQ,CAAU;IAClB,QAAQ,GAA8B,EAAE,CAAC;IACzC,eAAe,GAA8B,EAAE,CAAC;IAChD,mBAAmB,GAAa,EAAE,CAAC;IACnC,SAAS,GAAG,KAAK,CAAC;IAE1B,YACU,WAAwB,EACxB,OAAkB,EAClB,uBAAgD;QAFhD,gBAAW,GAAX,WAAW,CAAa;QACxB,YAAO,GAAP,OAAO,CAAW;QAClB,4BAAuB,GAAvB,uBAAuB,CAAyB;QAExD,0EAA0E;QAC1E,IAAI,CAAC,gBAAgB,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAEnE,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,gFAAgF;YAChF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC;QAC9D,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,IAAI,OAAO,EAAE,CAAC;QAE9B,sDAAsD;QACtD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAClB,mBAAmB,EACnB,8GAA8G,CAC/G,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAC;QAE7D,uEAAuE;QACvE,6CAA6C;QAC7C,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,eAAe,EAAE,4BAA4B,CAAC,CAAC;QAC1F,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAEjE,gEAAgE;QAChE,2EAA2E;QAC3E,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC9C,gEAAgE;YAChE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC3B,OAAO,IAAI,GAAG,yBAAyB,EAAE,GAAG,IAAI,CAAC;YACnD,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,8EAA8E;QAC9E,kFAAkF;QAClF,wEAAwE;QACxE,2EAA2E;QAC3E,wDAAwD;QACxD,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;QACxD,MAAM,kBAAkB,GAAG,YAAY,CAAC,2BAA2B,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,kBAAkB,EAAE,CAAC;YAC/C,IAAI,CAAC,cAAc,GAAG,kBAAkB,CAAC;YACzC,SAAS,CACP,WAAW,iBAAiB,CAAC,2BAA2B,CAAC,mBAAmB,IAAI,CAAC,cAAc,sBAAsB,CACtH,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;QAC9C,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;YAC7C,IAAI,CAAE,MAA4B,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxD,MAAM,IAAI,UAAU,CAClB,wBAAwB,WAAW,0CAA0C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAClG,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,UAAmB,CAAC;YAClC,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,6CAA6C;YAC7C,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE;oBACL,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI;iBAChC;gBACD,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM;gBACjC,OAAO,EAAE,QAAQ;gBACjB,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK;aACtC,CAAC,CAAC;QACL,CAAC;QAED,wBAAwB,CAAC;YACvB,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,MAAM,EAAE,IAAI,CAAC,OAAO,IAAI,aAAa,CAAC,QAAQ,CAAC;YAC/C,eAAe,EAAE,IAAI,CAAC,cAAc,IAAI,SAAS;SAClD,CAAC,CAAC;IACL,CAAC;IAEM,SAAS,CAAC,SAAoB;QACnC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAEM,WAAW,CAAC,UAAuB;QACxC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;OAMG;IACI,oBAAoB,CAAC,IAAY;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;QACrD,iFAAiF;QACjF,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,eAAe,EAAE,CAAC;YACvB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzE,CAAC;IAEM,gBAAgB,CAAC,KAAa;QACnC,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAEM,SAAS,CAAC,SAAoB;QACnC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAEM,UAAU,CAAC,UAAuB;QACvC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IACnE,CAAC;IAEM,KAAK,CAAC,OAAO;QAClB,4EAA4E;QAC5E,mFAAmF;QACnF,uEAAuE;QACvE,IAAI,IAAI,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG;gBACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;gBACf,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC;aAChD,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAEtB,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAEnC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,UAAU,CAClB,6CAA6C,iBAAiB,CAAC,gBAAgB,CAAC,wBAAwB,CACzG,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE3D,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAErE,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,YAAY,EAAE;YAC5C,IAAI,EAAE,IAAI,CAAC,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAED,mFAAmF;IACnF,iFAAiF;IAC1E,8BAA8B;QACnC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEnC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,2CAA2C;QACnE,CAAC;QAED,kFAAkF;QAClF,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,OAAO;QACT,CAAC;QAED,qFAAqF;QACrF,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAEnC,iEAAiE;YACjE,IACE,WAAW;gBACX,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;gBAC5B,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC;gBACrC,mBAAmB,CAAC,UAAU,EAAE,WAAW,EAAE,YAAY,CAAC,EAC1D,CAAC;gBACD,mDAAmD;gBACnD,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC9C,MAAM,IAAI,UAAU,CAClB,iBAAiB,UAAU,UAAU,eAAe,IAAI,UAAU,IAAI,WAAW,WAAW,eAAe,IAAI,UAAU,IAAI,WAAW,+BAA+B,CACxK,CAAC;gBACJ,CAAC;gBACD,SAAS,CAAC,4BAA4B,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;gBACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,oCAAoC;YACpC,IAAI,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;gBAC1C,uDAAuD;gBACvD,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChD,MAAM,IAAI,UAAU,CAClB,oBAAoB,WAAW,YAAY,eAAe,IAAI,UAAU,WAAW,eAAe,IAAI,UAAU,kCAAkC,CACnJ,CAAC;gBACJ,CAAC;gBACD,SAAS,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,4EAA4E;YAC5E,MAAM,IAAI,UAAU,CAClB,oBAAoB,UAAU,WAAW,eAAe,kCAAkC,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAEM,OAAO;QACZ,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,IAAI,UAAU,CAClB,8BAA8B,eAAe,kCAAkC,CAChF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,KAAM,CAAC;IACrB,CAAC;IAEM,kBAAkB;QACvB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAEM,KAAK,CAAC,SAAS,CAAI,GAAW,EAAE,YAAsB;QAC3D,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAElC,2DAA2D;QAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YAChD,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAED,2DAA2D;QAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClE,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,CAAC;QAED,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY,IAAI,MAAM,EAAE,YAAY,EAAE,CAAC;YACpD,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC1B,IAAI,MAAM,CAAC,wBAAwB,EAAE,CAAC;oBACpC,6EAA6E;gBAC/E,CAAC;qBAAM,CAAC;oBACN,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;oBAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;oBACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACvE,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,6BAA6B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7E,MAAM,IAAI,UAAU,CAClB,2BAA2B,QAAQ,GAAG,OAAO,gGAAgG,CAC9I,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;YACtC,CAAC;QACH,CAAC;QAED,0DAA0D;QAC1D,OAAO,KAAU,CAAC;IACpB,CAAC;IAEM,yBAAyB;QAC9B,OAAO,IAAI,CAAC,uBAAuB,CAAC;IACtC,CAAC;IAEM,aAAa;QAClB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,gBAAgB;QAC3B,iGAAiG;QACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,eAAe,EAAE,CAAC;QAChE,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,0EAA0E;QAC1E,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACvE,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC,IAAI,CAAC,OAAyB,CAAC,CAAC;YACnE,MAAM,IAAI,CAAC,uBAAuB,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,IAAI,CAAC,uBAAuB,CAAC,eAAe,EAAE,CAAC;IACxD,CAAC;IAEM,kBAAkB;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7E,OAAO,eAAe,EAAE,CAAC,MAAwB,CAAC,CAAC;IACrD,CAAC;IAEM,QAAQ;QACb,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAEM,iBAAiB,CAAC,QAAgB;QACvC,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;OAKG;IACI,cAAc,CAAC,WAAmB;QACvC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;IAEM,UAAU;QACf,qEAAqE;QACrE,yEAAyE;QACzE,0EAA0E;QAC1E,kEAAkE;QAClE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC;QAC5C,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAEM,WAAW,CAAC,QAAkB;QACnC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC/C,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE;YACtC,MAAM,KAAK,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YAChC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,kBAAkB;QACvB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC3C,IAAI,MAAM,CAAC,IAAI;gBAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,uFAAuF;YACvF,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtD,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEM,gBAAgB;QACrB,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,qBAAqB;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAS,OAAO,CAAC,CAAC;YACvD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC1C,IAAI,CAAE,MAA4B,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxD,MAAM,IAAI,UAAU,CAClB,0BAA0B,QAAQ,wBAAwB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/E,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,MAAM,GAAG,UAAmB,CAAC;gBAClC,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1C,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,aAAa,CAAC,SAAoB,EAAE,WAAoB,IAAI;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CACvC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,EACxF,SAAS,CAAC,WAAW,CACtB,CAAC;QAEF,2FAA2F;QAC3F,6DAA6D;QAE7D,gEAAgE;QAChE,gFAAgF;QAChF,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YAC/C,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAEhC,iEAAiE;QACjE,8EAA8E;QAC9E,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,GAAG,SAAS,CAAC;IACpD,CAAC;IAEO,YAAY,CAAC,KAAY;QAC/B,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;QAC7B,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,GAAG,GAAG,CAAC;IACtE,CAAC;IAEO,kBAAkB,CAAC,KAAY;QACrC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;QAC7B,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;IACpD,CAAC;CACF"}

package/dist/Authentication/NodeMsalAuthenticationProvider.d.ts

@@ -0,0 +1,18 @@
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+import type { Region } from '@microsoft/apps-common/services';
+import type { IAuthenticationProvider } from '../Types/Cli.types.js';
+export declare class NodeMsalAuthenticationProvider implements IAuthenticationProvider {
+    private _msalClient;
+    private _tenantId;
+    private _region;
+    constructor();
+    initAsync(region: Region): Promise<void>;
+    getAccessTokenForResource(resource: string, loginHint?: string): Promise<string>;
+    getUserTenantId(): string | undefined;
+    getCachedAccountAsync(): Promise<string | undefined>;
+    private _acquireTokenInternal;
+    private _getInteractiveLoginRequest;
+}
+//# sourceMappingURL=NodeMsalAuthenticationProvider.d.ts.map

package/dist/Authentication/NodeMsalAuthenticationProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeMsalAuthenticationProvider.d.ts","sourceRoot":"","sources":["../../src/Authentication/NodeMsalAuthenticationProvider.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAK9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAGlE,qBAAa,8BAA+B,YAAW,uBAAuB;IAC5E,OAAO,CAAC,WAAW,CAAsC;IACzD,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,OAAO,CAAqB;;IAIvB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BxC,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAMtF,eAAe,IAAI,MAAM,GAAG,SAAS;IAI/B,qBAAqB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;YAMnD,qBAAqB;IAwCnC,OAAO,CAAC,2BAA2B;CAgBpC"}

package/dist/Authentication/NodeMsalAuthenticationProvider.js

@@ -0,0 +1,99 @@
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+import { InteractionRequiredAuthError, PublicClientApplication } from '@azure/msal-node';
+import open from 'open';
+import { getAuthority } from '../CliUtils.js';
+import { AUTH_CACHE_DIRECTORY, CLI_CLIENT_ID } from '../Constants.js';
+import { printError, printInfo } from '../Utils/ConsoleOutput.js';
+export class NodeMsalAuthenticationProvider {
+    _msalClient;
+    _tenantId;
+    _region;
+    constructor() { }
+    async initAsync(region) {
+        this._region = region;
+        const { DataProtectionScope, PersistenceCachePlugin, PersistenceCreator } = await import('@azure/msal-node-extensions');
+        const persistenceConfiguration = {
+            cachePath: AUTH_CACHE_DIRECTORY + '/msal_cache.json',
+            dataProtectionScope: DataProtectionScope.CurrentUser,
+            // TODO: Leaving as power-apps since we are soon to remove node-msal-extensions in favor of our own persistence layer.
+            serviceName: 'power-apps',
+            accountName: 'power-apps',
+            usePlaintextFileOnLinux: false,
+        };
+        const persistence = await PersistenceCreator.createPersistence(persistenceConfiguration);
+        const authConfig = {
+            auth: {
+                authority: getAuthority(this._region, this._tenantId),
+                clientId: CLI_CLIENT_ID,
+            },
+            cache: {
+                cachePlugin: new PersistenceCachePlugin(persistence),
+            },
+        };
+        this._msalClient = new PublicClientApplication(authConfig);
+    }
+    async getAccessTokenForResource(resource, loginHint) {
+        const result = await this._acquireTokenInternal(resource + '/.default', loginHint);
+        this._tenantId = result.tenantId;
+        return result.accessToken;
+    }
+    getUserTenantId() {
+        return this._tenantId;
+    }
+    async getCachedAccountAsync() {
+        if (!this._msalClient)
+            return undefined;
+        const accounts = await this._msalClient.getTokenCache().getAllAccounts();
+        return accounts[0]?.username;
+    }
+    async _acquireTokenInternal(resource, loginHint) {
+        if (!this._msalClient) {
+            throw new Error('Authentication not initialized yet');
+        }
+        const accounts = await this._msalClient.getTokenCache().getAllAccounts();
+        if (accounts.length === 1) {
+            const silentRequest = {
+                account: accounts[0],
+                scopes: [resource],
+            };
+            try {
+                const result = await this._msalClient.acquireTokenSilent(silentRequest);
+                return result;
+            }
+            catch (error) {
+                if (error instanceof InteractionRequiredAuthError) {
+                    return this._msalClient.acquireTokenInteractive(this._getInteractiveLoginRequest(resource, loginHint));
+                }
+                throw error;
+            }
+        }
+        else if (accounts.length > 1) {
+            accounts.forEach((account) => {
+                printInfo(account.username);
+            });
+            return Promise.reject('Multiple accounts found. Please use the logout command to remove existing accounts.');
+        }
+        else {
+            return this._msalClient.acquireTokenInteractive(this._getInteractiveLoginRequest(resource, loginHint));
+        }
+    }
+    _getInteractiveLoginRequest(resource, loginHint) {
+        const openBrowser = async (url) => {
+            try {
+                await open(url, { wait: false });
+            }
+            catch (error) {
+                printError(`Failed to open browser: ${String(error)}`);
+            }
+        };
+        return {
+            scopes: [resource],
+            openBrowser,
+            successTemplate: 'You can close this window now.',
+            ...(loginHint && { loginHint }),
+        };
+    }
+}
+//# sourceMappingURL=NodeMsalAuthenticationProvider.js.map

package/dist/Authentication/NodeMsalAuthenticationProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeMsalAuthenticationProvider.js","sourceRoot":"","sources":["../../src/Authentication/NodeMsalAuthenticationProvider.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEzF,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAE/D,MAAM,OAAO,8BAA8B;IACjC,WAAW,CAAsC;IACjD,SAAS,CAAqB;IAC9B,OAAO,CAAqB;IAEpC,gBAAsB,CAAC;IAEhB,KAAK,CAAC,SAAS,CAAC,MAAc;QACnC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,GACvE,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QAC9C,MAAM,wBAAwB,GAAG;YAC/B,SAAS,EAAE,oBAAoB,GAAG,kBAAkB;YACpD,mBAAmB,EAAE,mBAAmB,CAAC,WAAW;YACpD,sHAAsH;YACtH,WAAW,EAAE,YAAY;YACzB,WAAW,EAAE,YAAY;YACzB,uBAAuB,EAAE,KAAK;SAC/B,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;QAEzF,MAAM,UAAU,GAAkB;YAChC,IAAI,EAAE;gBACJ,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;gBACrD,QAAQ,EAAE,aAAa;aACxB;YACD,KAAK,EAAE;gBACL,WAAW,EAAE,IAAI,sBAAsB,CAAC,WAAW,CAAC;aACrD;SACF,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC;IAEM,KAAK,CAAC,yBAAyB,CAAC,QAAgB,EAAE,SAAkB;QACzE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,GAAG,WAAW,EAAE,SAAS,CAAC,CAAC;QACnF,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAEM,eAAe;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAEM,KAAK,CAAC,qBAAqB;QAChC,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,cAAc,EAAE,CAAC;QACzE,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,QAAgB,EAChB,SAAkB;QAElB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,cAAc,EAAE,CAAC;QACzE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,aAAa,GAAG;gBACpB,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;gBACpB,MAAM,EAAE,CAAC,QAAQ,CAAC;aACnB,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;gBACxE,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,4BAA4B,EAAE,CAAC;oBAClD,OAAO,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAC7C,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE,SAAS,CAAC,CACtD,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;aAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC3B,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,MAAM,CACnB,qFAAqF,CACtF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAC7C,IAAI,CAAC,2BAA2B,CAAC,QAAQ,EAAE,SAAS,CAAC,CACtD,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,2BAA2B,CAAC,QAAgB,EAAE,SAAkB;QACtE,MAAM,WAAW,GAAG,KAAK,EAAE,GAAW,EAAiB,EAAE;YACvD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,UAAU,CAAC,2BAA2B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,CAAC,QAAQ,CAAC;YAClB,WAAW;YACX,eAAe,EAAE,gCAAgC;YACjD,GAAG,CAAC,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;SAChC,CAAC;IACJ,CAAC;CACF"}

package/dist/Authentication/OrchardAuthenticationProvider.d.ts

@@ -0,0 +1,13 @@
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+import { type Region } from '@microsoft/apps-common/services';
+import type { IAuthenticationProvider } from '../Types/Cli.types.js';
+export declare class OrchardAuthenticationProvider implements IAuthenticationProvider {
+    private _resourceList;
+    initAsync(region: Region): Promise<void>;
+    getAccessTokenForResource(resource: string, _loginHint?: string): Promise<string>;
+    getUserTenantId(): string | undefined;
+    getCachedAccountAsync(): Promise<string | undefined>;
+}
+//# sourceMappingURL=OrchardAuthenticationProvider.d.ts.map

package/dist/Authentication/OrchardAuthenticationProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrchardAuthenticationProvider.d.ts","sourceRoot":"","sources":["../../src/Authentication/OrchardAuthenticationProvider.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,MAAM,EAA+B,MAAM,iCAAiC,CAAC;AAE3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAGlE,qBAAa,6BAA8B,YAAW,uBAAuB;IAC3E,OAAO,CAAC,aAAa,CAAkB;IACjC,SAAS,CAAC,MAAM,EAAE,MAAM;IAGxB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAcvF,eAAe,IAAI,MAAM,GAAG,SAAS;IAI/B,qBAAqB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAG3D"}

package/dist/Authentication/OrchardAuthenticationProvider.js

@@ -0,0 +1,30 @@
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+import { RESOURCE_MAP } from '@microsoft/apps-common/services';
+import { cliEnvVarFullName, getCliEnvVar } from '../Utils/EnvVars.js';
+export class OrchardAuthenticationProvider {
+    _resourceList = [];
+    async initAsync(region) {
+        this._resourceList = RESOURCE_MAP[region];
+    }
+    async getAccessTokenForResource(resource, _loginHint) {
+        const match = this._resourceList.find((r) => r.audience === resource);
+        if (!match) {
+            return '';
+        }
+        const key = match.type === 'apihub' ? 'CONFIG_AUTH_APIHUB' : 'CONFIG_AUTH_PPAPI';
+        const token = getCliEnvVar(key);
+        if (!token) {
+            throw new Error(`Missing access token for proxy: environment variable ${cliEnvVarFullName(key)} is not set`);
+        }
+        return token;
+    }
+    getUserTenantId() {
+        return getCliEnvVar('CONFIG_AUTH_TENANTID');
+    }
+    async getCachedAccountAsync() {
+        return undefined;
+    }
+}
+//# sourceMappingURL=OrchardAuthenticationProvider.js.map

package/dist/Authentication/OrchardAuthenticationProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrchardAuthenticationProvider.js","sourceRoot":"","sources":["../../src/Authentication/OrchardAuthenticationProvider.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAA8B,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAG3F,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEnE,MAAM,OAAO,6BAA6B;IAChC,aAAa,GAAe,EAAE,CAAC;IACvC,KAAK,CAAC,SAAS,CAAC,MAAc;QAC5B,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,CAAC,yBAAyB,CAAC,QAAgB,EAAE,UAAmB;QACnE,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB,CAAC;QACjF,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,wDAAwD,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAC5F,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,eAAe;QACb,OAAO,YAAY,CAAC,sBAAsB,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}

package/dist/Authentication/ServicePrincipalAuthenticationProvider.d.ts

@@ -0,0 +1,23 @@
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+import type { Region } from '@microsoft/apps-common/services';
+import type { IAuthenticationProvider } from '../Types/Cli.types.js';
+/**
+ * Authenticates using a service principal (client credentials flow). Requires MS_CLI_SP_CLIENT_ID,
+ * MS_CLI_SP_CLIENT_SECRET, and MS_CLI_SP_TENANT_ID environment variables. Activated via
+ * MS_CLI_USE_SP_AUTH=true (or CI=true in test runs).
+ */
+export declare class ServicePrincipalAuthenticationProvider implements IAuthenticationProvider {
+    private _msalClient;
+    private _clientId;
+    private _clientSecret;
+    private _tenantId;
+    private _region;
+    constructor();
+    initAsync(region: Region): Promise<void>;
+    getAccessTokenForResource(resource: string, _loginHint?: string): Promise<string>;
+    getUserTenantId(): string | undefined;
+    getCachedAccountAsync(): Promise<string | undefined>;
+}
+//# sourceMappingURL=ServicePrincipalAuthenticationProvider.d.ts.map

package/dist/Authentication/ServicePrincipalAuthenticationProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServicePrincipalAuthenticationProvider.d.ts","sourceRoot":"","sources":["../../src/Authentication/ServicePrincipalAuthenticationProvider.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAG9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAGlE;;;;GAIG;AACH,qBAAa,sCAAuC,YAAW,uBAAuB;IACpF,OAAO,CAAC,WAAW,CAA4C;IAC/D,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,OAAO,CAAqB;;IAgBvB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAaxC,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAiBvF,eAAe,IAAI,MAAM,GAAG,SAAS;IAI/B,qBAAqB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAGlE"}