@microsoft/power-apps-native-host 0.2.22 → 0.3.0

package/lib/module/platform/resolveConnections.js

@@ -1,259 +0,0 @@
-"use strict";
-
-/*!
- * power-apps-native-host — resolveConnections
- *
- * Pure async helpers for the two connection-resolution strategies used by
- * useConnectionRefs:
- *
- *  • resolveViaStaticRefs — per-connector resolution using the static
- *    connectionReferences map from power.config.json.  Used by the Dev Player
- *    and during local development (no appId) or when the launch API is
- *    unavailable.  Handles pre-disambiguation ACL grants so inaccessible
- *    connections are excluded before the user is asked to pick.
- *
- *  • applyAclGrants — post-resolution ACL grants used by the fast path
- *    (production APKs via fetchAppLaunchData).
- *
- * Both helpers return / consume the shared AppLaunchResult shape so the
- * hook orchestrator can handle them uniformly.
- */
-
-import { addAadAppToConnectionAcl, parseJwtOid, SERVICE_POWERAPPS_SCOPE } from "./PowerPlatformConnectionApi.js";
-import { fetchInstanceUrl, buildEnvironmentEndpoint } from "./PowerPlatformEnvironmentApi.js";
-import { disambiguateConnections, extractConnectionId } from "../connections/disambiguate.js";
-import { ConnectionStatus } from "../connections/types.js";
-const API_VERSION = '1';
-
-// ---------------------------------------------------------------------------
-// ConnectorSchema
-// ---------------------------------------------------------------------------
-
-/**
- * Connector schema entry generated by `generate-connector-schemas`.
- * Keyed by data source name in the `schemaMap` passed to `useConnectionRefs`.
- */
-
-// ---------------------------------------------------------------------------
-// resolveViaStaticRefs
-// ---------------------------------------------------------------------------
-
-/**
- * Resolve connections from the static `connectionReferences` map.
- *
- * Steps:
- *  1. Build an apiId → schema lookup.
- *  2. In parallel: fetch the Dataverse instanceUrl and all connection instances
- *     for every connector.
- *  3. If `isvClientId` is set, run pre-disambiguation ACL grants — connections
- *     where the grant fails are marked `NeedsAclGrant` and excluded from
- *     resolution, prompting the user to create a new connection.
- *  4. Disambiguate: resolve single matches, invoke callbacks for ambiguous /
- *     missing cases, perform one-shot retries when `onMissingConnection` returns
- *     `true`.
- *  5. Build and return an `AppLaunchResult`-shaped object.
- */
-export async function resolveViaStaticRefs({
-  connectionReferences,
-  schemaMap,
-  environmentId,
-  region,
-  acquireToken,
-  token,
-  isvClientId,
-  onDisambiguationNeeded,
-  onMissingConnection
-}) {
-  // Build apiId → schema lookup from the static refs.
-  const schemaByApiId = Object.fromEntries(Object.values(connectionReferences).map(ref => {
-    const schema = ref.dataSources.map(ds => schemaMap[ds]).find(Boolean);
-    return schema ? [ref.id, schema] : null;
-  }).filter(entry => entry !== null));
-  const base = buildEnvironmentEndpoint(environmentId, region);
-  const headers = {
-    Authorization: `Bearer ${token}`
-  };
-
-  // Fetch Dataverse instanceUrl and all connection instances in parallel.
-  const [instanceUrl, ...connResults] = await Promise.all([fetchInstanceUrl(environmentId, region, acquireToken, token), ...Object.entries(connectionReferences).map(async ([localRefId, ref]) => {
-    const schema = schemaByApiId[ref.id];
-    if (!schema) {
-      return {
-        localRefId,
-        apiId: ref.id,
-        dataSources: ref.dataSources,
-        instances: []
-      };
-    }
-    const url = `${base}/connectivity/apis/${schema.name}/connections` + `?api-version=${API_VERSION}&$filter=environment eq '${environmentId}'`;
-    try {
-      const res = await fetch(url, {
-        headers
-      });
-      if (!res.ok) {
-        return {
-          localRefId,
-          apiId: ref.id,
-          dataSources: ref.dataSources,
-          instances: []
-        };
-      }
-      const body = await res.json();
-      const instances = (body.value ?? []).map(c => ({
-        id: extractConnectionId(c.name),
-        name: c.name,
-        apiId: ref.id,
-        status: c.properties?.statuses?.[0]?.status === 'Connected' ? ConnectionStatus.Connected : ConnectionStatus.NotConnected,
-        displayName: c.properties?.displayName
-      }));
-      return {
-        localRefId,
-        apiId: ref.id,
-        dataSources: ref.dataSources,
-        instances
-      };
-    } catch {
-      return {
-        localRefId,
-        apiId: ref.id,
-        dataSources: ref.dataSources,
-        instances: []
-      };
-    }
-  })]);
-
-  // Pre-disambiguation ACL grants (ISV apps only).
-  //
-  // Connections where the grant fails are marked NeedsAclGrant so
-  // disambiguation treats them as unavailable and surfaces the
-  // "missing connection" flow, steering the user to create a new one.
-  if (isvClientId) {
-    const paToken = await acquireToken([SERVICE_POWERAPPS_SCOPE]);
-    const paOid = paToken ? parseJwtOid(paToken) : null;
-    if (paToken && paOid) {
-      await Promise.all(connResults.map(async r => {
-        const connId = schemaByApiId[r.apiId]?.name;
-        if (!connId) return;
-        await Promise.all(r.instances.map(async inst => {
-          if (inst.status !== ConnectionStatus.Connected) return;
-          const ok = await addAadAppToConnectionAcl(connId, inst.id, environmentId, isvClientId, paOid, paToken);
-          if (!ok) inst.status = ConnectionStatus.NeedsAclGrant;
-        }));
-      }));
-    }
-  }
-
-  // Disambiguation.
-  const allConnectionsByApiId = {};
-  for (const r of connResults) {
-    allConnectionsByApiId[r.apiId] = r.instances;
-  }
-  const disambiguationResults = disambiguateConnections(connectionReferences, allConnectionsByApiId);
-  const resolvedIds = {};
-  const unresolvedApiIds = [];
-  for (const dr of disambiguationResults) {
-    if (dr.result.kind === 'resolved') {
-      resolvedIds[dr.localRefId] = dr.result.connectionId;
-    } else if (dr.result.kind === 'ambiguous') {
-      const picked = onDisambiguationNeeded ? await onDisambiguationNeeded({
-        localRefId: dr.localRefId,
-        apiId: dr.apiId,
-        candidates: dr.result.candidates
-      }) : null;
-      // Fall back to the first Connected candidate so the app can still start.
-      resolvedIds[dr.localRefId] = picked ?? dr.result.candidates[0]?.id ?? '';
-    } else {
-      // kind === 'missing'
-      let retried = false;
-      if (onMissingConnection) {
-        retried = await onMissingConnection({
-          localRefId: dr.localRefId,
-          apiId: dr.apiId
-        });
-      }
-      if (retried) {
-        // One-shot retry for this specific connector.
-        const schema = schemaByApiId[dr.apiId];
-        if (schema) {
-          try {
-            const url = `${base}/connectivity/apis/${schema.name}/connections` + `?api-version=${API_VERSION}&$filter=environment eq '${environmentId}'`;
-            const res = await fetch(url, {
-              headers
-            });
-            if (res.ok) {
-              const body = await res.json();
-              const retryInstances = (body.value ?? []).map(c => ({
-                id: extractConnectionId(c.name),
-                name: c.name,
-                apiId: dr.apiId,
-                status: c.properties?.statuses?.[0]?.status === 'Connected' ? ConnectionStatus.Connected : ConnectionStatus.NotConnected
-              }));
-              const connected = retryInstances.find(i => i.status === ConnectionStatus.Connected);
-              if (connected) {
-                resolvedIds[dr.localRefId] = connected.id;
-                continue;
-              }
-            }
-          } catch {
-            // Fall through to missing.
-          }
-        }
-      }
-      resolvedIds[dr.localRefId] = '';
-      unresolvedApiIds.push(dr.apiId);
-    }
-  }
-  const dataverseOrgUrl = (instanceUrl ?? '').replace(/\/$/, '');
-
-  // Build the final AppConnectionReference map.
-  const connectionRefs = {};
-  for (const [localRefId, ref] of Object.entries(connectionReferences)) {
-    const schema = schemaByApiId[ref.id];
-    const connectionName = resolvedIds[localRefId] ?? '';
-    const isDataverse = ref.id.includes('commondataserviceforapps');
-    const entry = {
-      apiId: ref.id,
-      runtimeUrl: schema?.properties.primaryRuntimeUrl ?? '',
-      connectionName,
-      datasetName: isDataverse ? dataverseOrgUrl : ''
-    };
-    for (const ds of ref.dataSources) {
-      connectionRefs[ds] = entry;
-    }
-  }
-  return {
-    connectionRefs,
-    dataverseOrgUrl,
-    missingConnectors: unresolvedApiIds
-  };
-}
-
-// ---------------------------------------------------------------------------
-// applyAclGrants
-// ---------------------------------------------------------------------------
-
-/**
- * Run idempotent post-resolution ACL grants on behalf of the ISV app.
- *
- * Used by the fast path (production APKs via `fetchAppLaunchData`) where the
- * launch API has already resolved the user's connections — grants are applied
- * after the fact so APIM accepts tokens issued to the ISV's AAD app.
- *
- * For the slow path the grants run before disambiguation inside
- * `resolveViaStaticRefs`, where they can still influence which connections
- * are considered available.
- *
- * Failures are swallowed — a failed grant will surface as a 403 at runtime
- * when the connector is called.
- */
-export async function applyAclGrants(connectionRefs, environmentId, isvClientId, acquireToken) {
-  const paToken = await acquireToken([SERVICE_POWERAPPS_SCOPE]);
-  const paOid = paToken ? parseJwtOid(paToken) : null;
-  if (!paToken || !paOid) return;
-  const seen = new Set();
-  await Promise.all(Object.values(connectionRefs).map(async ref => {
-    if (!ref.connectionName || seen.has(ref.connectionName)) return;
-    seen.add(ref.connectionName);
-    await addAadAppToConnectionAcl(ref.apiId, ref.connectionName, environmentId, isvClientId, paOid, paToken);
-  }));
-}