@pacaf/wizard-ux 3.5.2 → 3.6.0

package/server/steps/05-environments.mjs

@@ -0,0 +1,436 @@
+// Step 5 - Environments. Discover environments via `pac env list --json` (using
+// the tenant-level sign-in from Step 4), let the user pick Dev (required), Test,
+// and Prod, then create the environment-scoped PAC profiles and write .env files.
+import { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync, appendFileSync, chmodSync } from 'node:fs';
+import { execFileSync } from 'node:child_process';
+import { dirname, join, resolve } from 'node:path';
+import { platform } from 'node:os';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { getSecret, recoverSecret, persistSecretToCache, clearSecretCache } from '../lib/dataverse-bridge.mjs';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+// PACKAGE_DIR locates sibling @pacaf/wizard lib files (must stay __dirname-relative).
+// PROJECT_DIR is the user's working directory (profile names, env files, git hooks).
+const PACKAGE_DIR = resolve(__dirname, '..', '..', '..');
+const PROJECT_DIR = process.cwd();
+const SHELL = await import(pathToFileURL(resolve(PACKAGE_DIR, 'wizard', 'lib', 'shell.mjs')).href);
+const CRYPTO = await import(pathToFileURL(resolve(PACKAGE_DIR, 'wizard', 'lib', 'crypto.mjs')).href);
+const PAC_TARGET = await import(pathToFileURL(resolve(PACKAGE_DIR, 'wizard', 'lib', 'pac-target.mjs')).href);
+const SCRUB = await import(pathToFileURL(resolve(PACKAGE_DIR, 'wizard', 'lib', 'scrub.mjs')).href);
+const VALIDATE = await import(pathToFileURL(resolve(PACKAGE_DIR, 'wizard', 'lib', 'validate.mjs')).href);
+
+// Sentinel select values.
+const MANUAL_ENTRY = '__manual__';
+const NONE = '__none__';
+// Transient profile created in Step 4 so this step can run `pac env list`.
+const DISCOVERY_PROFILE_NAME = 'pacaf-discovery';
+
+function hasCommand(name) {
+  try {
+    execFileSync(platform() === 'win32' ? 'where' : 'which', [name], { stdio: 'ignore' });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function formatPacAuthCreateError(profileName, url, output = '') {
+  const scrubbed = SCRUB.scrubSecrets(String(output || ''));
+  const lines = scrubbed.trim().split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
+  const detail = lines.find((line) => /^Error:/i.test(line)) || lines.at(-1) || 'pac auth create failed without a readable error message.';
+  return [
+    `${profileName} profile failed to create for ${url}.`,
+    `PAC reported: ${detail}`,
+    'Check that the app registration is added as an Application User, the client secret is current, and the credential source points at the intended environment.',
+  ].join('\n');
+}
+
+/**
+ * Remove any PP_CLIENT_SECRET=... line from .env.local. Called when the
+ * user picks 1Password storage so an encrypted blob from a previous run
+ * doesn't linger inside the (possibly cloud-synced) project folder.
+ */
+function removeSecretFromEnvLocal() {
+  const envLocalPath = join(PROJECT_DIR, '.env.local');
+  if (!existsSync(envLocalPath)) return;
+  const original = readFileSync(envLocalPath, 'utf-8');
+  if (!/^PP_CLIENT_SECRET=/m.test(original)) return;
+  const cleaned = original.replace(/^PP_CLIENT_SECRET=.*\r?\n?/m, '');
+  writeFileSync(envLocalPath, cleaned, 'utf-8');
+}
+
+function installPreCommitHook(log) {
+  const hookDir = join(PROJECT_DIR, '.git', 'hooks');
+  const hookPath = join(hookDir, 'pre-commit');
+  const hookSource = join(PROJECT_DIR, 'scripts', 'pre-commit-hook.sh');
+  if (!existsSync(join(PROJECT_DIR, '.git')) || !existsSync(hookSource)) return;
+  if (existsSync(hookPath)) {
+    const existing = readFileSync(hookPath, 'utf-8');
+    if (!existing.includes('papps-secret-guard')) return;
+  }
+  try {
+    mkdirSync(hookDir, { recursive: true });
+    copyFileSync(hookSource, hookPath);
+    if (platform() !== 'win32') chmodSync(hookPath, 0o755);
+    log.ok('Installed pre-commit hook');
+  } catch {
+    log.warn('Could not install pre-commit hook. Install scripts/pre-commit-hook.sh manually if desired.');
+  }
+}
+
+function createPacProfile(log, pac, targetKey, url, appId, secret, tenantId) {
+  const profileName = PAC_TARGET.buildPacProfileName({ rootDir: PROJECT_DIR, targetKey, profileType: 'spn', url });
+  const result = SHELL.runSafeCapture(pac, [
+    'auth', 'create', '--name', profileName, '--environment', url,
+    '--applicationId', appId, '--clientSecret', secret, '--tenant', tenantId,
+  ]);
+  if (!result.ok) throw new Error(formatPacAuthCreateError(profileName, url, result.stderr || result.stdout));
+  log.ok(`${profileName} profile created`);
+}
+
+/** Parse `pac env list --json` into a clean [{ url, name }] list. */
+function discoverEnvironments(pac) {
+  const res = SHELL.runSafeCapture(pac, ['env', 'list', '--json']);
+  if (!res.ok) return [];
+  const out = String(res.stdout || '');
+  const start = out.indexOf('[');
+  if (start < 0) return [];
+  let arr;
+  try { arr = JSON.parse(out.slice(start)); } catch { return []; }
+  if (!Array.isArray(arr)) return [];
+  return arr
+    .filter((e) => e && e.EnvironmentUrl)
+    .map((e) => ({ url: VALIDATE.normalizeDataverseUrl(e.EnvironmentUrl), name: e.FriendlyName || e.UniqueName || e.EnvironmentUrl }))
+    .filter((e) => e.url)
+    .sort((a, b) => a.name.localeCompare(b.name));
+}
+
+/** Find a profile's bracketed index in `pac auth list` output by its name. */
+function findProfileIndexByName(pac, name) {
+  const res = SHELL.runSafeCapture(pac, ['auth', 'list']);
+  if (!res.ok) return null;
+  for (const line of String(res.stdout || '').split(/\r?\n/)) {
+    const m = line.match(/^\s*\[(\d+)\]/);
+    if (m && line.includes(name)) return Number(m[1]);
+  }
+  return null;
+}
+
+export default {
+  meta: {
+    number: 5,
+    title: 'Environments',
+    description: 'Pick your Power Platform environments. We list them automatically using your sign-in from the previous step — choose Dev (required), and optionally Test and Prod. The matching PAC profiles and .env files are created for you.',
+    canRunInBrowser: true,
+  },
+
+  async questions(state) {
+    const pac = SHELL.pacPath();
+    const envs = pac ? discoverEnvironments(pac) : [];
+
+    if (envs.length > 0) {
+      const baseOptions = envs.map((e) => ({ value: e.url, label: `${e.name} — ${e.url.replace(/^https:\/\//, '')}` }));
+      const devOptions = [...baseOptions, { value: MANUAL_ENTRY, label: 'Enter a URL manually…' }];
+      const optionalOptions = [{ value: NONE, label: 'None' }, ...baseOptions, { value: MANUAL_ENTRY, label: 'Enter a URL manually…' }];
+      const known = (url) => url && baseOptions.some((o) => o.value === url);
+      return [
+        {
+          id: 'DEV_ENV',
+          type: 'select',
+          label: 'Development environment',
+          help: 'Where the app is built, scaffolded, and tested. Required.',
+          defaultValue: known(state.PP_ENV_DEV) ? state.PP_ENV_DEV : baseOptions[0].value,
+          options: devOptions,
+          required: true,
+        },
+        {
+          id: 'DEV_ENV_MANUAL',
+          type: 'url',
+          label: 'Development environment URL',
+          defaultValue: state.PP_ENV_DEV || '',
+          validatePattern: 'dataverseUrl',
+          required: true,
+          showIf: { id: 'DEV_ENV', equals: MANUAL_ENTRY },
+        },
+        {
+          id: 'TEST_ENV',
+          type: 'select',
+          label: 'Test environment (optional)',
+          defaultValue: known(state.PP_ENV_TEST) ? state.PP_ENV_TEST : NONE,
+          options: optionalOptions,
+        },
+        {
+          id: 'TEST_ENV_MANUAL',
+          type: 'url',
+          label: 'Test environment URL',
+          defaultValue: state.PP_ENV_TEST || '',
+          validatePattern: 'dataverseUrl',
+          showIf: { id: 'TEST_ENV', equals: MANUAL_ENTRY },
+        },
+        {
+          id: 'PROD_ENV',
+          type: 'select',
+          label: 'Production environment (optional)',
+          defaultValue: known(state.PP_ENV_PROD) ? state.PP_ENV_PROD : NONE,
+          options: optionalOptions,
+        },
+        {
+          id: 'PROD_ENV_MANUAL',
+          type: 'url',
+          label: 'Production environment URL',
+          defaultValue: state.PP_ENV_PROD || '',
+          validatePattern: 'dataverseUrl',
+          showIf: { id: 'PROD_ENV', equals: MANUAL_ENTRY },
+        },
+      ];
+    }
+
+    // Fallback: discovery returned nothing (e.g. a service principal without
+    // environment-list permissions). Fall back to manual URL entry.
+    return [
+      {
+        id: 'DEV_ENV_MANUAL',
+        type: 'url',
+        label: 'Development environment URL',
+        help: 'We could not list environments automatically. Paste the Dev environment URL.',
+        defaultValue: state.PP_ENV_DEV || '',
+        validatePattern: 'dataverseUrl',
+        required: true,
+      },
+      {
+        id: 'TEST_ENV_MANUAL',
+        type: 'url',
+        label: 'Test environment URL (optional)',
+        defaultValue: state.PP_ENV_TEST || '',
+        validatePattern: 'dataverseUrl',
+      },
+      {
+        id: 'PROD_ENV_MANUAL',
+        type: 'url',
+        label: 'Production environment URL (optional)',
+        defaultValue: state.PP_ENV_PROD || '',
+        validatePattern: 'dataverseUrl',
+      },
+    ];
+  },
+
+  async apply(answers, state, log) {
+    const pac = SHELL.pacPath();
+    if (!pac) throw new Error('PAC CLI was not found.');
+
+    const authProfileType = state.AUTH_PROFILE_TYPE || 'user';
+    const targetKey = state.WIZARD_TARGET_ENV || 'dev';
+    const dateStr = new Date().toISOString().slice(0, 10);
+
+    // Resolve each environment from its select value or manual override.
+    const resolveUrl = (selectId, manualId) => {
+      const sel = answers[selectId];
+      if (sel === NONE) return '';
+      if (sel === MANUAL_ENTRY || sel === undefined) {
+        const raw = String(answers[manualId] || '').trim();
+        return raw ? VALIDATE.normalizeDataverseUrl(raw) : '';
+      }
+      return VALIDATE.normalizeDataverseUrl(String(sel));
+    };
+    const devUrl = resolveUrl('DEV_ENV', 'DEV_ENV_MANUAL');
+    const testUrl = resolveUrl('TEST_ENV', 'TEST_ENV_MANUAL');
+    const prodUrl = resolveUrl('PROD_ENV', 'PROD_ENV_MANUAL');
+
+    if (!devUrl) throw new Error('A development environment is required.');
+    if (!VALIDATE.isValidDataverseUrl(devUrl)) throw new Error(`"${devUrl}" is not a valid Dataverse URL (expected https://<org>.crm.dynamics.com).`);
+    if (testUrl && !VALIDATE.isValidDataverseUrl(testUrl)) throw new Error(`"${testUrl}" is not a valid Dataverse URL.`);
+    if (prodUrl && !VALIDATE.isValidDataverseUrl(prodUrl)) throw new Error(`"${prodUrl}" is not a valid Dataverse URL.`);
+
+    log.ok(`Dev: ${devUrl}`);
+    if (testUrl) log.ok(`Test: ${testUrl}`);
+    if (prodUrl) log.ok(`Prod: ${prodUrl}`);
+
+    // ── User credentials flow ──
+    if (authProfileType === 'user') {
+      const userProfileName = PAC_TARGET.buildPacProfileName({ rootDir: PROJECT_DIR, targetKey, profileType: 'user', url: devUrl });
+
+      const discoveryIdx = findProfileIndexByName(pac, DISCOVERY_PROFILE_NAME);
+      if (discoveryIdx != null) {
+        // Retarget the (already-authenticated) discovery profile to Dev, then
+        // rename it to the environment-scoped name — no second sign-in.
+        SHELL.runSafeCapture(pac, ['auth', 'select', '--name', DISCOVERY_PROFILE_NAME]);
+        const sel = SHELL.runSafeCapture(pac, ['env', 'select', '--environment', devUrl]);
+        if (!sel.ok) throw new Error(`Could not target ${devUrl}: ${SCRUB.scrubSecrets(sel.stderr || sel.stdout || '')}`);
+        const renamed = SHELL.runSafeCapture(pac, ['auth', 'name', '--index', String(discoveryIdx), '--name', userProfileName]);
+        if (!renamed.ok) throw new Error(`Could not finalize the auth profile: ${SCRUB.scrubSecrets(renamed.stderr || renamed.stdout || '')}`);
+        log.ok(`Profile ${userProfileName} ready (targeting Dev).`);
+      } else if (findProfileIndexByName(pac, userProfileName) != null) {
+        // Re-run after a previous success: discovery was already renamed.
+        SHELL.runSafeCapture(pac, ['auth', 'select', '--name', userProfileName]);
+        SHELL.runSafeCapture(pac, ['env', 'select', '--environment', devUrl]);
+        log.ok(`Reusing existing profile ${userProfileName} (targeting Dev).`);
+      } else {
+        throw new Error('No sign-in was found. Go back to the previous step, sign in, then return here.');
+      }
+
+      // Write .env — 1Password references if configured, otherwise plain URLs.
+      const authMode = state.AUTH_MODE || '';
+      if (authMode === '1password' && state.OP_VAULT && state.OP_ITEM) {
+        const vault = state.OP_VAULT;
+        const itemName = state.OP_ITEM;
+        try { removeSecretFromEnvLocal(); } catch { /* best-effort */ }
+        try { clearSecretCache(); } catch { /* best-effort */ }
+        const envContent = [
+          '# .env - Safe to commit. Contains 1Password references, not secrets.',
+          `# Generated by setup wizard on ${dateStr}`,
+          '',
+          `PP_ENV_DEV=op://${vault}/${itemName}/env-dev`,
+          testUrl ? `PP_ENV_TEST=op://${vault}/${itemName}/env-test` : '',
+          prodUrl ? `PP_ENV_PROD=op://${vault}/${itemName}/env-prod` : '',
+          '',
+        ].filter((line) => line !== '').join('\n');
+        writeFileSync(join(PROJECT_DIR, '.env'), `${envContent}\n`, 'utf-8');
+        log.ok('Wrote .env with 1Password references');
+      } else {
+        const envContent = [
+          '# .env - Environment URLs for Power Platform.',
+          `# Generated by setup wizard on ${dateStr}`,
+          '',
+          `PP_ENV_DEV=${devUrl}`,
+          testUrl ? `PP_ENV_TEST=${testUrl}` : '',
+          prodUrl ? `PP_ENV_PROD=${prodUrl}` : '',
+          '',
+        ].filter((line) => line !== '').join('\n');
+        writeFileSync(join(PROJECT_DIR, '.env'), `${envContent}\n`, 'utf-8');
+        log.ok('Wrote .env with environment URLs');
+      }
+
+      installPreCommitHook(log);
+
+      const verification = PAC_TARGET.selectAndVerifyPacProfile({
+        pac,
+        rootDir: PROJECT_DIR,
+        wizardState: { WIZARD_TARGET_ENV: targetKey, PP_ENV_DEV: devUrl, PP_ENV_TEST: testUrl, PP_ENV_PROD: prodUrl },
+        targetKey,
+        profileType: 'user',
+        credentialValues: null,
+        powerConfigPath: join(PROJECT_DIR, 'power.config.json'),
+        requireCredentialMatch: false,
+        requirePowerConfig: false,
+        requirePowerConfigTarget: false,
+      });
+      log.ok(`Verified ${verification.profileName}`);
+      log.info(verification.whoInfo.raw.split('\n').map((line) => `  ${line}`).join('\n'));
+
+      return {
+        stateUpdate: { PP_ENV_DEV: devUrl, PP_ENV_TEST: testUrl, PP_ENV_PROD: prodUrl, AUTH_MODE: authMode },
+        completedStep: 5,
+      };
+    }
+
+    // ── Service Principal flow ──
+    const secret = getSecret() || recoverSecret();
+    if (!secret) throw new Error('Client secret could not be recovered. Go back to the sign-in step and re-enter it.');
+    const tenantId = String(state.PP_TENANT_ID || '').trim();
+    const clientId = String(state.PP_APP_ID || '').trim();
+    if (!tenantId || !clientId) throw new Error('Tenant ID and Client ID are required. Complete the earlier steps first.');
+    const authMode = String(state.AUTH_MODE || 'envlocal');
+
+    if (authMode === '1password') {
+      const vault = String(state.OP_VAULT || '').trim();
+      const itemName = String(state.OP_ITEM || '').trim();
+      if (!hasCommand('op')) throw new Error('1Password storage was selected, but the op CLI is not available.');
+      if (!vault || !itemName) throw new Error('1Password vault and item name are required.');
+      try { removeSecretFromEnvLocal(); } catch { /* best-effort */ }
+      try { clearSecretCache(); } catch { /* best-effort */ }
+      const envContent = [
+        '# .env - Safe to commit. Contains 1Password references, not secrets.',
+        `# Generated by setup wizard on ${dateStr}`,
+        '',
+        `PP_TENANT_ID=op://${vault}/${itemName}/tenant-id`,
+        `PP_APP_ID=op://${vault}/${itemName}/app-id`,
+        `PP_CLIENT_SECRET=op://${vault}/${itemName}/client-secret`,
+        `PP_ENV_DEV=op://${vault}/${itemName}/env-dev`,
+        testUrl ? `PP_ENV_TEST=op://${vault}/${itemName}/env-test` : '',
+        prodUrl ? `PP_ENV_PROD=op://${vault}/${itemName}/env-prod` : '',
+        '',
+      ].filter((line) => line !== '').join('\n');
+      writeFileSync(join(PROJECT_DIR, '.env'), `${envContent}\n`, 'utf-8');
+      log.ok('Wrote .env with 1Password references');
+    } else {
+      const gitignorePath = join(PROJECT_DIR, '.gitignore');
+      if (existsSync(gitignorePath)) {
+        const gitignore = readFileSync(gitignorePath, 'utf-8');
+        if (!gitignore.includes('.env.local')) appendFileSync(gitignorePath, '\n.env.local\n');
+      } else {
+        writeFileSync(gitignorePath, '.env.local\n', 'utf-8');
+      }
+      const envLocalContent = [
+        '# .env.local - DO NOT commit to Git.',
+        `# Generated by setup wizard on ${dateStr}`,
+        '',
+        `PP_TENANT_ID=${tenantId}`,
+        `PP_APP_ID=${clientId}`,
+        `PP_CLIENT_SECRET=${CRYPTO.encrypt(secret)}`,
+        `PP_ENV_DEV=${devUrl}`,
+        testUrl ? `PP_ENV_TEST=${testUrl}` : '',
+        prodUrl ? `PP_ENV_PROD=${prodUrl}` : '',
+        '',
+      ].filter((line) => line !== '').join('\n');
+      writeFileSync(join(PROJECT_DIR, '.env.local'), `${envLocalContent}\n`, 'utf-8');
+      if (platform() !== 'win32') {
+        try { chmodSync(join(PROJECT_DIR, '.env.local'), 0o600); } catch { /* best effort */ }
+      }
+      try { persistSecretToCache(secret); } catch { /* best-effort */ }
+      log.ok('Wrote .env.local');
+    }
+
+    log.info('Creating PAC SPN auth profiles...');
+    createPacProfile(log, pac, 'dev', devUrl, clientId, secret, tenantId);
+    if (testUrl) createPacProfile(log, pac, 'test', testUrl, clientId, secret, tenantId);
+    if (prodUrl) createPacProfile(log, pac, 'prod', prodUrl, clientId, secret, tenantId);
+
+    // Remove the transient discovery profile now that env-scoped ones exist.
+    SHELL.runSafeCapture(pac, ['auth', 'delete', '--name', DISCOVERY_PROFILE_NAME]);
+
+    installPreCommitHook(log);
+
+    const envTemplate = [
+      '# .env.template - Copy to .env.local and fill in values',
+      '# DO NOT commit .env.local to Git',
+      '',
+      'PP_TENANT_ID=',
+      'PP_APP_ID=',
+      'PP_CLIENT_SECRET=',
+      `PP_ENV_DEV=${devUrl}`,
+      testUrl ? `PP_ENV_TEST=${testUrl}` : '',
+      prodUrl ? `PP_ENV_PROD=${prodUrl}` : '',
+      '',
+    ].filter((line) => line !== '').join('\n');
+    writeFileSync(join(PROJECT_DIR, '.env.template'), `${envTemplate}\n`, 'utf-8');
+    log.ok('Wrote .env.template');
+
+    const opBin = hasCommand('op') ? 'op' : null;
+    const credentialValues = PAC_TARGET.resolveCredentialValues({ rootDir: PROJECT_DIR, opBin, source: authMode });
+    const verification = PAC_TARGET.selectAndVerifyPacProfile({
+      pac,
+      rootDir: PROJECT_DIR,
+      wizardState: { WIZARD_TARGET_ENV: targetKey, PP_ENV_DEV: devUrl, PP_ENV_TEST: testUrl, PP_ENV_PROD: prodUrl },
+      targetKey,
+      profileType: 'spn',
+      credentialValues,
+      powerConfigPath: join(PROJECT_DIR, 'power.config.json'),
+      requireCredentialMatch: true,
+      requirePowerConfig: false,
+      requirePowerConfigTarget: false,
+    });
+    log.ok(`Verified ${verification.profileName}`);
+    log.info(verification.whoInfo.raw.split('\n').map((line) => `  ${line}`).join('\n'));
+
+    return {
+      stateUpdate: {
+        PP_ENV_DEV: devUrl,
+        PP_ENV_TEST: testUrl,
+        PP_ENV_PROD: prodUrl,
+        AUTH_MODE: authMode,
+        HAS_OP: opBin !== null,
+      },
+      completedStep: 5,
+    };
+  },
+};

package/server/steps/{05-publisher.mjs → 06-publisher.mjs}

@@ -1,9 +1,10 @@
-// Step 5 — Solution & Publisher (solution-first, publisher auto-resolved).
+// Step 6 — Solution & Publisher (solution-first, publisher auto-resolved).
 import { dirname, resolve, join } from 'node:path';
 import { writeFileSync, unlinkSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { dvGet, dvPost, hasUsableSecret, setSecret, clearSecret } from '../lib/dataverse-bridge.mjs';
+import { parsePacTabularRows } from '../lib/pac-parse.mjs';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const PACKAGE_DIR = resolve(__dirname, '..', '..', '..');
@@ -52,55 +53,6 @@ function extractSolutionIdFromUrl(url) {
   return m ? m[1].toLowerCase() : null;
 }
 
-/**
- * Parse PAC CLI column-aligned tabular output into an array of row objects.
- * Finds the header line (containing known column keywords), determines column
- * boundaries from header token positions, and slices each subsequent data line
- * by those boundaries. Handles multi-word values (e.g. "Climb Tracker") and
- * aliased columns (e.g. "pub.customizationprefix").
- */
-function parsePacTabularRows(output, headerHints) {
-  const allLines = output.split(/\r?\n/);
-  const hints = headerHints || ['uniquename', 'solutionid', 'friendlyname'];
-
-  // Find the header line — first line containing at least one of the hints.
-  let headerIdx = -1;
-  for (let i = 0; i < allLines.length; i++) {
-    const lower = allLines[i].toLowerCase();
-    if (hints.some((h) => lower.includes(h))) {
-      headerIdx = i;
-      break;
-    }
-  }
-  if (headerIdx < 0) return [];
-
-  const headerLine = allLines[headerIdx];
-
-  // Extract column names and their start positions from the header.
-  const cols = [];
-  const re = /\S+/g;
-  let m;
-  while ((m = re.exec(headerLine)) !== null) {
-    cols.push({ name: m[0].toLowerCase(), start: m.index });
-  }
-
-  // Parse each data line after the header.
-  const rows = [];
-  for (let i = headerIdx + 1; i < allLines.length; i++) {
-    const line = allLines[i];
-    if (!line.trim()) continue;
-    if (/^(Connected|Microsoft|Version:|Online|Feedback)/i.test(line.trim())) continue;
-    const row = {};
-    for (let c = 0; c < cols.length; c++) {
-      const start = cols[c].start;
-      const end = c < cols.length - 1 ? cols[c + 1].start : line.length;
-      row[cols[c].name] = (start < line.length ? line.slice(start, end) : '').trim();
-    }
-    if (Object.values(row).some((v) => v)) rows.push(row);
-  }
-  return rows;
-}
-
 /**
  * Fetch solution + publisher by solution ID using a single joined FetchXML.
  * Uses <link-entity> to include publisher columns directly, avoiding the
@@ -248,7 +200,7 @@ async function fetchSolutionViaApi(solutionId) {
 
 export default {
   meta: {
-    number: 5,
+    number: 6,
     title: 'Solution & Publisher',
     description: 'Select or create the Power Platform solution for your Code App. The publisher (prefix) is resolved automatically from the solution.',
     canRunInBrowser: true,
@@ -436,7 +388,7 @@ export default {
   async apply(answers, state, log) {
     if (answers.__resume) {
       log.ok(`Reusing solution: ${state.SOLUTION_DISPLAY_NAME} (prefix: ${state.PUBLISHER_PREFIX})`);
-      return { stateUpdate: {}, completedStep: 5 };
+      return { stateUpdate: {}, completedStep: 6 };
     }
 
     const isUserAuth = (state.AUTH_PROFILE_TYPE || 'user') === 'user';
@@ -466,7 +418,7 @@ export default {
       log.ok(`Solution: ${sol.friendlyname || sol.uniquename}`);
       log.ok(`Publisher: ${sol.publisherFriendlyName || sol.publisherUniqueName || '?'} (prefix: ${sol.prefix})`);
       clearSecret();
-      return { stateUpdate: buildStateUpdate(sol), completedStep: 6 };
+      return { stateUpdate: buildStateUpdate(sol), completedStep: 7 };
     }
 
     // ── Selected an existing solution from dropdown ──
@@ -489,7 +441,7 @@ export default {
             PUBLISHER_PREFIX: pub?.customizationprefix || '',
             CHOICE_VALUE_PREFIX: String(pub?.customizationoptionvalueprefix || ''),
           },
-          completedStep: 6,
+          completedStep: 7,
         };
       }
       // User auth: selected from dropdown (came from pac env fetch)
@@ -498,7 +450,7 @@ export default {
       if (!sol?.solutionid) throw new Error('Could not fetch solution details. Try pasting the solution URL instead.');
       log.ok(`Solution: ${sol.friendlyname || sol.uniquename}`);
       log.ok(`Publisher prefix: ${sol.prefix || '?'}`);
-      return { stateUpdate: buildStateUpdate(sol), completedStep: 6 };
+      return { stateUpdate: buildStateUpdate(sol), completedStep: 7 };
     }
 
     // ── Create new ──
@@ -527,7 +479,7 @@ export default {
           PUBLISHER_PREFIX: manualPrefix,
           CHOICE_VALUE_PREFIX: '',
         },
-        completedStep: 6,
+        completedStep: 7,
       };
     }
 
@@ -559,7 +511,7 @@ export default {
         PUBLISHER_PREFIX: pubData.customizationprefix || '',
         CHOICE_VALUE_PREFIX: String(pubData.customizationoptionvalueprefix || ''),
       },
-      completedStep: 6,
+      completedStep: 7,
     };
   },
 };

package/server/steps/{06-solution.mjs → 07-solution.mjs}

@@ -1,12 +1,12 @@
-// Step 6 — Solution confirmation (auto-skip).
-// Publisher is now resolved in Step 5. This step just confirms and moves on.
+// Step 7 — Solution confirmation (auto-skip).
+// Publisher is now resolved in Step 6. This step just confirms and moves on.
 import { clearSecret } from '../lib/dataverse-bridge.mjs';
 
 export default {
   meta: {
-    number: 6,
+    number: 7,
     title: 'Solution Confirmed',
-    description: 'Solution and publisher details were resolved in Step 5.',
+    description: 'Solution and publisher details were resolved in Step 6.',
     canRunInBrowser: true,
   },
 
@@ -17,25 +17,25 @@ export default {
         id: '__auto',
         type: 'confirm',
         label: `Solution: "${state.SOLUTION_DISPLAY_NAME}" — Publisher prefix: ${state.PUBLISHER_PREFIX}`,
-        help: 'These were set in Step 5. Click Apply to continue.',
+        help: 'These were set in Step 6. Click Apply to continue.',
         defaultValue: true,
       }];
     }
     return [{
       id: '__missing',
       type: 'confirm',
-      label: 'Go back to Step 5 to select a solution first.',
+      label: 'Go back to Step 6 to select a solution first.',
       defaultValue: false,
     }];
   },
 
   async apply(answers, state, log) {
     if (!state.SOLUTION_UNIQUE_NAME || !state.PUBLISHER_PREFIX) {
-      throw new Error('Solution and publisher not set. Go back to Step 5.');
+      throw new Error('Solution and publisher not set. Go back to Step 6.');
     }
     log.ok(`Solution: ${state.SOLUTION_DISPLAY_NAME} (${state.SOLUTION_UNIQUE_NAME})`);
     log.ok(`Publisher prefix: ${state.PUBLISHER_PREFIX}`);
     clearSecret();
-    return { stateUpdate: {}, completedStep: 6 };
+    return { stateUpdate: {}, completedStep: 7 };
   },
 };

package/server/steps/{07-scaffold.mjs → 08-scaffold.mjs}

@@ -1,4 +1,4 @@
-// Step 7 - Scaffold. Browser-native long-running scaffold with live logs.
+// Step 8 - Scaffold. Browser-native long-running scaffold with live logs.
 import { existsSync, mkdirSync, readdirSync, writeFileSync, readFileSync } from 'node:fs';
 import { spawn, execFileSync } from 'node:child_process';
 import { dirname, join, resolve } from 'node:path';
@@ -187,13 +187,13 @@ pac code push
 |-------------|-----|
 ${envRows}
 
-Connector binding is intentionally deferred until the prototype is stable. Use WizardUX step 8 or \`pac code add-data-source\` when you are ready for real data.
+Connector binding is intentionally deferred until the prototype is stable. Use WizardUX step 9 or \`pac code add-data-source\` when you are ready for real data.
 `, 'utf-8');
 }
 
 export default {
   meta: {
-    number: 7,
+    number: 8,
     title: 'Scaffold the Code App',
     description: 'Generate the project, install dependencies, register with Power Platform, and run smoke tests.',
     canRunInBrowser: true,
@@ -290,7 +290,7 @@ export default {
     if (pnpm) {
       log.info('Detected pnpm — using it for faster installs and shared dependency cache.');
     } else {
-      log.info('pnpm not found — using npm. Tip: `corepack enable && corepack prepare pnpm@latest --activate` makes Step 7 noticeably faster.');
+      log.info('pnpm not found — using npm. Tip: `corepack enable && corepack prepare pnpm@latest --activate` makes Step 8 noticeably faster.');
     }
 
     // pnpm refuses `pnpm add` at a workspace root (pnpm-workspace.yaml present)
@@ -342,7 +342,7 @@ export default {
       try {
         verifyPacTarget({ pac, projectDir, state, credentialValues, profileType: 'user', requirePowerConfig: false, requirePowerConfigTarget: false });
       } catch (error) {
-        throw new Error(`${error.message}\n\npac code init requires the repo-scoped interactive PAC profile. Return to Step 4, enable user profile creation, complete browser/device sign-in, then retry Step 7.`);
+        throw new Error(`${error.message}\n\npac code init requires the repo-scoped interactive PAC profile. Return to Step 4, enable user profile creation, complete browser/device sign-in, then retry Step 8.`);
       }
       const powerConfigPath = join(projectDir, 'power.config.json');
       let skipInit = false;
@@ -366,7 +366,7 @@ export default {
           '--fileEntryPoint', 'index.html',
         ], { cwd: projectDir });
         if (!initOk) throw new Error('pac code init failed. Check the live output above, then retry this step.');
-        if (!existsSync(powerConfigPath)) throw new Error('pac code init completed without creating power.config.json. Check the PAC output above, then retry Step 7 after resolving that PAC error.');
+        if (!existsSync(powerConfigPath)) throw new Error('pac code init completed without creating power.config.json. Check the PAC output above, then retry Step 8 after resolving that PAC error.');
         const repair = PAC_TARGET.repairPowerConfigDisplayNames(powerConfigPath);
         if (repair.changed) log.warn(`Repaired quoted display name fields in power.config.json: ${repair.fields.join(', ')}`);
       }
@@ -376,7 +376,7 @@ export default {
       log.warn('PAC CLI not found; skipping pac code init.');
     }
 
-    log.info('Connector binding is deferred to step 8 after prototype validation.');
+    log.info('Connector binding is deferred to step 9 after prototype validation.');
 
     log.info('Running smoke tests...');
     if (await runCommand(log, 'npm run test:smoke', { cwd: projectDir })) log.ok('Smoke tests passed');
@@ -426,7 +426,7 @@ export default {
         PROJECT_DIR: projectDir,
         GIT_REMOTE: finalRemoteUrl || state.GIT_REMOTE || '',
       },
-      completedStep: 7,
+      completedStep: 8,
     };
   },
 };