@squadbase/connectors 0.1.2-dev.7 → 0.1.2-dev.8

package/dist/{chunk-YXL7FUX2.js → chunk-HEEAFFVP.js}

@@ -385,7 +385,7 @@ var parameters18 = {
   clientId: new ParameterDefinition({
     slug: "client-id",
     name: "Azure AD Client ID",
-    description: "The Application (client) ID from your Azure AD app registration. Required API Permissions (Application, admin consent required): Team.ReadBasic.All, Channel.ReadBasic.All, ChannelMessage.Read.All, Chat.Read.All, User.Read.All",
+    description: "The Application (client) ID from your Azure AD app registration. Required API Permissions (Application type, admin consent required): Team.ReadBasic.All, Channel.ReadBasic.All, ChannelMessage.Read.All, Chat.Read.All, User.Read.All (or their higher-level equivalents such as Team.Read.All, Channel.Read.All, etc.)",
     envVarBaseKey: "MS_TEAMS_CLIENT_ID",
     type: "text",
     secret: false,

package/dist/index.js

@@ -18,7 +18,7 @@ import {
   parameters7,
   parameters8,
   parameters9
-} from "./chunk-YXL7FUX2.js";
+} from "./chunk-HEEAFFVP.js";
 
 // src/connector-setup.ts
 var ConnectorSetup = class {
@@ -6468,9 +6468,21 @@ const data = await res.json();
 - Pagination uses \`@odata.nextLink\` URL in the response
 - Required API permissions: Team.ReadBasic.All, Channel.ReadBasic.All, ChannelMessage.Read.All, Chat.Read.All, User.Read.All
 
+### Important: Permission Validation (MUST DO FIRST)
+Before proceeding with any data exploration or server logic creation, you MUST validate that the Azure AD app has the required permissions:
+
+1. After obtaining the access token, call \`GET /teams\` and \`GET /users\` as a permission check
+2. **If ANY of these calls return an empty array (\`{ "value": [] }\`) or an error, STOP immediately** and inform the user:
+   - "Your Azure AD app registration appears to be missing required API permissions. Microsoft Graph API returns empty results when permissions are not granted."
+   - "Please go to Azure Portal > App registrations > [Your App] > API permissions and add the following **Application** permissions (not Delegated), then click 'Grant admin consent':"
+   - Team.ReadBasic.All (or Team.Read.All), Channel.ReadBasic.All (or Channel.Read.All), ChannelMessage.Read.All (or ChannelMessage.ReadWrite.All), Chat.Read.All (or Chat.ReadWrite.All), User.Read.All (or User.ReadWrite.All)
+   - **Do NOT proceed with setup or create server logics until the user confirms permissions have been granted and you can verify non-empty results.**
+3. Only proceed with data exploration and server logic creation after confirming that API calls return actual data
+
 ### Troubleshooting
 - If the token request returns an error, verify that the Client ID, Client Secret, and Tenant ID are correct
-- If Graph API returns **403 Forbidden**, the Azure AD app is missing required Application permissions or admin consent has not been granted. Ask the user to go to Azure Portal > App registrations > API permissions and grant admin consent for: Team.ReadBasic.All, Channel.ReadBasic.All, ChannelMessage.Read.All, Chat.Read.All, User.Read.All
+- **If Graph API returns 200 OK but with empty results** (\`{ "value": [] }\`), this almost always means the Azure AD app is missing required Application permissions or admin consent has not been granted. Do NOT interpret empty results as "no data yet" \u2014 treat it as a permission issue and ask the user to verify permissions in Azure Portal
+- If Graph API returns **403 Forbidden**, the Azure AD app is missing required Application permissions or admin consent has not been granted. Ask the user to go to Azure Portal > App registrations > API permissions and grant admin consent for the required permissions (or their higher-level equivalents): Team.ReadBasic.All, Channel.ReadBasic.All, ChannelMessage.Read.All, Chat.Read.All, User.Read.All
 - If Graph API returns **401 Unauthorized**, the access token may be invalid or expired \u2014 re-acquire it using the client credentials flow`,
   tools: tools31
 });

package/dist/sdk.js

@@ -17,7 +17,7 @@ import {
   parameters7,
   parameters8,
   parameters9
-} from "./chunk-YXL7FUX2.js";
+} from "./chunk-HEEAFFVP.js";
 
 // src/connectors/kintone/sdk/index.ts
 function createClient(params) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@squadbase/connectors",
-  "version": "0.1.2-dev.7",
+  "version": "0.1.2-dev.8",
   "description": "Squadbase Connectors",
   "type": "module",
   "main": "dist/index.js",