powerautomate-mcp 0.5.1 → 0.5.3

package/dist/index.js

@@ -381,6 +381,20 @@ Create the file with your Microsoft Entra app client ID and Power Automate envir
       err
     );
   }
+  const envClientId = env["PA_MCP_CLIENT_ID"];
+  if (envClientId) {
+    const UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+    if (!UUID_RE3.test(envClientId)) {
+      throw new ConfigurationError(
+        `PA_MCP_CLIENT_ID is not a valid UUID: ${envClientId.substring(0, 50)}`
+      );
+    }
+    parsed.auth = {
+      ...parsed.auth ?? {},
+      clientId: envClientId
+    };
+    logger.info("Using client ID from PA_MCP_CLIENT_ID environment variable");
+  }
   try {
     const config = validateConfig(parsed);
     logger.info(
@@ -14162,7 +14176,7 @@ async function createMcpServer(serverConfig) {
   const server = new Server(
     {
       name: "powerautomate-mcp",
-      version: "0.5.1"
+      version: "0.5.3"
     },
     {
       capabilities: {
@@ -14519,7 +14533,6 @@ function getDefaultEnvironment(environments) {
 }
 
 // src/setup/published-app.ts
-var PUBLISHED_APP_CLIENT_ID = "20ae33ee-6743-4786-9b00-8eb7bfebfd11";
 var APP_DISPLAY_NAME = "Power Automate MCP";
 var REDIRECT_URI = "https://login.microsoftonline.com/common/oauth2/nativeclient";
 var REQUIRED_RESOURCE_ACCESS = [
@@ -14534,8 +14547,10 @@ var REQUIRED_RESOURCE_ACCESS = [
   {
     resourceAppId: "7df0a125-d3be-4c96-aa54-591f83ff541c",
     resourceAccess: [
-      { id: "e07c4438-06fe-4349-9077-b8ab4e888e21", type: "Scope" },
-      { id: "f3a53f5e-1975-4e99-8c6e-c6a0dfac61f6", type: "Scope" }
+      { id: "e45c5562-459d-4d1b-8148-83eb1b6dcf83", type: "Scope" },
+      { id: "30b2d850-00c3-4802-b7ae-ece9af9de5c6", type: "Scope" },
+      { id: "822a9cde-503a-472d-a530-d1dc9cd0d52b", type: "Scope" },
+      { id: "d05743e4-fb24-4dff-8a33-0f6c73c964bd", type: "Scope" }
     ]
   },
   {
@@ -14623,6 +14638,8 @@ async function createAppRegistration(displayName) {
     "false",
     "--enable-id-token-issuance",
     "false",
+    "--is-fallback-public-client",
+    "true",
     "--public-client-redirect-uris",
     REDIRECT_URI,
     "--required-resource-accesses",
@@ -14733,56 +14750,69 @@ function readExistingClientId() {
     return null;
   }
 }
-async function resolveAppRegistration() {
+async function promptForClientId(askUser) {
+  print("");
+  print(`  ${c.yellow}You need a Microsoft Entra app registration for your tenant.${c.reset}`);
+  print(`  ${c.dim}Create one in the Azure portal with these delegated permissions:${c.reset}`);
+  print(`    ${c.dim}\u2022 Microsoft Graph: User.Read, Sites.ReadWrite.All, Files.ReadWrite.All${c.reset}`);
+  print(`    ${c.dim}\u2022 Power Automate: Flows.Read.All, Flows.Manage.All, Activity.Read.All, Approvals.Manage.All${c.reset}`);
+  print(`    ${c.dim}\u2022 Dynamics CRM: user_impersonation${c.reset}`);
+  print(`  ${c.dim}Enable "Allow public client flows" for device code auth.${c.reset}`);
+  print("");
+  while (true) {
+    const input = await askUser(`  ${c.cyan}?${c.reset} Paste your app's ${c.bold}Client ID${c.reset}: `);
+    if (input && UUID_RE2.test(input)) {
+      return input;
+    }
+    print(`  ${c.red}Invalid format \u2014 must be a UUID (e.g., 12345678-abcd-1234-abcd-123456789abc)${c.reset}`);
+  }
+}
+async function resolveAppRegistration(askUser) {
+  const envClientId = process.env["PA_MCP_CLIENT_ID"];
+  if (envClientId && UUID_RE2.test(envClientId)) {
+    print(`  ${icons.check} Using client ID from PA_MCP_CLIENT_ID: ${c.dim}${envClientId}${c.reset}`);
+    return { clientId: envClientId, created: false };
+  }
   const existingId = readExistingClientId();
   if (existingId) {
     print(`  ${icons.check} Reusing app from existing config: ${c.dim}${existingId}${c.reset}`);
     return { clientId: existingId, created: false };
   }
   const hasAzCli = await checkAzureCli();
-  if (!hasAzCli) {
-    print(`  ${c.dim}Azure CLI not found \u2014 using shared app${c.reset}`);
-    print(`  ${icons.check} Client ID: ${c.dim}${PUBLISHED_APP_CLIENT_ID}${c.reset}`);
-    return { clientId: PUBLISHED_APP_CLIENT_ID, created: false };
-  }
-  print(`  ${c.dim}Azure CLI detected${c.reset}`);
-  try {
-    const azUser = await ensureAzureCliLogin();
-    print(`  ${icons.check} Azure CLI signed in as ${c.bold}${azUser}${c.reset}`);
-  } catch (error) {
-    const msg = error instanceof Error ? error.message : String(error);
-    print(`  ${c.yellow}Azure CLI login failed: ${msg}${c.reset}`);
-    print(`  ${c.dim}Falling back to shared app${c.reset}`);
-    print(`  ${icons.check} Client ID: ${c.dim}${PUBLISHED_APP_CLIENT_ID}${c.reset}`);
-    return { clientId: PUBLISHED_APP_CLIENT_ID, created: false };
-  }
-  const existingAppId = await findExistingApp(APP_DISPLAY_NAME);
-  if (existingAppId) {
-    print(`  ${icons.check} Found existing app: ${c.dim}${existingAppId}${c.reset}`);
-    try {
-      await addWamRedirectUri(existingAppId);
-    } catch {
-    }
-    return { clientId: existingAppId, created: false };
-  }
-  print(`  ${c.dim}Creating app registration...${c.reset}`);
-  try {
-    const newId = await createAppRegistration(APP_DISPLAY_NAME);
-    print(`  ${icons.check} App created: ${c.dim}${newId}${c.reset}`);
+  if (hasAzCli) {
+    print(`  ${c.dim}Azure CLI detected${c.reset}`);
     try {
-      await addWamRedirectUri(newId);
-      print(`  ${icons.check} WAM redirect URI configured`);
-    } catch {
-      print(`  ${c.dim}WAM redirect URI skipped (non-critical)${c.reset}`);
+      const azUser = await ensureAzureCliLogin();
+      print(`  ${icons.check} Azure CLI signed in as ${c.bold}${azUser}${c.reset}`);
+      const existingAppId = await findExistingApp(APP_DISPLAY_NAME);
+      if (existingAppId) {
+        print(`  ${icons.check} Found existing app: ${c.dim}${existingAppId}${c.reset}`);
+        try {
+          await addWamRedirectUri(existingAppId);
+        } catch {
+        }
+        return { clientId: existingAppId, created: false };
+      }
+      print(`  ${c.dim}Creating app registration...${c.reset}`);
+      const newId = await createAppRegistration(APP_DISPLAY_NAME);
+      print(`  ${icons.check} App created: ${c.dim}${newId}${c.reset}`);
+      try {
+        await addWamRedirectUri(newId);
+        print(`  ${icons.check} WAM redirect URI configured`);
+      } catch {
+        print(`  ${c.dim}WAM redirect URI skipped (non-critical)${c.reset}`);
+      }
+      return { clientId: newId, created: true };
+    } catch (error) {
+      const msg = error instanceof Error ? error.message : String(error);
+      print(`  ${c.yellow}Azure CLI failed: ${msg}${c.reset}`);
     }
-    return { clientId: newId, created: true };
-  } catch (error) {
-    const msg = error instanceof Error ? error.message : String(error);
-    print(`  ${c.yellow}App creation failed: ${msg}${c.reset}`);
-    print(`  ${c.dim}Falling back to shared app${c.reset}`);
-    print(`  ${icons.check} Client ID: ${c.dim}${PUBLISHED_APP_CLIENT_ID}${c.reset}`);
-    return { clientId: PUBLISHED_APP_CLIENT_ID, created: false };
+  } else {
+    print(`  ${c.dim}Azure CLI not found \u2014 skipping automatic app creation${c.reset}`);
   }
+  const manualId = await promptForClientId(askUser);
+  print(`  ${icons.check} Client ID: ${c.dim}${manualId}${c.reset}`);
+  return { clientId: manualId, created: false };
 }
 async function runSetupWizard() {
   const rl = createInterface({
@@ -14800,7 +14830,7 @@ async function runSetupWizard() {
     printHeader();
     const totalSteps = 5;
     printStep(1, totalSteps, "App Registration");
-    const appResult = await resolveAppRegistration();
+    const appResult = await resolveAppRegistration(prompt);
     const clientId = appResult.clientId;
     printStep(2, totalSteps, "Sign In");
     const cacheResult = clearTokenCache();
@@ -15007,10 +15037,17 @@ Options:
   --port <N>     Port for HTTP transport (default: 3000)
   --help, -h     Show this help message
 
+Environment Variables:
+  PA_MCP_CLIENT_ID   Microsoft Entra app client ID (overrides config file)
+  PA_CONFIG_PATH     Custom path to config.json
+
 First Run:
   If no configuration exists, the setup wizard will run automatically.
   You can also run it manually with --setup.
 
+  Each tenant needs its own Microsoft Entra app registration.
+  The wizard can create one via Azure CLI, or you can provide one manually.
+
 Configuration:
   Config file: ${configPath}