powerautomate-mcp 0.7.1 → 0.7.2

package/dist/index.js

@@ -1006,6 +1006,11 @@ async function createWamAuthProvider(config, silentOnly = false) {
         "No cached credentials available. Run 'powerautomate-mcp --setup' first to authenticate."
       );
     }
+    if (currentAccount) {
+      throw new AuthenticationError(
+        `Silent token acquisition failed for scopes: ${mutableScopes.join(", ")}. Resource may not be registered in the app registration. Re-run --setup to update permissions.`
+      );
+    }
     try {
       const result = await pca.acquireTokenInteractive({
         scopes: mutableScopes,
@@ -14800,6 +14805,11 @@ async function createDeviceCodeAuthProvider(config, silentOnly = false) {
         "No cached credentials available. Run 'powerautomate-mcp --setup' first to authenticate."
       );
     }
+    if (currentAccount) {
+      throw new AuthenticationError(
+        `Silent token acquisition failed for scopes: ${mutableScopes.join(", ")}. Resource may not be registered in the app registration. Re-run --setup to update permissions.`
+      );
+    }
     try {
       logger.info("Starting device code authentication flow");
       const deviceCodeRequest = {
@@ -14946,6 +14956,15 @@ var REQUIRED_RESOURCE_ACCESS = [
     resourceAccess: [
       { id: "78ce3f0f-a1ce-49c2-8cde-64b5c0896db4", type: "Scope" }
     ]
+  },
+  {
+    // Business Application Platform (BAP) API — required for environment
+    // discovery and Power Platform admin operations
+    resourceAppId: "0e0bf3cc-3078-4fd4-9ef3-cb6dc0245b10",
+    resourceAccess: [
+      { id: "4ae1bf56-f562-4747-b7bc-2fa0874ed46f", type: "Scope" }
+      // user_impersonation
+    ]
   }
 ];
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;