powerautomate-mcp 0.7.2 → 0.7.4

package/dist/index.js

@@ -1041,6 +1041,19 @@ async function createWamAuthProvider(config, silentOnly = false) {
       const result = await acquireToken(SCOPES.FLOW);
       return result.accessToken;
     },
+    async tryGetTokenForResourceSilent(resource) {
+      try {
+        validateHttpsUrl(resource, "Token resource");
+        const url = new URL(resource);
+        if (!isAllowedTokenDomain(url.hostname)) return null;
+        if (!currentAccount) return null;
+        const scopes = [`${resource}/.default`];
+        const result = await pca.acquireTokenSilent({ scopes, account: currentAccount });
+        return result.accessToken;
+      } catch {
+        return null;
+      }
+    },
     async getTokenForResource(resource) {
       validateHttpsUrl(resource, "Token resource");
       const url = new URL(resource);
@@ -14857,6 +14870,26 @@ async function createDeviceCodeAuthProvider(config, silentOnly = false) {
       const result = await acquireToken(scopes);
       return result.accessToken;
     },
+    async tryGetTokenForResourceSilent(resource) {
+      try {
+        validateHttpsUrl(resource, "Token resource");
+        const url = new URL(resource);
+        if (!isAllowedTokenDomain(url.hostname)) {
+          return null;
+        }
+        if (!currentAccount) {
+          return null;
+        }
+        const scopes = [`${resource}/.default`];
+        const result = await pca.acquireTokenSilent({
+          scopes,
+          account: currentAccount
+        });
+        return result.accessToken;
+      } catch {
+        return null;
+      }
+    },
     async logout() {
       if (currentAccount) {
         const cache = pca.getTokenCache();
@@ -14952,18 +14985,21 @@ var REQUIRED_RESOURCE_ACCESS = [
     ]
   },
   {
-    resourceAppId: "00000007-0000-0000-c000-000000000000",
+    resourceAppId: "475226c6-020e-4fb2-8a90-7a972cbfc1d4",
     resourceAccess: [
-      { id: "78ce3f0f-a1ce-49c2-8cde-64b5c0896db4", type: "Scope" }
+      { id: "a4c50e78-6978-4ce3-b1c0-965c1f9b1128", type: "Scope" }
     ]
   },
   {
-    // Business Application Platform (BAP) API — required for environment
-    // discovery and Power Platform admin operations
     resourceAppId: "0e0bf3cc-3078-4fd4-9ef3-cb6dc0245b10",
     resourceAccess: [
       { id: "4ae1bf56-f562-4747-b7bc-2fa0874ed46f", type: "Scope" }
-      // user_impersonation
+    ]
+  },
+  {
+    resourceAppId: "00000007-0000-0000-c000-000000000000",
+    resourceAccess: [
+      { id: "78ce3f0f-a1ce-49c2-8cde-64b5c0896db4", type: "Scope" }
     ]
   }
 ];
@@ -15266,15 +15302,15 @@ async function runSetupWizard() {
         print(`  ${icons.check} ${c.green}Signed in${c.reset}`);
       }
       const additionalResources = [
-        "https://api.bap.microsoft.com",
-        "https://service.powerapps.com"
+        { url: "https://service.powerapps.com", label: "PowerApps (connections)" },
+        { url: "https://api.bap.microsoft.com", label: "Admin API (environments)" }
       ];
-      for (const resource of additionalResources) {
-        try {
-          await authProvider.getTokenForResource(resource);
-          print(`  ${icons.check} ${c.dim}Authorized ${resource.replace("https://", "")}${c.reset}`);
-        } catch {
-          print(`  ${c.dim}${icons.warn} Could not authorize ${resource.replace("https://", "")} (admin tools may be limited)${c.reset}`);
+      for (const { url, label } of additionalResources) {
+        const token = authProvider.tryGetTokenForResourceSilent ? await authProvider.tryGetTokenForResourceSilent(url) : null;
+        if (token) {
+          print(`  ${icons.check} ${c.dim}${label}: authorized${c.reset}`);
+        } else {
+          print(`  ${c.dim}${icons.info || "-"} ${label}: will be authorized via admin consent (Step 3)${c.reset}`);
         }
       }
     } catch (error) {