powerautomate-mcp 0.7.5 → 0.7.7

package/dist/index.js

@@ -24,7 +24,13 @@ var EnvironmentSchema = z.object({
   /** Azure region (e.g., "unitedstates", "europe") */
   region: z.string().min(1),
   /** Human-readable name */
-  displayName: z.string().optional()
+  displayName: z.string().optional(),
+  /**
+   * Optional override for the Dataverse hostname (e.g. "contoso.crm.dynamics.com").
+   * When omitted, the MCP resolves it at startup via the BAP admin API and falls
+   * back to a region-based guess if that call fails.
+   */
+  dataverseUrl: z.string().optional()
 });
 var AuthConfigSchema = z.object({
   /** Microsoft Entra application (client) ID */
@@ -422,7 +428,8 @@ function resolveEnvironment(config, envNameOrId) {
       name: envKey,
       id: envConfig.id,
       region: envConfig.region,
-      displayName: envConfig.displayName
+      displayName: envConfig.displayName,
+      dataverseUrl: envConfig.dataverseUrl
     };
   }
   {
@@ -609,6 +616,19 @@ function validateRowId(id) {
   }
   return id;
 }
+function validateFlowRunId(id) {
+  if (typeof id !== "string" || id.length < 10 || id.length > 128) {
+    throw new ConfigurationError(
+      `Invalid flow run ID format: expected alphanumeric identifier (10-128 chars)`
+    );
+  }
+  if (!/^[0-9A-Za-z]+$/.test(id)) {
+    throw new ConfigurationError(
+      `Invalid flow run ID format: expected alphanumeric identifier (10-128 chars)`
+    );
+  }
+  return id;
+}
 function validateSharePointHostname(hostname) {
   const validPattern = /^[a-z0-9-]+\.sharepoint\.(com|us|de|cn)$/i;
   if (!validPattern.test(hostname)) {
@@ -1436,7 +1456,7 @@ var FlowManagementApi = class {
   async getFlowRunActions(flowId, runId, environmentId) {
     const envId = environmentId ?? this.defaultEnvironmentId;
     const safeFlowId = validateRowId(flowId);
-    const safeRunId = validateRowId(runId);
+    const safeRunId = validateFlowRunId(runId);
     apiLogger.debug({ flowId: safeFlowId, runId: safeRunId, envId }, "Getting flow run actions");
     const url = this.buildUrl(envId, `/flows/${safeFlowId}/runs/${safeRunId}/actions`);
     const headers = await this.getAuthHeaders();
@@ -1514,7 +1534,7 @@ var FlowManagementApi = class {
   async resubmitRun(flowId, runId, environmentId) {
     const envId = environmentId ?? this.defaultEnvironmentId;
     const safeFlowId = validateRowId(flowId);
-    const safeRunId = validateRowId(runId);
+    const safeRunId = validateFlowRunId(runId);
     apiLogger.info({ flowId: safeFlowId, runId: safeRunId, envId }, "Resubmitting flow run");
     const flow = await this.getFlow(safeFlowId, envId);
     const triggers = flow.properties.definition?.triggers ?? {};
@@ -1537,7 +1557,7 @@ var FlowManagementApi = class {
   async cancelRun(flowId, runId, environmentId) {
     const envId = environmentId ?? this.defaultEnvironmentId;
     const safeFlowId = validateRowId(flowId);
-    const safeRunId = validateRowId(runId);
+    const safeRunId = validateFlowRunId(runId);
     apiLogger.info({ flowId: safeFlowId, runId: safeRunId, envId }, "Cancelling flow run");
     const url = this.buildUrl(envId, `/flows/${safeFlowId}/runs/${safeRunId}/cancel`);
     const headers = await this.getAuthHeaders();
@@ -3607,15 +3627,18 @@ var DataverseApi = class {
     const select = "$select=LogicalName,DisplayName,EntitySetName,Description,IsCustomEntity,IsManaged,SchemaName,PrimaryIdAttribute,PrimaryNameAttribute";
     const parts = [select];
     if (options.filter) parts.push(`$filter=${validateODataFilter(options.filter)}`);
-    parts.push(`$top=${options.top ?? 100}`);
-    parts.push("$orderby=LogicalName asc");
     const url = this.buildUrl("EntityDefinitions", parts.join("&"));
     const headers = await this.getAuthHeaders();
+    const cap = options.top ?? 100;
     return wrapApiCall(async () => {
       const response = await request(url, { method: "GET", headers });
       const data = await this.handleResponse(response, "List tables");
-      logger2.info({ count: data.value.length }, "Listed Dataverse tables");
-      return data.value;
+      const sorted = [...data.value].sort(
+        (a, b) => a.LogicalName.localeCompare(b.LogicalName)
+      );
+      const limited = sorted.slice(0, cap);
+      logger2.info({ count: limited.length, total: data.value.length }, "Listed Dataverse tables");
+      return limited;
     }, "List tables");
   }
   /**
@@ -3747,8 +3770,12 @@ var DataverseApi = class {
   // Environment Discovery
   // ==========================================================================
   /**
-   * Discover Dataverse environment URL from Power Platform environment
-   * This is needed because Dataverse URL format differs from Flow API
+   * Construct a best-guess Dataverse hostname from an environment GUID + region.
+   *
+   * WARNING: this is a last-resort fallback. The real Dataverse hostname is the
+   * org's `domainName` (exposed as `linkedEnvironmentMetadata.instanceUrl` on the
+   * BAP admin API) which usually does NOT match the environment GUID. Prefer
+   * resolving instanceUrl from BAP, or set `dataverseUrl` in the env config.
    */
   static getDataverseUrl(environmentId, region = "crm") {
     const regionMap = {
@@ -14566,15 +14593,34 @@ async function createMcpServer(serverConfig) {
   });
   let dataverseApi = null;
   try {
-    const dataverseUrl = DataverseApi.getDataverseUrl(
-      defaultEnv.id,
-      defaultEnv.region
-    );
+    let dataverseUrl;
+    let source = "fallback";
+    if (defaultEnv.dataverseUrl) {
+      dataverseUrl = defaultEnv.dataverseUrl;
+      source = "config";
+    } else {
+      try {
+        const envDetail = await adminApi.getEnvironment(defaultEnv.id);
+        const instanceUrl = envDetail.properties?.linkedEnvironmentMetadata?.instanceUrl;
+        if (instanceUrl) {
+          dataverseUrl = instanceUrl;
+          source = "bap";
+        }
+      } catch (err) {
+        logger.warn(
+          { err: err instanceof Error ? err.message : String(err) },
+          "BAP admin API did not return a Dataverse instanceUrl \u2014 falling back to region guess (may fail DNS)"
+        );
+      }
+    }
+    if (!dataverseUrl) {
+      dataverseUrl = DataverseApi.getDataverseUrl(defaultEnv.id, defaultEnv.region);
+    }
     dataverseApi = new DataverseApi({
       authProvider,
       environmentUrl: dataverseUrl
     });
-    logger.info({ dataverseUrl }, "Dataverse API initialized");
+    logger.info({ dataverseUrl, source }, "Dataverse API initialized");
   } catch (error) {
     logger.warn({ error }, "Failed to initialize Dataverse API \u2014 Dataverse tools will return guidance");
   }
@@ -14853,8 +14899,17 @@ async function createDeviceCodeAuthProvider(config, silentOnly = false) {
       const deviceCodeRequest = {
         scopes: mutableScopes,
         deviceCodeCallback: (response) => {
+          const url = response.verificationUri || "https://microsoft.com/devicelogin";
+          const code = response.userCode || "(code missing)";
+          if (!response.message) {
+            logger.warn(
+              { userCode: code, verificationUri: url },
+              "Device-code response missing 'message' field \u2014 using synthesized fallback"
+            );
+          }
+          const display = response.message || `To sign in, open ${url} in a browser on any device and enter the code ${code} to authenticate.`;
           console.log("");
-          console.log(`  \x1B[36m?\x1B[0m ${response.message}`);
+          console.log(`  \x1B[36m?\x1B[0m ${display}`);
           console.log("");
           console.log(`  \x1B[33m\u26A0\x1B[0m  SECURITY: Do not share this code. It expires in ${Math.floor((response.expiresIn ?? 900) / 60)} minutes.`);
           console.log("");