powerautomate-mcp 0.7.9 → 0.8.0

package/dist/index.js

@@ -1134,6 +1134,28 @@ async function createAuthProviderFromConfig(clientId, tenantId, cachePath, silen
   };
   return createWamAuthProvider(config, silentOnly);
 }
+
+// src/utils/jwt-claims.ts
+function decodeJwtClaims(token) {
+  try {
+    const parts = token.split(".");
+    if (parts.length < 2 || !parts[1]) return {};
+    const padded = parts[1].replace(/-/g, "+").replace(/_/g, "/");
+    const padding = padded.length % 4 === 0 ? "" : "=".repeat(4 - padded.length % 4);
+    const json = Buffer.from(padded + padding, "base64").toString("utf-8");
+    const claims = JSON.parse(json);
+    return claims && typeof claims === "object" ? claims : {};
+  } catch {
+    return {};
+  }
+}
+function getOidFromToken(token) {
+  const claims = decodeJwtClaims(token);
+  const oid = claims.oid;
+  return typeof oid === "string" && oid.length > 0 ? oid : void 0;
+}
+
+// src/api/flow-management.ts
 var apiLogger = createChildLogger({ module: "flow-api" });
 var FlowManagementApi = class {
   authProvider;
@@ -1142,6 +1164,18 @@ var FlowManagementApi = class {
     this.authProvider = config.authProvider;
     this.defaultEnvironmentId = config.defaultEnvironmentId;
   }
+  /**
+   * Return the current user's Azure AD object ID derived from the access token.
+   * Used for client-side ownership filtering. Returns undefined if extraction fails.
+   */
+  async getCurrentUserOid() {
+    try {
+      const token = await this.authProvider.getToken();
+      return getOidFromToken(token);
+    } catch {
+      return void 0;
+    }
+  }
   /**
    * Get authorization header with bearer token
    */
@@ -4212,11 +4246,15 @@ var listFlowsInputSchema = z.object({
   environment: z.string().optional().describe("Environment name or GUID. Uses default if omitted."),
   search: z.string().optional().describe("Search flows by display name (case-insensitive substring match). Applied client-side after fetching."),
   filter: z.string().optional().describe(`OData filter expression (e.g., "properties/state eq 'Started'")`),
-  top: z.number().min(1).max(250).optional().describe("Maximum number of results to return (default 50, max 250)")
+  top: z.number().min(1).max(250).optional().describe("Maximum number of results to return (default 50, max 250)"),
+  scope: z.enum(["owned", "shared", "all"]).optional().default("all").describe(
+    "Filter by ownership: 'owned' = only flows you created, 'shared' = only flows shared with you, 'all' = both (default)."
+  ),
+  includeOwner: z.boolean().optional().default(true).describe("Include owner/creator name in the output (default true).")
 });
 var listFlowsTool = {
   name: "list_flows",
-  description: "List Power Automate flows in an environment. Returns flow names, IDs, state (Started/Stopped), and last modified dates. Use this to discover what flows exist before getting details or making changes.",
+  description: "List Power Automate flows in an environment. Returns flow names, IDs, state (Started/Stopped), last modified dates, and owners. Use scope='shared' to find flows shared with you, scope='owned' for your flows only. Use this to discover what flows exist before getting details or making changes.",
   inputSchema: {
     type: "object",
     properties: {
@@ -4237,6 +4275,17 @@ var listFlowsTool = {
         description: "Maximum number of results to return (default 50, max 250)",
         minimum: 1,
         maximum: 250
+      },
+      scope: {
+        type: "string",
+        enum: ["owned", "shared", "all"],
+        description: "Filter by ownership: 'owned' = only flows you created, 'shared' = only flows shared with you, 'all' = both (default).",
+        default: "all"
+      },
+      includeOwner: {
+        type: "boolean",
+        description: "Include owner/creator name in the output (default true).",
+        default: true
       }
     }
   }
@@ -4262,14 +4311,39 @@ async function handleListFlows(api, input) {
     const needle = parsed.search.toLowerCase();
     flows = flows.filter((f) => f.properties.displayName.toLowerCase().includes(needle));
   }
+  let currentUserOid;
+  if (parsed.scope !== "all" || parsed.includeOwner) {
+    currentUserOid = await api.getCurrentUserOid();
+    if (parsed.scope !== "all" && !currentUserOid) {
+      logger.warn("list_flows: could not derive current user OID; scope filter will not apply");
+    }
+  }
+  if (parsed.scope !== "all" && currentUserOid) {
+    flows = flows.filter((f) => {
+      const creatorId = f.properties.creator?.id;
+      if (!creatorId) return false;
+      const isOwned = creatorId === currentUserOid;
+      return parsed.scope === "owned" ? isOwned : !isOwned;
+    });
+  }
   if (flows.length === 0) {
-    return "No flows found";
+    return parsed.scope === "shared" ? "No flows shared with you in this environment." : parsed.scope === "owned" ? "No flows you own in this environment." : "No flows found";
   }
-  const lines = [`Flows (${flows.length}):`];
+  const scopeLabel = parsed.scope === "owned" ? "Owned" : parsed.scope === "shared" ? "Shared with you" : "Flows";
+  const lines = [`${scopeLabel} (${flows.length}):`];
   for (const flow of flows) {
     const state = flow.properties.state === "Started" ? "\u25B6" : "\u23F9";
     const modified = new Date(flow.properties.lastModifiedTime).toLocaleDateString();
-    lines.push(`  ${state} ${flow.properties.displayName} (${flow.name}) - ${modified}`);
+    let line = `  ${state} ${flow.properties.displayName} (${flow.name}) - ${modified}`;
+    if (parsed.includeOwner) {
+      const creator = flow.properties.creator;
+      const ownerName = creator?.displayName ?? creator?.email;
+      const isOwnedTag = currentUserOid && creator?.id === currentUserOid ? " [owned]" : creator ? " [shared]" : "";
+      if (ownerName) {
+        line += ` \u2014 ${ownerName}${isOwnedTag}`;
+      }
+    }
+    lines.push(line);
   }
   if (result.nextLink) {
     lines.push(`
@@ -4280,11 +4354,14 @@ async function handleListFlows(api, input) {
 var getFlowInputSchema = z.object({
   flowId: z.string().describe("The flow ID (GUID) to retrieve"),
   environment: z.string().optional().describe("Environment name or GUID. Uses default if omitted."),
-  includeDefinition: z.boolean().optional().default(true).describe("Include the full flow definition JSON (default true)")
+  includeDefinition: z.boolean().optional().default(true).describe("Include the full flow definition JSON (default true)"),
+  format: z.enum(["summary", "json", "both"]).optional().default("summary").describe(
+    "Output format: 'summary' = human-readable top-level overview (default), 'json' = full raw flow.properties.definition with all nested actions, 'both' = summary followed by full JSON. Use 'json' or 'both' to capture nested actions inside Switch/If/Foreach/Scope."
+  )
 });
 var getFlowTool = {
   name: "get_flow",
-  description: "Get the complete definition of a Power Automate flow including triggers, actions, and connection references. Use list_flows first to find flow IDs.",
+  description: "Get the complete definition of a Power Automate flow including triggers, actions, connection references, and description. Use list_flows first to find flow IDs. Set format='json' or format='both' to capture the FULL definition including nested actions inside Switch/If/Foreach/Scope (the default 'summary' format only shows top-level actions).",
   inputSchema: {
     type: "object",
     properties: {
@@ -4300,6 +4377,12 @@ var getFlowTool = {
         type: "boolean",
         description: "Include the full flow definition JSON (default true)",
         default: true
+      },
+      format: {
+        type: "string",
+        enum: ["summary", "json", "both"],
+        description: "Output format: 'summary' = top-level overview (default), 'json' = full raw definition with all nested actions, 'both' = summary plus full JSON.",
+        default: "summary"
       }
     },
     required: ["flowId"]
@@ -4307,7 +4390,7 @@ var getFlowTool = {
 };
 async function handleGetFlow(api, input) {
   const parsed = getFlowInputSchema.parse(input);
-  logger.info({ flowId: parsed.flowId }, "Executing get_flow");
+  logger.info({ flowId: parsed.flowId, format: parsed.format }, "Executing get_flow");
   const flow = await api.getFlow(parsed.flowId, parsed.environment);
   const triggers = flow.properties.definition.triggers;
   const actions = flow.properties.definition.actions;
@@ -4320,6 +4403,22 @@ async function handleGetFlow(api, input) {
       tier: ref.tier
     })
   );
+  const description = flow.properties.description;
+  const creator = flow.properties.creator;
+  if (parsed.format === "json") {
+    const payload = {
+      id: flow.name,
+      displayName: flow.properties.displayName,
+      description,
+      state: flow.properties.state,
+      createdTime: flow.properties.createdTime,
+      lastModifiedTime: flow.properties.lastModifiedTime,
+      creator,
+      connectionReferences: flow.properties.connectionReferences,
+      definition: flow.properties.definition
+    };
+    return JSON.stringify(payload, null, 2);
+  }
   const lines = [
     `## ${flow.properties.displayName}`,
     ``,
@@ -4329,6 +4428,12 @@ async function handleGetFlow(api, input) {
     `**Actions:** ${Object.keys(actions).length}`,
     `**Modified:** ${new Date(flow.properties.lastModifiedTime).toLocaleDateString()}`
   ];
+  if (description) {
+    lines.push(`**Description:** ${description}`);
+  }
+  if (creator?.displayName || creator?.email) {
+    lines.push(`**Owner:** ${creator.displayName ?? creator.email}${creator.id ? ` (${creator.id})` : ""}`);
+  }
   if (connectionRefs.length > 0) {
     lines.push(``, `### Connections`);
     for (const conn of connectionRefs) {
@@ -4337,7 +4442,7 @@ async function handleGetFlow(api, input) {
     }
   }
   if (parsed.includeDefinition !== false) {
-    lines.push(``, `### Actions`);
+    lines.push(``, `### Actions (top-level)`);
     for (const [name, action] of Object.entries(actions)) {
       const act = action;
       const deps = act.runAfter ? Object.keys(act.runAfter).join(", ") : "trigger";
@@ -4346,6 +4451,11 @@ async function handleGetFlow(api, input) {
         lines.push(`  inputs: ${JSON.stringify(act.inputs, null, 2).split("\n").join("\n  ")}`);
       }
     }
+    lines.push(``);
+    lines.push(`_Note: Nested actions inside Switch/If/Foreach/Scope are not expanded in this view. Call get_flow with format="json" or format="both" to capture them._`);
+  }
+  if (parsed.format === "both") {
+    lines.push(``, `### Full Definition (JSON)`, "```json", JSON.stringify(flow.properties.definition, null, 2), "```");
   }
   return lines.join("\n");
 }
@@ -5802,6 +5912,7 @@ var connectionRefSchema = z.object({
 });
 var createFlowInputSchema = z.object({
   displayName: z.string().describe("The display name for the new flow"),
+  description: z.string().optional().describe("Optional description for the flow"),
   trigger: triggerSchema.describe("The trigger definition"),
   triggerName: z.string().optional().default("manual").describe("Name for the trigger (default: 'manual')"),
   actions: z.record(actionSchema).describe("Actions in the flow, keyed by action name"),
@@ -5819,6 +5930,10 @@ var createFlowTool = {
         type: "string",
         description: "The display name for the new flow"
       },
+      description: {
+        type: "string",
+        description: "Optional description shown in the Power Automate UI"
+      },
       trigger: {
         type: "object",
         description: "The trigger definition with type, kind, inputs, and optional recurrence",
@@ -5946,7 +6061,8 @@ async function handleCreateFlow(api, input) {
     properties: {
       displayName: parsed.displayName,
       definition,
-      connectionReferences: Object.keys(connectionReferences).length > 0 ? connectionReferences : void 0
+      connectionReferences: Object.keys(connectionReferences).length > 0 ? connectionReferences : void 0,
+      ...parsed.description !== void 0 ? { description: parsed.description } : {}
     }
   };
   try {
@@ -6008,16 +6124,25 @@ var connectionRefSchema2 = z.object({
 var updateFlowInputSchema = z.object({
   flowId: z.string().describe("The flow ID (GUID) to update"),
   displayName: z.string().optional().describe("New display name for the flow"),
+  description: z.string().optional().describe("New description (set to empty string to clear)"),
   trigger: triggerSchema2.optional().describe("New trigger definition (replaces existing)"),
   triggerName: z.string().optional().describe("Name for the trigger"),
-  actions: z.record(actionSchema2).optional().describe("New actions (replaces all existing actions)"),
+  actions: z.record(actionSchema2).optional().describe(
+    "Actions. By default REPLACES all existing actions (you must include every action you want kept). When mergeActions=true, only the named actions are added/updated; everything else stays. Use patchActions for surgical edits to a single nested branch (smallest payload)."
+  ),
+  mergeActions: z.boolean().optional().default(false).describe(
+    "When true, deep-merge the provided 'actions' onto the current flow's actions instead of replacing wholesale. Recurses into nested actions/cases/else/foreach. Lets you patch a sub-tree without resending the entire flow."
+  ),
+  patchActions: z.record(actionSchema2.nullable()).optional().describe(
+    "Path-based patch map. Keys are slash-separated paths into the action tree, e.g. 'If_Recognized_Form/cases/Default/actions/Compose'. Set value to null to delete a node. Smallest payload \u2014 only the changed branches travel. Applied AFTER mergeActions."
+  ),
   connectionReferences: z.record(connectionRefSchema2).optional().describe("New connection references (replaces existing)"),
   environment: z.string().optional().describe("Environment name or GUID"),
   validateBeforeUpdate: z.boolean().optional().default(true).describe("Validate before updating")
 });
 var updateFlowTool = {
   name: "update_flow",
-  description: "Update an existing Power Automate flow. You can update the display name, trigger, actions, or connection references. Use get_flow first to see the current definition. Note: Updating replaces the entire definition, so include all actions you want to keep.",
+  description: "Update an existing Power Automate flow. Three update modes: (1) full replace \u2014 pass 'actions' to replace all top-level actions (default; you must include nested actions you want kept), (2) merge \u2014 set mergeActions=true to deep-merge only the actions you provide, leaving the rest intact, (3) patch \u2014 use patchActions with path keys (e.g. 'If/cases/Default/actions/Compose') for surgical edits with the smallest payload. Use get_flow with format='json' first to see the full nested action tree.",
   inputSchema: {
     type: "object",
     properties: {
@@ -6029,6 +6154,10 @@ var updateFlowTool = {
         type: "string",
         description: "New display name for the flow"
       },
+      description: {
+        type: "string",
+        description: "New description for the flow (empty string clears)"
+      },
       trigger: {
         type: "object",
         description: "New trigger definition (replaces existing)"
@@ -6039,7 +6168,16 @@ var updateFlowTool = {
       },
       actions: {
         type: "object",
-        description: "New actions (replaces all existing actions)"
+        description: "Actions. By default replaces all existing top-level actions. With mergeActions=true, deep-merges instead."
+      },
+      mergeActions: {
+        type: "boolean",
+        description: "When true, deep-merge 'actions' onto current flow instead of replacing. Recurses into nested actions/cases/else/foreach.",
+        default: false
+      },
+      patchActions: {
+        type: "object",
+        description: "Path-based patch map. Keys: slash-separated paths like 'If/cases/Default/actions/Compose'. Value=null deletes the node. Smallest payload."
       },
       connectionReferences: {
         type: "object",
@@ -6057,17 +6195,80 @@ var updateFlowTool = {
     required: ["flowId"]
   }
 };
+function deepMerge(base, patch) {
+  const out = { ...base };
+  for (const [key, value] of Object.entries(patch)) {
+    if (value === void 0) continue;
+    const baseVal = out[key];
+    if (value !== null && typeof value === "object" && !Array.isArray(value) && baseVal !== null && typeof baseVal === "object" && !Array.isArray(baseVal)) {
+      out[key] = deepMerge(
+        baseVal,
+        value
+      );
+    } else {
+      out[key] = value;
+    }
+  }
+  return out;
+}
+function applyPathPatch(actions, path, value) {
+  const segments = path.split("/").filter(Boolean);
+  if (segments.length === 0) return actions;
+  const result = JSON.parse(JSON.stringify(actions));
+  let cursor = result;
+  for (let i = 0; i < segments.length - 1; i++) {
+    const seg = segments[i];
+    const next = cursor[seg];
+    if (next === null || typeof next !== "object" || Array.isArray(next)) {
+      cursor[seg] = {};
+    }
+    cursor = cursor[seg];
+  }
+  const lastSeg = segments[segments.length - 1];
+  if (value === null) {
+    delete cursor[lastSeg];
+  } else {
+    cursor[lastSeg] = value;
+  }
+  return result;
+}
 async function handleUpdateFlow(api, input) {
   const parsed = updateFlowInputSchema.parse(input);
-  logger.info({ flowId: parsed.flowId }, "Executing update_flow");
+  logger.info(
+    {
+      flowId: parsed.flowId,
+      mergeActions: parsed.mergeActions,
+      hasPatch: !!parsed.patchActions
+    },
+    "Executing update_flow"
+  );
   const currentFlow = await api.getFlow(parsed.flowId, parsed.environment);
   const currentDef = currentFlow.properties.definition;
   const currentConnRefs = currentFlow.properties.connectionReferences;
   const newDisplayName = parsed.displayName ?? currentFlow.properties.displayName;
+  const newDescription = parsed.description !== void 0 ? parsed.description : currentFlow.properties.description;
   let newDefinition;
-  if (parsed.trigger || parsed.actions) {
+  let resolvedActions;
+  if (parsed.actions || parsed.patchActions) {
+    if (parsed.mergeActions && parsed.actions) {
+      resolvedActions = deepMerge(
+        currentDef.actions,
+        parsed.actions
+      );
+    } else if (parsed.actions) {
+      resolvedActions = parsed.actions;
+    } else {
+      resolvedActions = JSON.parse(JSON.stringify(currentDef.actions));
+    }
+    if (parsed.patchActions) {
+      for (const [path, value] of Object.entries(parsed.patchActions)) {
+        resolvedActions = applyPathPatch(resolvedActions, path, value);
+      }
+    }
+  }
+  if (parsed.trigger || resolvedActions) {
     const triggerName = parsed.triggerName ?? Object.keys(currentDef.triggers)[0] ?? "manual";
-    const processedActions = parsed.actions ? preprocessFlowActions(parsed.actions) : currentDef.actions;
+    const processedActions = resolvedActions ? preprocessFlowActions(resolvedActions) : currentDef.actions;
     newDefinition = {
       $schema: currentDef.$schema,
       contentVersion: currentDef.contentVersion,
@@ -6121,7 +6322,8 @@ async function handleUpdateFlow(api, input) {
     properties: {
       displayName: newDisplayName,
       definition: newDefinition,
-      connectionReferences: newConnRefs
+      connectionReferences: newConnRefs,
+      ...newDescription !== void 0 ? { description: newDescription } : {}
     }
   };
   try {