powerautomate-mcp 0.9.0 → 0.9.2

package/dist/index.js

@@ -3837,6 +3837,7 @@ var DataverseApi = class {
    */
   static getDataverseUrl(environmentId, region = "crm") {
     const regionMap = {
+      // Power Platform region names
       unitedstates: "crm",
       europe: "crm4",
       uk: "crm11",
@@ -3853,7 +3854,35 @@ var DataverseApi = class {
       government: "crm9",
       gcc: "crm9",
       gcchigh: "crm.microsoft.us",
-      dod: "crm.appsplatform.us"
+      dod: "crm.appsplatform.us",
+      // Azure region names (map to same CRM domains)
+      westus: "crm",
+      eastus: "crm",
+      centralus: "crm",
+      westus2: "crm",
+      eastus2: "crm",
+      southcentralus: "crm",
+      northcentralus: "crm",
+      westeurope: "crm4",
+      northeurope: "crm4",
+      uksouth: "crm11",
+      ukwest: "crm11",
+      eastasia: "crm5",
+      southeastasia: "crm5",
+      australiaeast: "crm6",
+      australiasoutheast: "crm6",
+      japaneast: "crm7",
+      japanwest: "crm7",
+      centralindia: "crm8",
+      southindia: "crm8",
+      canadacentral: "crm3",
+      canadaeast: "crm3",
+      brazilsouth: "crm2",
+      francecentral: "crm12",
+      francesouth: "crm12",
+      switzerlandnorth: "crm17",
+      germanywestcentral: "crm16",
+      uaenorth: "crm15"
     };
     const crmDomain = regionMap[region.toLowerCase()] || region;
     return `${environmentId}.${crmDomain}.dynamics.com`;
@@ -15083,9 +15112,11 @@ async function createMcpServer(serverConfig) {
           source = "bap";
         }
       } catch (err) {
+        const errMsg = err instanceof Error ? err.message : String(err);
+        const isAuthError = errMsg.includes("cached credentials") || errMsg.includes("authenticate");
         logger.warn(
-          { err: err instanceof Error ? err.message : String(err) },
-          "BAP admin API did not return a Dataverse instanceUrl \u2014 falling back to region guess (may fail DNS)"
+          { err: errMsg },
+          isAuthError ? "BAP admin API token not cached \u2014 run --setup again or add dataverseUrl to your environment config" : "BAP admin API did not return a Dataverse instanceUrl \u2014 falling back to region guess (may fail DNS)"
         );
       }
     }
@@ -15319,6 +15350,7 @@ async function createDeviceCodeAuthProvider(config, silentOnly = false) {
   };
   const pca = new PublicClientApplication(msalConfig);
   let currentAccount = null;
+  let interactiveAuthCompleted = false;
   const pendingTokenRequests = /* @__PURE__ */ new Map();
   currentAccount = loadAccount();
   if (!currentAccount) {
@@ -15365,7 +15397,7 @@ async function createDeviceCodeAuthProvider(config, silentOnly = false) {
         "No cached credentials available. Run 'powerautomate-mcp --setup' first to authenticate."
       );
     }
-    if (currentAccount) {
+    if (currentAccount && interactiveAuthCompleted) {
       throw new AuthenticationError(
         `Silent token acquisition failed for scopes: ${mutableScopes.join(", ")}. Resource may not be registered in the app registration. Re-run --setup to update permissions.`
       );
@@ -15415,6 +15447,7 @@ async function createDeviceCodeAuthProvider(config, silentOnly = false) {
         currentAccount = result.account;
         saveAccount(result.account);
       }
+      interactiveAuthCompleted = true;
       logger.info({ username: result.account?.username }, "Device code authentication succeeded");
       return result;
     } catch (err) {
@@ -15881,15 +15914,29 @@ async function runSetupWizard() {
         print(`  ${icons.check} ${c.green}Signed in${c.reset}`);
       }
       const additionalResources = [
-        { url: "https://service.powerapps.com", label: "PowerApps (connections)" },
-        { url: "https://api.bap.microsoft.com", label: "Admin API (environments)" }
+        { url: "https://service.powerapps.com", label: "PowerApps (connections)", critical: false },
+        { url: "https://api.bap.microsoft.com", label: "Admin API (environments/Dataverse)", critical: true }
       ];
-      for (const { url, label } of additionalResources) {
-        const token = authProvider.tryGetTokenForResourceSilent ? await authProvider.tryGetTokenForResourceSilent(url) : null;
-        if (token) {
-          print(`  ${icons.check} ${c.dim}${label}: authorized${c.reset}`);
-        } else {
-          print(`  ${c.dim}${icons.info || "-"} ${label}: will be authorized via admin consent (Step 3)${c.reset}`);
+      for (const { url, label, critical } of additionalResources) {
+        try {
+          let token = null;
+          if (authProvider.tryGetTokenForResourceSilent) {
+            token = await authProvider.tryGetTokenForResourceSilent(url);
+          }
+          if (token) {
+            print(`  ${icons.check} ${c.dim}${label}: authorized${c.reset}`);
+          } else {
+            print(`  ${c.dim}Authorizing ${label}...${c.reset}`);
+            await authProvider.getTokenForResource(url);
+            print(`  ${icons.check} ${c.dim}${label}: authorized (interactive)${c.reset}`);
+          }
+        } catch (err) {
+          if (critical) {
+            print(`  ${c.yellow || ""}${icons.warn} ${label}: not authorized \u2014 Dataverse tools may not work.${c.reset}`);
+            print(`  ${c.dim}  Add dataverseUrl to your environment config as a workaround.${c.reset}`);
+          } else {
+            print(`  ${c.dim}${icons.info || "-"} ${label}: not authorized (non-critical)${c.reset}`);
+          }
         }
       }
     } catch (error) {