AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified Apache-2.0 Self-run

Code Apps

skill-satriotsubasa-powerplatform-core-code-apps · by satriotsubasa

>

No reviews yet
0 installs
1 views
0.0% view→install

Install

$ agentstack add skill-satriotsubasa-powerplatform-core-code-apps

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-satriotsubasa-powerplatform-core-code-apps)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
28d ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Code Apps? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Power Apps Code Apps

Power Apps Code Apps is the code-first SPA hosting model: a standard web app (React/Vue/TS, built with Vite) that imports the @microsoft/power-apps client library and is published into a Power Platform environment, where the platform handles Entra authentication, DLP, sharing, and Conditional Access. It is distinct from PCF (components inside model-driven forms) and Canvas apps (built in maker studio). Keep the app source-controlled, build before every push, and treat power.config.json as the bridge between the local project and the target environment.

When to use this

  • Scaffold a new code app from the Microsoft Vite template and initialize it against an environment.
  • Add Dataverse (or connector) data sources and use the generated typed services for CRUD.
  • Run the app locally, build it, and push it to a Power Platform environment.
  • Work in a repo that uses the multi-app CodeApp/ folder pattern (several code apps side by side).
  • Plan ALM promotion (Dev → Test → Prod) via solutions, pipelines, and connection references.

For a control embedded inside a model-driven form, use pcf-and-web-resources. For Dataverse schema or data operations behind the app, use dataverse-schema and data-operations.

Helpers

Helpers live in the plugin's scripts/ directory at the plugin root, not inside this skill folder. Resolve the plugin root and invoke them:

  • Claude Code: python "$CLAUDE_PLUGIN_ROOT/scripts/push_code_app.py" --help
  • Codex: python "$CODEX_PLUGIN_ROOT/scripts/push_code_app.py" --help (also exposed as $PLUGIN_ROOT)
  • Standalone / unsure: the scripts/ folder sits beside this skill bundle; invoke by its path within the install.

| Helper | Use it to | | --- | --- | | push_code_app.py | Build (npm run build) and push a code app. Defaults to the npm CLI (npx power-apps push); pass --cli pac for legacy pac code push and --solution-name to target a specific solution. Use --path to point at one app, --all to push every app under a CodeApp/ folder in sequence, --dry-run to preview, and --skip-build only when pushing already-compiled output. |

Discovery: the orchestrator's discover_context.py reports detected code-app roots (and their display names / environment IDs) in its code_apps key. A repo is a code app when power.config.json exists at the root or in a subdirectory.

Workflow

  1. Scaffold. npx degit github:microsoft/PowerAppsCodeApps/templates/vite my-app, then npm install. Do not introduce a second app toolchain if the template already provides one.
  2. Initialize. npx power-apps init (or --displayName/--environmentId non-interactively) writes power.config.json and authenticates against the environment.
  3. Add data sources. pac code add-data-source -a dataverse -t generates typed …Model.ts and …Service.ts files under /generated/services/. Do not hand-edit generated files — regenerate instead. Use select to limit columns; exclude system-managed fields from create payloads; send only changed fields on update.
  4. Develop locally. npm run dev, opening the Local Play URL in the same browser profile as the tenant. Note that Chrome/Edge block public-origin requests to localhost by default (since Dec 2025) — grant the prompt or configure allow="local-network-access".
  5. Build, then push. npm run build (tsc -b && vite build), then push with push_code_app.py. The push returns a Power Apps URL to run and share the app.
  6. Promote via ALM. Add the app to a solution (maker portal → Add existing → App → Code app) and promote through Power Platform Pipelines. Use connection references instead of hardcoded connector credentials so the solution moves across environments cleanly.

Safety and decision rules

  • Before any push or other live mutation, run the mandatory live-mutation preflight from the powerplatform-core orchestrator and stop if any required field is missing. A push publishes into a live environment — treat it as a mutation, not a build step.
  • Build, then push. Never push without a fresh npm run build unless the user explicitly asks to push existing compiled output (--skip-build), and say so when you do.
  • List multiple apps before pushing. If discovery returns more than one entry in code_apps (the multi-app CodeApp/ pattern), list them and confirm the target before running any build or push. Use --all only when the user wants every app pushed in sequence; otherwise scope with --path.
  • Prefer the npm CLI (npx power-apps push) going forward; pac code push is legacy and being deprecated. Use --cli pac only when the repo or task requires it.
  • Confirm the active environment matches power.config.json (environmentId) and the intended target before pushing; warn on any mismatch. Treat the dev environment as the working target and do not push to production without explicit approval.
  • Respect the known limitations: no pac solution pack/unpack for code apps, no FetchXML / alternate keys / polymorphic lookups / Dataverse actions via generated services, no Power Platform Git integration, and no Power Apps mobile/Windows support. End users need a Power Apps Premium license, and an admin must enable the Code Apps feature on the environment.
  • Code Apps is in preview; verify current CLI and runtime support against official Microsoft docs when the task depends on "latest" behavior.
  • Report what was built, which app(s) were pushed, the returned app URL(s), and any ALM/admin steps still pending.

References

  • references/code-apps.md — architecture, Vite scaffold, npm vs pac CLI, Dataverse data-source integration and CRUD patterns, ALM, admin/security, known limitations, and the multi-app detection model.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.