PA(i) Assist

PA(i) Assist is a privacy-focused, local-first developer extension for Microsoft Power Automate cloud flows. It runs entirely in your browser — no backend, no telemetry, no third-party servers. Unofficial; not affiliated with, endorsed by, or supported by Microsoft. WHAT IT DOES • Open a cloud flow's definition as formatted, read-only JSON in a bundled Monaco editor (search, folding, line numbers, copy). • List the connections the flow uses and jump from a connection straight to the action's JSON. A warning highlights a connector used through more than one connection — the usual sign of a wrong connection. • See whether the Draft and Published definitions differ, with the changed lines highlighted and jump/hover navigation. • Fix a wrong connection: repoint an action to another connection of the same connector, or consolidate them — always behind an explicit confirmation. • Write an edited definition back to the flow — structurally checked locally, then validated by Power Automate (checkFlowErrors), and only after you confirm. Solution-aware flows save an unpublished draft (you publish afterwards); standalone flows save live. AI CHAT — WITH YOUR OWN AI, PRIVACY FIRST • Chat about the flow with YOUR OWN AI (Anthropic or OpenAI — your key, your endpoint, stored locally only). Nothing works until you add a key; every AI control is disabled otherwise. • All outgoing text is SANITIZED first (emails, GUIDs, URLs and your own terms become placeholders) — the definition, your typed messages, run errors and your system prompt. Only attached images and the company branding you opt into are sent as-is, and both are flagged. • Preview exactly what will be sent before sending; applying a reply restores the real values locally before the usual validated save. • Before any save you get a full before→after review of the whole definition, which flags new outbound destinations (HTTP targets, recipients, connections) the change would add — so an AI-built change is transparent. • Extras: analyze the last failed run, rename all actions to your naming convention, one-click quick actions, per-reply token/cost, and a monthly budget. PRIVACY & SECURITY (see the in-app "Security" tab for the full details) • No backend, no telemetry, no analytics, no tracking, no remote code — everything is bundled. • Flow data goes only to Microsoft (the service your session already uses) and, if you enable it, to your own AI endpoint — never to any other third party. Network access is restricted by a strict Content-Security-Policy allowlist of just two AI hosts. • Your Power Automate token is observed in the page, reused for the requests you trigger, and never stored, logged, or sent to the extension's own pages. • Least-privilege permissions (activeTab, scripting, storage) plus optional host access you grant at runtime and that is dropped when you restart the browser. Open source — you can read exactly what it does and watch its network activity in DevTools.