@uipath/admin-tool 1.199.0-preview.91 → 1.199.0-preview.97

package/dist/tool.js

@@ -22394,11 +22394,11 @@ var require_methods = __commonJS((exports) => {
 // ../../../node_modules/adm-zip/zipEntry.js
 var require_zipEntry = __commonJS((exports, module) => {
   var Utils = require_util();
-  var Headers = require_headers();
+  var Headers2 = require_headers();
   var Constants = Utils.Constants;
   var Methods = require_methods();
   module.exports = function(options, input) {
-    var _centralHeader = new Headers.EntryHeader, _entryName = Buffer.alloc(0), _comment = Buffer.alloc(0), _isDirectory = false, uncompressedData = null, _extra = Buffer.alloc(0), _extralocal = Buffer.alloc(0), _efs = true;
+    var _centralHeader = new Headers2.EntryHeader, _entryName = Buffer.alloc(0), _comment = Buffer.alloc(0), _isDirectory = false, uncompressedData = null, _extra = Buffer.alloc(0), _extralocal = Buffer.alloc(0), _efs = true;
     const opts = options;
     const decoder = typeof opts.decoder === "object" ? opts.decoder : Utils.decoder;
     _efs = decoder.hasOwnProperty("efs") ? decoder.efs : false;
@@ -22702,10 +22702,10 @@ var require_zipEntry = __commonJS((exports, module) => {
 // ../../../node_modules/adm-zip/zipFile.js
 var require_zipFile = __commonJS((exports, module) => {
   var ZipEntry = require_zipEntry();
-  var Headers = require_headers();
+  var Headers2 = require_headers();
   var Utils = require_util();
   module.exports = function(inBuffer, options) {
-    var entryList = [], entryTable = Object.create(null), _comment = Buffer.alloc(0), mainHeader = new Headers.MainHeader, loadedEntries = false;
+    var entryList = [], entryTable = Object.create(null), _comment = Buffer.alloc(0), mainHeader = new Headers2.MainHeader, loadedEntries = false;
     var password = null;
     const temporary = new Set;
     const opts = options;
@@ -23693,7 +23693,7 @@ var __require2 = /* @__PURE__ */ createRequire2(import.meta.url);
 var package_default = {
   name: "@uipath/admin-vpngateway-tool",
   license: "MIT",
-  version: "1.199.0-preview.91",
+  version: "1.199.0-preview.97",
   description: "CLI plugin for UiPath VPN Gateway management (Hypervisor service).",
   private: false,
   repository: {
@@ -51554,10 +51554,33 @@ class NodeContextStorage {
     return this.storage.getStore();
   }
 }
+var TELEMETRY_TRACEPARENT_ENV = "TRACEPARENT";
+var TRACEPARENT_PATTERN = /^00-([0-9a-f]{32})-([0-9a-f]{16})-[0-9a-f]{2}$/;
+function getProcessEnv() {
+  return globalThis.process?.env;
+}
+function parseInboundTraceparent(value) {
+  if (!value) {
+    return;
+  }
+  const match = TRACEPARENT_PATTERN.exec(value.trim().toLowerCase());
+  if (!match) {
+    return;
+  }
+  const [, traceId, parentSpanId] = match;
+  if (/^0+$/.test(traceId) || /^0+$/.test(parentSpanId)) {
+    return;
+  }
+  return { traceId, parentSpanId };
+}
+function getInboundTraceContext() {
+  return parseInboundTraceparent(getProcessEnv()?.[TELEMETRY_TRACEPARENT_ENV]);
+}
 var TELEMETRY_SESSION_ID_ENV = "UIPATH_SESSION_ID";
 var TELEMETRY_SESSION_ID_PROPERTY = "session_id";
 var telemetrySessionIdSlot = singleton2("TelemetrySessionId");
-function getProcessEnv() {
+var telemetryOperationIdSlot = singleton2("TelemetryOperationId");
+function getProcessEnv2() {
   return globalThis.process?.env;
 }
 function normalizeSessionId(value) {
@@ -51568,15 +51591,159 @@ function normalizeSessionId(value) {
   return trimmed || undefined;
 }
 function getConfiguredTelemetrySessionId() {
-  return normalizeSessionId(getProcessEnv()?.[TELEMETRY_SESSION_ID_ENV]);
+  return normalizeSessionId(getProcessEnv2()?.[TELEMETRY_SESSION_ID_ENV]);
 }
 function resolveTelemetrySessionId(existingSessionId) {
   return getConfiguredTelemetrySessionId() ?? normalizeSessionId(existingSessionId);
 }
+function getTelemetryOperationId() {
+  const existing = telemetryOperationIdSlot.get();
+  if (existing) {
+    return existing;
+  }
+  const inboundTraceId = getInboundTraceContext()?.traceId;
+  const generated = inboundTraceId ?? crypto.randomUUID().replaceAll("-", "");
+  telemetryOperationIdSlot.set(generated);
+  return generated;
+}
 var telemetryPropsSlot2 = singleton2("TelemetryDefaultProps");
 function getGlobalTelemetryProperties() {
   return telemetryPropsSlot2.get();
 }
+var REDACTED = "[REDACTED]";
+var MAX_VALUE_LENGTH = 200;
+var SENSITIVE_NAME_TOKENS = new Set([
+  "token",
+  "tokens",
+  "secret",
+  "secrets",
+  "password",
+  "passwords",
+  "pwd",
+  "credential",
+  "credentials",
+  "auth",
+  "authentication",
+  "authorization",
+  "authority",
+  "cert",
+  "certificate",
+  "certificates"
+]);
+var SENSITIVE_KEY_PREFIXES = new Set([
+  "api",
+  "access",
+  "client",
+  "private",
+  "public",
+  "signing",
+  "encryption",
+  "session",
+  "master",
+  "shared",
+  "root",
+  "ssh",
+  "rsa",
+  "aes",
+  "hmac",
+  "oauth"
+]);
+var UUID_PATTERN = /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/gi;
+var EMAIL_PATTERN = /\b[^\s@]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g;
+var JWT_PATTERN = /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g;
+var LONG_TOKEN_PATTERN = /\b[A-Za-z0-9_-]{40,}\b/g;
+var USER_HOME_PATTERN = /([/\\])(Users|home)([/\\])([^/\\]+)/gi;
+var URL_PATTERN = /\bhttps?:\/\/[^\s,;]+/gi;
+var URL_TRAILING_PUNCT = /[.,;:!?)\]}>'"]+$/;
+function shortHash(input) {
+  let hash = 2166136261;
+  for (let i = 0;i < input.length; i++) {
+    hash ^= input.charCodeAt(i);
+    hash = Math.imul(hash, 16777619);
+  }
+  return (hash >>> 0).toString(16).padStart(8, "0");
+}
+function redactUrl(raw) {
+  try {
+    const url = new URL(raw);
+    return `${url.protocol}//${url.host}`;
+  } catch {
+    return `url#${shortHash(raw)}`;
+  }
+}
+function redactValueDetectors(value) {
+  let out = value;
+  out = out.replace(JWT_PATTERN, () => REDACTED);
+  out = out.replace(URL_PATTERN, (match) => {
+    const trailing = match.match(URL_TRAILING_PUNCT)?.[0] ?? "";
+    const core2 = trailing ? match.slice(0, -trailing.length) : match;
+    return `${redactUrl(core2)}${trailing}`;
+  });
+  out = out.replace(USER_HOME_PATTERN, (_match, sep1, folder, sep2) => `${sep1}${folder}${sep2}<user>`);
+  out = out.replace(EMAIL_PATTERN, (match) => `email#${shortHash(match)}`);
+  out = out.replace(UUID_PATTERN, (match) => `uuid#${shortHash(match)}`);
+  out = out.replace(LONG_TOKEN_PATTERN, () => REDACTED);
+  if (out.length > MAX_VALUE_LENGTH) {
+    out = `${out.slice(0, MAX_VALUE_LENGTH)}…`;
+  }
+  return out;
+}
+function redactValue(value) {
+  return redactValueDetectors(value);
+}
+function redactError(error) {
+  const safe = new Error(redactValueDetectors(error.message ?? ""));
+  safe.name = error.name;
+  safe.stack = typeof error.stack === "string" ? redactValueDetectors(error.stack) : undefined;
+  return safe;
+}
+function nameTokens(name) {
+  return name.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2").split(/[\s._-]+/).map((t) => t.toLowerCase()).filter(Boolean);
+}
+function isSensitiveName(name) {
+  const tokens = nameTokens(name);
+  for (let i = 0;i < tokens.length; i++) {
+    const token = tokens[i];
+    if (SENSITIVE_NAME_TOKENS.has(token)) {
+      return true;
+    }
+    if (token === "key" || token === "keys") {
+      const prev = tokens[i - 1];
+      if (prev && SENSITIVE_KEY_PREFIXES.has(prev)) {
+        return true;
+      }
+    }
+  }
+  return false;
+}
+function redactProperty(name, value) {
+  if (value === undefined || value === null) {
+    return;
+  }
+  if (isSensitiveName(name)) {
+    return REDACTED;
+  }
+  if (typeof value === "boolean" || typeof value === "number") {
+    return value;
+  }
+  if (typeof value !== "string") {
+    return "[OBJECT]";
+  }
+  return redactValueDetectors(value);
+}
+function redactProperties(properties) {
+  const out = {};
+  for (const [name, value] of Object.entries(properties)) {
+    const redacted = redactProperty(name, value);
+    if (redacted !== undefined) {
+      out[name] = redacted;
+    }
+  }
+  return out;
+}
+var TELEMETRY_OPERATION_ID_PROPERTY = "uip.trace.operation_id";
+var TELEMETRY_PARENT_ID_PROPERTY = "uip.trace.parent_id";
+var TELEMETRY_SPAN_ID_PROPERTY = "uip.trace.span_id";
 
 class TelemetryService {
   telemetryProvider;
@@ -51604,11 +51771,15 @@ class TelemetryService {
   trackException(error, properties) {
     const context = this.getCurrentContext();
     const enrichedProperties = this.enrichPropertiesWithContext(properties, context);
-    this.telemetryProvider.trackException(error, enrichedProperties);
+    this.telemetryProvider.trackException(redactError(error), enrichedProperties);
   }
   async trackRequest(name, fn, properties) {
+    const parentContext = this.getCurrentContext();
+    const operationId = parentContext?.operationId ?? this.operationId ?? getTelemetryOperationId();
+    const parentId = parentContext ? parentContext.id : this.inboundParentIdFor(operationId);
     const context = {
-      operationId: this.operationId ?? this.generateId(),
+      operationId,
+      ...parentId !== undefined ? { parentId } : {},
       id: this.generateId()
     };
     const startTime = performance.now();
@@ -51626,6 +51797,45 @@ class TelemetryService {
       throw error;
     }
   }
+  trackRequestResult(name, durationMs, success, properties, context) {
+    const requestContext = context ?? {
+      operationId: this.operationId ?? getTelemetryOperationId(),
+      id: this.generateId()
+    };
+    const enrichedProperties = this.enrichPropertiesWithContext(properties, requestContext);
+    this.telemetryProvider.trackRequest(name, durationMs, success, enrichedProperties);
+  }
+  createRequestContext() {
+    const operationId = this.operationId ?? getTelemetryOperationId();
+    const parentId = this.inboundParentIdFor(operationId);
+    return {
+      operationId,
+      ...parentId !== undefined ? { parentId } : {},
+      id: this.generateId()
+    };
+  }
+  inboundParentIdFor(operationId) {
+    const inbound = getInboundTraceContext();
+    return inbound && inbound.traceId === operationId ? inbound.parentSpanId : undefined;
+  }
+  runWithContext(context, fn) {
+    return this.contextStorage.run(context, fn);
+  }
+  createDependencyContext() {
+    const parentContext = this.getCurrentContext();
+    if (!parentContext) {
+      return;
+    }
+    return {
+      operationId: parentContext.operationId,
+      parentId: parentContext.id,
+      id: this.generateId()
+    };
+  }
+  trackDependencyResult(name, type2, durationMs, success, properties, context, resultCode) {
+    const enrichedProperties = this.enrichPropertiesWithContext(properties, context);
+    this.telemetryProvider.trackDependency(redactValue(name), type2, durationMs, success, enrichedProperties, resultCode);
+  }
   async trackDependencyOperation(name, type2, fn, properties) {
     const parentContext = this.getCurrentContext();
     if (!parentContext) {
@@ -51662,8 +51872,12 @@ class TelemetryService {
       ...getExecutionContextTelemetryProperties(),
       ...globalProperties,
       ...this.defaultProperties,
-      ...properties,
-      ...context
+      ...redactProperties(properties ?? {}),
+      ...context ? {
+        [TELEMETRY_OPERATION_ID_PROPERTY]: context.operationId,
+        ...context.parentId !== undefined ? { [TELEMETRY_PARENT_ID_PROPERTY]: context.parentId } : {},
+        [TELEMETRY_SPAN_ID_PROPERTY]: context.id
+      } : {}
     };
     if (sessionId === undefined) {
       delete enriched[TELEMETRY_SESSION_ID_PROPERTY];
@@ -51673,7 +51887,16 @@ class TelemetryService {
     return enriched;
   }
   generateId() {
-    return crypto.randomUUID().replaceAll("-", "");
+    const bytes = new Uint8Array(8);
+    let hex = "";
+    do {
+      crypto.getRandomValues(bytes);
+      hex = "";
+      for (const byte of bytes) {
+        hex += byte.toString(16).padStart(2, "0");
+      }
+    } while (/^0+$/.test(hex));
+    return hex;
   }
 }
 var providerSlot = singleton2("TelemetryProvider");
@@ -52370,131 +52593,10 @@ function buildCommandTelemetryAttribution(commandPath, skillSource) {
     ...getCommandProductModeAttribution(commandPath)
   };
 }
-var REDACTED = "[REDACTED]";
-var MAX_VALUE_LENGTH = 200;
-var SENSITIVE_NAME_TOKENS = new Set([
-  "token",
-  "tokens",
-  "secret",
-  "secrets",
-  "password",
-  "passwords",
-  "pwd",
-  "credential",
-  "credentials",
-  "auth",
-  "authentication",
-  "authorization",
-  "authority",
-  "cert",
-  "certificate",
-  "certificates"
-]);
-var SENSITIVE_KEY_PREFIXES = new Set([
-  "api",
-  "access",
-  "client",
-  "private",
-  "public",
-  "signing",
-  "encryption",
-  "session",
-  "master",
-  "shared",
-  "root",
-  "ssh",
-  "rsa",
-  "aes",
-  "hmac",
-  "oauth"
-]);
-var UUID_PATTERN = /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/gi;
-var EMAIL_PATTERN = /\b[^\s@]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g;
-var JWT_PATTERN = /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g;
-var LONG_TOKEN_PATTERN = /\b[A-Za-z0-9_-]{40,}\b/g;
-var USER_HOME_PATTERN = /([/\\])(Users|home)([/\\])([^/\\]+)/gi;
-var URL_PATTERN = /\bhttps?:\/\/[^\s,;]+/gi;
-var URL_TRAILING_PUNCT = /[.,;:!?)\]}>'"]+$/;
-function shortHash(input) {
-  let hash = 2166136261;
-  for (let i = 0;i < input.length; i++) {
-    hash ^= input.charCodeAt(i);
-    hash = Math.imul(hash, 16777619);
-  }
-  return (hash >>> 0).toString(16).padStart(8, "0");
-}
-function redactUrl(raw) {
-  try {
-    const url = new URL(raw);
-    return `${url.protocol}//${url.host}`;
-  } catch {
-    return `url#${shortHash(raw)}`;
-  }
-}
-function redactValueDetectors(value) {
-  let out = value;
-  out = out.replace(JWT_PATTERN, () => REDACTED);
-  out = out.replace(URL_PATTERN, (match) => {
-    const trailing = match.match(URL_TRAILING_PUNCT)?.[0] ?? "";
-    const core2 = trailing ? match.slice(0, -trailing.length) : match;
-    return `${redactUrl(core2)}${trailing}`;
-  });
-  out = out.replace(USER_HOME_PATTERN, (_match, sep1, folder, sep2) => `${sep1}${folder}${sep2}<user>`);
-  out = out.replace(EMAIL_PATTERN, (match) => `email#${shortHash(match)}`);
-  out = out.replace(UUID_PATTERN, (match) => `uuid#${shortHash(match)}`);
-  out = out.replace(LONG_TOKEN_PATTERN, () => REDACTED);
-  if (out.length > MAX_VALUE_LENGTH) {
-    out = `${out.slice(0, MAX_VALUE_LENGTH)}…`;
-  }
-  return out;
-}
-function nameTokens(name) {
-  return name.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2").split(/[\s_-]+/).map((t) => t.toLowerCase()).filter(Boolean);
-}
-function isSensitiveName(name) {
-  const tokens = nameTokens(name);
-  for (let i = 0;i < tokens.length; i++) {
-    const token = tokens[i];
-    if (SENSITIVE_NAME_TOKENS.has(token)) {
-      return true;
-    }
-    if (token === "key" || token === "keys") {
-      const prev = tokens[i - 1];
-      if (prev && SENSITIVE_KEY_PREFIXES.has(prev)) {
-        return true;
-      }
-    }
-  }
-  return false;
-}
-function redactProperty(name, value) {
-  if (value === undefined || value === null) {
-    return;
-  }
-  if (isSensitiveName(name)) {
-    return REDACTED;
-  }
-  if (typeof value === "boolean" || typeof value === "number") {
-    return value;
-  }
-  if (typeof value !== "string") {
-    return "[OBJECT]";
-  }
-  return redactValueDetectors(value);
-}
-function redactProperties(properties) {
-  const out = {};
-  for (const [name, value] of Object.entries(properties)) {
-    const redacted = redactProperty(name, value);
-    if (redacted !== undefined) {
-      out[name] = redacted;
-    }
-  }
-  return out;
-}
 var pollSignalSlot = singleton2("PollSignal");
 var cliErrorCodeValues = new Set(CLI_ERROR_CODES);
 var retryHintValues = new Set(RETRY_HINTS);
+var TELEMETRY_COMMAND_ARG_PREFIX = "uip.cmd.arg.";
 var processContext = {
   exit: (code) => {
     process.exitCode = code;
@@ -52505,22 +52607,18 @@ var processContext = {
 };
 function extractCommandParams(cmd) {
   const params = {};
+  const add2 = (name, value) => {
+    if (name && value !== undefined) {
+      params[`${TELEMETRY_COMMAND_ARG_PREFIX}${name}`] = value;
+    }
+  };
   const registered = cmd.registeredArguments ?? [];
   const processed = cmd.processedArgs ?? [];
   for (let i = 0;i < registered.length; i++) {
-    const value = processed[i];
-    if (value === undefined) {
-      continue;
-    }
-    const name = registered[i].name();
-    if (name) {
-      params[name] = value;
-    }
+    add2(registered[i].name(), processed[i]);
   }
   for (const [key, value] of Object.entries(cmd.opts())) {
-    if (value !== undefined) {
-      params[key] = value;
-    }
+    add2(key, value);
   }
   return params;
 }
@@ -52563,11 +52661,12 @@ Command.prototype.trackedAction = function(context, fn, properties) {
   return this.action(async (...args) => {
     const telemetryName = deriveCommandPath(command);
     const props = typeof properties === "function" ? properties(...args) : properties;
+    const requestContext = telemetry.createRequestContext();
     const startTime = performance.now();
     let errorMessage2;
     let fallbackExitCode = EXIT_CODES.Success;
     clearRecordedCommandFailureTelemetry();
-    const [error] = await catchError2(fn(...args));
+    const [error] = await catchError2(telemetry.runWithContext(requestContext, () => fn(...args)));
     if (error) {
       errorMessage2 = error instanceof Error ? error.message : String(error);
       logger.debug(`[trackedAction] ${telemetryName} failed: ${errorMessage2}`);
@@ -52603,16 +52702,21 @@ Command.prototype.trackedAction = function(context, fn, properties) {
       recordedFailure,
       pollSignal: context.pollSignal
     });
-    telemetry.trackEvent(telemetryName, redactProperties({
-      ...extractCommandParams(command),
+    const commandParams = extractCommandParams(command);
+    if (props) {
+      for (const key of Object.keys(props)) {
+        delete commandParams[`${TELEMETRY_COMMAND_ARG_PREFIX}${key}`];
+      }
+    }
+    const baseProperties = redactProperties({
+      ...commandParams,
       ...props,
       ...buildCommandTelemetryAttribution(telemetryName, process.env.UIPATH_SKILL),
       command: "true",
-      duration: String(durationMs),
-      success: String(success),
       ...terminalTelemetry,
       ...errorMessage2 ? { errorMessage: errorMessage2 } : {}
-    }));
+    });
+    telemetry.trackRequestResult(telemetryName, durationMs, success, baseProperties, requestContext);
   });
 };
 var guardInstalledSlot = singleton2("ConsoleGuardInstalled");
@@ -53903,7 +54007,7 @@ var registerCommands = async (program2) => {
 var package_default3 = {
   name: "@uipath/apms-tool",
   license: "MIT",
-  version: "1.199.0-preview.91",
+  version: "1.199.0-preview.97",
   description: "CLI plugin for the UiPath Access Policy Management Service.",
   private: false,
   repository: {
@@ -62697,11 +62801,36 @@ class NodeContextStorage2 {
     return this.storage.getStore();
   }
 }
+// ../../common/src/telemetry/trace-context.ts
+var TELEMETRY_TRACEPARENT_ENV2 = "TRACEPARENT";
+var TRACEPARENT_PATTERN2 = /^00-([0-9a-f]{32})-([0-9a-f]{16})-[0-9a-f]{2}$/;
+function getProcessEnv3() {
+  return globalThis.process?.env;
+}
+function parseInboundTraceparent2(value) {
+  if (!value) {
+    return;
+  }
+  const match = TRACEPARENT_PATTERN2.exec(value.trim().toLowerCase());
+  if (!match) {
+    return;
+  }
+  const [, traceId, parentSpanId] = match;
+  if (/^0+$/.test(traceId) || /^0+$/.test(parentSpanId)) {
+    return;
+  }
+  return { traceId, parentSpanId };
+}
+function getInboundTraceContext2() {
+  return parseInboundTraceparent2(getProcessEnv3()?.[TELEMETRY_TRACEPARENT_ENV2]);
+}
+
 // ../../common/src/telemetry/session-id.ts
 var TELEMETRY_SESSION_ID_ENV2 = "UIPATH_SESSION_ID";
 var TELEMETRY_SESSION_ID_PROPERTY2 = "session_id";
 var telemetrySessionIdSlot2 = singleton3("TelemetrySessionId");
-function getProcessEnv2() {
+var telemetryOperationIdSlot2 = singleton3("TelemetryOperationId");
+function getProcessEnv5() {
   return globalThis.process?.env;
 }
 function normalizeSessionId2(value) {
@@ -62712,12 +62841,159 @@ function normalizeSessionId2(value) {
   return trimmed || undefined;
 }
 function getConfiguredTelemetrySessionId2() {
-  return normalizeSessionId2(getProcessEnv2()?.[TELEMETRY_SESSION_ID_ENV2]);
+  return normalizeSessionId2(getProcessEnv5()?.[TELEMETRY_SESSION_ID_ENV2]);
 }
 function resolveTelemetrySessionId2(existingSessionId) {
   return getConfiguredTelemetrySessionId2() ?? normalizeSessionId2(existingSessionId);
 }
+function getTelemetryOperationId2() {
+  const existing = telemetryOperationIdSlot2.get();
+  if (existing) {
+    return existing;
+  }
+  const inboundTraceId = getInboundTraceContext2()?.traceId;
+  const generated = inboundTraceId ?? crypto.randomUUID().replaceAll("-", "");
+  telemetryOperationIdSlot2.set(generated);
+  return generated;
+}
+// ../../common/src/telemetry/pii-redactor.ts
+var REDACTED2 = "[REDACTED]";
+var MAX_VALUE_LENGTH2 = 200;
+var SENSITIVE_NAME_TOKENS2 = new Set([
+  "token",
+  "tokens",
+  "secret",
+  "secrets",
+  "password",
+  "passwords",
+  "pwd",
+  "credential",
+  "credentials",
+  "auth",
+  "authentication",
+  "authorization",
+  "authority",
+  "cert",
+  "certificate",
+  "certificates"
+]);
+var SENSITIVE_KEY_PREFIXES2 = new Set([
+  "api",
+  "access",
+  "client",
+  "private",
+  "public",
+  "signing",
+  "encryption",
+  "session",
+  "master",
+  "shared",
+  "root",
+  "ssh",
+  "rsa",
+  "aes",
+  "hmac",
+  "oauth"
+]);
+var UUID_PATTERN2 = /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/gi;
+var EMAIL_PATTERN2 = /\b[^\s@]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g;
+var JWT_PATTERN2 = /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g;
+var LONG_TOKEN_PATTERN2 = /\b[A-Za-z0-9_-]{40,}\b/g;
+var USER_HOME_PATTERN2 = /([/\\])(Users|home)([/\\])([^/\\]+)/gi;
+var URL_PATTERN2 = /\bhttps?:\/\/[^\s,;]+/gi;
+var URL_TRAILING_PUNCT2 = /[.,;:!?)\]}>'"]+$/;
+function shortHash2(input) {
+  let hash = 2166136261;
+  for (let i = 0;i < input.length; i++) {
+    hash ^= input.charCodeAt(i);
+    hash = Math.imul(hash, 16777619);
+  }
+  return (hash >>> 0).toString(16).padStart(8, "0");
+}
+function redactUrl2(raw) {
+  try {
+    const url = new URL(raw);
+    return `${url.protocol}//${url.host}`;
+  } catch {
+    return `url#${shortHash2(raw)}`;
+  }
+}
+function redactValueDetectors2(value) {
+  let out = value;
+  out = out.replace(JWT_PATTERN2, () => REDACTED2);
+  out = out.replace(URL_PATTERN2, (match) => {
+    const trailing = match.match(URL_TRAILING_PUNCT2)?.[0] ?? "";
+    const core3 = trailing ? match.slice(0, -trailing.length) : match;
+    return `${redactUrl2(core3)}${trailing}`;
+  });
+  out = out.replace(USER_HOME_PATTERN2, (_match, sep1, folder, sep2) => `${sep1}${folder}${sep2}<user>`);
+  out = out.replace(EMAIL_PATTERN2, (match) => `email#${shortHash2(match)}`);
+  out = out.replace(UUID_PATTERN2, (match) => `uuid#${shortHash2(match)}`);
+  out = out.replace(LONG_TOKEN_PATTERN2, () => REDACTED2);
+  if (out.length > MAX_VALUE_LENGTH2) {
+    out = `${out.slice(0, MAX_VALUE_LENGTH2)}…`;
+  }
+  return out;
+}
+function redactValue2(value) {
+  return redactValueDetectors2(value);
+}
+function redactError2(error) {
+  const safe = new Error(redactValueDetectors2(error.message ?? ""));
+  safe.name = error.name;
+  safe.stack = typeof error.stack === "string" ? redactValueDetectors2(error.stack) : undefined;
+  return safe;
+}
+function nameTokens2(name) {
+  return name.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2").split(/[\s._-]+/).map((t) => t.toLowerCase()).filter(Boolean);
+}
+function isSensitiveName2(name) {
+  const tokens = nameTokens2(name);
+  for (let i = 0;i < tokens.length; i++) {
+    const token = tokens[i];
+    if (SENSITIVE_NAME_TOKENS2.has(token)) {
+      return true;
+    }
+    if (token === "key" || token === "keys") {
+      const prev = tokens[i - 1];
+      if (prev && SENSITIVE_KEY_PREFIXES2.has(prev)) {
+        return true;
+      }
+    }
+  }
+  return false;
+}
+function redactProperty2(name, value) {
+  if (value === undefined || value === null) {
+    return;
+  }
+  if (isSensitiveName2(name)) {
+    return REDACTED2;
+  }
+  if (typeof value === "boolean" || typeof value === "number") {
+    return value;
+  }
+  if (typeof value !== "string") {
+    return "[OBJECT]";
+  }
+  return redactValueDetectors2(value);
+}
+function redactProperties2(properties) {
+  const out = {};
+  for (const [name, value] of Object.entries(properties)) {
+    const redacted = redactProperty2(name, value);
+    if (redacted !== undefined) {
+      out[name] = redacted;
+    }
+  }
+  return out;
+}
+
 // ../../common/src/telemetry/telemetry-service.ts
+var TELEMETRY_OPERATION_ID_PROPERTY2 = "uip.trace.operation_id";
+var TELEMETRY_PARENT_ID_PROPERTY2 = "uip.trace.parent_id";
+var TELEMETRY_SPAN_ID_PROPERTY2 = "uip.trace.span_id";
+
 class TelemetryService2 {
   telemetryProvider;
   contextStorage;
@@ -62744,11 +63020,15 @@ class TelemetryService2 {
   trackException(error, properties) {
     const context = this.getCurrentContext();
     const enrichedProperties = this.enrichPropertiesWithContext(properties, context);
-    this.telemetryProvider.trackException(error, enrichedProperties);
+    this.telemetryProvider.trackException(redactError2(error), enrichedProperties);
   }
   async trackRequest(name, fn, properties) {
+    const parentContext = this.getCurrentContext();
+    const operationId = parentContext?.operationId ?? this.operationId ?? getTelemetryOperationId2();
+    const parentId = parentContext ? parentContext.id : this.inboundParentIdFor(operationId);
     const context = {
-      operationId: this.operationId ?? this.generateId(),
+      operationId,
+      ...parentId !== undefined ? { parentId } : {},
       id: this.generateId()
     };
     const startTime = performance.now();
@@ -62766,6 +63046,45 @@ class TelemetryService2 {
       throw error;
     }
   }
+  trackRequestResult(name, durationMs, success, properties, context) {
+    const requestContext = context ?? {
+      operationId: this.operationId ?? getTelemetryOperationId2(),
+      id: this.generateId()
+    };
+    const enrichedProperties = this.enrichPropertiesWithContext(properties, requestContext);
+    this.telemetryProvider.trackRequest(name, durationMs, success, enrichedProperties);
+  }
+  createRequestContext() {
+    const operationId = this.operationId ?? getTelemetryOperationId2();
+    const parentId = this.inboundParentIdFor(operationId);
+    return {
+      operationId,
+      ...parentId !== undefined ? { parentId } : {},
+      id: this.generateId()
+    };
+  }
+  inboundParentIdFor(operationId) {
+    const inbound = getInboundTraceContext2();
+    return inbound && inbound.traceId === operationId ? inbound.parentSpanId : undefined;
+  }
+  runWithContext(context, fn) {
+    return this.contextStorage.run(context, fn);
+  }
+  createDependencyContext() {
+    const parentContext = this.getCurrentContext();
+    if (!parentContext) {
+      return;
+    }
+    return {
+      operationId: parentContext.operationId,
+      parentId: parentContext.id,
+      id: this.generateId()
+    };
+  }
+  trackDependencyResult(name, type3, durationMs, success, properties, context, resultCode) {
+    const enrichedProperties = this.enrichPropertiesWithContext(properties, context);
+    this.telemetryProvider.trackDependency(redactValue2(name), type3, durationMs, success, enrichedProperties, resultCode);
+  }
   async trackDependencyOperation(name, type3, fn, properties) {
     const parentContext = this.getCurrentContext();
     if (!parentContext) {
@@ -62802,8 +63121,12 @@ class TelemetryService2 {
       ...getExecutionContextTelemetryProperties2(),
       ...globalProperties,
       ...this.defaultProperties,
-      ...properties,
-      ...context
+      ...redactProperties2(properties ?? {}),
+      ...context ? {
+        [TELEMETRY_OPERATION_ID_PROPERTY2]: context.operationId,
+        ...context.parentId !== undefined ? { [TELEMETRY_PARENT_ID_PROPERTY2]: context.parentId } : {},
+        [TELEMETRY_SPAN_ID_PROPERTY2]: context.id
+      } : {}
     };
     if (sessionId === undefined) {
       delete enriched[TELEMETRY_SESSION_ID_PROPERTY2];
@@ -62813,7 +63136,16 @@ class TelemetryService2 {
     return enriched;
   }
   generateId() {
-    return crypto.randomUUID().replaceAll("-", "");
+    const bytes = new Uint8Array(8);
+    let hex = "";
+    do {
+      crypto.getRandomValues(bytes);
+      hex = "";
+      for (const byte of bytes) {
+        hex += byte.toString(16).padStart(2, "0");
+      }
+    } while (/^0+$/.test(hex));
+    return hex;
   }
 }
 // ../../common/src/telemetry/node-appinsights-telemetry-provider.ts
@@ -63516,134 +63848,11 @@ function buildCommandTelemetryAttribution2(commandPath, skillSource) {
   };
 }
 
-// ../../common/src/telemetry/pii-redactor.ts
-var REDACTED2 = "[REDACTED]";
-var MAX_VALUE_LENGTH2 = 200;
-var SENSITIVE_NAME_TOKENS2 = new Set([
-  "token",
-  "tokens",
-  "secret",
-  "secrets",
-  "password",
-  "passwords",
-  "pwd",
-  "credential",
-  "credentials",
-  "auth",
-  "authentication",
-  "authorization",
-  "authority",
-  "cert",
-  "certificate",
-  "certificates"
-]);
-var SENSITIVE_KEY_PREFIXES2 = new Set([
-  "api",
-  "access",
-  "client",
-  "private",
-  "public",
-  "signing",
-  "encryption",
-  "session",
-  "master",
-  "shared",
-  "root",
-  "ssh",
-  "rsa",
-  "aes",
-  "hmac",
-  "oauth"
-]);
-var UUID_PATTERN2 = /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/gi;
-var EMAIL_PATTERN2 = /\b[^\s@]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g;
-var JWT_PATTERN2 = /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g;
-var LONG_TOKEN_PATTERN2 = /\b[A-Za-z0-9_-]{40,}\b/g;
-var USER_HOME_PATTERN2 = /([/\\])(Users|home)([/\\])([^/\\]+)/gi;
-var URL_PATTERN2 = /\bhttps?:\/\/[^\s,;]+/gi;
-var URL_TRAILING_PUNCT2 = /[.,;:!?)\]}>'"]+$/;
-function shortHash2(input) {
-  let hash = 2166136261;
-  for (let i = 0;i < input.length; i++) {
-    hash ^= input.charCodeAt(i);
-    hash = Math.imul(hash, 16777619);
-  }
-  return (hash >>> 0).toString(16).padStart(8, "0");
-}
-function redactUrl2(raw) {
-  try {
-    const url = new URL(raw);
-    return `${url.protocol}//${url.host}`;
-  } catch {
-    return `url#${shortHash2(raw)}`;
-  }
-}
-function redactValueDetectors2(value) {
-  let out = value;
-  out = out.replace(JWT_PATTERN2, () => REDACTED2);
-  out = out.replace(URL_PATTERN2, (match) => {
-    const trailing = match.match(URL_TRAILING_PUNCT2)?.[0] ?? "";
-    const core3 = trailing ? match.slice(0, -trailing.length) : match;
-    return `${redactUrl2(core3)}${trailing}`;
-  });
-  out = out.replace(USER_HOME_PATTERN2, (_match, sep1, folder, sep2) => `${sep1}${folder}${sep2}<user>`);
-  out = out.replace(EMAIL_PATTERN2, (match) => `email#${shortHash2(match)}`);
-  out = out.replace(UUID_PATTERN2, (match) => `uuid#${shortHash2(match)}`);
-  out = out.replace(LONG_TOKEN_PATTERN2, () => REDACTED2);
-  if (out.length > MAX_VALUE_LENGTH2) {
-    out = `${out.slice(0, MAX_VALUE_LENGTH2)}…`;
-  }
-  return out;
-}
-function nameTokens2(name) {
-  return name.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2").split(/[\s_-]+/).map((t) => t.toLowerCase()).filter(Boolean);
-}
-function isSensitiveName2(name) {
-  const tokens = nameTokens2(name);
-  for (let i = 0;i < tokens.length; i++) {
-    const token = tokens[i];
-    if (SENSITIVE_NAME_TOKENS2.has(token)) {
-      return true;
-    }
-    if (token === "key" || token === "keys") {
-      const prev = tokens[i - 1];
-      if (prev && SENSITIVE_KEY_PREFIXES2.has(prev)) {
-        return true;
-      }
-    }
-  }
-  return false;
-}
-function redactProperty2(name, value) {
-  if (value === undefined || value === null) {
-    return;
-  }
-  if (isSensitiveName2(name)) {
-    return REDACTED2;
-  }
-  if (typeof value === "boolean" || typeof value === "number") {
-    return value;
-  }
-  if (typeof value !== "string") {
-    return "[OBJECT]";
-  }
-  return redactValueDetectors2(value);
-}
-function redactProperties2(properties) {
-  const out = {};
-  for (const [name, value] of Object.entries(properties)) {
-    const redacted = redactProperty2(name, value);
-    if (redacted !== undefined) {
-      out[name] = redacted;
-    }
-  }
-  return out;
-}
-
 // ../../common/src/trackedAction.ts
 var pollSignalSlot2 = singleton3("PollSignal");
 var cliErrorCodeValues2 = new Set(CLI_ERROR_CODES2);
 var retryHintValues2 = new Set(RETRY_HINTS2);
+var TELEMETRY_COMMAND_ARG_PREFIX2 = "uip.cmd.arg.";
 var processContext2 = {
   exit: (code) => {
     process.exitCode = code;
@@ -63654,22 +63863,18 @@ var processContext2 = {
 };
 function extractCommandParams2(cmd) {
   const params = {};
+  const add3 = (name, value) => {
+    if (name && value !== undefined) {
+      params[`${TELEMETRY_COMMAND_ARG_PREFIX2}${name}`] = value;
+    }
+  };
   const registered = cmd.registeredArguments ?? [];
   const processed = cmd.processedArgs ?? [];
   for (let i = 0;i < registered.length; i++) {
-    const value = processed[i];
-    if (value === undefined) {
-      continue;
-    }
-    const name = registered[i].name();
-    if (name) {
-      params[name] = value;
-    }
+    add3(registered[i].name(), processed[i]);
   }
   for (const [key, value] of Object.entries(cmd.opts())) {
-    if (value !== undefined) {
-      params[key] = value;
-    }
+    add3(key, value);
   }
   return params;
 }
@@ -63712,11 +63917,12 @@ Command.prototype.trackedAction = function(context, fn, properties) {
   return this.action(async (...args) => {
     const telemetryName = deriveCommandPath2(command);
     const props = typeof properties === "function" ? properties(...args) : properties;
+    const requestContext = telemetry2.createRequestContext();
     const startTime = performance.now();
     let errorMessage4;
     let fallbackExitCode = EXIT_CODES2.Success;
     clearRecordedCommandFailureTelemetry2();
-    const [error] = await catchError5(fn(...args));
+    const [error] = await catchError5(telemetry2.runWithContext(requestContext, () => fn(...args)));
     if (error) {
       errorMessage4 = error instanceof Error ? error.message : String(error);
       logger2.debug(`[trackedAction] ${telemetryName} failed: ${errorMessage4}`);
@@ -63752,16 +63958,21 @@ Command.prototype.trackedAction = function(context, fn, properties) {
       recordedFailure,
       pollSignal: context.pollSignal
     });
-    telemetry2.trackEvent(telemetryName, redactProperties2({
-      ...extractCommandParams2(command),
+    const commandParams = extractCommandParams2(command);
+    if (props) {
+      for (const key of Object.keys(props)) {
+        delete commandParams[`${TELEMETRY_COMMAND_ARG_PREFIX2}${key}`];
+      }
+    }
+    const baseProperties = redactProperties2({
+      ...commandParams,
       ...props,
       ...buildCommandTelemetryAttribution2(telemetryName, process.env.UIPATH_SKILL),
       command: "true",
-      duration: String(durationMs),
-      success: String(success),
       ...terminalTelemetry,
       ...errorMessage4 ? { errorMessage: errorMessage4 } : {}
-    }));
+    });
+    telemetry2.trackRequestResult(telemetryName, durationMs, success, baseProperties, requestContext);
   });
 };
 // ../../common/src/console-guard.ts
@@ -65032,7 +65243,7 @@ var registerCommands2 = async (program2) => {
 var package_default6 = {
   name: "@uipath/audit-tool",
   license: "MIT",
-  version: "1.199.0-preview.91",
+  version: "1.199.0-preview.97",
   description: "CLI plugin for the UiPath Audit Service — query event sources, paginate events, and export ZIPs from the long-term store.",
   private: false,
   repository: {
@@ -66288,7 +66499,7 @@ var registerCommands3 = async (program2) => {
 var package_default8 = {
   name: "@uipath/authz-tool",
   license: "MIT",
-  version: "1.199.0-preview.91",
+  version: "1.199.0-preview.97",
   description: "CLI plugin for the UiPath Authorization service.",
   private: false,
   repository: {
@@ -71899,7 +72110,7 @@ var registerCommands4 = async (program2) => {
 var package_default11 = {
   name: "@uipath/identity-tool",
   license: "MIT",
-  version: "1.199.0-preview.91",
+  version: "1.199.0-preview.97",
   description: "Manage Identity Server users, groups, robot accounts, and external apps.",
   private: false,
   repository: {
@@ -74268,7 +74479,7 @@ var registerCommands5 = async (program2) => {
 var package_default12 = {
   name: "@uipath/oms-tool",
   license: "MIT",
-  version: "1.199.0-preview.91",
+  version: "1.199.0-preview.97",
   description: "CLI plugin for the UiPath Organization Management Service.",
   private: false,
   repository: {
@@ -80799,7 +81010,7 @@ var registerCommands6 = async (program2) => {
 var package_default14 = {
   name: "@uipath/resourcecatalog-tool",
   license: "MIT",
-  version: "1.199.0-preview.91",
+  version: "1.199.0-preview.97",
   description: "CLI plugin for the UiPath Resource Catalog Service.",
   private: false,
   repository: {
@@ -82747,7 +82958,7 @@ var registerCommands7 = async (program2) => {
 var package_default16 = {
   name: "@uipath/admin-tool",
   license: "MIT",
-  version: "1.199.0-preview.91",
+  version: "1.199.0-preview.97",
   description: "Manage UiPath admin resources — Identity Server, Resource Catalog Service, Audit Service, VPN Gateway.",
   private: false,
   repository: {
@@ -82812,4 +83023,4 @@ export {
   metadata8 as metadata
 };
 
-//# debugId=C7BC7F6F21C2DB7B64756E2164756E21
+//# debugId=493C560B98683D5D64756E2164756E21

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@uipath/admin-tool",
   "license": "MIT",
-  "version": "1.199.0-preview.91",
+  "version": "1.199.0-preview.97",
   "description": "Manage UiPath admin resources — Identity Server, Resource Catalog Service, Audit Service, VPN Gateway.",
   "private": false,
   "repository": {
@@ -23,5 +23,5 @@
   "files": [
     "dist"
   ],
-  "gitHead": "f428cb1e61ba89ad18394b0c6106784055699f02"
+  "gitHead": "087ae21e842f27bde5eb0013892c9487bfe60568"
 }