@uipath/admin-tool 1.201.0-preview.115 → 1.201.0-preview.122

package/dist/tool.js

@@ -16242,7 +16242,7 @@ var require_adm_zip = __commonJS((exports, module) => {
   };
 });
 
-// ../vpngateway-tool/dist/tool-mazas0mp.js
+// ../vpngateway-tool/dist/tool-1qcwp5tz.js
 init_tool_0v6na3yp();
 import { createRequire as createRequire3 } from "node:module";
 import fs6 from "node:fs";
@@ -18369,7 +18369,7 @@ var require_commander = __commonJS2((exports) => {
 var package_default = {
   name: "@uipath/admin-vpngateway-tool",
   license: "MIT",
-  version: "1.201.0-preview.115",
+  version: "1.201.0-preview.122",
   description: "CLI plugin for UiPath VPN Gateway management (Hypervisor service).",
   private: false,
   repository: {
@@ -21612,6 +21612,7 @@ function errorMessage(error) {
 }
 init_constants();
 init_src();
+var IDENTIFIER_STATUSES = new Set([400, 403, 404]);
 var TENANT_SELECTION_REQUIRED_CODE = "TENANT_SELECTION_REQUIRED";
 var INVALID_TENANT_CODE = "INVALID_TENANT";
 var TENANT_SELECTION_CODES = new Set([
@@ -21928,17 +21929,18 @@ var TLS_ERROR_CODES = new Set([
 ]);
 var TLS_INSTRUCTIONS = "The server's TLS certificate could not be verified. Most often a corporate proxy/firewall re-signs HTTPS with a root CA that Node does " + "not trust — set NODE_EXTRA_CA_CERTS to that CA's PEM file (and HTTPS_PROXY " + "if you connect through a proxy). If the certificate is instead expired or its hostname does not match, fix the endpoint URL or the system clock. Then retry.";
 var NETWORK_INSTRUCTIONS = "Could not reach the UiPath service. Check your network connection and VPN, confirm any HTTP_PROXY/HTTPS_PROXY/NO_PROXY settings are correct, then retry.";
+var LOCAL_PERMISSION_ERROR_CODES = new Set(["EACCES", "EPERM", "EROFS"]);
+var LOCAL_PERMISSION_MESSAGE_PATTERN = /\b(EACCES|EPERM|EROFS)\b/;
+function localPermissionInstructions(code, path4) {
+  const target = path4 !== undefined ? `'${path4}'` : "a local file or resource";
+  if (code === "EROFS") {
+    return `The filesystem containing ${target} is read-only (EROFS), so the CLI could not write to it. This is a local environment problem, ` + "not a UiPath service error — retrying will not help. Use a " + "writable location, or give this environment write access to the path.";
+  }
+  const remedy = process.platform === "win32" ? "Re-run from an elevated terminal, close any program holding the file open, or grant your user access to the path." : "Grant this user (or the sandbox the command runs in) access to the path, or run the command outside the sandbox.";
+  return `The operating system denied access to ${target} (${code}). This is ` + "a local permission problem, not a UiPath service error — retrying " + `without a permission change will not help. ${remedy}`;
+}
 function describeConnectivityError(error) {
-  const queue = [error];
-  const seen = new Set;
-  for (let steps = 0;queue.length > 0 && steps < 32; steps++) {
-    const current = queue.shift();
-    if (current === null || typeof current !== "object")
-      continue;
-    if (seen.has(current))
-      continue;
-    seen.add(current);
-    const cur = current;
+  for (const cur of walkErrorGraph(error)) {
     const code = typeof cur.code === "string" ? cur.code : undefined;
     const message = typeof cur.message === "string" ? cur.message : undefined;
     if (code && TLS_ERROR_CODES.has(code)) {
@@ -21957,6 +21959,49 @@ function describeConnectivityError(error) {
         instructions: NETWORK_INSTRUCTIONS
       };
     }
+  }
+  return;
+}
+function describePermissionError(error) {
+  for (const cur of walkErrorGraph(error)) {
+    const message = typeof cur.message === "string" ? cur.message : undefined;
+    const code = matchLocalPermissionCode(cur.code, message);
+    if (!code)
+      continue;
+    const path4 = localPermissionPath(cur.path, message);
+    return {
+      code,
+      message: message ?? code,
+      ...path4 !== undefined ? { path: path4 } : {},
+      instructions: localPermissionInstructions(code, path4)
+    };
+  }
+  return;
+}
+function matchLocalPermissionCode(code, message) {
+  if (typeof code === "string" && LOCAL_PERMISSION_ERROR_CODES.has(code)) {
+    return code;
+  }
+  const match = message ? LOCAL_PERMISSION_MESSAGE_PATTERN.exec(message) : null;
+  return match ? match[1] : undefined;
+}
+function localPermissionPath(path4, message) {
+  if (typeof path4 === "string")
+    return path4;
+  return message ? /'([^']+)'/.exec(message)?.[1] : undefined;
+}
+function* walkErrorGraph(error) {
+  const queue = [error];
+  const seen = new Set;
+  for (let steps = 0;queue.length > 0 && steps < 32; steps++) {
+    const current = queue.shift();
+    if (current === null || typeof current !== "object")
+      continue;
+    if (seen.has(current))
+      continue;
+    seen.add(current);
+    const cur = current;
+    yield cur;
     if (cur.cause !== undefined)
       queue.push(cur.cause);
     if (Array.isArray(cur.errors))
@@ -22017,6 +22062,12 @@ function classifyError(status, error) {
   if (status !== undefined && status >= 500 && status < 600) {
     return { errorCode: "server_error", retry: "RetryLater" };
   }
+  if (status === undefined && describePermissionError(error)) {
+    return {
+      errorCode: "local_permission_denied",
+      retry: "RetryWillNotFix"
+    };
+  }
   const connectivity = describeConnectivityError(error);
   if (connectivity) {
     return {
@@ -22119,6 +22170,16 @@ async function extractErrorDetails(error, options) {
       message = `${message}: ${connectivity.message}`;
     }
   }
+  const permission = status === undefined ? describePermissionError(error) : undefined;
+  if (permission) {
+    if (permission.message !== message && !message.includes(permission.message)) {
+      message = `${message}: ${permission.message}`;
+    }
+    if (!message.includes(permission.instructions)) {
+      const punctuated = message.endsWith(".") ? message : `${message}.`;
+      message = `${punctuated} ${permission.instructions}`;
+    }
+  }
   let details = rawMessage;
   if (rawBody) {
     if (parsedBody) {
@@ -22158,6 +22219,9 @@ async function extractErrorDetails(error, options) {
   if (parsedBody?.traceId && typeof parsedBody.traceId === "string") {
     context.traceId = parsedBody.traceId;
   }
+  if (permission?.path !== undefined) {
+    context.path = permission.path;
+  }
   if (status === 429) {
     const resp = response;
     const headersObj = resp?.headers;
@@ -23342,6 +23406,7 @@ var CLI_ERROR_CODES = [
   "invalid_argument",
   "authentication_required",
   "permission_denied",
+  "local_permission_denied",
   "not_found",
   "rate_limited",
   "network_error",
@@ -23778,12 +23843,16 @@ function defaultErrorCodeForHttpStatus(status) {
     return "server_error";
   return;
 }
+var LOCAL_PERMISSION_TEXT_PATTERN = /(?:\b|\()(?:EACCES|EPERM|EROFS)(?::\s|\))/;
 function defaultErrorCodeForFailure(data) {
   if (data.Result === RESULTS.Failure) {
     const status = data.Context?.httpStatus ?? parseHttpStatusFromMessage2(data.Message);
     const errorCode2 = defaultErrorCodeForHttpStatus(status);
     if (errorCode2)
       return errorCode2;
+    if (status === undefined && (LOCAL_PERMISSION_TEXT_PATTERN.test(data.Message) || LOCAL_PERMISSION_TEXT_PATTERN.test(data.Instructions))) {
+      return "local_permission_denied";
+    }
   }
   return defaultErrorCodeForResult(data.Result);
 }
@@ -24205,7 +24274,10 @@ function extractHttpStatus(err) {
   if (!err || typeof err !== "object")
     return;
   const e = err;
-  return e.response?.status ?? e.status ?? e.statusCode;
+  const structured = e.response?.status ?? e.status ?? e.statusCode;
+  if (structured !== undefined)
+    return structured;
+  return typeof e.message === "string" ? parseHttpStatusFromMessage(e.message) : undefined;
 }
 var GENERIC = "Check authentication and parameters";
 function instructionsFor(ctx, err) {
@@ -24239,6 +24311,10 @@ function instructionsFor(ctx, err) {
       if (status !== undefined && status >= 500 && status < 600) {
         return "Orchestrator returned a server error — retry; if it persists, check service status";
       }
+      const permission = describePermissionError(err);
+      if (permission) {
+        return permission.instructions;
+      }
       const connectivity = describeConnectivityError(err);
       if (connectivity) {
         return connectivity.instructions;
@@ -24302,9 +24378,8 @@ var ScreenLogger;
   ScreenLogger2.progress = progress;
 })(ScreenLogger ||= {});
 var sdkUserAgentHostToken2 = singleton2("SdkUserAgentHostToken");
-var factorySlot = singleton2("PackagerFactoryProvider");
-var moduleSlot = singleton2("ToolModuleProvider");
 var shippedKeysSlot = singleton2("ShipSucceededDedupeKeys");
+var factorySlot = singleton2("PackagerFactoryProvider");
 var LOCAL_THROW_INSTRUCTIONS = "Review the message above and adjust the command. Run with --help for usage.";
 async function reportError(error, loginInstructions) {
   const details = await extractErrorDetails(error);
@@ -25495,7 +25570,7 @@ init_tool_0v6na3yp();
 var package_default3 = {
   name: "@uipath/apms-tool",
   license: "MIT",
-  version: "1.201.0-preview.115",
+  version: "1.201.0-preview.122",
   description: "CLI plugin for the UiPath Access Policy Management Service.",
   private: false,
   repository: {
@@ -28217,6 +28292,8 @@ init_constants2();
 
 // ../../auth/src/interactive.ts
 init_src2();
+// ../../auth/src/tenantSelection.ts
+var IDENTIFIER_STATUSES2 = new Set([400, 403, 404]);
 
 // ../../auth/src/selectTenant.ts
 var TENANT_SELECTION_REQUIRED_CODE2 = "TENANT_SELECTION_REQUIRED";
@@ -28330,17 +28407,18 @@ var TLS_ERROR_CODES3 = new Set([
 ]);
 var TLS_INSTRUCTIONS2 = "The server's TLS certificate could not be verified. Most often a " + "corporate proxy/firewall re-signs HTTPS with a root CA that Node does " + "not trust — set NODE_EXTRA_CA_CERTS to that CA's PEM file (and HTTPS_PROXY " + "if you connect through a proxy). If the certificate is instead expired or " + "its hostname does not match, fix the endpoint URL or the system clock. " + "Then retry.";
 var NETWORK_INSTRUCTIONS2 = "Could not reach the UiPath service. Check your network connection and " + "VPN, confirm any HTTP_PROXY/HTTPS_PROXY/NO_PROXY settings are correct, " + "then retry.";
+var LOCAL_PERMISSION_ERROR_CODES2 = new Set(["EACCES", "EPERM", "EROFS"]);
+var LOCAL_PERMISSION_MESSAGE_PATTERN2 = /\b(EACCES|EPERM|EROFS)\b/;
+function localPermissionInstructions2(code, path5) {
+  const target = path5 !== undefined ? `'${path5}'` : "a local file or resource";
+  if (code === "EROFS") {
+    return `The filesystem containing ${target} is read-only (EROFS), so the ` + "CLI could not write to it. This is a local environment problem, " + "not a UiPath service error — retrying will not help. Use a " + "writable location, or give this environment write access to the " + "path.";
+  }
+  const remedy = process.platform === "win32" ? "Re-run from an elevated terminal, close any program holding " + "the file open, or grant your user access to the path." : "Grant this user (or the sandbox the command runs in) access " + "to the path, or run the command outside the sandbox.";
+  return `The operating system denied access to ${target} (${code}). This is ` + "a local permission problem, not a UiPath service error — retrying " + `without a permission change will not help. ${remedy}`;
+}
 function describeConnectivityError2(error) {
-  const queue = [error];
-  const seen = new Set;
-  for (let steps = 0;queue.length > 0 && steps < 32; steps++) {
-    const current = queue.shift();
-    if (current === null || typeof current !== "object")
-      continue;
-    if (seen.has(current))
-      continue;
-    seen.add(current);
-    const cur = current;
+  for (const cur of walkErrorGraph2(error)) {
     const code = typeof cur.code === "string" ? cur.code : undefined;
     const message = typeof cur.message === "string" ? cur.message : undefined;
     if (code && TLS_ERROR_CODES3.has(code)) {
@@ -28359,6 +28437,49 @@ function describeConnectivityError2(error) {
         instructions: NETWORK_INSTRUCTIONS2
       };
     }
+  }
+  return;
+}
+function describePermissionError2(error) {
+  for (const cur of walkErrorGraph2(error)) {
+    const message = typeof cur.message === "string" ? cur.message : undefined;
+    const code = matchLocalPermissionCode2(cur.code, message);
+    if (!code)
+      continue;
+    const path5 = localPermissionPath2(cur.path, message);
+    return {
+      code,
+      message: message ?? code,
+      ...path5 !== undefined ? { path: path5 } : {},
+      instructions: localPermissionInstructions2(code, path5)
+    };
+  }
+  return;
+}
+function matchLocalPermissionCode2(code, message) {
+  if (typeof code === "string" && LOCAL_PERMISSION_ERROR_CODES2.has(code)) {
+    return code;
+  }
+  const match = message ? LOCAL_PERMISSION_MESSAGE_PATTERN2.exec(message) : null;
+  return match ? match[1] : undefined;
+}
+function localPermissionPath2(path5, message) {
+  if (typeof path5 === "string")
+    return path5;
+  return message ? /'([^']+)'/.exec(message)?.[1] : undefined;
+}
+function* walkErrorGraph2(error) {
+  const queue = [error];
+  const seen = new Set;
+  for (let steps = 0;queue.length > 0 && steps < 32; steps++) {
+    const current = queue.shift();
+    if (current === null || typeof current !== "object")
+      continue;
+    if (seen.has(current))
+      continue;
+    seen.add(current);
+    const cur = current;
+    yield cur;
     if (cur.cause !== undefined)
       queue.push(cur.cause);
     if (Array.isArray(cur.errors))
@@ -28419,6 +28540,12 @@ function classifyError3(status, error) {
   if (status !== undefined && status >= 500 && status < 600) {
     return { errorCode: "server_error", retry: "RetryLater" };
   }
+  if (status === undefined && describePermissionError2(error)) {
+    return {
+      errorCode: "local_permission_denied",
+      retry: "RetryWillNotFix"
+    };
+  }
   const connectivity = describeConnectivityError2(error);
   if (connectivity) {
     return {
@@ -28521,6 +28648,16 @@ async function extractErrorDetails2(error, options) {
       message = `${message}: ${connectivity.message}`;
     }
   }
+  const permission = status === undefined ? describePermissionError2(error) : undefined;
+  if (permission) {
+    if (permission.message !== message && !message.includes(permission.message)) {
+      message = `${message}: ${permission.message}`;
+    }
+    if (!message.includes(permission.instructions)) {
+      const punctuated = message.endsWith(".") ? message : `${message}.`;
+      message = `${punctuated} ${permission.instructions}`;
+    }
+  }
   let details = rawMessage;
   if (rawBody) {
     if (parsedBody) {
@@ -28560,6 +28697,9 @@ async function extractErrorDetails2(error, options) {
   if (parsedBody?.traceId && typeof parsedBody.traceId === "string") {
     context.traceId = parsedBody.traceId;
   }
+  if (permission?.path !== undefined) {
+    context.path = permission.path;
+  }
   if (status === 429) {
     const resp = response;
     const headersObj = resp?.headers;
@@ -29764,6 +29904,7 @@ var CLI_ERROR_CODES2 = [
   "invalid_argument",
   "authentication_required",
   "permission_denied",
+  "local_permission_denied",
   "not_found",
   "rate_limited",
   "network_error",
@@ -30199,12 +30340,16 @@ function defaultErrorCodeForHttpStatus2(status) {
     return "server_error";
   return;
 }
+var LOCAL_PERMISSION_TEXT_PATTERN2 = /(?:\b|\()(?:EACCES|EPERM|EROFS)(?::\s|\))/;
 function defaultErrorCodeForFailure2(data) {
   if (data.Result === RESULTS2.Failure) {
     const status = data.Context?.httpStatus ?? parseHttpStatusFromMessage5(data.Message);
     const errorCode3 = defaultErrorCodeForHttpStatus2(status);
     if (errorCode3)
       return errorCode3;
+    if (status === undefined && (LOCAL_PERMISSION_TEXT_PATTERN2.test(data.Message) || LOCAL_PERMISSION_TEXT_PATTERN2.test(data.Instructions))) {
+      return "local_permission_denied";
+    }
   }
   return defaultErrorCodeForResult2(data.Result);
 }
@@ -30707,6 +30852,11 @@ function parseBoundedInt(raw, optionName, bounds) {
   }
   return n;
 }
+function splitScopeList(raw) {
+  if (!raw)
+    return [];
+  return raw.split(/[\s,]+/).filter((scope) => scope.length > 0);
+}
 // ../../common/src/polling/types.ts
 var PollOutcome2 = {
   Completed: "completed",
@@ -30750,11 +30900,10 @@ var ScreenLogger2;
   }
   ScreenLogger.progress = progress;
 })(ScreenLogger2 ||= {});
-// ../../common/src/tool-provider.ts
-var factorySlot2 = singleton3("PackagerFactoryProvider");
-var moduleSlot2 = singleton3("ToolModuleProvider");
 // ../../common/src/telemetry/ship-succeeded.ts
 var shippedKeysSlot2 = singleton3("ShipSucceededDedupeKeys");
+// ../../common/src/tool-provider.ts
+var factorySlot2 = singleton3("PackagerFactoryProvider");
 // ../apms-tool/src/commands/_shared.ts
 init_src2();
 var LOGIN_INSTRUCTIONS3 = "Ensure you are logged in with 'uip login' and have access to the Access Policy Management service.";
@@ -31898,7 +32047,7 @@ var registerCommands2 = async (program3) => {
 var package_default6 = {
   name: "@uipath/audit-tool",
   license: "MIT",
-  version: "1.201.0-preview.115",
+  version: "1.201.0-preview.122",
   description: "CLI plugin for the UiPath Audit Service — query event sources, paginate events, and export ZIPs from the long-term store.",
   private: false,
   repository: {
@@ -33154,7 +33303,7 @@ var registerCommands3 = async (program3) => {
 var package_default8 = {
   name: "@uipath/authz-tool",
   license: "MIT",
-  version: "1.201.0-preview.115",
+  version: "1.201.0-preview.122",
   description: "CLI plugin for the UiPath Authorization service.",
   private: false,
   repository: {
@@ -38765,7 +38914,7 @@ var registerCommands4 = async (program3) => {
 var package_default11 = {
   name: "@uipath/identity-tool",
   license: "MIT",
-  version: "1.201.0-preview.115",
+  version: "1.201.0-preview.122",
   description: "Manage Identity Server users, groups, robot accounts, and external apps.",
   private: false,
   repository: {
@@ -38998,10 +39147,32 @@ var FED_CRED_DELETE_EXAMPLES = [
     }
   }
 ];
-function parseScopes(csv, type3) {
-  if (!csv)
-    return [];
-  return csv.split(",").map((s) => ({ name: s.trim(), type: type3 }));
+function parseScopes(list, type3) {
+  return splitScopeList(list).map((name) => ({ name, type: type3 }));
+}
+function foldDeprecatedScopeAlias(options) {
+  if (options.scope !== undefined && options.appScope === undefined) {
+    options.appScope = options.scope;
+    return "--scope";
+  }
+  return "--app-scope";
+}
+function findBlankScopeOption(options, appScopeOption) {
+  if (options.userScope !== undefined && splitScopeList(options.userScope).length === 0) {
+    return "--user-scope";
+  }
+  if (options.appScope !== undefined && splitScopeList(options.appScope).length === 0) {
+    return appScopeOption;
+  }
+  return;
+}
+function reportBlankScopeOption(option) {
+  OutputFormatter2.error({
+    Result: RESULTS2.Failure,
+    Message: `No scope names found in ${option}.`,
+    Instructions: `Pass one or more scopes, comma- or space-separated (e.g. ${option} "OR.Folders,OR.Assets").`
+  });
+  processContext2.exit(1);
 }
 function warnDeprecatedOrganization(org) {
   if (org !== undefined) {
@@ -39065,10 +39236,13 @@ var registerExternalAppsCommand = (program3) => {
       Data: client
     });
   });
-  externalApps.command("create").description("Create an external app (confidential by default). " + "Use --non-confidential for public clients (SPAs, mobile apps).").argument("<name>", "App display name").option("--organization <id>", "(deprecated, ignored) organization is derived from login").option("--redirect-uri <uri>", "Redirect URI(s) for OAuth2 flow (comma-separated for multiple)").option("--user-scope <scopes>", "Comma-separated user (delegated) scopes").option("--app-scope <scopes>", "Comma-separated application (app-only) scopes").option("--scope <scopes>", "Alias for --app-scope (deprecated)").option("--non-confidential", "Create a non-confidential (public) app — no client secret, requires redirect URI").option("--no-secret", "Skip generating a client secret on creation").option("--login-validity <minutes>", "Override token validity (minutes)", (v) => Number.parseInt(v, 10)).examples(EXTERNAL_APPS_CREATE_EXAMPLES).trackedAction(processContext2, async (name, options) => {
+  externalApps.command("create").description("Create an external app (confidential by default). " + "Use --non-confidential for public clients (SPAs, mobile apps).").argument("<name>", "App display name").option("--organization <id>", "(deprecated, ignored) organization is derived from login").option("--redirect-uri <uri>", "Redirect URI(s) for OAuth2 flow (comma-separated for multiple)").option("--user-scope <scopes>", "User (delegated) scopes, comma- or space-separated").option("--app-scope <scopes>", "Application (app-only) scopes, comma- or space-separated").option("--scope <scopes>", "Alias for --app-scope (deprecated)").option("--non-confidential", "Create a non-confidential (public) app — no client secret, requires redirect URI").option("--no-secret", "Skip generating a client secret on creation").option("--login-validity <minutes>", "Override token validity (minutes)", (v) => Number.parseInt(v, 10)).examples(EXTERNAL_APPS_CREATE_EXAMPLES).trackedAction(processContext2, async (name, options) => {
     warnDeprecatedOrganization(options.organization);
-    if (options.scope && !options.appScope) {
-      options.appScope = options.scope;
+    const appScopeOption = foldDeprecatedScopeAlias(options);
+    const blankOption = findBlankScopeOption(options, appScopeOption);
+    if (blankOption) {
+      reportBlankScopeOption(blankOption);
+      return;
     }
     if (!options.userScope && !options.appScope) {
       OutputFormatter2.error({
@@ -39138,11 +39312,9 @@ var registerExternalAppsCommand = (program3) => {
       Data: result
     });
   });
-  externalApps.command("update").description("Update an external app. Use 'external-apps list' to retrieve the client ID.").argument("<client-id>", "External app ID").option("--organization <id>", "(deprecated, ignored) organization is derived from login").option("-n, --name <name>", "New display name").option("--redirect-uri <uri>", "Redirect URI(s) for OAuth2 flow (comma-separated for multiple)").option("--user-scope <scopes>", "Comma-separated user (delegated) scopes").option("--app-scope <scopes>", "Comma-separated application (app-only) scopes").option("--scope <scopes>", "Alias for --app-scope (deprecated)").option("--login-validity <minutes>", "Override token validity (minutes)", (v) => Number.parseInt(v, 10)).examples(EXTERNAL_APPS_UPDATE_EXAMPLES).trackedAction(processContext2, async (clientId, options) => {
+  externalApps.command("update").description("Update an external app. Use 'external-apps list' to retrieve the client ID.").argument("<client-id>", "External app ID").option("--organization <id>", "(deprecated, ignored) organization is derived from login").option("-n, --name <name>", "New display name").option("--redirect-uri <uri>", "Redirect URI(s) for OAuth2 flow (comma-separated for multiple)").option("--user-scope <scopes>", "User (delegated) scopes, comma- or space-separated").option("--app-scope <scopes>", "Application (app-only) scopes, comma- or space-separated").option("--scope <scopes>", "Alias for --app-scope (deprecated)").option("--login-validity <minutes>", "Override token validity (minutes)", (v) => Number.parseInt(v, 10)).examples(EXTERNAL_APPS_UPDATE_EXAMPLES).trackedAction(processContext2, async (clientId, options) => {
     warnDeprecatedOrganization(options.organization);
-    if (options.scope && !options.appScope) {
-      options.appScope = options.scope;
-    }
+    const appScopeOption = foldDeprecatedScopeAlias(options);
     const hasScopes = options.userScope !== undefined || options.appScope !== undefined;
     if (options.name === undefined && options.redirectUri === undefined && !hasScopes) {
       OutputFormatter2.error({
@@ -39153,6 +39325,11 @@ var registerExternalAppsCommand = (program3) => {
       processContext2.exit(1);
       return;
     }
+    const blankOption = findBlankScopeOption(options, appScopeOption);
+    if (blankOption) {
+      reportBlankScopeOption(blankOption);
+      return;
+    }
     const [fetchError, fetchResult] = await catchError5((async () => {
       const { api: api2, organizationId } = await createApiClient5(ExternalClientApi, {
         loginValidity: options.loginValidity,
@@ -41134,7 +41311,7 @@ var registerCommands5 = async (program3) => {
 var package_default12 = {
   name: "@uipath/oms-tool",
   license: "MIT",
-  version: "1.201.0-preview.115",
+  version: "1.201.0-preview.122",
   description: "CLI plugin for the UiPath Organization Management Service.",
   private: false,
   repository: {
@@ -47367,9 +47544,12 @@ var registerTenantsCommands = (oms) => {
     "List tenants in the caller's organization.",
     "",
     "Pass `--filter <fragment>` to narrow client-side by name (case-insensitive",
-    "substring on `name`). The other flags map to server-side filters:",
+    "substring on `name`). The remaining flags:",
     "  --service <type>       only tenants that have the given service provisioned",
-    "  --status <s>           only tenants whose lifecycle status matches",
+    "                         (server-side)",
+    "  --status <s>           only tenants whose lifecycle status matches. Sent",
+    "                         upstream AND applied client-side, because the",
+    "                         service currently ignores the query parameter",
     "  --include-services     return each tenant's `services` array inline",
     "",
     "Use this to look up a tenant's UUID by name before calling `get`, `update`,",
@@ -47398,6 +47578,9 @@ var registerTenantsCommands = (oms) => {
       if (options.environment !== undefined && t.environment !== options.environment) {
         return false;
       }
+      if (options.status !== undefined && t.status !== options.status) {
+        return false;
+      }
       return true;
     });
     OutputFormatter2.success({
@@ -47658,7 +47841,7 @@ var registerCommands6 = async (program3) => {
 var package_default14 = {
   name: "@uipath/resourcecatalog-tool",
   license: "MIT",
-  version: "1.201.0-preview.115",
+  version: "1.201.0-preview.122",
   description: "CLI plugin for the UiPath Resource Catalog Service.",
   private: false,
   repository: {
@@ -49606,7 +49789,7 @@ var registerCommands7 = async (program3) => {
 var package_default16 = {
   name: "@uipath/admin-tool",
   license: "MIT",
-  version: "1.201.0-preview.115",
+  version: "1.201.0-preview.122",
   description: "Manage UiPath admin resources — Identity Server, Resource Catalog Service, Audit Service, VPN Gateway.",
   private: false,
   repository: {
@@ -49671,4 +49854,4 @@ export {
   metadata8 as metadata
 };
 
-//# debugId=F9F3F522401B272464756E2164756E21
+//# debugId=FF29941F54AFBC6264756E2164756E21

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@uipath/admin-tool",
   "license": "MIT",
-  "version": "1.201.0-preview.115",
+  "version": "1.201.0-preview.122",
   "description": "Manage UiPath admin resources — Identity Server, Resource Catalog Service, Audit Service, VPN Gateway.",
   "private": false,
   "repository": {
@@ -23,5 +23,5 @@
   "files": [
     "dist"
   ],
-  "gitHead": "f1086b73654d7728cb71f280588b3e0c77d535fc"
+  "gitHead": "6c56f56100be96231fccbaa59e99d64d94808d58"
 }