@uipath/agent-tool 1.202.0-preview.134 → 1.202.0-preview.137

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,8 +1,8 @@
1
1
  import {
2
2
  AgentDebugCancelledError,
3
3
  AgentDebugService
4
- } from "./packager-tool-j5vxmyem.js";
5
- import"./packager-tool-5kwdv57x.js";
4
+ } from "./packager-tool-cm3tggtv.js";
5
+ import"./packager-tool-d1dzjvm7.js";
6
6
  import"./packager-tool-b098y4a2.js";
7
7
  import"./packager-tool-1yh8g550.js";
8
8
  // ../executor/project-executor/src/models/run-status.ts
@@ -10,7 +10,7 @@ import {
10
10
  isGuid,
11
11
  logger,
12
12
  normalizeProjectType
13
- } from "./packager-tool-5kwdv57x.js";
13
+ } from "./packager-tool-d1dzjvm7.js";
14
14
  import"./packager-tool-b098y4a2.js";
15
15
  import {
16
16
  __commonJS,
package/dist/index.js CHANGED
@@ -2,13 +2,13 @@
2
2
  import {
3
3
  metadata,
4
4
  registerCommands
5
- } from "./packager-tool-s1vqz1zd.js";
5
+ } from "./packager-tool-r2h06hxm.js";
6
6
  import"./packager-tool-a42jnpy5.js";
7
7
  import"./packager-tool-c23zrhj8.js";
8
- import"./packager-tool-j5vxmyem.js";
8
+ import"./packager-tool-cm3tggtv.js";
9
9
  import {
10
10
  Command
11
- } from "./packager-tool-5kwdv57x.js";
11
+ } from "./packager-tool-d1dzjvm7.js";
12
12
  import"./packager-tool-0srzfhdr.js";
13
13
  import"./packager-tool-b098y4a2.js";
14
14
  import"./packager-tool-1yh8g550.js";
@@ -1334,16 +1334,21 @@ function requireLoader() {
1334
1334
  state.result += _result;
1335
1335
  }
1336
1336
  }
1337
+ function chargeMergeWork(state) {
1338
+ state.totalMergeKeys++;
1339
+ if (state.maxTotalMergeKeys !== -1 && state.totalMergeKeys > state.maxTotalMergeKeys) {
1340
+ throwError(state, "merge keys exceeded maxTotalMergeKeys (" + state.maxTotalMergeKeys + ")");
1341
+ }
1342
+ }
1337
1343
  function mergeMappings(state, destination, source, overridableKeys) {
1338
1344
  if (!common2.isObject(source)) {
1339
1345
  throwError(state, "cannot merge mappings; the provided source object is unacceptable");
1340
1346
  }
1347
+ chargeMergeWork(state);
1341
1348
  const sourceKeys = Object.keys(source);
1342
1349
  for (let index = 0, quantity = sourceKeys.length;index < quantity; index += 1) {
1343
1350
  const key = sourceKeys[index];
1344
- if (state.maxTotalMergeKeys !== -1 && ++state.totalMergeKeys > state.maxTotalMergeKeys) {
1345
- throwError(state, "merge keys exceeded maxTotalMergeKeys (" + state.maxTotalMergeKeys + ")");
1346
- }
1351
+ chargeMergeWork(state);
1347
1352
  if (!_hasOwnProperty.call(destination, key)) {
1348
1353
  setProperty(destination, key, source[key]);
1349
1354
  overridableKeys[key] = true;
@@ -1371,6 +1376,9 @@ function requireLoader() {
1371
1376
  }
1372
1377
  if (keyTag === "tag:yaml.org,2002:merge") {
1373
1378
  if (Array.isArray(valueNode)) {
1379
+ if (valueNode.length > 100) {
1380
+ throwError(state, "abnormal merge sequence size");
1381
+ }
1374
1382
  for (let index = 0, quantity = valueNode.length;index < quantity; index += 1) {
1375
1383
  mergeMappings(state, _result, valueNode[index], overridableKeys);
1376
1384
  }
@@ -3142,4 +3150,4 @@ export {
3142
3150
  types
3143
3151
  };
3144
3152
 
3145
- //# debugId=3FF8535573D0966A64756E2164756E21
3153
+ //# debugId=9FA8E718B2F80BEA64756E2164756E21
@@ -15,7 +15,7 @@ import {
15
15
  summarizePlatformBody,
16
16
  updateSolutionFile,
17
17
  updateUipxSolutionId
18
- } from "./packager-tool-5kwdv57x.js";
18
+ } from "./packager-tool-d1dzjvm7.js";
19
19
  import {
20
20
  zipSync
21
21
  } from "./packager-tool-b098y4a2.js";
@@ -153,6 +153,7 @@ var require_errors = __commonJS(function(exports) {
153
153
  DESCRIPTOR_FAULTY: "Descriptor data is malformed",
154
154
  NO_DATA: "Nothing to decompress",
155
155
  BAD_CRC: "CRC32 checksum failed {0}",
156
+ MAX_OUTPUT_EXCEEDED: "Decompressed data exceeds the declared uncompressed size",
156
157
  FILE_IN_THE_WAY: "There is a file in the way: {0}",
157
158
  UNKNOWN_METHOD: "Invalid/unsupported compression method",
158
159
  AVAIL_DATA: "inflate::Available inflate data did not terminate",
@@ -170,11 +171,13 @@ var require_errors = __commonJS(function(exports) {
170
171
  DISK_ENTRY_TOO_LARGE: "Number of disk entries is too large",
171
172
  NO_ZIP: "No zip file was loaded",
172
173
  NO_ENTRY: "Entry doesn't exist",
174
+ DUPLICATE_ENTRY: "Duplicate entry name {0}",
173
175
  DIRECTORY_CONTENT_ERROR: "A directory cannot have content",
174
176
  FILE_NOT_FOUND: 'File not found: "{0}"',
175
177
  NOT_IMPLEMENTED: "Not implemented",
176
178
  INVALID_FILENAME: "Invalid filename",
177
179
  INVALID_FORMAT: "Invalid or unsupported zip format. No END header found",
180
+ ZIP64_VALUE_TOO_LARGE: "Zip64 value exceeds the maximum safe integer",
178
181
  INVALID_PASS_PARAM: "Incompatible password parameter",
179
182
  WRONG_PASSWORD: "Wrong Password",
180
183
  COMMENT_TOO_LONG: "Comment is too long",
@@ -328,8 +331,49 @@ var require_utils = __commonJS(function(exports, module) {
328
331
  });
329
332
  });
330
333
  };
334
+ Utils.prototype.assertPathSafe = function(root, target) {
335
+ const self = this;
336
+ if (typeof self.fs.lstatSync !== "function")
337
+ return;
338
+ const resolvedRoot = pth.resolve(root);
339
+ const resolvedTarget = pth.resolve(target);
340
+ if (resolvedTarget === resolvedRoot)
341
+ return;
342
+ const rel = pth.relative(resolvedRoot, resolvedTarget);
343
+ if (!rel || rel === ".." || rel.startsWith(".." + pth.sep) || pth.isAbsolute(rel))
344
+ return;
345
+ let cur = resolvedRoot;
346
+ for (const part of rel.split(pth.sep)) {
347
+ if (!part || part === ".")
348
+ continue;
349
+ cur = pth.join(cur, part);
350
+ let stat;
351
+ try {
352
+ stat = self.fs.lstatSync(cur);
353
+ } catch (e) {
354
+ break;
355
+ }
356
+ if (stat.isSymbolicLink())
357
+ throw Errors.FILE_IN_THE_WAY(`"${cur}"`);
358
+ }
359
+ };
331
360
  Utils.prototype.findFiles = function(path) {
332
361
  const self = this;
362
+ const canLstat = typeof self.fs.lstatSync === "function";
363
+ const rootReal = self.fs.realpathSync(path);
364
+ function escapesRoot(p) {
365
+ if (!canLstat)
366
+ return false;
367
+ if (!self.fs.lstatSync(p).isSymbolicLink())
368
+ return false;
369
+ let real;
370
+ try {
371
+ real = self.fs.realpathSync(p);
372
+ } catch (e) {
373
+ return true;
374
+ }
375
+ return !(real === rootReal || real.startsWith(rootReal + pth.sep));
376
+ }
333
377
  function findSync(dir, pattern, recursive, visited) {
334
378
  if (typeof pattern === "boolean") {
335
379
  recursive = pattern;
@@ -338,6 +382,8 @@ var require_utils = __commonJS(function(exports, module) {
338
382
  let files = [];
339
383
  self.fs.readdirSync(dir).forEach(function(file) {
340
384
  const path2 = pth.join(dir, file);
385
+ if (escapesRoot(path2))
386
+ return;
341
387
  const stat = self.fs.statSync(path2);
342
388
  if (!pattern || pattern.test(path2)) {
343
389
  files.push(pth.normalize(path2) + (stat.isDirectory() ? self.sep : ""));
@@ -352,7 +398,7 @@ var require_utils = __commonJS(function(exports, module) {
352
398
  });
353
399
  return files;
354
400
  }
355
- return findSync(path, undefined, true, new Set([self.fs.realpathSync(path)]));
401
+ return findSync(path, undefined, true, new Set([rootReal]));
356
402
  };
357
403
  Utils.prototype.findFilesAsync = function(dir, cb) {
358
404
  const self = this;
@@ -364,6 +410,23 @@ var require_utils = __commonJS(function(exports, module) {
364
410
  finished = true;
365
411
  cb(err, err ? undefined : results);
366
412
  };
413
+ const canLstat = typeof self.fs.lstat === "function";
414
+ let rootReal = null;
415
+ const escapesRoot = function(file, cb2) {
416
+ if (!canLstat)
417
+ return cb2(null, false);
418
+ self.fs.lstat(file, function(err, lst) {
419
+ if (err)
420
+ return cb2(err);
421
+ if (!lst || !lst.isSymbolicLink())
422
+ return cb2(null, false);
423
+ self.fs.realpath(file, function(err2, real) {
424
+ if (err2)
425
+ return cb2(null, true);
426
+ cb2(null, !(real === rootReal || real.startsWith(rootReal + pth.sep)));
427
+ });
428
+ });
429
+ };
367
430
  const walk = function(dir2, visited, done) {
368
431
  self.fs.readdir(dir2, function(err, list) {
369
432
  if (err)
@@ -373,34 +436,43 @@ var require_utils = __commonJS(function(exports, module) {
373
436
  return done();
374
437
  list.forEach(function(name) {
375
438
  const file = pth.join(dir2, name);
376
- self.fs.stat(file, function(err2, stat) {
439
+ escapesRoot(file, function(err2, escapes) {
377
440
  if (err2)
378
441
  return done(err2);
379
- if (!stat) {
380
- if (!--pending)
381
- done();
382
- return;
383
- }
384
- results.push(pth.normalize(file) + (stat.isDirectory() ? self.sep : ""));
385
- if (!stat.isDirectory()) {
442
+ if (escapes) {
386
443
  if (!--pending)
387
444
  done();
388
445
  return;
389
446
  }
390
- self.fs.realpath(file, function(err3, realDir) {
447
+ self.fs.stat(file, function(err3, stat) {
391
448
  if (err3)
392
449
  return done(err3);
393
- if (visited.has(realDir)) {
450
+ if (!stat) {
394
451
  if (!--pending)
395
452
  done();
396
453
  return;
397
454
  }
398
- visited.add(realDir);
399
- walk(file, visited, function(err4) {
400
- if (err4)
401
- return done(err4);
455
+ results.push(pth.normalize(file) + (stat.isDirectory() ? self.sep : ""));
456
+ if (!stat.isDirectory()) {
402
457
  if (!--pending)
403
458
  done();
459
+ return;
460
+ }
461
+ self.fs.realpath(file, function(err4, realDir) {
462
+ if (err4)
463
+ return done(err4);
464
+ if (visited.has(realDir)) {
465
+ if (!--pending)
466
+ done();
467
+ return;
468
+ }
469
+ visited.add(realDir);
470
+ walk(file, visited, function(err5) {
471
+ if (err5)
472
+ return done(err5);
473
+ if (!--pending)
474
+ done();
475
+ });
404
476
  });
405
477
  });
406
478
  });
@@ -410,6 +482,7 @@ var require_utils = __commonJS(function(exports, module) {
410
482
  self.fs.realpath(dir, function(err, realDir) {
411
483
  if (err)
412
484
  return finish(err);
485
+ rootReal = realDir;
413
486
  walk(dir, new Set([realDir]), finish);
414
487
  });
415
488
  };
@@ -484,7 +557,11 @@ var require_utils = __commonJS(function(exports, module) {
484
557
  Utils.readBigUInt64LE = function(buffer, index) {
485
558
  const lo = buffer.readUInt32LE(index);
486
559
  const hi = buffer.readUInt32LE(index + 4);
487
- return hi * 4294967296 + lo;
560
+ const value = hi * 4294967296 + lo;
561
+ if (value > Number.MAX_SAFE_INTEGER) {
562
+ throw Errors.ZIP64_VALUE_TOO_LARGE();
563
+ }
564
+ return value;
488
565
  };
489
566
  Utils.writeBigUInt64LE = function(buffer, value, index) {
490
567
  const lo = value >>> 0;
@@ -736,7 +813,7 @@ var require_entryHeader = __commonJS(function(exports, module) {
736
813
  _attr = uint32(val);
737
814
  },
738
815
  get fileAttr() {
739
- return (_attr || 0) >> 16 & 4095;
816
+ return (_attr || 0) >> 16 & 511;
740
817
  },
741
818
  get offset() {
742
819
  return _offset;
@@ -757,6 +834,9 @@ var require_entryHeader = __commonJS(function(exports, module) {
757
834
  return _localHeader;
758
835
  },
759
836
  loadLocalHeaderFromBinary: function(input) {
837
+ if (_offset < 0 || _offset + Constants.LOCHDR > input.length) {
838
+ throw Utils.Errors.INVALID_LOC();
839
+ }
760
840
  var data = input.slice(_offset, _offset + Constants.LOCHDR);
761
841
  if (data.readUInt32LE(0) !== Constants.LOCSIG) {
762
842
  throw Utils.Errors.INVALID_LOC();
@@ -1022,20 +1102,40 @@ var require_deflater = __commonJS(function(exports, module) {
1022
1102
  // ../../node_modules/adm-zip/methods/inflater.js
1023
1103
  var require_inflater = __commonJS(function(exports, module) {
1024
1104
  var version = +(process?.versions?.node ?? "").split(".")[0] || 0;
1105
+ var Errors = require_errors();
1025
1106
  module.exports = function(inbuf, expectedLength) {
1026
1107
  var zlib = __require("zlib");
1027
- const option = version >= 15 && expectedLength > 0 ? { maxOutputLength: expectedLength } : {};
1108
+ const maxOutputLength = expectedLength > 0 ? expectedLength : 1;
1109
+ const option = version >= 15 ? { maxOutputLength } : {};
1028
1110
  return {
1029
1111
  inflate: function() {
1030
1112
  return zlib.inflateRawSync(inbuf, option);
1031
1113
  },
1032
1114
  inflateAsync: function(callback) {
1033
- var tmp = zlib.createInflateRaw(option), parts = [], total = 0;
1115
+ var tmp = zlib.createInflateRaw(option), parts = [], total = 0, done = false;
1116
+ const fail = function(err) {
1117
+ if (done)
1118
+ return;
1119
+ done = true;
1120
+ tmp.destroy();
1121
+ callback && callback(Buffer.alloc(0), err);
1122
+ };
1123
+ tmp.on("error", function(err) {
1124
+ fail(err);
1125
+ });
1034
1126
  tmp.on("data", function(data) {
1035
- parts.push(data);
1127
+ if (done)
1128
+ return;
1036
1129
  total += data.length;
1130
+ if (total > maxOutputLength) {
1131
+ return fail(Errors.MAX_OUTPUT_EXCEEDED());
1132
+ }
1133
+ parts.push(data);
1037
1134
  });
1038
1135
  tmp.on("end", function() {
1136
+ if (done)
1137
+ return;
1138
+ done = true;
1039
1139
  var buf = Buffer.alloc(total), written = 0;
1040
1140
  buf.fill(0);
1041
1141
  for (var i = 0;i < parts.length; i++) {
@@ -1192,7 +1292,12 @@ var require_zipEntry = __commonJS(function(exports, module) {
1192
1292
  return Buffer.alloc(0);
1193
1293
  }
1194
1294
  _extralocal = _centralHeader.loadLocalHeaderFromBinary(input);
1195
- return input.slice(_centralHeader.realDataOffset, _centralHeader.realDataOffset + _centralHeader.compressedSize);
1295
+ const dataOffset = _centralHeader.realDataOffset;
1296
+ const dataEnd = dataOffset + _centralHeader.compressedSize;
1297
+ if (dataOffset < 0 || dataEnd < dataOffset || dataEnd > input.length) {
1298
+ throw Utils.Errors.INVALID_LOC();
1299
+ }
1300
+ return input.slice(dataOffset, dataEnd);
1196
1301
  }
1197
1302
  function crc32OK(data) {
1198
1303
  const expectedCrc = _centralHeader.flags_desc || _centralHeader.localHeader.flags_desc ? _centralHeader.crc : _centralHeader.localHeader.crc;
@@ -1209,17 +1314,26 @@ var require_zipEntry = __commonJS(function(exports, module) {
1209
1314
  }
1210
1315
  return Buffer.alloc(0);
1211
1316
  }
1212
- var compressedData = getCompressedDataFromZip();
1213
- if (compressedData.length === 0) {
1214
- if (async && callback)
1215
- callback(compressedData);
1216
- return compressedData;
1217
- }
1218
- if (_centralHeader.encrypted) {
1219
- if (typeof pass !== "string" && !Buffer.isBuffer(pass)) {
1220
- throw Utils.Errors.INVALID_PASS_PARAM();
1317
+ var compressedData;
1318
+ try {
1319
+ compressedData = getCompressedDataFromZip();
1320
+ if (compressedData.length === 0) {
1321
+ if (async && callback)
1322
+ callback(compressedData);
1323
+ return compressedData;
1324
+ }
1325
+ if (_centralHeader.encrypted) {
1326
+ if (typeof pass !== "string" && !Buffer.isBuffer(pass)) {
1327
+ throw Utils.Errors.INVALID_PASS_PARAM();
1328
+ }
1329
+ compressedData = Methods.ZipCrypto.decrypt(compressedData, _centralHeader, pass);
1330
+ }
1331
+ } catch (err) {
1332
+ if (async && callback) {
1333
+ callback(Buffer.alloc(0), err);
1334
+ return Buffer.alloc(0);
1221
1335
  }
1222
- compressedData = Methods.ZipCrypto.decrypt(compressedData, _centralHeader, pass);
1336
+ throw err;
1223
1337
  }
1224
1338
  var data;
1225
1339
  switch (_centralHeader.method) {
@@ -1244,13 +1358,15 @@ var require_zipEntry = __commonJS(function(exports, module) {
1244
1358
  }
1245
1359
  return data;
1246
1360
  } else {
1247
- inflater.inflateAsync(function(result) {
1248
- if (callback) {
1249
- if (!crc32OK(result)) {
1250
- callback(result, Utils.Errors.BAD_CRC());
1251
- } else {
1252
- callback(result);
1253
- }
1361
+ inflater.inflateAsync(function(result, err) {
1362
+ if (!callback)
1363
+ return;
1364
+ if (err) {
1365
+ callback(Buffer.alloc(0), err);
1366
+ } else if (!crc32OK(result)) {
1367
+ callback(result, Utils.Errors.BAD_CRC());
1368
+ } else {
1369
+ callback(result);
1254
1370
  }
1255
1371
  });
1256
1372
  }
@@ -1542,6 +1658,9 @@ var require_zipFile = __commonJS(function(exports, module) {
1542
1658
  if (entry.header.commentLength)
1543
1659
  entry.comment = inBuffer.slice(tmp, tmp + entry.header.commentLength);
1544
1660
  index += entry.header.centralHeaderSize;
1661
+ if (entry.entryName in entryTable) {
1662
+ throw Utils.Errors.DUPLICATE_ENTRY(`"${entry.entryName}"`);
1663
+ }
1545
1664
  entryList[i] = entry;
1546
1665
  entryTable[entry.entryName] = entry;
1547
1666
  }
@@ -2067,7 +2186,7 @@ var require_adm_zip = __commonJS(function(exports, module) {
2067
2186
  addLocalFolderAsync2: function(options2, callback) {
2068
2187
  const self = this;
2069
2188
  options2 = typeof options2 === "object" ? options2 : { localPath: options2 };
2070
- const localPath = pth.resolve(fixPath(options2.localPath));
2189
+ const localPath = pth.resolve(options2.localPath);
2071
2190
  let { zipPath, filter, namefix } = options2;
2072
2191
  if (filter instanceof RegExp) {
2073
2192
  filter = function(rx) {
@@ -2090,16 +2209,16 @@ var require_adm_zip = __commonJS(function(exports, module) {
2090
2209
  const fileNameFix = (entry) => pth.win32.basename(pth.win32.normalize(namefix(entry)));
2091
2210
  filetools.fs.open(localPath, "r", function(err) {
2092
2211
  if (err && err.code === "ENOENT") {
2093
- callback(undefined, Utils.Errors.FILE_NOT_FOUND(localPath));
2212
+ callback(Utils.Errors.FILE_NOT_FOUND(localPath), false);
2094
2213
  } else if (err) {
2095
- callback(undefined, err);
2214
+ callback(err, false);
2096
2215
  } else {
2097
2216
  filetools.findFilesAsync(localPath, function(err2, fileEntries) {
2098
2217
  if (err2)
2099
- return callback(err2);
2218
+ return callback(err2, false);
2100
2219
  fileEntries = fileEntries.filter((dir) => filter(relPathFix(dir)));
2101
2220
  if (!fileEntries.length)
2102
- callback(undefined, false);
2221
+ return callback(undefined, true);
2103
2222
  setImmediate(fileEntries.reverse().reduce(function(next, entry) {
2104
2223
  return function(err3, done) {
2105
2224
  if (err3 || done === false)
@@ -2119,7 +2238,7 @@ var require_adm_zip = __commonJS(function(exports, module) {
2119
2238
  return new Promise((resolve, reject) => {
2120
2239
  this.addLocalFolderAsync2(Object.assign({ localPath }, props), (err, done) => {
2121
2240
  if (err)
2122
- reject(err);
2241
+ return reject(err);
2123
2242
  if (done)
2124
2243
  resolve(this);
2125
2244
  });
@@ -2189,6 +2308,7 @@ var require_adm_zip = __commonJS(function(exports, module) {
2189
2308
  }
2190
2309
  var name = canonical(maintainEntryPath ? child.entryName : child.entryName.substring(item.entryName.length));
2191
2310
  var childName = sanitize(targetPath, name);
2311
+ filetools.assertPathSafe(targetPath, childName);
2192
2312
  const fileAttr2 = keepOriginalPermission ? child.header.fileAttr : undefined;
2193
2313
  filetools.writeFileTo(childName, content2, overwrite, fileAttr2);
2194
2314
  });
@@ -2197,6 +2317,7 @@ var require_adm_zip = __commonJS(function(exports, module) {
2197
2317
  var content = item.getData(_zip.password);
2198
2318
  if (!content)
2199
2319
  throw Utils.Errors.CANT_EXTRACT_FILE();
2320
+ filetools.assertPathSafe(targetPath, target);
2200
2321
  if (filetools.fs.existsSync(target) && !overwrite) {
2201
2322
  throw Utils.Errors.CANT_OVERRIDE();
2202
2323
  }
@@ -2232,6 +2353,7 @@ var require_adm_zip = __commonJS(function(exports, module) {
2232
2353
  const dirEntries = [];
2233
2354
  _zip.entries.forEach(function(entry) {
2234
2355
  var entryName = sanitize(targetPath, canonical(entry.entryName));
2356
+ filetools.assertPathSafe(targetPath, entryName);
2235
2357
  if (entry.isDirectory) {
2236
2358
  filetools.makeDir(entryName);
2237
2359
  if (keepOriginalPermission)
@@ -2286,6 +2408,7 @@ var require_adm_zip = __commonJS(function(exports, module) {
2286
2408
  const dirPath = getPath(entry);
2287
2409
  const dirAttr = keepOriginalPermission ? entry.header.fileAttr : undefined;
2288
2410
  try {
2411
+ filetools.assertPathSafe(targetPath, dirPath);
2289
2412
  filetools.makeDir(dirPath);
2290
2413
  } catch (er) {
2291
2414
  callback(getError("Unable to create folder", dirPath));
@@ -2314,6 +2437,11 @@ var require_adm_zip = __commonJS(function(exports, module) {
2314
2437
  } else {
2315
2438
  const entryName = pth.normalize(canonical(entry.entryName));
2316
2439
  const filePath = sanitize(targetPath, entryName);
2440
+ try {
2441
+ filetools.assertPathSafe(targetPath, filePath);
2442
+ } catch (er) {
2443
+ return next(er);
2444
+ }
2317
2445
  entry.getDataAsync(function(content, err_1) {
2318
2446
  if (err_1) {
2319
2447
  next(err_1);
@@ -2843,7 +2971,7 @@ function querystringSingleKey2(key, value, keyPrefix = "") {
2843
2971
  var package_default = {
2844
2972
  name: "@uipath/solution-sdk",
2845
2973
  license: "MIT",
2846
- version: "1.202.0-preview.134",
2974
+ version: "1.202.0-preview.137",
2847
2975
  repository: {
2848
2976
  type: "git",
2849
2977
  url: "https://github.com/UiPath/cli.git",
@@ -4048,4 +4176,4 @@ function parseOutput(outputArguments) {
4048
4176
 
4049
4177
  export { StudioWebIncompatibleProjectError, isSolutionUploadHttpError, buildSolutionUploadFailureOutput, migrateLegacyToolGuardrailPolicies, AgentProjectService, resolveStudioWebConfig, AgentLocalWorkspaceEvalPreparer, AgentDebugCancelledError, AgentDebugService };
4050
4178
 
4051
- //# debugId=4327A7CD95EEE18564756E2164756E21
4179
+ //# debugId=9C2CEDDB30519B5264756E2164756E21
@@ -4846,7 +4846,7 @@ var jmespathSlot = singleton("JmespathCodec");
4846
4846
  async function loadOutputCodecsAsync(needed) {
4847
4847
  const loads = [];
4848
4848
  if (needed.yaml && yamlSlot.get() === undefined) {
4849
- loads.push(import("./js-yaml-87tvr6f6.js").then((mod) => {
4849
+ loads.push(import("./js-yaml-87cdx6bm.js").then((mod) => {
4850
4850
  yamlSlot.set(mod);
4851
4851
  }));
4852
4852
  }
@@ -5751,6 +5751,14 @@ var RETRY_HINTS = [
5751
5751
  "RetryAfter30Seconds",
5752
5752
  "RetryAfter60Seconds"
5753
5753
  ];
5754
+ var CLI_ERROR_CODE_VALUES = new Set(CLI_ERROR_CODES);
5755
+ var RETRY_HINT_VALUES = new Set(RETRY_HINTS);
5756
+ function isCliErrorCode(value) {
5757
+ return typeof value === "string" && CLI_ERROR_CODE_VALUES.has(value);
5758
+ }
5759
+ function isRetryHint(value) {
5760
+ return typeof value === "string" && RETRY_HINT_VALUES.has(value);
5761
+ }
5754
5762
  var RESULTS = {
5755
5763
  Success: "Success",
5756
5764
  Failure: "Failure",
@@ -6521,8 +6529,6 @@ function emitInvocationRequest(name, success, properties) {
6521
6529
 
6522
6530
  // ../common/src/trackedAction.ts
6523
6531
  var pollSignalSlot = singleton("PollSignal");
6524
- var cliErrorCodeValues = new Set(CLI_ERROR_CODES);
6525
- var retryHintValues = new Set(RETRY_HINTS);
6526
6532
  var TELEMETRY_COMMAND_ARG_PREFIX = "uip.cmd.arg.";
6527
6533
  var processContext = {
6528
6534
  exit: (code) => {
@@ -6610,12 +6616,6 @@ function deriveCommandPath(cmd) {
6610
6616
  }
6611
6617
  return commandTelemetryName(parts);
6612
6618
  }
6613
- function isCliErrorCode(value) {
6614
- return typeof value === "string" && cliErrorCodeValues.has(value);
6615
- }
6616
- function isRetryHint(value) {
6617
- return typeof value === "string" && retryHintValues.has(value);
6618
- }
6619
6619
  function isErrorContext(value) {
6620
6620
  return value !== null && typeof value === "object";
6621
6621
  }
@@ -9750,4 +9750,4 @@ async function createApiClient(ApiClass, options) {
9750
9750
  }
9751
9751
  export { getFileSystem, getLoginStatusAsync, getAuthContext, catchError2 as catchError, extractErrorMessage, extractErrorMessageSync, logger, RESULTS, OutputFormatter, summarizePlatformBody, Command, processContext, isGuid, getSdkUserAgentToken, addSdkUserAgentHeader, installSdkUserAgentHeader, normalizeProjectType, readUipxFile, prepareProjectLocation, updateUipxSolutionId, findSolutionFile, updateSolutionFile, tryRegisterProjectInParentSolution, findSolutionFileUpward, PersonalWorkspacesApi, UsersApi, createApiClient };
9752
9752
 
9753
- //# debugId=AB8AC0F51ADF90E564756E2164756E21
9753
+ //# debugId=F0A686B850DD203164756E2164756E21
@@ -13,7 +13,7 @@ import {
13
13
  isSolutionUploadHttpError,
14
14
  migrateLegacyToolGuardrailPolicies,
15
15
  resolveStudioWebConfig
16
- } from "./packager-tool-j5vxmyem.js";
16
+ } from "./packager-tool-cm3tggtv.js";
17
17
  import {
18
18
  OutputFormatter,
19
19
  RESULTS,
@@ -30,7 +30,7 @@ import {
30
30
  prepareProjectLocation,
31
31
  processContext,
32
32
  tryRegisterProjectInParentSolution
33
- } from "./packager-tool-5kwdv57x.js";
33
+ } from "./packager-tool-d1dzjvm7.js";
34
34
  import {
35
35
  currentAgentStorageSchema,
36
36
  currentEvaluationSetStorageSchema,
@@ -6989,7 +6989,7 @@ var require_index_cjs = __commonJS(function(exports, module) {
6989
6989
  var package_default = {
6990
6990
  name: "@uipath/agent-tool",
6991
6991
  license: "MIT",
6992
- version: "1.202.0-preview.134",
6992
+ version: "1.202.0-preview.137",
6993
6993
  description: "cli plugin for creating and managing UiPath low-code agents",
6994
6994
  private: false,
6995
6995
  repository: {
@@ -7432,7 +7432,7 @@ class VoidApiResponse {
7432
7432
  var package_default2 = {
7433
7433
  name: "@uipath/agent-sdk",
7434
7434
  license: "MIT",
7435
- version: "1.202.0-preview.134",
7435
+ version: "1.202.0-preview.137",
7436
7436
  description: "SDK for the UiPath Agent Runtime API — evaluation execution and debug sessions.",
7437
7437
  repository: {
7438
7438
  type: "git",
@@ -12793,7 +12793,7 @@ var registerGuardrailCommands = (program) => {
12793
12793
 
12794
12794
  // src/services/project-artifacts.ts
12795
12795
  async function ensureProjectArtifacts(args) {
12796
- const { addProjectArtifactsToSolutionAsync } = await import("./index-t1etnx58.js");
12796
+ const { addProjectArtifactsToSolutionAsync } = await import("./index-tdjhvdzh.js");
12797
12797
  return addProjectArtifactsToSolutionAsync(args);
12798
12798
  }
12799
12799
 
@@ -35285,7 +35285,7 @@ class TextApiResponse {
35285
35285
  var package_default3 = {
35286
35286
  name: "@uipath/integrationservice-sdk",
35287
35287
  license: "MIT",
35288
- version: "1.202.0-preview.134",
35288
+ version: "1.202.0-preview.137",
35289
35289
  repository: {
35290
35290
  type: "git",
35291
35291
  url: "https://github.com/UiPath/cli.git",
@@ -45222,4 +45222,4 @@ var registerCommands = async (program) => {
45222
45222
 
45223
45223
  export { metadata, registerCommands };
45224
45224
 
45225
- //# debugId=4BDD9FF4FB435A2B64756E2164756E21
45225
+ //# debugId=09FFD106A6B32FAF64756E2164756E21
package/dist/tool.js CHANGED
@@ -1,11 +1,11 @@
1
1
  import {
2
2
  metadata,
3
3
  registerCommands
4
- } from "./packager-tool-s1vqz1zd.js";
4
+ } from "./packager-tool-r2h06hxm.js";
5
5
  import"./packager-tool-a42jnpy5.js";
6
6
  import"./packager-tool-c23zrhj8.js";
7
- import"./packager-tool-j5vxmyem.js";
8
- import"./packager-tool-5kwdv57x.js";
7
+ import"./packager-tool-cm3tggtv.js";
8
+ import"./packager-tool-d1dzjvm7.js";
9
9
  import"./packager-tool-0srzfhdr.js";
10
10
  import"./packager-tool-b098y4a2.js";
11
11
  import"./packager-tool-1yh8g550.js";
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@uipath/agent-tool",
3
3
  "license": "MIT",
4
- "version": "1.202.0-preview.134",
4
+ "version": "1.202.0-preview.137",
5
5
  "description": "cli plugin for creating and managing UiPath low-code agents",
6
6
  "private": false,
7
7
  "repository": {
@@ -28,5 +28,5 @@
28
28
  "files": [
29
29
  "dist"
30
30
  ],
31
- "gitHead": "a335728adbdb02f28308e4f55d8936d0b150444b"
31
+ "gitHead": "bbb20a6d3501afc3435a92af9ae2e9f7ab2e34f6"
32
32
  }