@uipath/agent-tool 1.202.0-preview.138 → 1.202.0-preview.140

package/dist/executor-tool.js

@@ -1,7 +1,7 @@
 import {
   AgentDebugCancelledError,
   AgentDebugService
-} from "./packager-tool-093sw7vs.js";
+} from "./packager-tool-08m4qeqw.js";
 import"./packager-tool-d1dzjvm7.js";
 import"./packager-tool-b098y4a2.js";
 import"./packager-tool-1yh8g550.js";

package/dist/{index-ttrh2gr5.js → index-jwjhhxdx.js}

@@ -16425,6 +16425,59 @@ class FileSystemFileStorageProviderFactory {
   }
 }
 
+// ../solution-sdk/src/resources/providers/resource-builder-logger.ts
+var PLACEHOLDER = /\{(\w+)\}|%[sdifoOj]/g;
+function render(value) {
+  if (typeof value === "string")
+    return value;
+  if (value === null || value === undefined)
+    return String(value);
+  if (typeof value !== "object")
+    return String(value);
+  try {
+    return JSON.stringify(value) ?? String(value);
+  } catch {
+    return String(value);
+  }
+}
+function interpolate(message, args) {
+  const fields = args[0] !== null && typeof args[0] === "object" && !Array.isArray(args[0]) ? args[0] : undefined;
+  const consumed = new Set;
+  let positional = 0;
+  const filled = message.replace(PLACEHOLDER, (match, name) => {
+    if (name !== undefined) {
+      if (fields && name in fields) {
+        consumed.add(0);
+        return render(fields[name]);
+      }
+      return match;
+    }
+    const index = positional;
+    positional += 1;
+    if (index >= args.length)
+      return match;
+    consumed.add(index);
+    return render(args[index]);
+  });
+  const extra = args.filter((_, index) => !consumed.has(index)).map(render).filter((text) => text.length > 0);
+  return extra.length > 0 ? `${filled} ${extra.join(" ")}` : filled;
+}
+
+class CliResourceBuilderLoggerFactory {
+  create(target) {
+    const name = typeof target === "string" ? target : target.name;
+    const line = (message, args) => `[${name}] ${interpolate(message, args)}`;
+    return {
+      trace: (message, ...args) => logger.debug(line(message, args)),
+      debug: (message, ...args) => logger.debug(line(message, args)),
+      info: (message, ...args) => logger.info(line(message, args)),
+      warn: (message, ...args) => logger.warn(line(message, args)),
+      error: (message, error, ...args) => logger.error(error ? `${line(message, args)}: ${error.message}` : line(message, args)),
+      fatal: (message, ...args) => logger.error(line(message, args))
+    };
+  }
+}
+
 // ../solution-sdk/src/resources/providers/solution-access-provider.ts
 var ORG_SCOPED_SERVICES = new Set(["apps", "authz"]);
 
@@ -16493,7 +16546,7 @@ class SolutionAccessProvider {
 
 // ../solution-sdk/src/resources/providers/resource-builder-init.ts
 async function createResourceBuilderServices() {
-  return await createResourceBuilderConfiguration().addAccessProvider(new SolutionAccessProvider).addFileStorageProviderFactory(new FileSystemFileStorageProviderFactory).addArtifactResourceSpecEnhancer(new EntryPointSpecEnhancer).build();
+  return await createResourceBuilderConfiguration().addAccessProvider(new SolutionAccessProvider).addFileStorageProviderFactory(new FileSystemFileStorageProviderFactory).addArtifactResourceSpecEnhancer(new EntryPointSpecEnhancer).addLoggerFactory(new CliResourceBuilderLoggerFactory).build();
 }
 
 // ../solution-sdk/src/resources/commands/project-utils.ts
@@ -17459,4 +17512,4 @@ export {
   writeSolutionFile
 };
 
-//# debugId=D95D95BCB702789864756E2164756E21
+//# debugId=E38E3CC0ECFF4F5B64756E2164756E21

package/dist/index.js

@@ -2,10 +2,10 @@
 import {
   metadata,
   registerCommands
-} from "./packager-tool-zr68gy0n.js";
+} from "./packager-tool-vryzbaey.js";
 import"./packager-tool-a42jnpy5.js";
 import"./packager-tool-c23zrhj8.js";
-import"./packager-tool-093sw7vs.js";
+import"./packager-tool-08m4qeqw.js";
 import {
   Command
 } from "./packager-tool-d1dzjvm7.js";

package/dist/{packager-tool-093sw7vs.js → packager-tool-08m4qeqw.js}

@@ -2971,7 +2971,7 @@ function querystringSingleKey2(key, value, keyPrefix = "") {
 var package_default = {
   name: "@uipath/solution-sdk",
   license: "MIT",
-  version: "1.202.0-preview.138",
+  version: "1.202.0-preview.140",
   repository: {
     type: "git",
     url: "https://github.com/UiPath/cli.git",
@@ -3046,6 +3046,7 @@ class SolutionUploadHttpError extends Error {
   solutionId;
   parsedErrorCode;
   parsedErrorMessage;
+  authChallenge;
   constructor(details) {
     super(details.message);
     this.name = "SolutionUploadHttpError";
@@ -3058,6 +3059,7 @@ class SolutionUploadHttpError extends Error {
     if (details.operation === "overwrite") {
       this.solutionId = details.solutionId;
     }
+    this.authChallenge = details.authChallenge;
     const parsed = parseUploadErrorBody(details.body);
     this.parsedErrorCode = parsed.code;
     this.parsedErrorMessage = parsed.message;
@@ -3081,16 +3083,71 @@ function requestPath(url) {
   const [, parsed] = catchError(() => new URL(url));
   return parsed ? `${parsed.pathname}${parsed.search}` : url;
 }
+var TOKEN_SHAPED = /\beyJ[A-Za-z0-9_-]{6,}\.[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]*)?|\bBearer\s+[A-Za-z0-9._~+/=-]{8,}/gi;
+function redactTokens(text) {
+  return text.replace(TOKEN_SHAPED, "[REDACTED]");
+}
+var MAX_CHALLENGE_DESCRIPTION = 200;
+function parseAuthChallenge(header) {
+  if (!header)
+    return {};
+  const code = /\berror="([^"]*)"/.exec(header)?.[1]?.trim();
+  const raw = /\berror_description="([^"]*)"/.exec(header)?.[1]?.trim();
+  const description = raw ? redactTokens(raw).slice(0, MAX_CHALLENGE_DESCRIPTION) : undefined;
+  return {
+    error: code || undefined,
+    description: description || undefined
+  };
+}
+function summarizeAuthRefusalBody(body) {
+  return summarizePlatformBody(redactTokens(body));
+}
+function isAuthRefusal(status) {
+  return status === 401 || status === 403;
+}
+function buildAuthRefusalInstructions({
+  err,
+  subject,
+  target,
+  bodySuffix,
+  identityType,
+  clientId
+}) {
+  const refusal = err.status === 401 ? "rejected the call as unauthorized (401)" : "forbade the call (403)";
+  const what = err.operation === "overwrite" ? `replacing the contents of solution ${target}` : "importing the solution package";
+  const actor = identityType === "Application" ? `This session acts as external application ${clientId ?? "(client id unknown)"}, so ` + `check what that application is allowed to do: it needs the Studio ` + `Web scopes that cover writing a solution (the StudioWebS2S grants ` + `on the external application), not just the Orchestrator or ` + `Solutions ones. ` : identityType === "User" ? `This session acts as a user, so check that your account has ` + `Studio Web access in this tenant. ` : `Check what this session is allowed to do in Studio Web — an ` + `external application needs the StudioWebS2S grants that cover ` + `writing a solution, a user needs Studio Web access in the tenant. `;
+  const tenant = err.operation === "overwrite" ? `Also confirm that ${target} is the solution this project should ` + `publish to, and that it lives in the organization and tenant ` + `this session logged into — the id comes from the SolutionId ` + `recorded in the enclosing solution file. An id this session ` + `cannot see at all is reported separately, as nothing to ` + `overwrite, so a refusal here points at the grants first. ` : `Also confirm you are logged into the organization and tenant the ` + `solution should land in. `;
+  const challenge = parseAuthChallenge(err.authChallenge);
+  const quoted = challenge.description ? ` ("${challenge.description}")` : "";
+  if (challenge.error === "invalid_token") {
+    return `Studio Web ${refusal} while ${what}, and rejected the credential ` + `itself with the reason \`invalid_token\`${quoted}. That is the ` + `platform refusing this token rather than the permissions behind ` + `it, so unlike a grants refusal this one is worth a fresh ` + `\`uip login\` — or, in a pipeline, a newly minted ` + `client-credentials token. Check too that the token was issued for ` + `the organization being called: one minted against a different ` + `environment or audience is refused this way. Nothing was uploaded ` + `and nothing ran, so the ${subject} is not the cause.${bodySuffix}`;
+  }
+  const authenticated = `The session is authenticated — the token was issued and had not ` + `expired when the call went out — so re-running \`uip login\` mints ` + `the same token and fails the same way. `;
+  const diagnosis = challenge.error === "insufficient_scope" ? `Studio Web reported \`insufficient_scope\`${quoted}, so the ` + `token is valid and simply not allowed to do this: logging in ` + `again will not change it. ` : challenge.error ? `${authenticated}Studio Web gave the reason ` + `\`${challenge.error}\`${quoted}. ` : authenticated;
+  const closing = bodySuffix ? `If the grants and the tenant are already right, report the platform ` + `response, including its traceId.${bodySuffix}` : challenge.error ? `If the grants and the tenant are already right, report that reason ` + `together with the request path and status above.` : `If the grants and the tenant are already right, report the request ` + `path and status above — Studio Web returned no response body and ` + `no authentication challenge, so there is nothing further to quote.`;
+  return `Studio Web ${refusal} while ${what}. ${diagnosis}${actor}${tenant}` + `Nothing was uploaded and nothing ran, so the ${subject} is not the ` + `cause. ${closing}`;
+}
 function buildSolutionUploadFailureOutput(err, options = {}) {
   const stage = err.operation === "overwrite" ? "overwrite-solution" : "import-solution";
-  const detail = err.parsedErrorMessage ? ` — ${err.parsedErrorMessage}` : "";
+  const authRefusal = isAuthRefusal(err.status);
+  const parsedMessage = authRefusal && err.parsedErrorMessage ? redactTokens(err.parsedErrorMessage) : err.parsedErrorMessage;
+  const detail = parsedMessage ? ` — ${parsedMessage}` : "";
   const Message = `Failed during ${stage}: HTTP ${err.status} on ${err.method} ` + `${err.endpoint}${detail}`;
-  const body = err.parsedErrorMessage ? "" : summarizePlatformBody(err.body);
+  const quote = authRefusal ? summarizeAuthRefusalBody : summarizePlatformBody;
+  const body = err.parsedErrorMessage ? "" : quote(err.body);
   const bodySuffix = body ? ` Platform response: "${body}".` : "";
   const importHint = options.importCheckHint ? ` ${options.importCheckHint}` : "";
   const subject = options.subject ?? "project";
   const target = err.solutionId ?? `the solution at ${err.endpoint}`;
-  const Instructions = err.operation === "overwrite" ? `Studio Web refused to replace the contents of solution ` + `${target}. Nothing was uploaded and nothing ran, so the ` + `${subject} is not the cause: do not re-author it, and do not ` + `copy the project into another solution. Confirm that ${target} ` + `is a solution you can still write to, and that it is the one ` + `this project should publish to — it comes from the SolutionId ` + `recorded in the enclosing solution file. If it is right, report ` + `the platform response.${bodySuffix}` : `Studio Web refused to import the solution package. Nothing was ` + `uploaded and nothing ran, so no part of the ${subject} executed ` + `— but the package itself may be what was rejected.${importHint} ` + `Report the platform response if the ${subject} is ` + `well-formed.${bodySuffix}`;
+  const authInstructions = isAuthRefusal(err.status) ? buildAuthRefusalInstructions({
+    err,
+    subject,
+    target,
+    bodySuffix,
+    identityType: options.identityType,
+    clientId: options.clientId
+  }) : undefined;
+  const Instructions = authInstructions ?? (err.operation === "overwrite" ? `Studio Web refused to replace the contents of solution ` + `${target}. Nothing was uploaded and nothing ran, so the ` + `${subject} is not the cause: do not re-author it, and do not ` + `copy the project into another solution. Confirm that ${target} ` + `is a solution you can still write to, and that it is the one ` + `this project should publish to — it comes from the SolutionId ` + `recorded in the enclosing solution file. If it is right, report ` + `the platform response.${bodySuffix}` : `Studio Web refused to import the solution package. Nothing was ` + `uploaded and nothing ran, so no part of the ${subject} executed ` + `— but the package itself may be what was rejected.${importHint} ` + `Report the platform response if the ${subject} is ` + `well-formed.${bodySuffix}`);
   const Context = {
     httpStatus: err.status,
     stage,
@@ -3106,6 +3163,9 @@ function buildSolutionUploadFailureOutput(err, options = {}) {
     Instructions,
     Context
   };
+  if (err.status === 401 && options.identityType === "Application") {
+    output.ErrorCode = "permission_denied";
+  }
   if (err.operation === "overwrite" && err.status >= 500 && err.status < 600) {
     output.Retry = "RetryAfter30Seconds";
   }
@@ -3166,6 +3226,7 @@ async function importSolution(config, organizationName, fileBuffer, fileName) {
       endpoint: requestPath(importUrl),
       url: importUrl,
       body: text,
+      authChallenge: response.headers?.get("www-authenticate") ?? undefined,
       message: `Import failed (${response.status}): ${text}`
     });
   }
@@ -3197,6 +3258,7 @@ async function overwriteSolution(config, organizationName, fileBuffer, fileName,
       endpoint: requestPath(overwriteUrl),
       url: overwriteUrl,
       body: text,
+      authChallenge: response.headers?.get("www-authenticate") ?? undefined,
       message: `Overwrite failed (${response.status}): ${text}`,
       solutionId
     });
@@ -4176,4 +4238,4 @@ function parseOutput(outputArguments) {
 
 export { StudioWebIncompatibleProjectError, isSolutionUploadHttpError, buildSolutionUploadFailureOutput, migrateLegacyToolGuardrailPolicies, AgentProjectService, resolveStudioWebConfig, AgentLocalWorkspaceEvalPreparer, AgentDebugCancelledError, AgentDebugService };
 
-//# debugId=218744BFB32146DD64756E2164756E21
+//# debugId=521D939E8859D73C64756E2164756E21

package/dist/{packager-tool-zr68gy0n.js → packager-tool-vryzbaey.js}

@@ -13,7 +13,7 @@ import {
   isSolutionUploadHttpError,
   migrateLegacyToolGuardrailPolicies,
   resolveStudioWebConfig
-} from "./packager-tool-093sw7vs.js";
+} from "./packager-tool-08m4qeqw.js";
 import {
   OutputFormatter,
   RESULTS,
@@ -6989,7 +6989,7 @@ var require_index_cjs = __commonJS(function(exports, module) {
 var package_default = {
   name: "@uipath/agent-tool",
   license: "MIT",
-  version: "1.202.0-preview.138",
+  version: "1.202.0-preview.140",
   description: "cli plugin for creating and managing UiPath low-code agents",
   private: false,
   repository: {
@@ -7432,7 +7432,7 @@ class VoidApiResponse {
 var package_default2 = {
   name: "@uipath/agent-sdk",
   license: "MIT",
-  version: "1.202.0-preview.138",
+  version: "1.202.0-preview.140",
   description: "SDK for the UiPath Agent Runtime API — evaluation execution and debug sessions.",
   repository: {
     type: "git",
@@ -12793,7 +12793,7 @@ var registerGuardrailCommands = (program) => {
 
 // src/services/project-artifacts.ts
 async function ensureProjectArtifacts(args) {
-  const { addProjectArtifactsToSolutionAsync } = await import("./index-ttrh2gr5.js");
+  const { addProjectArtifactsToSolutionAsync } = await import("./index-jwjhhxdx.js");
   return addProjectArtifactsToSolutionAsync(args);
 }
 
@@ -35285,7 +35285,7 @@ class TextApiResponse {
 var package_default3 = {
   name: "@uipath/integrationservice-sdk",
   license: "MIT",
-  version: "1.202.0-preview.138",
+  version: "1.202.0-preview.140",
   repository: {
     type: "git",
     url: "https://github.com/UiPath/cli.git",
@@ -45222,4 +45222,4 @@ var registerCommands = async (program) => {
 
 export { metadata, registerCommands };
 
-//# debugId=669594ECC629ACED64756E2164756E21
+//# debugId=EDB9AFAC2867FC5164756E2164756E21

package/dist/tool.js

@@ -1,10 +1,10 @@
 import {
   metadata,
   registerCommands
-} from "./packager-tool-zr68gy0n.js";
+} from "./packager-tool-vryzbaey.js";
 import"./packager-tool-a42jnpy5.js";
 import"./packager-tool-c23zrhj8.js";
-import"./packager-tool-093sw7vs.js";
+import"./packager-tool-08m4qeqw.js";
 import"./packager-tool-d1dzjvm7.js";
 import"./packager-tool-0srzfhdr.js";
 import"./packager-tool-b098y4a2.js";

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@uipath/agent-tool",
     "license": "MIT",
-    "version": "1.202.0-preview.138",
+    "version": "1.202.0-preview.140",
     "description": "cli plugin for creating and managing UiPath low-code agents",
     "private": false,
     "repository": {
@@ -28,5 +28,5 @@
     "files": [
         "dist"
     ],
-    "gitHead": "46372d5c4c4ae9352e9457a99e9d5efc1890cb48"
+    "gitHead": "1861498d8a158a710a718c04614523ba59c93781"
 }