@uipath/apms-tool 1.201.0-preview.115 → 1.201.0-preview.121

package/dist/index.js

@@ -3,7 +3,7 @@ import {
   Command,
   metadata,
   registerCommands
-} from "./tool-njy4p249.js";
+} from "./tool-jszchmp4.js";
 import"./tool-eb3gcj08.js";
 import"./tool-rr9mn0nz.js";
 import"./tool-yy8n2117.js";

package/dist/{tool-njy4p249.js → tool-jszchmp4.js}

@@ -2112,7 +2112,7 @@ var require_commander = __commonJS((exports) => {
 var package_default = {
   name: "@uipath/apms-tool",
   license: "MIT",
-  version: "1.201.0-preview.115",
+  version: "1.201.0-preview.121",
   description: "CLI plugin for the UiPath Access Policy Management Service.",
   private: false,
   repository: {
@@ -4786,6 +4786,9 @@ function normalizeTokenRefreshUnavailableFailure() {
 function errorMessage(error) {
   return error instanceof Error ? error.message : String(error);
 }
+// ../../auth/src/tenantSelection.ts
+var IDENTIFIER_STATUSES = new Set([400, 403, 404]);
+
 // ../../auth/src/selectTenant.ts
 var TENANT_SELECTION_REQUIRED_CODE = "TENANT_SELECTION_REQUIRED";
 var INVALID_TENANT_CODE = "INVALID_TENANT";
@@ -4893,17 +4896,18 @@ var TLS_ERROR_CODES = new Set([
 ]);
 var TLS_INSTRUCTIONS = "The server's TLS certificate could not be verified. Most often a " + "corporate proxy/firewall re-signs HTTPS with a root CA that Node does " + "not trust — set NODE_EXTRA_CA_CERTS to that CA's PEM file (and HTTPS_PROXY " + "if you connect through a proxy). If the certificate is instead expired or " + "its hostname does not match, fix the endpoint URL or the system clock. " + "Then retry.";
 var NETWORK_INSTRUCTIONS = "Could not reach the UiPath service. Check your network connection and " + "VPN, confirm any HTTP_PROXY/HTTPS_PROXY/NO_PROXY settings are correct, " + "then retry.";
+var LOCAL_PERMISSION_ERROR_CODES = new Set(["EACCES", "EPERM", "EROFS"]);
+var LOCAL_PERMISSION_MESSAGE_PATTERN = /\b(EACCES|EPERM|EROFS)\b/;
+function localPermissionInstructions(code, path) {
+  const target = path !== undefined ? `'${path}'` : "a local file or resource";
+  if (code === "EROFS") {
+    return `The filesystem containing ${target} is read-only (EROFS), so the ` + "CLI could not write to it. This is a local environment problem, " + "not a UiPath service error — retrying will not help. Use a " + "writable location, or give this environment write access to the " + "path.";
+  }
+  const remedy = process.platform === "win32" ? "Re-run from an elevated terminal, close any program holding " + "the file open, or grant your user access to the path." : "Grant this user (or the sandbox the command runs in) access " + "to the path, or run the command outside the sandbox.";
+  return `The operating system denied access to ${target} (${code}). This is ` + "a local permission problem, not a UiPath service error — retrying " + `without a permission change will not help. ${remedy}`;
+}
 function describeConnectivityError(error) {
-  const queue = [error];
-  const seen = new Set;
-  for (let steps = 0;queue.length > 0 && steps < 32; steps++) {
-    const current = queue.shift();
-    if (current === null || typeof current !== "object")
-      continue;
-    if (seen.has(current))
-      continue;
-    seen.add(current);
-    const cur = current;
+  for (const cur of walkErrorGraph(error)) {
     const code = typeof cur.code === "string" ? cur.code : undefined;
     const message = typeof cur.message === "string" ? cur.message : undefined;
     if (code && TLS_ERROR_CODES.has(code)) {
@@ -4922,6 +4926,49 @@ function describeConnectivityError(error) {
         instructions: NETWORK_INSTRUCTIONS
       };
     }
+  }
+  return;
+}
+function describePermissionError(error) {
+  for (const cur of walkErrorGraph(error)) {
+    const message = typeof cur.message === "string" ? cur.message : undefined;
+    const code = matchLocalPermissionCode(cur.code, message);
+    if (!code)
+      continue;
+    const path = localPermissionPath(cur.path, message);
+    return {
+      code,
+      message: message ?? code,
+      ...path !== undefined ? { path } : {},
+      instructions: localPermissionInstructions(code, path)
+    };
+  }
+  return;
+}
+function matchLocalPermissionCode(code, message) {
+  if (typeof code === "string" && LOCAL_PERMISSION_ERROR_CODES.has(code)) {
+    return code;
+  }
+  const match = message ? LOCAL_PERMISSION_MESSAGE_PATTERN.exec(message) : null;
+  return match ? match[1] : undefined;
+}
+function localPermissionPath(path, message) {
+  if (typeof path === "string")
+    return path;
+  return message ? /'([^']+)'/.exec(message)?.[1] : undefined;
+}
+function* walkErrorGraph(error) {
+  const queue = [error];
+  const seen = new Set;
+  for (let steps = 0;queue.length > 0 && steps < 32; steps++) {
+    const current = queue.shift();
+    if (current === null || typeof current !== "object")
+      continue;
+    if (seen.has(current))
+      continue;
+    seen.add(current);
+    const cur = current;
+    yield cur;
     if (cur.cause !== undefined)
       queue.push(cur.cause);
     if (Array.isArray(cur.errors))
@@ -4982,6 +5029,12 @@ function classifyError(status, error) {
   if (status !== undefined && status >= 500 && status < 600) {
     return { errorCode: "server_error", retry: "RetryLater" };
   }
+  if (status === undefined && describePermissionError(error)) {
+    return {
+      errorCode: "local_permission_denied",
+      retry: "RetryWillNotFix"
+    };
+  }
   const connectivity = describeConnectivityError(error);
   if (connectivity) {
     return {
@@ -5084,6 +5137,16 @@ async function extractErrorDetails(error, options) {
       message = `${message}: ${connectivity.message}`;
     }
   }
+  const permission = status === undefined ? describePermissionError(error) : undefined;
+  if (permission) {
+    if (permission.message !== message && !message.includes(permission.message)) {
+      message = `${message}: ${permission.message}`;
+    }
+    if (!message.includes(permission.instructions)) {
+      const punctuated = message.endsWith(".") ? message : `${message}.`;
+      message = `${punctuated} ${permission.instructions}`;
+    }
+  }
   let details = rawMessage;
   if (rawBody) {
     if (parsedBody) {
@@ -5123,6 +5186,9 @@ async function extractErrorDetails(error, options) {
   if (parsedBody?.traceId && typeof parsedBody.traceId === "string") {
     context.traceId = parsedBody.traceId;
   }
+  if (permission?.path !== undefined) {
+    context.path = permission.path;
+  }
   if (status === 429) {
     const resp = response;
     const headersObj = resp?.headers;
@@ -6320,6 +6386,7 @@ var CLI_ERROR_CODES = [
   "invalid_argument",
   "authentication_required",
   "permission_denied",
+  "local_permission_denied",
   "not_found",
   "rate_limited",
   "network_error",
@@ -6755,12 +6822,16 @@ function defaultErrorCodeForHttpStatus(status) {
     return "server_error";
   return;
 }
+var LOCAL_PERMISSION_TEXT_PATTERN = /(?:\b|\()(?:EACCES|EPERM|EROFS)(?::\s|\))/;
 function defaultErrorCodeForFailure(data) {
   if (data.Result === RESULTS.Failure) {
     const status = data.Context?.httpStatus ?? parseHttpStatusFromMessage2(data.Message);
     const errorCode2 = defaultErrorCodeForHttpStatus(status);
     if (errorCode2)
       return errorCode2;
+    if (status === undefined && (LOCAL_PERMISSION_TEXT_PATTERN.test(data.Message) || LOCAL_PERMISSION_TEXT_PATTERN.test(data.Instructions))) {
+      return "local_permission_denied";
+    }
   }
   return defaultErrorCodeForResult(data.Result);
 }
@@ -7247,11 +7318,10 @@ var ScreenLogger;
   }
   ScreenLogger.progress = progress;
 })(ScreenLogger ||= {});
-// ../../common/src/tool-provider.ts
-var factorySlot = singleton("PackagerFactoryProvider");
-var moduleSlot = singleton("ToolModuleProvider");
 // ../../common/src/telemetry/ship-succeeded.ts
 var shippedKeysSlot = singleton("ShipSucceededDedupeKeys");
+// ../../common/src/tool-provider.ts
+var factorySlot = singleton("PackagerFactoryProvider");
 // src/commands/_shared.ts
 var LOGIN_INSTRUCTIONS = "Ensure you are logged in with 'uip login' and have access to the Access Policy Management service.";
 var NON_NEGATIVE_INTEGER_RE = /^\d+$/;
@@ -8393,4 +8463,4 @@ var registerCommands = async (program2) => {
 
 export { Command, metadata, registerCommands };
 
-//# debugId=37AB1C471CED417C64756E2164756E21
+//# debugId=E9552189F0AB5CDF64756E2164756E21

package/dist/tool.js

@@ -1,7 +1,7 @@
 import {
   metadata,
   registerCommands
-} from "./tool-njy4p249.js";
+} from "./tool-jszchmp4.js";
 import"./tool-eb3gcj08.js";
 import"./tool-rr9mn0nz.js";
 import"./tool-yy8n2117.js";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@uipath/apms-tool",
   "license": "MIT",
-  "version": "1.201.0-preview.115",
+  "version": "1.201.0-preview.121",
   "description": "CLI plugin for the UiPath Access Policy Management Service.",
   "private": false,
   "repository": {
@@ -26,5 +26,5 @@
   "files": [
     "dist"
   ],
-  "gitHead": "f1086b73654d7728cb71f280588b3e0c77d535fc"
+  "gitHead": "c70ccfc0b12e637441d67df1d212b71d7784b5f8"
 }