@uipath/auth 1.0.2 → 1.1.0

package/dist/index.browser.js

@@ -7,7 +7,7 @@ var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require
 });
 
 // src/loginStatus.ts
-import { getFileSystem as getFileSystem2 } from "@uipath/filesystem";
+import { getFileSystem as getFileSystem3 } from "@uipath/filesystem";
 
 // src/catch-error.ts
 function isPromiseLike(value) {
@@ -91,7 +91,9 @@ var DEFAULT_SCOPES = [
   "AutomationSolutions",
   "StudioWebTypeCacheService",
   "Docs.GPT.Search",
-  "Insights"
+  "Insights",
+  "ReferenceToken",
+  "Audit.Read"
 ];
 var normalizeAndValidateBaseUrl = (rawUrl) => {
   let baseUrl = rawUrl;
@@ -234,6 +236,7 @@ var getTokenExpiration = (accessToken) => {
 
 // src/envAuth.ts
 var ENV_AUTH_ENABLE_VAR = "UIPATH_CLI_ENABLE_ENV_AUTH";
+var ENFORCE_ROBOT_AUTH_VAR = "UIPATH_CLI_ENFORCE_ROBOT_AUTH";
 var ENV_AUTH_VARS = {
   token: "UIPATH_CLI_AUTH_TOKEN",
   organizationName: "UIPATH_CLI_ORGANIZATION_NAME",
@@ -249,6 +252,7 @@ class EnvAuthConfigError extends Error {
   }
 }
 var isEnvAuthEnabled = () => process.env[ENV_AUTH_ENABLE_VAR] === "true";
+var isRobotAuthEnforced = () => process.env[ENFORCE_ROBOT_AUTH_VAR] === "true";
 var requireEnv = (name) => {
   const value = process.env[name];
   if (!value) {
@@ -292,6 +296,7 @@ var readAuthFromEnv = () => {
 };
 
 // src/robotClientFallback.ts
+import { getFileSystem } from "@uipath/filesystem";
 var DEFAULT_TIMEOUT_MS = 1000;
 var CLOSE_TIMEOUT_MS = 500;
 var NOTICE_SENTINEL = Symbol.for("@uipath/auth/robotFallbackNoticePrinted");
@@ -303,6 +308,35 @@ var printNoticeOnce = () => {
   catchError(() => process.stderr.write(`Using UiPath Robot credentials. Run 'uip login' for a dedicated session.
 `));
 };
+var ROBOT_USER_SERVICES_PIPE = "UiPathUserServices";
+var ROBOT_USER_SERVICES_ALTERNATE_PIPE = `${ROBOT_USER_SERVICES_PIPE}Alternate`;
+var PIPE_NAME_MAX_LENGTH = 103;
+var getRobotIpcPipeNames = async () => {
+  const fs = getFileSystem();
+  const username = fs.env.getenv("USER") ?? fs.env.getenv("USERNAME");
+  if (!username) {
+    throw new Error("Unable to determine current username");
+  }
+  const tempPath = fs.env.getenv("TMPDIR") ?? "/tmp/";
+  return [ROBOT_USER_SERVICES_PIPE, ROBOT_USER_SERVICES_ALTERNATE_PIPE].map((baseName) => fs.path.join(tempPath, `${baseName}_${username}`).substring(0, PIPE_NAME_MAX_LENGTH));
+};
+var defaultIsRobotIpcAvailable = async () => {
+  if (process.platform === "win32") {
+    return true;
+  }
+  const [pipeNamesError, pipeNames] = await catchError(getRobotIpcPipeNames());
+  if (pipeNamesError || !pipeNames) {
+    return false;
+  }
+  const fs = getFileSystem();
+  for (const pipeName of pipeNames) {
+    const [existsError, exists] = await catchError(fs.exists(pipeName));
+    if (!existsError && exists === true) {
+      return true;
+    }
+  }
+  return false;
+};
 var withTimeout = (promise, timeoutMs) => new Promise((resolve, reject) => {
   const timer = setTimeout(() => reject(new Error(`Robot IPC call timed out after ${timeoutMs}ms`)), timeoutMs);
   promise.then((value) => {
@@ -334,14 +368,20 @@ var defaultLoadModule = async () => {
 var tryRobotClientFallback = async (options = {}) => {
   if (isBrowser())
     return;
-  if (process.env.CI || process.env.GITHUB_ACTIONS) {
-    return;
-  }
-  if (process.env.UIPATH_URL) {
-    return;
+  if (!options.force) {
+    if (process.env.CI || process.env.GITHUB_ACTIONS) {
+      return;
+    }
+    if (process.env.UIPATH_URL) {
+      return;
+    }
   }
   const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const isRobotIpcAvailable = options.isRobotIpcAvailable ?? defaultIsRobotIpcAvailable;
   const loadModule = options.loadModule ?? defaultLoadModule;
+  if (!await isRobotIpcAvailable()) {
+    return;
+  }
   const mod = await loadModule();
   if (!mod)
     return;
@@ -441,7 +481,7 @@ var refreshAccessToken = async ({
 };
 
 // src/utils/envFile.ts
-import { getFileSystem } from "@uipath/filesystem";
+import { getFileSystem as getFileSystem2 } from "@uipath/filesystem";
 var DEFAULT_AUTH_FILENAME = AUTH_FILENAME;
 var DEFAULT_ENV_FILENAME = `${UIPATH_HOME_DIR}/${AUTH_FILENAME}`;
 var KNOWN_ERROR_CODES = new Set([
@@ -488,7 +528,7 @@ var probeAsync = async (fs, candidate) => {
   }
 };
 var resolveEnvFileLocationAsync = async (envFilePath = DEFAULT_ENV_FILENAME) => {
-  const fs = getFileSystem();
+  const fs = getFileSystem2();
   if (fs.path.isAbsolute(envFilePath)) {
     const probe2 = await probeAsync(fs, envFilePath);
     return probe2.exists ? { exists: true, absolutePath: envFilePath, source: "absolute" } : {
@@ -539,7 +579,7 @@ var resolveEnvFilePathAsync = async (envFilePath = DEFAULT_ENV_FILENAME) => {
   };
 };
 var loadEnvFileAsync = async ({ envPath }) => {
-  const fs = getFileSystem();
+  const fs = getFileSystem2();
   const absolutePath = fs.path.isAbsolute(envPath) ? envPath : fs.path.join(fs.env.cwd(), envPath);
   if (!await fs.exists(absolutePath)) {
     throw new Error(`Environment file not found: ${envPath}`);
@@ -573,7 +613,7 @@ var saveEnvFileAsync = async ({
   data,
   merge = true
 }) => {
-  const fs = getFileSystem();
+  const fs = getFileSystem2();
   const absolutePath = fs.path.isAbsolute(envPath) ? envPath : fs.path.join(fs.env.homedir(), envPath);
   let existingData = {};
   if (merge && await fs.exists(absolutePath)) {
@@ -614,19 +654,43 @@ function normalizeTokenRefreshUnavailableFailure() {
   return "token refresh failed before authentication completed";
 }
 var getLoginStatusWithDeps = async (options = {}, deps = {}) => {
-  if (isEnvAuthEnabled()) {
-    return readAuthFromEnv();
-  }
-  const { envFilePath = DEFAULT_ENV_FILENAME, ensureTokenValidityMinutes } = options;
   const {
     resolveEnvFilePath = resolveEnvFilePathAsync,
     loadEnvFile = loadEnvFileAsync,
     saveEnvFile = saveEnvFileAsync,
-    getFs = getFileSystem2,
+    getFs = getFileSystem3,
     refreshToken: refreshTokenFn = refreshAccessToken,
     resolveConfig = resolveConfigAsync,
     robotFallback = tryRobotClientFallback
   } = deps;
+  if (isRobotAuthEnforced()) {
+    if (isEnvAuthEnabled()) {
+      throw new EnvAuthConfigError(`${ENV_AUTH_ENABLE_VAR}=true and ${ENFORCE_ROBOT_AUTH_VAR}=true ` + `are mutually exclusive. Unset one of them and re-run.`);
+    }
+    const robotCreds = await robotFallback({ force: true });
+    if (!robotCreds) {
+      return {
+        loginStatus: "Not logged in",
+        hint: `${ENFORCE_ROBOT_AUTH_VAR}=true but the UiPath Robot ` + `session is unavailable. Start and sign in to the Assistant, ` + `or unset ${ENFORCE_ROBOT_AUTH_VAR} to fall back to file or ` + `env-var authentication.`
+      };
+    }
+    const expiration2 = getTokenExpiration(robotCreds.accessToken);
+    return {
+      loginStatus: "Logged in",
+      accessToken: robotCreds.accessToken,
+      baseUrl: robotCreds.baseUrl,
+      organizationName: robotCreds.organizationName,
+      organizationId: robotCreds.organizationId,
+      tenantName: robotCreds.tenantName,
+      tenantId: robotCreds.tenantId,
+      expiration: expiration2,
+      source: "robot" /* Robot */
+    };
+  }
+  if (isEnvAuthEnabled()) {
+    return readAuthFromEnv();
+  }
+  const { envFilePath = DEFAULT_ENV_FILENAME, ensureTokenValidityMinutes } = options;
   const { absolutePath } = await resolveEnvFilePath(envFilePath);
   if (absolutePath === undefined) {
     const robotCreds = await robotFallback();
@@ -793,7 +857,7 @@ var getAuthContext = async (options = {}) => {
     throw new Error("Tenant ID not available. Ensure UIPATH_TENANT_ID is set.");
   }
   if (options.requireTenantName && tenantName === undefined) {
-    throw new Error("Tenant not provided and UIPATH_TENANT_NAME not set. Please provide a tenant argument or set UIPATH_TENANT_NAME.");
+    throw new Error("Tenant not provided and UIPATH_TENANT_NAME not set. Run 'uip login' to select a tenant, or use 'uip login tenant set <tenant>' to switch tenants.");
   }
   return {
     baseUrl: status.baseUrl,
@@ -860,11 +924,11 @@ Troubleshooting:` + `
   };
 };
 // src/logout.ts
-import { getFileSystem as getFileSystem3 } from "@uipath/filesystem";
+import { getFileSystem as getFileSystem4 } from "@uipath/filesystem";
 async function logoutWithDeps(options, deps = {}) {
   const {
     resolveEnvFilePath = resolveEnvFilePathAsync,
-    getFileSystem: getFs = getFileSystem3
+    getFileSystem: getFs = getFileSystem4
   } = deps;
   const fs = getFs();
   const { absolutePath } = await resolveEnvFilePath(options.file);

package/dist/index.js

@@ -861,9 +861,7 @@ var init_node = __esm(() => {
   init_open();
 });
 // ../filesystem/src/index.ts
-var fsInstance, getFileSystem = () => {
-  return fsInstance;
-};
+var fsInstance, getFileSystem = () => fsInstance;
 var init_src = __esm(() => {
   init_node();
   init_node();
@@ -19479,7 +19477,9 @@ var DEFAULT_SCOPES = [
   "AutomationSolutions",
   "StudioWebTypeCacheService",
   "Docs.GPT.Search",
-  "Insights"
+  "Insights",
+  "ReferenceToken",
+  "Audit.Read"
 ];
 var normalizeAndValidateBaseUrl = (rawUrl) => {
   let baseUrl = rawUrl;
@@ -20250,6 +20250,7 @@ var getTokenExpiration = (accessToken) => {
 
 // src/envAuth.ts
 var ENV_AUTH_ENABLE_VAR = "UIPATH_CLI_ENABLE_ENV_AUTH";
+var ENFORCE_ROBOT_AUTH_VAR = "UIPATH_CLI_ENFORCE_ROBOT_AUTH";
 var ENV_AUTH_VARS = {
   token: "UIPATH_CLI_AUTH_TOKEN",
   organizationName: "UIPATH_CLI_ORGANIZATION_NAME",
@@ -20265,6 +20266,7 @@ class EnvAuthConfigError extends Error {
   }
 }
 var isEnvAuthEnabled = () => process.env[ENV_AUTH_ENABLE_VAR] === "true";
+var isRobotAuthEnforced = () => process.env[ENFORCE_ROBOT_AUTH_VAR] === "true";
 var requireEnv = (name) => {
   const value = process.env[name];
   if (!value) {
@@ -20306,7 +20308,9 @@ var readAuthFromEnv = () => {
     expiration
   };
 };
+
 // src/robotClientFallback.ts
+init_src();
 var DEFAULT_TIMEOUT_MS = 1000;
 var CLOSE_TIMEOUT_MS = 500;
 var NOTICE_SENTINEL = Symbol.for("@uipath/auth/robotFallbackNoticePrinted");
@@ -20318,6 +20322,35 @@ var printNoticeOnce = () => {
   catchError(() => process.stderr.write(`Using UiPath Robot credentials. Run 'uip login' for a dedicated session.
 `));
 };
+var ROBOT_USER_SERVICES_PIPE = "UiPathUserServices";
+var ROBOT_USER_SERVICES_ALTERNATE_PIPE = `${ROBOT_USER_SERVICES_PIPE}Alternate`;
+var PIPE_NAME_MAX_LENGTH = 103;
+var getRobotIpcPipeNames = async () => {
+  const fs7 = getFileSystem();
+  const username = fs7.env.getenv("USER") ?? fs7.env.getenv("USERNAME");
+  if (!username) {
+    throw new Error("Unable to determine current username");
+  }
+  const tempPath = fs7.env.getenv("TMPDIR") ?? "/tmp/";
+  return [ROBOT_USER_SERVICES_PIPE, ROBOT_USER_SERVICES_ALTERNATE_PIPE].map((baseName) => fs7.path.join(tempPath, `${baseName}_${username}`).substring(0, PIPE_NAME_MAX_LENGTH));
+};
+var defaultIsRobotIpcAvailable = async () => {
+  if (process.platform === "win32") {
+    return true;
+  }
+  const [pipeNamesError, pipeNames] = await catchError(getRobotIpcPipeNames());
+  if (pipeNamesError || !pipeNames) {
+    return false;
+  }
+  const fs7 = getFileSystem();
+  for (const pipeName of pipeNames) {
+    const [existsError, exists] = await catchError(fs7.exists(pipeName));
+    if (!existsError && exists === true) {
+      return true;
+    }
+  }
+  return false;
+};
 var withTimeout = (promise, timeoutMs) => new Promise((resolve2, reject) => {
   const timer = setTimeout(() => reject(new Error(`Robot IPC call timed out after ${timeoutMs}ms`)), timeoutMs);
   promise.then((value) => {
@@ -20349,14 +20382,20 @@ var defaultLoadModule = async () => {
 var tryRobotClientFallback = async (options = {}) => {
   if (isBrowser())
     return;
-  if (process.env.CI || process.env.GITHUB_ACTIONS) {
-    return;
-  }
-  if (process.env.UIPATH_URL) {
-    return;
+  if (!options.force) {
+    if (process.env.CI || process.env.GITHUB_ACTIONS) {
+      return;
+    }
+    if (process.env.UIPATH_URL) {
+      return;
+    }
   }
   const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const isRobotIpcAvailable = options.isRobotIpcAvailable ?? defaultIsRobotIpcAvailable;
   const loadModule = options.loadModule ?? defaultLoadModule;
+  if (!await isRobotIpcAvailable()) {
+    return;
+  }
   const mod = await loadModule();
   if (!mod)
     return;
@@ -20630,10 +20669,6 @@ function normalizeTokenRefreshUnavailableFailure() {
   return "token refresh failed before authentication completed";
 }
 var getLoginStatusWithDeps = async (options = {}, deps = {}) => {
-  if (isEnvAuthEnabled()) {
-    return readAuthFromEnv();
-  }
-  const { envFilePath = DEFAULT_ENV_FILENAME, ensureTokenValidityMinutes } = options;
   const {
     resolveEnvFilePath = resolveEnvFilePathAsync,
     loadEnvFile = loadEnvFileAsync,
@@ -20643,6 +20678,34 @@ var getLoginStatusWithDeps = async (options = {}, deps = {}) => {
     resolveConfig = resolveConfigAsync,
     robotFallback = tryRobotClientFallback
   } = deps;
+  if (isRobotAuthEnforced()) {
+    if (isEnvAuthEnabled()) {
+      throw new EnvAuthConfigError(`${ENV_AUTH_ENABLE_VAR}=true and ${ENFORCE_ROBOT_AUTH_VAR}=true ` + `are mutually exclusive. Unset one of them and re-run.`);
+    }
+    const robotCreds = await robotFallback({ force: true });
+    if (!robotCreds) {
+      return {
+        loginStatus: "Not logged in",
+        hint: `${ENFORCE_ROBOT_AUTH_VAR}=true but the UiPath Robot ` + `session is unavailable. Start and sign in to the Assistant, ` + `or unset ${ENFORCE_ROBOT_AUTH_VAR} to fall back to file or ` + `env-var authentication.`
+      };
+    }
+    const expiration2 = getTokenExpiration(robotCreds.accessToken);
+    return {
+      loginStatus: "Logged in",
+      accessToken: robotCreds.accessToken,
+      baseUrl: robotCreds.baseUrl,
+      organizationName: robotCreds.organizationName,
+      organizationId: robotCreds.organizationId,
+      tenantName: robotCreds.tenantName,
+      tenantId: robotCreds.tenantId,
+      expiration: expiration2,
+      source: "robot" /* Robot */
+    };
+  }
+  if (isEnvAuthEnabled()) {
+    return readAuthFromEnv();
+  }
+  const { envFilePath = DEFAULT_ENV_FILENAME, ensureTokenValidityMinutes } = options;
   const { absolutePath } = await resolveEnvFilePath(envFilePath);
   if (absolutePath === undefined) {
     const robotCreds = await robotFallback();
@@ -20809,7 +20872,7 @@ var getAuthContext = async (options = {}) => {
     throw new Error("Tenant ID not available. Ensure UIPATH_TENANT_ID is set.");
   }
   if (options.requireTenantName && tenantName === undefined) {
-    throw new Error("Tenant not provided and UIPATH_TENANT_NAME not set. Please provide a tenant argument or set UIPATH_TENANT_NAME.");
+    throw new Error("Tenant not provided and UIPATH_TENANT_NAME not set. Run 'uip login' to select a tenant, or use 'uip login tenant set <tenant>' to switch tenants.");
   }
   return {
     baseUrl: status.baseUrl,
@@ -21001,29 +21064,24 @@ var interactiveLoginWithDeps = async (options, deps) => {
   try {
     const tokenData = jwtParser(tokens.UIPATH_ACCESS_TOKEN);
     const orgId = tokenData.prtId || tokenData.organizationId || tokenData.prt_id;
-    if (typeof orgId === "string") {
-      credentials.UIPATH_ORGANIZATION_ID = orgId;
-      if (organization) {
-        credentials.UIPATH_ORGANIZATION_NAME = organization;
-      }
-      try {
-        const [tenantName, tenantId, orgName] = await tenantSelector(config.baseUrl, tokens.UIPATH_ACCESS_TOKEN, orgId, tenant, interactive);
-        credentials.UIPATH_ORGANIZATION_NAME = orgName;
-        credentials.UIPATH_TENANT_NAME = tenantName;
-        credentials.UIPATH_TENANT_ID = tenantId;
-      } catch (error) {
-        credentials.UIPATH_TENANT_NAME = undefined;
-        credentials.UIPATH_TENANT_ID = undefined;
-        if (!organization) {
-          credentials.UIPATH_ORGANIZATION_NAME = undefined;
-        }
-        emit({
-          type: "tenant-fetch-failed",
-          message: error instanceof Error ? error.message : String(error)
-        });
-      }
+    if (typeof orgId !== "string" || orgId.length === 0) {
+      throw new Error("Organization ID not available from login token. Cannot establish an active tenant.");
     }
-  } catch {}
+    credentials.UIPATH_ORGANIZATION_ID = orgId;
+    if (organization) {
+      credentials.UIPATH_ORGANIZATION_NAME = organization;
+    }
+    const [tenantName, tenantId, orgName] = await tenantSelector(config.baseUrl, tokens.UIPATH_ACCESS_TOKEN, orgId, tenant, interactive);
+    credentials.UIPATH_ORGANIZATION_NAME = orgName;
+    credentials.UIPATH_TENANT_NAME = tenantName;
+    credentials.UIPATH_TENANT_ID = tenantId;
+  } catch (error) {
+    emit({
+      type: "tenant-fetch-failed",
+      message: error instanceof Error ? error.message : String(error)
+    });
+    throw error;
+  }
   const fs7 = getFs();
   const requestedPath = envFilePath ?? DEFAULT_ENV_FILENAME;
   let savePath = requestedPath;
@@ -21174,6 +21232,7 @@ export {
   logout,
   loadEnvFileAsync,
   isTokenRefreshOAuthFailure,
+  isRobotAuthEnforced,
   isNode,
   isEnvAuthEnabled,
   isBrowser,
@@ -21191,6 +21250,7 @@ export {
   EnvAuthConfigError,
   ENV_AUTH_VARS,
   ENV_AUTH_ENABLE_VAR,
+  ENFORCE_ROBOT_AUTH_VAR,
   DEFAULT_ENV_FILENAME,
   DEFAULT_AUTH_FILENAME
 };

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@uipath/auth",
-    "version": "1.0.2",
+    "version": "1.1.0",
     "repository": {
         "type": "git",
         "url": "https://github.com/UiPath/cli.git",
@@ -35,19 +35,12 @@
         "mihaigirleanu",
         "vlad-uipath"
     ],
-    "scripts": {
-        "build": "bun build ./src/index.ts --outdir dist --format esm --target node && bun build ./src/index.browser.ts --outdir dist --format esm --target browser --external @uipath/filesystem --external @uipath/robot-client",
-        "test": "vitest run",
-        "test:coverage": "vitest run --coverage",
-        "lint": "biome check .",
-        "typecheck": "tsc --noEmit"
-    },
     "devDependencies": {
         "@types/node": "^25.5.2",
-        "@uipath/filesystem": "1.0.2",
+        "@uipath/filesystem": "1.1.0",
         "@uipath/robot-client": "26.0.193-alpha22964",
         "openid-client": "^6.8.2",
         "typescript": "^6.0.2"
     },
-    "gitHead": "e373bfc1657e0bd85a7dc482691f4bda590392e5"
+    "gitHead": "06e8c8f566df4b87da4a008635483c62f64f33f0"
 }