@uipath/auth 1.202.0-preview.159 → 1.203.0-preview.160

package/dist/authProfile.d.ts

@@ -9,3 +9,32 @@ export declare function getActiveAuthProfile(): string | undefined;
 export declare function runWithAuthProfile<T>(profile: string | undefined, fn: () => T): T;
 export declare function resolveAuthProfileFilePath(profile: string): string;
 export declare function getActiveAuthProfileFilePath(): string | undefined;
+/** Absolute path to the directory holding all named profiles: `~/.uipath/profiles`. */
+export declare function getAuthProfilesRootPath(): string;
+/**
+ * Absolute path to a named profile's own directory. Unlike
+ * {@link resolveAuthProfileFilePath} this points at the folder, not the
+ * credentials file inside it — deleting a profile has to remove the whole
+ * folder, sidecars (`.auth.refresh-state`) included.
+ */
+export declare function resolveAuthProfileDirPath(profile: string): string;
+/**
+ * Names of every named profile on disk, sorted. A profile is a directory under
+ * `~/.uipath/profiles`; entries that are not directories, or whose names would
+ * fail {@link normalizeAuthProfileName}, are skipped rather than reported —
+ * they cannot be passed to `--profile`, so listing them would be a lie.
+ *
+ * Does not include the built-in `default` profile, which is not stored here.
+ */
+export declare function listAuthProfileNamesAsync(): Promise<string[]>;
+/** Whether a named profile has a directory on disk. */
+export declare function authProfileExistsAsync(profile: string): Promise<boolean>;
+/**
+ * Remove a named profile's directory and everything in it — credentials file
+ * and refresh-state sidecar alike. Returns the removed path, or `undefined`
+ * when the profile had no directory to begin with.
+ *
+ * Refuses the built-in `default` profile: its credentials are not stored under
+ * `profiles/` and are owned by `uip logout`.
+ */
+export declare function deleteAuthProfileAsync(profile: string): Promise<string | undefined>;

package/dist/authProfileDetails.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Credential state read from what is on disk. Deliberately narrower than
+ * {@link import("./loginStatus").LoginStatusValue}: describing a profile never
+ * attempts a token refresh, so `"Refresh Failed"` cannot arise here.
+ */
+export type AuthProfileStatus = "Logged in" | "Not logged in" | "Expired" | "Unreadable";
+export interface AuthProfileDetails {
+    /** Name to pass to `--profile`. `default` is the built-in profile. */
+    name: string;
+    /** Whether this is the profile the current invocation resolves to. */
+    active: boolean;
+    organizationName?: string;
+    tenantName?: string;
+    url?: string;
+    status: AuthProfileStatus;
+    /** When the access token expires. Absent when there is no usable token. */
+    expiresAt?: string;
+    /** Absolute path to the profile's credentials file. */
+    path?: string;
+}
+/**
+ * Describe every profile the CLI can be pointed at, `default` first and named
+ * profiles after it in name order.
+ *
+ * `default` is included even though it has no directory under
+ * `~/.uipath/profiles` — it is a legal `--profile` value (and the value used
+ * when the flag is omitted), so omitting it would misreport what is available.
+ * Its credentials file is resolved the same way the rest of the CLI resolves
+ * it: a `.uipath/.auth` walked up from `cwd`, else the one under `$HOME`.
+ */
+export declare function describeAuthProfilesAsync(): Promise<AuthProfileDetails[]>;

package/dist/index.browser.js

@@ -18277,6 +18277,63 @@ function getActiveAuthProfileFilePath() {
   const profile = getActiveAuthProfile();
   return profile ? resolveAuthProfileFilePath(profile) : undefined;
 }
+function getAuthProfilesRootPath() {
+  const fs = getFileSystem();
+  return fs.path.join(fs.env.homedir(), UIPATH_HOME_DIR, PROFILE_DIR);
+}
+function resolveAuthProfileDirPath(profile) {
+  const normalized = normalizeAuthProfileName(profile);
+  if (normalized === undefined) {
+    throw new AuthProfileValidationError(`"${DEFAULT_AUTH_PROFILE}" is the built-in profile and does not have a profile directory.`);
+  }
+  const fs = getFileSystem();
+  return fs.path.join(getAuthProfilesRootPath(), normalized);
+}
+async function listAuthProfileNamesAsync() {
+  const fs = getFileSystem();
+  const root = getAuthProfilesRootPath();
+  if (!await fs.exists(root)) {
+    return [];
+  }
+  const [readError, entries] = await catchError(fs.readdir(root));
+  if (readError || !entries) {
+    return [];
+  }
+  const names = [];
+  for (const entry of entries) {
+    if (!PROFILE_NAME_RE.test(entry) || entry === DEFAULT_AUTH_PROFILE) {
+      continue;
+    }
+    const stats = await fs.stat(fs.path.join(root, entry));
+    if (stats?.isDirectory()) {
+      names.push(entry);
+    }
+  }
+  return names.sort((a, b) => a.localeCompare(b));
+}
+async function authProfileExistsAsync(profile) {
+  const fs = getFileSystem();
+  const [pathError, dir] = catchError(() => resolveAuthProfileDirPath(profile));
+  if (pathError || dir === undefined) {
+    return false;
+  }
+  const stats = await fs.stat(dir);
+  return stats?.isDirectory() === true;
+}
+async function deleteAuthProfileAsync(profile) {
+  const dir = resolveAuthProfileDirPath(profile);
+  const fs = getFileSystem();
+  const relativeToRoot = fs.path.relative(getAuthProfilesRootPath(), dir);
+  if (relativeToRoot === "" || relativeToRoot.startsWith("..") || fs.path.isAbsolute(relativeToRoot)) {
+    throw new AuthProfileValidationError(`Refusing to delete "${profile}": resolved path escapes the profiles directory.`);
+  }
+  const stats = await fs.stat(dir);
+  if (stats?.isDirectory() !== true) {
+    return;
+  }
+  await fs.rm(dir);
+  return dir;
+}
 
 // src/config.ts
 var DEFAULT_CLIENT_ID = "36dea5b8-e8bb-423d-8e7b-c808df8f1c00";
@@ -18954,16 +19011,7 @@ var resolveEnvFilePathAsync = async (envFilePath = DEFAULT_ENV_FILENAME, opts) =
     errorMessage: location.source === "absolute" ? `Environment file not found: ${envFilePath}` : `Unable to locate environment file: ${envFilePath}. Run 'uip login' to authenticate.`
   };
 };
-var loadEnvFileAsync = async ({ envPath }) => {
-  const fs = getFileSystem4();
-  const absolutePath = fs.path.isAbsolute(envPath) ? envPath : fs.path.join(fs.env.cwd(), envPath);
-  if (!await fs.exists(absolutePath)) {
-    throw new Error(`Environment file not found: ${envPath}`);
-  }
-  const content = await fs.readFile(absolutePath, "utf-8");
-  if (content === null) {
-    throw new Error(`Environment file not found: ${envPath}`);
-  }
+var parseEnvContent = (content) => {
   const env = {};
   for (const line of content.split(`
 `)) {
@@ -18984,6 +19032,18 @@ var loadEnvFileAsync = async ({ envPath }) => {
   }
   return env;
 };
+var loadEnvFileAsync = async ({ envPath }) => {
+  const fs = getFileSystem4();
+  const absolutePath = fs.path.isAbsolute(envPath) ? envPath : fs.path.join(fs.env.cwd(), envPath);
+  if (!await fs.exists(absolutePath)) {
+    throw new Error(`Environment file not found: ${envPath}`);
+  }
+  const content = await fs.readFile(absolutePath, "utf-8");
+  if (content === null) {
+    throw new Error(`Environment file not found: ${envPath}`);
+  }
+  return parseEnvContent(content);
+};
 var saveEnvFileAsync = async ({
   envPath,
   data,
@@ -19747,18 +19807,22 @@ export {
   DEFAULT_ENV_FILENAME,
   InvalidBaseUrlError,
   TokenRefreshOAuthError,
+  authProfileExistsAsync,
   clearActiveAuthProfile,
   clientCredentialsLogin,
+  deleteAuthProfileAsync,
   fetchTenantsAndOrganizations,
   getActiveAuthProfile,
   getActiveAuthProfileFilePath,
   getAuthContext,
   getAuthEnv,
+  getAuthProfilesRootPath,
   getLoginStatusAsync,
   getLoginStatusWithDeps,
   isBrowser,
   isNode,
   isTokenRefreshOAuthFailure,
+  listAuthProfileNamesAsync,
   loadEnvFileAsync,
   logout,
   logoutWithDeps,
@@ -19766,6 +19830,7 @@ export {
   parseAuthFlow,
   parseJWT,
   refreshAccessToken,
+  resolveAuthProfileDirPath,
   resolveAuthProfileFilePath,
   resolveEnvFileLocationAsync,
   resolveEnvFilePathAsync,
@@ -19776,4 +19841,4 @@ export {
   setAuthFileConfig
 };
 
-//# debugId=2C66658C2F43E99364756E2164756E21
+//# debugId=BA72FB3851B49E2164756E2164756E21

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export * from "./authContext";
 export * from "./authProfile";
+export * from "./authProfileDetails";
 export * from "./clientCredentials";
 export { type AuthFileConfig, InvalidBaseUrlError, setAuthFileConfig, } from "./config";
 export { AUTH_CANCELLED_ERROR_CODE, AUTH_RECLAIMED_ERROR_CODE, AUTH_TIMEOUT_ERROR_CODE, DEFAULT_AUTH_TIMEOUT_MS, } from "./constants";

package/dist/index.js

@@ -2050,6 +2050,63 @@ function getActiveAuthProfileFilePath() {
   const profile = getActiveAuthProfile();
   return profile ? resolveAuthProfileFilePath(profile) : undefined;
 }
+function getAuthProfilesRootPath() {
+  const fs7 = getFileSystem();
+  return fs7.path.join(fs7.env.homedir(), UIPATH_HOME_DIR, PROFILE_DIR);
+}
+function resolveAuthProfileDirPath(profile) {
+  const normalized = normalizeAuthProfileName(profile);
+  if (normalized === undefined) {
+    throw new AuthProfileValidationError(`"${DEFAULT_AUTH_PROFILE}" is the built-in profile and does not have a profile directory.`);
+  }
+  const fs7 = getFileSystem();
+  return fs7.path.join(getAuthProfilesRootPath(), normalized);
+}
+async function listAuthProfileNamesAsync() {
+  const fs7 = getFileSystem();
+  const root = getAuthProfilesRootPath();
+  if (!await fs7.exists(root)) {
+    return [];
+  }
+  const [readError, entries] = await catchError(fs7.readdir(root));
+  if (readError || !entries) {
+    return [];
+  }
+  const names = [];
+  for (const entry of entries) {
+    if (!PROFILE_NAME_RE.test(entry) || entry === DEFAULT_AUTH_PROFILE) {
+      continue;
+    }
+    const stats = await fs7.stat(fs7.path.join(root, entry));
+    if (stats?.isDirectory()) {
+      names.push(entry);
+    }
+  }
+  return names.sort((a, b) => a.localeCompare(b));
+}
+async function authProfileExistsAsync(profile) {
+  const fs7 = getFileSystem();
+  const [pathError, dir] = catchError(() => resolveAuthProfileDirPath(profile));
+  if (pathError || dir === undefined) {
+    return false;
+  }
+  const stats = await fs7.stat(dir);
+  return stats?.isDirectory() === true;
+}
+async function deleteAuthProfileAsync(profile) {
+  const dir = resolveAuthProfileDirPath(profile);
+  const fs7 = getFileSystem();
+  const relativeToRoot = fs7.path.relative(getAuthProfilesRootPath(), dir);
+  if (relativeToRoot === "" || relativeToRoot.startsWith("..") || fs7.path.isAbsolute(relativeToRoot)) {
+    throw new AuthProfileValidationError(`Refusing to delete "${profile}": resolved path escapes the profiles directory.`);
+  }
+  const stats = await fs7.stat(dir);
+  if (stats?.isDirectory() !== true) {
+    return;
+  }
+  await fs7.rm(dir);
+  return dir;
+}
 // src/utils/jwt.ts
 class InvalidIssuerError extends Error {
   expected;
@@ -2621,16 +2678,7 @@ var resolveEnvFilePathAsync = async (envFilePath = DEFAULT_ENV_FILENAME, opts) =
     errorMessage: location.source === "absolute" ? `Environment file not found: ${envFilePath}` : `Unable to locate environment file: ${envFilePath}. Run 'uip login' to authenticate.`
   };
 };
-var loadEnvFileAsync = async ({ envPath }) => {
-  const fs7 = getFileSystem();
-  const absolutePath = fs7.path.isAbsolute(envPath) ? envPath : fs7.path.join(fs7.env.cwd(), envPath);
-  if (!await fs7.exists(absolutePath)) {
-    throw new Error(`Environment file not found: ${envPath}`);
-  }
-  const content = await fs7.readFile(absolutePath, "utf-8");
-  if (content === null) {
-    throw new Error(`Environment file not found: ${envPath}`);
-  }
+var parseEnvContent = (content) => {
   const env = {};
   for (const line of content.split(`
 `)) {
@@ -2651,6 +2699,18 @@ var loadEnvFileAsync = async ({ envPath }) => {
   }
   return env;
 };
+var loadEnvFileAsync = async ({ envPath }) => {
+  const fs7 = getFileSystem();
+  const absolutePath = fs7.path.isAbsolute(envPath) ? envPath : fs7.path.join(fs7.env.cwd(), envPath);
+  if (!await fs7.exists(absolutePath)) {
+    throw new Error(`Environment file not found: ${envPath}`);
+  }
+  const content = await fs7.readFile(absolutePath, "utf-8");
+  if (content === null) {
+    throw new Error(`Environment file not found: ${envPath}`);
+  }
+  return parseEnvContent(content);
+};
 var saveEnvFileAsync = async ({
   envPath,
   data,
@@ -3225,6 +3285,62 @@ var getAuthEnv = async (options = {}) => {
   }
   return { authEnv, loginStatus: status };
 };
+// src/authProfileDetails.ts
+init_src();
+var ORGANIZATION_NAME_KEY = "UIPATH_ORGANIZATION_NAME";
+var TENANT_NAME_KEY = "UIPATH_TENANT_NAME";
+var URL_KEY = "UIPATH_URL";
+var ACCESS_TOKEN_KEY = "UIPATH_ACCESS_TOKEN";
+function statusFromToken(accessToken) {
+  if (!accessToken) {
+    return { status: "Not logged in" };
+  }
+  const expiration = getTokenExpiration(accessToken);
+  if (expiration === undefined) {
+    return { status: "Logged in" };
+  }
+  return {
+    status: expiration.getTime() <= Date.now() ? "Expired" : "Logged in",
+    expiresAt: expiration.toISOString()
+  };
+}
+async function describeAuthProfileAsync(name, filePath, active) {
+  const base = {
+    name,
+    active,
+    ...filePath ? { path: filePath } : {}
+  };
+  if (!filePath) {
+    return { ...base, status: "Not logged in" };
+  }
+  const fs7 = getFileSystem();
+  const [readError, content] = await catchError(fs7.readFile(filePath, "utf-8"));
+  if (readError) {
+    return { ...base, status: "Unreadable" };
+  }
+  if (content === null || content === undefined) {
+    return { ...base, status: "Not logged in" };
+  }
+  const values = parseEnvContent(content);
+  return {
+    ...base,
+    ...values[ORGANIZATION_NAME_KEY] ? { organizationName: values[ORGANIZATION_NAME_KEY] } : {},
+    ...values[TENANT_NAME_KEY] ? { tenantName: values[TENANT_NAME_KEY] } : {},
+    ...values[URL_KEY] ? { url: values[URL_KEY] } : {},
+    ...statusFromToken(values[ACCESS_TOKEN_KEY])
+  };
+}
+async function describeAuthProfilesAsync() {
+  const activeProfile = getActiveAuthProfile();
+  const [defaultPathError, defaultLocation] = await catchError(resolveEnvFilePathAsync());
+  const rows = [
+    await describeAuthProfileAsync(DEFAULT_AUTH_PROFILE, defaultPathError ? undefined : defaultLocation?.absolutePath, activeProfile === undefined)
+  ];
+  for (const name of await listAuthProfileNamesAsync()) {
+    rows.push(await describeAuthProfileAsync(name, resolveAuthProfileFilePath(name), activeProfile === name));
+  }
+  return rows;
+}
 // src/tokenGrant.ts
 var requestClientCredentialsToken = async ({
   tokenEndpoint,
@@ -3840,16 +3956,20 @@ export {
   TenantSelectionError,
   TenantSelectionRequiredError,
   TokenRefreshOAuthError,
+  authProfileExistsAsync,
   authenticate,
   clearActiveAuthProfile,
   clearRefreshBreaker,
   clientCredentialsLogin,
+  deleteAuthProfileAsync,
+  describeAuthProfilesAsync,
   federatedCredentialsLogin,
   fetchTenantsAndOrganizations,
   getActiveAuthProfile,
   getActiveAuthProfileFilePath,
   getAuthContext,
   getAuthEnv,
+  getAuthProfilesRootPath,
   getLoginStatusAsync,
   getLoginStatusWithDeps,
   interactiveLogin,
@@ -3860,6 +3980,7 @@ export {
   isRobotAuthEnforced,
   isTenantSelectionError,
   isTokenRefreshOAuthFailure,
+  listAuthProfileNamesAsync,
   loadEnvFileAsync,
   loadRefreshBreaker,
   logout,
@@ -3871,6 +3992,7 @@ export {
   refreshAccessToken,
   refreshTokenFingerprint,
   registerRobotClientLoader,
+  resolveAuthProfileDirPath,
   resolveAuthProfileFilePath,
   resolveEnvFileLocationAsync,
   resolveEnvFilePathAsync,
@@ -3883,4 +4005,4 @@ export {
   setAuthFileConfig
 };
 
-//# debugId=8ECD0F0A4A5E19F264756E2164756E21
+//# debugId=07EEA08E9106212A64756E2164756E21

package/dist/utils/envFile.d.ts

@@ -90,6 +90,16 @@ export declare const resolveEnvFileLocationAsync: (envFilePath?: string, opts?:
 export declare const resolveEnvFilePathAsync: (envFilePath?: string, opts?: {
     cwd?: string;
 }) => Promise<ResolveEnvFilePathResult>;
+/**
+ * Parse dotenv-style content into key/value pairs.
+ *
+ * Split out from {@link loadEnvFileAsync} so a caller that already holds the
+ * file's text can parse it the same way, without a second copy of these rules
+ * drifting on quoting or comments. Blank lines and `#` comments are skipped, as
+ * is any line with no `=`; a value wrapped in matching single or double quotes
+ * is unwrapped.
+ */
+export declare const parseEnvContent: (content: string) => Record<string, string>;
 /**
  * Load environment variables from a credentials file
  * @param envPath - Path to the credentials file (relative to cwd or absolute)

package/package.json

@@ -1,7 +1,8 @@
 {
     "name": "@uipath/auth",
+    "author": "UiPath",
     "license": "SEE LICENSE IN LICENSE.txt",
-    "version": "1.202.0-preview.159",
+    "version": "1.203.0-preview.160",
     "repository": {
         "type": "git",
         "url": "https://github.com/UiPath/cli.git",
@@ -37,5 +38,5 @@
         "mihaigirleanu",
         "vlad-uipath"
     ],
-    "gitHead": "a3f23209784c6cec7155e735fa051b48ca49e8d7"
+    "gitHead": "3a42062ba731afca4595ba9aa8a80afc9667528d"
 }