@uipath/cli 1.1.0 → 1.195.0

package/dist/index.js

@@ -681,6 +681,7 @@ var init_open = __esm(() => {
 });
 
 // ../filesystem/src/node.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
 import { existsSync } from "node:fs";
 import * as fs6 from "node:fs/promises";
 import * as os2 from "node:os";
@@ -762,6 +763,90 @@ class NodeFileSystem {
   async mkdir(dirPath) {
     await fs6.mkdir(dirPath, { recursive: true });
   }
+  async acquireLock(lockPath) {
+    const canonicalPath = await this.canonicalizeLockTarget(lockPath);
+    const lockFile = `${canonicalPath}.lock`;
+    const ownerId = randomUUID2();
+    const start = Date.now();
+    while (true) {
+      try {
+        await fs6.writeFile(lockFile, ownerId, { flag: "wx" });
+        return this.createLockRelease(lockFile, ownerId);
+      } catch (error) {
+        if (!this.hasErrnoCode(error, "EEXIST")) {
+          throw error;
+        }
+        const stats = await fs6.stat(lockFile).catch(() => null);
+        if (stats && Date.now() - stats.mtimeMs > LOCK_STALE_MS) {
+          const reclaimed = await fs6.rm(lockFile, { force: true }).then(() => true).catch(() => false);
+          if (reclaimed)
+            continue;
+        }
+        if (Date.now() - start > LOCK_MAX_WAIT_MS) {
+          throw new Error(`ELOCKED: timed out waiting for lock on ${canonicalPath}`);
+        }
+        await new Promise((resolve2) => setTimeout(resolve2, LOCK_RETRY_MIN_MS + Math.random() * LOCK_RETRY_JITTER_MS));
+      }
+    }
+  }
+  async canonicalizeLockTarget(lockPath) {
+    const absolute = path2.resolve(lockPath);
+    const fullReal = await fs6.realpath(absolute).catch(() => null);
+    if (fullReal)
+      return fullReal;
+    const parent = path2.dirname(absolute);
+    const base = path2.basename(absolute);
+    const canonicalParent = await fs6.realpath(parent).catch(() => parent);
+    return path2.join(canonicalParent, base);
+  }
+  createLockRelease(lockFile, ownerId) {
+    const heartbeatStart = Date.now();
+    let heartbeatTimer;
+    let stopped = false;
+    const stopHeartbeat = () => {
+      stopped = true;
+      if (heartbeatTimer)
+        clearTimeout(heartbeatTimer);
+    };
+    const scheduleNextHeartbeat = () => {
+      if (stopped)
+        return;
+      if (Date.now() - heartbeatStart >= LOCK_MAX_HOLD_MS) {
+        stopped = true;
+        return;
+      }
+      heartbeatTimer = setTimeout(() => {
+        runHeartbeat();
+      }, LOCK_HEARTBEAT_MS);
+      heartbeatTimer.unref?.();
+    };
+    const runHeartbeat = async () => {
+      if (stopped)
+        return;
+      const current = await fs6.readFile(lockFile, "utf-8").catch(() => null);
+      if (stopped)
+        return;
+      if (current !== ownerId) {
+        stopped = true;
+        return;
+      }
+      const now = Date.now() / 1000;
+      await fs6.utimes(lockFile, now, now).catch(() => {});
+      scheduleNextHeartbeat();
+    };
+    scheduleNextHeartbeat();
+    let released = false;
+    return async () => {
+      if (released)
+        return;
+      released = true;
+      stopHeartbeat();
+      const current = await fs6.readFile(lockFile, "utf-8").catch(() => null);
+      if (current === ownerId) {
+        await fs6.rm(lockFile, { force: true });
+      }
+    };
+  }
   async rm(filePath) {
     await fs6.rm(filePath, { recursive: true, force: true });
   }
@@ -807,9 +892,13 @@ class NodeFileSystem {
     }
   }
   isEnoent(error) {
-    return typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
+    return this.hasErrnoCode(error, "ENOENT");
+  }
+  hasErrnoCode(error, code) {
+    return typeof error === "object" && error !== null && "code" in error && error.code === code;
   }
 }
+var LOCK_HEARTBEAT_MS = 5000, LOCK_STALE_MS = 15000, LOCK_MAX_WAIT_MS = 20000, LOCK_MAX_HOLD_MS = 60000, LOCK_RETRY_MIN_MS = 100, LOCK_RETRY_JITTER_MS = 200;
 var init_node = __esm(() => {
   init_open();
 });
@@ -8963,7 +9052,7 @@ var require_applicationinsights = __commonJS((exports, module) => {
 
 // ../../node_modules/applicationinsights/out/Library/JsonConfig.js
 var require_JsonConfig = __commonJS((exports) => {
-  var __dirname = "/Users/alexandru.oltean/github/cli/node_modules/applicationinsights/out/Library";
+  var __dirname = "/home/runner/work/cli/cli/node_modules/applicationinsights/out/Library";
   var __importDefault = exports && exports.__importDefault || function(mod2) {
     return mod2 && mod2.__esModule ? mod2 : { default: mod2 };
   };
@@ -20844,7 +20933,7 @@ var require_src7 = __commonJS((exports) => {
   } });
 });
 
-// ../../node_modules/@opentelemetry/instrumentation/node_modules/@opentelemetry/api-logs/build/src/types/LogRecord.js
+// ../../node_modules/@opentelemetry/api-logs/build/src/types/LogRecord.js
 var require_LogRecord = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.SeverityNumber = undefined;
@@ -20878,7 +20967,7 @@ var require_LogRecord = __commonJS((exports) => {
   })(SeverityNumber = exports.SeverityNumber || (exports.SeverityNumber = {}));
 });
 
-// ../../node_modules/@opentelemetry/instrumentation/node_modules/@opentelemetry/api-logs/build/src/NoopLogger.js
+// ../../node_modules/@opentelemetry/api-logs/build/src/NoopLogger.js
 var require_NoopLogger = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.NOOP_LOGGER = exports.NoopLogger = undefined;
@@ -20890,7 +20979,7 @@ var require_NoopLogger = __commonJS((exports) => {
   exports.NOOP_LOGGER = new NoopLogger;
 });
 
-// ../../node_modules/@opentelemetry/instrumentation/node_modules/@opentelemetry/api-logs/build/src/internal/global-utils.js
+// ../../node_modules/@opentelemetry/api-logs/build/src/internal/global-utils.js
 var require_global_utils2 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.API_BACKWARDS_COMPATIBILITY_VERSION = exports.makeGetter = exports._global = exports.GLOBAL_LOGS_API_KEY = undefined;
@@ -20903,7 +20992,7 @@ var require_global_utils2 = __commonJS((exports) => {
   exports.API_BACKWARDS_COMPATIBILITY_VERSION = 1;
 });
 
-// ../../node_modules/@opentelemetry/instrumentation/node_modules/@opentelemetry/api-logs/build/src/NoopLoggerProvider.js
+// ../../node_modules/@opentelemetry/api-logs/build/src/NoopLoggerProvider.js
 var require_NoopLoggerProvider = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.NOOP_LOGGER_PROVIDER = exports.NoopLoggerProvider = undefined;
@@ -20918,7 +21007,7 @@ var require_NoopLoggerProvider = __commonJS((exports) => {
   exports.NOOP_LOGGER_PROVIDER = new NoopLoggerProvider;
 });
 
-// ../../node_modules/@opentelemetry/instrumentation/node_modules/@opentelemetry/api-logs/build/src/ProxyLogger.js
+// ../../node_modules/@opentelemetry/api-logs/build/src/ProxyLogger.js
 var require_ProxyLogger = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.ProxyLogger = undefined;
@@ -20949,7 +21038,7 @@ var require_ProxyLogger = __commonJS((exports) => {
   exports.ProxyLogger = ProxyLogger;
 });
 
-// ../../node_modules/@opentelemetry/instrumentation/node_modules/@opentelemetry/api-logs/build/src/ProxyLoggerProvider.js
+// ../../node_modules/@opentelemetry/api-logs/build/src/ProxyLoggerProvider.js
 var require_ProxyLoggerProvider = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.ProxyLoggerProvider = undefined;
@@ -20976,7 +21065,7 @@ var require_ProxyLoggerProvider = __commonJS((exports) => {
   exports.ProxyLoggerProvider = ProxyLoggerProvider;
 });
 
-// ../../node_modules/@opentelemetry/instrumentation/node_modules/@opentelemetry/api-logs/build/src/api/logs.js
+// ../../node_modules/@opentelemetry/api-logs/build/src/api/logs.js
 var require_logs = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.LogsAPI = undefined;
@@ -21017,7 +21106,7 @@ var require_logs = __commonJS((exports) => {
   exports.LogsAPI = LogsAPI;
 });
 
-// ../../node_modules/@opentelemetry/instrumentation/node_modules/@opentelemetry/api-logs/build/src/index.js
+// ../../node_modules/@opentelemetry/api-logs/build/src/index.js
 var require_src8 = __commonJS((exports) => {
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.logs = exports.NoopLogger = exports.NOOP_LOGGER = exports.SeverityNumber = undefined;
@@ -32030,7 +32119,7 @@ var require_stack_chain2 = __commonJS((exports, module) => {
 
 // ../../node_modules/async-hook-jl/index.js
 var require_async_hook_jl = __commonJS((exports, module) => {
-  var __dirname = "/Users/alexandru.oltean/github/cli/node_modules/async-hook-jl";
+  var __dirname = "/home/runner/work/cli/cli/node_modules/async-hook-jl";
   var AsyncHook = require_async_hook();
   if (global._asyncHook) {
     if (global._asyncHook.version === require_package2().version) {
@@ -35656,7 +35745,7 @@ var require_PrefixHelper = __commonJS((exports) => {
 
 // ../../node_modules/applicationinsights/out/Library/Context.js
 var require_Context = __commonJS((exports, module) => {
-  var __dirname = "/Users/alexandru.oltean/github/cli/node_modules/applicationinsights/out/Library";
+  var __dirname = "/home/runner/work/cli/cli/node_modules/applicationinsights/out/Library";
   var __createBinding = exports && exports.__createBinding || (Object.create ? function(o, m, k, k2) {
     if (k2 === undefined)
       k2 = k;
@@ -39982,13 +40071,13 @@ var require_sha256 = __commonJS((exports, module) => {
     computeSha256Hmac: () => computeSha256Hmac2
   });
   module.exports = __toCommonJS(sha256_exports);
-  var import_node_crypto = __require("node:crypto");
+  var import_node_crypto2 = __require("node:crypto");
   async function computeSha256Hmac2(key, stringToSign, encoding) {
     const decodedKey = Buffer.from(key, "base64");
-    return (0, import_node_crypto.createHmac)("sha256", decodedKey).update(stringToSign).digest(encoding);
+    return (0, import_node_crypto2.createHmac)("sha256", decodedKey).update(stringToSign).digest(encoding);
   }
   async function computeSha256Hash2(content, encoding) {
-    return (0, import_node_crypto.createHash)("sha256").update(content).digest(encoding);
+    return (0, import_node_crypto2.createHash)("sha256").update(content).digest(encoding);
   }
 });
 
@@ -40013,10 +40102,10 @@ var require_uuidUtils = __commonJS((exports, module) => {
   var __toCommonJS = (mod2) => __copyProps(__defProp2({}, "__esModule", { value: true }), mod2);
   var uuidUtils_exports = {};
   __export2(uuidUtils_exports, {
-    randomUUID: () => randomUUID2
+    randomUUID: () => randomUUID3
   });
   module.exports = __toCommonJS(uuidUtils_exports);
-  function randomUUID2() {
+  function randomUUID3() {
     return crypto.randomUUID();
   }
 });
@@ -40466,7 +40555,7 @@ var require_commonjs4 = __commonJS((exports) => {
   exports.getRandomIntegerInclusive = getRandomIntegerInclusive2;
   exports.isError = isError2;
   exports.isObject = isObject4;
-  exports.randomUUID = randomUUID2;
+  exports.randomUUID = randomUUID3;
   exports.uint8ArrayToString = uint8ArrayToString2;
   exports.stringToUint8Array = stringToUint8Array2;
   var tslib_1 = require_tslib();
@@ -40515,7 +40604,7 @@ var require_commonjs4 = __commonJS((exports) => {
   function isObject4(input) {
     return tspRuntime.isObject(input);
   }
-  function randomUUID2() {
+  function randomUUID3() {
     return tspRuntime.randomUUID();
   }
   exports.isBrowser = tspRuntime.isBrowser;
@@ -41721,7 +41810,7 @@ var require_dist = __commonJS((exports) => {
   exports.Agent = Agent;
 });
 
-// ../../node_modules/https-proxy-agent/dist/parse-proxy-response.js
+// ../../node_modules/@azure/core-rest-pipeline/node_modules/https-proxy-agent/dist/parse-proxy-response.js
 var require_parse_proxy_response = __commonJS((exports) => {
   var __importDefault = exports && exports.__importDefault || function(mod2) {
     return mod2 && mod2.__esModule ? mod2 : { default: mod2 };
@@ -41817,7 +41906,7 @@ var require_parse_proxy_response = __commonJS((exports) => {
   exports.parseProxyResponse = parseProxyResponse;
 });
 
-// ../../node_modules/https-proxy-agent/dist/index.js
+// ../../node_modules/@azure/core-rest-pipeline/node_modules/https-proxy-agent/dist/index.js
 var require_dist2 = __commonJS((exports) => {
   var __createBinding = exports && exports.__createBinding || (Object.create ? function(o, m, k, k2) {
     if (k2 === undefined)
@@ -46837,6 +46926,60 @@ function escapeNonAscii(jsonText) {
 function needsAsciiSafeJson(sink) {
   return process.platform === "win32" && !sink.capabilities.isInteractive;
 }
+function isPlainRecord(value) {
+  if (value === null || typeof value !== "object")
+    return false;
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
+}
+function toLowerCamelCaseKey(key) {
+  if (!key)
+    return key;
+  if (/[_\-\s]/.test(key)) {
+    const [firstPart, ...restParts] = key.split(/[_\-\s]+/).filter(Boolean);
+    if (!firstPart)
+      return key;
+    return [
+      toLowerCamelCaseSimpleKey(firstPart),
+      ...restParts.map((part) => {
+        const normalized = toLowerCamelCaseSimpleKey(part);
+        return normalized.charAt(0).toUpperCase() + normalized.slice(1);
+      })
+    ].join("");
+  }
+  return toLowerCamelCaseSimpleKey(key);
+}
+function toLowerCamelCaseSimpleKey(key) {
+  if (/^[A-Z0-9]+$/.test(key))
+    return key.toLowerCase();
+  return key.replace(/^[A-Z]+(?=[A-Z][a-z]|\d|$)|^[A-Z]/, (match) => match.toLowerCase());
+}
+function toPascalCaseKey(key) {
+  const lowerCamelKey = toLowerCamelCaseKey(key);
+  return lowerCamelKey ? lowerCamelKey.charAt(0).toUpperCase() + lowerCamelKey.slice(1) : lowerCamelKey;
+}
+function toPascalCaseData(value) {
+  if (Array.isArray(value))
+    return value.map(toPascalCaseData);
+  if (!isPlainRecord(value))
+    return value;
+  const result = {};
+  for (const [key, nestedValue] of Object.entries(value)) {
+    result[toPascalCaseKey(key)] = toPascalCaseData(nestedValue);
+  }
+  return result;
+}
+function normalizeDataKeys(data) {
+  return toPascalCaseData(data);
+}
+function normalizeOutputKeys(data) {
+  const result = {};
+  for (const [key, value] of Object.entries(data)) {
+    const pascalKey = toPascalCaseKey(key);
+    result[pascalKey] = pascalKey === "Data" ? value : toPascalCaseData(value);
+  }
+  return result;
+}
 function printOutput(data, format2 = "json", logFn, asciiSafe = false) {
   if (!data) {
     logFn("Empty response object. No data to display.");
@@ -46899,7 +47042,7 @@ function wrapText(text, width) {
 function printTable(data, logFn, externalLogValue) {
   if (data.length === 0)
     return;
-  const keys = Object.keys(data[0]).filter((key) => key !== "Code" && key !== "Log");
+  const keys = Object.keys(data[0]).filter((key) => !["code", "log"].includes(key.toLowerCase()));
   const maxWidths = keys.map((key) => Math.max(key.length, ...data.map((item) => cellToString(item[key]).length)));
   const header = keys.map((key, i2) => key.padEnd(maxWidths[i2])).join(" | ");
   logFn(header);
@@ -46914,7 +47057,7 @@ function printTable(data, logFn, externalLogValue) {
   }
 }
 function printVerticalTable(data, logFn = console.log, externalLogValue) {
-  const keys = Object.keys(data).filter((key) => key !== "Code" && key !== "Log");
+  const keys = Object.keys(data).filter((key) => !["code", "log"].includes(key.toLowerCase()));
   if (keys.length === 0)
     return;
   const maxKeyWidth = Math.max(...keys.map((key) => key.length));
@@ -46930,7 +47073,7 @@ function printVerticalTable(data, logFn = console.log, externalLogValue) {
 function printResizableTable(data, logFn = console.log, externalLogValue) {
   if (data.length === 0)
     return;
-  const keys = Object.keys(data[0]).filter((key) => key !== "Code" && key !== "Log");
+  const keys = Object.keys(data[0]).filter((key) => !["code", "log"].includes(key.toLowerCase()));
   if (keys.length === 0)
     return;
   if (!process.stdout.isTTY) {
@@ -47015,7 +47158,12 @@ function validateOutputFilter(filter) {
   }
 }
 function applyFilter(data, filter) {
-  const result = search(data, filter);
+  let result;
+  try {
+    result = search(data, filter);
+  } catch (err) {
+    throw new FilterEvaluationError(filter, err);
+  }
   if (result == null)
     return [];
   if (Array.isArray(result)) {
@@ -47030,7 +47178,7 @@ function applyFilter(data, filter) {
     return result;
   return { Value: result };
 }
-var RESULTS, EXIT_CODES, OutputFormatter;
+var RESULTS, EXIT_CODES, FilterEvaluationError, OutputFormatter;
 var init_formatter = __esm(() => {
   init_dist();
   init_js_yaml();
@@ -47055,14 +47203,32 @@ var init_formatter = __esm(() => {
     ValidationError: 3,
     TimeoutError: 4
   };
+  FilterEvaluationError = class FilterEvaluationError extends Error {
+    __brand = "FilterEvaluationError";
+    filter;
+    instructions;
+    result = RESULTS.ValidationError;
+    constructor(filter, cause) {
+      const underlying = cause instanceof Error ? cause.message : String(cause);
+      super(`Filter '${filter}' failed to evaluate: ${underlying}`);
+      this.name = "FilterEvaluationError";
+      this.filter = filter;
+      this.instructions = `The --output-filter expression '${filter}' failed at evaluation time. ` + "Note that --output-filter operates on the 'Data' field of the envelope, not the full object. " + "For example, on a list result use 'length(@)' instead of 'Data | length(@)'.";
+    }
+  };
   ((OutputFormatter) => {
-    function success(data) {
+    function success(data, options) {
       data.Log ??= getLogFilePath() || undefined;
+      const normalize = !options?.preserveDataKeys;
+      if (normalize) {
+        data.Data = normalizeDataKeys(data.Data);
+      }
       const filter = getOutputFilter();
       if (filter) {
-        data.Data = applyFilter(data.Data, filter);
+        const filtered = applyFilter(data.Data, filter);
+        data.Data = normalize ? normalizeDataKeys(filtered) : filtered;
       }
-      logOutput(data, getOutputFormat());
+      logOutput(normalizeOutputKeys(data), getOutputFormat());
     }
     OutputFormatter.success = success;
     function error(data) {
@@ -47072,7 +47238,7 @@ var init_formatter = __esm(() => {
         result: data.Result,
         message: data.Message
       });
-      logOutput(data, getOutputFormat());
+      logOutput(normalizeOutputKeys(data), getOutputFormat());
     }
     OutputFormatter.error = error;
     function emitList(code, items, opts) {
@@ -47093,13 +47259,14 @@ var init_formatter = __esm(() => {
     function log(data) {
       const format2 = getOutputFormat();
       const sink = getOutputSink();
+      const normalized = toPascalCaseData(data);
       if (format2 === "json") {
-        const json2 = JSON.stringify(data);
+        const json2 = JSON.stringify(normalized);
         const safe = needsAsciiSafeJson(sink) ? escapeNonAscii(json2) : json2;
         sink.writeErr(`${safe}
 `);
       } else {
-        for (const [key, value] of Object.entries(data)) {
+        for (const [key, value] of Object.entries(normalized)) {
           sink.writeErr(`${key}: ${value}
 `);
         }
@@ -47108,12 +47275,16 @@ var init_formatter = __esm(() => {
     OutputFormatter.log = log;
     function formatToString(data) {
       const filter = getOutputFilter();
-      if (filter && "Data" in data && data.Data != null) {
-        data.Data = applyFilter(data.Data, filter);
+      if ("Data" in data && data.Data != null) {
+        data.Data = normalizeDataKeys(data.Data);
+        if (filter) {
+          data.Data = normalizeDataKeys(applyFilter(data.Data, filter));
+        }
       }
+      const output = normalizeOutputKeys(data);
       const lines = [];
       const sink = getOutputSink();
-      printOutput(data, getOutputFormat(), (msg) => {
+      printOutput(output, getOutputFormat(), (msg) => {
         lines.push(msg);
       }, needsAsciiSafeJson(sink));
       return lines.join(`
@@ -48587,7 +48758,28 @@ var init_abort_controller = __esm(() => {
   init_logger();
 });
 // ../common/src/polling/types.ts
-var init_types = () => {};
+var PollOutcome;
+var init_types = __esm(() => {
+  PollOutcome = {
+    Completed: "completed",
+    Timeout: "timeout",
+    Interrupted: "interrupted",
+    Aborted: "aborted",
+    Failed: "failed"
+  };
+});
+
+// ../common/src/polling/poll-failure-mapping.ts
+var REASON_BY_OUTCOME;
+var init_poll_failure_mapping = __esm(() => {
+  init_types();
+  REASON_BY_OUTCOME = {
+    [PollOutcome.Timeout]: "poll_timeout",
+    [PollOutcome.Failed]: "poll_failed",
+    [PollOutcome.Interrupted]: "poll_failed",
+    [PollOutcome.Aborted]: "poll_aborted"
+  };
+});
 
 // ../common/src/polling/poll-until.ts
 var init_poll_until = __esm(() => {
@@ -48620,6 +48812,7 @@ var init_terminal_statuses = __esm(() => {
 // ../common/src/polling/index.ts
 var init_polling = __esm(() => {
   init_abort_controller();
+  init_poll_failure_mapping();
   init_poll_until();
   init_terminal_statuses();
   init_types();
@@ -48638,6 +48831,20 @@ var init_screen_logger = __esm(() => {
   })(ScreenLogger ||= {});
 });
 
+// ../common/src/sdk-user-agent.ts
+function setSdkUserAgentHostToken(token) {
+  if (token === undefined) {
+    sdkUserAgentHostToken.clear();
+    return;
+  }
+  sdkUserAgentHostToken.set(token);
+}
+var sdkUserAgentHostToken;
+var init_sdk_user_agent = __esm(() => {
+  init_singleton();
+  sdkUserAgentHostToken = singleton("SdkUserAgentHostToken");
+});
+
 // ../common/src/tool-provider.ts
 function setPackagerFactoryProvider(provider) {
   factorySlot.set(provider);
@@ -48840,13 +49047,17 @@ var init_trackedAction = __esm(() => {
       const [error] = await catchError(fn(...args));
       if (error) {
         errorMessage = error instanceof Error ? error.message : String(error);
-        logger.error(`[trackedAction] ${telemetryName} failed: ${errorMessage}`);
+        logger.debug(`[trackedAction] ${telemetryName} failed: ${errorMessage}`);
+        const typed = error;
+        const customInstructions = typeof typed.instructions === "string" ? typed.instructions : undefined;
+        const customResult = typeof typed.result === "string" && typed.result !== RESULTS.Success && Object.values(RESULTS).includes(typed.result) ? typed.result : undefined;
+        const finalResult = customResult ?? RESULTS.Failure;
         OutputFormatter.error({
-          Result: RESULTS.Failure,
+          Result: finalResult,
           Message: errorMessage,
-          Instructions: "An unexpected error occurred. Run with --log-level debug for details."
+          Instructions: customInstructions ?? "An unexpected error occurred. Run with --log-level debug for details."
         });
-        context.exit(1);
+        context.exit(EXIT_CODES[finalResult]);
       }
       const durationMs = performance.now() - startTime;
       const success = !error && (process.exitCode === undefined || process.exitCode === 0);
@@ -48882,6 +49093,7 @@ var init_src2 = __esm(() => {
   init_polling();
   init_registry();
   init_screen_logger();
+  init_sdk_user_agent();
   init_singleton();
   init_node2();
   init_telemetry_events();
@@ -48895,7 +49107,8 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@uipath/cli",
-    version: "1.1.0",
+    license: "MIT",
+    version: "1.195.0",
     description: "Cross platform CLI for UiPath",
     repository: {
       type: "git",
@@ -48936,6 +49149,7 @@ var init_package = __esm(() => {
     devDependencies: {
       "@inquirer/prompts": "^8.3.2",
       "@modelcontextprotocol/sdk": "^1.26.0",
+      "@playwright/test": "^1.60.0",
       "@types/bun": "^1.3.11",
       "@types/node": "^25.5.2",
       "@uipath/auth": "workspace:*",
@@ -48946,6 +49160,7 @@ var init_package = __esm(() => {
       esbuild: "^0.27.3",
       "js-yaml": "^4.1.0",
       ora: "^9.3.0",
+      "path-browserify": "^1.0.1",
       typescript: "^6.0.2",
       zod: "^4.3.6"
     }
@@ -49011,6 +49226,9 @@ function stripGlobalOptions(args) {
   const cleaned = [];
   let format2;
   let formatWasExplicit = false;
+  let sawJsonAlias = false;
+  let sawOutputOption = false;
+  let outputConflict = false;
   let filter;
   let logLevel;
   let logFile;
@@ -49024,22 +49242,55 @@ function stripGlobalOptions(args) {
       filter = args[i2].substring("--output-filter=".length);
       continue;
     }
-    if (args[i2] === "--output" && i2 + 1 < args.length) {
-      const v = args[i2 + 1];
-      if (VALID_FORMATS.includes(v)) {
-        format2 = v;
-        formatWasExplicit = true;
-        i2++;
+    if (args[i2] === "--json") {
+      sawJsonAlias = true;
+      format2 = "json";
+      formatWasExplicit = true;
+      if (sawOutputOption) {
+        outputConflict = true;
+      }
+      continue;
+    }
+    if (args[i2] === "--output") {
+      sawOutputOption = true;
+      if (sawJsonAlias) {
+        outputConflict = true;
+      }
+      if (i2 + 1 < args.length) {
+        const v = args[i2 + 1];
+        if (VALID_FORMATS.includes(v)) {
+          if (!sawJsonAlias) {
+            format2 = v;
+          }
+          formatWasExplicit = true;
+          i2++;
+          continue;
+        }
+        if (sawJsonAlias) {
+          i2++;
+          continue;
+        }
+      }
+      if (sawJsonAlias) {
         continue;
       }
     }
     if (args[i2]?.startsWith("--output=")) {
+      sawOutputOption = true;
+      if (sawJsonAlias) {
+        outputConflict = true;
+      }
       const v = args[i2].substring("--output=".length);
       if (VALID_FORMATS.includes(v)) {
-        format2 = v;
+        if (!sawJsonAlias) {
+          format2 = v;
+        }
         formatWasExplicit = true;
         continue;
       }
+      if (sawJsonAlias) {
+        continue;
+      }
     }
     if (args[i2] === "--log-level" && i2 + 1 < args.length) {
       const parsed = VALID_LOG_LEVELS[args[i2 + 1].toLowerCase()];
@@ -49073,6 +49324,7 @@ function stripGlobalOptions(args) {
     args: cleaned,
     format: resolvedFormat,
     formatWasExplicit,
+    outputConflict,
     filter,
     logLevel,
     logFile
@@ -49480,7 +49732,7 @@ var init_helpFormatter = __esm(() => {
     },
     {
       Flags: "--output-filter <expression>",
-      Description: "JMESPath expression to filter output"
+      Description: "JMESPath expression applied to the Data field of the response envelope"
     },
     {
       Flags: "--log-level <debug|info|warn|error>",
@@ -49595,6 +49847,7 @@ function validateAndSetOutputFilter(filter, context) {
   return true;
 }
 async function initProgram(context, hooks2 = {}) {
+  setSdkUserAgentHostToken(`uip/${package_default.version}`);
   const program2 = new Command;
   program2.name("uip").description(`UiPath CLI ${package_default.version}`).version(package_default.version, "-v, --version").enablePositionalOptions();
   const globalOptions = stripGlobalOptions(context.args);
@@ -49602,6 +49855,7 @@ async function initProgram(context, hooks2 = {}) {
     args: cleanedArgs,
     format: helpFormat,
     formatWasExplicit,
+    outputConflict,
     filter,
     logLevel,
     logFile
@@ -49622,6 +49876,15 @@ async function initProgram(context, hooks2 = {}) {
   if (overrides.onLoggerReady) {
     overrides.onLoggerReady();
   }
+  if (outputConflict) {
+    OutputFormatter.error({
+      Result: RESULTS.ValidationError,
+      Message: "error: option '--json' cannot be used with option '--output'",
+      Instructions: "Use either --json or --output <format>, not both."
+    });
+    context.exit(EXIT_CODES.ValidationError);
+    return null;
+  }
   if (!validateAndSetOutputFilter(filter, context)) {
     return null;
   }
@@ -53745,7 +54008,7 @@ var init_globalNpmRoot = __esm(() => {
 });
 
 // src/services/tools-whitelist.ts
-var TOOLS_WHITELIST, WHITELIST_BY_COMMAND, WHITELIST_BY_SHORT_NAME;
+var TOOLS_WHITELIST, COMMAND_ALIASES, ALIASES_BY_COMMAND, WHITELIST_BY_COMMAND, WHITELIST_BY_SHORT_NAME;
 var init_tools_whitelist = __esm(() => {
   TOOLS_WHITELIST = new Map([
     ["@uipath/solution-tool", "solution"],
@@ -53771,11 +54034,32 @@ var init_tools_whitelist = __esm(() => {
     ["@uipath/data-fabric-tool", "df"],
     ["@uipath/insights-tool", "insights"],
     ["@uipath/tasks-tool", "tasks"],
-    ["@uipath/sc-tool", "sc"],
+    ["@uipath/aops-tool", "aops"],
     ["@uipath/llmgw-tool", "llm-configuration"],
-    ["@uipath/platform-tool", "platform"]
+    ["@uipath/platform-tool", "platform"],
+    ["@uipath/ixp-tool", "ixp"]
   ]);
-  WHITELIST_BY_COMMAND = new Map([...TOOLS_WHITELIST.entries()].map(([pkg, cmd]) => [cmd, pkg]));
+  COMMAND_ALIASES = new Map([
+    ["orchestrator", "or"]
+  ]);
+  ALIASES_BY_COMMAND = (() => {
+    const map2 = new Map;
+    for (const [alias, canonical] of COMMAND_ALIASES) {
+      const list = map2.get(canonical) ?? [];
+      list.push(alias);
+      map2.set(canonical, list);
+    }
+    return map2;
+  })();
+  WHITELIST_BY_COMMAND = (() => {
+    const map2 = new Map([...TOOLS_WHITELIST.entries()].map(([pkg, cmd]) => [cmd, pkg]));
+    for (const [alias, canonical] of COMMAND_ALIASES) {
+      const pkg = [...TOOLS_WHITELIST.entries()].find(([, cmd]) => cmd === canonical)?.[0];
+      if (pkg)
+        map2.set(alias, pkg);
+    }
+    return map2;
+  })();
   WHITELIST_BY_SHORT_NAME = new Map([...TOOLS_WHITELIST.keys()].map((pkg) => [
     pkg.replace(/^@uipath\//, ""),
     pkg
@@ -54222,6 +54506,10 @@ ${errors4.map((e) => `  - ${e}`).join(`
     if (authToken)
       headers.Authorization = `Bearer ${authToken}`;
     const info = await this.fetchPackageInfo(registryUrl, packageName, headers, options?.timeoutMs);
+    if (options?.exact !== undefined && info.availableVersions?.includes(options.exact)) {
+      logger.debug(`Resolved version: ${options.exact} (exact pin match)`);
+      return options.exact;
+    }
     if (versionPrefix && info.availableVersions) {
       const matching = info.availableVersions.filter((v) => v.startsWith(versionPrefix));
       const picked = pickForChannel(matching, channel);
@@ -70008,7 +70296,7 @@ var init_zod = __esm(() => {
 });
 
 // src/config/loadConfig.ts
-var ConfigSchema, SECRET_FIELD_PATHS, formatZodError = (error51) => {
+var VERSION_PIN_RE, ConfigSchema, SECRET_FIELD_PATHS, formatZodError = (error51) => {
   const issues = error51.issues.map((issue2) => {
     const path6 = issue2.path.join(".") || "config";
     let message = issue2.message;
@@ -70103,11 +70391,13 @@ Please ensure your config file contains valid JSON.`);
 var init_loadConfig = __esm(() => {
   init_src2();
   init_zod();
+  VERSION_PIN_RE = /^(\d+)\.(\d+)(?:\.(\d+))?$/;
   ConfigSchema = exports_external.object({
     core: exports_external.object({
       output: exports_external.enum(["table", "json", "yaml", "plain", "text"]).transform((v) => v === "text" ? "plain" : v).optional(),
       logLevel: exports_external.enum(["error", "warn", "info", "debug"]).optional(),
-      updateChannel: exports_external.enum(["alpha", "beta", "stable"]).optional()
+      updateChannel: exports_external.enum(["alpha", "beta", "stable"]).optional(),
+      version: exports_external.string().regex(VERSION_PIN_RE, "must be major.minor or major.minor.patch (e.g. 1.2 or 1.2.3)").optional()
     }).optional(),
     auth: exports_external.object({
       clientId: exports_external.string().min(1).optional(),
@@ -70132,8 +70422,42 @@ var init_loadConfig = __esm(() => {
   LOCAL_CONFIG_REL = `${UIPATH_HOME_DIR}/${CONFIG_FILENAME}`;
 });
 
+// src/services/versionPin.ts
+function isValidVersionPin(raw) {
+  return VERSION_PIN_RE.test(raw.trim());
+}
+function parseVersionPin(raw) {
+  if (raw === undefined)
+    return null;
+  const match = VERSION_PIN_RE.exec(raw.trim());
+  if (!match)
+    return null;
+  const pin = {
+    major: Number(match[1]),
+    minor: Number(match[2])
+  };
+  if (match[3] !== undefined)
+    pin.patch = Number(match[3]);
+  return pin;
+}
+function resolvePinnedVersion() {
+  return parseVersionPin(getCachedConfig().core?.version);
+}
+function isExactPin(pin) {
+  return pin.patch !== undefined;
+}
+function pinnedPrefix(pin) {
+  return `${pin.major}.${pin.minor}.`;
+}
+function formatVersionPin(pin) {
+  return isExactPin(pin) ? `${pin.major}.${pin.minor}.${pin.patch}` : `${pin.major}.${pin.minor}`;
+}
+var init_versionPin = __esm(() => {
+  init_loadConfig();
+});
+
 // src/commands/config.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
+import { randomUUID as randomUUID3 } from "node:crypto";
 import { setTimeout as sleep } from "node:timers/promises";
 async function resolveForRead(explicit) {
   const r = await resolveConfigFilePathAsync(explicit);
@@ -70179,7 +70503,7 @@ async function withConfigLock(targetPath, fn) {
     const [statErr, stats] = await catchError(fs7.stat(lockPath));
     const lockMissing = !statErr && stats === null;
     const lockHeld = !statErr && stats !== null;
-    const stale = lockHeld && Date.now() - stats.mtimeMs > LOCK_STALE_MS;
+    const stale = lockHeld && Date.now() - stats.mtimeMs > LOCK_STALE_MS2;
     if (lockMissing || stale) {
       const [writeErr] = await catchError(fs7.writeFile(lockPath, myToken));
       if (!writeErr) {
@@ -70205,7 +70529,7 @@ async function writeConfigFileAt(path6, config2) {
   const fs7 = getFileSystem();
   const dir = fs7.path.dirname(path6);
   await fs7.mkdir(dir);
-  const tempPath = `${path6}.${randomUUID2()}.tmp`;
+  const tempPath = `${path6}.${randomUUID3()}.tmp`;
   await fs7.writeFile(tempPath, JSON.stringify(config2, null, 4));
   const [renameErr] = await catchError(fs7.rename(tempPath, path6));
   if (renameErr) {
@@ -70317,7 +70641,7 @@ function registerConfigCommand(program2, context) {
       }
     });
   });
-  config2.command("set").description("Set a configuration value (writes to the discovered file, or to ~/.uipath/config.json by default)").argument("<key>", `Config key (${VALID_KEY_NAMES.join(", ")})`).argument("<value>", "New value").option("-c, --config-file <path>", "Path to a specific config file (overrides discovery)").examples(CONFIG_SET_EXAMPLES).trackedAction(context, async (key, value, options) => {
+  config2.command("set").description("Set a configuration value (writes to the discovered file, or to ~/.uipath/config.json by default)").argument("<key>", `Config key (${VALID_KEY_NAMES.join(", ")})`).argument("<value>", "New value").option("-c, --config-file <path>", "Path to a specific config file (overrides discovery)").examples(CONFIG_SET_EXAMPLES).trackedAction(context, async (key, rawValue, options) => {
     if (!(key in CONFIG_KEYS)) {
       OutputFormatter.error({
         Result: RESULTS.ValidationError,
@@ -70328,6 +70652,7 @@ function registerConfigCommand(program2, context) {
       return;
     }
     const def = CONFIG_KEYS[key];
+    const value = def.normalize ? def.normalize(rawValue) : rawValue;
     if (def.validValues !== undefined && !def.validValues.includes(value)) {
       OutputFormatter.error({
         Result: RESULTS.ValidationError,
@@ -70337,6 +70662,15 @@ function registerConfigCommand(program2, context) {
       context.exit(1);
       return;
     }
+    if (def.validate && !def.validate(value)) {
+      OutputFormatter.error({
+        Result: RESULTS.ValidationError,
+        Message: `Invalid value '${value}' for '${key}'`,
+        Instructions: def.valueHint ?? "See documentation for valid values."
+      });
+      context.exit(1);
+      return;
+    }
     const target = await resolveForWrite(options.configFile);
     const [opErr] = await catchError(withConfigLock(target.path, async () => {
       const rawConfig = await readConfigFileAt(target.path);
@@ -70363,11 +70697,12 @@ function registerConfigCommand(program2, context) {
     });
   });
 }
-var CONFIG_KEYS, VALID_KEY_NAMES, CONFIG_GET_EXAMPLES, CONFIG_SET_EXAMPLES, LOCK_STALE_MS = 1000, LOCK_RETRY_MS = 50, LOCK_TIMEOUT_MS = 1e4, LOCK_VERIFY_DELAY_MS = 25, lockToken = () => `${process.pid ?? 0}.${randomUUID2()}`, SECRET_WORD_TOKENS, REDACTED_VALUE = "<redacted>", SECRET_PATH_SET;
+var CONFIG_KEYS, VALID_KEY_NAMES, CONFIG_GET_EXAMPLES, CONFIG_SET_EXAMPLES, LOCK_STALE_MS2 = 1000, LOCK_RETRY_MS = 50, LOCK_TIMEOUT_MS = 1e4, LOCK_VERIFY_DELAY_MS = 25, lockToken = () => `${process.pid ?? 0}.${randomUUID3()}`, SECRET_WORD_TOKENS, REDACTED_VALUE = "<redacted>", SECRET_PATH_SET;
 var init_config = __esm(() => {
   init_src2();
   init_src();
   init_loadConfig();
+  init_versionPin();
   CONFIG_KEYS = {
     output: {
       path: ["core", "output"],
@@ -70383,6 +70718,13 @@ var init_config = __esm(() => {
       path: ["core", "updateChannel"],
       validValues: ["alpha", "beta", "stable"],
       description: "Release channel used to resolve tool updates"
+    },
+    version: {
+      path: ["core", "version"],
+      normalize: (v) => v.trim(),
+      validate: (v) => isValidVersionPin(v),
+      valueHint: "Use major.minor or major.minor.patch (e.g. 1.2 or 1.2.3).",
+      description: "Pinned platform version enforced by 'uip update' (CLI + tools)"
     }
   };
   VALID_KEY_NAMES = Object.keys(CONFIG_KEYS);
@@ -70551,7 +70893,8 @@ var DEFAULT_CLIENT_ID = "36dea5b8-e8bb-423d-8e7b-c808df8f1c00", AUTH_FILE_CONFIG
   if (!clientSecret && fileAuth.clientSecret) {
     clientSecret = fileAuth.clientSecret;
   }
-  const scopes = customScopes && customScopes.length > 0 ? customScopes : fileAuth.scopes && fileAuth.scopes.length > 0 ? fileAuth.scopes : DEFAULT_SCOPES;
+  const isExternalAppAuth = clientId !== DEFAULT_CLIENT_ID && Boolean(clientSecret);
+  const scopes = customScopes && customScopes.length > 0 ? customScopes : fileAuth.scopes && fileAuth.scopes.length > 0 ? fileAuth.scopes : isExternalAppAuth ? [] : DEFAULT_SCOPES;
   return {
     clientId,
     clientSecret,
@@ -70582,32 +70925,7 @@ var init_config2 = __esm(() => {
       this.name = "InvalidBaseUrlError";
     }
   };
-  DEFAULT_SCOPES = [
-    "offline_access",
-    "ProcessMining",
-    "OrchestratorApiUserAccess",
-    "StudioWebBackend",
-    "IdentityServerApi",
-    "ConnectionService",
-    "DataService",
-    "DataServiceApiUserAccess",
-    "DocumentUnderstanding",
-    "EnterpriseContextService",
-    "Directory",
-    "JamJamApi",
-    "LLMGateway",
-    "LLMOps",
-    "OMS",
-    "RCS.FolderAuthorization",
-    "RCS.TagsManagement",
-    "TestmanagerApiUserAccess",
-    "AutomationSolutions",
-    "StudioWebTypeCacheService",
-    "Docs.GPT.Search",
-    "Insights",
-    "ReferenceToken",
-    "Audit.Read"
-  ];
+  DEFAULT_SCOPES = ["openid", "profile", "offline_access"];
 });
 
 // ../../node_modules/oauth4webapi/build/index.js
@@ -71379,7 +71697,7 @@ var init_envAuth = __esm(() => {
 
 // ../../node_modules/@uipath/coreipc/index.js
 var require_coreipc = __commonJS((exports, module) => {
-  var __dirname = "/Users/alexandru.oltean/github/cli/node_modules/@uipath/coreipc";
+  var __dirname = "/home/runner/work/cli/cli/node_modules/@uipath/coreipc";
   /*! For license information please see index.js.LICENSE.txt */
   (function(e, t) {
     typeof exports == "object" && typeof module == "object" ? module.exports = t() : typeof define == "function" && define.amd ? define([], t) : typeof exports == "object" ? exports.ipc = t() : e.ipc = t();
@@ -89917,6 +90235,129 @@ function normalizeTokenRefreshFailure() {
 function normalizeTokenRefreshUnavailableFailure() {
   return "token refresh failed before authentication completed";
 }
+function errorMessage2(error51) {
+  return error51 instanceof Error ? error51.message : String(error51);
+}
+function computeExpirationThreshold(ensureTokenValidityMinutes) {
+  return new Date(Date.now() + (ensureTokenValidityMinutes ?? 0) * 60 * 1000);
+}
+async function runRefreshLocked(inputs) {
+  const {
+    absolutePath,
+    refreshToken: callerRefreshToken,
+    customAuthority,
+    ensureTokenValidityMinutes,
+    loadEnvFile,
+    saveEnvFile,
+    refreshFn,
+    resolveConfig
+  } = inputs;
+  const expirationThreshold = computeExpirationThreshold(ensureTokenValidityMinutes);
+  let fresh;
+  try {
+    fresh = await loadEnvFile({ envPath: absolutePath });
+  } catch (error51) {
+    return {
+      kind: "fail",
+      status: {
+        loginStatus: "Refresh Failed",
+        hint: "Could not read the auth file while refreshing. Retry, or run 'uip login' to re-authenticate.",
+        tokenRefresh: {
+          attempted: false,
+          success: false,
+          errorMessage: `auth file read failed: ${errorMessage2(error51)}`
+        }
+      }
+    };
+  }
+  const freshAccess = fresh.UIPATH_ACCESS_TOKEN;
+  const freshExp = freshAccess ? getTokenExpiration(freshAccess) : undefined;
+  if (freshAccess && freshExp && freshExp > expirationThreshold) {
+    return {
+      kind: "ok",
+      accessToken: freshAccess,
+      refreshToken: fresh.UIPATH_REFRESH_TOKEN ?? callerRefreshToken,
+      expiration: freshExp,
+      tokenRefresh: { attempted: false, success: true }
+    };
+  }
+  const tokenForIdP = fresh.UIPATH_REFRESH_TOKEN ?? callerRefreshToken;
+  let refreshedAccess;
+  let refreshedRefresh;
+  try {
+    const config2 = await resolveConfig({ customAuthority });
+    const refreshed = await refreshFn({
+      refreshToken: tokenForIdP,
+      tokenEndpoint: config2.tokenEndpoint,
+      clientId: config2.clientId,
+      expectedAuthority: customAuthority
+    });
+    refreshedAccess = refreshed.accessToken;
+    refreshedRefresh = refreshed.refreshToken;
+  } catch (error51) {
+    const isOAuthFailure = isTokenRefreshOAuthFailure(error51);
+    const hint = isOAuthFailure ? "Run 'uip login' to re-authenticate — the stored refresh token is invalid or expired." : "Token refresh failed. Check your network connection, then retry or run 'uip login' to re-authenticate.";
+    const message = isOAuthFailure ? normalizeTokenRefreshFailure() : normalizeTokenRefreshUnavailableFailure();
+    return {
+      kind: "fail",
+      status: {
+        loginStatus: "Refresh Failed",
+        hint,
+        tokenRefresh: {
+          attempted: true,
+          success: false,
+          errorMessage: message
+        }
+      }
+    };
+  }
+  const refreshedExp = getTokenExpiration(refreshedAccess);
+  if (!refreshedExp || refreshedExp <= new Date) {
+    return {
+      kind: "fail",
+      status: {
+        loginStatus: "Refresh Failed",
+        hint: "The identity server returned an unusable token. Run 'uip login' to re-authenticate.",
+        tokenRefresh: {
+          attempted: true,
+          success: false,
+          errorMessage: "refreshed token has no valid expiration claim"
+        }
+      }
+    };
+  }
+  try {
+    await saveEnvFile({
+      envPath: absolutePath,
+      data: {
+        UIPATH_ACCESS_TOKEN: refreshedAccess,
+        UIPATH_REFRESH_TOKEN: refreshedRefresh
+      },
+      merge: true
+    });
+    return {
+      kind: "ok",
+      accessToken: refreshedAccess,
+      refreshToken: refreshedRefresh,
+      expiration: refreshedExp,
+      tokenRefresh: { attempted: true, success: true }
+    };
+  } catch (error51) {
+    const msg = errorMessage2(error51);
+    return {
+      kind: "ok",
+      accessToken: refreshedAccess,
+      refreshToken: refreshedRefresh,
+      expiration: refreshedExp,
+      persistenceWarning: `Access token refreshed in memory but could not be written to ${absolutePath}: ${msg}. The next CLI invocation will fail until the file can be updated — run 'uip login' to re-authenticate.`,
+      tokenRefresh: {
+        attempted: true,
+        success: true,
+        errorMessage: `persistence failed: ${msg}`
+      }
+    };
+  }
+}
 var LoginStatusSource, getLoginStatusWithDeps = async (options = {}, deps = {}) => {
   const {
     resolveEnvFilePath = resolveEnvFilePathAsync,
@@ -89991,73 +90432,103 @@ var LoginStatusSource, getLoginStatusWithDeps = async (options = {}, deps = {})
   let refreshToken = credentials.UIPATH_REFRESH_TOKEN;
   let expiration = getTokenExpiration(accessToken);
   let persistenceWarning;
+  let lockReleaseFailed = false;
   let tokenRefresh;
-  const expirationThreshold = new Date(Date.now() + (ensureTokenValidityMinutes ?? 0) * 60 * 1000);
-  if (expiration && expiration <= expirationThreshold && refreshToken) {
-    let refreshedAccess;
-    let refreshedRefresh;
+  const outerThreshold = computeExpirationThreshold(ensureTokenValidityMinutes);
+  const tryGlobalCredsHint = async () => {
+    const fs7 = getFs2();
+    const globalPath = fs7.path.join(fs7.env.homedir(), envFilePath);
+    if (absolutePath === globalPath)
+      return;
+    if (!await fs7.exists(globalPath))
+      return;
     try {
-      const config2 = await resolveConfig({
-        customAuthority: credentials.UIPATH_URL
-      });
-      const refreshed = await refreshTokenFn({
-        refreshToken,
-        tokenEndpoint: config2.tokenEndpoint,
-        clientId: config2.clientId,
-        expectedAuthority: credentials.UIPATH_URL
-      });
-      refreshedAccess = refreshed.accessToken;
-      refreshedRefresh = refreshed.refreshToken;
+      const globalCreds = await loadEnvFile({ envPath: globalPath });
+      if (!globalCreds.UIPATH_ACCESS_TOKEN)
+        return;
+      const globalExp = getTokenExpiration(globalCreds.UIPATH_ACCESS_TOKEN);
+      if (globalExp && globalExp <= new Date)
+        return;
+      return `Local credentials file at ${absolutePath} has expired credentials. Valid credentials exist in ${globalPath}. Remove the local file or run 'uip login' to re-authenticate.`;
+    } catch {
+      return;
+    }
+  };
+  if (expiration && expiration <= outerThreshold && refreshToken) {
+    let release;
+    try {
+      release = await getFs2().acquireLock(absolutePath);
     } catch (error51) {
-      const isOAuthFailure = isTokenRefreshOAuthFailure(error51);
-      const hint = isOAuthFailure ? "Run 'uip login' to re-authenticate — the stored refresh token is invalid or expired." : "Token refresh failed. Check your network connection, then retry or run 'uip login' to re-authenticate.";
-      const errorMessage2 = isOAuthFailure ? normalizeTokenRefreshFailure() : normalizeTokenRefreshUnavailableFailure();
+      const msg = errorMessage2(error51);
+      const globalHint = await tryGlobalCredsHint();
+      if (globalHint) {
+        return {
+          loginStatus: "Expired",
+          accessToken,
+          refreshToken,
+          baseUrl: credentials.UIPATH_URL,
+          organizationName: credentials.UIPATH_ORGANIZATION_NAME,
+          organizationId: credentials.UIPATH_ORGANIZATION_ID,
+          tenantName: credentials.UIPATH_TENANT_NAME,
+          tenantId: credentials.UIPATH_TENANT_ID,
+          expiration,
+          source: "file" /* File */,
+          hint: globalHint,
+          tokenRefresh: {
+            attempted: false,
+            success: false,
+            errorMessage: `lock acquisition failed: ${msg}`
+          }
+        };
+      }
       return {
         loginStatus: "Refresh Failed",
-        hint,
+        hint: "Could not acquire the auth-file lock — too many concurrent `uip` processes, or a permission issue on the auth directory. Retry, or run 'uip login' to re-authenticate.",
         tokenRefresh: {
-          attempted: true,
+          attempted: false,
           success: false,
-          errorMessage: errorMessage2
+          errorMessage: `lock acquisition failed: ${msg}`
         }
       };
     }
-    const refreshedExp = getTokenExpiration(refreshedAccess);
-    if (!refreshedExp || refreshedExp <= new Date) {
-      return {
-        loginStatus: "Refresh Failed",
-        hint: "The identity server returned an unusable token. Run 'uip login' to re-authenticate.",
-        tokenRefresh: {
-          attempted: true,
-          success: false,
-          errorMessage: "refreshed token has no valid expiration claim"
+    let lockedFailure;
+    try {
+      const outcome = await runRefreshLocked({
+        absolutePath,
+        refreshToken,
+        customAuthority: credentials.UIPATH_URL,
+        ensureTokenValidityMinutes,
+        loadEnvFile,
+        saveEnvFile,
+        refreshFn: refreshTokenFn,
+        resolveConfig
+      });
+      if (outcome.kind === "fail") {
+        lockedFailure = outcome.status;
+      } else {
+        accessToken = outcome.accessToken;
+        refreshToken = outcome.refreshToken;
+        expiration = outcome.expiration;
+        tokenRefresh = outcome.tokenRefresh;
+        if (outcome.persistenceWarning) {
+          persistenceWarning = outcome.persistenceWarning;
         }
-      };
+      }
+    } finally {
+      try {
+        await release();
+      } catch {
+        lockReleaseFailed = true;
+      }
     }
-    accessToken = refreshedAccess;
-    refreshToken = refreshedRefresh;
-    expiration = refreshedExp;
-    try {
-      await saveEnvFile({
-        envPath: absolutePath,
-        data: {
-          UIPATH_ACCESS_TOKEN: accessToken,
-          UIPATH_REFRESH_TOKEN: refreshToken
-        },
-        merge: true
-      });
-      tokenRefresh = {
-        attempted: true,
-        success: true
-      };
-    } catch (error51) {
-      const msg = error51 instanceof Error ? error51.message : String(error51);
-      persistenceWarning = `Access token refreshed in memory but could not be written to ${absolutePath}: ${msg}. The next CLI invocation will fail until the file can be updated — run 'uip login' to re-authenticate.`;
-      tokenRefresh = {
-        attempted: true,
-        success: true,
-        errorMessage: `persistence failed: ${msg}`
-      };
+    if (lockedFailure) {
+      const globalHint = await tryGlobalCredsHint();
+      const base = globalHint ? {
+        ...lockedFailure,
+        loginStatus: "Expired",
+        hint: globalHint
+      } : lockedFailure;
+      return lockReleaseFailed ? { ...base, lockReleaseFailed: true } : base;
     }
   }
   const result = {
@@ -90072,23 +90543,13 @@ var LoginStatusSource, getLoginStatusWithDeps = async (options = {}, deps = {})
     expiration,
     source: "file" /* File */,
     ...persistenceWarning ? { hint: persistenceWarning, persistenceFailed: true } : {},
+    ...lockReleaseFailed ? { lockReleaseFailed: true } : {},
     ...tokenRefresh ? { tokenRefresh } : {}
   };
   if (result.loginStatus === "Expired") {
-    const fs7 = getFs2();
-    const globalPath = fs7.path.join(fs7.env.homedir(), envFilePath);
-    if (absolutePath !== globalPath && await fs7.exists(globalPath)) {
-      try {
-        const globalCreds = await loadEnvFile({
-          envPath: globalPath
-        });
-        if (globalCreds.UIPATH_ACCESS_TOKEN) {
-          const globalExp = getTokenExpiration(globalCreds.UIPATH_ACCESS_TOKEN);
-          if (!globalExp || globalExp > new Date) {
-            result.hint = `Local credentials file at ${absolutePath} has expired credentials. Valid credentials exist in ${globalPath}. Remove the local file or run 'uip login' to re-authenticate.`;
-          }
-        }
-      } catch {}
+    const globalHint = await tryGlobalCredsHint();
+    if (globalHint) {
+      result.hint = globalHint;
     }
   }
   return result;
@@ -90163,9 +90624,11 @@ var clientCredentialsLogin = async ({
   const params = {
     grant_type: "client_credentials",
     client_id: config2.clientId,
-    client_secret: config2.clientSecret ?? "",
-    scope: config2.scopes.join(" ")
+    client_secret: config2.clientSecret ?? ""
   };
+  if (config2.scopes.length > 0) {
+    params.scope = config2.scopes.join(" ");
+  }
   const tokenResponse = await fetch(config2.tokenEndpoint, {
     method: "POST",
     headers: {
@@ -90375,11 +90838,25 @@ var interactiveLoginWithDeps = async (options, deps) => {
       searchDir = parentDir;
     }
   }
-  await saveEnvFile({
-    envPath: savePath,
-    data: credentials,
-    merge: true
-  });
+  let saveRelease;
+  try {
+    if (typeof fs7.acquireLock === "function") {
+      saveRelease = await fs7.acquireLock(savePath);
+    }
+  } catch {
+    saveRelease = undefined;
+  }
+  try {
+    await saveEnvFile({
+      envPath: savePath,
+      data: credentials,
+      merge: true
+    });
+  } finally {
+    if (saveRelease) {
+      await saveRelease().catch(() => {});
+    }
+  }
   const reportedPath = fs7.path.isAbsolute(savePath) ? savePath : fs7.path.join(fs7.env.homedir(), savePath);
   emit({
     type: "saved",
@@ -90409,7 +90886,21 @@ async function logoutWithDeps(options, deps = {}) {
   const fs7 = getFs2();
   const { absolutePath } = await resolveEnvFilePath(options.file);
   if (absolutePath && await fs7.exists(absolutePath)) {
-    await fs7.rm(absolutePath);
+    let release;
+    try {
+      if (typeof fs7.acquireLock === "function") {
+        release = await fs7.acquireLock(absolutePath);
+      }
+    } catch {
+      release = undefined;
+    }
+    try {
+      await fs7.rm(absolutePath);
+    } finally {
+      if (release) {
+        await release().catch(() => {});
+      }
+    }
     return {
       success: true,
       message: `Logged out successfully. Removed ${absolutePath}`,
@@ -90430,81 +90921,6 @@ var init_logout = __esm(() => {
   init_envFile();
 });
 
-// ../auth/src/strategies/browser-strategy.ts
-var exports_browser_strategy = {};
-__export(exports_browser_strategy, {
-  BrowserAuthStrategy: () => BrowserAuthStrategy
-});
-
-class BrowserAuthStrategy {
-  async execute(url2, _redirectUri, expectedState) {
-    const global5 = getGlobalThis();
-    if (!global5?.window) {
-      throw new Error("Browser environment required for authentication");
-    }
-    const screenWidth = global5.window.screen?.width ?? 1024;
-    const screenHeight = global5.window.screen?.height ?? 768;
-    const width = 600;
-    const height4 = 700;
-    const left = screenWidth / 2 - width / 2;
-    const top = screenHeight / 2 - height4 / 2;
-    if (!global5.window.open) {
-      throw new Error("window.open is not available");
-    }
-    const popupResult = global5.window.open(url2, "uip_auth", `width=${width},height=${height4},left=${left},top=${top},resizable=yes,scrollbars=yes,status=yes`);
-    const popup = popupResult;
-    if (!popup) {
-      throw new Error(`Authentication popup was blocked by your browser.
-
-` + `To continue:
-` + `1. Look for a popup blocker icon in your address bar
-` + `2. Allow popups for this site
-` + `3. Try logging in again
-
-` + "If using an ad blocker, you may need to temporarily disable it.");
-    }
-    return new Promise((resolve2, reject) => {
-      const messageHandler = (event) => {
-        if (event.data?.type === "UIP_AUTH_CODE" && event.data.code) {
-          if (event.data.state !== expectedState) {
-            cleanup();
-            reject(new Error("OAuth state mismatch — the callback state does not match the expected value. " + "This may indicate a CSRF attack. Please try signing in again."));
-            popup.close();
-            return;
-          }
-          cleanup();
-          resolve2(event.data.code);
-          popup.close();
-        } else if (event.data?.type === "UIP_AUTH_ERROR") {
-          cleanup();
-          const errorMsg = event.data.error || "Authentication failed";
-          reject(new Error(`Authentication failed: ${errorMsg}
-
-` + "Please check your credentials and try again. " + "If the problem persists, verify your UiPath account is active."));
-          popup.close();
-        }
-      };
-      const cleanup = () => {
-        global5.window?.removeEventListener?.("message", messageHandler);
-        if (timer)
-          clearInterval(timer);
-      };
-      if (global5.window?.addEventListener) {
-        global5.window.addEventListener("message", messageHandler);
-      }
-      const timer = setInterval(() => {
-        if (popup.closed) {
-          cleanup();
-          reject(new Error(`Authentication was cancelled.
-
-` + "The authentication popup was closed before completing the login process. " + "Please try again and complete the authentication flow."));
-        }
-      }, 1000);
-    });
-  }
-}
-var init_browser_strategy = () => {};
-
 // ../auth/src/getBaseHtml.ts
 var getBaseHtml = ({ title, message, type: type2 }) => {
   const icon = type2 === "success" ? "✓" : "✕";
@@ -90651,7 +91067,7 @@ var getBaseHtml = ({ title, message, type: type2 }) => {
 };
 
 // ../auth/src/server.ts
-var startServer = async ({
+var AUTH_TIMEOUT_ERROR_CODE = "EAUTHTIMEOUT", startServer = async ({
   redirectUri,
   timeoutMs = DEFAULT_AUTH_TIMEOUT_MS2,
   onListening
@@ -90722,7 +91138,18 @@ var startServer = async ({
       reject(new Error("No authorization code received"));
       return;
     });
-    server.listen(Number(redirectUri.port), redirectUri.hostname, () => {
+    const timeoutHandle = setTimeout(() => {
+      server.close();
+      const err = new Error("Authentication timeout");
+      err.code = AUTH_TIMEOUT_ERROR_CODE;
+      reject(err);
+    }, timeoutMs);
+    const bindHost = redirectUri.hostname === "localhost" ? "127.0.0.1" : redirectUri.hostname;
+    server.on("error", (err) => {
+      clearTimeout(timeoutHandle);
+      reject(err);
+    });
+    server.listen(Number(redirectUri.port), bindHost, () => {
       if (onListening) {
         Promise.resolve(onListening()).catch((err) => {
           server.close();
@@ -90731,10 +91158,6 @@ var startServer = async ({
         });
       }
     });
-    const timeoutHandle = setTimeout(() => {
-      server.close();
-      reject(new Error("Authentication timeout"));
-    }, timeoutMs);
     server.on("close", () => {
       clearTimeout(timeoutHandle);
     });
@@ -90744,6 +91167,81 @@ var init_server = __esm(() => {
   init_constants2();
 });
 
+// ../auth/src/strategies/browser-strategy.ts
+var exports_browser_strategy = {};
+__export(exports_browser_strategy, {
+  BrowserAuthStrategy: () => BrowserAuthStrategy
+});
+
+class BrowserAuthStrategy {
+  async execute(url2, _redirectUri, expectedState) {
+    const global5 = getGlobalThis();
+    if (!global5?.window) {
+      throw new Error("Browser environment required for authentication");
+    }
+    const screenWidth = global5.window.screen?.width ?? 1024;
+    const screenHeight = global5.window.screen?.height ?? 768;
+    const width = 600;
+    const height4 = 700;
+    const left = screenWidth / 2 - width / 2;
+    const top = screenHeight / 2 - height4 / 2;
+    if (!global5.window.open) {
+      throw new Error("window.open is not available");
+    }
+    const popupResult = global5.window.open(url2, "uip_auth", `width=${width},height=${height4},left=${left},top=${top},resizable=yes,scrollbars=yes,status=yes`);
+    const popup = popupResult;
+    if (!popup) {
+      throw new Error(`Authentication popup was blocked by your browser.
+
+` + `To continue:
+` + `1. Look for a popup blocker icon in your address bar
+` + `2. Allow popups for this site
+` + `3. Try logging in again
+
+` + "If using an ad blocker, you may need to temporarily disable it.");
+    }
+    return new Promise((resolve2, reject) => {
+      const messageHandler = (event) => {
+        if (event.data?.type === "UIP_AUTH_CODE" && event.data.code) {
+          if (event.data.state !== expectedState) {
+            cleanup();
+            reject(new Error("OAuth state mismatch — the callback state does not match the expected value. " + "This may indicate a CSRF attack. Please try signing in again."));
+            popup.close();
+            return;
+          }
+          cleanup();
+          resolve2(event.data.code);
+          popup.close();
+        } else if (event.data?.type === "UIP_AUTH_ERROR") {
+          cleanup();
+          const errorMsg = event.data.error || "Authentication failed";
+          reject(new Error(`Authentication failed: ${errorMsg}
+
+` + "Please check your credentials and try again. " + "If the problem persists, verify your UiPath account is active."));
+          popup.close();
+        }
+      };
+      const cleanup = () => {
+        global5.window?.removeEventListener?.("message", messageHandler);
+        if (timer)
+          clearInterval(timer);
+      };
+      if (global5.window?.addEventListener) {
+        global5.window.addEventListener("message", messageHandler);
+      }
+      const timer = setInterval(() => {
+        if (popup.closed) {
+          cleanup();
+          reject(new Error(`Authentication was cancelled.
+
+` + "The authentication popup was closed before completing the login process. " + "Please try again and complete the authentication flow."));
+        }
+      }, 1000);
+    });
+  }
+}
+var init_browser_strategy = () => {};
+
 // ../auth/src/strategies/node-strategy.ts
 var exports_node_strategy = {};
 __export(exports_node_strategy, {
@@ -90830,7 +91328,8 @@ __export(exports_src2, {
   ENV_AUTH_ENABLE_VAR: () => ENV_AUTH_ENABLE_VAR,
   ENFORCE_ROBOT_AUTH_VAR: () => ENFORCE_ROBOT_AUTH_VAR,
   DEFAULT_ENV_FILENAME: () => DEFAULT_ENV_FILENAME,
-  DEFAULT_AUTH_FILENAME: () => DEFAULT_AUTH_FILENAME
+  DEFAULT_AUTH_FILENAME: () => DEFAULT_AUTH_FILENAME,
+  AUTH_TIMEOUT_ERROR_CODE: () => AUTH_TIMEOUT_ERROR_CODE
 });
 var authenticate = async ({
   baseUrl,
@@ -90905,6 +91404,7 @@ var init_src3 = __esm(() => {
   init_config2();
   init_envAuth();
   init_selectTenant();
+  init_server();
   init_envFile();
   init_jwt();
   init_authContext();
@@ -91082,6 +91582,25 @@ function resolveAuthFilePath(folder) {
   }
   return DEFAULT_ENV_FILENAME;
 }
+function instructionsForLoginError(error51, message) {
+  if (/[\r\n]/.test(message)) {
+    return `See message above for details. ${ENV_AUTH_FALLBACK_HINT}`;
+  }
+  const code = error51 instanceof Object && "code" in error51 ? error51.code : undefined;
+  if (code === "EPERM" || code === "EACCES") {
+    return `The callback listener on port 8104 was blocked by the OS or sandbox (${String(code)}). Grant local-network permission or run outside the sandbox, then try again. ${ENV_AUTH_FALLBACK_HINT}`;
+  }
+  if (code === "EADDRINUSE") {
+    return `Port 8104 is already in use by another process — close any other 'uip login' session, free the port, then try again. ${ENV_AUTH_FALLBACK_HINT}`;
+  }
+  if (code === "EADDRNOTAVAIL") {
+    return `The callback listener could not bind to the loopback address. Check that 127.0.0.1 resolves locally, then try again. ${ENV_AUTH_FALLBACK_HINT}`;
+  }
+  if (code === AUTH_TIMEOUT_ERROR_CODE) {
+    return `The browser did not return an authorization code within the timeout. Make sure your default browser opened, complete the sign-in, then retry. ${ENV_AUTH_FALLBACK_HINT}`;
+  }
+  return `Inspect command arguments and message and try again. ${ENV_AUTH_FALLBACK_HINT}`;
+}
 function instructionsForStatusError(err) {
   if (err instanceof EnvAuthConfigError) {
     return "Check the UIPATH_CLI_* environment variables and re-run.";
@@ -91215,7 +91734,7 @@ function registerLoginCommand(program2, context) {
       OutputFormatter.error({
         Result: RESULTS.AuthenticationError,
         Message: message,
-        Instructions: /[\r\n]/.test(message) ? "See message above for details." : "Inspect command arguments and message and try again.",
+        Instructions: instructionsForLoginError(error51, message),
         ...httpStatus ? { Context: { httpStatus } } : {}
       });
       context.exit(2);
@@ -91289,10 +91808,12 @@ function registerLoginCommand(program2, context) {
     statusData["Expiration Date"] = status.expiration;
     if (status.hint) {
       statusData.Hint = status.hint;
+    } else if (status.loginStatus !== "Logged in") {
+      statusData.Hint = defaultRefreshFailureInstructions(status);
     }
     OutputFormatter.success({
       Result: RESULTS.Success,
-      Code: "LogIn",
+      Code: "LoginStatus",
       Data: statusData
     });
   });
@@ -91379,7 +91900,36 @@ function registerLoginCommand(program2, context) {
       return;
     }
     const envFilePath = resolveAuthFilePath(options.file);
-    const [statusError, status] = await catchError(auth.getLoginStatus({ envFilePath }));
+    const [locationError, location] = await catchError(resolveEnvFileLocationAsync(envFilePath));
+    if (locationError) {
+      OutputFormatter.error({
+        Result: RESULTS.Failure,
+        Message: `Failed to locate credentials file: ${locationError.message}`,
+        Instructions: "Check filesystem permissions on the current directory and your home directory, then re-run."
+      });
+      context.exit(1);
+      return;
+    }
+    if (!location.exists) {
+      if (location.unusable) {
+        OutputFormatter.error({
+          Result: RESULTS.Failure,
+          Message: `Credentials file at ${location.absolutePath} is not usable: ${location.unusable.message}`,
+          Instructions: location.unusable.reason === "not-a-file" ? `Path resolves to a directory or special file. Move or rename ${location.absolutePath}, then run 'uip login' to recreate the credentials file.` : `Check filesystem permissions on ${location.absolutePath} and re-run.`
+        });
+        context.exit(1);
+        return;
+      }
+      OutputFormatter.error({
+        Result: RESULTS.AuthenticationError,
+        Message: "Not authenticated",
+        Instructions: "Run 'uip login' to authenticate first."
+      });
+      context.exit(2);
+      return;
+    }
+    const resolvedEnvFilePath = location.absolutePath;
+    const [statusError, status] = await catchError(auth.getLoginStatus({ envFilePath: resolvedEnvFilePath }));
     if (statusError) {
       OutputFormatter.error({
         Result: RESULTS.ConfigError,
@@ -91395,6 +91945,7 @@ function registerLoginCommand(program2, context) {
         Message: "Not authenticated",
         Instructions: status.hint || "Run 'uip login' to authenticate first."
       });
+      context.exit(2);
       return;
     }
     const [fetchError, data] = await catchError(auth.fetchTenants(status.baseUrl, status.accessToken, status.organizationId));
@@ -91416,7 +91967,7 @@ function registerLoginCommand(program2, context) {
       });
       return;
     }
-    const [saveError] = await catchError(auth.saveTenantSelection(envFilePath, matchedTenant.name, matchedTenant.id));
+    const [saveError] = await catchError(auth.saveTenantSelection(resolvedEnvFilePath, matchedTenant.name, matchedTenant.id));
     if (saveError) {
       OutputFormatter.error({
         Result: RESULTS.Failure,
@@ -91494,7 +92045,7 @@ function emitAuthEnv() {
     Data: data
   });
 }
-var LOGIN_EXAMPLES, LOGIN_STATUS_EXAMPLES, LOGIN_REFRESH_EXAMPLES, LOGIN_TENANT_LIST_EXAMPLES, LOGIN_TENANT_SET_EXAMPLES, LOGIN_WHICH_EXAMPLES;
+var ENV_AUTH_FALLBACK_HINT = "Headless? Set UIPATH_CLI_ENABLE_ENV_AUTH=true with UIPATH_CLI_AUTH_TOKEN, UIPATH_CLI_ORGANIZATION_NAME, UIPATH_CLI_ORGANIZATION_ID, UIPATH_CLI_TENANT_NAME, and UIPATH_CLI_TENANT_ID to skip the browser flow.", LOGIN_EXAMPLES, LOGIN_STATUS_EXAMPLES, LOGIN_REFRESH_EXAMPLES, LOGIN_TENANT_LIST_EXAMPLES, LOGIN_TENANT_SET_EXAMPLES, LOGIN_WHICH_EXAMPLES;
 var init_login = __esm(() => {
   init_src3();
   init_src2();
@@ -91532,7 +92083,7 @@ var init_login = __esm(() => {
       Description: "Show current login status",
       Command: "uip login status",
       Output: {
-        Code: "LogIn",
+        Code: "LoginStatus",
         Data: {
           Status: "Logged in",
           Organization: "my-org",
@@ -91830,7 +92381,7 @@ function introspectCommands(program2) {
     }
   }
   lines.push(`
-Global Options (can be used with any command):`, "  --output <table|json|yaml|plain>: Output format (default: json)", "  --output-filter <expression>: JMESPath expression to filter output", "  --log-level <debug|info|warn|error>: Log level threshold (default: info)", "  --log-file <path>: Write logs to file instead of stderr", `
+Global Options (can be used with any command):`, "  --output <table|json|yaml|plain>: Output format (default: json)", "  --output-filter <expression>: JMESPath expression applied to the Data field of the response envelope", "  --log-level <debug|info|warn|error>: Log level threshold (default: info)", "  --log-file <path>: Write logs to file instead of stderr", `
 Pass the command without the 'uip' prefix. Example: "login status --output json"`, `Filter example: "tools list --output-filter 'Data[].name'"`);
   return lines.join(`
 `);
@@ -92290,15 +92841,15 @@ var makeIssue = (params) => {
       message: issueData.message
     };
   }
-  let errorMessage2 = "";
+  let errorMessage3 = "";
   const maps = errorMaps.filter((m) => !!m).slice().reverse();
   for (const map3 of maps) {
-    errorMessage2 = map3(fullIssue, { data, defaultError: errorMessage2 }).message;
+    errorMessage3 = map3(fullIssue, { data, defaultError: errorMessage3 }).message;
   }
   return {
     ...issueData,
     path: fullPath,
-    message: errorMessage2
+    message: errorMessage3
   };
 }, INVALID, DIRTY = (value) => ({ status: "dirty", value }), OK = (value) => ({ status: "valid", value }), isAborted = (x) => x.status === "aborted", isDirty = (x) => x.status === "dirty", isValid = (x) => x.status === "valid", isAsync = (x) => typeof Promise !== "undefined" && x instanceof Promise;
 var init_parseUtil = __esm(() => {
@@ -96790,19 +97341,19 @@ var init_Refs = __esm(() => {
 });
 
 // ../../node_modules/zod-to-json-schema/dist/esm/errorMessages.js
-function addErrorMessage(res, key, errorMessage2, refs) {
+function addErrorMessage(res, key, errorMessage3, refs) {
   if (!refs?.errorMessages)
     return;
-  if (errorMessage2) {
+  if (errorMessage3) {
     res.errorMessage = {
       ...res.errorMessage,
-      [key]: errorMessage2
+      [key]: errorMessage3
     };
   }
 }
-function setResponseValueAndErrors(res, key, value, errorMessage2, refs) {
+function setResponseValueAndErrors(res, key, value, errorMessage3, refs) {
   res[key] = value;
-  addErrorMessage(res, key, errorMessage2, refs);
+  addErrorMessage(res, key, errorMessage3, refs);
 }
 
 // ../../node_modules/zod-to-json-schema/dist/esm/getRelativePath.js
@@ -98224,8 +98775,8 @@ class Protocol {
                   if (queuedMessage.type === "response") {
                     resolver(message);
                   } else {
-                    const errorMessage2 = message;
-                    const error51 = new McpError(errorMessage2.error.code, errorMessage2.error.message, errorMessage2.error.data);
+                    const errorMessage3 = message;
+                    const error51 = new McpError(errorMessage3.error.code, errorMessage3.error.message, errorMessage3.error.data);
                     resolver(error51);
                   }
                 } else {
@@ -105812,23 +106363,23 @@ var init_server3 = __esm(() => {
         const wrappedHandler = async (request, extra) => {
           const validatedRequest = safeParse3(CallToolRequestSchema, request);
           if (!validatedRequest.success) {
-            const errorMessage2 = validatedRequest.error instanceof Error ? validatedRequest.error.message : String(validatedRequest.error);
-            throw new McpError(ErrorCode.InvalidParams, `Invalid tools/call request: ${errorMessage2}`);
+            const errorMessage3 = validatedRequest.error instanceof Error ? validatedRequest.error.message : String(validatedRequest.error);
+            throw new McpError(ErrorCode.InvalidParams, `Invalid tools/call request: ${errorMessage3}`);
           }
           const { params } = validatedRequest.data;
           const result = await Promise.resolve(handler(request, extra));
           if (params.task) {
             const taskValidationResult = safeParse3(CreateTaskResultSchema, result);
             if (!taskValidationResult.success) {
-              const errorMessage2 = taskValidationResult.error instanceof Error ? taskValidationResult.error.message : String(taskValidationResult.error);
-              throw new McpError(ErrorCode.InvalidParams, `Invalid task creation result: ${errorMessage2}`);
+              const errorMessage3 = taskValidationResult.error instanceof Error ? taskValidationResult.error.message : String(taskValidationResult.error);
+              throw new McpError(ErrorCode.InvalidParams, `Invalid task creation result: ${errorMessage3}`);
             }
             return taskValidationResult.data;
           }
           const validationResult = safeParse3(CallToolResultSchema, result);
           if (!validationResult.success) {
-            const errorMessage2 = validationResult.error instanceof Error ? validationResult.error.message : String(validationResult.error);
-            throw new McpError(ErrorCode.InvalidParams, `Invalid tools/call result: ${errorMessage2}`);
+            const errorMessage3 = validationResult.error instanceof Error ? validationResult.error.message : String(validationResult.error);
+            throw new McpError(ErrorCode.InvalidParams, `Invalid tools/call result: ${errorMessage3}`);
           }
           return validationResult.data;
         };
@@ -106498,12 +107049,12 @@ class McpServer {
     });
     this._toolHandlersInitialized = true;
   }
-  createToolError(errorMessage2) {
+  createToolError(errorMessage3) {
     return {
       content: [
         {
           type: "text",
-          text: errorMessage2
+          text: errorMessage3
         }
       ],
       isError: true
@@ -106518,8 +107069,8 @@ class McpServer {
     const parseResult = await safeParseAsync3(schemaToParse, args);
     if (!parseResult.success) {
       const error51 = "error" in parseResult ? parseResult.error : "Unknown error";
-      const errorMessage2 = getParseErrorMessage(error51);
-      throw new McpError(ErrorCode.InvalidParams, `Input validation error: Invalid arguments for tool ${toolName}: ${errorMessage2}`);
+      const errorMessage3 = getParseErrorMessage(error51);
+      throw new McpError(ErrorCode.InvalidParams, `Input validation error: Invalid arguments for tool ${toolName}: ${errorMessage3}`);
     }
     return parseResult.data;
   }
@@ -106540,8 +107091,8 @@ class McpServer {
     const parseResult = await safeParseAsync3(outputObj, result.structuredContent);
     if (!parseResult.success) {
       const error51 = "error" in parseResult ? parseResult.error : "Unknown error";
-      const errorMessage2 = getParseErrorMessage(error51);
-      throw new McpError(ErrorCode.InvalidParams, `Output validation error: Invalid structured content for tool ${toolName}: ${errorMessage2}`);
+      const errorMessage3 = getParseErrorMessage(error51);
+      throw new McpError(ErrorCode.InvalidParams, `Output validation error: Invalid structured content for tool ${toolName}: ${errorMessage3}`);
     }
   }
   async executeToolHandler(tool, args, extra) {
@@ -106743,8 +107294,8 @@ class McpServer {
         const parseResult = await safeParseAsync3(argsObj, request.params.arguments);
         if (!parseResult.success) {
           const error51 = "error" in parseResult ? parseResult.error : "Unknown error";
-          const errorMessage2 = getParseErrorMessage(error51);
-          throw new McpError(ErrorCode.InvalidParams, `Invalid arguments for prompt ${request.params.name}: ${errorMessage2}`);
+          const errorMessage3 = getParseErrorMessage(error51);
+          throw new McpError(ErrorCode.InvalidParams, `Invalid arguments for prompt ${request.params.name}: ${errorMessage3}`);
         }
         const args = parseResult.data;
         const cb = prompt.callback;
@@ -107606,9 +108157,17 @@ var init_send_feedback = __esm(() => {
   ];
 });
 
+// src/commands/skills/agents/autopilot.ts
+var def;
+var init_autopilot = __esm(() => {
+  def = {
+    localSubdir: [".autopilot", "skills"]
+  };
+});
+
 // src/commands/skills/contentStore.ts
 import { spawn } from "node:child_process";
-import { randomUUID as randomUUID3 } from "node:crypto";
+import { randomUUID as randomUUID4 } from "node:crypto";
 async function fetchSkillsTo(targetPath, rootDir) {
   const fs7 = getFileSystem();
   let needsClone = true;
@@ -107802,7 +108361,7 @@ async function downloadAndExtractZip(storePath) {
   if (!response.ok) {
     throw new Error(`Failed to download zip: ${response.status}`);
   }
-  const zipPath = fs7.path.join(fs7.env.tmpdir(), `uipath-skills-${randomUUID3()}.zip`);
+  const zipPath = fs7.path.join(fs7.env.tmpdir(), `uipath-skills-${randomUUID4()}.zip`);
   const arrayBuffer = await response.arrayBuffer();
   await fs7.writeFile(zipPath, Buffer.from(arrayBuffer));
   try {
@@ -107935,13 +108494,13 @@ async function enableMarketplaceAutoUpdate() {
   }
   logger.info(`  claude: enabled auto-update for marketplace ${MARKETPLACE_NAME}`);
 }
-var MARKETPLACE_SOURCE = "UiPath/skills", MARKETPLACE_NAME = "uipath-marketplace", PLUGIN_NAME = "uipath", PLUGIN_REF, def;
+var MARKETPLACE_SOURCE = "UiPath/skills", MARKETPLACE_NAME = "uipath-marketplace", PLUGIN_NAME = "uipath", PLUGIN_REF, def2;
 var init_claude = __esm(() => {
   init_src2();
   init_src();
   init_contentStore();
   PLUGIN_REF = `${PLUGIN_NAME}@${MARKETPLACE_NAME}`;
-  def = {
+  def2 = {
     localSubdir: [".claude", "skills"],
     globalOnly: true,
     destinationHint: () => "installed via `claude plugin install`",
@@ -107968,41 +108527,41 @@ var init_claude = __esm(() => {
 });
 
 // src/commands/skills/agents/codex.ts
-var def2;
+var def3;
 var init_codex = __esm(() => {
-  def2 = {
+  def3 = {
     localSubdir: [".agents", "skills"]
   };
 });
 
 // src/commands/skills/agents/copilot.ts
-var def3;
+var def4;
 var init_copilot = __esm(() => {
-  def3 = {
+  def4 = {
     localSubdir: [".github", "skills"]
   };
 });
 
 // src/commands/skills/agents/cursor.ts
-var def4;
+var def5;
 var init_cursor = __esm(() => {
-  def4 = {
+  def5 = {
     localSubdir: [".cursor", "skills"]
   };
 });
 
 // src/commands/skills/agents/gemini.ts
-var def5;
+var def6;
 var init_gemini = __esm(() => {
-  def5 = {
+  def6 = {
     localSubdir: [".gemini", "skills"]
   };
 });
 
 // src/commands/skills/agents/opencode.ts
-var def6;
+var def7;
 var init_opencode = __esm(() => {
-  def6 = {
+  def7 = {
     localSubdir: [".opencode", "skills"],
     globalSubdir: [".config", "opencode", "skills"]
   };
@@ -108010,8 +108569,8 @@ var init_opencode = __esm(() => {
 
 // src/commands/skills/agents/index.ts
 function subdirFor(agent, isLocal) {
-  const def7 = AGENT_DEFS[agent];
-  return isLocal ? def7.localSubdir : def7.globalSubdir ?? def7.localSubdir;
+  const def8 = AGENT_DEFS[agent];
+  return isLocal ? def8.localSubdir : def8.globalSubdir ?? def8.localSubdir;
 }
 function getSkillsDir(agent, rootDir, isLocal) {
   const fs7 = getFileSystem();
@@ -108056,6 +108615,7 @@ var AGENT_DEFS;
 var init_agents = __esm(() => {
   init_src2();
   init_src();
+  init_autopilot();
   init_claude();
   init_codex();
   init_copilot();
@@ -108063,12 +108623,13 @@ var init_agents = __esm(() => {
   init_gemini();
   init_opencode();
   AGENT_DEFS = {
-    claude: def,
-    cursor: def4,
-    copilot: def3,
-    gemini: def5,
-    codex: def2,
-    opencode: def6
+    claude: def2,
+    cursor: def5,
+    copilot: def4,
+    gemini: def6,
+    codex: def3,
+    opencode: def7,
+    autopilot: def
   };
 });
 
@@ -108538,7 +109099,8 @@ var init_prompt = __esm(() => {
     "copilot",
     "gemini",
     "codex",
-    "opencode"
+    "opencode",
+    "autopilot"
   ];
   AGENT_DISPLAY_NAMES = {
     claude: "Claude Code (Plugin)",
@@ -108546,7 +109108,8 @@ var init_prompt = __esm(() => {
     copilot: "GitHub Copilot",
     gemini: "Gemini CLI",
     codex: "Codex",
-    opencode: "OpenCode"
+    opencode: "OpenCode",
+    autopilot: "UiPath Autopilot"
   };
 });
 
@@ -108597,8 +109160,8 @@ async function resolveSkillsContext(options, operation) {
 }
 async function runOneAgent(agent, operation, resolved) {
   const { rootDir, storePath, selectedSkills, isLocal } = resolved;
-  const def7 = AGENT_DEFS[agent];
-  const customHook = operation === "update" ? def7.update ?? def7.install : def7.install;
+  const def8 = AGENT_DEFS[agent];
+  const customHook = operation === "update" ? def8.update ?? def8.install : def8.install;
   if (customHook) {
     const [installError] = await catchError(customHook({ skills: selectedSkills, rootDir, storePath, isLocal }));
     if (installError) {
@@ -108815,9 +109378,9 @@ function registerUninstallCommand(skillsCommand) {
     logger.info(`Uninstalling ${skillNames.length} skill(s) for ${agents.join(", ")}`);
     const uninstalled = [];
     for (const targetAgent of agents) {
-      const def7 = AGENT_DEFS[targetAgent];
-      if (def7.uninstall) {
-        const [err] = await catchError(def7.uninstall({
+      const def8 = AGENT_DEFS[targetAgent];
+      if (def8.uninstall) {
+        const [err] = await catchError(def8.uninstall({
           skillNames,
           rootDir,
           storePath,
@@ -108908,7 +109471,7 @@ var init_uninstall = __esm(() => {
 });
 
 // src/services/updateService.skills.ts
-import { randomUUID as randomUUID4 } from "node:crypto";
+import { randomUUID as randomUUID5 } from "node:crypto";
 async function runSkillsUpdate(opts) {
   const fs7 = getFileSystem();
   if (opts.agent !== undefined) {
@@ -108999,7 +109562,7 @@ async function updateOneSection(opts, candidate) {
     }
   }
   if (opts.dryRun) {
-    const tmpRoot = fs7.path.join(fs7.env.tmpdir(), `uipath-skills-dryrun-${randomUUID4()}`);
+    const tmpRoot = fs7.path.join(fs7.env.tmpdir(), `uipath-skills-dryrun-${randomUUID5()}`);
     try {
       await fs7.mkdir(tmpRoot);
       const tmpStore = fs7.path.join(tmpRoot, "store");
@@ -112994,6 +113557,7 @@ async function runToolsUpdate(opts, state) {
   const entries = [];
   const previousVersions = new Map(toUpdate.map((t) => [t.name, t.version]));
   const total = toUpdate.length;
+  const pin = opts.pin ?? null;
   let index2 = 0;
   for (const tool of toUpdate) {
     index2++;
@@ -113007,10 +113571,12 @@ async function runToolsUpdate(opts, state) {
     const [updateError] = await catchError((async () => {
       let targetVersion = opts.version;
       if (targetVersion === "latest") {
-        const cliPrefix = state.getCliVersionPrefix();
-        const latest = await toolService.searchLatestVersion(fullName, cliPrefix, {
+        const prefix = pin ? pinnedPrefix(pin) : state.getCliVersionPrefix();
+        const exact = pin && isExactPin(pin) ? formatVersionPin(pin) : undefined;
+        const latest = await toolService.searchLatestVersion(fullName, prefix, {
           channel: opts.channel,
-          allowLowerFallback: true
+          allowLowerFallback: pin === null,
+          exact
         });
         if (latest) {
           targetVersion = latest;
@@ -113019,7 +113585,7 @@ async function runToolsUpdate(opts, state) {
             name: tool.name,
             status: "failed",
             from: tool.version,
-            error: `No compatible ${opts.channel} version found for CLI v${cliPrefix}x or lower`
+            error: pin ? `No version found matching pinned ${formatVersionPin(pin)} in the ${prefix}x line` : `No compatible ${opts.channel} version found for CLI v${prefix}x or lower`
           });
           return;
         }
@@ -113034,6 +113600,9 @@ async function runToolsUpdate(opts, state) {
         });
         return;
       }
+      if (pin && opts.version === "latest" && compareSemver(targetVersion, currentVersion) < 0) {
+        logger.info(`Downgrading ${tool.name} ${currentVersion} → ${targetVersion} to match the pinned version.`);
+      }
       if (opts.dryRun) {
         entries.push({
           name: tool.name,
@@ -113110,11 +113679,50 @@ async function runToolsUpdate(opts, state) {
   }
   return { entries };
 }
+async function revertToolsUpdate(report, state) {
+  const reverted = [];
+  const failed = [];
+  const targets = report.entries.filter((e) => e.status === "updated");
+  if (targets.length === 0) {
+    return { reverted, failed };
+  }
+  const [locationError, location] = await catchError(state.resolveInstallPath());
+  if (locationError) {
+    for (const entry of targets) {
+      failed.push({ name: entry.name, error: locationError.message });
+    }
+    return { reverted, failed };
+  }
+  for (const entry of targets) {
+    if (!entry.from) {
+      failed.push({
+        name: entry.name,
+        error: "No previous version recorded to revert to."
+      });
+      continue;
+    }
+    const packageName = `@uipath/${entry.name}@${entry.from}`;
+    const [installError] = await catchError(toolService.install(packageName, location.path, {
+      global: location.global
+    }));
+    if (installError) {
+      logger.debug(`Failed to revert ${entry.name} to ${entry.from}: ${installError.message}`);
+      failed.push({ name: entry.name, error: installError.message });
+      continue;
+    }
+    logger.info(`Reverted ${entry.name} to ${entry.from} after the CLI self-update failed.`);
+    entry.status = "reverted";
+    entry.to = entry.from;
+    reverted.push(entry.name);
+  }
+  return { reverted, failed };
+}
 var TOOLS_UPDATE_PHASES;
 var init_updateService_tools = __esm(() => {
   init_src2();
   init_src();
   init_toolService();
+  init_versionPin();
   TOOLS_UPDATE_PHASES = {
     Checking: "checking",
     Installing: "installing"
@@ -113123,7 +113731,7 @@ var init_updateService_tools = __esm(() => {
 
 // src/commands/tools/update.ts
 function registerUpdateCommand2(toolsCommand, _context, state) {
-  toolsCommand.command("update").description("Update installed tools").option("--name <scoped-tool-name>", "scoped package name").option("--version <version>", "package version to install", "latest").examples(TOOLS_UPDATE_EXAMPLES).trackedAction(processContext, async (options) => {
+  toolsCommand.command("update").description("Update installed tools").option("--name <scoped-tool-name>", "scoped package name").examples(TOOLS_UPDATE_EXAMPLES).trackedAction(processContext, async (options) => {
     const spinner = getOutputSink().capabilities.isInteractive ? ora({ text: "Updating tools…" }).start() : undefined;
     let report;
     try {
@@ -113131,7 +113739,8 @@ function registerUpdateCommand2(toolsCommand, _context, state) {
         dryRun: false,
         channel: resolveChannel(),
         name: options.name,
-        version: options.version,
+        version: "latest",
+        pin: resolvePinnedVersion(),
         onProgress: spinner ? ({ current, total, tool, phase }) => {
           const verb = phase === TOOLS_UPDATE_PHASES.Checking ? "Checking" : "Installing";
           spinner.text = `[${current}/${total}] ${verb} ${tool}`;
@@ -113155,7 +113764,7 @@ function registerUpdateCommand2(toolsCommand, _context, state) {
       OutputFormatter.error({
         Result: RESULTS.Failure,
         Message: `Failed to update ${failed.length} tool(s).`,
-        Instructions: "Check tool compatibility with the current CLI version, select a compatible --version, or run `uip config set updateChannel <alpha|beta|stable>` to switch release channels."
+        Instructions: "Check tool compatibility with the current CLI version, adjust the pinned `core.version`, or run `uip config set updateChannel <alpha|beta|stable>` to switch release channels."
       });
       processContext.exit(EXIT_CODES.Failure);
       return;
@@ -113173,6 +113782,7 @@ var init_update2 = __esm(() => {
   init_ora();
   init_channel();
   init_updateService_tools();
+  init_versionPin();
   TOOLS_UPDATE_EXAMPLES = [
     {
       Description: "Update all installed tools to the latest version",
@@ -113295,7 +113905,13 @@ async function checkCliVersion(opts) {
   if (opts.isLocal) {
     return skipped(opts.cliPkgVersion, "local install");
   }
-  const [err, latest] = await catchError(toolService.searchLatestVersion("@uipath/cli", undefined, {
+  const pin = opts.pin ?? null;
+  const [err, latest] = await catchError(pin ? toolService.searchLatestVersion("@uipath/cli", pinnedPrefix(pin), {
+    channel: opts.channel,
+    allowLowerFallback: false,
+    exact: isExactPin(pin) ? formatVersionPin(pin) : undefined,
+    timeoutMs: CLI_VERSION_PROBE_TIMEOUT_MS
+  }) : toolService.searchLatestVersion("@uipath/cli", undefined, {
     channel: opts.channel,
     timeoutMs: CLI_VERSION_PROBE_TIMEOUT_MS
   }));
@@ -113304,9 +113920,18 @@ async function checkCliVersion(opts) {
     return skipped(opts.cliPkgVersion, "network error");
   }
   if (!latest) {
+    if (pin) {
+      return {
+        current: opts.cliPkgVersion,
+        available: null,
+        action: "failed",
+        reason: `No @uipath/cli version found matching pinned ${formatVersionPin(pin)} in the ${pinnedPrefix(pin)}x line`
+      };
+    }
     return skipped(opts.cliPkgVersion, `no ${opts.channel} version found`);
   }
-  if (compareSemver(latest, opts.cliPkgVersion) > 0) {
+  const differs = pin ? compareSemver(latest, opts.cliPkgVersion) !== 0 : compareSemver(latest, opts.cliPkgVersion) > 0;
+  if (differs) {
     return {
       current: opts.cliPkgVersion,
       available: latest,
@@ -113328,6 +113953,7 @@ var CLI_VERSION_PROBE_TIMEOUT_MS = 8000;
 var init_updateService_cli = __esm(() => {
   init_src2();
   init_toolService();
+  init_versionPin();
 });
 
 // src/services/updateService.ts
@@ -113338,7 +113964,8 @@ async function runUpdate(options, state, cliEnv) {
     dryRun,
     channel,
     name: options.tools.name,
-    version: options.tools.version ?? "latest"
+    version: "latest",
+    pin: options.versionPin ?? null
   }, state) : null;
   if (toolsReport?.fatal?.code === "NO_TOOLS_INSTALLED") {
     toolsReport = { entries: [] };
@@ -113358,7 +113985,7 @@ async function runUpdate(options, state, cliEnv) {
           Subsystem: "tools",
           Result: "Failure",
           Message: `Failed to update ${entry.name}: ${entry.error ?? "unknown error"}`,
-          Instructions: "Check tool compatibility with the current CLI version, select a compatible --version, or run `uip config set updateChannel <alpha|beta|stable>` to switch release channels."
+          Instructions: "Check tool compatibility with the current CLI version, adjust the pinned `core.version`, or run `uip config set updateChannel <alpha|beta|stable>` to switch release channels."
         });
       }
     }
@@ -113385,7 +114012,8 @@ async function runUpdate(options, state, cliEnv) {
     channel,
     cliPkgVersion: cliEnv.cliPkgVersion,
     isLocal: cliEnv.isLocal,
-    isDev: cliEnv.isDev
+    isDev: cliEnv.isDev,
+    pin: options.versionPin ?? null
   }) : null;
   const selfUpdate = options.cli?.self !== false;
   if (cliReport?.action === "notice" && cliReport.available && !dryRun && selfUpdate) {
@@ -113393,6 +114021,10 @@ async function runUpdate(options, state, cliEnv) {
     if (installCtx.kind !== "unknown") {
       const noticeReport = cliReport;
       const available = noticeReport.available;
+      const pin = options.versionPin ?? null;
+      if (pin && compareSemver(available, noticeReport.current) < 0) {
+        logger.info(`Downgrading @uipath/cli ${noticeReport.current} → ${available} to match the pinned version.`);
+      }
       const target = `@uipath/cli@${available}`;
       const manualCommand = describeUpdateCommand(target, installCtx);
       const [installErr] = await catchError(runCliSelfUpdate(target, installCtx, cliEnv.installPath));
@@ -113411,6 +114043,25 @@ async function runUpdate(options, state, cliEnv) {
       }
     }
   }
+  if (cliReport?.action === "failed" && cliReport.available === null) {
+    errors7.push({
+      Subsystem: "cli",
+      Result: "Failure",
+      Message: cliReport.reason ?? "Failed to resolve the pinned @uipath/cli version.",
+      Instructions: "Pin a published version line with `uip config set version <major.minor>` (or clear the pin), then re-run `uip update`."
+    });
+  }
+  if (cliReport?.action === "failed" && !dryRun && toolsReport) {
+    const { failed } = await revertToolsUpdate(toolsReport, state);
+    for (const f of failed) {
+      errors7.push({
+        Subsystem: "tools",
+        Result: "Failure",
+        Message: `Failed to roll back ${f.name} after the CLI self-update failed: ${f.error}`,
+        Instructions: "The CLI self-update failed and this tool could not be reverted, leaving a version mismatch. " + "Re-run `uip update`, or reinstall the matching version with `uip tools install @uipath/<name>@<version>`."
+      });
+    }
+  }
   const toolsFailed = !!toolsReport && (!!toolsReport.fatal || toolsReport.entries.some((e) => e.status === "failed"));
   const skillsFailed = !!skillsReport && skillsReport.sections.some((s) => !!s.error);
   const cliFailed = cliReport?.action === "failed";
@@ -113436,7 +114087,7 @@ var init_updateService = __esm(() => {
 
 // src/commands/update.ts
 function registerUpdateCommand3(program2, _context, state) {
-  program2.command("update").description("Update installed UiPath tools and skills, and check for newer CLI").option("--dry-run", "Preview changes without applying them", false).option("--tools-only", "Skip skills section", false).option("--skills-only", "Skip tools section", false).option("--no-tools", "Do not update tools").option("--no-skills", "Do not update skills").option("--no-cli-check", "Do not probe for newer CLI version").option("--no-self", "Do not auto-update the CLI itself; only print a notice").option("--channel <channel>", "Override channel: stable | alpha | beta").option("--name <scoped-tool-name>", "Restrict tool update to one tool").option("--version <version>", "Tool version (default: latest)", "latest").option("--agent <agent>", "Restrict skill update to one agent").option("--local", "Restrict skills update to local scope only").option("--no-local", "Restrict skills update to global scope only").examples(UPDATE_EXAMPLES).trackedAction(processContext, async (raw) => {
+  program2.command("update").description("Update installed UiPath tools and skills, and check for newer CLI").option("--dry-run", "Preview changes without applying them", false).option("--tools-only", "Skip skills section", false).option("--skills-only", "Skip tools section", false).option("--no-tools", "Do not update tools").option("--no-skills", "Do not update skills").option("--no-cli-check", "Do not probe for newer CLI version").option("--no-self", "Do not auto-update the CLI itself; only print a notice").option("--channel <channel>", "Override channel: stable | alpha | beta").option("--name <scoped-tool-name>", "Restrict tool update to one tool").option("--agent <agent>", "Restrict skill update to one agent").option("--local", "Restrict skills update to local scope only").option("--no-local", "Restrict skills update to global scope only").examples(UPDATE_EXAMPLES).trackedAction(processContext, async (raw) => {
     if (raw.toolsOnly && raw.skillsOnly) {
       OutputFormatter.error({
         Result: RESULTS.ValidationError,
@@ -113464,16 +114115,7 @@ function registerUpdateCommand3(program2, _context, state) {
       processContext.exit(EXIT_CODES.ValidationError);
       return;
     }
-    const toolsDisabled = raw.skillsOnly || raw.tools === false;
-    if (!toolsDisabled && raw.version !== undefined && raw.version !== "latest" && !raw.name) {
-      OutputFormatter.error({
-        Result: RESULTS.ValidationError,
-        Message: "--version requires --name.",
-        Instructions: "Pin a version per tool: --name <scoped-tool-name> --version <semver>."
-      });
-      processContext.exit(EXIT_CODES.ValidationError);
-      return;
-    }
+    const versionPin = resolvePinnedVersion();
     const channel = resolveChannelFlag(raw.channel);
     if (channel === null) {
       OutputFormatter.error({
@@ -113496,12 +114138,13 @@ function registerUpdateCommand3(program2, _context, state) {
         dryRun: raw.dryRun ?? false,
         channel,
         sections,
-        tools: { name: raw.name, version: raw.version },
+        tools: { name: raw.name },
         skills: {
           agent: raw.agent,
           local: raw.local
         },
-        cli: { self: raw.self !== false }
+        cli: { self: raw.self !== false },
+        versionPin
       }, state, {
         cliPkgVersion: package_default.version,
         isLocal: !location.global,
@@ -113551,6 +114194,7 @@ var init_update3 = __esm(() => {
   init_cliInstaller();
   init_toolService();
   init_updateService();
+  init_versionPin();
   VALID_CHANNELS2 = new Set([
     "stable",
     "alpha",
@@ -113884,7 +114528,10 @@ var init_autoInstall = __esm(() => {
 // src/utils/registerToolCommands.ts
 function registerToolCommands(program2, discovered, context) {
   for (const entry of discovered) {
+    const aliases = ALIASES_BY_COMMAND.get(entry.commandPrefix) ?? [];
     const toolCommand = program2.command(entry.commandPrefix).description(entry.description).allowUnknownOption().allowExcessArguments(true).helpOption(false);
+    if (aliases.length > 0)
+      toolCommand.aliases(aliases);
     toolCommand.action(async () => {
       logger.debug(`Loading tool '${entry.toolName}'...`);
       const tool = await importTool(entry);
@@ -113901,6 +114548,8 @@ function registerToolCommands(program2, discovered, context) {
         program2.commands.splice(idx, 1);
       }
       const realCommand = program2.command(tool.metadata.commandPrefix).description(tool.metadata.description);
+      if (aliases.length > 0)
+        realCommand.aliases(aliases);
       const [regError] = await catchError(tool.registerCommands(realCommand));
       if (regError) {
         OutputFormatter.error({
@@ -113911,7 +114560,8 @@ function registerToolCommands(program2, discovered, context) {
         return;
       }
       const toolArgs = context.args.slice(2);
-      const prefixIdx = toolArgs.indexOf(entry.commandPrefix);
+      const candidates = [entry.commandPrefix, ...aliases];
+      const prefixIdx = toolArgs.findIndex((a) => candidates.includes(a));
       const positionals = prefixIdx >= 0 ? toolArgs.slice(prefixIdx + 1).filter((a) => !a.startsWith("-")) : [];
       const unknownSub = findUnknownHelpCommand(realCommand, positionals, toolArgs);
       if (unknownSub) {
@@ -113929,6 +114579,7 @@ function registerToolCommands(program2, discovered, context) {
 }
 var init_registerToolCommands = __esm(() => {
   init_src2();
+  init_tools_whitelist();
   init_toolLoader();
 });
 
@@ -114135,6 +114786,11 @@ class TerminalSink {
 
 // index.ts
 import { fileURLToPath as fileURLToPath4 } from "node:url";
+process.stdout.on("error", (err) => {
+  if (err.code === "EPIPE")
+    process.exit(0);
+});
+process.stderr.on("error", () => {});
 configureLogger({ sink: new TerminalSink });
 installConsoleGuard();
 var pollController = createPollAbortController();