@uipath/cli 1.201.0-preview.125 → 1.201.0-preview.128

package/dist/index.js

@@ -68718,7 +68718,7 @@ var init_package = __esm(() => {
   package_default = {
     name: "@uipath/cli",
     license: "MIT",
-    version: "1.201.0-preview.125",
+    version: "1.201.0-preview.128",
     description: "Cross platform CLI for UiPath",
     repository: {
       type: "git",
@@ -90057,27 +90057,6 @@ var init_tools_whitelist = __esm(() => {
 });
 
 // src/services/toolService.ts
-var exports_toolService = {};
-__export(exports_toolService, {
-  validateVersionString: () => validateVersionString,
-  validatePackageSpec: () => validatePackageSpec,
-  truncateVersionsForDisplay: () => truncateVersionsForDisplay,
-  toolService: () => toolService,
-  resolveToolPackageName: () => resolveToolPackageName,
-  resetBunOnPathCacheForTests: () => resetBunOnPathCacheForTests,
-  parsePackageSpec: () => parsePackageSpec,
-  isValidSemver: () => isValidSemver,
-  isPermissionError: () => isPermissionError,
-  isNpmViewMetadataError: () => isNpmViewMetadataError,
-  isDevMode: () => isDevMode,
-  isBunOnPath: () => isBunOnPath,
-  getEffectiveRegistry: () => getEffectiveRegistry,
-  compareSemver: () => compareSemver,
-  WHITELIST_BY_SHORT_NAME: () => WHITELIST_BY_SHORT_NAME,
-  WHITELIST_BY_COMMAND: () => WHITELIST_BY_COMMAND,
-  TOOLS_WHITELIST: () => TOOLS_WHITELIST,
-  NpmViewMetadataError: () => NpmViewMetadataError
-});
 function isValidSemver(v) {
   return SEMVER_RE.test(v);
 }
@@ -90149,19 +90128,11 @@ async function isBunOnPath() {
   cachedBunOnPath = !error51 && result === true;
   return cachedBunOnPath;
 }
-function resetBunOnPathCacheForTests() {
-  cachedBunOnPath = undefined;
-}
 function validatePackageSpec(spec) {
   if (!SAFE_PACKAGE_SPEC.test(spec)) {
     throw new Error(`Invalid package specifier: '${spec}'. Only alphanumeric characters, dots, hyphens, underscores, slashes, and @ are allowed.`);
   }
 }
-function validateVersionString(version2) {
-  if (!SAFE_VERSION.test(version2)) {
-    throw new Error(`Invalid version string: '${version2}'. Only alphanumeric characters, dots, hyphens, underscores, and semver operators are allowed.`);
-  }
-}
 function isNpmViewMetadataError(error51) {
   return error51 instanceof NpmViewMetadataError || error51.name === "NpmViewMetadataError";
 }
@@ -90427,27 +90398,6 @@ async function runPackageManagerWithBun(args, cwd, extraEnv) {
   logger.debug(`Running package manager: bun ${pmArgs.join(" ")}${cwd ? ` (cwd: ${cwd})` : ""}`);
   await spawnPackageManager("bun", pmArgs, cwd, `bun ${pmArgs[0]}`, extraEnv);
 }
-function extractTarEntry(tar, entryName) {
-  const decoder3 = new TextDecoder;
-  let offset = 0;
-  while (offset + 512 <= tar.length) {
-    const header = tar.subarray(offset, offset + 512);
-    if (header.every((b) => b === 0))
-      break;
-    const name = decoder3.decode(header.subarray(0, 100)).split("\x00", 1)[0];
-    const sizeField = decoder3.decode(header.subarray(124, 136)).split("\x00", 1)[0].trim();
-    const size = Number.parseInt(sizeField, 8);
-    if (Number.isNaN(size) || size < 0) {
-      throw new Error(`Corrupt tar header at offset ${offset}`);
-    }
-    const typeflag = header[156];
-    if ((typeflag === 0 || typeflag === 48) && name === entryName) {
-      return decoder3.decode(tar.subarray(offset + 512, offset + 512 + size));
-    }
-    offset += 512 + Math.ceil(size / 512) * 512;
-  }
-  return null;
-}
 
 class NodeToolService {
   async npmView(packageName, timeoutMs = NPM_VIEW_TIMEOUT_MS, registry3) {
@@ -90612,88 +90562,6 @@ ${errors7.map((e) => `  - ${e}`).join(`
     }
     return null;
   }
-  async npmPack(packageName, destination, timeoutMs) {
-    const args = ["pack", packageName];
-    const { spawn: spawn2 } = await loadChildProcess();
-    const isWindows = process.platform === "win32";
-    const env = {
-      ...process.env,
-      npm_config_pack_destination: destination
-    };
-    await new Promise((resolve2, reject) => {
-      let proc;
-      if (isWindows) {
-        for (const token of ["npm", ...args]) {
-          if (!SHELL_SAFE_ARG.test(token)) {
-            reject(new Error(`Unsafe argument: '${token}'`));
-            return;
-          }
-        }
-        const commandLine = ["npm", ...args].join(" ");
-        if (!SHELL_SAFE_COMMAND_LINE.test(commandLine)) {
-          reject(new Error(`Unsafe command line: '${commandLine}'`));
-          return;
-        }
-        proc = spawn2(commandLine, [], { shell: true, env });
-      } else {
-        proc = spawn2("npm", args, { env });
-      }
-      let stderr = "";
-      const MAX_STDERR = 65536;
-      proc.stderr?.on("data", (d) => {
-        if (stderr.length < MAX_STDERR)
-          stderr += d.toString();
-      });
-      const timer = setTimeout(() => {
-        proc.kill("SIGTERM");
-        reject(new Error(`npm pack ${packageName} timed out after ${timeoutMs / 1000}s`));
-      }, timeoutMs);
-      proc.on("error", (err) => {
-        clearTimeout(timer);
-        reject(err);
-      });
-      proc.on("close", (code) => {
-        clearTimeout(timer);
-        if (code === 0) {
-          resolve2();
-          return;
-        }
-        reject(new Error(`npm pack ${packageName} failed with code ${code}${stderr.trim() ? `: ${stderr.trim()}` : ""}`));
-      });
-    });
-  }
-  async downloadPackageFile(packageName, fileName, options) {
-    validatePackageSpec(packageName);
-    if (!SHELL_SAFE_ARG.test(packageName)) {
-      throw new Error(`Unsafe package name: '${packageName}'`);
-    }
-    const timeoutMs = options?.timeoutMs ?? DEFAULT_FETCH_TIMEOUT_MS;
-    const fs7 = getFileSystem();
-    const dir = await fs7.getTempDir();
-    try {
-      await this.npmPack(packageName, dir, timeoutMs);
-      const entries = await fs7.readdir(dir);
-      const tarballName = entries.find((entry) => entry.endsWith(".tgz"));
-      if (!tarballName) {
-        throw new Error(`npm pack produced no tarball for ${packageName}`);
-      }
-      const bytes = await fs7.readFile(fs7.path.join(dir, tarballName));
-      if (!bytes) {
-        throw new Error(`Could not read the packed tarball for ${packageName}`);
-      }
-      const { gunzipSync } = await import("node:zlib");
-      const content = extractTarEntry(gunzipSync(bytes), `package/${fileName}`);
-      if (content === null) {
-        throw new Error(`File '${fileName}' not found in the ${packageName} tarball`);
-      }
-      return content;
-    } finally {
-      const [rmErr] = await catchError(fs7.rm(dir));
-      if (rmErr) {
-        logger.debug(`Could not remove the temp dir for ${packageName}: ${rmErr.message}`);
-      }
-    }
-  }
   async install(packageName, destination, options) {
     validatePackageSpec(packageName);
     await refuseIfBundledDistribution(destination, "install", packageName);
@@ -90797,7 +90665,7 @@ function truncateVersionsForDisplay(versions2) {
   }
   return result;
 }
-var SEMVER_RE, SAFE_PACKAGE_SPEC, SAFE_VERSION, SHELL_SAFE_ARG, SHELL_SAFE_COMMAND_LINE, NPM_TIMEOUT_MS = 180000, NPM_VIEW_TIMEOUT_MS = 30000, NPM_MAX_RETRIES = 2, TRANSIENT_NPM_ERRORS, UNSUPPORTED_PROTOCOL_MARKER = "EUNSUPPORTEDPROTOCOL", cachedBunOnPath, childProcessModulePromise, NpmViewMetadataError, NPMJS_REGISTRY = "https://registry.npmjs.org", GITHUB_REGISTRY = "https://npm.pkg.github.com", REGISTRY_PREFERENCE, effectiveNpmConfigPromise = null, PERMISSION_ERROR_MARKERS, toolService;
+var SEMVER_RE, SAFE_PACKAGE_SPEC, SHELL_SAFE_ARG, SHELL_SAFE_COMMAND_LINE, NPM_TIMEOUT_MS = 180000, NPM_VIEW_TIMEOUT_MS = 30000, NPM_MAX_RETRIES = 2, TRANSIENT_NPM_ERRORS, UNSUPPORTED_PROTOCOL_MARKER = "EUNSUPPORTEDPROTOCOL", cachedBunOnPath, childProcessModulePromise, NpmViewMetadataError, NPMJS_REGISTRY = "https://registry.npmjs.org", GITHUB_REGISTRY = "https://npm.pkg.github.com", REGISTRY_PREFERENCE, effectiveNpmConfigPromise = null, PERMISSION_ERROR_MARKERS, toolService;
 var init_toolService = __esm(() => {
   init_src2();
   init_src();
@@ -90808,7 +90676,6 @@ var init_toolService = __esm(() => {
   init_tools_whitelist();
   SEMVER_RE = /^\d+\.\d+\.\d+(-[a-zA-Z0-9-]+(\.[a-zA-Z0-9-]+)*)?(\+[a-zA-Z0-9-]+(\.[a-zA-Z0-9-]+)*)?$/;
   SAFE_PACKAGE_SPEC = /^@?[a-zA-Z0-9._/-]+(@[a-zA-Z0-9._+:~^<>=| -]+)?$/;
-  SAFE_VERSION = /^[a-zA-Z0-9._+:~^<>=| -]+$/;
   SHELL_SAFE_ARG = /^[a-zA-Z0-9@/._-]+$/;
   SHELL_SAFE_COMMAND_LINE = /^[a-zA-Z0-9@/._\- ]+$/;
   TRANSIENT_NPM_ERRORS = ["ENOTEMPTY", "EBUSY"];
@@ -91938,12 +91805,11 @@ function parseVersionPin(raw) {
     pin.patch = Number(match[3]);
   return pin;
 }
-function majorMinorPinOf(version2) {
-  const [rawMajor, rawMinor] = version2.trim().split(/[.\-+]/);
-  if (rawMajor === undefined || rawMinor === undefined || !/^\d+$/.test(rawMajor) || !/^\d+$/.test(rawMinor)) {
+function majorOf(version2) {
+  const [rawMajor] = version2.trim().split(/[.\-+]/);
+  if (rawMajor === undefined || !/^\d+$/.test(rawMajor))
     return null;
-  }
-  return { major: Number(rawMajor), minor: Number(rawMinor) };
+  return Number(rawMajor);
 }
 function resolvePinnedVersion() {
   return parseVersionPin(getCachedConfig().core?.version);
@@ -92301,7 +92167,7 @@ var init_config2 = __esm(() => {
       normalize: (v) => v.trim(),
       validate: (v) => isValidVersionPin(v),
       valueHint: "Use major.minor or major.minor.patch (e.g. 1.2 or 1.2.3).",
-      description: "Version policy: exact (1.2.3) freezes auto-update, float (1.2) " + "tracks that line, unset follows your environment or the latest"
+      description: "Version policy: exact (1.2.3) freezes auto-update, float (1.2) " + "tracks that line, unset follows the latest release"
     },
     clientSecret: {
       path: ["auth", "clientSecret"],
@@ -92313,7 +92179,7 @@ var init_config2 = __esm(() => {
   WRITABLE_KEY_NAMES = VALID_KEY_NAMES.filter((key) => CONFIG_KEYS[key].writable !== false);
   REMOVED_KEYS = {
     autoVersionSync: "`autoVersionSync` was removed. To stop auto-updates, freeze on an " + "exact version: `uip config set version <major.minor.patch>` " + "(undo with `uip config clear version`).",
-    versionSource: "`versionSource` was removed. Version policy now lives entirely in " + "`version`: set a pin with `uip config set version <major.minor[.patch]>`, " + "or clear it with `uip config clear version` to follow your " + "environment or the latest release."
+    versionSource: "`versionSource` was removed. Version policy now lives entirely in " + "`version`: set a pin with `uip config set version <major.minor[.patch]>`, " + "or clear it with `uip config clear version` to follow the latest " + "release."
   };
   CONFIG_GET_EXAMPLES = [
     {
@@ -92400,7 +92266,7 @@ var init_config2 = __esm(() => {
   ];
   CONFIG_CLEAR_EXAMPLES = [
     {
-      Description: "Clear the version pin so the CLI follows the environment / latest again",
+      Description: "Clear the version pin so the CLI follows the latest release again",
       Command: "uip config clear version",
       Output: {
         Code: "ConfigClear",
@@ -92467,11 +92333,6 @@ var init_promptSelect = __esm(() => {
 });
 
 // src/services/auth.ts
-var exports_auth = {};
-__export(exports_auth, {
-  auth: () => auth
-});
-
 class NodeAuth {
   async interactiveLogin(options) {
     const { interactiveLogin: interactiveLogin2 } = await Promise.resolve().then(() => (init_src3(), exports_src2));
@@ -110074,6 +109935,9 @@ function loadChildProcess2() {
 function isSkillsPackageMetadataError(error51) {
   return error51 instanceof SkillsPackageMetadataError || error51.name === "SkillsPackageMetadataError";
 }
+function isSkillsPackOutputError(error51) {
+  return error51 instanceof SkillsPackOutputError || error51.name === "SkillsPackOutputError";
+}
 function parseGitHub(input) {
   const https = input.match(/^https?:\/\/github\.com\/([^/]+)\/([^/]+?)(?:\.git)?\/?$/i);
   if (https)
@@ -110415,6 +110279,35 @@ async function getContentStore(rootDir, source = DEFAULT_SOURCE, targetVersion)
   await fetchSkillsTo(storePath, rootDir, source, targetVersion);
   return storePath;
 }
+async function getContentStoreForRead(rootDir, source = DEFAULT_SOURCE, targetVersion) {
+  const fs7 = getFileSystem();
+  const storePath = fs7.path.join(rootDir, source.storeName);
+  if (source.isDefault && await storeMatchesVersionLine(fs7, storePath, targetVersion)) {
+    logger.debug(`Reading skills from the existing store at ${storePath} (no fetch).`);
+    return storePath;
+  }
+  await fetchSkillsTo(storePath, rootDir, source, targetVersion);
+  return storePath;
+}
+async function storeMatchesVersionLine(fs7, storePath, targetVersion) {
+  const line = parseSemver(targetVersion ?? package_default.version) ?? parseVersionLine(targetVersion ?? package_default.version);
+  if (!line)
+    return false;
+  const skillsDir = fs7.path.join(storePath, "skills");
+  const [entriesErr, entries] = await catchError(fs7.readdir(skillsDir));
+  if (entriesErr || !entries?.length)
+    return false;
+  const [markerErr, markerText] = await catchError(fs7.readFile(fs7.path.join(storePath, SOURCE_MARKER_NAME), {
+    encoding: "utf-8"
+  }));
+  if (markerErr || !markerText)
+    return false;
+  const [parseErr, marker] = catchError(() => JSON.parse(markerText));
+  if (parseErr)
+    return false;
+  const version2 = asRecord(marker)?.version;
+  return typeof version2 === "string" && matchesCliVersionLine(version2, line);
+}
 async function readSkillDescription(fs7, skillMdPath) {
   const [err, content] = await catchError(fs7.readFile(skillMdPath, { encoding: "utf-8" }));
   if (err || !content)
@@ -111048,19 +110941,23 @@ async function addAndCopyPackage(pm, packageInfo, destinationPath) {
   });
 }
 function readPackedFileName(packOutput) {
-  if (!Array.isArray(packOutput)) {
-    throw new TypeError(`Unexpected npm pack output for ${SKILLS_PACKAGE_NAME}`);
-  }
-  const firstEntry = asRecord(packOutput[0]);
-  const filename = typeof firstEntry?.filename === "string" ? firstEntry.filename : undefined;
+  const entries = Array.isArray(packOutput) ? packOutput : packOutputObjectEntries(packOutput);
+  const filename = entries.map((entry) => asRecord(entry)?.filename).find((value) => typeof value === "string" && value.length > 0);
   if (!filename) {
-    throw new TypeError(`Unexpected npm pack output for ${SKILLS_PACKAGE_NAME}`);
+    throw new SkillsPackOutputError(`Unexpected npm pack output for ${SKILLS_PACKAGE_NAME}`);
   }
   if (filename.includes("/") || filename.includes("\\")) {
     throw new Error(`Unsafe npm pack filename for ${SKILLS_PACKAGE_NAME}`);
   }
   return filename;
 }
+function packOutputObjectEntries(packOutput) {
+  const record3 = asRecord(packOutput);
+  if (!record3)
+    return [];
+  const named = record3[SKILLS_PACKAGE_NAME];
+  return named === undefined ? Object.values(record3) : [named];
+}
 async function writeSourceMarker(storePath, packageInfo) {
   const fs7 = getFileSystem();
   const marker = {
@@ -111188,7 +111085,7 @@ function isTarDirectoryEntry(typeFlag, entryName) {
 function isTarRegularFileEntry(typeFlag) {
   return typeFlag === "0" || typeFlag === "\x00";
 }
-async function extractTarEntry2(fs7, destinationDir, entryName, entry) {
+async function extractTarEntry(fs7, destinationDir, entryName, entry) {
   if (isTarDirectoryEntry(entry.typeFlag, entryName)) {
     await fs7.mkdir(resolveTarEntryPath(fs7, destinationDir, entryName));
     return;
@@ -111222,10 +111119,10 @@ async function extractNpmTarballToDir(tarData, destinationDir) {
     const entryName = stripNpmPackageRoot(rawPath);
     if (!entryName)
       continue;
-    await extractTarEntry2(fs7, destinationDir, entryName, entry);
+    await extractTarEntry(fs7, destinationDir, entryName, entry);
   }
 }
-var SKILLS_PACKAGE_NAME = "@uipath/skills", SKILLS_REGISTRY_URL = "https://registry.npmjs.org", REPO_URL = "https://www.npmjs.com/package/@uipath/skills", SOURCE_MARKER_NAME = ".uipath-skills-source.json", STORE_NAME, TAR_BLOCK_SIZE = 512, NPM_VIEW_TIMEOUT_MS2 = 30000, NPM_PACK_TIMEOUT_MS = 60000, SHELL_SAFE_ARG2, SHELL_SAFE_COMMAND_LINE2, PM_PREFERENCE, PM_OVERRIDE_ENV = "UIP_SKILLS_PM", childProcessModulePromise2, SkillSourceError, SkillsRegistryAuthError, SkillsPackageMetadataError, DEFAULT_SOURCE, MAX_SKILL_SCAN_DEPTH = 16, MANIFEST_NAME = "manifest.json", cachedPackageManager = null, REGISTRY_AUTH_HINT = "The package manager could not authenticate to the registry. If you are installing an alpha/internal build from GitHub Packages, add to your .npmrc: '@uipath:registry=https://npm.pkg.github.com/' and '//npm.pkg.github.com/:_authToken=<token>', where <token> is a GitHub PAT with the 'read:packages' scope, authorized for the UiPath org via 'Configure SSO'. This is a different credential from your 'uip login' token.";
+var SKILLS_PACKAGE_NAME = "@uipath/skills", SKILLS_REGISTRY_URL = "https://registry.npmjs.org", REPO_URL = "https://www.npmjs.com/package/@uipath/skills", SOURCE_MARKER_NAME = ".uipath-skills-source.json", STORE_NAME, TAR_BLOCK_SIZE = 512, NPM_VIEW_TIMEOUT_MS2 = 30000, NPM_PACK_TIMEOUT_MS = 60000, SHELL_SAFE_ARG2, SHELL_SAFE_COMMAND_LINE2, PM_PREFERENCE, PM_OVERRIDE_ENV = "UIP_SKILLS_PM", childProcessModulePromise2, SkillSourceError, SkillsRegistryAuthError, SkillsPackageMetadataError, SkillsPackOutputError, DEFAULT_SOURCE, MAX_SKILL_SCAN_DEPTH = 16, MANIFEST_NAME = "manifest.json", cachedPackageManager = null, REGISTRY_AUTH_HINT = "The package manager could not authenticate to the registry. If you are installing an alpha/internal build from GitHub Packages, add to your .npmrc: '@uipath:registry=https://npm.pkg.github.com/' and '//npm.pkg.github.com/:_authToken=<token>', where <token> is a GitHub PAT with the 'read:packages' scope, authorized for the UiPath org via 'Configure SSO'. This is a different credential from your 'uip login' token.";
 var init_contentStore = __esm(() => {
   init_src2();
   init_src();
@@ -111257,6 +111154,12 @@ var init_contentStore = __esm(() => {
       this.name = "SkillsPackageMetadataError";
     }
   };
+  SkillsPackOutputError = class SkillsPackOutputError extends Error {
+    constructor(message) {
+      super(message);
+      this.name = "SkillsPackOutputError";
+    }
+  };
   DEFAULT_SOURCE = {
     repoUrl: REPO_URL,
     branch: null,
@@ -111814,6 +111717,12 @@ function getSkillsSourceFailureDetails(error51) {
       retry: "RetryWillNotFix"
     };
   }
+  if (isSkillsPackOutputError(error51)) {
+    return {
+      instructions: "Your npm version prints a `pack --json` shape this CLI cannot read. Update the CLI (`uip update`), or set UIP_SKILLS_PM=pnpm (or bun/yarn) to fetch skills with another package manager, which skips npm pack entirely.",
+      retry: "RetryWillNotFix"
+    };
+  }
   return {
     instructions: "Check network connectivity and try again. Ensure the @uipath/skills package is available from the configured npm registry.",
     retry: "RetryLater"
@@ -112091,7 +112000,7 @@ function getRootDir(options) {
 async function resolveCatalog(options) {
   const rootDir = getRootDir(options);
   const source = resolveSkillSource(options.repo, options.branch);
-  const storePath = await getContentStore(rootDir, source);
+  const storePath = await getContentStoreForRead(rootDir, source);
   const shadowed = [];
   const skills = await getAvailableSkills(storePath, shadowed);
   const catalog = await buildSkillCatalog(skills, {
@@ -117060,14 +116969,12 @@ var init_ora = __esm(() => {
 
 // src/services/updateFailureFormat.ts
 function pinnedLineRemediation(origin) {
-  if (origin === "environment")
-    return ENVIRONMENT_LINE_REMEDIATION;
   if (origin === "latest")
     return LATEST_LINE_REMEDIATION;
   return PINNED_LINE_REMEDIATION;
 }
 function toolFailureRemediation(origin) {
-  const changeTarget = origin === "environment" ? "pin a version line with `uip config set version <major.minor>` to override your environment" : origin === "latest" ? "pin a version line with `uip config set version <major.minor>`" : "adjust the pinned `core.version`";
+  const changeTarget = origin === "latest" ? "pin a version line with `uip config set version <major.minor>`" : "adjust the pinned `core.version`";
   return `Check tool compatibility with the current CLI version, ${changeTarget}, ` + `or run \`uip config set updateChannel ${CHANNEL_PLACEHOLDER}\` to switch release channels.`;
 }
 function isPinnedLineMissing(error52) {
@@ -117079,17 +116986,12 @@ function describeSearchedRegistry(registry3) {
 function describeMissingLine(opts) {
   const { pin, origin, targetLine, searched } = opts;
   const suffix = describeSearchedRegistry(searched);
-  if (origin === "environment") {
-    return `No version found matching your environment's version line ${formatVersionPin(pin)} in the ${targetLine} line${suffix}`;
-  }
   if (origin === "latest") {
     return `No version found in the latest ${targetLine} line${suffix}`;
   }
   return `No version found matching pinned ${formatVersionPin(pin)} in the ${targetLine} line${suffix}`;
 }
 function describeDowngradeReason(origin) {
-  if (origin === "environment")
-    return "your environment's version line";
   if (origin === "latest")
     return "the latest version line";
   return "the pinned version";
@@ -117108,9 +117010,6 @@ function describePinnedLine(target) {
   if (!target?.pin)
     return "the pinned version line";
   const line = `${target.pin.major}.${target.pin.minor}`;
-  if (target.origin === "environment") {
-    return `your environment's version line ${line}`;
-  }
   if (target.origin === "latest") {
     return `the latest version line ${line}`;
   }
@@ -117127,12 +117026,11 @@ function collapsePinnedLineErrors(report, target) {
     individual: report.Errors.filter((e) => !isPinnedLineMissing(e))
   };
 }
-var PINNED_LINE_REMEDIATION, ENVIRONMENT_LINE_REMEDIATION, LATEST_LINE_REMEDIATION;
+var PINNED_LINE_REMEDIATION, LATEST_LINE_REMEDIATION;
 var init_updateFailureFormat = __esm(() => {
   init_channels();
   init_versionPin();
-  PINNED_LINE_REMEDIATION = "Pin a published version line with `uip config set version <major.minor>`, " + `switch channels with \`uip config set updateChannel ${CHANNEL_PLACEHOLDER}\`, ` + "or clear the pin with `uip config clear version` to track your " + "environment or the latest release, then re-run `uip update`.";
-  ENVIRONMENT_LINE_REMEDIATION = "This line comes from your environment, not a config pin — " + "`uip config clear version` will not change it. Pin a published version " + "line with `uip config set version <major.minor>` to override the " + "environment, or switch channels with " + `\`uip config set updateChannel ${CHANNEL_PLACEHOLDER}\`, then re-run \`uip update\`.`;
+  PINNED_LINE_REMEDIATION = "Pin a published version line with `uip config set version <major.minor>`, " + `switch channels with \`uip config set updateChannel ${CHANNEL_PLACEHOLDER}\`, ` + "or clear the pin with `uip config clear version` to track the latest " + "release, then re-run `uip update`.";
   LATEST_LINE_REMEDIATION = "Pin a published version line with `uip config set version <major.minor>`, " + `or switch channels with \`uip config set updateChannel ${CHANNEL_PLACEHOLDER}\`, ` + "then re-run `uip update`.";
 });
 
@@ -117146,13 +117044,6 @@ function buildToolUpdatePolicy(opts, cliVersionPrefix) {
   if (pin) {
     const targetLine2 = formatTargetLine(pinnedPrefix(pin));
     const renderedPin = formatVersionPin(pin);
-    if (opts.pinOrigin === "environment") {
-      return {
-        resolvedBy: "environment",
-        targetLine: targetLine2,
-        reason: `Using your environment's version line ${renderedPin}; tools resolve within ${targetLine2}.`
-      };
-    }
     return {
       resolvedBy: "core.version",
       targetLine: targetLine2,
@@ -117391,230 +117282,22 @@ var init_updateService_tools = __esm(() => {
   };
 });
 
-// src/services/versionSyncState.ts
-import { randomUUID as randomUUID7 } from "node:crypto";
-function todayLocal() {
-  const d = new Date;
-  const month = String(d.getMonth() + 1).padStart(2, "0");
-  const day = String(d.getDate()).padStart(2, "0");
-  return `${d.getFullYear()}-${month}-${day}`;
-}
-function stateFilePath(fs7) {
-  return fs7.path.join(fs7.env.homedir(), UIPATH_HOME_DIR, STATE_FILENAME);
-}
-async function readState(fs7 = getFileSystem()) {
-  const [readErr, raw] = await catchError(fs7.readFile(stateFilePath(fs7), "utf-8"));
-  if (readErr || !raw)
-    return {};
-  const [parseErr, parsed] = catchError(() => JSON.parse(raw));
-  if (parseErr || parsed === null || typeof parsed !== "object") {
-    return {};
-  }
-  const state = {};
-  if (typeof parsed.lastUpdateDate === "string") {
-    state.lastUpdateDate = parsed.lastUpdateDate;
-  }
-  if (typeof parsed.envLine === "string")
-    state.envLine = parsed.envLine;
-  if (typeof parsed.envLineDate === "string") {
-    state.envLineDate = parsed.envLineDate;
-  }
-  if (typeof parsed.envLineAttemptDate === "string") {
-    state.envLineAttemptDate = parsed.envLineAttemptDate;
-  }
-  if (typeof parsed.envKey === "string")
-    state.envKey = parsed.envKey;
-  return state;
-}
-async function mergeState(patch, fs7 = getFileSystem()) {
-  const current = await readState(fs7);
-  const next = { ...current, ...patch };
-  const target = stateFilePath(fs7);
-  await catchError(fs7.mkdir(fs7.path.dirname(target)));
-  const tempPath = `${target}.${randomUUID7()}.tmp`;
-  const [err] = await catchError((async () => {
-    await fs7.writeFile(tempPath, JSON.stringify(next, null, 2));
-    await fs7.rename(tempPath, target);
-  })());
-  if (err) {
-    await catchError(fs7.rm(tempPath));
-    return false;
-  }
-  return true;
-}
-async function invalidateSyncState(fs7 = getFileSystem()) {
-  await catchError(fs7.rm(stateFilePath(fs7)));
-}
-var STATE_FILENAME = "version-sync.json";
-var init_versionSyncState = __esm(() => {
-  init_src2();
-  init_src();
-});
-
 // src/services/versionTarget.ts
-function mapAuthorityToEnvironment(baseUrl) {
-  const [err, host] = catchError(() => new URL(baseUrl).hostname.toLowerCase());
-  if (err || !host)
-    return "unknown";
-  if (host === "alpha.uipath.com")
-    return "alpha";
-  if (host === "staging.uipath.com")
-    return "staging";
-  if (host === "cloud.uipath.com")
-    return "cloud";
-  return "unknown";
-}
-async function currentKnownEnvironment() {
-  const { auth: auth2 } = await Promise.resolve().then(() => (init_auth(), exports_auth));
-  const [statusErr, status] = await catchError(auth2.getLoginStatus());
-  if (statusErr || status.loginStatus !== "Logged in" || !status.baseUrl) {
-    return null;
-  }
-  const env2 = mapAuthorityToEnvironment(status.baseUrl);
-  return env2 === "unknown" ? null : env2;
-}
-async function downloadVersions() {
-  const { toolService: toolService2 } = await Promise.resolve().then(() => (init_toolService(), exports_toolService));
-  const [dlErr, raw] = await catchError(toolService2.downloadPackageFile(VERSIONS_PACKAGE, VERSIONS_FILENAME, {
-    timeoutMs: DOWNLOAD_TIMEOUT_MS
-  }));
-  if (dlErr) {
-    logger.debug(`Failed to download ${VERSIONS_FILENAME} from ${VERSIONS_PACKAGE}: ${dlErr.message}`);
-    return null;
-  }
-  const [jsonErr, json3] = catchError(() => JSON.parse(raw));
-  if (jsonErr) {
-    logger.debug(`Failed to parse ${VERSIONS_FILENAME}: ${jsonErr.message}`);
-    return null;
-  }
-  return json3;
-}
-async function fetchEnvLine(env2) {
-  const versions2 = await downloadVersions();
-  if (!versions2)
-    return null;
-  const parsed = VersionsSchema.safeParse(versions2);
-  if (!parsed.success) {
-    logger.debug("cli-versions.json failed schema validation; skipping");
-    return null;
-  }
-  if (parsed.data.schemaVersion !== undefined && parsed.data.schemaVersion > SUPPORTED_SCHEMA_VERSION) {
-    logger.debug(`cli-versions.json schemaVersion ${parsed.data.schemaVersion} is newer than supported ${SUPPORTED_SCHEMA_VERSION}; skipping`);
-    return null;
-  }
-  const line = parsed.data.environments[env2]?.cliVersion;
-  if (!line || !majorMinorPinOf(line)) {
-    logger.debug(`No usable cliVersion for '${env2}'; skipping`);
-    return null;
-  }
-  return line;
-}
-function cacheFresh(state, env2) {
-  return state.envKey === env2 && state.envLineDate === todayLocal();
-}
-async function refreshEnvCacheIfStale() {
-  const state = await readState();
-  const today = todayLocal();
-  if (state.envLineAttemptDate === today) {
-    logger.debug("Env refresh skipped: already attempted today (backoff after a failed fetch)");
-    return state.envLine ?? null;
-  }
-  const env2 = await currentKnownEnvironment();
-  if (!env2) {
-    logger.debug("Env refresh skipped: not logged into a known environment");
-    return null;
-  }
-  if (cacheFresh(state, env2) && state.envLine) {
-    logger.debug(`Env line cache fresh (${env2}=${state.envLine}); skipping`);
-    return state.envLine;
-  }
-  if (!await mergeState({ envLineAttemptDate: today })) {
-    logger.debug("Env refresh skipped: could not persist the attempt claim (state dir unwritable)");
-    return state.envLine ?? null;
-  }
-  const line = await fetchEnvLine(env2);
-  if (!line)
-    return null;
-  await mergeState({ envLine: line, envLineDate: today, envKey: env2 });
-  logger.debug(`Env line cached: ${env2}=${line}`);
-  return line;
-}
-async function getEnvLine(env2, allowFetch) {
-  const state = await readState();
-  if (cacheFresh(state, env2) && state.envLine)
-    return state.envLine;
-  if (state.envKey === env2 && state.envLine && !allowFetch) {
-    return state.envLine;
-  }
-  if (!allowFetch)
-    return null;
-  const line = await fetchEnvLine(env2);
-  if (!line)
-    return state.envKey === env2 ? state.envLine ?? null : null;
-  await mergeState({ envLine: line, envLineDate: todayLocal(), envKey: env2 });
-  return line;
-}
-async function resolveEffectiveTarget(allowFetch = true) {
+function resolveEffectiveTarget() {
   const pin = resolvePinnedVersion();
   if (pin) {
     return { pin, frozen: isExactPin(pin), origin: "config" };
   }
-  const env2 = await currentKnownEnvironment();
-  if (env2) {
-    const line = await getEnvLine(env2, allowFetch);
-    const envPin = line ? majorMinorPinOf(line) : null;
-    if (envPin) {
-      return {
-        pin: envPin,
-        frozen: false,
-        origin: "environment",
-        envKey: env2
-      };
-    }
-    return {
-      pin: null,
-      frozen: false,
-      origin: "environment",
-      envKey: env2,
-      envUnresolved: true
-    };
-  }
   return { pin: null, frozen: false, origin: "latest" };
 }
-var VERSIONS_PACKAGE = "@uipath/cli-meta", VERSIONS_FILENAME = "cli-versions.json", SUPPORTED_SCHEMA_VERSION = 1, DOWNLOAD_TIMEOUT_MS = 8000, VersionsSchema;
 var init_versionTarget = __esm(() => {
-  init_src2();
-  init_zod();
   init_versionPin();
-  init_versionSyncState();
-  VersionsSchema = exports_external.object({
-    schemaVersion: exports_external.number().optional(),
-    environments: exports_external.record(exports_external.string(), exports_external.object({ cliVersion: exports_external.string().min(1) }).passthrough())
-  }).passthrough();
 });
 
 // src/commands/tools/update.ts
 function registerUpdateCommand2(toolsCommand, _context, state) {
   toolsCommand.command("update").description("Update installed tools within the active version line").option("--name <scoped-tool-name>", "scoped package name").examples(TOOLS_UPDATE_EXAMPLES).trackedAction(processContext, async (options) => {
-    const [targetErr, target] = await catchError(resolveEffectiveTarget(true));
-    if (targetErr) {
-      OutputFormatter.error({
-        Result: RESULTS.Failure,
-        Message: `Could not determine the update target: ${targetErr.message}`,
-        Instructions: "Re-run `uip tools update`; if it persists, check the log file, or pin a line with `uip config set version <major.minor>` to bypass environment resolution."
-      });
-      processContext.exit(EXIT_CODES.Failure);
-      return;
-    }
-    if (target.envUnresolved) {
-      OutputFormatter.error({
-        Result: RESULTS.Failure,
-        Message: "Could not resolve your environment's version line.",
-        Instructions: "Check your connection and re-run `uip tools update`, or pin a line with `uip config set version <major.minor>` to override the environment."
-      });
-      processContext.exit(EXIT_CODES.Failure);
-      return;
-    }
+    const target = resolveEffectiveTarget();
     if (target.frozen && target.pin) {
       const exact = formatVersionPin(target.pin);
       const line = `${target.pin.major}.${target.pin.minor}`;
@@ -118070,10 +117753,7 @@ async function checkCliVersion(opts) {
     return skipped(opts.cliPkgVersion, "dev mode");
   }
   const pin = opts.pin ?? null;
-  const [err, latest] = await catchError(pin ? toolService.searchLatestVersion("@uipath/cli", pinnedPrefix(pin), {
-    channel: opts.channel,
-    timeoutMs: CLI_VERSION_PROBE_TIMEOUT_MS
-  }) : toolService.searchLatestVersion("@uipath/cli", undefined, {
+  const [err, latest] = await catchError(toolService.searchLatestVersion("@uipath/cli", pin ? pinnedPrefix(pin) : undefined, {
     channel: opts.channel,
     timeoutMs: CLI_VERSION_PROBE_TIMEOUT_MS
   }));
@@ -118099,6 +117779,15 @@ async function checkCliVersion(opts) {
     }
     return skipped(opts.cliPkgVersion, `no ${opts.channel} version found`);
   }
+  if (!pin && exceedsMajorCeiling(latest, opts.maxMajor)) {
+    return {
+      current: opts.cliPkgVersion,
+      available: latest,
+      action: "none",
+      reason: null,
+      heldBackVersion: latest
+    };
+  }
   const differs = pin ? compareSemver(latest, opts.cliPkgVersion) !== 0 : compareSemver(latest, opts.cliPkgVersion) > 0;
   if (differs) {
     return {
@@ -118115,6 +117804,12 @@ async function checkCliVersion(opts) {
     reason: null
   };
 }
+function exceedsMajorCeiling(version2, maxMajor) {
+  if (maxMajor === undefined)
+    return false;
+  const major = majorOf(version2);
+  return major !== null && major > maxMajor;
+}
 function skipped(current, reason) {
   return { current, available: null, action: "skipped", reason };
 }
@@ -118171,7 +117866,8 @@ async function runUpdate(options, state, cliEnv) {
     cliPkgVersion: cliEnv.cliPkgVersion,
     isDev: cliEnv.isDev,
     pin: options.versionPin ?? null,
-    pinOrigin: options.versionPinOrigin
+    pinOrigin: options.versionPinOrigin,
+    maxMajor: options.maxMajor
   }) : null;
   let detectedInstallCtx = null;
   const getDetectedInstallCtx = () => {
@@ -118343,25 +118039,7 @@ function registerUpdateCommand3(program2, _context, state) {
       processContext.exit(EXIT_CODES.ValidationError);
       return;
     }
-    const [targetErr, target] = await catchError(resolveEffectiveTarget(true));
-    if (targetErr) {
-      OutputFormatter.error({
-        Result: RESULTS.Failure,
-        Message: `Could not determine the update target: ${targetErr.message}`,
-        Instructions: "Re-run `uip update`; if it persists, check the log file, or pin a line with `uip config set version <major.minor>` to bypass environment resolution."
-      });
-      processContext.exit(EXIT_CODES.Failure);
-      return;
-    }
-    if (target.envUnresolved) {
-      OutputFormatter.error({
-        Result: RESULTS.Failure,
-        Message: "Could not resolve your environment's version line.",
-        Instructions: "Check your connection and re-run `uip update`, or pin a line with `uip config set version <major.minor>` to override the environment."
-      });
-      processContext.exit(EXIT_CODES.Failure);
-      return;
-    }
+    const target = resolveEffectiveTarget();
     if (target.frozen && target.pin) {
       const exact = formatVersionPin(target.pin);
       const line = `${target.pin.major}.${target.pin.minor}`;
@@ -118897,6 +118575,53 @@ var init_tool_manager = __esm(() => {
   init_toolService();
 });
 
+// src/services/versionSyncState.ts
+import { randomUUID as randomUUID7 } from "node:crypto";
+function todayLocal() {
+  const d = new Date;
+  const month = String(d.getMonth() + 1).padStart(2, "0");
+  const day = String(d.getDate()).padStart(2, "0");
+  return `${d.getFullYear()}-${month}-${day}`;
+}
+function stateFilePath(fs7) {
+  return fs7.path.join(fs7.env.homedir(), UIPATH_HOME_DIR, STATE_FILENAME);
+}
+async function readState(fs7 = getFileSystem()) {
+  const [readErr, raw] = await catchError(fs7.readFile(stateFilePath(fs7), "utf-8"));
+  if (readErr || !raw)
+    return {};
+  const [parseErr, parsed] = catchError(() => JSON.parse(raw));
+  if (parseErr || parsed === null || typeof parsed !== "object") {
+    return {};
+  }
+  const state = {};
+  if (typeof parsed.lastUpdateDate === "string") {
+    state.lastUpdateDate = parsed.lastUpdateDate;
+  }
+  return state;
+}
+async function mergeState(patch, fs7 = getFileSystem()) {
+  const current = await readState(fs7);
+  const next = { ...current, ...patch };
+  const target = stateFilePath(fs7);
+  await catchError(fs7.mkdir(fs7.path.dirname(target)));
+  const tempPath = `${target}.${randomUUID7()}.tmp`;
+  const [err] = await catchError((async () => {
+    await fs7.writeFile(tempPath, JSON.stringify(next, null, 2));
+    await fs7.rename(tempPath, target);
+  })());
+  if (err) {
+    await catchError(fs7.rm(tempPath));
+    return false;
+  }
+  return true;
+}
+var STATE_FILENAME = "version-sync.json";
+var init_versionSyncState = __esm(() => {
+  init_src2();
+  init_src();
+});
+
 // src/services/versionSync.ts
 async function maybeRunDailyVersionSync(context, state) {
   const [err, reexeced] = await catchError(runStartupSync(context, state));
@@ -118906,33 +118631,6 @@ async function maybeRunDailyVersionSync(context, state) {
   }
   return reexeced;
 }
-async function runPostLoginVersionSync(context) {
-  if (context.capabilities.isBrowser) {
-    logger.debug("Post-login sync skipped: browser environment");
-    return;
-  }
-  if (isTruthyEnv(process.env[DISABLE_ENV])) {
-    logger.debug(`Post-login sync skipped: ${DISABLE_ENV} is set`);
-    return;
-  }
-  const verb = extractVerb(context.args);
-  if (verb !== "login") {
-    logger.debug(`Post-login sync: not a login command (verb=${verb})`);
-    return;
-  }
-  if (extractVerb(context.args, 1) === "status") {
-    logger.debug("Post-login sync: read-only `login status`; skipping");
-    return;
-  }
-  if (process.exitCode) {
-    logger.debug(`Post-login sync: login failed (exitCode=${String(process.exitCode)}); skipping`);
-    return;
-  }
-  logger.debug("Post-login sync: invalidating sync state for re-check");
-  const [err] = await catchError(invalidateSyncState());
-  if (err)
-    logger.debug(`Post-login state invalidation failed: ${err.message}`);
-}
 async function runStartupSync(context, state) {
   logger.debug("Version sync evaluating (trigger=startup)");
   if (context.capabilities.isBrowser) {
@@ -118970,16 +118668,8 @@ async function runStartupSync(context, state) {
     logger.debug("Version sync skipped: Studio-bundled CLI distribution");
     return false;
   }
-  await maybeRefreshEnvCache();
   return runDailyAutoUpdate(state, context);
 }
-async function maybeRefreshEnvCache() {
-  if (resolvePinnedVersion()) {
-    logger.debug("Env refresh skipped: core.version is pinned");
-    return;
-  }
-  await catchError(refreshEnvCacheIfStale());
-}
 async function runDailyAutoUpdate(state, context) {
   const today = todayLocal();
   const prev = await readState();
@@ -118987,17 +118677,12 @@ async function runDailyAutoUpdate(state, context) {
     logger.debug("Daily auto-update already ran today; skipping");
     return false;
   }
-  const target = await resolveEffectiveTarget(false);
+  const target = resolveEffectiveTarget();
   if (target.frozen) {
     await mergeState({ lastUpdateDate: today });
     logger.debug("Daily auto-update skipped: exact pin (frozen)");
     return false;
   }
-  if (target.envUnresolved) {
-    await mergeState({ lastUpdateDate: today });
-    logger.debug("Daily auto-update skipped: environment line unresolved today");
-    return false;
-  }
   if (!await mergeState({ lastUpdateDate: today })) {
     logger.debug("Daily auto-update skipped: could not persist the day claim (state dir unwritable)");
     return false;
@@ -119005,9 +118690,18 @@ async function runDailyAutoUpdate(state, context) {
   writeSyncStatus(context, "Checking for updates.");
   return applyUpdate(state, context, {
     pin: target.pin,
-    origin: target.origin
+    origin: target.origin,
+    ...target.pin ? {} : runningMajorCeiling()
   });
 }
+function runningMajorCeiling() {
+  const major = majorOf(package_default.version);
+  if (major === null) {
+    logger.debug(`Daily auto-update: no major ceiling (unparseable CLI version '${package_default.version}')`);
+    return {};
+  }
+  return { maxMajor: major };
+}
 async function applyUpdate(state, context, target) {
   const location = await resolveUpdateLocation(state, context);
   if (!location)
@@ -119028,7 +118722,7 @@ async function resolveUpdateLocation(state, context) {
 }
 async function runUpdateEngine(state, location, context, target) {
   const { runUpdate: runUpdate2 } = await Promise.resolve().then(() => (init_updateService(), exports_updateService));
-  writeSyncStatus(context, formatUpdateStartMessage(target.pin));
+  writeSyncStatus(context, formatUpdateStartMessage(target));
   const [updErr, report] = await catchError(runUpdate2({
     dryRun: false,
     channel: resolveChannel(),
@@ -119037,7 +118731,8 @@ async function runUpdateEngine(state, location, context, target) {
     skills: { agent: undefined, local: undefined },
     cli: { self: true },
     versionPin: target.pin,
-    versionPinOrigin: target.origin
+    versionPinOrigin: target.origin,
+    maxMajor: target.maxMajor
   }, state, {
     cliPkgVersion: package_default.version,
     isLocal: !location.global,
@@ -119061,6 +118756,10 @@ function finishUpdate(report, context, target) {
   for (const e of report.Errors) {
     logger.debug(`[${e.Subsystem}] ${e.Message} ${e.Instructions}`);
   }
+  const heldBack = report.Cli?.heldBackVersion;
+  if (heldBack) {
+    writeSyncStatus(context, `@uipath/cli ${heldBack} is available but was not installed: the daily update does not cross major versions. Run \`uip update\` to move to it, or \`uip config set version <major.minor>\` to hold a line.`);
+  }
   const cliUpdated = report.Cli?.action === "updated";
   const toolsUpdated = !!report.Tools?.some((t) => t.status === "updated");
   const skillsUpdated = countRefreshedSkills(report) > 0;
@@ -119084,9 +118783,10 @@ function formatInstallLocationFailure(error52) {
   const suffix = error52 ? `: ${error52.message}` : ".";
   return `Update failed: could not resolve the CLI install location${suffix}`;
 }
-function formatUpdateStartMessage(effectivePin) {
+function formatUpdateStartMessage(target) {
+  const effectivePin = target.pin;
   if (!effectivePin) {
-    return "Updating UiPath CLI, tools, and skills.";
+    return target.maxMajor === undefined ? "Updating UiPath CLI, tools, and skills." : `Updating UiPath CLI, tools, and skills within version ${target.maxMajor}.x.`;
   }
   const version2 = effectivePin.patch === undefined ? `${formatVersionPin(effectivePin)}.x` : formatVersionPin(effectivePin);
   return `Updating UiPath CLI, tools, and skills to version ${version2}.`;
@@ -119161,14 +118861,10 @@ function runChild(spawnFn, command, args, env2) {
     child.on("close", (code) => resolve2(code));
   });
 }
-function extractVerb(args, index = 0) {
-  let bare = 0;
+function extractVerb(args) {
   for (const a of stripGlobalOptions(args.slice(2)).args) {
-    if (a.startsWith("-"))
-      continue;
-    if (bare === index)
+    if (!a.startsWith("-"))
       return a;
-    bare += 1;
   }
   return;
 }
@@ -119441,7 +119137,6 @@ async function runNode(context) {
     return;
   }
   await parseAndExit(built.program, built.cleanedArgs, context);
-  await runPostLoginVersionSync(context);
 }
 var init_cli_node = __esm(() => {
   init_src2();
@@ -146502,4 +146197,4 @@ export {
   ready
 };
 
-//# debugId=A9C1057DC86744DF64756E2164756E21
+//# debugId=89C06392F1E4D6D164756E2164756E21