@uipath/cli 1.202.1 → 1.203.0-preview.180

package/dist/{index-v5cj0bhj.js → index-vmn69waj.js}

@@ -568,6 +568,63 @@ function getActiveAuthProfileFilePath() {
   const profile = getActiveAuthProfile();
   return profile ? resolveAuthProfileFilePath(profile) : undefined;
 }
+function getAuthProfilesRootPath() {
+  const fs = getFileSystem();
+  return fs.path.join(fs.env.homedir(), UIPATH_HOME_DIR, PROFILE_DIR);
+}
+function resolveAuthProfileDirPath(profile) {
+  const normalized = normalizeAuthProfileName(profile);
+  if (normalized === undefined) {
+    throw new AuthProfileValidationError(`"${DEFAULT_AUTH_PROFILE}" is the built-in profile and does not have a profile directory.`);
+  }
+  const fs = getFileSystem();
+  return fs.path.join(getAuthProfilesRootPath(), normalized);
+}
+async function listAuthProfileNamesAsync() {
+  const fs = getFileSystem();
+  const root = getAuthProfilesRootPath();
+  if (!await fs.exists(root)) {
+    return [];
+  }
+  const [readError, entries] = await catchError(fs.readdir(root));
+  if (readError || !entries) {
+    return [];
+  }
+  const names = [];
+  for (const entry of entries) {
+    if (!PROFILE_NAME_RE.test(entry) || entry === DEFAULT_AUTH_PROFILE) {
+      continue;
+    }
+    const stats = await fs.stat(fs.path.join(root, entry));
+    if (stats?.isDirectory()) {
+      names.push(entry);
+    }
+  }
+  return names.sort((a, b) => a.localeCompare(b));
+}
+async function authProfileExistsAsync(profile) {
+  const fs = getFileSystem();
+  const [pathError, dir] = catchError(() => resolveAuthProfileDirPath(profile));
+  if (pathError || dir === undefined) {
+    return false;
+  }
+  const stats = await fs.stat(dir);
+  return stats?.isDirectory() === true;
+}
+async function deleteAuthProfileAsync(profile) {
+  const dir = resolveAuthProfileDirPath(profile);
+  const fs = getFileSystem();
+  const relativeToRoot = fs.path.relative(getAuthProfilesRootPath(), dir);
+  if (relativeToRoot === "" || relativeToRoot.startsWith("..") || fs.path.isAbsolute(relativeToRoot)) {
+    throw new AuthProfileValidationError(`Refusing to delete "${profile}": resolved path escapes the profiles directory.`);
+  }
+  const stats = await fs.stat(dir);
+  if (stats?.isDirectory() !== true) {
+    return;
+  }
+  await fs.rm(dir);
+  return dir;
+}
 
 // ../auth/src/utils/jwt.ts
 class InvalidIssuerError extends Error {
@@ -1136,16 +1193,7 @@ var resolveEnvFilePathAsync = async (envFilePath = DEFAULT_ENV_FILENAME, opts) =
     errorMessage: location.source === "absolute" ? `Environment file not found: ${envFilePath}` : `Unable to locate environment file: ${envFilePath}. Run 'uip login' to authenticate.`
   };
 };
-var loadEnvFileAsync = async ({ envPath }) => {
-  const fs = getFileSystem();
-  const absolutePath = fs.path.isAbsolute(envPath) ? envPath : fs.path.join(fs.env.cwd(), envPath);
-  if (!await fs.exists(absolutePath)) {
-    throw new Error(`Environment file not found: ${envPath}`);
-  }
-  const content = await fs.readFile(absolutePath, "utf-8");
-  if (content === null) {
-    throw new Error(`Environment file not found: ${envPath}`);
-  }
+var parseEnvContent = (content) => {
   const env = {};
   for (const line of content.split(`
 `)) {
@@ -1166,6 +1214,18 @@ var loadEnvFileAsync = async ({ envPath }) => {
   }
   return env;
 };
+var loadEnvFileAsync = async ({ envPath }) => {
+  const fs = getFileSystem();
+  const absolutePath = fs.path.isAbsolute(envPath) ? envPath : fs.path.join(fs.env.cwd(), envPath);
+  if (!await fs.exists(absolutePath)) {
+    throw new Error(`Environment file not found: ${envPath}`);
+  }
+  const content = await fs.readFile(absolutePath, "utf-8");
+  if (content === null) {
+    throw new Error(`Environment file not found: ${envPath}`);
+  }
+  return parseEnvContent(content);
+};
 var saveEnvFileAsync = async ({
   envPath,
   data,
@@ -1740,6 +1800,61 @@ var getAuthEnv = async (options = {}) => {
   }
   return { authEnv, loginStatus: status };
 };
+// ../auth/src/authProfileDetails.ts
+var ORGANIZATION_NAME_KEY = "UIPATH_ORGANIZATION_NAME";
+var TENANT_NAME_KEY = "UIPATH_TENANT_NAME";
+var URL_KEY = "UIPATH_URL";
+var ACCESS_TOKEN_KEY = "UIPATH_ACCESS_TOKEN";
+function statusFromToken(accessToken) {
+  if (!accessToken) {
+    return { status: "Not logged in" };
+  }
+  const expiration = getTokenExpiration(accessToken);
+  if (expiration === undefined) {
+    return { status: "Logged in" };
+  }
+  return {
+    status: expiration.getTime() <= Date.now() ? "Expired" : "Logged in",
+    expiresAt: expiration.toISOString()
+  };
+}
+async function describeAuthProfileAsync(name, filePath, active) {
+  const base = {
+    name,
+    active,
+    ...filePath ? { path: filePath } : {}
+  };
+  if (!filePath) {
+    return { ...base, status: "Not logged in" };
+  }
+  const fs = getFileSystem();
+  const [readError, content] = await catchError(fs.readFile(filePath, "utf-8"));
+  if (readError) {
+    return { ...base, status: "Unreadable" };
+  }
+  if (content === null || content === undefined) {
+    return { ...base, status: "Not logged in" };
+  }
+  const values = parseEnvContent(content);
+  return {
+    ...base,
+    ...values[ORGANIZATION_NAME_KEY] ? { organizationName: values[ORGANIZATION_NAME_KEY] } : {},
+    ...values[TENANT_NAME_KEY] ? { tenantName: values[TENANT_NAME_KEY] } : {},
+    ...values[URL_KEY] ? { url: values[URL_KEY] } : {},
+    ...statusFromToken(values[ACCESS_TOKEN_KEY])
+  };
+}
+async function describeAuthProfilesAsync() {
+  const activeProfile = getActiveAuthProfile();
+  const [defaultPathError, defaultLocation] = await catchError(resolveEnvFilePathAsync());
+  const rows = [
+    await describeAuthProfileAsync(DEFAULT_AUTH_PROFILE, defaultPathError ? undefined : defaultLocation?.absolutePath, activeProfile === undefined)
+  ];
+  for (const name of await listAuthProfileNamesAsync()) {
+    rows.push(await describeAuthProfileAsync(name, resolveAuthProfileFilePath(name), activeProfile === name));
+  }
+  return rows;
+}
 // ../auth/src/tokenGrant.ts
 var requestClientCredentialsToken = async ({
   tokenEndpoint,
@@ -2322,6 +2437,6 @@ var authenticate = async ({
   });
 };
 
-export { setAuthFileConfig, InvalidBaseUrlError, DEFAULT_AUTH_PROFILE, AuthProfileValidationError, normalizeAuthProfileName, setActiveAuthProfile, clearActiveAuthProfile, getActiveAuthProfile, runWithAuthProfile, resolveAuthProfileFilePath, getActiveAuthProfileFilePath, parseJWT, parseAuthFlow, resolveSessionIdentity, ENV_AUTH_ENABLE_VAR, ENFORCE_ROBOT_AUTH_VAR, ENV_AUTH_VARS, EnvAuthConfigError, isEnvAuthEnabled, isRobotAuthEnforced, readAuthFromEnv, refreshTokenFingerprint, loadRefreshBreaker, saveRefreshBreaker, clearRefreshBreaker, registerRobotClientLoader, TokenRefreshOAuthError, isTokenRefreshOAuthFailure, refreshAccessToken, AUTH_FLOW_ENV_VAR, DEFAULT_AUTH_FILENAME, DEFAULT_ENV_FILENAME, resolveEnvFileLocationAsync, resolveEnvFilePathAsync, loadEnvFileAsync, saveEnvFileAsync, CredentialSource, getLoginStatusAsync, getLoginStatusWithDeps, getAuthContext, getAuthEnv, ClientCredentialsAuthenticationError, clientCredentialsLogin, JWT_BEARER_ASSERTION_TYPE, FederatedCredentialsAuthenticationError, federatedCredentialsLogin, fetchTenantsAndOrganizations, TENANT_SELECTION_REQUIRED_CODE, INVALID_TENANT_CODE, TenantSelectionError, TenantSelectionRequiredError, InvalidTenantError, isTenantSelectionError, selectTenantWithDeps, interactiveLoginWithDeps, interactiveLogin, logoutWithDeps, logout, authenticate };
+export { setAuthFileConfig, InvalidBaseUrlError, DEFAULT_AUTH_PROFILE, AuthProfileValidationError, normalizeAuthProfileName, setActiveAuthProfile, clearActiveAuthProfile, getActiveAuthProfile, runWithAuthProfile, resolveAuthProfileFilePath, getActiveAuthProfileFilePath, getAuthProfilesRootPath, resolveAuthProfileDirPath, listAuthProfileNamesAsync, authProfileExistsAsync, deleteAuthProfileAsync, parseJWT, parseAuthFlow, resolveSessionIdentity, ENV_AUTH_ENABLE_VAR, ENFORCE_ROBOT_AUTH_VAR, ENV_AUTH_VARS, EnvAuthConfigError, isEnvAuthEnabled, isRobotAuthEnforced, readAuthFromEnv, refreshTokenFingerprint, loadRefreshBreaker, saveRefreshBreaker, clearRefreshBreaker, registerRobotClientLoader, TokenRefreshOAuthError, isTokenRefreshOAuthFailure, refreshAccessToken, AUTH_FLOW_ENV_VAR, DEFAULT_AUTH_FILENAME, DEFAULT_ENV_FILENAME, resolveEnvFileLocationAsync, resolveEnvFilePathAsync, loadEnvFileAsync, saveEnvFileAsync, CredentialSource, getLoginStatusAsync, getLoginStatusWithDeps, getAuthContext, getAuthEnv, describeAuthProfilesAsync, ClientCredentialsAuthenticationError, clientCredentialsLogin, JWT_BEARER_ASSERTION_TYPE, FederatedCredentialsAuthenticationError, federatedCredentialsLogin, fetchTenantsAndOrganizations, TENANT_SELECTION_REQUIRED_CODE, INVALID_TENANT_CODE, TenantSelectionError, TenantSelectionRequiredError, InvalidTenantError, isTenantSelectionError, selectTenantWithDeps, interactiveLoginWithDeps, interactiveLogin, logoutWithDeps, logout, authenticate };
 
-//# debugId=C423B6A3517C965364756E2164756E21
+//# debugId=05DE97FE1B9FF5A064756E2164756E21

package/dist/index.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   runNode
-} from "./index-9d17sa6t.js";
+} from "./index-szrenqr6.js";
 import {
   registerRobotClientLoader
-} from "./index-v5cj0bhj.js";
-import"./index-vmj27s6h.js";
+} from "./index-vmn69waj.js";
+import"./index-mtdmza3c.js";
 import {
   TELEMETRY_DRAIN_ARGV,
   configureLogger,
@@ -18,7 +18,7 @@ import {
   setProcessContextPollSignal,
   setProxyAuthHttpsAgent,
   setTelemetrySidecarEntry
-} from "./index-tqczrxct.js";
+} from "./index-7pvwjzsq.js";
 import"./index-g8ck9tv6.js";
 import"./index-hrt7fpkk.js";
 import"./index-d3w0wn6k.js";
@@ -192,7 +192,7 @@ var isMain = __require.main == __require.module ?? process.argv[1] === currentFi
 if (isMain) {
   setTelemetrySidecarEntry(currentFile);
   if (process.argv[2] === TELEMETRY_DRAIN_ARGV) {
-    const { drainPendingTelemetry } = await import("./telemetry-drain-wqmnr7t7.js");
+    const { drainPendingTelemetry } = await import("./telemetry-drain-zkrm8xja.js");
     await drainPendingTelemetry();
     process.exit(0);
   }

package/dist/{server-0243hbq7.js → server-z7wh3gfs.js}

@@ -1,14 +1,15 @@
 import {
   runWithAuthProfile
-} from "./index-v5cj0bhj.js";
+} from "./index-vmn69waj.js";
 import {
+  OUTPUT_FORMATS,
   catchError,
   collectCommands,
   getOutputSink,
   logger,
   runWithSink,
   setGlobalSink
-} from "./index-tqczrxct.js";
+} from "./index-7pvwjzsq.js";
 import"./index-g8ck9tv6.js";
 import {
   exports_external
@@ -83,7 +84,7 @@ async function executeCommand(command) {
   const previousSink = getOutputSink();
   setGlobalSink(sink);
   const [error] = await catchError(async () => {
-    const { run } = await import("./cli-p61a1vc8.js");
+    const { run } = await import("./cli-w7vb50ez.js");
     await runWithAuthProfile(undefined, () => runWithSink(sink, () => run(context)));
   });
   if (error) {
@@ -131,7 +132,7 @@ function introspectCommands(program) {
     }
   }
   lines.push(`
-Global Options (can be used with any command):`, "  --output <table|json|yaml|plain>: Output format (default: json)", "  --output-filter <expression>: JMESPath expression applied to the Data field of the response envelope", "  --log-level <debug|info|warn|error>: Log level threshold (default: info)", "  --log-file <path>: Write logs to file instead of stderr", "  --profile <name>: Use a named login profile (~/.uipath/profiles/<name>/.auth)", `
+Global Options (can be used with any command):`, `  --output <${OUTPUT_FORMATS.join("|")}>: Output format (default: json)`, "  --output-filter <expression>: JMESPath expression applied to the Data field of the response envelope", "  --log-level <debug|info|warn|error>: Log level threshold (default: info)", "  --log-file <path>: Write logs to file instead of stderr", "  --profile <name>: Use a named login profile (~/.uipath/profiles/<name>/.auth)", `
 Pass the command without the 'uip' prefix. Example: "login status --output json"`, `Filter example: "tools list --output-filter 'Data[].name'"`);
   return lines.join(`
 `);
@@ -191,4 +192,4 @@ export {
   startMcpServer
 };
 
-//# debugId=E369162B8A5BD33764756E2164756E21
+//# debugId=95A6EF0EC5E5518C64756E2164756E21

package/dist/{telemetry-drain-wqmnr7t7.js → telemetry-drain-zkrm8xja.js}

@@ -7,7 +7,7 @@ import {
   logger,
   releaseClaimedSpoolFile,
   sweepTelemetrySpool
-} from "./index-tqczrxct.js";
+} from "./index-7pvwjzsq.js";
 import"./index-xdxr3ync.js";
 import"./index-1yh8g550.js";
 

package/dist/{updateService-mashkk31.js → updateService-n7hftkkv.js}

@@ -1,7 +1,7 @@
 import {
   runUpdate
-} from "./index-vmj27s6h.js";
-import"./index-tqczrxct.js";
+} from "./index-mtdmza3c.js";
+import"./index-7pvwjzsq.js";
 import"./index-g8ck9tv6.js";
 import"./index-hrt7fpkk.js";
 import"./index-d3w0wn6k.js";

package/package.json

@@ -1,7 +1,8 @@
 {
     "name": "@uipath/cli",
+    "author": "UiPath",
     "license": "SEE LICENSE IN LICENSE.txt",
-    "version": "1.202.1",
+    "version": "1.203.0-preview.180",
     "description": "Cross platform CLI for UiPath",
     "repository": {
         "type": "git",
@@ -12,20 +13,15 @@
         "registry": "https://registry.npmjs.org/"
     },
     "type": "module",
+    "engines": {
+        "node": ">=22"
+    },
     "main": "./dist/index.js",
     "exports": {
-        ".": {
-            "browser": "./dist/index.browser.js",
-            "default": "./dist/index.js"
-        },
-        "./browser": "./dist/index.browser.js",
-        "./services/markdown-to-jira-wiki": "./dist/services.markdown.browser.js",
-        "./services/feedback/browser": "./dist/services.feedback.browser.js"
+        ".": "./dist/index.js"
     },
     "files": [
-        "dist",
-        "!dist/uip-browser.js",
-        "!dist/metafile.json"
+        "dist"
     ],
     "bin": {
         "uip": "./dist/index.js"
@@ -40,5 +36,5 @@
         "kerberos": "7.0.0",
         "node-expose-sspi": "0.1.60"
     },
-    "gitHead": "9792d74b5ec29276123d2b3daabcae49748c1fa6"
+    "gitHead": "4e0a51e3ab2c9d89afd3d35a7b087a7fa58133a0"
 }

package/README.browser.md

@@ -1,128 +0,0 @@
-# UiPath CLI — Browser Bundle
-
-A browser-runnable bundle of the UiPath CLI. Exposes a `UiPathCLI` global that host applications can load to run CLI commands without a Node.js backend.
-
-## What's in the bundle
-
-- **3 tools** (browser-compatible): `orchestrator-tool` (`or`), `integrationservice-tool` (`is`), `test-manager-tool` (`tm`)
-- **Core framework**: Commander program, `--output-filter`, output formatting, telemetry, error handling
-
-Each tool opts in by shipping a `browser.json` next to its `package.json` with `{ "compatible": true }`. At build time, `discover-browser-tools` scans `packages/*-tool/` and emits a virtual module importing each opted-in tool.
-
-Authentication is **not** included in this bundle — commands will return "Not logged in" until the browser-auth PR lands (#701).
-
-## Bundle
-
-- **Build command**: `bun run browser:build` (from `packages/cli/`)
-- **Output**: `packages/cli/dist/uip-browser.js`, plus `dist/metafile.json` for build-time assertions
-- **Size**: ~3.3 MB unminified; ~1.4 MB / ~250 KB gzipped when `minify: true` is re-enabled in `build-browser.ts`
-- **Format**: IIFE, exposes `UiPathCLI` global
-
-## Loading the bundle
-
-```html
-<script src="/path/to/uip-browser.js"></script>
-<script>
-  (async () => {
-    // Wait for filesystem (LightningFS over IndexedDB) to initialize
-    await UiPathCLI.ready;
-
-    // Run a CLI command
-    await UiPathCLI.run(['node', 'uip', '--help']);
-  })();
-</script>
-```
-
-## API
-
-### `UiPathCLI.run(args, options?)`
-
-Parses and executes a CLI invocation.
-
-```ts
-UiPathCLI.run(
-  args: string[],              // e.g. ['node', 'uip', 'or', 'folders', 'list']
-  options?: {
-    enabledTools?: string[];   // allowlist by command prefix: ['or', 'is']
-  }
-): Promise<void>
-```
-
-**`enabledTools`** — allowlist of tool command prefixes that register with Commander. Omit to register all discovered browser-compatible tools.
-
-### `UiPathCLI.ready`
-
-A `Promise<void>` that resolves when the virtual filesystem (LightningFS over IndexedDB) has initialized. Await before the first `run()` call.
-
-## Browser-compatible tools
-
-| Command | Tool | What it does |
-|---------|------|--------------|
-| `uip or <subcommand>` | orchestrator-tool | Jobs, processes, packages, folders, machines, licenses, users, permissions |
-| `uip is <subcommand>` | integrationservice-tool | Connectors, connections, triggers |
-| `uip tm <subcommand>` | test-manager-tool | Test cases, sets, executions, results |
-
-Use `uip or --help` (etc.) for the full subcommand tree.
-
-## Reusing services without the CLI program
-
-`@uipath/cli/browser` exports the CLI **runner** — the whole Commander program.
-A host that only needs one of the CLI's services can import it directly:
-
-```ts
-// Dependency-free, ~3KB, no side effects.
-const { markdownToJiraWiki } = await import(
-    "@uipath/cli/services/markdown-to-jira-wiki"
-);
-
-// ~178KB. Browser-only — @uipath/filesystem creates an IndexedDB store on
-// import, so this crashes under Node. Hence the `/browser` suffix, matching
-// `@uipath/cli/browser`.
-const { createFeedbackIssue, uploadAttachment } = await import(
-    "@uipath/cli/services/feedback/browser"
-);
-```
-
-These exist so embedding hosts stop duplicating service logic. Autopilot's Studio
-Web MFE serves `uip feedback send` through a host interceptor — the command is
-Node-only, registered in `cli.node.ts` — and had ported the markdown converter
-and the issue-creation calls verbatim. Two copies of the tracker's
-project/component/field ids is a drift hazard.
-
-The two entries are split deliberately: the markdown converter is
-dependency-free, so a host that only formats descriptions should not pay for a
-filesystem it never touches.
-
-**These bundles are browser-safe because of the build, not the dependency graph.**
-`@uipath/common` resolves to its Node source and reaches `node:async_hooks`;
-`build-browser.ts`'s alias map rewrites that to a throwing shim and routes
-`@uipath/filesystem` to its browser entry. Importing the TypeScript sources
-directly is not browser-safe.
-
-Node-only services are deliberately absent: `send-feedback.ts`
-(`@inquirer/prompts`, stdin) and `environmentInfo.ts` (`node:os`).
-`services.browser.spec.ts` guards the surface and the exclusions.
-
-No type declarations ship with this package, so declare the surface structurally
-at the call site — the same way Autopilot already declares `run`/`ready`.
-
-## Limitations
-
-- **No authentication.** Wiring for credential injection ships in a follow-up (#701). Until then, any command that calls the UiPath Cloud API returns `Not logged in`.
-- **No interactive prompts.** Commands that use `@inquirer/prompts` (e.g. `send-feedback`, `tools install --interactive`) are Node-only and not registered in the browser bundle.
-- **No file-based auth.** `uip login` / `uip logout` are Node-only and excluded from the browser entry.
-- **No subprocess spawning.** `child_process` is not available.
-- **Filesystem is virtual.** All file I/O routes through `@uipath/filesystem`'s `BrowserFileSystem`, backed by LightningFS + IndexedDB. Host-app code that reads/writes files should use `getFileSystem()` / `getFileSystemAsync()` from `@uipath/filesystem`.
-- **Direct `node:fs` / `node:path` imports fail at build time** for any non-commander caller — Rule 10 is enforced by the bundler.
-
-## CORS
-
-Once auth lands in #701, the bundle will make `fetch()` requests directly to the UiPath Cloud API. The host page's origin must be allow-listed by the target environment, or the host can proxy API calls through its own server to avoid cross-origin preflight.
-
-## Troubleshooting
-
-**`"Result": "Failure", "Instructions": "Not logged in..."`** — expected for now; auth wiring ships in #701.
-
-**`UiPathCLI is not defined`** — bundle hasn't loaded or loaded at a different scope. Confirm the `<script>` tag fires before your init code, or listen for its `load` event.
-
-**IndexedDB errors** — the bundle uses LightningFS for its virtual filesystem. Not available in headless environments without IndexedDB polyfills (e.g. `happy-dom` without `fake-indexeddb`).