@uipath/cli 1.203.0-preview.182 → 1.203.0-preview.205

package/dist/{index-pxqxy1sx.js → index-eb9q7r0k.js}

@@ -551,7 +551,7 @@ var package_default = {
   name: "@uipath/cli",
   author: "UiPath",
   license: "SEE LICENSE IN LICENSE.txt",
-  version: "1.203.0-preview.182",
+  version: "1.203.0-preview.205",
   description: "Cross platform CLI for UiPath",
   repository: {
     type: "git",
@@ -2758,13 +2758,12 @@ async function storeMatchesVersionLine(fs, storePath, targetVersion) {
   const version = asRecord(marker)?.version;
   return typeof version === "string" && matchesCliVersionLine(version, line);
 }
-async function readSkillDescription(fs, skillMdPath) {
+async function readSkillFrontmatter(fs, skillMdPath) {
   const [err, content] = await catchError(fs.readFile(skillMdPath, { encoding: "utf-8" }));
   if (err || !content)
-    return;
-  const head = content.length > 2048 ? content.slice(0, 2048) : content;
-  const { meta } = parseSkillMd(head);
-  return meta.description;
+    return {};
+  const { meta } = parseSkillMd(content);
+  return meta["user-invocable"] === true ? { description: meta.description, userInvocable: true } : { description: meta.description };
 }
 var MAX_SKILL_SCAN_DEPTH = 16;
 async function collectSkillDirs(fs, dir, depth = 0, visited = new Set, report) {
@@ -2797,8 +2796,8 @@ async function collectSkillDirs(fs, dir, depth = 0, visited = new Set, report) {
       continue;
     const skillMdPath = fs.path.join(entryPath, "SKILL.md");
     if (await fs.exists(skillMdPath)) {
-      const description = await readSkillDescription(fs, skillMdPath);
-      skills.push({ name: entry, skillDir: entryPath, description });
+      const frontmatter = await readSkillFrontmatter(fs, skillMdPath);
+      skills.push({ name: entry, skillDir: entryPath, ...frontmatter });
       continue;
     }
     skills.push(...await collectSkillDirs(fs, entryPath, depth + 1, visited, report));
@@ -2910,8 +2909,13 @@ async function removeFromManifest(storePath, skillNames, agents) {
     }
   }
   if (manifest.extraFiles) {
-    for (const agent of agents)
+    const remaining = Object.values(manifest.skills);
+    for (const agent of agents) {
+      if (remaining.some((entry) => entry.agents.includes(agent))) {
+        continue;
+      }
       delete manifest.extraFiles[agent];
+    }
     if (Object.keys(manifest.extraFiles).length === 0) {
       manifest.extraFiles = undefined;
     }
@@ -8144,6 +8148,7 @@ var def8 = {
 var def9 = {
   localSubdir: [".opencode", "skills"],
   globalSubdir: [".config", "opencode", "skills"],
+  commandsFolder: "commands",
   detect: () => verifiedCommandOnPath(["opencode"], /opencode/i, ["--help"])
 };
 
@@ -8240,10 +8245,32 @@ async function listFilesRelative(fs, dir) {
   await walk("");
   return out;
 }
+async function isSymlink(fs, path5) {
+  const [, real] = await catchError(fs.realpath(path5));
+  const [, realParent] = await catchError(fs.realpath(fs.path.dirname(path5)));
+  if (!real || !realParent)
+    return false;
+  return real !== fs.path.join(realParent, fs.path.basename(path5));
+}
+async function entryPresent(fs, target) {
+  if (await fs.exists(target))
+    return true;
+  const [, names] = await catchError(fs.readdir(fs.path.dirname(target)));
+  return (names ?? []).includes(fs.path.basename(target));
+}
+async function mayOverwriteOwned(fs, agentRoot, rel, target, owned) {
+  if (!owned.has(rel))
+    return false;
+  if (!await fs.exists(target))
+    return false;
+  return await resolveOwnedPath(fs, agentRoot, rel) !== null;
+}
 async function removeEmptyDirs(fs, dir) {
   const stats = await fs.stat(dir);
   if (!stats?.isDirectory())
     return;
+  if (await isSymlink(fs, dir))
+    return;
   for (const name of await fs.readdir(dir)) {
     const child = fs.path.join(dir, name);
     const childStats = await fs.stat(child);
@@ -8253,6 +8280,37 @@ async function removeEmptyDirs(fs, dir) {
   if ((await fs.readdir(dir)).length === 0)
     await fs.rm(dir);
 }
+function isSafeOwnedRel(rel) {
+  const segments = rel.split("/");
+  return segments.length >= 2 && segments.every((seg) => seg !== "" && seg !== "." && seg !== ".." && !seg.includes("\\") && !seg.includes(":"));
+}
+async function resolveOwnedPath(fs, agentRoot, rel) {
+  if (!isSafeOwnedRel(rel)) {
+    logger.debug(`Ignoring unsafe owned path in manifest: ${rel}`);
+    return null;
+  }
+  const segments = rel.split("/");
+  const target = fs.path.join(agentRoot, ...segments);
+  const [, realFolder] = await catchError(fs.realpath(fs.path.join(agentRoot, segments[0])));
+  const [, realParent] = await catchError(fs.realpath(fs.path.dirname(target)));
+  if (!realFolder || !realParent)
+    return null;
+  const fromFolder = fs.path.relative(realFolder, realParent);
+  if (fromFolder.split(/[\\/]/)[0] === ".." || fs.path.isAbsolute(fromFolder)) {
+    logger.debug(`Ignoring owned path that leaves its folder: ${rel}`);
+    return null;
+  }
+  if (await isSymlink(fs, target)) {
+    logger.debug(`Ignoring owned path that is now a symlink: ${rel}`);
+    return null;
+  }
+  const stats = await fs.stat(target);
+  if (!stats?.isFile()) {
+    logger.debug(`Ignoring owned path that is no longer a file: ${rel}`);
+    return null;
+  }
+  return target;
+}
 async function installExtraFolders(agent, storePath, skillsDir, owned = []) {
   const extraFolders = AGENT_DEFS[agent].extraFolders ?? [];
   if (extraFolders.length === 0)
@@ -8261,6 +8319,7 @@ async function installExtraFolders(agent, storePath, skillsDir, owned = []) {
   const agentRoot = fs.path.dirname(skillsDir);
   const ownedSet = new Set(owned);
   const copied = [];
+  const kept = new Set;
   for (const folder of extraFolders) {
     const source = fs.path.join(storePath, folder);
     if (!await fs.exists(source))
@@ -8268,8 +8327,9 @@ async function installExtraFolders(agent, storePath, skillsDir, owned = []) {
     for (const rel of await listFilesRelative(fs, source)) {
       const relFromRoot = `${folder}/${rel}`;
       const target = fs.path.join(agentRoot, folder, ...rel.split("/"));
-      if (await fs.exists(target) && !ownedSet.has(relFromRoot)) {
+      if (await entryPresent(fs, target) && !await mayOverwriteOwned(fs, agentRoot, relFromRoot, target, ownedSet)) {
         logger.info(`  ${agent}: kept existing ${relFromRoot} (not overwritten)`);
+        kept.add(relFromRoot);
         continue;
       }
       const data = await fs.readFile(fs.path.join(source, ...rel.split("/")));
@@ -8282,10 +8342,10 @@ async function installExtraFolders(agent, storePath, skillsDir, owned = []) {
   }
   const copiedSet = new Set(copied);
   for (const stale of ownedSet) {
-    if (copiedSet.has(stale))
+    if (copiedSet.has(stale) || kept.has(stale))
       continue;
-    const target = fs.path.join(agentRoot, ...stale.split("/"));
-    if (await fs.exists(target))
+    const target = await resolveOwnedPath(fs, agentRoot, stale);
+    if (target && await fs.exists(target))
       await fs.rm(target);
   }
   for (const folder of extraFolders) {
@@ -8293,17 +8353,81 @@ async function installExtraFolders(agent, storePath, skillsDir, owned = []) {
   }
   return copied;
 }
+function isCommandFile(agent, rel) {
+  const folder = AGENT_DEFS[agent].commandsFolder;
+  return folder !== undefined && rel.startsWith(`${folder}/`);
+}
+var SAFE_COMMAND_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+function renderSkillCommand(skill) {
+  const description = skill.description ?? `Run the ${skill.name} skill.`;
+  return [
+    "---",
+    `description: ${JSON.stringify(description)}`,
+    "---",
+    "",
+    `Load the \`${skill.name}\` skill with the skill tool, then follow its instructions.`,
+    "",
+    "$ARGUMENTS",
+    ""
+  ].join(`
+`);
+}
+async function installSkillCommands(agent, skills, skillsDir, owned = []) {
+  const folder = AGENT_DEFS[agent].commandsFolder;
+  if (folder === undefined)
+    return [];
+  const fs = getFileSystem();
+  const agentRoot = fs.path.dirname(skillsDir);
+  const ownedSet = new Set(owned);
+  const written = [];
+  const kept = new Set;
+  for (const skill of skills) {
+    if (!skill.userInvocable)
+      continue;
+    if (!SAFE_COMMAND_NAME.test(skill.name)) {
+      logger.info(`  ${agent}: no slash command for ${skill.name} (unsupported characters in name)`);
+      continue;
+    }
+    const rel = `${folder}/${skill.name}.md`;
+    const target = fs.path.join(agentRoot, folder, `${skill.name}.md`);
+    if (await entryPresent(fs, target) && !await mayOverwriteOwned(fs, agentRoot, rel, target, ownedSet)) {
+      logger.info(`  ${agent}: kept existing ${rel} (not overwritten)`);
+      kept.add(rel);
+      continue;
+    }
+    await fs.writeFile(target, renderSkillCommand(skill));
+    written.push(rel);
+  }
+  if (written.length > 0) {
+    logger.info(`  ${agent}: installed ${folder}/`);
+  }
+  const writtenSet = new Set(written);
+  for (const stale of ownedSet) {
+    if (writtenSet.has(stale) || kept.has(stale))
+      continue;
+    const target = await resolveOwnedPath(fs, agentRoot, stale);
+    if (target && await fs.exists(target))
+      await fs.rm(target);
+  }
+  if (ownedSet.size > 0) {
+    await removeEmptyDirs(fs, fs.path.join(agentRoot, folder));
+  }
+  return written;
+}
 async function uninstallExtraFolders(skillsDir, owned) {
   if (owned.length === 0)
     return;
   const fs = getFileSystem();
   const agentRoot = fs.path.dirname(skillsDir);
+  const topFolders = new Set;
   for (const rel of owned) {
-    const target = fs.path.join(agentRoot, ...rel.split("/"));
-    if (await fs.exists(target))
+    if (!isSafeOwnedRel(rel))
+      continue;
+    topFolders.add(rel.split("/")[0]);
+    const target = await resolveOwnedPath(fs, agentRoot, rel);
+    if (target && await fs.exists(target))
       await fs.rm(target);
   }
-  const topFolders = new Set(owned.map((rel) => rel.split("/")[0]));
   for (const folder of topFolders) {
     await removeEmptyDirs(fs, fs.path.join(agentRoot, folder));
   }
@@ -8841,10 +8965,18 @@ async function runOneAgent(agent, operation, resolved) {
     installedNames.push(skill.name);
   }
   const [, priorOwned] = await catchError(readExtraFiles(storePath, agent));
-  const [extraFoldersError, extraFiles] = await catchError(installExtraFolders(agent, storePath, skillsDir, priorOwned ?? []));
+  const ownedCommands = (priorOwned ?? []).filter((rel) => isCommandFile(agent, rel));
+  const ownedExtra = (priorOwned ?? []).filter((rel) => !isCommandFile(agent, rel));
+  const [extraFoldersError, extraFolderFiles] = await catchError(installExtraFolders(agent, storePath, skillsDir, ownedExtra));
   if (extraFoldersError) {
     return new Error(`Failed to install extra folders for ${agent}: ${extraFoldersError.message}`);
   }
+  const installedSkills = selectedSkills.filter((s) => installedNames.includes(s.name));
+  const [commandsError, commandFiles] = await catchError(installSkillCommands(agent, installedSkills, skillsDir, ownedCommands));
+  if (commandsError) {
+    return new Error(`Failed to install slash commands for ${agent}: ${commandsError.message}`);
+  }
+  const extraFiles = [...extraFolderFiles, ...commandFiles];
   if (isDefaultSource) {
     const installedSet = new Set(installedNames);
     const [catalogError] = await catchError(writeSkillCatalog(skillsDir, selectedSkills.filter((s) => installedSet.has(s.name)), {
@@ -9589,4 +9721,4 @@ function getManualCommandForInstallError(error, fallback) {
 
 export { package_default, VALID_CHANNELS, HIDDEN_CHANNELS, PUBLIC_CHANNELS, withConfigLock, SECRET_FIELD_PATHS, migrateVersionConfig, versionMigrationNotice, resolveConfigFilePathAsync, loadConfigAsync, resolveUpdateChannel, resolveRuntimeChannel, isPreviewVersion, isValidVersionPin, majorOf, resolvePinnedVersion, isExactPin, versionLinePrefix, formatVersionPin, dist_default5 as dist_default, dist_default6 as dist_default1, dist_default7 as dist_default2, getGlobalNpmUipathDir, DISABLE_AUTOINSTALL_ENV, DISABLE_TOOL_LINE_CHECK_ENV, InstallRefusedError, isBundledDistribution, isAutoInstallDisabled, isToolLineCheckDisabled, TOOLS_WHITELIST, COMMAND_ALIASES, ALIASES_BY_COMMAND, WHITELIST_BY_COMMAND, WHITELIST_BY_SHORT_NAME, isValidSemver, compareSemver, resolveToolPackageName, parsePackageSpec, describeCandidateFailure, getEffectiveRegistry, isDevMode, truncateVersionsForDisplay, toolService, SkillSourceError, SkillsRegistryAuthError, resolveSkillSource, getContentStoreForRead, getAvailableSkills, readManifest, removeFromManifest, readExtraFiles, AGENT_DEFS, getSkillsDir, getSkillsDestinationHint, hasDistinctGlobalPath, skillOwnerOf, uninstallExtraFolders, uninstallSkill, rejectIfGlobalOnly, getSkillsSourceFailureDetails, buildSkillCatalog, removeSkillCatalog, searchSkillCatalog, ALL_AGENTS, AGENT_DISPLAY_NAMES, promptAgentSelection, SkillsError, resolveSkillsTargetVersion, resolveRootDir, resolveSkillsContext, runAgentInstalls, runSkillsUpdate, getInstalledTools, toolFailureRemediation, collapsePinnedLineErrors, todayLocal, readState, recordToolUpdateDate, mergeState, TOOLS_UPDATE_PHASES, runToolsUpdate, runUpdate };
 
-//# debugId=3050532AE7B8A57C64756E2164756E21
+//# debugId=452E6333FCBBBE5F64756E2164756E21

package/dist/index.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   runNode
-} from "./index-4q45kdqv.js";
+} from "./index-59rge93d.js";
 import {
   registerRobotClientLoader
 } from "./index-vmn69waj.js";
-import"./index-pxqxy1sx.js";
+import"./index-eb9q7r0k.js";
 import {
   TELEMETRY_DRAIN_ARGV,
   configureLogger,
@@ -96,7 +96,7 @@ function isModuleNotFound(e) {
 async function setUpIntegratedProxyAuth() {
   let undici;
   try {
-    undici = await import("./index-r3carw1e.js");
+    undici = await import("./index-7kfg2zz1.js");
   } catch (e) {
     if (isModuleNotFound(e)) {
       undici = undefined;

package/dist/{mcp-z5911fjd.js → mcp-g5sxmbpy.js}

@@ -4086,13 +4086,14 @@ var require_fast_uri = __commonJS(function(exports, module) {
       if (!malformedIPLiteral) {
         malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP);
       }
-      if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
-        if (uri.indexOf("%") !== -1) {
-          if (parsed.host !== undefined && !malformedIPLiteral) {
-            const host = isIP ? parsed.host : normalizePercentEncoding(parsed.host, true);
-            parsed.host = reescapeHostDelimiters(host, isIP);
-          }
+      if (uri.indexOf("%") !== -1 && parsed.host !== undefined && !malformedIPLiteral) {
+        let host = isIP ? parsed.host : normalizePercentEncoding(parsed.host, true);
+        if (!isIP) {
+          host = normalizePercentEncoding(host.toLowerCase());
         }
+        parsed.host = reescapeHostDelimiters(host, isIP);
+      }
+      if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
         if (parsed.path) {
           parsed.path = normalizePathEncoding(parsed.path);
         }
@@ -14607,4 +14608,4 @@ export {
   ResourceTemplate
 };
 
-//# debugId=625311095E46947F64756E2164756E21
+//# debugId=038F92E5009A5ACC64756E2164756E21

package/dist/{server-mk7sear1.js → server-w65r13bn.js}

@@ -84,7 +84,7 @@ async function executeCommand(command) {
   const previousSink = getOutputSink();
   setGlobalSink(sink);
   const [error] = await catchError(async () => {
-    const { run } = await import("./cli-v2cbt36x.js");
+    const { run } = await import("./cli-akjte1tb.js");
     await runWithAuthProfile(undefined, () => runWithSink(sink, () => run(context)));
   });
   if (error) {
@@ -140,7 +140,7 @@ Pass the command without the 'uip' prefix. Example: "login status --output json"
 
 // src/mcp/server.ts
 async function startMcpServer(program) {
-  const { McpServer } = await import("./mcp-z5911fjd.js");
+  const { McpServer } = await import("./mcp-g5sxmbpy.js");
   const { StdioServerTransport } = await import("./stdio-q0nbdmwt.js");
   const toolDescription = introspectCommands(program);
   const server = new McpServer({

package/dist/{updateService-chd3q3v4.js → updateService-txkkjjcq.js}

@@ -1,6 +1,6 @@
 import {
   runUpdate
-} from "./index-pxqxy1sx.js";
+} from "./index-eb9q7r0k.js";
 import"./index-7pvwjzsq.js";
 import"./index-g8ck9tv6.js";
 import"./index-hrt7fpkk.js";

package/package.json

@@ -2,7 +2,7 @@
     "name": "@uipath/cli",
     "author": "UiPath",
     "license": "SEE LICENSE IN LICENSE.txt",
-    "version": "1.203.0-preview.182",
+    "version": "1.203.0-preview.205",
     "description": "Cross platform CLI for UiPath",
     "repository": {
         "type": "git",
@@ -36,5 +36,5 @@
         "kerberos": "7.0.0",
         "node-expose-sspi": "0.1.60"
     },
-    "gitHead": "f4f19f4d98117736cd2b34629dc1564ae6761aef"
+    "gitHead": "d8d19829030cc590c630bebfc60a9d9fc7fa8c31"
 }