@uipath/codedagent-tool 1.196.0 → 1.197.0-preview.59

package/dist/tool.js

@@ -13520,8 +13520,8 @@ var require_Subscription = __commonJS((exports) => {
       if (_parentOrParents instanceof Subscription2) {
         _parentOrParents.remove(this);
       } else if (_parentOrParents !== null) {
-        for (var index2 = 0;index2 < _parentOrParents.length; ++index2) {
-          var parent_1 = _parentOrParents[index2];
+        for (var index = 0;index < _parentOrParents.length; ++index) {
+          var parent_1 = _parentOrParents[index];
           parent_1.remove(this);
         }
       }
@@ -13536,10 +13536,10 @@ var require_Subscription = __commonJS((exports) => {
         }
       }
       if (isArray_1.isArray(_subscriptions)) {
-        var index2 = -1;
+        var index = -1;
         var len = _subscriptions.length;
-        while (++index2 < len) {
-          var sub2 = _subscriptions[index2];
+        while (++index < len) {
+          var sub2 = _subscriptions[index];
           if (isObject_1.isObject(sub2)) {
             try {
               sub2.unsubscribe();
@@ -14969,13 +14969,13 @@ var require_AsyncAction = __commonJS((exports) => {
       var id = this.id;
       var scheduler = this.scheduler;
       var actions = scheduler.actions;
-      var index2 = actions.indexOf(this);
+      var index = actions.indexOf(this);
       this.work = null;
       this.state = null;
       this.pending = false;
       this.scheduler = null;
-      if (index2 !== -1) {
-        actions.splice(index2, 1);
+      if (index !== -1) {
+        actions.splice(index, 1);
       }
       if (id != null) {
         this.id = this.recycleAsyncId(scheduler, id, null);
@@ -15819,17 +15819,17 @@ var require_AsapScheduler = __commonJS((exports) => {
       this.scheduled = undefined;
       var actions = this.actions;
       var error;
-      var index2 = -1;
+      var index = -1;
       var count = actions.length;
       action = action || actions.shift();
       do {
         if (error = action.execute(action.state, action.delay)) {
           break;
         }
-      } while (++index2 < count && (action = actions.shift()));
+      } while (++index < count && (action = actions.shift()));
       this.active = false;
       if (error) {
-        while (++index2 < count && (action = actions.shift())) {
+        while (++index < count && (action = actions.shift())) {
           action.unsubscribe();
         }
         throw error;
@@ -15952,17 +15952,17 @@ var require_AnimationFrameScheduler = __commonJS((exports) => {
       this.scheduled = undefined;
       var actions = this.actions;
       var error;
-      var index2 = -1;
+      var index = -1;
       var count = actions.length;
       action = action || actions.shift();
       do {
         if (error = action.execute(action.state, action.delay)) {
           break;
         }
-      } while (++index2 < count && (action = actions.shift()));
+      } while (++index < count && (action = actions.shift()));
       this.active = false;
       if (error) {
-        while (++index2 < count && (action = actions.shift())) {
+        while (++index < count && (action = actions.shift())) {
           action.unsubscribe();
         }
         throw error;
@@ -16046,16 +16046,16 @@ var require_VirtualTimeScheduler = __commonJS((exports) => {
   exports.VirtualTimeScheduler = VirtualTimeScheduler;
   var VirtualAction = function(_super) {
     __extends(VirtualAction2, _super);
-    function VirtualAction2(scheduler, work, index2) {
-      if (index2 === undefined) {
-        index2 = scheduler.index += 1;
+    function VirtualAction2(scheduler, work, index) {
+      if (index === undefined) {
+        index = scheduler.index += 1;
       }
       var _this = _super.call(this, scheduler, work) || this;
       _this.scheduler = scheduler;
       _this.work = work;
-      _this.index = index2;
+      _this.index = index;
       _this.active = true;
-      _this.index = scheduler.index = index2;
+      _this.index = scheduler.index = index;
       return _this;
     }
     VirtualAction2.prototype.schedule = function(state, delay) {
@@ -17202,9 +17202,9 @@ var require_mergeMap = __commonJS((exports) => {
     };
     MergeMapSubscriber2.prototype._tryNext = function(value) {
       var result;
-      var index2 = this.index++;
+      var index = this.index++;
       try {
-        result = this.project(value, index2);
+        result = this.project(value, index);
       } catch (err) {
         this.destination.error(err);
         return;
@@ -17784,12 +17784,12 @@ var require_pairs2 = __commonJS((exports) => {
   }
   exports.pairs = pairs;
   function dispatch(state) {
-    var { keys, index: index2, subscriber, subscription, obj } = state;
+    var { keys, index, subscriber, subscription, obj } = state;
     if (!subscriber.closed) {
-      if (index2 < keys.length) {
-        var key = keys[index2];
+      if (index < keys.length) {
+        var key = keys[index];
         subscriber.next([key, obj[key]]);
-        subscription.add(this.schedule({ keys, index: index2 + 1, subscriber, subscription, obj }));
+        subscription.add(this.schedule({ keys, index: index + 1, subscriber, subscription, obj }));
       } else {
         subscriber.complete();
       }
@@ -18002,18 +18002,18 @@ var require_range = __commonJS((exports) => {
         count = start;
         start = 0;
       }
-      var index2 = 0;
+      var index = 0;
       var current = start;
       if (scheduler) {
         return scheduler.schedule(dispatch, 0, {
-          index: index2,
+          index,
           count,
           start,
           subscriber
         });
       } else {
         do {
-          if (index2++ >= count) {
+          if (index++ >= count) {
             subscriber.complete();
             break;
           }
@@ -18028,8 +18028,8 @@ var require_range = __commonJS((exports) => {
   }
   exports.range = range;
   function dispatch(state) {
-    var { start, index: index2, count, subscriber } = state;
-    if (index2 >= count) {
+    var { start, index, count, subscriber } = state;
+    if (index >= count) {
       subscriber.complete();
       return;
     }
@@ -18037,7 +18037,7 @@ var require_range = __commonJS((exports) => {
     if (subscriber.closed) {
       return;
     }
-    state.index = index2 + 1;
+    state.index = index + 1;
     state.start = start + 1;
     this.schedule(state);
   }
@@ -18075,14 +18075,14 @@ var require_timer = __commonJS((exports) => {
   }
   exports.timer = timer;
   function dispatch(state) {
-    var { index: index2, period, subscriber } = state;
-    subscriber.next(index2);
+    var { index, period, subscriber } = state;
+    subscriber.next(index);
     if (subscriber.closed) {
       return;
     } else if (period === -1) {
       return subscriber.complete();
     }
-    state.index = index2 + 1;
+    state.index = index + 1;
     this.schedule(state, period);
   }
 });
@@ -21259,6 +21259,7 @@ function settlePromiseLike(thenable) {
 }
 
 // ../common/src/error-handler.ts
+var DEFAULT_401 = "Unauthorized (401). Run `uip login` to authenticate.";
 var NETWORK_ERROR_CODES = new Set([
   "ECONNREFUSED",
   "ECONNRESET",
@@ -21270,6 +21271,32 @@ var NETWORK_ERROR_CODES = new Set([
   "ENETUNREACH",
   "EAI_FAIL"
 ]);
+var TLS_ERROR_CODES = new Set([
+  "SELF_SIGNED_CERT_IN_CHAIN",
+  "DEPTH_ZERO_SELF_SIGNED_CERT",
+  "UNABLE_TO_VERIFY_LEAF_SIGNATURE",
+  "UNABLE_TO_GET_ISSUER_CERT_LOCALLY",
+  "UNABLE_TO_GET_ISSUER_CERT",
+  "CERT_HAS_EXPIRED",
+  "CERT_UNTRUSTED",
+  "ERR_TLS_CERT_ALTNAME_INVALID"
+]);
+var TLS_INSTRUCTIONS = "The server's TLS certificate could not be verified. Most often a " + "corporate proxy/firewall re-signs HTTPS with a root CA that Node does " + "not trust — set NODE_EXTRA_CA_CERTS to that CA's PEM file (and HTTPS_PROXY " + "if you connect through a proxy). If the certificate is instead expired or " + "its hostname does not match, fix the endpoint URL or the system clock. " + "Then retry.";
+var NETWORK_INSTRUCTIONS = "Could not reach the UiPath service. Check your network connection and " + "VPN, confirm any HTTP_PROXY/HTTPS_PROXY/NO_PROXY settings are correct, " + "then retry.";
+function extractErrorMessageSync(error) {
+  if (error instanceof Error) {
+    return error.message;
+  }
+  if (typeof error === "object" && error !== null) {
+    if ("status" in error && error.status === 401) {
+      return DEFAULT_401;
+    }
+    if ("message" in error && typeof error.message === "string") {
+      return error.message;
+    }
+  }
+  return String(error);
+}
 // ../../node_modules/commander/esm.mjs
 var import__ = __toESM(require_commander(), 1);
 var {
@@ -21344,6 +21371,7 @@ var CONSOLE_FALLBACK = {
   writeLog: (str) => process.stdout.write(str),
   capabilities: {
     isInteractive: false,
+    canReadInput: false,
     supportsColor: false,
     outputWidth: 80
   }
@@ -26547,6 +26575,29 @@ function isPlainRecord(value) {
   const prototype = Object.getPrototypeOf(value);
   return prototype === Object.prototype || prototype === null;
 }
+function extractPagedRows(value) {
+  if (Array.isArray(value) || !isPlainRecord(value))
+    return null;
+  const entries = Object.values(value);
+  if (entries.length === 0)
+    return null;
+  let rows = null;
+  let hasScalarSibling = false;
+  for (const entry of entries) {
+    if (Array.isArray(entry)) {
+      if (rows !== null)
+        return null;
+      rows = entry;
+    } else if (entry !== null && typeof entry === "object") {
+      return null;
+    } else {
+      hasScalarSibling = true;
+    }
+  }
+  if (rows === null || !hasScalarSibling)
+    return null;
+  return rows;
+}
 function toLowerCamelCaseKey(key) {
   if (!key)
     return key;
@@ -26611,7 +26662,8 @@ function printOutput(data, format = "json", logFn, asciiSafe = false) {
       break;
     case "plain": {
       if ("Data" in data && data.Data != null) {
-        const items = Array.isArray(data.Data) ? data.Data : [data.Data];
+        const pagedRows = extractPagedRows(data.Data);
+        const items = pagedRows ?? (Array.isArray(data.Data) ? data.Data : [data.Data]);
         items.forEach((item) => {
           const values = Object.values(item).map((v) => v ?? "").join("\t");
           logFn(values);
@@ -26623,10 +26675,13 @@ function printOutput(data, format = "json", logFn, asciiSafe = false) {
       break;
     }
     default: {
-      if ("Data" in data && data.Data != null && !(Array.isArray(data.Data) && data.Data.length === 0)) {
+      const hasData = "Data" in data && data.Data != null;
+      const pagedRows = hasData ? extractPagedRows(data.Data) : null;
+      const rows = pagedRows ? pagedRows : Array.isArray(data.Data) ? data.Data : null;
+      if (hasData && !(rows !== null && rows.length === 0)) {
         const logValue = data.Log;
-        if (Array.isArray(data.Data)) {
-          printResizableTable(data.Data, logFn, logValue);
+        if (rows !== null) {
+          printResizableTable(rows, logFn, logValue);
         } else {
           printVerticalTable(data.Data, logFn, logValue);
         }
@@ -26814,6 +26869,44 @@ function defaultErrorCodeForResult(result) {
       return "unknown_error";
   }
 }
+function parseHttpStatusFromMessage(message) {
+  const match = /^HTTP\s+(\d{3})(?::|\s|-|$)/i.exec(message.trim());
+  if (!match)
+    return;
+  const status = Number(match[1]);
+  return Number.isInteger(status) && status >= 100 && status <= 599 ? status : undefined;
+}
+function defaultErrorCodeForHttpStatus(status) {
+  if (status === undefined)
+    return;
+  if (status === 400 || status === 409 || status === 422) {
+    return "invalid_argument";
+  }
+  if (status === 401)
+    return "authentication_required";
+  if (status === 403)
+    return "permission_denied";
+  if (status === 404)
+    return "not_found";
+  if (status === 405)
+    return "method_not_allowed";
+  if (status === 408)
+    return "timeout";
+  if (status === 429)
+    return "rate_limited";
+  if (status >= 500 && status < 600)
+    return "server_error";
+  return;
+}
+function defaultErrorCodeForFailure(data) {
+  if (data.Result === RESULTS.Failure) {
+    const status = data.Context?.httpStatus ?? parseHttpStatusFromMessage(data.Message);
+    const errorCode = defaultErrorCodeForHttpStatus(status);
+    if (errorCode)
+      return errorCode;
+  }
+  return defaultErrorCodeForResult(data.Result);
+}
 function defaultRetryForErrorCode(errorCode) {
   switch (errorCode) {
     case "network_error":
@@ -26843,16 +26936,19 @@ var OutputFormatter;
   OutputFormatter.success = success;
   function error(data) {
     data.Log ??= getLogFilePath() || undefined;
-    data.ErrorCode ??= defaultErrorCodeForResult(data.Result);
+    data.ErrorCode ??= defaultErrorCodeForFailure(data);
     data.Retry ??= defaultRetryForErrorCode(data.ErrorCode);
     process.exitCode = EXIT_CODES[data.Result] ?? 1;
-    telemetry.trackEvent(CommonTelemetryEvents.Error, {
-      result: data.Result,
-      errorCode: data.ErrorCode,
-      retry: data.Retry,
-      message: data.Message
-    });
-    logOutput(normalizeOutputKeys(data), getOutputFormat());
+    const { SuppressTelemetry, ...envelope } = data;
+    if (!SuppressTelemetry) {
+      telemetry.trackEvent(CommonTelemetryEvents.Error, {
+        result: data.Result,
+        errorCode: data.ErrorCode,
+        retry: data.Retry,
+        message: data.Message
+      });
+    }
+    logOutput(normalizeOutputKeys(envelope), getOutputFormat());
   }
   OutputFormatter.error = error;
   function emitList(code, items, opts) {
@@ -27143,1627 +27239,241 @@ var UIPATH_HOME_DIR = ".uipath";
 var DEFAULT_AUTH_TIMEOUT_MS = 5 * 60 * 1000;
 // ../common/src/interactivity-context.ts
 var modeSlot = singleton("InteractivityMode");
-// ../../node_modules/jsonpath-plus/dist/index-node-esm.js
-import vm from "vm";
-
-class Hooks {
-  add(name, callback, first) {
-    if (typeof arguments[0] != "string") {
-      for (let name2 in arguments[0]) {
-        this.add(name2, arguments[0][name2], arguments[1]);
-      }
-    } else {
-      (Array.isArray(name) ? name : [name]).forEach(function(name2) {
-        this[name2] = this[name2] || [];
-        if (callback) {
-          this[name2][first ? "unshift" : "push"](callback);
-        }
-      }, this);
-    }
-  }
-  run(name, env) {
-    this[name] = this[name] || [];
-    this[name].forEach(function(callback) {
-      callback.call(env && env.context ? env.context : env, env);
-    });
-  }
-}
+// ../common/src/polling/types.ts
+var PollOutcome = {
+  Completed: "completed",
+  Timeout: "timeout",
+  Interrupted: "interrupted",
+  Aborted: "aborted",
+  Failed: "failed"
+};
 
-class Plugins {
-  constructor(jsep) {
-    this.jsep = jsep;
-    this.registered = {};
-  }
-  register(...plugins) {
-    plugins.forEach((plugin) => {
-      if (typeof plugin !== "object" || !plugin.name || !plugin.init) {
-        throw new Error("Invalid JSEP plugin format");
-      }
-      if (this.registered[plugin.name]) {
-        return;
-      }
-      plugin.init(this.jsep);
-      this.registered[plugin.name] = plugin;
-    });
-  }
+// ../common/src/polling/poll-failure-mapping.ts
+var REASON_BY_OUTCOME = {
+  [PollOutcome.Timeout]: "poll_timeout",
+  [PollOutcome.Failed]: "poll_failed",
+  [PollOutcome.Interrupted]: "poll_failed",
+  [PollOutcome.Aborted]: "poll_aborted"
+};
+// ../common/src/polling/terminal-statuses.ts
+var TERMINAL_STATUSES = new Set([
+  "completed",
+  "successful",
+  "faulted",
+  "failed",
+  "cancelled",
+  "canceled",
+  "stopped",
+  "finished"
+]);
+var FAILURE_STATUSES = new Set([
+  "faulted",
+  "failed",
+  "cancelled",
+  "canceled",
+  "stopped"
+]);
+// ../common/src/preview.ts
+var previewSlot = singleton("PreviewBuild");
+function isPreviewBuild() {
+  return previewSlot.get(false) ?? false;
 }
-
-class Jsep {
-  static get version() {
-    return "1.4.0";
+Command.prototype.previewCommand = function(nameAndArgs, opts) {
+  if (isPreviewBuild()) {
+    return this.command(nameAndArgs, opts);
   }
-  static toString() {
-    return "JavaScript Expression Parser (JSEP) v" + Jsep.version;
+  return new Command(nameAndArgs.split(/\s+/)[0] ?? nameAndArgs);
+};
+// ../common/src/screen-logger.ts
+var ScreenLogger;
+((ScreenLogger) => {
+  function progress(message) {
+    getOutputSink().writeErr(`${message}
+`);
   }
-  static addUnaryOp(op_name) {
-    Jsep.max_unop_len = Math.max(op_name.length, Jsep.max_unop_len);
-    Jsep.unary_ops[op_name] = 1;
-    return Jsep;
+  ScreenLogger.progress = progress;
+})(ScreenLogger ||= {});
+// ../common/src/sdk-user-agent.ts
+var sdkUserAgentHostToken = singleton("SdkUserAgentHostToken");
+// ../common/src/tool-provider.ts
+var factorySlot = singleton("PackagerFactoryProvider");
+// ../uipath-python-bridge/src/cache.ts
+init_src();
+async function readCache(cacheFile) {
+  const fs7 = getFileSystem();
+  const [existsError, exists] = await catchError(fs7.exists(cacheFile));
+  if (existsError || !exists)
+    return null;
+  const [readError, content] = await catchError(fs7.readFile(cacheFile, "utf-8"));
+  if (readError) {
+    logger.warn(`Failed to load cache: ${readError}`);
+    return null;
   }
-  static addBinaryOp(op_name, precedence, isRightAssociative) {
-    Jsep.max_binop_len = Math.max(op_name.length, Jsep.max_binop_len);
-    Jsep.binary_ops[op_name] = precedence;
-    if (isRightAssociative) {
-      Jsep.right_associative.add(op_name);
-    } else {
-      Jsep.right_associative.delete(op_name);
-    }
-    return Jsep;
+  const [parseError, cache] = catchError(() => JSON.parse(content));
+  if (parseError) {
+    logger.warn(`Failed to parse cache: ${parseError}`);
+    return null;
   }
-  static addIdentifierChar(char) {
-    Jsep.additional_identifier_chars.add(char);
-    return Jsep;
+  return cache;
+}
+// ../uipath-python-bridge/src/config.ts
+var DEFAULT_CONFIG = {
+  allowedPythonVersions: ["3.14", "3.13", "3.12", "3.11"],
+  packageName: "uipath",
+  cacheFileName: ".uipath-python-cache.json"
+};
+function getAllowedPythonVersions() {
+  const envVersions = process.env.PYTHON_TOOL_PYTHON_VERSIONS;
+  if (envVersions) {
+    return envVersions.split(",").map((v) => v.trim()).filter(Boolean);
   }
-  static addLiteral(literal_name, literal_value) {
-    Jsep.literals[literal_name] = literal_value;
-    return Jsep;
+  return DEFAULT_CONFIG.allowedPythonVersions;
+}
+function getPackageName() {
+  return DEFAULT_CONFIG.packageName;
+}
+function getCacheFileName() {
+  return DEFAULT_CONFIG.cacheFileName;
+}
+function matchesPattern(args, pattern) {
+  if (typeof pattern === "string") {
+    return args.includes(pattern);
   }
-  static removeUnaryOp(op_name) {
-    delete Jsep.unary_ops[op_name];
-    if (op_name.length === Jsep.max_unop_len) {
-      Jsep.max_unop_len = Jsep.getMaxKeyLen(Jsep.unary_ops);
+  if (Array.isArray(pattern)) {
+    for (let i = 0;i <= args.length - pattern.length; i++) {
+      let match = true;
+      for (let j = 0;j < pattern.length; j++) {
+        if (args[i + j] !== pattern[j]) {
+          match = false;
+          break;
+        }
+      }
+      if (match) {
+        return true;
+      }
     }
-    return Jsep;
-  }
-  static removeAllUnaryOps() {
-    Jsep.unary_ops = {};
-    Jsep.max_unop_len = 0;
-    return Jsep;
   }
-  static removeIdentifierChar(char) {
-    Jsep.additional_identifier_chars.delete(char);
-    return Jsep;
-  }
-  static removeBinaryOp(op_name) {
-    delete Jsep.binary_ops[op_name];
-    if (op_name.length === Jsep.max_binop_len) {
-      Jsep.max_binop_len = Jsep.getMaxKeyLen(Jsep.binary_ops);
+  return false;
+}
+function processCommandArgs(args, rules) {
+  const hasForceFlag = args.includes("--force");
+  const argsWithoutForce = args.filter((arg) => arg !== "--force");
+  for (const rule of rules) {
+    if (matchesPattern(argsWithoutForce, rule.pattern)) {
+      switch (rule.action) {
+        case "filter":
+          if (hasForceFlag) {
+            return {
+              allowed: true,
+              args: [...argsWithoutForce]
+            };
+          }
+          return {
+            allowed: false,
+            args: [],
+            errorMessage: rule.filterMessage || "This command is not allowed"
+          };
+        case "append":
+          if (rule.appendArgs && rule.appendArgs.length > 0) {
+            return {
+              allowed: true,
+              args: [...argsWithoutForce, ...rule.appendArgs]
+            };
+          }
+          break;
+      }
     }
-    Jsep.right_associative.delete(op_name);
-    return Jsep;
-  }
-  static removeAllBinaryOps() {
-    Jsep.binary_ops = {};
-    Jsep.max_binop_len = 0;
-    return Jsep;
-  }
-  static removeLiteral(literal_name) {
-    delete Jsep.literals[literal_name];
-    return Jsep;
   }
-  static removeAllLiterals() {
-    Jsep.literals = {};
-    return Jsep;
-  }
-  get char() {
-    return this.expr.charAt(this.index);
-  }
-  get code() {
-    return this.expr.charCodeAt(this.index);
-  }
-  constructor(expr) {
-    this.expr = expr;
-    this.index = 0;
+  return {
+    allowed: true,
+    args: [...argsWithoutForce]
+  };
+}
+// ../uipath-python-bridge/src/execute.ts
+import { spawn } from "node:child_process";
+
+// ../auth/src/config.ts
+init_constants();
+var DEFAULT_CLIENT_ID = "36dea5b8-e8bb-423d-8e7b-c808df8f1c00";
+var AUTH_FILE_CONFIG_KEY = Symbol.for("@uipath/auth/AuthFileConfig");
+var globalSlot = globalThis;
+var getAuthFileConfig = () => globalSlot[AUTH_FILE_CONFIG_KEY] ?? {};
+
+class InvalidBaseUrlError extends Error {
+  url;
+  reason;
+  constructor(url, reason) {
+    super(`Invalid base URL: "${url}"
+` + `Reason: ${reason}
+
+` + `Expected format: an https:// URL, e.g. https://cloud.uipath.com (commercial), https://govcloud.uipath.us (Public Sector), or your Automation Suite host (https://<your-host>).
+` + `You can specify the URL via:
+` + `  • --authority flag
+` + `  • UIPATH_URL environment variable
+` + `  • auth.authority in config file`);
+    this.url = url;
+    this.reason = reason;
+    this.name = "InvalidBaseUrlError";
   }
-  static parse(expr) {
-    return new Jsep(expr).parse();
+}
+var DEFAULT_SCOPES = ["openid", "profile", "offline_access"];
+var normalizeAndValidateBaseUrl = (rawUrl) => {
+  let baseUrl = rawUrl;
+  if (baseUrl.endsWith("/identity_/")) {
+    baseUrl = baseUrl.slice(0, -11);
+  } else if (baseUrl.endsWith("/identity_")) {
+    baseUrl = baseUrl.slice(0, -10);
   }
-  static getMaxKeyLen(obj) {
-    return Math.max(0, ...Object.keys(obj).map((k) => k.length));
+  while (baseUrl.endsWith("/")) {
+    baseUrl = baseUrl.slice(0, -1);
   }
-  static isDecimalDigit(ch) {
-    return ch >= 48 && ch <= 57;
+  const resolvedBaseUrl = baseUrl;
+  const [urlError, url] = catchError2(() => new URL(resolvedBaseUrl));
+  if (urlError) {
+    throw new InvalidBaseUrlError(baseUrl, `Malformed URL. ${urlError instanceof Error ? urlError.message : "Unknown error"}`);
   }
-  static binaryPrecedence(op_val) {
-    return Jsep.binary_ops[op_val] || 0;
+  if (url.protocol !== "https:") {
+    throw new InvalidBaseUrlError(baseUrl, `Authority must use https:// scheme, got ${url.protocol}//. OIDC token exchange requires TLS end-to-end.`);
   }
-  static isIdentifierStart(ch) {
-    return ch >= 65 && ch <= 90 || ch >= 97 && ch <= 122 || ch >= 128 && !Jsep.binary_ops[String.fromCharCode(ch)] || Jsep.additional_identifier_chars.has(String.fromCharCode(ch));
+  return url.pathname.length > 1 ? url.origin : baseUrl;
+};
+var resolveScopes = (isExternalAppAuth, customScopes, fileScopes) => {
+  const requestedScopes = customScopes?.length ? customScopes : fileScopes ?? [];
+  if (isExternalAppAuth)
+    return requestedScopes;
+  return [...new Set([...DEFAULT_SCOPES, ...requestedScopes])];
+};
+var resolveConfigAsync = async ({
+  customAuthority,
+  customClientId,
+  customClientSecret,
+  customScopes
+} = {}) => {
+  const fileAuth = getAuthFileConfig();
+  let baseUrl = customAuthority;
+  if (!baseUrl) {
+    baseUrl = process.env.UIPATH_URL;
   }
-  static isIdentifierPart(ch) {
-    return Jsep.isIdentifierStart(ch) || Jsep.isDecimalDigit(ch);
+  if (!baseUrl && fileAuth.authority) {
+    baseUrl = fileAuth.authority;
   }
-  throwError(message) {
-    const error = new Error(message + " at character " + this.index);
-    error.index = this.index;
-    error.description = message;
-    throw error;
+  if (!baseUrl) {
+    baseUrl = DEFAULT_BASE_URL;
   }
-  runHook(name, node) {
-    if (Jsep.hooks[name]) {
-      const env = {
-        context: this,
-        node
-      };
-      Jsep.hooks.run(name, env);
-      return env.node;
-    }
-    return node;
+  baseUrl = normalizeAndValidateBaseUrl(baseUrl);
+  let clientId = customClientId;
+  if (!clientId && fileAuth.clientId) {
+    clientId = fileAuth.clientId;
   }
-  searchHook(name) {
-    if (Jsep.hooks[name]) {
-      const env = {
-        context: this
-      };
-      Jsep.hooks[name].find(function(callback) {
-        callback.call(env.context, env);
-        return env.node;
-      });
-      return env.node;
-    }
+  if (!clientId) {
+    clientId = DEFAULT_CLIENT_ID;
   }
-  gobbleSpaces() {
-    let ch = this.code;
-    while (ch === Jsep.SPACE_CODE || ch === Jsep.TAB_CODE || ch === Jsep.LF_CODE || ch === Jsep.CR_CODE) {
-      ch = this.expr.charCodeAt(++this.index);
-    }
-    this.runHook("gobble-spaces");
-  }
-  parse() {
-    this.runHook("before-all");
-    const nodes = this.gobbleExpressions();
-    const node = nodes.length === 1 ? nodes[0] : {
-      type: Jsep.COMPOUND,
-      body: nodes
-    };
-    return this.runHook("after-all", node);
-  }
-  gobbleExpressions(untilICode) {
-    let nodes = [], ch_i, node;
-    while (this.index < this.expr.length) {
-      ch_i = this.code;
-      if (ch_i === Jsep.SEMCOL_CODE || ch_i === Jsep.COMMA_CODE) {
-        this.index++;
-      } else {
-        if (node = this.gobbleExpression()) {
-          nodes.push(node);
-        } else if (this.index < this.expr.length) {
-          if (ch_i === untilICode) {
-            break;
-          }
-          this.throwError('Unexpected "' + this.char + '"');
-        }
-      }
-    }
-    return nodes;
-  }
-  gobbleExpression() {
-    const node = this.searchHook("gobble-expression") || this.gobbleBinaryExpression();
-    this.gobbleSpaces();
-    return this.runHook("after-expression", node);
-  }
-  gobbleBinaryOp() {
-    this.gobbleSpaces();
-    let to_check = this.expr.substr(this.index, Jsep.max_binop_len);
-    let tc_len = to_check.length;
-    while (tc_len > 0) {
-      if (Jsep.binary_ops.hasOwnProperty(to_check) && (!Jsep.isIdentifierStart(this.code) || this.index + to_check.length < this.expr.length && !Jsep.isIdentifierPart(this.expr.charCodeAt(this.index + to_check.length)))) {
-        this.index += tc_len;
-        return to_check;
-      }
-      to_check = to_check.substr(0, --tc_len);
-    }
-    return false;
-  }
-  gobbleBinaryExpression() {
-    let node, biop, prec, stack, biop_info, left, right, i, cur_biop;
-    left = this.gobbleToken();
-    if (!left) {
-      return left;
-    }
-    biop = this.gobbleBinaryOp();
-    if (!biop) {
-      return left;
-    }
-    biop_info = {
-      value: biop,
-      prec: Jsep.binaryPrecedence(biop),
-      right_a: Jsep.right_associative.has(biop)
-    };
-    right = this.gobbleToken();
-    if (!right) {
-      this.throwError("Expected expression after " + biop);
-    }
-    stack = [left, biop_info, right];
-    while (biop = this.gobbleBinaryOp()) {
-      prec = Jsep.binaryPrecedence(biop);
-      if (prec === 0) {
-        this.index -= biop.length;
-        break;
-      }
-      biop_info = {
-        value: biop,
-        prec,
-        right_a: Jsep.right_associative.has(biop)
-      };
-      cur_biop = biop;
-      const comparePrev = (prev) => biop_info.right_a && prev.right_a ? prec > prev.prec : prec <= prev.prec;
-      while (stack.length > 2 && comparePrev(stack[stack.length - 2])) {
-        right = stack.pop();
-        biop = stack.pop().value;
-        left = stack.pop();
-        node = {
-          type: Jsep.BINARY_EXP,
-          operator: biop,
-          left,
-          right
-        };
-        stack.push(node);
-      }
-      node = this.gobbleToken();
-      if (!node) {
-        this.throwError("Expected expression after " + cur_biop);
-      }
-      stack.push(biop_info, node);
-    }
-    i = stack.length - 1;
-    node = stack[i];
-    while (i > 1) {
-      node = {
-        type: Jsep.BINARY_EXP,
-        operator: stack[i - 1].value,
-        left: stack[i - 2],
-        right: node
-      };
-      i -= 2;
-    }
-    return node;
-  }
-  gobbleToken() {
-    let ch, to_check, tc_len, node;
-    this.gobbleSpaces();
-    node = this.searchHook("gobble-token");
-    if (node) {
-      return this.runHook("after-token", node);
-    }
-    ch = this.code;
-    if (Jsep.isDecimalDigit(ch) || ch === Jsep.PERIOD_CODE) {
-      return this.gobbleNumericLiteral();
-    }
-    if (ch === Jsep.SQUOTE_CODE || ch === Jsep.DQUOTE_CODE) {
-      node = this.gobbleStringLiteral();
-    } else if (ch === Jsep.OBRACK_CODE) {
-      node = this.gobbleArray();
-    } else {
-      to_check = this.expr.substr(this.index, Jsep.max_unop_len);
-      tc_len = to_check.length;
-      while (tc_len > 0) {
-        if (Jsep.unary_ops.hasOwnProperty(to_check) && (!Jsep.isIdentifierStart(this.code) || this.index + to_check.length < this.expr.length && !Jsep.isIdentifierPart(this.expr.charCodeAt(this.index + to_check.length)))) {
-          this.index += tc_len;
-          const argument = this.gobbleToken();
-          if (!argument) {
-            this.throwError("missing unaryOp argument");
-          }
-          return this.runHook("after-token", {
-            type: Jsep.UNARY_EXP,
-            operator: to_check,
-            argument,
-            prefix: true
-          });
-        }
-        to_check = to_check.substr(0, --tc_len);
-      }
-      if (Jsep.isIdentifierStart(ch)) {
-        node = this.gobbleIdentifier();
-        if (Jsep.literals.hasOwnProperty(node.name)) {
-          node = {
-            type: Jsep.LITERAL,
-            value: Jsep.literals[node.name],
-            raw: node.name
-          };
-        } else if (node.name === Jsep.this_str) {
-          node = {
-            type: Jsep.THIS_EXP
-          };
-        }
-      } else if (ch === Jsep.OPAREN_CODE) {
-        node = this.gobbleGroup();
-      }
-    }
-    if (!node) {
-      return this.runHook("after-token", false);
-    }
-    node = this.gobbleTokenProperty(node);
-    return this.runHook("after-token", node);
-  }
-  gobbleTokenProperty(node) {
-    this.gobbleSpaces();
-    let ch = this.code;
-    while (ch === Jsep.PERIOD_CODE || ch === Jsep.OBRACK_CODE || ch === Jsep.OPAREN_CODE || ch === Jsep.QUMARK_CODE) {
-      let optional;
-      if (ch === Jsep.QUMARK_CODE) {
-        if (this.expr.charCodeAt(this.index + 1) !== Jsep.PERIOD_CODE) {
-          break;
-        }
-        optional = true;
-        this.index += 2;
-        this.gobbleSpaces();
-        ch = this.code;
-      }
-      this.index++;
-      if (ch === Jsep.OBRACK_CODE) {
-        node = {
-          type: Jsep.MEMBER_EXP,
-          computed: true,
-          object: node,
-          property: this.gobbleExpression()
-        };
-        if (!node.property) {
-          this.throwError('Unexpected "' + this.char + '"');
-        }
-        this.gobbleSpaces();
-        ch = this.code;
-        if (ch !== Jsep.CBRACK_CODE) {
-          this.throwError("Unclosed [");
-        }
-        this.index++;
-      } else if (ch === Jsep.OPAREN_CODE) {
-        node = {
-          type: Jsep.CALL_EXP,
-          arguments: this.gobbleArguments(Jsep.CPAREN_CODE),
-          callee: node
-        };
-      } else if (ch === Jsep.PERIOD_CODE || optional) {
-        if (optional) {
-          this.index--;
-        }
-        this.gobbleSpaces();
-        node = {
-          type: Jsep.MEMBER_EXP,
-          computed: false,
-          object: node,
-          property: this.gobbleIdentifier()
-        };
-      }
-      if (optional) {
-        node.optional = true;
-      }
-      this.gobbleSpaces();
-      ch = this.code;
-    }
-    return node;
-  }
-  gobbleNumericLiteral() {
-    let number = "", ch, chCode;
-    while (Jsep.isDecimalDigit(this.code)) {
-      number += this.expr.charAt(this.index++);
-    }
-    if (this.code === Jsep.PERIOD_CODE) {
-      number += this.expr.charAt(this.index++);
-      while (Jsep.isDecimalDigit(this.code)) {
-        number += this.expr.charAt(this.index++);
-      }
-    }
-    ch = this.char;
-    if (ch === "e" || ch === "E") {
-      number += this.expr.charAt(this.index++);
-      ch = this.char;
-      if (ch === "+" || ch === "-") {
-        number += this.expr.charAt(this.index++);
-      }
-      while (Jsep.isDecimalDigit(this.code)) {
-        number += this.expr.charAt(this.index++);
-      }
-      if (!Jsep.isDecimalDigit(this.expr.charCodeAt(this.index - 1))) {
-        this.throwError("Expected exponent (" + number + this.char + ")");
-      }
-    }
-    chCode = this.code;
-    if (Jsep.isIdentifierStart(chCode)) {
-      this.throwError("Variable names cannot start with a number (" + number + this.char + ")");
-    } else if (chCode === Jsep.PERIOD_CODE || number.length === 1 && number.charCodeAt(0) === Jsep.PERIOD_CODE) {
-      this.throwError("Unexpected period");
-    }
-    return {
-      type: Jsep.LITERAL,
-      value: parseFloat(number),
-      raw: number
-    };
-  }
-  gobbleStringLiteral() {
-    let str = "";
-    const startIndex = this.index;
-    const quote = this.expr.charAt(this.index++);
-    let closed = false;
-    while (this.index < this.expr.length) {
-      let ch = this.expr.charAt(this.index++);
-      if (ch === quote) {
-        closed = true;
-        break;
-      } else if (ch === "\\") {
-        ch = this.expr.charAt(this.index++);
-        switch (ch) {
-          case "n":
-            str += `
-`;
-            break;
-          case "r":
-            str += "\r";
-            break;
-          case "t":
-            str += "\t";
-            break;
-          case "b":
-            str += "\b";
-            break;
-          case "f":
-            str += "\f";
-            break;
-          case "v":
-            str += "\v";
-            break;
-          default:
-            str += ch;
-        }
-      } else {
-        str += ch;
-      }
-    }
-    if (!closed) {
-      this.throwError('Unclosed quote after "' + str + '"');
-    }
-    return {
-      type: Jsep.LITERAL,
-      value: str,
-      raw: this.expr.substring(startIndex, this.index)
-    };
-  }
-  gobbleIdentifier() {
-    let ch = this.code, start = this.index;
-    if (Jsep.isIdentifierStart(ch)) {
-      this.index++;
-    } else {
-      this.throwError("Unexpected " + this.char);
-    }
-    while (this.index < this.expr.length) {
-      ch = this.code;
-      if (Jsep.isIdentifierPart(ch)) {
-        this.index++;
-      } else {
-        break;
-      }
-    }
-    return {
-      type: Jsep.IDENTIFIER,
-      name: this.expr.slice(start, this.index)
-    };
-  }
-  gobbleArguments(termination) {
-    const args = [];
-    let closed = false;
-    let separator_count = 0;
-    while (this.index < this.expr.length) {
-      this.gobbleSpaces();
-      let ch_i = this.code;
-      if (ch_i === termination) {
-        closed = true;
-        this.index++;
-        if (termination === Jsep.CPAREN_CODE && separator_count && separator_count >= args.length) {
-          this.throwError("Unexpected token " + String.fromCharCode(termination));
-        }
-        break;
-      } else if (ch_i === Jsep.COMMA_CODE) {
-        this.index++;
-        separator_count++;
-        if (separator_count !== args.length) {
-          if (termination === Jsep.CPAREN_CODE) {
-            this.throwError("Unexpected token ,");
-          } else if (termination === Jsep.CBRACK_CODE) {
-            for (let arg = args.length;arg < separator_count; arg++) {
-              args.push(null);
-            }
-          }
-        }
-      } else if (args.length !== separator_count && separator_count !== 0) {
-        this.throwError("Expected comma");
-      } else {
-        const node = this.gobbleExpression();
-        if (!node || node.type === Jsep.COMPOUND) {
-          this.throwError("Expected comma");
-        }
-        args.push(node);
-      }
-    }
-    if (!closed) {
-      this.throwError("Expected " + String.fromCharCode(termination));
-    }
-    return args;
-  }
-  gobbleGroup() {
-    this.index++;
-    let nodes = this.gobbleExpressions(Jsep.CPAREN_CODE);
-    if (this.code === Jsep.CPAREN_CODE) {
-      this.index++;
-      if (nodes.length === 1) {
-        return nodes[0];
-      } else if (!nodes.length) {
-        return false;
-      } else {
-        return {
-          type: Jsep.SEQUENCE_EXP,
-          expressions: nodes
-        };
-      }
-    } else {
-      this.throwError("Unclosed (");
-    }
-  }
-  gobbleArray() {
-    this.index++;
-    return {
-      type: Jsep.ARRAY_EXP,
-      elements: this.gobbleArguments(Jsep.CBRACK_CODE)
-    };
-  }
-}
-var hooks = new Hooks;
-Object.assign(Jsep, {
-  hooks,
-  plugins: new Plugins(Jsep),
-  COMPOUND: "Compound",
-  SEQUENCE_EXP: "SequenceExpression",
-  IDENTIFIER: "Identifier",
-  MEMBER_EXP: "MemberExpression",
-  LITERAL: "Literal",
-  THIS_EXP: "ThisExpression",
-  CALL_EXP: "CallExpression",
-  UNARY_EXP: "UnaryExpression",
-  BINARY_EXP: "BinaryExpression",
-  ARRAY_EXP: "ArrayExpression",
-  TAB_CODE: 9,
-  LF_CODE: 10,
-  CR_CODE: 13,
-  SPACE_CODE: 32,
-  PERIOD_CODE: 46,
-  COMMA_CODE: 44,
-  SQUOTE_CODE: 39,
-  DQUOTE_CODE: 34,
-  OPAREN_CODE: 40,
-  CPAREN_CODE: 41,
-  OBRACK_CODE: 91,
-  CBRACK_CODE: 93,
-  QUMARK_CODE: 63,
-  SEMCOL_CODE: 59,
-  COLON_CODE: 58,
-  unary_ops: {
-    "-": 1,
-    "!": 1,
-    "~": 1,
-    "+": 1
-  },
-  binary_ops: {
-    "||": 1,
-    "??": 1,
-    "&&": 2,
-    "|": 3,
-    "^": 4,
-    "&": 5,
-    "==": 6,
-    "!=": 6,
-    "===": 6,
-    "!==": 6,
-    "<": 7,
-    ">": 7,
-    "<=": 7,
-    ">=": 7,
-    "<<": 8,
-    ">>": 8,
-    ">>>": 8,
-    "+": 9,
-    "-": 9,
-    "*": 10,
-    "/": 10,
-    "%": 10,
-    "**": 11
-  },
-  right_associative: new Set(["**"]),
-  additional_identifier_chars: new Set(["$", "_"]),
-  literals: {
-    true: true,
-    false: false,
-    null: null
-  },
-  this_str: "this"
-});
-Jsep.max_unop_len = Jsep.getMaxKeyLen(Jsep.unary_ops);
-Jsep.max_binop_len = Jsep.getMaxKeyLen(Jsep.binary_ops);
-var jsep = (expr) => new Jsep(expr).parse();
-var stdClassProps = Object.getOwnPropertyNames(class Test {
-});
-Object.getOwnPropertyNames(Jsep).filter((prop) => !stdClassProps.includes(prop) && jsep[prop] === undefined).forEach((m) => {
-  jsep[m] = Jsep[m];
-});
-jsep.Jsep = Jsep;
-var CONDITIONAL_EXP = "ConditionalExpression";
-var ternary = {
-  name: "ternary",
-  init(jsep2) {
-    jsep2.hooks.add("after-expression", function gobbleTernary(env) {
-      if (env.node && this.code === jsep2.QUMARK_CODE) {
-        this.index++;
-        const test = env.node;
-        const consequent = this.gobbleExpression();
-        if (!consequent) {
-          this.throwError("Expected expression");
-        }
-        this.gobbleSpaces();
-        if (this.code === jsep2.COLON_CODE) {
-          this.index++;
-          const alternate = this.gobbleExpression();
-          if (!alternate) {
-            this.throwError("Expected expression");
-          }
-          env.node = {
-            type: CONDITIONAL_EXP,
-            test,
-            consequent,
-            alternate
-          };
-          if (test.operator && jsep2.binary_ops[test.operator] <= 0.9) {
-            let newTest = test;
-            while (newTest.right.operator && jsep2.binary_ops[newTest.right.operator] <= 0.9) {
-              newTest = newTest.right;
-            }
-            env.node.test = newTest.right;
-            newTest.right = env.node;
-            env.node = test;
-          }
-        } else {
-          this.throwError("Expected :");
-        }
-      }
-    });
-  }
-};
-jsep.plugins.register(ternary);
-var FSLASH_CODE = 47;
-var BSLASH_CODE = 92;
-var index = {
-  name: "regex",
-  init(jsep2) {
-    jsep2.hooks.add("gobble-token", function gobbleRegexLiteral(env) {
-      if (this.code === FSLASH_CODE) {
-        const patternIndex = ++this.index;
-        let inCharSet = false;
-        while (this.index < this.expr.length) {
-          if (this.code === FSLASH_CODE && !inCharSet) {
-            const pattern = this.expr.slice(patternIndex, this.index);
-            let flags = "";
-            while (++this.index < this.expr.length) {
-              const code = this.code;
-              if (code >= 97 && code <= 122 || code >= 65 && code <= 90 || code >= 48 && code <= 57) {
-                flags += this.char;
-              } else {
-                break;
-              }
-            }
-            let value;
-            try {
-              value = new RegExp(pattern, flags);
-            } catch (e) {
-              this.throwError(e.message);
-            }
-            env.node = {
-              type: jsep2.LITERAL,
-              value,
-              raw: this.expr.slice(patternIndex - 1, this.index)
-            };
-            env.node = this.gobbleTokenProperty(env.node);
-            return env.node;
-          }
-          if (this.code === jsep2.OBRACK_CODE) {
-            inCharSet = true;
-          } else if (inCharSet && this.code === jsep2.CBRACK_CODE) {
-            inCharSet = false;
-          }
-          this.index += this.code === BSLASH_CODE ? 2 : 1;
-        }
-        this.throwError("Unclosed Regex");
-      }
-    });
-  }
-};
-var PLUS_CODE = 43;
-var MINUS_CODE = 45;
-var plugin = {
-  name: "assignment",
-  assignmentOperators: new Set(["=", "*=", "**=", "/=", "%=", "+=", "-=", "<<=", ">>=", ">>>=", "&=", "^=", "|=", "||=", "&&=", "??="]),
-  updateOperators: [PLUS_CODE, MINUS_CODE],
-  assignmentPrecedence: 0.9,
-  init(jsep2) {
-    const updateNodeTypes = [jsep2.IDENTIFIER, jsep2.MEMBER_EXP];
-    plugin.assignmentOperators.forEach((op) => jsep2.addBinaryOp(op, plugin.assignmentPrecedence, true));
-    jsep2.hooks.add("gobble-token", function gobbleUpdatePrefix(env) {
-      const code = this.code;
-      if (plugin.updateOperators.some((c) => c === code && c === this.expr.charCodeAt(this.index + 1))) {
-        this.index += 2;
-        env.node = {
-          type: "UpdateExpression",
-          operator: code === PLUS_CODE ? "++" : "--",
-          argument: this.gobbleTokenProperty(this.gobbleIdentifier()),
-          prefix: true
-        };
-        if (!env.node.argument || !updateNodeTypes.includes(env.node.argument.type)) {
-          this.throwError(`Unexpected ${env.node.operator}`);
-        }
-      }
-    });
-    jsep2.hooks.add("after-token", function gobbleUpdatePostfix(env) {
-      if (env.node) {
-        const code = this.code;
-        if (plugin.updateOperators.some((c) => c === code && c === this.expr.charCodeAt(this.index + 1))) {
-          if (!updateNodeTypes.includes(env.node.type)) {
-            this.throwError(`Unexpected ${env.node.operator}`);
-          }
-          this.index += 2;
-          env.node = {
-            type: "UpdateExpression",
-            operator: code === PLUS_CODE ? "++" : "--",
-            argument: env.node,
-            prefix: false
-          };
-        }
-      }
-    });
-    jsep2.hooks.add("after-expression", function gobbleAssignment(env) {
-      if (env.node) {
-        updateBinariesToAssignments(env.node);
-      }
-    });
-    function updateBinariesToAssignments(node) {
-      if (plugin.assignmentOperators.has(node.operator)) {
-        node.type = "AssignmentExpression";
-        updateBinariesToAssignments(node.left);
-        updateBinariesToAssignments(node.right);
-      } else if (!node.operator) {
-        Object.values(node).forEach((val) => {
-          if (val && typeof val === "object") {
-            updateBinariesToAssignments(val);
-          }
-        });
-      }
-    }
-  }
-};
-jsep.plugins.register(index, plugin);
-jsep.addUnaryOp("typeof");
-jsep.addUnaryOp("void");
-jsep.addLiteral("null", null);
-jsep.addLiteral("undefined", undefined);
-var BLOCKED_PROTO_PROPERTIES = new Set(["constructor", "__proto__", "__defineGetter__", "__defineSetter__", "__lookupGetter__", "__lookupSetter__"]);
-var SafeEval = {
-  evalAst(ast, subs) {
-    switch (ast.type) {
-      case "BinaryExpression":
-      case "LogicalExpression":
-        return SafeEval.evalBinaryExpression(ast, subs);
-      case "Compound":
-        return SafeEval.evalCompound(ast, subs);
-      case "ConditionalExpression":
-        return SafeEval.evalConditionalExpression(ast, subs);
-      case "Identifier":
-        return SafeEval.evalIdentifier(ast, subs);
-      case "Literal":
-        return SafeEval.evalLiteral(ast, subs);
-      case "MemberExpression":
-        return SafeEval.evalMemberExpression(ast, subs);
-      case "UnaryExpression":
-        return SafeEval.evalUnaryExpression(ast, subs);
-      case "ArrayExpression":
-        return SafeEval.evalArrayExpression(ast, subs);
-      case "CallExpression":
-        return SafeEval.evalCallExpression(ast, subs);
-      case "AssignmentExpression":
-        return SafeEval.evalAssignmentExpression(ast, subs);
-      default:
-        throw SyntaxError("Unexpected expression", ast);
-    }
-  },
-  evalBinaryExpression(ast, subs) {
-    const result = {
-      "||": (a, b) => a || b(),
-      "&&": (a, b) => a && b(),
-      "|": (a, b) => a | b(),
-      "^": (a, b) => a ^ b(),
-      "&": (a, b) => a & b(),
-      "==": (a, b) => a == b(),
-      "!=": (a, b) => a != b(),
-      "===": (a, b) => a === b(),
-      "!==": (a, b) => a !== b(),
-      "<": (a, b) => a < b(),
-      ">": (a, b) => a > b(),
-      "<=": (a, b) => a <= b(),
-      ">=": (a, b) => a >= b(),
-      "<<": (a, b) => a << b(),
-      ">>": (a, b) => a >> b(),
-      ">>>": (a, b) => a >>> b(),
-      "+": (a, b) => a + b(),
-      "-": (a, b) => a - b(),
-      "*": (a, b) => a * b(),
-      "/": (a, b) => a / b(),
-      "%": (a, b) => a % b()
-    }[ast.operator](SafeEval.evalAst(ast.left, subs), () => SafeEval.evalAst(ast.right, subs));
-    return result;
-  },
-  evalCompound(ast, subs) {
-    let last;
-    for (let i = 0;i < ast.body.length; i++) {
-      if (ast.body[i].type === "Identifier" && ["var", "let", "const"].includes(ast.body[i].name) && ast.body[i + 1] && ast.body[i + 1].type === "AssignmentExpression") {
-        i += 1;
-      }
-      const expr = ast.body[i];
-      last = SafeEval.evalAst(expr, subs);
-    }
-    return last;
-  },
-  evalConditionalExpression(ast, subs) {
-    if (SafeEval.evalAst(ast.test, subs)) {
-      return SafeEval.evalAst(ast.consequent, subs);
-    }
-    return SafeEval.evalAst(ast.alternate, subs);
-  },
-  evalIdentifier(ast, subs) {
-    if (Object.hasOwn(subs, ast.name)) {
-      return subs[ast.name];
-    }
-    throw ReferenceError(`${ast.name} is not defined`);
-  },
-  evalLiteral(ast) {
-    return ast.value;
-  },
-  evalMemberExpression(ast, subs) {
-    const prop = String(ast.computed ? SafeEval.evalAst(ast.property) : ast.property.name);
-    const obj = SafeEval.evalAst(ast.object, subs);
-    if (obj === undefined || obj === null) {
-      throw TypeError(`Cannot read properties of ${obj} (reading '${prop}')`);
-    }
-    if (!Object.hasOwn(obj, prop) && BLOCKED_PROTO_PROPERTIES.has(prop)) {
-      throw TypeError(`Cannot read properties of ${obj} (reading '${prop}')`);
-    }
-    const result = obj[prop];
-    if (typeof result === "function") {
-      return result.bind(obj);
-    }
-    return result;
-  },
-  evalUnaryExpression(ast, subs) {
-    const result = {
-      "-": (a) => -SafeEval.evalAst(a, subs),
-      "!": (a) => !SafeEval.evalAst(a, subs),
-      "~": (a) => ~SafeEval.evalAst(a, subs),
-      "+": (a) => +SafeEval.evalAst(a, subs),
-      typeof: (a) => typeof SafeEval.evalAst(a, subs),
-      void: (a) => void SafeEval.evalAst(a, subs)
-    }[ast.operator](ast.argument);
-    return result;
-  },
-  evalArrayExpression(ast, subs) {
-    return ast.elements.map((el) => SafeEval.evalAst(el, subs));
-  },
-  evalCallExpression(ast, subs) {
-    const args = ast.arguments.map((arg) => SafeEval.evalAst(arg, subs));
-    const func = SafeEval.evalAst(ast.callee, subs);
-    if (func === Function) {
-      throw new Error("Function constructor is disabled");
-    }
-    return func(...args);
-  },
-  evalAssignmentExpression(ast, subs) {
-    if (ast.left.type !== "Identifier") {
-      throw SyntaxError("Invalid left-hand side in assignment");
-    }
-    const id = ast.left.name;
-    const value = SafeEval.evalAst(ast.right, subs);
-    subs[id] = value;
-    return subs[id];
-  }
-};
-
-class SafeScript {
-  constructor(expr) {
-    this.code = expr;
-    this.ast = jsep(this.code);
-  }
-  runInNewContext(context) {
-    const keyMap = Object.assign(Object.create(null), context);
-    return SafeEval.evalAst(this.ast, keyMap);
-  }
-}
-function push(arr, item) {
-  arr = arr.slice();
-  arr.push(item);
-  return arr;
-}
-function unshift(item, arr) {
-  arr = arr.slice();
-  arr.unshift(item);
-  return arr;
-}
-
-class NewError extends Error {
-  constructor(value) {
-    super('JSONPath should not be called with "new" (it prevents return ' + "of (unwrapped) scalar values)");
-    this.avoidNew = true;
-    this.value = value;
-    this.name = "NewError";
-  }
-}
-function JSONPath(opts, expr, obj, callback, otherTypeCallback) {
-  if (!(this instanceof JSONPath)) {
-    try {
-      return new JSONPath(opts, expr, obj, callback, otherTypeCallback);
-    } catch (e) {
-      if (!e.avoidNew) {
-        throw e;
-      }
-      return e.value;
-    }
-  }
-  if (typeof opts === "string") {
-    otherTypeCallback = callback;
-    callback = obj;
-    obj = expr;
-    expr = opts;
-    opts = null;
-  }
-  const optObj = opts && typeof opts === "object";
-  opts = opts || {};
-  this.json = opts.json || obj;
-  this.path = opts.path || expr;
-  this.resultType = opts.resultType || "value";
-  this.flatten = opts.flatten || false;
-  this.wrap = Object.hasOwn(opts, "wrap") ? opts.wrap : true;
-  this.sandbox = opts.sandbox || {};
-  this.eval = opts.eval === undefined ? "safe" : opts.eval;
-  this.ignoreEvalErrors = typeof opts.ignoreEvalErrors === "undefined" ? false : opts.ignoreEvalErrors;
-  this.parent = opts.parent || null;
-  this.parentProperty = opts.parentProperty || null;
-  this.callback = opts.callback || callback || null;
-  this.otherTypeCallback = opts.otherTypeCallback || otherTypeCallback || function() {
-    throw new TypeError("You must supply an otherTypeCallback callback option " + "with the @other() operator.");
-  };
-  if (opts.autostart !== false) {
-    const args = {
-      path: optObj ? opts.path : expr
-    };
-    if (!optObj) {
-      args.json = obj;
-    } else if ("json" in opts) {
-      args.json = opts.json;
-    }
-    const ret = this.evaluate(args);
-    if (!ret || typeof ret !== "object") {
-      throw new NewError(ret);
-    }
-    return ret;
-  }
-}
-JSONPath.prototype.evaluate = function(expr, json, callback, otherTypeCallback) {
-  let currParent = this.parent, currParentProperty = this.parentProperty;
-  let {
-    flatten,
-    wrap
-  } = this;
-  this.currResultType = this.resultType;
-  this.currEval = this.eval;
-  this.currSandbox = this.sandbox;
-  callback = callback || this.callback;
-  this.currOtherTypeCallback = otherTypeCallback || this.otherTypeCallback;
-  json = json || this.json;
-  expr = expr || this.path;
-  if (expr && typeof expr === "object" && !Array.isArray(expr)) {
-    if (!expr.path && expr.path !== "") {
-      throw new TypeError('You must supply a "path" property when providing an object ' + "argument to JSONPath.evaluate().");
-    }
-    if (!Object.hasOwn(expr, "json")) {
-      throw new TypeError('You must supply a "json" property when providing an object ' + "argument to JSONPath.evaluate().");
-    }
-    ({
-      json
-    } = expr);
-    flatten = Object.hasOwn(expr, "flatten") ? expr.flatten : flatten;
-    this.currResultType = Object.hasOwn(expr, "resultType") ? expr.resultType : this.currResultType;
-    this.currSandbox = Object.hasOwn(expr, "sandbox") ? expr.sandbox : this.currSandbox;
-    wrap = Object.hasOwn(expr, "wrap") ? expr.wrap : wrap;
-    this.currEval = Object.hasOwn(expr, "eval") ? expr.eval : this.currEval;
-    callback = Object.hasOwn(expr, "callback") ? expr.callback : callback;
-    this.currOtherTypeCallback = Object.hasOwn(expr, "otherTypeCallback") ? expr.otherTypeCallback : this.currOtherTypeCallback;
-    currParent = Object.hasOwn(expr, "parent") ? expr.parent : currParent;
-    currParentProperty = Object.hasOwn(expr, "parentProperty") ? expr.parentProperty : currParentProperty;
-    expr = expr.path;
-  }
-  currParent = currParent || null;
-  currParentProperty = currParentProperty || null;
-  if (Array.isArray(expr)) {
-    expr = JSONPath.toPathString(expr);
-  }
-  if (!expr && expr !== "" || !json) {
-    return;
-  }
-  const exprList = JSONPath.toPathArray(expr);
-  if (exprList[0] === "$" && exprList.length > 1) {
-    exprList.shift();
-  }
-  this._hasParentSelector = null;
-  const result = this._trace(exprList, json, ["$"], currParent, currParentProperty, callback).filter(function(ea) {
-    return ea && !ea.isParentSelector;
-  });
-  if (!result.length) {
-    return wrap ? [] : undefined;
-  }
-  if (!wrap && result.length === 1 && !result[0].hasArrExpr) {
-    return this._getPreferredOutput(result[0]);
-  }
-  return result.reduce((rslt, ea) => {
-    const valOrPath = this._getPreferredOutput(ea);
-    if (flatten && Array.isArray(valOrPath)) {
-      rslt = rslt.concat(valOrPath);
-    } else {
-      rslt.push(valOrPath);
-    }
-    return rslt;
-  }, []);
-};
-JSONPath.prototype._getPreferredOutput = function(ea) {
-  const resultType = this.currResultType;
-  switch (resultType) {
-    case "all": {
-      const path3 = Array.isArray(ea.path) ? ea.path : JSONPath.toPathArray(ea.path);
-      ea.pointer = JSONPath.toPointer(path3);
-      ea.path = typeof ea.path === "string" ? ea.path : JSONPath.toPathString(ea.path);
-      return ea;
-    }
-    case "value":
-    case "parent":
-    case "parentProperty":
-      return ea[resultType];
-    case "path":
-      return JSONPath.toPathString(ea[resultType]);
-    case "pointer":
-      return JSONPath.toPointer(ea.path);
-    default:
-      throw new TypeError("Unknown result type");
-  }
-};
-JSONPath.prototype._handleCallback = function(fullRetObj, callback, type) {
-  if (callback) {
-    const preferredOutput = this._getPreferredOutput(fullRetObj);
-    fullRetObj.path = typeof fullRetObj.path === "string" ? fullRetObj.path : JSONPath.toPathString(fullRetObj.path);
-    callback(preferredOutput, type, fullRetObj);
-  }
-};
-JSONPath.prototype._trace = function(expr, val, path3, parent, parentPropName, callback, hasArrExpr, literalPriority) {
-  let retObj;
-  if (!expr.length) {
-    retObj = {
-      path: path3,
-      value: val,
-      parent,
-      parentProperty: parentPropName,
-      hasArrExpr
-    };
-    this._handleCallback(retObj, callback, "value");
-    return retObj;
-  }
-  const loc = expr[0], x = expr.slice(1);
-  const ret = [];
-  function addRet(elems) {
-    if (Array.isArray(elems)) {
-      elems.forEach((t) => {
-        ret.push(t);
-      });
-    } else {
-      ret.push(elems);
-    }
-  }
-  if ((typeof loc !== "string" || literalPriority) && val && Object.hasOwn(val, loc)) {
-    addRet(this._trace(x, val[loc], push(path3, loc), val, loc, callback, hasArrExpr));
-  } else if (loc === "*") {
-    this._walk(val, (m) => {
-      addRet(this._trace(x, val[m], push(path3, m), val, m, callback, true, true));
-    });
-  } else if (loc === "..") {
-    addRet(this._trace(x, val, path3, parent, parentPropName, callback, hasArrExpr));
-    this._walk(val, (m) => {
-      if (typeof val[m] === "object") {
-        addRet(this._trace(expr.slice(), val[m], push(path3, m), val, m, callback, true));
-      }
-    });
-  } else if (loc === "^") {
-    this._hasParentSelector = true;
-    return {
-      path: path3.slice(0, -1),
-      expr: x,
-      isParentSelector: true
-    };
-  } else if (loc === "~") {
-    retObj = {
-      path: push(path3, loc),
-      value: parentPropName,
-      parent,
-      parentProperty: null
-    };
-    this._handleCallback(retObj, callback, "property");
-    return retObj;
-  } else if (loc === "$") {
-    addRet(this._trace(x, val, path3, null, null, callback, hasArrExpr));
-  } else if (/^(-?\d*):(-?\d*):?(\d*)$/u.test(loc)) {
-    addRet(this._slice(loc, x, val, path3, parent, parentPropName, callback));
-  } else if (loc.indexOf("?(") === 0) {
-    if (this.currEval === false) {
-      throw new Error("Eval [?(expr)] prevented in JSONPath expression.");
-    }
-    const safeLoc = loc.replace(/^\?\((.*?)\)$/u, "$1");
-    const nested = /@.?([^?]*)[['](\??\(.*?\))(?!.\)\])[\]']/gu.exec(safeLoc);
-    if (nested) {
-      this._walk(val, (m) => {
-        const npath = [nested[2]];
-        const nvalue = nested[1] ? val[m][nested[1]] : val[m];
-        const filterResults = this._trace(npath, nvalue, path3, parent, parentPropName, callback, true);
-        if (filterResults.length > 0) {
-          addRet(this._trace(x, val[m], push(path3, m), val, m, callback, true));
-        }
-      });
-    } else {
-      this._walk(val, (m) => {
-        if (this._eval(safeLoc, val[m], m, path3, parent, parentPropName)) {
-          addRet(this._trace(x, val[m], push(path3, m), val, m, callback, true));
-        }
-      });
-    }
-  } else if (loc[0] === "(") {
-    if (this.currEval === false) {
-      throw new Error("Eval [(expr)] prevented in JSONPath expression.");
-    }
-    addRet(this._trace(unshift(this._eval(loc, val, path3.at(-1), path3.slice(0, -1), parent, parentPropName), x), val, path3, parent, parentPropName, callback, hasArrExpr));
-  } else if (loc[0] === "@") {
-    let addType = false;
-    const valueType = loc.slice(1, -2);
-    switch (valueType) {
-      case "scalar":
-        if (!val || !["object", "function"].includes(typeof val)) {
-          addType = true;
-        }
-        break;
-      case "boolean":
-      case "string":
-      case "undefined":
-      case "function":
-        if (typeof val === valueType) {
-          addType = true;
-        }
-        break;
-      case "integer":
-        if (Number.isFinite(val) && !(val % 1)) {
-          addType = true;
-        }
-        break;
-      case "number":
-        if (Number.isFinite(val)) {
-          addType = true;
-        }
-        break;
-      case "nonFinite":
-        if (typeof val === "number" && !Number.isFinite(val)) {
-          addType = true;
-        }
-        break;
-      case "object":
-        if (val && typeof val === valueType) {
-          addType = true;
-        }
-        break;
-      case "array":
-        if (Array.isArray(val)) {
-          addType = true;
-        }
-        break;
-      case "other":
-        addType = this.currOtherTypeCallback(val, path3, parent, parentPropName);
-        break;
-      case "null":
-        if (val === null) {
-          addType = true;
-        }
-        break;
-      default:
-        throw new TypeError("Unknown value type " + valueType);
-    }
-    if (addType) {
-      retObj = {
-        path: path3,
-        value: val,
-        parent,
-        parentProperty: parentPropName
-      };
-      this._handleCallback(retObj, callback, "value");
-      return retObj;
-    }
-  } else if (loc[0] === "`" && val && Object.hasOwn(val, loc.slice(1))) {
-    const locProp = loc.slice(1);
-    addRet(this._trace(x, val[locProp], push(path3, locProp), val, locProp, callback, hasArrExpr, true));
-  } else if (loc.includes(",")) {
-    const parts = loc.split(",");
-    for (const part of parts) {
-      addRet(this._trace(unshift(part, x), val, path3, parent, parentPropName, callback, true));
-    }
-  } else if (!literalPriority && val && Object.hasOwn(val, loc)) {
-    addRet(this._trace(x, val[loc], push(path3, loc), val, loc, callback, hasArrExpr, true));
-  }
-  if (this._hasParentSelector) {
-    for (let t = 0;t < ret.length; t++) {
-      const rett = ret[t];
-      if (rett && rett.isParentSelector) {
-        const tmp = this._trace(rett.expr, val, rett.path, parent, parentPropName, callback, hasArrExpr);
-        if (Array.isArray(tmp)) {
-          ret[t] = tmp[0];
-          const tl = tmp.length;
-          for (let tt = 1;tt < tl; tt++) {
-            t++;
-            ret.splice(t, 0, tmp[tt]);
-          }
-        } else {
-          ret[t] = tmp;
-        }
-      }
-    }
-  }
-  return ret;
-};
-JSONPath.prototype._walk = function(val, f) {
-  if (Array.isArray(val)) {
-    const n = val.length;
-    for (let i = 0;i < n; i++) {
-      f(i);
-    }
-  } else if (val && typeof val === "object") {
-    Object.keys(val).forEach((m) => {
-      f(m);
-    });
-  }
-};
-JSONPath.prototype._slice = function(loc, expr, val, path3, parent, parentPropName, callback) {
-  if (!Array.isArray(val)) {
-    return;
-  }
-  const len = val.length, parts = loc.split(":"), step = parts[2] && Number.parseInt(parts[2]) || 1;
-  let start = parts[0] && Number.parseInt(parts[0]) || 0, end = parts[1] && Number.parseInt(parts[1]) || len;
-  start = start < 0 ? Math.max(0, start + len) : Math.min(len, start);
-  end = end < 0 ? Math.max(0, end + len) : Math.min(len, end);
-  const ret = [];
-  for (let i = start;i < end; i += step) {
-    const tmp = this._trace(unshift(i, expr), val, path3, parent, parentPropName, callback, true);
-    tmp.forEach((t) => {
-      ret.push(t);
-    });
-  }
-  return ret;
-};
-JSONPath.prototype._eval = function(code, _v, _vname, path3, parent, parentPropName) {
-  this.currSandbox._$_parentProperty = parentPropName;
-  this.currSandbox._$_parent = parent;
-  this.currSandbox._$_property = _vname;
-  this.currSandbox._$_root = this.json;
-  this.currSandbox._$_v = _v;
-  const containsPath = code.includes("@path");
-  if (containsPath) {
-    this.currSandbox._$_path = JSONPath.toPathString(path3.concat([_vname]));
-  }
-  const scriptCacheKey = this.currEval + "Script:" + code;
-  if (!JSONPath.cache[scriptCacheKey]) {
-    let script = code.replaceAll("@parentProperty", "_$_parentProperty").replaceAll("@parent", "_$_parent").replaceAll("@property", "_$_property").replaceAll("@root", "_$_root").replaceAll(/@([.\s)[])/gu, "_$_v$1");
-    if (containsPath) {
-      script = script.replaceAll("@path", "_$_path");
-    }
-    if (this.currEval === "safe" || this.currEval === true || this.currEval === undefined) {
-      JSONPath.cache[scriptCacheKey] = new this.safeVm.Script(script);
-    } else if (this.currEval === "native") {
-      JSONPath.cache[scriptCacheKey] = new this.vm.Script(script);
-    } else if (typeof this.currEval === "function" && this.currEval.prototype && Object.hasOwn(this.currEval.prototype, "runInNewContext")) {
-      const CurrEval = this.currEval;
-      JSONPath.cache[scriptCacheKey] = new CurrEval(script);
-    } else if (typeof this.currEval === "function") {
-      JSONPath.cache[scriptCacheKey] = {
-        runInNewContext: (context) => this.currEval(script, context)
-      };
-    } else {
-      throw new TypeError(`Unknown "eval" property "${this.currEval}"`);
-    }
-  }
-  try {
-    return JSONPath.cache[scriptCacheKey].runInNewContext(this.currSandbox);
-  } catch (e) {
-    if (this.ignoreEvalErrors) {
-      return false;
-    }
-    throw new Error("jsonPath: " + e.message + ": " + code);
-  }
-};
-JSONPath.cache = {};
-JSONPath.toPathString = function(pathArr) {
-  const x = pathArr, n = x.length;
-  let p = "$";
-  for (let i = 1;i < n; i++) {
-    if (!/^(~|\^|@.*?\(\))$/u.test(x[i])) {
-      p += /^[0-9*]+$/u.test(x[i]) ? "[" + x[i] + "]" : "['" + x[i] + "']";
-    }
-  }
-  return p;
-};
-JSONPath.toPointer = function(pointer) {
-  const x = pointer, n = x.length;
-  let p = "";
-  for (let i = 1;i < n; i++) {
-    if (!/^(~|\^|@.*?\(\))$/u.test(x[i])) {
-      p += "/" + x[i].toString().replaceAll("~", "~0").replaceAll("/", "~1");
-    }
-  }
-  return p;
-};
-JSONPath.toPathArray = function(expr) {
-  const {
-    cache
-  } = JSONPath;
-  if (cache[expr]) {
-    return cache[expr].concat();
-  }
-  const subx = [];
-  const normalized = expr.replaceAll(/@(?:null|boolean|number|string|integer|undefined|nonFinite|scalar|array|object|function|other)\(\)/gu, ";$&;").replaceAll(/[['](\??\(.*?\))[\]'](?!.\])/gu, function($0, $1) {
-    return "[#" + (subx.push($1) - 1) + "]";
-  }).replaceAll(/\[['"]([^'\]]*)['"]\]/gu, function($0, prop) {
-    return "['" + prop.replaceAll(".", "%@%").replaceAll("~", "%%@@%%") + "']";
-  }).replaceAll("~", ";~;").replaceAll(/['"]?\.['"]?(?![^[]*\])|\[['"]?/gu, ";").replaceAll("%@%", ".").replaceAll("%%@@%%", "~").replaceAll(/(?:;)?(\^+)(?:;)?/gu, function($0, ups) {
-    return ";" + ups.split("").join(";") + ";";
-  }).replaceAll(/;;;|;;/gu, ";..;").replaceAll(/;$|'?\]|'$/gu, "");
-  const exprList = normalized.split(";").map(function(exp) {
-    const match = exp.match(/#(\d+)/u);
-    return !match || !match[1] ? exp : subx[match[1]];
-  });
-  cache[expr] = exprList;
-  return cache[expr].concat();
-};
-JSONPath.prototype.safeVm = {
-  Script: SafeScript
-};
-JSONPath.prototype.vm = vm;
-// ../common/src/polling/types.ts
-var PollOutcome = {
-  Completed: "completed",
-  Timeout: "timeout",
-  Interrupted: "interrupted",
-  Aborted: "aborted",
-  Failed: "failed"
-};
-
-// ../common/src/polling/poll-failure-mapping.ts
-var REASON_BY_OUTCOME = {
-  [PollOutcome.Timeout]: "poll_timeout",
-  [PollOutcome.Failed]: "poll_failed",
-  [PollOutcome.Interrupted]: "poll_failed",
-  [PollOutcome.Aborted]: "poll_aborted"
-};
-// ../common/src/polling/terminal-statuses.ts
-var TERMINAL_STATUSES = new Set([
-  "completed",
-  "successful",
-  "faulted",
-  "failed",
-  "cancelled",
-  "canceled",
-  "stopped",
-  "finished"
-]);
-var FAILURE_STATUSES = new Set([
-  "faulted",
-  "failed",
-  "cancelled",
-  "canceled",
-  "stopped"
-]);
-// ../common/src/screen-logger.ts
-var ScreenLogger;
-((ScreenLogger) => {
-  function progress(message) {
-    getOutputSink().writeErr(`${message}
-`);
-  }
-  ScreenLogger.progress = progress;
-})(ScreenLogger ||= {});
-// ../common/src/sdk-user-agent.ts
-var sdkUserAgentHostToken = singleton("SdkUserAgentHostToken");
-// ../common/src/tool-provider.ts
-var factorySlot = singleton("PackagerFactoryProvider");
-// ../uipath-python-bridge/src/cache.ts
-init_src();
-async function readCache(cacheFile) {
-  const fs7 = getFileSystem();
-  const [existsError, exists] = await catchError(fs7.exists(cacheFile));
-  if (existsError || !exists)
-    return null;
-  const [readError, content] = await catchError(fs7.readFile(cacheFile, "utf-8"));
-  if (readError) {
-    logger.warn(`Failed to load cache: ${readError}`);
-    return null;
-  }
-  const [parseError, cache] = catchError(() => JSON.parse(content));
-  if (parseError) {
-    logger.warn(`Failed to parse cache: ${parseError}`);
-    return null;
-  }
-  return cache;
-}
-// ../uipath-python-bridge/src/config.ts
-var DEFAULT_CONFIG = {
-  allowedPythonVersions: ["3.13", "3.12", "3.11"],
-  packageName: "uipath",
-  cacheFileName: ".uipath-python-cache.json"
-};
-function getAllowedPythonVersions() {
-  const envVersions = process.env.PYTHON_TOOL_PYTHON_VERSIONS;
-  if (envVersions) {
-    return envVersions.split(",").map((v) => v.trim()).filter(Boolean);
-  }
-  return DEFAULT_CONFIG.allowedPythonVersions;
-}
-function getPackageName() {
-  return DEFAULT_CONFIG.packageName;
-}
-function getCacheFileName() {
-  return DEFAULT_CONFIG.cacheFileName;
-}
-function matchesPattern(args, pattern) {
-  if (typeof pattern === "string") {
-    return args.includes(pattern);
-  }
-  if (Array.isArray(pattern)) {
-    for (let i = 0;i <= args.length - pattern.length; i++) {
-      let match = true;
-      for (let j = 0;j < pattern.length; j++) {
-        if (args[i + j] !== pattern[j]) {
-          match = false;
-          break;
-        }
-      }
-      if (match) {
-        return true;
-      }
-    }
-  }
-  return false;
-}
-function processCommandArgs(args, rules) {
-  const hasForceFlag = args.includes("--force");
-  const argsWithoutForce = args.filter((arg) => arg !== "--force");
-  for (const rule of rules) {
-    if (matchesPattern(argsWithoutForce, rule.pattern)) {
-      switch (rule.action) {
-        case "filter":
-          if (hasForceFlag) {
-            return {
-              allowed: true,
-              args: [...argsWithoutForce]
-            };
-          }
-          return {
-            allowed: false,
-            args: [],
-            errorMessage: rule.filterMessage || "This command is not allowed"
-          };
-        case "append":
-          if (rule.appendArgs && rule.appendArgs.length > 0) {
-            return {
-              allowed: true,
-              args: [...argsWithoutForce, ...rule.appendArgs]
-            };
-          }
-          break;
-      }
-    }
-  }
-  return {
-    allowed: true,
-    args: [...argsWithoutForce]
-  };
-}
-// ../uipath-python-bridge/src/execute.ts
-import { spawn } from "node:child_process";
-
-// ../auth/src/config.ts
-init_constants();
-var DEFAULT_CLIENT_ID = "36dea5b8-e8bb-423d-8e7b-c808df8f1c00";
-var AUTH_FILE_CONFIG_KEY = Symbol.for("@uipath/auth/AuthFileConfig");
-var globalSlot = globalThis;
-var getAuthFileConfig = () => globalSlot[AUTH_FILE_CONFIG_KEY] ?? {};
-
-class InvalidBaseUrlError extends Error {
-  url;
-  reason;
-  constructor(url, reason) {
-    super(`Invalid base URL: "${url}"
-` + `Reason: ${reason}
-
-` + `Expected format: an https:// URL, e.g. https://cloud.uipath.com (commercial), https://govcloud.uipath.us (Public Sector), or your Automation Suite host (https://<your-host>).
-` + `You can specify the URL via:
-` + `  • --authority flag
-` + `  • UIPATH_URL environment variable
-` + `  • auth.authority in config file`);
-    this.url = url;
-    this.reason = reason;
-    this.name = "InvalidBaseUrlError";
-  }
-}
-var DEFAULT_SCOPES = ["openid", "profile", "offline_access"];
-var normalizeAndValidateBaseUrl = (rawUrl) => {
-  let baseUrl = rawUrl;
-  if (baseUrl.endsWith("/identity_/")) {
-    baseUrl = baseUrl.slice(0, -11);
-  } else if (baseUrl.endsWith("/identity_")) {
-    baseUrl = baseUrl.slice(0, -10);
-  }
-  while (baseUrl.endsWith("/")) {
-    baseUrl = baseUrl.slice(0, -1);
-  }
-  const resolvedBaseUrl = baseUrl;
-  const [urlError, url] = catchError2(() => new URL(resolvedBaseUrl));
-  if (urlError) {
-    throw new InvalidBaseUrlError(baseUrl, `Malformed URL. ${urlError instanceof Error ? urlError.message : "Unknown error"}`);
-  }
-  if (url.protocol !== "https:") {
-    throw new InvalidBaseUrlError(baseUrl, `Authority must use https:// scheme, got ${url.protocol}//. OIDC token exchange requires TLS end-to-end.`);
-  }
-  return url.pathname.length > 1 ? url.origin : baseUrl;
-};
-var resolveConfigAsync = async ({
-  customAuthority,
-  customClientId,
-  customClientSecret,
-  customScopes
-} = {}) => {
-  const fileAuth = getAuthFileConfig();
-  let baseUrl = customAuthority;
-  if (!baseUrl) {
-    baseUrl = process.env.UIPATH_URL;
-  }
-  if (!baseUrl && fileAuth.authority) {
-    baseUrl = fileAuth.authority;
-  }
-  if (!baseUrl) {
-    baseUrl = DEFAULT_BASE_URL;
-  }
-  baseUrl = normalizeAndValidateBaseUrl(baseUrl);
-  let clientId = customClientId;
-  if (!clientId && fileAuth.clientId) {
-    clientId = fileAuth.clientId;
-  }
-  if (!clientId) {
-    clientId = DEFAULT_CLIENT_ID;
-  }
-  let clientSecret = customClientSecret;
-  if (!clientSecret && fileAuth.clientSecret) {
-    clientSecret = fileAuth.clientSecret;
+  let clientSecret = customClientSecret;
+  if (!clientSecret && fileAuth.clientSecret) {
+    clientSecret = fileAuth.clientSecret;
   }
   const isExternalAppAuth = clientId !== DEFAULT_CLIENT_ID && Boolean(clientSecret);
-  const scopes = customScopes && customScopes.length > 0 ? customScopes : fileAuth.scopes && fileAuth.scopes.length > 0 ? fileAuth.scopes : isExternalAppAuth ? [] : DEFAULT_SCOPES;
+  const scopes = resolveScopes(isExternalAppAuth, customScopes, fileAuth.scopes);
   return {
     clientId,
     clientSecret,
@@ -28778,6 +27488,76 @@ var resolveConfigAsync = async ({
 init_constants();
 // ../auth/src/loginStatus.ts
 init_src();
+
+// ../auth/src/authProfile.ts
+init_src();
+init_constants();
+var DEFAULT_AUTH_PROFILE = "default";
+var PROFILE_DIR = "profiles";
+var PROFILE_NAME_RE = /^[A-Za-z0-9._-]+$/;
+var ACTIVE_AUTH_PROFILE_KEY = Symbol.for("@uipath/auth/ActiveAuthProfile");
+var AUTH_PROFILE_STORAGE_KEY = Symbol.for("@uipath/auth/ProfileStorage");
+var globalSlot2 = globalThis;
+function isAuthProfileStorage(value) {
+  return value !== null && typeof value === "object" && "getStore" in value && "run" in value;
+}
+function createProfileStorage() {
+  const [error, mod2] = catchError2(() => __require("node:async_hooks"));
+  if (error || typeof mod2?.AsyncLocalStorage !== "function") {
+    return {
+      getStore: () => {
+        return;
+      },
+      run: (_store, fn) => fn()
+    };
+  }
+  return new mod2.AsyncLocalStorage;
+}
+function getProfileStorage() {
+  const existing = globalSlot2[AUTH_PROFILE_STORAGE_KEY];
+  if (isAuthProfileStorage(existing)) {
+    return existing;
+  }
+  const storage = createProfileStorage();
+  globalSlot2[AUTH_PROFILE_STORAGE_KEY] = storage;
+  return storage;
+}
+var profileStorage = getProfileStorage();
+
+class AuthProfileValidationError extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "AuthProfileValidationError";
+  }
+}
+function normalizeAuthProfileName(profile) {
+  if (profile === undefined || profile === DEFAULT_AUTH_PROFILE) {
+    return;
+  }
+  if (profile.length === 0 || profile === "." || profile === ".." || !PROFILE_NAME_RE.test(profile)) {
+    throw new AuthProfileValidationError(`Invalid profile name "${profile}". Profile names may contain only letters, numbers, '.', '_', and '-'.`);
+  }
+  return profile;
+}
+function getActiveAuthProfile() {
+  const scopedState = profileStorage.getStore();
+  if (scopedState !== undefined) {
+    return scopedState.profile;
+  }
+  return globalSlot2[ACTIVE_AUTH_PROFILE_KEY]?.profile;
+}
+function resolveAuthProfileFilePath(profile) {
+  const normalized = normalizeAuthProfileName(profile);
+  if (normalized === undefined) {
+    throw new AuthProfileValidationError(`"${DEFAULT_AUTH_PROFILE}" is the built-in profile and does not have a profile file path.`);
+  }
+  const fs7 = getFileSystem();
+  return fs7.path.join(fs7.env.homedir(), UIPATH_HOME_DIR2, PROFILE_DIR, normalized, AUTH_FILENAME);
+}
+function getActiveAuthProfileFilePath() {
+  const profile = getActiveAuthProfile();
+  return profile ? resolveAuthProfileFilePath(profile) : undefined;
+}
 // ../auth/src/utils/jwt.ts
 class InvalidIssuerError extends Error {
   expected;
@@ -28894,35 +27674,86 @@ var readAuthFromEnv = () => {
     if (baseUrlError instanceof InvalidBaseUrlError) {
       throw baseUrlError;
     }
-    throw new EnvAuthConfigError(`Failed to derive server URL from token 'iss' claim: ` + `${baseUrlError instanceof Error ? baseUrlError.message : String(baseUrlError)}`);
-  }
-  const expiration = getTokenExpiration(accessToken);
-  const loginStatus = expiration && expiration <= new Date ? "Expired" : "Logged in";
-  return {
-    loginStatus,
-    accessToken,
-    baseUrl,
-    organizationName,
-    organizationId,
-    tenantName,
-    tenantId,
-    expiration
-  };
-};
+    throw new EnvAuthConfigError(`Failed to derive server URL from token 'iss' claim: ` + `${baseUrlError instanceof Error ? baseUrlError.message : String(baseUrlError)}`);
+  }
+  const expiration = getTokenExpiration(accessToken);
+  const loginStatus = expiration && expiration <= new Date ? "Expired" : "Logged in";
+  return {
+    loginStatus,
+    accessToken,
+    baseUrl,
+    organizationName,
+    organizationId,
+    tenantName,
+    tenantId,
+    expiration,
+    source: "env" /* Env */
+  };
+};
+
+// ../auth/src/refreshCircuitBreaker.ts
+init_src();
+var BREAKER_SUFFIX = ".refresh-state";
+var BACKOFF_BASE_MS = 60000;
+var BACKOFF_CAP_MS = 60 * 60 * 1000;
+var SURFACE_WINDOW_MS = 60 * 60 * 1000;
+async function refreshTokenFingerprint(refreshToken) {
+  const bytes = new TextEncoder().encode(refreshToken);
+  if (globalThis.crypto?.subtle) {
+    const digest = await globalThis.crypto.subtle.digest("SHA-256", bytes);
+    return Array.from(new Uint8Array(digest), (b) => b.toString(16).padStart(2, "0")).join("").slice(0, 16);
+  }
+  const { createHash } = await import("node:crypto");
+  return createHash("sha256").update(refreshToken).digest("hex").slice(0, 16);
+}
+function breakerPathFor(authPath) {
+  return `${authPath}${BREAKER_SUFFIX}`;
+}
+async function loadRefreshBreaker(authPath) {
+  const fs7 = getFileSystem();
+  try {
+    const content = await fs7.readFile(breakerPathFor(authPath), "utf-8");
+    if (!content)
+      return {};
+    const parsed = JSON.parse(content);
+    return parsed && typeof parsed === "object" ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+async function saveRefreshBreaker(authPath, state) {
+  try {
+    const fs7 = getFileSystem();
+    const path3 = breakerPathFor(authPath);
+    await fs7.mkdir(fs7.path.dirname(path3));
+    const tempPath = `${path3}.tmp`;
+    await fs7.writeFile(tempPath, JSON.stringify(state));
+    await fs7.rename(tempPath, path3);
+  } catch {}
+}
+async function clearRefreshBreaker(authPath) {
+  const fs7 = getFileSystem();
+  const path3 = breakerPathFor(authPath);
+  try {
+    if (await fs7.exists(path3)) {
+      await fs7.rm(path3);
+    }
+  } catch {}
+}
+function nextBackoffMs(attempts) {
+  const shift = Math.max(0, attempts - 1);
+  return Math.min(BACKOFF_BASE_MS * 2 ** shift, BACKOFF_CAP_MS);
+}
+function shouldSurface(state, nowMs) {
+  if (state.lastSurfacedAtMs === undefined)
+    return true;
+  return nowMs - state.lastSurfacedAtMs >= SURFACE_WINDOW_MS;
+}
 
 // ../auth/src/robotClientFallback.ts
 init_src();
 var DEFAULT_TIMEOUT_MS = 1000;
 var CLOSE_TIMEOUT_MS = 500;
-var NOTICE_SENTINEL = Symbol.for("@uipath/auth/robotFallbackNoticePrinted");
-var printNoticeOnce = () => {
-  const slot = globalThis;
-  if (slot[NOTICE_SENTINEL])
-    return;
-  slot[NOTICE_SENTINEL] = true;
-  catchError2(() => process.stderr.write(`Using UiPath Robot credentials. Run 'uip login' for a dedicated session.
-`));
-};
 var ROBOT_USER_SERVICES_PIPE = "UiPathUserServices";
 var ROBOT_USER_SERVICES_ALTERNATE_PIPE = `${ROBOT_USER_SERVICES_PIPE}Alternate`;
 var PIPE_NAME_MAX_LENGTH = 103;
@@ -29038,7 +27869,6 @@ var tryRobotClientFallback = async (options = {}) => {
         issuerFromToken = issClaim;
       }
     }
-    printNoticeOnce();
     return {
       accessToken,
       baseUrl: parsedUrl.baseUrl,
@@ -29263,18 +28093,327 @@ var saveEnvFileAsync = async ({
 };
 
 // ../auth/src/loginStatus.ts
-function normalizeTokenRefreshFailure() {
-  return "stored refresh token is invalid or expired";
+var getLoginStatusAsync = async (options = {}) => {
+  return getLoginStatusWithDeps(options);
+};
+var getLoginStatusWithDeps = async (options = {}, deps = {}) => {
+  const {
+    resolveEnvFilePath = resolveEnvFilePathAsync,
+    loadEnvFile = loadEnvFileAsync,
+    saveEnvFile = saveEnvFileAsync,
+    getFs = getFileSystem,
+    refreshToken: refreshTokenFn = refreshAccessToken,
+    resolveConfig = resolveConfigAsync,
+    robotFallback = tryRobotClientFallback,
+    loadBreaker = loadRefreshBreaker,
+    saveBreaker = saveRefreshBreaker,
+    clearBreaker = clearRefreshBreaker
+  } = deps;
+  if (isRobotAuthEnforced()) {
+    return resolveRobotEnforcedStatus(robotFallback);
+  }
+  if (isEnvAuthEnabled()) {
+    return readAuthFromEnv();
+  }
+  const activeProfile = getActiveAuthProfile();
+  const activeProfileFilePath = getActiveAuthProfileFilePath();
+  const usingActiveProfile = activeProfile !== undefined && (options.envFilePath === undefined || options.envFilePath === activeProfileFilePath);
+  const envFilePath = options.envFilePath ?? activeProfileFilePath ?? DEFAULT_ENV_FILENAME;
+  const { ensureTokenValidityMinutes } = options;
+  const { absolutePath } = await resolveEnvFilePath(envFilePath);
+  if (absolutePath === undefined) {
+    if (usingActiveProfile) {
+      return {
+        loginStatus: "Not logged in",
+        hint: `No credentials found for profile "${activeProfile}". Run 'uip login --profile ${activeProfile}' to authenticate this profile.`
+      };
+    }
+    return resolveBorrowedRobotStatus(robotFallback);
+  }
+  const loaded = await loadFileCredentials(loadEnvFile, absolutePath);
+  if ("status" in loaded) {
+    return loaded.status;
+  }
+  const { credentials } = loaded;
+  const globalHint = () => usingActiveProfile ? Promise.resolve(undefined) : getGlobalCredsHint(getFs, loadEnvFile, absolutePath, envFilePath);
+  const expiration = getTokenExpiration(credentials.UIPATH_ACCESS_TOKEN);
+  const outerThreshold = computeExpirationThreshold(ensureTokenValidityMinutes);
+  let tokens = {
+    accessToken: credentials.UIPATH_ACCESS_TOKEN,
+    refreshToken: credentials.UIPATH_REFRESH_TOKEN,
+    expiration,
+    lockReleaseFailed: false
+  };
+  const refreshToken = credentials.UIPATH_REFRESH_TOKEN;
+  if (expiration && expiration <= outerThreshold && refreshToken) {
+    const refreshed = await attemptRefresh({
+      absolutePath,
+      credentials,
+      accessToken: credentials.UIPATH_ACCESS_TOKEN,
+      refreshToken,
+      expiration,
+      ensureTokenValidityMinutes,
+      getFs,
+      loadEnvFile,
+      saveEnvFile,
+      refreshFn: refreshTokenFn,
+      resolveConfig,
+      loadBreaker,
+      saveBreaker,
+      clearBreaker,
+      globalHint
+    });
+    if (refreshed.kind === "terminal") {
+      return refreshed.status;
+    }
+    tokens = refreshed.tokens;
+  }
+  return buildFileStatus(tokens, credentials, globalHint);
+};
+async function resolveRobotEnforcedStatus(robotFallback) {
+  if (isEnvAuthEnabled()) {
+    throw new EnvAuthConfigError(`${ENV_AUTH_ENABLE_VAR}=true and ${ENFORCE_ROBOT_AUTH_VAR}=true ` + `are mutually exclusive. Unset one of them and re-run.`);
+  }
+  const robotCreds = await robotFallback({ force: true });
+  if (!robotCreds) {
+    return {
+      loginStatus: "Not logged in",
+      hint: `${ENFORCE_ROBOT_AUTH_VAR}=true but the UiPath Robot ` + `session is unavailable. Start and sign in to the Assistant, ` + `or unset ${ENFORCE_ROBOT_AUTH_VAR} to fall back to file or ` + `env-var authentication.`
+    };
+  }
+  return buildRobotStatus(robotCreds);
 }
-function normalizeTokenRefreshUnavailableFailure() {
-  return "token refresh failed before authentication completed";
+async function resolveBorrowedRobotStatus(robotFallback) {
+  const robotCreds = await robotFallback();
+  return robotCreds ? buildRobotStatus(robotCreds) : { loginStatus: "Not logged in" };
 }
-function errorMessage(error) {
-  return error instanceof Error ? error.message : String(error);
+async function loadFileCredentials(loadEnvFile, absolutePath) {
+  let credentials;
+  try {
+    credentials = await loadEnvFile({ envPath: absolutePath });
+  } catch (error) {
+    if (isFileNotFoundError(error)) {
+      return { status: { loginStatus: "Not logged in" } };
+    }
+    throw error;
+  }
+  if (!credentials.UIPATH_ACCESS_TOKEN) {
+    return { status: { loginStatus: "Not logged in" } };
+  }
+  return { credentials };
+}
+async function getGlobalCredsHint(getFs, loadEnvFile, absolutePath, envFilePath) {
+  const fs7 = getFs();
+  const globalPath = fs7.path.join(fs7.env.homedir(), envFilePath);
+  if (absolutePath === globalPath)
+    return;
+  if (!await fs7.exists(globalPath))
+    return;
+  try {
+    const globalCreds = await loadEnvFile({ envPath: globalPath });
+    if (!globalCreds.UIPATH_ACCESS_TOKEN)
+      return;
+    const globalExp = getTokenExpiration(globalCreds.UIPATH_ACCESS_TOKEN);
+    if (globalExp && globalExp <= new Date)
+      return;
+    return `Local credentials file at ${absolutePath} has expired credentials. Valid credentials exist in ${globalPath}. Remove the local file or run 'uip login' to re-authenticate.`;
+  } catch {
+    return;
+  }
 }
 function computeExpirationThreshold(ensureTokenValidityMinutes) {
   return new Date(Date.now() + (ensureTokenValidityMinutes ?? 0) * 60 * 1000);
 }
+async function attemptRefresh(ctx) {
+  const shortCircuit = await circuitBreakerShortCircuit(ctx);
+  if (shortCircuit) {
+    return { kind: "terminal", status: shortCircuit };
+  }
+  let release;
+  try {
+    release = await ctx.getFs().acquireLock(ctx.absolutePath);
+  } catch (error) {
+    return {
+      kind: "terminal",
+      status: await lockAcquireFailureStatus(ctx, error)
+    };
+  }
+  let lockedFailure;
+  let lockReleaseFailed = false;
+  let success;
+  try {
+    const outcome = await runRefreshLocked({
+      absolutePath: ctx.absolutePath,
+      refreshToken: ctx.refreshToken,
+      customAuthority: ctx.credentials.UIPATH_URL,
+      ensureTokenValidityMinutes: ctx.ensureTokenValidityMinutes,
+      loadEnvFile: ctx.loadEnvFile,
+      saveEnvFile: ctx.saveEnvFile,
+      refreshFn: ctx.refreshFn,
+      resolveConfig: ctx.resolveConfig,
+      loadBreaker: ctx.loadBreaker,
+      saveBreaker: ctx.saveBreaker,
+      clearBreaker: ctx.clearBreaker
+    });
+    if (outcome.kind === "fail") {
+      lockedFailure = outcome.status;
+    } else {
+      success = outcome;
+    }
+  } finally {
+    try {
+      await release();
+    } catch {
+      lockReleaseFailed = true;
+    }
+  }
+  if (lockedFailure) {
+    const globalHint = await ctx.globalHint();
+    const base = globalHint ? { ...lockedFailure, loginStatus: "Expired", hint: globalHint } : lockedFailure;
+    return {
+      kind: "terminal",
+      status: lockReleaseFailed ? { ...base, lockReleaseFailed: true } : base
+    };
+  }
+  return {
+    kind: "refreshed",
+    tokens: {
+      accessToken: success?.accessToken,
+      refreshToken: success?.refreshToken,
+      expiration: success?.expiration,
+      tokenRefresh: success?.tokenRefresh,
+      persistenceWarning: success?.persistenceWarning,
+      lockReleaseFailed
+    }
+  };
+}
+async function buildFileStatus(tokens, credentials, globalHint) {
+  const result = {
+    loginStatus: tokens.expiration && tokens.expiration <= new Date ? "Expired" : "Logged in",
+    accessToken: tokens.accessToken,
+    refreshToken: tokens.refreshToken,
+    baseUrl: credentials.UIPATH_URL,
+    organizationName: credentials.UIPATH_ORGANIZATION_NAME,
+    organizationId: credentials.UIPATH_ORGANIZATION_ID,
+    tenantName: credentials.UIPATH_TENANT_NAME,
+    tenantId: credentials.UIPATH_TENANT_ID,
+    expiration: tokens.expiration,
+    source: "file" /* File */,
+    ...tokens.persistenceWarning ? { hint: tokens.persistenceWarning, persistenceFailed: true } : {},
+    ...tokens.lockReleaseFailed ? { lockReleaseFailed: true } : {},
+    ...tokens.tokenRefresh ? { tokenRefresh: tokens.tokenRefresh } : {}
+  };
+  if (result.loginStatus === "Expired") {
+    const hint = await globalHint();
+    if (hint) {
+      result.hint = hint;
+    }
+  }
+  return result;
+}
+function buildRobotStatus(robotCreds) {
+  return {
+    loginStatus: "Logged in",
+    accessToken: robotCreds.accessToken,
+    baseUrl: robotCreds.baseUrl,
+    organizationName: robotCreds.organizationName,
+    organizationId: robotCreds.organizationId,
+    tenantName: robotCreds.tenantName,
+    tenantId: robotCreds.tenantId,
+    issuer: robotCreds.issuer,
+    expiration: getTokenExpiration(robotCreds.accessToken),
+    source: "robot" /* Robot */
+  };
+}
+var isFileNotFoundError = (error) => {
+  if (!(error instanceof Object))
+    return false;
+  return error.code === "ENOENT";
+};
+async function circuitBreakerShortCircuit(ctx) {
+  const {
+    absolutePath,
+    refreshToken,
+    accessToken,
+    credentials,
+    expiration,
+    loadBreaker,
+    saveBreaker,
+    clearBreaker
+  } = ctx;
+  const fingerprint = await refreshTokenFingerprint(refreshToken);
+  const breaker = await loadBreaker(absolutePath).catch(() => ({}));
+  if (breaker.deadTokenFp && breaker.deadTokenFp !== fingerprint) {
+    await clearBreaker(absolutePath);
+    breaker.deadTokenFp = undefined;
+  }
+  const nowMs = Date.now();
+  const tokenIsDead = breaker.deadTokenFp === fingerprint;
+  const inBackoff = breaker.backoffUntilMs !== undefined && nowMs < breaker.backoffUntilMs;
+  if (!tokenIsDead && !inBackoff)
+    return;
+  const globalHint = await ctx.globalHint();
+  const suppressed = !shouldSurface(breaker, nowMs);
+  if (!suppressed) {
+    await saveBreaker(absolutePath, {
+      ...breaker,
+      lastSurfacedAtMs: nowMs
+    });
+  }
+  const deadHint = "Run 'uip login' to re-authenticate — the stored refresh token is invalid or expired. In a non-interactive context, authenticate with: uip login --client-id <id> --client-secret <secret> -t <tenant>.";
+  const backoffHint = "Token refresh is temporarily backed off after a recent network error and will retry automatically once the backoff window elapses.";
+  return {
+    loginStatus: globalHint ? "Expired" : "Refresh Failed",
+    ...globalHint ? {
+      accessToken,
+      refreshToken,
+      baseUrl: credentials.UIPATH_URL,
+      organizationName: credentials.UIPATH_ORGANIZATION_NAME,
+      organizationId: credentials.UIPATH_ORGANIZATION_ID,
+      tenantName: credentials.UIPATH_TENANT_NAME,
+      tenantId: credentials.UIPATH_TENANT_ID,
+      expiration,
+      source: "file" /* File */
+    } : {},
+    hint: globalHint ?? (tokenIsDead ? deadHint : backoffHint),
+    refreshCircuitOpen: true,
+    refreshTelemetrySuppressed: suppressed,
+    tokenRefresh: { attempted: false, success: false }
+  };
+}
+async function lockAcquireFailureStatus(ctx, error) {
+  const msg = errorMessage(error);
+  const globalHint = await ctx.globalHint();
+  if (globalHint) {
+    return {
+      loginStatus: "Expired",
+      accessToken: ctx.accessToken,
+      refreshToken: ctx.refreshToken,
+      baseUrl: ctx.credentials.UIPATH_URL,
+      organizationName: ctx.credentials.UIPATH_ORGANIZATION_NAME,
+      organizationId: ctx.credentials.UIPATH_ORGANIZATION_ID,
+      tenantName: ctx.credentials.UIPATH_TENANT_NAME,
+      tenantId: ctx.credentials.UIPATH_TENANT_ID,
+      expiration: ctx.expiration,
+      source: "file" /* File */,
+      hint: globalHint,
+      tokenRefresh: {
+        attempted: false,
+        success: false,
+        errorMessage: `lock acquisition failed: ${msg}`
+      }
+    };
+  }
+  return {
+    loginStatus: "Refresh Failed",
+    hint: "Could not acquire the auth-file lock — too many concurrent `uip` processes, or a permission issue on the auth directory. Retry, or run 'uip login' to re-authenticate.",
+    tokenRefresh: {
+      attempted: false,
+      success: false,
+      errorMessage: `lock acquisition failed: ${msg}`
+    }
+  };
+}
 async function runRefreshLocked(inputs) {
   const {
     absolutePath,
@@ -29284,7 +28423,10 @@ async function runRefreshLocked(inputs) {
     loadEnvFile,
     saveEnvFile,
     refreshFn,
-    resolveConfig
+    resolveConfig,
+    loadBreaker,
+    saveBreaker,
+    clearBreaker
   } = inputs;
   const expirationThreshold = computeExpirationThreshold(ensureTokenValidityMinutes);
   let fresh;
@@ -29307,6 +28449,7 @@ async function runRefreshLocked(inputs) {
   const freshAccess = fresh.UIPATH_ACCESS_TOKEN;
   const freshExp = freshAccess ? getTokenExpiration(freshAccess) : undefined;
   if (freshAccess && freshExp && freshExp > expirationThreshold) {
+    await clearBreaker(absolutePath);
     return {
       kind: "ok",
       accessToken: freshAccess,
@@ -29330,8 +28473,21 @@ async function runRefreshLocked(inputs) {
     refreshedRefresh = refreshed.refreshToken;
   } catch (error) {
     const isOAuthFailure = isTokenRefreshOAuthFailure(error);
-    const hint = isOAuthFailure ? "Run 'uip login' to re-authenticate — the stored refresh token is invalid or expired." : "Token refresh failed. Check your network connection, then retry or run 'uip login' to re-authenticate.";
+    const hint = isOAuthFailure ? "Run 'uip login' to re-authenticate — the stored refresh token is invalid or expired. In a non-interactive context, authenticate with: uip login --client-id <id> --client-secret <secret> -t <tenant>." : "Token refresh failed. Check your network connection, then retry or run 'uip login' to re-authenticate.";
     const message = isOAuthFailure ? normalizeTokenRefreshFailure() : normalizeTokenRefreshUnavailableFailure();
+    const fp = await refreshTokenFingerprint(tokenForIdP);
+    if (isOAuthFailure) {
+      await saveBreaker(absolutePath, { deadTokenFp: fp });
+    } else {
+      const prior = await loadBreaker(absolutePath).catch(() => ({}));
+      const attempts = (prior.attempts ?? 0) + 1;
+      await saveBreaker(absolutePath, {
+        ...prior,
+        deadTokenFp: undefined,
+        attempts,
+        backoffUntilMs: Date.now() + nextBackoffMs(attempts)
+      });
+    }
     return {
       kind: "fail",
       status: {
@@ -29343,261 +28499,65 @@ async function runRefreshLocked(inputs) {
           errorMessage: message
         }
       }
-    };
-  }
-  const refreshedExp = getTokenExpiration(refreshedAccess);
-  if (!refreshedExp || refreshedExp <= new Date) {
-    return {
-      kind: "fail",
-      status: {
-        loginStatus: "Refresh Failed",
-        hint: "The identity server returned an unusable token. Run 'uip login' to re-authenticate.",
-        tokenRefresh: {
-          attempted: true,
-          success: false,
-          errorMessage: "refreshed token has no valid expiration claim"
-        }
-      }
-    };
-  }
-  try {
-    await saveEnvFile({
-      envPath: absolutePath,
-      data: {
-        UIPATH_ACCESS_TOKEN: refreshedAccess,
-        UIPATH_REFRESH_TOKEN: refreshedRefresh
-      },
-      merge: true
-    });
-    return {
-      kind: "ok",
-      accessToken: refreshedAccess,
-      refreshToken: refreshedRefresh,
-      expiration: refreshedExp,
-      tokenRefresh: { attempted: true, success: true }
-    };
-  } catch (error) {
-    const msg = errorMessage(error);
-    return {
-      kind: "ok",
-      accessToken: refreshedAccess,
-      refreshToken: refreshedRefresh,
-      expiration: refreshedExp,
-      persistenceWarning: `Access token refreshed in memory but could not be written to ${absolutePath}: ${msg}. The next CLI invocation will fail until the file can be updated — run 'uip login' to re-authenticate.`,
-      tokenRefresh: {
-        attempted: true,
-        success: true,
-        errorMessage: `persistence failed: ${msg}`
-      }
-    };
-  }
-}
-var getLoginStatusWithDeps = async (options = {}, deps = {}) => {
-  const {
-    resolveEnvFilePath = resolveEnvFilePathAsync,
-    loadEnvFile = loadEnvFileAsync,
-    saveEnvFile = saveEnvFileAsync,
-    getFs = getFileSystem,
-    refreshToken: refreshTokenFn = refreshAccessToken,
-    resolveConfig = resolveConfigAsync,
-    robotFallback = tryRobotClientFallback
-  } = deps;
-  if (isRobotAuthEnforced()) {
-    if (isEnvAuthEnabled()) {
-      throw new EnvAuthConfigError(`${ENV_AUTH_ENABLE_VAR}=true and ${ENFORCE_ROBOT_AUTH_VAR}=true ` + `are mutually exclusive. Unset one of them and re-run.`);
-    }
-    const robotCreds = await robotFallback({ force: true });
-    if (!robotCreds) {
-      return {
-        loginStatus: "Not logged in",
-        hint: `${ENFORCE_ROBOT_AUTH_VAR}=true but the UiPath Robot ` + `session is unavailable. Start and sign in to the Assistant, ` + `or unset ${ENFORCE_ROBOT_AUTH_VAR} to fall back to file or ` + `env-var authentication.`
-      };
-    }
-    const expiration2 = getTokenExpiration(robotCreds.accessToken);
-    return {
-      loginStatus: "Logged in",
-      accessToken: robotCreds.accessToken,
-      baseUrl: robotCreds.baseUrl,
-      organizationName: robotCreds.organizationName,
-      organizationId: robotCreds.organizationId,
-      tenantName: robotCreds.tenantName,
-      tenantId: robotCreds.tenantId,
-      issuer: robotCreds.issuer,
-      expiration: expiration2,
-      source: "robot" /* Robot */
-    };
-  }
-  if (isEnvAuthEnabled()) {
-    return readAuthFromEnv();
-  }
-  const { envFilePath = DEFAULT_ENV_FILENAME, ensureTokenValidityMinutes } = options;
-  const { absolutePath } = await resolveEnvFilePath(envFilePath);
-  if (absolutePath === undefined) {
-    const robotCreds = await robotFallback();
-    if (robotCreds) {
-      const expiration2 = getTokenExpiration(robotCreds.accessToken);
-      const status = {
-        loginStatus: "Logged in",
-        accessToken: robotCreds.accessToken,
-        baseUrl: robotCreds.baseUrl,
-        organizationName: robotCreds.organizationName,
-        organizationId: robotCreds.organizationId,
-        tenantName: robotCreds.tenantName,
-        tenantId: robotCreds.tenantId,
-        issuer: robotCreds.issuer,
-        expiration: expiration2,
-        source: "robot" /* Robot */
-      };
-      return status;
-    }
-    return { loginStatus: "Not logged in" };
-  }
-  let credentials;
-  try {
-    credentials = await loadEnvFile({ envPath: absolutePath });
-  } catch (error) {
-    if (isFileNotFoundError(error)) {
-      return { loginStatus: "Not logged in" };
-    }
-    throw error;
-  }
-  if (!credentials.UIPATH_ACCESS_TOKEN) {
-    return { loginStatus: "Not logged in" };
-  }
-  let accessToken = credentials.UIPATH_ACCESS_TOKEN;
-  let refreshToken = credentials.UIPATH_REFRESH_TOKEN;
-  let expiration = getTokenExpiration(accessToken);
-  let persistenceWarning;
-  let lockReleaseFailed = false;
-  let tokenRefresh;
-  const outerThreshold = computeExpirationThreshold(ensureTokenValidityMinutes);
-  const tryGlobalCredsHint = async () => {
-    const fs7 = getFs();
-    const globalPath = fs7.path.join(fs7.env.homedir(), envFilePath);
-    if (absolutePath === globalPath)
-      return;
-    if (!await fs7.exists(globalPath))
-      return;
-    try {
-      const globalCreds = await loadEnvFile({ envPath: globalPath });
-      if (!globalCreds.UIPATH_ACCESS_TOKEN)
-        return;
-      const globalExp = getTokenExpiration(globalCreds.UIPATH_ACCESS_TOKEN);
-      if (globalExp && globalExp <= new Date)
-        return;
-      return `Local credentials file at ${absolutePath} has expired credentials. Valid credentials exist in ${globalPath}. Remove the local file or run 'uip login' to re-authenticate.`;
-    } catch {
-      return;
-    }
-  };
-  if (expiration && expiration <= outerThreshold && refreshToken) {
-    let release;
-    try {
-      release = await getFs().acquireLock(absolutePath);
-    } catch (error) {
-      const msg = errorMessage(error);
-      const globalHint = await tryGlobalCredsHint();
-      if (globalHint) {
-        return {
-          loginStatus: "Expired",
-          accessToken,
-          refreshToken,
-          baseUrl: credentials.UIPATH_URL,
-          organizationName: credentials.UIPATH_ORGANIZATION_NAME,
-          organizationId: credentials.UIPATH_ORGANIZATION_ID,
-          tenantName: credentials.UIPATH_TENANT_NAME,
-          tenantId: credentials.UIPATH_TENANT_ID,
-          expiration,
-          source: "file" /* File */,
-          hint: globalHint,
-          tokenRefresh: {
-            attempted: false,
-            success: false,
-            errorMessage: `lock acquisition failed: ${msg}`
-          }
-        };
-      }
-      return {
+    };
+  }
+  const refreshedExp = getTokenExpiration(refreshedAccess);
+  if (!refreshedExp || refreshedExp <= new Date) {
+    return {
+      kind: "fail",
+      status: {
         loginStatus: "Refresh Failed",
-        hint: "Could not acquire the auth-file lock — too many concurrent `uip` processes, or a permission issue on the auth directory. Retry, or run 'uip login' to re-authenticate.",
+        hint: "The identity server returned an unusable token. Run 'uip login' to re-authenticate.",
         tokenRefresh: {
-          attempted: false,
+          attempted: true,
           success: false,
-          errorMessage: `lock acquisition failed: ${msg}`
-        }
-      };
-    }
-    let lockedFailure;
-    try {
-      const outcome = await runRefreshLocked({
-        absolutePath,
-        refreshToken,
-        customAuthority: credentials.UIPATH_URL,
-        ensureTokenValidityMinutes,
-        loadEnvFile,
-        saveEnvFile,
-        refreshFn: refreshTokenFn,
-        resolveConfig
-      });
-      if (outcome.kind === "fail") {
-        lockedFailure = outcome.status;
-      } else {
-        accessToken = outcome.accessToken;
-        refreshToken = outcome.refreshToken;
-        expiration = outcome.expiration;
-        tokenRefresh = outcome.tokenRefresh;
-        if (outcome.persistenceWarning) {
-          persistenceWarning = outcome.persistenceWarning;
+          errorMessage: "refreshed token has no valid expiration claim"
         }
       }
-    } finally {
-      try {
-        await release();
-      } catch {
-        lockReleaseFailed = true;
-      }
-    }
-    if (lockedFailure) {
-      const globalHint = await tryGlobalCredsHint();
-      const base = globalHint ? {
-        ...lockedFailure,
-        loginStatus: "Expired",
-        hint: globalHint
-      } : lockedFailure;
-      return lockReleaseFailed ? { ...base, lockReleaseFailed: true } : base;
-    }
+    };
   }
-  const result = {
-    loginStatus: expiration && expiration <= new Date ? "Expired" : "Logged in",
-    accessToken,
-    refreshToken,
-    baseUrl: credentials.UIPATH_URL,
-    organizationName: credentials.UIPATH_ORGANIZATION_NAME,
-    organizationId: credentials.UIPATH_ORGANIZATION_ID,
-    tenantName: credentials.UIPATH_TENANT_NAME,
-    tenantId: credentials.UIPATH_TENANT_ID,
-    expiration,
-    source: "file" /* File */,
-    ...persistenceWarning ? { hint: persistenceWarning, persistenceFailed: true } : {},
-    ...lockReleaseFailed ? { lockReleaseFailed: true } : {},
-    ...tokenRefresh ? { tokenRefresh } : {}
-  };
-  if (result.loginStatus === "Expired") {
-    const globalHint = await tryGlobalCredsHint();
-    if (globalHint) {
-      result.hint = globalHint;
-    }
+  await clearBreaker(absolutePath);
+  try {
+    await saveEnvFile({
+      envPath: absolutePath,
+      data: {
+        UIPATH_ACCESS_TOKEN: refreshedAccess,
+        UIPATH_REFRESH_TOKEN: refreshedRefresh
+      },
+      merge: true
+    });
+    return {
+      kind: "ok",
+      accessToken: refreshedAccess,
+      refreshToken: refreshedRefresh,
+      expiration: refreshedExp,
+      tokenRefresh: { attempted: true, success: true }
+    };
+  } catch (error) {
+    const msg = errorMessage(error);
+    return {
+      kind: "ok",
+      accessToken: refreshedAccess,
+      refreshToken: refreshedRefresh,
+      expiration: refreshedExp,
+      persistenceWarning: `Access token refreshed in memory but could not be written to ${absolutePath}: ${msg}. The next CLI invocation will fail until the file can be updated — run 'uip login' to re-authenticate.`,
+      tokenRefresh: {
+        attempted: true,
+        success: true,
+        errorMessage: `persistence failed: ${msg}`
+      }
+    };
   }
-  return result;
-};
-var isFileNotFoundError = (error) => {
-  if (!(error instanceof Object))
-    return false;
-  return error.code === "ENOENT";
-};
-var getLoginStatusAsync = async (options = {}) => {
-  return getLoginStatusWithDeps(options);
-};
+}
+function normalizeTokenRefreshFailure() {
+  return "stored refresh token is invalid or expired";
+}
+function normalizeTokenRefreshUnavailableFailure() {
+  return "token refresh failed before authentication completed";
+}
+function errorMessage(error) {
+  return error instanceof Error ? error.message : String(error);
+}
 
 // ../auth/src/authContext.ts
 var getAuthEnv = async (options = {}) => {
@@ -29630,6 +28590,14 @@ var getAuthEnv = async (options = {}) => {
 };
 // ../auth/src/interactive.ts
 init_src();
+
+// ../auth/src/selectTenant.ts
+var TENANT_SELECTION_REQUIRED_CODE = "TENANT_SELECTION_REQUIRED";
+var INVALID_TENANT_CODE = "INVALID_TENANT";
+var TENANT_SELECTION_CODES = new Set([
+  TENANT_SELECTION_REQUIRED_CODE,
+  INVALID_TENANT_CODE
+]);
 // ../auth/src/logout.ts
 init_src();
 
@@ -29695,13 +28663,13 @@ var fail = (reason, message, instructions, extras = {}) => ({
 async function runUipathPythonCommand(args, options = {}) {
   const fs7 = getFileSystem();
   const cacheFile = fs7.path.join(fs7.env.homedir(), UIPATH_HOME_DIR, getCacheFileName());
-  const setupHint = options.commandPrefix ? `Run 'uip ${options.commandPrefix} setup' first to configure environment.` : "Run setup first to configure environment.";
+  const setupHint = `Run 'uip ${options.commandPrefix ?? "codedagent"} setup' first to configure the environment. ` + "If you are using a virtual environment, activate it first.";
   const cache = await readCache(cacheFile);
   if (!cache?.uipathExePath) {
     return fail("python_not_configured", "Python not configured.", setupHint);
   }
   if (!await fs7.exists(cache.uipathExePath)) {
-    return fail("uipath_exe_missing", "uipath executable not found.", setupHint);
+    return fail("uipath_exe_missing", "uipath executable not found. Please install it using 'pip install uipath' or 'uv add uipath'.", setupHint);
   }
   const processed = processCommandArgs(args, options.commandRules ?? []);
   if (!processed.allowed) {
@@ -30288,7 +29256,7 @@ Searching for Python installations: ${allowedVersions}`);
 var package_default = {
   name: "@uipath/codedagent-tool",
   license: "MIT",
-  version: "1.196.0",
+  version: "1.197.0-preview.59",
   description: "Build, run, deploy, and manage AI Agents.",
   keywords: [
     "cli-tool",
@@ -30320,7 +29288,7 @@ var package_default = {
     registry: "https://npm.pkg.github.com/@uipath"
   },
   scripts: {
-    build: "bun ../../tools/build-tool.ts && bun build ./src/init.ts --outdir dist --format esm --target node --external applicationinsights && tsc -p tsconfig.build.json --noCheck",
+    build: "bun ../../tools/build-tool.ts && bun build ./src/init.ts --outdir dist --format esm --target node --external applicationinsights --sourcemap=linked && tsc -p tsconfig.build.json --noCheck",
     package: "bun run build && bun pm pack",
     test: "vitest run",
     "test:coverage": "vitest run --coverage",
@@ -30330,14 +29298,624 @@ var package_default = {
   devDependencies: {
     "@types/bun": "^1.3.11",
     "@types/node": "^25.5.2",
+    "@uipath/agent-reviewer-sdk": "workspace:*",
     "@uipath/auth": "workspace:*",
     "@uipath/common": "workspace:*",
+    "@uipath/filesystem": "workspace:*",
     "@uipath/uipath-python-bridge": "workspace:*",
     commander: "^14.0.3",
     typescript: "^6.0.2"
   }
 };
 
+// ../agent-reviewer-sdk/dist/index.js
+var KNOWN_CATEGORIES = [
+  "evals",
+  "schema",
+  "tools",
+  "guardrails",
+  "code",
+  "general"
+];
+function listCategories() {
+  return [...KNOWN_CATEGORIES];
+}
+async function loadFile(fs7, path3) {
+  const raw = await fs7.readFile(path3, "utf-8");
+  if (raw === null) {
+    return { present: false };
+  }
+  return { present: true, raw };
+}
+function parseJsonObject(raw) {
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return null;
+  }
+  if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) {
+    return parsed;
+  }
+  return null;
+}
+function resolveEntryPyPath(langgraphJson) {
+  if (langgraphJson.present) {
+    const graphs = parseJsonObject(langgraphJson.raw)?.graphs;
+    const graphsObj = typeof graphs === "object" && graphs !== null && !Array.isArray(graphs) ? graphs : undefined;
+    for (const spec of Object.values(graphsObj ?? {})) {
+      if (typeof spec === "string") {
+        const filePart = spec.split(":")[0]?.replace(/^\.\//, "").trim();
+        if (filePart?.endsWith(".py")) {
+          return filePart;
+        }
+      }
+    }
+  }
+  return "main.py";
+}
+async function loadCodedProjectContext(projectPath, fs7) {
+  const uipathJsonPath = fs7.path.join(projectPath, "uipath.json");
+  const pyprojectPath = fs7.path.join(projectPath, "pyproject.toml");
+  const entryPointsPath = fs7.path.join(projectPath, "entry-points.json");
+  const mainPyPath = fs7.path.join(projectPath, "main.py");
+  const langgraphJsonPath = fs7.path.join(projectPath, "langgraph.json");
+  const [uipathJson, pyproject, entryPoints, mainPyExists, langgraphJson] = await Promise.all([
+    loadFile(fs7, uipathJsonPath),
+    loadFile(fs7, pyprojectPath),
+    loadFile(fs7, entryPointsPath),
+    fs7.exists(mainPyPath),
+    loadFile(fs7, langgraphJsonPath)
+  ]);
+  const entrySourcePath = resolveEntryPyPath(langgraphJson);
+  const entrySource = await loadFile(fs7, fs7.path.join(projectPath, entrySourcePath));
+  return {
+    projectPath,
+    kind: "coded",
+    uipathJson,
+    pyproject,
+    entryPoints,
+    mainPy: { present: mainPyExists },
+    langgraphJson,
+    entrySource,
+    entrySourcePath
+  };
+}
+var PENALTY_PER_ERROR = 15;
+var PENALTY_PER_WARNING = 4;
+var PENALTY_PER_INFO = 1;
+var BONUS_PER_STRENGTH = 1;
+var BONUS_CAP = 5;
+var PASS_FAIL_THRESHOLD = 50;
+var FAIL_GRADE_CAP = "C+";
+var GRADE_CHART = [
+  [100, "A+"],
+  [90, "A"],
+  [85, "A-"],
+  [80, "B+"],
+  [70, "B"],
+  [65, "B-"],
+  [60, "C+"],
+  [50, "C"],
+  [45, "C-"],
+  [40, "D+"],
+  [30, "D"],
+  [25, "D-"],
+  [0, "F"]
+];
+var GRADE_RANK = new Map(GRADE_CHART.map(([, grade], index) => [grade, index]));
+var ZERO_CATEGORY_COUNTS = () => ({
+  evals: 0,
+  schema: 0,
+  tools: 0,
+  guardrails: 0,
+  code: 0,
+  general: 0
+});
+function lookupGrade(score) {
+  for (const [threshold, grade] of GRADE_CHART) {
+    if (score >= threshold) {
+      return grade;
+    }
+  }
+  return "F";
+}
+function rankOf(grade) {
+  return GRADE_RANK.get(grade) ?? GRADE_CHART.length - 1;
+}
+function clamp(value, lo, hi) {
+  return Math.max(lo, Math.min(hi, value));
+}
+function assertExhaustive(value) {
+  throw new Error(`Unhandled severity: ${String(value)}`);
+}
+function buildStats(issues) {
+  const byCategory = ZERO_CATEGORY_COUNTS();
+  let errors = 0;
+  let warnings = 0;
+  let infos = 0;
+  for (const issue of issues) {
+    byCategory[issue.category] += 1;
+    const severity = issue.severity;
+    switch (severity) {
+      case "error":
+        errors += 1;
+        break;
+      case "warning":
+        warnings += 1;
+        break;
+      case "info":
+        infos += 1;
+        break;
+      default:
+        assertExhaustive(severity);
+    }
+  }
+  return { errors, warnings, infos, byCategory };
+}
+function computeReviewResult(issues, strengths) {
+  const stats = buildStats(issues);
+  const penalty = PENALTY_PER_ERROR * stats.errors + PENALTY_PER_WARNING * stats.warnings + PENALTY_PER_INFO * stats.infos;
+  const bonus = stats.errors === 0 ? Math.min(BONUS_CAP, BONUS_PER_STRENGTH * strengths.length) : 0;
+  const score = clamp(100 - penalty + bonus, 0, 100);
+  const verdict = stats.errors > 0 || score < PASS_FAIL_THRESHOLD ? "FAIL" : "PASS";
+  let grade = lookupGrade(score);
+  if (verdict === "FAIL" && rankOf(grade) < rankOf(FAIL_GRADE_CAP)) {
+    grade = FAIL_GRADE_CAP;
+  }
+  return {
+    verdict,
+    score,
+    grade,
+    issues,
+    strengths,
+    stats
+  };
+}
+async function runRules(rules, context, fs7, options) {
+  let selected = rules;
+  if (options.categories !== undefined) {
+    const known = new Set(KNOWN_CATEGORIES);
+    const unknown = options.categories.filter((c) => !known.has(c));
+    if (unknown.length > 0) {
+      return { ok: false, error: "UNKNOWN_CATEGORIES", unknown };
+    }
+    const filter = new Set(options.categories);
+    selected = rules.filter((rule) => filter.has(rule.category));
+  }
+  const issues = [];
+  for (const rule of selected) {
+    let ruleIssues;
+    try {
+      ruleIssues = await rule.run(context, fs7);
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      issues.push({
+        ruleId: "RULE_RUNTIME_ERROR",
+        category: "general",
+        severity: "error",
+        description: `Rule '${rule.id}' threw an unhandled error: ${message}`,
+        element: rule.id
+      });
+      continue;
+    }
+    for (const ruleIssue of ruleIssues) {
+      issues.push({
+        ruleId: rule.id,
+        category: rule.category,
+        severity: rule.severity,
+        ...ruleIssue
+      });
+    }
+  }
+  return { ok: true, result: computeReviewResult(issues, []) };
+}
+var SHARED_RULES = [];
+var codedPyprojectMissing = {
+  id: "PYPROJECT_TOML_MISSING",
+  category: "code",
+  severity: "error",
+  run: async (ctx) => {
+    if (ctx.pyproject.present) {
+      return [];
+    }
+    return [
+      {
+        description: "Coded agent project is missing `pyproject.toml`.",
+        file: "pyproject.toml",
+        suggestedFix: "Add a `pyproject.toml` declaring the project's Python dependencies and metadata."
+      }
+    ];
+  }
+};
+var SCOPE_MAP = {
+  AGENT: "Agent",
+  LLM: "Llm",
+  TOOL: "Tool"
+};
+function balancedArgs(source, openParen) {
+  let depth = 0;
+  let quote = null;
+  for (let i = openParen;i < source.length; i++) {
+    const ch = source[i];
+    if (quote !== null) {
+      if (ch === quote) {
+        quote = null;
+      }
+      continue;
+    }
+    if (ch === '"' || ch === "'") {
+      quote = ch;
+      continue;
+    }
+    if (ch === "(") {
+      depth++;
+    } else if (ch === ")") {
+      depth--;
+      if (depth === 0) {
+        return source.slice(openParen + 1, i);
+      }
+    }
+  }
+  return "";
+}
+function nameArg(args) {
+  const m = /\bname\s*=\s*["']([^"']*)["']/.exec(args);
+  return m?.[1] && m[1].length > 0 ? m[1] : "<unnamed>";
+}
+function actionClassArg(args) {
+  return /\baction\s*=\s*([A-Za-z_]\w*)\s*\(/.exec(args)?.[1];
+}
+function scopeArgs(args) {
+  const m = /\bscopes\s*=\s*\[([^\]]*)\]/.exec(args);
+  if (!m?.[1]) {
+    return [];
+  }
+  const out = [];
+  for (const sm of m[1].matchAll(/GuardrailScope\.([A-Z_]+)/g)) {
+    const mapped = SCOPE_MAP[sm[1] ?? ""];
+    if (mapped !== undefined && !out.includes(mapped)) {
+      out.push(mapped);
+    }
+  }
+  return out;
+}
+function findCalls(source, classRe) {
+  const out = [];
+  for (const m of source.matchAll(classRe)) {
+    const className = m[1] ?? "";
+    const openParen = (m.index ?? 0) + m[0].length - 1;
+    out.push({ className, args: balancedArgs(source, openParen) });
+  }
+  return out;
+}
+function resolveValidatorClass(validatorExpr, source) {
+  const inline = /^\s*([A-Z]\w*)\s*\(/.exec(validatorExpr);
+  if (inline?.[1]) {
+    return inline[1];
+  }
+  const ident = /^\s*([A-Za-z_]\w*)\s*$/.exec(validatorExpr)?.[1];
+  if (ident !== undefined) {
+    const assign = new RegExp(`\\b${ident}\\s*=\\s*([A-Z]\\w*)\\s*\\(`).exec(source);
+    return assign?.[1];
+  }
+  return;
+}
+function collectLocalClasses(source) {
+  const out = new Map;
+  for (const m of source.matchAll(/^\s*class\s+([A-Za-z_]\w*)\s*(?:\(([^)]*)\))?\s*:/gm)) {
+    const name = m[1];
+    if (name === undefined) {
+      continue;
+    }
+    const bases = (m[2] ?? "").split(",").filter((b) => !b.includes("=") && !b.includes("*")).map((b) => b.trim().replace(/\[.*$/, "").split(".").pop() ?? "").filter((b) => b.length > 0);
+    out.set(name, bases);
+  }
+  return out;
+}
+function extractCodedGuardrails(entrySource, pyprojectRaw) {
+  const source = entrySource ?? "";
+  const guardrails = [];
+  for (const { className, args } of findCalls(source, /\b(UiPath[A-Za-z]*Middleware)\s*\(/g)) {
+    guardrails.push({
+      label: nameArg(args),
+      style: "middleware",
+      className,
+      actionClass: actionClassArg(args),
+      scopes: scopeArgs(args),
+      hasTools: /\btools\s*=\s*\[/.test(args)
+    });
+  }
+  for (const m of source.matchAll(/@guardrail\s*\(/g)) {
+    const args = balancedArgs(source, (m.index ?? 0) + m[0].length - 1);
+    const validatorExpr = /\bvalidator\s*=\s*([\s\S]*?)(?:,\s*(?:action|stage|name)\s*=|$)/.exec(args)?.[1];
+    const className = validatorExpr !== undefined ? resolveValidatorClass(validatorExpr, source) ?? "<unknown>" : "<unknown>";
+    guardrails.push({
+      label: nameArg(args),
+      style: "decorator",
+      className,
+      actionClass: actionClassArg(args),
+      scopes: [],
+      hasTools: /\btools\s*=\s*\[/.test(args)
+    });
+  }
+  const isLangChain = /\bfrom\s+langchain[\w.]*\s+import\b|\bfrom\s+langgraph[\w.]*\s+import\b|\bimport\s+langgraph\b/.test(source) || /uipath[-_]langchain/.test(pyprojectRaw ?? "");
+  return {
+    guardrails,
+    isLangChain,
+    importsGuardrailFromPlatform: /(?:from|import)\s+uipath\.platform\.guardrails\b/.test(source),
+    importsGuardrailFromLangchain: /(?:from|import)\s+uipath_langchain\.guardrails\b/.test(source),
+    localClasses: collectLocalClasses(source)
+  };
+}
+var extractionCache = new WeakMap;
+function codedGuardrailExtraction(ctx) {
+  const cached = extractionCache.get(ctx);
+  if (cached !== undefined) {
+    return cached;
+  }
+  const extraction = extractCodedGuardrails(ctx.entrySource.present ? ctx.entrySource.raw : undefined, ctx.pyproject.present ? ctx.pyproject.raw : undefined);
+  extractionCache.set(ctx, extraction);
+  return extraction;
+}
+function subclassesAny(className, targets, localClasses, seen = new Set) {
+  if (seen.has(className)) {
+    return false;
+  }
+  seen.add(className);
+  const bases = localClasses.get(className);
+  if (bases === undefined) {
+    return false;
+  }
+  return bases.some((b) => targets.includes(b) || subclassesAny(b, targets, localClasses, seen));
+}
+var VALIDATOR_BASES = [
+  "GuardrailValidatorBase",
+  "BuiltInGuardrailValidator",
+  "CustomGuardrailValidator"
+];
+var codedGuardrailInvalidContract = {
+  id: "CODED_GUARDRAIL_INVALID_CONTRACT",
+  category: "guardrails",
+  severity: "error",
+  run: async (ctx) => {
+    const { guardrails, localClasses } = codedGuardrailExtraction(ctx);
+    return guardrails.flatMap((g) => {
+      const issues = [];
+      if (g.actionClass !== undefined && localClasses.has(g.actionClass) && !subclassesAny(g.actionClass, ["GuardrailAction"], localClasses)) {
+        issues.push({
+          description: `Guardrail \`${g.label}\` uses action class \`${g.actionClass}\`, which does not subclass \`GuardrailAction\` — a custom action must extend it and implement \`handle_validation_result\`, or it fails at runtime.`,
+          element: g.label,
+          file: ctx.entrySourcePath,
+          suggestedFix: "Make the action class subclass `GuardrailAction` from the guardrails SDK and implement `handle_validation_result`."
+        });
+      }
+      if (g.style === "decorator" && localClasses.has(g.className) && !subclassesAny(g.className, VALIDATOR_BASES, localClasses)) {
+        issues.push({
+          description: `Guardrail \`${g.label}\` uses validator class \`${g.className}\`, which does not subclass a guardrail validator base — use \`CustomValidator(...)\` or subclass \`GuardrailValidatorBase\` / \`CustomGuardrailValidator\`, or it fails at runtime.`,
+          element: g.label,
+          file: ctx.entrySourcePath,
+          suggestedFix: "Use `CustomValidator(...)` for an in-process rule, or subclass `BuiltInGuardrailValidator` / `CustomGuardrailValidator`."
+        });
+      }
+      return issues;
+    });
+  }
+};
+var codedGuardrailToolScopeNoTools = {
+  id: "CODED_GUARDRAIL_TOOL_SCOPE_NO_TOOLS",
+  category: "guardrails",
+  severity: "warning",
+  run: async (ctx) => {
+    return codedGuardrailExtraction(ctx).guardrails.flatMap((g) => {
+      if (g.style !== "middleware" || !g.scopes.includes("Tool") || g.hasTools) {
+        return [];
+      }
+      return [
+        {
+          description: `Tool-scoped guardrail \`${g.label}\` passes no \`tools=[...]\`, so it has no tool to attach to and will not fire.`,
+          element: g.label,
+          file: ctx.entrySourcePath,
+          suggestedFix: "Pass the `@tool` objects this guardrail should guard via `tools=[my_tool, …]`."
+        }
+      ];
+    });
+  }
+};
+var codedGuardrailWrongImport = {
+  id: "CODED_GUARDRAIL_WRONG_IMPORT",
+  category: "guardrails",
+  severity: "error",
+  run: async (ctx) => {
+    const extraction = codedGuardrailExtraction(ctx);
+    if (!extraction.isLangChain || !extraction.importsGuardrailFromPlatform || extraction.importsGuardrailFromLangchain) {
+      return [];
+    }
+    return [
+      {
+        description: "This LangChain agent imports guardrail symbols from `uipath.platform.guardrails`. " + "The LangChain adapter is only registered by importing from `uipath_langchain.guardrails`, " + "so as written the guardrails never wrap the LLM/tool/agent and silently do nothing at runtime.",
+        file: ctx.entrySourcePath,
+        evidences: ["from uipath.platform.guardrails import …"],
+        suggestedFix: "Import guardrail symbols from `uipath_langchain.guardrails` (not `uipath.platform.guardrails`) " + "so the LangChain adapter wraps the decorated/middleware objects."
+      }
+    ];
+  }
+};
+var CODED_RULES = [
+  codedPyprojectMissing,
+  codedGuardrailWrongImport,
+  codedGuardrailToolScopeNoTools,
+  codedGuardrailInvalidContract
+];
+async function reviewCodedAgent(projectPath, options, fs7) {
+  const context = await loadCodedProjectContext(projectPath, fs7);
+  return runRules([...SHARED_RULES, ...CODED_RULES], context, fs7, options);
+}
+var CLASSIFIER_FIELD_NAMES = new Set([
+  "class",
+  "classification",
+  "label",
+  "category",
+  "intent"
+]);
+var TOOL_LIKE_RESOURCE_TYPES = new Set([
+  "tool",
+  "escalation",
+  "context",
+  "mcp"
+]);
+var CUSTOM_RULE_TYPES = new Set([
+  "word",
+  "number",
+  "boolean",
+  "always"
+]);
+var SELECTOR_TYPES = new Set(["all", "specific"]);
+var WORD_OPERATORS = new Set([
+  "contains",
+  "equals",
+  "startsWith",
+  "endsWith",
+  "matchesRegex",
+  "doesNotContain",
+  "doesNotEqual",
+  "doesNotStartWith",
+  "doesNotEndWith",
+  "isEmpty",
+  "isNotEmpty"
+]);
+var WORD_VALUELESS_OPERATORS = new Set([
+  "isEmpty",
+  "isNotEmpty"
+]);
+var NUMBER_OPERATORS = new Set([
+  "equals",
+  "doesNotEqual",
+  "greaterThan",
+  "greaterThanOrEqual",
+  "lessThan",
+  "lessThanOrEqual"
+]);
+var BOOLEAN_OPERATORS = new Set(["equals"]);
+
+// src/commands/review.ts
+init_src();
+var CODES = {
+  success: "CodedAgentReview",
+  invalidChecks: "CodedAgentReviewInvalidChecks",
+  failed: "CodedAgentReviewFailed"
+};
+var ZERO_BY_CATEGORY = {
+  evals: 0,
+  schema: 0,
+  tools: 0,
+  guardrails: 0,
+  code: 0,
+  general: 0
+};
+var REVIEW_EXAMPLES = [
+  {
+    Description: "Review a project at a specific path",
+    Command: "uip codedagent review ./my-coded-agent",
+    Output: {
+      Code: CODES.success,
+      Data: {
+        ProjectDir: "./my-coded-agent",
+        Verdict: "PASS",
+        Score: 100,
+        Grade: "A+",
+        Issues: [],
+        Strengths: [],
+        Stats: {
+          errors: 0,
+          warnings: 0,
+          infos: 0,
+          byCategory: { ...ZERO_BY_CATEGORY }
+        }
+      }
+    }
+  },
+  {
+    Description: "Run only the rules in specific categories (comma-separated)",
+    Command: "uip codedagent review --checks code",
+    Output: {
+      Code: CODES.success,
+      Data: {
+        ProjectDir: ".",
+        Verdict: "PASS",
+        Score: 100,
+        Grade: "A+",
+        Issues: [],
+        Strengths: [],
+        Stats: {
+          errors: 0,
+          warnings: 0,
+          infos: 0,
+          byCategory: { ...ZERO_BY_CATEGORY }
+        }
+      }
+    }
+  }
+];
+var registerReviewCommand = (program2) => {
+  program2.command("review").description("Review a coded agent project against the deterministic rule set. " + "Returns a verdict (PASS/FAIL), score (0-100), grade (A+...F), and a list of issues.").argument("[path]", "Agent project directory", ".").option("--checks <categories>", `Comma-separated rule categories to run (default: all). Known categories: ${listCategories().join(", ")}.`).examples(REVIEW_EXAMPLES).trackedAction(processContext, async (targetPath, options) => {
+    const fs7 = getFileSystem();
+    const projectPath = targetPath;
+    let categories;
+    if (options.checks !== undefined) {
+      const parts = options.checks.split(",").map((s) => s.trim()).filter((s) => s.length > 0);
+      if (parts.length === 0) {
+        const knownCategories = listCategories().join(", ");
+        OutputFormatter.error({
+          Result: RESULTS.Failure,
+          Code: CODES.invalidChecks,
+          Message: "`--checks` requires at least one category.",
+          Instructions: `Known categories: ${knownCategories}. Omit --checks to run all rules.`
+        });
+        processContext.exit(1);
+        return;
+      }
+      categories = parts;
+    }
+    const [err, outcome] = await catchError(reviewCodedAgent(projectPath, { categories }, fs7));
+    if (err) {
+      OutputFormatter.error({
+        Result: RESULTS.Failure,
+        Code: CODES.failed,
+        Message: `Review failed: ${extractErrorMessageSync(err)}`,
+        Instructions: "Verify the project path exists and is a readable agent project. " + "Run `uip codedagent review --help` for usage."
+      });
+      processContext.exit(1);
+      return;
+    }
+    if (!outcome.ok) {
+      const knownCategories = listCategories().join(", ");
+      OutputFormatter.error({
+        Result: RESULTS.Failure,
+        Code: CODES.invalidChecks,
+        Message: `Unknown category value(s): ${outcome.unknown.join(", ")}.`,
+        Instructions: `Known categories: ${knownCategories}.`
+      });
+      processContext.exit(1);
+      return;
+    }
+    const { result } = outcome;
+    OutputFormatter.success({
+      Result: RESULTS.Success,
+      Code: CODES.success,
+      Data: {
+        ProjectDir: projectPath,
+        Verdict: result.verdict,
+        Score: result.score,
+        Grade: result.grade,
+        Issues: result.issues,
+        Strengths: result.strengths,
+        Stats: result.stats
+      }
+    });
+  });
+};
+
 // src/config.ts
 var PERSONAL_WORKSPACE_SCOPES = [
   "OrchestratorApiUserAccess",
@@ -30467,6 +30045,7 @@ var registerWhitelistedCommand = (program2, name, description) => {
 };
 var registerCommands = async (program2) => {
   registerSetupCommand(program2);
+  registerReviewCommand(program2);
   for (const { name, description } of WHITELISTED_COMMANDS) {
     registerWhitelistedCommand(program2, name, description);
   }
@@ -30476,3 +30055,5 @@ export {
   registerCommands,
   metadata
 };
+
+//# debugId=8331E76052CCF4CF64756E2164756E21