@uipath/codedapp-tool 1.200.0-preview.109 → 1.201.0-preview.115

package/dist/tool-4pvh3k50.js

@@ -0,0 +1,265 @@
+import {
+  __require
+} from "./tool-wckvcay0.js";
+
+// ../filesystem/src/node.ts
+import { randomUUID } from "node:crypto";
+import { existsSync } from "node:fs";
+import * as fs from "node:fs/promises";
+import * as os from "node:os";
+import * as path from "node:path";
+var LOCK_HEARTBEAT_MS = 5000;
+var LOCK_STALE_MS = 15000;
+var LOCK_MAX_WAIT_MS = 20000;
+var LOCK_MAX_HOLD_MS = 60000;
+var LOCK_RETRY_MIN_MS = 100;
+var LOCK_RETRY_JITTER_MS = 200;
+
+class NodeFileSystem {
+  path = {
+    join: path.join,
+    resolve: path.resolve,
+    relative: path.relative,
+    dirname: path.dirname,
+    isAbsolute: path.isAbsolute,
+    basename: path.basename
+  };
+  env = {
+    cwd: process.cwd,
+    homedir: os.homedir,
+    tmpdir: os.tmpdir,
+    getenv: (key) => process.env[key]
+  };
+  utils = {
+    open: async (url) => {
+      const { default: open } = await import("./index-hsadteg4.js");
+      await open(url);
+    }
+  };
+  async readFile(path2, options) {
+    try {
+      if (options) {
+        return await fs.readFile(path2, "utf-8");
+      }
+      return await fs.readFile(path2);
+    } catch (error) {
+      if (this.isEnoent(error))
+        return null;
+      throw error;
+    }
+  }
+  async writeFile(filePath, data) {
+    const dir = path.dirname(filePath);
+    if (dir) {
+      await fs.mkdir(dir, { recursive: true });
+    }
+    await fs.writeFile(filePath, data);
+  }
+  async appendFile(filePath, data) {
+    const dir = path.dirname(filePath);
+    if (dir) {
+      await fs.mkdir(dir, { recursive: true });
+    }
+    await fs.appendFile(filePath, data);
+  }
+  async readdir(dirPath) {
+    try {
+      return await fs.readdir(dirPath);
+    } catch (error) {
+      if (this.isEnoent(error))
+        return [];
+      throw error;
+    }
+  }
+  async stat(filePath) {
+    try {
+      const stats = await fs.stat(filePath);
+      return {
+        isFile: () => stats.isFile(),
+        isDirectory: () => stats.isDirectory(),
+        size: stats.size,
+        mtimeMs: stats.mtimeMs
+      };
+    } catch (error) {
+      if (this.isEnoent(error))
+        return null;
+      throw error;
+    }
+  }
+  async exists(filePath) {
+    return existsSync(filePath);
+  }
+  async mkdir(dirPath) {
+    await fs.mkdir(dirPath, { recursive: true });
+  }
+  async acquireLock(lockPath) {
+    const canonicalPath = await this.canonicalizeLockTarget(lockPath);
+    const lockFile = `${canonicalPath}.lock`;
+    const ownerId = randomUUID();
+    const start = Date.now();
+    while (true) {
+      try {
+        await fs.writeFile(lockFile, ownerId, { flag: "wx" });
+        return this.createLockRelease(lockFile, ownerId);
+      } catch (error) {
+        if (!this.hasErrnoCode(error, "EEXIST")) {
+          throw error;
+        }
+        const stats = await fs.stat(lockFile).catch(() => null);
+        if (stats && Date.now() - stats.mtimeMs > LOCK_STALE_MS) {
+          const reclaimed = await fs.rm(lockFile, { force: true }).then(() => true).catch(() => false);
+          if (reclaimed)
+            continue;
+        }
+        if (Date.now() - start > LOCK_MAX_WAIT_MS) {
+          throw new Error(`ELOCKED: timed out waiting for lock on ${canonicalPath}`);
+        }
+        await new Promise((resolve2) => setTimeout(resolve2, LOCK_RETRY_MIN_MS + Math.random() * LOCK_RETRY_JITTER_MS));
+      }
+    }
+  }
+  async canonicalizeLockTarget(lockPath) {
+    const absolute = path.resolve(lockPath);
+    const fullReal = await fs.realpath(absolute).catch(() => null);
+    if (fullReal)
+      return fullReal;
+    const parent = path.dirname(absolute);
+    const base = path.basename(absolute);
+    const canonicalParent = await fs.realpath(parent).catch(() => parent);
+    return path.join(canonicalParent, base);
+  }
+  createLockRelease(lockFile, ownerId) {
+    const heartbeatStart = Date.now();
+    let heartbeatTimer;
+    let stopped = false;
+    const stopHeartbeat = () => {
+      stopped = true;
+      if (heartbeatTimer)
+        clearTimeout(heartbeatTimer);
+    };
+    const scheduleNextHeartbeat = () => {
+      if (stopped)
+        return;
+      if (Date.now() - heartbeatStart >= LOCK_MAX_HOLD_MS) {
+        stopped = true;
+        return;
+      }
+      heartbeatTimer = setTimeout(() => {
+        runHeartbeat();
+      }, LOCK_HEARTBEAT_MS);
+      heartbeatTimer.unref?.();
+    };
+    const runHeartbeat = async () => {
+      if (stopped)
+        return;
+      const current = await fs.readFile(lockFile, "utf-8").catch(() => null);
+      if (stopped)
+        return;
+      if (current !== ownerId) {
+        stopped = true;
+        return;
+      }
+      const now = Date.now() / 1000;
+      await fs.utimes(lockFile, now, now).catch(() => {});
+      scheduleNextHeartbeat();
+    };
+    scheduleNextHeartbeat();
+    let released = false;
+    return async () => {
+      if (released)
+        return;
+      released = true;
+      stopHeartbeat();
+      const current = await fs.readFile(lockFile, "utf-8").catch(() => null);
+      if (current === ownerId) {
+        await fs.rm(lockFile, { force: true });
+      }
+    };
+  }
+  async rm(filePath) {
+    await fs.rm(filePath, { recursive: true, force: true });
+  }
+  async rename(oldPath, newPath) {
+    await fs.rename(oldPath, newPath);
+  }
+  async realpath(filePath) {
+    try {
+      return await fs.realpath(filePath);
+    } catch (error) {
+      if (this.isEnoent(error))
+        return filePath;
+      throw error;
+    }
+  }
+  async getTempDir() {
+    return await fs.mkdtemp(path.join(os.tmpdir(), "uipath-fs-"));
+  }
+  async copyDirectory(sourcePath, destPath) {
+    const sourceStats = await this.stat(sourcePath);
+    if (!sourceStats) {
+      throw new Error(`Source directory does not exist: ${sourcePath}`);
+    }
+    if (!sourceStats.isDirectory()) {
+      throw new Error(`Source path is not a directory: ${sourcePath}`);
+    }
+    await this.mkdir(destPath);
+    const entries = await this.readdir(sourcePath);
+    for (const entry of entries) {
+      const srcEntry = path.join(sourcePath, entry);
+      const destEntry = path.join(destPath, entry);
+      const entryStats = await this.stat(srcEntry);
+      if (!entryStats)
+        continue;
+      if (entryStats.isDirectory()) {
+        await this.copyDirectory(srcEntry, destEntry);
+      } else if (entryStats.isFile()) {
+        const content = await this.readFile(srcEntry);
+        if (content !== null) {
+          await this.writeFile(destEntry, content);
+        }
+      }
+    }
+  }
+  isEnoent(error) {
+    return this.hasErrnoCode(error, "ENOENT");
+  }
+  hasErrnoCode(error, code) {
+    return typeof error === "object" && error !== null && "code" in error && error.code === code;
+  }
+}
+
+// ../filesystem/src/index.ts
+var fsInstance = new NodeFileSystem;
+var getFileSystem = () => fsInstance;
+
+// ../auth/src/catch-error.ts
+function isPromiseLike(value) {
+  return value !== null && typeof value === "object" && typeof value.then === "function";
+}
+function catchError(fnOrPromise) {
+  if (isPromiseLike(fnOrPromise)) {
+    return settlePromiseLike(fnOrPromise);
+  }
+  try {
+    const result = fnOrPromise();
+    if (isPromiseLike(result)) {
+      return settlePromiseLike(result);
+    }
+    return [undefined, result];
+  } catch (error) {
+    return [
+      error instanceof Error ? error : new Error(String(error)),
+      undefined
+    ];
+  }
+}
+function settlePromiseLike(thenable) {
+  return Promise.resolve(thenable).then((data) => [undefined, data]).catch((error) => [
+    error instanceof Error ? error : new Error(String(error)),
+    undefined
+  ]);
+}
+
+export { getFileSystem, catchError };
+
+//# debugId=7C969342331D7A5864756E2164756E21

package/dist/{tool-k7c9wf29.js → tool-6d49s6x4.js}

@@ -5,13 +5,13 @@ import {
 import {
   catchError,
   getFileSystem
-} from "./tool-7ktmqc73.js";
+} from "./tool-4pvh3k50.js";
 import {
   AUTH_FILENAME,
   DEFAULT_BASE_URL,
   DEFAULT_REDIRECT_URI,
   UIPATH_HOME_DIR
-} from "./tool-1snc64g4.js";
+} from "./tool-q42rrs00.js";
 import {
   __require
 } from "./tool-wckvcay0.js";
@@ -911,6 +911,67 @@ var getTokenExpiration = (accessToken) => {
   }
 };
 
+// ../auth/src/sessionIdentity.ts
+var parseAuthFlow = (value) => value === "authorization_code" || value === "client_credentials" || value === "federated_credentials" ? value : undefined;
+var decodeClaims = (accessToken) => {
+  const [error, claims] = catchError(() => parseJWT(accessToken));
+  return error ? undefined : claims;
+};
+var asString = (value) => typeof value === "string" && value.length > 0 ? value : undefined;
+var resolveIdentityType = (claims, authFlow, email) => {
+  const subType = asString(claims?.sub_type);
+  if (subType) {
+    return subType.startsWith("service") ? "Application" : "User";
+  }
+  if (authFlow) {
+    return authFlow === "authorization_code" ? "User" : "Application";
+  }
+  if (email)
+    return "User";
+  if (asString(claims?.client_id) && !asString(claims?.sub)) {
+    return "Application";
+  }
+  return;
+};
+var looksLikeEmail = (value) => value?.includes("@") ?? false;
+var pickEmail = (claims) => {
+  for (const candidate of [claims?.email, claims?.preferred_username]) {
+    const value = asString(candidate);
+    if (looksLikeEmail(value))
+      return value;
+  }
+  return;
+};
+var pickName = (claims) => {
+  const username = asString(claims?.preferred_username);
+  return asString(claims?.name) ?? (looksLikeEmail(username) ? undefined : username);
+};
+var resolveSessionIdentity = (accessToken, authFlow) => {
+  const claims = accessToken ? decodeClaims(accessToken) : undefined;
+  const email = pickEmail(claims);
+  const type = resolveIdentityType(claims, authFlow, email);
+  if (!type)
+    return;
+  const identity = { type };
+  if (authFlow)
+    identity.authFlow = authFlow;
+  if (type === "User") {
+    const userId = asString(claims?.sub);
+    if (userId)
+      identity.userId = userId;
+    if (email)
+      identity.userEmail = email;
+    const name = pickName(claims);
+    if (name)
+      identity.userName = name;
+    return identity;
+  }
+  const clientId = asString(claims?.client_id);
+  if (clientId)
+    identity.clientId = clientId;
+  return identity;
+};
+
 // ../auth/src/envAuth.ts
 var ENV_AUTH_ENABLE_VAR = "UIPATH_CLI_ENABLE_ENV_AUTH";
 var ENFORCE_ROBOT_AUTH_VAR = "UIPATH_CLI_ENFORCE_ROBOT_AUTH";
@@ -960,6 +1021,7 @@ var readAuthFromEnv = () => {
   }
   const expiration = getTokenExpiration(accessToken);
   const loginStatus = expiration && expiration <= new Date ? "Expired" : "Logged in";
+  const identity = resolveSessionIdentity(accessToken);
   return {
     loginStatus,
     accessToken,
@@ -969,7 +1031,8 @@ var readAuthFromEnv = () => {
     tenantName,
     tenantId,
     expiration,
-    source: "env" /* Env */
+    source: "env-vars" /* EnvironmentVariables */,
+    ...identity ? { identity } : {}
   };
 };
 
@@ -1223,6 +1286,9 @@ var refreshAccessToken = async ({
   return { accessToken: newAccessToken, refreshToken: newRefreshToken };
 };
 
+// ../auth/src/types.ts
+var AUTH_FLOW_ENV_VAR = "UIPATH_AUTH_FLOW";
+
 // ../auth/src/utils/envFile.ts
 var DEFAULT_AUTH_FILENAME = AUTH_FILENAME;
 var DEFAULT_ENV_FILENAME = `${UIPATH_HOME_DIR}/${AUTH_FILENAME}`;
@@ -1384,12 +1450,12 @@ var saveEnvFileAsync = async ({
 };
 
 // ../auth/src/loginStatus.ts
-var LoginStatusSource;
-((LoginStatusSource2) => {
-  LoginStatusSource2["File"] = "file";
-  LoginStatusSource2["Robot"] = "robot";
-  LoginStatusSource2["Env"] = "env";
-})(LoginStatusSource ||= {});
+var CredentialSource;
+((CredentialSource2) => {
+  CredentialSource2["SavedLogin"] = "saved-login";
+  CredentialSource2["Robot"] = "robot";
+  CredentialSource2["EnvironmentVariables"] = "env-vars";
+})(CredentialSource ||= {});
 var getLoginStatusAsync = async (options = {}) => {
   return getLoginStatusWithDeps(options);
 };
@@ -1595,7 +1661,8 @@ async function buildFileStatus(tokens, credentials, globalHint) {
     tenantName: credentials.UIPATH_TENANT_NAME,
     tenantId: credentials.UIPATH_TENANT_ID,
     expiration: tokens.expiration,
-    source: "file" /* File */,
+    source: "saved-login" /* SavedLogin */,
+    ...identityFields(tokens.accessToken, credentials),
     ...tokens.persistenceWarning ? { hint: tokens.persistenceWarning, persistenceFailed: true } : {},
     ...tokens.lockReleaseFailed ? { lockReleaseFailed: true } : {},
     ...tokens.tokenRefresh ? { tokenRefresh: tokens.tokenRefresh } : {}
@@ -1608,7 +1675,12 @@ async function buildFileStatus(tokens, credentials, globalHint) {
   }
   return result;
 }
+function identityFields(accessToken, credentials) {
+  const identity = resolveSessionIdentity(accessToken, parseAuthFlow(credentials[AUTH_FLOW_ENV_VAR]));
+  return identity ? { identity } : {};
+}
 function buildRobotStatus(robotCreds) {
+  const identity = resolveSessionIdentity(robotCreds.accessToken);
   return {
     loginStatus: "Logged in",
     accessToken: robotCreds.accessToken,
@@ -1619,7 +1691,8 @@ function buildRobotStatus(robotCreds) {
     tenantId: robotCreds.tenantId,
     issuer: robotCreds.issuer,
     expiration: getTokenExpiration(robotCreds.accessToken),
-    source: "robot" /* Robot */
+    source: "robot" /* Robot */,
+    ...identity ? { identity } : {}
   };
 }
 var isFileNotFoundError = (error) => {
@@ -1670,7 +1743,8 @@ async function circuitBreakerShortCircuit(ctx) {
       tenantName: credentials.UIPATH_TENANT_NAME,
       tenantId: credentials.UIPATH_TENANT_ID,
       expiration,
-      source: "file" /* File */
+      source: "saved-login" /* SavedLogin */,
+      ...identityFields(accessToken, credentials)
     } : {},
     hint: globalHint ?? (tokenIsDead ? deadHint : backoffHint),
     refreshCircuitOpen: true,
@@ -1692,7 +1766,8 @@ async function lockAcquireFailureStatus(ctx, error) {
       tenantName: ctx.credentials.UIPATH_TENANT_NAME,
       tenantId: ctx.credentials.UIPATH_TENANT_ID,
       expiration: ctx.expiration,
-      source: "file" /* File */,
+      source: "saved-login" /* SavedLogin */,
+      ...identityFields(ctx.accessToken, ctx.credentials),
       hint: globalHint,
       tokenRefresh: {
         attempted: false,
@@ -2179,9 +2254,6 @@ var selectTenantWithDeps = async (baseUrl, accessToken, organizationId, targetTe
   return [selectedTenant.name, selectedTenant.id, organization.name];
 };
 
-// ../auth/src/types.ts
-var AUTH_FLOW_ENV_VAR = "UIPATH_AUTH_FLOW";
-
 // ../auth/src/interactive.ts
 var interactiveLoginWithDeps = async (options, deps) => {
   const {
@@ -2458,10 +2530,10 @@ var authenticate = async ({
   const authUrl = `${authorizationEndpoint}?${authParams.toString()}`;
   let strategy;
   if (isBrowser()) {
-    const { BrowserAuthStrategy } = await import("./browser-strategy-v4n9zxyf.js");
+    const { BrowserAuthStrategy } = await import("./browser-strategy-16yagjhr.js");
     strategy = new BrowserAuthStrategy;
   } else {
-    const { NodeAuthStrategy } = await import("./node-strategy-0s9nhcmn.js");
+    const { NodeAuthStrategy } = await import("./node-strategy-gfq7k0sx.js");
     strategy = new NodeAuthStrategy;
   }
   const code = await strategy.execute(authUrl, effectiveRedirectUriUrl, state, {
@@ -2480,6 +2552,6 @@ var authenticate = async ({
   });
 };
 
-export { setAuthFileConfig, InvalidBaseUrlError, DEFAULT_AUTH_PROFILE, AuthProfileValidationError, normalizeAuthProfileName, setActiveAuthProfile, clearActiveAuthProfile, getActiveAuthProfile, runWithAuthProfile, resolveAuthProfileFilePath, getActiveAuthProfileFilePath, parseJWT, ENV_AUTH_ENABLE_VAR, ENFORCE_ROBOT_AUTH_VAR, ENV_AUTH_VARS, EnvAuthConfigError, isEnvAuthEnabled, isRobotAuthEnforced, readAuthFromEnv, refreshTokenFingerprint, loadRefreshBreaker, saveRefreshBreaker, clearRefreshBreaker, registerRobotClientLoader, TokenRefreshOAuthError, isTokenRefreshOAuthFailure, refreshAccessToken, DEFAULT_AUTH_FILENAME, DEFAULT_ENV_FILENAME, resolveEnvFileLocationAsync, resolveEnvFilePathAsync, loadEnvFileAsync, saveEnvFileAsync, LoginStatusSource, getLoginStatusAsync, getLoginStatusWithDeps, getAuthContext, getAuthEnv, ClientCredentialsAuthenticationError, clientCredentialsLogin, JWT_BEARER_ASSERTION_TYPE, FederatedCredentialsAuthenticationError, federatedCredentialsLogin, fetchTenantsAndOrganizations, TENANT_SELECTION_REQUIRED_CODE, INVALID_TENANT_CODE, TenantSelectionError, TenantSelectionRequiredError, InvalidTenantError, isTenantSelectionError, selectTenantWithDeps, AUTH_FLOW_ENV_VAR, interactiveLoginWithDeps, interactiveLogin, logoutWithDeps, logout, authenticate };
+export { setAuthFileConfig, InvalidBaseUrlError, DEFAULT_AUTH_PROFILE, AuthProfileValidationError, normalizeAuthProfileName, setActiveAuthProfile, clearActiveAuthProfile, getActiveAuthProfile, runWithAuthProfile, resolveAuthProfileFilePath, getActiveAuthProfileFilePath, parseJWT, parseAuthFlow, resolveSessionIdentity, ENV_AUTH_ENABLE_VAR, ENFORCE_ROBOT_AUTH_VAR, ENV_AUTH_VARS, EnvAuthConfigError, isEnvAuthEnabled, isRobotAuthEnforced, readAuthFromEnv, refreshTokenFingerprint, loadRefreshBreaker, saveRefreshBreaker, clearRefreshBreaker, registerRobotClientLoader, TokenRefreshOAuthError, isTokenRefreshOAuthFailure, refreshAccessToken, AUTH_FLOW_ENV_VAR, DEFAULT_AUTH_FILENAME, DEFAULT_ENV_FILENAME, resolveEnvFileLocationAsync, resolveEnvFilePathAsync, loadEnvFileAsync, saveEnvFileAsync, CredentialSource, getLoginStatusAsync, getLoginStatusWithDeps, getAuthContext, getAuthEnv, ClientCredentialsAuthenticationError, clientCredentialsLogin, JWT_BEARER_ASSERTION_TYPE, FederatedCredentialsAuthenticationError, federatedCredentialsLogin, fetchTenantsAndOrganizations, TENANT_SELECTION_REQUIRED_CODE, INVALID_TENANT_CODE, TenantSelectionError, TenantSelectionRequiredError, InvalidTenantError, isTenantSelectionError, selectTenantWithDeps, interactiveLoginWithDeps, interactiveLogin, logoutWithDeps, logout, authenticate };
 
-//# debugId=1B99BDDE9F71605864756E2164756E21
+//# debugId=C70DEAFBFF6807E964756E2164756E21

package/dist/{tool-1snc64g4.js → tool-q42rrs00.js}

@@ -3,9 +3,10 @@ var UIPATH_HOME_DIR = ".uipath";
 var AUTH_FILENAME = ".auth";
 var DEFAULT_BASE_URL = "https://cloud.uipath.com";
 var DEFAULT_AUTH_TIMEOUT_MS = 5 * 60 * 1000;
+var AUTH_TIMEOUT_ERROR_CODE = "EAUTHTIMEOUT";
 var AUTH_CANCELLED_ERROR_CODE = "EAUTHCANCELLED";
 var DEFAULT_REDIRECT_URI = "http://localhost:8104/oidc/login";
 
-export { UIPATH_HOME_DIR, AUTH_FILENAME, DEFAULT_BASE_URL, DEFAULT_AUTH_TIMEOUT_MS, AUTH_CANCELLED_ERROR_CODE, DEFAULT_REDIRECT_URI };
+export { UIPATH_HOME_DIR, AUTH_FILENAME, DEFAULT_BASE_URL, DEFAULT_AUTH_TIMEOUT_MS, AUTH_TIMEOUT_ERROR_CODE, AUTH_CANCELLED_ERROR_CODE, DEFAULT_REDIRECT_URI };
 
-//# debugId=A9146565B192C43A64756E2164756E21
+//# debugId=0F56C5D203AAAAAA64756E2164756E21

package/dist/tool.js

@@ -1,12 +1,12 @@
 import {
   metadata,
   registerCommands
-} from "./tool-qwtpgz76.js";
+} from "./tool-1t4m3bv9.js";
+import"./tool-6d49s6x4.js";
 import"./tool-y0g9grx6.js";
-import"./tool-k7c9wf29.js";
 import"./tool-0gctz400.js";
-import"./tool-7ktmqc73.js";
-import"./tool-1snc64g4.js";
+import"./tool-4pvh3k50.js";
+import"./tool-q42rrs00.js";
 import"./tool-wckvcay0.js";
 export {
   registerCommands,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@uipath/codedapp-tool",
   "license": "MIT",
-  "version": "1.200.0-preview.109",
+  "version": "1.201.0-preview.115",
   "description": "Build, pack, publish, deploy, and manage UiPath Coded Web Applications.",
   "keywords": [
     "cli-tool",
@@ -27,5 +27,5 @@
   "publishConfig": {
     "registry": "https://registry.npmjs.org/"
   },
-  "gitHead": "fcc01cdae81bbd0c25d3d4fc287537a9d19d99f4"
+  "gitHead": "f1086b73654d7728cb71f280588b3e0c77d535fc"
 }

package/dist/node-strategy-0s9nhcmn.js

@@ -1,63 +0,0 @@
-import {
-  catchError,
-  getFileSystem,
-  startServer
-} from "./tool-7ktmqc73.js";
-import"./tool-1snc64g4.js";
-import"./tool-wckvcay0.js";
-
-// ../auth/src/strategies/node-strategy.ts
-class NodeAuthStrategy {
-  async execute(url, redirectUri, expectedState, opts) {
-    const fs = getFileSystem();
-    const callbackUrl = await startServer({
-      redirectUri,
-      timeoutMs: opts?.timeoutMs,
-      signal: opts?.signal,
-      onListening: async () => {
-        let safeUrl = "";
-        for (const ch of url) {
-          const c = ch.charCodeAt(0);
-          if (c > 31 && (c < 128 || c > 159))
-            safeUrl += ch;
-        }
-        if (opts?.noBrowser) {
-          if (!opts.onAuthUrl) {
-            throw new Error("Headless login (noBrowser) requires an onAuthUrl handler " + "to surface the authorize URL, but none was provided.");
-          }
-          opts.onAuthUrl(safeUrl);
-          return;
-        }
-        const [openError] = await catchError(fs.utils.open(url));
-        if (!openError)
-          return;
-        const isSpawnError = "code" in openError && openError.code === "ENOENT";
-        if (isSpawnError) {
-          throw new Error("Could not open a browser. No supported browser launcher was found. " + `On a headless or minimal system, use non-interactive login instead:
-
-` + `  uip login --client-id <id> --client-secret <secret> -t <tenant>
-
-` + "Or install a browser opener for your OS (e.g. xdg-utils on Linux).", { cause: openError });
-        }
-        throw new Error("Could not open the browser automatically. " + `Visit this URL to authenticate:
-
-  ${safeUrl}
-`, { cause: openError });
-      }
-    });
-    const returnedState = callbackUrl.searchParams.get("state");
-    if (returnedState !== expectedState) {
-      throw new Error("OAuth state mismatch — the callback state does not match the expected value. " + "This may indicate a CSRF attack. Please try signing in again.");
-    }
-    const code = callbackUrl.searchParams.get("code");
-    if (!code) {
-      throw new Error("No authorization code received");
-    }
-    return code;
-  }
-}
-export {
-  NodeAuthStrategy
-};
-
-//# debugId=E5B2BD2B3B179D3D64756E2164756E21