@uipath/codedapp-tool 1.200.0-preview.120 → 1.201.0-preview.121

package/dist/{tool-1snc64g4.js → tool-q42rrs00.js}

@@ -3,9 +3,10 @@ var UIPATH_HOME_DIR = ".uipath";
 var AUTH_FILENAME = ".auth";
 var DEFAULT_BASE_URL = "https://cloud.uipath.com";
 var DEFAULT_AUTH_TIMEOUT_MS = 5 * 60 * 1000;
+var AUTH_TIMEOUT_ERROR_CODE = "EAUTHTIMEOUT";
 var AUTH_CANCELLED_ERROR_CODE = "EAUTHCANCELLED";
 var DEFAULT_REDIRECT_URI = "http://localhost:8104/oidc/login";
 
-export { UIPATH_HOME_DIR, AUTH_FILENAME, DEFAULT_BASE_URL, DEFAULT_AUTH_TIMEOUT_MS, AUTH_CANCELLED_ERROR_CODE, DEFAULT_REDIRECT_URI };
+export { UIPATH_HOME_DIR, AUTH_FILENAME, DEFAULT_BASE_URL, DEFAULT_AUTH_TIMEOUT_MS, AUTH_TIMEOUT_ERROR_CODE, AUTH_CANCELLED_ERROR_CODE, DEFAULT_REDIRECT_URI };
 
-//# debugId=A9146565B192C43A64756E2164756E21
+//# debugId=0F56C5D203AAAAAA64756E2164756E21

package/dist/{tool-k7c9wf29.js → tool-yadq0xpc.js}

@@ -5,13 +5,13 @@ import {
 import {
   catchError,
   getFileSystem
-} from "./tool-7ktmqc73.js";
+} from "./tool-4pvh3k50.js";
 import {
   AUTH_FILENAME,
   DEFAULT_BASE_URL,
   DEFAULT_REDIRECT_URI,
   UIPATH_HOME_DIR
-} from "./tool-1snc64g4.js";
+} from "./tool-q42rrs00.js";
 import {
   __require
 } from "./tool-wckvcay0.js";
@@ -911,6 +911,67 @@ var getTokenExpiration = (accessToken) => {
   }
 };
 
+// ../auth/src/sessionIdentity.ts
+var parseAuthFlow = (value) => value === "authorization_code" || value === "client_credentials" || value === "federated_credentials" ? value : undefined;
+var decodeClaims = (accessToken) => {
+  const [error, claims] = catchError(() => parseJWT(accessToken));
+  return error ? undefined : claims;
+};
+var asString = (value) => typeof value === "string" && value.length > 0 ? value : undefined;
+var resolveIdentityType = (claims, authFlow, email) => {
+  const subType = asString(claims?.sub_type);
+  if (subType) {
+    return subType.startsWith("service") ? "Application" : "User";
+  }
+  if (authFlow) {
+    return authFlow === "authorization_code" ? "User" : "Application";
+  }
+  if (email)
+    return "User";
+  if (asString(claims?.client_id) && !asString(claims?.sub)) {
+    return "Application";
+  }
+  return;
+};
+var looksLikeEmail = (value) => value?.includes("@") ?? false;
+var pickEmail = (claims) => {
+  for (const candidate of [claims?.email, claims?.preferred_username]) {
+    const value = asString(candidate);
+    if (looksLikeEmail(value))
+      return value;
+  }
+  return;
+};
+var pickName = (claims) => {
+  const username = asString(claims?.preferred_username);
+  return asString(claims?.name) ?? (looksLikeEmail(username) ? undefined : username);
+};
+var resolveSessionIdentity = (accessToken, authFlow) => {
+  const claims = accessToken ? decodeClaims(accessToken) : undefined;
+  const email = pickEmail(claims);
+  const type = resolveIdentityType(claims, authFlow, email);
+  if (!type)
+    return;
+  const identity = { type };
+  if (authFlow)
+    identity.authFlow = authFlow;
+  if (type === "User") {
+    const userId = asString(claims?.sub);
+    if (userId)
+      identity.userId = userId;
+    if (email)
+      identity.userEmail = email;
+    const name = pickName(claims);
+    if (name)
+      identity.userName = name;
+    return identity;
+  }
+  const clientId = asString(claims?.client_id);
+  if (clientId)
+    identity.clientId = clientId;
+  return identity;
+};
+
 // ../auth/src/envAuth.ts
 var ENV_AUTH_ENABLE_VAR = "UIPATH_CLI_ENABLE_ENV_AUTH";
 var ENFORCE_ROBOT_AUTH_VAR = "UIPATH_CLI_ENFORCE_ROBOT_AUTH";
@@ -960,6 +1021,7 @@ var readAuthFromEnv = () => {
   }
   const expiration = getTokenExpiration(accessToken);
   const loginStatus = expiration && expiration <= new Date ? "Expired" : "Logged in";
+  const identity = resolveSessionIdentity(accessToken);
   return {
     loginStatus,
     accessToken,
@@ -969,7 +1031,8 @@ var readAuthFromEnv = () => {
     tenantName,
     tenantId,
     expiration,
-    source: "env" /* Env */
+    source: "env-vars" /* EnvironmentVariables */,
+    ...identity ? { identity } : {}
   };
 };
 
@@ -1223,6 +1286,9 @@ var refreshAccessToken = async ({
   return { accessToken: newAccessToken, refreshToken: newRefreshToken };
 };
 
+// ../auth/src/types.ts
+var AUTH_FLOW_ENV_VAR = "UIPATH_AUTH_FLOW";
+
 // ../auth/src/utils/envFile.ts
 var DEFAULT_AUTH_FILENAME = AUTH_FILENAME;
 var DEFAULT_ENV_FILENAME = `${UIPATH_HOME_DIR}/${AUTH_FILENAME}`;
@@ -1384,12 +1450,12 @@ var saveEnvFileAsync = async ({
 };
 
 // ../auth/src/loginStatus.ts
-var LoginStatusSource;
-((LoginStatusSource2) => {
-  LoginStatusSource2["File"] = "file";
-  LoginStatusSource2["Robot"] = "robot";
-  LoginStatusSource2["Env"] = "env";
-})(LoginStatusSource ||= {});
+var CredentialSource;
+((CredentialSource2) => {
+  CredentialSource2["SavedLogin"] = "saved-login";
+  CredentialSource2["Robot"] = "robot";
+  CredentialSource2["EnvironmentVariables"] = "env-vars";
+})(CredentialSource ||= {});
 var getLoginStatusAsync = async (options = {}) => {
   return getLoginStatusWithDeps(options);
 };
@@ -1595,7 +1661,8 @@ async function buildFileStatus(tokens, credentials, globalHint) {
     tenantName: credentials.UIPATH_TENANT_NAME,
     tenantId: credentials.UIPATH_TENANT_ID,
     expiration: tokens.expiration,
-    source: "file" /* File */,
+    source: "saved-login" /* SavedLogin */,
+    ...identityFields(tokens.accessToken, credentials),
     ...tokens.persistenceWarning ? { hint: tokens.persistenceWarning, persistenceFailed: true } : {},
     ...tokens.lockReleaseFailed ? { lockReleaseFailed: true } : {},
     ...tokens.tokenRefresh ? { tokenRefresh: tokens.tokenRefresh } : {}
@@ -1608,7 +1675,12 @@ async function buildFileStatus(tokens, credentials, globalHint) {
   }
   return result;
 }
+function identityFields(accessToken, credentials) {
+  const identity = resolveSessionIdentity(accessToken, parseAuthFlow(credentials[AUTH_FLOW_ENV_VAR]));
+  return identity ? { identity } : {};
+}
 function buildRobotStatus(robotCreds) {
+  const identity = resolveSessionIdentity(robotCreds.accessToken);
   return {
     loginStatus: "Logged in",
     accessToken: robotCreds.accessToken,
@@ -1619,7 +1691,8 @@ function buildRobotStatus(robotCreds) {
     tenantId: robotCreds.tenantId,
     issuer: robotCreds.issuer,
     expiration: getTokenExpiration(robotCreds.accessToken),
-    source: "robot" /* Robot */
+    source: "robot" /* Robot */,
+    ...identity ? { identity } : {}
   };
 }
 var isFileNotFoundError = (error) => {
@@ -1670,7 +1743,8 @@ async function circuitBreakerShortCircuit(ctx) {
       tenantName: credentials.UIPATH_TENANT_NAME,
       tenantId: credentials.UIPATH_TENANT_ID,
       expiration,
-      source: "file" /* File */
+      source: "saved-login" /* SavedLogin */,
+      ...identityFields(accessToken, credentials)
     } : {},
     hint: globalHint ?? (tokenIsDead ? deadHint : backoffHint),
     refreshCircuitOpen: true,
@@ -1692,7 +1766,8 @@ async function lockAcquireFailureStatus(ctx, error) {
       tenantName: ctx.credentials.UIPATH_TENANT_NAME,
       tenantId: ctx.credentials.UIPATH_TENANT_ID,
       expiration: ctx.expiration,
-      source: "file" /* File */,
+      source: "saved-login" /* SavedLogin */,
+      ...identityFields(ctx.accessToken, ctx.credentials),
       hint: globalHint,
       tokenRefresh: {
         attempted: false,
@@ -2086,6 +2161,16 @@ var federatedCredentialsLogin = async ({
   });
 };
 // ../auth/src/tenantSelection.ts
+var LOGIN_STATUS_HINT = "Run 'uip login status' to see the organization the CLI is signed in to.";
+var organizationHint = (organizationId) => `The request used '${organizationId}' as the organization. ${LOGIN_STATUS_HINT}`;
+var IDENTIFIER_STATUSES = new Set([400, 403, 404]);
+var describeNonJsonResponse = (organizationId, response, parseError) => {
+  if (response.redirected) {
+    return `Could not find organization '${organizationId}': the request was ` + `redirected to a sign-in page instead of the organization's tenant ` + `list. ${LOGIN_STATUS_HINT}`;
+  }
+  const contentType = response.headers.get("content-type") ?? "unknown";
+  return `The organization service returned a '${contentType}' response instead ` + `of JSON: ${parseError.message}. ${organizationHint(organizationId)}`;
+};
 var fetchTenantsAndOrganizations = async (baseUrl, accessToken, organizationId) => {
   const url = `${baseUrl}/${organizationId}/portal_/api/filtering/leftnav/tenantsAndOrganizationInfo`;
   const response = await fetch(url, {
@@ -2095,12 +2180,16 @@ var fetchTenantsAndOrganizations = async (baseUrl, accessToken, organizationId)
   });
   if (!response.ok) {
     if (response.status === 401) {
-      throw new Error("Unauthorized: Invalid or expired access token");
+      throw new Error(`Unauthorized: the access token was rejected, it was not ` + `issued for organization '${organizationId}', or ` + `'${organizationId}' was not accepted as an organization ` + `URL segment in this environment. ` + LOGIN_STATUS_HINT);
     }
     const errorText = await response.text();
-    throw new Error(`Failed to get tenants and organizations: ${response.status} ${errorText}`);
+    const message = `Failed to get tenants and organizations: ${response.status} ${errorText}`;
+    throw new Error(IDENTIFIER_STATUSES.has(response.status) ? `${message}. ${organizationHint(organizationId)}` : message);
+  }
+  const [parseError, data] = await catchError(response.json());
+  if (parseError) {
+    throw new Error(describeNonJsonResponse(organizationId, response, parseError));
   }
-  const data = await response.json();
   return data;
 };
 
@@ -2179,9 +2268,6 @@ var selectTenantWithDeps = async (baseUrl, accessToken, organizationId, targetTe
   return [selectedTenant.name, selectedTenant.id, organization.name];
 };
 
-// ../auth/src/types.ts
-var AUTH_FLOW_ENV_VAR = "UIPATH_AUTH_FLOW";
-
 // ../auth/src/interactive.ts
 var interactiveLoginWithDeps = async (options, deps) => {
   const {
@@ -2458,10 +2544,10 @@ var authenticate = async ({
   const authUrl = `${authorizationEndpoint}?${authParams.toString()}`;
   let strategy;
   if (isBrowser()) {
-    const { BrowserAuthStrategy } = await import("./browser-strategy-v4n9zxyf.js");
+    const { BrowserAuthStrategy } = await import("./browser-strategy-16yagjhr.js");
     strategy = new BrowserAuthStrategy;
   } else {
-    const { NodeAuthStrategy } = await import("./node-strategy-0s9nhcmn.js");
+    const { NodeAuthStrategy } = await import("./node-strategy-gfq7k0sx.js");
     strategy = new NodeAuthStrategy;
   }
   const code = await strategy.execute(authUrl, effectiveRedirectUriUrl, state, {
@@ -2480,6 +2566,6 @@ var authenticate = async ({
   });
 };
 
-export { setAuthFileConfig, InvalidBaseUrlError, DEFAULT_AUTH_PROFILE, AuthProfileValidationError, normalizeAuthProfileName, setActiveAuthProfile, clearActiveAuthProfile, getActiveAuthProfile, runWithAuthProfile, resolveAuthProfileFilePath, getActiveAuthProfileFilePath, parseJWT, ENV_AUTH_ENABLE_VAR, ENFORCE_ROBOT_AUTH_VAR, ENV_AUTH_VARS, EnvAuthConfigError, isEnvAuthEnabled, isRobotAuthEnforced, readAuthFromEnv, refreshTokenFingerprint, loadRefreshBreaker, saveRefreshBreaker, clearRefreshBreaker, registerRobotClientLoader, TokenRefreshOAuthError, isTokenRefreshOAuthFailure, refreshAccessToken, DEFAULT_AUTH_FILENAME, DEFAULT_ENV_FILENAME, resolveEnvFileLocationAsync, resolveEnvFilePathAsync, loadEnvFileAsync, saveEnvFileAsync, LoginStatusSource, getLoginStatusAsync, getLoginStatusWithDeps, getAuthContext, getAuthEnv, ClientCredentialsAuthenticationError, clientCredentialsLogin, JWT_BEARER_ASSERTION_TYPE, FederatedCredentialsAuthenticationError, federatedCredentialsLogin, fetchTenantsAndOrganizations, TENANT_SELECTION_REQUIRED_CODE, INVALID_TENANT_CODE, TenantSelectionError, TenantSelectionRequiredError, InvalidTenantError, isTenantSelectionError, selectTenantWithDeps, AUTH_FLOW_ENV_VAR, interactiveLoginWithDeps, interactiveLogin, logoutWithDeps, logout, authenticate };
+export { setAuthFileConfig, InvalidBaseUrlError, DEFAULT_AUTH_PROFILE, AuthProfileValidationError, normalizeAuthProfileName, setActiveAuthProfile, clearActiveAuthProfile, getActiveAuthProfile, runWithAuthProfile, resolveAuthProfileFilePath, getActiveAuthProfileFilePath, parseJWT, parseAuthFlow, resolveSessionIdentity, ENV_AUTH_ENABLE_VAR, ENFORCE_ROBOT_AUTH_VAR, ENV_AUTH_VARS, EnvAuthConfigError, isEnvAuthEnabled, isRobotAuthEnforced, readAuthFromEnv, refreshTokenFingerprint, loadRefreshBreaker, saveRefreshBreaker, clearRefreshBreaker, registerRobotClientLoader, TokenRefreshOAuthError, isTokenRefreshOAuthFailure, refreshAccessToken, AUTH_FLOW_ENV_VAR, DEFAULT_AUTH_FILENAME, DEFAULT_ENV_FILENAME, resolveEnvFileLocationAsync, resolveEnvFilePathAsync, loadEnvFileAsync, saveEnvFileAsync, CredentialSource, getLoginStatusAsync, getLoginStatusWithDeps, getAuthContext, getAuthEnv, ClientCredentialsAuthenticationError, clientCredentialsLogin, JWT_BEARER_ASSERTION_TYPE, FederatedCredentialsAuthenticationError, federatedCredentialsLogin, fetchTenantsAndOrganizations, TENANT_SELECTION_REQUIRED_CODE, INVALID_TENANT_CODE, TenantSelectionError, TenantSelectionRequiredError, InvalidTenantError, isTenantSelectionError, selectTenantWithDeps, interactiveLoginWithDeps, interactiveLogin, logoutWithDeps, logout, authenticate };
 
-//# debugId=1B99BDDE9F71605864756E2164756E21
+//# debugId=AE89F90F78CF3CD464756E2164756E21

package/dist/tool.js

@@ -1,16 +1,17 @@
 import {
   metadata,
   registerCommands
-} from "./tool-v6xshdxt.js";
+} from "./tool-hcf6wh0m.js";
+import"./tool-25qmnad0.js";
+import"./tool-yadq0xpc.js";
 import"./tool-y0g9grx6.js";
-import"./tool-k7c9wf29.js";
 import"./tool-0gctz400.js";
-import"./tool-7ktmqc73.js";
-import"./tool-1snc64g4.js";
+import"./tool-4pvh3k50.js";
+import"./tool-q42rrs00.js";
 import"./tool-wckvcay0.js";
 export {
   registerCommands,
   metadata
 };
 
-//# debugId=106E34AF1A233DCE64756E2164756E21
+//# debugId=4B3BB7844263F9B364756E2164756E21

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@uipath/codedapp-tool",
   "license": "MIT",
-  "version": "1.200.0-preview.120",
+  "version": "1.201.0-preview.121",
   "description": "Build, pack, publish, deploy, and manage UiPath Coded Web Applications.",
   "keywords": [
     "cli-tool",
@@ -27,5 +27,5 @@
   "publishConfig": {
     "registry": "https://registry.npmjs.org/"
   },
-  "gitHead": "173ad4b4930bd3e17a493b32e9f1c3c616ea1c10"
+  "gitHead": "c70ccfc0b12e637441d67df1d212b71d7784b5f8"
 }

package/dist/node-strategy-0s9nhcmn.js

@@ -1,63 +0,0 @@
-import {
-  catchError,
-  getFileSystem,
-  startServer
-} from "./tool-7ktmqc73.js";
-import"./tool-1snc64g4.js";
-import"./tool-wckvcay0.js";
-
-// ../auth/src/strategies/node-strategy.ts
-class NodeAuthStrategy {
-  async execute(url, redirectUri, expectedState, opts) {
-    const fs = getFileSystem();
-    const callbackUrl = await startServer({
-      redirectUri,
-      timeoutMs: opts?.timeoutMs,
-      signal: opts?.signal,
-      onListening: async () => {
-        let safeUrl = "";
-        for (const ch of url) {
-          const c = ch.charCodeAt(0);
-          if (c > 31 && (c < 128 || c > 159))
-            safeUrl += ch;
-        }
-        if (opts?.noBrowser) {
-          if (!opts.onAuthUrl) {
-            throw new Error("Headless login (noBrowser) requires an onAuthUrl handler " + "to surface the authorize URL, but none was provided.");
-          }
-          opts.onAuthUrl(safeUrl);
-          return;
-        }
-        const [openError] = await catchError(fs.utils.open(url));
-        if (!openError)
-          return;
-        const isSpawnError = "code" in openError && openError.code === "ENOENT";
-        if (isSpawnError) {
-          throw new Error("Could not open a browser. No supported browser launcher was found. " + `On a headless or minimal system, use non-interactive login instead:
-
-` + `  uip login --client-id <id> --client-secret <secret> -t <tenant>
-
-` + "Or install a browser opener for your OS (e.g. xdg-utils on Linux).", { cause: openError });
-        }
-        throw new Error("Could not open the browser automatically. " + `Visit this URL to authenticate:
-
-  ${safeUrl}
-`, { cause: openError });
-      }
-    });
-    const returnedState = callbackUrl.searchParams.get("state");
-    if (returnedState !== expectedState) {
-      throw new Error("OAuth state mismatch — the callback state does not match the expected value. " + "This may indicate a CSRF attack. Please try signing in again.");
-    }
-    const code = callbackUrl.searchParams.get("code");
-    if (!code) {
-      throw new Error("No authorization code received");
-    }
-    return code;
-  }
-}
-export {
-  NodeAuthStrategy
-};
-
-//# debugId=E5B2BD2B3B179D3D64756E2164756E21