@uipath/common 1.202.0 → 1.203.0-preview.160

package/dist/output-formats.d.ts

@@ -0,0 +1,34 @@
+/**
+ * The accepted `--output` values and the type derived from them.
+ *
+ * This lives in its own dependency-free module, not in `formatter.ts`, because
+ * `command-help.ts` needs the list at runtime and is re-exported from
+ * `index.browser.ts`. `formatter.ts` transitively imports `telemetry-init`
+ * (and through it applicationinsights → cls-hooked → `node:async_hooks`), so
+ * a value import of it from any browser-reachable module breaks the browser
+ * bundle — see the exclusion list at the top of `index.browser.ts`.
+ *
+ * `formatter.ts` re-exports both names, so `@uipath/common` consumers see one
+ * import site regardless of which file defines them.
+ */
+/**
+ * Accepted `--output` values, in the order `uip --help` lists them.
+ *
+ * {@link OutputFormat} is derived from this list, so the type and the
+ * accepted-value set cannot drift. Every caller that validates a raw
+ * `--output` value or prints the flag's help text reads it from here instead
+ * of repeating the literals.
+ */
+export declare const OUTPUT_FORMATS: readonly ["table", "json", "yaml", "plain", "markdown"];
+export type OutputFormat = (typeof OUTPUT_FORMATS)[number];
+/**
+ * Narrow a raw `--output` / `UIP_DEFAULT_OUTPUT` string to an accepted format.
+ *
+ * Every entry point receives the value as an arbitrary string; this is the one
+ * place that turns it into an {@link OutputFormat}, so no caller has to assert
+ * the cast the check was supposed to justify.
+ *
+ * @param value Raw value as typed on the command line or read from the env.
+ * @returns `true` when `value` is a member of {@link OUTPUT_FORMATS}.
+ */
+export declare function isOutputFormat(value: string): value is OutputFormat;

package/dist/registry.d.ts

@@ -2,5 +2,10 @@
  * Read a value from the Windows registry.
  * reg utility always exist.
  * Returns an empty string on non-Windows platforms or when the key/value is missing.
+ *
+ * `windowsHide` is required: a caller may have no console of its own — the
+ * telemetry sidecar is spawned `detached` with `stdio: "ignore"` — and
+ * Windows then allocates a new, visible console for `reg`, which flashes a
+ * terminal window on the user's desktop.
  */
 export declare function readRegistryValue(keyPath: string, valueName: string): string;

package/dist/telemetry/index.js

@@ -18812,7 +18812,7 @@ var UUID_PATTERN = /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{1
 var EMAIL_PATTERN = /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g;
 var JWT_PATTERN = /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g;
 var LONG_TOKEN_PATTERN = /\b[A-Za-z0-9_-]{40,}\b/g;
-var PADDED_BASE64_PATTERN = /[A-Za-z0-9+/]{16,}={1,2}(?![A-Za-z0-9+/=])/g;
+var PADDED_BASE64_PATTERN = /(?<![A-Za-z0-9+/])[A-Za-z0-9+/]{16,}={1,2}(?![A-Za-z0-9+/=])/g;
 var BASE64_WITH_PLUS_PATTERN = /[A-Za-z0-9+/]{40,}/g;
 var USER_HOME_PATTERN = /(?<![A-Za-z0-9._-])([/\\])(Users|home|Profiles)([/\\])([^/\\]+)/gi;
 var UNC_PATH_PATTERN = /(^|[\s"'<>|=,;([{])(\\\\[^\s"'<>|]+)/g;
@@ -18859,7 +18859,7 @@ var QUOTED_LITERAL_PATTERN = new RegExp([
   `(?<![A-Za-z0-9])"(?:[^\\
 ]|\\.){2,${QUOTED_LITERAL_MAX_SPAN}}?"(?![A-Za-z0-9])`
 ].join("|"), "g");
-var JSON_BODY_PATTERN = /[{[][^{}[\]]*[:,][^{}[\]]*[\]}]/g;
+var JSON_BODY_PATTERN = /[{[][^{}[\]:,]*[:,][^{}[\]]*[\]}]/g;
 var COLLAPSED_BODY = "{…}";
 var COLLAPSED_BODY_MARKER = "\x01body\x01";
 var MAX_BODY_NESTING = 8;
@@ -18874,10 +18874,13 @@ function collapseJsonBodies(text) {
   }
   return out.split(COLLAPSED_BODY_MARKER).join(COLLAPSED_BODY);
 }
-var TRAILING_PROSE_PUNCT = /[.,;:!?)\]}>'"]+$/;
+var TRAILING_PROSE_PUNCT = `.,;:!?)]}>'"`;
 function peelTrailingPunctuation(match) {
-  const trailing = match.match(TRAILING_PROSE_PUNCT)?.[0] ?? "";
-  return trailing ? [match.slice(0, -trailing.length), trailing] : [match, ""];
+  let end = match.length;
+  while (end > 0 && TRAILING_PROSE_PUNCT.includes(match[end - 1])) {
+    end -= 1;
+  }
+  return [match.slice(0, end), match.slice(end)];
 }
 function redactUrl(raw) {
   try {
@@ -19318,4 +19321,4 @@ export {
   setExecutionContextAuthSignal
 };
 
-//# debugId=8E7DD2E6226061B664756E2164756E21
+//# debugId=92AE46794174C94B64756E2164756E21

package/dist/telemetry/telemetry-init.d.ts

@@ -71,7 +71,7 @@ export declare function telemetryInit(options?: TelemetryInitOptions): Promise<v
  * Deliver all buffered telemetry before the process exits.
  * Must be awaited on every exit path.
  *
- * Normally hands the buffered envelopes to a detached sidecar process (see
+ * Normally hands the buffered envelopes to a background sidecar process (see
  * {@link trySidecarHandoff}) so the exit is instant. Falls back to the
  * in-process flush — one ingestion round-trip, capped at
  * FLUSH_SHUTDOWN_TIMEOUT_MS — when the sidecar handoff isn't available or

package/dist/timings.d.ts

@@ -9,6 +9,9 @@
  * sum inside `command`, not a fourth slice, so parallel calls can push `http`
  * past `command`.
  *
+ * The report goes to stderr, or to the file named by `UIP_TIMINGS_FILE` when a
+ * caller cannot afford to write on the stream something else is reading.
+ *
  * State is reached through `Symbol.for()` slots (each tool bundles its own copy
  * of this package) and bound to the invocation's async context, so the MCP
  * bridge's concurrent in-process commands can't overwrite each other's numbers.
@@ -18,6 +21,8 @@
  */
 /** Environment variable that turns the report on (`1` or `true`). */
 export declare const TIMINGS_ENV_VAR = "UIP_TIMINGS";
+/** Environment variable naming a file to append the report to. */
+export declare const TIMINGS_FILE_ENV_VAR = "UIP_TIMINGS_FILE";
 /** Prefix every report line carries, so a pipeline can grep them out. */
 export declare const TIMINGS_LINE_PREFIX = "[timing]";
 /**
@@ -41,6 +46,20 @@ export declare function markLongLivedHost(): void;
 export declare function runWithTimings<T>(fallbackCommand: string, fn: () => Promise<T>): Promise<T>;
 /** Only `1` and `true` count, matching how the logger reads `DEBUG`. */
 export declare function timingsEnabled(): boolean;
+/**
+ * File the report is appended to, when one is named. Read only once the report
+ * is already on.
+ *
+ * Its own variable rather than a path value on {@link TIMINGS_ENV_VAR}, whose
+ * contract is that only `1` and `true` count: overloading it would turn a stray
+ * `UIP_TIMINGS=yes` from "off" into a relative file named `yes`.
+ *
+ * For a caller whose stderr is not free to write on: a harness timing the CLI
+ * while the process under measurement reads that same stream, or a wrapper that
+ * reads any stderr as failure. `--log-file` does not serve them, since it moves
+ * every log line and the caller stops seeing the diagnostics it had before.
+ */
+export declare function timingsFile(): string | undefined;
 /** Name the command being timed, once the parser has resolved it. */
 export declare function setTimingCommand(command: string): void;
 /**

package/dist/zip.d.ts

@@ -0,0 +1,14 @@
+import { type IFileSystem } from "@uipath/filesystem";
+/**
+ * Extract an in-memory zip archive into `destinationDir`.
+ *
+ * Rejects entries that escape the destination, both lexically and through a
+ * symlink already present at the destination. One residual gap: a *dangling*
+ * symlink as the final path component is not detectable through
+ * `IFileSystem`, which exposes `realpath` but no `lstat`. Callers extracting
+ * into a directory other processes can write to should hand this a freshly
+ * created destination rather than a reused one.
+ */
+export declare function extractZipDataToDir(fs: IFileSystem, zipData: Uint8Array, destinationDir: string): Promise<void>;
+/** Extract the zip archive at `archivePath` into `destinationDir`. */
+export declare function extractArchive(archivePath: string, destinationDir: string): Promise<void>;