@uipath/maestro-builder-sdk 6.49.1 → 6.49.2

package/dist/registry/prepare/inherited-profile.d.ts

@@ -0,0 +1,14 @@
+import type { UipClient } from "../uip/client.js";
+/**
+ * Set by `uip` for the processes it starts: the login profile the run is for.
+ * Empty or unset means the default login.
+ */
+export declare const INHERITED_PROFILE_ENV = "UIPATH_CLI_INHERITED_PROFILE";
+/**
+ * Refuse unless the `uip` on PATH answers as `profile`.
+ *
+ * A `uip` older than {@link INHERITED_PROFILE_ENV} ignores it and reads the
+ * default login, which can be another customer's tenant, and nothing downstream
+ * notices (UiPath/cli#5485).
+ */
+export declare function assertInheritedProfile(client: UipClient, profile: string): Promise<void>;

package/dist/registry/prepare/inherited-profile.js

@@ -0,0 +1,28 @@
+import { Refusal } from "../errors.js";
+import { loginStatus } from "../uip/commands.js";
+import { failureReason, getCI, parseEnvelope } from "../uip/envelope.js";
+/**
+ * Set by `uip` for the processes it starts: the login profile the run is for.
+ * Empty or unset means the default login.
+ */
+export const INHERITED_PROFILE_ENV = "UIPATH_CLI_INHERITED_PROFILE";
+/**
+ * Refuse unless the `uip` on PATH answers as `profile`.
+ *
+ * A `uip` older than {@link INHERITED_PROFILE_ENV} ignores it and reads the
+ * default login, which can be another customer's tenant, and nothing downstream
+ * notices (UiPath/cli#5485).
+ */
+export async function assertInheritedProfile(client, profile) {
+    const result = await client.run(loginStatus());
+    const data = result.code === 0 ? getCI(parseEnvelope(result.stdout), "Data") : undefined;
+    if (data === undefined) {
+        throw new Refusal(`could not confirm login profile "${profile}": ${failureReason(result)}`, "PROFILE_UNCONFIRMED");
+    }
+    const actual = getCI(data, "Profile");
+    if (actual === profile)
+        return;
+    const answeredAs = typeof actual === "string" ? `profile "${actual}"` : "the default login";
+    const tenant = `${String(getCI(data, "Organization"))}/${String(getCI(data, "Tenant"))}`;
+    throw new Refusal(`this run is for login profile "${profile}", but the uip on PATH answers as ${answeredAs} (${tenant}). Run 'uip update', then retry.`, "PROFILE_MISMATCH");
+}

package/dist/registry/prepare-cli.js

@@ -2,6 +2,7 @@ import { resolve } from 'node:path';
 import { reportResult } from '../cli-result.js';
 import { PACKAGE_NAME } from "../package-name.js";
 import { exitCodeOf } from "./errors.js";
+import { assertInheritedProfile, INHERITED_PROFILE_ENV } from "./prepare/inherited-profile.js";
 import { exitText } from "./prepare/messages.js";
 import { defaultOverlayOut, prepareConnector as runPipeline } from "./prepare/pipeline.js";
 import { consoleReporter } from "./reporter.js";
@@ -64,6 +65,9 @@ export async function prepareConnector(options) {
     // once, as a warning, and the calls spawn as they did before.
     const client = defaultUipClient({ host: { onFallback: (reason) => consoleReporter.warn(`  WARN: ${reason}`) } });
     try {
+        const profile = process.env[INHERITED_PROFILE_ENV];
+        if (profile)
+            await assertInheritedProfile(client, profile);
         return await runPipeline(pipelineOptions(options), {
             client,
             reporter: consoleReporter,

package/dist/registry/uip/commands.d.ts

@@ -15,6 +15,7 @@ export declare const UIP = "uip";
 export declare function connectionArgs(connectionId?: string): string[];
 /** `-f name=value` per parent field, in the order given. */
 export declare function fieldArgs(parentFields: ReadonlyMap<string, string> | Readonly<Record<string, string>> | undefined): string[];
+export declare function loginStatus(): string[];
 export declare function registrySearchConnectors(): string[];
 export declare function registrySearch(query: string): string[];
 /**

package/dist/registry/uip/commands.js

@@ -22,6 +22,9 @@ export function fieldArgs(parentFields) {
     const entries = parentFields instanceof Map ? [...parentFields.entries()] : Object.entries(parentFields);
     return entries.flatMap(([name, value]) => ["-f", `${name}=${value}`]);
 }
+export function loginStatus() {
+    return [UIP, "login", "status", "--output", "json"];
+}
 export function registrySearchConnectors() {
     return [UIP, "maestro", "flow", "registry", "search", "--filter", "tags:in=connector", "--output", "json"];
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uipath/maestro-builder-sdk",
-  "version": "6.49.1",
+  "version": "6.49.2",
   "description": "Build UiPath Flow, Case, and BPMN artifacts by writing TypeScript.",
   "license": "MIT",
   "homepage": "https://docs.uipath.com/maestro",
@@ -92,5 +92,5 @@
     "@types/node": "^22.7.0",
     "esbuild": "^0.28.1"
   },
-  "gitref": "784ae01c8e59d695dc0c711a7ff1be52dda3c98f"
+  "gitref": "72292af393e64e04ffe0ce42e31992e3ea9a3980"
 }