@uipath/maestro-builder-sdk 6.5.1 → 6.6.0

package/dist/registry/pull-cli.d.ts

@@ -1 +1,23 @@
+/**
+ * Selects which published library a pull resolves to when `--url` is absent.
+ *
+ * Unset or `latest` means the stable alias above. A build number
+ * (`connectors-library-2026.09.9`, or just `2026.09.9`) means that build's
+ * immutable copy under `versions/`.
+ *
+ * It is an environment variable, not only a flag, because the pull that
+ * matters is often not the one a person types. An agent following the skill
+ * runs a bare `uip maestro registry pull`, which would otherwise always resolve
+ * to the stable alias and repoint the shared cache at whatever is there. When
+ * the alias was overwritten with a 2-connector build on 2026-09-22, every such
+ * pull switched to it. With this set, a pinned environment (an eval image, a CI
+ * job) stays on the build it chose, whoever runs the pull.
+ */
+export declare const CONNECTORS_LIBRARY_VERSION_ENV = "CONNECTORS_LIBRARY_VERSION";
+/**
+ * The archive URL a pull fetches: `--url` wins, then `CONNECTORS_LIBRARY_VERSION`,
+ * then the stable alias. A version that is not a build number is refused
+ * rather than guessed at, so a typo cannot fall back to "latest" silently.
+ */
+export declare function connectorsLibraryUrl(argv: string[], env?: Record<string, string | undefined>): string;
 export declare function run(argv: string[]): Promise<number>;

package/dist/registry/pull-cli.js

@@ -23,6 +23,45 @@ import { curatedOverlayIdentity } from "./curated-overlay.js";
  * the trees somewhere specific instead of in the cache.
  */
 const DEFAULT_URL = "https://download.uipath.com/maestro/registry/library-json.zip";
+/** Where each published build is kept, immutably, beside the stable alias. */
+const VERSIONS_URL = "https://download.uipath.com/maestro/registry/versions";
+/**
+ * Selects which published library a pull resolves to when `--url` is absent.
+ *
+ * Unset or `latest` means the stable alias above. A build number
+ * (`connectors-library-2026.09.9`, or just `2026.09.9`) means that build's
+ * immutable copy under `versions/`.
+ *
+ * It is an environment variable, not only a flag, because the pull that
+ * matters is often not the one a person types. An agent following the skill
+ * runs a bare `uip maestro registry pull`, which would otherwise always resolve
+ * to the stable alias and repoint the shared cache at whatever is there. When
+ * the alias was overwritten with a 2-connector build on 2026-09-22, every such
+ * pull switched to it. With this set, a pinned environment (an eval image, a CI
+ * job) stays on the build it chose, whoever runs the pull.
+ */
+export const CONNECTORS_LIBRARY_VERSION_ENV = "CONNECTORS_LIBRARY_VERSION";
+const BUILD_NUMBER = /^(?:connectors-library-)?(\d{4}\.\d{2}\.\d+)$/;
+/**
+ * The archive URL a pull fetches: `--url` wins, then `CONNECTORS_LIBRARY_VERSION`,
+ * then the stable alias. A version that is not a build number is refused
+ * rather than guessed at, so a typo cannot fall back to "latest" silently.
+ */
+export function connectorsLibraryUrl(argv, env = process.env) {
+    const explicit = value(argv, "--url");
+    if (explicit)
+        return explicit;
+    const version = env[CONNECTORS_LIBRARY_VERSION_ENV]?.trim();
+    if (!version || version.toLowerCase() === "latest")
+        return DEFAULT_URL;
+    const build = BUILD_NUMBER.exec(version);
+    if (!build) {
+        throw new Error(`${CONNECTORS_LIBRARY_VERSION_ENV}=${JSON.stringify(version)} is not a connectors library build. ` +
+            "Use \"latest\" or a build number such as connectors-library-2026.09.9 " +
+            `(the folders under ${VERSIONS_URL}/).`);
+    }
+    return `${VERSIONS_URL}/connectors-library-${build[1]}/library-json.zip`;
+}
 /** Provenance for a cache entry, written inside its library-json. */
 const SOURCE_FILE = ".registry-source.json";
 const USAGE = [
@@ -30,6 +69,9 @@ const USAGE = [
     "                             [--library <dir>] [--library-md <dir>]",
     "                             [--url <url>] [--archive <zip>] [--force]",
     "                             [--import <specifier>] [--triggers <path>] [--root <prefix>]",
+    "",
+    'Without --url, CONNECTORS_LIBRARY_VERSION selects the library: unset or "latest" for',
+    "the current published build, or a build number such as connectors-library-2026.09.9.",
 ].join("\n");
 /** Flags from the Python era, accepted for one release and ignored. */
 const IGNORED = ["--python", "--extractor", "--generator"];
@@ -111,7 +153,11 @@ async function resolveArchive(argv, cacheDir, force) {
         }
         return { path: local };
     }
-    const url = value(argv, "--url") ?? DEFAULT_URL;
+    const url = connectorsLibraryUrl(argv);
+    if (url !== DEFAULT_URL) {
+        // Said every time, so a pinned pull is visible in any log that captured it.
+        console.error(`registry pull: library from ${url}`);
+    }
     warnAboutProxy();
     const checksumResponse = await fetch(`${url}.sha256`);
     if (!checksumResponse.ok) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uipath/maestro-builder-sdk",
-  "version": "6.5.1",
+  "version": "6.6.0",
   "description": "Build UiPath Flow, Case, and BPMN artifacts by writing TypeScript.",
   "license": "MIT",
   "homepage": "https://docs.uipath.com/maestro",
@@ -87,5 +87,5 @@
     "@types/node": "^22.7.0",
     "esbuild": "^0.28.1"
   },
-  "gitref": "36199b5fb7b1c265f284595f177884008e404a4f"
+  "gitref": "fde2e4ef67894bab9ddb61be204f4d0775c08ea1"
 }