@uipath/maestro-builder-sdk 6.5.1 → 6.6.1

package/dist/core/library.js

@@ -688,8 +688,7 @@ export class Library {
     build(dir, e, nodeType, opts = {}) {
         const entryPath = join(dir, e.path);
         const entry = JSON.parse(readFileSync(entryPath, 'utf8'));
-        const v1defRaw = JSON.parse(readFileSync(entryPath.replace(/\.json$/, '.v1def.json'), 'utf8'));
-        const v1def = Array.isArray(v1defRaw) ? v1defRaw[0] : v1defRaw;
+        const v1def = readV1def(entryPath);
         // A stamped object (case 4) reaches here with the index entry's `objectName`
         // replaced but the sibling's FILE on disk — so restate the object and derive
         // the endpoint from the sibling's own template, rather than shipping a node
@@ -805,10 +804,30 @@ function deriveObjectPath(operation, objectName) {
     }
     return out;
 }
-/** Read the `.v1def.json` sidecar beside a library entry file. */
+/**
+ * Read the `.v1def.json` sidecar beside a library entry file, with a connection
+ * definition's `model.bindings.resource` in the designer's canonical casing.
+ *
+ * The registry serves raw node data in two casings — `uipath-microsoft-outlook365`
+ * `trigger-email-received` says `Connection`, its siblings `connection` — and the
+ * sidecar keeps whatever it was given. The designer never ships the raw value: its
+ * connector mapper builds every definition with `CONNECTION_BINDING_RESOURCE`
+ * (`'connection'`, flow-v1 `flow-schema/src/connection-binding.ts`), and the v1.1→v1.2
+ * migration lowercased every `.flow` on disk. Studio Web's unresolved-binding check
+ * (`matchContextBindings`) filters the flow's `bindings[]` by that string EXACTLY, and
+ * since MST-15010 an unresolved placeholder blocks publish. A `Connection` definition
+ * beside our `connection` registry entries therefore matched nothing, and the node
+ * reported both its connection and `FolderKey` as "not configured" (UV-16774) while
+ * validate and debug — which fold the case — passed.
+ */
 function readV1def(entryPath) {
     const raw = JSON.parse(readFileSync(entryPath.replace(/\.json$/, '.v1def.json'), 'utf8'));
-    return Array.isArray(raw) ? raw[0] : raw;
+    const v1def = Array.isArray(raw) ? raw[0] : raw;
+    const bindings = v1def?.model?.bindings;
+    if (typeof bindings?.resource === 'string' && bindings.resource.toLowerCase() === 'connection') {
+        bindings.resource = 'connection';
+    }
+    return v1def;
 }
 /**
  * The platform's `connectorDetail.configuration` blob — the designer's own

package/dist/registry/pull-cli.d.ts

@@ -1 +1,23 @@
+/**
+ * Selects which published library a pull resolves to when `--url` is absent.
+ *
+ * Unset or `latest` means the stable alias above. A build number
+ * (`connectors-library-2026.09.9`, or just `2026.09.9`) means that build's
+ * immutable copy under `versions/`.
+ *
+ * It is an environment variable, not only a flag, because the pull that
+ * matters is often not the one a person types. An agent following the skill
+ * runs a bare `uip maestro registry pull`, which would otherwise always resolve
+ * to the stable alias and repoint the shared cache at whatever is there. When
+ * the alias was overwritten with a 2-connector build on 2026-09-22, every such
+ * pull switched to it. With this set, a pinned environment (an eval image, a CI
+ * job) stays on the build it chose, whoever runs the pull.
+ */
+export declare const CONNECTORS_LIBRARY_VERSION_ENV = "CONNECTORS_LIBRARY_VERSION";
+/**
+ * The archive URL a pull fetches: `--url` wins, then `CONNECTORS_LIBRARY_VERSION`,
+ * then the stable alias. A version that is not a build number is refused
+ * rather than guessed at, so a typo cannot fall back to "latest" silently.
+ */
+export declare function connectorsLibraryUrl(argv: string[], env?: Record<string, string | undefined>): string;
 export declare function run(argv: string[]): Promise<number>;

package/dist/registry/pull-cli.js

@@ -23,6 +23,45 @@ import { curatedOverlayIdentity } from "./curated-overlay.js";
  * the trees somewhere specific instead of in the cache.
  */
 const DEFAULT_URL = "https://download.uipath.com/maestro/registry/library-json.zip";
+/** Where each published build is kept, immutably, beside the stable alias. */
+const VERSIONS_URL = "https://download.uipath.com/maestro/registry/versions";
+/**
+ * Selects which published library a pull resolves to when `--url` is absent.
+ *
+ * Unset or `latest` means the stable alias above. A build number
+ * (`connectors-library-2026.09.9`, or just `2026.09.9`) means that build's
+ * immutable copy under `versions/`.
+ *
+ * It is an environment variable, not only a flag, because the pull that
+ * matters is often not the one a person types. An agent following the skill
+ * runs a bare `uip maestro registry pull`, which would otherwise always resolve
+ * to the stable alias and repoint the shared cache at whatever is there. When
+ * the alias was overwritten with a 2-connector build on 2026-09-22, every such
+ * pull switched to it. With this set, a pinned environment (an eval image, a CI
+ * job) stays on the build it chose, whoever runs the pull.
+ */
+export const CONNECTORS_LIBRARY_VERSION_ENV = "CONNECTORS_LIBRARY_VERSION";
+const BUILD_NUMBER = /^(?:connectors-library-)?(\d{4}\.\d{2}\.\d+)$/;
+/**
+ * The archive URL a pull fetches: `--url` wins, then `CONNECTORS_LIBRARY_VERSION`,
+ * then the stable alias. A version that is not a build number is refused
+ * rather than guessed at, so a typo cannot fall back to "latest" silently.
+ */
+export function connectorsLibraryUrl(argv, env = process.env) {
+    const explicit = value(argv, "--url");
+    if (explicit)
+        return explicit;
+    const version = env[CONNECTORS_LIBRARY_VERSION_ENV]?.trim();
+    if (!version || version.toLowerCase() === "latest")
+        return DEFAULT_URL;
+    const build = BUILD_NUMBER.exec(version);
+    if (!build) {
+        throw new Error(`${CONNECTORS_LIBRARY_VERSION_ENV}=${JSON.stringify(version)} is not a connectors library build. ` +
+            "Use \"latest\" or a build number such as connectors-library-2026.09.9 " +
+            `(the folders under ${VERSIONS_URL}/).`);
+    }
+    return `${VERSIONS_URL}/connectors-library-${build[1]}/library-json.zip`;
+}
 /** Provenance for a cache entry, written inside its library-json. */
 const SOURCE_FILE = ".registry-source.json";
 const USAGE = [
@@ -30,6 +69,9 @@ const USAGE = [
     "                             [--library <dir>] [--library-md <dir>]",
     "                             [--url <url>] [--archive <zip>] [--force]",
     "                             [--import <specifier>] [--triggers <path>] [--root <prefix>]",
+    "",
+    'Without --url, CONNECTORS_LIBRARY_VERSION selects the library: unset or "latest" for',
+    "the current published build, or a build number such as connectors-library-2026.09.9.",
 ].join("\n");
 /** Flags from the Python era, accepted for one release and ignored. */
 const IGNORED = ["--python", "--extractor", "--generator"];
@@ -111,7 +153,11 @@ async function resolveArchive(argv, cacheDir, force) {
         }
         return { path: local };
     }
-    const url = value(argv, "--url") ?? DEFAULT_URL;
+    const url = connectorsLibraryUrl(argv);
+    if (url !== DEFAULT_URL) {
+        // Said every time, so a pinned pull is visible in any log that captured it.
+        console.error(`registry pull: library from ${url}`);
+    }
     warnAboutProxy();
     const checksumResponse = await fetch(`${url}.sha256`);
     if (!checksumResponse.ok) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uipath/maestro-builder-sdk",
-  "version": "6.5.1",
+  "version": "6.6.1",
   "description": "Build UiPath Flow, Case, and BPMN artifacts by writing TypeScript.",
   "license": "MIT",
   "homepage": "https://docs.uipath.com/maestro",
@@ -87,5 +87,5 @@
     "@types/node": "^22.7.0",
     "esbuild": "^0.28.1"
   },
-  "gitref": "36199b5fb7b1c265f284595f177884008e404a4f"
+  "gitref": "cd125317bcecb3a004dfe47cf11ef6b9878fe331"
 }