@uipath/maestro-tool 1.202.1 → 1.203.0-preview.160

package/README.md

@@ -153,3 +153,11 @@ uip maestro bpmn debug-instance cancel <debug-instance-id>
 Flow commands are available under `uip maestro flow`.
 
 Case Management commands are available under `uip maestro case`.
+
+### BPMN binding validation
+
+`uip maestro bpmn validate` supplies the shared Maestro validator with release, deployed action-app, and Integration Service connection lookups using the current CLI login. Validation during refresh and pack runs local checks without platform binding lookups. Legacy bound connections may omit `folderKey` or store it as a literal. When the task's `folderKey` context value is a binding reference, that reference must resolve to a populated `folderKey` companion binding with the same resource key. Local binding errors are reported without a network call. Unavailable services or missing login add a `PLATFORM_BINDINGS_UNVERIFIED` warning to the output; affected bindings remain unverified. A successful exit with this warning does not certify tenant bindings.
+
+Lookups use the current login's tenant, with no command-level `--tenant` override. Select the target with `uip login tenant set <tenant>` or a named `--profile`. Refresh and pack stay local so packaging does not depend on credentials, network access, or resources that may only exist in the deployment tenant. Run `validate` against that tenant before publishing and check its warnings.
+
+Action-app checks scan deployed-app pages and match each app by system name or ID. Result pages are shared across app checks in the same command, including concurrent requests, and fetched again by the next command. The scan stops when a match is found or the list ends; a lookup that cannot finish within the pagination safety limit produces an unverified warning.

package/dist/THIRD-PARTY-NOTICES.md

@@ -5,10 +5,24 @@ compiled into its `dist/` output rather than installed alongside it.
 Their licences and copyright notices are reproduced here in full, as
 those licences require.
 
-51 bundled dependencies:
+71 bundled dependencies:
 
 - @jsep-plugin/object@1.2.2 — MIT
-- @serverlessworkflow/sdk@1.0.1 — http://www.apache.org/licenses/LICENSE-2.0.txt
+- @serverlessworkflow/sdk@1.0.1 — Apache-2.0
+- @uipath/agents-storage-schemas@1.35.0 — see below
+- @uipath/bpmn-auto-layout@1.0.16 — MIT
+- @uipath/case-schema@0.1052.3 — UNLICENSED
+- @uipath/flow-converter@0.69.3 — MIT
+- @uipath/flow-core@0.115.4-develop — MIT
+- @uipath/flow-core@0.112.0 — MIT
+- @uipath/flow-expression-model@0.11.4 — MIT
+- @uipath/flow-migrations@0.56.2 — MIT
+- @uipath/flow-schema@0.68.0 — MIT
+- @uipath/flow-schema@0.72.2-develop — MIT
+- @uipath/integration-service-design-time@0.25.2 — see below
+- @uipath/maestro-validation@0.1079.0 — UNLICENSED
+- @uipath/resource-builder-sdk@2025.11.0-alpha5891-4020 — ISC
+- @uipath/tool-agent@2.0.0 — see below
 - acorn@8.17.0 — MIT
 - ajv@8.20.0 — MIT
 - ajv-errors@3.0.0 — MIT
@@ -35,6 +49,10 @@ those licences require.
 - json5@2.2.3 — MIT
 - lodash@4.18.1 — MIT
 - lodash-es@4.18.1 — MIT
+- lodash.isequal — MIT
+- lodash.keys — MIT
+- lodash.merge — MIT
+- lodash.xor — MIT
 - luxon@3.7.2 — MIT
 - min-dash@4.2.3 — MIT
 - moddle@7.2.0 — MIT
@@ -48,16 +66,18 @@ those licences require.
 - rxjs@7.8.2 — Apache-2.0
 - sax@1.6.1 — BlueOak-1.0.0
 - saxen@10.0.0 — MIT
-- semver@7.7.4 — ISC
 - semver@7.8.0 — ISC
 - semver@7.8.0 — ISC
+- semver@7.7.4 — ISC
+- to-json-schema — MIT
 - tslib@1.14.1 — 0BSD
+- tsup — MIT
 - tsyringe@4.10.0 — MIT
 - typescript-5.4@5.4.5 — Apache-2.0
 - wsl-utils@0.3.1 — MIT
-- zod@3.25.76 — MIT
 - zod@4.4.3 — MIT
 - zod@3.25.76 — MIT
+- zod@3.25.76 — MIT
 
 ---
 
@@ -92,7 +112,9 @@ WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 ## @serverlessworkflow/sdk@1.0.1
 
-SPDX: http://www.apache.org/licenses/LICENSE-2.0.txt
+Licence decision: Its `license` field is a URL to the Apache-2.0 text rather than an SPDX id, so it reads as unknown to every scanner. Normalised to the licence that URL names.
+
+SPDX: Apache-2.0
 
 ```
                                  Apache License
@@ -300,6 +322,146 @@ SPDX: http://www.apache.org/licenses/LICENSE-2.0.txt
 
 ---
 
+## @uipath/agents-storage-schemas@1.35.0
+
+SPDX: 
+
+The upstream package ships no licence file here; `` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
+## @uipath/bpmn-auto-layout@1.0.16
+
+SPDX: MIT
+
+The upstream package ships no licence file here; `MIT` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
+## @uipath/case-schema@0.1052.3
+
+SPDX: UNLICENSED
+
+The upstream package ships no licence file here; `UNLICENSED` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
+## @uipath/flow-converter@0.69.3
+
+SPDX: MIT
+
+The upstream package ships no licence file here; `MIT` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
+## @uipath/flow-core@0.115.4-develop
+
+SPDX: MIT
+
+The upstream package ships no licence file here; `MIT` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
+## @uipath/flow-core@0.112.0
+
+SPDX: MIT
+
+The upstream package ships no licence file here; `MIT` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
+## @uipath/flow-expression-model@0.11.4
+
+SPDX: MIT
+
+The upstream package ships no licence file here; `MIT` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
+## @uipath/flow-migrations@0.56.2
+
+SPDX: MIT
+
+The upstream package ships no licence file here; `MIT` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
+## @uipath/flow-schema@0.68.0
+
+SPDX: MIT
+
+The upstream package ships no licence file here; `MIT` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
+## @uipath/flow-schema@0.72.2-develop
+
+SPDX: MIT
+
+The upstream package ships no licence file here; `MIT` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
+## @uipath/integration-service-design-time@0.25.2
+
+SPDX: 
+
+The upstream package ships no licence file here; `` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
+## @uipath/maestro-validation@0.1079.0
+
+SPDX: UNLICENSED
+
+The upstream package ships no licence file here; `UNLICENSED` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
+## @uipath/resource-builder-sdk@2025.11.0-alpha5891-4020
+
+SPDX: ISC
+
+The upstream package ships no licence file here; `ISC` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
+## @uipath/tool-agent@2.0.0
+
+SPDX: 
+
+The upstream package ships no licence file here; `` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
 ## acorn@8.17.0
 
 SPDX: MIT
@@ -555,6 +717,11 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI
 
 ## elkjs@0.11.1
 
+Source availability: the source for elkjs is available under
+EPL-2.0 at https://github.com/kieler/elkjs/tree/0.11.1
+
+EPL-2.0 §3.1(b) permits distribution inside a differently-licensed work, so a proprietary product may ship it; §3.1(a) obliges us to say where the source is, which the URL does. It cannot be dropped from this repo alone: it arrives through @uipath/flow-core's peer dependency and is pre-bundled inside @uipath/flow-converter and @uipath/maestro-layout.
+
 SPDX: EPL-2.0
 
 ```
@@ -1282,6 +1449,58 @@ terms above.
 
 ---
 
+## lodash.isequal
+
+Inlined by a bundled dependency rather than resolved directly,
+so it does not appear in this package's source maps.
+
+SPDX: MIT
+
+The upstream package ships no licence file here; `MIT` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
+## lodash.keys
+
+Inlined by a bundled dependency rather than resolved directly,
+so it does not appear in this package's source maps.
+
+SPDX: MIT
+
+The upstream package ships no licence file here; `MIT` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
+## lodash.merge
+
+Inlined by a bundled dependency rather than resolved directly,
+so it does not appear in this package's source maps.
+
+SPDX: MIT
+
+The upstream package ships no licence file here; `MIT` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
+## lodash.xor
+
+Inlined by a bundled dependency rather than resolved directly,
+so it does not appear in this package's source maps.
+
+SPDX: MIT
+
+The upstream package ships no licence file here; `MIT` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
 ## luxon@3.7.2
 
 SPDX: MIT
@@ -1870,7 +2089,7 @@ SOFTWARE.
 
 ---
 
-## semver@7.7.4
+## semver@7.8.0
 
 SPDX: ISC
 
@@ -1918,7 +2137,7 @@ IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 
 ---
 
-## semver@7.8.0
+## semver@7.7.4
 
 SPDX: ISC
 
@@ -1942,6 +2161,19 @@ IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 
 ---
 
+## to-json-schema
+
+Inlined by a bundled dependency rather than resolved directly,
+so it does not appear in this package's source maps.
+
+SPDX: MIT
+
+The upstream package ships no licence file here; `MIT` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
 ## tslib@1.14.1
 
 SPDX: 0BSD
@@ -1963,6 +2195,19 @@ PERFORMANCE OF THIS SOFTWARE.
 
 ---
 
+## tsup
+
+Inlined by a bundled dependency rather than resolved directly,
+so it does not appear in this package's source maps.
+
+SPDX: MIT
+
+The upstream package ships no licence file here; `MIT` is the
+licence it is distributed under. The canonical text of that licence
+applies, with copyright held by the package's authors.
+
+---
+
 ## tsyringe@4.10.0
 
 SPDX: MIT
@@ -2075,7 +2320,7 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI
 
 ---
 
-## zod@3.25.76
+## zod@4.4.3
 
 SPDX: MIT
 
@@ -2105,7 +2350,7 @@ SOFTWARE.
 
 ---
 
-## zod@4.4.3
+## zod@3.25.76
 
 SPDX: MIT
 

package/dist/{authoring-y3ryfdt0.js → authoring-at68vr5g.js}

@@ -1,10 +1,11 @@
 import {
   registerCheckCommand,
   registerCompileCommand,
-  registerDecompileCommand
-} from "./packager-tool-mt5pyyf2.js";
-import"./packager-tool-r6q5qwad.js";
-import"./packager-tool-r7rp3zz3.js";
+  registerDecompileCommand,
+  registerMergeCommand
+} from "./packager-tool-c95fhhys.js";
+import"./packager-tool-h8x54cvx.js";
+import"./packager-tool-z6nkdv48.js";
 import"./packager-tool-0v3s8r01.js";
 import"./packager-tool-1yh8g550.js";
 
@@ -13,9 +14,10 @@ var registerCaseAuthoringCommands = (program) => {
   registerCompileCommand(program, "case");
   registerCheckCommand(program, "case");
   registerDecompileCommand(program, "case");
+  registerMergeCommand(program, "case");
 };
 export {
   registerCaseAuthoringCommands
 };
 
-//# debugId=78E7E6936790D36F64756E2164756E21
+//# debugId=04D5DC523C590A4264756E2164756E21

package/dist/{authoring-k357kqhs.js → authoring-sh284a0x.js}

@@ -3,9 +3,9 @@ import {
   registerCompileCommand,
   registerRegistryCommands,
   registerTidyCommand
-} from "./packager-tool-mt5pyyf2.js";
-import"./packager-tool-r6q5qwad.js";
-import"./packager-tool-r7rp3zz3.js";
+} from "./packager-tool-c95fhhys.js";
+import"./packager-tool-h8x54cvx.js";
+import"./packager-tool-z6nkdv48.js";
 import"./packager-tool-0v3s8r01.js";
 import"./packager-tool-1yh8g550.js";
 

package/dist/{authoring-p4w2zfvc.js → authoring-szfy0rh1.js}

@@ -3,9 +3,9 @@ import {
   registerCompileCommand,
   registerDecompileCommand,
   registerMergeCommand
-} from "./packager-tool-mt5pyyf2.js";
-import"./packager-tool-r6q5qwad.js";
-import"./packager-tool-r7rp3zz3.js";
+} from "./packager-tool-c95fhhys.js";
+import"./packager-tool-h8x54cvx.js";
+import"./packager-tool-z6nkdv48.js";
 import"./packager-tool-0v3s8r01.js";
 import"./packager-tool-1yh8g550.js";
 
@@ -14,10 +14,10 @@ var registerFlowAuthoringCommands = (program) => {
   registerCompileCommand(program, "flow");
   registerCheckCommand(program, "flow");
   registerDecompileCommand(program, "flow");
-  registerMergeCommand(program);
+  registerMergeCommand(program, "flow");
 };
 export {
   registerFlowAuthoringCommands
 };
 
-//# debugId=112658AC6F582E6364756E2164756E21
+//# debugId=6DBE3AF9D2C3950F64756E2164756E21

package/dist/{binding-service-mys9xgtq.js → binding-service-c0z7stnc.js}

@@ -3,56 +3,64 @@ import {
 } from "./packager-tool-s95s0kvg.js";
 import {
   collectNodeBindingResourceKeys
-} from "./packager-tool-7p56pr16.js";
+} from "./packager-tool-njw7xs3h.js";
+import"./packager-tool-mfrdmqmt.js";
+import"./packager-tool-7msx23gd.js";
+import"./packager-tool-cy6tee55.js";
+import"./packager-tool-q3grhwzy.js";
+import"./packager-tool-d2813z49.js";
+import"./packager-tool-9pccpz3r.js";
 import {
   readFlowWorkflow,
   writeFlowWorkflow
-} from "./packager-tool-tb9ea902.js";
-import"./packager-tool-q1227jxk.js";
-import"./packager-tool-h2gfp0j3.js";
-import"./packager-tool-sfk34qja.js";
-import"./packager-tool-nrvxycwb.js";
-import"./packager-tool-3hjbc16b.js";
+} from "./packager-tool-0wqf8gzg.js";
+import"./packager-tool-xg76c38f.js";
+import"./packager-tool-ygrrb1zh.js";
 import"./packager-tool-eypvc2kv.js";
-import"./packager-tool-tcz1gmag.js";
-import"./packager-tool-q38dn0kk.js";
-import"./packager-tool-7exrv6w7.js";
-import"./packager-tool-p9stswjj.js";
-import"./packager-tool-jfv7t0c8.js";
-import"./packager-tool-xwyjkrqz.js";
-import"./packager-tool-k4sjzxvh.js";
-import"./packager-tool-r6q5qwad.js";
-import"./packager-tool-jm7twdzq.js";
-import"./packager-tool-f0kd5kq4.js";
+import"./packager-tool-t1reqfpg.js";
+import"./packager-tool-8qp60s20.js";
+import"./packager-tool-qrkjn9yp.js";
+import"./packager-tool-dh5nppv4.js";
+import"./packager-tool-vck7ct1e.js";
+import"./packager-tool-paq9c70w.js";
+import"./packager-tool-4r35ye9r.js";
+import"./packager-tool-yrsrzz1a.js";
 import"./packager-tool-0gctz400.js";
 import"./packager-tool-qa9gftnj.js";
 import"./packager-tool-yc4kw997.js";
-import"./packager-tool-ahj646v3.js";
+import"./packager-tool-095jzn8v.js";
+import"./packager-tool-mj89jhvb.js";
+import"./packager-tool-kb554twx.js";
+import"./packager-tool-h8x54cvx.js";
+import"./packager-tool-a45czjcj.js";
 import {
   addBinding,
   createBinding
-} from "./packager-tool-tn5e7wnb.js";
+} from "./packager-tool-6rsegsby.js";
+import"./packager-tool-wd01egnx.js";
 import"./packager-tool-2513jrxr.js";
-import"./packager-tool-7rz102fw.js";
-import"./packager-tool-k4x5yn3p.js";
-import"./packager-tool-vpqyvh4c.js";
+import"./packager-tool-khm7zsm8.js";
+import"./packager-tool-vcjq9xkc.js";
 import"./packager-tool-b803sdfp.js";
 import"./packager-tool-nkrmjr3a.js";
 import"./packager-tool-rs6jm14d.js";
 import"./packager-tool-hk1gxnth.js";
-import"./packager-tool-k2nmkphc.js";
-import"./packager-tool-bay2m7j4.js";
-import"./packager-tool-gbgfwx8f.js";
-import"./packager-tool-58q3tvh7.js";
+import"./packager-tool-7q6z6npd.js";
 import"./packager-tool-sc961w0q.js";
-import"./packager-tool-m5qfverj.js";
-import"./packager-tool-e0p2zsyc.js";
-import"./packager-tool-z9bfhmm5.js";
+import"./packager-tool-gpwec9sp.js";
+import"./packager-tool-vqcnvaae.js";
+import"./packager-tool-gbgfwx8f.js";
+import"./packager-tool-d88rqwk8.js";
+import"./packager-tool-jysvpt8p.js";
+import"./packager-tool-fvm2dddf.js";
+import"./packager-tool-p79yh9ww.js";
+import"./packager-tool-vdc8r21p.js";
+import"./packager-tool-z83pga0z.js";
 import"./packager-tool-6ejqwbw9.js";
 import"./packager-tool-mcaf4ewf.js";
-import"./packager-tool-r7rp3zz3.js";
+import"./packager-tool-z6nkdv48.js";
 import"./packager-tool-0v3s8r01.js";
-import"./packager-tool-a42jnpy5.js";
+import"./packager-tool-4mna26cc.js";
 import"./packager-tool-c23zrhj8.js";
 import"./packager-tool-1yh8g550.js";
 
@@ -143,4 +151,4 @@ export {
   listBindingsInFlow
 };
 
-//# debugId=1DCFD0480415E1BD64756E2164756E21
+//# debugId=0BECF6584FD029BD64756E2164756E21

package/dist/{bpmn-action-type-validator-kx36sqhe.js → bpmn-action-type-validator-8kvyvvcf.js}

@@ -3,8 +3,8 @@ import {
   collectBpmnActionTypes,
   getKnownBpmnActionTypes,
   validateBpmnActionTypes
-} from "./packager-tool-nmznynbj.js";
-import"./packager-tool-jfv7t0c8.js";
+} from "./packager-tool-qff6ang6.js";
+import"./packager-tool-kb554twx.js";
 import"./packager-tool-1yh8g550.js";
 export {
   UnknownActionTypeError,