@uipath/skills 1.196.0 → 1.197.0-preview.0

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
       "name": "uipath",
       "source": "./",
       "description": "UiPath plugin for Claude Code — custom skills, agents, hooks, and MCP servers for UiPath workflows, UI automation, UI testing and UiPath troubleshoot",
-      "version": "0.0.34",
+      "version": "1.197.0",
       "author": {
         "name": "UiPath"
       },

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "uipath",
-  "version": "0.0.34",
+  "version": "1.197.0",
   "description": "UiPath plugin for Claude Code — custom skills, agents, hooks, and MCP servers for UiPath RPA workflows, UI automation, UI testing, Python coded agents and UiPath troubleshoot",
   "author": {
     "name": "UiPath"

package/CODEOWNERS

@@ -3,6 +3,7 @@
 
 # CI workflows and review config
 /.github/ @uipreliga @bai-uipath @akshaylive
+/tests/.coder-eval-version @uipreliga @bai-uipath @akshaylive
 
 # Hooks
 /hooks/ @DragosUnguru @RaduAna-Maria
@@ -28,6 +29,7 @@
 /skills/uipath-platform/ @gabrielavaduva @alexenica @andreiopr @vlad-voinea-uipath @emanueldejanu @gcoman @puscasu-ion-daniel @razvalex @aeremencu @alinahornet @DinuDanNicolae @florin-munteanu-uipath @StefanPopaUi @razvanpotcoveanu @vladbucur-8 @busesorin94 @dmorosanu @MarinRzv @vladimir-cozma @UiPath/team-merlot @UiPath/team-orange
 /skills/uipath-platform/references/traces/ @UiPath/llmops-team
 /skills/uipath-platform/references/integration-service/ @chandusailella @baishalighosh
+/skills/uipath-platform/references/data-fabric/ @UiPath/DatafabricCodingAgent
 /skills/uipath-platform/references/llmgateway/ @denispetre @vstoleru-uipath @dragosvelcea
 /tests/tasks/uipath-platform/ @gabrielavaduva @alexenica @andreiopr @vlad-voinea-uipath @emanueldejanu @gcoman @puscasu-ion-daniel @razvalex @aeremencu @alinahornet @DinuDanNicolae @florin-munteanu-uipath @StefanPopaUi @razvanpotcoveanu @vladbucur-8 @busesorin94 @dmorosanu @MarinRzv @vladimir-cozma @UiPath/team-merlot @UiPath/team-orange
 /tests/tasks/uipath-platform/orchestrator/ @gabrielavaduva @alexenica @andreiopr @vlad-voinea-uipath @emanueldejanu @gcoman @puscasu-ion-daniel @razvalex @aeremencu @alinahornet @DinuDanNicolae @florin-munteanu-uipath @StefanPopaUi @razvanpotcoveanu @vladbucur-8 @busesorin94 @dmorosanu @MarinRzv @vladimir-cozma @UiPath/team-merlot @UiPath/team-orange
@@ -36,12 +38,14 @@
 /tests/tasks/uipath-platform/llmgateway/ @denispetre @vstoleru-uipath @dragosvelcea
 /tests/tasks/uipath-platform/traces/ @UiPath/llmops-team
 /tests/fixtures/ @gabrielavaduva @alexenica @andreiopr @vlad-voinea-uipath @emanueldejanu @gcoman @puscasu-ion-daniel @razvalex @aeremencu @alinahornet @DinuDanNicolae @florin-munteanu-uipath @StefanPopaUi @razvanpotcoveanu @vladbucur-8 @busesorin94 @dmorosanu @MarinRzv @vladimir-cozma @UiPath/team-merlot @UiPath/team-orange
+/tests/tasks/uipath-platform/data-fabric/ @UiPath/DatafabricCodingAgent
 
 # Agents skill (coded + low-code)
 /skills/uipath-agents/ @UiPath/team-coded-agents @AlexandruCGhimisi @andreibalas-uipath @al3xanndru @andreitava-uip
 /tests/tasks/uipath-agents/ @UiPath/team-coded-agents @AlexandruCGhimisi @andreibalas-uipath @al3xanndru @andreitava-uip
+/tests/tasks/uipath-agents/lowcode/conversational/ @maxduu @andrewwan-uipath
 
-# Context grounding capabilities (DeepRAG + BatchTransform) — now part of uipath-agents
+# Context grounding capabilities — DeepRAG + BatchTransform (uipath-agents) and index-management CLI (uipath-platform)
 /skills/uipath-agents/references/coded/capabilities/deeprag/ @gcuip @JeremyReist2 @cfauchere @CalebMartinUiPath @jordan-uipath @eteodorovici @pateljay43 @swathiJayav
 /skills/uipath-agents/references/coded/capabilities/batch-transform/ @gcuip @JeremyReist2 @cfauchere @CalebMartinUiPath @jordan-uipath @eteodorovici @pateljay43 @swathiJayav
 /skills/uipath-agents/references/lowcode/capabilities/built-in-tools/deeprag/ @gcuip @JeremyReist2 @cfauchere @CalebMartinUiPath @jordan-uipath @eteodorovici @pateljay43 @swathiJayav
@@ -51,6 +55,9 @@
 /tests/tasks/uipath-agents/batch_transform_coded/ @gcuip @JeremyReist2 @cfauchere @CalebMartinUiPath @jordan-uipath @eteodorovici @pateljay43 @swathiJayav
 /tests/tasks/uipath-agents/lowcode/deeprag/ @gcuip @JeremyReist2 @cfauchere @CalebMartinUiPath @jordan-uipath @eteodorovici @pateljay43 @swathiJayav
 /tests/tasks/uipath-agents/lowcode/batch_transform/ @gcuip @JeremyReist2 @cfauchere @CalebMartinUiPath @jordan-uipath @eteodorovici @pateljay43 @swathiJayav
+# Context grounding — index-management CLI (moved to uipath-platform); overrides the platform-team entries above
+/skills/uipath-platform/references/context-grounding/ @gcuip @JeremyReist2 @cfauchere @CalebMartinUiPath @jordan-uipath @eteodorovici @pateljay43 @swathiJayav
+/tests/tasks/uipath-platform/context-grounding/ @gcuip @JeremyReist2 @cfauchere @CalebMartinUiPath @jordan-uipath @eteodorovici @pateljay43 @swathiJayav
 
 # Guardrails capability docs
 /skills/uipath-agents/references/lowcode/capabilities/guardrails/ @apetraru-uipath @valentinabojan @ctiliescuuipath
@@ -96,6 +103,10 @@
 /skills/uipath-coded-apps/ @Raina451 @deepeshrai-tech @Sandeepan-Ghosh-0312 @swati354
 /tests/tasks/uipath-coded-apps/ @Raina451 @deepeshrai-tech @Sandeepan-Ghosh-0312 @swati354
 
+# Connector Builder skill
+/skills/uipath-connector-builder/ @mukeshkumar-uipath @chandusailella @apoosarla-uipath
+/tests/tasks/uipath-connector-builder/ @mukeshkumar-uipath @chandusailella @apoosarla-uipath
+
 # Flow skill — plugin guides (away team owned)
 # Add your team here when contributing a new plugin category
 /skills/uipath-maestro-flow/references/plugins/connector/ @baishalighosh @chandusailella @bai-uipath @rockymadden
@@ -117,6 +128,7 @@
 # Troubleshooting
 /skills/uipath-troubleshoot/ @MarinRzv @dmorosanu @vladimir-cozma @costin-uipath @Stefan-Virgil
 /tests/tasks/uipath-troubleshoot/ @MarinRzv @dmorosanu @vladimir-cozma @costin-uipath @Stefan-Virgil
+/tests/tasks/activation/uipath-troubleshoot.jsonl @MarinRzv @dmorosanu @vladimir-cozma @costin-uipath @Stefan-Virgil
 /skills/uipath-troubleshoot/references/products/agents/ @UiPath/llmops-team @andreibalas-uipath
 
 # Governance skill
@@ -127,9 +139,6 @@
 /skills/uipath-test/ @vaishalisharma-uipath @amoluipath @ganeshborle
 /tests/tasks/uipath-test/ @vaishalisharma-uipath @amoluipath @ganeshborle
 
-# Data Fabric skill (CLI entity/record management)
-/skills/uipath-data-fabric/ @aditi-goyal-uipath
-/tests/tasks/uipath-data-fabric/ @aditi-goyal-uipath
 
 # Tasks skill (Action Center Operate)
 /skills/uipath-tasks/ @UiPath/ActionCenterDev
@@ -139,6 +148,10 @@
 /skills/uipath-admin/ @sriramva-uipath @bansal-anushree @jianjunwang2 @t-hsia @ZuerWang99 @litheon @IsabellaCapriottiUIPath @uipathswapnil @ashleyetheridge @yadvender-uipath @CalinMPopa @chandhanshanth
 /tests/tasks/uipath-admin/ @sriramva-uipath @bansal-anushree @jianjunwang2 @t-hsia @ZuerWang99 @litheon @IsabellaCapriottiUIPath @uipathswapnil @ashleyetheridge @yadvender-uipath @CalinMPopa @chandhanshanth
 
+# IXP skill
+/skills/uipath-ixp/ @cezara98t @paul-ciobanu @misupantea-uipath @andrei-uipath
+/skills/uipath-ixp/ @cezara98t @paul-ciobanu @misupantea-uipath @andrei-uipath
+/tests/tasks/uipath-ixp/ @cezara98t @paul-ciobanu @misupantea-uipath @andrei-uipath
 # MCP skill (UiPath AgentHub MCP server registration + tool authoring)
 /skills/uipath-mcp-servers/ @cosminpaunel @UiPath/team-coded-agents
 /tests/tasks/uipath-mcp-servers/ @cosminpaunel @UiPath/team-coded-agents

package/README.md

@@ -93,10 +93,11 @@ Every skill's maturity is tracked in [`assets/skill-status.json`](assets/skill-s
 | `uipath-api-workflow` | In-development |
 | `uipath-automation-discovery` | Preview |
 | `uipath-coded-apps` | Preview |
-| `uipath-data-fabric` | In-development |
+| `uipath-connector-builder` | In-development |
 | `uipath-feedback` | Stable |
 | `uipath-governance` | In-development |
 | `uipath-human-in-the-loop` | In-development |
+| `uipath-ixp` | In-development |
 | `uipath-maestro-bpmn` | In-development |
 | `uipath-maestro-case` | In-development |
 | `uipath-maestro-flow` | In-development |
@@ -152,6 +153,17 @@ Gemini CLI is supported by `uip skills install`. If the Gemini CLI is on your PA
 
 This repository is configured as a Codex CLI skill provider. The `AGENTS.md` file (symlinked to `CLAUDE.md`) provides project instructions, and skills are discovered via `.agents/skills/` (symlinked to `skills/`).
 
+This repository also includes Codex plugin metadata under `.codex-plugin/`. The Codex plugin manifest exposes the same `skills/` directory and shared session hooks.
+
+Install with Codex CLI:
+
+```bash
+codex plugin marketplace add UiPath/skills --ref main
+codex plugin add uipath@uipath-marketplace
+```
+
+The marketplace entry currently uses a `plugins/uipath` symlink so Codex can load the repository root as the plugin root; remove it once [openai/codex#17066](https://github.com/openai/codex/issues/17066) is resolved.
+
 > **Windows users:** This repo uses git symlinks. Clone with symlinks enabled:
 > ```bash
 > git clone -c core.symlinks=true https://github.com/UiPath/skills

package/assets/skill-status.json

@@ -57,7 +57,7 @@
       },
       "last_synced": null
     },
-    "uipath-data-fabric": {
+    "uipath-connector-builder": {
       "status": "in-development",
       "confluence": {
         "page_id": null,
@@ -89,6 +89,14 @@
       },
       "last_synced": null
     },
+    "uipath-ixp": {
+      "status": "in-development",
+      "confluence": {
+        "page_id": null,
+        "url": null
+      },
+      "last_synced": null
+    },
     "uipath-maestro-bpmn": {
       "status": "in-development",
       "confluence": {

package/assets/uip-catalog-snapshot.json

@@ -1,6 +1,6 @@
 {
-  "generated_at": "2026-06-15T05:52:07Z",
-  "cli_version": "1.196.0-alpha.20260614.7519",
+  "generated_at": "2026-06-24T05:25:39Z",
+  "cli_version": "1.197.0-alpha.20260623.7621",
   "verbs": [
     "admin",
     "admin audit",
@@ -298,6 +298,7 @@
     "api-workflow bindings",
     "api-workflow bindings sync",
     "api-workflow build",
+    "api-workflow init",
     "api-workflow pack",
     "api-workflow registry",
     "api-workflow registry resolve",
@@ -535,6 +536,8 @@
     "ixp projects list",
     "ixp projects list-models",
     "ixp projects publish",
+    "ixp projects unpublish",
+    "ixp projects untag",
     "ixp projects update-prompt",
     "ixp projects update-title",
     "llm-configuration",
@@ -1101,6 +1104,7 @@
     "solution resources list",
     "solution resources refresh",
     "solution resources remove",
+    "solution restore",
     "solution upload",
     "tasks",
     "tasks assign",
@@ -1184,6 +1188,13 @@
     "tm testcases list-testsets",
     "tm testcases remove",
     "tm testcases run",
+    "tm testcases steps",
+    "tm testcases steps add",
+    "tm testcases steps delete",
+    "tm testcases steps get",
+    "tm testcases steps list",
+    "tm testcases steps move",
+    "tm testcases steps update",
     "tm testcases unlink-automation",
     "tm testcases update",
     "tm testsets",

package/hooks/hooks.json

@@ -18,6 +18,18 @@
           }
         ]
       }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash \"${CLAUDE_PLUGIN_ROOT}/hooks/send-telemetry.sh\"",
+            "async": true
+          }
+        ]
+      }
     ]
   }
 }

package/hooks/send-telemetry.sh

@@ -0,0 +1,421 @@
+#!/bin/bash
+# PostToolUse telemetry hook for the UiPath skills plugin.
+#
+# Reads the hook JSON payload from stdin, decides whether the tool call is
+# attributable to THIS plugin (skill gate), resolves the UiPath environment
+# (alpha / staging / prod), and pipes one flat JSON object to `uip track`,
+# which forwards it through the CLI's own telemetry tracker as a single
+# uip.skills.tool-use Application Insights event. Calls from other plugins or
+# bare Claude Code are dropped.
+#
+# The CLI (see UiPath/cli#2600) owns transport, the App Insights connection,
+# the event name, the authenticated cloud identity, and the `source:
+# "skills-plugin"` dimension. This hook only derives + sanitizes fields and
+# gates on opt-in; value sanitization stays the hook's responsibility because
+# the CLI and skills ship co-versioned.
+#
+# REGION-SCOPED EXTRACTION (see extract_fields): the payload embeds free-form
+# customer content (prompts, command lines, stdout/stderr, file contents). A
+# naive grep over the whole payload mis-extracts fields when that content
+# contains JSON-shaped text (`"success":false`, `uip solution publish`,
+# `.flow"`, `"resolvedModel":"..."`). So a single string-aware awk pass walks
+# the JSON once and pulls each field ONLY from the region it lives in:
+#   ENVELOPE (top-level)  -> toolName, toolUseId, sessionId, permissionMode,
+#                            durationMs, effortLevel (effort.level), agentType
+#   tool_input            -> skillName, uipSubcommand (command), fileExtension
+#                            (file_path), subagentType
+#   tool_response         -> outcome (interrupted/success), subagentModel
+#                            (resolvedModel)
+# Only derived, low-cardinality, PII-free values ever leave the machine.
+#
+# Non-blocking by contract: registered as an async hook in hooks.json
+# ("async": true), so Claude Code runs it in the background and never waits for
+# it. Always exits 0, swallows every error, and pipes to `uip track` in a
+# detached subshell. Cross-platform (macOS, Linux, Windows via Git Bash /
+# MSYS). Pure bash + grep/sed/awk — no jq, node, or python.
+#
+# Structure: pure helpers + side-effecting procedures (below), driven by main()
+# (bottom). Configuration is env only:
+#   UIPATH_TELEMETRY_DISABLED   Gate. Reuses the uip CLI's variable name.
+#                               Send ONLY when explicitly set to "0". Unset
+#                               (default) or "1" -> do not send. Privacy-first
+#                               default-off; absent is treated as disabled.
+
+set +e
+
+# schemaVersion of the emitted event. Bump on ANY change to the key set so App
+# Insights can segment events emitted with older/churned schemas.
+SCHEMA_VERSION=1
+
+# --- extraction ------------------------------------------------------------
+
+# extract_fields: one string-aware awk pass over the payload (stdin). Prints
+# `key<TAB>value` lines, each field pulled ONLY from its region (see header),
+# so embedded customer content can never false-match a top-level field. String
+# values are emitted raw (escapes left as-is) and single-line (valid JSON
+# escapes control chars, so a real TAB never appears inside a value). Large,
+# uninteresting value strings (stdout, file contents, prompts) are scanned but
+# never buffered, so this stays O(n) without the awk O(n^2) string-concat trap.
+extract_fields() {
+  awk '
+    function interesting(k, d, c) {
+      if (d == 1)
+        return (k=="tool_name"||k=="tool_use_id"||k=="session_id"|| \
+                k=="permission_mode"||k=="duration_ms"||k=="agent_type"|| \
+                k=="hook_event_name")
+      if (d == 2 && c == "input")
+        return (k=="skill"||k=="command"||k=="file_path"||k=="subagent_type")
+      if (d == 2 && c == "response")
+        return (k=="interrupted"||k=="success"||k=="resolvedModel")
+      if (d == 2 && c == "effort")
+        return (k=="level")
+      return 0
+    }
+    { buf = buf $0 "\n" }
+    END {
+      n = length(buf)
+      depth = 0; instr = 0; esc = 0
+      pend = 0; pkey = ""; pdepth = 0       # pending value after a key + colon
+      ctx = ""                              # region at depth 2: input/response/effort/other
+      laststr = ""                          # last closed string (candidate key)
+      cur = ""; buffering = 0; isval = 0
+      i = 1
+      while (i <= n) {
+        c = substr(buf, i, 1)
+        if (instr) {
+          if (esc)          { if (buffering) cur = cur c; esc = 0; i++; continue }
+          if (c == "\\")    { if (buffering) cur = cur c; esc = 1; i++; continue }
+          if (c == "\"") {
+            instr = 0
+            if (isval) {
+              if (buffering) print pkey "\t" cur
+              pend = 0; isval = 0
+            } else {
+              laststr = cur
+            }
+            cur = ""; buffering = 0; i++; continue
+          }
+          if (buffering) cur = cur c
+          i++; continue
+        }
+        if (c == "\"") {
+          instr = 1; cur = ""
+          if (pend) { isval = 1; buffering = interesting(pkey, pdepth, ctx) }
+          else      { isval = 0; buffering = 1 }   # key strings are small
+          i++; continue
+        }
+        if (c == ":") {
+          pkey = laststr; pdepth = depth; pend = 1
+          if (depth == 1 && laststr == "tool_response") print "tool_response_seen\t1"
+          i++; continue
+        }
+        if (c == "{") {
+          if (pend) {
+            if (pdepth == 1) {
+              if (pkey == "tool_input")        ctx = "input"
+              else if (pkey == "tool_response") ctx = "response"
+              else if (pkey == "effort")        ctx = "effort"
+              else                              ctx = "other"
+            }
+            pend = 0
+          }
+          depth++; i++; continue
+        }
+        if (c == "[") {
+          if (pend) { if (pdepth == 1) ctx = "other"; pend = 0 }
+          depth++; i++; continue
+        }
+        if (c == "}" || c == "]") {
+          depth--; if (depth <= 1) ctx = ""; pend = 0; i++; continue
+        }
+        if (c == ",")  { pend = 0; i++; continue }
+        if (c == " " || c == "\t" || c == "\n" || c == "\r") { i++; continue }
+        if (pend) {                               # literal value: number/true/false/null
+          lit = ""
+          while (i <= n) {
+            c = substr(buf, i, 1)
+            if (c==","||c=="}"||c=="]"||c==" "||c=="\t"||c=="\n"||c=="\r") break
+            lit = lit c; i++
+          }
+          if (interesting(pkey, pdepth, ctx)) print pkey "\t" lit
+          pend = 0; continue                      # leave delimiter for the main loop
+        }
+        i++
+      }
+    }
+  '
+}
+
+# read_fields: parse extract_fields output ($1) into the field globals. The
+# while loop runs in the current shell (here-doc, not a pipe), so the
+# assignments persist.
+read_fields() {
+  event=""; tool=""; tool_use_id=""; session_id=""; permission_mode=""
+  duration_ms=""; agent_type=""; skill=""; command=""; file_path=""
+  subagent_type=""; interrupted=""; success=""; resolved_model=""
+  effort_level=""; response_seen=""
+  local k v
+  while IFS="$(printf '\t')" read -r k v; do
+    case "$k" in
+      hook_event_name)    event="$v" ;;
+      tool_name)          tool="$v" ;;
+      tool_use_id)        tool_use_id="$v" ;;
+      session_id)         session_id="$v" ;;
+      permission_mode)    permission_mode="$v" ;;
+      duration_ms)        duration_ms="$v" ;;
+      agent_type)         agent_type="$v" ;;
+      skill)              skill="$v" ;;
+      command)            command="$v" ;;
+      file_path)          file_path="$v" ;;
+      subagent_type)      subagent_type="$v" ;;
+      interrupted)        interrupted="$v" ;;
+      success)            success="$v" ;;
+      resolvedModel)      resolved_model="$v" ;;
+      level)              effort_level="$v" ;;
+      tool_response_seen) response_seen="1" ;;
+    esac
+  done <<EOF
+$1
+EOF
+}
+
+# --- relevance gate --------------------------------------------------------
+
+# is_uipath_call: 0 if this call is attributable to the plugin, else 1. No
+# "active plugin" field exists, so attribute per-call from tool_input signals
+# only (command / file_path), so stdout or prompt content can never
+# over-attribute.
+is_uipath_call() {
+  case "$tool" in
+    Skill)
+      case "$skill" in uipath:*|uipath-*) return 0 ;; esac
+      ;;
+    Agent)
+      # UiPath agents or Claude's built-in agent types only — NOT custom agents
+      # from other plugins (`<plugin>:<name>`) or user-defined ones.
+      case "$subagent_type" in
+        uipath:*|uipath-*) return 0 ;;
+        general-purpose|Explore|Plan|claude|claude-code-guide|statusline-setup|fork) return 0 ;;
+      esac
+      ;;
+    Bash|PowerShell)
+      printf '%s' "$command" \
+        | grep -Eq '(^|[\\"[:space:];|&(])(uip|rpa-tool)[[:space:]]|\$UIP\b' && return 0
+      ;;
+    Edit|Write|Read|Glob|Grep)
+      printf '%s' "$file_path" \
+        | grep -Eiq '\.(cs|flow|xaml|uipx|bpmn)$|(^|[/\\])(agent|caseplan|project|app\.config|action-schema)\.json$' && return 0
+      ;;
+  esac
+  return 1
+}
+
+# --- environment resolution ------------------------------------------------
+
+# cache_val <file> <key>: emit a cached value stripped to a safe charset. Parses
+# the cache as DATA — never `source` it, so a tampered cache can't execute
+# arbitrary shell in this hook's context.
+cache_val() {
+  grep -E "^$2=" "$1" 2>/dev/null | head -1 | cut -d= -f2- | tr -cd 'A-Za-z0-9:._/-'
+}
+
+# resolve_environment: set env_name + base_url from `uip login status` (~0.5s),
+# cached per-user for 1h so only one tool call per hour pays the cost. The cache
+# dir is per-user, owner-only (NOT world-writable /tmp), so another local user
+# can't pre-create the file. chmod is a no-op on Windows but harmless.
+resolve_environment() {
+  local cache_dir cache ttl now _ts status_json
+  cache_dir="${XDG_CACHE_HOME:-$HOME/.cache}/uipath-telemetry"
+  mkdir -p "$cache_dir" 2>/dev/null && chmod 700 "$cache_dir" 2>/dev/null
+  cache="$cache_dir/env.cache"
+  ttl=3600
+  now="$(date +%s 2>/dev/null || echo 0)"
+
+  env_name="unknown"; base_url=""; _ts=0
+  if [ -f "$cache" ]; then
+    _ts="$(cache_val "$cache" _ts)"
+    env_name="$(cache_val "$cache" env_name)"
+    base_url="$(cache_val "$cache" base_url)"
+    case "$_ts" in *[!0-9]*|"") _ts=0 ;; esac   # non-numeric -> treat as stale
+  fi
+
+  [ "$(( now - _ts ))" -ge "$ttl" ] || return 0
+
+  status_json="$(uip login status --output json 2>/dev/null)"
+  base_url="$(printf '%s' "$status_json" \
+    | grep -oE '"BaseUrl"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed 's/.*"\([^"]*\)"$/\1/')"
+  case "$base_url" in
+    *alpha.uipath.com*)   env_name="alpha" ;;
+    *staging.uipath.com*) env_name="staging" ;;
+    *cloud.uipath.com*)   env_name="prod" ;;
+    "")                   env_name="unknown" ;;
+    *)                    env_name="other" ;;
+  esac
+  {
+    echo "_ts=$now"
+    echo "env_name=$env_name"
+    echo "base_url=$base_url"
+  } > "$cache" 2>/dev/null
+}
+
+# --- field derivation ------------------------------------------------------
+
+# derive_fields: set skill_name, uip_subcommand, file_ext from the parsed
+# tool_input values (so stdout content can't leak in).
+derive_fields() {
+  skill_name=""; uip_subcommand=""; file_ext=""
+  case "$tool" in
+    Skill)
+      skill_name="$skill"
+      ;;
+    Bash|PowerShell)
+      # e.g. "solution publish" from "uip solution publish --output json".
+      uip_subcommand="$(printf '%s' "$command" \
+        | grep -oE '(uip|\$UIP)[[:space:]]+[a-z][a-z-]*([[:space:]]+[a-z][a-z-]*)?' \
+        | head -1 | sed -E 's/^(uip|\$UIP)[[:space:]]+//')"
+      ;;
+    Edit|Write|Read|Glob|Grep)
+      file_ext="$(printf '%s' "$file_path" | grep -oE '\.[A-Za-z0-9]+$' | head -1)"
+      case "$file_path" in
+        *agent.json)    file_ext="agent.json" ;;
+        *caseplan.json) file_ext="caseplan.json" ;;
+      esac
+      ;;
+  esac
+}
+
+# compute_outcome: print outcome from the tool_response region ONLY — content
+# never flips it.
+#   interrupted == true -> interrupted (takes precedence)
+#   success     == false -> failure
+#   tool_response present, no failure signal -> ok (Read/Edit/Write/most MCP)
+#   no tool_response at all -> unknown
+compute_outcome() {
+  if   [ "$interrupted" = "true" ];  then printf 'interrupted'
+  elif [ "$success" = "false" ];     then printf 'failure'
+  elif [ -n "$response_seen" ];      then printf 'ok'
+  else                                    printf 'unknown'
+  fi
+}
+
+# model_family <resolvedModel>: print the low-cardinality family and drop the
+# context-window marker (e.g. claude-opus-4-8[1m] -> opus). Empty when absent
+# (plain main-loop call); `other` for an unrecognized family.
+model_family() {
+  case "$1" in
+    "")       printf '' ;;
+    *opus*)   printf 'opus' ;;
+    *sonnet*) printf 'sonnet' ;;
+    *haiku*)  printf 'haiku' ;;
+    *fable*)  printf 'fable' ;;
+    *)        printf 'other' ;;
+  esac
+}
+
+# read_skills_version: skills/CLI co-version from version-manifest.json (NOT
+# git, NOT the plugin package version). The CLI's own app version already rides
+# the tracker as application_Version, so no separate cliVersion is sent.
+read_skills_version() {
+  grep -oE '"skillsVersion"[[:space:]]*:[[:space:]]*"[^"]*"' \
+    "${CLAUDE_PLUGIN_ROOT:-.}/version-manifest.json" 2>/dev/null \
+    | head -1 | sed 's/.*"\([^"]*\)"$/\1/'
+}
+
+# san: sanitize free-ish text to keep the assembled JSON valid and bounded.
+# Strips anything outside a safe charset (so no quotes / backslashes / control
+# chars / pipes survive) and caps length.
+san() { printf '%s' "$1" | tr -c 'A-Za-z0-9:._/ -' '_' | cut -c1-120; }
+
+# build_event_json: assemble the canonical, ordered, flat JSON from the
+# (already sanitized) field globals + dur_json + SCHEMA_VERSION. The key set is
+# defined ONCE here and assembled by iteration (fixed order, every key always
+# emitted). Each row is `name|type|value`: `s` -> JSON string, `n` -> JSON
+# number/literal. Sanitized values cannot contain `|` (san maps it to `_`).
+build_event_json() {
+  local spec json sep fkey ftyp fval
+  spec="schemaVersion|n|$SCHEMA_VERSION
+toolName|s|$tool
+skillName|s|$skill_name
+uipSubcommand|s|$uip_subcommand
+fileExtension|s|$file_ext
+environment|s|$env_name
+baseUrl|s|$base_url
+outcome|s|$outcome
+permissionMode|s|$permission_mode
+effortLevel|s|$effort_level
+skillsVersion|s|$skills_ver
+toolUseId|s|$tool_use_id
+sessionId|s|$session_id
+subagentModel|s|$subagent_model
+subagentType|s|$subagent_type
+agentType|s|$agent_type
+durationMs|n|$dur_json"
+  json="{"; sep=""
+  while IFS='|' read -r fkey ftyp fval; do
+    [ -n "$fkey" ] || continue
+    case "$ftyp" in
+      n) json="$json$sep\"$fkey\":$fval" ;;
+      *) json="$json$sep\"$fkey\":\"$fval\"" ;;
+    esac
+    sep=","
+  done <<EOF
+$spec
+EOF
+  printf '%s}' "$json"
+}
+
+# --- main ------------------------------------------------------------------
+main() {
+  # Send only when telemetry is explicitly NOT disabled (=0). `uip track`
+  # enforces the same gate on its side; we short-circuit here too.
+  [ "${UIPATH_TELEMETRY_DISABLED:-1}" = "0" ] || exit 0
+
+  payload="$(cat)"
+  read_fields "$(printf '%s' "$payload" | extract_fields)"
+
+  [ "$event" = "PostToolUse" ] || exit 0
+  is_uipath_call || exit 0
+
+  resolve_environment
+  derive_fields
+
+  outcome="$(compute_outcome)"
+  # durationMs is a JSON number. Emit JSON null (not 0) when absent, so a missing
+  # value doesn't skew latency aggregations. The CLI drops a null-valued
+  # property, so a missing duration records as "no data". Stays unquoted.
+  case "$duration_ms" in ''|*[!0-9]*) dur_json="null" ;; *) dur_json="$duration_ms" ;; esac
+  subagent_model="$(model_family "$resolved_model")"
+  skills_ver="$(read_skills_version)"
+
+  # Sanitize every string field before assembly.
+  tool="$(san "$tool")"
+  skill_name="$(san "$skill_name")"
+  uip_subcommand="$(san "$uip_subcommand")"
+  file_ext="$(san "$file_ext")"
+  env_name="$(san "$env_name")"
+  base_url="$(san "$base_url")"
+  outcome="$(san "$outcome")"
+  permission_mode="$(san "$permission_mode")"
+  effort_level="$(san "$effort_level")"
+  skills_ver="$(san "$skills_ver")"
+  tool_use_id="$(san "$tool_use_id")"
+  session_id="$(san "$session_id")"
+  subagent_model="$(san "$subagent_model")"
+  subagent_type="$(san "$subagent_type")"
+  agent_type="$(san "$agent_type")"
+
+  # Hand off to the CLI telemetry tracker. The CLI hard-codes the event name
+  # (uip.skills.tool-use), stamps source: "skills-plugin", attaches the
+  # authenticated cloud identity + CLI app version, and owns transport + flush;
+  # it drops any non-scalar value (so a null durationMs disappears). Send no
+  # `event` key, no envelope, and no `source` (the CLI overrides it).
+  #
+  # Detached subshell ( cmd & ) survives this hook's exit so the agent never
+  # waits. `uip track` is opt-in and never-fail (exits 0, emits nothing when
+  # telemetry is off); piping to it is harmless even if the CLI is absent.
+  ( printf '%s' "$(build_event_json)" | uip track >/dev/null 2>&1 & )
+
+  exit 0
+}
+
+main

package/hooks/suggest-permissions.sh

@@ -9,6 +9,12 @@ if [ -z "${CLAUDE_PLUGIN_ROOT:-}" ]; then
   exit 0
 fi
 
+# Codex exposes Claude-compatible plugin environment variables for hook
+# compatibility. This nudge is Claude-specific, so keep Codex sessions silent.
+if [ -n "${PLUGIN_ROOT:-}" ]; then
+  exit 0
+fi
+
 # Candidate settings files, most-to-least specific.
 candidates=()
 if [ -n "${CLAUDE_PROJECT_DIR:-}" ]; then

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uipath/skills",
-  "version": "1.196.0",
+  "version": "1.197.0-preview.0",
   "description": "UiPath agent skills for Claude Code, Codex, Cursor, Copilot, Gemini and OpenCode — RPA, UI automation, UI testing, coded agents/apps/workflows, and troubleshooting. Distributed as the UiPath Claude Code plugin.",
   "author": {
     "name": "UiPath"