@uipath/uipath-typescript 1.3.10 → 1.4.0

package/dist/index.cjs

@@ -4020,7 +4020,7 @@ object({
     secret: string().optional(),
     clientId: string().optional(),
     redirectUri: string().url().optional(),
-    scope: string().optional()
+    scope: string().optional(),
 });
 class UiPathConfig {
     constructor(options) {
@@ -4071,6 +4071,32 @@ class ExecutionContext {
  */
 const isBrowser = typeof window !== 'undefined' && typeof window.document !== 'undefined';
 const isInActionCenter = isBrowser && window.self != window.top && window.location.href.includes('source=ActionCenter');
+const _params = isBrowser ? new URLSearchParams(window.location.search) : null;
+/**
+ * True when the coded app has been loaded inside a host frame that explicitly
+ * opted into token delegation by adding `?host=embed` to the iframe src URL.
+ */
+const isHostEmbedded = isBrowser && window.self !== window.top && _params?.get('host') === 'embed';
+/**
+ * The validated parent origin, read from the `?basedomain=` query param set
+ * by the embedding host in the iframe src URL.
+ * Mirrors the same mechanism used by ActionCenterTokenManager.
+ * Non-null only when `?host=embed` is present and `?basedomain=` is a valid URL.
+ */
+const embeddingOrigin = (() => {
+    if (!isHostEmbedded)
+        return null;
+    const basedomain = _params?.get('basedomain');
+    if (!basedomain)
+        return null;
+    try {
+        return new URL(basedomain).origin;
+    }
+    catch {
+        console.warn('embeddingOrigin: basedomain query param is not a valid URL', basedomain);
+        return null;
+    }
+})();
 
 /**
  * Session storage keys used by the auth module
@@ -4480,6 +4506,7 @@ const ORCHESTRATOR_BASE = 'orchestrator_';
 const PIMS_BASE = 'pims_';
 const DATAFABRIC_BASE = 'datafabric_';
 const IDENTITY_BASE = 'identity_';
+const LLMOPS_BASE = 'llmopstenant_';
 const INSIGHTS_RTM_BASE = 'insightsrtm_';
 
 /**
@@ -4572,7 +4599,7 @@ const MAESTRO_ENDPOINTS = {
     INSTANCES: {
         GET_ALL: `${PIMS_BASE}/api/v1/instances`,
         GET_BY_ID: (instanceId) => `${PIMS_BASE}/api/v1/instances/${instanceId}`,
-        GET_EXECUTION_HISTORY: (instanceId) => `${PIMS_BASE}/api/v1/spans/${instanceId}`,
+        GET_ELEMENT_EXECUTIONS: (instanceId) => `${PIMS_BASE}/api/v1/instances/${instanceId}/element-executions`,
         GET_BPMN: (instanceId) => `${PIMS_BASE}/api/v1/instances/${instanceId}/bpmn`,
         GET_VARIABLES: (instanceId) => `${PIMS_BASE}/api/v1/instances/${instanceId}/variables`,
         CANCEL: (instanceId) => `${PIMS_BASE}/api/v1/instances/${instanceId}/cancel`,
@@ -4584,6 +4611,9 @@ const MAESTRO_ENDPOINTS = {
         GET_BY_PROCESS: (processKey) => `${PIMS_BASE}/api/v1/incidents/process/${processKey}`,
         GET_BY_INSTANCE: (instanceId) => `${PIMS_BASE}/api/v1/instances/${instanceId}/incidents`,
     },
+    TRACES: {
+        GET_SPANS: (traceId) => `${LLMOPS_BASE}/api/Traces/spans?traceId=${traceId}`,
+    },
     CASES: {
         GET_CASE_JSON: (instanceId) => `${PIMS_BASE}/api/v1/cases/${instanceId}/case-json`,
         GET_ELEMENT_EXECUTIONS: (instanceId) => `${PIMS_BASE}/api/v1/element-executions/case-instances/${instanceId}`,
@@ -4598,10 +4628,14 @@ const MAESTRO_ENDPOINTS = {
         TOP_PROCESSES_BY_RUN_COUNT: `${INSIGHTS_RTM_BASE}/agenticInstanceStatus/TopProcessesByRunCount`,
         /** Top processes ranked by failure count */
         TOP_PROCESSES_WITH_FAILURE: `${INSIGHTS_RTM_BASE}/agenticInstanceStatus/TopProcesseswithFailure`,
+        /** Top elements ranked by failure count */
+        TOP_ELEMENTS_WITH_FAILURE: `${INSIGHTS_RTM_BASE}/agenticInstanceStatus/TopElementswithFailure`,
         /** Instance status aggregated by date for time-series charts */
         INSTANCE_STATUS_BY_DATE: `${INSIGHTS_RTM_BASE}/agenticInstanceStatus/InstanceStatusByDate`,
         /** Top processes ranked by total duration */
         TOP_PROCESSES_BY_DURATION: `${INSIGHTS_RTM_BASE}/agenticInstanceStatus/TopProcessesByDuration`,
+        /** Element count by status for agentic instances (process and case) */
+        ELEMENT_COUNT_BY_STATUS: `${INSIGHTS_RTM_BASE}/agenticInstanceStatus/ElementCountByStatus`,
     },
 };
 
@@ -4676,6 +4710,96 @@ var ActionCenterEventNames;
 })(ActionCenterEventNames || (ActionCenterEventNames = {}));
 
 const AUTHENTICATION_TIMEOUT = 8000;
+const ALLOWED_HOST_ORIGINS = new Set([
+    'https://alpha.uipath.com',
+    'https://staging.uipath.com',
+    'https://cloud.uipath.com',
+]);
+/**
+ * Returns true if the origin is a trusted UiPath host that may initiate
+ * token delegation. Mirrors the same allowlist used by ActionCenterTokenManager.
+ */
+function isValidHostOrigin(origin) {
+    if (!origin)
+        return false;
+    if (ALLOWED_HOST_ORIGINS.has(origin))
+        return true;
+    try {
+        return new URL(origin).hostname === 'localhost';
+    }
+    catch {
+        console.warn('isValidHostOrigin: received a malformed origin URL', origin);
+        return false;
+    }
+}
+function isTokenExpired(tokenInfo) {
+    if (!tokenInfo?.expiresAt)
+        return true;
+    return new Date() >= tokenInfo.expiresAt;
+}
+/**
+ * Waits for the next window message that satisfies `filter`.
+ * Rejects if the AbortSignal fires before a matching message arrives.
+ */
+function waitForMessage(filter, signal) {
+    return new Promise((resolve, reject) => {
+        const handler = (event) => {
+            if (!filter(event))
+                return;
+            window.removeEventListener('message', handler);
+            resolve(event);
+        };
+        signal.addEventListener('abort', () => {
+            window.removeEventListener('message', handler);
+            reject(signal.reason);
+        }, { once: true });
+        window.addEventListener('message', handler);
+    });
+}
+/**
+ * Sends a token-refresh request to a parent host frame and waits for the
+ * response. Handles timeout, origin filtering, and listener cleanup.
+ *
+ * Both ActionCenterTokenManager and EmbeddedTokenManager delegate to this
+ * function; they differ only in the event names and message shape they use.
+ */
+function requestHostToken(options) {
+    const { pinnedOrigin, sendRequest, responseEventType, extractToken, onTokenRefreshed } = options;
+    const controller = new AbortController();
+    const cancel = () => controller.abort(new AuthenticationError({
+        message: 'Token refresh cancelled',
+        statusCode: HttpStatus.UNAUTHORIZED,
+    }));
+    const promise = (async () => {
+        const timer = setTimeout(() => controller.abort(new AuthenticationError({
+            message: `Token refresh timed out after ${AUTHENTICATION_TIMEOUT}ms waiting for host response`,
+            statusCode: HttpStatus.UNAUTHORIZED,
+        })), AUTHENTICATION_TIMEOUT);
+        try {
+            // Register listener before sending — avoids any race between send and response
+            const responsePromise = waitForMessage(event => event.origin === pinnedOrigin && event.data?.eventType === responseEventType, controller.signal);
+            sendRequest();
+            const event = await responsePromise;
+            const token = extractToken(event.data);
+            if (!token) {
+                throw new AuthenticationError({
+                    message: 'Host responded but did not include a valid access token',
+                    statusCode: HttpStatus.UNAUTHORIZED,
+                });
+            }
+            // type: 'secret' intentionally prevents the SDK's internal OAuth refresh path
+            // from running — the host manager owns the refresh cycle via requestHostToken.
+            // This mirrors the same pattern used by ActionCenterTokenManager.
+            onTokenRefreshed({ token: token.accessToken, type: 'secret', expiresAt: token.expiresAt });
+            return token.accessToken;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    })();
+    return { promise, cancel };
+}
+
 class ActionCenterTokenManager {
     constructor(config, onTokenRefreshed) {
         this.config = config;
@@ -4684,84 +4808,334 @@ class ActionCenterTokenManager {
         this.refreshPromise = null;
     }
     async refreshAccessToken(tokenInfo) {
-        if (!this.isTokenExpired(tokenInfo)) {
+        if (!isTokenExpired(tokenInfo)) {
             return tokenInfo.token;
         }
         if (this.refreshPromise) {
             return this.refreshPromise;
         }
-        this.refreshPromise = new Promise((resolve, reject) => {
-            const content = {
+        const parentOrigin = this.parentOrigin;
+        if (!parentOrigin) {
+            return Promise.reject(new AuthenticationError({
+                message: 'Cannot refresh token: basedomain query parameter is missing',
+                statusCode: HttpStatus.UNAUTHORIZED,
+            }));
+        }
+        // Guard before requestHostToken registers the inbound listener — an untrusted
+        // basedomain would otherwise leave the listener live for the full timeout window,
+        // accepting a forged TOKENREFRESHED from that origin.
+        if (!isValidHostOrigin(parentOrigin)) {
+            return Promise.reject(new AuthenticationError({
+                message: 'Cannot refresh token: basedomain is not a trusted UiPath host origin',
+                statusCode: HttpStatus.UNAUTHORIZED,
+            }));
+        }
+        const { promise } = requestHostToken({
+            pinnedOrigin: parentOrigin,
+            sendRequest: () => this.sendMessageToParent(ActionCenterEventNames.REFRESHTOKEN, {
                 clientId: this.config.clientId,
                 scope: this.config.scope,
-            };
-            this.sendMessageToParent(ActionCenterEventNames.REFRESHTOKEN, content);
-            const messageListener = (event) => {
-                if (event.origin !== this.parentOrigin)
-                    return;
-                if (event.data?.eventType !== ActionCenterEventNames.TOKENREFRESHED)
-                    return;
-                clearTimeout(timer);
-                if (event.data?.content?.token) {
-                    const { accessToken, expiresAt } = event.data.content.token;
-                    this.onTokenRefreshed({ token: accessToken, type: 'secret', expiresAt });
-                    resolve(accessToken);
-                }
-                else {
-                    reject(new AuthenticationError({
-                        message: 'Failed to fetch access token',
-                        statusCode: HttpStatus.UNAUTHORIZED,
-                    }));
-                }
-                this.refreshPromise = null;
-                this.cleanup(messageListener);
-            };
-            const timer = setTimeout(() => {
-                reject(new AuthenticationError({
-                    message: 'Failed to fetch access token',
-                    statusCode: HttpStatus.UNAUTHORIZED,
-                }));
-                this.refreshPromise = null;
-                this.cleanup(messageListener);
-            }, AUTHENTICATION_TIMEOUT);
-            window.addEventListener('message', messageListener);
+            }),
+            responseEventType: ActionCenterEventNames.TOKENREFRESHED,
+            extractToken: (data) => {
+                const token = data?.content?.token;
+                if (!token?.accessToken)
+                    return undefined;
+                return { accessToken: token.accessToken, expiresAt: token.expiresAt };
+            },
+            onTokenRefreshed: this.onTokenRefreshed,
         });
-        return this.refreshPromise;
-    }
-    isTokenExpired(tokenInfo) {
-        if (!tokenInfo?.expiresAt) {
-            return true;
+        this.refreshPromise = promise;
+        try {
+            return await this.refreshPromise;
+        }
+        finally {
+            this.refreshPromise = null;
         }
-        return new Date() >= tokenInfo.expiresAt;
     }
     sendMessageToParent(eventType, content) {
-        if (window.parent && this.isValidOrigin(this.parentOrigin)) {
+        if (window.parent && isValidHostOrigin(this.parentOrigin)) {
             try {
                 window.parent.postMessage({ eventType, content }, this.parentOrigin);
             }
             catch (error) {
-                console.warn('Failed to send message to Action Center', JSON.stringify(error));
+                console.warn('ActionCenterTokenManager: postMessage to host failed', JSON.stringify(error));
             }
         }
     }
-    cleanup(messageListener) {
-        window.removeEventListener('message', messageListener);
+}
+
+/**
+ * Event names and payload types for the UIP.* postMessage protocol used
+ * when a coded app is embedded inside a UiPath host (e.g. Governance Portal, Insights UI).
+ *
+ * Flow — app-initiated, mirrors the Action Center protocol:
+ *  App → Host: UIP.refreshToken   (requests a token; carries clientId + scope
+ *                                   so the host knows which OAuth client to use)
+ *  Host → App: UIP.tokenRefreshed (delivers the access token)
+ *
+ * Detection: the host signals embedding via `?host=embed&basedomain=<origin>` in
+ * the iframe src URL. No explicit init message from the host is required.
+ */
+var UipEmbeddedEventNames;
+(function (UipEmbeddedEventNames) {
+    UipEmbeddedEventNames["REFRESH_TOKEN"] = "UIP.refreshToken";
+    UipEmbeddedEventNames["TOKEN_REFRESHED"] = "UIP.tokenRefreshed";
+})(UipEmbeddedEventNames || (UipEmbeddedEventNames = {}));
+
+function parseExpiresAt(raw) {
+    const d = new Date(raw);
+    if (isNaN(d.getTime())) {
+        console.warn('EmbeddedTokenManager: host sent a malformed expiresAt value — treating token as already expired', raw);
+        return new Date(0);
+    }
+    return d;
+}
+function extractToken(data) {
+    const token = data?.content?.token;
+    if (!token?.accessToken)
+        return undefined;
+    return { accessToken: token.accessToken, expiresAt: parseExpiresAt(token.expiresAt) };
+}
+/**
+ * Handles token delegation for coded apps embedded inside a UiPath host
+ * (e.g. Governance Portal, Insights UI).
+ *
+ * Detection: the host signals embedding via `?host=embed&basedomain=<origin>`
+ * in the iframe src URL. `parentOrigin` is read from `?basedomain=` and validated
+ * against the trusted UiPath host allowlist before this manager is constructed.
+ * This mirrors the mechanism used by ActionCenterTokenManager.
+ *
+ * On every token expiry the SDK sends `UIP.refreshToken` with `clientId` and
+ * `scope`; the host performs silent SSO and responds with `UIP.tokenRefreshed`.
+ */
+class EmbeddedTokenManager {
+    /**
+     * @param parentOrigin Validated UiPath host origin from the `?basedomain=` query parameter.
+     * @param config SDK configuration — `clientId` and `scope` are required and forwarded
+     *   in every `UIP.refreshToken` request so the host knows which OAuth client to use.
+     * @param onTokenRefreshed Called with the refreshed TokenInfo so the caller
+     *   can persist it in the execution context.
+     * @throws {AuthenticationError} if `config.clientId` or `config.scope` are not set.
+     */
+    constructor(parentOrigin, config, onTokenRefreshed) {
+        this.parentOrigin = parentOrigin;
+        this.onTokenRefreshed = onTokenRefreshed;
+        this.refreshPromise = null;
+        this.cancelRefresh = null;
+        if (!config.clientId || !config.scope) {
+            throw new ValidationError({
+                message: 'EmbeddedTokenManager requires clientId and scope to be configured for host-delegated authentication',
+            });
+        }
+        this.clientId = config.clientId;
+        this.scope = config.scope;
     }
-    isValidOrigin(origin) {
-        const ALLOWED_ORIGINS = ['https://alpha.uipath.com', 'https://staging.uipath.com', 'https://cloud.uipath.com'];
-        if (!origin) {
-            return false;
+    async refreshAccessToken(tokenInfo) {
+        if (!isTokenExpired(tokenInfo)) {
+            return tokenInfo.token;
         }
-        if (ALLOWED_ORIGINS.includes(origin)) {
-            return true;
+        if (this.refreshPromise) {
+            return this.refreshPromise;
         }
+        const { promise, cancel } = requestHostToken({
+            pinnedOrigin: this.parentOrigin,
+            sendRequest: () => {
+                try {
+                    const message = {
+                        eventType: UipEmbeddedEventNames.REFRESH_TOKEN,
+                        content: { clientId: this.clientId, scope: this.scope },
+                    };
+                    window.parent.postMessage(message, this.parentOrigin);
+                }
+                catch (error) {
+                    console.warn('EmbeddedTokenManager: postMessage to host failed', error);
+                }
+            },
+            responseEventType: UipEmbeddedEventNames.TOKEN_REFRESHED,
+            extractToken,
+            onTokenRefreshed: this.onTokenRefreshed,
+        });
+        this.cancelRefresh = cancel;
+        this.refreshPromise = promise;
         try {
-            const url = new URL(origin);
-            return url.hostname === 'localhost';
+            return await this.refreshPromise;
         }
-        catch {
-            return false;
+        finally {
+            this.refreshPromise = null;
+            this.cancelRefresh = null;
+        }
+    }
+    /** Cancels any in-flight token-refresh request. */
+    destroy() {
+        this.cancelRefresh?.();
+    }
+}
+
+/**
+ * SDK Telemetry constants.
+ *
+ * Only the SDK's identity (version, service name, role name, …) lives
+ * here. The Application Insights connection string is injected into
+ * `@uipath/core-telemetry` itself at publish time, and the generic attribute
+ * keys (`Version`, `Service`, `CloudOrganizationName`, …) are owned by
+ * `@uipath/core-telemetry` and consumed there — they are not part of the
+ * SDK's public API.
+ */
+/** SDK version placeholder — patched by the SDK publish workflow. */
+const SDK_VERSION = '1.4.0';
+const CLOUD_ROLE_NAME = 'uipath-ts-sdk';
+const SDK_SERVICE_NAME = 'UiPath.TypeScript.Sdk';
+const SDK_LOGGER_NAME = 'uipath-ts-sdk-telemetry';
+const SDK_RUN_EVENT = 'Sdk.Run';
+
+/**
+ * UiPath TypeScript SDK Telemetry
+ *
+ * Constructs the SDK's own `TelemetryClient` and binds the SDK-local
+ * `track` / `trackEvent` to it. Each consumer of `@uipath/core-telemetry`
+ * does this independently, so events carry their own consumer's identity
+ * and tenant context.
+ */
+// Keyed by `CLOUD_ROLE_NAME` so every SDK subpath bundle resolves to the
+// same `TelemetryClient` instance at runtime. A single `initialize(...)`
+// from the `UiPath` constructor therefore wires up `@track` decorators
+// across every subpath bundle (`assets`, `feedback`, `tasks`, …).
+const sdkClient = coreTelemetry.getOrCreateClient(CLOUD_ROLE_NAME);
+const track = coreTelemetry.createTrack(sdkClient);
+const trackEvent = coreTelemetry.createTrackEvent(sdkClient);
+const telemetryClient = {
+    initialize(context) {
+        sdkClient.initialize({
+            sdkVersion: SDK_VERSION,
+            serviceName: SDK_SERVICE_NAME,
+            cloudRoleName: CLOUD_ROLE_NAME,
+            loggerName: SDK_LOGGER_NAME,
+            defaultEventName: SDK_RUN_EVENT,
+            context,
+        });
+    },
+    /**
+     * Sets the authenticated user's id so every subsequently emitted event
+     * carries it as `CloudUserId`.
+     */
+    setUserId(userId) {
+        sdkClient.setUserId(userId);
+    },
+};
+
+/**
+ * Base64 encoding/decoding
+ */
+/**
+ * Encodes a string to base64
+ * @param str - The string to encode
+ * @returns Base64 encoded string
+ */
+function encodeBase64(str) {
+    // TextEncoder for UTF-8 encoding (works in both browser and Node.js)
+    const encoder = new TextEncoder();
+    const data = encoder.encode(str);
+    // Convert Uint8Array to base64
+    if (isBrowser) {
+        // Browser environment
+        // Convert Uint8Array to binary string then to base64
+        const binaryString = Array.from(data, byte => String.fromCharCode(byte)).join('');
+        return btoa(binaryString);
+    }
+    else {
+        // Node.js environment
+        return Buffer.from(data).toString('base64');
+    }
+}
+/**
+ * Decodes a base64 string
+ * @param base64 - The base64 string to decode
+ * @returns Decoded string
+ */
+function decodeBase64(base64) {
+    let bytes;
+    if (isBrowser) {
+        // Browser environment
+        const binaryString = atob(base64);
+        bytes = new Uint8Array(binaryString.length);
+        for (let i = 0; i < binaryString.length; i++) {
+            bytes[i] = binaryString.charCodeAt(i);
+        }
+    }
+    else {
+        // Node.js environment
+        bytes = new Uint8Array(Buffer.from(base64, 'base64'));
+    }
+    // TextDecoder for UTF-8 decoding (works in both browser and Node.js)
+    const decoder = new TextDecoder();
+    return decoder.decode(bytes);
+}
+
+/**
+ * Encodes a folder path for the `X-UIPATH-FolderPath-Encoded` header.
+ *
+ * Orchestrator decodes this header as **base64-encoded UTF-16 LE bytes**
+ * (see `HttpHeadersProviderExtensions.GetDecoded` + `OrganizationUnitProvider`
+ * in the Orchestrator repo, which call `Encoding.Unicode.GetString(...)`).
+ * URL-encoding is NOT what the server expects — it must be base64-of-UTF-16-LE
+ * bytes.
+ *
+ * @param folderPath - The folder path (e.g. 'Shared/Finance')
+ * @returns Base64 string suitable for the `X-UIPATH-FolderPath-Encoded` header
+ */
+function encodeFolderPathHeader(folderPath) {
+    // Force little-endian regardless of host byte order. `Uint16Array` viewed
+    // as `Uint8Array` would use the host's native order — correct on LE hosts
+    // (x86/ARM-LE) but wrong on BE hosts. `DataView.setUint16(..., true)`
+    // pins LE.
+    const buf = new ArrayBuffer(folderPath.length * 2);
+    const view = new DataView(buf);
+    for (let i = 0; i < folderPath.length; i++) {
+        view.setUint16(i * 2, folderPath.charCodeAt(i), true);
+    }
+    const bytes = new Uint8Array(buf);
+    let binary = '';
+    for (let i = 0; i < bytes.byteLength; i++) {
+        binary += String.fromCharCode(bytes[i]);
+    }
+    // btoa is browser-native; Node 16+ also has it as a global
+    return btoa(binary);
+}
+
+/**
+ * JWT decoding helpers — payload inspection only, no signature verification.
+ */
+const BASE64URL_DASH_RE = /-/g;
+const BASE64URL_UNDERSCORE_RE = /_/g;
+/**
+ * Converts a base64url-encoded JWT segment to standard base64 with padding.
+ */
+function base64UrlToBase64(value) {
+    const base64 = value
+        .replace(BASE64URL_DASH_RE, '+')
+        .replace(BASE64URL_UNDERSCORE_RE, '/');
+    return base64.padEnd(base64.length + ((4 - (base64.length % 4)) % 4), '=');
+}
+/**
+ * Extracts the user id (`sub` claim) from a JWT access token payload.
+ * Returns an empty string for opaque (non-JWT) tokens or malformed payloads.
+ *
+ * @param token - The access token to inspect
+ * @returns The user id, or an empty string if it cannot be extracted
+ */
+function extractUserIdFromToken(token) {
+    try {
+        const payload = token.split('.')[1];
+        if (!payload) {
+            return '';
         }
+        const claims = JSON.parse(decodeBase64(base64UrlToBase64(payload)));
+        const sub = claims['sub'];
+        return typeof sub === 'string' && sub ? sub : '';
+    }
+    catch {
+        return '';
     }
 }
 
@@ -4784,10 +5158,15 @@ class TokenManager {
         this.isOAuth = isOAuth;
         this.refreshPromise = null;
         this.actionCenterTokenManager = null;
+        this.embeddedTokenManager = null;
         if (isInActionCenter) {
             this.actionCenterTokenManager = new ActionCenterTokenManager(config, (tokenInfo) => this.setToken(tokenInfo));
             this.isOAuth = false;
         }
+        else if (isHostEmbedded && embeddingOrigin && isValidHostOrigin(embeddingOrigin)) {
+            this.embeddedTokenManager = new EmbeddedTokenManager(embeddingOrigin, config, tokenInfo => this.setToken(tokenInfo));
+            this.isOAuth = false;
+        }
     }
     /**
      * Checks if a token is expired
@@ -4818,6 +5197,10 @@ class TokenManager {
         if (this.actionCenterTokenManager) {
             return await this.actionCenterTokenManager.refreshAccessToken(tokenInfo);
         }
+        // Generic embedded path — active whenever the app is embedded in a UiPath host page
+        if (this.embeddedTokenManager) {
+            return await this.embeddedTokenManager.refreshAccessToken(tokenInfo);
+        }
         // For secret-based tokens, they never expire
         if (tokenInfo.type === 'secret') {
             return tokenInfo.token;
@@ -4956,6 +5339,13 @@ class TokenManager {
         }
         return true;
     }
+    /**
+     * Releases resources held by this instance.
+     * Must be called when the TokenManager is no longer needed to prevent listener leaks.
+     */
+    destroy() {
+        this.embeddedTokenManager?.destroy();
+    }
     /**
      * Clears the current token
      */
@@ -4977,6 +5367,7 @@ class TokenManager {
      */
     _updateExecutionContext(tokenInfo) {
         this.executionContext.set('tokenInfo', tokenInfo);
+        telemetryClient.setUserId(extractUserIdFromToken(tokenInfo.token));
     }
     /**
      * Refreshes the access token using the stored refresh token.
@@ -5006,6 +5397,9 @@ class TokenManager {
      * Internal method to perform the actual token refresh
      */
     async _doRefreshToken() {
+        // Destructure before the type guard — hasOAuthConfig narrows this.config to
+        // { clientId, redirectUri, scope } which does not include BaseConfig fields.
+        const { orgName, baseUrl } = this.config;
         // Check if we're in OAuth flow
         if (!hasOAuthConfig(this.config)) {
             throw new Error('refreshAccessToken is only available in OAuth flow');
@@ -5015,13 +5409,12 @@ class TokenManager {
         if (!tokenInfo?.refreshToken) {
             throw new Error('No refresh token available. User may need to re-authenticate.');
         }
-        const orgName = this.config.orgName;
         const body = new URLSearchParams({
             grant_type: 'refresh_token',
             client_id: this.config.clientId,
             refresh_token: tokenInfo.refreshToken
         });
-        const response = await fetch(`${this.config.baseUrl}/${orgName}/identity_/connect/token`, {
+        const response = await fetch(`${baseUrl}/${orgName}/identity_/connect/token`, {
             method: 'POST',
             headers: {
                 'Content-Type': 'application/x-www-form-urlencoded'
@@ -5481,51 +5874,6 @@ function normalizeBaseUrl(url) {
     return url.endsWith('/') ? url.slice(0, -1) : url;
 }
 
-/**
- * SDK Telemetry constants.
- *
- * Only the SDK's identity (version, service name, role name, …) lives
- * here. The Application Insights connection string is injected into
- * `@uipath/core-telemetry` itself at publish time, and the generic attribute
- * keys (`Version`, `Service`, `CloudOrganizationName`, …) are owned by
- * `@uipath/core-telemetry` and consumed there — they are not part of the
- * SDK's public API.
- */
-/** SDK version placeholder — patched by the SDK publish workflow. */
-const SDK_VERSION = '1.3.10';
-const CLOUD_ROLE_NAME = 'uipath-ts-sdk';
-const SDK_SERVICE_NAME = 'UiPath.TypeScript.Sdk';
-const SDK_LOGGER_NAME = 'uipath-ts-sdk-telemetry';
-const SDK_RUN_EVENT = 'Sdk.Run';
-
-/**
- * UiPath TypeScript SDK Telemetry
- *
- * Constructs the SDK's own `TelemetryClient` and binds the SDK-local
- * `track` / `trackEvent` to it. Each consumer of `@uipath/core-telemetry`
- * does this independently, so events carry their own consumer's identity
- * and tenant context.
- */
-// Keyed by `CLOUD_ROLE_NAME` so every SDK subpath bundle resolves to the
-// same `TelemetryClient` instance at runtime. A single `initialize(...)`
-// from the `UiPath` constructor therefore wires up `@track` decorators
-// across every subpath bundle (`assets`, `feedback`, `tasks`, …).
-const sdkClient = coreTelemetry.getOrCreateClient(CLOUD_ROLE_NAME);
-const track = coreTelemetry.createTrack(sdkClient);
-const trackEvent = coreTelemetry.createTrackEvent(sdkClient);
-const telemetryClient = {
-    initialize(context) {
-        sdkClient.initialize({
-            sdkVersion: SDK_VERSION,
-            serviceName: SDK_SERVICE_NAME,
-            cloudRoleName: CLOUD_ROLE_NAME,
-            loggerName: SDK_LOGGER_NAME,
-            defaultEventName: SDK_RUN_EVENT,
-            context,
-        });
-    },
-};
-
 /**
  * SDK Internals Registry - Internal registry for SDK instances
  *
@@ -5635,7 +5983,7 @@ function loadFromMetaTags() {
     return hasAnyValue ? config : null;
 }
 
-var _UiPath_instances, _UiPath_config, _UiPath_authService, _UiPath_initialized, _UiPath_partialConfig, _UiPath_multiLogin, _UiPath_metaFolderKey, _UiPath_initializeWithConfig, _UiPath_loadConfig;
+var _UiPath_instances, _UiPath_config, _UiPath_authService, _UiPath_initialized, _UiPath_partialConfig, _UiPath_multiLogin, _UiPath_metaFolderKey, _UiPath_metaOrgId, _UiPath_metaTenantId, _UiPath_initializeWithConfig, _UiPath_loadConfig;
 /**
  * UiPath - Core SDK class for authentication and configuration management.
  *
@@ -5680,9 +6028,18 @@ let UiPath$1 = class UiPath {
         // deployments). Not accepted via the public constructor; lives here so the
         // SDK can flow it through to BaseService.config without polluting BaseConfig.
         _UiPath_metaFolderKey.set(this, void 0);
+        // Org/tenant ids captured from the meta tags before the constructor config
+        // is merged in. The `uipath:org-name`/`uipath:tenant-name` meta tags always
+        // carry org/tenant *ids* in coded-app deployments, whereas a
+        // constructor-supplied `orgName`/`tenantName` may be actual names — so the
+        // telemetry ids must be read from the meta tags.
+        _UiPath_metaOrgId.set(this, void 0);
+        _UiPath_metaTenantId.set(this, void 0);
         // Load configuration from meta tags
         const configFromMetaTags = loadFromMetaTags();
         __classPrivateFieldSet(this, _UiPath_metaFolderKey, configFromMetaTags?.folderKey, "f");
+        __classPrivateFieldSet(this, _UiPath_metaOrgId, configFromMetaTags?.orgName, "f");
+        __classPrivateFieldSet(this, _UiPath_metaTenantId, configFromMetaTags?.tenantName, "f");
         // Merge configuration: constructor config overrides meta tags
         const mergedConfig = config ? { ...configFromMetaTags, ...config } : configFromMetaTags;
         if (mergedConfig && isCompleteConfig(mergedConfig)) {
@@ -5789,6 +6146,13 @@ let UiPath$1 = class UiPath {
     getToken() {
         return __classPrivateFieldGet(this, _UiPath_authService, "f")?.getToken();
     }
+    /**
+     * Releases resources held by this SDK instance.
+     * Cancels any in-flight token-refresh request. Call this when the coded app is unmounted.
+     */
+    destroy() {
+        __classPrivateFieldGet(this, _UiPath_authService, "f")?.getTokenManager()?.destroy();
+    }
     /**
      * Logout from the SDK, clearing all authentication state.
      * After calling this method, the user will need to re-initialize to authenticate again.
@@ -5811,7 +6175,7 @@ let UiPath$1 = class UiPath {
         __classPrivateFieldGet(this, _UiPath_authService, "f")?.updateToken(tokenInfo);
     }
 };
-_UiPath_config = new WeakMap(), _UiPath_authService = new WeakMap(), _UiPath_initialized = new WeakMap(), _UiPath_partialConfig = new WeakMap(), _UiPath_multiLogin = new WeakMap(), _UiPath_metaFolderKey = new WeakMap(), _UiPath_instances = new WeakSet(), _UiPath_initializeWithConfig = function _UiPath_initializeWithConfig(config) {
+_UiPath_config = new WeakMap(), _UiPath_authService = new WeakMap(), _UiPath_initialized = new WeakMap(), _UiPath_partialConfig = new WeakMap(), _UiPath_multiLogin = new WeakMap(), _UiPath_metaFolderKey = new WeakMap(), _UiPath_metaOrgId = new WeakMap(), _UiPath_metaTenantId = new WeakMap(), _UiPath_instances = new WeakSet(), _UiPath_initializeWithConfig = function _UiPath_initializeWithConfig(config) {
     // Validate and normalize the configuration
     validateConfig(config);
     const hasSecretAuth = hasSecretConfig(config);
@@ -5847,9 +6211,11 @@ _UiPath_config = new WeakMap(), _UiPath_authService = new WeakMap(), _UiPath_ini
         orgName: internalConfig.orgName,
         tenantName: internalConfig.tenantName
     };
-    // Initialize telemetry with SDK configuration
+    // Initialize telemetry with SDK configuration.
     telemetryClient.initialize({
         baseUrl: config.baseUrl,
+        orgId: __classPrivateFieldGet(this, _UiPath_metaOrgId, "f"),
+        tenantId: __classPrivateFieldGet(this, _UiPath_metaTenantId, "f"),
         orgName: config.orgName,
         tenantName: config.tenantName,
         clientId: hasOAuthAuth ? config.clientId : undefined,
@@ -5868,6 +6234,8 @@ _UiPath_config = new WeakMap(), _UiPath_authService = new WeakMap(), _UiPath_ini
     // Load from meta tags
     const metaConfig = loadFromMetaTags();
     __classPrivateFieldSet(this, _UiPath_metaFolderKey, metaConfig?.folderKey, "f");
+    __classPrivateFieldSet(this, _UiPath_metaOrgId, metaConfig?.orgName, "f");
+    __classPrivateFieldSet(this, _UiPath_metaTenantId, metaConfig?.tenantName, "f");
     // Merge with any partial config from constructor (constructor overrides meta tags)
     const merged = { ...metaConfig, ...__classPrivateFieldGet(this, _UiPath_partialConfig, "f") };
     if (!isCompleteConfig(merged)) {
@@ -6337,54 +6705,6 @@ function processODataArrayResponse(oDataResponse, successData) {
     };
 }
 
-/**
- * Base64 encoding/decoding
- */
-/**
- * Encodes a string to base64
- * @param str - The string to encode
- * @returns Base64 encoded string
- */
-function encodeBase64(str) {
-    // TextEncoder for UTF-8 encoding (works in both browser and Node.js)
-    const encoder = new TextEncoder();
-    const data = encoder.encode(str);
-    // Convert Uint8Array to base64
-    if (isBrowser) {
-        // Browser environment
-        // Convert Uint8Array to binary string then to base64
-        const binaryString = Array.from(data, byte => String.fromCharCode(byte)).join('');
-        return btoa(binaryString);
-    }
-    else {
-        // Node.js environment
-        return Buffer.from(data).toString('base64');
-    }
-}
-/**
- * Decodes a base64 string
- * @param base64 - The base64 string to decode
- * @returns Decoded string
- */
-function decodeBase64(base64) {
-    let bytes;
-    if (isBrowser) {
-        // Browser environment
-        const binaryString = atob(base64);
-        bytes = new Uint8Array(binaryString.length);
-        for (let i = 0; i < binaryString.length; i++) {
-            bytes[i] = binaryString.charCodeAt(i);
-        }
-    }
-    else {
-        // Node.js environment
-        bytes = new Uint8Array(Buffer.from(base64, 'base64'));
-    }
-    // TextDecoder for UTF-8 decoding (works in both browser and Node.js)
-    const decoder = new TextDecoder();
-    return decoder.decode(bytes);
-}
-
 /**
  * PaginationManager handles the conversion between uniform cursor-based pagination
  * and the specific pagination type for each service
@@ -7181,8 +7501,9 @@ class PaginationHelpers {
             });
         }
         // Extract and transform items from response
-        // Handle both plain array responses and envelope responses ({ value: [...], totalRecordCount: N })
-        const rawItems = Array.isArray(response.data) ? response.data : response.data?.[itemsField];
+        // Handle both plain array responses and envelope responses ({ value: [...], totalRecordCount: N }).
+        // itemsField may be a dotted path (e.g. 'data.agents') for nested envelopes.
+        const rawItems = Array.isArray(response.data) ? response.data : resolveNestedField(response.data, itemsField);
         const rawTotalCount = Array.isArray(response.data) ? undefined : resolveNestedField(response.data, totalCountField);
         const totalCount = typeof rawTotalCount === 'number' ? rawTotalCount : undefined;
         // Parse items - automatically handle JSON string responses
@@ -7228,7 +7549,7 @@ class PaginationHelpers {
                 getEndpoint: config.getEndpoint,
                 folderId,
                 headers: config.headers,
-                paginationParams: cursor ? { cursor, pageSize } : jumpToPage ? { jumpToPage, pageSize } : { pageSize },
+                paginationParams: cursor ? { cursor, pageSize } : jumpToPage !== undefined ? { jumpToPage, pageSize } : { pageSize },
                 additionalParams: prefixedOptions,
                 transformFn: config.transformFn,
                 method: config.method,
@@ -7431,6 +7752,8 @@ class BaseService {
                 // When true (default), converts pageNumber to a skip/offset value (e.g., page 3 with pageSize 10 → skip 20).
                 // When false, passes pageNumber directly as the offset param — used by APIs that accept a page number instead of a record offset.
                 const convertToSkip = paginationParams?.convertToSkip ?? true;
+                // When true, sends pageNumber - 1 (for 0-based APIs). Default false (1-based).
+                const zeroBased = paginationParams?.zeroBased ?? false;
                 requestParams[pageSizeParam] = limitedPageSize;
                 if (convertToSkip) {
                     if (params.pageNumber && params.pageNumber > 1) {
@@ -7438,7 +7761,8 @@ class BaseService {
                     }
                 }
                 else {
-                    requestParams[offsetParam] = params.pageNumber || 1;
+                    const sdkPageNumber = params.pageNumber || 1;
+                    requestParams[offsetParam] = zeroBased ? sdkPageNumber - 1 : sdkPageNumber;
                 }
                 {
                     requestParams[countParam] = true;
@@ -7467,8 +7791,9 @@ class BaseService {
         const totalCountField = fields.totalCountField || 'totalRecordCount';
         const continuationTokenField = fields.continuationTokenField || 'continuationToken';
         // Extract items and metadata
-        // Handle both plain array responses and envelope responses ({ value: [...], totalRecordCount: N })
-        const items = Array.isArray(response.data) ? response.data : (response.data[itemsField] || []);
+        // Handle both plain array responses and envelope responses ({ value: [...], totalRecordCount: N }).
+        // itemsField may be a dotted path (e.g. 'data.agents') for nested envelopes.
+        const items = Array.isArray(response.data) ? response.data : (resolveNestedField(response.data, itemsField) || []);
         const rawTotalCount = Array.isArray(response.data) ? undefined : resolveNestedField(response.data, totalCountField);
         const totalCount = typeof rawTotalCount === 'number' ? rawTotalCount : undefined;
         const continuationToken = response.data[continuationTokenField];
@@ -7551,12 +7876,12 @@ function createEntityMethods(entityData, service) {
                 throw new Error('Entity ID is undefined');
             return service.deleteRecordsById(entityData.id, recordIds, options);
         },
-        async deleteRecord(recordId) {
+        async deleteRecord(recordId, options) {
             if (!entityData.id)
                 throw new Error('Entity ID is undefined');
             if (!recordId)
                 throw new Error('Record ID is undefined');
-            return service.deleteRecordById(entityData.id, recordId);
+            return service.deleteRecordById(entityData.id, recordId, options);
         },
         async getAllRecords(options) {
             if (!entityData.id)
@@ -7570,30 +7895,30 @@ function createEntityMethods(entityData, service) {
                 throw new Error('Record ID is undefined');
             return service.getRecordById(entityData.id, recordId, options);
         },
-        async downloadAttachment(recordId, fieldName) {
+        async downloadAttachment(recordId, fieldName, options) {
             if (!entityData.id)
                 throw new Error('Entity ID is undefined');
-            return service.downloadAttachment(entityData.id, recordId, fieldName);
+            return service.downloadAttachment(entityData.id, recordId, fieldName, options);
         },
         async uploadAttachment(recordId, fieldName, file, options) {
             if (!entityData.id)
                 throw new Error('Entity ID is undefined');
             return service.uploadAttachment(entityData.id, recordId, fieldName, file, options);
         },
-        async deleteAttachment(recordId, fieldName) {
+        async deleteAttachment(recordId, fieldName, options) {
             if (!entityData.id)
                 throw new Error('Entity ID is undefined');
-            return service.deleteAttachment(entityData.id, recordId, fieldName);
+            return service.deleteAttachment(entityData.id, recordId, fieldName, options);
         },
         async queryRecords(options) {
             if (!entityData.id)
                 throw new Error('Entity ID is undefined');
             return service.queryRecordsById(entityData.id, options);
         },
-        async importRecords(file) {
+        async importRecords(file, options) {
             if (!entityData.id)
                 throw new Error('Entity ID is undefined');
-            return service.importRecordsById(entityData.id, file);
+            return service.importRecordsById(entityData.id, file, options);
         },
         async insert(data, options) {
             return this.insertRecord(data, options);
@@ -7604,10 +7929,10 @@ function createEntityMethods(entityData, service) {
         async getRecords(options) {
             return this.getAllRecords(options);
         },
-        async delete() {
+        async delete(options) {
             if (!entityData.id)
                 throw new Error('Entity ID is undefined');
-            return service.deleteById(entityData.id);
+            return service.deleteById(entityData.id, options);
         },
         async update(options) {
             if (!entityData.id)
@@ -7937,6 +8262,7 @@ class EntityService extends BaseService {
      * Gets entity metadata by entity ID with attached operation methods
      *
      * @param id - UUID of the entity
+     * @param options - Optional {@link EntityGetByIdOptions} (e.g. `folderKey` for folder-scoped entities)
      * @returns Promise resolving to entity metadata with schema information and operation methods
      *
      * @example
@@ -7946,6 +8272,9 @@ class EntityService extends BaseService {
      * const entities = new Entities(sdk);
      * const entity = await entities.getById("<entityId>");
      *
+     * // Folder-scoped: pass the entity's folder key
+     * const folderEntity = await entities.getById("<entityId>", { folderKey: "<folderKey>" });
+     *
      * // Call operations directly on the entity
      * const records = await entity.getAllRecords();
      *
@@ -7959,9 +8288,9 @@ class EntityService extends BaseService {
      * ]);
      * ```
      */
-    async getById(id) {
+    async getById(id, options) {
         // Get entity metadata
-        const response = await this.get(DATA_FABRIC_ENDPOINTS.ENTITY.GET_BY_ID(id));
+        const response = await this.get(DATA_FABRIC_ENDPOINTS.ENTITY.GET_BY_ID(id), { headers: createHeaders({ [FOLDER_KEY]: options?.folderKey }) });
         // Apply EntityMap transformations
         const metadata = transformData(response.data, EntityMap);
         // Transform metadata with field mappers
@@ -8004,9 +8333,14 @@ class EntityService extends BaseService {
      * ```
      */
     async getAllRecords(entityId, options) {
+        // folderKey is header-only — destructure it out so PaginationHelpers doesn't serialise it
+        // into the query string as $folderKey.
+        const { folderKey, ...rest } = options ?? {};
+        const downstreamOptions = options === undefined ? undefined : rest;
         return PaginationHelpers.getAll({
             serviceAccess: this.createPaginationServiceAccess(),
             getEndpoint: () => DATA_FABRIC_ENDPOINTS.ENTITY.GET_ENTITY_RECORDS(entityId),
+            headers: createHeaders({ [FOLDER_KEY]: folderKey }),
             pagination: {
                 paginationType: PaginationType.OFFSET,
                 itemsField: ENTITY_PAGINATION.ITEMS_FIELD,
@@ -8018,7 +8352,7 @@ class EntityService extends BaseService {
                 }
             },
             excludeFromPrefix: ['expansionLevel'] // Don't add ODATA prefix to expansionLevel
-        }, options);
+        }, downstreamOptions);
     }
     /**
      * Gets a single entity record by entity ID and record ID
@@ -8043,7 +8377,7 @@ class EntityService extends BaseService {
         const params = createParams({
             expansionLevel: options.expansionLevel
         });
-        const response = await this.get(DATA_FABRIC_ENDPOINTS.ENTITY.GET_RECORD_BY_ID(entityId, recordId), { params });
+        const response = await this.get(DATA_FABRIC_ENDPOINTS.ENTITY.GET_RECORD_BY_ID(entityId, recordId), { params, headers: createHeaders({ [FOLDER_KEY]: options.folderKey }) });
         return response.data;
     }
     /**
@@ -8075,7 +8409,7 @@ class EntityService extends BaseService {
         });
         const response = await this.post(DATA_FABRIC_ENDPOINTS.ENTITY.INSERT_BY_ID(id), data, {
             params,
-            ...options
+            headers: createHeaders({ [FOLDER_KEY]: options.folderKey }),
         });
         return response.data;
     }
@@ -8116,7 +8450,7 @@ class EntityService extends BaseService {
         });
         const response = await this.post(DATA_FABRIC_ENDPOINTS.ENTITY.BATCH_INSERT_BY_ID(id), data, {
             params,
-            ...options
+            headers: createHeaders({ [FOLDER_KEY]: options.folderKey }),
         });
         return response.data;
     }
@@ -8150,7 +8484,7 @@ class EntityService extends BaseService {
         });
         const response = await this.post(DATA_FABRIC_ENDPOINTS.ENTITY.UPDATE_RECORD_BY_ID(entityId, recordId), data, {
             params,
-            ...options
+            headers: createHeaders({ [FOLDER_KEY]: options.folderKey }),
         });
         return response.data;
     }
@@ -8192,7 +8526,7 @@ class EntityService extends BaseService {
         });
         const response = await this.post(DATA_FABRIC_ENDPOINTS.ENTITY.UPDATE_BY_ID(id), data, {
             params,
-            ...options
+            headers: createHeaders({ [FOLDER_KEY]: options.folderKey }),
         });
         return response.data;
     }
@@ -8224,7 +8558,7 @@ class EntityService extends BaseService {
         });
         const response = await this.post(DATA_FABRIC_ENDPOINTS.ENTITY.DELETE_BY_ID(id), recordIds, {
             params,
-            ...options
+            headers: createHeaders({ [FOLDER_KEY]: options.folderKey }),
         });
         return response.data;
     }
@@ -8236,6 +8570,7 @@ class EntityService extends BaseService {
      *
      * @param entityId - UUID of the entity
      * @param recordId - UUID of the record to delete
+     * @param options - Optional {@link EntityDeleteRecordByIdOptions} (e.g. `folderKey` for folder-scoped entities)
      * @returns Promise resolving to void on success
      * @example
      * ```typescript
@@ -8244,10 +8579,13 @@ class EntityService extends BaseService {
      * const entities = new Entities(sdk);
      *
      * await entities.deleteRecordById("<entityId>", "<recordId>");
+     *
+     * // Folder-scoped: pass the entity's folder key
+     * await entities.deleteRecordById("<entityId>", "<recordId>", { folderKey: "<folderKey>" });
      * ```
      */
-    async deleteRecordById(entityId, recordId) {
-        await this.delete(DATA_FABRIC_ENDPOINTS.ENTITY.DELETE_RECORD_BY_ID(entityId, recordId));
+    async deleteRecordById(entityId, recordId, options) {
+        await this.delete(DATA_FABRIC_ENDPOINTS.ENTITY.DELETE_RECORD_BY_ID(entityId, recordId), { headers: createHeaders({ [FOLDER_KEY]: options?.folderKey }) });
     }
     /**
      * Gets all entities in the system
@@ -8333,10 +8671,15 @@ class EntityService extends BaseService {
      * ```
      */
     async queryRecordsById(id, options) {
+        // folderKey is header-only — destructure it out so PaginationHelpers doesn't include
+        // it in the POST body alongside the query filters.
+        const { folderKey, ...rest } = options ?? {};
+        const downstreamOptions = options === undefined ? undefined : rest;
         return PaginationHelpers.getAll({
             serviceAccess: this.createPaginationServiceAccess(),
             getEndpoint: () => DATA_FABRIC_ENDPOINTS.ENTITY.QUERY_BY_ID(id),
             method: HTTP_METHODS.POST,
+            headers: createHeaders({ [FOLDER_KEY]: folderKey }),
             pagination: {
                 paginationType: PaginationType.OFFSET,
                 itemsField: ENTITY_PAGINATION.ITEMS_FIELD,
@@ -8348,13 +8691,14 @@ class EntityService extends BaseService {
                 }
             },
             excludeFromPrefix: ['expansionLevel', 'filterGroup', 'selectedFields', 'sortOptions', 'aggregates', 'groupBy']
-        }, options);
+        }, downstreamOptions);
     }
     /**
      * Imports records from a CSV file into an entity
      *
      * @param id - UUID of the entity
      * @param file - CSV file to import (Blob, File, or Uint8Array)
+     * @param options - Optional {@link EntityImportRecordsByIdOptions} (e.g. `folderKey` for folder-scoped entities)
      * @returns Promise resolving to import result with record counts
      *
      * @example
@@ -8375,10 +8719,12 @@ class EntityService extends BaseService {
      * if (result.errorFileLink) {
      *   console.log(`Error file link: ${result.errorFileLink}`);
      * }
+     *
+     * // Folder-scoped entity: pass the entity's folder key
+     * await entities.importRecordsById("<entityId>", fileInput.files[0], { folderKey: "<folderKey>" });
      * ```
-     * @internal
      */
-    async importRecordsById(id, file) {
+    async importRecordsById(id, file, options) {
         const formData = new FormData();
         if (file instanceof Uint8Array) {
             formData.append('file', new Blob([file.buffer]));
@@ -8386,7 +8732,7 @@ class EntityService extends BaseService {
         else {
             formData.append('file', file);
         }
-        const response = await this.post(DATA_FABRIC_ENDPOINTS.ENTITY.BULK_UPLOAD_BY_ID(id), formData);
+        const response = await this.post(DATA_FABRIC_ENDPOINTS.ENTITY.BULK_UPLOAD_BY_ID(id), formData, { headers: createHeaders({ [FOLDER_KEY]: options?.folderKey }) });
         return response.data;
     }
     /**
@@ -8395,6 +8741,7 @@ class EntityService extends BaseService {
      * @param entityId - UUID of the entity
      * @param recordId - UUID of the record containing the attachment
      * @param fieldName - Name of the File-type field containing the attachment
+     * @param options - Optional {@link EntityDownloadAttachmentOptions} (e.g. `folderKey` for folder-scoped entities)
      * @returns Promise resolving to Blob containing the file content
      *
      * @example
@@ -8413,11 +8760,15 @@ class EntityService extends BaseService {
      *
      * // Download attachment for a specific record and field
      * const blob = await entities.downloadAttachment(entityId, recordId, 'Documents');
+     *
+     * // Folder-scoped: pass the entity's folder key
+     * const blob = await entities.downloadAttachment(entityId, recordId, 'Documents', { folderKey: "<folderKey>" });
      * ```
      */
-    async downloadAttachment(entityId, recordId, fieldName) {
+    async downloadAttachment(entityId, recordId, fieldName, options) {
         const response = await this.get(DATA_FABRIC_ENDPOINTS.ENTITY.DOWNLOAD_ATTACHMENT(entityId, recordId, fieldName), {
-            responseType: RESPONSE_TYPES.BLOB
+            responseType: RESPONSE_TYPES.BLOB,
+            headers: createHeaders({ [FOLDER_KEY]: options?.folderKey }),
         });
         return response.data;
     }
@@ -8428,7 +8779,7 @@ class EntityService extends BaseService {
      * @param recordId - UUID of the record to upload the attachment to
      * @param fieldName - Name of the File-type field
      * @param file - File to upload (Blob, File, or Uint8Array)
-     * @param options - Optional {@link EntityUploadAttachmentOptions} (e.g. expansionLevel)
+     * @param options - Optional {@link EntityUploadAttachmentOptions} (e.g. `expansionLevel`, `folderKey` for folder-scoped entities)
      * @returns Promise resolving to {@link EntityUploadAttachmentResponse}
      *
      * @example
@@ -8447,6 +8798,9 @@ class EntityService extends BaseService {
      *
      * // Upload a file attachment
      * const response = await entities.uploadAttachment(entityId, recordId, 'Documents', file);
+     *
+     * // Folder-scoped entity: pass the entity's folder key
+     * await entities.uploadAttachment(entityId, recordId, 'Documents', file, { folderKey: "<folderKey>" });
      * ```
      */
     async uploadAttachment(entityId, recordId, fieldName, file, options) {
@@ -8458,7 +8812,10 @@ class EntityService extends BaseService {
             formData.append('file', file);
         }
         const params = createParams({ expansionLevel: options?.expansionLevel });
-        const response = await this.post(DATA_FABRIC_ENDPOINTS.ENTITY.UPLOAD_ATTACHMENT(entityId, recordId, fieldName), formData, { params });
+        const response = await this.post(DATA_FABRIC_ENDPOINTS.ENTITY.UPLOAD_ATTACHMENT(entityId, recordId, fieldName), formData, {
+            params,
+            headers: createHeaders({ [FOLDER_KEY]: options?.folderKey }),
+        });
         return response.data;
     }
     /**
@@ -8467,6 +8824,7 @@ class EntityService extends BaseService {
      * @param entityId - UUID of the entity
      * @param recordId - UUID of the record containing the attachment
      * @param fieldName - Name of the File-type field containing the attachment
+     * @param options - Optional {@link EntityDeleteAttachmentOptions} (e.g. `folderKey` for folder-scoped entities)
      * @returns Promise resolving to {@link EntityDeleteAttachmentResponse}
      *
      * @example
@@ -8485,10 +8843,13 @@ class EntityService extends BaseService {
      *
      * // Delete attachment for a specific record and field
      * await entities.deleteAttachment(entityId, recordId, 'Documents');
+     *
+     * // Folder-scoped: pass the entity's folder key
+     * await entities.deleteAttachment(entityId, recordId, 'Documents', { folderKey: "<folderKey>" });
      * ```
      */
-    async deleteAttachment(entityId, recordId, fieldName) {
-        const response = await this.delete(DATA_FABRIC_ENDPOINTS.ENTITY.DELETE_ATTACHMENT(entityId, recordId, fieldName));
+    async deleteAttachment(entityId, recordId, fieldName, options) {
+        const response = await this.delete(DATA_FABRIC_ENDPOINTS.ENTITY.DELETE_ATTACHMENT(entityId, recordId, fieldName), { headers: createHeaders({ [FOLDER_KEY]: options?.folderKey }) });
         return response.data;
     }
     /**
@@ -8538,10 +8899,6 @@ class EntityService extends BaseService {
      * @internal
      */
     async create(name, fields, options) {
-        this.validateName(name, 'entity');
-        for (const field of fields) {
-            this.validateName(field.fieldName, 'field');
-        }
         const opts = options ?? {};
         const payload = {
             ...(opts.description !== undefined && { description: opts.description }),
@@ -8555,23 +8912,27 @@ class EntityService extends BaseService {
                 externalFields: opts.externalFields ?? [],
             },
         };
-        const response = await this.post(DATA_FABRIC_ENDPOINTS.ENTITY.UPSERT, payload);
+        const response = await this.post(DATA_FABRIC_ENDPOINTS.ENTITY.UPSERT, payload, { headers: createHeaders({ [FOLDER_KEY]: opts.folderKey }) });
         return response.data;
     }
     /**
      * Deletes a Data Fabric entity and all its records
      *
      * @param id - UUID of the entity to delete
+     * @param options - Optional {@link EntityDeleteByIdOptions} (e.g. `folderKey` for folder-scoped entities)
      * @returns Promise resolving when the entity is deleted
      *
      * @example
      * ```typescript
      * await entities.deleteById("<entityId>");
+     *
+     * // Folder-scoped: pass the entity's folder key
+     * await entities.deleteById("<entityId>", { folderKey: "<folderKey>" });
      * ```
      * @internal
      */
-    async deleteById(id) {
-        await this.delete(DATA_FABRIC_ENDPOINTS.ENTITY.DELETE(id));
+    async deleteById(id, options) {
+        await this.delete(DATA_FABRIC_ENDPOINTS.ENTITY.DELETE(id), { headers: createHeaders({ [FOLDER_KEY]: options?.folderKey }) });
     }
     /**
      * Updates an existing Data Fabric entity — schema and/or metadata.
@@ -8618,6 +8979,12 @@ class EntityService extends BaseService {
      *     { id: "<fieldId>", lengthLimit: 1000 },
      *   ],
      * });
+     *
+     * // Folder-scoped entity: add a field to an entity that lives in a non-tenant folder
+     * await entities.updateById("<entityId>", {
+     *   folderKey: "<folderKey>",
+     *   addFields: [{ fieldName: "notes", type: EntityFieldDataType.MULTILINE_TEXT }],
+     * });
      * ```
      * @internal
      */
@@ -8633,7 +9000,7 @@ class EntityService extends BaseService {
                 ...(opts.displayName !== undefined && { displayName: opts.displayName }),
                 ...(opts.description !== undefined && { description: opts.description }),
                 ...(opts.isRbacEnabled !== undefined && { isRbacEnabled: opts.isRbacEnabled }),
-            });
+            }, { headers: createHeaders({ [FOLDER_KEY]: opts.folderKey }) });
         }
     }
     /**
@@ -8644,7 +9011,8 @@ class EntityService extends BaseService {
      * @private
      */
     async applySchemaUpdate(entityId, options) {
-        const entityResponse = await this.get(DATA_FABRIC_ENDPOINTS.ENTITY.GET_BY_ID(entityId));
+        const folderHeaders = createHeaders({ [FOLDER_KEY]: options.folderKey });
+        const entityResponse = await this.get(DATA_FABRIC_ENDPOINTS.ENTITY.GET_BY_ID(entityId), { headers: folderHeaders });
         const raw = entityResponse.data;
         // Carry forward existing non-system fields from GET response (skip system/primary-key fields)
         let fields = (raw.fields ?? [])
@@ -8684,6 +9052,7 @@ class EntityService extends BaseService {
                     ...(update.isUnique !== undefined && { isUnique: update.isUnique }),
                     ...(update.isRbacEnabled !== undefined && { isRbacEnabled: update.isRbacEnabled }),
                     ...(update.isEncrypted !== undefined && { isEncrypted: update.isEncrypted }),
+                    ...(update.isHiddenField !== undefined && { isHiddenField: update.isHiddenField }),
                     ...(update.defaultValue !== undefined && { defaultValue: update.defaultValue }),
                     ...(hasConstraintUpdate && f.sqlType && { sqlType: { ...f.sqlType, ...constraintUpdate } }),
                 };
@@ -8692,9 +9061,6 @@ class EntityService extends BaseService {
         // Build and append new fields
         const newFields = [];
         if (options.addFields?.length) {
-            for (const field of options.addFields) {
-                this.validateName(field.fieldName, 'field');
-            }
             newFields.push(...options.addFields.map(f => this.buildSchemaFieldPayload(f)));
         }
         await this.post(DATA_FABRIC_ENDPOINTS.ENTITY.UPSERT, {
@@ -8709,7 +9075,7 @@ class EntityService extends BaseService {
                 isInsightsEnabled: raw.isInsightsEnabled ?? false,
                 externalFields: raw.externalFields ?? [],
             },
-        });
+        }, { headers: folderHeaders });
     }
     /**
      * Orchestrates all field mapping transformations
@@ -8795,9 +9161,15 @@ class EntityService extends BaseService {
     }
     /** Converts a user-facing EntityCreateFieldOptions to the raw API field payload */
     buildSchemaFieldPayload(field) {
-        this.validateName(field.fieldName, 'field');
         const fieldType = field.type ?? exports.EntityFieldDataType.STRING;
         this.validateFieldConstraints(fieldType, field, field.fieldName);
+        const isRelationship = fieldType === exports.EntityFieldDataType.RELATIONSHIP;
+        const isFile = fieldType === exports.EntityFieldDataType.FILE;
+        if ((isRelationship || isFile) && (!field.referenceEntityId || !field.referenceFieldId)) {
+            throw new ValidationError({
+                message: `Field '${field.fieldName}' of type ${fieldType} requires both referenceEntityId and referenceFieldId (UUIDs of the target entity and field).`,
+            });
+        }
         const mapping = EntitySchemaFieldTypeMap[fieldType];
         return {
             name: field.fieldName,
@@ -8812,10 +9184,13 @@ class EntityService extends BaseService {
             isUnique: field.isUnique ?? false,
             isRbacEnabled: field.isRbacEnabled ?? false,
             isEncrypted: field.isEncrypted ?? false,
+            isHiddenField: field.isHiddenField ?? false,
             ...(field.defaultValue !== undefined && { defaultValue: field.defaultValue }),
             ...(field.choiceSetId !== undefined && { choiceSetId: field.choiceSetId }),
-            ...(field.referenceEntityName !== undefined && { referenceEntityName: field.referenceEntityName }),
-            ...(field.referenceFieldName !== undefined && { referenceFieldName: field.referenceFieldName }),
+            ...((isRelationship || isFile) && { isForeignKey: true }),
+            ...(isRelationship && { referenceType: exports.ReferenceType.ManyToOne }),
+            ...(field.referenceEntityId !== undefined && { referenceEntity: { id: field.referenceEntityId } }),
+            ...(field.referenceFieldId !== undefined && { referenceField: { id: field.referenceFieldId } }),
         };
     }
     /**
@@ -8919,24 +9294,7 @@ class EntityService extends BaseService {
                 return {};
         }
     }
-    validateName(name, context) {
-        if (name.length < 3 || name.length > 100 || !/^[a-zA-Z]\w*$/.test(name)) {
-            const suggestion = name.replace(/\W/g, '').replace(/^[0-9_]+/, '');
-            const defaultName = `My${context.charAt(0).toUpperCase() + context.slice(1)}`;
-            throw new ValidationError({
-                message: `Invalid ${context} name '${name}'. Must start with a letter, contain only letters, numbers, and underscores, 3–100 characters (e.g., "${suggestion || defaultName}").`
-            });
-        }
-        if (context === 'field' && EntityService.RESERVED_FIELD_NAMES.has(name)) {
-            throw new ValidationError({
-                message: `Field name '${name}' is reserved. Reserved names: ${[...EntityService.RESERVED_FIELD_NAMES].join(', ')}.`
-            });
-        }
-    }
 }
-EntityService.RESERVED_FIELD_NAMES = new Set([
-    'Id', 'CreatedBy', 'CreateTime', 'UpdatedBy', 'UpdateTime'
-]);
 __decorate([
     track('Entities.GetById')
 ], EntityService.prototype, "getById", null);
@@ -9309,6 +9667,13 @@ function createProcessMethods(processData, service) {
             if (!processData.folderKey)
                 throw new Error('Folder key is undefined');
             return service.getIncidents(processData.processKey, processData.folderKey);
+        },
+        getElementStats(startTime, endTime, packageVersion) {
+            if (!processData.processKey)
+                throw new Error('Process key is undefined');
+            if (!processData.packageId)
+                throw new Error('Package ID is undefined');
+            return service.getElementStats(processData.processKey, processData.packageId, startTime, endTime, packageVersion);
         }
     };
 }
@@ -9370,6 +9735,28 @@ async function fetchInstanceStatusTimeline(postFn, startTime, endTime, isCaseMan
     });
     return response.data ?? [];
 }
+/**
+ * Builds the request body for the ElementCountByStatus endpoint.
+ *
+ * @param processKey - Process key to filter by
+ * @param packageId - Package identifier
+ * @param startTime - Start of the time range to query
+ * @param endTime - End of the time range to query
+ * @param packageVersion - Package version to filter by
+ * @returns Request body for the ElementCountByStatus endpoint
+ * @internal
+ */
+function buildElementCountByStatusBody(processKey, packageId, startTime, endTime, packageVersion) {
+    return {
+        commonParams: {
+            processKey,
+            packageId,
+            startTime: startTime.getTime(),
+            endTime: endTime.getTime(),
+            version: packageVersion
+        }
+    };
+}
 
 /**
  * Maps fields for Incident entities
@@ -9534,7 +9921,9 @@ function createProcessInstanceMethods(instanceData, service) {
         async getExecutionHistory() {
             if (!instanceData.instanceId)
                 throw new Error('Process instance ID is undefined');
-            return service.getExecutionHistory(instanceData.instanceId);
+            if (!instanceData.folderKey)
+                throw new Error('Process instance folder key is undefined');
+            return service.getExecutionHistory(instanceData.instanceId, instanceData.folderKey);
         },
         async getBpmn() {
             if (!instanceData.instanceId)
@@ -9600,6 +9989,40 @@ exports.DebugMode = void 0;
     DebugMode["SingleStep"] = "SingleStep";
 })(exports.DebugMode || (exports.DebugMode = {}));
 
+/**
+ * Maestro Cases Models
+ * Model classes for Maestro cases
+ */
+/**
+ * Creates methods for a case object
+ *
+ * @param caseData - The case data (response from API)
+ * @param service - The cases service instance
+ * @returns Object containing case methods
+ */
+function createCaseMethods(caseData, service) {
+    return {
+        getElementStats(startTime, endTime, packageVersion) {
+            if (!caseData.processKey)
+                throw new Error('Process key is undefined');
+            if (!caseData.packageId)
+                throw new Error('Package ID is undefined');
+            return service.getElementStats(caseData.processKey, caseData.packageId, startTime, endTime, packageVersion);
+        }
+    };
+}
+/**
+ * Creates an actionable case by combining API case data with operational methods.
+ *
+ * @param caseData - The case data from API
+ * @param service - The cases service instance
+ * @returns A case object with added methods
+ */
+function createCaseWithMethods(caseData, service) {
+    const methods = createCaseMethods(caseData, service);
+    return Object.assign({}, caseData, methods);
+}
+
 /**
  * Case Instance Types
  * Types and interfaces for Maestro case instance management
@@ -9811,12 +10234,6 @@ const ProcessInstanceMap = {
     createdAt: 'createdTime',
     updatedAt: 'updatedTime'
 };
-/**
- * Maps fields for Process Instance Execution History to ensure consistent naming
- */
-const ProcessInstanceExecutionHistoryMap = {
-    startTime: 'startedTime'
-};
 
 class ProcessInstancesService extends BaseService {
     /**
@@ -9897,11 +10314,66 @@ class ProcessInstancesService extends BaseService {
     /**
      * Get execution history (spans) for a process instance
      * @param instanceId The ID of the instance to get history for
-     * @returns Promise<ProcessInstanceExecutionHistoryResponse[]>
+     * @param folderKey The folder key for authorization
+     * @returns Promise resolving to execution history
+     * {@link ProcessInstanceExecutionHistoryResponse}
+     * @example
+     * ```typescript
+     * // Get execution history for a process instance
+     * const history = await processInstances.getExecutionHistory(
+     *   <instanceId>,
+     *   <folderKey>
+     * );
+     *
+     * // Analyze execution timeline
+     * history.forEach(span => {
+     *   console.log(`Activity: ${span.name}`);
+     *   console.log(`Start: ${span.startedTime}`);
+     *   console.log(`End: ${span.endTime}`);
+     * });
+     * ```
      */
-    async getExecutionHistory(instanceId) {
-        const response = await this.get(MAESTRO_ENDPOINTS.INSTANCES.GET_EXECUTION_HISTORY(instanceId));
-        return response.data.map(historyItem => transformData(historyItem, ProcessInstanceExecutionHistoryMap));
+    async getExecutionHistory(instanceId, folderKey) {
+        const headers = createHeaders({ [FOLDER_KEY]: folderKey });
+        const elementExecResponse = await this.get(MAESTRO_ENDPOINTS.INSTANCES.GET_ELEMENT_EXECUTIONS(instanceId), { headers });
+        const traceId = elementExecResponse.data.traceId;
+        const spansResponse = await this.get(MAESTRO_ENDPOINTS.TRACES.GET_SPANS(traceId), { headers });
+        // Build span lookup keyed by elementRunId extracted from Attributes JSON
+        const spanMap = new Map();
+        for (const span of spansResponse.data) {
+            try {
+                const attrs = span.Attributes ? JSON.parse(span.Attributes) : null;
+                if (attrs?.elementRunId) {
+                    spanMap.set(attrs.elementRunId, span);
+                }
+            }
+            catch {
+                // skip spans with unparseable Attributes — they won't match any elementRunId
+            }
+        }
+        const results = [];
+        for (const elementExec of elementExecResponse.data.elementExecutions) {
+            for (const run of elementExec.elementRuns) {
+                const span = spanMap.get(run.elementRunId);
+                if (span) {
+                    results.push(this.mapSpanToHistory(span));
+                }
+            }
+        }
+        return results;
+    }
+    mapSpanToHistory(span) {
+        return {
+            id: span.Id,
+            traceId: span.TraceId,
+            parentId: span.ParentId,
+            name: span.Name,
+            startedTime: span.StartTime,
+            endTime: span.EndTime,
+            attributes: span.Attributes,
+            updatedTime: span.UpdatedAt,
+            expiredTime: span.ExpiryTimeUtc,
+        };
     }
     /**
      * Get BPMN XML file for a process instance
@@ -10217,6 +10689,52 @@ class MaestroProcessesService extends BaseService {
         const { data } = await this.post(MAESTRO_ENDPOINTS.INSIGHTS.TOP_PROCESSES_BY_RUN_COUNT, buildInsightsTopBody(startTime, endTime, false, options));
         return (data ?? []).map(process => ({ ...process, name: process.packageId }));
     }
+    /**
+     * Get the top 10 BPMN elements ranked by failure count within a time range.
+     *
+     * Returns an array of up to 10 elements sorted by how many times they failed,
+     * useful for identifying the most error-prone activities in processes.
+     *
+     * @param startTime - Start of the time range to query
+     * @param endTime - End of the time range to query
+     * @param options - Optional filters (packageId, processKey, version)
+     * @returns Promise resolving to an array of {@link ElementGetTopFailedCountResponse}
+     * @example
+     * ```typescript
+     * import { MaestroProcesses } from '@uipath/uipath-typescript/maestro-processes';
+     *
+     * const maestroProcesses = new MaestroProcesses(sdk);
+     *
+     * // Get top failing elements for the last 7 days
+     * const topFailing = await maestroProcesses.getTopElementFailedCount(
+     *   new Date(Date.now() - 7 * 24 * 60 * 60 * 1000),
+     *   new Date()
+     * );
+     *
+     * for (const element of topFailing) {
+     *   console.log(`${element.elementName} (${element.elementType}): ${element.failedCount} failures`);
+     * }
+     * ```
+     *
+     * @example
+     * ```typescript
+     * // Get top failing elements for a specific process
+     * const filtered = await maestroProcesses.getTopElementFailedCount(
+     *   new Date(Date.now() - 7 * 24 * 60 * 60 * 1000),
+     *   new Date(),
+     *   { processKey: '<processKey>' }
+     * );
+     * ```
+     */
+    async getTopElementFailedCount(startTime, endTime, options) {
+        const { data } = await this.post(MAESTRO_ENDPOINTS.INSIGHTS.TOP_ELEMENTS_WITH_FAILURE, buildInsightsTopBody(startTime, endTime, false, options));
+        return (data ?? []).map(item => ({
+            elementName: item.elementName,
+            elementType: item.elementType,
+            processKey: item.processKey,
+            failedCount: item.count,
+        }));
+    }
     /**
      * Get all instances status counts aggregated by date for maestro processes.
      *
@@ -10347,6 +10865,41 @@ class MaestroProcessesService extends BaseService {
         const { data } = await this.post(MAESTRO_ENDPOINTS.INSIGHTS.TOP_PROCESSES_BY_DURATION, buildInsightsTopBody(startTime, endTime, false, options));
         return (data ?? []).map(process => ({ ...process, name: process.packageId }));
     }
+    /**
+     * Get element stats for process instances
+     *
+     * Returns per-element execution counts (success, fail, terminated, paused, in-progress) and
+     * duration percentile metrics (min, max, avg, p50, p95, p99) for BPMN elements within a process.
+     *
+     * @param processKey - Process key to filter by
+     * @param packageId - Package identifier
+     * @param startTime - Start of the time range to query
+     * @param endTime - End of the time range to query
+     * @param packageVersion - Package version to filter by
+     * @returns Promise resolving to an array of {@link ElementStats}
+     * @example
+     * ```typescript
+     * // Get element metrics for a process
+     * const elements = await maestroProcesses.getElementStats(
+     *   '<processKey>',
+     *   '<packageId>',
+     *   new Date('2026-04-01'),
+     *   new Date(),
+     *   '1.0.1'
+     * );
+     *
+     * // Analyze element performance
+     * for (const element of elements) {
+     *   console.log(`Element: ${element.elementId}`);
+     *   console.log(`  Success: ${element.successCount}, Failed: ${element.failCount}`);
+     *   console.log(`  Avg duration: ${element.avgDurationMs}ms, P95: ${element.p95DurationMs}ms`);
+     * }
+     * ```
+     */
+    async getElementStats(processKey, packageId, startTime, endTime, packageVersion) {
+        const { data } = await this.post(MAESTRO_ENDPOINTS.INSIGHTS.ELEMENT_COUNT_BY_STATUS, buildElementCountByStatusBody(processKey, packageId, startTime, endTime, packageVersion));
+        return data ?? [];
+    }
 }
 __decorate([
     track('MaestroProcesses.GetAll')
@@ -10357,6 +10910,9 @@ __decorate([
 __decorate([
     track('MaestroProcesses.GetTopRunCount')
 ], MaestroProcessesService.prototype, "getTopRunCount", null);
+__decorate([
+    track('MaestroProcesses.GetTopElementFailedCount')
+], MaestroProcessesService.prototype, "getTopElementFailedCount", null);
 __decorate([
     track('MaestroProcesses.GetInstanceStatusTimeline')
 ], MaestroProcessesService.prototype, "getInstanceStatusTimeline", null);
@@ -10366,6 +10922,9 @@ __decorate([
 __decorate([
     track('MaestroProcesses.GetTopExecutionDuration')
 ], MaestroProcessesService.prototype, "getTopExecutionDuration", null);
+__decorate([
+    track('MaestroProcesses.GetElementStats')
+], MaestroProcessesService.prototype, "getElementStats", null);
 
 /**
  * Service class for Maestro Process Incidents
@@ -10421,7 +10980,7 @@ var ProcessType;
 class CasesService extends BaseService {
     /**
      * Get all case management processes with their instance statistics
-     * @returns Promise resolving to array of Case objects
+     * @returns Promise resolving to an array of {@link CaseGetAllWithMethodsResponse}
      *
      * @example
      * ```typescript
@@ -10445,10 +11004,10 @@ class CasesService extends BaseService {
         const response = await this.get(MAESTRO_ENDPOINTS.PROCESSES.GET_ALL, { params });
         // Extract processes array from response data and add name field
         const cases = response.data?.processes || [];
-        return cases.map(caseItem => ({
+        return cases.map(caseItem => createCaseWithMethods({
             ...caseItem,
             name: this.extractCaseName(caseItem.packageId)
-        }));
+        }, this));
     }
     /**
      * Get the top 5 case processes ranked by run count within a time range.
@@ -10491,6 +11050,52 @@ class CasesService extends BaseService {
         const { data } = await this.post(MAESTRO_ENDPOINTS.INSIGHTS.TOP_PROCESSES_BY_RUN_COUNT, buildInsightsTopBody(startTime, endTime, true, options));
         return (data ?? []).map(process => ({ ...process, name: this.extractCaseName(process.packageId) }));
     }
+    /**
+     * Get the top 10 BPMN elements ranked by failure count within a time range.
+     *
+     * Returns an array of up to 10 elements sorted by how many times they failed,
+     * useful for identifying the most error-prone activities in case processes.
+     *
+     * @param startTime - Start of the time range to query
+     * @param endTime - End of the time range to query
+     * @param options - Optional filters (packageId, processKey, version)
+     * @returns Promise resolving to an array of {@link ElementGetTopFailedCountResponse}
+     * @example
+     * ```typescript
+     * import { Cases } from '@uipath/uipath-typescript/cases';
+     *
+     * const cases = new Cases(sdk);
+     *
+     * // Get top failing elements for the last 7 days
+     * const topFailing = await cases.getTopElementFailedCount(
+     *   new Date(Date.now() - 7 * 24 * 60 * 60 * 1000),
+     *   new Date()
+     * );
+     *
+     * for (const element of topFailing) {
+     *   console.log(`${element.elementName} (${element.elementType}): ${element.failedCount} failures`);
+     * }
+     * ```
+     *
+     * @example
+     * ```typescript
+     * // Get top failing elements for a specific process
+     * const filtered = await cases.getTopElementFailedCount(
+     *   new Date(Date.now() - 7 * 24 * 60 * 60 * 1000),
+     *   new Date(),
+     *   { processKey: '<processKey>' }
+     * );
+     * ```
+     */
+    async getTopElementFailedCount(startTime, endTime, options) {
+        const { data } = await this.post(MAESTRO_ENDPOINTS.INSIGHTS.TOP_ELEMENTS_WITH_FAILURE, buildInsightsTopBody(startTime, endTime, true, options));
+        return (data ?? []).map(item => ({
+            elementName: item.elementName,
+            elementType: item.elementType,
+            processKey: item.processKey,
+            failedCount: item.count,
+        }));
+    }
     /**
      * Get all instances status counts aggregated by date for case management processes.
      *
@@ -10621,6 +11226,40 @@ class CasesService extends BaseService {
         const { data } = await this.post(MAESTRO_ENDPOINTS.INSIGHTS.TOP_PROCESSES_BY_DURATION, buildInsightsTopBody(startTime, endTime, true, options));
         return (data ?? []).map(process => ({ ...process, name: this.extractCaseName(process.packageId) }));
     }
+    /**
+     * Get element stats for case instances
+     *
+     * Returns per-element execution counts (success, fail, terminated, paused, in-progress) and
+     * duration percentile metrics (min, max, avg, p50, p95, p99) for BPMN elements within a case.
+     *
+     * @param processKey - Process key to filter by
+     * @param packageId - Package identifier
+     * @param startTime - Start of the time range to query
+     * @param endTime - End of the time range to query
+     * @param packageVersion - Package version to filter by
+     * @returns Promise resolving to an array of {@link ElementStats}
+     * @example
+     * ```typescript
+     * // Get element metrics for a case
+     * const elements = await cases.getElementStats(
+     *   '<processKey>',
+     *   '<packageId>',
+     *   new Date('2026-04-01'),
+     *   new Date(),
+     *   '1.0.1'
+     * );
+     *
+     * // Find elements with failures
+     * const failedElements = elements.filter(e => e.failCount > 0);
+     * for (const element of failedElements) {
+     *   console.log(`Failed element: ${element.elementId}, failures: ${element.failCount}`);
+     * }
+     * ```
+     */
+    async getElementStats(processKey, packageId, startTime, endTime, packageVersion) {
+        const { data } = await this.post(MAESTRO_ENDPOINTS.INSIGHTS.ELEMENT_COUNT_BY_STATUS, buildElementCountByStatusBody(processKey, packageId, startTime, endTime, packageVersion));
+        return data ?? [];
+    }
     /**
      * Extract a readable case name from the packageId
      * @param packageId - The full package identifier
@@ -10646,6 +11285,9 @@ __decorate([
 __decorate([
     track('Cases.GetTopRunCount')
 ], CasesService.prototype, "getTopRunCount", null);
+__decorate([
+    track('Cases.GetTopElementFailedCount')
+], CasesService.prototype, "getTopElementFailedCount", null);
 __decorate([
     track('Cases.GetInstanceStatusTimeline')
 ], CasesService.prototype, "getInstanceStatusTimeline", null);
@@ -10655,6 +11297,9 @@ __decorate([
 __decorate([
     track('Cases.GetTopExecutionDuration')
 ], CasesService.prototype, "getTopExecutionDuration", null);
+__decorate([
+    track('Cases.GetElementStats')
+], CasesService.prototype, "getElementStats", null);
 
 /**
  * Maps fields for Case Instance entities to ensure consistent naming
@@ -11863,37 +12508,6 @@ function validateName(resourceType, name) {
     return trimmed;
 }
 
-/**
- * Encodes a folder path for the `X-UIPATH-FolderPath-Encoded` header.
- *
- * Orchestrator decodes this header as **base64-encoded UTF-16 LE bytes**
- * (see `HttpHeadersProviderExtensions.GetDecoded` + `OrganizationUnitProvider`
- * in the Orchestrator repo, which call `Encoding.Unicode.GetString(...)`).
- * URL-encoding is NOT what the server expects — it must be base64-of-UTF-16-LE
- * bytes.
- *
- * @param folderPath - The folder path (e.g. 'Shared/Finance')
- * @returns Base64 string suitable for the `X-UIPATH-FolderPath-Encoded` header
- */
-function encodeFolderPathHeader(folderPath) {
-    // Force little-endian regardless of host byte order. `Uint16Array` viewed
-    // as `Uint8Array` would use the host's native order — correct on LE hosts
-    // (x86/ARM-LE) but wrong on BE hosts. `DataView.setUint16(..., true)`
-    // pins LE.
-    const buf = new ArrayBuffer(folderPath.length * 2);
-    const view = new DataView(buf);
-    for (let i = 0; i < folderPath.length; i++) {
-        view.setUint16(i * 2, folderPath.charCodeAt(i), true);
-    }
-    const bytes = new Uint8Array(buf);
-    let binary = '';
-    for (let i = 0; i < bytes.byteLength; i++) {
-        binary += String.fromCharCode(bytes[i]);
-    }
-    // btoa is browser-native; Node 16+ also has it as a global
-    return btoa(binary);
-}
-
 /**
  * Resolves folder context into the appropriate Orchestrator folder headers.
  *
@@ -12041,6 +12655,26 @@ function describeFolderForError(folderId, folderKey, folderPath) {
     return '';
 }
 
+/**
+ * Enum for Asset Value Scope
+ */
+exports.AssetValueScope = void 0;
+(function (AssetValueScope) {
+    AssetValueScope["Global"] = "Global";
+    AssetValueScope["PerRobot"] = "PerRobot";
+})(exports.AssetValueScope || (exports.AssetValueScope = {}));
+/**
+ * Enum for Asset Value Type
+ */
+exports.AssetValueType = void 0;
+(function (AssetValueType) {
+    AssetValueType["Text"] = "Text";
+    AssetValueType["Bool"] = "Bool";
+    AssetValueType["Integer"] = "Integer";
+    AssetValueType["Credential"] = "Credential";
+    AssetValueType["Secret"] = "Secret";
+})(exports.AssetValueType || (exports.AssetValueType = {}));
+
 /**
  * Maps fields for Asset entities to ensure consistent naming
  */
@@ -12165,6 +12799,68 @@ class AssetService extends FolderScopedService {
     async getByName(name, options = {}) {
         return this.getByNameLookup('Asset', ASSET_ENDPOINTS.GET_BY_FOLDER, name, options, (raw) => transformData(pascalToCamelCaseKeys(raw), AssetMap));
     }
+    /**
+     * Updates the value of an existing asset by ID.
+     *
+     * Fetches the asset internally to determine its type, then updates only the value while
+     * preserving the asset's name, scope, and description.
+     *
+     * **Supported value types:** `Text`, `Integer`, and `Bool` only. Other types
+     * (`Credential`, `Secret`) throw a `ValidationError`.
+     *
+     * The `newValue` runtime type must match the asset's `valueType`:
+     * - `Text` → `string`
+     * - `Integer` → `number` (integer)
+     * - `Bool` → `boolean`
+     *
+     * @param id - Asset ID
+     * @param newValue - New value to apply (string for `Text`, number for `Integer`, boolean for `Bool`)
+     * @param options - Folder scoping (`folderId` / `folderKey` / `folderPath`)
+     * @returns Promise resolving when the asset has been updated
+     *
+     * @example
+     * ```typescript
+     * import { Assets } from '@uipath/uipath-typescript/assets';
+     *
+     * const assets = new Assets(sdk);
+     *
+     * // Update a Text asset by folder ID
+     * await assets.updateValueById(<assetId>, 'new-value', { folderId: <folderId> });
+     *
+     * // Update an Integer asset by folder key (GUID)
+     * await assets.updateValueById(<assetId>, 42, { folderKey: '5f6dadf1-3677-49dc-8aca-c2999dd4b3ba' });
+     *
+     * // Update a Bool asset by folder path
+     * await assets.updateValueById(<assetId>, true, { folderPath: 'Shared/Finance' });
+     * ```
+     */
+    async updateValueById(id, newValue, options) {
+        if (!id) {
+            throw new ValidationError({ message: 'id is required for updateValueById' });
+        }
+        if (newValue === null || newValue === undefined) {
+            throw new ValidationError({ message: 'newValue is required for updateValueById' });
+        }
+        const headers = resolveFolderHeaders({
+            folderId: options?.folderId,
+            folderKey: options?.folderKey,
+            folderPath: options?.folderPath,
+            resourceType: 'Assets.updateValueById',
+            fallbackFolderKey: this.config.folderKey,
+        });
+        const existingResponse = await this.get(ASSET_ENDPOINTS.GET_BY_ID(id), { headers });
+        const existing = existingResponse.data;
+        const valueField = resolveValueField(id, existing.ValueType, newValue);
+        const body = {
+            Id: id,
+            Name: existing.Name,
+            ValueScope: existing.ValueScope,
+            ValueType: existing.ValueType,
+            Description: existing.Description,
+            [valueField]: newValue,
+        };
+        await this.put(ASSET_ENDPOINTS.GET_BY_ID(id), body, { headers });
+    }
 }
 __decorate([
     track('Assets.GetAll')
@@ -12175,30 +12871,42 @@ __decorate([
 __decorate([
     track('Assets.GetByName')
 ], AssetService.prototype, "getByName", null);
-
-/**
- * Enum for Asset Value Scope
- */
-exports.AssetValueScope = void 0;
-(function (AssetValueScope) {
-    AssetValueScope["Global"] = "Global";
-    AssetValueScope["PerRobot"] = "PerRobot";
-})(exports.AssetValueScope || (exports.AssetValueScope = {}));
+__decorate([
+    track('Assets.UpdateValueById')
+], AssetService.prototype, "updateValueById", null);
 /**
- * Enum for Asset Value Type
+ * Maps the asset's `valueType` to the PUT body field carrying the new value, validating
+ * that the new value's runtime type matches the asset type.
  */
-exports.AssetValueType = void 0;
-(function (AssetValueType) {
-    AssetValueType["DBConnectionString"] = "DBConnectionString";
-    AssetValueType["HttpConnectionString"] = "HttpConnectionString";
-    AssetValueType["Text"] = "Text";
-    AssetValueType["Bool"] = "Bool";
-    AssetValueType["Integer"] = "Integer";
-    AssetValueType["Credential"] = "Credential";
-    AssetValueType["WindowsCredential"] = "WindowsCredential";
-    AssetValueType["KeyValueList"] = "KeyValueList";
-    AssetValueType["Secret"] = "Secret";
-})(exports.AssetValueType || (exports.AssetValueType = {}));
+function resolveValueField(id, valueType, newValue) {
+    switch (valueType) {
+        case exports.AssetValueType.Text:
+            if (typeof newValue !== 'string') {
+                throw new ValidationError({
+                    message: `Asset ${id} has valueType Text; newValue must be a string, got ${typeof newValue}`,
+                });
+            }
+            return 'StringValue';
+        case exports.AssetValueType.Integer:
+            if (typeof newValue !== 'number' || !Number.isInteger(newValue)) {
+                throw new ValidationError({
+                    message: `Asset ${id} has valueType Integer; newValue must be an integer number, got ${typeof newValue}`,
+                });
+            }
+            return 'IntValue';
+        case exports.AssetValueType.Bool:
+            if (typeof newValue !== 'boolean') {
+                throw new ValidationError({
+                    message: `Asset ${id} has valueType Bool; newValue must be a boolean, got ${typeof newValue}`,
+                });
+            }
+            return 'BoolValue';
+        default:
+            throw new ValidationError({
+                message: `updateValueById only supports Text, Integer, or Bool assets; asset ${id} has valueType ${valueType}`,
+            });
+    }
+}
 
 /**
  * Maps fields for Bucket entities to ensure consistent naming
@@ -14115,6 +14823,39 @@ exports.FeedbackStatus = void 0;
     FeedbackStatus[FeedbackStatus["Dismissed"] = 2] = "Dismissed";
 })(exports.FeedbackStatus || (exports.FeedbackStatus = {}));
 
+/**
+ * Columns available for ordering results.
+ */
+exports.AgentListSortColumn = void 0;
+(function (AgentListSortColumn) {
+    AgentListSortColumn["AgentName"] = "AgentName";
+    AgentListSortColumn["ParentProcess"] = "ParentProcess";
+    AgentListSortColumn["LastRun"] = "LastRun";
+    AgentListSortColumn["HealthScore"] = "HealthScore";
+    AgentListSortColumn["LastIncident"] = "LastIncident";
+    AgentListSortColumn["FolderName"] = "FolderName";
+    /** Quantity of AGU (Agent Units) consumed */
+    AgentListSortColumn["QuantityAGU"] = "QuantityAGU";
+    /** Quantity of PLTU (Platform Units) consumed */
+    AgentListSortColumn["QuantityPLTU"] = "QuantityPLTU";
+    AgentListSortColumn["FolderPath"] = "FolderPath";
+})(exports.AgentListSortColumn || (exports.AgentListSortColumn = {}));
+
+/**
+ * Types for the Agent Memory metrics service.
+ */
+/**
+ * Execution kind to filter Agent Memory queries by. Omit to include both
+ * Debug and Runtime executions.
+ */
+exports.AgentMemoryExecutionType = void 0;
+(function (AgentMemoryExecutionType) {
+    /** Executions produced during agent debugging sessions. */
+    AgentMemoryExecutionType["Debug"] = "Debug";
+    /** Executions produced during production runtime. */
+    AgentMemoryExecutionType["Runtime"] = "Runtime";
+})(exports.AgentMemoryExecutionType || (exports.AgentMemoryExecutionType = {}));
+
 // Auto-generated from the OpenAPI spec — do not edit manually.
 var DocumentActionPriority;
 (function (DocumentActionPriority) {
@@ -14386,6 +15127,23 @@ var index = /*#__PURE__*/Object.freeze({
     get WordGroupType () { return WordGroupType; }
 });
 
+/**
+ * Governance Service Types
+ *
+ * Public types exposed via `@uipath/uipath-typescript/governance`.
+ */
+exports.PolicyEvaluationResult = void 0;
+(function (PolicyEvaluationResult) {
+    /** Active policy permitted the action. */
+    PolicyEvaluationResult["Allow"] = "Allow";
+    /** Active policy blocked the action. */
+    PolicyEvaluationResult["Deny"] = "Deny";
+    /** Simulated (NoOp) policy would have permitted the action. */
+    PolicyEvaluationResult["SimulatedAllow"] = "SimulatedAllow";
+    /** Simulated (NoOp) policy would have blocked the action. */
+    PolicyEvaluationResult["SimulatedDeny"] = "SimulatedDeny";
+})(exports.PolicyEvaluationResult || (exports.PolicyEvaluationResult = {}));
+
 /**
  * Asset resolution utilities for UiPath Coded Apps
  *
@@ -14485,6 +15243,7 @@ exports.UserSettingsMap = UserSettingsMap;
 exports.ValidationError = ValidationError;
 exports.createAgentWithMethods = createAgentWithMethods;
 exports.createCaseInstanceWithMethods = createCaseInstanceWithMethods;
+exports.createCaseWithMethods = createCaseWithMethods;
 exports.createConversationWithMethods = createConversationWithMethods;
 exports.createEntityWithMethods = createEntityWithMethods;
 exports.createJobWithMethods = createJobWithMethods;