Sign In

@uipath/solution-tool

Package Overview
Dependencies
Maintainers
24
Versions
71
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install
This package has malicious versions linked to the ongoing "Mini Shai-Hulud" supply chain attack.

Affected versions:

1.0.1
View campaign page

@uipath/solution-tool

Create, pack, publish, and deploy UiPath Automation Solutions.

latest
Source
npmnpm
Version
1.199.0
Version published
Weekly downloads
2.5K
19.93%
Maintainers
24
Weekly downloads
 
Created
Source

Solution Tool

uip tool for managing UiPath Automation Solutions.

Commands

CommandDescription
packPack a UiPath solution
publishPublish solution package
newCreate a new solution
uploadUpload a solution package
deploy runDeploy solution to environment
deploy statusCheck deployment status
deploy activateActivate deployed solution
deploy uninstallRemove solution
deploy listList deployments
deploy config get/set/link/unlinkManage deployment configuration
project add/import/removeManage projects within a solution
packages list/deleteManage solution packages

Examples

uip solution pack <solutionPath>
uip solution publish <packagePath>
uip solution init --name MySolution
uip solution upload <packagePath>
uip solution deploy run --solution-name MySolution
uip solution deploy status --solution-name MySolution
uip solution projects add ./my-solution/my-project ./my-solution/my-solution.uipx

Deploying to Personal Workspace

uip solution deploy run accepts --personal-workspace as an alternative to --parent-folder-path / --parent-folder-key. When set, the CLI calls Orchestrator's GetPersonalWorkspace endpoint once to look up the current user's workspace name, then uses that as the deploy target — matching StudioWeb's "Publish to Personal Workspace" UX.

uip solution deploy run \
    --name my-deployment \
    --package-name my-package \
    --package-version 1.0.0 \
    --folder-name MySolution \
    --personal-workspace

The three target flags (--parent-folder-path, --parent-folder-key, --personal-workspace) are mutually exclusive. The lookup uses whichever auth context is active — uip login, UIPATH_CLI_ENABLE_ENV_AUTH, or UIPATH_CLI_ENFORCE_ROBOT_AUTH — so the same command works in standalone terminals, CI pipelines, and Studio Desktop-spawned invocations. Service principals or robot accounts without a Personal Workspace produce a clear "not configured" error.

Excluding directories from the bundle

uip solution pack and uip solution upload skip developer-local directories and credential files that don't belong in a published solution. The defaults are always applied.

Directories (matched by exact name at any depth):

  • .venv — Python virtualenvs (per-agent under <solution>/<agent>/.venv).
  • node_modules — Node dependency caches.
  • __pycache__ — Python bytecode caches.
  • .git — VCS metadata.

Files (matched by name pattern at any depth):

  • .env, .env.local, .env.production, etc. (any file whose name is .env or starts with .env.) — dotenv credential files. They commonly hold API keys, database passwords, and OAuth client secrets, so they are never shipped in the bundle. Lookalikes such as .envrc, .environment, and myenv.txt are kept.

To skip additional directories, add a .uipignore file at the solution root (next to the .uipx file). One directory name per line; # starts a line or trailing comment; blank lines and whitespace-only lines are ignored. Each entry matches by exact directory name at any depth — the same semantics as the built-in defaults. Path separators (/, \) are not supported yet.

Example .uipignore:

# project-specific build artifacts
dist
coverage

# vendored deps we don't want shipped
vendor

A .uipignore may also be placed at a project root (next to that project's project.uiproj). Its entries are scoped to that project only and are merged on top of the solution-root .uipignore and the built-in defaults. Use this when an exclude should apply to one project but not its siblings (a solution-root entry, by contrast, applies to every project). The file format is identical.

The bundler logs which additional excludes are being applied at upload time so the effective set is visible in CI logs.

Keywords

cli-tool

FAQs

Package last updated on 11 Aug 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts