@transcend-io/cli 10.27.5 → 10.29.0

package/dist/codecs-zRkskjaJ.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"codecs-zRkskjaJ.mjs","names":[],"sources":["../src/codecs.ts"],"sourcesContent":["import {\n  InitialViewState,\n  BrowserLanguage,\n  UserPrivacySignalEnum,\n  OnConsentExpiry,\n} from '@transcend-io/airgap.js-types';\nimport { LOCALE_KEY } from '@transcend-io/internationalization';\nimport {\n  DataCategoryType,\n  ConsentBundleType,\n  EnricherType,\n  ProcessingPurpose,\n  RequestAction,\n  ComparisonOperator,\n  RequestActionObjectResolver,\n  AssessmentSyncColumn,\n  RetentionScheduleType,\n  AssessmentQuestionType,\n  DataFlowScope,\n  PromptAVendorEmailSendType,\n  RetentionScheduleOperation,\n  AssessmentsDisplayLogicAction,\n  DefaultConsentOption,\n  LogicOperator,\n  ConsentPrecedenceOption,\n  AssessmentSyncModel,\n  AssessmentQuestionSubType,\n  IsoCountryCode,\n  BrowserTimeZone,\n  IsoCountrySubdivisionCode,\n  ConsentTrackerStatus,\n  AttributeKeyType,\n  PromptAVendorEmailCompletionLinkType,\n  RegionsOperator,\n  UnknownRequestPolicy,\n  TelemetryPartitionStrategy,\n  SignedIabAgreementOption,\n  RegionDetectionMethod,\n  PreflightRequestStatus,\n  AttributeSupportedResourceType,\n  SubDataPointDataSubCategoryGuessStatus,\n  CodePackageType,\n  ActionItemPriorityOverride,\n  ActionItemCode,\n  ScopeName,\n  TranscendProduct,\n  PrivacyCenterComponentStyles,\n  PrivacyCenterTextStyles,\n  PreferenceStoreAuthLevel,\n  ConfigurableColorPaletteColor,\n  PrivacyCenterFooterLayout,\n  AssessmentFormTemplateStatus,\n  AssessmentFormStatus,\n  AssessmentFormTemplateSource,\n  UnstructuredSubDataPointRecommendationStatus,\n  PreferenceTopicType,\n  Controllership,\n  RetentionType,\n  DataProtectionImpactAssessmentStatus,\n  WorkflowConfigVisibility,\n  WorkflowConfigType,\n  CollectDataSubjectRegions,\n  ConsentThemeInput,\n  ConsentVariantInput,\n  PolicyType,\n} from '@transcend-io/privacy-types';\nimport { applyEnum, valuesOf } from '@transcend-io/type-utils';\n// eslint-disable-next-line eslint-comments/disable-enable-pair\n/* eslint-disable max-lines */\nimport * as t from 'io-ts';\n\n/**\n * Input to define email templates that can be used to communicate to end-users\n * about the status of their requests\n *\n * @see https://docs.transcend.io/docs/privacy-requests/configuring-requests/email-templates\n */\nexport const TemplateInput = t.type({\n  /** The title of the template */\n  title: t.string,\n});\n\n/** Type override */\nexport type TemplateInput = t.TypeOf<typeof TemplateInput>;\n\nexport const WebhookHeader = t.intersection([\n  t.type({\n    /** The name of the header to set. */\n    name: t.string,\n    /** The value of the header. */\n    value: t.string,\n  }),\n  t.partial({\n    /** The header contains a secret */\n    isSecret: t.boolean,\n  }),\n]);\n\n/** Type override */\nexport type WebhookHeader = t.TypeOf<typeof WebhookHeader>;\n\n/**\n * Input to define API keys that may be shared across data silos\n * in the data map. When creating new data silos through the yaml\n * cli, it is possible to specify which API key should be associated\n * with the newly created data silo.\n *\n * @see https://docs.transcend.io/docs/authentication\n */\nexport const ApiKeyInput = t.type({\n  /** The display title of the enricher */\n  title: t.string,\n});\n\n/** Type override */\nexport type ApiKeyInput = t.TypeOf<typeof ApiKeyInput>;\n\n/**\n * Input to define teams in Transcend\n * Users belong to teams and teams can be assigned to various resources\n *\n * @see https://docs.transcend.io/docs/security/access-control\n */\nexport const TeamInput = t.intersection([\n  t.type({\n    /** The display name of the team */\n    name: t.string,\n    /** Team description */\n    description: t.string,\n  }),\n  t.partial({\n    /** SSO department for automated provisioning */\n    'sso-department': t.string,\n    /** SSO group name for automated provisioning */\n    'sso-group': t.string,\n    /** SSO title mapping for automated provisioning */\n    'sso-title': t.string,\n    /** Parent organization team name to link this team to */\n    'parent-team-name': t.string,\n    /** List of user emails on the team */\n    users: t.array(t.string),\n    /** List of scopes that the team should have */\n    scopes: t.array(valuesOf(ScopeName)),\n  }),\n]);\n\n/** Type override */\nexport type TeamInput = t.TypeOf<typeof TeamInput>;\n\n/**\n * Input to define an enricher\n *\n * Define enricher or pre-flight check webhooks that will be executed\n * prior to privacy request workflows. Some examples may include:\n *  - identity enrichment: look up additional identifiers for that user.\n *                         i.e. map an email address to a user ID\n *  - fraud check: auto-cancel requests if the user is flagged for fraudulent behavior\n *  - customer check: auto-cancel request for some custom business criteria\n *\n * @see https://docs.transcend.io/docs/identity-enrichment\n */\nexport const EnricherInput = t.intersection([\n  t.type({\n    /** The display title of the enricher */\n    title: t.string,\n\n    /**\n     * The names of the identifiers that can be resolved by this enricher.\n     * i.e. email -> [userId, phone, advertisingId]\n     */\n    'output-identifiers': t.array(t.string),\n  }),\n  t.partial({\n    /** Internal description for why the enricher is needed */\n    description: t.string,\n    /** The URL of the enricher */\n    url: t.string,\n    /** The type of enricher */\n    type: valuesOf(EnricherType),\n    /**\n     * The name of the identifier that will be the input to this enricher.\n     * Whenever a privacy request contains this identifier, the webhook will\n     * be called with the value of that identifier as input\n     */\n    'input-identifier': t.string,\n    /**\n     * A regular expression that can be used to match on for cancellation\n     */\n    testRegex: t.string,\n    /**\n     * For looker integration - the title of the looker query to run\n     */\n    lookerQueryTitle: t.string,\n    /**\n     * The duration (in ms) that the enricher should take to execute.\n     */\n    expirationDuration: t.number,\n    /**\n     * The status that the enricher should transfer to when condition is met.\n     */\n    transitionRequestStatus: valuesOf(PreflightRequestStatus),\n    /**\n     * For twilio integration - the phone numbers that can be used to send text codes\n     */\n    phoneNumbers: t.array(t.string),\n    /** The list of regions that should trigger the preflight check */\n    regionList: t.array(valuesOf({ ...IsoCountryCode, ...IsoCountrySubdivisionCode })),\n    /**\n     * Specify which data subjects the enricher should run for\n     */\n    'data-subjects': t.array(t.string),\n    /** Headers to include in the webhook */\n    headers: t.array(WebhookHeader),\n    /** The privacy actions that the enricher should run against */\n    'privacy-actions': t.array(valuesOf(RequestAction)),\n  }),\n]);\n\n/** Type override */\nexport type EnricherInput = t.TypeOf<typeof EnricherInput>;\n\n/**\n * The processing purpose for a field\n */\nexport const ProcessingPurposePreviewInput = t.intersection([\n  t.type({\n    /** The parent purpose */\n    purpose: valuesOf(ProcessingPurpose),\n  }),\n  t.partial({\n    /** User-defined name for this processing purpose sub category */\n    name: t.string,\n  }),\n]);\n\n/** Type override */\nexport type ProcessingPurposePreviewInput = t.TypeOf<typeof ProcessingPurposePreviewInput>;\n\n/**\n * The data category for a field\n */\nexport const DataCategoryPreviewInput = t.intersection([\n  t.type({\n    /** The parent category */\n    category: valuesOf(DataCategoryType),\n  }),\n  t.partial({\n    /** User-defined name for this sub category */\n    name: t.string,\n  }),\n]);\n\n/** Type override */\nexport type DataCategoryPreviewInput = t.TypeOf<typeof DataCategoryPreviewInput>;\n\n/**\n * A guessed data category from the content classifier\n */\nexport const DataCategoryGuessInput = t.intersection([\n  t.type({\n    /** The parent category */\n    category: DataCategoryPreviewInput,\n    /** Status of guess */\n    status: valuesOf(SubDataPointDataSubCategoryGuessStatus),\n    /** Confidence level of guess */\n    confidence: t.number,\n  }),\n  t.partial({\n    /** classifier version that produced the guess */\n    classifierVersion: t.number,\n  }),\n]);\n\n/** Type override */\nexport type DataCategoryGuessInput = t.TypeOf<typeof DataCategoryGuessInput>;\n\n/**\n * A guessed data category from the content classifier\n */\nexport const DataCategoryRecommendationInput = t.intersection([\n  t.type({\n    /** The parent category */\n    category: DataCategoryPreviewInput,\n    /** Status of guess */\n    status: valuesOf(UnstructuredSubDataPointRecommendationStatus),\n    /** Confidence level of guess */\n    confidence: t.number,\n  }),\n  t.partial({\n    /** classifier version that produced the guess */\n    classifierVersion: t.number,\n  }),\n]);\n\n/** Type override */\nexport type DataCategoryRecommendationInput = t.TypeOf<typeof DataCategoryRecommendationInput>;\n\nexport const AttributeValueInput = t.intersection([\n  t.type({\n    /** Name of attribute value */\n    name: t.string,\n  }),\n  t.partial({\n    /** Description */\n    description: t.string,\n    /** Color */\n    color: t.string,\n  }),\n]);\n\n/** Type override */\nexport type AttributeValueInput = t.TypeOf<typeof AttributeValueInput>;\n\nexport const AttributeInput = t.intersection([\n  t.type({\n    /** Name of attribute */\n    name: t.string,\n    /** Type of attribute */\n    type: valuesOf(AttributeKeyType),\n  }),\n  t.partial({\n    /** Description of attribute */\n    description: t.string,\n    /** Resource types that the attribute is enabled on */\n    resources: t.array(valuesOf(AttributeSupportedResourceType)),\n    /** Values of attribute */\n    values: t.array(AttributeValueInput),\n  }),\n]);\n\n/** Type override */\nexport type AttributeInput = t.TypeOf<typeof AttributeInput>;\n\nexport const AttributePreview = t.type({\n  /** Attribute key */\n  key: t.string,\n  /** Attribute values */\n  values: t.array(t.string),\n});\n\n/** Type override */\nexport type AttributePreview = t.TypeOf<typeof AttributePreview>;\n\n/**\n * Vendor type definition.\n */\nexport const VendorInput = t.intersection([\n  t.type({\n    /** Title of vendor */\n    title: t.string,\n  }),\n  t.partial({\n    /** Description of vendor */\n    description: t.string,\n    /** DPA link */\n    dataProcessingAgreementLink: t.string,\n    /** Contract email */\n    contactName: t.string,\n    /** Contract phone */\n    contactPhone: t.string,\n    /** Address */\n    address: t.string,\n    /** Headquarters country */\n    headquarterCountry: valuesOf(IsoCountryCode),\n    /** Headquarters subdivision */\n    headquarterSubDivision: valuesOf(IsoCountrySubdivisionCode),\n    /** Website URL */\n    websiteUrl: t.string,\n    /** Business entity */\n    businessEntity: t.string,\n    /**\n     * The email addresses of the employees within your company that are the go-to individuals\n     * for managing this vendor\n     */\n    owners: t.array(t.string),\n    /**\n     * The names of teams within your Transcend instance that should be responsible\n     * for managing this vendor\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n  }),\n]);\n\n/**\n * Type override\n */\nexport type VendorInput = t.TypeOf<typeof VendorInput>;\n\n/**\n * DataCategory type definition.\n */\nexport const DataCategoryInput = t.intersection([\n  t.type({\n    /** Name of data category */\n    name: t.string,\n    /** Type of data category */\n    category: valuesOf(DataCategoryType),\n  }),\n  t.partial({\n    /** Description of data category */\n    description: t.string,\n    /** Regex for data category */\n    regex: t.string,\n    /**\n     * The email addresses of the employees within your company that are the go-to individuals\n     * for managing this data category\n     */\n    owners: t.array(t.string),\n    /**\n     * The names of teams within your Transcend instance that should be responsible\n     * for managing this data category.\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n  }),\n]);\n\n/**\n * Type override\n */\nexport type DataCategoryInput = t.TypeOf<typeof DataCategoryInput>;\n\n/**\n * ProcessingPurpose type definition.\n */\nexport const ProcessingPurposeInput = t.intersection([\n  t.type({\n    /** Name of processing purpose */\n    name: t.string,\n    /** Type of processing purpose */\n    purpose: valuesOf(ProcessingPurpose),\n  }),\n  t.partial({\n    /** Description of processing purpose */\n    description: t.string,\n    /**\n     * The email addresses of the employees within your company that are the go-to individuals\n     * for managing this processing purpose\n     */\n    owners: t.array(t.string),\n    /**\n     * The names of teams within your Transcend instance that should be responsible\n     * for managing this processing purpose.\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n  }),\n]);\n\n/**\n * Type override\n */\nexport type ProcessingPurposeInput = t.TypeOf<typeof ProcessingPurposeInput>;\n\n/**\n * Annotate specific fields within a datapoint. These are often database table columns.\n * Fields can also be a JSON object or separate file.\n */\nexport const FieldInput = t.intersection([\n  t.type({\n    /** The unique key of the field. When a database, this is the column name. */\n    key: t.string,\n  }),\n  t.partial({\n    /** The display title of the field */\n    title: t.string,\n    /** Description of the field */\n    description: t.union([t.string, t.null]),\n    /**\n     * What is the purpose of processing for this datapoint/table?\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/objects.ts\n     */\n    purposes: t.array(ProcessingPurposePreviewInput),\n    /**\n     * The category of personal data for this datapoint\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/objects.ts\n     */\n    categories: t.array(DataCategoryPreviewInput),\n    /**\n     * The category of personal data that have been guessed by the classifier this datapoint\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/objects.ts\n     */\n    'guessed-categories': t.array(DataCategoryGuessInput),\n    /**\n     * When true, this subdatapoint should be revealed in a data access request.\n     * When false, this field should be redacted\n     */\n    'access-request-visibility-enabled': t.boolean,\n    /**\n     * When true, this subdatapoint should be redacted during an erasure request.\n     * There normally is a choice of enabling hard deletion or redaction at the\n     * datapoint level, but if redaction is enabled, this column can be used\n     * to define which fields should be redacted.\n     */\n    'erasure-request-redaction-enabled': t.boolean,\n    /** Attributes tagged to subdatapoint */\n    attributes: t.array(AttributePreview),\n  }),\n]);\n\n/** Type override */\nexport type FieldInput = t.TypeOf<typeof FieldInput>;\n\n/**\n * Datapoints are the different types of data models that existing within your data silo.\n * If the data silo is a database, these would be your tables.\n * Note: These are currently called \"datapoints\" in the Transcend UI and documentation.\n *\n * @see https://docs.transcend.io/docs/the-data-map#datapoints\n */\nexport const DatapointInput = t.intersection([\n  t.type({\n    /** The unique key of the datapoint. For a database, this is the table name. */\n    key: t.string,\n  }),\n  t.partial({\n    /**\n     * Usually only relevant for databases,\n     * this field should include any schema information for a given datapoint.\n     *\n     * Examples:\n     * - In postgres, it's possible to have multiple tables with the same name under\n     * different schemas. e.g., \"public\", \"test\". So here you'd specify [\"public\"] or [\"test\"]\n     * - In Snowflake, it's possible to have different databases with different schemas,\n     * so you can specify [\"ANALYTICS\", \"public\"] to indicate that the datapoint belongs to\n     * the \"public\" schema of the \"ANALYTICS\" database.\n     */\n    path: t.array(t.string),\n    /** The display title of the enricher */\n    title: t.string,\n    /** Internal description for why the enricher is needed */\n    description: t.string,\n    /**\n     * Configure the category of data that this datapoint should be grouped by in a data access request.\n     *\n     * @see https://docs.transcend.io/docs/privacy-requests/connecting-data-silos/saas-tools#configuring-an-integration\n     */\n    'data-collection-tag': t.string,\n    /**\n     * The SQL queries that should be run for that datapoint in a privacy request.\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/actions.ts\n     */\n    'privacy-action-queries': t.partial(applyEnum(RequestActionObjectResolver, () => t.string)),\n    /**\n     * The types of privacy actions that this datapoint can implement\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/actions.ts\n     */\n    'privacy-actions': t.array(valuesOf(RequestActionObjectResolver)),\n    /**\n     * Provide field-level metadata for this datapoint.\n     * This is often the column metadata\n     */\n    fields: t.array(FieldInput),\n    /**\n     * The email addresses of the employees within your company that are the go-to individuals\n     * for managing this datapoint\n     */\n    owners: t.array(t.string),\n    /**\n     * The names of teams within your Transcend instance that should be responsible\n     * for managing this datapoint\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type DatapointInput = t.TypeOf<typeof DatapointInput>;\n\nexport const PromptAVendorEmailSettings = t.partial({\n  /** The email address of the user to notify when a promptAPerson integration */\n  'notify-email-address': t.string,\n  /**\n   * The frequency with which we should be sending emails for this data silo, in milliseconds.\n   */\n  'send-frequency': t.number,\n  /**\n   * The type of emails to send for this data silo, i.e. send an email for each DSR, across all open DSRs,\n   * or per profile in a DSR.\n   */\n  'send-type': valuesOf(PromptAVendorEmailSendType),\n  /**\n   * Indicates whether prompt-a-vendor emails should include a list of identifiers\n   * in addition to a link to the bulk processing UI.\n   */\n  'include-identifiers-attachment': t.boolean,\n  /**\n   * Indicates what kind of link to generate as part of the emails sent out for this Prompt-a-Vendor silo.\n   */\n  'completion-link-type': valuesOf(PromptAVendorEmailCompletionLinkType),\n  /**\n   * The frequency with which we should retry sending emails for this data silo, in milliseconds.\n   * Needs to be a string because the number can be larger than the MAX_INT\n   */\n  'manual-work-retry-frequency': t.string,\n});\n\n/** Type override */\nexport type PromptAVendorEmailSettings = t.TypeOf<typeof PromptAVendorEmailSettings>;\n\n/**\n * Input to define a business entity\n *\n * @see https://app.transcend.io/data-map/data-inventory/business-entities\n */\nexport const BusinessEntityInput = t.intersection([\n  t.type({\n    /** The title of the business entity */\n    title: t.string,\n  }),\n  t.partial({\n    /** Description of the business entity */\n    description: t.string,\n    /** Address of the business entity */\n    address: t.string,\n    /** Country of headquarters */\n    headquarterCountry: valuesOf(IsoCountryCode),\n    /** Subdivision of headquarters */\n    headquarterSubDivision: valuesOf(IsoCountrySubdivisionCode),\n    /** Data protection officer name for the business entity */\n    dataProtectionOfficerName: t.string,\n    /** Data protection officer email for the business entity */\n    dataProtectionOfficerEmail: t.string,\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n    /**\n     * The email addresses of the employees within your company that are the go-to individuals\n     * for managing this data silo\n     */\n    owners: t.array(t.string),\n    /**\n     * The names of teams within your Transcend instance that should be responsible\n     * for managing this data silo.\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type BusinessEntityInput = t.TypeOf<typeof BusinessEntityInput>;\n\nexport const RegionInput = t.partial({\n  /** The country */\n  country: valuesOf(IsoCountryCode),\n  /** The country subdivision */\n  countrySubDivision: valuesOf(IsoCountrySubdivisionCode),\n});\n\n/** Type override */\nexport type RegionInput = t.TypeOf<typeof RegionInput>;\n\n/**\n * Input to define a processing activity\n *\n * @see https://app.transcend.io/data-map/data-inventory/processing-activities\n */\nexport const ProcessingActivityInput = t.intersection([\n  t.type({\n    /** The title of the processing activity */\n    title: t.string,\n  }),\n  t.partial({\n    /** Description of the processing activity */\n    description: t.string,\n    /** Security measure details */\n    securityMeasureDetails: t.string,\n    /**\n     * Controllerships\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/datapoint.ts\n     */\n    controllerships: t.array(valuesOf(Controllership)),\n    /** Storage regions */\n    storageRegions: t.array(RegionInput),\n    /** Transfer regions */\n    transferRegions: t.array(RegionInput),\n    /**\n     * Retention type\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/datapoint.ts\n     */\n    retentionType: valuesOf(RetentionType),\n    /** Retention period in days */\n    retentionPeriod: t.number,\n    /** Data protection impact assessment link */\n    dataProtectionImpactAssessmentLink: t.string,\n    /**\n     * Data protection impact assessment status\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/processingActivity.ts.ts\n     */\n    dataProtectionImpactAssessmentStatus: valuesOf(DataProtectionImpactAssessmentStatus),\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n    /** Data silo titles */\n    dataSiloTitles: t.array(t.string),\n    /** Data subject types */\n    dataSubjectTypes: t.array(t.string),\n    /** Team names */\n    teamNames: t.array(t.string),\n    /** Owner emails */\n    ownerEmails: t.array(t.string),\n    /**\n     * The purposes of processing for this processing activity\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/objects.ts\n     */\n    processingSubPurposes: t.array(ProcessingPurposePreviewInput),\n    /**\n     * The categories of personal data for this processing activity\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/objects.ts\n     */\n    dataSubCategories: t.array(DataCategoryPreviewInput),\n    /** SaaS category titles */\n    saaSCategories: t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type ProcessingActivityInput = t.TypeOf<typeof ProcessingActivityInput>;\n\n/**\n * Software development kit inputs\n *\n * @see https://app.transcend.io/code-scanning/sdks\n */\nexport const SoftwareDevelopmentKitInput = t.intersection([\n  t.type({\n    /** Title of software development kit */\n    name: t.string,\n    /** Code package type */\n    codePackageType: valuesOf(CodePackageType),\n  }),\n  t.partial({\n    /** Description of the SDK */\n    description: t.string,\n    /** Github repository */\n    repositoryUrl: t.string,\n    /** Integration name */\n    catalogIntegrationName: t.string,\n    /** Doc links */\n    documentationLinks: t.array(t.string),\n    /** Emails of owners */\n    ownerEmails: t.array(t.string),\n    /** Team names */\n    teamNames: t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type SoftwareDevelopmentKitInput = t.TypeOf<typeof SoftwareDevelopmentKitInput>;\n\n/**\n * SDK defined for a code package\n */\nexport const CodePackageSdk = t.intersection([\n  t.type({\n    /** Name of SDK */\n    name: t.string,\n  }),\n  t.partial({\n    /** Version of SDK */\n    version: t.string,\n    /** Indicate if dependency is a dev dependency */\n    isDevDependency: t.boolean,\n  }),\n]);\n\n/** Type override */\nexport type CodePackageSdk = t.TypeOf<typeof CodePackageSdk>;\n\n/**\n * Input to define a code package\n *\n * @see https://app.transcend.io/code-scanning/code-packages\n */\nexport const CodePackageInput = t.intersection([\n  t.type({\n    /** The name of the package */\n    name: t.string,\n    /** Type of code package */\n    type: valuesOf(CodePackageType),\n    /** Relative path to code package within the repository */\n    relativePath: t.string,\n    /** Name of repository that the code packages are being uploaded to */\n    repositoryName: t.string,\n  }),\n  t.partial({\n    /** Description of the code package */\n    description: t.string,\n    /** Software development kits in the repository */\n    softwareDevelopmentKits: t.array(CodePackageSdk),\n    /** Names of the teams that manage the code package */\n    teamNames: t.array(t.string),\n    /** Names of the owner emails that manage the code package */\n    ownerEmails: t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type CodePackageInput = t.TypeOf<typeof CodePackageInput>;\n\n/**\n * Input to define a repository\n *\n * @see https://app.transcend.io/code-scanning/repositories\n */\nexport const RepositoryInput = t.intersection([\n  t.type({\n    /** The name of the repo */\n    name: t.string,\n    /** URL of repository */\n    url: t.string,\n  }),\n  t.partial({\n    /** Description of the repository */\n    description: t.string,\n    /** Names of the teams that manage the repository */\n    teamNames: t.array(t.string),\n    /** Names of the owner emails that manage the repository */\n    ownerEmails: t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type RepositoryInput = t.TypeOf<typeof RepositoryInput>;\n\n/**\n * Input to define a data subject\n *\n * @see https://app.transcend.io/privacy-requests/settings\n */\nexport const DataSubjectInput = t.intersection([\n  t.type({\n    /** The type of the data subject */\n    type: t.string,\n  }),\n  t.partial({\n    /** Whether the data subject is active on the Privacy Center & DSR API */\n    active: t.boolean,\n    /** The title of the data subject */\n    title: t.string,\n    /** Whether or not to default new requests made in the admin dashboard to silent mode */\n    adminDashboardDefaultSilentMode: t.boolean,\n    /**\n     * Whether requests can be submitted on behalf of this data subject by an authorized agent.\n     * Requires the Authorized Agents feature to be enabled for the organization.\n     */\n    supportsAuthorizedAgent: t.boolean,\n    /** Enabled request actions for the data subject */\n    actions: t.array(valuesOf(RequestAction)),\n  }),\n]);\n\n/** Type override */\nexport type DataSubjectInput = t.TypeOf<typeof DataSubjectInput>;\n\n/**\n * Input to define an action\n *\n * @see https://app.transcend.io/privacy-requests/settings\n */\nexport const ActionInput = t.intersection([\n  t.type({\n    /** The type of the data subject */\n    type: valuesOf(RequestAction),\n  }),\n  t.partial({\n    /** Whether or not to skip deletion phase when no data is found */\n    skipSecondaryIfNoFiles: t.boolean,\n    /** Whether to skip the downloadable step */\n    skipDownloadableStep: t.boolean,\n    /** Whether the request action requires review */\n    requiresReview: t.boolean,\n    /** The wait period for the action */\n    waitingPeriod: t.number,\n    /** The method in which the data subject's region is detected */\n    regionDetectionMethod: valuesOf(RegionDetectionMethod),\n    /** The list of regions to show in the form */\n    regionList: t.array(valuesOf({ ...IsoCountryCode, ...IsoCountrySubdivisionCode })),\n    /** The list of regions NOT to show in the form */\n    regionBlockList: t.array(valuesOf({ ...IsoCountryCode, ...IsoCountrySubdivisionCode })),\n  }),\n]);\n\n/** Type override */\nexport type ActionInput = t.TypeOf<typeof ActionInput>;\n\n/**\n * Input to define an identifier\n *\n * @see https://app.transcend.io/privacy-requests/identifiers\n */\nexport const IdentifierInput = t.intersection([\n  t.type({\n    /** The name of the identifier */\n    name: t.string,\n    /** The type of the identifier */\n    type: t.string,\n  }),\n  t.partial({\n    /** Regular expression to verify the identifier */\n    regex: t.string,\n    /** The fixed set of options that an identifier can take on */\n    selectOptions: t.array(t.string),\n    /** Whether or not the identifier is shown in the privacy center form */\n    privacyCenterVisibility: t.array(valuesOf(RequestAction)),\n    /** The set of data subjects that this identifier is enabled for */\n    dataSubjects: t.array(t.string),\n    /** When true, the identifier is a required field on the privacy center form */\n    isRequiredInForm: t.boolean,\n    /** Placeholder message for identifier */\n    placeholder: t.string,\n    /** Display title for identifier */\n    displayTitle: t.string,\n    /** Display description for identifier */\n    displayDescription: t.string,\n    /** The display order for the identifier */\n    displayOrder: t.number,\n    /** Whether or not the identifier is unique on the preference store */\n    isUniqueOnPreferenceStore: t.boolean,\n  }),\n]);\n\n/** Type override */\nexport type IdentifierInput = t.TypeOf<typeof IdentifierInput>;\n\n/**\n * Input to define a data flow\n *\n * @see https://app.transcend.io/consent-manager/data-flows/approved\n */\nexport const DataFlowInput = t.intersection([\n  t.type({\n    /** Value of data flow */\n    value: t.string,\n    /** Type of data flow */\n    type: valuesOf(DataFlowScope),\n  }),\n  t.partial({\n    /** Description of data flow */\n    description: t.string,\n    /** The tracking purposes that are required to be opted in for this data flow */\n    trackingPurposes: t.array(t.string),\n    /**\n     * Name of the consent service attached\n     */\n    service: t.string,\n    /**\n     * Status of the tracker (approved vs triage)\n     */\n    status: valuesOf(ConsentTrackerStatus),\n    /**\n     * The email addresses of the employees within your company that are the go-to individuals\n     * for managing this data silo\n     */\n    owners: t.array(t.string),\n    /**\n     * The names of teams within your Transcend instance that should be responsible\n     * for managing this data silo.\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n  }),\n]);\n\n/** Type override */\nexport type DataFlowInput = t.TypeOf<typeof DataFlowInput>;\n\nexport const CookieInput = t.intersection([\n  t.type({\n    /** Name of data flow */\n    name: t.string,\n  }),\n  t.partial({\n    /** Whether or not the cookie is a regular expression */\n    isRegex: t.boolean,\n    /** Description of data flow */\n    description: t.string,\n    /** The tracking purposes that are required to be opted in for this data flow */\n    trackingPurposes: t.array(t.string),\n    /**\n     * Name of the consent service attached\n     */\n    service: t.string,\n    /**\n     * Status of the tracker (approved vs triage)\n     */\n    status: valuesOf(ConsentTrackerStatus),\n    /**\n     * The email addresses of the employees within your company that are the go-to individuals\n     * for managing this data silo\n     */\n    owners: t.array(t.string),\n    /**\n     * The names of teams within your Transcend instance that should be responsible\n     * for managing this data silo.\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n  }),\n]);\n\n/** Type override */\nexport type CookieInput = t.TypeOf<typeof CookieInput>;\n\nexport const ConsentManageExperienceInput = t.intersection([\n  t.type({\n    /** Name of experience */\n    name: t.string,\n  }),\n  t.partial({\n    /** Name of experience */\n    displayName: t.string,\n    /** Region that define this regional experience */\n    regions: t.array(RegionInput),\n    /** How to handle consent expiry */\n    onConsentExpiry: valuesOf(OnConsentExpiry),\n    /** Consent expiration lever */\n    consentExpiry: t.number,\n    /** In vs not in operator */\n    operator: valuesOf(RegionsOperator),\n    /** Priority of experience */\n    displayPriority: t.number,\n    /** View state to prompt when auto prompting is enabled */\n    viewState: valuesOf(InitialViewState),\n    /** Purposes that can be opted out of in a particular experience */\n    purposes: t.array(\n      t.type({\n        /** Slug of purpose */\n        trackingType: t.string,\n      }),\n    ),\n    /** Purposes that are opted out by default in a particular experience */\n    optedOutPurposes: t.array(\n      t.type({\n        /** Slug of purpose */\n        trackingType: t.string,\n      }),\n    ),\n    /**\n     * Browser languages that define this regional experience\n     */\n    browserLanguages: t.array(valuesOf(BrowserLanguage)),\n    /** Browser time zones that define this regional experience */\n    browserTimeZones: t.array(valuesOf(BrowserTimeZone)),\n    /** ID of the consent UI variant assigned to this experience */\n    consentUiVariantSlug: t.string,\n  }),\n]);\n\n/** Type override */\nexport type ConsentManageExperienceInput = t.TypeOf<typeof ConsentManageExperienceInput>;\n\nexport const PartitionInput = t.intersection([\n  t.type({\n    /** Name of partition */\n    name: t.string,\n  }),\n  t.partial({\n    /** Value of partition, cannot be pushed, can only be pulled */\n    partition: t.string,\n  }),\n]);\n\n/** Type override */\nexport type PartitionInput = t.TypeOf<typeof PartitionInput>;\n\nexport const ConsentManagerInput = t.partial({\n  /** Airgap version */\n  version: t.string,\n  /** The consent manager domains in the instance */\n  bundleUrls: t.record(valuesOf(ConsentBundleType), t.string),\n  /** The consent manager domains in the instance */\n  domains: t.array(t.string),\n  /** Key used to partition consent records */\n  partition: t.string,\n  /** Precedence of signals vs user input */\n  consentPrecedence: valuesOf(ConsentPrecedenceOption),\n  /** The consent manager unknown request policy */\n  unknownRequestPolicy: valuesOf(UnknownRequestPolicy),\n  /** The consent manager unknown cookie policy */\n  unknownCookiePolicy: valuesOf(UnknownRequestPolicy),\n  /** The XDI sync endpoint for this airgap bundle */\n  syncEndpoint: t.string,\n  /** The telemetry partitioning strategy */\n  telemetryPartitioning: valuesOf(TelemetryPartitionStrategy),\n  /** Whether the site owner has signed the IAB agreement */\n  signedIabAgreement: valuesOf(SignedIabAgreementOption),\n  /** Regional experience configurations */\n  experiences: t.array(ConsentManageExperienceInput),\n  /** Theme config */\n  theme: t.partial({\n    /** Primary color */\n    primaryColor: t.string,\n    /** Font color */\n    fontColor: t.string,\n    /** Privacy policy URL */\n    privacyPolicy: t.string,\n    /** Auto-prompt setting */\n    prompt: t.number,\n  }),\n  // TODO: https://transcend.height.app/T-23919 - reconsider simpler yml shape\n  /** The Shared XDI host sync groups config (JSON) for this airgap bundle */\n  syncGroups: t.string,\n  consentVariants: t.array(ConsentVariantInput),\n  consentThemes: t.array(ConsentThemeInput),\n});\n\n/** Type override */\nexport type ConsentManagerInput = t.TypeOf<typeof ConsentManagerInput>;\n\n/**\n * Input to define a privacy center\n */\nexport const PrivacyCenterInput = t.partial({\n  /** Whether or not the entire privacy center is enabled or disabled */\n  isDisabled: t.boolean,\n  /** Whether or not to show the privacy requests button */\n  showPrivacyRequestButton: t.boolean,\n  /** Whether or not to show the policies page */\n  showPolicies: t.boolean,\n  /** Whether or not to show the tracking technologies page */\n  showTrackingTechnologies: t.boolean,\n  /** Whether or not to show the cookies on the tracking technologies page */\n  showCookies: t.boolean,\n  /** Whether or not to show the data flows on the tracking technologies page */\n  showDataFlows: t.boolean,\n  /** Whether or not to show the consent manager opt out options on the tracking technologies page */\n  showConsentManager: t.boolean,\n  /** Whether or not to show the manage your privacy page */\n  showManageYourPrivacy: t.boolean,\n  /** Whether or not to show the marketing preferences page */\n  showMarketingPreferences: t.boolean,\n  /** What languages are supported for the privacy center */\n  locales: t.array(valuesOf(LOCALE_KEY)),\n  /** The default locale for the privacy center */\n  defaultLocale: valuesOf(LOCALE_KEY),\n  /** Whether or not to prefer the browser default locale */\n  preferBrowserDefaultLocale: t.boolean,\n  /** The email addresses of the employees within your company that are the go-to individuals for managing this privacy center */\n  supportEmail: t.string,\n  /** The email addresses of the employees within your company that are the go-to individuals for managing this privacy center */\n  replyToEmail: t.string,\n  /** Whether or not to send emails from a no reply email */\n  useNoReplyEmailAddress: t.boolean,\n  /** Whether or not to use a custom email domain */\n  useCustomEmailDomain: t.boolean,\n  /** Whether or not to transcend access requests from JSON to CSV */\n  transformAccessReportJsonToCsv: t.boolean,\n  /**\n   * Privacy Center \"home\" / back-to-site link URL shown in the privacy center\n   * header\n   */\n  home: t.string,\n  /** Whether the side menu is expanded by default on the privacy center */\n  expandSideMenuByDefault: t.boolean,\n  /**\n   * Whether custom fields are required when submitting privacy requests from\n   * the privacy center workflows UI\n   */\n  workflowsCustomFieldsRequired: t.boolean,\n  /**\n   * Child organization URIs (or IDs) to display on a unified multi-brand\n   * privacy center. Resolved to organization IDs on push.\n   */\n  displayedChildOrganizationUris: t.array(t.string),\n  /** Footer layout for privacy center footer links */\n  footerLayout: valuesOf(PrivacyCenterFooterLayout),\n  /**\n   * Footer links displayed on the privacy center. Matched by title on push;\n   * links omitted from this list are deleted.\n   */\n  footerLinks: t.array(\n    t.intersection([\n      t.type({\n        /** Link title (default locale) */\n        title: t.string,\n      }),\n      t.partial({\n        /** Link URL (default locale); optional for icon-only links */\n        url: t.string,\n        /**\n         * When true with an icon set, render as icon-only (title is used for\n         * accessibility). When false with an icon set, render icon beside the\n         * visible label.\n         */\n        iconOnly: t.boolean,\n      }),\n    ]),\n  ),\n  /** The theme object of colors to display on the privacy center */\n  theme: t.partial({\n    /** The theme colors */\n    colors: t.partial(applyEnum(ConfigurableColorPaletteColor, () => t.string)),\n    /** Styles to apply to components */\n    componentStyles: PrivacyCenterComponentStyles,\n    /** Override styles */\n    textStyles: PrivacyCenterTextStyles,\n  }),\n});\n\n/** Type override */\nexport type PrivacyCenterInput = t.TypeOf<typeof PrivacyCenterInput>;\n\n/**\n * Input to define a policy\n */\nexport const PolicyInput = t.intersection([\n  t.type({\n    /** The title of the policy */\n    title: t.string,\n  }),\n  t.partial({\n    /**\n     * Policy type. On create, defaults from title\n     * (Privacy Policy / Cookie Policy / CUSTOM).\n     */\n    type: valuesOf(PolicyType),\n    /** Effective date of policy */\n    effectiveOn: t.string,\n    /** Whether or not to disable the effective date */\n    disableEffectiveOn: t.boolean,\n    /** Content of the policy */\n    content: t.string,\n    /** The languages for which the policy is disabled for */\n    disabledLocales: t.array(valuesOf(LOCALE_KEY)),\n  }),\n]);\n\n/** Type override */\nexport type PolicyInput = t.TypeOf<typeof PolicyInput>;\n\n/**\n * Input to define an internationalized message defined in Transcend\n */\nexport const IntlMessageInput = t.intersection([\n  t.type({\n    /** The ID of the message */\n    id: t.string,\n  }),\n  t.partial({\n    /** The hard-coded ID that the message refers to in the Privacy Center or Consent Manager UI, null if message is dynamic */\n    targetReactIntlId: t.string,\n    /** The description of the message */\n    description: t.string,\n    /** The default message to use */\n    defaultMessage: t.string,\n    /** The translations */\n    translations: t.partial(applyEnum(LOCALE_KEY, () => t.string)),\n  }),\n]);\n\n/** Type override */\nexport type IntlMessageInput = t.TypeOf<typeof IntlMessageInput>;\n\n/**\n * A set of deletion dependencies, either global (when `workflow` is omitted)\n * or scoped to a single DSR workflow.\n *\n * An empty `titles` list scoped to a workflow is an explicit override, meaning\n * that workflow runs the data silo with no dependencies at all.\n */\nexport const DeletionDependency = t.intersection([\n  t.type({\n    /**\n     * The titles of the data silos that must be deleted from first. This list can contain\n     * other internal systems defined in this file, as well as any of the SaaS tools connected\n     * in your Transcend instance.\n     */\n    titles: t.array(t.string),\n  }),\n  t.partial({\n    /**\n     * The internal name of the DSR workflow that these dependencies override the global\n     * configuration for. Omit to declare the global configuration.\n     */\n    workflow: t.string,\n  }),\n]);\n\n/** Type override */\nexport type DeletionDependency = t.TypeOf<typeof DeletionDependency>;\n\n/**\n * Removes a workflow's deletion dependency override so that the workflow falls back\n * to the global configuration.\n */\nexport const DeletionDependencyReset = t.type({\n  /** The internal name of the DSR workflow to remove the override from */\n  workflow: t.string,\n  /** Must be `true`; declares that the override should be removed */\n  'reset-to-global': t.literal(true),\n});\n\n/** Type override */\nexport type DeletionDependencyReset = t.TypeOf<typeof DeletionDependencyReset>;\n\n/**\n * A single object entry in a data silo's `deletion-dependencies` list.\n * Global dependencies are written as `{ titles: [...] }`; per-workflow overrides\n * include a `workflow` key.\n */\nexport const DeletionDependencyInput = t.union([DeletionDependency, DeletionDependencyReset]);\n\n/** Type override */\nexport type DeletionDependencyInput = t.TypeOf<typeof DeletionDependencyInput>;\n\n/**\n * The `deletion-dependencies` field for a data silo.\n *\n * Prefer a list of objects: `{ titles: [...] }` for the global configuration and\n * `{ workflow, titles }` or `{ workflow, reset-to-global: true }` for each override.\n * A bare list of titles is still accepted for global-only configuration. Mixing\n * titles and objects in the same list is not allowed.\n */\nexport const DeletionDependencies = t.union([t.array(t.string), t.array(DeletionDependencyInput)]);\n\n/** Type override */\nexport type DeletionDependencies = t.TypeOf<typeof DeletionDependencies>;\n\n/**\n * Input to define a data silo\n *\n * Define the data silos in your data map. A data silo can be a database,\n * or a web service that may use a collection of different data stores under the hood.\n *\n * @see https://docs.transcend.io/docs/the-data-map#data-silos\n */\nexport const DataSiloInput = t.intersection([\n  t.type({\n    /** The display title of the data silo */\n    title: t.string,\n    /**\n     * The type of integration. Common internal system types:\n     * server | database | cron  | promptAPerson\n     */\n    integrationName: t.string,\n  }),\n  t.partial({\n    /** For prompt a person or database integrations, the underlying integration name */\n    'outer-type': t.string,\n    /** A description for that data silo */\n    description: t.string,\n    /** The webhook URL to notify for data privacy requests */\n    url: t.string,\n    /** The title of the API key that will be used to respond to privacy requests */\n    'api-key-title': t.string,\n    /**\n     * The ID of the configured Sombra instance that processes privacy requests for this data silo.\n     * Useful for multi-Sombra organizations. Pull/push via `transcend inventory pull` / `push`.\n     */\n    'sombra-id': t.string,\n    /** Custom headers to include in outbound webhook */\n    headers: t.array(WebhookHeader),\n    /**\n     * Specify which data subjects may have personally-identifiable-information (PII) within this system\n     * This field can be omitted, and the default assumption will be that the system may potentially\n     * contain PII for any potential data subject type.\n     */\n    'data-subjects': t.array(t.string),\n    /**\n     * When this data silo implements a privacy request, these are the identifiers\n     * that should be looked up within this system.\n     */\n    'identity-keys': t.array(t.string),\n    /**\n     * When a data erasure request is being performed, this data silo should not be deleted from\n     * until all of the following data silos were deleted first. This list can contain other internal\n     * systems defined in this file, as well as any of the SaaS tools connected in your Transcend instance.\n     *\n     * Prefer a list of objects: `{ titles: [...] }` for the global configuration and\n     * `{ workflow, titles }` (or `{ workflow, reset-to-global: true }`) for each override.\n     * A bare list of titles is still accepted for global-only configuration. Workflows that\n     * are not listed keep whatever configuration they already have.\n     */\n    'deletion-dependencies': DeletionDependencies,\n    /**\n     * The email addresses of the employees within your company that are the go-to individuals\n     * for managing this data silo\n     */\n    owners: t.array(t.string),\n    /**\n     * The names of teams within your Transcend instance that should be responsible\n     * for managing this data silo.\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n    /**\n     * Specify this flag if the data silo is under development and should not be included\n     * in production privacy request workflows. Will still sync metadata to app.transcend.io.\n     */\n    disabled: t.boolean,\n    /**\n     * Datapoints defined within this data silo, see comment of `DatapointInput`\n     * for further details.\n     */\n    datapoints: t.array(DatapointInput),\n    /**\n     * Configure email notification settings for privacy requests\n     */\n    'email-settings': PromptAVendorEmailSettings,\n    /** Country of data silo hosting */\n    country: valuesOf(IsoCountryCode),\n    /** Sub-division of data silo hosting */\n    countrySubDivision: valuesOf(IsoCountrySubdivisionCode),\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n    /**\n     * The business entities associated with this data silo\n     */\n    businessEntityTitles: t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type DataSiloInput = t.TypeOf<typeof DataSiloInput>;\n\nexport const ActionItemCollectionInput = t.intersection([\n  t.type({\n    /** The display title of the enricher */\n    title: t.string,\n    /** Locations where collection is shown */\n    productLine: valuesOf(TranscendProduct),\n  }),\n  t.partial({\n    /** Description of collection */\n    description: t.string,\n    /** Whether hidden */\n    hidden: t.boolean,\n  }),\n]);\n\n/** Type override */\nexport type ActionItemCollectionInput = t.TypeOf<typeof ActionItemCollectionInput>;\n\n/**\n * Input to define an action item\n */\nexport const ActionItemInput = t.intersection([\n  t.type({\n    /** The display title of the enricher */\n    title: t.string,\n    /** Action item type */\n    type: valuesOf(ActionItemCode),\n    /** The titles of the collections that the action item is grouped within */\n    collections: t.array(t.string),\n  }),\n  t.partial({\n    /** Priority of the action item */\n    priority: valuesOf(ActionItemPriorityOverride),\n    /** Customer experience action item key */\n    customerExperienceActionItemId: t.string,\n    /** Due date of the action item */\n    dueDate: t.string,\n    /** Whether action item has been resolved */\n    resolved: t.boolean,\n    /** Notes */\n    notes: t.string,\n    /** Links to action items */\n    link: t.string,\n    /**\n     * The email addresses of the employees assigned to the action item\n     */\n    users: t.array(t.string),\n    /**\n     * The names of teams assigned to the action item\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n  }),\n]);\n\n/** Type override */\nexport type ActionItemInput = t.TypeOf<typeof ActionItemInput>;\n\nexport const AssessmentRuleInput = t.intersection([\n  t.type({\n    /** The reference id of the question whose answer is compared by this rule */\n    'depends-on-question-reference-id': t.string,\n    /** The operator to use when comparing the question answer to the operands */\n    'comparison-operator': valuesOf(ComparisonOperator),\n  }),\n  t.partial({\n    /** The values to compare the question answer to */\n    'comparison-operands': t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type AssessmentRuleInput = t.TypeOf<typeof AssessmentRuleInput>;\n\nexport interface AssessmentNestedRuleInput {\n  /** The operator to use when comparing the nested rules */\n  'logic-operator': LogicOperator;\n  /** The rules to evaluate and be compared with to other using the LogicOperator */\n  rules?: AssessmentRuleInput[];\n  /** The nested rules to add one more level of nesting to the rules. They are also compared to each other. */\n  'nested-rules'?: AssessmentNestedRuleInput[];\n}\n\nexport const AssessmentNestedRuleInput: t.RecursiveType<t.Type<AssessmentNestedRuleInput>> =\n  t.recursion('AssessmentNestedRuleInput', (self) =>\n    t.intersection([\n      t.type({\n        /** The operator to use when comparing the nested rules */\n        'logic-operator': valuesOf(LogicOperator),\n      }),\n      t.partial({\n        /** The rules to evaluate and be compared with to other using the LogicOperator */\n        rules: t.array(AssessmentRuleInput),\n        /** The nested rules to add one more level of nesting to the rules. They are also compared to each other. */\n        'nested-rules': t.array(self),\n      }),\n    ]),\n  );\n\nexport const AssessmentDisplayLogicInput = t.intersection([\n  t.type({\n    /** The display logic type */\n    action: valuesOf(AssessmentsDisplayLogicAction),\n  }),\n  t.partial({\n    /** The rule to evaluate */\n    rule: AssessmentRuleInput,\n    /** The nested rule to evaluate */\n    'nested-rule': AssessmentNestedRuleInput,\n  }),\n]);\n\n/** Type override */\nexport type AssessmentDisplayLogicInput = t.TypeOf<typeof AssessmentDisplayLogicInput>;\n\nexport const RiskAssignmentInput = t.partial({\n  /** The risk level to assign to the question */\n  'risk-level': t.string,\n  /** The risk matrix column to assign to a question. */\n  'risk-matrix-column': t.string,\n  /** The risk matrix row to assign to a question. */\n  'risk-matrix-row': t.string,\n});\n\n/** Type override */\nexport type RiskAssignmentInput = t.TypeOf<typeof RiskAssignmentInput>;\n\nexport const RiskLogicInput = t.intersection([\n  t.type({\n    /** The values to compare */\n    'comparison-operands': t.array(t.string),\n    /** The operator */\n    'comparison-operator': valuesOf(ComparisonOperator),\n  }),\n  t.partial({\n    /** The risk level to assign to the question */\n    'risk-level': t.string,\n    /** The risk matrix column to assign to a question. */\n    'risk-matrix-column': t.string,\n    /** The risk matrix row to assign to a question. */\n    'risk-matrix-row': t.string,\n  }),\n]);\n\n/** Type override */\nexport type RiskLogicInput = t.TypeOf<typeof RiskLogicInput>;\n\nexport const AssessmentAnswerOptionInput = t.type({\n  /** Value of answer */\n  value: t.string,\n});\n\n/** Type override */\nexport type AssessmentAnswerOptionInput = t.TypeOf<typeof AssessmentAnswerOptionInput>;\n\nexport const AssessmentSectionQuestionInput = t.intersection([\n  t.type({\n    /** The title of the assessment section question */\n    title: t.string,\n    /** The question type */\n    type: valuesOf(AssessmentQuestionType),\n  }),\n  t.partial({\n    /** The sub-type of the assessment question */\n    'sub-type': valuesOf(AssessmentQuestionSubType),\n    /** The question placeholder */\n    placeholder: t.string,\n    /** The question description */\n    description: t.string,\n    /** Whether an answer is required */\n    'is-required': t.boolean,\n    /** Used to identify the question within a form or template so it can be referenced in conditional logic. */\n    'reference-id': t.string,\n    /** Display logic for the question */\n    'display-logic': AssessmentDisplayLogicInput,\n    /** Risk logic for the question */\n    'risk-logic': t.array(RiskLogicInput),\n    /** Risk category titles for the question */\n    'risk-categories': t.array(t.string),\n    /** Risk framework titles for the question */\n    'risk-framework': t.string,\n    /** Answer options for the question */\n    'answer-options': t.array(AssessmentAnswerOptionInput),\n    /** The selected answers to the assessments */\n    'selected-answers': t.array(t.string),\n    /** Allowed MIME types for the question */\n    'allowed-mime-types': t.array(t.string),\n    /** Allow selecting other options */\n    'allow-select-other': t.boolean,\n    /** Sync model for the question */\n    'sync-model': valuesOf(AssessmentSyncModel),\n    /** Sync column for the question */\n    'sync-column': valuesOf(AssessmentSyncColumn),\n    /** Attribute key / custom field name for the question */\n    'attribute-key': t.string,\n    /** Require risk evaluation for the question */\n    'require-risk-evaluation': t.boolean,\n    /** Require risk matrix evaluation for the question */\n    'require-risk-matrix-evaluation': t.boolean,\n  }),\n]);\n\n/** Type override */\nexport type AssessmentSectionQuestionInput = t.TypeOf<typeof AssessmentSectionQuestionInput>;\n\nexport const AssessmentSectionInput = t.intersection([\n  t.type({\n    /** The title of the assessment section */\n    title: t.string,\n    /** The questions in the assessment section */\n    questions: t.array(AssessmentSectionQuestionInput),\n  }),\n  t.partial({\n    /** Email address of those assigned */\n    assignees: t.array(t.string),\n    /** Email address of those externally assigned */\n    'external-assignees': t.array(t.string),\n    /** Status of section */\n    status: t.string,\n    /** Whether assessment is reviewed */\n    'is-reviewed': t.boolean,\n  }),\n]);\n\n/** Type override */\nexport type AssessmentSectionInput = t.TypeOf<typeof AssessmentSectionInput>;\n\nexport const AssessmentRetentionScheduleInput = t.type({\n  /** The retention schedule type */\n  type: valuesOf(RetentionScheduleType),\n  /** The duration of the retention schedule in days */\n  'duration-days': t.number,\n  /** The operation to perform on the retention schedule */\n  operand: valuesOf(RetentionScheduleOperation),\n});\n\n/** Type override */\nexport type AssessmentRetentionScheduleInput = t.TypeOf<typeof AssessmentRetentionScheduleInput>;\n\nexport const AssessmentTemplateInput = t.intersection([\n  t.type({\n    /** The title of the assessment template */\n    title: t.string,\n  }),\n  t.partial({\n    /** The Assessment sections under this assessment template */\n    sections: t.array(AssessmentSectionInput),\n    /** Description of assessment template */\n    description: t.string,\n    /** The status of the assessment */\n    status: valuesOf(AssessmentFormTemplateStatus),\n    /** The source of the assessment */\n    source: valuesOf(AssessmentFormTemplateSource),\n    /** The email of the user that created the assessment */\n    creator: t.string,\n    /** Whether the template is in a locked status */\n    locked: t.boolean,\n    /** ID of parent template this was cloned from */\n    'parent-id': t.string,\n    /** Whether the template is archived */\n    archived: t.boolean,\n    /** The date that the assessment was created */\n    'created-at': t.string,\n    /** The names of the custom fields associated to this assessment template */\n    'attribute-keys': t.array(t.string),\n    /** The retention schedule configuration */\n    'retention-schedule': AssessmentRetentionScheduleInput,\n    /** The titles of the email templates used in the assessment template */\n    templates: t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type AssessmentTemplateInput = t.TypeOf<typeof AssessmentTemplateInput>;\n\nexport const AssessmentResourceInput = t.type({\n  /** The title of the resource */\n  title: t.string,\n  /** The type of the resource */\n  type: valuesOf(AttributeSupportedResourceType),\n});\n\n/** Type override */\nexport type AssessmentResourceInput = t.TypeOf<typeof AssessmentResourceInput>;\n\nexport const AssessmentInput = t.intersection([\n  t.type({\n    /** The title of the assessment */\n    title: t.string,\n    /** The title of the assessment group */\n    group: t.string,\n  }),\n  t.partial({\n    /** The assessment sections */\n    sections: t.array(AssessmentSectionInput),\n    /** The email of the user that created the assessment */\n    creator: t.string,\n    /** The description of the assessment */\n    description: t.string,\n    /** The status of the assessment */\n    status: valuesOf(AssessmentFormStatus),\n    /** The emails of the transcend users assigned to the assessment */\n    assignees: t.array(t.string),\n    /** The emails of the external emails assigned to the assessment */\n    'external-assignees': t.array(t.string),\n    /** The emails of the assessment reviewers */\n    reviewers: t.array(t.string),\n    /** Whether the assessment is in a locked status */\n    locked: t.boolean,\n    /** Whether the assessment is archived */\n    archived: t.boolean,\n    /** Whether the form is created by an external user */\n    external: t.boolean,\n    /**\n     * Whether the form title is an internal label only, and the group title should be used in communications with assignees\n     */\n    'title-is-internal': t.boolean,\n    /** The date that the assessment is due */\n    'due-date': t.string,\n    /** The date that the assessment was created */\n    'created-at': t.string,\n    /** The date that the assessment was assigned at */\n    'assigned-at': t.string,\n    /** The date that the assessment was submitted at */\n    'submitted-at': t.string,\n    /** The date that the assessment was approved at */\n    'approved-at': t.string,\n    /** The date that the assessment was rejected at */\n    'rejected-at': t.string,\n    /** The linked data inventory resources */\n    resources: t.array(AssessmentResourceInput),\n    /** The linked data inventory synced rows */\n    rows: t.array(AssessmentResourceInput),\n    /** The assessment retention schedule */\n    'retention-schedule': AssessmentRetentionScheduleInput,\n    /** The assessment custom fields */\n    attributes: t.array(AttributePreview),\n  }),\n]);\n\n/** Type override */\nexport type AssessmentInput = t.TypeOf<typeof AssessmentInput>;\n\nexport const ConsentPreferenceTopicOptionValue = t.type({\n  /** Title of option value */\n  title: t.string,\n  /** API slug */\n  slug: t.string,\n});\n\n/** Type override */\nexport type ConsentPreferenceTopicOptionValue = t.TypeOf<typeof ConsentPreferenceTopicOptionValue>;\n\nexport const ConsentPreferenceTopic = t.intersection([\n  t.type({\n    /** The type of the preference topic */\n    type: valuesOf(PreferenceTopicType),\n    /** The title of the preference topic */\n    title: t.string,\n    /** The description of the preference topic */\n    description: t.string,\n    /** API slug for the preference topic (PascalCase; alphabetical letters only) */\n    slug: t.string,\n  }),\n  t.partial({\n    /** Hex color for the preference topic (pull-only; not writable via CLI push today) */\n    color: t.string,\n    /** Default value */\n    'default-configuration': t.string,\n    /** Whether the preference topic is shown in privacy center */\n    'show-in-privacy-center': t.boolean,\n    /** The options when type is single or multi select */\n    options: t.array(ConsentPreferenceTopicOptionValue),\n  }),\n]);\n\n/** Type override */\nexport type ConsentPreferenceTopic = t.TypeOf<typeof ConsentPreferenceTopic>;\n\nexport const ConsentPurpose = t.intersection([\n  t.type({\n    /** Consent purpose slug */\n    trackingType: t.string,\n    /** The title of the tracking purpose that appears in Consent Management and Privacy Center UIs  */\n    title: t.string,\n    /** The display name of this tracking purpose */\n    name: t.string,\n  }),\n  t.partial({\n    /** Description of purpose */\n    description: t.string,\n    /** Whether purpose is active */\n    'is-active': t.boolean,\n    /** Whether purpose is configurable */\n    configurable: t.boolean,\n    /** Display order of purpose for privacy center */\n    'display-order': t.number,\n    /** Whether purpose is shown in privacy center */\n    'show-in-privacy-center': t.boolean,\n    /** Whether purpose is show in consent manger */\n    'show-in-consent-manager': t.boolean,\n    /** The preference topics configured for the purpose */\n    'preference-topics': t.array(ConsentPreferenceTopic),\n    /** Authentication level for purpose on privacy center */\n    'auth-level': valuesOf(PreferenceStoreAuthLevel),\n    /** Opt out signals that should instantly opt out of this purpose */\n    'opt-out-signals': t.array(valuesOf(UserPrivacySignalEnum)),\n    /** Default consent value */\n    'default-consent': valuesOf(DefaultConsentOption),\n  }),\n]);\n\n/** Type override */\nexport type ConsentPurpose = t.TypeOf<typeof ConsentPurpose>;\n\n/**\n * Input for a purpose associated with a preference workflow config\n */\nexport const PreferenceWorkflowConfigPurposeInput = t.type({\n  /** The tracking type slug of the purpose */\n  'tracking-type': t.string,\n  /** The matching consent state for the purpose */\n  'matching-state': t.boolean,\n});\n\n/** Type override */\nexport type PreferenceWorkflowConfigPurposeInput = t.TypeOf<\n  typeof PreferenceWorkflowConfigPurposeInput\n>;\n\n/**\n * Input to define a preference workflow config.\n * Purposes are the source of truth; triggerCondition is derived on push\n * (same as Workflows → Preference Workflows in the admin dashboard).\n *\n * Exactly one mode per config:\n * - Legacy: action-type (+ optional data-silo-titles), no workflow-title\n * - V2: workflow-title (DSR workflow display title), no action-type / data-silo-titles\n */\nexport const PreferenceWorkflowConfigInput = t.intersection([\n  t.type({\n    /** The name of the preference workflow config */\n    name: t.string,\n    /**\n     * Purposes and their matching consent states.\n     * Used to derive triggerCondition as `{ And: [{ [tracking-type]: matching-state }, ...] }`.\n     */\n    purposes: t.array(PreferenceWorkflowConfigPurposeInput),\n  }),\n  t.partial({\n    /**\n     * DSR workflow display title (internalName when set, else external title).\n     * Workflows V2 mode — mutually exclusive with action-type / data-silo-titles.\n     */\n    'workflow-title': t.string,\n    /** The action type (e.g. ERASURE, ACCESS). Legacy mode; required when creating without workflow-title. */\n    'action-type': valuesOf(RequestAction),\n    /** The data subject type slug (e.g. customer) */\n    'data-subject-type': t.string,\n    /** Whether the config runs silently */\n    'is-silent': t.boolean,\n    /** Whether unauthenticated requests are allowed */\n    'allow-unauthenticated': t.boolean,\n    /** Whether the config is active */\n    'is-active': t.boolean,\n    /** Titles of data silos associated with this config (legacy mode only) */\n    'data-silo-titles': t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type PreferenceWorkflowConfigInput = t.TypeOf<typeof PreferenceWorkflowConfigInput>;\n\n/**\n * Input to define a workflow config. Push matches using a cascading key\n * (internal-name → title → action-type → data-subject-type → region-list) and\n * creates the workflow when no match exists (DSR only).\n */\nexport const WorkflowConfigInput = t.intersection([\n  t.type({\n    /** User-facing title */\n    title: t.string,\n    /** Request action type */\n    'action-type': valuesOf(RequestAction),\n  }),\n  t.partial({\n    /**\n     * Internal name of the workflow config. When provided, used as the first\n     * match key on push.\n     */\n    'internal-name': t.string,\n    /** Subtitle */\n    subtitle: t.string,\n    /** Description */\n    description: t.string,\n    /** Data subject type */\n    'data-subject-type': t.string,\n    /** Visibility tier */\n    visibility: valuesOf(WorkflowConfigVisibility),\n    /** Workflow config type (read-only on pull; included for reference) */\n    type: valuesOf(WorkflowConfigType),\n    /** Whether to collect the data subject's region during intake */\n    'collect-data-subject-regions': valuesOf(CollectDataSubjectRegions),\n    /** Region allow list */\n    'region-list': t.array(valuesOf({ ...IsoCountryCode, ...IsoCountrySubdivisionCode })),\n    /** Per-region request expiry times */\n    'expiry-time': t.array(\n      t.type({\n        /** Region code (or 'default') */\n        region: valuesOf({ default: 'default', ...IsoCountryCode, ...IsoCountrySubdivisionCode }),\n        /** Expiry time in days */\n        value: t.number,\n      }),\n    ),\n    /** Attribute key (custom field) names to associate with the workflow */\n    'attribute-keys': t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type WorkflowConfigInput = t.TypeOf<typeof WorkflowConfigInput>;\n\n/**\n * Input to define a silo discovery results\n *\n * @see https://docs.transcend.io/docs/silo-discovery\n */\nexport const SiloDiscoveryResultInput = t.intersection([\n  t.type({\n    /** The unique identifier for the resource */\n    resourceId: t.string,\n    /** The plugin that found this results */\n    plugin: t.string, // Assuming Plugin is a string, replace with appropriate type if necessary\n    /** The suggested catalog for this results */\n    suggestedCatalog: t.string,\n    /** The likelihood that data is sensitive for this results */\n    containsSensitiveData: t.string,\n    /** The status of silo discovery triage */\n    status: t.string,\n  }),\n  t.partial({\n    /** The ISO country code for the AWS Region if applicable */\n    country: valuesOf(IsoCountryCode),\n    /** The ISO country subdivision code for the AWS Region if applicable */\n    countrySubDivision: valuesOf(IsoCountrySubdivisionCode),\n    /** The plaintext that we will pass into results */\n    plaintextContext: t.string,\n    /** The custom title of the data silo results */\n    title: t.union([t.string, t.null]),\n  }),\n]);\n\n/** Type override */\nexport type SiloDiscoveryResultInput = t.TypeOf<typeof SiloDiscoveryResultInput>;\n\nexport const TranscendInput = t.partial({\n  /**\n   * Action items\n   */\n  'action-items': t.array(ActionItemInput),\n  /**\n   * Action item collections\n   */\n  'action-item-collections': t.array(ActionItemCollectionInput),\n  /**\n   * API key definitions\n   */\n  'api-keys': t.array(ApiKeyInput),\n  /** Team definitions */\n  teams: t.array(TeamInput),\n  /**\n   * Email template definitions\n   */\n  templates: t.array(TemplateInput),\n  /**\n   * Enricher definitions\n   */\n  enrichers: t.array(EnricherInput),\n  /**\n   * Attribute definitions\n   */\n  attributes: t.array(AttributeInput),\n  /**\n   * Business entity definitions\n   */\n  'business-entities': t.array(BusinessEntityInput),\n  /**\n   * Vendor definitions\n   */\n  vendors: t.array(VendorInput),\n  /**\n   * Data categories definitions\n   */\n  'data-categories': t.array(DataCategoryInput),\n  /**\n   * Vendor definitions\n   */\n  'processing-purposes': t.array(ProcessingPurposeInput),\n  /**\n   * Data subject definitions\n   */\n  'data-subjects': t.array(DataSubjectInput),\n  /**\n   * Action definitions\n   */\n  actions: t.array(ActionInput),\n  /**\n   * Identifier definitions\n   */\n  identifiers: t.array(IdentifierInput),\n  /**\n   * Data silo definitions\n   */\n  'data-silos': t.array(DataSiloInput),\n  /**\n   * Data flow definitions\n   */\n  'data-flows': t.array(DataFlowInput),\n  /**\n   * Cookie definitions\n   */\n  cookies: t.array(CookieInput),\n  /**\n   * Consent manager definition\n   */\n  'consent-manager': ConsentManagerInput,\n  /**\n   * The privacy center configuration\n   */\n  'privacy-center': PrivacyCenterInput,\n  /**\n   * The policies configuration\n   */\n  policies: t.array(PolicyInput),\n  /**\n   * The internationalized messages configuration\n   */\n  messages: t.array(IntlMessageInput),\n  /** The full list of consent manager partitions (e.g. dev vs staging vs prod) */\n  partitions: t.array(PartitionInput),\n  /**\n   * The full list of assessment templates\n   */\n  'assessment-templates': t.array(AssessmentTemplateInput),\n  /**\n   * The full list of assessment results\n   */\n  assessments: t.array(AssessmentInput),\n  /**\n   * Processing activity definitions\n   */\n  'processing-activities': t.array(ProcessingActivityInput),\n  /**\n   * Consent and preference management purposes\n   */\n  purposes: t.array(ConsentPurpose),\n  /**\n   * The full list of silo discovery results\n   */\n  'system-discovery': t.array(SiloDiscoveryResultInput),\n  /**\n   * Preference workflow config definitions (Workflows → Preference Workflows)\n   */\n  'preference-workflow-configs': t.array(PreferenceWorkflowConfigInput),\n  /**\n   * DSR workflow config settings (create or update via cascading match key)\n   */\n  'workflow-configs': t.array(WorkflowConfigInput),\n  /**\n   * Preference management options for multi and single selects\n   */\n  'preference-options': t.array(ConsentPreferenceTopicOptionValue),\n});\n\n/** Type override */\nexport type TranscendInput = t.TypeOf<typeof TranscendInput>;\n\n/**\n * The output of `tr-generate-api-keys` that can be provided to `tr-push`\n */\nexport const StoredApiKey = t.type({\n  /** Name of instance */\n  organizationName: t.string,\n  /** API key */\n  apiKey: t.string,\n  /** Organization ID API key is for */\n  organizationId: t.string,\n});\n\n/** Type override */\nexport type StoredApiKey = t.TypeOf<typeof StoredApiKey>;\n\n/**\n * Minimal set required to mark as completed\n */\nexport const DataFlowCsvInput = t.intersection([\n  t.type({\n    /** The value of the data flow (host or regex) */\n    'Connections Made To': t.string,\n    /** The type of the data flow */\n    Type: valuesOf(DataFlowScope),\n    /** The CSV of purposes mapped to that data flow */\n    Purpose: t.string,\n  }),\n  t.partial({\n    /** The service that the data flow relates to */\n    Service: t.string,\n    /** Notes and descriptions for the data flow */\n    Notes: t.string,\n    /** Set of data flow owners */\n    Owners: t.string,\n    /** Set of data flow team owners */\n    Teams: t.string,\n    /** LIVE vs NEEDS_REVIEW aka Approved vs Triage  */\n    Status: valuesOf(ConsentTrackerStatus),\n  }),\n  // Custom attributes\n  t.record(t.string, t.string),\n]);\n\n/** Type override */\nexport type DataFlowCsvInput = t.TypeOf<typeof DataFlowCsvInput>;\n\nexport const CookieCsvInput = t.intersection([\n  t.type({\n    /** The value of the cookie */\n    Name: t.string,\n    /** The CSV of purposes mapped to that cookie */\n    Purpose: t.string,\n  }),\n  t.partial({\n    /** The service that the cookie relates to */\n    Service: t.string,\n    /** Notes and descriptions for the cookie */\n    Notes: t.string,\n    /** Set of cookie owners */\n    Owners: t.string,\n    /** Set of cookie team owners */\n    Teams: t.string,\n    /** LIVE vs NEEDS_REVIEW aka Approved vs Triage  */\n    Status: valuesOf(ConsentTrackerStatus),\n  }),\n  // Custom attributes\n  t.record(t.string, t.string),\n]);\n\n/** Type override */\nexport type CookieCsvInput = t.TypeOf<typeof CookieCsvInput>;\n\n/**\n * Export of (await airgap.getMetadata()).services\n */\nexport const ConsentManagerServiceMetadata = t.type({\n  /** The title of the service */\n  title: t.string,\n  /** The description */\n  description: t.string,\n  /** Cookies */\n  cookies: t.array(\n    t.type({\n      /** Name of cookie */\n      name: t.string,\n      /** Allowed purposes */\n      trackingPurposes: t.array(t.string),\n    }),\n  ),\n  /** Data Flows */\n  dataFlows: t.array(\n    t.type({\n      /** Value of data flow */\n      value: t.string,\n      /** Type of data flow */\n      type: valuesOf(DataFlowScope),\n      /** Allowed purposes */\n      trackingPurposes: t.array(t.string),\n    }),\n  ),\n});\n\n/** Type override */\nexport type ConsentManagerServiceMetadata = t.TypeOf<typeof ConsentManagerServiceMetadata>;\n\n/** The columns of a row of a OneTrust Assessment form to import into Transcend. */\nconst OneTrustAssessmentColumnInput = t.intersection([\n  t.type({\n    /** The title of the column */\n    title: t.string,\n  }),\n  t.partial({\n    /** The optional value of the column */\n    value: t.string,\n  }),\n]);\n\n/** A row with information of the OneTrust assessment form to import into Transcend */\nconst OneTrustAssessmentRowInput = t.type({\n  /** A list of columns within this row. */\n  columns: t.array(OneTrustAssessmentColumnInput),\n});\n\n/** Input for importing multiple OneTrust assessment forms into Transcend */\nexport const ImportOnetrustAssessmentsInput = t.partial({\n  /** 'The rows of the CSV file.' */\n  rows: t.array(OneTrustAssessmentRowInput),\n  /** 'The json record representing the assessment.' */\n  json: t.string,\n});\n/** Type override */\nexport type ImportOnetrustAssessmentsInput = t.TypeOf<typeof ImportOnetrustAssessmentsInput>;\n"],"mappings":"u5DA6EA,MAAa,EAAgB,EAAE,KAAK,CAElC,MAAO,EAAE,OACV,CAAC,CAKW,EAAgB,EAAE,aAAa,CAC1C,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,SAAU,EAAE,QACb,CAAC,CACH,CAAC,CAaW,EAAc,EAAE,KAAK,CAEhC,MAAO,EAAE,OACV,CAAC,CAWW,EAAY,EAAE,aAAa,CACtC,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,YAAa,EAAE,OAChB,CAAC,CACF,EAAE,QAAQ,CAER,iBAAkB,EAAE,OAEpB,YAAa,EAAE,OAEf,YAAa,EAAE,OAEf,mBAAoB,EAAE,OAEtB,MAAO,EAAE,MAAM,EAAE,OAAO,CAExB,OAAQ,EAAE,MAAM,EAAS,GAAU,CAAC,CACrC,CAAC,CACH,CAAC,CAiBW,EAAgB,EAAE,aAAa,CAC1C,EAAE,KAAK,CAEL,MAAO,EAAE,OAMT,qBAAsB,EAAE,MAAM,EAAE,OAAO,CACxC,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,IAAK,EAAE,OAEP,KAAM,EAAS,GAAa,CAM5B,mBAAoB,EAAE,OAItB,UAAW,EAAE,OAIb,iBAAkB,EAAE,OAIpB,mBAAoB,EAAE,OAItB,wBAAyB,EAAS,GAAuB,CAIzD,aAAc,EAAE,MAAM,EAAE,OAAO,CAE/B,WAAY,EAAE,MAAM,EAAS,CAAE,GAAG,EAAgB,GAAG,EAA2B,CAAC,CAAC,CAIlF,gBAAiB,EAAE,MAAM,EAAE,OAAO,CAElC,QAAS,EAAE,MAAM,EAAc,CAE/B,kBAAmB,EAAE,MAAM,EAAS,EAAc,CAAC,CACpD,CAAC,CACH,CAAC,CAQW,EAAgC,EAAE,aAAa,CAC1D,EAAE,KAAK,CAEL,QAAS,EAAS,EAAkB,CACrC,CAAC,CACF,EAAE,QAAQ,CAER,KAAM,EAAE,OACT,CAAC,CACH,CAAC,CAQW,EAA2B,EAAE,aAAa,CACrD,EAAE,KAAK,CAEL,SAAU,EAAS,EAAiB,CACrC,CAAC,CACF,EAAE,QAAQ,CAER,KAAM,EAAE,OACT,CAAC,CACH,CAAC,CAQW,EAAyB,EAAE,aAAa,CACnD,EAAE,KAAK,CAEL,SAAU,EAEV,OAAQ,EAAS,GAAuC,CAExD,WAAY,EAAE,OACf,CAAC,CACF,EAAE,QAAQ,CAER,kBAAmB,EAAE,OACtB,CAAC,CACH,CAAC,CAQW,GAAkC,EAAE,aAAa,CAC5D,EAAE,KAAK,CAEL,SAAU,EAEV,OAAQ,EAAS,GAA6C,CAE9D,WAAY,EAAE,OACf,CAAC,CACF,EAAE,QAAQ,CAER,kBAAmB,EAAE,OACtB,CAAC,CACH,CAAC,CAKW,EAAsB,EAAE,aAAa,CAChD,EAAE,KAAK,CAEL,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,MAAO,EAAE,OACV,CAAC,CACH,CAAC,CAKW,EAAiB,EAAE,aAAa,CAC3C,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,KAAM,EAAS,GAAiB,CACjC,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,UAAW,EAAE,MAAM,EAAS,EAA+B,CAAC,CAE5D,OAAQ,EAAE,MAAM,EAAoB,CACrC,CAAC,CACH,CAAC,CAKW,EAAmB,EAAE,KAAK,CAErC,IAAK,EAAE,OAEP,OAAQ,EAAE,MAAM,EAAE,OAAO,CAC1B,CAAC,CAQW,EAAc,EAAE,aAAa,CACxC,EAAE,KAAK,CAEL,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,4BAA6B,EAAE,OAE/B,YAAa,EAAE,OAEf,aAAc,EAAE,OAEhB,QAAS,EAAE,OAEX,mBAAoB,EAAS,EAAe,CAE5C,uBAAwB,EAAS,EAA0B,CAE3D,WAAY,EAAE,OAEd,eAAgB,EAAE,OAKlB,OAAQ,EAAE,MAAM,EAAE,OAAO,CAQzB,MAAO,EAAE,MAAM,EAAE,OAAO,CAIxB,WAAY,EAAE,MAAM,EAAiB,CACtC,CAAC,CACH,CAAC,CAUW,EAAoB,EAAE,aAAa,CAC9C,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,SAAU,EAAS,EAAiB,CACrC,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,MAAO,EAAE,OAKT,OAAQ,EAAE,MAAM,EAAE,OAAO,CAQzB,MAAO,EAAE,MAAM,EAAE,OAAO,CAIxB,WAAY,EAAE,MAAM,EAAiB,CACtC,CAAC,CACH,CAAC,CAUW,EAAyB,EAAE,aAAa,CACnD,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,QAAS,EAAS,EAAkB,CACrC,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAKf,OAAQ,EAAE,MAAM,EAAE,OAAO,CAQzB,MAAO,EAAE,MAAM,EAAE,OAAO,CAIxB,WAAY,EAAE,MAAM,EAAiB,CACtC,CAAC,CACH,CAAC,CAWW,GAAa,EAAE,aAAa,CACvC,EAAE,KAAK,CAEL,IAAK,EAAE,OACR,CAAC,CACF,EAAE,QAAQ,CAER,MAAO,EAAE,OAET,YAAa,EAAE,MAAM,CAAC,EAAE,OAAQ,EAAE,KAAK,CAAC,CAMxC,SAAU,EAAE,MAAM,EAA8B,CAMhD,WAAY,EAAE,MAAM,EAAyB,CAM7C,qBAAsB,EAAE,MAAM,EAAuB,CAKrD,oCAAqC,EAAE,QAOvC,oCAAqC,EAAE,QAEvC,WAAY,EAAE,MAAM,EAAiB,CACtC,CAAC,CACH,CAAC,CAYW,EAAiB,EAAE,aAAa,CAC3C,EAAE,KAAK,CAEL,IAAK,EAAE,OACR,CAAC,CACF,EAAE,QAAQ,CAYR,KAAM,EAAE,MAAM,EAAE,OAAO,CAEvB,MAAO,EAAE,OAET,YAAa,EAAE,OAMf,sBAAuB,EAAE,OAMzB,yBAA0B,EAAE,QAAQ,EAAU,MAAmC,EAAE,OAAO,CAAC,CAM3F,kBAAmB,EAAE,MAAM,EAAS,EAA4B,CAAC,CAKjE,OAAQ,EAAE,MAAM,GAAW,CAK3B,OAAQ,EAAE,MAAM,EAAE,OAAO,CAQzB,MAAO,EAAE,MAAM,EAAE,OAAO,CACzB,CAAC,CACH,CAAC,CAKW,EAA6B,EAAE,QAAQ,CAElD,uBAAwB,EAAE,OAI1B,iBAAkB,EAAE,OAKpB,YAAa,EAAS,GAA2B,CAKjD,iCAAkC,EAAE,QAIpC,uBAAwB,EAAS,GAAqC,CAKtE,8BAA+B,EAAE,OAClC,CAAC,CAUW,EAAsB,EAAE,aAAa,CAChD,EAAE,KAAK,CAEL,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,QAAS,EAAE,OAEX,mBAAoB,EAAS,EAAe,CAE5C,uBAAwB,EAAS,EAA0B,CAE3D,0BAA2B,EAAE,OAE7B,2BAA4B,EAAE,OAI9B,WAAY,EAAE,MAAM,EAAiB,CAKrC,OAAQ,EAAE,MAAM,EAAE,OAAO,CAQzB,MAAO,EAAE,MAAM,EAAE,OAAO,CACzB,CAAC,CACH,CAAC,CAKW,EAAc,EAAE,QAAQ,CAEnC,QAAS,EAAS,EAAe,CAEjC,mBAAoB,EAAS,EAA0B,CACxD,CAAC,CAUW,EAA0B,EAAE,aAAa,CACpD,EAAE,KAAK,CAEL,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,uBAAwB,EAAE,OAM1B,gBAAiB,EAAE,MAAM,EAAS,GAAe,CAAC,CAElD,eAAgB,EAAE,MAAM,EAAY,CAEpC,gBAAiB,EAAE,MAAM,EAAY,CAMrC,cAAe,EAAS,GAAc,CAEtC,gBAAiB,EAAE,OAEnB,mCAAoC,EAAE,OAMtC,qCAAsC,EAAS,GAAqC,CAIpF,WAAY,EAAE,MAAM,EAAiB,CAErC,eAAgB,EAAE,MAAM,EAAE,OAAO,CAEjC,iBAAkB,EAAE,MAAM,EAAE,OAAO,CAEnC,UAAW,EAAE,MAAM,EAAE,OAAO,CAE5B,YAAa,EAAE,MAAM,EAAE,OAAO,CAM9B,sBAAuB,EAAE,MAAM,EAA8B,CAM7D,kBAAmB,EAAE,MAAM,EAAyB,CAEpD,eAAgB,EAAE,MAAM,EAAE,OAAO,CAClC,CAAC,CACH,CAAC,CAUW,GAA8B,EAAE,aAAa,CACxD,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,gBAAiB,EAAS,EAAgB,CAC3C,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,cAAe,EAAE,OAEjB,uBAAwB,EAAE,OAE1B,mBAAoB,EAAE,MAAM,EAAE,OAAO,CAErC,YAAa,EAAE,MAAM,EAAE,OAAO,CAE9B,UAAW,EAAE,MAAM,EAAE,OAAO,CAC7B,CAAC,CACH,CAAC,CAQW,EAAiB,EAAE,aAAa,CAC3C,EAAE,KAAK,CAEL,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,QAAS,EAAE,OAEX,gBAAiB,EAAE,QACpB,CAAC,CACH,CAAC,CAUW,GAAmB,EAAE,aAAa,CAC7C,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,KAAM,EAAS,EAAgB,CAE/B,aAAc,EAAE,OAEhB,eAAgB,EAAE,OACnB,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,wBAAyB,EAAE,MAAM,EAAe,CAEhD,UAAW,EAAE,MAAM,EAAE,OAAO,CAE5B,YAAa,EAAE,MAAM,EAAE,OAAO,CAC/B,CAAC,CACH,CAAC,CAUW,GAAkB,EAAE,aAAa,CAC5C,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,IAAK,EAAE,OACR,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,UAAW,EAAE,MAAM,EAAE,OAAO,CAE5B,YAAa,EAAE,MAAM,EAAE,OAAO,CAC/B,CAAC,CACH,CAAC,CAUW,EAAmB,EAAE,aAAa,CAC7C,EAAE,KAAK,CAEL,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,OAAQ,EAAE,QAEV,MAAO,EAAE,OAET,gCAAiC,EAAE,QAKnC,wBAAyB,EAAE,QAE3B,QAAS,EAAE,MAAM,EAAS,EAAc,CAAC,CAC1C,CAAC,CACH,CAAC,CAUW,EAAc,EAAE,aAAa,CACxC,EAAE,KAAK,CAEL,KAAM,EAAS,EAAc,CAC9B,CAAC,CACF,EAAE,QAAQ,CAER,uBAAwB,EAAE,QAE1B,qBAAsB,EAAE,QAExB,eAAgB,EAAE,QAElB,cAAe,EAAE,OAEjB,sBAAuB,EAAS,GAAsB,CAEtD,WAAY,EAAE,MAAM,EAAS,CAAE,GAAG,EAAgB,GAAG,EAA2B,CAAC,CAAC,CAElF,gBAAiB,EAAE,MAAM,EAAS,CAAE,GAAG,EAAgB,GAAG,EAA2B,CAAC,CAAC,CACxF,CAAC,CACH,CAAC,CAUW,EAAkB,EAAE,aAAa,CAC5C,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,MAAO,EAAE,OAET,cAAe,EAAE,MAAM,EAAE,OAAO,CAEhC,wBAAyB,EAAE,MAAM,EAAS,EAAc,CAAC,CAEzD,aAAc,EAAE,MAAM,EAAE,OAAO,CAE/B,iBAAkB,EAAE,QAEpB,YAAa,EAAE,OAEf,aAAc,EAAE,OAEhB,mBAAoB,EAAE,OAEtB,aAAc,EAAE,OAEhB,0BAA2B,EAAE,QAC9B,CAAC,CACH,CAAC,CAUW,EAAgB,EAAE,aAAa,CAC1C,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,KAAM,EAAS,EAAc,CAC9B,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,iBAAkB,EAAE,MAAM,EAAE,OAAO,CAInC,QAAS,EAAE,OAIX,OAAQ,EAAS,EAAqB,CAKtC,OAAQ,EAAE,MAAM,EAAE,OAAO,CAQzB,MAAO,EAAE,MAAM,EAAE,OAAO,CAIxB,WAAY,EAAE,MAAM,EAAiB,CACtC,CAAC,CACH,CAAC,CAKW,EAAc,EAAE,aAAa,CACxC,EAAE,KAAK,CAEL,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,QAAS,EAAE,QAEX,YAAa,EAAE,OAEf,iBAAkB,EAAE,MAAM,EAAE,OAAO,CAInC,QAAS,EAAE,OAIX,OAAQ,EAAS,EAAqB,CAKtC,OAAQ,EAAE,MAAM,EAAE,OAAO,CAQzB,MAAO,EAAE,MAAM,EAAE,OAAO,CAIxB,WAAY,EAAE,MAAM,EAAiB,CACtC,CAAC,CACH,CAAC,CAKW,EAA+B,EAAE,aAAa,CACzD,EAAE,KAAK,CAEL,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,QAAS,EAAE,MAAM,EAAY,CAE7B,gBAAiB,EAAS,GAAgB,CAE1C,cAAe,EAAE,OAEjB,SAAU,EAAS,GAAgB,CAEnC,gBAAiB,EAAE,OAEnB,UAAW,EAAS,GAAiB,CAErC,SAAU,EAAE,MACV,EAAE,KAAK,CAEL,aAAc,EAAE,OACjB,CAAC,CACH,CAED,iBAAkB,EAAE,MAClB,EAAE,KAAK,CAEL,aAAc,EAAE,OACjB,CAAC,CACH,CAID,iBAAkB,EAAE,MAAM,EAAS,GAAgB,CAAC,CAEpD,iBAAkB,EAAE,MAAM,EAAS,GAAgB,CAAC,CAEpD,qBAAsB,EAAE,OACzB,CAAC,CACH,CAAC,CAKW,EAAiB,EAAE,aAAa,CAC3C,EAAE,KAAK,CAEL,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,UAAW,EAAE,OACd,CAAC,CACH,CAAC,CAKW,EAAsB,EAAE,QAAQ,CAE3C,QAAS,EAAE,OAEX,WAAY,EAAE,OAAO,EAAS,GAAkB,CAAE,EAAE,OAAO,CAE3D,QAAS,EAAE,MAAM,EAAE,OAAO,CAE1B,UAAW,EAAE,OAEb,kBAAmB,EAAS,GAAwB,CAEpD,qBAAsB,EAAS,EAAqB,CAEpD,oBAAqB,EAAS,EAAqB,CAEnD,aAAc,EAAE,OAEhB,sBAAuB,EAAS,GAA2B,CAE3D,mBAAoB,EAAS,GAAyB,CAEtD,YAAa,EAAE,MAAM,EAA6B,CAElD,MAAO,EAAE,QAAQ,CAEf,aAAc,EAAE,OAEhB,UAAW,EAAE,OAEb,cAAe,EAAE,OAEjB,OAAQ,EAAE,OACX,CAAC,CAGF,WAAY,EAAE,OACd,gBAAiB,EAAE,MAAM,GAAoB,CAC7C,cAAe,EAAE,MAAM,GAAkB,CAC1C,CAAC,CAQW,EAAqB,EAAE,QAAQ,CAE1C,WAAY,EAAE,QAEd,yBAA0B,EAAE,QAE5B,aAAc,EAAE,QAEhB,yBAA0B,EAAE,QAE5B,YAAa,EAAE,QAEf,cAAe,EAAE,QAEjB,mBAAoB,EAAE,QAEtB,sBAAuB,EAAE,QAEzB,yBAA0B,EAAE,QAE5B,QAAS,EAAE,MAAM,EAAS,EAAW,CAAC,CAEtC,cAAe,EAAS,EAAW,CAEnC,2BAA4B,EAAE,QAE9B,aAAc,EAAE,OAEhB,aAAc,EAAE,OAEhB,uBAAwB,EAAE,QAE1B,qBAAsB,EAAE,QAExB,+BAAgC,EAAE,QAKlC,KAAM,EAAE,OAER,wBAAyB,EAAE,QAK3B,8BAA+B,EAAE,QAKjC,+BAAgC,EAAE,MAAM,EAAE,OAAO,CAEjD,aAAc,EAAS,GAA0B,CAKjD,YAAa,EAAE,MACb,EAAE,aAAa,CACb,EAAE,KAAK,CAEL,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,IAAK,EAAE,OAMP,SAAU,EAAE,QACb,CAAC,CACH,CAAC,CACH,CAED,MAAO,EAAE,QAAQ,CAEf,OAAQ,EAAE,QAAQ,EAAU,OAAqC,EAAE,OAAO,CAAC,CAE3E,gBAAiB,GAEjB,WAAY,GACb,CAAC,CACH,CAAC,CAQW,EAAc,EAAE,aAAa,CACxC,EAAE,KAAK,CAEL,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAKR,KAAM,EAAS,GAAW,CAE1B,YAAa,EAAE,OAEf,mBAAoB,EAAE,QAEtB,QAAS,EAAE,OAEX,gBAAiB,EAAE,MAAM,EAAS,EAAW,CAAC,CAC/C,CAAC,CACH,CAAC,CAQW,EAAmB,EAAE,aAAa,CAC7C,EAAE,KAAK,CAEL,GAAI,EAAE,OACP,CAAC,CACF,EAAE,QAAQ,CAER,kBAAmB,EAAE,OAErB,YAAa,EAAE,OAEf,eAAgB,EAAE,OAElB,aAAc,EAAE,QAAQ,EAAU,MAAkB,EAAE,OAAO,CAAC,CAC/D,CAAC,CACH,CAAC,CAYW,GAAqB,EAAE,aAAa,CAC/C,EAAE,KAAK,CAML,OAAQ,EAAE,MAAM,EAAE,OAAO,CAC1B,CAAC,CACF,EAAE,QAAQ,CAKR,SAAU,EAAE,OACb,CAAC,CACH,CAAC,CASW,GAA0B,EAAE,KAAK,CAE5C,SAAU,EAAE,OAEZ,kBAAmB,EAAE,QAAQ,GAAK,CACnC,CAAC,CAUW,GAA0B,EAAE,MAAM,CAAC,GAAoB,GAAwB,CAAC,CAahF,GAAuB,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAE,EAAE,MAAM,GAAwB,CAAC,CAAC,CAarF,GAAgB,EAAE,aAAa,CAC1C,EAAE,KAAK,CAEL,MAAO,EAAE,OAKT,gBAAiB,EAAE,OACpB,CAAC,CACF,EAAE,QAAQ,CAER,aAAc,EAAE,OAEhB,YAAa,EAAE,OAEf,IAAK,EAAE,OAEP,gBAAiB,EAAE,OAKnB,YAAa,EAAE,OAEf,QAAS,EAAE,MAAM,EAAc,CAM/B,gBAAiB,EAAE,MAAM,EAAE,OAAO,CAKlC,gBAAiB,EAAE,MAAM,EAAE,OAAO,CAWlC,wBAAyB,GAKzB,OAAQ,EAAE,MAAM,EAAE,OAAO,CAQzB,MAAO,EAAE,MAAM,EAAE,OAAO,CAKxB,SAAU,EAAE,QAKZ,WAAY,EAAE,MAAM,EAAe,CAInC,iBAAkB,EAElB,QAAS,EAAS,EAAe,CAEjC,mBAAoB,EAAS,EAA0B,CAIvD,WAAY,EAAE,MAAM,EAAiB,CAIrC,qBAAsB,EAAE,MAAM,EAAE,OAAO,CACxC,CAAC,CACH,CAAC,CAKW,GAA4B,EAAE,aAAa,CACtD,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,YAAa,EAAS,GAAiB,CACxC,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,OAAQ,EAAE,QACX,CAAC,CACH,CAAC,CAQW,GAAkB,EAAE,aAAa,CAC5C,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,KAAM,EAAS,EAAe,CAE9B,YAAa,EAAE,MAAM,EAAE,OAAO,CAC/B,CAAC,CACF,EAAE,QAAQ,CAER,SAAU,EAAS,GAA2B,CAE9C,+BAAgC,EAAE,OAElC,QAAS,EAAE,OAEX,SAAU,EAAE,QAEZ,MAAO,EAAE,OAET,KAAM,EAAE,OAIR,MAAO,EAAE,MAAM,EAAE,OAAO,CAOxB,MAAO,EAAE,MAAM,EAAE,OAAO,CAIxB,WAAY,EAAE,MAAM,EAAiB,CACtC,CAAC,CACH,CAAC,CAKW,EAAsB,EAAE,aAAa,CAChD,EAAE,KAAK,CAEL,mCAAoC,EAAE,OAEtC,sBAAuB,EAAS,EAAmB,CACpD,CAAC,CACF,EAAE,QAAQ,CAER,sBAAuB,EAAE,MAAM,EAAE,OAAO,CACzC,CAAC,CACH,CAAC,CAcW,GACX,EAAE,UAAU,4BAA8B,GACxC,EAAE,aAAa,CACb,EAAE,KAAK,CAEL,iBAAkB,EAAS,GAAc,CAC1C,CAAC,CACF,EAAE,QAAQ,CAER,MAAO,EAAE,MAAM,EAAoB,CAEnC,eAAgB,EAAE,MAAM,EAAK,CAC9B,CAAC,CACH,CAAC,CACH,CAEU,GAA8B,EAAE,aAAa,CACxD,EAAE,KAAK,CAEL,OAAQ,EAAS,GAA8B,CAChD,CAAC,CACF,EAAE,QAAQ,CAER,KAAM,EAEN,cAAe,GAChB,CAAC,CACH,CAAC,CAKW,GAAsB,EAAE,QAAQ,CAE3C,aAAc,EAAE,OAEhB,qBAAsB,EAAE,OAExB,kBAAmB,EAAE,OACtB,CAAC,CAKW,GAAiB,EAAE,aAAa,CAC3C,EAAE,KAAK,CAEL,sBAAuB,EAAE,MAAM,EAAE,OAAO,CAExC,sBAAuB,EAAS,EAAmB,CACpD,CAAC,CACF,EAAE,QAAQ,CAER,aAAc,EAAE,OAEhB,qBAAsB,EAAE,OAExB,kBAAmB,EAAE,OACtB,CAAC,CACH,CAAC,CAKW,GAA8B,EAAE,KAAK,CAEhD,MAAO,EAAE,OACV,CAAC,CAKW,GAAiC,EAAE,aAAa,CAC3D,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,KAAM,EAAS,GAAuB,CACvC,CAAC,CACF,EAAE,QAAQ,CAER,WAAY,EAAS,GAA0B,CAE/C,YAAa,EAAE,OAEf,YAAa,EAAE,OAEf,cAAe,EAAE,QAEjB,eAAgB,EAAE,OAElB,gBAAiB,GAEjB,aAAc,EAAE,MAAM,GAAe,CAErC,kBAAmB,EAAE,MAAM,EAAE,OAAO,CAEpC,iBAAkB,EAAE,OAEpB,iBAAkB,EAAE,MAAM,GAA4B,CAEtD,mBAAoB,EAAE,MAAM,EAAE,OAAO,CAErC,qBAAsB,EAAE,MAAM,EAAE,OAAO,CAEvC,qBAAsB,EAAE,QAExB,aAAc,EAAS,GAAoB,CAE3C,cAAe,EAAS,GAAqB,CAE7C,gBAAiB,EAAE,OAEnB,0BAA2B,EAAE,QAE7B,iCAAkC,EAAE,QACrC,CAAC,CACH,CAAC,CAKW,EAAyB,EAAE,aAAa,CACnD,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,UAAW,EAAE,MAAM,GAA+B,CACnD,CAAC,CACF,EAAE,QAAQ,CAER,UAAW,EAAE,MAAM,EAAE,OAAO,CAE5B,qBAAsB,EAAE,MAAM,EAAE,OAAO,CAEvC,OAAQ,EAAE,OAEV,cAAe,EAAE,QAClB,CAAC,CACH,CAAC,CAKW,EAAmC,EAAE,KAAK,CAErD,KAAM,EAAS,GAAsB,CAErC,gBAAiB,EAAE,OAEnB,QAAS,EAAS,GAA2B,CAC9C,CAAC,CAKW,GAA0B,EAAE,aAAa,CACpD,EAAE,KAAK,CAEL,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,SAAU,EAAE,MAAM,EAAuB,CAEzC,YAAa,EAAE,OAEf,OAAQ,EAAS,GAA6B,CAE9C,OAAQ,EAAS,GAA6B,CAE9C,QAAS,EAAE,OAEX,OAAQ,EAAE,QAEV,YAAa,EAAE,OAEf,SAAU,EAAE,QAEZ,aAAc,EAAE,OAEhB,iBAAkB,EAAE,MAAM,EAAE,OAAO,CAEnC,qBAAsB,EAEtB,UAAW,EAAE,MAAM,EAAE,OAAO,CAC7B,CAAC,CACH,CAAC,CAKW,EAA0B,EAAE,KAAK,CAE5C,MAAO,EAAE,OAET,KAAM,EAAS,EAA+B,CAC/C,CAAC,CAKW,GAAkB,EAAE,aAAa,CAC5C,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,SAAU,EAAE,MAAM,EAAuB,CAEzC,QAAS,EAAE,OAEX,YAAa,EAAE,OAEf,OAAQ,EAAS,GAAqB,CAEtC,UAAW,EAAE,MAAM,EAAE,OAAO,CAE5B,qBAAsB,EAAE,MAAM,EAAE,OAAO,CAEvC,UAAW,EAAE,MAAM,EAAE,OAAO,CAE5B,OAAQ,EAAE,QAEV,SAAU,EAAE,QAEZ,SAAU,EAAE,QAIZ,oBAAqB,EAAE,QAEvB,WAAY,EAAE,OAEd,aAAc,EAAE,OAEhB,cAAe,EAAE,OAEjB,eAAgB,EAAE,OAElB,cAAe,EAAE,OAEjB,cAAe,EAAE,OAEjB,UAAW,EAAE,MAAM,EAAwB,CAE3C,KAAM,EAAE,MAAM,EAAwB,CAEtC,qBAAsB,EAEtB,WAAY,EAAE,MAAM,EAAiB,CACtC,CAAC,CACH,CAAC,CAKW,EAAoC,EAAE,KAAK,CAEtD,MAAO,EAAE,OAET,KAAM,EAAE,OACT,CAAC,CAKW,GAAyB,EAAE,aAAa,CACnD,EAAE,KAAK,CAEL,KAAM,EAAS,GAAoB,CAEnC,MAAO,EAAE,OAET,YAAa,EAAE,OAEf,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,MAAO,EAAE,OAET,wBAAyB,EAAE,OAE3B,yBAA0B,EAAE,QAE5B,QAAS,EAAE,MAAM,EAAkC,CACpD,CAAC,CACH,CAAC,CAKW,GAAiB,EAAE,aAAa,CAC3C,EAAE,KAAK,CAEL,aAAc,EAAE,OAEhB,MAAO,EAAE,OAET,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,YAAa,EAAE,QAEf,aAAc,EAAE,QAEhB,gBAAiB,EAAE,OAEnB,yBAA0B,EAAE,QAE5B,0BAA2B,EAAE,QAE7B,oBAAqB,EAAE,MAAM,GAAuB,CAEpD,aAAc,EAAS,GAAyB,CAEhD,kBAAmB,EAAE,MAAM,EAAS,GAAsB,CAAC,CAE3D,kBAAmB,EAAS,GAAqB,CAClD,CAAC,CACH,CAAC,CAQW,GAAuC,EAAE,KAAK,CAEzD,gBAAiB,EAAE,OAEnB,iBAAkB,EAAE,QACrB,CAAC,CAgBW,GAAgC,EAAE,aAAa,CAC1D,EAAE,KAAK,CAEL,KAAM,EAAE,OAKR,SAAU,EAAE,MAAM,GAAqC,CACxD,CAAC,CACF,EAAE,QAAQ,CAKR,iBAAkB,EAAE,OAEpB,cAAe,EAAS,EAAc,CAEtC,oBAAqB,EAAE,OAEvB,YAAa,EAAE,QAEf,wBAAyB,EAAE,QAE3B,YAAa,EAAE,QAEf,mBAAoB,EAAE,MAAM,EAAE,OAAO,CACtC,CAAC,CACH,CAAC,CAUW,GAAsB,EAAE,aAAa,CAChD,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,cAAe,EAAS,EAAc,CACvC,CAAC,CACF,EAAE,QAAQ,CAKR,gBAAiB,EAAE,OAEnB,SAAU,EAAE,OAEZ,YAAa,EAAE,OAEf,oBAAqB,EAAE,OAEvB,WAAY,EAAS,GAAyB,CAE9C,KAAM,EAAS,GAAmB,CAElC,+BAAgC,EAAS,GAA0B,CAEnE,cAAe,EAAE,MAAM,EAAS,CAAE,GAAG,EAAgB,GAAG,EAA2B,CAAC,CAAC,CAErF,cAAe,EAAE,MACf,EAAE,KAAK,CAEL,OAAQ,EAAS,CAAE,QAAS,UAAW,GAAG,EAAgB,GAAG,EAA2B,CAAC,CAEzF,MAAO,EAAE,OACV,CAAC,CACH,CAED,iBAAkB,EAAE,MAAM,EAAE,OAAO,CACpC,CAAC,CACH,CAAC,CAUW,EAA2B,EAAE,aAAa,CACrD,EAAE,KAAK,CAEL,WAAY,EAAE,OAEd,OAAQ,EAAE,OAEV,iBAAkB,EAAE,OAEpB,sBAAuB,EAAE,OAEzB,OAAQ,EAAE,OACX,CAAC,CACF,EAAE,QAAQ,CAER,QAAS,EAAS,EAAe,CAEjC,mBAAoB,EAAS,EAA0B,CAEvD,iBAAkB,EAAE,OAEpB,MAAO,EAAE,MAAM,CAAC,EAAE,OAAQ,EAAE,KAAK,CAAC,CACnC,CAAC,CACH,CAAC,CAKW,GAAiB,EAAE,QAAQ,CAItC,eAAgB,EAAE,MAAM,GAAgB,CAIxC,0BAA2B,EAAE,MAAM,GAA0B,CAI7D,WAAY,EAAE,MAAM,EAAY,CAEhC,MAAO,EAAE,MAAM,EAAU,CAIzB,UAAW,EAAE,MAAM,EAAc,CAIjC,UAAW,EAAE,MAAM,EAAc,CAIjC,WAAY,EAAE,MAAM,EAAe,CAInC,oBAAqB,EAAE,MAAM,EAAoB,CAIjD,QAAS,EAAE,MAAM,EAAY,CAI7B,kBAAmB,EAAE,MAAM,EAAkB,CAI7C,sBAAuB,EAAE,MAAM,EAAuB,CAItD,gBAAiB,EAAE,MAAM,EAAiB,CAI1C,QAAS,EAAE,MAAM,EAAY,CAI7B,YAAa,EAAE,MAAM,EAAgB,CAIrC,aAAc,EAAE,MAAM,GAAc,CAIpC,aAAc,EAAE,MAAM,EAAc,CAIpC,QAAS,EAAE,MAAM,EAAY,CAI7B,kBAAmB,EAInB,iBAAkB,EAIlB,SAAU,EAAE,MAAM,EAAY,CAI9B,SAAU,EAAE,MAAM,EAAiB,CAEnC,WAAY,EAAE,MAAM,EAAe,CAInC,uBAAwB,EAAE,MAAM,GAAwB,CAIxD,YAAa,EAAE,MAAM,GAAgB,CAIrC,wBAAyB,EAAE,MAAM,EAAwB,CAIzD,SAAU,EAAE,MAAM,GAAe,CAIjC,mBAAoB,EAAE,MAAM,EAAyB,CAIrD,8BAA+B,EAAE,MAAM,GAA8B,CAIrE,mBAAoB,EAAE,MAAM,GAAoB,CAIhD,qBAAsB,EAAE,MAAM,EAAkC,CACjE,CAAC,CAQW,GAAe,EAAE,KAAK,CAEjC,iBAAkB,EAAE,OAEpB,OAAQ,EAAE,OAEV,eAAgB,EAAE,OACnB,CAAC,CAQW,GAAmB,EAAE,aAAa,CAC7C,EAAE,KAAK,CAEL,sBAAuB,EAAE,OAEzB,KAAM,EAAS,EAAc,CAE7B,QAAS,EAAE,OACZ,CAAC,CACF,EAAE,QAAQ,CAER,QAAS,EAAE,OAEX,MAAO,EAAE,OAET,OAAQ,EAAE,OAEV,MAAO,EAAE,OAET,OAAQ,EAAS,EAAqB,CACvC,CAAC,CAEF,EAAE,OAAO,EAAE,OAAQ,EAAE,OAAO,CAC7B,CAAC,CAKW,GAAiB,EAAE,aAAa,CAC3C,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,QAAS,EAAE,OACZ,CAAC,CACF,EAAE,QAAQ,CAER,QAAS,EAAE,OAEX,MAAO,EAAE,OAET,OAAQ,EAAE,OAEV,MAAO,EAAE,OAET,OAAQ,EAAS,EAAqB,CACvC,CAAC,CAEF,EAAE,OAAO,EAAE,OAAQ,EAAE,OAAO,CAC7B,CAAC,CAQW,GAAgC,EAAE,KAAK,CAElD,MAAO,EAAE,OAET,YAAa,EAAE,OAEf,QAAS,EAAE,MACT,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,iBAAkB,EAAE,MAAM,EAAE,OAAO,CACpC,CAAC,CACH,CAED,UAAW,EAAE,MACX,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,KAAM,EAAS,EAAc,CAE7B,iBAAkB,EAAE,MAAM,EAAE,OAAO,CACpC,CAAC,CACH,CACF,CAAC,CAMI,GAAgC,EAAE,aAAa,CACnD,EAAE,KAAK,CAEL,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,MAAO,EAAE,OACV,CAAC,CACH,CAAC,CAGI,GAA6B,EAAE,KAAK,CAExC,QAAS,EAAE,MAAM,GAA8B,CAChD,CAAC,CAGW,GAAiC,EAAE,QAAQ,CAEtD,KAAM,EAAE,MAAM,GAA2B,CAEzC,KAAM,EAAE,OACT,CAAC"}

package/dist/constants-FbK2iR--.mjs

@@ -1,2 +0,0 @@
-const e=5120,t=51200,n="The Open Policy Agent CLI (`opa`) is required but was not found on PATH. Install it with `brew install opa` (macOS) or see https://www.openpolicyagent.org/docs/cli#install";export{t as n,n as r,e as t};
-//# sourceMappingURL=constants-FbK2iR--.mjs.map

package/dist/constants-FbK2iR--.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants-FbK2iR--.mjs","names":[],"sources":["../src/commands/policy/constants.ts"],"sourcesContent":["/** Maximum compressed policy bundle upload size in bytes (5 KiB). */\nexport const MAX_BUNDLE_COMPRESSED_BYTES = 5120;\n\n/** Maximum decompressed policy bundle size enforced by the server (50 KiB). */\nexport const MAX_BUNDLE_DECOMPRESSED_BYTES = 51200;\n\n/** Error message shown when the OPA CLI is not installed. */\nexport const OPA_INSTALL_HINT =\n  'The Open Policy Agent CLI (`opa`) is required but was not found on PATH. ' +\n  'Install it with `brew install opa` (macOS) or see https://www.openpolicyagent.org/docs/cli#install';\n\n/** Placeholder for nullable API fields in table output. */\nexport const EMPTY_CELL = '-';\n"],"mappings":"AACA,MAAa,EAA8B,KAG9B,EAAgC,MAGhC,EACX"}

package/dist/impl-3IyENr9T.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-3IyENr9T.mjs","names":[],"sources":["../src/commands/inventory/derive-data-silos-from-data-flows-cross-instance/impl.ts"],"sourcesContent":["import path from 'node:path';\n\nimport { buildTranscendGraphQLClient, fetchAndIndexCatalogs } from '@transcend-io/sdk';\nimport colors from 'colors';\nimport { difference } from 'lodash-es';\n\nimport { DataFlowInput } from '../../../codecs.js';\nimport type { LocalContext } from '../../../context.js';\nimport { filterFileNames } from '../../../lib/api-keys/index.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { dataFlowsToDataSilos } from '../../../lib/consent-manager/dataFlowsToDataSilos.js';\nimport { parseTranscendYaml, serializeTranscendYaml } from '../../../lib/readTranscendYaml.js';\n\nexport interface DeriveDataSilosFromDataFlowsCrossInstanceCommandFlags {\n  auth: string;\n  dataFlowsYmlFolder: string;\n  output: string;\n  ignoreYmls?: string[];\n  transcendUrl: string;\n}\n\nexport async function deriveDataSilosFromDataFlowsCrossInstance(\n  this: LocalContext,\n  {\n    auth,\n    dataFlowsYmlFolder,\n    output,\n    ignoreYmls = [],\n    transcendUrl,\n  }: DeriveDataSilosFromDataFlowsCrossInstanceCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  // Ensure folder is passed\n  if (\n    !this.fs.existsSync(dataFlowsYmlFolder) ||\n    !this.fs.lstatSync(dataFlowsYmlFolder).isDirectory()\n  ) {\n    this.logger.error(colors.red(`Folder does not exist: \"${dataFlowsYmlFolder}\"`));\n    this.process.exit(1);\n  }\n\n  // Ignore the data flows in these yml files\n  const instancesToIgnore = ignoreYmls.map((x) => x.split('.')[0]);\n\n  // Map over each data flow yml file and convert to data silo configurations\n  const dataSiloInputs = filterFileNames(this.fs.readdirSync(dataFlowsYmlFolder)).map(\n    (directory) => {\n      const inputPath = path.join(dataFlowsYmlFolder, directory);\n\n      // read in the data flows for a specific instance\n      const { 'data-flows': dataFlows = [] } = parseTranscendYaml(\n        this.fs.readFileSync(inputPath, 'utf8'),\n        {},\n        inputPath,\n      );\n\n      // map the data flows to data silos\n      const { adTechDataSilos, siteTechDataSilos } = dataFlowsToDataSilos(\n        dataFlows as DataFlowInput[],\n        {\n          serviceToSupportedIntegration,\n          serviceToTitle,\n        },\n      );\n\n      return {\n        adTechDataSilos,\n        siteTechDataSilos,\n        organizationName: directory.split('.')[0],\n      };\n    },\n  );\n\n  // Mapping from service name to instances that have that service\n  const serviceToInstance: { [k in string]: string[] } = {};\n  dataSiloInputs.forEach(({ adTechDataSilos, siteTechDataSilos, organizationName }) => {\n    const allDataSilos = [...adTechDataSilos, ...siteTechDataSilos];\n    allDataSilos.forEach((dataSilo) => {\n      const service = dataSilo['outer-type'] || dataSilo.integrationName;\n      // create mapping to instance\n      if (!serviceToInstance[service]) {\n        serviceToInstance[service] = [];\n      }\n      serviceToInstance[service]!.push(organizationName);\n      serviceToInstance[service] = [...new Set(serviceToInstance[service])];\n    });\n  });\n\n  // List of ad tech integrations\n  const adTechIntegrations = [\n    ...new Set(\n      dataSiloInputs\n        .map(({ adTechDataSilos }) =>\n          adTechDataSilos.map((silo) => silo['outer-type'] || silo.integrationName),\n        )\n        .flat(),\n    ),\n  ];\n\n  // List of site tech integrations\n  const siteTechIntegrations = difference(\n    [\n      ...new Set(\n        dataSiloInputs\n          .map(({ siteTechDataSilos }) =>\n            siteTechDataSilos.map((silo) => silo['outer-type'] || silo.integrationName),\n          )\n          .flat(),\n      ),\n    ],\n    adTechIntegrations,\n  );\n\n  // Mapping from service name to list of\n  const serviceToFoundOnDomain: { [k in string]: string[] } = {};\n  dataSiloInputs.forEach(({ adTechDataSilos, siteTechDataSilos }) => {\n    const allDataSilos = [...adTechDataSilos, ...siteTechDataSilos];\n    allDataSilos.forEach((dataSilo) => {\n      const service = dataSilo['outer-type'] || dataSilo.integrationName;\n      const foundOnDomain = dataSilo.attributes?.find((attr) => attr.key === 'Found On Domain');\n      // create mapping to instance\n      if (!serviceToFoundOnDomain[service]) {\n        serviceToFoundOnDomain[service] = [];\n      }\n      serviceToFoundOnDomain[service]!.push(...(foundOnDomain?.values || []));\n      serviceToFoundOnDomain[service] = [...new Set(serviceToFoundOnDomain[service])];\n    });\n  });\n\n  // Fetch all integrations in the catalog\n  const client = buildTranscendGraphQLClient(transcendUrl, auth);\n  const { serviceToTitle, serviceToSupportedIntegration } = await fetchAndIndexCatalogs(client, {\n    logger: this.logger,\n  });\n\n  // construct the aggregated data silo inputs\n  const dataSilos = [...adTechIntegrations, ...siteTechIntegrations].map((service) => ({\n    title: serviceToTitle[service],\n    ...(serviceToSupportedIntegration[service]\n      ? { integrationName: service }\n      : { integrationName: 'promptAPerson', 'outer-type': service }),\n    attributes: [\n      {\n        key: 'Tech Type',\n        values: ['Ad Tech'],\n      },\n      {\n        key: 'Business Units',\n        values: difference(serviceToInstance[service] || [], instancesToIgnore),\n      },\n      {\n        key: 'Found On Domain',\n        values: serviceToFoundOnDomain[service] || [],\n      },\n    ],\n  }));\n\n  // Log output\n  this.logger.log(`Total Services: ${dataSilos.length}`);\n  this.logger.log(`Ad Tech Services: ${adTechIntegrations.length}`);\n  this.logger.log(`Site Tech Services: ${siteTechIntegrations.length}`);\n\n  this.fs.writeFileSync(\n    output,\n    serializeTranscendYaml({\n      'data-silos': dataSilos,\n    }),\n  );\n}\n"],"mappings":"2YAqBA,eAAsB,EAEpB,CACE,OACA,qBACA,SACA,aAAa,EAAE,CACf,gBAEa,CACf,EAAoB,KAAK,QAAQ,EAI/B,CAAC,KAAK,GAAG,WAAW,EAAmB,EACvC,CAAC,KAAK,GAAG,UAAU,EAAmB,CAAC,aAAa,IAEpD,KAAK,OAAO,MAAM,EAAO,IAAI,2BAA2B,EAAmB,GAAG,CAAC,CAC/E,KAAK,QAAQ,KAAK,EAAE,EAItB,IAAM,EAAoB,EAAW,IAAK,GAAM,EAAE,MAAM,IAAI,CAAC,GAAG,CAG1D,EAAiB,EAAgB,KAAK,GAAG,YAAY,EAAmB,CAAC,CAAC,IAC7E,GAAc,CACb,IAAM,EAAY,EAAK,KAAK,EAAoB,EAAU,CAGpD,CAAE,aAAc,EAAY,EAAE,EAAK,EACvC,KAAK,GAAG,aAAa,EAAW,OAAO,CACvC,EAAE,CACF,EACD,CAGK,CAAE,kBAAiB,qBAAsB,EAC7C,EACA,CACE,gCACA,iBACD,CACF,CAED,MAAO,CACL,kBACA,oBACA,iBAAkB,EAAU,MAAM,IAAI,CAAC,GACxC,EAEJ,CAGK,EAAiD,EAAE,CACzD,EAAe,SAAS,CAAE,kBAAiB,oBAAmB,sBAAuB,CAEnF,CADsB,GAAG,EAAiB,GAAG,EACjC,CAAC,QAAS,GAAa,CACjC,IAAM,EAAU,EAAS,eAAiB,EAAS,gBAE9C,EAAkB,KACrB,EAAkB,GAAW,EAAE,EAEjC,EAAkB,GAAU,KAAK,EAAiB,CAClD,EAAkB,GAAW,CAAC,GAAG,IAAI,IAAI,EAAkB,GAAS,CAAC,EACrE,EACF,CAGF,IAAM,EAAqB,CACzB,GAAG,IAAI,IACL,EACG,KAAK,CAAE,qBACN,EAAgB,IAAK,GAAS,EAAK,eAAiB,EAAK,gBAAgB,CAC1E,CACA,MAAM,CACV,CACF,CAGK,EAAuB,EAC3B,CACE,GAAG,IAAI,IACL,EACG,KAAK,CAAE,uBACN,EAAkB,IAAK,GAAS,EAAK,eAAiB,EAAK,gBAAgB,CAC5E,CACA,MAAM,CACV,CACF,CACD,EACD,CAGK,EAAsD,EAAE,CAC9D,EAAe,SAAS,CAAE,kBAAiB,uBAAwB,CAEjE,CADsB,GAAG,EAAiB,GAAG,EACjC,CAAC,QAAS,GAAa,CACjC,IAAM,EAAU,EAAS,eAAiB,EAAS,gBAC7C,EAAgB,EAAS,YAAY,KAAM,GAAS,EAAK,MAAQ,kBAAkB,CAEpF,EAAuB,KAC1B,EAAuB,GAAW,EAAE,EAEtC,EAAuB,GAAU,KAAK,GAAI,GAAe,QAAU,EAAE,CAAE,CACvE,EAAuB,GAAW,CAAC,GAAG,IAAI,IAAI,EAAuB,GAAS,CAAC,EAC/E,EACF,CAIF,GAAM,CAAE,iBAAgB,iCAAkC,MAAM,EADjD,EAA4B,EAAc,EACmC,CAAE,CAC5F,OAAQ,KAAK,OACd,CAAC,CAGI,EAAY,CAAC,GAAG,EAAoB,GAAG,EAAqB,CAAC,IAAK,IAAa,CACnF,MAAO,EAAe,GACtB,GAAI,EAA8B,GAC9B,CAAE,gBAAiB,EAAS,CAC5B,CAAE,gBAAiB,gBAAiB,aAAc,EAAS,CAC/D,WAAY,CACV,CACE,IAAK,YACL,OAAQ,CAAC,UAAU,CACpB,CACD,CACE,IAAK,iBACL,OAAQ,EAAW,EAAkB,IAAY,EAAE,CAAE,EAAkB,CACxE,CACD,CACE,IAAK,kBACL,OAAQ,EAAuB,IAAY,EAAE,CAC9C,CACF,CACF,EAAE,CAGH,KAAK,OAAO,IAAI,mBAAmB,EAAU,SAAS,CACtD,KAAK,OAAO,IAAI,qBAAqB,EAAmB,SAAS,CACjE,KAAK,OAAO,IAAI,uBAAuB,EAAqB,SAAS,CAErE,KAAK,GAAG,cACN,EACA,EAAuB,CACrB,aAAc,EACf,CAAC,CACH"}

package/dist/impl-4rLX5Wah2.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-4rLX5Wah2.mjs","names":[],"sources":["../src/commands/request/export/impl.ts"],"sourcesContent":["import type { RequestAction, RequestStatus } from '@transcend-io/privacy-types';\nimport colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { streamPrivacyRequestsToCsv } from '../../../lib/requests/index.js';\n\nexport interface ExportCommandFlags {\n  auth: string;\n  sombraAuth?: string;\n  actions?: RequestAction[];\n  statuses?: RequestStatus[];\n  transcendUrl: string;\n  file: string;\n  concurrency: number;\n  createdAtBefore?: Date;\n  createdAtAfter?: Date;\n  updatedAtBefore?: Date;\n  updatedAtAfter?: Date;\n  showTests?: boolean;\n  skipRequestIdentifiers?: boolean;\n  pageLimit: number;\n}\n\n// `export` is a reserved keyword, so we need to prefix it with an underscore\n// eslint-disable-next-line no-underscore-dangle\nexport async function _export(\n  this: LocalContext,\n  {\n    auth,\n    transcendUrl,\n    file,\n    pageLimit,\n    concurrency,\n    actions,\n    sombraAuth,\n    skipRequestIdentifiers,\n    statuses,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n    showTests,\n  }: ExportCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  const { filePaths, totalCount } = await streamPrivacyRequestsToCsv({\n    transcendUrl,\n    concurrency,\n    pageLimit,\n    actions,\n    statuses,\n    auth,\n    sombraAuth,\n    skipRequestIdentifiers,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n    isTest: showTests,\n    file,\n  });\n\n  this.logger.info(\n    colors.green(\n      `Successfully wrote ${totalCount} requests to ` +\n        `${filePaths.length} file(s): ${filePaths.join(', ')}`,\n    ),\n  );\n}\n"],"mappings":"wIA0BA,eAAsB,EAEpB,CACE,OACA,eACA,OACA,YACA,cACA,UACA,aACA,yBACA,WACA,kBACA,iBACA,kBACA,iBACA,aAEa,CACf,EAAoB,KAAK,QAAQ,CAEjC,GAAM,CAAE,YAAW,cAAe,MAAM,EAA2B,CACjE,eACA,cACA,YACA,UACA,WACA,OACA,aACA,yBACA,kBACA,iBACA,kBACA,iBACA,OAAQ,EACR,OACD,CAAC,CAEF,KAAK,OAAO,KACV,EAAO,MACL,sBAAsB,EAAW,eAC5B,EAAU,OAAO,YAAY,EAAU,KAAK,KAAK,GACvD,CACF"}

package/dist/impl-BPjGRqOL2.mjs

@@ -1,3 +0,0 @@
-import{t as e}from"./buildExamples-CRrUU89C.mjs";import{r as t}from"./policyEngineCliError-BnBghLd1.mjs";import{n,t as r}from"./constants-FbK2iR--.mjs";import{r as i,t as a}from"./runOpa-Q2r3qPsi.mjs";import{i as o,n as s,t as c}from"./printResult-oXnpZu_9.mjs";import{t as l}from"./formatPolicyBundleVersionSummary-Bo7DYxoy.mjs";import{n as u}from"./resolveBundleIdByName-By5Vl8Iz.mjs";import{n as d}from"./inquirer-DNa31Mkx.mjs";import{t as f}from"./done-input-validation-BFgMCQWH.mjs";import{spawnSync as p}from"node:child_process";import m from"node:fs";import h from"node:os";import g from"node:path";import{gunzipSync as _}from"node:zlib";import v from"fast-glob";import y from"colors";function b(e){return e.endsWith(`.rego`)&&!e.endsWith(`_test.rego`)}function x(e){let t=g.join(e,`manifest.json`);if(!m.existsSync(t))throw Error(`Policy bundle directory must contain a manifest.json file.`);let n=m.readFileSync(t,`utf8`),r;try{r=JSON.parse(n)}catch(e){throw Error(`manifest.json is not valid JSON: ${e instanceof Error?e.message:String(e)}`,{cause:e})}if(!r||typeof r!=`object`||Array.isArray(r))throw Error(`manifest.json must contain a JSON object.`);let i=r.roots;if(!Array.isArray(i)||i.length===0)throw Error(`manifest.json must declare "roots" as a non-empty array of strings (e.g. {"roots":["policy_engine"]}).`);if(!i.every(e=>typeof e==`string`&&e.length>0))throw Error(`manifest.json "roots" must be an array of non-empty strings.`);return{roots:i}}function S(e){let t=x(e),n=v.sync(`**/*.rego`,{cwd:e,onlyFiles:!0,dot:!1}).filter(b);if(n.length===0)throw Error(`Policy bundle directory must contain at least one .rego policy file.`);return{entries:[`manifest.json`,...n.sort()],manifest:t}}const C=/^\s*package\s+([A-Za-z_][\w.]*)/m;function w(e){return e.replace(/\//g,`.`)}function T(e){let t=m.readFileSync(e,`utf8`);return C.exec(t)?.[1]}function E(e,t,n){let r=n.map(w),i=[];for(let a of t){let t=T(g.join(e,a));t&&(r.some(e=>t===e||t.startsWith(`${e}.`))||i.push(`  - ${a} (package ${t}) is not covered by roots [${n.join(`, `)}]`))}if(i.length>0)throw Error([`manifest.json "roots" do not cover all Rego packages in the bundle; uncovered packages will fail-closed at decide time. Either broaden "roots" or move the policy under a covered package:`,...i].join(`
-`))}async function D(e){let t=g.join(h.tmpdir(),`transcend-policy-bundle-build-${Date.now()}-${Math.random().toString(36).slice(2)}.tar.gz`);try{let{code:n,stderr:r}=await a([`build`,`--v0-compatible`,`--ignore`,`*_test.rego`,`-o`,t,`.`],{cwd:e});if(n!==0)throw Error(r.trim()||`opa build failed with exit code ${n}`)}finally{m.existsSync(t)&&m.unlinkSync(t)}}function O(e){if(e<1024)return`${e} B`;let t=e/1024;if(t<1024)return`${t%1==0?t.toFixed(0):t.toFixed(1)} KiB`;let n=t/1024;return`${n%1==0?n.toFixed(0):n.toFixed(1)} MiB`}async function k(e){i();let t=g.resolve(e);if(!m.existsSync(t)||!m.statSync(t).isDirectory())throw Error(`Policy directory does not exist or is not a directory: ${t}`);let{entries:o,manifest:s}=S(t);E(t,o.filter(e=>e!==`manifest.json`),s.roots);let{code:c,stderr:l}=await a([`check`,`--strict`,`--v0-compatible`,t]);if(c!==0)throw Error(l.trim()||`opa check failed with exit code ${c}`);await D(t);let u=g.join(h.tmpdir(),`transcend-policy-bundle-${Date.now()}-${Math.random().toString(36).slice(2)}.tar.gz`),d=p(`tar`,[`-czf`,u,`-C`,t,...o],{env:{...process.env,COPYFILE_DISABLE:`1`},encoding:`utf8`});if(d.status!==0)throw Error(`Failed to create policy bundle archive: ${d.stderr.trim()||`tar failed`}`);let f=m.readFileSync(u);if(f.byteLength>5120)throw m.unlinkSync(u),Error(`Policy bundle exceeds the ${O(r)} compressed upload limit (bundle is ${O(f.byteLength)}). The server also rejects decompressed bundles larger than ${O(n)}.`);let v=_(f);if(v.byteLength>51200)throw m.unlinkSync(u),Error(`Policy bundle exceeds the ${O(n)} decompressed upload limit (bundle is ${O(v.byteLength)} decompressed).`);return u}function A(e){let t=m.readFileSync(e.bundlePath),n=new FormData;return n.append(`bundle`,new Blob([t],{type:`application/gzip`}),g.basename(e.bundlePath)),n.append(`version`,e.version),e.description&&n.append(`description`,e.description),e.bundleName&&n.append(`bundleName`,e.bundleName),n}function j(e){return e.toISOString().slice(0,19).replace(/[T:]/g,`-`)}function M(e,t=new Date){return`${e}-${j(t)}`}async function N({dir:n,"bundle-name":r,auth:i,"transcend-url":a,version:p,description:m,json:h,yes:_,debug:v=!1}){f(this.process),t(v);let b=g.resolve(n),x=p??M(r),S=o(a,i),C;try{this.logger.info(y.green(`Building policy bundle from ${b}...`)),C=await k(b);let t=await u(S,r),n;if(t){this.logger.info(y.green(`Uploading new version for bundle "${r}"...`));let e=A({bundlePath:C,version:x,description:m});n=await s(S.post(`v1/policy-engine/policy-bundles/${t}/versions`,{body:e}).json())}else{if(!this.process.stdin.isTTY&&!_){this.logger.error(y.red(`Cannot create a new bundle in a non-interactive environment; pass --yes to confirm.`)),this.process.exit(1);return}if(!_&&(this.logger.warn(y.yellow(`No policy bundle named "${r}" exists for this organization.`)),!await d({message:`No policy bundle named "${r}" exists. Create a new bundle and upload its first version?`}))){this.logger.info(y.yellow(`Publish cancelled.`));return}this.logger.info(y.green(`Creating bundle "${r}" and uploading first version...`));let e=A({bundlePath:C,version:x,description:m,bundleName:r});n=await s(S.post(`v1/policy-engine/policy-bundles`,{body:e}).json())}c(this.process.stdout,{json:h,data:n,renderTable:()=>l(n.version)}),this.logger.info(y.green(`Policy bundle version uploaded successfully.`));let i=e([`policy`,`activate`],{version:n.version.version,"bundle-name":r});this.logger.info(y.yellow(`Publishing a policy does not activate it. To activate this version, run:\n  ${i}`))}finally{C&&this.fs.existsSync(C)&&this.fs.unlinkSync(C)}}export{N as publish};
-//# sourceMappingURL=impl-BPjGRqOL2.mjs.map

package/dist/impl-BPjGRqOL2.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-BPjGRqOL2.mjs","names":["fg"],"sources":["../src/commands/policy/helpers/buildOpaBundleTarball.ts","../src/commands/policy/helpers/buildPolicyBundleFormData.ts","../src/commands/policy/helpers/defaultPolicyVersionLabel.ts","../src/commands/policy/publish/impl.ts"],"sourcesContent":["import { spawnSync } from 'node:child_process';\nimport fs from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\nimport { gunzipSync } from 'node:zlib';\n\nimport fg from 'fast-glob';\n\nimport { MAX_BUNDLE_COMPRESSED_BYTES, MAX_BUNDLE_DECOMPRESSED_BYTES } from '../constants.js';\nimport { assertOpaInstalled } from './assertOpaInstalled.js';\nimport { runOPACapture } from './runOpa.js';\n\n/**\n * Returns whether a relative path is a publishable Rego policy file.\n *\n * OPA test files (`*_test.rego`) are excluded because they are for local\n * validation only and are not part of the upload contract.\n *\n * @param relativePath - Path relative to the bundle directory\n * @returns Whether the file should be included in the upload archive\n */\nfunction isPublishableRegoFile(relativePath: string): boolean {\n  return relativePath.endsWith('.rego') && !relativePath.endsWith('_test.rego');\n}\n\n/** Shape of the OPA bundle `manifest.json` as accepted by the Policy Engine. */\ninterface PolicyBundleManifest {\n  /** Roots of the bundle, e.g. `[\"policy_engine\"]` or `[\"policy_engine/transcend\"]` */\n  roots: string[];\n}\n\n/**\n * Reads and validates `manifest.json` from a policy bundle directory.\n *\n * The Policy Engine requires `manifest.json` to declare `roots` as an array of\n * strings. OPA's own tooling does not always enforce this against the Rego\n * packages on upload, so we validate the shape client-side to surface a clear,\n * actionable error instead of an opaque server `400` or a decide-time\n * fail-closed footgun.\n *\n * @param dir - Absolute path to the policy bundle directory\n * @returns The parsed manifest\n */\nfunction readPolicyBundleManifest(dir: string): PolicyBundleManifest {\n  const manifestPath = path.join(dir, 'manifest.json');\n  if (!fs.existsSync(manifestPath)) {\n    throw new Error('Policy bundle directory must contain a manifest.json file.');\n  }\n\n  const raw = fs.readFileSync(manifestPath, 'utf8');\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch (err) {\n    throw new Error(\n      `manifest.json is not valid JSON: ${err instanceof Error ? err.message : String(err)}`,\n      { cause: err },\n    );\n  }\n\n  if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {\n    throw new Error('manifest.json must contain a JSON object.');\n  }\n\n  const roots = (parsed as { roots?: unknown }).roots;\n  if (!Array.isArray(roots) || roots.length === 0) {\n    throw new Error(\n      'manifest.json must declare \"roots\" as a non-empty array of strings (e.g. {\"roots\":[\"policy_engine\"]}).',\n    );\n  }\n\n  if (!roots.every((root) => typeof root === 'string' && root.length > 0)) {\n    throw new Error('manifest.json \"roots\" must be an array of non-empty strings.');\n  }\n\n  return { roots };\n}\n\n/** Result of collecting publishable entries from a policy bundle directory. */\ninterface PolicyBundleArchiveContents {\n  /** Relative paths to include in the upload tarball (manifest first, then rego) */\n  entries: string[];\n  /** Parsed manifest */\n  manifest: PolicyBundleManifest;\n}\n\n/**\n * Collects `manifest.json` and publishable `.rego` files from a policy directory.\n *\n * @param dir - Absolute path to the policy bundle directory\n * @returns Archive entries and the parsed manifest\n */\nfunction collectPolicyBundleArchiveEntries(dir: string): PolicyBundleArchiveContents {\n  const manifest = readPolicyBundleManifest(dir);\n\n  const regoFiles = fg\n    .sync('**/*.rego', {\n      cwd: dir,\n      onlyFiles: true,\n      dot: false,\n    })\n    .filter(isPublishableRegoFile);\n\n  if (regoFiles.length === 0) {\n    throw new Error('Policy bundle directory must contain at least one .rego policy file.');\n  }\n\n  return { entries: ['manifest.json', ...regoFiles.sort()], manifest };\n}\n\n/** Matches a Rego `package <path>` declaration. */\nconst PACKAGE_DECLARATION_PATTERN = /^\\s*package\\s+([A-Za-z_][\\w.]*)/m;\n\n/**\n * Normalizes an OPA manifest root to a dotted package prefix.\n *\n * Roots use `/` as the path separator (e.g. `policy_engine/transcend`); Rego\n * package paths use `.` (e.g. `policy_engine.transcend`).\n *\n * @param root - A manifest root string\n * @returns The root in dotted form\n */\nfunction normalizeRootToPackagePrefix(root: string): string {\n  return root.replace(/\\//g, '.');\n}\n\n/**\n * Reads the Rego package path declared in a `.rego` file.\n *\n * @param filePath - Absolute path to the `.rego` file\n * @returns The dotted package path, or `undefined` if no `package` declaration\n */\nfunction readRegoPackagePath(filePath: string): string | undefined {\n  const contents = fs.readFileSync(filePath, 'utf8');\n  const match = PACKAGE_DECLARATION_PATTERN.exec(contents);\n  return match?.[1];\n}\n\n/**\n * Verifies that every publishable `.rego` package is covered by a manifest root.\n *\n * A bundle whose `roots` do not cover its Rego packages will upload cleanly but\n * fail-closed at decide time — the customer only discovers the mismatch via\n * denied decisions. This surfaces the mismatch at upload with a clear message.\n *\n * @param dir - Absolute path to the policy bundle directory\n * @param regoFiles - Relative paths to publishable `.rego` files\n * @param roots - Manifest roots\n */\nfunction assertRootsCoverPackages(dir: string, regoFiles: string[], roots: string[]): void {\n  const rootPrefixes = roots.map(normalizeRootToPackagePrefix);\n\n  const uncovered: string[] = [];\n  for (const relativeRego of regoFiles) {\n    const pkg = readRegoPackagePath(path.join(dir, relativeRego));\n    if (!pkg) {\n      continue;\n    }\n    const covered = rootPrefixes.some((prefix) => pkg === prefix || pkg.startsWith(`${prefix}.`));\n    if (!covered) {\n      uncovered.push(\n        `  - ${relativeRego} (package ${pkg}) is not covered by roots [${roots.join(', ')}]`,\n      );\n    }\n  }\n\n  if (uncovered.length > 0) {\n    throw new Error(\n      [\n        'manifest.json \"roots\" do not cover all Rego packages in the bundle; ' +\n          'uncovered packages will fail-closed at decide time. Either broaden \"roots\" or move the policy under a covered package:',\n        ...uncovered,\n      ].join('\\n'),\n    );\n  }\n}\n\n/**\n * Verifies that a policy directory compiles end-to-end with `opa build`.\n *\n * The compiled output is discarded — the server receives the `manifest.json` +\n * `.rego` archive produced by {@link buildOpaBundleTarball}, not the OPA bundle\n * — but a successful build guarantees the policies compile and link, surfacing\n * errors (syntax, missing imports, undefined references, etc.) before upload.\n *\n * @param dir - Absolute path to the policy bundle directory\n */\nasync function assertBundleCompiles(dir: string): Promise<void> {\n  const buildOutputPath = path.join(\n    os.tmpdir(),\n    `transcend-policy-bundle-build-${Date.now()}-${Math.random().toString(36).slice(2)}.tar.gz`,\n  );\n  try {\n    // Run with `cwd` set to the bundle directory and pass `.` so `opa build`\n    // resolves the bundle root correctly. `*_test.rego` files are local-only.\n    const { code, stderr } = await runOPACapture(\n      ['build', '--v0-compatible', '--ignore', '*_test.rego', '-o', buildOutputPath, '.'],\n      { cwd: dir },\n    );\n    if (code !== 0) {\n      throw new Error(stderr.trim() || `opa build failed with exit code ${code}`);\n    }\n  } finally {\n    if (fs.existsSync(buildOutputPath)) {\n      fs.unlinkSync(buildOutputPath);\n    }\n  }\n}\n\n/**\n * Formats a byte count as a human-readable size with binary units.\n *\n * @param bytes - Number of bytes\n * @returns Human-readable size, e.g. `14 MiB` or `4 KiB`\n */\nfunction formatBytes(bytes: number): string {\n  if (bytes < 1024) {\n    return `${bytes} B`;\n  }\n  const kib = bytes / 1024;\n  if (kib < 1024) {\n    return `${kib % 1 === 0 ? kib.toFixed(0) : kib.toFixed(1)} KiB`;\n  }\n  const mib = kib / 1024;\n  return `${mib % 1 === 0 ? mib.toFixed(0) : mib.toFixed(1)} MiB`;\n}\n\n/**\n * Builds a gzip-compressed policy bundle tarball for upload to Transcend.\n *\n * The Policy Engine API expects a plain archive containing `manifest.json` and\n * one or more `.rego` files. This differs from `opa build` output, which embeds\n * `.manifest`, `data.json`, and other OPA bundle metadata that the server\n * rejects. Before packaging, the manifest is validated (shape + root coverage)\n * and the bundle is validated with `opa check` (strict Rego linting) and\n * `opa build` (full compilation) so failures surface client-side rather than\n * after upload.\n *\n * @param dir - Directory containing `manifest.json` and `.rego` policy files\n * @returns Absolute path to the generated `.tar.gz` bundle\n */\nexport async function buildOpaBundleTarball(dir: string): Promise<string> {\n  assertOpaInstalled();\n\n  const resolvedDir = path.resolve(dir);\n  if (!fs.existsSync(resolvedDir) || !fs.statSync(resolvedDir).isDirectory()) {\n    throw new Error(`Policy directory does not exist or is not a directory: ${resolvedDir}`);\n  }\n\n  // Validate the manifest shape and that roots cover every Rego package before\n  // invoking OPA, so invalid manifests surface a clear error instead of an\n  // opaque `opa build failed with exit code 1`.\n  const { entries: archiveEntries, manifest } = collectPolicyBundleArchiveEntries(resolvedDir);\n  const regoFiles = archiveEntries.filter((entry) => entry !== 'manifest.json');\n  assertRootsCoverPackages(resolvedDir, regoFiles, manifest.roots);\n\n  // Match the Rego v1 validation the Policy Engine API runs on upload.\n  const { code: checkCode, stderr: checkStderr } = await runOPACapture([\n    'check',\n    '--strict',\n    '--v0-compatible',\n    resolvedDir,\n  ]);\n  if (checkCode !== 0) {\n    throw new Error(checkStderr.trim() || `opa check failed with exit code ${checkCode}`);\n  }\n\n  // Ensure the bundle compiles end-to-end before packaging for upload.\n  await assertBundleCompiles(resolvedDir);\n\n  const outputPath = path.join(\n    os.tmpdir(),\n    `transcend-policy-bundle-${Date.now()}-${Math.random().toString(36).slice(2)}.tar.gz`,\n  );\n\n  const tarResult = spawnSync('tar', ['-czf', outputPath, '-C', resolvedDir, ...archiveEntries], {\n    env: { ...process.env, COPYFILE_DISABLE: '1' },\n    encoding: 'utf8',\n  });\n  if (tarResult.status !== 0) {\n    throw new Error(\n      `Failed to create policy bundle archive: ${tarResult.stderr.trim() || 'tar failed'}`,\n    );\n  }\n\n  const compressedBytes = fs.readFileSync(outputPath);\n  if (compressedBytes.byteLength > MAX_BUNDLE_COMPRESSED_BYTES) {\n    fs.unlinkSync(outputPath);\n    throw new Error(\n      `Policy bundle exceeds the ${formatBytes(MAX_BUNDLE_COMPRESSED_BYTES)} compressed upload limit ` +\n        `(bundle is ${formatBytes(compressedBytes.byteLength)}). ` +\n        `The server also rejects decompressed bundles larger than ${formatBytes(MAX_BUNDLE_DECOMPRESSED_BYTES)}.`,\n    );\n  }\n\n  const decompressedBytes = gunzipSync(compressedBytes);\n  if (decompressedBytes.byteLength > MAX_BUNDLE_DECOMPRESSED_BYTES) {\n    fs.unlinkSync(outputPath);\n    throw new Error(\n      `Policy bundle exceeds the ${formatBytes(MAX_BUNDLE_DECOMPRESSED_BYTES)} decompressed upload limit ` +\n        `(bundle is ${formatBytes(decompressedBytes.byteLength)} decompressed).`,\n    );\n  }\n\n  return outputPath;\n}\n","import fs from 'node:fs';\nimport path from 'node:path';\n\n/** Fields for building a policy bundle upload form. */\nexport interface BuildPolicyBundleFormDataOptions {\n  /** Absolute path to the bundle tarball */\n  bundlePath: string;\n  /** Version label */\n  version: string;\n  /** Optional description */\n  description?: string;\n  /** Bundle name (only for create) */\n  bundleName?: string;\n}\n\n/**\n * Builds multipart form data for a policy bundle upload.\n *\n * @param options - Upload fields\n * @returns FormData ready for POST\n */\nexport function buildPolicyBundleFormData(options: BuildPolicyBundleFormDataOptions): FormData {\n  const bundleBytes = fs.readFileSync(options.bundlePath);\n  const form = new FormData();\n  form.append(\n    'bundle',\n    new Blob([bundleBytes], { type: 'application/gzip' }),\n    path.basename(options.bundlePath),\n  );\n  form.append('version', options.version);\n  if (options.description) {\n    form.append('description', options.description);\n  }\n  if (options.bundleName) {\n    form.append('bundleName', options.bundleName);\n  }\n  return form;\n}\n","/**\n * Formats a date as `yyyy-mm-dd-hh-mm-ss` in UTC.\n *\n * @param date - Date to format\n * @returns Timestamp label\n */\nfunction formatPolicyVersionTimestamp(date: Date): string {\n  return date.toISOString().slice(0, 19).replace(/[T:]/g, '-');\n}\n\n/**\n * Returns a default version label from the bundle name and current UTC timestamp.\n *\n * @param bundleName - Tenant-unique policy bundle name\n * @param now - Current time (for testing)\n * @returns Version label in `{bundleName}-yyyy-mm-dd-hh-mm-ss` form\n */\nexport function defaultPolicyVersionLabel(bundleName: string, now: Date = new Date()): string {\n  return `${bundleName}-${formatPolicyVersionTimestamp(now)}`;\n}\n","import path from 'node:path';\n\nimport colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { buildExampleCommand } from '../../../lib/docgen/buildExamples.js';\nimport { inquirerConfirmBoolean } from '../../../lib/helpers/inquirer.js';\nimport type { ActivateCommandFlags } from '../activate/impl.js';\nimport {\n  buildPolicyBundleFormData,\n  buildPolicyEngineClient,\n  buildOpaBundleTarball,\n  defaultPolicyVersionLabel,\n  formatPolicyBundleVersionSummary,\n  policyEngineRequest,\n  printResult,\n  resolveBundleIdByName,\n  setPolicyEngineCliDebug,\n} from '../helpers/index.js';\nimport type { CreatePolicyBundleResponse, CreatePolicyBundleVersionResponse } from '../types.js';\n\n/** CLI flags for `transcend policy publish`. */\nexport interface PublishCommandFlags {\n  /** Directory containing Rego policy files */\n  dir: string;\n  /** Tenant-unique bundle name */\n  'bundle-name': string;\n  /** Transcend API key */\n  auth: string;\n  /** Transcend API URL */\n  'transcend-url': string;\n  /** Version label (defaults to `{bundleName}-yyyy-mm-dd-hh-mm-ss`) */\n  version?: string;\n  /** Optional version description */\n  description?: string;\n  /** Print raw JSON response */\n  json: boolean;\n  /** Skip the \"create new bundle\" confirmation */\n  yes: boolean;\n  /** Include technical error details when a command fails */\n  debug?: boolean;\n}\n\n/**\n * Build and upload a new immutable policy bundle version.\n *\n * @param this - CLI context\n * @param flags - Command flags\n */\nexport async function publish(\n  this: LocalContext,\n  {\n    dir,\n    'bundle-name': bundleName,\n    auth,\n    'transcend-url': transcendUrl,\n    version,\n    description,\n    json,\n    yes,\n    debug = false,\n  }: PublishCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n  setPolicyEngineCliDebug(debug);\n\n  const resolvedDir = path.resolve(dir);\n  const versionLabel = version ?? defaultPolicyVersionLabel(bundleName);\n  const client = buildPolicyEngineClient(transcendUrl, auth);\n\n  let bundlePath: string | undefined;\n  try {\n    this.logger.info(colors.green(`Building policy bundle from ${resolvedDir}...`));\n    bundlePath = await buildOpaBundleTarball(resolvedDir);\n\n    const existingBundleId = await resolveBundleIdByName(client, bundleName);\n\n    let responseBody: CreatePolicyBundleResponse | CreatePolicyBundleVersionResponse;\n\n    if (existingBundleId) {\n      this.logger.info(colors.green(`Uploading new version for bundle \"${bundleName}\"...`));\n      const form = buildPolicyBundleFormData({\n        bundlePath,\n        version: versionLabel,\n        description,\n      });\n      responseBody = await policyEngineRequest(\n        client\n          .post(`v1/policy-engine/policy-bundles/${existingBundleId}/versions`, { body: form })\n          .json<CreatePolicyBundleVersionResponse>(),\n      );\n    } else {\n      if (!this.process.stdin.isTTY && !yes) {\n        this.logger.error(\n          colors.red(\n            'Cannot create a new bundle in a non-interactive environment; pass --yes to confirm.',\n          ),\n        );\n        this.process.exit(1);\n        return;\n      }\n\n      if (!yes) {\n        this.logger.warn(\n          colors.yellow(`No policy bundle named \"${bundleName}\" exists for this organization.`),\n        );\n        const shouldCreate = await inquirerConfirmBoolean({\n          message: `No policy bundle named \"${bundleName}\" exists. Create a new bundle and upload its first version?`,\n        });\n        if (!shouldCreate) {\n          this.logger.info(colors.yellow('Publish cancelled.'));\n          return;\n        }\n      }\n\n      this.logger.info(\n        colors.green(`Creating bundle \"${bundleName}\" and uploading first version...`),\n      );\n      const createForm = buildPolicyBundleFormData({\n        bundlePath,\n        version: versionLabel,\n        description,\n        bundleName,\n      });\n      responseBody = await policyEngineRequest(\n        client\n          .post('v1/policy-engine/policy-bundles', {\n            body: createForm,\n          })\n          .json<CreatePolicyBundleResponse>(),\n      );\n    }\n\n    printResult(this.process.stdout, {\n      json,\n      data: responseBody,\n      renderTable: () => formatPolicyBundleVersionSummary(responseBody.version),\n    });\n\n    this.logger.info(colors.green('Policy bundle version uploaded successfully.'));\n\n    const activateCommand = buildExampleCommand<ActivateCommandFlags>(['policy', 'activate'], {\n      version: responseBody.version.version,\n      'bundle-name': bundleName,\n    });\n    this.logger.info(\n      colors.yellow(\n        `Publishing a policy does not activate it. To activate this version, run:\\n  ${activateCommand}`,\n      ),\n    );\n  } finally {\n    if (bundlePath && this.fs.existsSync(bundlePath)) {\n      this.fs.unlinkSync(bundlePath);\n    }\n  }\n}\n"],"mappings":"orBAqBA,SAAS,EAAsB,EAA+B,CAC5D,OAAO,EAAa,SAAS,QAAQ,EAAI,CAAC,EAAa,SAAS,aAAa,CAqB/E,SAAS,EAAyB,EAAmC,CACnE,IAAM,EAAe,EAAK,KAAK,EAAK,gBAAgB,CACpD,GAAI,CAAC,EAAG,WAAW,EAAa,CAC9B,MAAU,MAAM,6DAA6D,CAG/E,IAAM,EAAM,EAAG,aAAa,EAAc,OAAO,CAC7C,EACJ,GAAI,CACF,EAAS,KAAK,MAAM,EAAI,OACjB,EAAK,CACZ,MAAU,MACR,oCAAoC,aAAe,MAAQ,EAAI,QAAU,OAAO,EAAI,GACpF,CAAE,MAAO,EAAK,CACf,CAGH,GAAI,CAAC,GAAU,OAAO,GAAW,UAAY,MAAM,QAAQ,EAAO,CAChE,MAAU,MAAM,4CAA4C,CAG9D,IAAM,EAAS,EAA+B,MAC9C,GAAI,CAAC,MAAM,QAAQ,EAAM,EAAI,EAAM,SAAW,EAC5C,MAAU,MACR,yGACD,CAGH,GAAI,CAAC,EAAM,MAAO,GAAS,OAAO,GAAS,UAAY,EAAK,OAAS,EAAE,CACrE,MAAU,MAAM,+DAA+D,CAGjF,MAAO,CAAE,QAAO,CAiBlB,SAAS,EAAkC,EAA0C,CACnF,IAAM,EAAW,EAAyB,EAAI,CAExC,EAAYA,EACf,KAAK,YAAa,CACjB,IAAK,EACL,UAAW,GACX,IAAK,GACN,CAAC,CACD,OAAO,EAAsB,CAEhC,GAAI,EAAU,SAAW,EACvB,MAAU,MAAM,uEAAuE,CAGzF,MAAO,CAAE,QAAS,CAAC,gBAAiB,GAAG,EAAU,MAAM,CAAC,CAAE,WAAU,CAItE,MAAM,EAA8B,mCAWpC,SAAS,EAA6B,EAAsB,CAC1D,OAAO,EAAK,QAAQ,MAAO,IAAI,CASjC,SAAS,EAAoB,EAAsC,CACjE,IAAM,EAAW,EAAG,aAAa,EAAU,OAAO,CAElD,OADc,EAA4B,KAAK,EACnC,GAAG,GAcjB,SAAS,EAAyB,EAAa,EAAqB,EAAuB,CACzF,IAAM,EAAe,EAAM,IAAI,EAA6B,CAEtD,EAAsB,EAAE,CAC9B,IAAK,IAAM,KAAgB,EAAW,CACpC,IAAM,EAAM,EAAoB,EAAK,KAAK,EAAK,EAAa,CAAC,CACxD,IAGW,EAAa,KAAM,GAAW,IAAQ,GAAU,EAAI,WAAW,GAAG,EAAO,GAAG,CAChF,EACV,EAAU,KACR,OAAO,EAAa,YAAY,EAAI,6BAA6B,EAAM,KAAK,KAAK,CAAC,GACnF,EAIL,GAAI,EAAU,OAAS,EACrB,MAAU,MACR,CACE,6LAEA,GAAG,EACJ,CAAC,KAAK;EAAK,CACb,CAcL,eAAe,EAAqB,EAA4B,CAC9D,IAAM,EAAkB,EAAK,KAC3B,EAAG,QAAQ,CACX,iCAAiC,KAAK,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,MAAM,EAAE,CAAC,SACpF,CACD,GAAI,CAGF,GAAM,CAAE,OAAM,UAAW,MAAM,EAC7B,CAAC,QAAS,kBAAmB,WAAY,cAAe,KAAM,EAAiB,IAAI,CACnF,CAAE,IAAK,EAAK,CACb,CACD,GAAI,IAAS,EACX,MAAU,MAAM,EAAO,MAAM,EAAI,mCAAmC,IAAO,QAErE,CACJ,EAAG,WAAW,EAAgB,EAChC,EAAG,WAAW,EAAgB,EAWpC,SAAS,EAAY,EAAuB,CAC1C,GAAI,EAAQ,KACV,MAAO,GAAG,EAAM,IAElB,IAAM,EAAM,EAAQ,KACpB,GAAI,EAAM,KACR,MAAO,GAAG,EAAM,GAAM,EAAI,EAAI,QAAQ,EAAE,CAAG,EAAI,QAAQ,EAAE,CAAC,MAE5D,IAAM,EAAM,EAAM,KAClB,MAAO,GAAG,EAAM,GAAM,EAAI,EAAI,QAAQ,EAAE,CAAG,EAAI,QAAQ,EAAE,CAAC,MAiB5D,eAAsB,EAAsB,EAA8B,CACxE,GAAoB,CAEpB,IAAM,EAAc,EAAK,QAAQ,EAAI,CACrC,GAAI,CAAC,EAAG,WAAW,EAAY,EAAI,CAAC,EAAG,SAAS,EAAY,CAAC,aAAa,CACxE,MAAU,MAAM,0DAA0D,IAAc,CAM1F,GAAM,CAAE,QAAS,EAAgB,YAAa,EAAkC,EAAY,CAE5F,EAAyB,EADP,EAAe,OAAQ,GAAU,IAAU,gBACd,CAAE,EAAS,MAAM,CAGhE,GAAM,CAAE,KAAM,EAAW,OAAQ,GAAgB,MAAM,EAAc,CACnE,QACA,WACA,kBACA,EACD,CAAC,CACF,GAAI,IAAc,EAChB,MAAU,MAAM,EAAY,MAAM,EAAI,mCAAmC,IAAY,CAIvF,MAAM,EAAqB,EAAY,CAEvC,IAAM,EAAa,EAAK,KACtB,EAAG,QAAQ,CACX,2BAA2B,KAAK,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,MAAM,EAAE,CAAC,SAC9E,CAEK,EAAY,EAAU,MAAO,CAAC,OAAQ,EAAY,KAAM,EAAa,GAAG,EAAe,CAAE,CAC7F,IAAK,CAAE,GAAG,QAAQ,IAAK,iBAAkB,IAAK,CAC9C,SAAU,OACX,CAAC,CACF,GAAI,EAAU,SAAW,EACvB,MAAU,MACR,2CAA2C,EAAU,OAAO,MAAM,EAAI,eACvE,CAGH,IAAM,EAAkB,EAAG,aAAa,EAAW,CACnD,GAAI,EAAgB,WAAA,KAElB,MADA,EAAG,WAAW,EAAW,CACf,MACR,6BAA6B,EAAY,EAA4B,CAAC,sCACtD,EAAY,EAAgB,WAAW,CAAC,8DACM,EAAY,EAA8B,CAAC,GAC1G,CAGH,IAAM,EAAoB,EAAW,EAAgB,CACrD,GAAI,EAAkB,WAAA,MAEpB,MADA,EAAG,WAAW,EAAW,CACf,MACR,6BAA6B,EAAY,EAA8B,CAAC,wCACxD,EAAY,EAAkB,WAAW,CAAC,iBAC3D,CAGH,OAAO,EC3RT,SAAgB,EAA0B,EAAqD,CAC7F,IAAM,EAAc,EAAG,aAAa,EAAQ,WAAW,CACjD,EAAO,IAAI,SAajB,OAZA,EAAK,OACH,SACA,IAAI,KAAK,CAAC,EAAY,CAAE,CAAE,KAAM,mBAAoB,CAAC,CACrD,EAAK,SAAS,EAAQ,WAAW,CAClC,CACD,EAAK,OAAO,UAAW,EAAQ,QAAQ,CACnC,EAAQ,aACV,EAAK,OAAO,cAAe,EAAQ,YAAY,CAE7C,EAAQ,YACV,EAAK,OAAO,aAAc,EAAQ,WAAW,CAExC,EC9BT,SAAS,EAA6B,EAAoB,CACxD,OAAO,EAAK,aAAa,CAAC,MAAM,EAAG,GAAG,CAAC,QAAQ,QAAS,IAAI,CAU9D,SAAgB,EAA0B,EAAoB,EAAY,IAAI,KAAgB,CAC5F,MAAO,GAAG,EAAW,GAAG,EAA6B,EAAI,GCgC3D,eAAsB,EAEpB,CACE,MACA,cAAe,EACf,OACA,gBAAiB,EACjB,UACA,cACA,OACA,MACA,QAAQ,IAEK,CACf,EAAoB,KAAK,QAAQ,CACjC,EAAwB,EAAM,CAE9B,IAAM,EAAc,EAAK,QAAQ,EAAI,CAC/B,EAAe,GAAW,EAA0B,EAAW,CAC/D,EAAS,EAAwB,EAAc,EAAK,CAEtD,EACJ,GAAI,CACF,KAAK,OAAO,KAAK,EAAO,MAAM,+BAA+B,EAAY,KAAK,CAAC,CAC/E,EAAa,MAAM,EAAsB,EAAY,CAErD,IAAM,EAAmB,MAAM,EAAsB,EAAQ,EAAW,CAEpE,EAEJ,GAAI,EAAkB,CACpB,KAAK,OAAO,KAAK,EAAO,MAAM,qCAAqC,EAAW,MAAM,CAAC,CACrF,IAAM,EAAO,EAA0B,CACrC,aACA,QAAS,EACT,cACD,CAAC,CACF,EAAe,MAAM,EACnB,EACG,KAAK,mCAAmC,EAAiB,WAAY,CAAE,KAAM,EAAM,CAAC,CACpF,MAAyC,CAC7C,KACI,CACL,GAAI,CAAC,KAAK,QAAQ,MAAM,OAAS,CAAC,EAAK,CACrC,KAAK,OAAO,MACV,EAAO,IACL,sFACD,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,CACpB,OAGF,GAAI,CAAC,IACH,KAAK,OAAO,KACV,EAAO,OAAO,2BAA2B,EAAW,iCAAiC,CACtF,CAIG,CAAC,MAHsB,EAAuB,CAChD,QAAS,2BAA2B,EAAW,6DAChD,CAAC,EACiB,CACjB,KAAK,OAAO,KAAK,EAAO,OAAO,qBAAqB,CAAC,CACrD,OAIJ,KAAK,OAAO,KACV,EAAO,MAAM,oBAAoB,EAAW,kCAAkC,CAC/E,CACD,IAAM,EAAa,EAA0B,CAC3C,aACA,QAAS,EACT,cACA,aACD,CAAC,CACF,EAAe,MAAM,EACnB,EACG,KAAK,kCAAmC,CACvC,KAAM,EACP,CAAC,CACD,MAAkC,CACtC,CAGH,EAAY,KAAK,QAAQ,OAAQ,CAC/B,OACA,KAAM,EACN,gBAAmB,EAAiC,EAAa,QAAQ,CAC1E,CAAC,CAEF,KAAK,OAAO,KAAK,EAAO,MAAM,+CAA+C,CAAC,CAE9E,IAAM,EAAkB,EAA0C,CAAC,SAAU,WAAW,CAAE,CACxF,QAAS,EAAa,QAAQ,QAC9B,cAAe,EAChB,CAAC,CACF,KAAK,OAAO,KACV,EAAO,OACL,+EAA+E,IAChF,CACF,QACO,CACJ,GAAc,KAAK,GAAG,WAAW,EAAW,EAC9C,KAAK,GAAG,WAAW,EAAW"}

package/dist/impl-BQTw6jpw.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-BQTw6jpw.mjs","names":[],"sources":["../src/commands/inventory/derive-data-silos-from-data-flows/impl.ts"],"sourcesContent":["import path from 'node:path';\n\nimport { buildTranscendGraphQLClient, fetchAndIndexCatalogs } from '@transcend-io/sdk';\nimport colors from 'colors';\n\nimport { DataFlowInput } from '../../../codecs.js';\nimport type { LocalContext } from '../../../context.js';\nimport { filterFileNames } from '../../../lib/api-keys/index.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { dataFlowsToDataSilos } from '../../../lib/consent-manager/dataFlowsToDataSilos.js';\nimport { parseTranscendYaml, serializeTranscendYaml } from '../../../lib/readTranscendYaml.js';\n\nexport interface DeriveDataSilosFromDataFlowsCommandFlags {\n  auth: string;\n  dataFlowsYmlFolder: string;\n  dataSilosYmlFolder: string;\n  ignoreYmls?: string[];\n  transcendUrl: string;\n}\n\nexport async function deriveDataSilosFromDataFlows(\n  this: LocalContext,\n  {\n    auth,\n    dataFlowsYmlFolder,\n    dataSilosYmlFolder,\n    ignoreYmls = [],\n    transcendUrl,\n  }: DeriveDataSilosFromDataFlowsCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  // Ensure folder is passed\n  if (\n    !this.fs.existsSync(dataFlowsYmlFolder) ||\n    !this.fs.lstatSync(dataFlowsYmlFolder).isDirectory()\n  ) {\n    this.logger.error(colors.red(`Folder does not exist: \"${dataFlowsYmlFolder}\"`));\n    this.process.exit(1);\n  }\n\n  // Ensure folder is passed\n  if (\n    !this.fs.existsSync(dataSilosYmlFolder) ||\n    !this.fs.lstatSync(dataSilosYmlFolder).isDirectory()\n  ) {\n    this.logger.error(colors.red(`Folder does not exist: \"${dataSilosYmlFolder}\"`));\n    this.process.exit(1);\n  }\n\n  // Fetch all integrations in the catalog\n  const client = buildTranscendGraphQLClient(transcendUrl, auth);\n  const { serviceToTitle, serviceToSupportedIntegration } = await fetchAndIndexCatalogs(client, {\n    logger: this.logger,\n  });\n\n  // List of each data flow yml file\n  filterFileNames(this.fs.readdirSync(dataFlowsYmlFolder)).forEach((directory) => {\n    const inputPath = path.join(dataFlowsYmlFolder, directory);\n\n    // read in the data flows for a specific instance\n    const { 'data-flows': dataFlows = [] } = parseTranscendYaml(\n      this.fs.readFileSync(inputPath, 'utf8'),\n      {},\n      inputPath,\n    );\n\n    // map the data flows to data silos\n    const { adTechDataSilos, siteTechDataSilos } = dataFlowsToDataSilos(\n      dataFlows as DataFlowInput[],\n      {\n        serviceToSupportedIntegration,\n        serviceToTitle,\n      },\n    );\n\n    // combine and write to yml file\n    const dataSilos = [...adTechDataSilos, ...siteTechDataSilos];\n    this.logger.log(`Total Services: ${dataSilos.length}`);\n    this.logger.log(`Ad Tech Services: ${adTechDataSilos.length}`);\n    this.logger.log(`Site Tech Services: ${siteTechDataSilos.length}`);\n    this.fs.writeFileSync(\n      path.join(dataSilosYmlFolder, directory),\n      serializeTranscendYaml({\n        'data-silos': ignoreYmls.includes(directory) ? [] : dataSilos,\n      }),\n    );\n  });\n}\n"],"mappings":"oWAoBA,eAAsB,EAEpB,CACE,OACA,qBACA,qBACA,aAAa,EAAE,CACf,gBAEa,CACf,EAAoB,KAAK,QAAQ,EAI/B,CAAC,KAAK,GAAG,WAAW,EAAmB,EACvC,CAAC,KAAK,GAAG,UAAU,EAAmB,CAAC,aAAa,IAEpD,KAAK,OAAO,MAAM,EAAO,IAAI,2BAA2B,EAAmB,GAAG,CAAC,CAC/E,KAAK,QAAQ,KAAK,EAAE,GAKpB,CAAC,KAAK,GAAG,WAAW,EAAmB,EACvC,CAAC,KAAK,GAAG,UAAU,EAAmB,CAAC,aAAa,IAEpD,KAAK,OAAO,MAAM,EAAO,IAAI,2BAA2B,EAAmB,GAAG,CAAC,CAC/E,KAAK,QAAQ,KAAK,EAAE,EAKtB,GAAM,CAAE,iBAAgB,iCAAkC,MAAM,EADjD,EAA4B,EAAc,EACmC,CAAE,CAC5F,OAAQ,KAAK,OACd,CAAC,CAGF,EAAgB,KAAK,GAAG,YAAY,EAAmB,CAAC,CAAC,QAAS,GAAc,CAC9E,IAAM,EAAY,EAAK,KAAK,EAAoB,EAAU,CAGpD,CAAE,aAAc,EAAY,EAAE,EAAK,EACvC,KAAK,GAAG,aAAa,EAAW,OAAO,CACvC,EAAE,CACF,EACD,CAGK,CAAE,kBAAiB,qBAAsB,EAC7C,EACA,CACE,gCACA,iBACD,CACF,CAGK,EAAY,CAAC,GAAG,EAAiB,GAAG,EAAkB,CAC5D,KAAK,OAAO,IAAI,mBAAmB,EAAU,SAAS,CACtD,KAAK,OAAO,IAAI,qBAAqB,EAAgB,SAAS,CAC9D,KAAK,OAAO,IAAI,uBAAuB,EAAkB,SAAS,CAClE,KAAK,GAAG,cACN,EAAK,KAAK,EAAoB,EAAU,CACxC,EAAuB,CACrB,aAAc,EAAW,SAAS,EAAU,CAAG,EAAE,CAAG,EACrD,CAAC,CACH,EACD"}

package/dist/impl-BbWzTCSd2.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-BbWzTCSd2.mjs","names":[],"sources":["../src/commands/request/upload/impl.ts"],"sourcesContent":["import { splitCsvToList } from '@transcend-io/utils';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { uploadPrivacyRequestsFromCsv } from '../../../lib/requests/index.js';\n\nexport interface UploadCommandFlags {\n  auth: string;\n  file: string;\n  transcendUrl: string;\n  cacheFilepath: string;\n  requestReceiptFolder: string;\n  sombraAuth?: string;\n  concurrency: number;\n  attributes: string;\n  isTest: boolean;\n  isSilent: boolean;\n  skipSendingReceipt: boolean;\n  emailIsVerified: boolean;\n  skipFilterStep: boolean;\n  dryRun: boolean;\n  debug: boolean;\n  defaultPhoneCountryCode: string;\n}\n\nexport async function upload(\n  this: LocalContext,\n  {\n    auth,\n    file,\n    transcendUrl,\n    cacheFilepath,\n    requestReceiptFolder,\n    sombraAuth,\n    concurrency,\n    attributes,\n    isTest,\n    isSilent,\n    skipSendingReceipt,\n    emailIsVerified,\n    skipFilterStep,\n    dryRun,\n    debug,\n    defaultPhoneCountryCode,\n  }: UploadCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await uploadPrivacyRequestsFromCsv({\n    cacheFilepath,\n    requestReceiptFolder,\n    file,\n    auth,\n    sombraAuth,\n    concurrency,\n    transcendUrl,\n    defaultPhoneCountryCode,\n    attributes: splitCsvToList(attributes),\n    debug,\n    skipFilterStep,\n    isSilent,\n    skipSendingReceipt,\n    emailIsVerified,\n    isTest,\n    dryRun,\n  });\n}\n"],"mappings":"yKAyBA,eAAsB,EAEpB,CACE,OACA,OACA,eACA,gBACA,uBACA,aACA,cACA,aACA,SACA,WACA,qBACA,kBACA,iBACA,SACA,QACA,2BAEa,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAA6B,CACjC,gBACA,uBACA,OACA,OACA,aACA,cACA,eACA,0BACA,WAAY,EAAe,EAAW,CACtC,QACA,iBACA,WACA,qBACA,kBACA,SACA,SACD,CAAC"}

package/dist/impl-BkyqCY72.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-BkyqCY72.mjs","names":[],"sources":["../src/lib/code-scanning/findFilesToScan.ts","../src/commands/inventory/discover-silos/impl.ts"],"sourcesContent":["import fastGlob from 'fast-glob';\n\nimport { logger } from '../../logger.js';\nimport { CodeScanningConfig } from './types.js';\n\nexport interface SiloDiscoveryRawResults {\n  /** The name of the potential data silo entry */\n  name: string;\n  /** A unique UUID (represents the same resource across different silo discovery runs) */\n  resourceId: string;\n  /** Any hosts associated with the entry */\n  host?: string;\n  /** Type of data silo */\n  type?: string | undefined;\n}\n\n/**\n * Helper to scan for data silos in all package.json files that it can find in a directory\n *\n * @deprecated TODO: https://transcend.height.app/T-32325 - use code scanning instead\n * @param options - Options\n * @returns the list of integrations\n */\nexport async function findFilesToScan({\n  scanPath,\n  fileGlobs,\n  ignoreDirs,\n  config,\n}: {\n  /** Where to look for package.json files */\n  scanPath: string;\n  /** Globs to look for */\n  fileGlobs: string;\n  /** The directories to ignore (excludes node_modules and serverless-build) */\n  ignoreDirs: string;\n  /** Silo Discovery configuration */\n  config: CodeScanningConfig;\n}): Promise<SiloDiscoveryRawResults[]> {\n  const { ignoreDirs: IGNORE_DIRS, supportedFiles, scanFunction } = config;\n  const globsToSupport =\n    fileGlobs === '' ? supportedFiles : supportedFiles.concat(fileGlobs.split(','));\n  const dirsToIgnore = [...ignoreDirs.split(','), ...IGNORE_DIRS].filter((dir) => dir.length > 0);\n  try {\n    const filesToScan: string[] = await fastGlob(`${scanPath}/**/${globsToSupport.join('|')}`, {\n      ignore: dirsToIgnore.map((dir: string) => `${scanPath}/**/${dir}`),\n      unique: true,\n      onlyFiles: true,\n    });\n    logger.info(`Scanning: ${filesToScan.length} files`);\n    const allPackages = filesToScan.map((filePath: string) => scanFunction(filePath)).flat();\n    const allSdks = allPackages\n      .map((appPackage) => appPackage.softwareDevelopmentKits || [])\n      .flat();\n    const uniqueDeps = new Set(allSdks.map((sdk) => sdk.name));\n    const deps = [...uniqueDeps];\n    logger.info(`Found: ${deps.length} unique dependencies`);\n    return deps.map((dep) => ({\n      name: dep,\n      resourceId: `${scanPath}/**/${dep}`,\n      useStrictClassifier: true,\n    }));\n  } catch (error) {\n    throw new Error(`Error scanning globs ${findFilesToScan} with error: ${error}`);\n  }\n}\n","import {\n  buildTranscendGraphQLClient,\n  fetchActiveSiloDiscoPlugin,\n  uploadSiloDiscoveryResults,\n} from '@transcend-io/sdk';\nimport colors from 'colors';\nimport { stringify } from 'query-string';\n\nimport { ADMIN_DASH } from '../../../constants.js';\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { findFilesToScan } from '../../../lib/code-scanning/findFilesToScan.js';\nimport { SILO_DISCOVERY_CONFIGS } from '../../../lib/code-scanning/index.js';\n\nexport interface DiscoverSilosCommandFlags {\n  scanPath: string;\n  dataSiloId: string;\n  auth: string;\n  fileGlobs: string;\n  ignoreDirs: string;\n  transcendUrl: string;\n}\n\nexport async function discoverSilos(\n  this: LocalContext,\n  { scanPath, dataSiloId, auth, fileGlobs, ignoreDirs, transcendUrl }: DiscoverSilosCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  // Create a GraphQL client\n  const client = buildTranscendGraphQLClient(transcendUrl, auth);\n\n  const plugin = await fetchActiveSiloDiscoPlugin(client, {\n    logger: this.logger,\n    filterBy: { dataSiloId },\n  });\n\n  const config = SILO_DISCOVERY_CONFIGS[plugin.dataSilo.type];\n  if (!config) {\n    this.logger.error(\n      colors.red(\n        `This plugin \"${plugin.dataSilo.type}\" is not supported for offline silo discovery.`,\n      ),\n    );\n    this.process.exit(1);\n  }\n\n  const results = await findFilesToScan({\n    scanPath,\n    fileGlobs,\n    ignoreDirs,\n    config,\n  });\n\n  await uploadSiloDiscoveryResults(client, {\n    pluginId: plugin.id,\n    results,\n    logger: this.logger,\n  });\n\n  const newUrl = new URL(ADMIN_DASH);\n  newUrl.pathname = '/data-map/data-inventory/silo-discovery/triage';\n  newUrl.search = stringify({\n    filters: JSON.stringify({ pluginIds: [plugin.id] }),\n  });\n\n  // Indicate success\n  this.logger.info(\n    colors.green(\n      `Scan found ${results.length} potential data silos at ${scanPath}! ` +\n        `View at '${newUrl.href}' ` +\n        '\\n\\n NOTE: it may take 2-3 minutes for scan results to appear in the UI.',\n    ),\n  );\n}\n"],"mappings":"gZAuBA,eAAsB,EAAgB,CACpC,WACA,YACA,aACA,UAUqC,CACrC,GAAM,CAAE,WAAY,EAAa,iBAAgB,gBAAiB,EAC5D,EACJ,IAAc,GAAK,EAAiB,EAAe,OAAO,EAAU,MAAM,IAAI,CAAC,CAC3E,EAAe,CAAC,GAAG,EAAW,MAAM,IAAI,CAAE,GAAG,EAAY,CAAC,OAAQ,GAAQ,EAAI,OAAS,EAAE,CAC/F,GAAI,CACF,IAAM,EAAwB,MAAM,EAAS,GAAG,EAAS,MAAM,EAAe,KAAK,IAAI,GAAI,CACzF,OAAQ,EAAa,IAAK,GAAgB,GAAG,EAAS,MAAM,IAAM,CAClE,OAAQ,GACR,UAAW,GACZ,CAAC,CACF,EAAO,KAAK,aAAa,EAAY,OAAO,QAAQ,CAEpD,IAAM,EADc,EAAY,IAAK,GAAqB,EAAa,EAAS,CAAC,CAAC,MACvD,CACxB,IAAK,GAAe,EAAW,yBAA2B,EAAE,CAAC,CAC7D,MAAM,CAEH,EAAO,CAAC,GAAG,IADM,IAAI,EAAQ,IAAK,GAAQ,EAAI,KAAK,CAC9B,CAAC,CAE5B,OADA,EAAO,KAAK,UAAU,EAAK,OAAO,sBAAsB,CACjD,EAAK,IAAK,IAAS,CACxB,KAAM,EACN,WAAY,GAAG,EAAS,MAAM,IAC9B,oBAAqB,GACtB,EAAE,OACI,EAAO,CACd,MAAU,MAAM,wBAAwB,EAAgB,eAAe,IAAQ,ECvCnF,eAAsB,EAEpB,CAAE,WAAU,aAAY,OAAM,YAAW,aAAY,gBACtC,CACf,EAAoB,KAAK,QAAQ,CAGjC,IAAM,EAAS,EAA4B,EAAc,EAAK,CAExD,EAAS,MAAM,EAA2B,EAAQ,CACtD,OAAQ,KAAK,OACb,SAAU,CAAE,aAAY,CACzB,CAAC,CAEI,EAAS,EAAuB,EAAO,SAAS,MACjD,IACH,KAAK,OAAO,MACV,EAAO,IACL,gBAAgB,EAAO,SAAS,KAAK,gDACtC,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAGtB,IAAM,EAAU,MAAM,EAAgB,CACpC,WACA,YACA,aACA,SACD,CAAC,CAEF,MAAM,EAA2B,EAAQ,CACvC,SAAU,EAAO,GACjB,UACA,OAAQ,KAAK,OACd,CAAC,CAEF,IAAM,EAAS,IAAI,IAAI,EAAW,CAClC,EAAO,SAAW,iDAClB,EAAO,OAAS,EAAU,CACxB,QAAS,KAAK,UAAU,CAAE,UAAW,CAAC,EAAO,GAAG,CAAE,CAAC,CACpD,CAAC,CAGF,KAAK,OAAO,KACV,EAAO,MACL,cAAc,EAAQ,OAAO,2BAA2B,EAAS,aACnD,EAAO,KAAK;;sEAE3B,CACF"}

package/dist/impl-BqiclSRZ.mjs

@@ -1,2 +0,0 @@
-import{a as e}from"./readTranscendYaml-DtJz9mor.mjs";import{t}from"./parseVariablesFromString-cu5gPC3M.mjs";import{t as n}from"./validateTranscendAuth-3guZJPKH.mjs";import{t as r}from"./done-input-validation-BFgMCQWH.mjs";import{CustomFunctionPayloadType as i,CustomFunctionType as a}from"@transcend-io/privacy-types";import{existsSync as o,readFileSync as s,writeFileSync as c}from"node:fs";import{dirname as l,resolve as u}from"node:path";import d from"colors";import{decodeCodec as f}from"@transcend-io/type-utils";import*as p from"io-ts";import m from"js-yaml";import{buildTranscendGraphQLClient as h,createSombraGotInstance as g,fetchAllCustomFunctions as _,resolveEffectiveSombraId as v,resolveExistingCustomFunction as y,syncCustomFunction as b}from"@transcend-io/sdk";import{mapSeries as x}from"@transcend-io/utils";import{isMap as S,isScalar as C,isSeq as w,parseDocument as T}from"yaml";const E=p.intersection([p.type({name:p.string,code:p.string}),p.partial({id:p.string,description:p.string,type:p.union([p.literal(a.Dsr),p.literal(a.General)]),"data-silo-id":p.string,"sombra-id":p.string,"sombra-auth-env":p.string,"allowed-hosts":p.array(p.string),"timeout-ms":p.number,"allow-third-party-imports":p.boolean,env:p.record(p.string,p.string),"test-payload":p.string,"test-payload-type":p.union([p.literal(i.DataPoint),p.literal(i.RequestEnricher)]),"test-payloads":p.array(p.intersection([p.type({payload:p.string}),p.partial({"payload-type":p.union([p.literal(i.DataPoint),p.literal(i.RequestEnricher)])})]))})]),D=p.type({functions:p.array(E)});function O(t,n={}){let r=e(s(t,`utf-8`),n,`Also check that there are no extra variables defined in your manifest: ${t}`),i=f(D,m.load(r)),a=i.functions.map(({id:e})=>e).filter((e,t,n)=>e!==void 0&&n.indexOf(e)!==t);if(a.length>0)throw Error(`Duplicate custom function ids in manifest: ${[...new Set(a)].join(`, `)}`);let c=i.functions.map(({name:e})=>e),d=i.functions.filter(({id:e,name:t})=>e===void 0&&c.filter(e=>e===t).length>1).map(({name:e})=>e);if(d.length>0)throw Error(`Duplicate custom function names in manifest without ids: ${[...new Set(d)].join(`, `)}. Add an \`id\` field to each duplicated entry to disambiguate.`);let p=l(u(t)),h=(e,t)=>{let n=u(p,t);if(!o(n))throw Error(`Test payload file for custom function "${e}" does not exist: ${n}`);let r=s(n,`utf-8`);try{return JSON.parse(r)}catch(t){throw Error(`Test payload file for custom function "${e}" is not valid JSON (${n}): ${t.message}`)}};return i.functions.map(e=>{let t=u(p,e.code);if(!o(t))throw Error(`Code file for custom function "${e.name}" does not exist: ${t}`);if(e[`test-payload`]!==void 0&&e[`test-payloads`]!==void 0)throw Error(`Custom function "${e.name}" sets both test-payload and test-payloads — use test-payloads alone to define multiple payloads.`);if(e[`test-payload-type`]!==void 0&&e[`test-payload`]===void 0)throw Error(`Custom function "${e.name}" sets test-payload-type without test-payload — set payload-type per item in test-payloads instead.`);let n;return e[`test-payload`]===void 0?e[`test-payloads`]!==void 0&&e[`test-payloads`].length>0&&(n=e[`test-payloads`].map(t=>({payload:h(e.name,t.payload),...t[`payload-type`]===void 0?{}:{payloadType:t[`payload-type`]}}))):n=[{payload:h(e.name,e[`test-payload`]),...e[`test-payload-type`]===void 0?{}:{payloadType:e[`test-payload-type`]}}],{name:e.name,code:s(t,`utf-8`),...e.id===void 0?{}:{id:e.id},...e.description===void 0?{}:{description:e.description},...e.type===void 0?{}:{type:e.type},...e[`data-silo-id`]===void 0?{}:{dataSiloId:e[`data-silo-id`]},...e[`sombra-id`]===void 0?{}:{sombraId:e[`sombra-id`]},...e[`sombra-auth-env`]===void 0?{}:{sombraAuthEnv:e[`sombra-auth-env`]},...e[`allowed-hosts`]===void 0?{}:{allowedHosts:e[`allowed-hosts`]},...e[`timeout-ms`]===void 0?{}:{timeoutMs:e[`timeout-ms`]},...e[`allow-third-party-imports`]===void 0?{}:{allowThirdPartyImports:e[`allow-third-party-imports`]},...e.env===void 0?{}:{env:e.env},...n===void 0?{}:{testPayloads:n}}})}function k(e,t){let n=T(s(e,`utf-8`)),r=n.get(`functions`);if(!w(r))throw Error(`Expected a \`functions\` list in manifest: ${e}`);let i=0;return r.items.forEach((e,r)=>{let a=t[r];if(!a||!S(e))return;let o=!1;if(a.id&&!e.has(`id`)&&(e.items.unshift(n.createPair(`id`,a.id)),o=!0),a.dataSiloId&&!e.has(`data-silo-id`)){let t=e.items.findIndex(e=>C(e.key)&&e.key.value===`id`);e.items.splice(t+1,0,n.createPair(`data-silo-id`,a.dataSiloId)),o=!0}o&&(i+=1)}),i>0&&c(e,n.toString()),i}async function A({auth:e,sombraAuth:o,transcendUrl:s,file:c=`./transcend-functions.yml`,variables:l,dryRun:u,promote:f,force:p,skipTests:m,updateManifest:S,sombraId:C}){r(this.process);let w=n(e,this);Array.isArray(w)&&(this.logger.error(d.red(`transcend custom-functions push does not support a list of API keys — pass a single API key.`)),this.process.exit(1));let T=w;this.fs.existsSync(c)||(this.logger.error(d.red(`The manifest file does not exist on disk: ${c}. You can specify the file path using --file=./transcend-functions.yml`)),this.process.exit(1));let E=t(l);this.logger.info(d.magenta(`Reading manifest "${c}"...`));let D=O(c,E);this.logger.info(d.green(`Found ${D.length} custom function(s) in "${c}"`));let A=h(s,T),j=await _(A,{logger:this.logger}),M=new Map,N=async(e,t)=>{let n=`${e??``}\u0000${t??``}`,r=M.get(n);if(r)return r;this.logger.info(d.magenta(`Connecting to the ${e?`Sombra gateway "${e}"`:`primary Sombra gateway`} to sign code...`));let i=await g(s,T,{logger:this.logger,sombraApiKey:t,...e?{sombraId:e}:{}});return M.set(n,i),i},P=e=>{if(!e.sombraAuthEnv)return o;let t=this.process.env[e.sombraAuthEnv];if(!t)throw Error(`Custom function "${e.name}" sets sombra-auth-env: ${e.sombraAuthEnv}, but that environment variable is not set. Export it (e.g. from a CI secret) before pushing.`);return t},F=[];if(await x(D,async e=>{try{let t=v(e,y(j,e),C),n=await b(A,{input:e,sombra:u?void 0:await N(t,P(e)),defaultSombraId:C,existing:j,promote:f,dryRun:u,force:p,...!m&&e.testPayloads!==void 0?{testPayloads:e.testPayloads}:{},logger:this.logger});F.push({name:e.name,result:n});let r=n.versionNumber?` (version ${n.versionNumber})`:``,o=n.changedFields.length>0?` [${n.changedFields.join(`, `)}]`:``;switch(n.outcome){case`created`:n.createdDataSilo&&n.dataSiloId&&this.logger.info(d.green(`Created DSR integration (data silo ${n.dataSiloId}) for "${e.name}"`)),this.logger.info(d.green(`Created custom function "${e.name}"${r}`));break;case`updated`:this.logger.info(d.green(`Pushed new revision to "${e.name}"${r}${o}${n.promoted?` and promoted to active`:` as a draft`}`));break;case`metadata-updated`:this.logger.info(d.green(`Updated metadata for "${e.name}"${o} — code unchanged, no new revision`));break;case`skipped`:this.logger.info(d.yellow(`Skipped "${e.name}" — no changes detected (env variable values cannot be diffed; use --force if only values changed)`));break;case`would-create`:this.logger.info(d.cyan(`[dry run] Would create custom function "${e.name}"${e.type===a.Dsr&&!e.dataSiloId?` and its DSR integration (data silo)`:``}`));break;case`would-update`:this.logger.info(d.cyan(`[dry run] Would push a new revision to "${e.name}"${o}`));break;case`test-failed`:{let t=(n.testResults??[]).filter(({passed:e})=>!e);this.logger.error(d.red(`Rejected "${e.name}" — ${t.length} of ${n.testResults?.length??0} test run(s) failed`)),t.forEach(({payloadType:e,result:t})=>{let n=e?`[${e}] `:``;this.logger.error(d.red(`  ${n}${t.error?t.error.message:`failed with exit code ${t.exitCode}`}`)),t.logs.forEach(({file:e,message:t})=>{this.logger.error(d.red(`    [${e}] ${t}`))})}),n.createdDataSilo&&this.logger.error(d.red(`  The DSR integration (data silo) created for "${e.name}" was rolled back.`));break}}if(!m&&(e.testPayloads===void 0||e.testPayloads.length===0)&&(n.outcome===`created`||n.outcome===`updated`)&&this.logger.warn(d.yellow(`Custom function "${e.name}" was pushed without a test run — add a test-payload to its manifest entry to enable test-before-promote.`)),!m&&e.type===a.Dsr&&e.testPayloads!==void 0&&e.testPayloads.length>0&&(n.outcome===`created`||n.outcome===`updated`)){let t=new Set(e.testPayloads.map(({payloadType:e})=>e??i.DataPoint));if(t.size===1){let[n]=t,r=n===i.DataPoint?i.RequestEnricher:i.DataPoint;this.logger.warn(d.yellow(`DSR custom function "${e.name}" only tests its ${n} export — if it also implements the ${r} export, add a test payload with payload-type: ${r} so both entry points are tested on every push.`))}}}catch(t){F.push({name:e.name,error:t}),this.logger.error(d.red(`Failed to sync custom function "${e.name}": ${t.message}`))}}),S&&!u){let e=k(c,D.map((e,t)=>{let n=F[t]?.result;if(!n)return;let r={...!e.id&&n.customFunctionId?{id:n.customFunctionId}:{},...!e.dataSiloId&&n.dataSiloId?{dataSiloId:n.dataSiloId}:{}};return Object.keys(r).length>0?r:void 0}));e>0&&this.logger.info(d.green(`Wrote assigned id(s) back to ${e} manifest entr(ies) in "${c}" — commit this change so future pushes match by ID.`))}let I=e=>F.filter(({result:t})=>t?.outcome===e).length,L=F.filter(({error:e})=>e!==void 0),R=I(`test-failed`);this.logger.info(d.magenta(`Custom function sync complete: ${I(`created`)+I(`would-create`)} created, ${I(`updated`)+I(`would-update`)} updated, ${I(`metadata-updated`)} metadata-only, ${I(`skipped`)} skipped, ${R} rejected (test failed), ${L.length} failed${u?` (dry run)`:``}`)),(L.length>0||R>0)&&this.process.exit(1)}export{A as push};
-//# sourceMappingURL=impl-BqiclSRZ.mjs.map

package/dist/impl-BqiclSRZ.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-BqiclSRZ.mjs","names":[],"sources":["../src/lib/custom-functions/manifest.ts","../src/commands/custom-functions/push/impl.ts"],"sourcesContent":["import { existsSync, readFileSync, writeFileSync } from 'node:fs';\nimport { dirname, resolve } from 'node:path';\n\nimport { CustomFunctionPayloadType, CustomFunctionType } from '@transcend-io/privacy-types';\nimport type { CustomFunctionConfigInput } from '@transcend-io/sdk';\nimport { decodeCodec, type ObjByString } from '@transcend-io/type-utils';\nimport * as t from 'io-ts';\nimport yaml from 'js-yaml';\nimport { isMap, isScalar, isSeq, parseDocument } from 'yaml';\n\nimport { replaceVariablesInYaml } from '../readTranscendYaml.js';\n\nexport const CustomFunctionManifestEntry = t.intersection([\n  t.type({\n    /** Display name of the custom function — used as the sync key when no `id` is set */\n    name: t.string,\n    /** Path to the TypeScript source file, relative to the manifest */\n    code: t.string,\n  }),\n  t.partial({\n    /**\n     * Custom function ID. Optional, but required to disambiguate when multiple\n     * custom functions share a name. Written back by `push --updateManifest`.\n     */\n    id: t.string,\n    /** Description shown in the Transcend dashboard */\n    description: t.string,\n    /** Custom function type. Defaults to GENERAL */\n    type: t.union([t.literal(CustomFunctionType.Dsr), t.literal(CustomFunctionType.General)]),\n    /** Data silo ID to attach to (required for DSR functions) */\n    'data-silo-id': t.string,\n    /** The Sombra gateway the function belongs to */\n    'sombra-id': t.string,\n    /**\n     * Name of the environment variable holding the internal key of the\n     * function's Sombra gateway. The key itself never lives in the manifest —\n     * it is read from the CLI's process environment at push time. Overrides\n     * `--sombraAuth` for this entry.\n     */\n    'sombra-auth-env': t.string,\n    /** Hosts the function may make network requests to */\n    'allowed-hosts': t.array(t.string),\n    /** Execution timeout in milliseconds */\n    'timeout-ms': t.number,\n    /** Whether the function may import third party modules */\n    'allow-third-party-imports': t.boolean,\n    /** Environment variables to expose to the function */\n    env: t.record(t.string, t.string),\n    /**\n     * Path to a JSON file (relative to the manifest) holding the test payload\n     * to run the function with before pushing. When set, the function is\n     * test-run after signing and only pushed/promoted when the test passes.\n     * Shorthand for a single-item `test-payloads` list.\n     */\n    'test-payload': t.string,\n    /**\n     * Which export to invoke when test-running a DSR function:\n     * `DATA_POINT` invokes the default export, `REQUEST_ENRICHER` invokes the\n     * `enricher` export. Defaults to DATA_POINT. Ignored for GENERAL functions.\n     * Only valid alongside `test-payload`.\n     */\n    'test-payload-type': t.union([\n      t.literal(CustomFunctionPayloadType.DataPoint),\n      t.literal(CustomFunctionPayloadType.RequestEnricher),\n    ]),\n    /**\n     * Test payloads to run the function with before pushing. Every payload\n     * runs and all must pass for the function to be pushed/promoted. DSR\n     * functions should list one payload per export they implement\n     * (`DATA_POINT` for the default export, `REQUEST_ENRICHER` for the\n     * `enricher` export). Mutually exclusive with `test-payload`.\n     */\n    'test-payloads': t.array(\n      t.intersection([\n        t.type({\n          /** Path to the JSON payload file, relative to the manifest */\n          payload: t.string,\n        }),\n        t.partial({\n          /** Which export the payload invokes (DSR only). Defaults to DATA_POINT */\n          'payload-type': t.union([\n            t.literal(CustomFunctionPayloadType.DataPoint),\n            t.literal(CustomFunctionPayloadType.RequestEnricher),\n          ]),\n        }),\n      ]),\n    ),\n  }),\n]);\n\n/** Override type */\nexport type CustomFunctionManifestEntry = t.TypeOf<typeof CustomFunctionManifestEntry>;\n\nexport const CustomFunctionsManifest = t.type({\n  /** The custom functions to sync */\n  functions: t.array(CustomFunctionManifestEntry),\n});\n\n/** Override type */\nexport type CustomFunctionsManifest = t.TypeOf<typeof CustomFunctionsManifest>;\n\n/**\n * Read a custom functions manifest from disk, apply variable substitution,\n * validate its shape, and load each function's source code.\n *\n * @param filePath - Path to the manifest YAML file\n * @param variables - Variables to fill into `<<parameters.x>>` placeholders\n * @returns The custom function configs, with code loaded from disk\n */\n/**\n * A custom function config from the manifest, plus CLI-level settings that\n * are not part of the SDK sync input.\n */\nexport type CustomFunctionManifestConfig = CustomFunctionConfigInput & {\n  /** Env variable name holding the internal key of the function's Sombra gateway */\n  sombraAuthEnv?: string;\n  /** Parsed JSON test payloads to run the function with before pushing */\n  testPayloads?: {\n    /** The parsed JSON payload */\n    payload: object;\n    /** Which export the payload invokes when test-running a DSR function */\n    payloadType?: Exclude<CustomFunctionPayloadType, typeof CustomFunctionPayloadType.Maestro>;\n  }[];\n};\n\nexport function readCustomFunctionsManifest(\n  filePath: string,\n  variables: ObjByString = {},\n): CustomFunctionManifestConfig[] {\n  const fileContents = readFileSync(filePath, 'utf-8');\n\n  const replacedVariables = replaceVariablesInYaml(\n    fileContents,\n    variables,\n    `Also check that there are no extra variables defined in your manifest: ${filePath}`,\n  );\n\n  const manifest = decodeCodec(CustomFunctionsManifest, yaml.load(replacedVariables));\n\n  // IDs must be unique — two entries cannot target the same function\n  const duplicateIds = manifest.functions\n    .map(({ id }) => id)\n    .filter((id, index, ids) => id !== undefined && ids.indexOf(id) !== index);\n  if (duplicateIds.length > 0) {\n    throw new Error(\n      `Duplicate custom function ids in manifest: ${[...new Set(duplicateIds)].join(', ')}`,\n    );\n  }\n\n  // Names may repeat only when every entry sharing the name carries an `id`\n  // to disambiguate; an id-less entry syncs by name and would be ambiguous.\n  const allNames = manifest.functions.map(({ name }) => name);\n  const ambiguousNames = manifest.functions\n    .filter(({ id, name }) => id === undefined && allNames.filter((n) => n === name).length > 1)\n    .map(({ name }) => name);\n  if (ambiguousNames.length > 0) {\n    throw new Error(\n      `Duplicate custom function names in manifest without ids: ${[...new Set(ambiguousNames)].join(', ')}. ` +\n        'Add an `id` field to each duplicated entry to disambiguate.',\n    );\n  }\n\n  const manifestDir = dirname(resolve(filePath));\n\n  /**\n   * Load and parse a JSON test payload file.\n   *\n   * @param entryName - The manifest entry name, for error messages\n   * @param payloadFile - The payload file path, relative to the manifest\n   * @returns The parsed payload object\n   */\n  const loadTestPayload = (entryName: string, payloadFile: string): object => {\n    const testPayloadPath = resolve(manifestDir, payloadFile);\n    if (!existsSync(testPayloadPath)) {\n      throw new Error(\n        `Test payload file for custom function \"${entryName}\" does not exist: ${testPayloadPath}`,\n      );\n    }\n    const rawPayload = readFileSync(testPayloadPath, 'utf-8');\n    try {\n      return JSON.parse(rawPayload);\n    } catch (err) {\n      throw new Error(\n        `Test payload file for custom function \"${entryName}\" is not valid JSON ` +\n          `(${testPayloadPath}): ${(err as Error).message}`,\n      );\n    }\n  };\n\n  return manifest.functions.map((entry) => {\n    const codePath = resolve(manifestDir, entry.code);\n    if (!existsSync(codePath)) {\n      throw new Error(`Code file for custom function \"${entry.name}\" does not exist: ${codePath}`);\n    }\n\n    // `test-payload` is shorthand for a single-item `test-payloads` list\n    if (entry['test-payload'] !== undefined && entry['test-payloads'] !== undefined) {\n      throw new Error(\n        `Custom function \"${entry.name}\" sets both test-payload and test-payloads — ` +\n          'use test-payloads alone to define multiple payloads.',\n      );\n    }\n    if (entry['test-payload-type'] !== undefined && entry['test-payload'] === undefined) {\n      throw new Error(\n        `Custom function \"${entry.name}\" sets test-payload-type without test-payload — ` +\n          'set payload-type per item in test-payloads instead.',\n      );\n    }\n    let testPayloads: CustomFunctionManifestConfig['testPayloads'];\n    if (entry['test-payload'] !== undefined) {\n      testPayloads = [\n        {\n          payload: loadTestPayload(entry.name, entry['test-payload']),\n          ...(entry['test-payload-type'] !== undefined\n            ? { payloadType: entry['test-payload-type'] }\n            : {}),\n        },\n      ];\n    } else if (entry['test-payloads'] !== undefined && entry['test-payloads'].length > 0) {\n      testPayloads = entry['test-payloads'].map((item) => ({\n        payload: loadTestPayload(entry.name, item.payload),\n        ...(item['payload-type'] !== undefined ? { payloadType: item['payload-type'] } : {}),\n      }));\n    }\n\n    return {\n      name: entry.name,\n      code: readFileSync(codePath, 'utf-8'),\n      ...(entry.id !== undefined ? { id: entry.id } : {}),\n      ...(entry.description !== undefined ? { description: entry.description } : {}),\n      ...(entry.type !== undefined ? { type: entry.type } : {}),\n      ...(entry['data-silo-id'] !== undefined ? { dataSiloId: entry['data-silo-id'] } : {}),\n      ...(entry['sombra-id'] !== undefined ? { sombraId: entry['sombra-id'] } : {}),\n      ...(entry['sombra-auth-env'] !== undefined\n        ? { sombraAuthEnv: entry['sombra-auth-env'] }\n        : {}),\n      ...(entry['allowed-hosts'] !== undefined ? { allowedHosts: entry['allowed-hosts'] } : {}),\n      ...(entry['timeout-ms'] !== undefined ? { timeoutMs: entry['timeout-ms'] } : {}),\n      ...(entry['allow-third-party-imports'] !== undefined\n        ? { allowThirdPartyImports: entry['allow-third-party-imports'] }\n        : {}),\n      ...(entry.env !== undefined ? { env: entry.env } : {}),\n      ...(testPayloads !== undefined ? { testPayloads } : {}),\n    };\n  });\n}\n\n/**\n * The IDs assigned to a manifest entry during a push, to write back into the\n * manifest file.\n */\nexport interface CustomFunctionManifestIds {\n  /** Custom function ID */\n  id?: string;\n  /** Data silo (DSR integration) ID, for DSR functions */\n  dataSiloId?: string;\n}\n\n/**\n * Write custom function and data silo IDs back into a manifest file, so\n * future pushes match by ID instead of by (potentially non-unique) name and\n * DSR entries keep pointing at their integration.\n *\n * The raw file text is edited via a comment- and formatting-preserving YAML\n * document, so comments and un-substituted `<<parameters.x>>` placeholders\n * survive untouched. Only entries that are missing the respective key are\n * modified.\n *\n * @param filePath - Path to the manifest YAML file\n * @param idsByIndex - IDs for each manifest entry, by array index (undefined\n *   entries are left unchanged)\n * @returns The number of entries that were updated\n */\nexport function writeCustomFunctionIdsToManifest(\n  filePath: string,\n  idsByIndex: (CustomFunctionManifestIds | undefined)[],\n): number {\n  const document = parseDocument(readFileSync(filePath, 'utf-8'));\n  const functions = document.get('functions');\n  if (!isSeq(functions)) {\n    throw new Error(`Expected a \\`functions\\` list in manifest: ${filePath}`);\n  }\n\n  let updated = 0;\n  functions.items.forEach((item, index) => {\n    const ids = idsByIndex[index];\n    if (!ids || !isMap(item)) {\n      return;\n    }\n    let changed = false;\n    if (ids.id && !item.has('id')) {\n      // Place `id` first so it reads as the entry's key\n      item.items.unshift(document.createPair('id', ids.id));\n      changed = true;\n    }\n    if (ids.dataSiloId && !item.has('data-silo-id')) {\n      // Place `data-silo-id` right after `id` (or first when there is no id)\n      const idIndex = item.items.findIndex((pair) => isScalar(pair.key) && pair.key.value === 'id');\n      item.items.splice(idIndex + 1, 0, document.createPair('data-silo-id', ids.dataSiloId));\n      changed = true;\n    }\n    if (changed) {\n      updated += 1;\n    }\n  });\n\n  if (updated > 0) {\n    writeFileSync(filePath, document.toString());\n  }\n  return updated;\n}\n","import { CustomFunctionPayloadType, CustomFunctionType } from '@transcend-io/privacy-types';\nimport {\n  buildTranscendGraphQLClient,\n  createSombraGotInstance,\n  fetchAllCustomFunctions,\n  resolveEffectiveSombraId,\n  resolveExistingCustomFunction,\n  syncCustomFunction,\n  type CustomFunctionSyncResult,\n} from '@transcend-io/sdk';\nimport { mapSeries } from '@transcend-io/utils';\nimport colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { validateTranscendAuth } from '../../../lib/api-keys/index.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport {\n  readCustomFunctionsManifest,\n  writeCustomFunctionIdsToManifest,\n} from '../../../lib/custom-functions/manifest.js';\nimport { parseVariablesFromString } from '../../../lib/helpers/parseVariablesFromString.js';\n\nexport interface CustomFunctionsPushCommandFlags {\n  auth: string;\n  sombraAuth?: string;\n  transcendUrl: string;\n  file: string;\n  variables: string;\n  dryRun: boolean;\n  promote: boolean;\n  force: boolean;\n  skipTests: boolean;\n  updateManifest: boolean;\n  sombraId?: string;\n}\n\nexport async function push(\n  this: LocalContext,\n  {\n    auth,\n    sombraAuth,\n    transcendUrl,\n    file = './transcend-functions.yml',\n    variables,\n    dryRun,\n    promote,\n    force,\n    skipTests,\n    updateManifest,\n    sombraId,\n  }: CustomFunctionsPushCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  // This command operates on a single Transcend instance\n  const apiKeyOrList = validateTranscendAuth(auth, this);\n  if (Array.isArray(apiKeyOrList)) {\n    this.logger.error(\n      colors.red(\n        'transcend custom-functions push does not support a list of API keys — pass a single API key.',\n      ),\n    );\n    this.process.exit(1);\n  }\n  const apiKey = apiKeyOrList as string;\n\n  // Read and validate the manifest\n  if (!this.fs.existsSync(file)) {\n    this.logger.error(\n      colors.red(\n        `The manifest file does not exist on disk: ${file}. ` +\n          'You can specify the file path using --file=./transcend-functions.yml',\n      ),\n    );\n    this.process.exit(1);\n  }\n  const vars = parseVariablesFromString(variables);\n  this.logger.info(colors.magenta(`Reading manifest \"${file}\"...`));\n  const configs = readCustomFunctionsManifest(file, vars);\n  this.logger.info(colors.green(`Found ${configs.length} custom function(s) in \"${file}\"`));\n\n  const client = buildTranscendGraphQLClient(transcendUrl, apiKey);\n\n  // Fetch existing functions once to diff against\n  const existing = await fetchAllCustomFunctions(client, { logger: this.logger });\n\n  // Each custom function belongs to a single Sombra gateway whose keys sign\n  // its code, so code must be signed against that specific gateway's customer\n  // ingress. Cache one connection per distinct gateway + internal key across\n  // the run.\n  type SombraGot = Awaited<ReturnType<typeof createSombraGotInstance>>;\n  const sombraByGateway = new Map<string, SombraGot>();\n  const getSombraForGateway = async (\n    gatewaySombraId: string | undefined,\n    sombraApiKey: string | undefined,\n  ): Promise<SombraGot> => {\n    const key = `${gatewaySombraId ?? ''}\\u0000${sombraApiKey ?? ''}`;\n    const cached = sombraByGateway.get(key);\n    if (cached) {\n      return cached;\n    }\n    this.logger.info(\n      colors.magenta(\n        `Connecting to the ${\n          gatewaySombraId ? `Sombra gateway \"${gatewaySombraId}\"` : 'primary Sombra gateway'\n        } to sign code...`,\n      ),\n    );\n    const sombra = await createSombraGotInstance(transcendUrl, apiKey, {\n      logger: this.logger,\n      sombraApiKey,\n      ...(gatewaySombraId ? { sombraId: gatewaySombraId } : {}),\n    });\n    sombraByGateway.set(key, sombra);\n    return sombra;\n  };\n\n  /**\n   * Resolve the Sombra internal key for a manifest entry: the env variable\n   * named by `sombra-auth-env` when set (which must be exported), else the\n   * `--sombraAuth` flag.\n   *\n   * @param input - The manifest entry\n   * @returns The internal key to authenticate with, if any\n   */\n  const resolveEntrySombraAuth = (input: {\n    /** Function name, for error messages */\n    name: string;\n    /** Env variable name holding the gateway's internal key */\n    sombraAuthEnv?: string;\n  }): string | undefined => {\n    if (!input.sombraAuthEnv) {\n      return sombraAuth;\n    }\n    const value = this.process.env[input.sombraAuthEnv];\n    if (!value) {\n      throw new Error(\n        `Custom function \"${input.name}\" sets sombra-auth-env: ${input.sombraAuthEnv}, ` +\n          'but that environment variable is not set. Export it (e.g. from a CI secret) ' +\n          'before pushing.',\n      );\n    }\n    return value;\n  };\n\n  // Sync each function in order\n  const results: { name: string; result?: CustomFunctionSyncResult; error?: Error }[] = [];\n  await mapSeries(configs, async (input) => {\n    try {\n      // Resolve the gateway this function belongs to: manifest sombra-id,\n      // else the existing function's gateway, else --sombraId, else primary.\n      // Also validates manifest-vs-existing gateway mismatches.\n      const effectiveSombraId = resolveEffectiveSombraId(\n        input,\n        resolveExistingCustomFunction(existing, input),\n        sombraId,\n      );\n      const result = await syncCustomFunction(client, {\n        input,\n        sombra: dryRun\n          ? undefined\n          : await getSombraForGateway(effectiveSombraId, resolveEntrySombraAuth(input)),\n        defaultSombraId: sombraId,\n        existing,\n        promote,\n        dryRun,\n        force,\n        // Test the freshly signed code before pushing; every payload must\n        // pass or the function is rejected. Dry runs never sign, so nothing\n        // is tested either.\n        ...(!skipTests && input.testPayloads !== undefined\n          ? { testPayloads: input.testPayloads }\n          : {}),\n        logger: this.logger,\n      });\n      results.push({ name: input.name, result });\n\n      const suffix = result.versionNumber ? ` (version ${result.versionNumber})` : '';\n      const changes =\n        result.changedFields.length > 0 ? ` [${result.changedFields.join(', ')}]` : '';\n      switch (result.outcome) {\n        case 'created':\n          if (result.createdDataSilo && result.dataSiloId) {\n            this.logger.info(\n              colors.green(\n                `Created DSR integration (data silo ${result.dataSiloId}) for \"${input.name}\"`,\n              ),\n            );\n          }\n          this.logger.info(colors.green(`Created custom function \"${input.name}\"${suffix}`));\n          break;\n        case 'updated':\n          this.logger.info(\n            colors.green(\n              `Pushed new revision to \"${input.name}\"${suffix}${changes}${\n                result.promoted ? ' and promoted to active' : ' as a draft'\n              }`,\n            ),\n          );\n          break;\n        case 'metadata-updated':\n          this.logger.info(\n            colors.green(\n              `Updated metadata for \"${input.name}\"${changes} — code unchanged, no new revision`,\n            ),\n          );\n          break;\n        case 'skipped':\n          this.logger.info(\n            colors.yellow(\n              `Skipped \"${input.name}\" — no changes detected ` +\n                '(env variable values cannot be diffed; use --force if only values changed)',\n            ),\n          );\n          break;\n        case 'would-create':\n          this.logger.info(\n            colors.cyan(\n              `[dry run] Would create custom function \"${input.name}\"${\n                input.type === CustomFunctionType.Dsr && !input.dataSiloId\n                  ? ' and its DSR integration (data silo)'\n                  : ''\n              }`,\n            ),\n          );\n          break;\n        case 'would-update':\n          this.logger.info(\n            colors.cyan(`[dry run] Would push a new revision to \"${input.name}\"${changes}`),\n          );\n          break;\n        case 'test-failed': {\n          const failed = (result.testResults ?? []).filter(({ passed }) => !passed);\n          this.logger.error(\n            colors.red(\n              `Rejected \"${input.name}\" — ${failed.length} of ${\n                result.testResults?.length ?? 0\n              } test run(s) failed`,\n            ),\n          );\n          failed.forEach(({ payloadType, result: execution }) => {\n            const label = payloadType ? `[${payloadType}] ` : '';\n            this.logger.error(\n              colors.red(\n                `  ${label}${\n                  execution.error\n                    ? execution.error.message\n                    : `failed with exit code ${execution.exitCode}`\n                }`,\n              ),\n            );\n            execution.logs.forEach(({ file: logFile, message }) => {\n              this.logger.error(colors.red(`    [${logFile}] ${message}`));\n            });\n          });\n          if (result.createdDataSilo) {\n            this.logger.error(\n              colors.red(\n                `  The DSR integration (data silo) created for \"${input.name}\" was rolled back.`,\n              ),\n            );\n          }\n          break;\n        }\n      }\n\n      // Anything that reached the push path without a test payload was\n      // promoted untested — call it out so payloads get added over time\n      if (\n        !skipTests &&\n        (input.testPayloads === undefined || input.testPayloads.length === 0) &&\n        (result.outcome === 'created' || result.outcome === 'updated')\n      ) {\n        this.logger.warn(\n          colors.yellow(\n            `Custom function \"${input.name}\" was pushed without a test run — add a ` +\n              'test-payload to its manifest entry to enable test-before-promote.',\n          ),\n        );\n      }\n\n      // DSR functions have two entry points (default export = DATA_POINT,\n      // enricher export = REQUEST_ENRICHER); nudge toward covering both\n      if (\n        !skipTests &&\n        input.type === CustomFunctionType.Dsr &&\n        input.testPayloads !== undefined &&\n        input.testPayloads.length > 0 &&\n        (result.outcome === 'created' || result.outcome === 'updated')\n      ) {\n        const coveredTypes = new Set(\n          input.testPayloads.map(\n            ({ payloadType }) => payloadType ?? CustomFunctionPayloadType.DataPoint,\n          ),\n        );\n        if (coveredTypes.size === 1) {\n          const [covered] = coveredTypes;\n          const uncovered =\n            covered === CustomFunctionPayloadType.DataPoint\n              ? CustomFunctionPayloadType.RequestEnricher\n              : CustomFunctionPayloadType.DataPoint;\n          this.logger.warn(\n            colors.yellow(\n              `DSR custom function \"${input.name}\" only tests its ${covered} export — if it ` +\n                `also implements the ${uncovered} export, add a test payload with ` +\n                `payload-type: ${uncovered} so both entry points are tested on every push.`,\n            ),\n          );\n        }\n      }\n    } catch (err) {\n      results.push({ name: input.name, error: err as Error });\n      this.logger.error(\n        colors.red(`Failed to sync custom function \"${input.name}\": ${(err as Error).message}`),\n      );\n    }\n  });\n\n  // Write assigned IDs back into the manifest so future pushes match by ID\n  // instead of by (potentially non-unique) name, and DSR entries keep\n  // pointing at their (possibly auto-created) integration\n  if (updateManifest && !dryRun) {\n    const idsByIndex = configs.map((input, index) => {\n      const result = results[index]?.result;\n      if (!result) {\n        return undefined;\n      }\n      const ids = {\n        ...(!input.id && result.customFunctionId ? { id: result.customFunctionId } : {}),\n        ...(!input.dataSiloId && result.dataSiloId ? { dataSiloId: result.dataSiloId } : {}),\n      };\n      return Object.keys(ids).length > 0 ? ids : undefined;\n    });\n    const updatedCount = writeCustomFunctionIdsToManifest(file, idsByIndex);\n    if (updatedCount > 0) {\n      this.logger.info(\n        colors.green(\n          `Wrote assigned id(s) back to ${updatedCount} manifest entr(ies) in \"${file}\" — ` +\n            'commit this change so future pushes match by ID.',\n        ),\n      );\n    }\n  }\n\n  // Summarize\n  const count = (outcome: CustomFunctionSyncResult['outcome']): number =>\n    results.filter(({ result }) => result?.outcome === outcome).length;\n  const failures = results.filter(({ error }) => error !== undefined);\n  const rejected = count('test-failed');\n  this.logger.info(\n    colors.magenta(\n      `Custom function sync complete: ${count('created') + count('would-create')} created, ${\n        count('updated') + count('would-update')\n      } updated, ${count('metadata-updated')} metadata-only, ${count(\n        'skipped',\n      )} skipped, ${rejected} rejected (test failed), ${failures.length} failed${\n        dryRun ? ' (dry run)' : ''\n      }`,\n    ),\n  );\n\n  if (failures.length > 0 || rejected > 0) {\n    this.process.exit(1);\n  }\n}\n"],"mappings":"i4BAYA,MAAa,EAA8B,EAAE,aAAa,CACxD,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAKR,GAAI,EAAE,OAEN,YAAa,EAAE,OAEf,KAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAmB,IAAI,CAAE,EAAE,QAAQ,EAAmB,QAAQ,CAAC,CAAC,CAEzF,eAAgB,EAAE,OAElB,YAAa,EAAE,OAOf,kBAAmB,EAAE,OAErB,gBAAiB,EAAE,MAAM,EAAE,OAAO,CAElC,aAAc,EAAE,OAEhB,4BAA6B,EAAE,QAE/B,IAAK,EAAE,OAAO,EAAE,OAAQ,EAAE,OAAO,CAOjC,eAAgB,EAAE,OAOlB,oBAAqB,EAAE,MAAM,CAC3B,EAAE,QAAQ,EAA0B,UAAU,CAC9C,EAAE,QAAQ,EAA0B,gBAAgB,CACrD,CAAC,CAQF,gBAAiB,EAAE,MACjB,EAAE,aAAa,CACb,EAAE,KAAK,CAEL,QAAS,EAAE,OACZ,CAAC,CACF,EAAE,QAAQ,CAER,eAAgB,EAAE,MAAM,CACtB,EAAE,QAAQ,EAA0B,UAAU,CAC9C,EAAE,QAAQ,EAA0B,gBAAgB,CACrD,CAAC,CACH,CAAC,CACH,CAAC,CACH,CACF,CAAC,CACH,CAAC,CAKW,EAA0B,EAAE,KAAK,CAE5C,UAAW,EAAE,MAAM,EAA4B,CAChD,CAAC,CA6BF,SAAgB,EACd,EACA,EAAyB,EAAE,CACK,CAGhC,IAAM,EAAoB,EAFL,EAAa,EAAU,QAG9B,CACZ,EACA,0EAA0E,IAC3E,CAEK,EAAW,EAAY,EAAyB,EAAK,KAAK,EAAkB,CAAC,CAG7E,EAAe,EAAS,UAC3B,KAAK,CAAE,QAAS,EAAG,CACnB,QAAQ,EAAI,EAAO,IAAQ,IAAO,IAAA,IAAa,EAAI,QAAQ,EAAG,GAAK,EAAM,CAC5E,GAAI,EAAa,OAAS,EACxB,MAAU,MACR,8CAA8C,CAAC,GAAG,IAAI,IAAI,EAAa,CAAC,CAAC,KAAK,KAAK,GACpF,CAKH,IAAM,EAAW,EAAS,UAAU,KAAK,CAAE,UAAW,EAAK,CACrD,EAAiB,EAAS,UAC7B,QAAQ,CAAE,KAAI,UAAW,IAAO,IAAA,IAAa,EAAS,OAAQ,GAAM,IAAM,EAAK,CAAC,OAAS,EAAE,CAC3F,KAAK,CAAE,UAAW,EAAK,CAC1B,GAAI,EAAe,OAAS,EAC1B,MAAU,MACR,4DAA4D,CAAC,GAAG,IAAI,IAAI,EAAe,CAAC,CAAC,KAAK,KAAK,CAAC,iEAErG,CAGH,IAAM,EAAc,EAAQ,EAAQ,EAAS,CAAC,CASxC,GAAmB,EAAmB,IAAgC,CAC1E,IAAM,EAAkB,EAAQ,EAAa,EAAY,CACzD,GAAI,CAAC,EAAW,EAAgB,CAC9B,MAAU,MACR,0CAA0C,EAAU,oBAAoB,IACzE,CAEH,IAAM,EAAa,EAAa,EAAiB,QAAQ,CACzD,GAAI,CACF,OAAO,KAAK,MAAM,EAAW,OACtB,EAAK,CACZ,MAAU,MACR,0CAA0C,EAAU,uBAC9C,EAAgB,KAAM,EAAc,UAC3C,GAIL,OAAO,EAAS,UAAU,IAAK,GAAU,CACvC,IAAM,EAAW,EAAQ,EAAa,EAAM,KAAK,CACjD,GAAI,CAAC,EAAW,EAAS,CACvB,MAAU,MAAM,kCAAkC,EAAM,KAAK,oBAAoB,IAAW,CAI9F,GAAI,EAAM,kBAAoB,IAAA,IAAa,EAAM,mBAAqB,IAAA,GACpE,MAAU,MACR,oBAAoB,EAAM,KAAK,mGAEhC,CAEH,GAAI,EAAM,uBAAyB,IAAA,IAAa,EAAM,kBAAoB,IAAA,GACxE,MAAU,MACR,oBAAoB,EAAM,KAAK,qGAEhC,CAEH,IAAI,EAiBJ,OAhBI,EAAM,kBAAoB,IAAA,GASnB,EAAM,mBAAqB,IAAA,IAAa,EAAM,iBAAiB,OAAS,IACjF,EAAe,EAAM,iBAAiB,IAAK,IAAU,CACnD,QAAS,EAAgB,EAAM,KAAM,EAAK,QAAQ,CAClD,GAAI,EAAK,kBAAoB,IAAA,GAAoD,EAAE,CAA1C,CAAE,YAAa,EAAK,gBAAiB,CAC/E,EAAE,EAZH,EAAe,CACb,CACE,QAAS,EAAgB,EAAM,KAAM,EAAM,gBAAgB,CAC3D,GAAI,EAAM,uBAAyB,IAAA,GAE/B,EAAE,CADF,CAAE,YAAa,EAAM,qBAAsB,CAEhD,CACF,CAQI,CACL,KAAM,EAAM,KACZ,KAAM,EAAa,EAAU,QAAQ,CACrC,GAAI,EAAM,KAAO,IAAA,GAA+B,EAAE,CAArB,CAAE,GAAI,EAAM,GAAI,CAC7C,GAAI,EAAM,cAAgB,IAAA,GAAiD,EAAE,CAAvC,CAAE,YAAa,EAAM,YAAa,CACxE,GAAI,EAAM,OAAS,IAAA,GAAmC,EAAE,CAAzB,CAAE,KAAM,EAAM,KAAM,CACnD,GAAI,EAAM,kBAAoB,IAAA,GAAoD,EAAE,CAA1C,CAAE,WAAY,EAAM,gBAAiB,CAC/E,GAAI,EAAM,eAAiB,IAAA,GAA+C,EAAE,CAArC,CAAE,SAAU,EAAM,aAAc,CACvE,GAAI,EAAM,qBAAuB,IAAA,GAE7B,EAAE,CADF,CAAE,cAAe,EAAM,mBAAoB,CAE/C,GAAI,EAAM,mBAAqB,IAAA,GAAuD,EAAE,CAA7C,CAAE,aAAc,EAAM,iBAAkB,CACnF,GAAI,EAAM,gBAAkB,IAAA,GAAiD,EAAE,CAAvC,CAAE,UAAW,EAAM,cAAe,CAC1E,GAAI,EAAM,+BAAiC,IAAA,GAEvC,EAAE,CADF,CAAE,uBAAwB,EAAM,6BAA8B,CAElE,GAAI,EAAM,MAAQ,IAAA,GAAiC,EAAE,CAAvB,CAAE,IAAK,EAAM,IAAK,CAChD,GAAI,IAAiB,IAAA,GAA+B,EAAE,CAArB,CAAE,eAAc,CAClD,EACD,CA6BJ,SAAgB,EACd,EACA,EACQ,CACR,IAAM,EAAW,EAAc,EAAa,EAAU,QAAQ,CAAC,CACzD,EAAY,EAAS,IAAI,YAAY,CAC3C,GAAI,CAAC,EAAM,EAAU,CACnB,MAAU,MAAM,8CAA8C,IAAW,CAG3E,IAAI,EAAU,EA0Bd,OAzBA,EAAU,MAAM,SAAS,EAAM,IAAU,CACvC,IAAM,EAAM,EAAW,GACvB,GAAI,CAAC,GAAO,CAAC,EAAM,EAAK,CACtB,OAEF,IAAI,EAAU,GAMd,GALI,EAAI,IAAM,CAAC,EAAK,IAAI,KAAK,GAE3B,EAAK,MAAM,QAAQ,EAAS,WAAW,KAAM,EAAI,GAAG,CAAC,CACrD,EAAU,IAER,EAAI,YAAc,CAAC,EAAK,IAAI,eAAe,CAAE,CAE/C,IAAM,EAAU,EAAK,MAAM,UAAW,GAAS,EAAS,EAAK,IAAI,EAAI,EAAK,IAAI,QAAU,KAAK,CAC7F,EAAK,MAAM,OAAO,EAAU,EAAG,EAAG,EAAS,WAAW,eAAgB,EAAI,WAAW,CAAC,CACtF,EAAU,GAER,IACF,GAAW,IAEb,CAEE,EAAU,GACZ,EAAc,EAAU,EAAS,UAAU,CAAC,CAEvC,ECjRT,eAAsB,EAEpB,CACE,OACA,aACA,eACA,OAAO,4BACP,YACA,SACA,UACA,QACA,YACA,iBACA,YAEa,CACf,EAAoB,KAAK,QAAQ,CAGjC,IAAM,EAAe,EAAsB,EAAM,KAAK,CAClD,MAAM,QAAQ,EAAa,GAC7B,KAAK,OAAO,MACV,EAAO,IACL,+FACD,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAEtB,IAAM,EAAS,EAGV,KAAK,GAAG,WAAW,EAAK,GAC3B,KAAK,OAAO,MACV,EAAO,IACL,6CAA6C,EAAK,wEAEnD,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAEtB,IAAM,EAAO,EAAyB,EAAU,CAChD,KAAK,OAAO,KAAK,EAAO,QAAQ,qBAAqB,EAAK,MAAM,CAAC,CACjE,IAAM,EAAU,EAA4B,EAAM,EAAK,CACvD,KAAK,OAAO,KAAK,EAAO,MAAM,SAAS,EAAQ,OAAO,0BAA0B,EAAK,GAAG,CAAC,CAEzF,IAAM,EAAS,EAA4B,EAAc,EAAO,CAG1D,EAAW,MAAM,EAAwB,EAAQ,CAAE,OAAQ,KAAK,OAAQ,CAAC,CAOzE,EAAkB,IAAI,IACtB,EAAsB,MAC1B,EACA,IACuB,CACvB,IAAM,EAAM,GAAG,GAAmB,GAAG,QAAQ,GAAgB,KACvD,EAAS,EAAgB,IAAI,EAAI,CACvC,GAAI,EACF,OAAO,EAET,KAAK,OAAO,KACV,EAAO,QACL,qBACE,EAAkB,mBAAmB,EAAgB,GAAK,yBAC3D,kBACF,CACF,CACD,IAAM,EAAS,MAAM,EAAwB,EAAc,EAAQ,CACjE,OAAQ,KAAK,OACb,eACA,GAAI,EAAkB,CAAE,SAAU,EAAiB,CAAG,EAAE,CACzD,CAAC,CAEF,OADA,EAAgB,IAAI,EAAK,EAAO,CACzB,GAWH,EAA0B,GAKN,CACxB,GAAI,CAAC,EAAM,cACT,OAAO,EAET,IAAM,EAAQ,KAAK,QAAQ,IAAI,EAAM,eACrC,GAAI,CAAC,EACH,MAAU,MACR,oBAAoB,EAAM,KAAK,0BAA0B,EAAM,cAAc,+FAG9E,CAEH,OAAO,GAIH,EAAgF,EAAE,CA+KxF,GA9KA,MAAM,EAAU,EAAS,KAAO,IAAU,CACxC,GAAI,CAIF,IAAM,EAAoB,EACxB,EACA,EAA8B,EAAU,EAAM,CAC9C,EACD,CACK,EAAS,MAAM,EAAmB,EAAQ,CAC9C,QACA,OAAQ,EACJ,IAAA,GACA,MAAM,EAAoB,EAAmB,EAAuB,EAAM,CAAC,CAC/E,gBAAiB,EACjB,WACA,UACA,SACA,QAIA,GAAI,CAAC,GAAa,EAAM,eAAiB,IAAA,GACrC,CAAE,aAAc,EAAM,aAAc,CACpC,EAAE,CACN,OAAQ,KAAK,OACd,CAAC,CACF,EAAQ,KAAK,CAAE,KAAM,EAAM,KAAM,SAAQ,CAAC,CAE1C,IAAM,EAAS,EAAO,cAAgB,aAAa,EAAO,cAAc,GAAK,GACvE,EACJ,EAAO,cAAc,OAAS,EAAI,KAAK,EAAO,cAAc,KAAK,KAAK,CAAC,GAAK,GAC9E,OAAQ,EAAO,QAAf,CACE,IAAK,UACC,EAAO,iBAAmB,EAAO,YACnC,KAAK,OAAO,KACV,EAAO,MACL,sCAAsC,EAAO,WAAW,SAAS,EAAM,KAAK,GAC7E,CACF,CAEH,KAAK,OAAO,KAAK,EAAO,MAAM,4BAA4B,EAAM,KAAK,GAAG,IAAS,CAAC,CAClF,MACF,IAAK,UACH,KAAK,OAAO,KACV,EAAO,MACL,2BAA2B,EAAM,KAAK,GAAG,IAAS,IAChD,EAAO,SAAW,0BAA4B,gBAEjD,CACF,CACD,MACF,IAAK,mBACH,KAAK,OAAO,KACV,EAAO,MACL,yBAAyB,EAAM,KAAK,GAAG,EAAQ,oCAChD,CACF,CACD,MACF,IAAK,UACH,KAAK,OAAO,KACV,EAAO,OACL,YAAY,EAAM,KAAK,oGAExB,CACF,CACD,MACF,IAAK,eACH,KAAK,OAAO,KACV,EAAO,KACL,2CAA2C,EAAM,KAAK,GACpD,EAAM,OAAS,EAAmB,KAAO,CAAC,EAAM,WAC5C,uCACA,KAEP,CACF,CACD,MACF,IAAK,eACH,KAAK,OAAO,KACV,EAAO,KAAK,2CAA2C,EAAM,KAAK,GAAG,IAAU,CAChF,CACD,MACF,IAAK,cAAe,CAClB,IAAM,GAAU,EAAO,aAAe,EAAE,EAAE,QAAQ,CAAE,YAAa,CAAC,EAAO,CACzE,KAAK,OAAO,MACV,EAAO,IACL,aAAa,EAAM,KAAK,MAAM,EAAO,OAAO,MAC1C,EAAO,aAAa,QAAU,EAC/B,qBACF,CACF,CACD,EAAO,SAAS,CAAE,cAAa,OAAQ,KAAgB,CACrD,IAAM,EAAQ,EAAc,IAAI,EAAY,IAAM,GAClD,KAAK,OAAO,MACV,EAAO,IACL,KAAK,IACH,EAAU,MACN,EAAU,MAAM,QAChB,yBAAyB,EAAU,aAE1C,CACF,CACD,EAAU,KAAK,SAAS,CAAE,KAAM,EAAS,aAAc,CACrD,KAAK,OAAO,MAAM,EAAO,IAAI,QAAQ,EAAQ,IAAI,IAAU,CAAC,EAC5D,EACF,CACE,EAAO,iBACT,KAAK,OAAO,MACV,EAAO,IACL,kDAAkD,EAAM,KAAK,oBAC9D,CACF,CAEH,OAqBJ,GAdE,CAAC,IACA,EAAM,eAAiB,IAAA,IAAa,EAAM,aAAa,SAAW,KAClE,EAAO,UAAY,WAAa,EAAO,UAAY,YAEpD,KAAK,OAAO,KACV,EAAO,OACL,oBAAoB,EAAM,KAAK,2GAEhC,CACF,CAMD,CAAC,GACD,EAAM,OAAS,EAAmB,KAClC,EAAM,eAAiB,IAAA,IACvB,EAAM,aAAa,OAAS,IAC3B,EAAO,UAAY,WAAa,EAAO,UAAY,WACpD,CACA,IAAM,EAAe,IAAI,IACvB,EAAM,aAAa,KAChB,CAAE,iBAAkB,GAAe,EAA0B,UAC/D,CACF,CACD,GAAI,EAAa,OAAS,EAAG,CAC3B,GAAM,CAAC,GAAW,EACZ,EACJ,IAAY,EAA0B,UAClC,EAA0B,gBAC1B,EAA0B,UAChC,KAAK,OAAO,KACV,EAAO,OACL,wBAAwB,EAAM,KAAK,mBAAmB,EAAQ,sCACrC,EAAU,iDAChB,EAAU,iDAC9B,CACF,SAGE,EAAK,CACZ,EAAQ,KAAK,CAAE,KAAM,EAAM,KAAM,MAAO,EAAc,CAAC,CACvD,KAAK,OAAO,MACV,EAAO,IAAI,mCAAmC,EAAM,KAAK,KAAM,EAAc,UAAU,CACxF,GAEH,CAKE,GAAkB,CAAC,EAAQ,CAY7B,IAAM,EAAe,EAAiC,EAXnC,EAAQ,KAAK,EAAO,IAAU,CAC/C,IAAM,EAAS,EAAQ,IAAQ,OAC/B,GAAI,CAAC,EACH,OAEF,IAAM,EAAM,CACV,GAAI,CAAC,EAAM,IAAM,EAAO,iBAAmB,CAAE,GAAI,EAAO,iBAAkB,CAAG,EAAE,CAC/E,GAAI,CAAC,EAAM,YAAc,EAAO,WAAa,CAAE,WAAY,EAAO,WAAY,CAAG,EAAE,CACpF,CACD,OAAO,OAAO,KAAK,EAAI,CAAC,OAAS,EAAI,EAAM,IAAA,IAEyB,CAAC,CACnE,EAAe,GACjB,KAAK,OAAO,KACV,EAAO,MACL,gCAAgC,EAAa,0BAA0B,EAAK,sDAE7E,CACF,CAKL,IAAM,EAAS,GACb,EAAQ,QAAQ,CAAE,YAAa,GAAQ,UAAY,EAAQ,CAAC,OACxD,EAAW,EAAQ,QAAQ,CAAE,WAAY,IAAU,IAAA,GAAU,CAC7D,EAAW,EAAM,cAAc,CACrC,KAAK,OAAO,KACV,EAAO,QACL,kCAAkC,EAAM,UAAU,CAAG,EAAM,eAAe,CAAC,YACzE,EAAM,UAAU,CAAG,EAAM,eAAe,CACzC,YAAY,EAAM,mBAAmB,CAAC,kBAAkB,EACvD,UACD,CAAC,YAAY,EAAS,2BAA2B,EAAS,OAAO,SAChE,EAAS,aAAe,KAE3B,CACF,EAEG,EAAS,OAAS,GAAK,EAAW,IACpC,KAAK,QAAQ,KAAK,EAAE"}

package/dist/impl-CZ-KvZE02.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-CZ-KvZE02.mjs","names":[],"sources":["../src/commands/request/reject-unverified-identifiers/impl.ts"],"sourcesContent":["import type { RequestAction } from '@transcend-io/privacy-types';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { removeUnverifiedRequestIdentifiers } from '../../../lib/requests/index.js';\n\nexport interface RejectUnverifiedIdentifiersCommandFlags {\n  auth: string;\n  identifierNames: string[];\n  actions?: RequestAction[];\n  transcendUrl: string;\n}\n\nexport async function rejectUnverifiedIdentifiers(\n  this: LocalContext,\n  { auth, transcendUrl, identifierNames, actions = [] }: RejectUnverifiedIdentifiersCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await removeUnverifiedRequestIdentifiers({\n    requestActions: actions,\n    transcendUrl,\n    auth,\n    identifierNames,\n  });\n}\n"],"mappings":"0HAaA,eAAsB,EAEpB,CAAE,OAAM,eAAc,kBAAiB,UAAU,EAAE,EACpC,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAAmC,CACvC,eAAgB,EAChB,eACA,OACA,kBACD,CAAC"}

package/dist/impl-CbijbA-M2.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-CbijbA-M2.mjs","names":[],"sources":["../src/commands/request/download-files/impl.ts"],"sourcesContent":["import { RequestStatus } from '@transcend-io/privacy-types';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { downloadPrivacyRequestFiles } from '../../../lib/requests/index.js';\n\nexport interface DownloadFilesCommandFlags {\n  auth: string;\n  sombraAuth?: string;\n  concurrency: number;\n  requestIds?: string[];\n  statuses?: RequestStatus[];\n  folderPath: string;\n  createdAtBefore?: Date;\n  createdAtAfter?: Date;\n  updatedAtBefore?: Date;\n  updatedAtAfter?: Date;\n  approveAfterDownload: boolean;\n  transcendUrl: string;\n}\n\nexport async function downloadFiles(\n  this: LocalContext,\n  {\n    auth,\n    transcendUrl,\n    folderPath,\n    requestIds,\n    statuses = [RequestStatus.Approving, RequestStatus.Downloadable],\n    concurrency,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n    approveAfterDownload,\n  }: DownloadFilesCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await downloadPrivacyRequestFiles({\n    transcendUrl,\n    auth,\n    folderPath,\n    requestIds,\n    statuses,\n    concurrency,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n    approveAfterDownload,\n  });\n}\n"],"mappings":"+KAqBA,eAAsB,EAEpB,CACE,OACA,eACA,aACA,aACA,WAAW,CAAC,EAAc,UAAW,EAAc,aAAa,CAChE,cACA,kBACA,iBACA,kBACA,iBACA,wBAEa,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAA4B,CAChC,eACA,OACA,aACA,aACA,WACA,cACA,kBACA,iBACA,kBACA,iBACA,uBACD,CAAC"}

package/dist/impl-CclEOdC32.mjs

@@ -1,2 +0,0 @@
-import{t as e}from"./skipPreflightJobs-xpbtJ3dK.mjs";import{t}from"./done-input-validation-BFgMCQWH.mjs";async function n({auth:n,transcendUrl:r,enricherIds:i}){t(this.process),await e({transcendUrl:r,auth:n,enricherIds:i})}export{n as skipPreflightJobs};
-//# sourceMappingURL=impl-CclEOdC32.mjs.map

package/dist/impl-CclEOdC32.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-CclEOdC32.mjs","names":["skipPreflightJobsHelper"],"sources":["../src/commands/request/skip-preflight-jobs/impl.ts"],"sourcesContent":["import type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { skipPreflightJobs as skipPreflightJobsHelper } from '../../../lib/requests/index.js';\n\nexport interface SkipPreflightJobsCommandFlags {\n  auth: string;\n  enricherIds: string[];\n  transcendUrl: string;\n}\n\nexport async function skipPreflightJobs(\n  this: LocalContext,\n  { auth, transcendUrl, enricherIds }: SkipPreflightJobsCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await skipPreflightJobsHelper({\n    transcendUrl,\n    auth,\n    enricherIds,\n  });\n}\n"],"mappings":"yGAUA,eAAsB,EAEpB,CAAE,OAAM,eAAc,eACP,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAMA,EAAwB,CAC5B,eACA,OACA,cACD,CAAC"}

package/dist/impl-Cq5wI-kP.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-Cq5wI-kP.mjs","names":[],"sources":["../src/commands/inventory/push/impl.ts"],"sourcesContent":["import path from 'node:path';\n\nimport { buildTranscendGraphQLClient } from '@transcend-io/sdk';\nimport { mapSeries } from '@transcend-io/utils';\nimport colors from 'colors';\n\nimport { TranscendInput } from '../../../codecs.js';\nimport { ADMIN_DASH_INTEGRATIONS } from '../../../constants.js';\nimport type { LocalContext } from '../../../context.js';\nimport { validateTranscendAuth, filterFileNames } from '../../../lib/api-keys/index.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { syncConfigurationToTranscend } from '../../../lib/graphql/index.js';\nimport { parseVariablesFromString } from '../../../lib/helpers/parseVariablesFromString.js';\nimport { mergeTranscendInputs } from '../../../lib/mergeTranscendInputs.js';\nimport { parseTranscendYaml } from '../../../lib/readTranscendYaml.js';\n\n/**\n * Sync configuration to Transcend\n *\n * @param options - Options\n * @returns True if synced successfully, false if error occurs\n */\nasync function syncConfiguration({\n  transcendUrl,\n  auth,\n  pageSize,\n  publishToPrivacyCenter,\n  contents,\n  deleteExtraAttributeValues = false,\n  classifyService = false,\n  logger,\n}: {\n  /** Transcend YAML */\n  contents: TranscendInput;\n  /** Transcend URL */\n  transcendUrl: string;\n  /** API key */\n  auth: string;\n  /** Page size */\n  pageSize: number;\n  /** Skip privacy center publish step */\n  publishToPrivacyCenter: boolean;\n  /** classify data flow service if missing */\n  classifyService?: boolean;\n  /** Delete attributes when syncing */\n  deleteExtraAttributeValues?: boolean;\n  /** Logger for reporting sync progress and errors */\n  logger: LocalContext['logger'];\n}): Promise<boolean> {\n  const client = buildTranscendGraphQLClient(transcendUrl, auth);\n\n  // Sync to Transcend\n  try {\n    const result = await syncConfigurationToTranscend(contents, client, {\n      pageSize,\n      publishToPrivacyCenter,\n      classifyService,\n      deleteExtraAttributeValues,\n      logger,\n    });\n    if (!result.success) {\n      result.errors.forEach(({ resource, item, message }) => {\n        logger.error(\n          colors.red(`Failed to sync ${resource}${item ? ` \"${item}\"` : ''}: ${message}`),\n        );\n      });\n    }\n    return result.success;\n  } catch (err) {\n    logger.error(colors.red(`An unexpected error occurred syncing the schema: ${err.message}`));\n    return false;\n  }\n}\n\nexport interface PushCommandFlags {\n  auth: string;\n  file: string;\n  transcendUrl: string;\n  pageSize: number;\n  variables: string;\n  publishToPrivacyCenter: boolean;\n  classifyService: boolean;\n  deleteExtraAttributeValues: boolean;\n}\n\nexport async function push(\n  this: LocalContext,\n  {\n    file = './transcend.yml',\n    transcendUrl,\n    auth,\n    variables,\n    pageSize,\n    publishToPrivacyCenter,\n    classifyService,\n    deleteExtraAttributeValues,\n  }: PushCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  // Parse authentication as API key or path to list of API keys\n  const apiKeyOrList = await validateTranscendAuth(auth, this);\n\n  // Parse out the variables\n  const vars = parseVariablesFromString(variables);\n\n  // check if we are being passed a list of API keys and a list of files\n  let fileList: string[];\n  if (Array.isArray(apiKeyOrList) && this.fs.lstatSync(file).isDirectory()) {\n    fileList = filterFileNames(this.fs.readdirSync(file)).map((filePath) =>\n      path.join(file, filePath),\n    );\n  } else {\n    fileList = file.split(',');\n  }\n\n  // Ensure at least one file is parsed\n  if (fileList.length < 1) {\n    throw new Error('No file specified!');\n  }\n\n  // eslint-disable-next-line array-callback-return,consistent-return\n  const transcendInputs = fileList.map((filePath) => {\n    // Ensure yaml file exists on disk\n    if (!this.fs.existsSync(filePath)) {\n      this.logger.error(\n        colors.red(\n          `The file path does not exist on disk: ${filePath}. You can specify the filepath using --file=./examples/transcend.yml`,\n        ),\n      );\n      this.process.exit(1);\n    } else {\n      this.logger.info(colors.magenta(`Reading file \"${filePath}\"...`));\n    }\n\n    try {\n      // Read in the yaml file and validate it's shape\n      const newContents = parseTranscendYaml(\n        this.fs.readFileSync(filePath, 'utf8'),\n        vars,\n        filePath,\n      );\n      this.logger.info(colors.green(`Successfully read in \"${filePath}\"`));\n      return {\n        content: newContents,\n        name: filePath.split('/').pop()!.replace('.yml', ''),\n      };\n    } catch (err) {\n      this.logger.error(\n        colors.red(\n          `The shape of your yaml file is invalid with the following errors: ${err.message}`,\n        ),\n      );\n      this.process.exit(1);\n    }\n  });\n\n  // process a single API key\n  if (typeof apiKeyOrList === 'string') {\n    // if passed multiple inputs, merge them together\n    const [base, ...rest] = transcendInputs.map(({ content }) => content);\n    const contents = mergeTranscendInputs(base, ...rest);\n\n    // sync the configuration\n    const success = await syncConfiguration({\n      transcendUrl,\n      auth: apiKeyOrList,\n      contents,\n      publishToPrivacyCenter,\n      deleteExtraAttributeValues,\n      pageSize,\n      classifyService: !!classifyService,\n      logger: this.logger,\n    });\n\n    // exist with error code\n    if (!success) {\n      this.logger.info(\n        colors.red(\n          `Sync encountered errors. View output above for more information, or check out ${ADMIN_DASH_INTEGRATIONS}`,\n        ),\n      );\n\n      this.process.exit(1);\n    }\n  } else {\n    // if passed multiple inputs, expect them to be one per instance\n    if (transcendInputs.length !== 1 && transcendInputs.length !== apiKeyOrList.length) {\n      throw new Error(\n        'Expected list of yml files to be equal to the list of API keys.' +\n          `Got ${transcendInputs.length} YML file${\n            transcendInputs.length === 1 ? '' : 's'\n          } and ${apiKeyOrList.length} API key${apiKeyOrList.length === 1 ? '' : 's'}`,\n      );\n    }\n\n    const encounteredErrors: string[] = [];\n    await mapSeries(apiKeyOrList, async (apiKey, ind) => {\n      const prefix = `[${ind + 1}/${apiKeyOrList.length}][${apiKey.organizationName}] `;\n      this.logger.info(\n        colors.magenta(`~~~\\n\\n${prefix}Attempting to push configuration...\\n\\n~~~`),\n      );\n\n      // use the merged contents if 1 yml passed, else use the contents that map to that organization\n      const useContents =\n        transcendInputs.length === 1\n          ? transcendInputs[0].content\n          : transcendInputs.find((input) => input.name === apiKey.organizationName)?.content;\n\n      // Throw error if cannot find a yml file matching that organization name\n      if (!useContents) {\n        this.logger.error(\n          colors.red(\n            `${prefix}Failed to find transcend.yml file for organization: \"${apiKey.organizationName}\".`,\n          ),\n        );\n        encounteredErrors.push(apiKey.organizationName);\n        return;\n      }\n\n      const success = await syncConfiguration({\n        transcendUrl,\n        auth: apiKey.apiKey,\n        contents: useContents,\n        pageSize,\n        publishToPrivacyCenter,\n        deleteExtraAttributeValues,\n        classifyService,\n        logger: this.logger,\n      });\n\n      if (success) {\n        this.logger.info(colors.green(`${prefix}Successfully pushed configuration!`));\n      } else {\n        this.logger.error(colors.red(`${prefix}Failed to sync configuration.`));\n        encounteredErrors.push(apiKey.organizationName);\n      }\n    });\n\n    if (encounteredErrors.length > 0) {\n      this.logger.info(\n        colors.red(\n          `Sync encountered errors for \"${encounteredErrors.join(\n            ',',\n          )}\". View output above for more information, or check out ${ADMIN_DASH_INTEGRATIONS}`,\n        ),\n      );\n\n      this.process.exit(1);\n    }\n  }\n\n  // Indicate success\n  this.logger.info(\n    colors.green(`Successfully synced yaml file to Transcend! View at ${ADMIN_DASH_INTEGRATIONS}`),\n  );\n}\n"],"mappings":"shBAsBA,eAAe,EAAkB,CAC/B,eACA,OACA,WACA,yBACA,WACA,6BAA6B,GAC7B,kBAAkB,GAClB,UAkBmB,CACnB,IAAM,EAAS,EAA4B,EAAc,EAAK,CAG9D,GAAI,CACF,IAAM,EAAS,MAAM,EAA6B,EAAU,EAAQ,CAClE,WACA,yBACA,kBACA,6BACA,SACD,CAAC,CAQF,OAPK,EAAO,SACV,EAAO,OAAO,SAAS,CAAE,WAAU,OAAM,aAAc,CACrD,EAAO,MACL,EAAO,IAAI,kBAAkB,IAAW,EAAO,KAAK,EAAK,GAAK,GAAG,IAAI,IAAU,CAChF,EACD,CAEG,EAAO,cACP,EAAK,CAEZ,OADA,EAAO,MAAM,EAAO,IAAI,oDAAoD,EAAI,UAAU,CAAC,CACpF,IAeX,eAAsB,EAEpB,CACE,OAAO,kBACP,eACA,OACA,YACA,WACA,yBACA,kBACA,8BAEa,CACf,EAAoB,KAAK,QAAQ,CAGjC,IAAM,EAAe,MAAM,EAAsB,EAAM,KAAK,CAGtD,EAAO,EAAyB,EAAU,CAG5C,EAUJ,GATA,AAKE,EALE,MAAM,QAAQ,EAAa,EAAI,KAAK,GAAG,UAAU,EAAK,CAAC,aAAa,CAC3D,EAAgB,KAAK,GAAG,YAAY,EAAK,CAAC,CAAC,IAAK,GACzD,EAAK,KAAK,EAAM,EAAS,CAC1B,CAEU,EAAK,MAAM,IAAI,CAIxB,EAAS,OAAS,EACpB,MAAU,MAAM,qBAAqB,CAIvC,IAAM,EAAkB,EAAS,IAAK,GAAa,CAE5C,KAAK,GAAG,WAAW,EAAS,CAQ/B,KAAK,OAAO,KAAK,EAAO,QAAQ,iBAAiB,EAAS,MAAM,CAAC,EAPjE,KAAK,OAAO,MACV,EAAO,IACL,yCAAyC,EAAS,sEACnD,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAKtB,GAAI,CAEF,IAAM,EAAc,EAClB,KAAK,GAAG,aAAa,EAAU,OAAO,CACtC,EACA,EACD,CAED,OADA,KAAK,OAAO,KAAK,EAAO,MAAM,yBAAyB,EAAS,GAAG,CAAC,CAC7D,CACL,QAAS,EACT,KAAM,EAAS,MAAM,IAAI,CAAC,KAAK,CAAE,QAAQ,OAAQ,GAAG,CACrD,OACM,EAAK,CACZ,KAAK,OAAO,MACV,EAAO,IACL,qEAAqE,EAAI,UAC1E,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,GAEtB,CAGF,GAAI,OAAO,GAAiB,SAAU,CAEpC,GAAM,CAAC,EAAM,GAAG,GAAQ,EAAgB,KAAK,CAAE,aAAc,EAAQ,CAgBhE,MAZiB,EAAkB,CACtC,eACA,KAAM,EACN,SANe,EAAqB,EAAM,GAAG,EAMrC,CACR,yBACA,6BACA,WACA,gBAAiB,CAAC,CAAC,EACnB,OAAQ,KAAK,OACd,CAAC,GAIA,KAAK,OAAO,KACV,EAAO,IACL,iFAAiF,IAClF,CACF,CAED,KAAK,QAAQ,KAAK,EAAE,MAEjB,CAEL,GAAI,EAAgB,SAAW,GAAK,EAAgB,SAAW,EAAa,OAC1E,MAAU,MACR,sEACS,EAAgB,OAAO,WAC5B,EAAgB,SAAW,EAAI,GAAK,IACrC,OAAO,EAAa,OAAO,UAAU,EAAa,SAAW,EAAI,GAAK,MAC1E,CAGH,IAAM,EAA8B,EAAE,CACtC,MAAM,EAAU,EAAc,MAAO,EAAQ,IAAQ,CACnD,IAAM,EAAS,IAAI,EAAM,EAAE,GAAG,EAAa,OAAO,IAAI,EAAO,iBAAiB,IAC9E,KAAK,OAAO,KACV,EAAO,QAAQ,UAAU,EAAO,4CAA4C,CAC7E,CAGD,IAAM,EACJ,EAAgB,SAAW,EACvB,EAAgB,GAAG,QACnB,EAAgB,KAAM,GAAU,EAAM,OAAS,EAAO,iBAAiB,EAAE,QAG/E,GAAI,CAAC,EAAa,CAChB,KAAK,OAAO,MACV,EAAO,IACL,GAAG,EAAO,uDAAuD,EAAO,iBAAiB,IAC1F,CACF,CACD,EAAkB,KAAK,EAAO,iBAAiB,CAC/C,OAcE,MAXkB,EAAkB,CACtC,eACA,KAAM,EAAO,OACb,SAAU,EACV,WACA,yBACA,6BACA,kBACA,OAAQ,KAAK,OACd,CAAC,CAGA,KAAK,OAAO,KAAK,EAAO,MAAM,GAAG,EAAO,oCAAoC,CAAC,EAE7E,KAAK,OAAO,MAAM,EAAO,IAAI,GAAG,EAAO,+BAA+B,CAAC,CACvE,EAAkB,KAAK,EAAO,iBAAiB,GAEjD,CAEE,EAAkB,OAAS,IAC7B,KAAK,OAAO,KACV,EAAO,IACL,gCAAgC,EAAkB,KAChD,IACD,CAAC,0DAA0D,IAC7D,CACF,CAED,KAAK,QAAQ,KAAK,EAAE,EAKxB,KAAK,OAAO,KACV,EAAO,MAAM,uDAAuD,IAA0B,CAC/F"}

package/dist/impl-CusKk_JR2.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-CusKk_JR2.mjs","names":[],"sources":["../src/commands/request/preflight/pull-identifiers/impl.ts"],"sourcesContent":["import type { RequestAction } from '@transcend-io/privacy-types';\n\nimport type { LocalContext } from '../../../../context.js';\nimport { doneInputValidation } from '../../../../lib/cli/done-input-validation.js';\nimport { pullManualEnrichmentIdentifiersToCsv } from '../../../../lib/manual-enrichment/index.js';\n\nexport interface PullIdentifiersCommandFlags {\n  auth: string;\n  sombraAuth?: string;\n  transcendUrl: string;\n  file: string;\n  actions?: RequestAction[];\n  concurrency: number;\n}\n\nexport async function pullIdentifiers(\n  this: LocalContext,\n  { auth, transcendUrl, file, concurrency, actions, sombraAuth }: PullIdentifiersCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await pullManualEnrichmentIdentifiersToCsv({\n    file,\n    transcendUrl,\n    concurrency,\n    requestActions: actions,\n    auth,\n    sombraAuth,\n  });\n}\n"],"mappings":"4HAeA,eAAsB,EAEpB,CAAE,OAAM,eAAc,OAAM,cAAa,UAAS,cACnC,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAAqC,CACzC,OACA,eACA,cACA,eAAgB,EAChB,OACA,aACD,CAAC"}

package/dist/impl-DG9RwTkA2.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-DG9RwTkA2.mjs","names":[],"sources":["../src/commands/request/restart/impl.ts"],"sourcesContent":["import type {\n  RequestAction,\n  RequestStatus,\n  RestartIdentifierStrategy,\n} from '@transcend-io/privacy-types';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { bulkRestartRequests } from '../../../lib/requests/index.js';\n\nexport interface RestartCommandFlags {\n  auth: string;\n  actions: RequestAction[];\n  statuses: RequestStatus[];\n  transcendUrl: string;\n  requestReceiptFolder: string;\n  sombraAuth?: string;\n  concurrency: number;\n  requestIds?: string[];\n  emailIsVerified: boolean;\n  createdAt?: Date;\n  silentModeBefore?: Date;\n  createdAtBefore?: Date;\n  createdAtAfter?: Date;\n  updatedAtBefore?: Date;\n  updatedAtAfter?: Date;\n  sendEmailReceipt: boolean;\n  copyIdentifiers: boolean;\n  restartIdentifierStrategy?: RestartIdentifierStrategy;\n  skipWaitingPeriod: boolean;\n}\n\nexport async function restart(\n  this: LocalContext,\n  {\n    auth,\n    requestReceiptFolder,\n    sombraAuth,\n    actions,\n    statuses,\n    requestIds,\n    createdAt,\n    emailIsVerified,\n    silentModeBefore,\n    sendEmailReceipt,\n    copyIdentifiers,\n    restartIdentifierStrategy,\n    skipWaitingPeriod,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n    concurrency,\n    transcendUrl,\n  }: RestartCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await bulkRestartRequests({\n    requestReceiptFolder,\n    auth,\n    sombraAuth,\n    requestActions: actions,\n    requestStatuses: statuses,\n    requestIds,\n    createdAt,\n    emailIsVerified,\n    silentModeBefore,\n    sendEmailReceipt,\n    copyIdentifiers,\n    restartIdentifierStrategy,\n    skipWaitingPeriod,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n    concurrency,\n    transcendUrl,\n  });\n}\n"],"mappings":"2GAgCA,eAAsB,EAEpB,CACE,OACA,uBACA,aACA,UACA,WACA,aACA,YACA,kBACA,mBACA,mBACA,kBACA,4BACA,oBACA,kBACA,iBACA,kBACA,iBACA,cACA,gBAEa,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAAoB,CACxB,uBACA,OACA,aACA,eAAgB,EAChB,gBAAiB,EACjB,aACA,YACA,kBACA,mBACA,mBACA,kBACA,4BACA,oBACA,kBACA,iBACA,kBACA,iBACA,cACA,eACD,CAAC"}

package/dist/impl-DQG3PiAW2.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-DQG3PiAW2.mjs","names":["skipRequestDataSilosHelper"],"sources":["../src/commands/request/system/skip-request-data-silos/impl.ts"],"sourcesContent":["import type {\n  RequestAction,\n  RequestDataSiloStatus,\n  RequestStatus,\n} from '@transcend-io/privacy-types';\n\nimport type { LocalContext } from '../../../../context.js';\nimport { doneInputValidation } from '../../../../lib/cli/done-input-validation.js';\nimport { skipRequestDataSilos as skipRequestDataSilosHelper } from '../../../../lib/requests/index.js';\n\nexport interface SkipRequestDataSilosCommandFlags {\n  auth: string;\n  dataSiloId: string;\n  transcendUrl: string;\n  statuses: RequestStatus[];\n  status: (typeof RequestDataSiloStatus)['Skipped'] | (typeof RequestDataSiloStatus)['Resolved'];\n  actionTypes?: RequestAction[];\n}\n\nexport async function skipRequestDataSilos(\n  this: LocalContext,\n  {\n    auth,\n    dataSiloId,\n    status,\n    statuses,\n    transcendUrl,\n    actionTypes,\n  }: SkipRequestDataSilosCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await skipRequestDataSilosHelper({\n    transcendUrl,\n    auth,\n    status,\n    dataSiloId,\n    requestStatuses: statuses,\n    actionTypes,\n  });\n}\n"],"mappings":"4GAmBA,eAAsB,EAEpB,CACE,OACA,aACA,SACA,WACA,eACA,eAEa,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAMA,EAA2B,CAC/B,eACA,OACA,SACA,aACA,gBAAiB,EACjB,cACD,CAAC"}