@transcend-io/cli 10.29.3 → 12.0.0

package/dist/{impl-C5Mq4wv0.mjs.map → impl-D-a5xGld.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"impl-C5Mq4wv0.mjs","names":[],"sources":["../src/commands/consent/pull-consent-metrics/impl.ts"],"sourcesContent":["import path from 'node:path';\n\nimport { ConsentManagerMetricBin } from '@transcend-io/privacy-types';\nimport { buildTranscendGraphQLClient } from '@transcend-io/sdk';\nimport { map, mapSeries } from '@transcend-io/utils';\nimport colors from 'colors';\n\nimport { ADMIN_DASH_INTEGRATIONS } from '../../../constants.js';\nimport type { LocalContext } from '../../../context.js';\nimport { validateTranscendAuth } from '../../../lib/api-keys/index.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { pullConsentManagerMetrics } from '../../../lib/consent-manager/index.js';\nimport { writeCsv } from '../../../lib/helpers/index.js';\n\nexport interface PullConsentMetricsCommandFlags {\n  auth: string;\n  start: Date;\n  end?: Date;\n  folder: string;\n  bin: string;\n  transcendUrl: string;\n}\n\nexport async function pullConsentMetrics(\n  this: LocalContext,\n  { auth, start, end, folder, bin, transcendUrl }: PullConsentMetricsCommandFlags,\n): Promise<void> {\n  // Validate bin\n  const parsedBin = bin as ConsentManagerMetricBin;\n  if (!Object.values(ConsentManagerMetricBin).includes(parsedBin)) {\n    this.logger.error(\n      colors.red(\n        `Failed to parse argument \"bin\" with value \"${bin}\"\\n` +\n          `Expected one of: \\n${Object.values(ConsentManagerMetricBin).join('\\n')}`,\n      ),\n    );\n    this.process.exit(1);\n  }\n\n  // Parse the dates\n  const startDate = new Date(start);\n  const endDate = end ? new Date(end) : new Date();\n  if (Number.isNaN(startDate.getTime())) {\n    this.logger.error(\n      colors.red(\n        `Start date provided is invalid date. Got --start=\"${start}\" expected --start=\"01/01/2023\"`,\n      ),\n    );\n    this.process.exit(1);\n  }\n  if (Number.isNaN(endDate.getTime())) {\n    this.logger.error(\n      colors.red(\n        `End date provided is invalid date. Got --end=\"${end}\" expected --end=\"01/01/2023\"`,\n      ),\n    );\n    this.process.exit(1);\n  }\n  if (startDate > endDate) {\n    this.logger.error(\n      colors.red(\n        `Got a start date \"${startDate.toISOString()}\" that was larger than the end date \"${endDate.toISOString()}\". ` +\n          'Start date must be before end date.',\n      ),\n    );\n    this.process.exit(1);\n  }\n\n  doneInputValidation(this.process);\n\n  // Parse authentication as API key or path to list of API keys\n  const apiKeyOrList = await validateTranscendAuth(auth, this);\n\n  // Ensure folder either does not exist or is not a file\n  if (this.fs.existsSync(folder) && !this.fs.lstatSync(folder).isDirectory()) {\n    this.logger.error(\n      colors.red(\n        'The provided argument \"folder\" was passed a file. expected: folder=\"./consent-metrics/\"',\n      ),\n    );\n    this.process.exit(1);\n  }\n\n  // Create the folder if it does not exist\n  if (!this.fs.existsSync(folder)) {\n    this.fs.mkdirSync(folder);\n  }\n\n  this.logger.info(\n    colors.magenta(\n      `Pulling consent metrics from start=${startDate.toString()} to end=${endDate.toISOString()} with bin size \"${bin}\"`,\n    ),\n  );\n\n  // Sync to Disk\n  if (typeof apiKeyOrList === 'string') {\n    try {\n      // Create a GraphQL client\n      const client = buildTranscendGraphQLClient(transcendUrl, apiKeyOrList);\n\n      // Pull the metrics\n      const configuration = await pullConsentManagerMetrics(client, {\n        bin: parsedBin,\n        start: startDate,\n        end: endDate,\n      });\n\n      // Write to file\n      await map(\n        Object.entries(configuration),\n        async ([metricName, metrics]) => {\n          await map(\n            metrics,\n            async ({ points, name }) => {\n              const file = path.join(folder, `${metricName}_${name}.csv`);\n              this.logger.info(colors.magenta(`Writing configuration to file \"${file}\"...`));\n              await writeCsv(\n                file,\n                points.map(({ key, value }: { key: string; value: string }) => ({\n                  timestamp: key,\n                  value,\n                })),\n              );\n            },\n            {\n              concurrency: 5,\n            },\n          );\n        },\n        { concurrency: 5 },\n      );\n    } catch (err) {\n      this.logger.error(colors.red(`An error occurred syncing the schema: ${err.message}`));\n      this.process.exit(1);\n    }\n\n    // Indicate success\n    this.logger.info(\n      colors.green(\n        `Successfully synced consent metrics to disk in folder \"${folder}\"! View at ${ADMIN_DASH_INTEGRATIONS}`,\n      ),\n    );\n  } else {\n    const encounteredErrors: string[] = [];\n    await mapSeries(apiKeyOrList, async (apiKey, ind) => {\n      const prefix = `[${ind + 1}/${apiKeyOrList.length}][${apiKey.organizationName}] `;\n      this.logger.info(\n        colors.magenta(`~~~\\n\\n${prefix}Attempting to pull consent metrics...\\n\\n~~~`),\n      );\n\n      // Create a GraphQL client\n      const client = buildTranscendGraphQLClient(transcendUrl, apiKey.apiKey);\n\n      try {\n        const configuration = await pullConsentManagerMetrics(client, {\n          bin: parsedBin,\n          start: startDate,\n          end: endDate,\n        });\n\n        // ensure folder exists for that organization\n        const subFolder = path.join(folder, apiKey.organizationName);\n        if (!this.fs.existsSync(subFolder)) {\n          this.fs.mkdirSync(subFolder);\n        }\n\n        // Write to file\n        Object.entries(configuration).forEach(([metricName, metrics]) => {\n          metrics.forEach(({ points, name }) => {\n            const file = path.join(subFolder, `${metricName}_${name}.csv`);\n            this.logger.info(colors.magenta(`Writing configuration to file \"${file}\"...`));\n            writeCsv(\n              file,\n              points.map(({ key, value }: { key: string; value: string }) => ({\n                timestamp: key,\n                value,\n              })),\n            );\n          });\n        });\n\n        this.logger.info(colors.green(`${prefix}Successfully pulled configuration!`));\n      } catch (err) {\n        this.logger.error(colors.red(`${prefix}Failed to sync configuration.`), err);\n        encounteredErrors.push(apiKey.organizationName);\n      }\n    });\n\n    if (encounteredErrors.length > 0) {\n      this.logger.info(\n        colors.red(\n          `Sync encountered errors for \"${encounteredErrors.join(\n            ',',\n          )}\". View output above for more information, or check out ${ADMIN_DASH_INTEGRATIONS}`,\n        ),\n      );\n\n      this.process.exit(1);\n    }\n  }\n}\n"],"mappings":"sfAuBA,eAAsB,EAEpB,CAAE,OAAM,QAAO,MAAK,SAAQ,MAAK,gBAClB,CAEf,IAAM,EAAY,EACb,OAAO,OAAO,EAAwB,CAAC,SAAS,EAAU,GAC7D,KAAK,OAAO,MACV,EAAO,IACL,8CAA8C,EAAI,wBAC1B,OAAO,OAAO,EAAwB,CAAC,KAAK;EAAK,GAC1E,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAItB,IAAM,EAAY,IAAI,KAAK,EAAM,CAC3B,EAAU,EAAM,IAAI,KAAK,EAAI,CAAG,IAAI,KACtC,OAAO,MAAM,EAAU,SAAS,CAAC,GACnC,KAAK,OAAO,MACV,EAAO,IACL,qDAAqD,EAAM,iCAC5D,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAElB,OAAO,MAAM,EAAQ,SAAS,CAAC,GACjC,KAAK,OAAO,MACV,EAAO,IACL,iDAAiD,EAAI,+BACtD,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAElB,EAAY,IACd,KAAK,OAAO,MACV,EAAO,IACL,qBAAqB,EAAU,aAAa,CAAC,uCAAuC,EAAQ,aAAa,CAAC,wCAE3G,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAGtB,EAAoB,KAAK,QAAQ,CAGjC,IAAM,EAAe,MAAM,EAAsB,EAAM,KAAK,CAwB5D,GArBI,KAAK,GAAG,WAAW,EAAO,EAAI,CAAC,KAAK,GAAG,UAAU,EAAO,CAAC,aAAa,GACxE,KAAK,OAAO,MACV,EAAO,IACL,0FACD,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAIjB,KAAK,GAAG,WAAW,EAAO,EAC7B,KAAK,GAAG,UAAU,EAAO,CAG3B,KAAK,OAAO,KACV,EAAO,QACL,sCAAsC,EAAU,UAAU,CAAC,UAAU,EAAQ,aAAa,CAAC,kBAAkB,EAAI,GAClH,CACF,CAGG,OAAO,GAAiB,SAAU,CACpC,GAAI,CAKF,IAAM,EAAgB,MAAM,EAHb,EAA4B,EAAc,EAGG,CAAE,CAC5D,IAAK,EACL,MAAO,EACP,IAAK,EACN,CAAC,CAGF,MAAM,EACJ,OAAO,QAAQ,EAAc,CAC7B,MAAO,CAAC,EAAY,KAAa,CAC/B,MAAM,EACJ,EACA,MAAO,CAAE,SAAQ,UAAW,CAC1B,IAAM,EAAO,EAAK,KAAK,EAAQ,GAAG,EAAW,GAAG,EAAK,MAAM,CAC3D,KAAK,OAAO,KAAK,EAAO,QAAQ,kCAAkC,EAAK,MAAM,CAAC,CAC9E,MAAM,EACJ,EACA,EAAO,KAAK,CAAE,MAAK,YAA6C,CAC9D,UAAW,EACX,QACD,EAAE,CACJ,EAEH,CACE,YAAa,EACd,CACF,EAEH,CAAE,YAAa,EAAG,CACnB,OACM,EAAK,CACZ,KAAK,OAAO,MAAM,EAAO,IAAI,yCAAyC,EAAI,UAAU,CAAC,CACrF,KAAK,QAAQ,KAAK,EAAE,CAItB,KAAK,OAAO,KACV,EAAO,MACL,0DAA0D,EAAO,aAAa,IAC/E,CACF,KACI,CACL,IAAM,EAA8B,EAAE,CACtC,MAAM,EAAU,EAAc,MAAO,EAAQ,IAAQ,CACnD,IAAM,EAAS,IAAI,EAAM,EAAE,GAAG,EAAa,OAAO,IAAI,EAAO,iBAAiB,IAC9E,KAAK,OAAO,KACV,EAAO,QAAQ,UAAU,EAAO,8CAA8C,CAC/E,CAGD,IAAM,EAAS,EAA4B,EAAc,EAAO,OAAO,CAEvE,GAAI,CACF,IAAM,EAAgB,MAAM,EAA0B,EAAQ,CAC5D,IAAK,EACL,MAAO,EACP,IAAK,EACN,CAAC,CAGI,EAAY,EAAK,KAAK,EAAQ,EAAO,iBAAiB,CACvD,KAAK,GAAG,WAAW,EAAU,EAChC,KAAK,GAAG,UAAU,EAAU,CAI9B,OAAO,QAAQ,EAAc,CAAC,SAAS,CAAC,EAAY,KAAa,CAC/D,EAAQ,SAAS,CAAE,SAAQ,UAAW,CACpC,IAAM,EAAO,EAAK,KAAK,EAAW,GAAG,EAAW,GAAG,EAAK,MAAM,CAC9D,KAAK,OAAO,KAAK,EAAO,QAAQ,kCAAkC,EAAK,MAAM,CAAC,CAC9E,EACE,EACA,EAAO,KAAK,CAAE,MAAK,YAA6C,CAC9D,UAAW,EACX,QACD,EAAE,CACJ,EACD,EACF,CAEF,KAAK,OAAO,KAAK,EAAO,MAAM,GAAG,EAAO,oCAAoC,CAAC,OACtE,EAAK,CACZ,KAAK,OAAO,MAAM,EAAO,IAAI,GAAG,EAAO,+BAA+B,CAAE,EAAI,CAC5E,EAAkB,KAAK,EAAO,iBAAiB,GAEjD,CAEE,EAAkB,OAAS,IAC7B,KAAK,OAAO,KACV,EAAO,IACL,gCAAgC,EAAkB,KAChD,IACD,CAAC,0DAA0D,IAC7D,CACF,CAED,KAAK,QAAQ,KAAK,EAAE"}
+{"version":3,"file":"impl-D-a5xGld.mjs","names":[],"sources":["../src/commands/consent/pull-consent-metrics/impl.ts"],"sourcesContent":["import path from 'node:path';\n\nimport { ConsentManagerMetricBin } from '@transcend-io/privacy-types';\nimport { buildTranscendGraphQLClient } from '@transcend-io/sdk';\nimport { map, mapSeries } from '@transcend-io/utils';\nimport colors from 'colors';\n\nimport { ADMIN_DASH_INTEGRATIONS } from '../../../constants.js';\nimport type { LocalContext } from '../../../context.js';\nimport { validateTranscendAuth } from '../../../lib/api-keys/index.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { pullConsentManagerMetrics } from '../../../lib/consent-manager/index.js';\nimport { writeCsv } from '../../../lib/helpers/index.js';\n\nexport interface PullConsentMetricsCommandFlags {\n  auth: string;\n  start: Date;\n  end?: Date;\n  folder: string;\n  bin: string;\n  transcendUrl: string;\n}\n\nexport async function pullConsentMetrics(\n  this: LocalContext,\n  { auth, start, end, folder, bin, transcendUrl }: PullConsentMetricsCommandFlags,\n): Promise<void> {\n  // Validate bin\n  const parsedBin = bin as ConsentManagerMetricBin;\n  if (!Object.values(ConsentManagerMetricBin).includes(parsedBin)) {\n    this.logger.error(\n      colors.red(\n        `Failed to parse argument \"bin\" with value \"${bin}\"\\n` +\n          `Expected one of: \\n${Object.values(ConsentManagerMetricBin).join('\\n')}`,\n      ),\n    );\n    this.process.exit(1);\n  }\n\n  // Parse the dates\n  const startDate = new Date(start);\n  const endDate = end ? new Date(end) : new Date();\n  if (Number.isNaN(startDate.getTime())) {\n    this.logger.error(\n      colors.red(\n        `Start date provided is invalid date. Got --start=\"${start}\" expected --start=\"01/01/2023\"`,\n      ),\n    );\n    this.process.exit(1);\n  }\n  if (Number.isNaN(endDate.getTime())) {\n    this.logger.error(\n      colors.red(\n        `End date provided is invalid date. Got --end=\"${end}\" expected --end=\"01/01/2023\"`,\n      ),\n    );\n    this.process.exit(1);\n  }\n  if (startDate > endDate) {\n    this.logger.error(\n      colors.red(\n        `Got a start date \"${startDate.toISOString()}\" that was larger than the end date \"${endDate.toISOString()}\". ` +\n          'Start date must be before end date.',\n      ),\n    );\n    this.process.exit(1);\n  }\n\n  doneInputValidation(this.process);\n\n  // Parse authentication as API key or path to list of API keys\n  const apiKeyOrList = await validateTranscendAuth(auth, this);\n\n  // Ensure folder either does not exist or is not a file\n  if (this.fs.existsSync(folder) && !this.fs.lstatSync(folder).isDirectory()) {\n    this.logger.error(\n      colors.red(\n        'The provided argument \"folder\" was passed a file. expected: folder=\"./consent-metrics/\"',\n      ),\n    );\n    this.process.exit(1);\n  }\n\n  // Create the folder if it does not exist\n  if (!this.fs.existsSync(folder)) {\n    this.fs.mkdirSync(folder);\n  }\n\n  this.logger.info(\n    colors.magenta(\n      `Pulling consent metrics from start=${startDate.toString()} to end=${endDate.toISOString()} with bin size \"${bin}\"`,\n    ),\n  );\n\n  // Sync to Disk\n  if (typeof apiKeyOrList === 'string') {\n    try {\n      // Create a GraphQL client\n      const client = buildTranscendGraphQLClient(transcendUrl, apiKeyOrList);\n\n      // Pull the metrics\n      const configuration = await pullConsentManagerMetrics(client, {\n        bin: parsedBin,\n        start: startDate,\n        end: endDate,\n      });\n\n      // Write to file\n      await map(\n        Object.entries(configuration),\n        async ([metricName, metrics]) => {\n          await map(\n            metrics,\n            async ({ points, name }) => {\n              const file = path.join(folder, `${metricName}_${name}.csv`);\n              this.logger.info(colors.magenta(`Writing configuration to file \"${file}\"...`));\n              await writeCsv(\n                file,\n                points.map(({ key, value }: { key: string; value: string }) => ({\n                  timestamp: key,\n                  value,\n                })),\n              );\n            },\n            {\n              concurrency: 5,\n            },\n          );\n        },\n        { concurrency: 5 },\n      );\n    } catch (err) {\n      this.logger.error(colors.red(`An error occurred syncing the schema: ${err.message}`));\n      this.process.exit(1);\n    }\n\n    // Indicate success\n    this.logger.info(\n      colors.green(\n        `Successfully synced consent metrics to disk in folder \"${folder}\"! View at ${ADMIN_DASH_INTEGRATIONS}`,\n      ),\n    );\n  } else {\n    const encounteredErrors: string[] = [];\n    await mapSeries(apiKeyOrList, async (apiKey, ind) => {\n      const prefix = `[${ind + 1}/${apiKeyOrList.length}][${apiKey.organizationName}] `;\n      this.logger.info(\n        colors.magenta(`~~~\\n\\n${prefix}Attempting to pull consent metrics...\\n\\n~~~`),\n      );\n\n      // Create a GraphQL client\n      const client = buildTranscendGraphQLClient(transcendUrl, apiKey.apiKey);\n\n      try {\n        const configuration = await pullConsentManagerMetrics(client, {\n          bin: parsedBin,\n          start: startDate,\n          end: endDate,\n        });\n\n        // ensure folder exists for that organization\n        const subFolder = path.join(folder, apiKey.organizationName);\n        if (!this.fs.existsSync(subFolder)) {\n          this.fs.mkdirSync(subFolder);\n        }\n\n        // Write to file\n        Object.entries(configuration).forEach(([metricName, metrics]) => {\n          metrics.forEach(({ points, name }) => {\n            const file = path.join(subFolder, `${metricName}_${name}.csv`);\n            this.logger.info(colors.magenta(`Writing configuration to file \"${file}\"...`));\n            writeCsv(\n              file,\n              points.map(({ key, value }: { key: string; value: string }) => ({\n                timestamp: key,\n                value,\n              })),\n            );\n          });\n        });\n\n        this.logger.info(colors.green(`${prefix}Successfully pulled configuration!`));\n      } catch (err) {\n        this.logger.error(colors.red(`${prefix}Failed to sync configuration.`), err);\n        encounteredErrors.push(apiKey.organizationName);\n      }\n    });\n\n    if (encounteredErrors.length > 0) {\n      this.logger.info(\n        colors.red(\n          `Sync encountered errors for \"${encounteredErrors.join(\n            ',',\n          )}\". View output above for more information, or check out ${ADMIN_DASH_INTEGRATIONS}`,\n        ),\n      );\n\n      this.process.exit(1);\n    }\n  }\n}\n"],"mappings":"sfAuBA,eAAsB,EAEpB,CAAE,OAAM,QAAO,MAAK,SAAQ,MAAK,gBAClB,CAEf,IAAM,EAAY,EACb,OAAO,OAAO,EAAwB,CAAC,SAAS,EAAU,GAC7D,KAAK,OAAO,MACV,EAAO,IACL,8CAA8C,EAAI,wBAC1B,OAAO,OAAO,EAAwB,CAAC,KAAK;EAAK,GAC1E,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAItB,IAAM,EAAY,IAAI,KAAK,EAAM,CAC3B,EAAU,EAAM,IAAI,KAAK,EAAI,CAAG,IAAI,KACtC,OAAO,MAAM,EAAU,SAAS,CAAC,GACnC,KAAK,OAAO,MACV,EAAO,IACL,qDAAqD,EAAM,iCAC5D,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAElB,OAAO,MAAM,EAAQ,SAAS,CAAC,GACjC,KAAK,OAAO,MACV,EAAO,IACL,iDAAiD,EAAI,+BACtD,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAElB,EAAY,IACd,KAAK,OAAO,MACV,EAAO,IACL,qBAAqB,EAAU,aAAa,CAAC,uCAAuC,EAAQ,aAAa,CAAC,wCAE3G,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAGtB,EAAoB,KAAK,QAAQ,CAGjC,IAAM,EAAe,MAAM,EAAsB,EAAM,KAAK,CAwB5D,GArBI,KAAK,GAAG,WAAW,EAAO,EAAI,CAAC,KAAK,GAAG,UAAU,EAAO,CAAC,aAAa,GACxE,KAAK,OAAO,MACV,EAAO,IACL,0FACD,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAIjB,KAAK,GAAG,WAAW,EAAO,EAC7B,KAAK,GAAG,UAAU,EAAO,CAG3B,KAAK,OAAO,KACV,EAAO,QACL,sCAAsC,EAAU,UAAU,CAAC,UAAU,EAAQ,aAAa,CAAC,kBAAkB,EAAI,GAClH,CACF,CAGG,OAAO,GAAiB,SAAU,CACpC,GAAI,CAKF,IAAM,EAAgB,MAAM,EAHb,EAA4B,EAAc,EAGG,CAAE,CAC5D,IAAK,EACL,MAAO,EACP,IAAK,EACN,CAAC,CAGF,MAAM,EACJ,OAAO,QAAQ,EAAc,CAC7B,MAAO,CAAC,EAAY,KAAa,CAC/B,MAAM,EACJ,EACA,MAAO,CAAE,SAAQ,UAAW,CAC1B,IAAM,EAAO,EAAK,KAAK,EAAQ,GAAG,EAAW,GAAG,EAAK,MAAM,CAC3D,KAAK,OAAO,KAAK,EAAO,QAAQ,kCAAkC,EAAK,MAAM,CAAC,CAC9E,MAAM,EACJ,EACA,EAAO,KAAK,CAAE,MAAK,YAA6C,CAC9D,UAAW,EACX,QACD,EAAE,CACJ,EAEH,CACE,YAAa,EACd,CACF,EAEH,CAAE,YAAa,EAAG,CACnB,OACM,EAAK,CACZ,KAAK,OAAO,MAAM,EAAO,IAAI,yCAAyC,EAAI,UAAU,CAAC,CACrF,KAAK,QAAQ,KAAK,EAAE,CAItB,KAAK,OAAO,KACV,EAAO,MACL,0DAA0D,EAAO,aAAa,IAC/E,CACF,KACI,CACL,IAAM,EAA8B,EAAE,CACtC,MAAM,EAAU,EAAc,MAAO,EAAQ,IAAQ,CACnD,IAAM,EAAS,IAAI,EAAM,EAAE,GAAG,EAAa,OAAO,IAAI,EAAO,iBAAiB,IAC9E,KAAK,OAAO,KACV,EAAO,QAAQ,UAAU,EAAO,8CAA8C,CAC/E,CAGD,IAAM,EAAS,EAA4B,EAAc,EAAO,OAAO,CAEvE,GAAI,CACF,IAAM,EAAgB,MAAM,EAA0B,EAAQ,CAC5D,IAAK,EACL,MAAO,EACP,IAAK,EACN,CAAC,CAGI,EAAY,EAAK,KAAK,EAAQ,EAAO,iBAAiB,CACvD,KAAK,GAAG,WAAW,EAAU,EAChC,KAAK,GAAG,UAAU,EAAU,CAI9B,OAAO,QAAQ,EAAc,CAAC,SAAS,CAAC,EAAY,KAAa,CAC/D,EAAQ,SAAS,CAAE,SAAQ,UAAW,CACpC,IAAM,EAAO,EAAK,KAAK,EAAW,GAAG,EAAW,GAAG,EAAK,MAAM,CAC9D,KAAK,OAAO,KAAK,EAAO,QAAQ,kCAAkC,EAAK,MAAM,CAAC,CAC9E,EACE,EACA,EAAO,KAAK,CAAE,MAAK,YAA6C,CAC9D,UAAW,EACX,QACD,EAAE,CACJ,EACD,EACF,CAEF,KAAK,OAAO,KAAK,EAAO,MAAM,GAAG,EAAO,oCAAoC,CAAC,OACtE,EAAK,CACZ,KAAK,OAAO,MAAM,EAAO,IAAI,GAAG,EAAO,+BAA+B,CAAE,EAAI,CAC5E,EAAkB,KAAK,EAAO,iBAAiB,GAEjD,CAEE,EAAkB,OAAS,IAC7B,KAAK,OAAO,KACV,EAAO,IACL,gCAAgC,EAAkB,KAChD,IACD,CAAC,0DAA0D,IAC7D,CACF,CAED,KAAK,QAAQ,KAAK,EAAE"}

package/dist/{impl-CGioITgZ.mjs → impl-D1UogVAq.mjs}

@@ -1,2 +1,2 @@
-import{r as e}from"./constants-XH8NIJGC.mjs";import{r as t}from"./readTranscendYaml-BNn6-Ofi.mjs";import{n,t as r}from"./mergeTranscendInputs-DFQcbh8b.mjs";import{t as i}from"./parseVariablesFromString-BOSfQ4QF.mjs";import{t as a}from"./validateTranscendAuth-D6Wr1cxY.mjs";import{t as o}from"./listFiles-BdFUbX5x.mjs";import{t as s}from"./done-input-validation-BUz-aVC5.mjs";import c from"node:path";import l from"colors";import{buildTranscendGraphQLClient as u}from"@transcend-io/sdk";import{mapSeries as d}from"@transcend-io/utils";async function f({transcendUrl:e,auth:t,pageSize:r,publishToPrivacyCenter:i,contents:a,deleteExtraAttributeValues:o=!1,classifyService:s=!1,logger:c}){let d=u(e,t);try{let e=await n(a,d,{pageSize:r,publishToPrivacyCenter:i,classifyService:s,deleteExtraAttributeValues:o,logger:c});return e.success||e.errors.forEach(({resource:e,item:t,message:n})=>{c.error(l.red(`Failed to sync ${e}${t?` "${t}"`:``}: ${n}`))}),e.success}catch(e){return c.error(l.red(`An unexpected error occurred syncing the schema: ${e.message}`)),!1}}async function p({file:n=`./transcend.yml`,transcendUrl:u,auth:p,variables:m,pageSize:h,publishToPrivacyCenter:g,classifyService:_,deleteExtraAttributeValues:v}){s(this.process);let y=await a(p,this),b=i(m),x;if(x=Array.isArray(y)&&this.fs.lstatSync(n).isDirectory()?o(this.fs.readdirSync(n)).map(e=>c.join(n,e)):n.split(`,`),x.length<1)throw Error(`No file specified!`);let S=x.map(e=>{this.fs.existsSync(e)?this.logger.info(l.magenta(`Reading file "${e}"...`)):(this.logger.error(l.red(`The file path does not exist on disk: ${e}. You can specify the filepath using --file=./examples/transcend.yml`)),this.process.exit(1));try{let n=t(this.fs.readFileSync(e,`utf8`),b,e);return this.logger.info(l.green(`Successfully read in "${e}"`)),{content:n,name:e.split(`/`).pop().replace(`.yml`,``)}}catch(e){this.logger.error(l.red(`The shape of your yaml file is invalid with the following errors: ${e.message}`)),this.process.exit(1)}});if(typeof y==`string`){let[t,...n]=S.map(({content:e})=>e);await f({transcendUrl:u,auth:y,contents:r(t,...n),publishToPrivacyCenter:g,deleteExtraAttributeValues:v,pageSize:h,classifyService:!!_,logger:this.logger})||(this.logger.info(l.red(`Sync encountered errors. View output above for more information, or check out ${e}`)),this.process.exit(1))}else{if(S.length!==1&&S.length!==y.length)throw Error(`Expected list of yml files to be equal to the list of API keys.Got ${S.length} YML file${S.length===1?``:`s`} and ${y.length} API key${y.length===1?``:`s`}`);let t=[];await d(y,async(e,n)=>{let r=`[${n+1}/${y.length}][${e.organizationName}] `;this.logger.info(l.magenta(`~~~\n\n${r}Attempting to push configuration...\n\n~~~`));let i=S.length===1?S[0].content:S.find(t=>t.name===e.organizationName)?.content;if(!i){this.logger.error(l.red(`${r}Failed to find transcend.yml file for organization: "${e.organizationName}".`)),t.push(e.organizationName);return}await f({transcendUrl:u,auth:e.apiKey,contents:i,pageSize:h,publishToPrivacyCenter:g,deleteExtraAttributeValues:v,classifyService:_,logger:this.logger})?this.logger.info(l.green(`${r}Successfully pushed configuration!`)):(this.logger.error(l.red(`${r}Failed to sync configuration.`)),t.push(e.organizationName))}),t.length>0&&(this.logger.info(l.red(`Sync encountered errors for "${t.join(`,`)}". View output above for more information, or check out ${e}`)),this.process.exit(1))}this.logger.info(l.green(`Successfully synced yaml file to Transcend! View at ${e}`))}export{p as push};
-//# sourceMappingURL=impl-CGioITgZ.mjs.map
+import{r as e}from"./constants-BRsj50Nb.mjs";import{r as t}from"./readTranscendYaml-BfqQbPiT.mjs";import{n,t as r}from"./mergeTranscendInputs-D1CvxQu0.mjs";import{t as i}from"./parseVariablesFromString-6TYW65LF.mjs";import{t as a}from"./validateTranscendAuth-D-dDINof.mjs";import{t as o}from"./listFiles-DDGCBdtx.mjs";import{t as s}from"./done-input-validation-LiTaCEzF.mjs";import c from"node:path";import l from"colors";import{buildTranscendGraphQLClient as u}from"@transcend-io/sdk";import{mapSeries as d}from"@transcend-io/utils";async function f({transcendUrl:e,auth:t,pageSize:r,publishToPrivacyCenter:i,contents:a,deleteExtraAttributeValues:o=!1,classifyService:s=!1,logger:c}){let d=u(e,t);try{let e=await n(a,d,{pageSize:r,publishToPrivacyCenter:i,classifyService:s,deleteExtraAttributeValues:o,logger:c});return e.success||e.errors.forEach(({resource:e,item:t,message:n})=>{c.error(l.red(`Failed to sync ${e}${t?` "${t}"`:``}: ${n}`))}),e.success}catch(e){return c.error(l.red(`An unexpected error occurred syncing the schema: ${e.message}`)),!1}}async function p({file:n=`./transcend.yml`,transcendUrl:u,auth:p,variables:m,pageSize:h,publishToPrivacyCenter:g,classifyService:_,deleteExtraAttributeValues:v}){s(this.process);let y=await a(p,this),b=i(m),x;if(x=Array.isArray(y)&&this.fs.lstatSync(n).isDirectory()?o(this.fs.readdirSync(n)).map(e=>c.join(n,e)):n.split(`,`),x.length<1)throw Error(`No file specified!`);let S=x.map(e=>{this.fs.existsSync(e)?this.logger.info(l.magenta(`Reading file "${e}"...`)):(this.logger.error(l.red(`The file path does not exist on disk: ${e}. You can specify the filepath using --file=./examples/transcend.yml`)),this.process.exit(1));try{let n=t(this.fs.readFileSync(e,`utf8`),b,e);return this.logger.info(l.green(`Successfully read in "${e}"`)),{content:n,name:e.split(`/`).pop().replace(`.yml`,``)}}catch(e){this.logger.error(l.red(`The shape of your yaml file is invalid with the following errors: ${e.message}`)),this.process.exit(1)}});if(typeof y==`string`){let[t,...n]=S.map(({content:e})=>e);await f({transcendUrl:u,auth:y,contents:r(t,...n),publishToPrivacyCenter:g,deleteExtraAttributeValues:v,pageSize:h,classifyService:!!_,logger:this.logger})||(this.logger.info(l.red(`Sync encountered errors. View output above for more information, or check out ${e}`)),this.process.exit(1))}else{if(S.length!==1&&S.length!==y.length)throw Error(`Expected list of yml files to be equal to the list of API keys.Got ${S.length} YML file${S.length===1?``:`s`} and ${y.length} API key${y.length===1?``:`s`}`);let t=[];await d(y,async(e,n)=>{let r=`[${n+1}/${y.length}][${e.organizationName}] `;this.logger.info(l.magenta(`~~~\n\n${r}Attempting to push configuration...\n\n~~~`));let i=S.length===1?S[0].content:S.find(t=>t.name===e.organizationName)?.content;if(!i){this.logger.error(l.red(`${r}Failed to find transcend.yml file for organization: "${e.organizationName}".`)),t.push(e.organizationName);return}await f({transcendUrl:u,auth:e.apiKey,contents:i,pageSize:h,publishToPrivacyCenter:g,deleteExtraAttributeValues:v,classifyService:_,logger:this.logger})?this.logger.info(l.green(`${r}Successfully pushed configuration!`)):(this.logger.error(l.red(`${r}Failed to sync configuration.`)),t.push(e.organizationName))}),t.length>0&&(this.logger.info(l.red(`Sync encountered errors for "${t.join(`,`)}". View output above for more information, or check out ${e}`)),this.process.exit(1))}this.logger.info(l.green(`Successfully synced yaml file to Transcend! View at ${e}`))}export{p as push};
+//# sourceMappingURL=impl-D1UogVAq.mjs.map

package/dist/{impl-CGioITgZ.mjs.map → impl-D1UogVAq.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"impl-CGioITgZ.mjs","names":[],"sources":["../src/commands/inventory/push/impl.ts"],"sourcesContent":["import path from 'node:path';\n\nimport { buildTranscendGraphQLClient } from '@transcend-io/sdk';\nimport { mapSeries } from '@transcend-io/utils';\nimport colors from 'colors';\n\nimport { TranscendInput } from '../../../codecs.js';\nimport { ADMIN_DASH_INTEGRATIONS } from '../../../constants.js';\nimport type { LocalContext } from '../../../context.js';\nimport { validateTranscendAuth, filterFileNames } from '../../../lib/api-keys/index.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { syncConfigurationToTranscend } from '../../../lib/graphql/index.js';\nimport { parseVariablesFromString } from '../../../lib/helpers/parseVariablesFromString.js';\nimport { mergeTranscendInputs } from '../../../lib/mergeTranscendInputs.js';\nimport { parseTranscendYaml } from '../../../lib/readTranscendYaml.js';\n\n/**\n * Sync configuration to Transcend\n *\n * @param options - Options\n * @returns True if synced successfully, false if error occurs\n */\nasync function syncConfiguration({\n  transcendUrl,\n  auth,\n  pageSize,\n  publishToPrivacyCenter,\n  contents,\n  deleteExtraAttributeValues = false,\n  classifyService = false,\n  logger,\n}: {\n  /** Transcend YAML */\n  contents: TranscendInput;\n  /** Transcend URL */\n  transcendUrl: string;\n  /** API key */\n  auth: string;\n  /** Page size */\n  pageSize: number;\n  /** Skip privacy center publish step */\n  publishToPrivacyCenter: boolean;\n  /** classify data flow service if missing */\n  classifyService?: boolean;\n  /** Delete attributes when syncing */\n  deleteExtraAttributeValues?: boolean;\n  /** Logger for reporting sync progress and errors */\n  logger: LocalContext['logger'];\n}): Promise<boolean> {\n  const client = buildTranscendGraphQLClient(transcendUrl, auth);\n\n  // Sync to Transcend\n  try {\n    const result = await syncConfigurationToTranscend(contents, client, {\n      pageSize,\n      publishToPrivacyCenter,\n      classifyService,\n      deleteExtraAttributeValues,\n      logger,\n    });\n    if (!result.success) {\n      result.errors.forEach(({ resource, item, message }) => {\n        logger.error(\n          colors.red(`Failed to sync ${resource}${item ? ` \"${item}\"` : ''}: ${message}`),\n        );\n      });\n    }\n    return result.success;\n  } catch (err) {\n    logger.error(colors.red(`An unexpected error occurred syncing the schema: ${err.message}`));\n    return false;\n  }\n}\n\nexport interface PushCommandFlags {\n  auth: string;\n  file: string;\n  transcendUrl: string;\n  pageSize: number;\n  variables: string;\n  publishToPrivacyCenter: boolean;\n  classifyService: boolean;\n  deleteExtraAttributeValues: boolean;\n}\n\nexport async function push(\n  this: LocalContext,\n  {\n    file = './transcend.yml',\n    transcendUrl,\n    auth,\n    variables,\n    pageSize,\n    publishToPrivacyCenter,\n    classifyService,\n    deleteExtraAttributeValues,\n  }: PushCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  // Parse authentication as API key or path to list of API keys\n  const apiKeyOrList = await validateTranscendAuth(auth, this);\n\n  const vars = parseVariablesFromString(variables);\n\n  // check if we are being passed a list of API keys and a list of files\n  let fileList: string[];\n  if (Array.isArray(apiKeyOrList) && this.fs.lstatSync(file).isDirectory()) {\n    fileList = filterFileNames(this.fs.readdirSync(file)).map((filePath) =>\n      path.join(file, filePath),\n    );\n  } else {\n    fileList = file.split(',');\n  }\n\n  // Ensure at least one file is parsed\n  if (fileList.length < 1) {\n    throw new Error('No file specified!');\n  }\n\n  // eslint-disable-next-line array-callback-return,consistent-return\n  const transcendInputs = fileList.map((filePath) => {\n    // Ensure yaml file exists on disk\n    if (!this.fs.existsSync(filePath)) {\n      this.logger.error(\n        colors.red(\n          `The file path does not exist on disk: ${filePath}. You can specify the filepath using --file=./examples/transcend.yml`,\n        ),\n      );\n      this.process.exit(1);\n    } else {\n      this.logger.info(colors.magenta(`Reading file \"${filePath}\"...`));\n    }\n\n    try {\n      // Read in the yaml file and validate it's shape\n      const newContents = parseTranscendYaml(\n        this.fs.readFileSync(filePath, 'utf8'),\n        vars,\n        filePath,\n      );\n      this.logger.info(colors.green(`Successfully read in \"${filePath}\"`));\n      return {\n        content: newContents,\n        name: filePath.split('/').pop()!.replace('.yml', ''),\n      };\n    } catch (err) {\n      this.logger.error(\n        colors.red(\n          `The shape of your yaml file is invalid with the following errors: ${err.message}`,\n        ),\n      );\n      this.process.exit(1);\n    }\n  });\n\n  // process a single API key\n  if (typeof apiKeyOrList === 'string') {\n    // if passed multiple inputs, merge them together\n    const [base, ...rest] = transcendInputs.map(({ content }) => content);\n    const contents = mergeTranscendInputs(base, ...rest);\n\n    // sync the configuration\n    const success = await syncConfiguration({\n      transcendUrl,\n      auth: apiKeyOrList,\n      contents,\n      publishToPrivacyCenter,\n      deleteExtraAttributeValues,\n      pageSize,\n      classifyService: !!classifyService,\n      logger: this.logger,\n    });\n\n    // exist with error code\n    if (!success) {\n      this.logger.info(\n        colors.red(\n          `Sync encountered errors. View output above for more information, or check out ${ADMIN_DASH_INTEGRATIONS}`,\n        ),\n      );\n\n      this.process.exit(1);\n    }\n  } else {\n    // if passed multiple inputs, expect them to be one per instance\n    if (transcendInputs.length !== 1 && transcendInputs.length !== apiKeyOrList.length) {\n      throw new Error(\n        'Expected list of yml files to be equal to the list of API keys.' +\n          `Got ${transcendInputs.length} YML file${\n            transcendInputs.length === 1 ? '' : 's'\n          } and ${apiKeyOrList.length} API key${apiKeyOrList.length === 1 ? '' : 's'}`,\n      );\n    }\n\n    const encounteredErrors: string[] = [];\n    await mapSeries(apiKeyOrList, async (apiKey, ind) => {\n      const prefix = `[${ind + 1}/${apiKeyOrList.length}][${apiKey.organizationName}] `;\n      this.logger.info(\n        colors.magenta(`~~~\\n\\n${prefix}Attempting to push configuration...\\n\\n~~~`),\n      );\n\n      // use the merged contents if 1 yml passed, else use the contents that map to that organization\n      const useContents =\n        transcendInputs.length === 1\n          ? transcendInputs[0].content\n          : transcendInputs.find((input) => input.name === apiKey.organizationName)?.content;\n\n      // Throw error if cannot find a yml file matching that organization name\n      if (!useContents) {\n        this.logger.error(\n          colors.red(\n            `${prefix}Failed to find transcend.yml file for organization: \"${apiKey.organizationName}\".`,\n          ),\n        );\n        encounteredErrors.push(apiKey.organizationName);\n        return;\n      }\n\n      const success = await syncConfiguration({\n        transcendUrl,\n        auth: apiKey.apiKey,\n        contents: useContents,\n        pageSize,\n        publishToPrivacyCenter,\n        deleteExtraAttributeValues,\n        classifyService,\n        logger: this.logger,\n      });\n\n      if (success) {\n        this.logger.info(colors.green(`${prefix}Successfully pushed configuration!`));\n      } else {\n        this.logger.error(colors.red(`${prefix}Failed to sync configuration.`));\n        encounteredErrors.push(apiKey.organizationName);\n      }\n    });\n\n    if (encounteredErrors.length > 0) {\n      this.logger.info(\n        colors.red(\n          `Sync encountered errors for \"${encounteredErrors.join(\n            ',',\n          )}\". View output above for more information, or check out ${ADMIN_DASH_INTEGRATIONS}`,\n        ),\n      );\n\n      this.process.exit(1);\n    }\n  }\n\n  // Indicate success\n  this.logger.info(\n    colors.green(`Successfully synced yaml file to Transcend! View at ${ADMIN_DASH_INTEGRATIONS}`),\n  );\n}\n"],"mappings":"shBAsBA,eAAe,EAAkB,CAC/B,eACA,OACA,WACA,yBACA,WACA,6BAA6B,GAC7B,kBAAkB,GAClB,UAkBmB,CACnB,IAAM,EAAS,EAA4B,EAAc,EAAK,CAG9D,GAAI,CACF,IAAM,EAAS,MAAM,EAA6B,EAAU,EAAQ,CAClE,WACA,yBACA,kBACA,6BACA,SACD,CAAC,CAQF,OAPK,EAAO,SACV,EAAO,OAAO,SAAS,CAAE,WAAU,OAAM,aAAc,CACrD,EAAO,MACL,EAAO,IAAI,kBAAkB,IAAW,EAAO,KAAK,EAAK,GAAK,GAAG,IAAI,IAAU,CAChF,EACD,CAEG,EAAO,cACP,EAAK,CAEZ,OADA,EAAO,MAAM,EAAO,IAAI,oDAAoD,EAAI,UAAU,CAAC,CACpF,IAeX,eAAsB,EAEpB,CACE,OAAO,kBACP,eACA,OACA,YACA,WACA,yBACA,kBACA,8BAEa,CACf,EAAoB,KAAK,QAAQ,CAGjC,IAAM,EAAe,MAAM,EAAsB,EAAM,KAAK,CAEtD,EAAO,EAAyB,EAAU,CAG5C,EAUJ,GATA,AAKE,EALE,MAAM,QAAQ,EAAa,EAAI,KAAK,GAAG,UAAU,EAAK,CAAC,aAAa,CAC3D,EAAgB,KAAK,GAAG,YAAY,EAAK,CAAC,CAAC,IAAK,GACzD,EAAK,KAAK,EAAM,EAAS,CAC1B,CAEU,EAAK,MAAM,IAAI,CAIxB,EAAS,OAAS,EACpB,MAAU,MAAM,qBAAqB,CAIvC,IAAM,EAAkB,EAAS,IAAK,GAAa,CAE5C,KAAK,GAAG,WAAW,EAAS,CAQ/B,KAAK,OAAO,KAAK,EAAO,QAAQ,iBAAiB,EAAS,MAAM,CAAC,EAPjE,KAAK,OAAO,MACV,EAAO,IACL,yCAAyC,EAAS,sEACnD,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAKtB,GAAI,CAEF,IAAM,EAAc,EAClB,KAAK,GAAG,aAAa,EAAU,OAAO,CACtC,EACA,EACD,CAED,OADA,KAAK,OAAO,KAAK,EAAO,MAAM,yBAAyB,EAAS,GAAG,CAAC,CAC7D,CACL,QAAS,EACT,KAAM,EAAS,MAAM,IAAI,CAAC,KAAK,CAAE,QAAQ,OAAQ,GAAG,CACrD,OACM,EAAK,CACZ,KAAK,OAAO,MACV,EAAO,IACL,qEAAqE,EAAI,UAC1E,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,GAEtB,CAGF,GAAI,OAAO,GAAiB,SAAU,CAEpC,GAAM,CAAC,EAAM,GAAG,GAAQ,EAAgB,KAAK,CAAE,aAAc,EAAQ,CAgBhE,MAZiB,EAAkB,CACtC,eACA,KAAM,EACN,SANe,EAAqB,EAAM,GAAG,EAMrC,CACR,yBACA,6BACA,WACA,gBAAiB,CAAC,CAAC,EACnB,OAAQ,KAAK,OACd,CAAC,GAIA,KAAK,OAAO,KACV,EAAO,IACL,iFAAiF,IAClF,CACF,CAED,KAAK,QAAQ,KAAK,EAAE,MAEjB,CAEL,GAAI,EAAgB,SAAW,GAAK,EAAgB,SAAW,EAAa,OAC1E,MAAU,MACR,sEACS,EAAgB,OAAO,WAC5B,EAAgB,SAAW,EAAI,GAAK,IACrC,OAAO,EAAa,OAAO,UAAU,EAAa,SAAW,EAAI,GAAK,MAC1E,CAGH,IAAM,EAA8B,EAAE,CACtC,MAAM,EAAU,EAAc,MAAO,EAAQ,IAAQ,CACnD,IAAM,EAAS,IAAI,EAAM,EAAE,GAAG,EAAa,OAAO,IAAI,EAAO,iBAAiB,IAC9E,KAAK,OAAO,KACV,EAAO,QAAQ,UAAU,EAAO,4CAA4C,CAC7E,CAGD,IAAM,EACJ,EAAgB,SAAW,EACvB,EAAgB,GAAG,QACnB,EAAgB,KAAM,GAAU,EAAM,OAAS,EAAO,iBAAiB,EAAE,QAG/E,GAAI,CAAC,EAAa,CAChB,KAAK,OAAO,MACV,EAAO,IACL,GAAG,EAAO,uDAAuD,EAAO,iBAAiB,IAC1F,CACF,CACD,EAAkB,KAAK,EAAO,iBAAiB,CAC/C,OAcE,MAXkB,EAAkB,CACtC,eACA,KAAM,EAAO,OACb,SAAU,EACV,WACA,yBACA,6BACA,kBACA,OAAQ,KAAK,OACd,CAAC,CAGA,KAAK,OAAO,KAAK,EAAO,MAAM,GAAG,EAAO,oCAAoC,CAAC,EAE7E,KAAK,OAAO,MAAM,EAAO,IAAI,GAAG,EAAO,+BAA+B,CAAC,CACvE,EAAkB,KAAK,EAAO,iBAAiB,GAEjD,CAEE,EAAkB,OAAS,IAC7B,KAAK,OAAO,KACV,EAAO,IACL,gCAAgC,EAAkB,KAChD,IACD,CAAC,0DAA0D,IAC7D,CACF,CAED,KAAK,QAAQ,KAAK,EAAE,EAKxB,KAAK,OAAO,KACV,EAAO,MAAM,uDAAuD,IAA0B,CAC/F"}
+{"version":3,"file":"impl-D1UogVAq.mjs","names":[],"sources":["../src/commands/inventory/push/impl.ts"],"sourcesContent":["import path from 'node:path';\n\nimport { buildTranscendGraphQLClient } from '@transcend-io/sdk';\nimport { mapSeries } from '@transcend-io/utils';\nimport colors from 'colors';\n\nimport { TranscendInput } from '../../../codecs.js';\nimport { ADMIN_DASH_INTEGRATIONS } from '../../../constants.js';\nimport type { LocalContext } from '../../../context.js';\nimport { validateTranscendAuth, filterFileNames } from '../../../lib/api-keys/index.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { syncConfigurationToTranscend } from '../../../lib/graphql/index.js';\nimport { parseVariablesFromString } from '../../../lib/helpers/parseVariablesFromString.js';\nimport { mergeTranscendInputs } from '../../../lib/mergeTranscendInputs.js';\nimport { parseTranscendYaml } from '../../../lib/readTranscendYaml.js';\n\n/**\n * Sync configuration to Transcend\n *\n * @param options - Options\n * @returns True if synced successfully, false if error occurs\n */\nasync function syncConfiguration({\n  transcendUrl,\n  auth,\n  pageSize,\n  publishToPrivacyCenter,\n  contents,\n  deleteExtraAttributeValues = false,\n  classifyService = false,\n  logger,\n}: {\n  /** Transcend YAML */\n  contents: TranscendInput;\n  /** Transcend URL */\n  transcendUrl: string;\n  /** API key */\n  auth: string;\n  /** Page size */\n  pageSize: number;\n  /** Skip privacy center publish step */\n  publishToPrivacyCenter: boolean;\n  /** classify data flow service if missing */\n  classifyService?: boolean;\n  /** Delete attributes when syncing */\n  deleteExtraAttributeValues?: boolean;\n  /** Logger for reporting sync progress and errors */\n  logger: LocalContext['logger'];\n}): Promise<boolean> {\n  const client = buildTranscendGraphQLClient(transcendUrl, auth);\n\n  // Sync to Transcend\n  try {\n    const result = await syncConfigurationToTranscend(contents, client, {\n      pageSize,\n      publishToPrivacyCenter,\n      classifyService,\n      deleteExtraAttributeValues,\n      logger,\n    });\n    if (!result.success) {\n      result.errors.forEach(({ resource, item, message }) => {\n        logger.error(\n          colors.red(`Failed to sync ${resource}${item ? ` \"${item}\"` : ''}: ${message}`),\n        );\n      });\n    }\n    return result.success;\n  } catch (err) {\n    logger.error(colors.red(`An unexpected error occurred syncing the schema: ${err.message}`));\n    return false;\n  }\n}\n\nexport interface PushCommandFlags {\n  auth: string;\n  file: string;\n  transcendUrl: string;\n  pageSize: number;\n  variables: string;\n  publishToPrivacyCenter: boolean;\n  classifyService: boolean;\n  deleteExtraAttributeValues: boolean;\n}\n\nexport async function push(\n  this: LocalContext,\n  {\n    file = './transcend.yml',\n    transcendUrl,\n    auth,\n    variables,\n    pageSize,\n    publishToPrivacyCenter,\n    classifyService,\n    deleteExtraAttributeValues,\n  }: PushCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  // Parse authentication as API key or path to list of API keys\n  const apiKeyOrList = await validateTranscendAuth(auth, this);\n\n  const vars = parseVariablesFromString(variables);\n\n  // check if we are being passed a list of API keys and a list of files\n  let fileList: string[];\n  if (Array.isArray(apiKeyOrList) && this.fs.lstatSync(file).isDirectory()) {\n    fileList = filterFileNames(this.fs.readdirSync(file)).map((filePath) =>\n      path.join(file, filePath),\n    );\n  } else {\n    fileList = file.split(',');\n  }\n\n  // Ensure at least one file is parsed\n  if (fileList.length < 1) {\n    throw new Error('No file specified!');\n  }\n\n  // eslint-disable-next-line array-callback-return,consistent-return\n  const transcendInputs = fileList.map((filePath) => {\n    // Ensure yaml file exists on disk\n    if (!this.fs.existsSync(filePath)) {\n      this.logger.error(\n        colors.red(\n          `The file path does not exist on disk: ${filePath}. You can specify the filepath using --file=./examples/transcend.yml`,\n        ),\n      );\n      this.process.exit(1);\n    } else {\n      this.logger.info(colors.magenta(`Reading file \"${filePath}\"...`));\n    }\n\n    try {\n      // Read in the yaml file and validate it's shape\n      const newContents = parseTranscendYaml(\n        this.fs.readFileSync(filePath, 'utf8'),\n        vars,\n        filePath,\n      );\n      this.logger.info(colors.green(`Successfully read in \"${filePath}\"`));\n      return {\n        content: newContents,\n        name: filePath.split('/').pop()!.replace('.yml', ''),\n      };\n    } catch (err) {\n      this.logger.error(\n        colors.red(\n          `The shape of your yaml file is invalid with the following errors: ${err.message}`,\n        ),\n      );\n      this.process.exit(1);\n    }\n  });\n\n  // process a single API key\n  if (typeof apiKeyOrList === 'string') {\n    // if passed multiple inputs, merge them together\n    const [base, ...rest] = transcendInputs.map(({ content }) => content);\n    const contents = mergeTranscendInputs(base, ...rest);\n\n    // sync the configuration\n    const success = await syncConfiguration({\n      transcendUrl,\n      auth: apiKeyOrList,\n      contents,\n      publishToPrivacyCenter,\n      deleteExtraAttributeValues,\n      pageSize,\n      classifyService: !!classifyService,\n      logger: this.logger,\n    });\n\n    // exist with error code\n    if (!success) {\n      this.logger.info(\n        colors.red(\n          `Sync encountered errors. View output above for more information, or check out ${ADMIN_DASH_INTEGRATIONS}`,\n        ),\n      );\n\n      this.process.exit(1);\n    }\n  } else {\n    // if passed multiple inputs, expect them to be one per instance\n    if (transcendInputs.length !== 1 && transcendInputs.length !== apiKeyOrList.length) {\n      throw new Error(\n        'Expected list of yml files to be equal to the list of API keys.' +\n          `Got ${transcendInputs.length} YML file${\n            transcendInputs.length === 1 ? '' : 's'\n          } and ${apiKeyOrList.length} API key${apiKeyOrList.length === 1 ? '' : 's'}`,\n      );\n    }\n\n    const encounteredErrors: string[] = [];\n    await mapSeries(apiKeyOrList, async (apiKey, ind) => {\n      const prefix = `[${ind + 1}/${apiKeyOrList.length}][${apiKey.organizationName}] `;\n      this.logger.info(\n        colors.magenta(`~~~\\n\\n${prefix}Attempting to push configuration...\\n\\n~~~`),\n      );\n\n      // use the merged contents if 1 yml passed, else use the contents that map to that organization\n      const useContents =\n        transcendInputs.length === 1\n          ? transcendInputs[0].content\n          : transcendInputs.find((input) => input.name === apiKey.organizationName)?.content;\n\n      // Throw error if cannot find a yml file matching that organization name\n      if (!useContents) {\n        this.logger.error(\n          colors.red(\n            `${prefix}Failed to find transcend.yml file for organization: \"${apiKey.organizationName}\".`,\n          ),\n        );\n        encounteredErrors.push(apiKey.organizationName);\n        return;\n      }\n\n      const success = await syncConfiguration({\n        transcendUrl,\n        auth: apiKey.apiKey,\n        contents: useContents,\n        pageSize,\n        publishToPrivacyCenter,\n        deleteExtraAttributeValues,\n        classifyService,\n        logger: this.logger,\n      });\n\n      if (success) {\n        this.logger.info(colors.green(`${prefix}Successfully pushed configuration!`));\n      } else {\n        this.logger.error(colors.red(`${prefix}Failed to sync configuration.`));\n        encounteredErrors.push(apiKey.organizationName);\n      }\n    });\n\n    if (encounteredErrors.length > 0) {\n      this.logger.info(\n        colors.red(\n          `Sync encountered errors for \"${encounteredErrors.join(\n            ',',\n          )}\". View output above for more information, or check out ${ADMIN_DASH_INTEGRATIONS}`,\n        ),\n      );\n\n      this.process.exit(1);\n    }\n  }\n\n  // Indicate success\n  this.logger.info(\n    colors.green(`Successfully synced yaml file to Transcend! View at ${ADMIN_DASH_INTEGRATIONS}`),\n  );\n}\n"],"mappings":"shBAsBA,eAAe,EAAkB,CAC/B,eACA,OACA,WACA,yBACA,WACA,6BAA6B,GAC7B,kBAAkB,GAClB,UAkBmB,CACnB,IAAM,EAAS,EAA4B,EAAc,EAAK,CAG9D,GAAI,CACF,IAAM,EAAS,MAAM,EAA6B,EAAU,EAAQ,CAClE,WACA,yBACA,kBACA,6BACA,SACD,CAAC,CAQF,OAPK,EAAO,SACV,EAAO,OAAO,SAAS,CAAE,WAAU,OAAM,aAAc,CACrD,EAAO,MACL,EAAO,IAAI,kBAAkB,IAAW,EAAO,KAAK,EAAK,GAAK,GAAG,IAAI,IAAU,CAChF,EACD,CAEG,EAAO,cACP,EAAK,CAEZ,OADA,EAAO,MAAM,EAAO,IAAI,oDAAoD,EAAI,UAAU,CAAC,CACpF,IAeX,eAAsB,EAEpB,CACE,OAAO,kBACP,eACA,OACA,YACA,WACA,yBACA,kBACA,8BAEa,CACf,EAAoB,KAAK,QAAQ,CAGjC,IAAM,EAAe,MAAM,EAAsB,EAAM,KAAK,CAEtD,EAAO,EAAyB,EAAU,CAG5C,EAUJ,GATA,AAKE,EALE,MAAM,QAAQ,EAAa,EAAI,KAAK,GAAG,UAAU,EAAK,CAAC,aAAa,CAC3D,EAAgB,KAAK,GAAG,YAAY,EAAK,CAAC,CAAC,IAAK,GACzD,EAAK,KAAK,EAAM,EAAS,CAC1B,CAEU,EAAK,MAAM,IAAI,CAIxB,EAAS,OAAS,EACpB,MAAU,MAAM,qBAAqB,CAIvC,IAAM,EAAkB,EAAS,IAAK,GAAa,CAE5C,KAAK,GAAG,WAAW,EAAS,CAQ/B,KAAK,OAAO,KAAK,EAAO,QAAQ,iBAAiB,EAAS,MAAM,CAAC,EAPjE,KAAK,OAAO,MACV,EAAO,IACL,yCAAyC,EAAS,sEACnD,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAKtB,GAAI,CAEF,IAAM,EAAc,EAClB,KAAK,GAAG,aAAa,EAAU,OAAO,CACtC,EACA,EACD,CAED,OADA,KAAK,OAAO,KAAK,EAAO,MAAM,yBAAyB,EAAS,GAAG,CAAC,CAC7D,CACL,QAAS,EACT,KAAM,EAAS,MAAM,IAAI,CAAC,KAAK,CAAE,QAAQ,OAAQ,GAAG,CACrD,OACM,EAAK,CACZ,KAAK,OAAO,MACV,EAAO,IACL,qEAAqE,EAAI,UAC1E,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,GAEtB,CAGF,GAAI,OAAO,GAAiB,SAAU,CAEpC,GAAM,CAAC,EAAM,GAAG,GAAQ,EAAgB,KAAK,CAAE,aAAc,EAAQ,CAgBhE,MAZiB,EAAkB,CACtC,eACA,KAAM,EACN,SANe,EAAqB,EAAM,GAAG,EAMrC,CACR,yBACA,6BACA,WACA,gBAAiB,CAAC,CAAC,EACnB,OAAQ,KAAK,OACd,CAAC,GAIA,KAAK,OAAO,KACV,EAAO,IACL,iFAAiF,IAClF,CACF,CAED,KAAK,QAAQ,KAAK,EAAE,MAEjB,CAEL,GAAI,EAAgB,SAAW,GAAK,EAAgB,SAAW,EAAa,OAC1E,MAAU,MACR,sEACS,EAAgB,OAAO,WAC5B,EAAgB,SAAW,EAAI,GAAK,IACrC,OAAO,EAAa,OAAO,UAAU,EAAa,SAAW,EAAI,GAAK,MAC1E,CAGH,IAAM,EAA8B,EAAE,CACtC,MAAM,EAAU,EAAc,MAAO,EAAQ,IAAQ,CACnD,IAAM,EAAS,IAAI,EAAM,EAAE,GAAG,EAAa,OAAO,IAAI,EAAO,iBAAiB,IAC9E,KAAK,OAAO,KACV,EAAO,QAAQ,UAAU,EAAO,4CAA4C,CAC7E,CAGD,IAAM,EACJ,EAAgB,SAAW,EACvB,EAAgB,GAAG,QACnB,EAAgB,KAAM,GAAU,EAAM,OAAS,EAAO,iBAAiB,EAAE,QAG/E,GAAI,CAAC,EAAa,CAChB,KAAK,OAAO,MACV,EAAO,IACL,GAAG,EAAO,uDAAuD,EAAO,iBAAiB,IAC1F,CACF,CACD,EAAkB,KAAK,EAAO,iBAAiB,CAC/C,OAcE,MAXkB,EAAkB,CACtC,eACA,KAAM,EAAO,OACb,SAAU,EACV,WACA,yBACA,6BACA,kBACA,OAAQ,KAAK,OACd,CAAC,CAGA,KAAK,OAAO,KAAK,EAAO,MAAM,GAAG,EAAO,oCAAoC,CAAC,EAE7E,KAAK,OAAO,MAAM,EAAO,IAAI,GAAG,EAAO,+BAA+B,CAAC,CACvE,EAAkB,KAAK,EAAO,iBAAiB,GAEjD,CAEE,EAAkB,OAAS,IAC7B,KAAK,OAAO,KACV,EAAO,IACL,gCAAgC,EAAkB,KAChD,IACD,CAAC,0DAA0D,IAC7D,CACF,CAED,KAAK,QAAQ,KAAK,EAAE,EAKxB,KAAK,OAAO,KACV,EAAO,MAAM,uDAAuD,IAA0B,CAC/F"}

package/dist/{impl-B37wtYBz.mjs → impl-D1f9mJL_.mjs}

@@ -1,2 +1,2 @@
-import{t as e}from"./pullManualEnrichmentIdentifiersToCsv-BbQc9MDM.mjs";import{t}from"./done-input-validation-BUz-aVC5.mjs";async function n({auth:n,transcendUrl:r,file:i,concurrency:a,actions:o,sombraAuth:s}){t(this.process),await e({file:i,transcendUrl:r,concurrency:a,requestActions:o,auth:n,sombraAuth:s})}export{n as pullIdentifiers};
-//# sourceMappingURL=impl-B37wtYBz.mjs.map
+import{t as e}from"./pullManualEnrichmentIdentifiersToCsv-DMC5CQtE.mjs";import{t}from"./done-input-validation-LiTaCEzF.mjs";async function n({auth:n,transcendUrl:r,file:i,concurrency:a,actions:o,sombraAuth:s}){t(this.process),await e({file:i,transcendUrl:r,concurrency:a,requestActions:o,auth:n,sombraAuth:s})}export{n as pullIdentifiers};
+//# sourceMappingURL=impl-D1f9mJL_.mjs.map

package/dist/{impl-B37wtYBz.mjs.map → impl-D1f9mJL_.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"impl-B37wtYBz.mjs","names":[],"sources":["../src/commands/request/preflight/pull-identifiers/impl.ts"],"sourcesContent":["import type { RequestAction } from '@transcend-io/privacy-types';\n\nimport type { LocalContext } from '../../../../context.js';\nimport { doneInputValidation } from '../../../../lib/cli/done-input-validation.js';\nimport { pullManualEnrichmentIdentifiersToCsv } from '../../../../lib/manual-enrichment/index.js';\n\nexport interface PullIdentifiersCommandFlags {\n  auth: string;\n  sombraAuth?: string;\n  transcendUrl: string;\n  file: string;\n  actions?: RequestAction[];\n  concurrency: number;\n}\n\nexport async function pullIdentifiers(\n  this: LocalContext,\n  { auth, transcendUrl, file, concurrency, actions, sombraAuth }: PullIdentifiersCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await pullManualEnrichmentIdentifiersToCsv({\n    file,\n    transcendUrl,\n    concurrency,\n    requestActions: actions,\n    auth,\n    sombraAuth,\n  });\n}\n"],"mappings":"4HAeA,eAAsB,EAEpB,CAAE,OAAM,eAAc,OAAM,cAAa,UAAS,cACnC,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAAqC,CACzC,OACA,eACA,cACA,eAAgB,EAChB,OACA,aACD,CAAC"}
+{"version":3,"file":"impl-D1f9mJL_.mjs","names":[],"sources":["../src/commands/request/preflight/pull-identifiers/impl.ts"],"sourcesContent":["import type { RequestAction } from '@transcend-io/privacy-types';\n\nimport type { LocalContext } from '../../../../context.js';\nimport { doneInputValidation } from '../../../../lib/cli/done-input-validation.js';\nimport { pullManualEnrichmentIdentifiersToCsv } from '../../../../lib/manual-enrichment/index.js';\n\nexport interface PullIdentifiersCommandFlags {\n  auth: string;\n  sombraAuth?: string;\n  transcendUrl: string;\n  file: string;\n  actions?: RequestAction[];\n  concurrency: number;\n}\n\nexport async function pullIdentifiers(\n  this: LocalContext,\n  { auth, transcendUrl, file, concurrency, actions, sombraAuth }: PullIdentifiersCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await pullManualEnrichmentIdentifiersToCsv({\n    file,\n    transcendUrl,\n    concurrency,\n    requestActions: actions,\n    auth,\n    sombraAuth,\n  });\n}\n"],"mappings":"4HAeA,eAAsB,EAEpB,CAAE,OAAM,eAAc,OAAM,cAAa,UAAS,cACnC,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAAqC,CACzC,OACA,eACA,cACA,eAAgB,EAChB,OACA,aACD,CAAC"}

package/dist/{impl-Cl9ndadE.mjs → impl-DJcNhpbx.mjs}

@@ -1,2 +1,2 @@
-import{l as e}from"./constants-XH8NIJGC.mjs";import{t}from"./generateCrossAccountApiKeys-C1iD6Las.mjs";import{t as n}from"./done-input-validation-BUz-aVC5.mjs";async function r({email:r,password:i,apiKeyTitle:a,file:o,scopes:s,deleteExistingApiKey:c,createNewApiKey:l,parentOrganizationId:u,transcendUrl:d}){n(this.process);let{errors:f,apiKeys:p}=await t({transcendUrl:d,password:i,email:r,parentOrganizationId:u,deleteExistingApiKey:c,createNewApiKey:l,apiKeyTitle:a,scopes:s.map(t=>e[t].name)});this.fs.writeFileSync(o,`${JSON.stringify(p,null,2)}\n`),f.length>0&&this.process.exit(1)}export{r as generateApiKeys};
-//# sourceMappingURL=impl-Cl9ndadE.mjs.map
+import{l as e}from"./constants-BRsj50Nb.mjs";import{t}from"./generateCrossAccountApiKeys-pWTrIUE6.mjs";import{t as n}from"./done-input-validation-LiTaCEzF.mjs";async function r({email:r,password:i,apiKeyTitle:a,file:o,scopes:s,deleteExistingApiKey:c,createNewApiKey:l,parentOrganizationId:u,transcendUrl:d}){n(this.process);let{errors:f,apiKeys:p}=await t({transcendUrl:d,password:i,email:r,parentOrganizationId:u,deleteExistingApiKey:c,createNewApiKey:l,apiKeyTitle:a,scopes:s.map(t=>e[t].name)});this.fs.writeFileSync(o,`${JSON.stringify(p,null,2)}\n`),f.length>0&&this.process.exit(1)}export{r as generateApiKeys};
+//# sourceMappingURL=impl-DJcNhpbx.mjs.map

package/dist/{impl-Cl9ndadE.mjs.map → impl-DJcNhpbx.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"impl-Cl9ndadE.mjs","names":[],"sources":["../src/commands/admin/generate-api-keys/impl.ts"],"sourcesContent":["import { ScopeName } from '@transcend-io/privacy-types';\n\nimport { SCOPES_BY_TITLE } from '../../../constants.js';\nimport type { LocalContext } from '../../../context.js';\nimport { generateCrossAccountApiKeys } from '../../../lib/api-keys/index.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\n\n// Command flag interface\nexport interface GenerateApiKeysCommandFlags {\n  email: string;\n  password: string;\n  apiKeyTitle: string;\n  file: string;\n  scopes: string[];\n  deleteExistingApiKey: boolean;\n  createNewApiKey: boolean;\n  parentOrganizationId?: string;\n  transcendUrl: string;\n}\n\n// Command implementation\nexport async function generateApiKeys(\n  this: LocalContext,\n  {\n    email,\n    password,\n    apiKeyTitle,\n    file,\n    scopes,\n    deleteExistingApiKey,\n    createNewApiKey,\n    parentOrganizationId,\n    transcendUrl,\n  }: GenerateApiKeysCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  const scopeNames = scopes.map((scopeTitle) => SCOPES_BY_TITLE[scopeTitle].name as ScopeName);\n\n  // Upload privacy requests\n  const { errors, apiKeys } = await generateCrossAccountApiKeys({\n    transcendUrl,\n    password,\n    email,\n    parentOrganizationId,\n    deleteExistingApiKey,\n    createNewApiKey,\n    apiKeyTitle,\n    scopes: scopeNames,\n  });\n\n  // Write to disk\n  this.fs.writeFileSync(file, `${JSON.stringify(apiKeys, null, 2)}\\n`);\n  if (errors.length > 0) {\n    this.process.exit(1);\n  }\n}\n"],"mappings":"gKAqBA,eAAsB,EAEpB,CACE,QACA,WACA,cACA,OACA,SACA,uBACA,kBACA,uBACA,gBAEa,CACf,EAAoB,KAAK,QAAQ,CAKjC,GAAM,CAAE,SAAQ,WAAY,MAAM,EAA4B,CAC5D,eACA,WACA,QACA,uBACA,uBACA,kBACA,cACA,OAXiB,EAAO,IAAK,GAAe,EAAgB,GAAY,KAWtD,CACnB,CAAC,CAGF,KAAK,GAAG,cAAc,EAAM,GAAG,KAAK,UAAU,EAAS,KAAM,EAAE,CAAC,IAAI,CAChE,EAAO,OAAS,GAClB,KAAK,QAAQ,KAAK,EAAE"}
+{"version":3,"file":"impl-DJcNhpbx.mjs","names":[],"sources":["../src/commands/admin/generate-api-keys/impl.ts"],"sourcesContent":["import { ScopeName } from '@transcend-io/privacy-types';\n\nimport { SCOPES_BY_TITLE } from '../../../constants.js';\nimport type { LocalContext } from '../../../context.js';\nimport { generateCrossAccountApiKeys } from '../../../lib/api-keys/index.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\n\n// Command flag interface\nexport interface GenerateApiKeysCommandFlags {\n  email: string;\n  password: string;\n  apiKeyTitle: string;\n  file: string;\n  scopes: string[];\n  deleteExistingApiKey: boolean;\n  createNewApiKey: boolean;\n  parentOrganizationId?: string;\n  transcendUrl: string;\n}\n\n// Command implementation\nexport async function generateApiKeys(\n  this: LocalContext,\n  {\n    email,\n    password,\n    apiKeyTitle,\n    file,\n    scopes,\n    deleteExistingApiKey,\n    createNewApiKey,\n    parentOrganizationId,\n    transcendUrl,\n  }: GenerateApiKeysCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  const scopeNames = scopes.map((scopeTitle) => SCOPES_BY_TITLE[scopeTitle].name as ScopeName);\n\n  // Upload privacy requests\n  const { errors, apiKeys } = await generateCrossAccountApiKeys({\n    transcendUrl,\n    password,\n    email,\n    parentOrganizationId,\n    deleteExistingApiKey,\n    createNewApiKey,\n    apiKeyTitle,\n    scopes: scopeNames,\n  });\n\n  // Write to disk\n  this.fs.writeFileSync(file, `${JSON.stringify(apiKeys, null, 2)}\\n`);\n  if (errors.length > 0) {\n    this.process.exit(1);\n  }\n}\n"],"mappings":"gKAqBA,eAAsB,EAEpB,CACE,QACA,WACA,cACA,OACA,SACA,uBACA,kBACA,uBACA,gBAEa,CACf,EAAoB,KAAK,QAAQ,CAKjC,GAAM,CAAE,SAAQ,WAAY,MAAM,EAA4B,CAC5D,eACA,WACA,QACA,uBACA,uBACA,kBACA,cACA,OAXiB,EAAO,IAAK,GAAe,EAAgB,GAAY,KAWtD,CACnB,CAAC,CAGF,KAAK,GAAG,cAAc,EAAM,GAAG,KAAK,UAAU,EAAS,KAAM,EAAE,CAAC,IAAI,CAChE,EAAO,OAAS,GAClB,KAAK,QAAQ,KAAK,EAAE"}

package/dist/impl-DQG1pMzD2.mjs

@@ -0,0 +1,2 @@
+import{i as e}from"./paths-J5KScOaQ.mjs";import{o as t}from"./project-discovery-CWRjlFnC.mjs";import{t as n}from"./parseVariablesFromString-6TYW65LF.mjs";import{t as r}from"./validateTranscendAuth-D-dDINof.mjs";import{t as i}from"./done-input-validation-LiTaCEzF.mjs";import{t as a}from"./missing-manifest-D8y1VL4p.mjs";import{c as o,s,t as c}from"./project-discovery-BkHpTXDx.mjs";import{t as l}from"./command-output-BJcDRXNr.mjs";import{n as u}from"./command-output-BRfF3YFv.mjs";import{CustomFunctionPayloadType as d,CustomFunctionType as f}from"@transcend-io/privacy-types";import p from"colors";import{buildTranscendGraphQLClient as m,createSombraGotInstance as h,fetchAllCustomFunctions as g,resolveEffectiveSombraId as _,resolveExistingCustomFunction as v,syncCustomFunction as y}from"@transcend-io/sdk";import{mapSeries as b}from"@transcend-io/utils";async function x({auth:x,sombraAuth:S,transcendUrl:C,manifest:w,variables:T,dryRun:E,json:D,promote:O,force:k,skipTests:A,updateManifest:j,sombraId:M},N){i(this.process);let P=this.process.cwd(),{manifestDirectory:F,manifestPath:I}=e(P,{...N?{directory:N}:{},...w?{manifest:w}:{}});if(!this.fs.existsSync(I)){let e=a({cwd:P,manifestPath:I,discoveredManifestPaths:c(this,P),command:`push`});this.logger.error(p.red(e)),this.process.exit(1)}let L=r(x,this);Array.isArray(L)&&(this.logger.error(p.red(`transcend custom-functions push does not support a list of API keys — pass a single API key.`)),this.process.exit(1));let R=L,z=l(this.logger,D),B=n(T);z.info(p.magenta(`Reading manifest "${I}"...`));let V=s(I,B,e=>t(this,F,e));z.info(p.green(`Found ${V.length} custom function(s) in "${I}"`));let H=m(C,R),U=await g(H,{logger:z}),W=new Map,G=async(e,t)=>{let n=`${e??``}\u0000${t??``}`,r=W.get(n);if(r)return r;z.info(p.magenta(`Connecting to the ${e?`Sombra gateway "${e}"`:`primary Sombra gateway`} to sign code...`));let i=await h(C,R,{logger:z,sombraApiKey:t,...e?{sombraId:e}:{}});return W.set(n,i),i},K=e=>{if(!e.sombraAuthEnv)return S;let t=this.process.env[e.sombraAuthEnv];if(!t)throw Error(`Custom function "${e.name}" sets sombra-auth-env: ${e.sombraAuthEnv}, but that environment variable is not set. Export it (e.g. from a CI secret) before pushing.`);return t},q=[];if(await b(V,async e=>{try{let t=_(e,v(U,e),M),n=await y(H,{input:e,sombra:E?void 0:await G(t,K(e)),defaultSombraId:M,existing:U,promote:O,dryRun:E,force:k,...!A&&e.testPayloads!==void 0?{testPayloads:e.testPayloads}:{},logger:z});q.push({name:e.name,result:n});let r=n.versionNumber?` (version ${n.versionNumber})`:``,i=n.changedFields.length>0?` [${n.changedFields.join(`, `)}]`:``;switch(n.outcome){case`created`:n.createdDataSilo&&n.dataSiloId&&z.info(p.green(`Created DSR integration (data silo ${n.dataSiloId}) for "${e.name}"`)),z.info(p.green(`Created custom function "${e.name}"${r}`));break;case`updated`:z.info(p.green(`Pushed new revision to "${e.name}"${r}${i}${n.promoted?` and promoted to active`:` as a draft`}`));break;case`metadata-updated`:z.info(p.green(`Updated metadata for "${e.name}"${i} — code unchanged, no new revision`));break;case`skipped`:z.info(p.yellow(`Skipped "${e.name}" — no changes detected (env variable values cannot be diffed; use --force if only values changed)`));break;case`would-create`:z.info(p.cyan(`[dry run] Would create custom function "${e.name}"${e.type===f.Dsr&&!e.dataSiloId?` and its DSR integration (data silo)`:``}`));break;case`would-update`:z.info(p.cyan(`[dry run] Would push a new revision to "${e.name}"${i}`));break;case`test-failed`:{let t=(n.testResults??[]).filter(({passed:e})=>!e);z.error(p.red(`Rejected "${e.name}" — ${t.length} of ${n.testResults?.length??0} test run(s) failed`)),t.forEach(({payloadType:e,result:t})=>{let n=e?`[${e}] `:``;z.error(p.red(`  ${n}${t.error?t.error.message:`failed with exit code ${t.exitCode}`}`)),t.logs.forEach(({file:e,message:t})=>{z.error(p.red(`    [${e}] ${t}`))})}),n.createdDataSilo&&z.error(p.red(`  The DSR integration (data silo) created for "${e.name}" was rolled back.`));break}}if(!A&&(e.testPayloads===void 0||e.testPayloads.length===0)&&(n.outcome===`created`||n.outcome===`updated`)&&z.warn(p.yellow(`Custom function "${e.name}" was pushed without a test run — add a test-payload to its manifest entry to enable test-before-promote.`)),!A&&e.type===f.Dsr&&e.testPayloads!==void 0&&e.testPayloads.length>0&&(n.outcome===`created`||n.outcome===`updated`)){let t=new Set(e.testPayloads.map(({payloadType:e})=>e??d.DataPoint));if(t.size===1){let[n]=t,r=n===d.DataPoint?d.RequestEnricher:d.DataPoint;z.warn(p.yellow(`DSR custom function "${e.name}" only tests its ${n} export — if it also implements the ${r} export, add a test payload with payload-type: ${r} so both entry points are tested on every push.`))}}}catch(t){q.push({name:e.name,error:t}),z.error(p.red(`Failed to sync custom function "${e.name}": ${t.message}`))}}),j&&!E){let e=o(I,V.map((e,t)=>{let n=q[t]?.result;if(!n)return;let r={...!e.id&&n.customFunctionId?{id:n.customFunctionId}:{},...!e.dataSiloId&&n.dataSiloId?{dataSiloId:n.dataSiloId}:{}};return Object.keys(r).length>0?r:void 0}));e>0&&z.info(p.green(`Wrote assigned id(s) back to ${e} manifest entr(ies) in "${I}" — commit this change so future pushes match by ID.`))}let J=u(I,E,q);if(D)this.process.stdout.write(`${JSON.stringify(J)}\n`);else{let{summary:e}=J;z.info(p.magenta(`Custom function sync complete: ${e.created} created, ${e.updated} updated, ${e.metadataUpdated} metadata-only, ${e.skipped} skipped, ${e.rejected} rejected (test failed), ${e.failed} failed${E?` (dry run)`:``}`))}J.status===`failed`&&this.process.exit(1)}export{x as push};
+//# sourceMappingURL=impl-DQG1pMzD2.mjs.map

package/dist/impl-DQG1pMzD2.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"impl-DQG1pMzD2.mjs","names":[],"sources":["../src/commands/custom-functions/push/impl.ts"],"sourcesContent":["import { CustomFunctionPayloadType, CustomFunctionType } from '@transcend-io/privacy-types';\nimport {\n  buildTranscendGraphQLClient,\n  createSombraGotInstance,\n  fetchAllCustomFunctions,\n  resolveEffectiveSombraId,\n  resolveExistingCustomFunction,\n  syncCustomFunction,\n  type CustomFunctionSyncResult,\n} from '@transcend-io/sdk';\nimport { mapSeries } from '@transcend-io/utils';\nimport colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { validateTranscendAuth } from '../../../lib/api-keys/index.js';\nimport { selectCommandLogger } from '../../../lib/cli/command-output.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { buildCustomFunctionPushJsonResult } from '../../../lib/custom-functions/command-output.js';\nimport {\n  readCustomFunctionsManifest,\n  writeCustomFunctionIdsToManifest,\n} from '../../../lib/custom-functions/manifest.js';\nimport { formatMissingManifestMessage } from '../../../lib/custom-functions/missing-manifest.js';\nimport { resolveCustomFunctionProjectPaths } from '../../../lib/custom-functions/paths.js';\nimport { discoverCustomFunctionManifests } from '../../../lib/custom-functions/project-discovery.js';\nimport { parseVariablesFromString } from '../../../lib/helpers/parseVariablesFromString.js';\nimport { assertPathPhysicallyContained } from '../../../lib/scaffolding/path-safety.js';\n\nexport interface CustomFunctionsPushCommandFlags {\n  /** Transcend API key. */\n  auth: string;\n  /** Optional Sombra internal key. */\n  sombraAuth?: string;\n  /** Transcend backend URL. */\n  transcendUrl: string;\n  /** Explicit manifest path. */\n  manifest?: string;\n  /** Manifest variable substitutions. */\n  variables: string;\n  /** Preview remote changes without applying them. */\n  dryRun: boolean;\n  /** Emit stable JSON output. */\n  json: boolean;\n  /** Promote new revisions to active. */\n  promote: boolean;\n  /** Push even when no changes can be detected. */\n  force: boolean;\n  /** Skip test payload execution. */\n  skipTests: boolean;\n  /** Write assigned IDs back to the manifest. */\n  updateManifest: boolean;\n  /** Default Sombra gateway ID. */\n  sombraId?: string;\n}\n\nexport async function push(\n  this: LocalContext,\n  {\n    auth,\n    sombraAuth,\n    transcendUrl,\n    manifest,\n    variables,\n    dryRun,\n    json,\n    promote,\n    force,\n    skipTests,\n    updateManifest,\n    sombraId,\n  }: CustomFunctionsPushCommandFlags,\n  directory?: string,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  const cwd = this.process.cwd();\n  const { manifestDirectory, manifestPath } = resolveCustomFunctionProjectPaths(cwd, {\n    ...(directory ? { directory } : {}),\n    ...(manifest ? { manifest } : {}),\n  });\n\n  // Read and validate the manifest before performing auth or network setup.\n  if (!this.fs.existsSync(manifestPath)) {\n    const message = formatMissingManifestMessage({\n      cwd,\n      manifestPath,\n      discoveredManifestPaths: discoverCustomFunctionManifests(this, cwd),\n      command: 'push',\n    });\n    this.logger.error(colors.red(message));\n    this.process.exit(1);\n  }\n\n  // This command operates on a single Transcend instance\n  const apiKeyOrList = validateTranscendAuth(auth, this);\n  if (Array.isArray(apiKeyOrList)) {\n    this.logger.error(\n      colors.red(\n        'transcend custom-functions push does not support a list of API keys — pass a single API key.',\n      ),\n    );\n    this.process.exit(1);\n  }\n  const apiKey = apiKeyOrList as string;\n  const commandLogger = selectCommandLogger(this.logger, json);\n\n  const vars = parseVariablesFromString(variables);\n  commandLogger.info(colors.magenta(`Reading manifest \"${manifestPath}\"...`));\n  const configs = readCustomFunctionsManifest(manifestPath, vars, (path) =>\n    assertPathPhysicallyContained(this, manifestDirectory, path),\n  );\n  commandLogger.info(\n    colors.green(`Found ${configs.length} custom function(s) in \"${manifestPath}\"`),\n  );\n\n  const client = buildTranscendGraphQLClient(transcendUrl, apiKey);\n\n  // Fetch existing functions once to diff against\n  const existing = await fetchAllCustomFunctions(client, { logger: commandLogger });\n\n  // Each custom function belongs to a single Sombra gateway whose keys sign\n  // its code, so code must be signed against that specific gateway's customer\n  // ingress. Cache one connection per distinct gateway + internal key across\n  // the run.\n  type SombraGot = Awaited<ReturnType<typeof createSombraGotInstance>>;\n  const sombraByGateway = new Map<string, SombraGot>();\n  const getSombraForGateway = async (\n    gatewaySombraId: string | undefined,\n    sombraApiKey: string | undefined,\n  ): Promise<SombraGot> => {\n    const key = `${gatewaySombraId ?? ''}\\u0000${sombraApiKey ?? ''}`;\n    const cached = sombraByGateway.get(key);\n    if (cached) {\n      return cached;\n    }\n    commandLogger.info(\n      colors.magenta(\n        `Connecting to the ${\n          gatewaySombraId ? `Sombra gateway \"${gatewaySombraId}\"` : 'primary Sombra gateway'\n        } to sign code...`,\n      ),\n    );\n    const sombra = await createSombraGotInstance(transcendUrl, apiKey, {\n      logger: commandLogger,\n      sombraApiKey,\n      ...(gatewaySombraId ? { sombraId: gatewaySombraId } : {}),\n    });\n    sombraByGateway.set(key, sombra);\n    return sombra;\n  };\n\n  /**\n   * Resolve the Sombra internal key for a manifest entry: the env variable\n   * named by `sombra-auth-env` when set (which must be exported), else the\n   * `--sombraAuth` flag.\n   *\n   * @param input - The manifest entry\n   * @returns The internal key to authenticate with, if any\n   */\n  const resolveEntrySombraAuth = (input: {\n    /** Function name, for error messages */\n    name: string;\n    /** Env variable name holding the gateway's internal key */\n    sombraAuthEnv?: string;\n  }): string | undefined => {\n    if (!input.sombraAuthEnv) {\n      return sombraAuth;\n    }\n    const value = this.process.env[input.sombraAuthEnv];\n    if (!value) {\n      throw new Error(\n        `Custom function \"${input.name}\" sets sombra-auth-env: ${input.sombraAuthEnv}, ` +\n          'but that environment variable is not set. Export it (e.g. from a CI secret) ' +\n          'before pushing.',\n      );\n    }\n    return value;\n  };\n\n  // Sync each function in order\n  const results: { name: string; result?: CustomFunctionSyncResult; error?: Error }[] = [];\n  await mapSeries(configs, async (input) => {\n    try {\n      // Resolve the gateway this function belongs to: manifest sombra-id,\n      // else the existing function's gateway, else --sombraId, else primary.\n      // Also validates manifest-vs-existing gateway mismatches.\n      const effectiveSombraId = resolveEffectiveSombraId(\n        input,\n        resolveExistingCustomFunction(existing, input),\n        sombraId,\n      );\n      const result = await syncCustomFunction(client, {\n        input,\n        sombra: dryRun\n          ? undefined\n          : await getSombraForGateway(effectiveSombraId, resolveEntrySombraAuth(input)),\n        defaultSombraId: sombraId,\n        existing,\n        promote,\n        dryRun,\n        force,\n        // Test the freshly signed code before pushing; every payload must\n        // pass or the function is rejected. Dry runs never sign, so nothing\n        // is tested either.\n        ...(!skipTests && input.testPayloads !== undefined\n          ? { testPayloads: input.testPayloads }\n          : {}),\n        logger: commandLogger,\n      });\n      results.push({ name: input.name, result });\n\n      const suffix = result.versionNumber ? ` (version ${result.versionNumber})` : '';\n      const changes =\n        result.changedFields.length > 0 ? ` [${result.changedFields.join(', ')}]` : '';\n      switch (result.outcome) {\n        case 'created':\n          if (result.createdDataSilo && result.dataSiloId) {\n            commandLogger.info(\n              colors.green(\n                `Created DSR integration (data silo ${result.dataSiloId}) for \"${input.name}\"`,\n              ),\n            );\n          }\n          commandLogger.info(colors.green(`Created custom function \"${input.name}\"${suffix}`));\n          break;\n        case 'updated':\n          commandLogger.info(\n            colors.green(\n              `Pushed new revision to \"${input.name}\"${suffix}${changes}${\n                result.promoted ? ' and promoted to active' : ' as a draft'\n              }`,\n            ),\n          );\n          break;\n        case 'metadata-updated':\n          commandLogger.info(\n            colors.green(\n              `Updated metadata for \"${input.name}\"${changes} — code unchanged, no new revision`,\n            ),\n          );\n          break;\n        case 'skipped':\n          commandLogger.info(\n            colors.yellow(\n              `Skipped \"${input.name}\" — no changes detected ` +\n                '(env variable values cannot be diffed; use --force if only values changed)',\n            ),\n          );\n          break;\n        case 'would-create':\n          commandLogger.info(\n            colors.cyan(\n              `[dry run] Would create custom function \"${input.name}\"${\n                input.type === CustomFunctionType.Dsr && !input.dataSiloId\n                  ? ' and its DSR integration (data silo)'\n                  : ''\n              }`,\n            ),\n          );\n          break;\n        case 'would-update':\n          commandLogger.info(\n            colors.cyan(`[dry run] Would push a new revision to \"${input.name}\"${changes}`),\n          );\n          break;\n        case 'test-failed': {\n          const failed = (result.testResults ?? []).filter(({ passed }) => !passed);\n          commandLogger.error(\n            colors.red(\n              `Rejected \"${input.name}\" — ${failed.length} of ${\n                result.testResults?.length ?? 0\n              } test run(s) failed`,\n            ),\n          );\n          failed.forEach(({ payloadType, result: execution }) => {\n            const label = payloadType ? `[${payloadType}] ` : '';\n            commandLogger.error(\n              colors.red(\n                `  ${label}${\n                  execution.error\n                    ? execution.error.message\n                    : `failed with exit code ${execution.exitCode}`\n                }`,\n              ),\n            );\n            execution.logs.forEach(({ file: logFile, message }) => {\n              commandLogger.error(colors.red(`    [${logFile}] ${message}`));\n            });\n          });\n          if (result.createdDataSilo) {\n            commandLogger.error(\n              colors.red(\n                `  The DSR integration (data silo) created for \"${input.name}\" was rolled back.`,\n              ),\n            );\n          }\n          break;\n        }\n      }\n\n      // Anything that reached the push path without a test payload was\n      // promoted untested — call it out so payloads get added over time\n      if (\n        !skipTests &&\n        (input.testPayloads === undefined || input.testPayloads.length === 0) &&\n        (result.outcome === 'created' || result.outcome === 'updated')\n      ) {\n        commandLogger.warn(\n          colors.yellow(\n            `Custom function \"${input.name}\" was pushed without a test run — add a ` +\n              'test-payload to its manifest entry to enable test-before-promote.',\n          ),\n        );\n      }\n\n      // DSR functions have two entry points (default export = DATA_POINT,\n      // enricher export = REQUEST_ENRICHER); nudge toward covering both\n      if (\n        !skipTests &&\n        input.type === CustomFunctionType.Dsr &&\n        input.testPayloads !== undefined &&\n        input.testPayloads.length > 0 &&\n        (result.outcome === 'created' || result.outcome === 'updated')\n      ) {\n        const coveredTypes = new Set(\n          input.testPayloads.map(\n            ({ payloadType }) => payloadType ?? CustomFunctionPayloadType.DataPoint,\n          ),\n        );\n        if (coveredTypes.size === 1) {\n          const [covered] = coveredTypes;\n          const uncovered =\n            covered === CustomFunctionPayloadType.DataPoint\n              ? CustomFunctionPayloadType.RequestEnricher\n              : CustomFunctionPayloadType.DataPoint;\n          commandLogger.warn(\n            colors.yellow(\n              `DSR custom function \"${input.name}\" only tests its ${covered} export — if it ` +\n                `also implements the ${uncovered} export, add a test payload with ` +\n                `payload-type: ${uncovered} so both entry points are tested on every push.`,\n            ),\n          );\n        }\n      }\n    } catch (err) {\n      results.push({ name: input.name, error: err as Error });\n      commandLogger.error(\n        colors.red(`Failed to sync custom function \"${input.name}\": ${(err as Error).message}`),\n      );\n    }\n  });\n\n  // Write assigned IDs back into the manifest so future pushes match by ID\n  // instead of by (potentially non-unique) name, and DSR entries keep\n  // pointing at their (possibly auto-created) integration\n  if (updateManifest && !dryRun) {\n    const idsByIndex = configs.map((input, index) => {\n      const result = results[index]?.result;\n      if (!result) {\n        return undefined;\n      }\n      const ids = {\n        ...(!input.id && result.customFunctionId ? { id: result.customFunctionId } : {}),\n        ...(!input.dataSiloId && result.dataSiloId ? { dataSiloId: result.dataSiloId } : {}),\n      };\n      return Object.keys(ids).length > 0 ? ids : undefined;\n    });\n    const updatedCount = writeCustomFunctionIdsToManifest(manifestPath, idsByIndex);\n    if (updatedCount > 0) {\n      commandLogger.info(\n        colors.green(\n          `Wrote assigned id(s) back to ${updatedCount} manifest entr(ies) in \"${manifestPath}\" — ` +\n            'commit this change so future pushes match by ID.',\n        ),\n      );\n    }\n  }\n\n  const output = buildCustomFunctionPushJsonResult(manifestPath, dryRun, results);\n  if (json) {\n    this.process.stdout.write(`${JSON.stringify(output)}\\n`);\n  } else {\n    const { summary } = output;\n    commandLogger.info(\n      colors.magenta(\n        `Custom function sync complete: ${summary.created} created, ${summary.updated} updated, ` +\n          `${summary.metadataUpdated} metadata-only, ${summary.skipped} skipped, ` +\n          `${summary.rejected} rejected (test failed), ${summary.failed} failed${\n            dryRun ? ' (dry run)' : ''\n          }`,\n      ),\n    );\n  }\n\n  if (output.status === 'failed') {\n    this.process.exit(1);\n  }\n}\n"],"mappings":"21BAuDA,eAAsB,EAEpB,CACE,OACA,aACA,eACA,WACA,YACA,SACA,OACA,UACA,QACA,YACA,iBACA,YAEF,EACe,CACf,EAAoB,KAAK,QAAQ,CAEjC,IAAM,EAAM,KAAK,QAAQ,KAAK,CACxB,CAAE,oBAAmB,gBAAiB,EAAkC,EAAK,CACjF,GAAI,EAAY,CAAE,YAAW,CAAG,EAAE,CAClC,GAAI,EAAW,CAAE,WAAU,CAAG,EAAE,CACjC,CAAC,CAGF,GAAI,CAAC,KAAK,GAAG,WAAW,EAAa,CAAE,CACrC,IAAM,EAAU,EAA6B,CAC3C,MACA,eACA,wBAAyB,EAAgC,KAAM,EAAI,CACnE,QAAS,OACV,CAAC,CACF,KAAK,OAAO,MAAM,EAAO,IAAI,EAAQ,CAAC,CACtC,KAAK,QAAQ,KAAK,EAAE,CAItB,IAAM,EAAe,EAAsB,EAAM,KAAK,CAClD,MAAM,QAAQ,EAAa,GAC7B,KAAK,OAAO,MACV,EAAO,IACL,+FACD,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAEtB,IAAM,EAAS,EACT,EAAgB,EAAoB,KAAK,OAAQ,EAAK,CAEtD,EAAO,EAAyB,EAAU,CAChD,EAAc,KAAK,EAAO,QAAQ,qBAAqB,EAAa,MAAM,CAAC,CAC3E,IAAM,EAAU,EAA4B,EAAc,EAAO,GAC/D,EAA8B,KAAM,EAAmB,EAAK,CAC7D,CACD,EAAc,KACZ,EAAO,MAAM,SAAS,EAAQ,OAAO,0BAA0B,EAAa,GAAG,CAChF,CAED,IAAM,EAAS,EAA4B,EAAc,EAAO,CAG1D,EAAW,MAAM,EAAwB,EAAQ,CAAE,OAAQ,EAAe,CAAC,CAO3E,EAAkB,IAAI,IACtB,EAAsB,MAC1B,EACA,IACuB,CACvB,IAAM,EAAM,GAAG,GAAmB,GAAG,QAAQ,GAAgB,KACvD,EAAS,EAAgB,IAAI,EAAI,CACvC,GAAI,EACF,OAAO,EAET,EAAc,KACZ,EAAO,QACL,qBACE,EAAkB,mBAAmB,EAAgB,GAAK,yBAC3D,kBACF,CACF,CACD,IAAM,EAAS,MAAM,EAAwB,EAAc,EAAQ,CACjE,OAAQ,EACR,eACA,GAAI,EAAkB,CAAE,SAAU,EAAiB,CAAG,EAAE,CACzD,CAAC,CAEF,OADA,EAAgB,IAAI,EAAK,EAAO,CACzB,GAWH,EAA0B,GAKN,CACxB,GAAI,CAAC,EAAM,cACT,OAAO,EAET,IAAM,EAAQ,KAAK,QAAQ,IAAI,EAAM,eACrC,GAAI,CAAC,EACH,MAAU,MACR,oBAAoB,EAAM,KAAK,0BAA0B,EAAM,cAAc,+FAG9E,CAEH,OAAO,GAIH,EAAgF,EAAE,CA+KxF,GA9KA,MAAM,EAAU,EAAS,KAAO,IAAU,CACxC,GAAI,CAIF,IAAM,EAAoB,EACxB,EACA,EAA8B,EAAU,EAAM,CAC9C,EACD,CACK,EAAS,MAAM,EAAmB,EAAQ,CAC9C,QACA,OAAQ,EACJ,IAAA,GACA,MAAM,EAAoB,EAAmB,EAAuB,EAAM,CAAC,CAC/E,gBAAiB,EACjB,WACA,UACA,SACA,QAIA,GAAI,CAAC,GAAa,EAAM,eAAiB,IAAA,GACrC,CAAE,aAAc,EAAM,aAAc,CACpC,EAAE,CACN,OAAQ,EACT,CAAC,CACF,EAAQ,KAAK,CAAE,KAAM,EAAM,KAAM,SAAQ,CAAC,CAE1C,IAAM,EAAS,EAAO,cAAgB,aAAa,EAAO,cAAc,GAAK,GACvE,EACJ,EAAO,cAAc,OAAS,EAAI,KAAK,EAAO,cAAc,KAAK,KAAK,CAAC,GAAK,GAC9E,OAAQ,EAAO,QAAf,CACE,IAAK,UACC,EAAO,iBAAmB,EAAO,YACnC,EAAc,KACZ,EAAO,MACL,sCAAsC,EAAO,WAAW,SAAS,EAAM,KAAK,GAC7E,CACF,CAEH,EAAc,KAAK,EAAO,MAAM,4BAA4B,EAAM,KAAK,GAAG,IAAS,CAAC,CACpF,MACF,IAAK,UACH,EAAc,KACZ,EAAO,MACL,2BAA2B,EAAM,KAAK,GAAG,IAAS,IAChD,EAAO,SAAW,0BAA4B,gBAEjD,CACF,CACD,MACF,IAAK,mBACH,EAAc,KACZ,EAAO,MACL,yBAAyB,EAAM,KAAK,GAAG,EAAQ,oCAChD,CACF,CACD,MACF,IAAK,UACH,EAAc,KACZ,EAAO,OACL,YAAY,EAAM,KAAK,oGAExB,CACF,CACD,MACF,IAAK,eACH,EAAc,KACZ,EAAO,KACL,2CAA2C,EAAM,KAAK,GACpD,EAAM,OAAS,EAAmB,KAAO,CAAC,EAAM,WAC5C,uCACA,KAEP,CACF,CACD,MACF,IAAK,eACH,EAAc,KACZ,EAAO,KAAK,2CAA2C,EAAM,KAAK,GAAG,IAAU,CAChF,CACD,MACF,IAAK,cAAe,CAClB,IAAM,GAAU,EAAO,aAAe,EAAE,EAAE,QAAQ,CAAE,YAAa,CAAC,EAAO,CACzE,EAAc,MACZ,EAAO,IACL,aAAa,EAAM,KAAK,MAAM,EAAO,OAAO,MAC1C,EAAO,aAAa,QAAU,EAC/B,qBACF,CACF,CACD,EAAO,SAAS,CAAE,cAAa,OAAQ,KAAgB,CACrD,IAAM,EAAQ,EAAc,IAAI,EAAY,IAAM,GAClD,EAAc,MACZ,EAAO,IACL,KAAK,IACH,EAAU,MACN,EAAU,MAAM,QAChB,yBAAyB,EAAU,aAE1C,CACF,CACD,EAAU,KAAK,SAAS,CAAE,KAAM,EAAS,aAAc,CACrD,EAAc,MAAM,EAAO,IAAI,QAAQ,EAAQ,IAAI,IAAU,CAAC,EAC9D,EACF,CACE,EAAO,iBACT,EAAc,MACZ,EAAO,IACL,kDAAkD,EAAM,KAAK,oBAC9D,CACF,CAEH,OAqBJ,GAdE,CAAC,IACA,EAAM,eAAiB,IAAA,IAAa,EAAM,aAAa,SAAW,KAClE,EAAO,UAAY,WAAa,EAAO,UAAY,YAEpD,EAAc,KACZ,EAAO,OACL,oBAAoB,EAAM,KAAK,2GAEhC,CACF,CAMD,CAAC,GACD,EAAM,OAAS,EAAmB,KAClC,EAAM,eAAiB,IAAA,IACvB,EAAM,aAAa,OAAS,IAC3B,EAAO,UAAY,WAAa,EAAO,UAAY,WACpD,CACA,IAAM,EAAe,IAAI,IACvB,EAAM,aAAa,KAChB,CAAE,iBAAkB,GAAe,EAA0B,UAC/D,CACF,CACD,GAAI,EAAa,OAAS,EAAG,CAC3B,GAAM,CAAC,GAAW,EACZ,EACJ,IAAY,EAA0B,UAClC,EAA0B,gBAC1B,EAA0B,UAChC,EAAc,KACZ,EAAO,OACL,wBAAwB,EAAM,KAAK,mBAAmB,EAAQ,sCACrC,EAAU,iDAChB,EAAU,iDAC9B,CACF,SAGE,EAAK,CACZ,EAAQ,KAAK,CAAE,KAAM,EAAM,KAAM,MAAO,EAAc,CAAC,CACvD,EAAc,MACZ,EAAO,IAAI,mCAAmC,EAAM,KAAK,KAAM,EAAc,UAAU,CACxF,GAEH,CAKE,GAAkB,CAAC,EAAQ,CAY7B,IAAM,EAAe,EAAiC,EAXnC,EAAQ,KAAK,EAAO,IAAU,CAC/C,IAAM,EAAS,EAAQ,IAAQ,OAC/B,GAAI,CAAC,EACH,OAEF,IAAM,EAAM,CACV,GAAI,CAAC,EAAM,IAAM,EAAO,iBAAmB,CAAE,GAAI,EAAO,iBAAkB,CAAG,EAAE,CAC/E,GAAI,CAAC,EAAM,YAAc,EAAO,WAAa,CAAE,WAAY,EAAO,WAAY,CAAG,EAAE,CACpF,CACD,OAAO,OAAO,KAAK,EAAI,CAAC,OAAS,EAAI,EAAM,IAAA,IAEiC,CAAC,CAC3E,EAAe,GACjB,EAAc,KACZ,EAAO,MACL,gCAAgC,EAAa,0BAA0B,EAAa,sDAErF,CACF,CAIL,IAAM,EAAS,EAAkC,EAAc,EAAQ,EAAQ,CAC/E,GAAI,EACF,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAO,CAAC,IAAI,KACnD,CACL,GAAM,CAAE,WAAY,EACpB,EAAc,KACZ,EAAO,QACL,kCAAkC,EAAQ,QAAQ,YAAY,EAAQ,QAAQ,YACzE,EAAQ,gBAAgB,kBAAkB,EAAQ,QAAQ,YAC1D,EAAQ,SAAS,2BAA2B,EAAQ,OAAO,SAC5D,EAAS,aAAe,KAE7B,CACF,CAGC,EAAO,SAAW,UACpB,KAAK,QAAQ,KAAK,EAAE"}

package/dist/impl-DQcgEx7V2.mjs

@@ -0,0 +1,298 @@
+import{g as e}from"./constants-BRsj50Nb.mjs";import{i as t,n,r,t as i}from"./project-plan-output-BHHlkLxe.mjs";import{c as a,d as o,f as s,l as c,t as l,u}from"./project-discovery-CWRjlFnC.mjs";import{c as d,g as f,l as p,r as m,t as h}from"./policy-project-discovery-C29UxWwt.mjs";import{a as g,c as _,i as v,l as y,o as b,r as ee,s as x,t as S}from"./policy-runtime-6jmkXlBk.mjs";import{t as C}from"./done-input-validation-LiTaCEzF.mjs";import{i as w,n as T,r as E,t as D}from"./prompts-BhXfYD6g.mjs";import{t as O}from"./run-captured-process-BjaSDWXG.mjs";import{t as k}from"./project-plan-apply-Bg_1eMX9.mjs";import{a as A,i as j,n as te,r as ne,t as M}from"./policy-scaffold-config-BUKAyPad.mjs";import{isAbsolute as N,join as P,posix as F,relative as I,sep as L}from"node:path";import R from"colors";const z={Editor:`editor`,Skill:`skill`,Ci:`ci`};var B=`# Idiomatic Rego and document-tree authoring
+
+## Start from the document tree
+
+OPA evaluates queries against one document tree:
+
+- \`input\` is the request-specific document supplied by the caller.
+- \`data\` contains loaded policy packages and static data.
+- A Rego \`package\` determines where a module contributes documents below \`data\`.
+
+Choose package paths from the application's required query and ownership
+boundaries. Keep directory and package names aligned
+(\`directory-package-mismatch\`), and cover every publishable package with a
+\`.manifest\` root.
+
+### Multi-bundle template layout
+
+Prefer a publish directory named \`{root}-bundle/\` so the package-root folder can
+be \`{root}/\` without doubling names:
+
+\`\`\`
+example-bundle/               # transcend policy publish … <dir>
+  .manifest                   # roots + optional metadata.transcend.io.template
+  example/
+    result/…                  # package example.result
+  input.example.json
+  input.json                  # gitignored; VS Code / Regal Evaluate
+\`\`\`
+
+Permissions starters use the same layout. Upload does not branch on template
+metadata; Permissions API still loads only the remote bundle named
+\`permissions\` (publish with \`--bundle-name=permissions\`).
+
+OPA \`.rego\` placement follows the \`package\` line; \`data.json\` paths follow the
+filesystem and must sit under the manifest root prefix on disk.
+
+Use Rego v1 explicitly:
+
+\`\`\`rego
+package example.result
+
+import rego.v1
+\`\`\`
+
+When one publishable package reads another package under the same manifest root,
+import it and use the local name:
+
+\`\`\`rego
+import data.example.facts
+
+allow if facts.subject_is_trusted
+\`\`\`
+
+Do not use a fully qualified \`data.<root>…\` reference directly in a rule body.
+Policy Engine re-namespaces package declarations and imports during activation,
+and \`transcend policy lint\` rejects direct self-root references that would
+change meaning.
+
+## Define the contract before implementation
+
+Find the actual caller and document:
+
+1. the query path below \`data\`;
+2. required and optional \`input\` fields;
+3. the result document consumed by the caller;
+4. fail-closed behavior for absent, malformed, or unknown input;
+5. stable reason codes and any fields reserved for later extension.
+
+Do not infer a product contract from the generated example. Replace its package
+names and fields when the repository's contract is known.
+
+Wire input JSON Schemas with \`# METADATA\` \`schemas:\` annotations and a schemas
+directory passed to \`opa check -s\` / VS Code \`opa.schema\`.
+
+## Prefer declarative result construction
+
+String decisions inside an object remain readable and extensible. Keep one
+result document shape and derive its fields from named rules:
+
+\`\`\`rego
+default decision := "deny"
+
+decision := "allow" if {
+	input.subject.trusted == true
+}
+
+default reason_code := "untrusted_or_invalid_input"
+
+reason_code := "trusted_subject" if {
+	decision == "allow"
+}
+\`\`\`
+
+Rego rules define documents; they are not an imperative sequence of variable
+assignments. Prefer small named predicates and one result constructor over
+repeated branch-specific copies of the full output object.
+
+## Fail closed
+
+- Give the externally queried decision or result a deny/error default.
+- Treat missing fields and unknown enum values as non-authorizing.
+- Avoid broad truthiness checks when exact values are required.
+- Add tests for malformed and incomplete inputs, not only expected allow cases.
+- Add result fields compatibly so existing consumers can continue reading the
+  stable core.
+`,V=`# Publishing
+
+## Validate the upload contract
+
+\`.manifest\` declares the document-tree roots included in the Policy Engine
+bundle. Each non-test Rego package must equal a root or be nested below one.
+Test modules remain local and are excluded from the upload archive.
+
+In this template, the publish directory is \`{root}-bundle/\` (the folder that
+contains \`.manifest\`), not the inner \`{root}/\` package tree alone.
+
+Scaffolded manifests may include optional OPA \`metadata\`:
+
+\`\`\`json
+"metadata": {
+  "transcend.io": {
+    "template": "generic"
+  }
+}
+\`\`\`
+
+\`template\` is an **authoring hint** (\`generic\` or \`permissions\`). Upload does
+not branch on it.
+
+Before publishing:
+
+1. confirm the intended package and query paths with the consuming application;
+2. run \`transcend policy lint <bundle-directory> --noInteractive\` and tests;
+3. review the generated bundle name, version, description, and target Transcend environment;
+4. keep API keys in the environment or the repository's approved secret store.
+
+The publish path validates strict Rego compatibility and bundle compilation
+before creating the upload tarball.
+
+## Bundle names: generic vs Permissions
+
+Upload uses one create/version path for every bundle. What makes a bundle
+“Permissions” is convention plus where Sombra queries it:
+
+- **Permissions API** always loads the fixed remote bundle name
+  \`permissions\`. Publish that starter with \`--bundle-name=permissions\`.
+- **Generic / decide** bundles use any other \`--bundle-name\` and the decide
+  path.
+
+\`policy publish\` may warn when \`.manifest\` metadata/roots look Permissions-
+oriented but \`--bundle-name\` is not \`permissions\` (or the reverse). The warning
+does not block upload.
+
+## Publish deliberately
+
+\`\`\`sh
+# Generic / decide path
+transcend policy publish --bundle-name example --auth "$TRANSCEND_API_KEY" \\
+  transcend/policy/example-bundle
+
+# Permissions API path (fixed remote name)
+transcend policy publish --bundle-name permissions --auth "$TRANSCEND_API_KEY" \\
+  transcend/policy/permissions-bundle
+\`\`\`
+
+Run \`transcend policy publish --help\` for current flags and scopes. Publishing
+creates or updates remote Policy Engine bundle resources, so keep it out of
+pull-request validation and require the repository's normal deployment approval.
+
+Publish each \`{root}-bundle/\` separately with its own \`--bundle-name\`. Do not
+add publishing, Transcend API credentials, or environment activation to the
+validation-only workflow generated by \`policy init\`.
+`,H="# Setup and tooling\n\n## Install the CLI\n\nInstall the Transcend CLI **≥ 11**:\n\n```sh\nnpm install --global @transcend-io/cli@^11\ntranscend policy --help   # should list init, new, lint [<directory>], …\n```\n\n## Initialize safely\n\nRun `transcend policy init --help` before choosing flags. The default target is\n`transcend/policy`.\n\n`policy init` creates an empty multi-bundle workspace — shared Regal config\n(`project.roots: []`) and a README. No bundles or Rego are created.\n\nInteractive initialization offers VS Code setup, this Agent Skill, and\nvalidation-only GitHub Actions. Non-interactive automation enables only\nexplicitly supplied `--editor`, `--skill`, and `--ci` flags:\n\n```sh\ntranscend policy init ./transcend/policy --editor --skill --ci --noInteractive --yes\n```\n\nUse `--dryRun` to inspect the complete transactional plan. Existing policy\nfiles, manifests, Regal configuration, workflows, and customized managed\nartifacts are preserved.\n\n## Add bundles\n\nAfter initializing the workspace, add bundles with `transcend policy new`:\n\n```sh\ntranscend policy new --template generic --name example --yes\ntranscend policy new --template permissions --name permissions --yes\n```\n\nTemplates available:\n\n- `generic` — A fail-closed teaching entrypoint (default root: `example`)\n- `permissions` — A Permission API starter with purpose preferences (default root: `permissions`)\n\n`policy new` creates the `{name}-bundle/` directory, its `.manifest`, Rego tree,\ninput fixtures, and input schema. It also merges the root into Regal config and\nupdates VS Code settings/tasks when `.vscode` is present.\n\n## Required tools\n\n- Use OPA 1.x for Rego v1 parsing, formatting, checks, tests, and bundle compilation.\n- Use Regal for idiomatic Rego linting and editor language-server features.\n- Run `opa version` and `regal version` to confirm the active executables.\n\nThe generated Regal configuration targets OPA 1.18.2 capabilities. Generated CI\ninstalls OPA 1.18.2 and Regal 0.42.0; local tools only need to satisfy the\ncompatible versions reported by `policy init` and `policy lint`. Follow their\nofficial installation links when a compatible tool is missing.\n\n## Editor and CI\n\nRepository-level VS Code settings should include:\n\n- `opa.roots` — one entry per `{root}-bundle/` publish directory\n- `opa.bundleMode: true` — avoid loading fixture JSON as data\n- `opa.schema` — directory of input JSON Schemas (shared when multiple bundles\n  need different envelopes)\n- `json.schemas` — optional validation of `input.json` / `input.example.json`\n\nPreserve custom settings and tasks when adapting generated editor files.\n\nGenerated GitHub Actions CI is read-only and credential-free: it installs pinned\ntools and the pinned Transcend CLI, then runs `transcend policy lint` per\npublish directory (matrix when multiple bundles exist). Locally, bare\n`transcend policy lint` verifies every child under the workspace that contains\na `.manifest`:\n\n```sh\ntranscend policy lint --noInteractive --json\ntranscend policy lint transcend/policy/example-bundle --noInteractive --json\n```\n\nAdapt triggers, runner labels, dependency installation, and caching to\nestablished repository conventions without adding publish steps or secrets.\n",U=`# Testing and debugging
+
+## Write executable tests
+
+Place tests next to the package they exercise and suffix test modules with
+\`_test.rego\`. A separate \`_test\` package makes the production API and test
+helpers easy to distinguish. Keep the \`_test\` package under the same manifest
+root (for example \`example.result_test\`, not a sibling root), so bundle-mode
+loads accept it.
+
+\`\`\`rego
+package example.result_test
+
+import data.example.result
+import rego.v1
+
+test_denies_missing_input if {
+	result.decision == "deny" with input as {}
+	result.reason_code == "untrusted_or_invalid_input" with input as {}
+}
+\`\`\`
+
+Cover at least:
+
+- the ordinary allow case;
+- explicit deny cases;
+- absent, malformed, and unknown input;
+- important result fields and reason codes;
+- interactions between packages when one policy reads another document.
+
+\`transcend policy lint\` requires a non-empty test suite.
+
+## Use local inputs safely
+
+Keep a sanitized \`input.example.json\` in each publish directory. \`policy new\`
+also writes a gitignored \`input.json\` beside it (same contents) so VS Code /
+Regal Evaluate work immediately. Customize \`input.json\` locally; keep
+\`input.example.json\` committed and free of credentials or personal data.
+
+## Run the complete gate
+
+With no directory argument, \`policy lint\` and \`policy test\` verify every
+immediate child under the workspace (\`transcend/policy\`) that contains a
+\`.manifest\`. Pass one bundle path to target a single unit:
+
+\`\`\`sh
+transcend policy lint --noInteractive
+transcend policy test
+transcend policy lint transcend/policy/example-bundle --noInteractive
+transcend policy test transcend/policy/example-bundle
+opa check --strict -b transcend/policy/example-bundle -s transcend/policy/schemas
+\`\`\`
+
+\`policy lint\` and \`policy test\` run \`opa test -b\` (bundle mode) so a local
+gitignored \`input.json\` beside \`input.example.json\` does not cause a merge
+error. Prefer the CLI over raw directory-mode \`opa test\`. Strict OPA checks use
+Rego v1 (no \`--v0-compatible\`).
+
+Use \`transcend policy lint --help\` for formatter flags. Review Regal findings
+deliberately instead of applying broad rewrites.
+
+## Evaluate a query
+
+\`policy eval\` requires an explicit bundle directory:
+
+\`\`\`sh
+transcend policy eval transcend/policy/example-bundle \\
+  --package data.example.result \\
+  --input transcend/policy/example-bundle/input.json
+\`\`\`
+
+Or pipe the envelope with \`--stdin-input\`. Use \`transcend policy eval --help\` for
+curated \`opa eval\` pass-through flags (format, explain, metrics, and similar).
+Exit-on-result flags like OPA \`--fail\` are not exposed — production Evaluate uses
+the Data API (policy deny is a successful evaluation).
+
+Or \`opa eval -b … -i …\` with the caller's query path. If the result differs from
+expectations, inspect package paths, imports, defaults, input field presence,
+and the selected bundle directory before changing policy logic.
+`,W=`---
+name: transcend-policy-engine
+description: Sets up, authors, validates, tests, and publishes Transcend Policy Engine projects backed by OPA and Rego. Use for .manifest roots, Rego v1 policy trees, Regal configuration, local policy inputs, Policy Engine CI, or transcend policy CLI commands.
+compatibility: Requires OPA 1.x, Regal, and Transcend CLI ≥ 11 for local validation.
+---
+
+# Transcend Policy Engine
+
+Use the CLI for deterministic scaffolding and validation. Treat generated
+examples as disposable teaching material and derive the real policy contract
+from repository code and product requirements.
+
+Requires **Transcend CLI ≥ 11** (\`transcend policy lint [<directory>]\`, with
+\`init\` available).
+
+## Workflow
+
+1. Locate each publishable bundle directory (a directory with a \`.manifest\`;
+   \`policy new\` scaffolds these as \`{root}-bundle/\` with a \`{root}/\` package
+   tree inside).
+2. For initialization, editor support, tools, or CI, read [references/setup-tooling.md](references/setup-tooling.md).
+3. For package layout, document-tree design, decisions, and inputs, read [references/authoring.md](references/authoring.md).
+4. For tests, local inputs, linting, and evaluation, read [references/testing-debugging.md](references/testing-debugging.md).
+5. For bundle validation and publishing, read [references/publishing.md](references/publishing.md).
+6. Preserve repository conventions and finish with:
+
+\`\`\`sh
+transcend policy lint --noInteractive
+\`\`\`
+
+## Documentation
+
+- Every Transcend CLI command and subcommand provides contextual help with \`transcend <command> --help\`.
+- Use the [Transcend CLI README](https://github.com/transcend-io/tools/tree/main/packages/cli#readme) for command documentation and examples.
+- Use the [Transcend documentation index](https://docs.transcend.io/llms.txt) to find current product documentation.
+
+## Guardrails
+
+- Do not invent an input shape, output contract, package tree, or deployment convention.
+- Keep decisions fail-closed and make result documents extensible.
+- Never commit credentials or a real local \`input.json\`.
+- Keep every publishable Rego package covered by a \`.manifest\` root.
+- One publish directory = one Policy Engine bundle; do not merge unrelated
+  products into a single \`.manifest\` unless they share activation and callers.
+`;const G=`transcend-policy-engine`,K=[{path:`SKILL.md`,contents:W},{path:`references/setup-tooling.md`,contents:H},{path:`references/authoring.md`,contents:B},{path:`references/testing-debugging.md`,contents:U},{path:`references/publishing.md`,contents:V}];function q(e){return`${e.hasSkill?`Use the \`${G}\` skill and run`:`Run`} ${e.newCommand} to add a bundle from a template, then adapt the policy document tree and input/output contract to the intended application.`}function J(e,n){return{version:e.version,command:e.command,applied:n.applied,dryRun:n.dryRun,targetDirectory:e.targetDirectory,manifestPath:e.manifestPath,changes:e.changes.map(e=>t(n.cwd,e)),warnings:e.warnings,nextSteps:e.nextSteps,features:[...e.features],aiHandoff:n.aiHandoff,tools:n.tools}}const Y={name:G,displayName:`Policy Engine`,owner:`@transcend-io/cli`,files:K};function X(e,t){let n=new Set(f().map(({path:t})=>P(e.targetDirectory,t))),r=new Set(t.features);return r.has(z.Editor)&&(n.add(P(e.projectRoot,`.vscode`,`settings.json`)),n.add(P(e.projectRoot,`.vscode`,`extensions.json`)),n.add(P(e.projectRoot,`.vscode`,`tasks.json`))),r.has(z.Skill)&&a(e.projectRoot,e.existingSkillDirectories,Y).forEach(e=>n.add(e)),r.has(z.Ci)&&e.repositoryRoot&&e.usesGithub&&n.add(P(e.repositoryRoot,j)),[...n].sort((e,t)=>e.localeCompare(t))}function Z(e,t){let n=I(e,t);if(n===`..`||n.startsWith(`..${L}`)||N(n))throw Error(`Refusing to modify path outside project root: ${t}`)}function re(e){let t=new Set([`${d}/input.json`]);return e.forEach(({path:e})=>{t.add(e);let n=F.dirname(e);for(;n!==`.`;)t.add(n),n=F.dirname(n)}),t}function Q(e,t,n){let r=s({snapshot:u(t.snapshots,n.path),after:n.contents,description:n.description,...n.createOnly===void 0?{}:{createOnly:n.createOnly}});r?e.changes.push(r):e.unchanged.push(n.path)}function ie(e,t,n,r,a,o){Q(e,t,{path:n,contents:r.contents,description:a}),e.warnings.push(...r.warnings.map(e=>`${e} (${i(o,n)})`))}function ae(e,t){let{state:n}=e,r=f(),a=`transcend policy new`,s={version:3,command:`init`,rootDirectory:n.projectRoot,targetDirectory:n.targetDirectory,manifestPath:n.targetDirectory,changes:[],unchanged:[],warnings:[],nextSteps:[a],features:[...t.features]},l=X(n,t);if(Z(n.projectRoot,n.targetDirectory),l.forEach(e=>Z(n.projectRoot,e)),n.relativeFilePaths.length===0)s.directoryPreconditions=[{path:n.targetDirectory,relativePaths:[...n.relativePaths]}],r.forEach(t=>{let r=P(n.targetDirectory,t.path);if(o(e.snapshots,r).kind!==`absent`)throw Error(`Expected an empty policy target, but found an entry at: ${r}`);Q(s,e,{path:r,contents:t.contents,description:t.description,createOnly:!0})});else{let t=!0;r.forEach(r=>{let a=P(n.targetDirectory,r.path),c=o(e.snapshots,a);if(c.kind===`file`&&c.contents===r.contents){s.unchanged.push(a);return}t=!1,c.kind!==`absent`&&(s.unchanged.push(a),s.warnings.push(`Existing policy scaffold path was left unchanged: ${i(n.invocationDirectory,a)}`))});let c=re(r),l=n.relativeFilePaths.some(e=>!c.has(e));(!t||l)&&s.warnings.push(`Existing policy target contains custom or partial content, so no workspace files were added or overwritten. Review ${i(n.invocationDirectory,n.targetDirectory)} manually, then run \`${a}\`.`)}let u=new Set(t.features),d=n.projectRoot;if(u.has(z.Editor)){let t=P(d,`.vscode`,`settings.json`),r=P(d,`.vscode`,`extensions.json`),a=P(d,`.vscode`,`tasks.json`);[{path:t,description:`Merge strict target-scoped OPA and Rego editor settings`,merge:(e,t,n)=>te(e,t,n)},{path:r,description:`Recommend the OPA extension and discourage its syntax-only conflict`,merge:e=>M(e)},{path:a,description:`Create the VS Code task configuration`,merge:(e,t,n)=>ne(e,t,n)}].forEach(({path:t,description:r,merge:a})=>{let c=o(e.snapshots,t);if(c.kind!==`absent`&&c.kind!==`file`){s.unchanged.push(t),s.warnings.push(`Existing VS Code artifact is not a regular file and was left unchanged: ${i(n.invocationDirectory,t)}`);return}ie(s,e,t,a(c.kind===`file`?c.contents:null,d,n.targetDirectory),r,n.invocationDirectory)})}if(u.has(z.Skill)){let t=c({rootDirectory:d,existingDirectories:n.existingSkillDirectories,snapshots:e.snapshots,skill:Y,preserveModified:!0});s.changes.push(...t.changes),s.unchanged.push(...t.unchanged),s.warnings.push(...t.warnings.map(e=>t.unchanged.reduce((e,t)=>e.replace(t,i(n.invocationDirectory,t)),e)))}if(u.has(z.Ci))if(!n.repositoryRoot||!n.usesGithub)s.warnings.push(`GitHub Actions setup was selected, but this target is not inside a detected GitHub repository.`);else{let r=P(n.repositoryRoot,j),a=I(n.repositoryRoot,n.targetDirectory).split(L).join(`/`)||`.`,c=A({cliVersion:t.cliVersion,workspaceDirectory:a,bundleDirectories:[]}),l=o(e.snapshots,r);l.kind===`absent`?Q(s,e,{path:r,contents:c,description:`Add credential-free Policy Engine validation`,createOnly:!0}):l.kind===`file`&&l.contents===c?s.unchanged.push(r):(s.unchanged.push(r),s.warnings.push(`Existing GitHub Actions workflow was left unchanged: ${i(n.invocationDirectory,r)}. Adapt it manually to validate each policy bundle.`))}return s.changes.forEach(({path:e})=>Z(n.projectRoot,e)),s}const oe={[z.Editor]:`VS Code settings and lint task`,[z.Skill]:`Policy Engine Agent Skill`,[z.Ci]:`Validation-only GitHub Actions`},se=Object.values(z);function $(e,t){let n=[t.stdout.trim(),t.stderr.trim()].filter(Boolean).join(`
+`),r=e===`OPA`?ee:g;return`${e===`OPA`?`OPA 1.x`:`Regal ${S} or newer`} is required, but \`${e.toLowerCase()} version\` exited with code ${t.code}${n?`: ${n}`:`.`} Install or upgrade it using the official instructions: ${r}`}async function ce(e,t,n){let r={opa:null,regal:null},i=[],a=await n(`opa`,[`version`],{cwd:t},e);if(a.error?.code===`ENOENT`)i.push(v);else{let e=`${a.stdout}\n${a.stderr}`,t=_(e);a.code===0?t?i.push(t):r.opa=x(e).version:i.push(t??$(`OPA`,a))}let o=await n(`regal`,[`version`],{cwd:t},e);if(o.error?.code===`ENOENT`)i.push(b);else{let e=`${o.stdout}\n${o.stderr}`,t=y(e,S,`the generated OPA ${p} capabilities configuration`);o.code===0?t?i.push(t):r.regal=x(e).version:i.push(t??$(`Regal`,o))}return{tools:r,warnings:i}}async function le(t,a=h,o=O){C(this.process);try{let s=await ce(this,this.process.cwd(),o),c=m(this,a),u=new T(this),d=E(t,this.process.stdin.isTTY,this.process.stderr.isTTY),f=await w(u,{features:se,labels:oe,enabled:{[z.Editor]:t.editor,[z.Skill]:t.skill,[z.Ci]:t.ci},interactive:d}),p=X(c,{features:f}),h=ae({state:c,snapshots:l(this,c.projectRoot,p)},{features:f,cliVersion:e});h.warnings.push(...s.warnings),t.json||this.logger.info(r(h,{cwd:this.process.cwd(),title:`Policy initialization plan`,details:[{label:`Target`,path:h.targetDirectory}]}));let g=h.changes.length===0||t.dryRun;if(h.changes.length>0&&!t.dryRun)if(t.yes)g=!0;else if(d)g=await u.confirm(`Apply this complete plan?`,!0);else throw Error(`The plan requires approval in a non-interactive invocation. Review with --dryRun, then pass --yes.`);g&&!t.dryRun&&h.changes.length>0&&await k(this,h);let _=g&&!t.dryRun&&h.changes.length>0,v=g&&!t.dryRun,y=q({projectPath:n(i(this.process.cwd(),c.targetDirectory)),hasSkill:v&&f.includes(z.Skill),newCommand:h.nextSteps[0]}),b=J(h,{applied:_,dryRun:t.dryRun,cwd:this.process.cwd(),aiHandoff:y,tools:s.tools});if(t.json){this.process.stdout.write(`${JSON.stringify(b)}\n`);return}if(t.dryRun){this.logger.info(R.yellow(`Dry run complete. No changes were written.`));return}if(!g){this.logger.info(R.yellow(`No changes applied.`));return}if(h.changes.length===0){let e=h.warnings.length===s.warnings.length?`Policy project is already initialized.`:`Existing policy project was left unchanged.`;this.logger.info(R.green(e))}else this.logger.info(R.green(`Policy project initialized.`));h.nextSteps.length>0&&(this.logger.info(`\n${R.bold(`Next steps`)}`),h.nextSteps.forEach(e=>this.logger.info(e))),this.logger.info(`\n${R.bold(`AI handoff — paste into your coding agent`)}`),this.logger.info(y)}catch(e){if(e instanceof D)return this.process.exit(130);throw e}}export{le as init};
+//# sourceMappingURL=impl-DQcgEx7V2.mjs.map