@transcend-io/cli 10.29.3 → 12.0.0

package/dist/impl--JGnR3wp.mjs

@@ -1,3 +0,0 @@
-import{a as e}from"./readTranscendYaml-BNn6-Ofi.mjs";import{t}from"./parseVariablesFromString-BOSfQ4QF.mjs";import{t as n}from"./done-input-validation-BUz-aVC5.mjs";import{n as r,t as i}from"./prompts-ClBXdELk.mjs";import{t as a}from"./missing-manifest-DgcukXfg.mjs";import{c as o,i as s,r as c,t as l}from"./deno-runtime-DV52X8-P.mjs";import{n as u,t as d}from"./path-safety-D5Qwl40b.mjs";import{n as f,r as p,s as m}from"./manifest-BNIpO_zW.mjs";import{t as h}from"./run-captured-process-BXwWXuTh.mjs";import{t as g}from"./module-graph-Cb0g74Ft.mjs";import{t as _}from"./project-plan-apply-Dvndx455.mjs";import{dirname as v,extname as y,join as b,relative as x,resolve as S,sep as C}from"node:path";import w from"colors";import{createTwoFilesPatch as T}from"diff";import{DSR_DATAPOINT_CUSTOM_FUNCTION_PAYLOAD_SCHEMA as E,DSR_REQUEST_ENRICHER_CUSTOM_FUNCTION_PAYLOAD_SCHEMA as D,GENERAL_CUSTOM_FUNCTION_PAYLOAD_SCHEMA as O}from"@transcend-io/custom-function-types";import k from"ajv";import{parse as A}from"jsonc-parser";function j(e,t){e.push({severity:`error`,...t})}function M(e,t){return x(e,t).split(C).join(`/`)||`.`}function N(e){let t=t=>e.type===`DSR`?t===`REQUEST_ENRICHER`?`dsr-enricher`:`dsr-datapoint`:`general`;return e[`test-payload`]?[{entry:e,path:e[`test-payload`],type:t(e[`test-payload-type`])}]:(e[`test-payloads`]??[]).map(n=>({entry:e,path:n.payload,type:t(n[`payload-type`])}))}function P(e,t){let n=N(e).map(({type:e})=>e),r=e.type===`DSR`&&n.length===0;return{entry:e,path:S(t,e.code),needsDefault:e.type!==`DSR`||n.includes(`dsr-datapoint`),needsEnricher:n.includes(`dsr-enricher`),needsAnyDsrExport:r}}function F(){let e=new k({allErrors:!0,strict:!1});return{general:e.compile(O),"dsr-datapoint":e.compile(E),"dsr-enricher":e.compile(D)}}function I(e){return`${e.instancePath||`/`} ${e.message??`is invalid`}`}function L(e,t,n,r){let i=F(),a=[],o=[];return n.forEach(n=>{if(/<<parameters\.[^>]+>>/u.test(n.code))j(r,{code:`manifest.unresolved-code-path`,message:`Code paths cannot contain unresolved parameter placeholders.`,path:n.code,functionName:n.name});else if(f(n.code)){let i=P(n,t);e.fs.existsSync(i.path)?u(e,t,i.path)?e.fs.statSync(i.path).isFile()?a.push(i):j(r,{code:`source.not-file`,message:`Referenced source path is not a regular file.`,path:n.code,functionName:n.name}):j(r,{code:`source.outside-project`,message:`Referenced source resolves outside the manifest directory through a symlink.`,path:n.code,functionName:n.name}):j(r,{code:`source.missing`,message:`Referenced source file does not exist.`,path:n.code,functionName:n.name})}N(n).forEach(a=>{if(/<<parameters\.[^>]+>>/u.test(a.path)){j(r,{code:`manifest.unresolved-payload-path`,message:`Payload paths cannot contain unresolved parameter placeholders.`,path:a.path,functionName:n.name});return}let s=S(t,a.path);if(!e.fs.existsSync(s)){j(r,{code:`payload.missing`,message:`Referenced test payload does not exist.`,path:a.path,functionName:n.name});return}if(!u(e,t,s)){j(r,{code:`payload.outside-project`,message:`Referenced test payload resolves outside the manifest directory through a symlink.`,path:a.path,functionName:n.name});return}if(!e.fs.statSync(s).isFile()){j(r,{code:`payload.not-file`,message:`Referenced test payload is not a regular file.`,path:a.path,functionName:n.name});return}o.push(s);let c;try{c=JSON.parse(e.fs.readFileSync(s,`utf8`))}catch(e){j(r,{code:`payload.invalid-json`,message:`Invalid JSON: ${e.message}`,path:a.path,functionName:n.name});return}let l=i[a.type];l(c)||(l.errors??[]).forEach(e=>j(r,{code:`payload.schema`,message:I(e),path:a.path,functionName:n.name}))})}),{sources:a,payloadPaths:[...new Set(o)]}}function R(e){try{let t=JSON.parse(e),n=Array.isArray(t)?t:t&&typeof t==`object`&&Array.isArray(t.nodes)?t.nodes:void 0;return n?new Set(n.flatMap(e=>{if(!e||typeof e!=`object`)return[];let t=e.name;return typeof t==`string`?[t]:[]})):new Set}catch{return new Set}}function z(e){switch(y(e)){case`.ts`:case`.tsx`:return`ts`;case`.json`:case`.jsonc`:return`json`;case`.yaml`:case`.yml`:return`yaml`;default:return`ts`}}function B(e,t,n){if(!n)return;let r=A(e.fs.readFileSync(n,`utf8`));if(typeof r?.importMap==`string`){if(/^[a-z][a-z\d+.-]*:/iu.test(r.importMap))return r.importMap;let i=S(v(n),r.importMap);return d(e,t,i),i}let i={};if(r.imports!==void 0&&(i.imports=r.imports),r.scopes!==void 0&&(i.scopes=r.scopes),Object.keys(i).length!==0)return`data:application/json,${encodeURIComponent(JSON.stringify(i))}`}async function V(e,t,n,r,i){let a=[],o=[];for(let s of i){d(e,n,s);let i=e.fs.readFileSync(s,`utf8`),c=await t(`deno`,[`fmt`,...r,`--ext=${z(s)}`,`-`],{cwd:n,input:i},e);if(c.code!==0)throw Error(`Deno could not preview formatting for ${M(n,s)}.${c.stderr.trim()?`\n${c.stderr.trim()}`:``}`);if(c.stdout!==i){let t=M(n,s);a.push(T(t,t,i,c.stdout,``,``,{context:3})),o.push({kind:`file`,path:s,before:i,after:c.stdout,description:`Format ${t}`,mode:e.fs.statSync(s).mode})}}return{patch:a.join(`
-`),changes:o}}function H(e,t,n,r){j(e,{code:t,message:`${n}${r.stderr.trim()?`\n${r.stderr.trim()}`:``}`})}async function U(t,n,r=h){let i=S(n.manifestPath),a=v(i),o=[],s=new Map([[`manifest`,`passed`],[`files`,`passed`],[`payloads`,`passed`],[`runtime`,`passed`],[`exports`,`passed`],[`typecheck`,`passed`],[`lint`,`passed`],[`format`,`passed`]]),f=()=>({version:1,status:o.some(({severity:e})=>e===`error`)?`failed`:`passed`,manifestPath:i,checks:[...s].map(([e,t])=>({name:e,status:t})),diagnostics:o});if(!t.fs.existsSync(i))return j(o,{code:`manifest.missing`,message:`Custom Function manifest does not exist.`,path:M(t.process.cwd(),i)}),s.set(`manifest`,`failed`),[`files`,`payloads`,`runtime`,`exports`,`typecheck`,`lint`,`format`].forEach(e=>s.set(e,`skipped`)),f();let y=[];try{y=p(e(t.fs.readFileSync(i,`utf8`),n.variables??{})).functions}catch(e){return j(o,{code:`manifest.invalid`,message:e.message,path:M(a,i)}),s.set(`manifest`,`failed`),[`files`,`payloads`,`runtime`,`exports`,`typecheck`,`lint`,`format`].forEach(e=>s.set(e,`skipped`)),f()}y.forEach(e=>{try{m({...e.env?{env:e.env}:{},...e[`allowed-hosts`]?{allowedHosts:e[`allowed-hosts`]}:{}})}catch(t){s.set(`manifest`,`failed`),j(o,{code:`manifest.execution-context`,message:t.message,path:M(a,i),functionName:e.name})}});let{sources:x,payloadPaths:C}=L(t,a,y,o);o.some(({code:e})=>[`source.`,`manifest.unresolved-code-path`].some(t=>e.startsWith(t)))&&(s.set(`files`,`failed`),[`exports`,`typecheck`,`lint`].forEach(e=>s.set(e,`failed`))),o.some(({code:e})=>[`payload.`,`manifest.unresolved-payload-path`].some(t=>e.startsWith(t)))&&s.set(`payloads`,`failed`);let w=b(a,`deno.jsonc`),T=b(a,`deno.json`),E=t.fs.existsSync(w)?w:t.fs.existsSync(T)?T:void 0,D=E!==void 0&&!u(t,a,E),O=D,k;if(D)j(o,{code:`deno.config-outside-project`,message:`Deno configuration resolves outside the manifest directory through a symlink.`,path:M(a,E)}),[`exports`,`typecheck`,`lint`,`format`].forEach(e=>s.set(e,`failed`));else try{k=B(t,a,E)}catch(e){O=!0,j(o,{code:`deno.import-map-outside-project`,message:e.message}),[`exports`,`typecheck`,`lint`,`format`].forEach(e=>s.set(e,`failed`))}let A=E&&!O?[`--config=${E}`]:[`--no-config`],N=()=>{[`exports`,`typecheck`,`lint`,`format`].forEach(e=>{s.get(e)!==`failed`&&s.set(e,`skipped`)})},P=await r(`deno`,[`--version`],{cwd:a},t),F=P.code===0?c(P.stdout):void 0;if(F?.level===`warning`&&o.push({code:`deno.version-mismatch`,severity:`warning`,message:F.message}),P.error?.code===`ENOENT`)s.set(`runtime`,`failed`),N(),j(o,{code:`deno.missing`,message:`Deno 2.x is required for export, type, lint, and format checks. Install it from ${l}`});else if(P.code!==0)s.set(`runtime`,`failed`),N(),H(o,`deno.unavailable`,`Deno could not be started.`,P);else if(F?.level===`error`)s.set(`runtime`,`failed`),N(),j(o,{code:`deno.unsupported-version`,message:F.message});else if(!O){for(let e of x){let n=await r(`deno`,[`info`,`--json`,...A,e.path],{cwd:a},t);if(n.code!==0)s.set(`files`,`failed`),H(o,`source.module-graph`,`Could not inspect runtime imports for ${M(a,e.path)}.`,n);else try{let t=g(n.stdout);t.length>0&&(s.set(`files`,`failed`),j(o,{code:`source.local-runtime-import`,message:`Custom Functions must be self-contained. Local or import-map runtime dependencies are not deployed: `+t.join(`, `),path:M(a,e.path),functionName:e.entry.name}))}catch(t){s.set(`files`,`failed`),j(o,{code:`source.module-graph`,message:t.message,path:M(a,e.path),functionName:e.entry.name})}let i=await r(`deno`,[`doc`,`--json`,...k?[`--import-map`,k]:[],e.path],{cwd:a},t);if(i.code!==0){s.set(`exports`,`failed`),H(o,`exports.inspect`,`Could not inspect exports for ${M(a,e.path)}.`,i);continue}let c=R(i.stdout);e.needsDefault&&!c.has(`default`)&&(s.set(`exports`,`failed`),j(o,{code:`exports.default-missing`,message:`The manifest fixtures require a default export.`,path:M(a,e.path),functionName:e.entry.name})),e.needsEnricher&&!c.has(`enricher`)&&(s.set(`exports`,`failed`),j(o,{code:`exports.enricher-missing`,message:"A REQUEST_ENRICHER fixture requires an `enricher` export.",path:M(a,e.path),functionName:e.entry.name})),e.needsAnyDsrExport&&!c.has(`default`)&&!c.has(`enricher`)&&(s.set(`exports`,`failed`),j(o,{code:`exports.dsr-missing`,message:"A DSR Custom Function requires a `default` or `enricher` export.",path:M(a,e.path),functionName:e.entry.name}))}let e=[...new Set(x.map(({path:e})=>e))];if(e.length>0){let n=await r(`deno`,[`check`,...A,...e],{cwd:a},t);n.code!==0&&(s.set(`typecheck`,`failed`),H(o,`deno.typecheck`,`Deno type checking failed.`,n));let i=await r(`deno`,[`lint`,...A,...e],{cwd:a},t);i.code!==0&&(s.set(`lint`,`failed`),H(o,`deno.lint`,`Deno linting failed.`,i))}let c=[...e,...C,i,...E?[E]:[],...k&&k!==E&&!/^[a-z][a-z\d+.-]*:/iu.test(k)?[k]:[]];c.forEach(e=>d(t,a,e));let l=await r(`deno`,[`fmt`,`--check`,...A,...c],{cwd:a},t);if(l.code!==0){let e;try{e=await V(t,r,a,A,c)}catch(e){return s.set(`format`,`failed`),j(o,{code:`deno.format-preview`,message:e.message}),f()}if(e.changes.length===0)return s.set(`format`,`failed`),H(o,`deno.format`,`Deno reported a formatting failure but did not produce a repair.`,l),f();if(n.fix||n.confirmFormat&&await n.confirmFormat(e.patch))try{await _(t,{rootDirectory:a,changes:e.changes})}catch(e){s.set(`format`,`failed`),j(o,{code:`deno.format-fix`,message:`Could not apply formatting transaction: ${e.message}`})}else s.set(`format`,`failed`),e.changes.forEach((t,r)=>{j(o,{code:`deno.format`,message:`Referenced file is not formatted.`+(r===0&&n.includeFormatPatchInDiagnostics&&e.patch?`\n${e.patch}`:``),path:M(a,t.path)})})}}return f()}async function W(e,c){n(this.process);let{manifestPath:l}=o(this.process.cwd(),{...c?{directory:c}:{},...e.manifest?{manifest:e.manifest}:{}}),u=this.fs.existsSync(l)?void 0:a({cwd:this.process.cwd(),manifestPath:l,discoveredManifestPaths:s(this,this.process.cwd()),command:`check`}),d=!e.json&&!e.noInteractive&&!!(this.process.stdin.isTTY&&this.process.stderr.isTTY),f=new r(this);try{let n=await U(this,{manifestPath:l,variables:t(e.variables),fix:e.fix,includeFormatPatchInDiagnostics:!e.json,...d&&!e.fix?{confirmFormat:async e=>(e&&this.logger.error(e),f.confirm(`Format the files shown above?`,!0))}:{}});u&&n.diagnostics.forEach(e=>{e.code===`manifest.missing`&&(e.message=u)}),e.json?this.process.stdout.write(`${JSON.stringify(n)}\n`):(this.logger.info(`${w.bold(`Custom Function checks`)}\n`),n.checks.forEach(({name:e,status:t})=>{let n=t===`passed`?`PASS`:t===`failed`?`FAIL`:`SKIP`,r=t===`passed`?w.green(n):t===`failed`?w.red(n):w.yellow(n);this.logger.info(`${r} ${e[0].toUpperCase()}${e.slice(1)}`)}),n.diagnostics.length>0&&this.logger.error(``),n.diagnostics.forEach(e=>{let t=e.path?`${e.path}: `:``,n=e.functionName?`[${e.functionName}] `:``,r=`${e.severity}: ${t}${n}${e.message}`;e.severity===`warning`?this.logger.warn(w.yellow(r)):this.logger.error(w.red(r))}),n.status===`passed`?(this.logger.info(``),this.logger.info(w.green(`Custom Function checks passed.`))):(this.logger.error(``),this.logger.error(w.red(`Custom Function checks failed.`)))),n.status===`failed`&&(this.process.exitCode=1)}catch(e){throw e instanceof i&&this.process.exit(130),e}}export{W as check};
-//# sourceMappingURL=impl--JGnR3wp.mjs.map

package/dist/impl-7UqkSO3x2.mjs

@@ -1,2 +0,0 @@
-import{n as e,r as t}from"./runOpa-CswzJxIs.mjs";import{t as n}from"./done-input-validation-BUz-aVC5.mjs";import r from"node:path";import i from"colors";async function a({dir:a}){n(this.process),t();let o=r.resolve(a);this.logger.info(i.green(`Running policy tests in ${o}...`));let s=await e([`test`,o]);s!==0&&this.process.exit(s),this.logger.info(i.green(`Policy tests passed.`))}export{a as test};
-//# sourceMappingURL=impl-7UqkSO3x2.mjs.map

package/dist/impl-7UqkSO3x2.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-7UqkSO3x2.mjs","names":[],"sources":["../src/commands/policy/test/impl.ts"],"sourcesContent":["import path from 'node:path';\n\nimport colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { assertOpaInstalled, runOpa } from '../helpers/index.js';\n\n/** CLI flags for `transcend policy test`. */\nexport interface TestCommandFlags {\n  /** Directory containing Rego policy files and tests */\n  dir: string;\n}\n\n/**\n * Run OPA tests against a local policy bundle.\n *\n * @param this - CLI context\n * @param flags - Command flags\n */\nexport async function test(this: LocalContext, { dir }: TestCommandFlags): Promise<void> {\n  doneInputValidation(this.process);\n\n  assertOpaInstalled();\n  const resolvedDir = path.resolve(dir);\n\n  this.logger.info(colors.green(`Running policy tests in ${resolvedDir}...`));\n\n  const exitCode = await runOpa(['test', resolvedDir]);\n  if (exitCode !== 0) {\n    this.process.exit(exitCode);\n  }\n\n  this.logger.info(colors.green('Policy tests passed.'));\n}\n"],"mappings":"yJAoBA,eAAsB,EAAyB,CAAE,OAAwC,CACvF,EAAoB,KAAK,QAAQ,CAEjC,GAAoB,CACpB,IAAM,EAAc,EAAK,QAAQ,EAAI,CAErC,KAAK,OAAO,KAAK,EAAO,MAAM,2BAA2B,EAAY,KAAK,CAAC,CAE3E,IAAM,EAAW,MAAM,EAAO,CAAC,OAAQ,EAAY,CAAC,CAChD,IAAa,GACf,KAAK,QAAQ,KAAK,EAAS,CAG7B,KAAK,OAAO,KAAK,EAAO,MAAM,uBAAuB,CAAC"}

package/dist/impl-B4BgGuF_.mjs

@@ -1,3 +0,0 @@
-import{c as e,i as t,l as n,o as r,s as i}from"./policy-runtime-BMKa-Upy.mjs";import{t as a}from"./policy-bundle-manifest-D6dkbjNi.mjs";import{n as o}from"./inquirer-BeaBetMO.mjs";import{t as s}from"./done-input-validation-BUz-aVC5.mjs";import{t as c}from"./run-captured-process-BXwWXuTh.mjs";import l from"node:path";import u from"colors";const d=[`manifest`,`opa-version`,`regal-version`,`format`,`opa-check`,`regal-lint`,`opa-test`],f={manifest:`Manifest and package roots`,"opa-version":`OPA 1.x`,"regal-version":`Regal`,format:`OPA formatting`,"opa-check":`OPA strict check`,"regal-lint":`Regal lint`,"opa-test":`OPA tests`};function p(e,t){return[e.stdout.trim(),e.stderr.trim()].filter(Boolean).join(`
-`)||t}function m(e,t){return[...new Set(e.split(/\r?\n/gu).map(e=>e.trim()).filter(Boolean).map(e=>l.isAbsolute(e)?l.relative(t,e).split(l.sep).join(`/`):e.split(l.sep).join(`/`)))].sort()}function h(e,t,n=t){return e.fs.readdirSync(n,{withFileTypes:!0}).sort((e,t)=>e.name.localeCompare(t.name)).flatMap(r=>{let i=l.join(n,r.name);return r.isDirectory()?h(e,t,i):!r.isFile()||!r.name.endsWith(`.rego`)?[]:[{path:l.relative(t,i).split(l.sep).join(`/`),contents:e.fs.readFileSync(i,`utf8`)}]})}function g(e,t){e.logger.info(`${u.bold(`Policy verification`)}\n`),t.checks.forEach(({name:n,status:r})=>{let i=r===`passed`?`PASS`:r===`failed`?`FAIL`:`SKIP`,a=r===`passed`?u.green(i):r===`failed`?u.red(i):u.yellow(i),o=n===`opa-version`&&t.tools.opa?` (${t.tools.opa})`:n===`regal-version`&&t.tools.regal?` (${t.tools.regal})`:``;e.logger.info(`${a} ${f[n]}${o}`)}),t.diagnostics.length>0&&e.logger.error(``),t.diagnostics.forEach(t=>{let n=t.path?`${t.path}: `:``;e.logger.error(u.red(`error [${t.code}]: ${n}${t.message}`))}),t.status===`passed`?(e.logger.info(``),e.logger.info(u.green(`Policy verification passed.`))):(e.logger.error(``),e.logger.error(u.red(`Policy verification failed.`)))}async function _({dir:f=`transcend/policy`,fix:_=!1,noInteractive:v=!1,json:y=!1},b=c){s(this.process);let x=l.resolve(this.process.cwd(),f),S=d.map(e=>({name:e,status:`skipped`})),C=[],w={version:1,status:`passed`,directory:x,fix:_,tools:{opa:null,regal:null},checks:S,unformattedFiles:[],fixedFiles:[],diagnostics:C},T=(e,t)=>{S.find(t=>t.name===e).status=t},E=(e,t,n)=>{C.push({code:e,severity:`error`,message:t,...n?{path:n}:{}})};if(!this.fs.existsSync(x)||!this.fs.statSync(x).isDirectory())T(`manifest`,`failed`),E(`project.directory`,`Policy directory does not exist or is not a directory: ${x}`,l.relative(this.process.cwd(),x));else{let s=l.join(x,`manifest.json`);try{a(this.fs.existsSync(s)?this.fs.readFileSync(s,`utf8`):void 0,h(this,x)),T(`manifest`,`passed`)}catch(e){T(`manifest`,`failed`),E(`manifest.invalid`,e instanceof Error?e.message:String(e),l.relative(this.process.cwd(),s))}let c=await b(`opa`,[`version`],{cwd:x},this);if(c.error?.code===`ENOENT`)T(`opa-version`,`failed`),E(`opa.missing`,t);else{let t=`${c.stdout}\n${c.stderr}`,n=e(t);c.code!==0||n?(T(`opa-version`,`failed`),E(`opa.version`,n??p(c,`Unable to determine the installed OPA version.`))):(w.tools.opa=i(t).version,T(`opa-version`,`passed`))}let d=await b(`regal`,[`version`],{cwd:x},this);if(d.error?.code===`ENOENT`)T(`regal-version`,`failed`),E(`regal.missing`,r);else{let e=`${d.stdout}\n${d.stderr}`,t=n(e);d.code!==0||t?(T(`regal-version`,`failed`),E(`regal.version`,t??p(d,`Unable to determine the installed Regal version.`))):(w.tools.regal=i(e).version,T(`regal-version`,`passed`))}if(w.tools.opa){let e=await b(`opa`,[`fmt`,`--list`,x],{cwd:x},this);if(e.code!==0)T(`format`,`failed`),E(`opa.format`,p(e,`opa fmt --list failed with exit code ${e.code}`));else if(w.unformattedFiles=m(e.stdout,x),w.unformattedFiles.length===0)T(`format`,`passed`);else{let e=_,t=!y&&!v&&!!this.process.stdin.isTTY;if(!y&&!_){this.logger.error(u.red(`Policy files are not formatted:`)),w.unformattedFiles.forEach(e=>{this.logger.error(u.red(`  - ${e}`))});let e=await b(`opa`,[`fmt`,`--diff`,x],{cwd:x},this),t=e.stdout.trim()||e.stderr.trim();t&&(this.logger.error(``),this.logger.error(t))}if(!_&&t)try{e=await o({message:`Format the unformatted policy files listed above?`})}catch(e){let t=e instanceof Error?e.message:String(e);throw/force closed|prompt.*cancel|user.*close|SIGINT/iu.test(t)&&this.process.exit(130),e}if(e){let e=await b(`opa`,[`fmt`,`--write`,x],{cwd:x},this);e.code===0?(w.fixedFiles=[...w.unformattedFiles],T(`format`,`passed`)):(T(`format`,`failed`),E(`opa.format-fix`,p(e,`opa fmt --write failed with exit code ${e.code}`)))}else T(`format`,`failed`),E(`opa.format-required`,"Policy files are not formatted. Re-run `transcend policy lint --fix` to repair them.")}let t=await b(`opa`,[`check`,`--strict`,`--v0-compatible`,`--ignore`,`*_test.rego`,x],{cwd:x},this);t.code===0?T(`opa-check`,`passed`):(T(`opa-check`,`failed`),E(`opa.check`,p(t,`opa check failed with exit code ${t.code}`)))}if(w.tools.regal){let e=l.join(x,`.regal`,`config.yaml`),t=l.join(x,`.regal.yaml`),n=this.fs.existsSync(e)?e:this.fs.existsSync(t)?t:void 0,r=await b(`regal`,[`lint`,`--fail-level`,`warning`,...n?[`--config-file`,n]:[],x],{cwd:x},this);r.code===0?T(`regal-lint`,`passed`):(T(`regal-lint`,`failed`),E(`regal.lint`,p(r,`regal lint failed with exit code ${r.code}`)))}if(w.tools.opa){let e=await b(`opa`,[`test`,`--fail-on-empty`,x],{cwd:x},this);e.code===0?T(`opa-test`,`passed`):(T(`opa-test`,`failed`),E(`opa.test`,p(e,`opa test --fail-on-empty failed with exit code ${e.code}`)))}}w.status=S.some(({status:e})=>e===`failed`)?`failed`:`passed`,y?this.process.stdout.write(`${JSON.stringify(w)}\n`):g(this,w),w.status===`failed`&&(this.process.exitCode=1)}export{_ as lint};
-//# sourceMappingURL=impl-B4BgGuF_.mjs.map

package/dist/impl-B4BgGuF_.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-B4BgGuF_.mjs","names":[],"sources":["../src/lib/policy/policy-lint-model.ts","../src/lib/policy/policy-lint-output.ts","../src/commands/policy/lint/impl.ts"],"sourcesContent":["/** Stable policy lint result schema version. */\nexport const POLICY_LINT_RESULT_VERSION = 1;\n\n/** Status of the full gate or an individual verification. */\nexport type PolicyLintStatus = 'passed' | 'failed' | 'skipped';\n\n/** One named policy verification. */\nexport interface PolicyLintCheck {\n  /** Stable verification name. */\n  name:\n    | 'manifest'\n    | 'opa-version'\n    | 'regal-version'\n    | 'format'\n    | 'opa-check'\n    | 'regal-lint'\n    | 'opa-test';\n  /** Verification outcome. */\n  status: PolicyLintStatus;\n}\n\n/** Stable verification execution order. */\nexport const POLICY_LINT_CHECK_NAMES: PolicyLintCheck['name'][] = [\n  'manifest',\n  'opa-version',\n  'regal-version',\n  'format',\n  'opa-check',\n  'regal-lint',\n  'opa-test',\n];\n\n/** User-facing verification labels. */\nexport const POLICY_LINT_CHECK_LABELS: Readonly<Record<PolicyLintCheck['name'], string>> = {\n  manifest: 'Manifest and package roots',\n  'opa-version': 'OPA 1.x',\n  'regal-version': 'Regal',\n  format: 'OPA formatting',\n  'opa-check': 'OPA strict check',\n  'regal-lint': 'Regal lint',\n  'opa-test': 'OPA tests',\n};\n\n/** One machine-readable policy lint diagnostic. */\nexport interface PolicyLintDiagnostic {\n  /** Stable diagnostic identifier. */\n  code: string;\n  /** Diagnostic severity. */\n  severity: 'error';\n  /** Human-readable detail, including captured tool output when available. */\n  message: string;\n  /** Optional path relative to the invocation directory. */\n  path?: string;\n}\n\n/** Detected local policy tool versions. */\nexport interface PolicyLintTools {\n  /** Detected OPA version, or null when missing or unsupported. */\n  opa: string | null;\n  /** Detected Regal version, or null when missing or unsupported. */\n  regal: string | null;\n}\n\n/** Stable result emitted by `transcend policy lint --json`. */\nexport interface PolicyLintResult {\n  /** Result schema version. */\n  version: typeof POLICY_LINT_RESULT_VERSION;\n  /** Overall verification outcome. */\n  status: Exclude<PolicyLintStatus, 'skipped'>;\n  /** Absolute policy project directory. */\n  directory: string;\n  /** Whether formatting repair was explicitly requested. */\n  fix: boolean;\n  /** Detected supported tool versions. */\n  tools: PolicyLintTools;\n  /** Verification outcomes in stable execution order. */\n  checks: PolicyLintCheck[];\n  /** Files found to need OPA formatting, relative to the policy directory. */\n  unformattedFiles: string[];\n  /** Files repaired with OPA formatting, relative to the policy directory. */\n  fixedFiles: string[];\n  /** Ordered verification diagnostics. */\n  diagnostics: PolicyLintDiagnostic[];\n}\n","import path from 'node:path';\n\nimport type { CapturedProcessResult } from '../cli/run-captured-process.js';\n\n/**\n * Use captured tool output as a concise diagnostic.\n *\n * @param result - Captured process result\n * @param fallback - Message used when the tool emitted no output\n * @returns Diagnostic message\n */\nexport function getPolicyProcessFailureMessage(\n  result: CapturedProcessResult,\n  fallback: string,\n): string {\n  const output = [result.stdout.trim(), result.stderr.trim()].filter(Boolean).join('\\n');\n  return output || fallback;\n}\n\n/**\n * Convert absolute OPA formatter paths to stable project-relative paths.\n *\n * @param stdout - `opa fmt --list` output\n * @param projectDirectory - Absolute policy directory\n * @returns Sorted unique paths\n */\nexport function parseUnformattedPolicyFiles(stdout: string, projectDirectory: string): string[] {\n  return [\n    ...new Set(\n      stdout\n        .split(/\\r?\\n/gu)\n        .map((file) => file.trim())\n        .filter(Boolean)\n        .map((file) =>\n          path.isAbsolute(file)\n            ? path.relative(projectDirectory, file).split(path.sep).join('/')\n            : file.split(path.sep).join('/'),\n        ),\n    ),\n  ].sort();\n}\n","import path from 'node:path';\n\nimport colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport {\n  runCapturedProcess,\n  type CapturedProcessRunner,\n} from '../../../lib/cli/run-captured-process.js';\nimport { inquirerConfirmBoolean } from '../../../lib/helpers/inquirer.js';\nimport {\n  type PolicyBundleRegoFile,\n  validatePolicyBundleContents,\n} from '../../../lib/policy/policy-bundle-manifest.js';\nimport {\n  type PolicyLintCheck,\n  type PolicyLintDiagnostic,\n  type PolicyLintResult,\n  POLICY_LINT_CHECK_LABELS,\n  POLICY_LINT_CHECK_NAMES,\n  POLICY_LINT_RESULT_VERSION,\n} from '../../../lib/policy/policy-lint-model.js';\nimport {\n  getPolicyProcessFailureMessage,\n  parseUnformattedPolicyFiles,\n} from '../../../lib/policy/policy-lint-output.js';\nimport {\n  OPA_MISSING_MESSAGE,\n  parsePolicyToolVersion,\n  REGAL_MISSING_MESSAGE,\n  unsupportedOpaVersionMessage,\n  unsupportedRegalVersionMessage,\n} from '../../../lib/policy/policy-runtime.js';\n\n/** CLI flags for `transcend policy lint`. */\nexport interface LintCommandFlags {\n  /** Directory containing manifest.json, Rego policy files, and tests. */\n  dir: string;\n  /** Apply OPA formatting. */\n  fix: boolean;\n  /** Disable the optional formatting confirmation. */\n  noInteractive: boolean;\n  /** Emit one stable JSON result on stdout. */\n  json: boolean;\n}\n\n/**\n * Collect Rego source snapshots without following symlinks.\n *\n * @param context - CLI context\n * @param projectDirectory - Absolute policy directory\n * @param currentDirectory - Current recursive directory\n * @returns Deterministically ordered Rego snapshots\n */\nfunction collectRegoFiles(\n  context: LocalContext,\n  projectDirectory: string,\n  currentDirectory: string = projectDirectory,\n): PolicyBundleRegoFile[] {\n  return context.fs\n    .readdirSync(currentDirectory, { withFileTypes: true })\n    .sort((left, right) => left.name.localeCompare(right.name))\n    .flatMap((entry) => {\n      const absolutePath = path.join(currentDirectory, entry.name);\n      if (entry.isDirectory()) {\n        return collectRegoFiles(context, projectDirectory, absolutePath);\n      }\n      if (!entry.isFile() || !entry.name.endsWith('.rego')) {\n        return [];\n      }\n      return [\n        {\n          path: path.relative(projectDirectory, absolutePath).split(path.sep).join('/'),\n          contents: context.fs.readFileSync(absolutePath, 'utf8'),\n        },\n      ];\n    });\n}\n\n/**\n * Render the terminal summary for a policy verification result.\n *\n * @param context - CLI context\n * @param result - Completed verification result\n */\nfunction renderResult(context: LocalContext, result: PolicyLintResult): void {\n  context.logger.info(`${colors.bold('Policy verification')}\\n`);\n  result.checks.forEach(({ name, status }) => {\n    const label = status === 'passed' ? 'PASS' : status === 'failed' ? 'FAIL' : 'SKIP';\n    const styledLabel =\n      status === 'passed'\n        ? colors.green(label)\n        : status === 'failed'\n          ? colors.red(label)\n          : colors.yellow(label);\n    const version =\n      name === 'opa-version' && result.tools.opa\n        ? ` (${result.tools.opa})`\n        : name === 'regal-version' && result.tools.regal\n          ? ` (${result.tools.regal})`\n          : '';\n    context.logger.info(`${styledLabel} ${POLICY_LINT_CHECK_LABELS[name]}${version}`);\n  });\n  if (result.diagnostics.length > 0) {\n    context.logger.error('');\n  }\n  result.diagnostics.forEach((diagnostic) => {\n    const location = diagnostic.path ? `${diagnostic.path}: ` : '';\n    context.logger.error(\n      colors.red(`error [${diagnostic.code}]: ${location}${diagnostic.message}`),\n    );\n  });\n  if (result.status === 'passed') {\n    context.logger.info('');\n    context.logger.info(colors.green('Policy verification passed.'));\n  } else {\n    context.logger.error('');\n    context.logger.error(colors.red('Policy verification failed.'));\n  }\n}\n\n/**\n * Verify a local policy project with the shared upload contract, OPA, and Regal.\n *\n * @param this - CLI context\n * @param flags - Command flags\n * @param runner - Captured subprocess runner\n */\nexport async function lint(\n  this: LocalContext,\n  { dir = 'transcend/policy', fix = false, noInteractive = false, json = false }: LintCommandFlags,\n  runner: CapturedProcessRunner = runCapturedProcess,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  const resolvedDir = path.resolve(this.process.cwd(), dir);\n  const checks: PolicyLintCheck[] = POLICY_LINT_CHECK_NAMES.map((name) => ({\n    name,\n    status: 'skipped',\n  }));\n  const diagnostics: PolicyLintDiagnostic[] = [];\n  const result: PolicyLintResult = {\n    version: POLICY_LINT_RESULT_VERSION,\n    status: 'passed',\n    directory: resolvedDir,\n    fix,\n    tools: { opa: null, regal: null },\n    checks,\n    unformattedFiles: [],\n    fixedFiles: [],\n    diagnostics,\n  };\n  const setStatus = (name: PolicyLintCheck['name'], status: PolicyLintCheck['status']): void => {\n    checks.find((check) => check.name === name)!.status = status;\n  };\n  const addError = (code: string, message: string, diagnosticPath?: string): void => {\n    diagnostics.push({\n      code,\n      severity: 'error',\n      message,\n      ...(diagnosticPath ? { path: diagnosticPath } : {}),\n    });\n  };\n\n  if (!this.fs.existsSync(resolvedDir) || !this.fs.statSync(resolvedDir).isDirectory()) {\n    setStatus('manifest', 'failed');\n    addError(\n      'project.directory',\n      `Policy directory does not exist or is not a directory: ${resolvedDir}`,\n      path.relative(this.process.cwd(), resolvedDir),\n    );\n  } else {\n    const manifestPath = path.join(resolvedDir, 'manifest.json');\n    try {\n      validatePolicyBundleContents(\n        this.fs.existsSync(manifestPath) ? this.fs.readFileSync(manifestPath, 'utf8') : undefined,\n        collectRegoFiles(this, resolvedDir),\n      );\n      setStatus('manifest', 'passed');\n    } catch (error) {\n      setStatus('manifest', 'failed');\n      addError(\n        'manifest.invalid',\n        error instanceof Error ? error.message : String(error),\n        path.relative(this.process.cwd(), manifestPath),\n      );\n    }\n\n    const opaVersionResult = await runner('opa', ['version'], { cwd: resolvedDir }, this);\n    if (opaVersionResult.error?.code === 'ENOENT') {\n      setStatus('opa-version', 'failed');\n      addError('opa.missing', OPA_MISSING_MESSAGE);\n    } else {\n      const opaVersionOutput = `${opaVersionResult.stdout}\\n${opaVersionResult.stderr}`;\n      const unsupportedOpa = unsupportedOpaVersionMessage(opaVersionOutput);\n      if (opaVersionResult.code !== 0 || unsupportedOpa) {\n        setStatus('opa-version', 'failed');\n        addError(\n          'opa.version',\n          unsupportedOpa ??\n            getPolicyProcessFailureMessage(\n              opaVersionResult,\n              'Unable to determine the installed OPA version.',\n            ),\n        );\n      } else {\n        result.tools.opa = parsePolicyToolVersion(opaVersionOutput)!.version;\n        setStatus('opa-version', 'passed');\n      }\n    }\n\n    const regalVersionResult = await runner('regal', ['version'], { cwd: resolvedDir }, this);\n    if (regalVersionResult.error?.code === 'ENOENT') {\n      setStatus('regal-version', 'failed');\n      addError('regal.missing', REGAL_MISSING_MESSAGE);\n    } else {\n      const regalVersionOutput = `${regalVersionResult.stdout}\\n${regalVersionResult.stderr}`;\n      const unsupportedRegal = unsupportedRegalVersionMessage(regalVersionOutput);\n      if (regalVersionResult.code !== 0 || unsupportedRegal) {\n        setStatus('regal-version', 'failed');\n        addError(\n          'regal.version',\n          unsupportedRegal ??\n            getPolicyProcessFailureMessage(\n              regalVersionResult,\n              'Unable to determine the installed Regal version.',\n            ),\n        );\n      } else {\n        result.tools.regal = parsePolicyToolVersion(regalVersionOutput)!.version;\n        setStatus('regal-version', 'passed');\n      }\n    }\n\n    if (result.tools.opa) {\n      const formatResult = await runner(\n        'opa',\n        ['fmt', '--list', resolvedDir],\n        { cwd: resolvedDir },\n        this,\n      );\n      if (formatResult.code !== 0) {\n        setStatus('format', 'failed');\n        addError(\n          'opa.format',\n          getPolicyProcessFailureMessage(\n            formatResult,\n            `opa fmt --list failed with exit code ${formatResult.code}`,\n          ),\n        );\n      } else {\n        result.unformattedFiles = parseUnformattedPolicyFiles(formatResult.stdout, resolvedDir);\n        if (result.unformattedFiles.length === 0) {\n          setStatus('format', 'passed');\n        } else {\n          let shouldFormat = fix;\n          const interactive = !json && !noInteractive && Boolean(this.process.stdin.isTTY);\n          if (!json && !fix) {\n            this.logger.error(colors.red('Policy files are not formatted:'));\n            result.unformattedFiles.forEach((file) => {\n              this.logger.error(colors.red(`  - ${file}`));\n            });\n            const diffResult = await runner(\n              'opa',\n              ['fmt', '--diff', resolvedDir],\n              { cwd: resolvedDir },\n              this,\n            );\n            const diff = diffResult.stdout.trim() || diffResult.stderr.trim();\n            if (diff) {\n              this.logger.error('');\n              this.logger.error(diff);\n            }\n          }\n          if (!fix && interactive) {\n            try {\n              shouldFormat = await inquirerConfirmBoolean({\n                message: 'Format the unformatted policy files listed above?',\n              });\n            } catch (error) {\n              const message = error instanceof Error ? error.message : String(error);\n              if (/force closed|prompt.*cancel|user.*close|SIGINT/iu.test(message)) {\n                this.process.exit(130);\n              }\n              throw error;\n            }\n          }\n          if (shouldFormat) {\n            const writeResult = await runner(\n              'opa',\n              ['fmt', '--write', resolvedDir],\n              { cwd: resolvedDir },\n              this,\n            );\n            if (writeResult.code === 0) {\n              result.fixedFiles = [...result.unformattedFiles];\n              setStatus('format', 'passed');\n            } else {\n              setStatus('format', 'failed');\n              addError(\n                'opa.format-fix',\n                getPolicyProcessFailureMessage(\n                  writeResult,\n                  `opa fmt --write failed with exit code ${writeResult.code}`,\n                ),\n              );\n            }\n          } else {\n            setStatus('format', 'failed');\n            addError(\n              'opa.format-required',\n              'Policy files are not formatted. Re-run `transcend policy lint --fix` to repair them.',\n            );\n          }\n        }\n      }\n\n      const checkResult = await runner(\n        'opa',\n        ['check', '--strict', '--v0-compatible', '--ignore', '*_test.rego', resolvedDir],\n        { cwd: resolvedDir },\n        this,\n      );\n      if (checkResult.code === 0) {\n        setStatus('opa-check', 'passed');\n      } else {\n        setStatus('opa-check', 'failed');\n        addError(\n          'opa.check',\n          getPolicyProcessFailureMessage(\n            checkResult,\n            `opa check failed with exit code ${checkResult.code}`,\n          ),\n        );\n      }\n    }\n\n    if (result.tools.regal) {\n      const nestedRegalConfig = path.join(resolvedDir, '.regal', 'config.yaml');\n      const rootRegalConfig = path.join(resolvedDir, '.regal.yaml');\n      const regalConfig = this.fs.existsSync(nestedRegalConfig)\n        ? nestedRegalConfig\n        : this.fs.existsSync(rootRegalConfig)\n          ? rootRegalConfig\n          : undefined;\n      const regalResult = await runner(\n        'regal',\n        [\n          'lint',\n          '--fail-level',\n          'warning',\n          ...(regalConfig ? ['--config-file', regalConfig] : []),\n          resolvedDir,\n        ],\n        { cwd: resolvedDir },\n        this,\n      );\n      if (regalResult.code === 0) {\n        setStatus('regal-lint', 'passed');\n      } else {\n        setStatus('regal-lint', 'failed');\n        addError(\n          'regal.lint',\n          getPolicyProcessFailureMessage(\n            regalResult,\n            `regal lint failed with exit code ${regalResult.code}`,\n          ),\n        );\n      }\n    }\n\n    if (result.tools.opa) {\n      const testResult = await runner(\n        'opa',\n        ['test', '--fail-on-empty', resolvedDir],\n        { cwd: resolvedDir },\n        this,\n      );\n      if (testResult.code === 0) {\n        setStatus('opa-test', 'passed');\n      } else {\n        setStatus('opa-test', 'failed');\n        addError(\n          'opa.test',\n          getPolicyProcessFailureMessage(\n            testResult,\n            `opa test --fail-on-empty failed with exit code ${testResult.code}`,\n          ),\n        );\n      }\n    }\n  }\n\n  result.status = checks.some(({ status }) => status === 'failed') ? 'failed' : 'passed';\n  if (json) {\n    this.process.stdout.write(`${JSON.stringify(result)}\\n`);\n  } else {\n    renderResult(this, result);\n  }\n  if (result.status === 'failed') {\n    this.process.exitCode = 1;\n  }\n}\n"],"mappings":"oVAsBA,MAAa,EAAqD,CAChE,WACA,cACA,gBACA,SACA,YACA,aACA,WACD,CAGY,EAA8E,CACzF,SAAU,6BACV,cAAe,UACf,gBAAiB,QACjB,OAAQ,iBACR,YAAa,mBACb,aAAc,aACd,WAAY,YACb,CC9BD,SAAgB,EACd,EACA,EACQ,CAER,MADe,CAAC,EAAO,OAAO,MAAM,CAAE,EAAO,OAAO,MAAM,CAAC,CAAC,OAAO,QAAQ,CAAC,KAAK;EACpE,EAAI,EAUnB,SAAgB,EAA4B,EAAgB,EAAoC,CAC9F,MAAO,CACL,GAAG,IAAI,IACL,EACG,MAAM,UAAU,CAChB,IAAK,GAAS,EAAK,MAAM,CAAC,CAC1B,OAAO,QAAQ,CACf,IAAK,GACJ,EAAK,WAAW,EAAK,CACjB,EAAK,SAAS,EAAkB,EAAK,CAAC,MAAM,EAAK,IAAI,CAAC,KAAK,IAAI,CAC/D,EAAK,MAAM,EAAK,IAAI,CAAC,KAAK,IAAI,CACnC,CACJ,CACF,CAAC,MAAM,CCgBV,SAAS,EACP,EACA,EACA,EAA2B,EACH,CACxB,OAAO,EAAQ,GACZ,YAAY,EAAkB,CAAE,cAAe,GAAM,CAAC,CACtD,MAAM,EAAM,IAAU,EAAK,KAAK,cAAc,EAAM,KAAK,CAAC,CAC1D,QAAS,GAAU,CAClB,IAAM,EAAe,EAAK,KAAK,EAAkB,EAAM,KAAK,CAO5D,OANI,EAAM,aAAa,CACd,EAAiB,EAAS,EAAkB,EAAa,CAE9D,CAAC,EAAM,QAAQ,EAAI,CAAC,EAAM,KAAK,SAAS,QAAQ,CAC3C,EAAE,CAEJ,CACL,CACE,KAAM,EAAK,SAAS,EAAkB,EAAa,CAAC,MAAM,EAAK,IAAI,CAAC,KAAK,IAAI,CAC7E,SAAU,EAAQ,GAAG,aAAa,EAAc,OAAO,CACxD,CACF,EACD,CASN,SAAS,EAAa,EAAuB,EAAgC,CAC3E,EAAQ,OAAO,KAAK,GAAG,EAAO,KAAK,sBAAsB,CAAC,IAAI,CAC9D,EAAO,OAAO,SAAS,CAAE,OAAM,YAAa,CAC1C,IAAM,EAAQ,IAAW,SAAW,OAAS,IAAW,SAAW,OAAS,OACtE,EACJ,IAAW,SACP,EAAO,MAAM,EAAM,CACnB,IAAW,SACT,EAAO,IAAI,EAAM,CACjB,EAAO,OAAO,EAAM,CACtB,EACJ,IAAS,eAAiB,EAAO,MAAM,IACnC,KAAK,EAAO,MAAM,IAAI,GACtB,IAAS,iBAAmB,EAAO,MAAM,MACvC,KAAK,EAAO,MAAM,MAAM,GACxB,GACR,EAAQ,OAAO,KAAK,GAAG,EAAY,GAAG,EAAyB,KAAQ,IAAU,EACjF,CACE,EAAO,YAAY,OAAS,GAC9B,EAAQ,OAAO,MAAM,GAAG,CAE1B,EAAO,YAAY,QAAS,GAAe,CACzC,IAAM,EAAW,EAAW,KAAO,GAAG,EAAW,KAAK,IAAM,GAC5D,EAAQ,OAAO,MACb,EAAO,IAAI,UAAU,EAAW,KAAK,KAAK,IAAW,EAAW,UAAU,CAC3E,EACD,CACE,EAAO,SAAW,UACpB,EAAQ,OAAO,KAAK,GAAG,CACvB,EAAQ,OAAO,KAAK,EAAO,MAAM,8BAA8B,CAAC,GAEhE,EAAQ,OAAO,MAAM,GAAG,CACxB,EAAQ,OAAO,MAAM,EAAO,IAAI,8BAA8B,CAAC,EAWnE,eAAsB,EAEpB,CAAE,MAAM,mBAAoB,MAAM,GAAO,gBAAgB,GAAO,OAAO,IACvE,EAAgC,EACjB,CACf,EAAoB,KAAK,QAAQ,CAEjC,IAAM,EAAc,EAAK,QAAQ,KAAK,QAAQ,KAAK,CAAE,EAAI,CACnD,EAA4B,EAAwB,IAAK,IAAU,CACvE,OACA,OAAQ,UACT,EAAE,CACG,EAAsC,EAAE,CACxC,EAA2B,CAC/B,QAAA,EACA,OAAQ,SACR,UAAW,EACX,MACA,MAAO,CAAE,IAAK,KAAM,MAAO,KAAM,CACjC,SACA,iBAAkB,EAAE,CACpB,WAAY,EAAE,CACd,cACD,CACK,GAAa,EAA+B,IAA4C,CAC5F,EAAO,KAAM,GAAU,EAAM,OAAS,EAAK,CAAE,OAAS,GAElD,GAAY,EAAc,EAAiB,IAAkC,CACjF,EAAY,KAAK,CACf,OACA,SAAU,QACV,UACA,GAAI,EAAiB,CAAE,KAAM,EAAgB,CAAG,EAAE,CACnD,CAAC,EAGJ,GAAI,CAAC,KAAK,GAAG,WAAW,EAAY,EAAI,CAAC,KAAK,GAAG,SAAS,EAAY,CAAC,aAAa,CAClF,EAAU,WAAY,SAAS,CAC/B,EACE,oBACA,0DAA0D,IAC1D,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAY,CAC/C,KACI,CACL,IAAM,EAAe,EAAK,KAAK,EAAa,gBAAgB,CAC5D,GAAI,CACF,EACE,KAAK,GAAG,WAAW,EAAa,CAAG,KAAK,GAAG,aAAa,EAAc,OAAO,CAAG,IAAA,GAChF,EAAiB,KAAM,EAAY,CACpC,CACD,EAAU,WAAY,SAAS,OACxB,EAAO,CACd,EAAU,WAAY,SAAS,CAC/B,EACE,mBACA,aAAiB,MAAQ,EAAM,QAAU,OAAO,EAAM,CACtD,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAa,CAChD,CAGH,IAAM,EAAmB,MAAM,EAAO,MAAO,CAAC,UAAU,CAAE,CAAE,IAAK,EAAa,CAAE,KAAK,CACrF,GAAI,EAAiB,OAAO,OAAS,SACnC,EAAU,cAAe,SAAS,CAClC,EAAS,cAAe,EAAoB,KACvC,CACL,IAAM,EAAmB,GAAG,EAAiB,OAAO,IAAI,EAAiB,SACnE,EAAiB,EAA6B,EAAiB,CACjE,EAAiB,OAAS,GAAK,GACjC,EAAU,cAAe,SAAS,CAClC,EACE,cACA,GACE,EACE,EACA,iDACD,CACJ,GAED,EAAO,MAAM,IAAM,EAAuB,EAAiB,CAAE,QAC7D,EAAU,cAAe,SAAS,EAItC,IAAM,EAAqB,MAAM,EAAO,QAAS,CAAC,UAAU,CAAE,CAAE,IAAK,EAAa,CAAE,KAAK,CACzF,GAAI,EAAmB,OAAO,OAAS,SACrC,EAAU,gBAAiB,SAAS,CACpC,EAAS,gBAAiB,EAAsB,KAC3C,CACL,IAAM,EAAqB,GAAG,EAAmB,OAAO,IAAI,EAAmB,SACzE,EAAmB,EAA+B,EAAmB,CACvE,EAAmB,OAAS,GAAK,GACnC,EAAU,gBAAiB,SAAS,CACpC,EACE,gBACA,GACE,EACE,EACA,mDACD,CACJ,GAED,EAAO,MAAM,MAAQ,EAAuB,EAAmB,CAAE,QACjE,EAAU,gBAAiB,SAAS,EAIxC,GAAI,EAAO,MAAM,IAAK,CACpB,IAAM,EAAe,MAAM,EACzB,MACA,CAAC,MAAO,SAAU,EAAY,CAC9B,CAAE,IAAK,EAAa,CACpB,KACD,CACD,GAAI,EAAa,OAAS,EACxB,EAAU,SAAU,SAAS,CAC7B,EACE,aACA,EACE,EACA,wCAAwC,EAAa,OACtD,CACF,SAED,EAAO,iBAAmB,EAA4B,EAAa,OAAQ,EAAY,CACnF,EAAO,iBAAiB,SAAW,EACrC,EAAU,SAAU,SAAS,KACxB,CACL,IAAI,EAAe,EACb,EAAc,CAAC,GAAQ,CAAC,GAAiB,EAAQ,KAAK,QAAQ,MAAM,MAC1E,GAAI,CAAC,GAAQ,CAAC,EAAK,CACjB,KAAK,OAAO,MAAM,EAAO,IAAI,kCAAkC,CAAC,CAChE,EAAO,iBAAiB,QAAS,GAAS,CACxC,KAAK,OAAO,MAAM,EAAO,IAAI,OAAO,IAAO,CAAC,EAC5C,CACF,IAAM,EAAa,MAAM,EACvB,MACA,CAAC,MAAO,SAAU,EAAY,CAC9B,CAAE,IAAK,EAAa,CACpB,KACD,CACK,EAAO,EAAW,OAAO,MAAM,EAAI,EAAW,OAAO,MAAM,CAC7D,IACF,KAAK,OAAO,MAAM,GAAG,CACrB,KAAK,OAAO,MAAM,EAAK,EAG3B,GAAI,CAAC,GAAO,EACV,GAAI,CACF,EAAe,MAAM,EAAuB,CAC1C,QAAS,oDACV,CAAC,OACK,EAAO,CACd,IAAM,EAAU,aAAiB,MAAQ,EAAM,QAAU,OAAO,EAAM,CAItE,KAHI,mDAAmD,KAAK,EAAQ,EAClE,KAAK,QAAQ,KAAK,IAAI,CAElB,EAGV,GAAI,EAAc,CAChB,IAAM,EAAc,MAAM,EACxB,MACA,CAAC,MAAO,UAAW,EAAY,CAC/B,CAAE,IAAK,EAAa,CACpB,KACD,CACG,EAAY,OAAS,GACvB,EAAO,WAAa,CAAC,GAAG,EAAO,iBAAiB,CAChD,EAAU,SAAU,SAAS,GAE7B,EAAU,SAAU,SAAS,CAC7B,EACE,iBACA,EACE,EACA,yCAAyC,EAAY,OACtD,CACF,OAGH,EAAU,SAAU,SAAS,CAC7B,EACE,sBACA,uFACD,CAKP,IAAM,EAAc,MAAM,EACxB,MACA,CAAC,QAAS,WAAY,kBAAmB,WAAY,cAAe,EAAY,CAChF,CAAE,IAAK,EAAa,CACpB,KACD,CACG,EAAY,OAAS,EACvB,EAAU,YAAa,SAAS,EAEhC,EAAU,YAAa,SAAS,CAChC,EACE,YACA,EACE,EACA,mCAAmC,EAAY,OAChD,CACF,EAIL,GAAI,EAAO,MAAM,MAAO,CACtB,IAAM,EAAoB,EAAK,KAAK,EAAa,SAAU,cAAc,CACnE,EAAkB,EAAK,KAAK,EAAa,cAAc,CACvD,EAAc,KAAK,GAAG,WAAW,EAAkB,CACrD,EACA,KAAK,GAAG,WAAW,EAAgB,CACjC,EACA,IAAA,GACA,EAAc,MAAM,EACxB,QACA,CACE,OACA,eACA,UACA,GAAI,EAAc,CAAC,gBAAiB,EAAY,CAAG,EAAE,CACrD,EACD,CACD,CAAE,IAAK,EAAa,CACpB,KACD,CACG,EAAY,OAAS,EACvB,EAAU,aAAc,SAAS,EAEjC,EAAU,aAAc,SAAS,CACjC,EACE,aACA,EACE,EACA,oCAAoC,EAAY,OACjD,CACF,EAIL,GAAI,EAAO,MAAM,IAAK,CACpB,IAAM,EAAa,MAAM,EACvB,MACA,CAAC,OAAQ,kBAAmB,EAAY,CACxC,CAAE,IAAK,EAAa,CACpB,KACD,CACG,EAAW,OAAS,EACtB,EAAU,WAAY,SAAS,EAE/B,EAAU,WAAY,SAAS,CAC/B,EACE,WACA,EACE,EACA,kDAAkD,EAAW,OAC9D,CACF,GAKP,EAAO,OAAS,EAAO,MAAM,CAAE,YAAa,IAAW,SAAS,CAAG,SAAW,SAC1E,EACF,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAO,CAAC,IAAI,CAExD,EAAa,KAAM,EAAO,CAExB,EAAO,SAAW,WACpB,KAAK,QAAQ,SAAW"}

package/dist/impl-BFn-S-Wy2.mjs

@@ -1,4 +0,0 @@
-import{t as e}from"./constants-XH8NIJGC.mjs";import{t}from"./logger-zplFSeXU.mjs";import{t as n}from"./done-input-validation-BUz-aVC5.mjs";import{n as r}from"./constants-DXzsg2CQ.mjs";import i from"fast-glob";import a from"colors";import{buildTranscendGraphQLClient as o,fetchActiveSiloDiscoPlugin as s,uploadSiloDiscoveryResults as c}from"@transcend-io/sdk";import{stringify as l}from"query-string";async function u({scanPath:e,fileGlobs:n,ignoreDirs:r,config:a}){let{ignoreDirs:o,supportedFiles:s,scanFunction:c}=a,l=n===``?s:s.concat(n.split(`,`)),d=[...r.split(`,`),...o].filter(e=>e.length>0);try{let n=await i(`${e}/**/${l.join(`|`)}`,{ignore:d.map(t=>`${e}/**/${t}`),unique:!0,onlyFiles:!0});t.info(`Scanning: ${n.length} files`);let r=n.map(e=>c(e)).flat().map(e=>e.softwareDevelopmentKits||[]).flat(),a=[...new Set(r.map(e=>e.name))];return t.info(`Found: ${a.length} unique dependencies`),a.map(t=>({name:t,resourceId:`${e}/**/${t}`,useStrictClassifier:!0}))}catch(e){throw Error(`Error scanning globs ${u} with error: ${e}`)}}async function d({scanPath:t,dataSiloId:i,auth:d,fileGlobs:f,ignoreDirs:p,transcendUrl:m}){n(this.process);let h=o(m,d),g=await s(h,{logger:this.logger,filterBy:{dataSiloId:i}}),_=r[g.dataSilo.type];_||(this.logger.error(a.red(`This plugin "${g.dataSilo.type}" is not supported for offline silo discovery.`)),this.process.exit(1));let v=await u({scanPath:t,fileGlobs:f,ignoreDirs:p,config:_});await c(h,{pluginId:g.id,results:v,logger:this.logger});let y=new URL(e);y.pathname=`/data-map/data-inventory/silo-discovery/triage`,y.search=l({filters:JSON.stringify({pluginIds:[g.id]})}),this.logger.info(a.green(`Scan found ${v.length} potential data silos at ${t}! View at '${y.href}' 
-
- NOTE: it may take 2-3 minutes for scan results to appear in the UI.`))}export{d as discoverSilos};
-//# sourceMappingURL=impl-BFn-S-Wy2.mjs.map

package/dist/impl-BKmibZoG.mjs

@@ -1,2 +0,0 @@
-import{t as e}from"./skipPreflightJobs-CgUcTgzf.mjs";import{t}from"./done-input-validation-BUz-aVC5.mjs";async function n({auth:n,transcendUrl:r,enricherIds:i}){t(this.process),await e({transcendUrl:r,auth:n,enricherIds:i})}export{n as skipPreflightJobs};
-//# sourceMappingURL=impl-BKmibZoG.mjs.map

package/dist/impl-C6HtWd1t.mjs

@@ -1,2 +0,0 @@
-import{t as e}from"./parseVariablesFromString-BOSfQ4QF.mjs";import{t}from"./validateTranscendAuth-D6Wr1cxY.mjs";import{t as n}from"./done-input-validation-BUz-aVC5.mjs";import{t as r}from"./path-safety-D5Qwl40b.mjs";import{a as i,o as a}from"./manifest-BNIpO_zW.mjs";import{CustomFunctionPayloadType as o,CustomFunctionType as s}from"@transcend-io/privacy-types";import{dirname as c,resolve as l}from"node:path";import u from"colors";import{buildTranscendGraphQLClient as d,createSombraGotInstance as f,fetchAllCustomFunctions as p,resolveEffectiveSombraId as m,resolveExistingCustomFunction as h,syncCustomFunction as g}from"@transcend-io/sdk";import{mapSeries as _}from"@transcend-io/utils";async function v({auth:v,sombraAuth:y,transcendUrl:b,file:x=`./transcend-functions.yml`,variables:S,dryRun:C,promote:w,force:T,skipTests:E,updateManifest:D,sombraId:O}){if(n(this.process),!this.fs.existsSync(x)){let e=`./transcend/custom-functions/transcend-functions.yml`,t=this.fs.existsSync(e)?` Did you mean --file=${e}?`:` You can specify the file path using --file=./transcend-functions.yml`;this.logger.error(u.red(`The manifest file does not exist on disk: ${x}.${t}`)),this.process.exit(1)}let k=t(v,this);Array.isArray(k)&&(this.logger.error(u.red(`transcend custom-functions push does not support a list of API keys — pass a single API key.`)),this.process.exit(1));let A=k,j=e(S);this.logger.info(u.magenta(`Reading manifest "${x}"...`));let M=c(l(x)),N=i(x,j,e=>r(this,M,e));this.logger.info(u.green(`Found ${N.length} custom function(s) in "${x}"`));let P=d(b,A),F=await p(P,{logger:this.logger}),I=new Map,L=async(e,t)=>{let n=`${e??``}\u0000${t??``}`,r=I.get(n);if(r)return r;this.logger.info(u.magenta(`Connecting to the ${e?`Sombra gateway "${e}"`:`primary Sombra gateway`} to sign code...`));let i=await f(b,A,{logger:this.logger,sombraApiKey:t,...e?{sombraId:e}:{}});return I.set(n,i),i},R=e=>{if(!e.sombraAuthEnv)return y;let t=this.process.env[e.sombraAuthEnv];if(!t)throw Error(`Custom function "${e.name}" sets sombra-auth-env: ${e.sombraAuthEnv}, but that environment variable is not set. Export it (e.g. from a CI secret) before pushing.`);return t},z=[];if(await _(N,async e=>{try{let t=m(e,h(F,e),O),n=await g(P,{input:e,sombra:C?void 0:await L(t,R(e)),defaultSombraId:O,existing:F,promote:w,dryRun:C,force:T,...!E&&e.testPayloads!==void 0?{testPayloads:e.testPayloads}:{},logger:this.logger});z.push({name:e.name,result:n});let r=n.versionNumber?` (version ${n.versionNumber})`:``,i=n.changedFields.length>0?` [${n.changedFields.join(`, `)}]`:``;switch(n.outcome){case`created`:n.createdDataSilo&&n.dataSiloId&&this.logger.info(u.green(`Created DSR integration (data silo ${n.dataSiloId}) for "${e.name}"`)),this.logger.info(u.green(`Created custom function "${e.name}"${r}`));break;case`updated`:this.logger.info(u.green(`Pushed new revision to "${e.name}"${r}${i}${n.promoted?` and promoted to active`:` as a draft`}`));break;case`metadata-updated`:this.logger.info(u.green(`Updated metadata for "${e.name}"${i} — code unchanged, no new revision`));break;case`skipped`:this.logger.info(u.yellow(`Skipped "${e.name}" — no changes detected (env variable values cannot be diffed; use --force if only values changed)`));break;case`would-create`:this.logger.info(u.cyan(`[dry run] Would create custom function "${e.name}"${e.type===s.Dsr&&!e.dataSiloId?` and its DSR integration (data silo)`:``}`));break;case`would-update`:this.logger.info(u.cyan(`[dry run] Would push a new revision to "${e.name}"${i}`));break;case`test-failed`:{let t=(n.testResults??[]).filter(({passed:e})=>!e);this.logger.error(u.red(`Rejected "${e.name}" — ${t.length} of ${n.testResults?.length??0} test run(s) failed`)),t.forEach(({payloadType:e,result:t})=>{let n=e?`[${e}] `:``;this.logger.error(u.red(`  ${n}${t.error?t.error.message:`failed with exit code ${t.exitCode}`}`)),t.logs.forEach(({file:e,message:t})=>{this.logger.error(u.red(`    [${e}] ${t}`))})}),n.createdDataSilo&&this.logger.error(u.red(`  The DSR integration (data silo) created for "${e.name}" was rolled back.`));break}}if(!E&&(e.testPayloads===void 0||e.testPayloads.length===0)&&(n.outcome===`created`||n.outcome===`updated`)&&this.logger.warn(u.yellow(`Custom function "${e.name}" was pushed without a test run — add a test-payload to its manifest entry to enable test-before-promote.`)),!E&&e.type===s.Dsr&&e.testPayloads!==void 0&&e.testPayloads.length>0&&(n.outcome===`created`||n.outcome===`updated`)){let t=new Set(e.testPayloads.map(({payloadType:e})=>e??o.DataPoint));if(t.size===1){let[n]=t,r=n===o.DataPoint?o.RequestEnricher:o.DataPoint;this.logger.warn(u.yellow(`DSR custom function "${e.name}" only tests its ${n} export — if it also implements the ${r} export, add a test payload with payload-type: ${r} so both entry points are tested on every push.`))}}}catch(t){z.push({name:e.name,error:t}),this.logger.error(u.red(`Failed to sync custom function "${e.name}": ${t.message}`))}}),D&&!C){let e=a(x,N.map((e,t)=>{let n=z[t]?.result;if(!n)return;let r={...!e.id&&n.customFunctionId?{id:n.customFunctionId}:{},...!e.dataSiloId&&n.dataSiloId?{dataSiloId:n.dataSiloId}:{}};return Object.keys(r).length>0?r:void 0}));e>0&&this.logger.info(u.green(`Wrote assigned id(s) back to ${e} manifest entr(ies) in "${x}" — commit this change so future pushes match by ID.`))}let B=e=>z.filter(({result:t})=>t?.outcome===e).length,V=z.filter(({error:e})=>e!==void 0),H=B(`test-failed`);this.logger.info(u.magenta(`Custom function sync complete: ${B(`created`)+B(`would-create`)} created, ${B(`updated`)+B(`would-update`)} updated, ${B(`metadata-updated`)} metadata-only, ${B(`skipped`)} skipped, ${H} rejected (test failed), ${V.length} failed${C?` (dry run)`:``}`)),(V.length>0||H>0)&&this.process.exit(1)}export{v as push};
-//# sourceMappingURL=impl-C6HtWd1t.mjs.map

package/dist/impl-C6HtWd1t.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-C6HtWd1t.mjs","names":[],"sources":["../src/commands/custom-functions/push/impl.ts"],"sourcesContent":["import { dirname, resolve } from 'node:path';\n\nimport { CustomFunctionPayloadType, CustomFunctionType } from '@transcend-io/privacy-types';\nimport {\n  buildTranscendGraphQLClient,\n  createSombraGotInstance,\n  fetchAllCustomFunctions,\n  resolveEffectiveSombraId,\n  resolveExistingCustomFunction,\n  syncCustomFunction,\n  type CustomFunctionSyncResult,\n} from '@transcend-io/sdk';\nimport { mapSeries } from '@transcend-io/utils';\nimport colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { validateTranscendAuth } from '../../../lib/api-keys/index.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport {\n  readCustomFunctionsManifest,\n  writeCustomFunctionIdsToManifest,\n} from '../../../lib/custom-functions/manifest.js';\nimport { parseVariablesFromString } from '../../../lib/helpers/parseVariablesFromString.js';\nimport { assertPathPhysicallyContained } from '../../../lib/scaffolding/path-safety.js';\n\nexport interface CustomFunctionsPushCommandFlags {\n  auth: string;\n  sombraAuth?: string;\n  transcendUrl: string;\n  file: string;\n  variables: string;\n  dryRun: boolean;\n  promote: boolean;\n  force: boolean;\n  skipTests: boolean;\n  updateManifest: boolean;\n  sombraId?: string;\n}\n\nexport async function push(\n  this: LocalContext,\n  {\n    auth,\n    sombraAuth,\n    transcendUrl,\n    file = './transcend-functions.yml',\n    variables,\n    dryRun,\n    promote,\n    force,\n    skipTests,\n    updateManifest,\n    sombraId,\n  }: CustomFunctionsPushCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  // Read and validate the manifest before performing auth or network setup.\n  if (!this.fs.existsSync(file)) {\n    const scaffoldedManifest = './transcend/custom-functions/transcend-functions.yml';\n    const suggestion = this.fs.existsSync(scaffoldedManifest)\n      ? ` Did you mean --file=${scaffoldedManifest}?`\n      : ' You can specify the file path using --file=./transcend-functions.yml';\n    this.logger.error(\n      colors.red(`The manifest file does not exist on disk: ${file}.${suggestion}`),\n    );\n    this.process.exit(1);\n  }\n\n  // This command operates on a single Transcend instance\n  const apiKeyOrList = validateTranscendAuth(auth, this);\n  if (Array.isArray(apiKeyOrList)) {\n    this.logger.error(\n      colors.red(\n        'transcend custom-functions push does not support a list of API keys — pass a single API key.',\n      ),\n    );\n    this.process.exit(1);\n  }\n  const apiKey = apiKeyOrList as string;\n\n  const vars = parseVariablesFromString(variables);\n  this.logger.info(colors.magenta(`Reading manifest \"${file}\"...`));\n  const manifestDirectory = dirname(resolve(file));\n  const configs = readCustomFunctionsManifest(file, vars, (path) =>\n    assertPathPhysicallyContained(this, manifestDirectory, path),\n  );\n  this.logger.info(colors.green(`Found ${configs.length} custom function(s) in \"${file}\"`));\n\n  const client = buildTranscendGraphQLClient(transcendUrl, apiKey);\n\n  // Fetch existing functions once to diff against\n  const existing = await fetchAllCustomFunctions(client, { logger: this.logger });\n\n  // Each custom function belongs to a single Sombra gateway whose keys sign\n  // its code, so code must be signed against that specific gateway's customer\n  // ingress. Cache one connection per distinct gateway + internal key across\n  // the run.\n  type SombraGot = Awaited<ReturnType<typeof createSombraGotInstance>>;\n  const sombraByGateway = new Map<string, SombraGot>();\n  const getSombraForGateway = async (\n    gatewaySombraId: string | undefined,\n    sombraApiKey: string | undefined,\n  ): Promise<SombraGot> => {\n    const key = `${gatewaySombraId ?? ''}\\u0000${sombraApiKey ?? ''}`;\n    const cached = sombraByGateway.get(key);\n    if (cached) {\n      return cached;\n    }\n    this.logger.info(\n      colors.magenta(\n        `Connecting to the ${\n          gatewaySombraId ? `Sombra gateway \"${gatewaySombraId}\"` : 'primary Sombra gateway'\n        } to sign code...`,\n      ),\n    );\n    const sombra = await createSombraGotInstance(transcendUrl, apiKey, {\n      logger: this.logger,\n      sombraApiKey,\n      ...(gatewaySombraId ? { sombraId: gatewaySombraId } : {}),\n    });\n    sombraByGateway.set(key, sombra);\n    return sombra;\n  };\n\n  /**\n   * Resolve the Sombra internal key for a manifest entry: the env variable\n   * named by `sombra-auth-env` when set (which must be exported), else the\n   * `--sombraAuth` flag.\n   *\n   * @param input - The manifest entry\n   * @returns The internal key to authenticate with, if any\n   */\n  const resolveEntrySombraAuth = (input: {\n    /** Function name, for error messages */\n    name: string;\n    /** Env variable name holding the gateway's internal key */\n    sombraAuthEnv?: string;\n  }): string | undefined => {\n    if (!input.sombraAuthEnv) {\n      return sombraAuth;\n    }\n    const value = this.process.env[input.sombraAuthEnv];\n    if (!value) {\n      throw new Error(\n        `Custom function \"${input.name}\" sets sombra-auth-env: ${input.sombraAuthEnv}, ` +\n          'but that environment variable is not set. Export it (e.g. from a CI secret) ' +\n          'before pushing.',\n      );\n    }\n    return value;\n  };\n\n  // Sync each function in order\n  const results: { name: string; result?: CustomFunctionSyncResult; error?: Error }[] = [];\n  await mapSeries(configs, async (input) => {\n    try {\n      // Resolve the gateway this function belongs to: manifest sombra-id,\n      // else the existing function's gateway, else --sombraId, else primary.\n      // Also validates manifest-vs-existing gateway mismatches.\n      const effectiveSombraId = resolveEffectiveSombraId(\n        input,\n        resolveExistingCustomFunction(existing, input),\n        sombraId,\n      );\n      const result = await syncCustomFunction(client, {\n        input,\n        sombra: dryRun\n          ? undefined\n          : await getSombraForGateway(effectiveSombraId, resolveEntrySombraAuth(input)),\n        defaultSombraId: sombraId,\n        existing,\n        promote,\n        dryRun,\n        force,\n        // Test the freshly signed code before pushing; every payload must\n        // pass or the function is rejected. Dry runs never sign, so nothing\n        // is tested either.\n        ...(!skipTests && input.testPayloads !== undefined\n          ? { testPayloads: input.testPayloads }\n          : {}),\n        logger: this.logger,\n      });\n      results.push({ name: input.name, result });\n\n      const suffix = result.versionNumber ? ` (version ${result.versionNumber})` : '';\n      const changes =\n        result.changedFields.length > 0 ? ` [${result.changedFields.join(', ')}]` : '';\n      switch (result.outcome) {\n        case 'created':\n          if (result.createdDataSilo && result.dataSiloId) {\n            this.logger.info(\n              colors.green(\n                `Created DSR integration (data silo ${result.dataSiloId}) for \"${input.name}\"`,\n              ),\n            );\n          }\n          this.logger.info(colors.green(`Created custom function \"${input.name}\"${suffix}`));\n          break;\n        case 'updated':\n          this.logger.info(\n            colors.green(\n              `Pushed new revision to \"${input.name}\"${suffix}${changes}${\n                result.promoted ? ' and promoted to active' : ' as a draft'\n              }`,\n            ),\n          );\n          break;\n        case 'metadata-updated':\n          this.logger.info(\n            colors.green(\n              `Updated metadata for \"${input.name}\"${changes} — code unchanged, no new revision`,\n            ),\n          );\n          break;\n        case 'skipped':\n          this.logger.info(\n            colors.yellow(\n              `Skipped \"${input.name}\" — no changes detected ` +\n                '(env variable values cannot be diffed; use --force if only values changed)',\n            ),\n          );\n          break;\n        case 'would-create':\n          this.logger.info(\n            colors.cyan(\n              `[dry run] Would create custom function \"${input.name}\"${\n                input.type === CustomFunctionType.Dsr && !input.dataSiloId\n                  ? ' and its DSR integration (data silo)'\n                  : ''\n              }`,\n            ),\n          );\n          break;\n        case 'would-update':\n          this.logger.info(\n            colors.cyan(`[dry run] Would push a new revision to \"${input.name}\"${changes}`),\n          );\n          break;\n        case 'test-failed': {\n          const failed = (result.testResults ?? []).filter(({ passed }) => !passed);\n          this.logger.error(\n            colors.red(\n              `Rejected \"${input.name}\" — ${failed.length} of ${\n                result.testResults?.length ?? 0\n              } test run(s) failed`,\n            ),\n          );\n          failed.forEach(({ payloadType, result: execution }) => {\n            const label = payloadType ? `[${payloadType}] ` : '';\n            this.logger.error(\n              colors.red(\n                `  ${label}${\n                  execution.error\n                    ? execution.error.message\n                    : `failed with exit code ${execution.exitCode}`\n                }`,\n              ),\n            );\n            execution.logs.forEach(({ file: logFile, message }) => {\n              this.logger.error(colors.red(`    [${logFile}] ${message}`));\n            });\n          });\n          if (result.createdDataSilo) {\n            this.logger.error(\n              colors.red(\n                `  The DSR integration (data silo) created for \"${input.name}\" was rolled back.`,\n              ),\n            );\n          }\n          break;\n        }\n      }\n\n      // Anything that reached the push path without a test payload was\n      // promoted untested — call it out so payloads get added over time\n      if (\n        !skipTests &&\n        (input.testPayloads === undefined || input.testPayloads.length === 0) &&\n        (result.outcome === 'created' || result.outcome === 'updated')\n      ) {\n        this.logger.warn(\n          colors.yellow(\n            `Custom function \"${input.name}\" was pushed without a test run — add a ` +\n              'test-payload to its manifest entry to enable test-before-promote.',\n          ),\n        );\n      }\n\n      // DSR functions have two entry points (default export = DATA_POINT,\n      // enricher export = REQUEST_ENRICHER); nudge toward covering both\n      if (\n        !skipTests &&\n        input.type === CustomFunctionType.Dsr &&\n        input.testPayloads !== undefined &&\n        input.testPayloads.length > 0 &&\n        (result.outcome === 'created' || result.outcome === 'updated')\n      ) {\n        const coveredTypes = new Set(\n          input.testPayloads.map(\n            ({ payloadType }) => payloadType ?? CustomFunctionPayloadType.DataPoint,\n          ),\n        );\n        if (coveredTypes.size === 1) {\n          const [covered] = coveredTypes;\n          const uncovered =\n            covered === CustomFunctionPayloadType.DataPoint\n              ? CustomFunctionPayloadType.RequestEnricher\n              : CustomFunctionPayloadType.DataPoint;\n          this.logger.warn(\n            colors.yellow(\n              `DSR custom function \"${input.name}\" only tests its ${covered} export — if it ` +\n                `also implements the ${uncovered} export, add a test payload with ` +\n                `payload-type: ${uncovered} so both entry points are tested on every push.`,\n            ),\n          );\n        }\n      }\n    } catch (err) {\n      results.push({ name: input.name, error: err as Error });\n      this.logger.error(\n        colors.red(`Failed to sync custom function \"${input.name}\": ${(err as Error).message}`),\n      );\n    }\n  });\n\n  // Write assigned IDs back into the manifest so future pushes match by ID\n  // instead of by (potentially non-unique) name, and DSR entries keep\n  // pointing at their (possibly auto-created) integration\n  if (updateManifest && !dryRun) {\n    const idsByIndex = configs.map((input, index) => {\n      const result = results[index]?.result;\n      if (!result) {\n        return undefined;\n      }\n      const ids = {\n        ...(!input.id && result.customFunctionId ? { id: result.customFunctionId } : {}),\n        ...(!input.dataSiloId && result.dataSiloId ? { dataSiloId: result.dataSiloId } : {}),\n      };\n      return Object.keys(ids).length > 0 ? ids : undefined;\n    });\n    const updatedCount = writeCustomFunctionIdsToManifest(file, idsByIndex);\n    if (updatedCount > 0) {\n      this.logger.info(\n        colors.green(\n          `Wrote assigned id(s) back to ${updatedCount} manifest entr(ies) in \"${file}\" — ` +\n            'commit this change so future pushes match by ID.',\n        ),\n      );\n    }\n  }\n\n  // Summarize\n  const count = (outcome: CustomFunctionSyncResult['outcome']): number =>\n    results.filter(({ result }) => result?.outcome === outcome).length;\n  const failures = results.filter(({ error }) => error !== undefined);\n  const rejected = count('test-failed');\n  this.logger.info(\n    colors.magenta(\n      `Custom function sync complete: ${count('created') + count('would-create')} created, ${\n        count('updated') + count('would-update')\n      } updated, ${count('metadata-updated')} metadata-only, ${count(\n        'skipped',\n      )} skipped, ${rejected} rejected (test failed), ${failures.length} failed${\n        dryRun ? ' (dry run)' : ''\n      }`,\n    ),\n  );\n\n  if (failures.length > 0 || rejected > 0) {\n    this.process.exit(1);\n  }\n}\n"],"mappings":"qrBAuCA,eAAsB,EAEpB,CACE,OACA,aACA,eACA,OAAO,4BACP,YACA,SACA,UACA,QACA,YACA,iBACA,YAEa,CAIf,GAHA,EAAoB,KAAK,QAAQ,CAG7B,CAAC,KAAK,GAAG,WAAW,EAAK,CAAE,CAC7B,IAAM,EAAqB,uDACrB,EAAa,KAAK,GAAG,WAAW,EAAmB,CACrD,wBAAwB,EAAmB,GAC3C,wEACJ,KAAK,OAAO,MACV,EAAO,IAAI,6CAA6C,EAAK,GAAG,IAAa,CAC9E,CACD,KAAK,QAAQ,KAAK,EAAE,CAItB,IAAM,EAAe,EAAsB,EAAM,KAAK,CAClD,MAAM,QAAQ,EAAa,GAC7B,KAAK,OAAO,MACV,EAAO,IACL,+FACD,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAEtB,IAAM,EAAS,EAET,EAAO,EAAyB,EAAU,CAChD,KAAK,OAAO,KAAK,EAAO,QAAQ,qBAAqB,EAAK,MAAM,CAAC,CACjE,IAAM,EAAoB,EAAQ,EAAQ,EAAK,CAAC,CAC1C,EAAU,EAA4B,EAAM,EAAO,GACvD,EAA8B,KAAM,EAAmB,EAAK,CAC7D,CACD,KAAK,OAAO,KAAK,EAAO,MAAM,SAAS,EAAQ,OAAO,0BAA0B,EAAK,GAAG,CAAC,CAEzF,IAAM,EAAS,EAA4B,EAAc,EAAO,CAG1D,EAAW,MAAM,EAAwB,EAAQ,CAAE,OAAQ,KAAK,OAAQ,CAAC,CAOzE,EAAkB,IAAI,IACtB,EAAsB,MAC1B,EACA,IACuB,CACvB,IAAM,EAAM,GAAG,GAAmB,GAAG,QAAQ,GAAgB,KACvD,EAAS,EAAgB,IAAI,EAAI,CACvC,GAAI,EACF,OAAO,EAET,KAAK,OAAO,KACV,EAAO,QACL,qBACE,EAAkB,mBAAmB,EAAgB,GAAK,yBAC3D,kBACF,CACF,CACD,IAAM,EAAS,MAAM,EAAwB,EAAc,EAAQ,CACjE,OAAQ,KAAK,OACb,eACA,GAAI,EAAkB,CAAE,SAAU,EAAiB,CAAG,EAAE,CACzD,CAAC,CAEF,OADA,EAAgB,IAAI,EAAK,EAAO,CACzB,GAWH,EAA0B,GAKN,CACxB,GAAI,CAAC,EAAM,cACT,OAAO,EAET,IAAM,EAAQ,KAAK,QAAQ,IAAI,EAAM,eACrC,GAAI,CAAC,EACH,MAAU,MACR,oBAAoB,EAAM,KAAK,0BAA0B,EAAM,cAAc,+FAG9E,CAEH,OAAO,GAIH,EAAgF,EAAE,CA+KxF,GA9KA,MAAM,EAAU,EAAS,KAAO,IAAU,CACxC,GAAI,CAIF,IAAM,EAAoB,EACxB,EACA,EAA8B,EAAU,EAAM,CAC9C,EACD,CACK,EAAS,MAAM,EAAmB,EAAQ,CAC9C,QACA,OAAQ,EACJ,IAAA,GACA,MAAM,EAAoB,EAAmB,EAAuB,EAAM,CAAC,CAC/E,gBAAiB,EACjB,WACA,UACA,SACA,QAIA,GAAI,CAAC,GAAa,EAAM,eAAiB,IAAA,GACrC,CAAE,aAAc,EAAM,aAAc,CACpC,EAAE,CACN,OAAQ,KAAK,OACd,CAAC,CACF,EAAQ,KAAK,CAAE,KAAM,EAAM,KAAM,SAAQ,CAAC,CAE1C,IAAM,EAAS,EAAO,cAAgB,aAAa,EAAO,cAAc,GAAK,GACvE,EACJ,EAAO,cAAc,OAAS,EAAI,KAAK,EAAO,cAAc,KAAK,KAAK,CAAC,GAAK,GAC9E,OAAQ,EAAO,QAAf,CACE,IAAK,UACC,EAAO,iBAAmB,EAAO,YACnC,KAAK,OAAO,KACV,EAAO,MACL,sCAAsC,EAAO,WAAW,SAAS,EAAM,KAAK,GAC7E,CACF,CAEH,KAAK,OAAO,KAAK,EAAO,MAAM,4BAA4B,EAAM,KAAK,GAAG,IAAS,CAAC,CAClF,MACF,IAAK,UACH,KAAK,OAAO,KACV,EAAO,MACL,2BAA2B,EAAM,KAAK,GAAG,IAAS,IAChD,EAAO,SAAW,0BAA4B,gBAEjD,CACF,CACD,MACF,IAAK,mBACH,KAAK,OAAO,KACV,EAAO,MACL,yBAAyB,EAAM,KAAK,GAAG,EAAQ,oCAChD,CACF,CACD,MACF,IAAK,UACH,KAAK,OAAO,KACV,EAAO,OACL,YAAY,EAAM,KAAK,oGAExB,CACF,CACD,MACF,IAAK,eACH,KAAK,OAAO,KACV,EAAO,KACL,2CAA2C,EAAM,KAAK,GACpD,EAAM,OAAS,EAAmB,KAAO,CAAC,EAAM,WAC5C,uCACA,KAEP,CACF,CACD,MACF,IAAK,eACH,KAAK,OAAO,KACV,EAAO,KAAK,2CAA2C,EAAM,KAAK,GAAG,IAAU,CAChF,CACD,MACF,IAAK,cAAe,CAClB,IAAM,GAAU,EAAO,aAAe,EAAE,EAAE,QAAQ,CAAE,YAAa,CAAC,EAAO,CACzE,KAAK,OAAO,MACV,EAAO,IACL,aAAa,EAAM,KAAK,MAAM,EAAO,OAAO,MAC1C,EAAO,aAAa,QAAU,EAC/B,qBACF,CACF,CACD,EAAO,SAAS,CAAE,cAAa,OAAQ,KAAgB,CACrD,IAAM,EAAQ,EAAc,IAAI,EAAY,IAAM,GAClD,KAAK,OAAO,MACV,EAAO,IACL,KAAK,IACH,EAAU,MACN,EAAU,MAAM,QAChB,yBAAyB,EAAU,aAE1C,CACF,CACD,EAAU,KAAK,SAAS,CAAE,KAAM,EAAS,aAAc,CACrD,KAAK,OAAO,MAAM,EAAO,IAAI,QAAQ,EAAQ,IAAI,IAAU,CAAC,EAC5D,EACF,CACE,EAAO,iBACT,KAAK,OAAO,MACV,EAAO,IACL,kDAAkD,EAAM,KAAK,oBAC9D,CACF,CAEH,OAqBJ,GAdE,CAAC,IACA,EAAM,eAAiB,IAAA,IAAa,EAAM,aAAa,SAAW,KAClE,EAAO,UAAY,WAAa,EAAO,UAAY,YAEpD,KAAK,OAAO,KACV,EAAO,OACL,oBAAoB,EAAM,KAAK,2GAEhC,CACF,CAMD,CAAC,GACD,EAAM,OAAS,EAAmB,KAClC,EAAM,eAAiB,IAAA,IACvB,EAAM,aAAa,OAAS,IAC3B,EAAO,UAAY,WAAa,EAAO,UAAY,WACpD,CACA,IAAM,EAAe,IAAI,IACvB,EAAM,aAAa,KAChB,CAAE,iBAAkB,GAAe,EAA0B,UAC/D,CACF,CACD,GAAI,EAAa,OAAS,EAAG,CAC3B,GAAM,CAAC,GAAW,EACZ,EACJ,IAAY,EAA0B,UAClC,EAA0B,gBAC1B,EAA0B,UAChC,KAAK,OAAO,KACV,EAAO,OACL,wBAAwB,EAAM,KAAK,mBAAmB,EAAQ,sCACrC,EAAU,iDAChB,EAAU,iDAC9B,CACF,SAGE,EAAK,CACZ,EAAQ,KAAK,CAAE,KAAM,EAAM,KAAM,MAAO,EAAc,CAAC,CACvD,KAAK,OAAO,MACV,EAAO,IAAI,mCAAmC,EAAM,KAAK,KAAM,EAAc,UAAU,CACxF,GAEH,CAKE,GAAkB,CAAC,EAAQ,CAY7B,IAAM,EAAe,EAAiC,EAXnC,EAAQ,KAAK,EAAO,IAAU,CAC/C,IAAM,EAAS,EAAQ,IAAQ,OAC/B,GAAI,CAAC,EACH,OAEF,IAAM,EAAM,CACV,GAAI,CAAC,EAAM,IAAM,EAAO,iBAAmB,CAAE,GAAI,EAAO,iBAAkB,CAAG,EAAE,CAC/E,GAAI,CAAC,EAAM,YAAc,EAAO,WAAa,CAAE,WAAY,EAAO,WAAY,CAAG,EAAE,CACpF,CACD,OAAO,OAAO,KAAK,EAAI,CAAC,OAAS,EAAI,EAAM,IAAA,IAEyB,CAAC,CACnE,EAAe,GACjB,KAAK,OAAO,KACV,EAAO,MACL,gCAAgC,EAAa,0BAA0B,EAAK,sDAE7E,CACF,CAKL,IAAM,EAAS,GACb,EAAQ,QAAQ,CAAE,YAAa,GAAQ,UAAY,EAAQ,CAAC,OACxD,EAAW,EAAQ,QAAQ,CAAE,WAAY,IAAU,IAAA,GAAU,CAC7D,EAAW,EAAM,cAAc,CACrC,KAAK,OAAO,KACV,EAAO,QACL,kCAAkC,EAAM,UAAU,CAAG,EAAM,eAAe,CAAC,YACzE,EAAM,UAAU,CAAG,EAAM,eAAe,CACzC,YAAY,EAAM,mBAAmB,CAAC,kBAAkB,EACvD,UACD,CAAC,YAAY,EAAS,2BAA2B,EAAS,OAAO,SAChE,EAAS,aAAe,KAE3B,CACF,EAEG,EAAS,OAAS,GAAK,EAAW,IACpC,KAAK,QAAQ,KAAK,EAAE"}

package/dist/impl-CO4ZqlLV.mjs

@@ -1,3 +0,0 @@
-import{r as e,t}from"./policyEngineCliError-DY8V-qkK.mjs";import{i as n,r,t as i}from"./printResult-CHe3nRN4.mjs";import{t as a}from"./formatPolicyBundleVersionSummary-CJmMCLtJ.mjs";import{n as o}from"./resolveBundleIdByName-qXZBrUz_.mjs";import{t as s}from"./done-input-validation-BUz-aVC5.mjs";import c from"colors";async function l({"bundle-name":l,auth:u,"transcend-url":d,json:f,debug:p=!1}){s(this.process),e(p);let m=n(d,u),h=await o(m,l);if(!h)throw Error(`Policy bundle "${l}" was not found for this organization.`);this.logger.info(c.green(`Deactivating active version for bundle "${l}"...`));let g;try{g=await m.post(`v1/policy-engine/policy-bundles/${h}/deactivate`).json()}catch(e){if(e?.response?.statusCode===409)throw new t(`Policy bundle "${l}" has no active version.`,{cause:e});r(e)}i(this.process.stdout,{json:f,data:g,renderTable:()=>[`bundleId    ${g.bundle.id}`,`bundleName  ${g.bundle.bundleName}`,a(g.version)].join(`
-`)}),this.logger.info(c.green(`Policy bundle version deactivated.`))}export{l as deactivate};
-//# sourceMappingURL=impl-CO4ZqlLV.mjs.map

package/dist/impl-CO4ZqlLV.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-CO4ZqlLV.mjs","names":[],"sources":["../src/commands/policy/deactivate/impl.ts"],"sourcesContent":["import colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport {\n  buildPolicyEngineClient,\n  formatPolicyBundleVersionSummary,\n  printResult,\n  resolveBundleIdByName,\n  setPolicyEngineCliDebug,\n  throwPolicyEngineRequestError,\n  PolicyEngineCliError,\n} from '../helpers/index.js';\nimport type { DeactivatePolicyBundleResponse } from '../types.js';\n\n/** CLI flags for `transcend policy deactivate`. */\nexport interface DeactivateCommandFlags {\n  /** Logical bundle name to deactivate */\n  'bundle-name': string;\n  /** Transcend API key */\n  auth: string;\n  /** Transcend API URL */\n  'transcend-url': string;\n  /** Print raw JSON response */\n  json: boolean;\n  /** Include technical error details when a command fails */\n  debug?: boolean;\n}\n\n/**\n * Deactivate the currently active version of a policy bundle.\n *\n * Resolves `--bundle-name` to the parent bundle UUID internally, then calls the\n * Policy Engine deactivate endpoint. The bundle is addressed by name only -- the\n * UUID is never exposed to the operator.\n *\n * @param this - CLI context\n * @param flags - Command flags\n */\nexport async function deactivate(\n  this: LocalContext,\n  {\n    'bundle-name': bundleName,\n    auth,\n    'transcend-url': transcendUrl,\n    json,\n    debug = false,\n  }: DeactivateCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n  setPolicyEngineCliDebug(debug);\n\n  const client = buildPolicyEngineClient(transcendUrl, auth);\n\n  const resolvedBundleId = await resolveBundleIdByName(client, bundleName);\n  if (!resolvedBundleId) {\n    throw new Error(`Policy bundle \"${bundleName}\" was not found for this organization.`);\n  }\n\n  this.logger.info(colors.green(`Deactivating active version for bundle \"${bundleName}\"...`));\n\n  let body: DeactivatePolicyBundleResponse;\n  try {\n    body = await client\n      .post(`v1/policy-engine/policy-bundles/${resolvedBundleId}/deactivate`)\n      .json<DeactivatePolicyBundleResponse>();\n  } catch (err) {\n    // The monolith 409 references the internal bundle UUID; rewrite it to the\n    // user-supplied bundle name so the error is actionable.\n    const statusCode = (err as { response?: { statusCode?: number } })?.response?.statusCode;\n    if (statusCode === 409) {\n      throw new PolicyEngineCliError(`Policy bundle \"${bundleName}\" has no active version.`, {\n        cause: err,\n      });\n    }\n    throwPolicyEngineRequestError(err);\n  }\n\n  printResult(this.process.stdout, {\n    json,\n    data: body,\n    renderTable: () =>\n      [\n        `bundleId    ${body.bundle.id}`,\n        `bundleName  ${body.bundle.bundleName}`,\n        formatPolicyBundleVersionSummary(body.version),\n      ].join('\\n'),\n  });\n\n  this.logger.info(colors.green('Policy bundle version deactivated.'));\n}\n"],"mappings":"8TAuCA,eAAsB,EAEpB,CACE,cAAe,EACf,OACA,gBAAiB,EACjB,OACA,QAAQ,IAEK,CACf,EAAoB,KAAK,QAAQ,CACjC,EAAwB,EAAM,CAE9B,IAAM,EAAS,EAAwB,EAAc,EAAK,CAEpD,EAAmB,MAAM,EAAsB,EAAQ,EAAW,CACxE,GAAI,CAAC,EACH,MAAU,MAAM,kBAAkB,EAAW,wCAAwC,CAGvF,KAAK,OAAO,KAAK,EAAO,MAAM,2CAA2C,EAAW,MAAM,CAAC,CAE3F,IAAI,EACJ,GAAI,CACF,EAAO,MAAM,EACV,KAAK,mCAAmC,EAAiB,aAAa,CACtE,MAAsC,OAClC,EAAK,CAIZ,GADoB,GAAgD,UAAU,aAC3D,IACjB,MAAM,IAAI,EAAqB,kBAAkB,EAAW,0BAA2B,CACrF,MAAO,EACR,CAAC,CAEJ,EAA8B,EAAI,CAGpC,EAAY,KAAK,QAAQ,OAAQ,CAC/B,OACA,KAAM,EACN,gBACE,CACE,eAAe,EAAK,OAAO,KAC3B,eAAe,EAAK,OAAO,aAC3B,EAAiC,EAAK,QAAQ,CAC/C,CAAC,KAAK;EAAK,CACf,CAAC,CAEF,KAAK,OAAO,KAAK,EAAO,MAAM,qCAAqC,CAAC"}

package/dist/impl-COujMWgp.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-COujMWgp.mjs","names":["consentManagersToBusinessEntitiesHelper"],"sources":["../src/commands/inventory/consent-managers-to-business-entities/impl.ts"],"sourcesContent":["import path from 'node:path';\n\nimport colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { filterFileNames } from '../../../lib/api-keys/index.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { consentManagersToBusinessEntities as consentManagersToBusinessEntitiesHelper } from '../../../lib/consent-manager/index.js';\nimport { parseTranscendYaml, serializeTranscendYaml } from '../../../lib/readTranscendYaml.js';\n\nexport interface ConsentManagersToBusinessEntitiesCommandFlags {\n  consentManagerYmlFolder: string;\n  output: string;\n}\n\nexport function consentManagersToBusinessEntities(\n  this: LocalContext,\n  { consentManagerYmlFolder, output }: ConsentManagersToBusinessEntitiesCommandFlags,\n): void {\n  doneInputValidation(this.process);\n\n  // Ensure folder is passed\n  if (\n    !this.fs.existsSync(consentManagerYmlFolder) ||\n    !this.fs.lstatSync(consentManagerYmlFolder).isDirectory()\n  ) {\n    this.logger.error(colors.red(`Folder does not exist: \"${consentManagerYmlFolder}\"`));\n    this.process.exit(1);\n  }\n\n  // Read in each consent manager configuration\n  const inputs = filterFileNames(this.fs.readdirSync(consentManagerYmlFolder)).map((directory) => {\n    const inputPath = path.join(consentManagerYmlFolder, directory);\n    const { 'consent-manager': consentManager } = parseTranscendYaml(\n      this.fs.readFileSync(inputPath, 'utf8'),\n      {},\n      inputPath,\n    );\n    return { name: directory, input: consentManager };\n  });\n\n  // Convert to business entities\n  const businessEntities = consentManagersToBusinessEntitiesHelper(inputs);\n\n  this.logger.info('\\n\\n~~~~~~~~~~~\\nAirgap scripts to host:');\n  businessEntities.forEach(({ attributes, title }, index) => {\n    attributes\n      ?.find((attribute) => attribute.key === 'Airgap Production URL')\n      ?.values?.forEach((url) => {\n        this.logger.info(`${index}) ${title} - ${url}`);\n      });\n  });\n\n  this.fs.writeFileSync(\n    output,\n    serializeTranscendYaml({\n      'business-entities': businessEntities,\n    }),\n  );\n\n  this.logger.info(\n    colors.green(\n      `Successfully wrote ${businessEntities.length} business entities to file \"${output}\"`,\n    ),\n  );\n}\n"],"mappings":"sRAeA,SAAgB,EAEd,CAAE,0BAAyB,UACrB,CACN,EAAoB,KAAK,QAAQ,EAI/B,CAAC,KAAK,GAAG,WAAW,EAAwB,EAC5C,CAAC,KAAK,GAAG,UAAU,EAAwB,CAAC,aAAa,IAEzD,KAAK,OAAO,MAAM,EAAO,IAAI,2BAA2B,EAAwB,GAAG,CAAC,CACpF,KAAK,QAAQ,KAAK,EAAE,EAetB,IAAM,EAAmBA,EAXV,EAAgB,KAAK,GAAG,YAAY,EAAwB,CAAC,CAAC,IAAK,GAAc,CAC9F,IAAM,EAAY,EAAK,KAAK,EAAyB,EAAU,CACzD,CAAE,kBAAmB,GAAmB,EAC5C,KAAK,GAAG,aAAa,EAAW,OAAO,CACvC,EAAE,CACF,EACD,CACD,MAAO,CAAE,KAAM,EAAW,MAAO,EAAgB,EAIoB,CAAC,CAExE,KAAK,OAAO,KAAK;;;yBAA2C,CAC5D,EAAiB,SAAS,CAAE,aAAY,SAAS,IAAU,CACzD,GACI,KAAM,GAAc,EAAU,MAAQ,wBAAwB,EAC9D,QAAQ,QAAS,GAAQ,CACzB,KAAK,OAAO,KAAK,GAAG,EAAM,IAAI,EAAM,KAAK,IAAM,EAC/C,EACJ,CAEF,KAAK,GAAG,cACN,EACA,EAAuB,CACrB,oBAAqB,EACtB,CAAC,CACH,CAED,KAAK,OAAO,KACV,EAAO,MACL,sBAAsB,EAAiB,OAAO,8BAA8B,EAAO,GACpF,CACF"}

package/dist/impl-CUOVJsRg.mjs

@@ -1,3 +0,0 @@
-import{r as e}from"./policyEngineCliError-DY8V-qkK.mjs";import{i as t,n,t as r}from"./printResult-CHe3nRN4.mjs";import{t as i}from"./resolveBundleIdByName-qXZBrUz_.mjs";import{t as a}from"./resolvePolicyBundleVersion-BG7XqBBP.mjs";import{t as o}from"./done-input-validation-BUz-aVC5.mjs";import s from"node:path";import c from"got";import l from"colors";function u(e,t){return`${e}-${t}.tar.gz`}function d(e,t){return[`bundleName  ${e.bundleName}`,`version     ${e.version}`,`output      ${t}`,`sha256      ${e.sha256}`,`sizeBytes   ${e.sizeBytes}`,`uploadedAt  ${e.uploadedAt}`,`activatedAt ${e.activatedAt??`-`}`].join(`
-`)}async function f({"bundle-name":f,version:p,output:m,auth:h,"transcend-url":g,json:_,debug:v=!1}){o(this.process),e(v);let y=t(g,h),b=await i(y,f);if(!b)throw Error(`Policy bundle "${f}" was not found for this organization.`);let x;if(p)x=(await a(y,b.id,{version:p})).id;else{if(!b.activeVersionId)throw Error(`Policy bundle "${f}" has no active version.`);x=b.activeVersionId}this.logger.info(l.green(p?`Fetching download URL for bundle "${f}" version "${p}"...`:`Fetching download URL for active version of bundle "${f}"...`));let S=await n(y.get(`v1/policy-engine/policy-bundles/${b.id}/versions/${x}`).json());if(_){r(this.process.stdout,{json:!0,data:S});return}let C=s.resolve(m??u(f,S.version));this.logger.info(l.green(`Downloading policy bundle to ${C}...`));let w;try{w=await c(S.downloadUrl).buffer()}catch(e){throw Error(`Failed to download policy bundle from the presigned URL: ${e instanceof Error?e.message:String(e)}`,{cause:e})}let T=s.dirname(C);this.fs.mkdirSync(T,{recursive:!0}),this.fs.writeFileSync(C,w),r(this.process.stdout,{json:!1,data:S,renderTable:()=>d(S,C)}),this.logger.info(l.green(`Policy bundle downloaded successfully.`))}export{f as download};
-//# sourceMappingURL=impl-CUOVJsRg.mjs.map

package/dist/impl-CUOVJsRg.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-CUOVJsRg.mjs","names":[],"sources":["../src/commands/policy/download/impl.ts"],"sourcesContent":["import path from 'node:path';\n\nimport colors from 'colors';\nimport got from 'got';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { EMPTY_CELL } from '../constants.js';\nimport {\n  buildPolicyEngineClient,\n  policyEngineRequest,\n  printResult,\n  resolveBundleByName,\n  resolvePolicyBundleVersion,\n  setPolicyEngineCliDebug,\n} from '../helpers/index.js';\nimport type { GetPolicyBundleVersionResponse } from '../types.js';\n\n/** CLI flags for `transcend policy download`. */\nexport interface DownloadCommandFlags {\n  /** Tenant-unique bundle name */\n  'bundle-name': string;\n  /**\n   * Caller-supplied version label to download.\n   * When omitted, downloads the bundle's currently active version.\n   */\n  version?: string;\n  /** Destination file path; defaults to `{bundleName}-{version}.tar.gz` */\n  output?: string;\n  /** Transcend API key */\n  auth: string;\n  /** Transcend API URL */\n  'transcend-url': string;\n  /** Print metadata + presigned URL as JSON without writing a file */\n  json: boolean;\n  /** Include technical error details when a command fails */\n  debug?: boolean;\n}\n\n/**\n * Builds the default output path for a downloaded policy bundle.\n *\n * @param bundleName - Tenant-unique bundle name\n * @param version - Caller-supplied version label\n * @returns Relative path `{bundleName}-{version}.tar.gz`\n */\nexport function defaultPolicyDownloadOutputPath(bundleName: string, version: string): string {\n  return `${bundleName}-${version}.tar.gz`;\n}\n\n/**\n * Formats download metadata for human-readable CLI output.\n *\n * @param body - Version metadata from the Policy Engine API\n * @param outputPath - Destination path written (or that would be written)\n * @returns Summary lines\n */\nfunction formatDownloadSummary(body: GetPolicyBundleVersionResponse, outputPath: string): string {\n  return [\n    `bundleName  ${body.bundleName}`,\n    `version     ${body.version}`,\n    `output      ${outputPath}`,\n    `sha256      ${body.sha256}`,\n    `sizeBytes   ${body.sizeBytes}`,\n    `uploadedAt  ${body.uploadedAt}`,\n    `activatedAt ${body.activatedAt ?? EMPTY_CELL}`,\n  ].join('\\n');\n}\n\n/**\n * Download a compiled policy bundle version to disk.\n *\n * Resolves `--bundle-name` and an optional `--version` to IDs, fetches a\n * short-lived presigned S3 URL from the monolith, then downloads the `.tar.gz`\n * bytes directly from S3 (the monolith does not proxy the artifact).\n *\n * When `--version` is omitted, downloads the bundle's currently active version.\n * If the bundle has no active version, exits with an error.\n *\n * @param this - CLI context\n * @param flags - Command flags\n */\nexport async function download(\n  this: LocalContext,\n  {\n    'bundle-name': bundleName,\n    version,\n    output,\n    auth,\n    'transcend-url': transcendUrl,\n    json,\n    debug = false,\n  }: DownloadCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n  setPolicyEngineCliDebug(debug);\n\n  const client = buildPolicyEngineClient(transcendUrl, auth);\n\n  const bundle = await resolveBundleByName(client, bundleName);\n  if (!bundle) {\n    throw new Error(`Policy bundle \"${bundleName}\" was not found for this organization.`);\n  }\n\n  let versionId: string;\n  if (version) {\n    const resolvedVersion = await resolvePolicyBundleVersion(client, bundle.id, { version });\n    versionId = resolvedVersion.id;\n  } else {\n    if (!bundle.activeVersionId) {\n      throw new Error(`Policy bundle \"${bundleName}\" has no active version.`);\n    }\n    versionId = bundle.activeVersionId;\n  }\n\n  this.logger.info(\n    colors.green(\n      version\n        ? `Fetching download URL for bundle \"${bundleName}\" version \"${version}\"...`\n        : `Fetching download URL for active version of bundle \"${bundleName}\"...`,\n    ),\n  );\n\n  const body = await policyEngineRequest(\n    client\n      .get(`v1/policy-engine/policy-bundles/${bundle.id}/versions/${versionId}`)\n      .json<GetPolicyBundleVersionResponse>(),\n  );\n\n  if (json) {\n    printResult(this.process.stdout, {\n      json: true,\n      data: body,\n    });\n    return;\n  }\n\n  const outputPath = path.resolve(\n    output ?? defaultPolicyDownloadOutputPath(bundleName, body.version),\n  );\n\n  this.logger.info(colors.green(`Downloading policy bundle to ${outputPath}...`));\n\n  let bundleBytes: Uint8Array;\n  try {\n    bundleBytes = await got(body.downloadUrl).buffer();\n  } catch (err) {\n    throw new Error(\n      `Failed to download policy bundle from the presigned URL: ${\n        err instanceof Error ? err.message : String(err)\n      }`,\n      { cause: err },\n    );\n  }\n\n  const outputDir = path.dirname(outputPath);\n  this.fs.mkdirSync(outputDir, { recursive: true });\n  this.fs.writeFileSync(outputPath, bundleBytes);\n\n  printResult(this.process.stdout, {\n    json: false,\n    data: body,\n    renderTable: () => formatDownloadSummary(body, outputPath),\n  });\n\n  this.logger.info(colors.green('Policy bundle downloaded successfully.'));\n}\n"],"mappings":"kWA8CA,SAAgB,EAAgC,EAAoB,EAAyB,CAC3F,MAAO,GAAG,EAAW,GAAG,EAAQ,SAUlC,SAAS,EAAsB,EAAsC,EAA4B,CAC/F,MAAO,CACL,eAAe,EAAK,aACpB,eAAe,EAAK,UACpB,eAAe,IACf,eAAe,EAAK,SACpB,eAAe,EAAK,YACpB,eAAe,EAAK,aACpB,eAAe,EAAK,aAAA,MACrB,CAAC,KAAK;EAAK,CAgBd,eAAsB,EAEpB,CACE,cAAe,EACf,UACA,SACA,OACA,gBAAiB,EACjB,OACA,QAAQ,IAEK,CACf,EAAoB,KAAK,QAAQ,CACjC,EAAwB,EAAM,CAE9B,IAAM,EAAS,EAAwB,EAAc,EAAK,CAEpD,EAAS,MAAM,EAAoB,EAAQ,EAAW,CAC5D,GAAI,CAAC,EACH,MAAU,MAAM,kBAAkB,EAAW,wCAAwC,CAGvF,IAAI,EACJ,GAAI,EAEF,GAAY,MADkB,EAA2B,EAAQ,EAAO,GAAI,CAAE,UAAS,CAAC,EAC5D,OACvB,CACL,GAAI,CAAC,EAAO,gBACV,MAAU,MAAM,kBAAkB,EAAW,0BAA0B,CAEzE,EAAY,EAAO,gBAGrB,KAAK,OAAO,KACV,EAAO,MACL,EACI,qCAAqC,EAAW,aAAa,EAAQ,MACrE,uDAAuD,EAAW,MACvE,CACF,CAED,IAAM,EAAO,MAAM,EACjB,EACG,IAAI,mCAAmC,EAAO,GAAG,YAAY,IAAY,CACzE,MAAsC,CAC1C,CAED,GAAI,EAAM,CACR,EAAY,KAAK,QAAQ,OAAQ,CAC/B,KAAM,GACN,KAAM,EACP,CAAC,CACF,OAGF,IAAM,EAAa,EAAK,QACtB,GAAU,EAAgC,EAAY,EAAK,QAAQ,CACpE,CAED,KAAK,OAAO,KAAK,EAAO,MAAM,gCAAgC,EAAW,KAAK,CAAC,CAE/E,IAAI,EACJ,GAAI,CACF,EAAc,MAAM,EAAI,EAAK,YAAY,CAAC,QAAQ,OAC3C,EAAK,CACZ,MAAU,MACR,4DACE,aAAe,MAAQ,EAAI,QAAU,OAAO,EAAI,GAElD,CAAE,MAAO,EAAK,CACf,CAGH,IAAM,EAAY,EAAK,QAAQ,EAAW,CAC1C,KAAK,GAAG,UAAU,EAAW,CAAE,UAAW,GAAM,CAAC,CACjD,KAAK,GAAG,cAAc,EAAY,EAAY,CAE9C,EAAY,KAAK,QAAQ,OAAQ,CAC/B,KAAM,GACN,KAAM,EACN,gBAAmB,EAAsB,EAAM,EAAW,CAC3D,CAAC,CAEF,KAAK,OAAO,KAAK,EAAO,MAAM,yCAAyC,CAAC"}

package/dist/impl-CUiYbk6G.mjs

@@ -1,3 +0,0 @@
-import{r as e,t}from"./policyEngineCliError-DY8V-qkK.mjs";import{i as n,n as r,t as i}from"./printResult-CHe3nRN4.mjs";import{t as a}from"./formatPolicyBundleVersionSummary-CJmMCLtJ.mjs";import{n as o}from"./resolveBundleIdByName-qXZBrUz_.mjs";import{t as s}from"./resolvePolicyBundleVersion-BG7XqBBP.mjs";import{t as c}from"./done-input-validation-BUz-aVC5.mjs";import l from"colors";async function u({"bundle-name":u,version:d,auth:f,"transcend-url":p,"dry-run":m,json:h,debug:g=!1}){c(this.process),e(g);let _=n(p,f),v=await o(_,u);if(!v)throw Error(`Policy bundle "${u}" was not found for this organization.`);let y=await s(_,v,{version:d});this.logger.info(l.green(m?`Validating activation for version "${y.version}"...`:`Activating version "${y.version}"...`));let b;try{b=await r(_.post(`v1/policy-engine/policy-bundles/${v}/versions/${y.id}/activate`,{json:m?{dryRun:!0}:{}}).json())}catch(e){throw(e instanceof t?e.cause:void 0)?.response?.statusCode===409?new t(`Version "${y.version}" of policy bundle "${u}" is already the active version.`,{cause:e}):e}i(this.process.stdout,{json:h,data:b,renderTable:()=>[`bundleId    ${b.bundle.id}`,`bundleName  ${b.bundle.bundleName}`,a(b.version)].join(`
-`)}),this.logger.info(l.green(m?`Activation validation succeeded.`:`Policy bundle version activated.`))}export{u as activate};
-//# sourceMappingURL=impl-CUiYbk6G.mjs.map

package/dist/impl-CUiYbk6G.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-CUiYbk6G.mjs","names":[],"sources":["../src/commands/policy/activate/impl.ts"],"sourcesContent":["import colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport {\n  buildPolicyEngineClient,\n  formatPolicyBundleVersionSummary,\n  policyEngineRequest,\n  PolicyEngineCliError,\n  printResult,\n  resolveBundleIdByName,\n  resolvePolicyBundleVersion,\n  setPolicyEngineCliDebug,\n} from '../helpers/index.js';\nimport type { ActivatePolicyBundleVersionResponse } from '../types.js';\n\n/** CLI flags for `transcend policy activate`. */\nexport interface ActivateCommandFlags {\n  /** Logical bundle name to activate */\n  'bundle-name': string;\n  /** Caller-supplied version label to activate */\n  version?: string;\n  /** Transcend API key */\n  auth: string;\n  /** Transcend API URL */\n  'transcend-url': string;\n  /** Validate activation without flipping */\n  'dry-run': boolean;\n  /** Print raw JSON response */\n  json: boolean;\n  /** Include technical error details when a command fails */\n  debug?: boolean;\n}\n\n/**\n * Activate an uploaded policy bundle version.\n *\n * Resolves `--bundle-name` to the parent bundle UUID internally, then calls the\n * Policy Engine activate endpoint. The bundle is addressed by name only -- the\n * UUID is never exposed to the operator.\n *\n * @param this - CLI context\n * @param flags - Command flags\n */\nexport async function activate(\n  this: LocalContext,\n  {\n    'bundle-name': bundleName,\n    version,\n    auth,\n    'transcend-url': transcendUrl,\n    'dry-run': dryRun,\n    json,\n    debug = false,\n  }: ActivateCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n  setPolicyEngineCliDebug(debug);\n\n  const client = buildPolicyEngineClient(transcendUrl, auth);\n  const resolvedBundleId = await resolveBundleIdByName(client, bundleName);\n  if (!resolvedBundleId) {\n    throw new Error(`Policy bundle \"${bundleName}\" was not found for this organization.`);\n  }\n  const resolvedVersion = await resolvePolicyBundleVersion(client, resolvedBundleId, { version });\n\n  this.logger.info(\n    colors.green(\n      dryRun\n        ? `Validating activation for version \"${resolvedVersion.version}\"...`\n        : `Activating version \"${resolvedVersion.version}\"...`,\n    ),\n  );\n\n  let body: ActivatePolicyBundleVersionResponse;\n  try {\n    body = await policyEngineRequest(\n      client\n        .post(\n          `v1/policy-engine/policy-bundles/${resolvedBundleId}/versions/${resolvedVersion.id}/activate`,\n          {\n            json: dryRun ? { dryRun: true } : {},\n          },\n        )\n        .json<ActivatePolicyBundleVersionResponse>(),\n    );\n  } catch (err) {\n    // A 409 here means the requested version is already the active version --\n    // surface that specifically (referencing the operator-facing bundle name\n    // and version label) rather than the generic conflict fallback.\n    const statusCode = (\n      err instanceof PolicyEngineCliError\n        ? (err.cause as { response?: { statusCode?: number } } | undefined)\n        : undefined\n    )?.response?.statusCode;\n    if (statusCode === 409) {\n      throw new PolicyEngineCliError(\n        `Version \"${resolvedVersion.version}\" of policy bundle \"${bundleName}\" is already the active version.`,\n        { cause: err },\n      );\n    }\n    throw err;\n  }\n\n  printResult(this.process.stdout, {\n    json,\n    data: body,\n    renderTable: () =>\n      [\n        `bundleId    ${body.bundle.id}`,\n        `bundleName  ${body.bundle.bundleName}`,\n        formatPolicyBundleVersionSummary(body.version),\n      ].join('\\n'),\n  });\n\n  this.logger.info(\n    colors.green(dryRun ? 'Activation validation succeeded.' : 'Policy bundle version activated.'),\n  );\n}\n"],"mappings":"iYA4CA,eAAsB,EAEpB,CACE,cAAe,EACf,UACA,OACA,gBAAiB,EACjB,UAAW,EACX,OACA,QAAQ,IAEK,CACf,EAAoB,KAAK,QAAQ,CACjC,EAAwB,EAAM,CAE9B,IAAM,EAAS,EAAwB,EAAc,EAAK,CACpD,EAAmB,MAAM,EAAsB,EAAQ,EAAW,CACxE,GAAI,CAAC,EACH,MAAU,MAAM,kBAAkB,EAAW,wCAAwC,CAEvF,IAAM,EAAkB,MAAM,EAA2B,EAAQ,EAAkB,CAAE,UAAS,CAAC,CAE/F,KAAK,OAAO,KACV,EAAO,MACL,EACI,sCAAsC,EAAgB,QAAQ,MAC9D,uBAAuB,EAAgB,QAAQ,MACpD,CACF,CAED,IAAI,EACJ,GAAI,CACF,EAAO,MAAM,EACX,EACG,KACC,mCAAmC,EAAiB,YAAY,EAAgB,GAAG,WACnF,CACE,KAAM,EAAS,CAAE,OAAQ,GAAM,CAAG,EAAE,CACrC,CACF,CACA,MAA2C,CAC/C,OACM,EAAK,CAeZ,MAVE,aAAe,EACV,EAAI,MACL,IAAA,KACH,UAAU,aACM,IACX,IAAI,EACR,YAAY,EAAgB,QAAQ,sBAAsB,EAAW,kCACrE,CAAE,MAAO,EAAK,CACf,CAEG,EAGR,EAAY,KAAK,QAAQ,OAAQ,CAC/B,OACA,KAAM,EACN,gBACE,CACE,eAAe,EAAK,OAAO,KAC3B,eAAe,EAAK,OAAO,aAC3B,EAAiC,EAAK,QAAQ,CAC/C,CAAC,KAAK;EAAK,CACf,CAAC,CAEF,KAAK,OAAO,KACV,EAAO,MAAM,EAAS,mCAAqC,mCAAmC,CAC/F"}

package/dist/impl-CbAvM_1J.mjs

@@ -1,2 +0,0 @@
-import{g as e}from"./constants-XH8NIJGC.mjs";import{t}from"./done-input-validation-BUz-aVC5.mjs";import{h as n,n as r,p as i,r as a,t as o}from"./prompts-ClBXdELk.mjs";import{a as s,r as c,t as l}from"./deno-runtime-DV52X8-P.mjs";import{t as u}from"./run-captured-process-BXwWXuTh.mjs";import{t as d}from"./scaffold-model-BAbYTR0q.mjs";import{t as f}from"./project-plan-apply-Dvndx455.mjs";import{c as p,i as m,n as h,s as g}from"./scaffold-planning-CNv83t_v.mjs";import _ from"colors";import{CUSTOM_FUNCTION_TYPES_VERSION as v}from"@transcend-io/custom-function-types";const y={[d.Deno]:`Deno configuration`,[d.Editor]:`VS Code settings`,[d.Skill]:`Agent skill`,[d.Ci]:`GitHub Actions`},b=Object.values(d);function x(e,t,n){return!e.json&&!e.noInteractive&&!!(t&&n)}async function S(e,t,n){let r={[d.Deno]:t.deno,[d.Editor]:t.editor,[d.Skill]:t.skill,[d.Ci]:t.ci};if(!n.interactive)return b.filter(e=>r[e]===!0);let i=b.map(e=>({name:y[e],value:e,checked:r[e]!==!1}));return e.checkbox(`Choose repository setup:`,i)}async function C(y,b){t(this.process);try{let t=s(this,{...b?{directory:b}:{},...y.manifest?{manifest:y.manifest}:{}}),o=new r(this),C=x(y,this.process.stdin.isTTY,this.process.stderr.isTTY),w=await S(o,y,{interactive:C}),T=h({state:t,snapshots:a(this,t.projectRoot,m(t,{features:w})),contractVersion:v,cliVersion:e},{features:w});if(w.includes(d.Deno)){let e=await u(`deno`,[`--version`],{cwd:this.process.cwd()},this);if(e.error?.code===`ENOENT`)T.warnings.push(`Deno 2.x is not installed. Install it from ${l}`);else if(e.code!==0)T.warnings.push(`Deno was found, but its version could not be determined. Deno 2.x is required. See ${l}`);else{let t=c(e.stdout);t.level!==`compatible`&&T.warnings.push(t.message)}}y.json||this.logger.info(n(T,{cwd:this.process.cwd(),title:`Custom Function plan`,details:[{label:`Target`,path:T.targetDirectory},{label:`Manifest`,path:T.manifestPath}]}));let E=T.changes.length===0||y.dryRun;if(T.changes.length>0&&!y.dryRun)if(y.yes)E=!0;else if(C)E=await o.confirm(`Apply this complete plan?`,!0);else throw Error(`The plan requires approval in a non-interactive invocation. Review with --dryRun, then pass --yes.`);E&&!y.dryRun&&T.changes.length>0&&await f(this,T);let D=E&&!y.dryRun&&T.changes.length>0,O=E&&!y.dryRun,k=p({targetDirectory:i(this.process.cwd(),t.targetDirectory),manifestPath:i(this.process.cwd(),t.manifestPath),cliVersion:e,hasSkill:O&&w.includes(d.Skill),hasGithubWorkflow:O&&w.includes(d.Ci)&&!!(t.repositoryRoot&&t.usesGithub)}),A=g(T,{applied:D,dryRun:y.dryRun,cwd:this.process.cwd(),aiHandoff:k});if(y.json){this.process.stdout.write(`${JSON.stringify(A)}\n`);return}if(y.dryRun){this.logger.info(_.yellow(`Dry run complete. No changes were written.`));return}if(!E){this.logger.info(_.yellow(`No changes applied.`));return}if(T.changes.length===0){this.logger.info(_.green(`Custom Function project is already initialized.`));return}this.logger.info(_.green(`Custom Function project initialized.`)),T.nextSteps.length>0&&(this.logger.info(`\n${_.bold(`Next steps`)}`),T.nextSteps.forEach(e=>this.logger.info(e))),this.logger.info(`\n${_.bold(`AI handoff — paste into your coding agent`)}`),this.logger.info(k)}catch(e){throw e instanceof o&&this.process.exit(130),e}}export{C as init};
-//# sourceMappingURL=impl-CbAvM_1J.mjs.map

package/dist/impl-CbAvM_1J.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-CbAvM_1J.mjs","names":["CLI_VERSION"],"sources":["../src/commands/custom-functions/init/impl.ts"],"sourcesContent":["import { CUSTOM_FUNCTION_TYPES_VERSION } from '@transcend-io/custom-function-types';\nimport colors from 'colors';\n\nimport { version as CLI_VERSION } from '../../../constants.js';\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { runCapturedProcess } from '../../../lib/cli/run-captured-process.js';\nimport { buildInitAiHandoff } from '../../../lib/custom-functions/ai-handoff.js';\nimport {\n  DENO_INSTALL_URL,\n  getDenoRuntimeCompatibility,\n  SUPPORTED_DENO_MAJOR_VERSION,\n} from '../../../lib/custom-functions/deno-runtime.js';\nimport { discoverCustomFunctionProject } from '../../../lib/custom-functions/project-discovery.js';\nimport {\n  CustomFunctionSetupFeature,\n  type CustomFunctionSetupFeature as CustomFunctionSetupFeatureType,\n} from '../../../lib/custom-functions/scaffold-model.js';\nimport { buildPlanResult } from '../../../lib/custom-functions/scaffold-output.js';\nimport {\n  buildInitPlan,\n  getInitPlanningCandidatePaths,\n} from '../../../lib/custom-functions/scaffold-planning.js';\nimport { collectPlanningSnapshots } from '../../../lib/scaffolding/project-discovery.js';\nimport { applyProjectPlan } from '../../../lib/scaffolding/project-plan-apply.js';\nimport {\n  displayProjectPath,\n  renderProjectPlan,\n} from '../../../lib/scaffolding/project-plan-output.js';\nimport {\n  PromptCancelledError,\n  type PromptChoice,\n  ScaffoldPrompts,\n} from '../../../lib/scaffolding/prompts.js';\n\n/** Flags for `custom-functions init`. */\nexport interface CustomFunctionInitFlags {\n  /** Explicit manifest path. */\n  manifest?: string;\n  /** Install Deno configuration. */\n  deno?: boolean;\n  /** Install editor recommendations. */\n  editor?: boolean;\n  /** Install the coding-agent skill. */\n  skill?: boolean;\n  /** Install GitHub Actions validation. */\n  ci?: boolean;\n  /** Disable prompts. */\n  noInteractive: boolean;\n  /** Render but do not apply. */\n  dryRun: boolean;\n  /** Approve the final displayed plan. */\n  yes: boolean;\n  /** Emit one stable JSON result on stdout. */\n  json: boolean;\n}\n\n/** User-facing setup labels. */\nconst SETUP_LABELS: Readonly<Record<CustomFunctionSetupFeatureType, string>> = {\n  [CustomFunctionSetupFeature.Deno]: 'Deno configuration',\n  [CustomFunctionSetupFeature.Editor]: 'VS Code settings',\n  [CustomFunctionSetupFeature.Skill]: 'Agent skill',\n  [CustomFunctionSetupFeature.Ci]: 'GitHub Actions',\n};\n\n/** All optional setup features in stable prompt order. */\nconst ALL_SETUP_FEATURES = Object.values(CustomFunctionSetupFeature);\n\n/**\n * Whether this invocation can ask questions.\n *\n * @param context - CLI context\n * @param flags - Interaction flags\n * @returns Whether prompts are enabled\n */\nfunction isInteractiveInvocation(\n  flags: Pick<CustomFunctionInitFlags, 'json' | 'noInteractive'>,\n  stdinIsTTY: boolean | undefined,\n  stderrIsTTY: boolean | undefined,\n): boolean {\n  return !flags.json && !flags.noInteractive && Boolean(stdinIsTTY && stderrIsTTY);\n}\n\n/**\n * Resolve setup directly from individual flags or one checkbox prompt.\n *\n * @param context - CLI context\n * @param prompts - Prompt adapters\n * @param flags - Setup flags\n * @param options - Interaction state\n * @returns Selected setup features\n */\nasync function resolveFeatures(\n  prompts: ScaffoldPrompts,\n  flags: CustomFunctionInitFlags,\n  options: {\n    /** Whether prompts are available. */\n    interactive: boolean;\n  },\n): Promise<CustomFunctionSetupFeatureType[]> {\n  const enabled: Readonly<Record<CustomFunctionSetupFeatureType, boolean | undefined>> = {\n    [CustomFunctionSetupFeature.Deno]: flags.deno,\n    [CustomFunctionSetupFeature.Editor]: flags.editor,\n    [CustomFunctionSetupFeature.Skill]: flags.skill,\n    [CustomFunctionSetupFeature.Ci]: flags.ci,\n  };\n  if (!options.interactive) {\n    return ALL_SETUP_FEATURES.filter((feature) => enabled[feature] === true);\n  }\n  const choices: PromptChoice<CustomFunctionSetupFeatureType>[] = ALL_SETUP_FEATURES.map(\n    (feature) => ({\n      name: SETUP_LABELS[feature],\n      value: feature,\n      checked: enabled[feature] !== false,\n    }),\n  );\n  return prompts.checkbox('Choose repository setup:', choices);\n}\n\n/**\n * Initialize a credential-free local Custom Function project.\n *\n * @param this - CLI context\n * @param flags - Scaffold and interaction flags\n * @param directory - Optional target directory\n */\nexport async function init(\n  this: LocalContext,\n  flags: CustomFunctionInitFlags,\n  directory?: string,\n): Promise<void> {\n  doneInputValidation(this.process);\n  try {\n    const state = discoverCustomFunctionProject(this, {\n      ...(directory ? { directory } : {}),\n      ...(flags.manifest ? { manifest: flags.manifest } : {}),\n    });\n    const prompts = new ScaffoldPrompts(this);\n    const interactive = isInteractiveInvocation(\n      flags,\n      this.process.stdin.isTTY,\n      this.process.stderr.isTTY,\n    );\n    const features = await resolveFeatures(prompts, flags, { interactive });\n    const snapshots = collectPlanningSnapshots(\n      this,\n      state.projectRoot,\n      getInitPlanningCandidatePaths(state, { features }),\n    );\n    const plan = buildInitPlan(\n      {\n        state,\n        snapshots,\n        contractVersion: CUSTOM_FUNCTION_TYPES_VERSION,\n        cliVersion: CLI_VERSION,\n      },\n      { features },\n    );\n    if (features.includes(CustomFunctionSetupFeature.Deno)) {\n      const denoVersion = await runCapturedProcess(\n        'deno',\n        ['--version'],\n        { cwd: this.process.cwd() },\n        this,\n      );\n      if (denoVersion.error?.code === 'ENOENT') {\n        plan.warnings.push(\n          `Deno ${SUPPORTED_DENO_MAJOR_VERSION}.x is not installed. Install it from ${DENO_INSTALL_URL}`,\n        );\n      } else if (denoVersion.code !== 0) {\n        plan.warnings.push(\n          `Deno was found, but its version could not be determined. Deno ${SUPPORTED_DENO_MAJOR_VERSION}.x is required. See ${DENO_INSTALL_URL}`,\n        );\n      } else {\n        const compatibility = getDenoRuntimeCompatibility(denoVersion.stdout);\n        if (compatibility.level !== 'compatible') {\n          plan.warnings.push(compatibility.message);\n        }\n      }\n    }\n    if (!flags.json) {\n      this.logger.info(\n        renderProjectPlan(plan, {\n          cwd: this.process.cwd(),\n          title: 'Custom Function plan',\n          details: [\n            { label: 'Target', path: plan.targetDirectory },\n            { label: 'Manifest', path: plan.manifestPath },\n          ],\n        }),\n      );\n    }\n\n    let approved = plan.changes.length === 0 || flags.dryRun;\n    if (plan.changes.length > 0 && !flags.dryRun) {\n      if (flags.yes) {\n        approved = true;\n      } else if (interactive) {\n        approved = await prompts.confirm('Apply this complete plan?', true);\n      } else {\n        throw new Error(\n          'The plan requires approval in a non-interactive invocation. Review with --dryRun, then pass --yes.',\n        );\n      }\n    }\n\n    if (approved && !flags.dryRun && plan.changes.length > 0) {\n      await applyProjectPlan(this, plan);\n    }\n    const applied = approved && !flags.dryRun && plan.changes.length > 0;\n    const setupAvailable = approved && !flags.dryRun;\n    const aiHandoff = buildInitAiHandoff({\n      targetDirectory: displayProjectPath(this.process.cwd(), state.targetDirectory),\n      manifestPath: displayProjectPath(this.process.cwd(), state.manifestPath),\n      cliVersion: CLI_VERSION,\n      hasSkill: setupAvailable && features.includes(CustomFunctionSetupFeature.Skill),\n      hasGithubWorkflow:\n        setupAvailable &&\n        features.includes(CustomFunctionSetupFeature.Ci) &&\n        Boolean(state.repositoryRoot && state.usesGithub),\n    });\n    const result = buildPlanResult(plan, {\n      applied,\n      dryRun: flags.dryRun,\n      cwd: this.process.cwd(),\n      aiHandoff,\n    });\n    if (flags.json) {\n      this.process.stdout.write(`${JSON.stringify(result)}\\n`);\n      return;\n    }\n    if (flags.dryRun) {\n      this.logger.info(colors.yellow('Dry run complete. No changes were written.'));\n      return;\n    }\n    if (!approved) {\n      this.logger.info(colors.yellow('No changes applied.'));\n      return;\n    }\n    if (plan.changes.length === 0) {\n      this.logger.info(colors.green('Custom Function project is already initialized.'));\n      return;\n    }\n    this.logger.info(colors.green('Custom Function project initialized.'));\n    if (plan.nextSteps.length > 0) {\n      this.logger.info(`\\n${colors.bold('Next steps')}`);\n      plan.nextSteps.forEach((step) => this.logger.info(step));\n    }\n    this.logger.info(`\\n${colors.bold('AI handoff — paste into your coding agent')}`);\n    this.logger.info(aiHandoff);\n  } catch (error) {\n    if (error instanceof PromptCancelledError) {\n      this.process.exit(130);\n    }\n    throw error;\n  }\n}\n"],"mappings":"0jBA0DA,MAAM,EAAyE,EAC5E,EAA2B,MAAO,sBAClC,EAA2B,QAAS,oBACpC,EAA2B,OAAQ,eACnC,EAA2B,IAAK,iBAClC,CAGK,EAAqB,OAAO,OAAO,EAA2B,CASpE,SAAS,EACP,EACA,EACA,EACS,CACT,MAAO,CAAC,EAAM,MAAQ,CAAC,EAAM,eAAiB,GAAQ,GAAc,GAYtE,eAAe,EACb,EACA,EACA,EAI2C,CAC3C,IAAM,EAAiF,EACpF,EAA2B,MAAO,EAAM,MACxC,EAA2B,QAAS,EAAM,QAC1C,EAA2B,OAAQ,EAAM,OACzC,EAA2B,IAAK,EAAM,GACxC,CACD,GAAI,CAAC,EAAQ,YACX,OAAO,EAAmB,OAAQ,GAAY,EAAQ,KAAa,GAAK,CAE1E,IAAM,EAA0D,EAAmB,IAChF,IAAa,CACZ,KAAM,EAAa,GACnB,MAAO,EACP,QAAS,EAAQ,KAAa,GAC/B,EACF,CACD,OAAO,EAAQ,SAAS,2BAA4B,EAAQ,CAU9D,eAAsB,EAEpB,EACA,EACe,CACf,EAAoB,KAAK,QAAQ,CACjC,GAAI,CACF,IAAM,EAAQ,EAA8B,KAAM,CAChD,GAAI,EAAY,CAAE,YAAW,CAAG,EAAE,CAClC,GAAI,EAAM,SAAW,CAAE,SAAU,EAAM,SAAU,CAAG,EAAE,CACvD,CAAC,CACI,EAAU,IAAI,EAAgB,KAAK,CACnC,EAAc,EAClB,EACA,KAAK,QAAQ,MAAM,MACnB,KAAK,QAAQ,OAAO,MACrB,CACK,EAAW,MAAM,EAAgB,EAAS,EAAO,CAAE,cAAa,CAAC,CAMjE,EAAO,EACX,CACE,QACA,UARc,EAChB,KACA,EAAM,YACN,EAA8B,EAAO,CAAE,WAAU,CAAC,CAKvC,CACT,gBAAiB,EACjB,WAAYA,EACb,CACD,CAAE,WAAU,CACb,CACD,GAAI,EAAS,SAAS,EAA2B,KAAK,CAAE,CACtD,IAAM,EAAc,MAAM,EACxB,OACA,CAAC,YAAY,CACb,CAAE,IAAK,KAAK,QAAQ,KAAK,CAAE,CAC3B,KACD,CACD,GAAI,EAAY,OAAO,OAAS,SAC9B,EAAK,SAAS,KACZ,8CAA4E,IAC7E,SACQ,EAAY,OAAS,EAC9B,EAAK,SAAS,KACZ,sFAAoH,IACrH,KACI,CACL,IAAM,EAAgB,EAA4B,EAAY,OAAO,CACjE,EAAc,QAAU,cAC1B,EAAK,SAAS,KAAK,EAAc,QAAQ,EAI1C,EAAM,MACT,KAAK,OAAO,KACV,EAAkB,EAAM,CACtB,IAAK,KAAK,QAAQ,KAAK,CACvB,MAAO,uBACP,QAAS,CACP,CAAE,MAAO,SAAU,KAAM,EAAK,gBAAiB,CAC/C,CAAE,MAAO,WAAY,KAAM,EAAK,aAAc,CAC/C,CACF,CAAC,CACH,CAGH,IAAI,EAAW,EAAK,QAAQ,SAAW,GAAK,EAAM,OAClD,GAAI,EAAK,QAAQ,OAAS,GAAK,CAAC,EAAM,OACpC,GAAI,EAAM,IACR,EAAW,WACF,EACT,EAAW,MAAM,EAAQ,QAAQ,4BAA6B,GAAK,MAEnE,MAAU,MACR,qGACD,CAID,GAAY,CAAC,EAAM,QAAU,EAAK,QAAQ,OAAS,GACrD,MAAM,EAAiB,KAAM,EAAK,CAEpC,IAAM,EAAU,GAAY,CAAC,EAAM,QAAU,EAAK,QAAQ,OAAS,EAC7D,EAAiB,GAAY,CAAC,EAAM,OACpC,EAAY,EAAmB,CACnC,gBAAiB,EAAmB,KAAK,QAAQ,KAAK,CAAE,EAAM,gBAAgB,CAC9E,aAAc,EAAmB,KAAK,QAAQ,KAAK,CAAE,EAAM,aAAa,CACxE,WAAYA,EACZ,SAAU,GAAkB,EAAS,SAAS,EAA2B,MAAM,CAC/E,kBACE,GACA,EAAS,SAAS,EAA2B,GAAG,EAChD,GAAQ,EAAM,gBAAkB,EAAM,YACzC,CAAC,CACI,EAAS,EAAgB,EAAM,CACnC,UACA,OAAQ,EAAM,OACd,IAAK,KAAK,QAAQ,KAAK,CACvB,YACD,CAAC,CACF,GAAI,EAAM,KAAM,CACd,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAO,CAAC,IAAI,CACxD,OAEF,GAAI,EAAM,OAAQ,CAChB,KAAK,OAAO,KAAK,EAAO,OAAO,6CAA6C,CAAC,CAC7E,OAEF,GAAI,CAAC,EAAU,CACb,KAAK,OAAO,KAAK,EAAO,OAAO,sBAAsB,CAAC,CACtD,OAEF,GAAI,EAAK,QAAQ,SAAW,EAAG,CAC7B,KAAK,OAAO,KAAK,EAAO,MAAM,kDAAkD,CAAC,CACjF,OAEF,KAAK,OAAO,KAAK,EAAO,MAAM,uCAAuC,CAAC,CAClE,EAAK,UAAU,OAAS,IAC1B,KAAK,OAAO,KAAK,KAAK,EAAO,KAAK,aAAa,GAAG,CAClD,EAAK,UAAU,QAAS,GAAS,KAAK,OAAO,KAAK,EAAK,CAAC,EAE1D,KAAK,OAAO,KAAK,KAAK,EAAO,KAAK,4CAA4C,GAAG,CACjF,KAAK,OAAO,KAAK,EAAU,OACpB,EAAO,CAId,MAHI,aAAiB,GACnB,KAAK,QAAQ,KAAK,IAAI,CAElB"}

package/dist/impl-CfvxD3RI.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-CfvxD3RI.mjs","names":[],"sources":["../src/commands/inventory/consent-manager-service-json-to-yml/impl.ts"],"sourcesContent":["import { ConsentTrackerStatus, DataFlowScope } from '@transcend-io/privacy-types';\nimport { decodeCodec } from '@transcend-io/type-utils';\nimport colors from 'colors';\nimport * as t from 'io-ts';\n\nimport { ConsentManagerServiceMetadata, CookieInput, DataFlowInput } from '../../../codecs.js';\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { serializeTranscendYaml } from '../../../lib/readTranscendYaml.js';\n\nexport interface ConsentManagerServiceJsonToYmlCommandFlags {\n  file: string;\n  output: string;\n}\n\nexport function consentManagerServiceJsonToYml(\n  this: LocalContext,\n  { file, output }: ConsentManagerServiceJsonToYmlCommandFlags,\n): void {\n  doneInputValidation(this.process);\n\n  // Ensure files exist\n  if (!this.fs.existsSync(file)) {\n    this.logger.error(colors.red(`File does not exist: --file=\"${file}\"`));\n    this.process.exit(1);\n  }\n\n  // Read in each consent manager configuration\n  const services = decodeCodec(\n    t.array(ConsentManagerServiceMetadata),\n    this.fs.readFileSync(file, 'utf-8'),\n  );\n\n  // Create data flows and cookie configurations\n  const dataFlows: DataFlowInput[] = [];\n  const cookies: CookieInput[] = [];\n  services.forEach((service) => {\n    service.dataFlows\n      .filter(({ type }) => type !== DataFlowScope.CSP)\n      .forEach((dataFlow) => {\n        dataFlows.push({\n          value: dataFlow.value,\n          type: dataFlow.type,\n          status: ConsentTrackerStatus.Live,\n          trackingPurposes: dataFlow.trackingPurposes,\n        });\n      });\n\n    service.cookies.forEach((cookie) => {\n      cookies.push({\n        name: cookie.name,\n        status: ConsentTrackerStatus.Live,\n        trackingPurposes: cookie.trackingPurposes,\n      });\n    });\n  });\n\n  this.fs.writeFileSync(\n    output,\n    serializeTranscendYaml({\n      'data-flows': dataFlows,\n      cookies,\n    }),\n  );\n\n  this.logger.info(\n    colors.green(\n      `Successfully wrote ${dataFlows.length} data flows and ${cookies.length} cookies to file \"${output}\"`,\n    ),\n  );\n}\n"],"mappings":"mVAeA,SAAgB,EAEd,CAAE,OAAM,UACF,CACN,EAAoB,KAAK,QAAQ,CAG5B,KAAK,GAAG,WAAW,EAAK,GAC3B,KAAK,OAAO,MAAM,EAAO,IAAI,gCAAgC,EAAK,GAAG,CAAC,CACtE,KAAK,QAAQ,KAAK,EAAE,EAItB,IAAM,EAAW,EACf,EAAE,MAAM,EAA8B,CACtC,KAAK,GAAG,aAAa,EAAM,QAAQ,CACpC,CAGK,EAA6B,EAAE,CAC/B,EAAyB,EAAE,CACjC,EAAS,QAAS,GAAY,CAC5B,EAAQ,UACL,QAAQ,CAAE,UAAW,IAAS,EAAc,IAAI,CAChD,QAAS,GAAa,CACrB,EAAU,KAAK,CACb,MAAO,EAAS,MAChB,KAAM,EAAS,KACf,OAAQ,EAAqB,KAC7B,iBAAkB,EAAS,iBAC5B,CAAC,EACF,CAEJ,EAAQ,QAAQ,QAAS,GAAW,CAClC,EAAQ,KAAK,CACX,KAAM,EAAO,KACb,OAAQ,EAAqB,KAC7B,iBAAkB,EAAO,iBAC1B,CAAC,EACF,EACF,CAEF,KAAK,GAAG,cACN,EACA,EAAuB,CACrB,aAAc,EACd,UACD,CAAC,CACH,CAED,KAAK,OAAO,KACV,EAAO,MACL,sBAAsB,EAAU,OAAO,kBAAkB,EAAQ,OAAO,oBAAoB,EAAO,GACpG,CACF"}

package/dist/impl-Cli2XRp02.mjs

@@ -1,2 +0,0 @@
-import{r as e}from"./policyEngineCliError-DY8V-qkK.mjs";import{i as t,n,t as r}from"./printResult-CHe3nRN4.mjs";import{t as i}from"./renderTable-D68QasPc.mjs";import{n as a}from"./resolveBundleIdByName-qXZBrUz_.mjs";import{t as o}from"./done-input-validation-BUz-aVC5.mjs";import s from"colors";async function c({"bundle-name":c,auth:l,"transcend-url":u,limit:d,after:f,json:p,debug:m=!1}){o(this.process),e(m);let h=t(u,l),g=await a(h,c);if(!g)throw Error(`Policy bundle "${c}" was not found for this organization.`);this.logger.info(s.green(`Listing versions for bundle "${c}"...`));let _={limit:d};f&&(_.after=f);let v=await n(h.get(`v1/policy-engine/policy-bundles/${g}/versions`,{searchParams:_}).json());r(this.process.stdout,{json:p,data:v,renderTable:()=>{if(v.nodes.length===0)return f?`No more versions for bundle "${c}" (end of results).`:`No versions found for bundle "${c}".`;let e=i([`id`,`version`,`createdAt`,`activatedAt`,`deactivatedAt`],v.nodes.map(e=>[e.id,e.version,e.createdAt,e.activatedAt??`-`,e.deactivatedAt??`-`]));return v.pageInfo.endCursor&&(e+=`\n\nafter: ${v.pageInfo.endCursor}`),e}})}export{c as versions};
-//# sourceMappingURL=impl-Cli2XRp02.mjs.map

package/dist/impl-Cli2XRp02.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-Cli2XRp02.mjs","names":[],"sources":["../src/commands/policy/versions/impl.ts"],"sourcesContent":["import colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { EMPTY_CELL } from '../constants.js';\nimport {\n  buildPolicyEngineClient,\n  policyEngineRequest,\n  printResult,\n  renderTable,\n  resolveBundleIdByName,\n  setPolicyEngineCliDebug,\n} from '../helpers/index.js';\nimport type { PolicyBundleVersionListResponse } from '../types.js';\n\n/** CLI flags for `transcend policy versions`. */\nexport interface VersionsCommandFlags {\n  /** Tenant-unique bundle name */\n  'bundle-name': string;\n  /** Transcend API key */\n  auth: string;\n  /** Transcend API URL */\n  'transcend-url': string;\n  /** Page size */\n  limit: number;\n  /** Cursor from a previous page's pageInfo.endCursor */\n  after?: string;\n  /** Print raw JSON response */\n  json: boolean;\n  /** Include technical error details when a command fails */\n  debug?: boolean;\n}\n\n/**\n * List versions for a policy bundle.\n *\n * @param this - CLI context\n * @param flags - Command flags\n */\nexport async function versions(\n  this: LocalContext,\n  {\n    'bundle-name': bundleName,\n    auth,\n    'transcend-url': transcendUrl,\n    limit,\n    after,\n    json,\n    debug = false,\n  }: VersionsCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n  setPolicyEngineCliDebug(debug);\n\n  const client = buildPolicyEngineClient(transcendUrl, auth);\n  const bundleId = await resolveBundleIdByName(client, bundleName);\n\n  if (!bundleId) {\n    throw new Error(`Policy bundle \"${bundleName}\" was not found for this organization.`);\n  }\n\n  this.logger.info(colors.green(`Listing versions for bundle \"${bundleName}\"...`));\n\n  const searchParams: Record<string, string | number> = { limit };\n  if (after) {\n    searchParams.after = after;\n  }\n\n  const body = await policyEngineRequest(\n    client\n      .get(`v1/policy-engine/policy-bundles/${bundleId}/versions`, {\n        searchParams,\n      })\n      .json<PolicyBundleVersionListResponse>(),\n  );\n\n  printResult(this.process.stdout, {\n    json,\n    data: body,\n    renderTable: () => {\n      if (body.nodes.length === 0) {\n        // Distinguish \"this page is empty because you paginated past the end\"\n        // from \"the bundle genuinely has no versions\" — the latter is already\n        // surfaced during version resolution upstream.\n        return after\n          ? `No more versions for bundle \"${bundleName}\" (end of results).`\n          : `No versions found for bundle \"${bundleName}\".`;\n      }\n\n      const rows = body.nodes.map((version) => [\n        version.id,\n        version.version,\n        version.createdAt,\n        version.activatedAt ?? EMPTY_CELL,\n        version.deactivatedAt ?? EMPTY_CELL,\n      ]);\n\n      let table = renderTable(['id', 'version', 'createdAt', 'activatedAt', 'deactivatedAt'], rows);\n      if (body.pageInfo.endCursor) {\n        table += `\\n\\nafter: ${body.pageInfo.endCursor}`;\n      }\n      return table;\n    },\n  });\n}\n"],"mappings":"uSAuCA,eAAsB,EAEpB,CACE,cAAe,EACf,OACA,gBAAiB,EACjB,QACA,QACA,OACA,QAAQ,IAEK,CACf,EAAoB,KAAK,QAAQ,CACjC,EAAwB,EAAM,CAE9B,IAAM,EAAS,EAAwB,EAAc,EAAK,CACpD,EAAW,MAAM,EAAsB,EAAQ,EAAW,CAEhE,GAAI,CAAC,EACH,MAAU,MAAM,kBAAkB,EAAW,wCAAwC,CAGvF,KAAK,OAAO,KAAK,EAAO,MAAM,gCAAgC,EAAW,MAAM,CAAC,CAEhF,IAAM,EAAgD,CAAE,QAAO,CAC3D,IACF,EAAa,MAAQ,GAGvB,IAAM,EAAO,MAAM,EACjB,EACG,IAAI,mCAAmC,EAAS,WAAY,CAC3D,eACD,CAAC,CACD,MAAuC,CAC3C,CAED,EAAY,KAAK,QAAQ,OAAQ,CAC/B,OACA,KAAM,EACN,gBAAmB,CACjB,GAAI,EAAK,MAAM,SAAW,EAIxB,OAAO,EACH,gCAAgC,EAAW,qBAC3C,iCAAiC,EAAW,IAWlD,IAAI,EAAQ,EAAY,CAAC,KAAM,UAAW,YAAa,cAAe,gBAAgB,CARzE,EAAK,MAAM,IAAK,GAAY,CACvC,EAAQ,GACR,EAAQ,QACR,EAAQ,UACR,EAAQ,aAAA,IACR,EAAQ,eAAA,IACT,CAE2F,CAAC,CAI7F,OAHI,EAAK,SAAS,YAChB,GAAS,cAAc,EAAK,SAAS,aAEhC,GAEV,CAAC"}

package/dist/impl-Cs1z9k1h2.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-Cs1z9k1h2.mjs","names":[],"sources":["../src/commands/request/cron/mark-identifiers-completed/impl.ts"],"sourcesContent":["import type { LocalContext } from '../../../../context.js';\nimport { doneInputValidation } from '../../../../lib/cli/done-input-validation.js';\nimport { pushCronIdentifiersFromCsv } from '../../../../lib/cron/index.js';\n\nexport interface MarkIdentifiersCompletedCommandFlags {\n  file: string;\n  transcendUrl: string;\n  auth: string;\n  sombraAuth?: string;\n  dataSiloId: string;\n}\n\nexport async function markIdentifiersCompleted(\n  this: LocalContext,\n  { file, transcendUrl, auth, sombraAuth, dataSiloId }: MarkIdentifiersCompletedCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await pushCronIdentifiersFromCsv({\n    file,\n    transcendUrl,\n    auth,\n    sombraAuth,\n    dataSiloId,\n  });\n}\n"],"mappings":"kHAYA,eAAsB,EAEpB,CAAE,OAAM,eAAc,OAAM,aAAY,cACzB,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAA2B,CAC/B,OACA,eACA,OACA,aACA,aACD,CAAC"}

package/dist/impl-DB8Kt2qF2.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-DB8Kt2qF2.mjs","names":[],"sources":["../src/commands/request/cron/pull-identifiers/impl.ts"],"sourcesContent":["import { RequestAction } from '@transcend-io/privacy-types';\nimport colors from 'colors';\nimport { uniq } from 'lodash-es';\n\nimport type { LocalContext } from '../../../../context.js';\nimport { doneInputValidation } from '../../../../lib/cli/done-input-validation.js';\nimport {\n  CsvFormattedIdentifier,\n  pullChunkedCustomSiloOutstandingIdentifiers,\n} from '../../../../lib/cron/index.js';\nimport { parseFilePath, writeLargeCsv } from '../../../../lib/helpers/index.js';\n\nexport interface PullIdentifiersCommandFlags {\n  file: string;\n  transcendUrl: string;\n  auth: string;\n  sombraAuth?: string;\n  dataSiloId: string;\n  actions: RequestAction[];\n  pageLimit: number;\n  skipRequestCount: boolean;\n  chunkSize: number;\n}\n\nexport async function pullIdentifiers(\n  this: LocalContext,\n  {\n    file,\n    transcendUrl,\n    auth,\n    sombraAuth,\n    dataSiloId,\n    actions,\n    pageLimit,\n    skipRequestCount,\n    chunkSize,\n  }: PullIdentifiersCommandFlags,\n): Promise<void> {\n  if (skipRequestCount) {\n    this.logger.info(\n      colors.yellow('Skipping request count as requested. This may help speed up the call.'),\n    );\n  }\n\n  if (Number.isNaN(chunkSize) || chunkSize <= 0 || chunkSize % pageLimit !== 0) {\n    this.logger.error(\n      colors.red(\n        `Invalid chunk size: \"${chunkSize}\". Must be a positive integer that is a multiple of ${pageLimit}.`,\n      ),\n    );\n    this.process.exit(1);\n  }\n\n  doneInputValidation(this.process);\n\n  const { baseName, extension } = parseFilePath(file);\n  let fileCount = 0;\n\n  const onSave = async (chunk: CsvFormattedIdentifier[]): Promise<void> => {\n    const numberedFileName = `${baseName}-${fileCount}${extension}`;\n    this.logger.info(\n      colors.blue(`Saving ${chunk.length} identifiers to file \"${numberedFileName}\"`),\n    );\n\n    const headers = uniq(chunk.map((d) => Object.keys(d)).flat());\n    await writeLargeCsv(numberedFileName, chunk, headers);\n    this.logger.info(\n      colors.green(`Successfully wrote ${chunk.length} identifiers to file \"${numberedFileName}\"`),\n    );\n    fileCount += 1;\n    return Promise.resolve();\n  };\n\n  // Pull down outstanding identifiers\n  await pullChunkedCustomSiloOutstandingIdentifiers({\n    transcendUrl,\n    apiPageSize: pageLimit,\n    savePageSize: chunkSize,\n    onSave,\n    actions,\n    auth,\n    sombraAuth,\n    dataSiloId,\n    skipRequestCount,\n  });\n}\n"],"mappings":"kPAwBA,eAAsB,EAEpB,CACE,OACA,eACA,OACA,aACA,aACA,UACA,YACA,mBACA,aAEa,CACX,GACF,KAAK,OAAO,KACV,EAAO,OAAO,wEAAwE,CACvF,EAGC,OAAO,MAAM,EAAU,EAAI,GAAa,GAAK,EAAY,IAAc,KACzE,KAAK,OAAO,MACV,EAAO,IACL,wBAAwB,EAAU,sDAAsD,EAAU,GACnG,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,EAGtB,EAAoB,KAAK,QAAQ,CAEjC,GAAM,CAAE,WAAU,aAAc,EAAc,EAAK,CAC/C,EAAY,EAkBhB,MAAM,EAA4C,CAChD,eACA,YAAa,EACb,aAAc,EACd,YApBoB,IAAmD,CACvE,IAAM,EAAmB,GAAG,EAAS,GAAG,IAAY,IAWpD,OAVA,KAAK,OAAO,KACV,EAAO,KAAK,UAAU,EAAM,OAAO,wBAAwB,EAAiB,GAAG,CAChF,CAGD,MAAM,EAAc,EAAkB,EADtB,EAAK,EAAM,IAAK,GAAM,OAAO,KAAK,EAAE,CAAC,CAAC,MAAM,CACR,CAAC,CACrD,KAAK,OAAO,KACV,EAAO,MAAM,sBAAsB,EAAM,OAAO,wBAAwB,EAAiB,GAAG,CAC7F,CACD,GAAa,EACN,QAAQ,SAAS,EASxB,UACA,OACA,aACA,aACA,mBACD,CAAC"}