@transcend-io/cli 12.0.0 → 12.1.1

package/dist/policy-project-discovery-C29UxWwt.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy-project-discovery-C29UxWwt.mjs","names":["permissionsPolicyInputSchema.$id","permissionsPolicyInputSchema","permissionsPolicyInputSchema.examples"],"sources":["../schema/permissions-policy-input.json","../src/lib/policy/policy-scaffold-templates.ts","../src/lib/policy/policy-project-discovery.ts"],"sourcesContent":["","import yaml from 'js-yaml';\n\nimport permissionsPolicyInputSchema from '../../../schema/permissions-policy-input.json' with { type: 'json' };\n\n/** Published Permissions API OPA input schema `$id` (raw GitHub URL). */\nexport const PERMISSIONS_POLICY_INPUT_SCHEMA_ID = permissionsPolicyInputSchema.$id;\n\n/** OPA version targeted by generated policy authoring configuration. */\nexport const POLICY_STARTER_OPA_VERSION = '1.18.2';\n\n/**\n * Package-path prefix for the disposable starter bundle.\n *\n * Matches OPA `.manifest` `roots` and Regal `project.roots` (not a filesystem\n * folder name by itself). The publish directory is `{root}-bundle/`.\n */\nexport const POLICY_STARTER_ROOT = 'example';\n\n/** Publish directory name for the disposable starter (`{root}-bundle`). */\nexport const POLICY_STARTER_BUNDLE_DIRECTORY = `${POLICY_STARTER_ROOT}-bundle`;\n\n/** One deterministic file in the safe policy starter. */\nexport interface PolicyStarterFile {\n  /** POSIX-style path relative to the policy workspace directory. */\n  path: string;\n  /** Complete UTF-8 file contents. */\n  contents: string;\n  /** Human-readable reason shown in the plan. */\n  description: string;\n}\n\n/** OPA bundle manifest filename used for local authoring and upload. */\nexport const POLICY_MANIFEST_FILENAME = '.manifest';\n\n/**\n * Remote bundle name reserved for Permissions API.\n *\n * Upload treats every bundle the same; Sombra's Permissions API always queries\n * this fixed name (never taken from the request body).\n */\nexport const PERMISSIONS_POLICY_BUNDLE_NAME = 'permissions';\n\n/** OPA `.manifest` `metadata` key for Transcend authoring hints. */\nexport const POLICY_MANIFEST_TRANSCEND_METADATA_KEY = 'transcend.io';\n\n/** Supported policy bundle template names. */\nexport const POLICY_TEMPLATE_NAMES = ['generic', 'permissions'] as const;\n\n/** A supported policy bundle template name. */\nexport type PolicyTemplateName = (typeof POLICY_TEMPLATE_NAMES)[number];\n\n/**\n * Build an OPA bundle manifest for a given root and scaffold template.\n *\n * `metadata.transcend.io.template` is an authoring hint only — Policy Engine\n * upload does not branch on it. Permissions API still keys off the remote\n * bundle name {@link PERMISSIONS_POLICY_BUNDLE_NAME}.\n *\n * @param root - Package root\n * @param template - Scaffold template that produced this bundle\n * @returns Manifest JSON\n */\nexport function buildPolicyManifestTemplate(\n  root: string,\n  template: PolicyTemplateName = 'generic',\n): string {\n  return `{\n  \"$schema\": \"https://openpolicyagent.org/schemas/bundle/v1/manifest.schema.json\",\n  \"revision\": \"\",\n  \"roots\": [\"${root}\"],\n  \"rego_version\": 1,\n  \"metadata\": {\n    \"${POLICY_MANIFEST_TRANSCEND_METADATA_KEY}\": {\n      \"template\": \"${template}\"\n    }\n  }\n}\n`;\n}\n\n/** OPA bundle manifest for the disposable starter publish directory. */\nexport const POLICY_MANIFEST_TEMPLATE = buildPolicyManifestTemplate(POLICY_STARTER_ROOT, 'generic');\n\n/**\n * Build workspace-level Regal configuration for given roots.\n *\n * `project.roots` are package-path prefixes (same meaning as OPA `.manifest`\n * roots), not filesystem folders.\n *\n * @param roots - Package-path roots\n * @returns YAML configuration\n */\nexport function buildPolicyRegalConfigTemplate(roots: readonly string[]): string {\n  const rootsSection =\n    roots.length === 0\n      ? '  roots: []'\n      : `  roots:\\n${roots.map((root) => `    - ${root}`).join('\\n')}`;\n  return `# Workspace-level Regal config for both publishable bundles under this tree.\n# \\`project.roots\\` are package-path prefixes (same meaning as OPA \\`.manifest\\`\n# roots), not filesystem folders. Each bundle also has its own \\`.manifest\\`.\ncapabilities:\n  from:\n    engine: opa\n    version: v${POLICY_STARTER_OPA_VERSION}\nproject:\n${rootsSection}\n  rego-version: 1\n`;\n}\n\n/**\n * Merge one package-path root into an existing Regal config without wiping\n * unrelated keys (custom rules, ignores, etc.).\n *\n * Comments and key order may be reformatted by the YAML serializer. Invalid\n * `project.roots` shapes throw instead of silently dropping prior roots.\n *\n * @param existingContents - Current `.regal/config.yaml` contents\n * @param rootToAdd - Package-path root to include\n * @returns Updated file contents and the full roots list\n */\nexport function mergePolicyRegalConfigRoots(\n  existingContents: string,\n  rootToAdd: string,\n): { contents: string; roots: string[] } {\n  const trimmed = existingContents.trim();\n  if (trimmed.length === 0) {\n    const roots = [rootToAdd];\n    return { contents: buildPolicyRegalConfigTemplate(roots), roots };\n  }\n\n  let parsed: unknown;\n  try {\n    parsed = yaml.load(existingContents);\n  } catch (error) {\n    const detail = error instanceof Error ? error.message : String(error);\n    throw new Error(`.regal/config.yaml is not valid YAML: ${detail}`);\n  }\n\n  if (parsed === null || parsed === undefined) {\n    const roots = [rootToAdd];\n    return { contents: buildPolicyRegalConfigTemplate(roots), roots };\n  }\n  if (typeof parsed !== 'object' || Array.isArray(parsed)) {\n    throw new Error('.regal/config.yaml must be a YAML mapping at the top level.');\n  }\n\n  const config = { ...(parsed as Record<string, unknown>) };\n  const existingProject = config.project;\n  if (\n    existingProject !== undefined &&\n    existingProject !== null &&\n    (typeof existingProject !== 'object' || Array.isArray(existingProject))\n  ) {\n    throw new Error('.regal/config.yaml project must be a YAML mapping when present.');\n  }\n\n  const project: Record<string, unknown> = {\n    ...((existingProject as Record<string, unknown> | undefined) ?? {}),\n  };\n  const existingRoots = project.roots;\n  let roots: string[];\n  if (existingRoots === undefined) {\n    roots = [rootToAdd];\n  } else if (\n    Array.isArray(existingRoots) &&\n    existingRoots.every((root): root is string => typeof root === 'string')\n  ) {\n    roots = [...new Set([...existingRoots, rootToAdd])].sort((left, right) =>\n      left.localeCompare(right),\n    );\n  } else {\n    throw new Error(\n      '.regal/config.yaml project.roots must be an array of strings. ' +\n        'Fix the Regal config before running `transcend policy new`.',\n    );\n  }\n\n  project.roots = roots;\n  if (project['rego-version'] === undefined) {\n    project['rego-version'] = 1;\n  }\n  config.project = project;\n\n  if (config.capabilities === undefined) {\n    config.capabilities = {\n      from: {\n        engine: 'opa',\n        version: `v${POLICY_STARTER_OPA_VERSION}`,\n      },\n    };\n  }\n\n  const dumped = yaml.dump(config, {\n    lineWidth: -1,\n    noRefs: true,\n    sortKeys: false,\n  });\n  return {\n    contents: dumped.endsWith('\\n') ? dumped : `${dumped}\\n`,\n    roots,\n  };\n}\n\n/**\n * Workspace-level Regal configuration.\n *\n * `project.roots` are package-path prefixes (same meaning as OPA `.manifest`\n * roots), not filesystem folders.\n */\nexport const POLICY_REGAL_CONFIG_TEMPLATE = buildPolicyRegalConfigTemplate([POLICY_STARTER_ROOT]);\n\n/** Regal config for an empty workspace with no bundles yet. */\nexport const POLICY_REGAL_CONFIG_EMPTY_TEMPLATE = buildPolicyRegalConfigTemplate([]);\n\n/** Disposable, fail-closed example policy. */\nexport const POLICY_RESULT_REGO_TEMPLATE = `# METADATA\n# title: Disposable example result\n# description: |\n#   A fail-closed teaching entrypoint. Replace this example with the document\n#   tree and result contract required by your application.\n# scope: package\n# schemas:\n#   - input: schema.${POLICY_STARTER_ROOT}.input\n# entrypoint: true\npackage ${POLICY_STARTER_ROOT}.result\n\nimport rego.v1\n\ndefault decision := \"deny\"\n\ndecision := \"allow\" if {\n\tinput.subject.trusted == true\n}\n\ndefault reason_code := \"untrusted_or_invalid_input\"\n\nreason_code := \"trusted_subject\" if {\n\tdecision == \"allow\"\n}\n`;\n\n/** Executable tests adjacent to the disposable example policy. */\nexport const POLICY_RESULT_TEST_REGO_TEMPLATE = `package ${POLICY_STARTER_ROOT}.result_test\n\nimport data.${POLICY_STARTER_ROOT}.result\nimport rego.v1\n\ntest_denies_untrusted_subject if {\n\tresult.decision == \"deny\" with input as {\"subject\": {\"trusted\": false}}\n\tresult.reason_code == \"untrusted_or_invalid_input\" with input as {\"subject\": {\"trusted\": false}}\n}\n\ntest_fails_closed_for_missing_subject if {\n\tresult.decision == \"deny\" with input as {}\n\tresult.reason_code == \"untrusted_or_invalid_input\" with input as {}\n}\n\ntest_allows_trusted_subject if {\n\tresult.decision == \"allow\" with input as {\"subject\": {\"trusted\": true}}\n\tresult.reason_code == \"trusted_subject\" with input as {\"subject\": {\"trusted\": true}}\n}\n`;\n\n/** Sanitized local input example containing no credentials or personal data. */\nexport const POLICY_INPUT_EXAMPLE_TEMPLATE = `{\n  \"subject\": {\n    \"trusted\": false\n  }\n}\n`;\n\n/** Input JSON Schema for the disposable starter (editor + \\`opa check -s\\`). */\nexport const POLICY_INPUT_SCHEMA_TEMPLATE = `{\n  \"$schema\": \"http://json-schema.org/draft-07/schema#\",\n  \"$id\": \"https://transcend.io/policy-schemas/${POLICY_STARTER_ROOT}/input.json\",\n  \"title\": \"Example policy input\",\n  \"description\": \"Disposable teaching envelope for the example bundle.\",\n  \"type\": \"object\",\n  \"additionalProperties\": true,\n  \"properties\": {\n    \"subject\": {\n      \"type\": \"object\",\n      \"additionalProperties\": true,\n      \"properties\": {\n        \"trusted\": {\n          \"type\": \"boolean\",\n          \"description\": \"When true, the example policy allows; otherwise it denies.\"\n        }\n      }\n    }\n  }\n}\n`;\n\n/** Target-local ignore rules for private evaluation input only. */\nexport const POLICY_GITIGNORE_TEMPLATE = `# Local policy evaluation input (VS Code / Regal look for input.json here).\n/input.json\n`;\n\n/** Concise workspace-local authoring guide (multi-bundle, empty workspace). */\nexport const POLICY_README_TEMPLATE = `# Transcend Policy\n\nMulti-bundle workspace for [Transcend Policy Engine](https://docs.transcend.io) bundles\n(OPA / Rego v1). Requires **Transcend CLI ≥ 11** (\\`transcend policy --help\\`\nshould list \\`init\\`, \\`new\\`, and positional \\`[directory]\\` args).\n\nEach \\`*-bundle/\\` directory is a separate publishable unit (own \\`.manifest\\`,\ninput, and query path). Add a new bundle with:\n\n\\`\\`\\`sh\ntranscend policy new\n\\`\\`\\`\n\n## Quick start\n\n\\`\\`\\`sh\ntranscend policy init                   # create the workspace\ntranscend policy new --template generic # add a bundle from a template\n\ntranscend policy lint --noInteractive\ntranscend policy test\ntranscend policy eval transcend/policy/example-bundle \\\\\n  --package data.example.result \\\\\n  --input transcend/policy/example-bundle/input.json\n\\`\\`\\`\n\n\\`policy new\\` also writes a gitignored \\`input.json\\` (copy of \\`input.example.json\\`)\nfor local Evaluate. \\`policy lint\\` / \\`policy test\\` default to every child with a\n\\`.manifest\\` and use bundle-mode \\`opa test -b\\`, so both input files can coexist\nwithout a merge error.\n\n## Layout\n\n\\`\\`\\`\ntranscend/policy/\n  example-bundle/               # publish directory (added by policy new)\n    example/                    # package root (matches .manifest roots)\n    input.example.json\n    input.json                  # local only (gitignored)\n  schemas/                      # input JSON Schemas (editor + opa check -s)\n  .regal/config.yaml\n\\`\\`\\`\n\nReplace or delete example bundles when you have a real policy. Publish each\nbundle separately (\\`transcend policy publish --bundle-name … <dir>\\`).\n\n## Bundle names and Permissions\n\nUpload does **not** distinguish bundle kinds. What makes a bundle “Permissions”\nis the remote name plus where Sombra queries it:\n\n- **Permissions API** always loads the fixed remote bundle name\n  \\`${PERMISSIONS_POLICY_BUNDLE_NAME}\\`. Publish that starter with\n  \\`--bundle-name=${PERMISSIONS_POLICY_BUNDLE_NAME}\\`.\n- **Generic / decide** bundles use any other \\`--bundle-name\\` and the decide\n  path.\n\nScaffolded \\`.manifest\\` files may include \\`metadata.transcend.io.template\\`\n(\\`generic\\` or \\`permissions\\`) as an authoring hint. Upload ignores it;\n\\`policy publish\\` may warn when the hint and \\`--bundle-name\\` disagree.\n`;\n\n/** Workspace-relative path to the disposable example entrypoint. */\nexport const POLICY_STARTER_RESULT_REGO_PATH = `${POLICY_STARTER_BUNDLE_DIRECTORY}/${POLICY_STARTER_ROOT}/result/result.rego`;\n\n/** Workspace-relative path to the disposable example tests. */\nexport const POLICY_STARTER_RESULT_TEST_REGO_PATH = `${POLICY_STARTER_BUNDLE_DIRECTORY}/${POLICY_STARTER_ROOT}/result/result_test.rego`;\n\n/** Complete safe starter in deterministic plan order. */\nconst POLICY_STARTER_FILES: readonly PolicyStarterFile[] = [\n  {\n    path: `${POLICY_STARTER_BUNDLE_DIRECTORY}/${POLICY_MANIFEST_FILENAME}`,\n    contents: POLICY_MANIFEST_TEMPLATE,\n    description: 'Create the OPA bundle .manifest',\n  },\n  {\n    path: '.regal/config.yaml',\n    contents: POLICY_REGAL_CONFIG_TEMPLATE,\n    description: `Pin strict Rego v1 linting to OPA ${POLICY_STARTER_OPA_VERSION} capabilities`,\n  },\n  {\n    path: `schemas/${POLICY_STARTER_ROOT}/input.json`,\n    contents: POLICY_INPUT_SCHEMA_TEMPLATE,\n    description: 'Create the input JSON Schema for the example bundle',\n  },\n  {\n    path: POLICY_STARTER_RESULT_REGO_PATH,\n    contents: POLICY_RESULT_REGO_TEMPLATE,\n    description: 'Create a documented fail-closed result entrypoint',\n  },\n  {\n    path: POLICY_STARTER_RESULT_TEST_REGO_PATH,\n    contents: POLICY_RESULT_TEST_REGO_TEMPLATE,\n    description: 'Create executable tests for allow and fail-closed decisions',\n  },\n  {\n    path: `${POLICY_STARTER_BUNDLE_DIRECTORY}/input.example.json`,\n    contents: POLICY_INPUT_EXAMPLE_TEMPLATE,\n    description: 'Create a sanitized local evaluation input',\n  },\n  {\n    path: `${POLICY_STARTER_BUNDLE_DIRECTORY}/.gitignore`,\n    contents: POLICY_GITIGNORE_TEMPLATE,\n    description: 'Ignore only the private local input file',\n  },\n  {\n    path: 'README.md',\n    contents: POLICY_README_TEMPLATE,\n    description: 'Create the concise policy project guide',\n  },\n];\n\n/**\n * Generate an independent copy of the safe policy starter.\n *\n * @returns Deterministic relative files\n */\nexport function generatePolicyStarterFiles(): PolicyStarterFile[] {\n  return POLICY_STARTER_FILES.map((file) => ({ ...file }));\n}\n\n// ---------------------------------------------------------------------------\n// Workspace-only init files (no bundles)\n// ---------------------------------------------------------------------------\n\n/** Files created by `policy init` — empty workspace only. */\nconst POLICY_INIT_WORKSPACE_FILES: readonly PolicyStarterFile[] = [\n  {\n    path: '.regal/config.yaml',\n    contents: POLICY_REGAL_CONFIG_EMPTY_TEMPLATE,\n    description: `Pin strict Rego v1 linting to OPA ${POLICY_STARTER_OPA_VERSION} capabilities`,\n  },\n  {\n    path: 'README.md',\n    contents: POLICY_README_TEMPLATE,\n    description: 'Create the concise multi-bundle workspace guide',\n  },\n];\n\n/**\n * Generate files for an empty workspace (init without bundles).\n *\n * @returns Deterministic workspace files\n */\nexport function generatePolicyWorkspaceFiles(): PolicyStarterFile[] {\n  return POLICY_INIT_WORKSPACE_FILES.map((file) => ({ ...file }));\n}\n\n// ---------------------------------------------------------------------------\n// Policy bundle templates (used by `policy new`)\n// ---------------------------------------------------------------------------\n\n/** Interactive labels for each policy template. */\nexport const POLICY_TEMPLATE_PROMPT_LABELS: Record<PolicyTemplateName, string> = {\n  generic: 'Generic example',\n  permissions: 'Permission API starter',\n};\n\n/** Default root names for each template. */\nexport const POLICY_TEMPLATE_DEFAULT_ROOTS: Record<PolicyTemplateName, string> = {\n  generic: 'example',\n  permissions: PERMISSIONS_POLICY_BUNDLE_NAME,\n};\n\n/**\n * Build the bundle directory name from a root.\n *\n * @param root - Package root\n * @returns Bundle directory name\n */\nexport function buildBundleDirectoryName(root: string): string {\n  return `${root}-bundle`;\n}\n\n/**\n * Generate bundle files for the generic template.\n *\n * @param root - Package root name\n * @returns Bundle files relative to the workspace\n */\nexport function generateGenericBundleFiles(root: string): PolicyStarterFile[] {\n  const bundle = buildBundleDirectoryName(root);\n  return [\n    {\n      path: `${bundle}/${POLICY_MANIFEST_FILENAME}`,\n      contents: buildPolicyManifestTemplate(root, 'generic'),\n      description: 'Create the OPA bundle .manifest',\n    },\n    {\n      path: `schemas/${root}/input.json`,\n      contents: `{\n  \"$schema\": \"http://json-schema.org/draft-07/schema#\",\n  \"$id\": \"https://transcend.io/policy-schemas/${root}/input.json\",\n  \"title\": \"${root === 'example' ? 'Example policy input' : `${root} policy input`}\",\n  \"description\": \"${root === 'example' ? 'Disposable teaching envelope for the example bundle.' : `Input envelope for the ${root} bundle.`}\",\n  \"type\": \"object\",\n  \"additionalProperties\": true,\n  \"properties\": {\n    \"subject\": {\n      \"type\": \"object\",\n      \"additionalProperties\": true,\n      \"properties\": {\n        \"trusted\": {\n          \"type\": \"boolean\",\n          \"description\": \"When true, the ${root === 'example' ? 'example' : root} policy allows; otherwise it denies.\"\n        }\n      }\n    }\n  }\n}\n`,\n      description: `Create the input JSON Schema for the ${root} bundle`,\n    },\n    {\n      path: `${bundle}/${root}/result/result.rego`,\n      contents: `# METADATA\n# title: ${root === 'example' ? 'Disposable example result' : `${root} result`}\n# description: |\n#   A fail-closed ${root === 'example' ? 'teaching ' : ''}entrypoint. Replace this ${root === 'example' ? 'example ' : ''}with the document\n#   tree and result contract required by your application.\n# scope: package\n# schemas:\n#   - input: schema.${root}.input\n# entrypoint: true\npackage ${root}.result\n\nimport rego.v1\n\ndefault decision := \"deny\"\n\ndecision := \"allow\" if {\n\\tinput.subject.trusted == true\n}\n\ndefault reason_code := \"untrusted_or_invalid_input\"\n\nreason_code := \"trusted_subject\" if {\n\\tdecision == \"allow\"\n}\n`,\n      description: 'Create a documented fail-closed result entrypoint',\n    },\n    {\n      path: `${bundle}/${root}/result/result_test.rego`,\n      contents: `package ${root}.result_test\n\nimport data.${root}.result\nimport rego.v1\n\ntest_denies_untrusted_subject if {\n\\tresult.decision == \"deny\" with input as {\"subject\": {\"trusted\": false}}\n\\tresult.reason_code == \"untrusted_or_invalid_input\" with input as {\"subject\": {\"trusted\": false}}\n}\n\ntest_fails_closed_for_missing_subject if {\n\\tresult.decision == \"deny\" with input as {}\n\\tresult.reason_code == \"untrusted_or_invalid_input\" with input as {}\n}\n\ntest_allows_trusted_subject if {\n\\tresult.decision == \"allow\" with input as {\"subject\": {\"trusted\": true}}\n\\tresult.reason_code == \"trusted_subject\" with input as {\"subject\": {\"trusted\": true}}\n}\n`,\n      description: 'Create executable tests for allow and fail-closed decisions',\n    },\n    {\n      path: `${bundle}/input.example.json`,\n      contents: POLICY_INPUT_EXAMPLE_TEMPLATE,\n      description: 'Create a sanitized local evaluation input example',\n    },\n    {\n      path: `${bundle}/input.json`,\n      contents: POLICY_INPUT_EXAMPLE_TEMPLATE,\n      description: 'Create a local evaluation input (gitignored copy of the example)',\n    },\n    {\n      path: `${bundle}/.gitignore`,\n      contents: POLICY_GITIGNORE_TEMPLATE,\n      description: 'Ignore only the private local input file',\n    },\n  ];\n}\n\n/**\n * Generate bundle files for the permissions template.\n *\n * @param root - Package root name\n * @returns Bundle files relative to the workspace\n */\n/**\n * Serialize the published Permissions input schema for a local OPA schema path.\n *\n * OPA maps `schemas/{root}/input.json` → `schema.{root}.input`; the file is a\n * copy of the published schema so type-checking works offline.\n *\n * @returns Schema file contents ending in a trailing newline\n */\nexport function buildPermissionsInputSchemaContents(): string {\n  return `${JSON.stringify(permissionsPolicyInputSchema, null, 2)}\\n`;\n}\n\n/**\n * Serialize the published Permissions input example for local evaluation.\n *\n * @returns Example input JSON ending in a trailing newline\n */\nexport function buildPermissionsInputExampleContents(): string {\n  const [example] = permissionsPolicyInputSchema.examples;\n  if (!example) {\n    throw new Error('permissions-policy-input.json must declare at least one example');\n  }\n  return `${JSON.stringify(example, null, 2)}\\n`;\n}\n\n/**\n * Generate bundle files for the permissions template.\n *\n * @param root - Package root name\n * @returns Bundle files relative to the workspace\n */\nexport function generatePermissionsBundleFiles(root: string): PolicyStarterFile[] {\n  const bundle = buildBundleDirectoryName(root);\n  const inputExample = buildPermissionsInputExampleContents();\n  return [\n    {\n      path: `${bundle}/${POLICY_MANIFEST_FILENAME}`,\n      contents: buildPolicyManifestTemplate(root, 'permissions'),\n      description: 'Create the OPA bundle .manifest',\n    },\n    {\n      path: `schemas/${root}/input.json`,\n      contents: buildPermissionsInputSchemaContents(),\n      description: `Create the input JSON Schema for the ${root} bundle (from published permissions-policy-input.json)`,\n    },\n    {\n      path: `${bundle}/${root}/config/config.rego`,\n      contents: `# METADATA\n# title: Permissions config\n# description: |\n#   Static bundle configuration. Values come from data.json in this directory.\npackage ${root}.config\n\nimport rego.v1\n`,\n      description: 'Create the static bundle configuration package',\n    },\n    {\n      path: `${bundle}/${root}/config/data.json`,\n      contents: `{\n  \"default_consent_allowed\": true,\n  \"purposes\": [\n    \"Analytics\",\n    \"SaleOfInfo\",\n    \"Marketing\",\n    \"Personalization\"\n  ],\n  \"default_consent\": {}\n}\n`,\n      description: 'Create the static purpose configuration data',\n    },\n    {\n      path: `${bundle}/${root}/helpers/preference/preference.rego`,\n      contents: `# METADATA\n# title: Purpose preference resolution\n# description: |\n#   Resolves the subject's recorded choice for one purpose from the OPA\n#   \\`input.preferences\\` array Sombra injects (one \\`{name, choice,\n#   days_since_choice?}\\` entry per purpose; \\`choice\\` may be null when unset).\npackage ${root}.helpers.preference\n\nimport rego.v1\n\nimport data.${root}.config\n\nraw_preferences := object.get(input, \"preferences\", [])\n\nsource_available if {\n\\tis_array(raw_preferences)\n\\tevery entry in raw_preferences {\n\\t\\tis_object(entry)\n\\t\\tis_string(entry.name)\n\\t\\tentry.name != \"\"\n\\t}\n}\n\n# Boolean choice for a purpose, last-wins across duplicate entries (matching\n# Sombra's own dedup semantics). Returns the boolean only when a usable choice\n# exists; otherwise the rule is undefined and the purpose is undecided.\nchoice(name) := choice if {\n\\tsource_available\n\\tmatching := [entry | some entry in raw_preferences; entry.name == name]\n\\tcount(matching) > 0\n\\tlast := matching[count(matching) - 1]\n\\tchoice := object.get(last, \"choice\", null)\n\\tis_boolean(choice)\n}\n\nenabled(name) if choice(name) == true\n\ndisabled(name) if choice(name) == false\n\ndecided(name) if enabled(name)\n\ndecided(name) if disabled(name)\n\n# A configured purpose with no usable boolean choice is undecided: the subject\n# never chose, so the resolved default applies (not an opt-out).\nundecided(name) if {\n\\tname in config.purposes\n\\tnot enabled(name)\n\\tnot disabled(name)\n}\n`,\n      description: 'Create purpose preference resolution helpers',\n    },\n    {\n      path: `${bundle}/${root}/helpers/preference/preference_test.rego`,\n      contents: `# Mechanical tests for purpose preference resolution.\n# Policy outcomes are tested beside the public entrypoint.\npackage ${root}.helpers.preference_test\n\nimport rego.v1\n\nimport data.${root}.helpers.preference\n\ngiven(preferences) := {\"preferences\": preferences}\n\ntest_treats_an_absent_preferences_array_as_no_recorded_choices if {\n\\tfixture := {}\n\n\\tpreference.source_available with input as fixture\n\\tpreference.undecided(\"Marketing\") with input as fixture\n}\n\ntest_accepts_an_empty_preferences_array if {\n\\tfixture := given([])\n\n\\tpreference.source_available with input as fixture\n\\tpreference.undecided(\"Marketing\") with input as fixture\n}\n\ntest_reports_a_non_array_preferences_as_unavailable if {\n\\tnot preference.source_available with input as {\"preferences\": {\"Marketing\": true}}\n}\n\ntest_reports_entries_without_a_usable_name_as_unavailable if {\n\\tnot preference.source_available with input as {\"preferences\": [{}]}\n\\tnot preference.source_available with input as {\"preferences\": [{\"name\": \"\"}]}\n\\tnot preference.source_available with input as {\"preferences\": [{\"choice\": true}]}\n}\n\ntest_distinguishes_enabled_and_disabled_choices if {\n\\tfixture := given([\n\\t\\t{\"name\": \"Marketing\", \"choice\": true},\n\\t\\t{\"name\": \"Analytics\", \"choice\": false},\n\\t])\n\n\\tpreference.enabled(\"Marketing\") with input as fixture\n\\tpreference.disabled(\"Analytics\") with input as fixture\n\\tpreference.decided(\"Marketing\") with input as fixture\n\\tpreference.decided(\"Analytics\") with input as fixture\n\\tnot preference.undecided(\"Marketing\") with input as fixture\n}\n\ntest_treats_a_null_choice_as_undecided if {\n\\tfixture := given([{\"name\": \"Marketing\", \"choice\": null}])\n\n\\tpreference.undecided(\"Marketing\") with input as fixture\n\\tnot preference.decided(\"Marketing\") with input as fixture\n}\n\ntest_treats_an_absent_choice_key_as_undecided if {\n\\tfixture := given([{\"name\": \"Marketing\", \"channel\": \"email\"}])\n\n\\tpreference.undecided(\"Marketing\") with input as fixture\n}\n\ntest_treats_a_non_boolean_choice_as_undecided if {\n\\tfixture := given([{\"name\": \"Personalization\", \"choice\": \"Daily\"}])\n\n\\tpreference.undecided(\"Personalization\") with input as fixture\n\\tnot preference.decided(\"Personalization\") with input as fixture\n}\n\n# Sombra dedupes by purpose before sending; last-wins keeps the bundle correct\n# against hand-crafted input that names the same purpose twice.\ntest_last_wins_on_duplicate_entries if {\n\\tfixture := given([\n\\t\\t{\"name\": \"SaleOfInfo\", \"choice\": true},\n\\t\\t{\"name\": \"SaleOfInfo\", \"choice\": false},\n\\t])\n\n\\tpreference.disabled(\"SaleOfInfo\") with input as fixture\n\\tnot preference.enabled(\"SaleOfInfo\") with input as fixture\n}\n\n# Extra fields on an entry (evidence, days_since_choice, channel) are ignored\n# rather than treated as a choice.\ntest_ignores_fields_beyond_the_recorded_choice if {\n\\tfixture := given([{\n\\t\\t\"name\": \"Marketing\",\n\\t\\t\"choice\": true,\n\\t\\t\"evidence\": \"consent_banner\",\n\\t\\t\"days_since_choice\": 45,\n\\t\\t\"channel\": \"email\",\n\\t}])\n\n\\tpreference.enabled(\"Marketing\") with input as fixture\n}\n`,\n      description: 'Create preference resolution tests',\n    },\n    {\n      path: `${bundle}/${root}/main.rego`,\n      contents: `# METADATA\n# title: Permissions bundle root\n# description: |\n#   Declares the Permissions envelope schema for this package and all\n#   subpackages (helpers, purposes, and static config data).\n# scope: subpackages\n# schemas:\n#   - input: schema.${root}.input\npackage ${root}\n\nimport rego.v1\n`,\n      description: 'Create the bundle root package with schema declaration',\n    },\n    {\n      path: `${bundle}/${root}/purposes/analytics/analytics.rego`,\n      contents: `# METADATA\n# title: Analytics purpose decision\n# description: |\n#   The Analytics purpose's verdict as a \\`result\\` document\n#   (\\`data.${root}.purposes.analytics.result\\`).\npackage ${root}.purposes.analytics\n\nimport rego.v1\n\nimport data.${root}.helpers.preference\n\ndefault result := {\n\\t\"decision\": \"deny\",\n\\t\"reason_code\": \"default_deny\",\n}\n\nresult := {\n\\t\"decision\": \"allow\",\n\\t\"reason_code\": \"explicit_allow\",\n} if {\n\\tpreference.enabled(\"Analytics\")\n}\n\nresult := {\n\\t\"decision\": \"deny\",\n\\t\"reason_code\": \"explicit_deny\",\n} if {\n\\tpreference.disabled(\"Analytics\")\n}\n\nresult := {\n\\t\"decision\": \"allow\",\n\\t\"reason_code\": \"default_allow\",\n} if {\n\\tpreference.undecided(\"Analytics\")\n}\n`,\n      description: 'Create the analytics purpose decision rule',\n    },\n    {\n      path: `${bundle}/${root}/purposes/analytics/analytics_test.rego`,\n      contents: `# Policy outcomes for the Analytics purpose (the queried document).\npackage ${root}.purposes.analytics_test\n\nimport rego.v1\n\nimport data.${root}.purposes.analytics\n\ngiven(preferences) := {\"preferences\": preferences}\n\ntest_explicit_allow if {\n\\tresult := analytics.result with input as given([{\"name\": \"Analytics\", \"choice\": true}])\n\\tresult == {\n\\t\\t\"decision\": \"allow\",\n\\t\\t\"reason_code\": \"explicit_allow\",\n\\t}\n}\n\ntest_explicit_deny if {\n\\tresult := analytics.result with input as given([{\"name\": \"Analytics\", \"choice\": false}])\n\\tresult == {\n\\t\\t\"decision\": \"deny\",\n\\t\\t\"reason_code\": \"explicit_deny\",\n\\t}\n}\n\ntest_undecided_resolves_to_default_allow if {\n\\tresult := analytics.result with input as given([])\n\\tresult == {\n\\t\\t\"decision\": \"allow\",\n\\t\\t\"reason_code\": \"default_allow\",\n\\t}\n}\n\ntest_missing_preferences_resolves_to_default_allow if {\n\\tresult := analytics.result with input as {}\n\\tresult == {\n\\t\\t\"decision\": \"allow\",\n\\t\\t\"reason_code\": \"default_allow\",\n\\t}\n}\n\ntest_non_boolean_choice_falls_back_to_default_allow if {\n\\tresult := analytics.result with input as given([{\"name\": \"Analytics\", \"choice\": \"yes\"}])\n\\tresult == {\n\\t\\t\"decision\": \"allow\",\n\\t\\t\"reason_code\": \"default_allow\",\n\\t}\n}\n\ntest_malformed_preferences_are_treated_as_undecided if {\n\\t# source_available is false, so enabled/disabled never fire; undecided still\n\\t# holds for configured purposes (not enabled and not disabled).\n\\tresult := analytics.result with input as {\"preferences\": {\"Analytics\": true}}\n\\tresult == {\n\\t\\t\"decision\": \"allow\",\n\\t\\t\"reason_code\": \"default_allow\",\n\\t}\n}\n`,\n      description: 'Create analytics purpose decision tests',\n    },\n    {\n      path: `${bundle}/${root}/purposes/entrypoint.rego`,\n      contents: `# METADATA\n# title: Purpose decisions\n# description: Returns each purpose's decision and reason code.\n# scope: package\n# entrypoint: true\npackage ${root}.purposes\n\nimport rego.v1\n`,\n      description: 'Create the purposes entrypoint',\n    },\n    {\n      path: `${bundle}/input.example.json`,\n      contents: inputExample,\n      description: 'Create a sanitized permissions evaluation input example',\n    },\n    {\n      path: `${bundle}/input.json`,\n      contents: inputExample,\n      description: 'Create a local evaluation input (gitignored copy of the example)',\n    },\n    {\n      path: `${bundle}/.gitignore`,\n      contents: POLICY_GITIGNORE_TEMPLATE,\n      description: 'Ignore only the private local input file',\n    },\n  ];\n}\n\n/**\n * Generate bundle files for a given template and root.\n *\n * @param template - Template name\n * @param root - Package root name\n * @returns Bundle files relative to the workspace\n */\nexport function generatePolicyBundleFiles(\n  template: PolicyTemplateName,\n  root: string,\n): PolicyStarterFile[] {\n  switch (template) {\n    case 'generic':\n      return generateGenericBundleFiles(root);\n    case 'permissions':\n      return generatePermissionsBundleFiles(root);\n    default:\n      throw new Error(`Unknown policy template: ${String(template)}`);\n  }\n}\n","import { join, resolve } from 'node:path';\n\nimport type { LocalContext } from '../../context.js';\nimport {\n  collectProjectRelativePaths,\n  discoverProjectRepository,\n} from '../scaffolding/project-discovery.js';\nimport type { PolicyProjectState } from './policy-scaffold-model.js';\nimport {\n  POLICY_MANIFEST_FILENAME,\n  POLICY_STARTER_BUNDLE_DIRECTORY,\n} from './policy-scaffold-templates.js';\n\n/** Default local policy workspace directory (shared Regal + schemas). */\nexport const DEFAULT_POLICY_PROJECT_DIRECTORY = 'transcend/policy';\n\n/**\n * Resolve a selected policy project relative to the invocation directory.\n *\n * @param invocationDirectory - CLI working directory\n * @param directory - User-selected project directory\n * @returns Absolute policy project directory\n */\nexport function resolvePolicyProjectDirectory(\n  invocationDirectory: string,\n  directory: string = DEFAULT_POLICY_PROJECT_DIRECTORY,\n): string {\n  return resolve(invocationDirectory, directory);\n}\n\n/**\n * Absolute path to the disposable starter publish directory under a workspace.\n *\n * @param workspaceDirectory - Absolute policy workspace directory\n * @returns Absolute starter bundle directory\n */\nexport function getPolicyStarterBundleDirectory(workspaceDirectory: string): string {\n  return join(workspaceDirectory, POLICY_STARTER_BUNDLE_DIRECTORY);\n}\n\n/**\n * Resolve publishable bundle directories under a path.\n *\n * - If `directory` itself contains a `.manifest`, it is treated as one bundle.\n * - Otherwise immediate child directories that contain a `.manifest` are\n *   returned in sorted order (multi-bundle workspace). Folder names are not\n *   required to end in `-bundle`; that suffix is only the `policy new`\n *   scaffolding convention.\n *\n * @param context - Filesystem-bearing CLI context\n * @param directory - Absolute workspace or bundle directory\n * @returns Absolute bundle directories to lint / test\n */\nexport function discoverPolicyBundleDirectories(\n  context: Pick<LocalContext, 'fs'>,\n  directory: string,\n): string[] {\n  if (!context.fs.existsSync(directory) || !context.fs.statSync(directory).isDirectory()) {\n    return [];\n  }\n  const manifestAtRoot = join(directory, POLICY_MANIFEST_FILENAME);\n  if (context.fs.existsSync(manifestAtRoot) && context.fs.statSync(manifestAtRoot).isFile()) {\n    return [directory];\n  }\n  return context.fs\n    .readdirSync(directory, { withFileTypes: true })\n    .filter((entry) => entry.isDirectory())\n    .map((entry) => join(directory, entry.name))\n    .filter((bundleDirectory) => {\n      const manifestPath = join(bundleDirectory, POLICY_MANIFEST_FILENAME);\n      return context.fs.existsSync(manifestPath) && context.fs.statSync(manifestPath).isFile();\n    })\n    .sort((left, right) => left.localeCompare(right));\n}\n\n/**\n * Collect repository state required by the pure policy planner.\n *\n * @param context - CLI context\n * @param directory - User-selected target directory\n * @returns Policy project discovery state\n */\nexport function discoverPolicyProject(\n  context: LocalContext,\n  directory: string = DEFAULT_POLICY_PROJECT_DIRECTORY,\n): PolicyProjectState {\n  const invocationDirectory = context.process.cwd();\n  const targetDirectory = resolvePolicyProjectDirectory(invocationDirectory, directory);\n  if (\n    context.fs.existsSync(targetDirectory) &&\n    !context.fs.statSync(targetDirectory).isDirectory()\n  ) {\n    throw new Error(`Policy target is not a directory: ${targetDirectory}`);\n  }\n  const repository = discoverProjectRepository(context, {\n    invocationDirectory,\n    targetDirectory,\n    standaloneProjectRoot: invocationDirectory,\n  });\n  return {\n    invocationDirectory,\n    targetDirectory,\n    ...repository,\n    relativePaths: collectProjectRelativePaths(context, targetDirectory),\n    relativeFilePaths: collectProjectRelativePaths(context, targetDirectory, {\n      includeDirectories: false,\n    }),\n  };\n}\n\n/**\n * Resolve the starter bundle manifest path for a discovered workspace.\n *\n * @param state - Policy project state\n * @returns Absolute manifest path under the starter `{root}-bundle/`\n */\nexport function getPolicyManifestPath(state: PolicyProjectState): string {\n  return join(getPolicyStarterBundleDirectory(state.targetDirectory), POLICY_MANIFEST_FILENAME);\n}\n"],"mappings":"m3CCQA,MAAa,EAA6B,SAQ7B,EAAsB,UAGtB,EAAkC,GAAG,EAAoB,SAazD,EAA2B,YAQ3B,EAAiC,cAGjC,EAAyC,eAGzC,EAAwB,CAAC,UAAW,cAAc,CAgB/D,SAAgB,EACd,EACA,EAA+B,UACvB,CACR,MAAO;;;eAGM,EAAK;;;OAGb,EAAuC;qBACzB,EAAS;;;;EAQU,EAA4B,EAAqB,UAAU,CAWnG,SAAgB,EAA+B,EAAkC,CAK/E,MAAO;;;;;;gBAMO,EAA2B;;EATvC,EAAM,SAAW,EACb,cACA,aAAa,EAAM,IAAK,GAAS,SAAS,IAAO,CAAC,KAAK;EAAK,GASrD;;EAgBf,SAAgB,EACd,EACA,EACuC,CAEvC,GADgB,EAAiB,MACtB,CAAC,SAAW,EAAG,CACxB,IAAM,EAAQ,CAAC,EAAU,CACzB,MAAO,CAAE,SAAU,EAA+B,EAAM,CAAE,QAAO,CAGnE,IAAI,EACJ,GAAI,CACF,EAAS,EAAK,KAAK,EAAiB,OAC7B,EAAO,CACd,IAAM,EAAS,aAAiB,MAAQ,EAAM,QAAU,OAAO,EAAM,CACrE,MAAU,MAAM,yCAAyC,IAAS,CAGpE,GAAI,GAAW,KAA8B,CAC3C,IAAM,EAAQ,CAAC,EAAU,CACzB,MAAO,CAAE,SAAU,EAA+B,EAAM,CAAE,QAAO,CAEnE,GAAI,OAAO,GAAW,UAAY,MAAM,QAAQ,EAAO,CACrD,MAAU,MAAM,8DAA8D,CAGhF,IAAM,EAAS,CAAE,GAAI,EAAoC,CACnD,EAAkB,EAAO,QAC/B,GACE,GACoB,OACnB,OAAO,GAAoB,UAAY,MAAM,QAAQ,EAAgB,EAEtE,MAAU,MAAM,kEAAkE,CAGpF,IAAM,EAAmC,CACvC,GAAK,GAA2D,EAAE,CACnE,CACK,EAAgB,EAAQ,MAC1B,EACJ,GAAI,IAAkB,IAAA,GACpB,EAAQ,CAAC,EAAU,SAEnB,MAAM,QAAQ,EAAc,EAC5B,EAAc,MAAO,GAAyB,OAAO,GAAS,SAAS,CAEvE,EAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAe,EAAU,CAAC,CAAC,CAAC,MAAM,EAAM,IAC9D,EAAK,cAAc,EAAM,CAC1B,MAED,MAAU,MACR,4HAED,CAGH,EAAQ,MAAQ,EACZ,EAAQ,kBAAoB,IAAA,KAC9B,EAAQ,gBAAkB,GAE5B,EAAO,QAAU,EAEb,EAAO,eAAiB,IAAA,KAC1B,EAAO,aAAe,CACpB,KAAM,CACJ,OAAQ,MACR,QAAS,IAAI,IACd,CACF,EAGH,IAAM,EAAS,EAAK,KAAK,EAAQ,CAC/B,UAAW,GACX,OAAQ,GACR,SAAU,GACX,CAAC,CACF,MAAO,CACL,SAAU,EAAO,SAAS;EAAK,CAAG,EAAS,GAAG,EAAO,IACrD,QACD,CASyC,EAA+B,CAAC,EAAoB,CAAC,CAAjG,MAGa,EAAqC,EAA+B,EAAE,CAAC,CAGzC,GAOrB,EAPqB,EASjC,EATiC,EA2BK,GAAW,EAAX,EAElC,EAFkC,EAjChD,MAuDa,EAAgC;;;;;EAQD,GAEI,EAFJ,EA/D5C,MAsFa,EAA4B;;EAK5B,EAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAoDhC,EAA+B;oBACjB,EAA+B;;;;;;;EAUJ,GAAG,EAAH,EAAsC,EAAtC,EAGK,GAAG,EAAH,EAAsC,EAAtC,EAK1C,GAAG,EAAH,EAAsC,EAAtC,EAOO,GAAqC,EAArC,EAGP,GAAW,EAAX,EAeA,GAAG,EAAH,EAKA,GAAG,EAAH,EAyBV,MAAM,EAA4D,CAChE,CACE,KAAM,qBACN,SAAU,EACV,YAAa,qCAAqC,EAA2B,eAC9E,CACD,CACE,KAAM,YACN,SAAU,EACV,YAAa,kDACd,CACF,CAOD,SAAgB,GAAoD,CAClE,OAAO,EAA4B,IAAK,IAAU,CAAE,GAAG,EAAM,EAAE,CAQjE,MAAa,EAAoE,CAC/E,QAAS,kBACT,YAAa,yBACd,CAGY,EAAoE,CAC/E,QAAS,UACT,YAAa,EACd,CAQD,SAAgB,EAAyB,EAAsB,CAC7D,MAAO,GAAG,EAAK,SASjB,SAAgB,EAA2B,EAAmC,CAC5E,IAAM,EAAS,EAAyB,EAAK,CAC7C,MAAO,CACL,CACE,KAAM,GAAG,EAAO,GAAG,IACnB,SAAU,EAA4B,EAAM,UAAU,CACtD,YAAa,kCACd,CACD,CACE,KAAM,WAAW,EAAK,aACtB,SAAU;;gDAEgC,EAAK;cACvC,IAAS,UAAY,uBAAyB,GAAG,EAAK,eAAe;oBAC/D,IAAS,UAAY,uDAAyD,0BAA0B,EAAK,UAAU;;;;;;;;;;2CAUhG,IAAS,UAAY,UAAY,EAAK;;;;;;EAO3E,YAAa,wCAAwC,EAAK,SAC3D,CACD,CACE,KAAM,GAAG,EAAO,GAAG,EAAK,qBACxB,SAAU;WACL,IAAS,UAAY,4BAA8B,GAAG,EAAK,SAAS;;oBAE3D,IAAS,UAAY,YAAc,GAAG,2BAA2B,IAAS,UAAY,WAAa,GAAG;;;;sBAIpG,EAAK;;UAEjB,EAAK;;;;;;;;;;;;;;;EAgBT,YAAa,oDACd,CACD,CACE,KAAM,GAAG,EAAO,GAAG,EAAK,0BACxB,SAAU,WAAW,EAAK;;cAElB,EAAK;;;;;;;;;;;;;;;;;EAkBb,YAAa,8DACd,CACD,CACE,KAAM,GAAG,EAAO,qBAChB,SAAU,EACV,YAAa,oDACd,CACD,CACE,KAAM,GAAG,EAAO,aAChB,SAAU,EACV,YAAa,mEACd,CACD,CACE,KAAM,GAAG,EAAO,aAChB,SAAU,EACV,YAAa,2CACd,CACF,CAiBH,SAAgB,GAA8C,CAC5D,MAAO,GAAG,KAAK,UAAUC,EAA8B,KAAM,EAAE,CAAC,IAQlE,SAAgB,GAA+C,CAC7D,GAAM,CAAC,GAAWC,EAClB,GAAI,CAAC,EACH,MAAU,MAAM,kEAAkE,CAEpF,MAAO,GAAG,KAAK,UAAU,EAAS,KAAM,EAAE,CAAC,IAS7C,SAAgB,EAA+B,EAAmC,CAChF,IAAM,EAAS,EAAyB,EAAK,CACvC,EAAe,GAAsC,CAC3D,MAAO,CACL,CACE,KAAM,GAAG,EAAO,GAAG,IACnB,SAAU,EAA4B,EAAM,cAAc,CAC1D,YAAa,kCACd,CACD,CACE,KAAM,WAAW,EAAK,aACtB,SAAU,GAAqC,CAC/C,YAAa,wCAAwC,EAAK,wDAC3D,CACD,CACE,KAAM,GAAG,EAAO,GAAG,EAAK,qBACxB,SAAU;;;;UAIN,EAAK;;;EAIT,YAAa,iDACd,CACD,CACE,KAAM,GAAG,EAAO,GAAG,EAAK,mBACxB,SAAU;;;;;;;;;;EAWV,YAAa,+CACd,CACD,CACE,KAAM,GAAG,EAAO,GAAG,EAAK,qCACxB,SAAU;;;;;;UAMN,EAAK;;;;cAID,EAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyCb,YAAa,+CACd,CACD,CACE,KAAM,GAAG,EAAO,GAAG,EAAK,0CACxB,SAAU;;UAEN,EAAK;;;;cAID,EAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuFb,YAAa,qCACd,CACD,CACE,KAAM,GAAG,EAAO,GAAG,EAAK,YACxB,SAAU;;;;;;;sBAOM,EAAK;UACjB,EAAK;;;EAIT,YAAa,yDACd,CACD,CACE,KAAM,GAAG,EAAO,GAAG,EAAK,oCACxB,SAAU;;;;cAIF,EAAK;UACT,EAAK;;;;cAID,EAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4Bb,YAAa,6CACd,CACD,CACE,KAAM,GAAG,EAAO,GAAG,EAAK,yCACxB,SAAU;UACN,EAAK;;;;cAID,EAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsDb,YAAa,0CACd,CACD,CACE,KAAM,GAAG,EAAO,GAAG,EAAK,2BACxB,SAAU;;;;;UAKN,EAAK;;;EAIT,YAAa,iCACd,CACD,CACE,KAAM,GAAG,EAAO,qBAChB,SAAU,EACV,YAAa,0DACd,CACD,CACE,KAAM,GAAG,EAAO,aAChB,SAAU,EACV,YAAa,mEACd,CACD,CACE,KAAM,GAAG,EAAO,aAChB,SAAU,EACV,YAAa,2CACd,CACF,CAUH,SAAgB,EACd,EACA,EACqB,CACrB,OAAQ,EAAR,CACE,IAAK,UACH,OAAO,EAA2B,EAAK,CACzC,IAAK,cACH,OAAO,EAA+B,EAAK,CAC7C,QACE,MAAU,MAAM,4BAA4B,OAAO,EAAS,GAAG,ECz8BrE,MAAa,EAAmC,mBAShD,SAAgB,EACd,EACA,EAAoB,EACZ,CACR,OAAO,EAAQ,EAAqB,EAAU,CA0BhD,SAAgB,EACd,EACA,EACU,CACV,GAAI,CAAC,EAAQ,GAAG,WAAW,EAAU,EAAI,CAAC,EAAQ,GAAG,SAAS,EAAU,CAAC,aAAa,CACpF,MAAO,EAAE,CAEX,IAAM,EAAiB,EAAK,EAAW,EAAyB,CAIhE,OAHI,EAAQ,GAAG,WAAW,EAAe,EAAI,EAAQ,GAAG,SAAS,EAAe,CAAC,QAAQ,CAChF,CAAC,EAAU,CAEb,EAAQ,GACZ,YAAY,EAAW,CAAE,cAAe,GAAM,CAAC,CAC/C,OAAQ,GAAU,EAAM,aAAa,CAAC,CACtC,IAAK,GAAU,EAAK,EAAW,EAAM,KAAK,CAAC,CAC3C,OAAQ,GAAoB,CAC3B,IAAM,EAAe,EAAK,EAAiB,EAAyB,CACpE,OAAO,EAAQ,GAAG,WAAW,EAAa,EAAI,EAAQ,GAAG,SAAS,EAAa,CAAC,QAAQ,EACxF,CACD,MAAM,EAAM,IAAU,EAAK,cAAc,EAAM,CAAC,CAUrD,SAAgB,EACd,EACA,EAAoB,EACA,CACpB,IAAM,EAAsB,EAAQ,QAAQ,KAAK,CAC3C,EAAkB,EAA8B,EAAqB,EAAU,CACrF,GACE,EAAQ,GAAG,WAAW,EAAgB,EACtC,CAAC,EAAQ,GAAG,SAAS,EAAgB,CAAC,aAAa,CAEnD,MAAU,MAAM,qCAAqC,IAAkB,CAOzE,MAAO,CACL,sBACA,kBACA,GARiB,EAA0B,EAAS,CACpD,sBACA,kBACA,sBAAuB,EACxB,CAIc,CACb,cAAe,EAA4B,EAAS,EAAgB,CACpE,kBAAmB,EAA4B,EAAS,EAAiB,CACvE,mBAAoB,GACrB,CAAC,CACH"}

package/dist/policy-scaffold-config-BUKAyPad.mjs

@@ -1,76 +0,0 @@
-import{c as e,l as t,o as n,u as r}from"./policy-project-discovery-C29UxWwt.mjs";import{n as i,r as a,t as o}from"./jsonc-CdTubr53.mjs";import{posix as s,relative as c,sep as l}from"node:path";const u=`0.42.0`,d=`.github/workflows/transcend-policy.yml`,f=`d23441a48e516b6c34aea4fa41551a30e30af803`,p=`b2b258e089860efaadaaf71bf6e3aecb4a3eeff1`,m=`761188c3b435761fa254beca508a44875619648f`;function h(e,t){return e===`.`?t:s.join(e,t)}function g(n){let r=n.bundleDirectories??[h(n.workspaceDirectory,e)],i=[h(n.workspaceDirectory,`**/*.rego`),h(n.workspaceDirectory,`**/*.json`),h(n.workspaceDirectory,`**/*.yaml`),h(n.workspaceDirectory,`**/*.yml`),h(n.workspaceDirectory,`**/.manifest`),h(n.workspaceDirectory,`.regal/config.yaml`),h(n.workspaceDirectory,`.regal.yaml`),d].map(e=>`      - ${JSON.stringify(e)}`).join(`
-`),a;return a=r.length===0?`  lint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@${f} # v6
-      - name: No publishable bundles yet
-        run: >-
-          echo "Run transcend policy new to add a bundle;
-          policy new refreshes this workflow automatically."
-`:r.length===1?`  lint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@${f} # v6
-      - name: Set up OPA
-        uses: open-policy-agent/setup-opa@${p} # v2.4.0
-        with:
-          version: ${JSON.stringify(t)}
-      - name: Set up Regal
-        uses: open-policy-agent/setup-regal@${m} # v2.0.0
-        with:
-          version: ${JSON.stringify(u)}
-      - name: Install the Transcend CLI
-        run: npm install --global @transcend-io/cli@${n.cliVersion}
-      - name: Validate Policy Engine project
-        env:
-          POLICY_DIRECTORY: ${JSON.stringify(r[0])}
-        run: >-
-          transcend policy lint
-          "$POLICY_DIRECTORY"
-          --noInteractive
-          --json
-`:`  lint:
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        policy_directory:
-${r.map(e=>`          - ${JSON.stringify(e)}`).join(`
-`)}
-    steps:
-      - uses: actions/checkout@${f} # v6
-      - name: Set up OPA
-        uses: open-policy-agent/setup-opa@${p} # v2.4.0
-        with:
-          version: ${JSON.stringify(t)}
-      - name: Set up Regal
-        uses: open-policy-agent/setup-regal@${m} # v2.0.0
-        with:
-          version: ${JSON.stringify(u)}
-      - name: Install the Transcend CLI
-        run: npm install --global @transcend-io/cli@${n.cliVersion}
-      - name: Validate Policy Engine project
-        env:
-          POLICY_DIRECTORY: \${{ matrix.policy_directory }}
-        run: transcend policy lint "$POLICY_DIRECTORY" --noInteractive --json
-`,`# Generated by transcend policy init.
-name: Transcend Policy
-
-on:
-  pull_request:
-    paths:
-${i}
-  push:
-    paths:
-${i}
-
-permissions:
-  contents: read
-
-jobs:
-${a}`}const _=`tsandall.opa`,v=`glebbash.opa-highlight-only`;function y(e,t){return JSON.stringify(e)===JSON.stringify(t)}function b(e,t){try{return{current:a(e??`{}
-`,t)}}catch(t){return{contents:e??`{}
-`,warning:`${t instanceof Error?t.message:String(t)} Existing content was left unchanged.`}}}function x(e,t,n,r){if(t.length===0)return{contents:e??`{}
-`,warnings:r};try{return{contents:o(e,t,n),warnings:r}}catch(t){return{contents:e??`{}
-`,warnings:[...r,`${t instanceof Error?t.message:String(t)} Existing content was left unchanged.`]}}}function S(e,t,n,r){t.forEach(({path:t,value:i,label:a})=>{let o=t.reduce((e,t)=>e&&typeof e==`object`&&!Array.isArray(e)?e[t]:void 0,e);o===void 0?n.push({path:t,value:i}):y(o,i)||r.push(`VS Code setting "${a}" has a repository-specific value and was left unchanged.`)})}function C(e){return e===`.`?"${workspaceFolder}":`\${workspaceFolder}/${e}`}function w(e,t){return c(e,t).split(l).join(`/`)||`.`}function T(e,t,n=r){let i=w(e,t),a=`${n}-bundle`;return C(i===`.`?a:`${i}/${a}`)}function E(e,t){let n=w(e,t);return C(n===`.`?`schemas`:`${n}/schemas`)}function D(e,t){let r=w(e,t);return r===`.`?`**/${n}`:`**/${r}/**/${n}`}function O(e,t,n=r){let i=w(e,t),a=`${n}-bundle`,o=i===`.`?`/${a}`:`/${i}/${a}`,s=i===`.`?`./schemas/${n}/input.json`:`./${i}/schemas/${n}/input.json`;return{fileMatch:[`${o}/input.json`,`${o}/input.example.json`],url:s}}function k(e,t,n,r){let a=b(e,`VS Code policy settings`);if(`warning`in a)return{contents:a.contents,warnings:[a.warning]};let{current:o}=a,s=[],c=[];if(r&&r.length>0){let e=o[`opa.roots`],a=r.map(e=>T(t,n,e));if(e===void 0)s.push({path:[`opa.roots`],value:a});else if(Array.isArray(e)&&e.every(e=>typeof e==`string`)){let t=i(e,a);y(t,e)||s.push({path:[`opa.roots`],value:t})}else c.push(`VS Code setting "opa.roots" is customized and was left unchanged.`)}S(o,[{path:[`opa.schema`],value:E(t,n),label:`opa.schema`},{path:[`opa.checkOnSave`],value:!0,label:`opa.checkOnSave`},{path:[`opa.strictMode`],value:!0,label:`opa.strictMode`},{path:[`opa.bundleMode`],value:!0,label:`opa.bundleMode`},{path:[`opa.formatter`],value:`opa-fmt-rego-v1`,label:`opa.formatter`}],s,c);let l=o[`files.associations`],u=D(t,n);if(l===void 0?s.push({path:[`files.associations`],value:{[u]:`json`}}):typeof l==`object`&&l&&!Array.isArray(l)?S(o,[{path:[`files.associations`,u],value:`json`,label:`files.associations."${u}"`}],s,c):c.push(`VS Code setting "files.associations" is customized and was left unchanged.`),r&&r.length>0){let e=r.map(e=>O(t,n,e)),i=o[`json.schemas`];if(i===void 0)s.push({path:[`json.schemas`],value:e});else if(Array.isArray(i)){let t=[...i];e.forEach(e=>{t.some(t=>typeof t==`object`&&!!t&&!Array.isArray(t)&&y(t,e))||(t.find(t=>typeof t==`object`&&!!t&&!Array.isArray(t)&&typeof t.url==`string`&&t.url===e.url)===void 0?t=[...t,e]:c.push(`VS Code setting "json.schemas" has a repository-specific entry for the ${e.url} schema and was left unchanged.`))}),y(t,i)||s.push({path:[`json.schemas`],value:t})}else c.push(`VS Code setting "json.schemas" is customized and was left unchanged.`)}let d=o[`[rego]`];return d===void 0?s.push({path:[`[rego]`],value:{"editor.defaultFormatter":_,"editor.formatOnSave":!0,"editor.insertSpaces":!1,"editor.tabSize":4}}):typeof d==`object`&&d&&!Array.isArray(d)?S(o,[{path:[`[rego]`,`editor.defaultFormatter`],value:_,label:`[rego].editor.defaultFormatter`},{path:[`[rego]`,`editor.formatOnSave`],value:!0,label:`[rego].editor.formatOnSave`},{path:[`[rego]`,`editor.insertSpaces`],value:!1,label:`[rego].editor.insertSpaces`},{path:[`[rego]`,`editor.tabSize`],value:4,label:`[rego].editor.tabSize`}],s,c):c.push(`VS Code language setting "[rego]" is customized and was left unchanged.`),x(e,s,`VS Code policy settings`,c)}function A(e){let t=b(e,`VS Code policy extension recommendations`);if(`warning`in t)return{contents:t.contents,warnings:[t.warning]};let{current:n}=t,r=[],a=[],o=n.recommendations;if(o===void 0||Array.isArray(o)&&o.every(e=>typeof e==`string`)){let e=o??[],t=i(e,[_]).filter(e=>e!==v);y(e,t)||r.push({path:[`recommendations`],value:t})}else a.push(`VS Code extension recommendations use an unknown shape and were left unchanged.`);let s=n.unwantedRecommendations;if(s===void 0||Array.isArray(s)&&s.every(e=>typeof e==`string`)){let e=s??[],t=i(e,[v]);y(e,t)||r.push({path:[`unwantedRecommendations`],value:t})}else a.push(`VS Code unwanted extension recommendations use an unknown shape and were left unchanged.`);return x(e,r,`VS Code policy extension recommendations`,a)}function j(e,t,n=r){let i=w(e,t),a=`${n}-bundle`,o=i===`.`?a:`${i}/${a}`;return{label:`policy: lint ${n}`,type:`process`,command:`transcend`,args:[`policy`,`lint`,o,`--noInteractive`],group:{kind:`test`,isDefault:!1},problemMatcher:[]}}function M(e){return{label:`policy: lint`,dependsOn:e.map(e=>`policy: lint ${e}`),dependsOrder:`sequence`,group:{kind:`test`,isDefault:!0},problemMatcher:[]}}function N(e,t,n,r){let i=b(e,`VS Code policy tasks`);if(`warning`in i)return{contents:i.contents,warnings:[i.warning]};let{current:a}=i,o=[],s=[],c=a.version;if(c===void 0?o.push({path:[`version`],value:`2.0.0`}):c!==`2.0.0`&&s.push(`VS Code task schema version is customized and was left unchanged.`),!r||r.length===0)return x(e,o,`VS Code policy tasks`,s);let l=r.map(e=>j(t,n,e)),u=M(r),d=[...l,u],f=new Set(d.map(e=>e.label)),p=a.tasks;if(p===void 0)o.push({path:[`tasks`],value:d});else if(Array.isArray(p)){let e=[...p],t=!1;d.forEach(n=>{let r=n.label,i=e.findIndex(e=>typeof e==`object`&&!!e&&!Array.isArray(e)&&e.label===r);if(i===-1){e=[...e,n],t=!0;return}y(e[i],n)||(f.has(r)?(e=e.map((e,t)=>t===i?n:e),t=!0):s.push(`VS Code task "${r}" has repository-specific customization and was left unchanged.`))}),t&&o.push({path:[`tasks`],value:e})}else s.push(`VS Code tasks use an unknown shape and were left unchanged.`);return x(e,o,`VS Code policy tasks`,s)}export{g as a,d as i,k as n,N as r,A as t};
-//# sourceMappingURL=policy-scaffold-config-BUKAyPad.mjs.map

package/dist/policy-scaffold-config-BUKAyPad.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy-scaffold-config-BUKAyPad.mjs","names":[],"sources":["../src/lib/policy/policy-scaffold-artifacts.ts","../src/lib/policy/policy-scaffold-config.ts"],"sourcesContent":["import { posix } from 'node:path';\n\nimport {\n  POLICY_STARTER_BUNDLE_DIRECTORY,\n  POLICY_STARTER_OPA_VERSION,\n} from './policy-scaffold-templates.js';\n\n/** Regal version pinned by generated policy validation. */\nexport const POLICY_STARTER_REGAL_VERSION = '0.42.0';\n\n/** Repository-relative generated workflow path. */\nexport const POLICY_CI_WORKFLOW_PATH = '.github/workflows/transcend-policy.yml';\n\n/** Immutable actions/checkout v6 release commit. */\nexport const ACTIONS_CHECKOUT_SHA = 'd23441a48e516b6c34aea4fa41551a30e30af803';\n\n/** Immutable open-policy-agent/setup-opa v2.4.0 release commit. */\nexport const SETUP_OPA_SHA = 'b2b258e089860efaadaaf71bf6e3aecb4a3eeff1';\n\n/** Immutable open-policy-agent/setup-regal v2.0.0 release commit. */\nexport const SETUP_REGAL_SHA = '761188c3b435761fa254beca508a44875619648f';\n\n/**\n * Prefix a path below the repository-relative policy workspace.\n *\n * @param workspaceDirectory - POSIX repository-relative workspace\n * @param child - POSIX workspace-relative path or pattern\n * @returns Repository-relative path or pattern\n */\nfunction workspacePath(workspaceDirectory: string, child: string): string {\n  return workspaceDirectory === '.' ? child : posix.join(workspaceDirectory, child);\n}\n\n/**\n * Generate credential-free, validation-only Policy Engine CI.\n *\n * Path filters watch the whole policy workspace. Lint runs against each\n * publishable `{root}-bundle/` directory.\n *\n * @param options - Repository paths and exact CLI release\n * @returns Complete GitHub Actions workflow YAML\n */\nexport function generatePolicyGithubActionsWorkflow(options: {\n  /** Exact released Transcend CLI version. */\n  cliVersion: string;\n  /** Policy workspace directory relative to the repository root. */\n  workspaceDirectory: string;\n  /**\n   * Publish directories to lint, relative to the repository root.\n   *\n   * Pass an empty array for a workspace with no bundles yet (`policy init`).\n   * Defaults to the disposable starter bundle under the workspace when omitted.\n   */\n  bundleDirectories?: readonly string[];\n}): string {\n  const bundleDirectories = options.bundleDirectories ?? [\n    workspacePath(options.workspaceDirectory, POLICY_STARTER_BUNDLE_DIRECTORY),\n  ];\n  const watchedPaths = [\n    workspacePath(options.workspaceDirectory, '**/*.rego'),\n    workspacePath(options.workspaceDirectory, '**/*.json'),\n    workspacePath(options.workspaceDirectory, '**/*.yaml'),\n    workspacePath(options.workspaceDirectory, '**/*.yml'),\n    workspacePath(options.workspaceDirectory, '**/.manifest'),\n    workspacePath(options.workspaceDirectory, '.regal/config.yaml'),\n    workspacePath(options.workspaceDirectory, '.regal.yaml'),\n    POLICY_CI_WORKFLOW_PATH,\n  ];\n  const pathFilters = watchedPaths.map((path) => `      - ${JSON.stringify(path)}`).join('\\n');\n\n  let lintJob: string;\n  if (bundleDirectories.length === 0) {\n    lintJob = `  lint:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@${ACTIONS_CHECKOUT_SHA} # v6\n      - name: No publishable bundles yet\n        run: >-\n          echo \"Run transcend policy new to add a bundle;\n          policy new refreshes this workflow automatically.\"\n`;\n  } else if (bundleDirectories.length === 1) {\n    lintJob = `  lint:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@${ACTIONS_CHECKOUT_SHA} # v6\n      - name: Set up OPA\n        uses: open-policy-agent/setup-opa@${SETUP_OPA_SHA} # v2.4.0\n        with:\n          version: ${JSON.stringify(POLICY_STARTER_OPA_VERSION)}\n      - name: Set up Regal\n        uses: open-policy-agent/setup-regal@${SETUP_REGAL_SHA} # v2.0.0\n        with:\n          version: ${JSON.stringify(POLICY_STARTER_REGAL_VERSION)}\n      - name: Install the Transcend CLI\n        run: npm install --global @transcend-io/cli@${options.cliVersion}\n      - name: Validate Policy Engine project\n        env:\n          POLICY_DIRECTORY: ${JSON.stringify(bundleDirectories[0])}\n        run: >-\n          transcend policy lint\n          \"$POLICY_DIRECTORY\"\n          --noInteractive\n          --json\n`;\n  } else {\n    lintJob = `  lint:\n    runs-on: ubuntu-latest\n    strategy:\n      fail-fast: false\n      matrix:\n        policy_directory:\n${bundleDirectories.map((directory) => `          - ${JSON.stringify(directory)}`).join('\\n')}\n    steps:\n      - uses: actions/checkout@${ACTIONS_CHECKOUT_SHA} # v6\n      - name: Set up OPA\n        uses: open-policy-agent/setup-opa@${SETUP_OPA_SHA} # v2.4.0\n        with:\n          version: ${JSON.stringify(POLICY_STARTER_OPA_VERSION)}\n      - name: Set up Regal\n        uses: open-policy-agent/setup-regal@${SETUP_REGAL_SHA} # v2.0.0\n        with:\n          version: ${JSON.stringify(POLICY_STARTER_REGAL_VERSION)}\n      - name: Install the Transcend CLI\n        run: npm install --global @transcend-io/cli@${options.cliVersion}\n      - name: Validate Policy Engine project\n        env:\n          POLICY_DIRECTORY: \\${{ matrix.policy_directory }}\n        run: transcend policy lint \"$POLICY_DIRECTORY\" --noInteractive --json\n`;\n  }\n\n  return `# Generated by transcend policy init.\nname: Transcend Policy\n\non:\n  pull_request:\n    paths:\n${pathFilters}\n  push:\n    paths:\n${pathFilters}\n\npermissions:\n  contents: read\n\njobs:\n${lintJob}`;\n}\n","import { relative, sep } from 'node:path';\n\nimport {\n  mergeJsonc,\n  mergeStringArray,\n  parseJsoncObject,\n  type JsoncUpdate,\n} from '../scaffolding/jsonc.js';\nimport { POLICY_MANIFEST_FILENAME, POLICY_STARTER_ROOT } from './policy-scaffold-templates.js';\n\n/** Recommended VS Code extension for OPA and Regal authoring. */\nexport const POLICY_VSCODE_EXTENSION = 'tsandall.opa';\n\n/** Conflicting syntax-only VS Code extension. */\nexport const CONFLICTING_POLICY_VSCODE_EXTENSION = 'glebbash.opa-highlight-only';\n\n/** Result of safely merging one repository editor artifact. */\nexport interface PolicyEditorMergeResult {\n  /** Complete merged contents, or the unchanged original when unsafe. */\n  contents: string;\n  /** Actionable preservation warnings. */\n  warnings: string[];\n}\n\n/** One desired scalar setting that must not replace a customization. */\ninterface DesiredSetting {\n  /** JSONC object path. */\n  path: string[];\n  /** Desired generated value. */\n  value: unknown;\n  /** Human-readable setting key. */\n  label: string;\n}\n\n/**\n * Compare JSON-compatible configuration values.\n *\n * @param left - Existing value\n * @param right - Desired value\n * @returns Whether the values are structurally equal\n */\nfunction configurationValuesEqual(left: unknown, right: unknown): boolean {\n  return JSON.stringify(left) === JSON.stringify(right);\n}\n\n/**\n * Parse an editor object while preserving malformed existing content.\n *\n * @param contents - Existing JSONC, or null\n * @param label - Configuration label\n * @returns Parsed object or a preservation result\n */\nfunction parseEditorObject(\n  contents: string | null,\n  label: string,\n):\n  | {\n      /** Parsed JSONC object. */\n      current: Record<string, unknown>;\n    }\n  | {\n      /** Complete unchanged contents. */\n      contents: string;\n      /** Actionable warning. */\n      warning: string;\n    } {\n  try {\n    return { current: parseJsoncObject(contents ?? '{}\\n', label) };\n  } catch (error) {\n    return {\n      contents: contents ?? '{}\\n',\n      warning: `${error instanceof Error ? error.message : String(error)} Existing content was left unchanged.`,\n    };\n  }\n}\n\n/**\n * Apply safe JSONC updates or preserve the existing file when comments prevent it.\n *\n * @param contents - Existing JSONC\n * @param updates - Proven-safe updates\n * @param label - Configuration label\n * @param warnings - Existing merge warnings\n * @returns Complete contents and warnings\n */\nfunction applyEditorUpdates(\n  contents: string | null,\n  updates: readonly JsoncUpdate[],\n  label: string,\n  warnings: string[],\n): PolicyEditorMergeResult {\n  if (updates.length === 0) {\n    return { contents: contents ?? '{}\\n', warnings };\n  }\n  try {\n    return {\n      contents: mergeJsonc(contents, updates, label),\n      warnings,\n    };\n  } catch (error) {\n    return {\n      contents: contents ?? '{}\\n',\n      warnings: [\n        ...warnings,\n        `${error instanceof Error ? error.message : String(error)} Existing content was left unchanged.`,\n      ],\n    };\n  }\n}\n\n/**\n * Add absent scalar settings without replacing repository customizations.\n *\n * @param current - Parsed editor object\n * @param desired - Desired settings\n * @param updates - Safe updates to append to\n * @param warnings - Conflict warnings to append to\n */\nfunction collectSafeScalarUpdates(\n  current: Record<string, unknown>,\n  desired: readonly DesiredSetting[],\n  updates: JsoncUpdate[],\n  warnings: string[],\n): void {\n  desired.forEach(({ path, value, label }) => {\n    const existing = path.reduce<unknown>((parent, key) => {\n      return parent && typeof parent === 'object' && !Array.isArray(parent)\n        ? (parent as Record<string, unknown>)[key]\n        : undefined;\n    }, current);\n    if (existing === undefined) {\n      updates.push({ path, value });\n    } else if (!configurationValuesEqual(existing, value)) {\n      warnings.push(\n        `VS Code setting \"${label}\" has a repository-specific value and was left unchanged.`,\n      );\n    }\n  });\n}\n\n/**\n * Build a `${workspaceFolder}/…` path for a repository-relative POSIX path.\n *\n * @param repositoryRelativePath - Path relative to the repository root\n * @returns VS Code workspace path\n */\nfunction buildWorkspaceFolderPath(repositoryRelativePath: string): string {\n  return repositoryRelativePath === '.'\n    ? '${workspaceFolder}'\n    : `\\${workspaceFolder}/${repositoryRelativePath}`;\n}\n\n/**\n * Repository-relative POSIX path from the root that owns `.vscode`.\n *\n * @param repositoryRoot - Root that owns `.vscode`\n * @param absolutePath - Absolute path below the repository\n * @returns POSIX repository-relative path\n */\nfunction repositoryRelativePosix(repositoryRoot: string, absolutePath: string): string {\n  return relative(repositoryRoot, absolutePath).split(sep).join('/') || '.';\n}\n\n/**\n * Build the workspace-relative OPA publish root for a bundle.\n *\n * @param repositoryRoot - Root that owns `.vscode`\n * @param workspaceDirectory - Selected policy workspace directory\n * @param root - Package root name\n * @returns VS Code workspace path\n */\nfunction buildOpaBundleRoot(\n  repositoryRoot: string,\n  workspaceDirectory: string,\n  root: string = POLICY_STARTER_ROOT,\n): string {\n  const workspace = repositoryRelativePosix(repositoryRoot, workspaceDirectory);\n  const bundleDir = `${root}-bundle`;\n  const bundle = workspace === '.' ? bundleDir : `${workspace}/${bundleDir}`;\n  return buildWorkspaceFolderPath(bundle);\n}\n\n/**\n * Build the workspace-relative schemas directory path.\n *\n * @param repositoryRoot - Root that owns `.vscode`\n * @param workspaceDirectory - Selected policy workspace directory\n * @returns VS Code workspace path\n */\nfunction buildOpaSchemaDirectory(repositoryRoot: string, workspaceDirectory: string): string {\n  const workspace = repositoryRelativePosix(repositoryRoot, workspaceDirectory);\n  const schemas = workspace === '.' ? 'schemas' : `${workspace}/schemas`;\n  return buildWorkspaceFolderPath(schemas);\n}\n\n/**\n * Build a `files.associations` glob for every `.manifest` under the workspace.\n *\n * Patterns that contain `/` are matched against the absolute file path, so a\n * leading `**\\/` prefix is required for a portable workspace-relative association.\n *\n * @param repositoryRoot - Root that owns `.vscode`\n * @param workspaceDirectory - Selected policy workspace directory\n * @returns Association pattern key\n */\nfunction buildPolicyManifestAssociationPattern(\n  repositoryRoot: string,\n  workspaceDirectory: string,\n): string {\n  const workspace = repositoryRelativePosix(repositoryRoot, workspaceDirectory);\n  return workspace === '.'\n    ? `**/${POLICY_MANIFEST_FILENAME}`\n    : `**/${workspace}/**/${POLICY_MANIFEST_FILENAME}`;\n}\n\n/**\n * Build `json.schemas` fileMatch globs for a bundle's input documents.\n *\n * @param repositoryRoot - Root that owns `.vscode`\n * @param workspaceDirectory - Selected policy workspace directory\n * @param root - Package root name\n * @returns Absolute-style fileMatch paths and schema URL\n */\nfunction buildBundleInputJsonSchema(\n  repositoryRoot: string,\n  workspaceDirectory: string,\n  root: string = POLICY_STARTER_ROOT,\n): {\n  /** VS Code fileMatch globs (leading slash = workspace-relative). */\n  fileMatch: string[];\n  /** Relative URL to the input schema. */\n  url: string;\n} {\n  const workspace = repositoryRelativePosix(repositoryRoot, workspaceDirectory);\n  const bundleDir = `${root}-bundle`;\n  const bundlePrefix = workspace === '.' ? `/${bundleDir}` : `/${workspace}/${bundleDir}`;\n  const schemaUrl =\n    workspace === '.'\n      ? `./schemas/${root}/input.json`\n      : `./${workspace}/schemas/${root}/input.json`;\n  return {\n    fileMatch: [`${bundlePrefix}/input.json`, `${bundlePrefix}/input.example.json`],\n    url: schemaUrl,\n  };\n}\n\n/**\n * Merge strict workspace-scoped OPA and Rego editor settings.\n *\n * Setting names match the authoritative `open-policy-agent/vscode-opa`\n * extension metadata. Existing conflicting values are preserved and reported.\n *\n * When `bundleRoots` is provided, `opa.roots` and `json.schemas` are populated\n * for those bundles. When omitted (init without bundles), `opa.roots` and\n * `json.schemas` are left empty or unset.\n *\n * @param contents - Existing `.vscode/settings.json` JSONC\n * @param repositoryRoot - Root that owns `.vscode`\n * @param workspaceDirectory - Selected policy workspace directory\n * @param bundleRoots - Bundle roots to add to `opa.roots` and `json.schemas`\n * @returns Merged settings and conflict warnings\n */\nexport function mergePolicyEditorSettings(\n  contents: string | null,\n  repositoryRoot: string,\n  workspaceDirectory: string,\n  bundleRoots?: readonly string[],\n): PolicyEditorMergeResult {\n  const parsed = parseEditorObject(contents, 'VS Code policy settings');\n  if ('warning' in parsed) {\n    return { contents: parsed.contents, warnings: [parsed.warning] };\n  }\n  const { current } = parsed;\n  const updates: JsoncUpdate[] = [];\n  const warnings: string[] = [];\n\n  if (bundleRoots && bundleRoots.length > 0) {\n    const roots = current['opa.roots'];\n    const desiredRoots = bundleRoots.map((root) =>\n      buildOpaBundleRoot(repositoryRoot, workspaceDirectory, root),\n    );\n    if (roots === undefined) {\n      updates.push({ path: ['opa.roots'], value: desiredRoots });\n    } else if (Array.isArray(roots) && roots.every((value) => typeof value === 'string')) {\n      const merged = mergeStringArray(roots, desiredRoots);\n      if (!configurationValuesEqual(merged, roots)) {\n        updates.push({ path: ['opa.roots'], value: merged });\n      }\n    } else {\n      warnings.push('VS Code setting \"opa.roots\" is customized and was left unchanged.');\n    }\n  }\n\n  collectSafeScalarUpdates(\n    current,\n    [\n      {\n        path: ['opa.schema'],\n        value: buildOpaSchemaDirectory(repositoryRoot, workspaceDirectory),\n        label: 'opa.schema',\n      },\n      { path: ['opa.checkOnSave'], value: true, label: 'opa.checkOnSave' },\n      { path: ['opa.strictMode'], value: true, label: 'opa.strictMode' },\n      { path: ['opa.bundleMode'], value: true, label: 'opa.bundleMode' },\n      { path: ['opa.formatter'], value: 'opa-fmt-rego-v1', label: 'opa.formatter' },\n    ],\n    updates,\n    warnings,\n  );\n\n  const associations = current['files.associations'];\n  const manifestAssociation = buildPolicyManifestAssociationPattern(\n    repositoryRoot,\n    workspaceDirectory,\n  );\n  if (associations === undefined) {\n    updates.push({\n      path: ['files.associations'],\n      value: { [manifestAssociation]: 'json' },\n    });\n  } else if (\n    associations !== null &&\n    typeof associations === 'object' &&\n    !Array.isArray(associations)\n  ) {\n    collectSafeScalarUpdates(\n      current,\n      [\n        {\n          path: ['files.associations', manifestAssociation],\n          value: 'json',\n          label: `files.associations.\"${manifestAssociation}\"`,\n        },\n      ],\n      updates,\n      warnings,\n    );\n  } else {\n    warnings.push('VS Code setting \"files.associations\" is customized and was left unchanged.');\n  }\n\n  if (bundleRoots && bundleRoots.length > 0) {\n    const desiredJsonSchemas = bundleRoots.map((root) =>\n      buildBundleInputJsonSchema(repositoryRoot, workspaceDirectory, root),\n    );\n    const jsonSchemas = current['json.schemas'];\n    if (jsonSchemas === undefined) {\n      updates.push({ path: ['json.schemas'], value: desiredJsonSchemas });\n    } else if (Array.isArray(jsonSchemas)) {\n      let merged = [...jsonSchemas];\n      desiredJsonSchemas.forEach((desired) => {\n        const hasMatch = merged.some(\n          (entry) =>\n            entry !== null &&\n            typeof entry === 'object' &&\n            !Array.isArray(entry) &&\n            configurationValuesEqual(entry, desired),\n        );\n        if (!hasMatch) {\n          const conflicting = merged.find(\n            (entry) =>\n              entry !== null &&\n              typeof entry === 'object' &&\n              !Array.isArray(entry) &&\n              typeof (entry as Record<string, unknown>).url === 'string' &&\n              (entry as Record<string, unknown>).url === desired.url,\n          );\n          if (conflicting === undefined) {\n            merged = [...merged, desired];\n          } else {\n            warnings.push(\n              `VS Code setting \"json.schemas\" has a repository-specific entry for the ${(desired as Record<string, unknown>).url as string} schema and was left unchanged.`,\n            );\n          }\n        }\n      });\n      if (!configurationValuesEqual(merged, jsonSchemas)) {\n        updates.push({ path: ['json.schemas'], value: merged });\n      }\n    } else {\n      warnings.push('VS Code setting \"json.schemas\" is customized and was left unchanged.');\n    }\n  }\n\n  const regoSettings = current['[rego]'];\n  if (regoSettings === undefined) {\n    updates.push({\n      path: ['[rego]'],\n      value: {\n        'editor.defaultFormatter': POLICY_VSCODE_EXTENSION,\n        'editor.formatOnSave': true,\n        'editor.insertSpaces': false,\n        'editor.tabSize': 4,\n      },\n    });\n  } else if (\n    regoSettings !== null &&\n    typeof regoSettings === 'object' &&\n    !Array.isArray(regoSettings)\n  ) {\n    collectSafeScalarUpdates(\n      current,\n      [\n        {\n          path: ['[rego]', 'editor.defaultFormatter'],\n          value: POLICY_VSCODE_EXTENSION,\n          label: '[rego].editor.defaultFormatter',\n        },\n        {\n          path: ['[rego]', 'editor.formatOnSave'],\n          value: true,\n          label: '[rego].editor.formatOnSave',\n        },\n        {\n          path: ['[rego]', 'editor.insertSpaces'],\n          value: false,\n          label: '[rego].editor.insertSpaces',\n        },\n        {\n          path: ['[rego]', 'editor.tabSize'],\n          value: 4,\n          label: '[rego].editor.tabSize',\n        },\n      ],\n      updates,\n      warnings,\n    );\n  } else {\n    warnings.push('VS Code language setting \"[rego]\" is customized and was left unchanged.');\n  }\n\n  return applyEditorUpdates(contents, updates, 'VS Code policy settings', warnings);\n}\n\n/**\n * Merge OPA extension recommendations without disturbing unknown entries.\n *\n * VS Code's `extensions.json` schema supports `unwantedRecommendations`, so\n * the syntax-only extension can be removed from recommendations and discouraged.\n *\n * @param contents - Existing `.vscode/extensions.json` JSONC\n * @returns Merged extension recommendations and warnings\n */\nexport function mergePolicyEditorExtensions(contents: string | null): PolicyEditorMergeResult {\n  const parsed = parseEditorObject(contents, 'VS Code policy extension recommendations');\n  if ('warning' in parsed) {\n    return { contents: parsed.contents, warnings: [parsed.warning] };\n  }\n  const { current } = parsed;\n  const updates: JsoncUpdate[] = [];\n  const warnings: string[] = [];\n\n  const recommendations = current.recommendations;\n  if (\n    recommendations === undefined ||\n    (Array.isArray(recommendations) && recommendations.every((value) => typeof value === 'string'))\n  ) {\n    const existing = recommendations ?? [];\n    const desired = mergeStringArray(existing, [POLICY_VSCODE_EXTENSION]).filter(\n      (value) => value !== CONFLICTING_POLICY_VSCODE_EXTENSION,\n    );\n    if (!configurationValuesEqual(existing, desired)) {\n      updates.push({ path: ['recommendations'], value: desired });\n    }\n  } else {\n    warnings.push(\n      'VS Code extension recommendations use an unknown shape and were left unchanged.',\n    );\n  }\n\n  const unwanted = current.unwantedRecommendations;\n  if (\n    unwanted === undefined ||\n    (Array.isArray(unwanted) && unwanted.every((value) => typeof value === 'string'))\n  ) {\n    const existing = unwanted ?? [];\n    const desired = mergeStringArray(existing, [CONFLICTING_POLICY_VSCODE_EXTENSION]);\n    if (!configurationValuesEqual(existing, desired)) {\n      updates.push({ path: ['unwantedRecommendations'], value: desired });\n    }\n  } else {\n    warnings.push(\n      'VS Code unwanted extension recommendations use an unknown shape and were left unchanged.',\n    );\n  }\n\n  return applyEditorUpdates(\n    contents,\n    updates,\n    'VS Code policy extension recommendations',\n    warnings,\n  );\n}\n\n/**\n * Build a VS Code lint task for one bundle.\n *\n * @param repositoryRoot - Root that owns `.vscode`\n * @param workspaceDirectory - Selected policy workspace directory\n * @param root - Package root name\n * @returns VS Code task object\n */\nexport function buildPolicyLintTask(\n  repositoryRoot: string,\n  workspaceDirectory: string,\n  root: string = POLICY_STARTER_ROOT,\n): Record<string, unknown> {\n  const workspace = repositoryRelativePosix(repositoryRoot, workspaceDirectory);\n  const bundleDir = `${root}-bundle`;\n  const bundle = workspace === '.' ? bundleDir : `${workspace}/${bundleDir}`;\n  return {\n    label: `policy: lint ${root}`,\n    type: 'process',\n    command: 'transcend',\n    args: ['policy', 'lint', bundle, '--noInteractive'],\n    group: {\n      kind: 'test',\n      isDefault: false,\n    },\n    problemMatcher: [],\n  };\n}\n\n/**\n * Build the aggregate \"policy: lint\" task (runs all bundles).\n *\n * @param roots - All bundle root names\n * @returns VS Code task object\n */\nexport function buildPolicyAggregateLintTask(roots: readonly string[]): Record<string, unknown> {\n  return {\n    label: 'policy: lint',\n    dependsOn: roots.map((root) => `policy: lint ${root}`),\n    dependsOrder: 'sequence',\n    group: {\n      kind: 'test',\n      isDefault: true,\n    },\n    problemMatcher: [],\n  };\n}\n\n/**\n * Merge policy lint tasks while preserving custom tasks.\n *\n * When `bundleRoots` is provided, creates per-bundle tasks and an aggregate.\n * Managed `policy: lint*` tasks are updated in place as roots grow. When\n * omitted, skips task creation (init without bundles).\n *\n * @param contents - Existing `.vscode/tasks.json` JSONC\n * @param repositoryRoot - Root that owns `.vscode`\n * @param workspaceDirectory - Selected policy workspace directory\n * @param bundleRoots - Bundle roots to generate tasks for\n * @returns Merged task configuration and warnings\n */\nexport function mergePolicyEditorTasks(\n  contents: string | null,\n  repositoryRoot: string,\n  workspaceDirectory: string,\n  bundleRoots?: readonly string[],\n): PolicyEditorMergeResult {\n  const parsed = parseEditorObject(contents, 'VS Code policy tasks');\n  if ('warning' in parsed) {\n    return { contents: parsed.contents, warnings: [parsed.warning] };\n  }\n  const { current } = parsed;\n  const updates: JsoncUpdate[] = [];\n  const warnings: string[] = [];\n  const version = current.version;\n  if (version === undefined) {\n    updates.push({ path: ['version'], value: '2.0.0' });\n  } else if (version !== '2.0.0') {\n    warnings.push('VS Code task schema version is customized and was left unchanged.');\n  }\n\n  if (!bundleRoots || bundleRoots.length === 0) {\n    return applyEditorUpdates(contents, updates, 'VS Code policy tasks', warnings);\n  }\n\n  const desiredPerBundleTasks = bundleRoots.map((root) =>\n    buildPolicyLintTask(repositoryRoot, workspaceDirectory, root),\n  );\n  const desiredAggregateTask = buildPolicyAggregateLintTask(bundleRoots);\n  const desiredTasks = [...desiredPerBundleTasks, desiredAggregateTask];\n  const managedLabels = new Set(desiredTasks.map((task) => task.label as string));\n  const tasks = current.tasks;\n  if (tasks === undefined) {\n    updates.push({ path: ['tasks'], value: desiredTasks });\n  } else if (Array.isArray(tasks)) {\n    let merged = [...tasks];\n    let changed = false;\n    desiredTasks.forEach((desired) => {\n      const label = desired.label as string;\n      const matchingIndex = merged.findIndex(\n        (task) =>\n          task !== null &&\n          typeof task === 'object' &&\n          !Array.isArray(task) &&\n          (task as Record<string, unknown>).label === label,\n      );\n      if (matchingIndex === -1) {\n        merged = [...merged, desired];\n        changed = true;\n        return;\n      }\n      if (!configurationValuesEqual(merged[matchingIndex], desired)) {\n        if (managedLabels.has(label)) {\n          merged = merged.map((task, index) => (index === matchingIndex ? desired : task));\n          changed = true;\n        } else {\n          warnings.push(\n            `VS Code task \"${label}\" has repository-specific customization and was left unchanged.`,\n          );\n        }\n      }\n    });\n    if (changed) {\n      updates.push({ path: ['tasks'], value: merged });\n    }\n  } else {\n    warnings.push('VS Code tasks use an unknown shape and were left unchanged.');\n  }\n\n  return applyEditorUpdates(contents, updates, 'VS Code policy tasks', warnings);\n}\n"],"mappings":"iMAQA,MAAa,EAA+B,SAG/B,EAA0B,yCAG1B,EAAuB,2CAGvB,EAAgB,2CAGhB,EAAkB,2CAS/B,SAAS,EAAc,EAA4B,EAAuB,CACxE,OAAO,IAAuB,IAAM,EAAQ,EAAM,KAAK,EAAoB,EAAM,CAYnF,SAAgB,EAAoC,EAYzC,CACT,IAAM,EAAoB,EAAQ,mBAAqB,CACrD,EAAc,EAAQ,mBAAoB,EAAgC,CAC3E,CAWK,EAAc,CATlB,EAAc,EAAQ,mBAAoB,YAAY,CACtD,EAAc,EAAQ,mBAAoB,YAAY,CACtD,EAAc,EAAQ,mBAAoB,YAAY,CACtD,EAAc,EAAQ,mBAAoB,WAAW,CACrD,EAAc,EAAQ,mBAAoB,eAAe,CACzD,EAAc,EAAQ,mBAAoB,qBAAqB,CAC/D,EAAc,EAAQ,mBAAoB,cAAc,CACxD,EAE8B,CAAC,IAAK,GAAS,WAAW,KAAK,UAAU,EAAK,GAAG,CAAC,KAAK;EAAK,CAExF,EA8DJ,MA7DA,CAmCE,EAnCE,EAAkB,SAAW,EACrB;;;iCAGmB,EAAqB;;;;;EAMzC,EAAkB,SAAW,EAC5B;;;iCAGmB,EAAqB;;4CAEV,EAAc;;qBAErC,KAAK,UAAU,EAA2B,CAAC;;8CAElB,EAAgB;;qBAEzC,KAAK,UAAU,EAA6B,CAAC;;sDAEZ,EAAQ,WAAW;;;8BAG3C,KAAK,UAAU,EAAkB,GAAG,CAAC;;;;;;EAQrD;;;;;;EAMZ,EAAkB,IAAK,GAAc,eAAe,KAAK,UAAU,EAAU,GAAG,CAAC,KAAK;EAAK,CAAC;;iCAE7D,EAAqB;;4CAEV,EAAc;;qBAErC,KAAK,UAAU,EAA2B,CAAC;;8CAElB,EAAgB;;qBAEzC,KAAK,UAAU,EAA6B,CAAC;;sDAEZ,EAAQ,WAAW;;;;;EAQhE;;;;;;EAMP,EAAY;;;EAGZ,EAAY;;;;;;EAMZ,ICxIF,MAAa,EAA0B,eAG1B,EAAsC,8BA2BnD,SAAS,EAAyB,EAAe,EAAyB,CACxE,OAAO,KAAK,UAAU,EAAK,GAAK,KAAK,UAAU,EAAM,CAUvD,SAAS,EACP,EACA,EAWI,CACJ,GAAI,CACF,MAAO,CAAE,QAAS,EAAiB,GAAY;EAAQ,EAAM,CAAE,OACxD,EAAO,CACd,MAAO,CACL,SAAU,GAAY;EACtB,QAAS,GAAG,aAAiB,MAAQ,EAAM,QAAU,OAAO,EAAM,CAAC,uCACpE,EAaL,SAAS,EACP,EACA,EACA,EACA,EACyB,CACzB,GAAI,EAAQ,SAAW,EACrB,MAAO,CAAE,SAAU,GAAY;EAAQ,WAAU,CAEnD,GAAI,CACF,MAAO,CACL,SAAU,EAAW,EAAU,EAAS,EAAM,CAC9C,WACD,OACM,EAAO,CACd,MAAO,CACL,SAAU,GAAY;EACtB,SAAU,CACR,GAAG,EACH,GAAG,aAAiB,MAAQ,EAAM,QAAU,OAAO,EAAM,CAAC,uCAC3D,CACF,EAYL,SAAS,EACP,EACA,EACA,EACA,EACM,CACN,EAAQ,SAAS,CAAE,OAAM,QAAO,WAAY,CAC1C,IAAM,EAAW,EAAK,QAAiB,EAAQ,IACtC,GAAU,OAAO,GAAW,UAAY,CAAC,MAAM,QAAQ,EAAO,CAChE,EAAmC,GACpC,IAAA,GACH,EAAQ,CACP,IAAa,IAAA,GACf,EAAQ,KAAK,CAAE,OAAM,QAAO,CAAC,CACnB,EAAyB,EAAU,EAAM,EACnD,EAAS,KACP,oBAAoB,EAAM,2DAC3B,EAEH,CASJ,SAAS,EAAyB,EAAwC,CACxE,OAAO,IAA2B,IAC9B,qBACA,uBAAuB,IAU7B,SAAS,EAAwB,EAAwB,EAA8B,CACrF,OAAO,EAAS,EAAgB,EAAa,CAAC,MAAM,EAAI,CAAC,KAAK,IAAI,EAAI,IAWxE,SAAS,EACP,EACA,EACA,EAAe,EACP,CACR,IAAM,EAAY,EAAwB,EAAgB,EAAmB,CACvE,EAAY,GAAG,EAAK,SAE1B,OAAO,EADQ,IAAc,IAAM,EAAY,GAAG,EAAU,GAAG,IACxB,CAUzC,SAAS,EAAwB,EAAwB,EAAoC,CAC3F,IAAM,EAAY,EAAwB,EAAgB,EAAmB,CAE7E,OAAO,EADS,IAAc,IAAM,UAAY,GAAG,EAAU,UACrB,CAa1C,SAAS,EACP,EACA,EACQ,CACR,IAAM,EAAY,EAAwB,EAAgB,EAAmB,CAC7E,OAAO,IAAc,IACjB,MAAM,IACN,MAAM,EAAU,MAAM,IAW5B,SAAS,EACP,EACA,EACA,EAAe,EAMf,CACA,IAAM,EAAY,EAAwB,EAAgB,EAAmB,CACvE,EAAY,GAAG,EAAK,SACpB,EAAe,IAAc,IAAM,IAAI,IAAc,IAAI,EAAU,GAAG,IACtE,EACJ,IAAc,IACV,aAAa,EAAK,aAClB,KAAK,EAAU,WAAW,EAAK,aACrC,MAAO,CACL,UAAW,CAAC,GAAG,EAAa,aAAc,GAAG,EAAa,qBAAqB,CAC/E,IAAK,EACN,CAmBH,SAAgB,EACd,EACA,EACA,EACA,EACyB,CACzB,IAAM,EAAS,EAAkB,EAAU,0BAA0B,CACrE,GAAI,YAAa,EACf,MAAO,CAAE,SAAU,EAAO,SAAU,SAAU,CAAC,EAAO,QAAQ,CAAE,CAElE,GAAM,CAAE,WAAY,EACd,EAAyB,EAAE,CAC3B,EAAqB,EAAE,CAE7B,GAAI,GAAe,EAAY,OAAS,EAAG,CACzC,IAAM,EAAQ,EAAQ,aAChB,EAAe,EAAY,IAAK,GACpC,EAAmB,EAAgB,EAAoB,EAAK,CAC7D,CACD,GAAI,IAAU,IAAA,GACZ,EAAQ,KAAK,CAAE,KAAM,CAAC,YAAY,CAAE,MAAO,EAAc,CAAC,SACjD,MAAM,QAAQ,EAAM,EAAI,EAAM,MAAO,GAAU,OAAO,GAAU,SAAS,CAAE,CACpF,IAAM,EAAS,EAAiB,EAAO,EAAa,CAC/C,EAAyB,EAAQ,EAAM,EAC1C,EAAQ,KAAK,CAAE,KAAM,CAAC,YAAY,CAAE,MAAO,EAAQ,CAAC,MAGtD,EAAS,KAAK,oEAAoE,CAItF,EACE,EACA,CACE,CACE,KAAM,CAAC,aAAa,CACpB,MAAO,EAAwB,EAAgB,EAAmB,CAClE,MAAO,aACR,CACD,CAAE,KAAM,CAAC,kBAAkB,CAAE,MAAO,GAAM,MAAO,kBAAmB,CACpE,CAAE,KAAM,CAAC,iBAAiB,CAAE,MAAO,GAAM,MAAO,iBAAkB,CAClE,CAAE,KAAM,CAAC,iBAAiB,CAAE,MAAO,GAAM,MAAO,iBAAkB,CAClE,CAAE,KAAM,CAAC,gBAAgB,CAAE,MAAO,kBAAmB,MAAO,gBAAiB,CAC9E,CACD,EACA,EACD,CAED,IAAM,EAAe,EAAQ,sBACvB,EAAsB,EAC1B,EACA,EACD,CA2BD,GA1BI,IAAiB,IAAA,GACnB,EAAQ,KAAK,CACX,KAAM,CAAC,qBAAqB,CAC5B,MAAO,EAAG,GAAsB,OAAQ,CACzC,CAAC,CAGF,OAAO,GAAiB,UADxB,GAEA,CAAC,MAAM,QAAQ,EAAa,CAE5B,EACE,EACA,CACE,CACE,KAAM,CAAC,qBAAsB,EAAoB,CACjD,MAAO,OACP,MAAO,uBAAuB,EAAoB,GACnD,CACF,CACD,EACA,EACD,CAED,EAAS,KAAK,6EAA6E,CAGzF,GAAe,EAAY,OAAS,EAAG,CACzC,IAAM,EAAqB,EAAY,IAAK,GAC1C,EAA2B,EAAgB,EAAoB,EAAK,CACrE,CACK,EAAc,EAAQ,gBAC5B,GAAI,IAAgB,IAAA,GAClB,EAAQ,KAAK,CAAE,KAAM,CAAC,eAAe,CAAE,MAAO,EAAoB,CAAC,SAC1D,MAAM,QAAQ,EAAY,CAAE,CACrC,IAAI,EAAS,CAAC,GAAG,EAAY,CAC7B,EAAmB,QAAS,GAAY,CACrB,EAAO,KACrB,GAEC,OAAO,GAAU,YADjB,GAEA,CAAC,MAAM,QAAQ,EAAM,EACrB,EAAyB,EAAO,EAAQ,CAE/B,GACS,EAAO,KACxB,GAEC,OAAO,GAAU,YADjB,GAEA,CAAC,MAAM,QAAQ,EAAM,EACrB,OAAQ,EAAkC,KAAQ,UACjD,EAAkC,MAAQ,EAAQ,IAExC,GAAK,IAAA,GAClB,EAAS,CAAC,GAAG,EAAQ,EAAQ,CAE7B,EAAS,KACP,0EAA2E,EAAoC,IAAc,iCAC9H,GAGL,CACG,EAAyB,EAAQ,EAAY,EAChD,EAAQ,KAAK,CAAE,KAAM,CAAC,eAAe,CAAE,MAAO,EAAQ,CAAC,MAGzD,EAAS,KAAK,uEAAuE,CAIzF,IAAM,EAAe,EAAQ,UA+C7B,OA9CI,IAAiB,IAAA,GACnB,EAAQ,KAAK,CACX,KAAM,CAAC,SAAS,CAChB,MAAO,CACL,0BAA2B,EAC3B,sBAAuB,GACvB,sBAAuB,GACvB,iBAAkB,EACnB,CACF,CAAC,CAGF,OAAO,GAAiB,UADxB,GAEA,CAAC,MAAM,QAAQ,EAAa,CAE5B,EACE,EACA,CACE,CACE,KAAM,CAAC,SAAU,0BAA0B,CAC3C,MAAO,EACP,MAAO,iCACR,CACD,CACE,KAAM,CAAC,SAAU,sBAAsB,CACvC,MAAO,GACP,MAAO,6BACR,CACD,CACE,KAAM,CAAC,SAAU,sBAAsB,CACvC,MAAO,GACP,MAAO,6BACR,CACD,CACE,KAAM,CAAC,SAAU,iBAAiB,CAClC,MAAO,EACP,MAAO,wBACR,CACF,CACD,EACA,EACD,CAED,EAAS,KAAK,0EAA0E,CAGnF,EAAmB,EAAU,EAAS,0BAA2B,EAAS,CAYnF,SAAgB,EAA4B,EAAkD,CAC5F,IAAM,EAAS,EAAkB,EAAU,2CAA2C,CACtF,GAAI,YAAa,EACf,MAAO,CAAE,SAAU,EAAO,SAAU,SAAU,CAAC,EAAO,QAAQ,CAAE,CAElE,GAAM,CAAE,WAAY,EACd,EAAyB,EAAE,CAC3B,EAAqB,EAAE,CAEvB,EAAkB,EAAQ,gBAChC,GACE,IAAoB,IAAA,IACnB,MAAM,QAAQ,EAAgB,EAAI,EAAgB,MAAO,GAAU,OAAO,GAAU,SAAS,CAC9F,CACA,IAAM,EAAW,GAAmB,EAAE,CAChC,EAAU,EAAiB,EAAU,CAAC,EAAwB,CAAC,CAAC,OACnE,GAAU,IAAU,EACtB,CACI,EAAyB,EAAU,EAAQ,EAC9C,EAAQ,KAAK,CAAE,KAAM,CAAC,kBAAkB,CAAE,MAAO,EAAS,CAAC,MAG7D,EAAS,KACP,kFACD,CAGH,IAAM,EAAW,EAAQ,wBACzB,GACE,IAAa,IAAA,IACZ,MAAM,QAAQ,EAAS,EAAI,EAAS,MAAO,GAAU,OAAO,GAAU,SAAS,CAChF,CACA,IAAM,EAAW,GAAY,EAAE,CACzB,EAAU,EAAiB,EAAU,CAAC,EAAoC,CAAC,CAC5E,EAAyB,EAAU,EAAQ,EAC9C,EAAQ,KAAK,CAAE,KAAM,CAAC,0BAA0B,CAAE,MAAO,EAAS,CAAC,MAGrE,EAAS,KACP,2FACD,CAGH,OAAO,EACL,EACA,EACA,2CACA,EACD,CAWH,SAAgB,EACd,EACA,EACA,EAAe,EACU,CACzB,IAAM,EAAY,EAAwB,EAAgB,EAAmB,CACvE,EAAY,GAAG,EAAK,SACpB,EAAS,IAAc,IAAM,EAAY,GAAG,EAAU,GAAG,IAC/D,MAAO,CACL,MAAO,gBAAgB,IACvB,KAAM,UACN,QAAS,YACT,KAAM,CAAC,SAAU,OAAQ,EAAQ,kBAAkB,CACnD,MAAO,CACL,KAAM,OACN,UAAW,GACZ,CACD,eAAgB,EAAE,CACnB,CASH,SAAgB,EAA6B,EAAmD,CAC9F,MAAO,CACL,MAAO,eACP,UAAW,EAAM,IAAK,GAAS,gBAAgB,IAAO,CACtD,aAAc,WACd,MAAO,CACL,KAAM,OACN,UAAW,GACZ,CACD,eAAgB,EAAE,CACnB,CAgBH,SAAgB,EACd,EACA,EACA,EACA,EACyB,CACzB,IAAM,EAAS,EAAkB,EAAU,uBAAuB,CAClE,GAAI,YAAa,EACf,MAAO,CAAE,SAAU,EAAO,SAAU,SAAU,CAAC,EAAO,QAAQ,CAAE,CAElE,GAAM,CAAE,WAAY,EACd,EAAyB,EAAE,CAC3B,EAAqB,EAAE,CACvB,EAAU,EAAQ,QAOxB,GANI,IAAY,IAAA,GACd,EAAQ,KAAK,CAAE,KAAM,CAAC,UAAU,CAAE,MAAO,QAAS,CAAC,CAC1C,IAAY,SACrB,EAAS,KAAK,oEAAoE,CAGhF,CAAC,GAAe,EAAY,SAAW,EACzC,OAAO,EAAmB,EAAU,EAAS,uBAAwB,EAAS,CAGhF,IAAM,EAAwB,EAAY,IAAK,GAC7C,EAAoB,EAAgB,EAAoB,EAAK,CAC9D,CACK,EAAuB,EAA6B,EAAY,CAChE,EAAe,CAAC,GAAG,EAAuB,EAAqB,CAC/D,EAAgB,IAAI,IAAI,EAAa,IAAK,GAAS,EAAK,MAAgB,CAAC,CACzE,EAAQ,EAAQ,MACtB,GAAI,IAAU,IAAA,GACZ,EAAQ,KAAK,CAAE,KAAM,CAAC,QAAQ,CAAE,MAAO,EAAc,CAAC,SAC7C,MAAM,QAAQ,EAAM,CAAE,CAC/B,IAAI,EAAS,CAAC,GAAG,EAAM,CACnB,EAAU,GACd,EAAa,QAAS,GAAY,CAChC,IAAM,EAAQ,EAAQ,MAChB,EAAgB,EAAO,UAC1B,GAEC,OAAO,GAAS,YADhB,GAEA,CAAC,MAAM,QAAQ,EAAK,EACnB,EAAiC,QAAU,EAC/C,CACD,GAAI,IAAkB,GAAI,CACxB,EAAS,CAAC,GAAG,EAAQ,EAAQ,CAC7B,EAAU,GACV,OAEG,EAAyB,EAAO,GAAgB,EAAQ,GACvD,EAAc,IAAI,EAAM,EAC1B,EAAS,EAAO,KAAK,EAAM,IAAW,IAAU,EAAgB,EAAU,EAAM,CAChF,EAAU,IAEV,EAAS,KACP,iBAAiB,EAAM,iEACxB,GAGL,CACE,GACF,EAAQ,KAAK,CAAE,KAAM,CAAC,QAAQ,CAAE,MAAO,EAAQ,CAAC,MAGlD,EAAS,KAAK,8DAA8D,CAG9E,OAAO,EAAmB,EAAU,EAAS,uBAAwB,EAAS"}

package/dist/printResult-C2K9ODeE.mjs

@@ -1,33 +0,0 @@
-import{t as e}from"./policyEngineCliError-CZrOHhLv.mjs";import t from"got";const n=5120,r=51200;function i(e,n){let r=e.replace(/\/$/,``);if(/(^|\/)v1$/i.test(r))throw Error(`--transcend-url must not include a trailing "/v1" (the CLI appends it automatically). Got "${e}"; use "${r.replace(/\/v1$/i,``)}" instead.`);return t.extend({prefixUrl:r,headers:{Authorization:`Bearer ${n}`,accept:`application/json`}})}function a(e){if(typeof e==`string`)try{return JSON.parse(e).message}catch{return e.length>0?e:void 0}if(e&&typeof e==`object`&&`message`in e){let t=e.message;if(typeof t==`string`&&t.length>0)return t}}function o(e,t){if(!e)return;let n=e[t]??e[t.toLowerCase()];return Array.isArray(n)?n[0]:n}function s(e,t){if(e)return e;let n=o(t,`retry-after`),r=o(t,`x-ratelimit-reset`),i=`Rate limit exceeded (429 Too Many Requests).
-
-Fix:
-- Wait and retry the command`;return n?i+=`\n- Retry after ${n} second(s)`:r&&(i+=`\n- Retry after ${r}`),i}function c(e,t,n){switch(e){case 401:return`Authentication failed (401 Unauthorized).
-
-Your Transcend API key is missing, invalid, or does not have permission for this command.
-
-Fix:
-- Set a valid API key: export TRANSCEND_API_KEY=<your-key>
-  or pass --auth=<your-key>
-- Ensure the key has the required Policy Engine scopes (e.g. View/Manage/Activate Policy)
-- Confirm you are pointing at the correct environment (--transcend-url)`;case 403:return t??`Access was denied (403 Forbidden). If this persists, contact your Transcend admin.`;case 404:return`Resource not found (404 Not Found).
-
-The requested policy bundle or version does not exist.
-
-Fix:
-- Check the --bundle-name value
-- Run \`transcend policy bundles\` to see available bundles
-- Run \`transcend policy versions --bundle-name=<name>\` to see available versions`;case 400:return t??`The request was invalid. Check your command flags and try again.`;case 409:return t??`The request conflicted with the current policy bundle state.`;case 413:return t??`Policy bundle upload is too large (413 Payload Too Large).
-
-Uploaded bundles must be at most 5 KiB compressed and 50 KiB decompressed gzip tarballs containing only .manifest and .rego files.
-
-Fix:
-- Remove unnecessary files from the bundle directory before publishing
-- Ensure the compiled .tar.gz stays within the upload limits`;case 429:return s(t,n);default:return e>=500?`Transcend server error (${e}). Try again in a few moments. If the problem persists, contact Transcend support.`:t??`Request failed with status code ${e}.`}}function l(e){if(!(e instanceof Error))return!1;let t=e.code;if(t===`ECONNREFUSED`||t===`ENOTFOUND`||t===`ETIMEDOUT`||t===`ECONNRESET`)return!0;let n=e.message.toLowerCase();return n.includes(`network`)||n.includes(`timeout`)||n.includes(`econnrefused`)||n.includes(`enotfound`)||n.includes(`etimedout`)}function u(e){if(l(e))return`Connection to Transcend failed.
-
-The Policy Engine API could not be reached.
-
-Fix:
-- Check your network connection
-- Confirm --transcend-url points at the correct environment
-- Retry the command in a few moments`;if(e&&typeof e==`object`&&`response`in e){let t=e.response,n=t?.statusCode,r=a(t?.body);if(n)return c(n,r,t?.headers);if(r)return r}return e instanceof Error?e.message:String(e)}function d(t){throw new e(u(t),{cause:t})}async function f(e){try{return await e}catch(e){d(e)}}function p(e,t){if(t.json){e.write(`${JSON.stringify(t.data,null,2)}\n`);return}t.renderTable&&e.write(`${t.renderTable()}\n`)}export{n as a,i,f as n,r as o,d as r,p as t};
-//# sourceMappingURL=printResult-C2K9ODeE.mjs.map

package/dist/printResult-C2K9ODeE.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"printResult-C2K9ODeE.mjs","names":[],"sources":["../src/commands/policy/constants.ts","../src/commands/policy/helpers/buildPolicyEngineClient.ts","../src/commands/policy/helpers/formatPolicyEngineRequestError.ts","../src/commands/policy/helpers/printResult.ts"],"sourcesContent":["/** Maximum compressed policy bundle upload size in bytes (5 KiB). */\nexport const MAX_BUNDLE_COMPRESSED_BYTES = 5120;\n\n/** Maximum decompressed policy bundle size enforced by the server (50 KiB). */\nexport const MAX_BUNDLE_DECOMPRESSED_BYTES = 51200;\n\n/** Placeholder for nullable API fields in table output. */\nexport const EMPTY_CELL = '-';\n","import got, { type Got } from 'got';\n\n/**\n * Creates a got client for Policy Engine REST endpoints on the monolith.\n *\n * The CLI appends `v1/...` paths to this base URL, so callers must NOT include\n * a trailing `/v1` (that would produce `/v1/v1/...` and an opaque `400`). We\n * detect and reject that mistake with a clear hint.\n *\n * @param transcendUrl - Transcend API base URL (without `/v1`)\n * @param auth - Transcend API key\n * @returns Configured got instance\n */\nexport function buildPolicyEngineClient(transcendUrl: string, auth: string): Got {\n  const normalized = transcendUrl.replace(/\\/$/, '');\n  if (/(^|\\/)v1$/i.test(normalized)) {\n    throw new Error(\n      `--transcend-url must not include a trailing \"/v1\" (the CLI appends it automatically). ` +\n        `Got \"${transcendUrl}\"; use \"${normalized.replace(/\\/v1$/i, '')}\" instead.`,\n    );\n  }\n  return got.extend({\n    prefixUrl: normalized,\n    headers: {\n      Authorization: `Bearer ${auth}`,\n      accept: 'application/json',\n    },\n  });\n}\n","import { PolicyEngineCliError } from './policyEngineCliError.js';\n\n/** Parsed JSON error body from a Policy Engine API response. */\ninterface PolicyEngineErrorBody {\n  /** Human-readable error message */\n  message?: string;\n}\n\n/** HTTP response metadata on a got HTTPError. */\ninterface PolicyEngineHttpResponse {\n  /** HTTP status code */\n  statusCode?: number;\n  /** Response body (JSON or raw text) */\n  body?: unknown;\n  /** Response headers */\n  headers?: Record<string, string | string[] | undefined>;\n}\n\n/** Shape of a got HTTPError with response metadata. */\ninterface PolicyEngineHttpError {\n  /** HTTP response metadata */\n  response?: PolicyEngineHttpResponse;\n}\n\nconst AUTH_ERROR_MESSAGE = `Authentication failed (401 Unauthorized).\n\nYour Transcend API key is missing, invalid, or does not have permission for this command.\n\nFix:\n- Set a valid API key: export TRANSCEND_API_KEY=<your-key>\n  or pass --auth=<your-key>\n- Ensure the key has the required Policy Engine scopes (e.g. View/Manage/Activate Policy)\n- Confirm you are pointing at the correct environment (--transcend-url)`;\n\nconst NOT_FOUND_MESSAGE = `Resource not found (404 Not Found).\n\nThe requested policy bundle or version does not exist.\n\nFix:\n- Check the --bundle-name value\n- Run \\`transcend policy bundles\\` to see available bundles\n- Run \\`transcend policy versions --bundle-name=<name>\\` to see available versions`;\n\nconst PAYLOAD_TOO_LARGE_MESSAGE = `Policy bundle upload is too large (413 Payload Too Large).\n\nUploaded bundles must be at most 5 KiB compressed and 50 KiB decompressed gzip tarballs containing only .manifest and .rego files.\n\nFix:\n- Remove unnecessary files from the bundle directory before publishing\n- Ensure the compiled .tar.gz stays within the upload limits`;\n\nconst NETWORK_ERROR_MESSAGE = `Connection to Transcend failed.\n\nThe Policy Engine API could not be reached.\n\nFix:\n- Check your network connection\n- Confirm --transcend-url points at the correct environment\n- Retry the command in a few moments`;\n\n/**\n * Extracts a human-readable message from a Policy Engine API error body.\n *\n * @param body - Raw or parsed response body\n * @returns API message when present\n */\nfunction extractApiMessage(body: unknown): string | undefined {\n  if (typeof body === 'string') {\n    try {\n      const parsed = JSON.parse(body) as PolicyEngineErrorBody;\n      return parsed.message;\n    } catch {\n      return body.length > 0 ? body : undefined;\n    }\n  }\n\n  if (body && typeof body === 'object' && 'message' in body) {\n    const message = (body as PolicyEngineErrorBody).message;\n    if (typeof message === 'string' && message.length > 0) {\n      return message;\n    }\n  }\n\n  return undefined;\n}\n\n/**\n * Reads a single response header value.\n *\n * @param headers - Response headers\n * @param name - Header name\n * @returns Header value when present\n */\nfunction readResponseHeader(\n  headers: Record<string, string | string[] | undefined> | undefined,\n  name: string,\n): string | undefined {\n  if (!headers) {\n    return undefined;\n  }\n\n  const value = headers[name] ?? headers[name.toLowerCase()];\n  if (Array.isArray(value)) {\n    return value[0];\n  }\n\n  return value;\n}\n\n/**\n * Builds a rate-limit error message using response headers when available.\n *\n * @param apiMessage - Message from the response body, when present\n * @param headers - Response headers\n * @returns User-readable rate-limit text\n */\nfunction formatRateLimitMessage(\n  apiMessage: string | undefined,\n  headers: Record<string, string | string[] | undefined> | undefined,\n): string {\n  if (apiMessage) {\n    return apiMessage;\n  }\n\n  const retryAfter = readResponseHeader(headers, 'retry-after');\n  const resetAt = readResponseHeader(headers, 'x-ratelimit-reset');\n\n  let message = `Rate limit exceeded (429 Too Many Requests).\n\nFix:\n- Wait and retry the command`;\n\n  if (retryAfter) {\n    message += `\\n- Retry after ${retryAfter} second(s)`;\n  } else if (resetAt) {\n    message += `\\n- Retry after ${resetAt}`;\n  }\n\n  return message;\n}\n\n/**\n * Maps common HTTP status codes to actionable CLI messages.\n *\n * @param statusCode - HTTP status code\n * @param apiMessage - Message from the API response body, when present\n * @param headers - Response headers\n * @returns User-readable error text\n */\nfunction formatHttpStatusError(\n  statusCode: number,\n  apiMessage?: string,\n  headers?: Record<string, string | string[] | undefined>,\n): string {\n  switch (statusCode) {\n    case 401:\n      return AUTH_ERROR_MESSAGE;\n    case 403:\n      return (\n        apiMessage ??\n        'Access was denied (403 Forbidden). If this persists, contact your Transcend admin.'\n      );\n    case 404:\n      return NOT_FOUND_MESSAGE;\n    case 400:\n      return apiMessage ?? 'The request was invalid. Check your command flags and try again.';\n    case 409:\n      return apiMessage ?? 'The request conflicted with the current policy bundle state.';\n    case 413:\n      return apiMessage ?? PAYLOAD_TOO_LARGE_MESSAGE;\n    case 429:\n      return formatRateLimitMessage(apiMessage, headers);\n    default:\n      if (statusCode >= 500) {\n        return `Transcend server error (${statusCode}). Try again in a few moments. If the problem persists, contact Transcend support.`;\n      }\n      return apiMessage ?? `Request failed with status code ${statusCode}.`;\n  }\n}\n\n/**\n * Returns true when the error looks like a network or timeout failure.\n *\n * @param error - Thrown error\n * @returns Whether the error is likely a connectivity issue\n */\nfunction isNetworkError(error: unknown): boolean {\n  if (!(error instanceof Error)) {\n    return false;\n  }\n\n  const code = (error as NodeJS.ErrnoException).code;\n  if (\n    code === 'ECONNREFUSED' ||\n    code === 'ENOTFOUND' ||\n    code === 'ETIMEDOUT' ||\n    code === 'ECONNRESET'\n  ) {\n    return true;\n  }\n\n  const message = error.message.toLowerCase();\n  return (\n    message.includes('network') ||\n    message.includes('timeout') ||\n    message.includes('econnrefused') ||\n    message.includes('enotfound') ||\n    message.includes('etimedout')\n  );\n}\n\n/**\n * Extracts a useful error message from a failed Policy Engine HTTP request.\n *\n * @param error - The thrown error, typically a got `HTTPError`\n * @returns A message suitable for CLI output\n */\nexport function formatPolicyEngineRequestError(error: unknown): string {\n  if (isNetworkError(error)) {\n    return NETWORK_ERROR_MESSAGE;\n  }\n\n  if (error && typeof error === 'object' && 'response' in error) {\n    const response = (error as PolicyEngineHttpError).response;\n    const statusCode = response?.statusCode;\n    const apiMessage = extractApiMessage(response?.body);\n\n    if (statusCode) {\n      return formatHttpStatusError(statusCode, apiMessage, response?.headers);\n    }\n\n    if (apiMessage) {\n      return apiMessage;\n    }\n  }\n\n  return error instanceof Error ? error.message : String(error);\n}\n\n/**\n * Rethrows a Policy Engine request failure with a user-readable message.\n *\n * @param error - The thrown error, typically a got `HTTPError`\n */\nexport function throwPolicyEngineRequestError(error: unknown): never {\n  throw new PolicyEngineCliError(formatPolicyEngineRequestError(error), { cause: error });\n}\n\n/**\n * Awaits a Policy Engine HTTP request and maps failures to user-readable errors.\n *\n * @param request - Promise returned by a got client call (e.g. `.json()`)\n * @returns Parsed response body\n */\nexport async function policyEngineRequest<T>(request: Promise<T>): Promise<T> {\n  try {\n    return await request;\n  } catch (error) {\n    throwPolicyEngineRequestError(error);\n  }\n}\n","/** Options for printing CLI command output. */\nexport interface PrintResultOptions {\n  /** When true, print raw JSON */\n  json: boolean;\n  /** JSON-serializable payload */\n  data: unknown;\n  /** Table renderer used when json is false */\n  renderTable?: () => string;\n}\n\n/**\n * Prints JSON or a human-readable table to stdout.\n *\n * @param stdout - Process stdout stream\n * @param options - Output options\n */\nexport function printResult(stdout: NodeJS.WriteStream, options: PrintResultOptions): void {\n  if (options.json) {\n    stdout.write(`${JSON.stringify(options.data, null, 2)}\\n`);\n    return;\n  }\n\n  if (options.renderTable) {\n    stdout.write(`${options.renderTable()}\\n`);\n  }\n}\n"],"mappings":"2EACA,MAAa,EAA8B,KAG9B,EAAgC,MCS7C,SAAgB,EAAwB,EAAsB,EAAmB,CAC/E,IAAM,EAAa,EAAa,QAAQ,MAAO,GAAG,CAClD,GAAI,aAAa,KAAK,EAAW,CAC/B,MAAU,MACR,8FACU,EAAa,UAAU,EAAW,QAAQ,SAAU,GAAG,CAAC,YACnE,CAEH,OAAO,EAAI,OAAO,CAChB,UAAW,EACX,QAAS,CACP,cAAe,UAAU,IACzB,OAAQ,mBACT,CACF,CAAC,CCuCJ,SAAS,EAAkB,EAAmC,CAC5D,GAAI,OAAO,GAAS,SAClB,GAAI,CAEF,OADe,KAAK,MAAM,EACb,CAAC,aACR,CACN,OAAO,EAAK,OAAS,EAAI,EAAO,IAAA,GAIpC,GAAI,GAAQ,OAAO,GAAS,UAAY,YAAa,EAAM,CACzD,IAAM,EAAW,EAA+B,QAChD,GAAI,OAAO,GAAY,UAAY,EAAQ,OAAS,EAClD,OAAO,GAcb,SAAS,EACP,EACA,EACoB,CACpB,GAAI,CAAC,EACH,OAGF,IAAM,EAAQ,EAAQ,IAAS,EAAQ,EAAK,aAAa,EAKzD,OAJI,MAAM,QAAQ,EAAM,CACf,EAAM,GAGR,EAUT,SAAS,EACP,EACA,EACQ,CACR,GAAI,EACF,OAAO,EAGT,IAAM,EAAa,EAAmB,EAAS,cAAc,CACvD,EAAU,EAAmB,EAAS,oBAAoB,CAE5D,EAAU;;;8BAWd,OANI,EACF,GAAW,mBAAmB,EAAW,YAChC,IACT,GAAW,mBAAmB,KAGzB,EAWT,SAAS,EACP,EACA,EACA,EACQ,CACR,OAAQ,EAAR,CACE,IAAK,KACH,MAAO;;;;;;;;yEACT,IAAK,KACH,OACE,GACA,qFAEJ,IAAK,KACH,MAAO;;;;;;;oFACT,IAAK,KACH,OAAO,GAAc,mEACvB,IAAK,KACH,OAAO,GAAc,+DACvB,IAAK,KACH,OAAO,GAAc;;;;;;8DACvB,IAAK,KACH,OAAO,EAAuB,EAAY,EAAQ,CACpD,QAIE,OAHI,GAAc,IACT,2BAA2B,EAAW,oFAExC,GAAc,mCAAmC,EAAW,IAUzE,SAAS,EAAe,EAAyB,CAC/C,GAAI,EAAE,aAAiB,OACrB,MAAO,GAGT,IAAM,EAAQ,EAAgC,KAC9C,GACE,IAAS,gBACT,IAAS,aACT,IAAS,aACT,IAAS,aAET,MAAO,GAGT,IAAM,EAAU,EAAM,QAAQ,aAAa,CAC3C,OACE,EAAQ,SAAS,UAAU,EAC3B,EAAQ,SAAS,UAAU,EAC3B,EAAQ,SAAS,eAAe,EAChC,EAAQ,SAAS,YAAY,EAC7B,EAAQ,SAAS,YAAY,CAUjC,SAAgB,EAA+B,EAAwB,CACrE,GAAI,EAAe,EAAM,CACvB,MAAO;;;;;;;sCAGT,GAAI,GAAS,OAAO,GAAU,UAAY,aAAc,EAAO,CAC7D,IAAM,EAAY,EAAgC,SAC5C,EAAa,GAAU,WACvB,EAAa,EAAkB,GAAU,KAAK,CAEpD,GAAI,EACF,OAAO,EAAsB,EAAY,EAAY,GAAU,QAAQ,CAGzE,GAAI,EACF,OAAO,EAIX,OAAO,aAAiB,MAAQ,EAAM,QAAU,OAAO,EAAM,CAQ/D,SAAgB,EAA8B,EAAuB,CACnE,MAAM,IAAI,EAAqB,EAA+B,EAAM,CAAE,CAAE,MAAO,EAAO,CAAC,CASzF,eAAsB,EAAuB,EAAiC,CAC5E,GAAI,CACF,OAAO,MAAM,QACN,EAAO,CACd,EAA8B,EAAM,EClPxC,SAAgB,EAAY,EAA4B,EAAmC,CACzF,GAAI,EAAQ,KAAM,CAChB,EAAO,MAAM,GAAG,KAAK,UAAU,EAAQ,KAAM,KAAM,EAAE,CAAC,IAAI,CAC1D,OAGE,EAAQ,aACV,EAAO,MAAM,GAAG,EAAQ,aAAa,CAAC,IAAI"}

package/dist/pullChunkedCustomSiloOutstandingIdentifiers-DTGQOw--.mjs

@@ -1,2 +0,0 @@
-import{a as e}from"./constants-BRsj50Nb.mjs";import{t}from"./logger-CPu6zbyQ.mjs";import n from"colors";import{decodeCodec as r}from"@transcend-io/type-utils";import*as i from"io-ts";import{REDUCED_REQUESTS_FOR_DATA_SILO_COUNT as a,buildTranscendGraphQLClient as o,createSombraGotInstance as s,makeGraphQLRequest as c,withTransientRetry as l}from"@transcend-io/sdk";import{mapSeries as u}from"@transcend-io/utils";import d from"cli-progress";async function f(e,{dataSiloId:n}){let{listReducedRequestsForDataSilo:{totalCount:r}}=await c(e,a,{variables:{input:{dataSiloId:n,isResolved:!1}},logger:t});return r}const p=i.type({id:i.string,name:i.string,partition:i.string}),m=i.intersection([i.type({identifier:i.string,type:i.string,coreIdentifier:i.string,dataSiloId:i.string,requestId:i.string,nonce:i.string,requestCreatedAt:i.string,daysUntilOverdue:i.number,attributes:i.array(i.type({key:i.string,values:i.array(i.string)}))}),i.partial({partition:i.union([p,i.null])})]);async function h(e,{dataSiloId:n,limit:a=100,offset:o=0,requestType:s}){try{let c=await l(`pullCronPageOfIdentifiers`,()=>e.get(`v1/data-silo/${n}/pending-requests/${s}`,{searchParams:{offset:o,limit:a}}).json(),{logger:t,maxAttempts:6,baseDelayMs:500}),{items:u}=r(i.type({items:i.array(m)}),c);return u}catch(e){throw Error(`Received an error from server: ${e?.response?.body||e?.message}`)}}async function g({dataSiloId:r,auth:i,sombraAuth:a,actions:c,apiPageSize:l=100,savePageSize:p=1e3,onSave:m,transcendUrl:g=e,skipRequestCount:_=!1}){if(p%l!==0)throw Error(`savePageSize must be a multiple of apiPageSize. savePageSize: ${p}, apiPageSize: ${l}`);let v=await s(g,i,{logger:t,sombraApiKey:a,sombraUrl:process.env.SOMBRA_URL}),y=o(g,i),b=0;_||(b=await f(y,{dataSiloId:r})),t.info(n.magenta(`Pulling ${_?`all`:b} outstanding request identifiers for data silo: "${r}" for requests of types "${c.join(`", "`)}"`));let x=new Date().getTime(),S=new d.SingleBar({},d.Presets.shades_classic),C=new Set,w=[],T=[];_||S.start(b,0),await u(c,async e=>{let i=0,a=!0;for(;a;){let o=await h(v,{dataSiloId:r,limit:l,offset:i,requestType:e}),s=o.map(t=>(C.add(t.requestId),{...t,action:e})),c=s.map(({attributes:e,partition:t,...n})=>({...n,...t?{partitionId:t.id,partitionName:t.name,partitionKey:t.partition}:{},...e.reduce((e,t)=>Object.assign(e,{[t.key]:t.values.join(`,`)}),{})}));w.push(...s),T.push(...c),T.length>=p&&(await m(T),T=[]),a=o.length===l,i+=l,_?t.info(n.magenta(`Pulled ${o.length} outstanding identifiers for ${C.size} requests`)):S.update(C.size)}}),T.length>0&&await m(T),_||S.stop();let E=new Date().getTime()-x;return t.info(n.green(`Successfully pulled ${w.length} outstanding identifiers from ${C.size} requests in "${E/1e3}" seconds!`)),{identifiers:w}}export{f as a,h as i,m as n,p as r,g as t};
-//# sourceMappingURL=pullChunkedCustomSiloOutstandingIdentifiers-DTGQOw--.mjs.map

package/dist/pushManualEnrichmentIdentifiersFromCsv-BTJGOmdU.mjs

@@ -1,2 +0,0 @@
-import{a as e}from"./constants-BRsj50Nb.mjs";import{t}from"./logger-CPu6zbyQ.mjs";import{n}from"./readCsv-DNcJ_UfU.mjs";import{o as r}from"./request-BpKyN9Xm.mjs";import{uniq as i}from"lodash-es";import a from"colors";import*as o from"io-ts";import{buildTranscendGraphQLClient as s,createSombraGotInstance as c,makeGraphQLRequest as l}from"@transcend-io/sdk";import{map as u,splitCsvToList as d}from"@transcend-io/utils";const f=`https://app.transcend.io/privacy-requests/incoming-requests/`,p=o.record(o.string,o.string);async function m(e,{id:n,...r},o,s){if(!n){let e=`Request ID must be provided to enricher request.${s?` Found error in row: ${s}`:``}`;throw t.error(a.red(e)),Error(e)}let c=n.toLowerCase(),l=Object.entries(r).reduce((e,[t,n])=>i(d(n)).length===0?e:Object.assign(e,{[t]:i(d(n)).map(e=>({value:t===`email`?e.toLowerCase():e}))}),{});try{return await e.post(`v1/enrich-identifiers`,{headers:{"x-transcend-request-id":c,"x-transcend-enricher-id":o},json:{enrichedIdentifiers:l}}).json(),t.error(a.green(`Successfully enriched request: ${f}${c}`)),!0}catch(e){if(typeof e.response.body==`string`&&e.response.body.includes(`Cannot update a resolved RequestEnricher`))return t.warn(a.magenta(`Skipped enrichment for request: ${f}${c}, request is no longer in the enriching phase.`)),!1;throw t.error(a.red(`Failed to enricher identifiers for request with id: ${f}${c} - ${e.message} - ${e.response.body}`)),e}}async function h({file:i,auth:o,sombraAuth:d,enricherId:f,markSilent:h,concurrency:g=100,transcendUrl:_=e}){let v=await c(_,o,{logger:t,sombraApiKey:d,sombraUrl:process.env.SOMBRA_URL}),y=s(_,o);t.info(a.magenta(`Reading "${i}" from disk`));let b=n(i,p);t.info(a.magenta(`Enriching "${b.length}" privacy requests.`));let x=0,S=0,C=0;if(await u(b,async(e,n)=>{try{h&&(await l(y,r,{variables:{input:{id:e.id,isSilent:!0}},logger:t}),t.info(a.magenta(`Mark request as silent mode - ${e.id}`))),await m(v,e,f,n)?x+=1:S+=1}catch{C+=1}},{concurrency:g}),t.info(a.green(`Successfully notified Transcend! \n Success count: ${x}.`)),S>0&&t.info(a.magenta(`Skipped count: ${S}.`)),C>0)throw t.info(a.red(`Error Count: ${C}.`)),Error(`Failed to enrich: ${C} requests.`);return b.length}export{p as n,m as r,h as t};
-//# sourceMappingURL=pushManualEnrichmentIdentifiersFromCsv-BTJGOmdU.mjs.map

package/dist/resolveBundleIdByName-Dm_o5_bg.mjs

@@ -1,2 +0,0 @@
-import{n as e}from"./printResult-C2K9ODeE.mjs";async function t(t,n){let r=0;for(;;){let i=await e(t.get(`v1/policy-engine/policy-bundles`,{searchParams:{limit:100,offset:r}}).json()),a=i.nodes.find(e=>e.bundleName===n);if(a)return a;if(r+=i.nodes.length,r>=i.totalCount||i.nodes.length===0)return}}async function n(e,n){return(await t(e,n))?.id}export{n,t};
-//# sourceMappingURL=resolveBundleIdByName-Dm_o5_bg.mjs.map

package/dist/resolveBundleIdByName-Dm_o5_bg.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolveBundleIdByName-Dm_o5_bg.mjs","names":[],"sources":["../src/commands/policy/helpers/resolveBundleIdByName.ts"],"sourcesContent":["import type { Got } from 'got';\n\nimport type { PolicyBundle, PolicyBundleListResponse } from '../types.js';\nimport { policyEngineRequest } from './formatPolicyEngineRequestError.js';\n\n/**\n * Resolves a bundle name to its parent record by scanning offset-paginated listings.\n *\n * @param client - Policy Engine REST client\n * @param bundleName - Bundle name to resolve\n * @returns Matching bundle when found\n */\nexport async function resolveBundleByName(\n  client: Got,\n  bundleName: string,\n): Promise<PolicyBundle | undefined> {\n  const limit = 100;\n  let offset = 0;\n\n  while (true) {\n    const body = await policyEngineRequest(\n      client\n        .get('v1/policy-engine/policy-bundles', {\n          searchParams: { limit, offset },\n        })\n        .json<PolicyBundleListResponse>(),\n    );\n\n    const match = body.nodes.find((bundle) => bundle.bundleName === bundleName);\n    if (match) {\n      return match;\n    }\n\n    offset += body.nodes.length;\n    if (offset >= body.totalCount || body.nodes.length === 0) {\n      return undefined;\n    }\n  }\n}\n\n/**\n * Resolves a bundle name to its UUID by scanning offset-paginated bundle listings.\n *\n * @param client - Policy Engine REST client\n * @param bundleName - Bundle name to resolve\n * @returns Bundle UUID when found\n */\nexport async function resolveBundleIdByName(\n  client: Got,\n  bundleName: string,\n): Promise<string | undefined> {\n  const bundle = await resolveBundleByName(client, bundleName);\n  return bundle?.id;\n}\n"],"mappings":"+CAYA,eAAsB,EACpB,EACA,EACmC,CACnC,IACI,EAAS,EAEb,OAAa,CACX,IAAM,EAAO,MAAM,EACjB,EACG,IAAI,kCAAmC,CACtC,aAAc,CAAE,UAAO,SAAQ,CAChC,CAAC,CACD,MAAgC,CACpC,CAEK,EAAQ,EAAK,MAAM,KAAM,GAAW,EAAO,aAAe,EAAW,CAC3E,GAAI,EACF,OAAO,EAIT,GADA,GAAU,EAAK,MAAM,OACjB,GAAU,EAAK,YAAc,EAAK,MAAM,SAAW,EACrD,QAYN,eAAsB,EACpB,EACA,EAC6B,CAE7B,OAAO,MADc,EAAoB,EAAQ,EAAW,GAC7C"}

package/dist/resolvePolicyBundleVersion-DRUwe7fA.mjs

@@ -1,2 +0,0 @@
-import{n as e}from"./printResult-C2K9ODeE.mjs";async function t(t,n){let r=[],i;for(;;){let a={limit:100};i&&(a.after=i);let o=await e(t.get(`v1/policy-engine/policy-bundles/${n}/versions`,{searchParams:a}).json());if(r.push(...o.nodes),!o.pageInfo.hasNextPage||!o.pageInfo.endCursor)break;i=o.pageInfo.endCursor}return r}function n(e,t){return new Date(t.createdAt).getTime()-new Date(e.createdAt).getTime()}async function r(e,r,i){let a=await t(e,r);if(a.length===0)throw Error(`No versions found for this policy bundle.`);if(i.version){let e=a.find(e=>e.version===i.version);if(!e)throw Error(`Version "${i.version}" was not found for this policy bundle.`);return e}return a.sort(n)[0]}export{r as t};
-//# sourceMappingURL=resolvePolicyBundleVersion-DRUwe7fA.mjs.map

package/dist/resolvePolicyBundleVersion-DRUwe7fA.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolvePolicyBundleVersion-DRUwe7fA.mjs","names":[],"sources":["../src/commands/policy/helpers/resolvePolicyBundleVersion.ts"],"sourcesContent":["import type { Got } from 'got';\n\nimport type { PolicyBundleVersion, PolicyBundleVersionListResponse } from '../types.js';\nimport { policyEngineRequest } from './formatPolicyEngineRequestError.js';\n\n/** Options for resolving a policy bundle version. */\nexport interface ResolvePolicyBundleVersionOptions {\n  /** Caller-supplied version label; omitted to pick the latest by createdAt */\n  version?: string;\n}\n\n/**\n * Lists all versions for a bundle, following cursor pagination.\n *\n * @param client - Policy Engine REST client\n * @param bundleId - Parent bundle UUID\n * @returns All uploaded versions\n */\nasync function listAllPolicyBundleVersions(\n  client: Got,\n  bundleId: string,\n): Promise<PolicyBundleVersion[]> {\n  const limit = 100;\n  const versions: PolicyBundleVersion[] = [];\n  let after: string | undefined;\n\n  while (true) {\n    const searchParams: Record<string, string | number> = { limit };\n    if (after) {\n      searchParams.after = after;\n    }\n\n    const body = await policyEngineRequest(\n      client\n        .get(`v1/policy-engine/policy-bundles/${bundleId}/versions`, {\n          searchParams,\n        })\n        .json<PolicyBundleVersionListResponse>(),\n    );\n\n    versions.push(...body.nodes);\n\n    if (!body.pageInfo.hasNextPage || !body.pageInfo.endCursor) {\n      break;\n    }\n    after = body.pageInfo.endCursor;\n  }\n\n  return versions;\n}\n\n/**\n * Compares two version records by createdAt, newest first.\n *\n * @param left - First version\n * @param right - Second version\n * @returns Sort order for descending createdAt\n */\nfunction compareVersionsByCreatedAtDesc(\n  left: PolicyBundleVersion,\n  right: PolicyBundleVersion,\n): number {\n  return new Date(right.createdAt).getTime() - new Date(left.createdAt).getTime();\n}\n\n/**\n * Resolves a version label to a version record, or picks the latest by createdAt.\n *\n * @param client - Policy Engine REST client\n * @param bundleId - Parent bundle UUID\n * @param options - Version lookup options\n * @returns Matching or latest version record\n */\nexport async function resolvePolicyBundleVersion(\n  client: Got,\n  bundleId: string,\n  options: ResolvePolicyBundleVersionOptions,\n): Promise<PolicyBundleVersion> {\n  const versions = await listAllPolicyBundleVersions(client, bundleId);\n\n  if (versions.length === 0) {\n    throw new Error('No versions found for this policy bundle.');\n  }\n\n  if (options.version) {\n    const match = versions.find((entry) => entry.version === options.version);\n    if (!match) {\n      throw new Error(`Version \"${options.version}\" was not found for this policy bundle.`);\n    }\n    return match;\n  }\n\n  return versions.sort(compareVersionsByCreatedAtDesc)[0];\n}\n"],"mappings":"+CAkBA,eAAe,EACb,EACA,EACgC,CAChC,IACM,EAAkC,EAAE,CACtC,EAEJ,OAAa,CACX,IAAM,EAAgD,CAAE,UAAO,CAC3D,IACF,EAAa,MAAQ,GAGvB,IAAM,EAAO,MAAM,EACjB,EACG,IAAI,mCAAmC,EAAS,WAAY,CAC3D,eACD,CAAC,CACD,MAAuC,CAC3C,CAID,GAFA,EAAS,KAAK,GAAG,EAAK,MAAM,CAExB,CAAC,EAAK,SAAS,aAAe,CAAC,EAAK,SAAS,UAC/C,MAEF,EAAQ,EAAK,SAAS,UAGxB,OAAO,EAUT,SAAS,EACP,EACA,EACQ,CACR,OAAO,IAAI,KAAK,EAAM,UAAU,CAAC,SAAS,CAAG,IAAI,KAAK,EAAK,UAAU,CAAC,SAAS,CAWjF,eAAsB,EACpB,EACA,EACA,EAC8B,CAC9B,IAAM,EAAW,MAAM,EAA4B,EAAQ,EAAS,CAEpE,GAAI,EAAS,SAAW,EACtB,MAAU,MAAM,4CAA4C,CAG9D,GAAI,EAAQ,QAAS,CACnB,IAAM,EAAQ,EAAS,KAAM,GAAU,EAAM,UAAY,EAAQ,QAAQ,CACzE,GAAI,CAAC,EACH,MAAU,MAAM,YAAY,EAAQ,QAAQ,yCAAyC,CAEvF,OAAO,EAGT,OAAO,EAAS,KAAK,EAA+B,CAAC"}

package/dist/updateConsentManagerVersionToLatest-DWblAwus.mjs

@@ -1,2 +0,0 @@
-import{a as e}from"./constants-BRsj50Nb.mjs";import{t}from"./logger-CPu6zbyQ.mjs";import{ConsentBundleType as n}from"@transcend-io/privacy-types";import r from"colors";import{buildTranscendGraphQLClient as i,deployConsentManager as a,fetchConsentManagerId as o,updateConsentManagerToLatest as s}from"@transcend-io/sdk";import{mapSeries as c}from"@transcend-io/utils";async function l({auth:l,deploy:u=!1,transcendUrl:d=e,bundleTypes:f=Object.values(n)}){let p=i(d,l),m=await o(p,{logger:t});await c(f,async e=>{t.info(r.magenta(`Update Consent Manager bundle with ID "${m}" and type "${e}" to latest version...`)),await s(p,{input:{id:m,bundleType:e},logger:t}),t.info(r.green(`Updated Consent Manager bundle with ID "${m}" and type "${e}" to latest version!`))}),u&&await c(f,async e=>{t.info(r.magenta(`Deploying Consent Manager bundle with ID "${m}" and type "${e}"...`)),await a(p,{id:m,bundleType:e},{logger:t}),t.info(r.green(`Deployed Consent Manager bundle with ID "${m}" and type "${e}"!`))})}export{l as t};
-//# sourceMappingURL=updateConsentManagerVersionToLatest-DWblAwus.mjs.map

package/dist/uploadPrivacyRequestsFromCsv-B_hQwIn6.mjs

@@ -1,2 +0,0 @@
-import{a as e}from"./constants-BRsj50Nb.mjs";import{t}from"./logger-CPu6zbyQ.mjs";import{a as n,c as r,i,l as a,o,r as s,s as c,t as l}from"./constants-qvGk0wlN.mjs";import{n as u,t as d}from"./fuzzyMatchColumns-2NmQqCZI.mjs";import{n as f,t as p}from"./parseAttributesFromString-C5hJMRvt.mjs";import{n as m}from"./readCsv-DNcJ_UfU.mjs";import{r as h,t as g}from"./extractClientError-DUJxHv07.mjs";import{CompletedRequestStatus as _,IdentifierType as v,IsoCountryCode as y,IsoCountrySubdivisionCode as b,NORMALIZE_PHONE_NUMBER as x,RequestAction as S}from"@transcend-io/privacy-types";import{startCase as C,uniq as w}from"lodash-es";import{join as ee}from"node:path";import T from"colors";import{LOCALE_KEY as E}from"@transcend-io/internationalization";import{apply as D,getEntries as O,getValues as k,valuesOf as A}from"@transcend-io/type-utils";import*as j from"io-ts";import{DATA_SUBJECTS as M,INITIALIZER as N,buildTranscendGraphQLClient as P,createSombraGotInstance as te,fetchAllRequestAttributeKeys as ne,makeGraphQLRequest as F}from"@transcend-io/sdk";import{map as re,splitCsvToList as I}from"@transcend-io/utils";import L from"cli-progress";import R from"inquirer";import z from"inquirer-autocomplete-prompt";import{DateFromISOString as B}from"io-ts-types";import{PersistedState as V}from"@transcend-io/persisted-state";async function H(e,t,n){R.registerPrompt(`autocomplete`,z);let r=e.map(e=>e||`<blank>`).filter(e=>!n[e]);if(r.length===0)return n;let i=await R.prompt(r.map(e=>({name:e,message:`Map value of: ${e}`,type:`autocomplete`,default:t.find(t=>u(e,t)),source:(e,n)=>n?t.filter(e=>typeof e==`string`&&u(n,e)):t})));return{...n,...D(i,e=>typeof e==`string`?e:Object.values(e)[0])}}function U(e,t){return w(e.map(e=>e[t]||``).flat())}async function W(e){let n=w(e.map(e=>Object.keys(e)).flat()),r=e,i=!0;for(;i;){let{filterColumnName:e}=await R.prompt([{name:`filterColumnName`,message:`If you need to filter the list of requests to import, choose the column to filter on. Currently ${r.length} rows.`,type:`list`,default:n,choices:[a,...n]}]);if(i=a!==e,i){let t=U(r,e),{valuesToKeep:i}=await R.prompt([{name:`valuesToKeep`,message:`Keep rows matching this value`,type:`checkbox`,default:n,choices:t}]);r=r.filter(t=>i.includes(t[e]))}}return t.info(T.magenta(`Importing ${r.length} requests`)),r}async function G(e,t){let n=k(o).filter(e=>!t.getValue(`columnNames`,e)),i=n.length===0?{}:await R.prompt(n.map(t=>{let n=C(t.replace(`ColumnName`,``)),i=d(e,n,r[t],!!s[t]);return{name:t,message:`Choose the column that will be used to map in the field: ${n}`,type:`list`,default:i[0],choices:i}}));return await Promise.all(O(i).map(([e,n])=>t.setValue(n,`columnNames`,e))),i}async function K(e,n,{state:r,columnNameMap:i}){let o=e=>r.getValue(`columnNames`,e)||i[e],{internalSubjects:s}=await F(e,M,{logger:t});t.info(T.magenta(`Determining mapping of columns for request action`));let c=await H(U(n,o(`requestType`)),Object.values(S),r.getValue(`requestTypeToRequestAction`));await r.setValue(c,`requestTypeToRequestAction`),t.info(T.magenta(`Determining mapping of columns for subject`));let l=await H(U(n,o(`subjectType`)),s.map(({type:e})=>e),r.getValue(`subjectTypeToSubjectName`));await r.setValue(l,`subjectTypeToSubjectName`),t.info(T.magenta(`Determining mapping of columns for locale`));let u=await H(U(n,o(`locale`)),Object.values(E),r.getValue(`languageToLocale`));await r.setValue(u,`languageToLocale`),t.info(T.magenta(`Determining mapping of columns for request status`)),t.info(T.magenta(`Determining mapping of columns for request status`));let d=o(`requestStatus`),f=d===`[NONE]`?{}:await H(U(n,d),[...Object.values(_),a],r.getValue(`statusToRequestStatus`));await r.setValue(f,`statusToRequestStatus`),t.info(T.magenta(`Determining mapping of columns for country`));let p=o(`country`),m=p===`[NONE]`?{}:await H(U(n,p),[...Object.values(y),a],r.getValue(`regionToCountry`));await r.setValue(m,`regionToCountry`),t.info(T.magenta(`Determining mapping of columns for country sub division`));let h=o(`countrySubDivision`),g=h===`[NONE]`?{}:await H(U(n,h),[...Object.values(b),a],r.getValue(`regionToCountrySubDivision`));await r.setValue(g,`regionToCountrySubDivision`)}const q=j.record(j.string,j.array(j.intersection([j.type({value:j.string}),j.partial({name:j.string})]))),J=j.intersection([j.type({email:j.string,attestedExtraIdentifiers:q,coreIdentifier:j.string,requestType:A(S),subjectType:j.string}),j.partial({country:A(y),countrySubDivision:A(b),attributes:j.array(p),status:A(_),createdAt:B,dataSiloIds:j.array(j.string),locale:A(E)})]);function Y(e,t,n){if(t===v.Email)return e.toLowerCase();if(t===v.Phone){let t=e.replace(x,``).replace(/[()]/g,``).replace(/[–]/g,``).replace(/[:]/g,``).replace(/[‭‬]/g,``).replace(/[A-Za-z]/g,``);return t?t.startsWith(`+`)?t:`+${n}${t}`:``}return e}function X(e,t,{columnNameMap:n,identifierNameMap:r,attributeNameMap:i,requestAttributeKeys:o,defaultPhoneCountryCode:s=`1`}){let c=e=>t.getValue(`columnNames`,e)||n[e];return e.map(e=>{let n={};Object.entries(r).filter(([,e])=>e!==a).forEach(([t,r])=>{let i=Object.values(v).includes(t)?t:v.Custom,a=e[r];if(a){let e=Y(a,i,s);e&&(n[i]||(n[i]=[]),n[i].push({value:e,name:t}))}});let u=[];Object.entries(i).filter(([,e])=>e!==a).forEach(([t,n])=>{let r=e[n];if(r){let e=o.find(e=>e.name===t)?.type===`MULTI_SELECT`;u.push({values:e?I(r):r,key:t})}});let d=c(`requestType`),f=c(`subjectType`);return[e,{email:e[c(`email`)],attestedExtraIdentifiers:n,attributes:u,coreIdentifier:e[c(`coreIdentifier`)],requestType:d===`[APPLY VALUE TO ALL ROWS]`?t.getValue(`requestTypeToRequestAction`,l):t.getValue(`requestTypeToRequestAction`,e[d]),subjectType:f===`[APPLY VALUE TO ALL ROWS]`?t.getValue(`subjectTypeToSubjectName`,l):t.getValue(`subjectTypeToSubjectName`,e[f]),...c(`locale`)!==`[NONE]`&&e[c(`locale`)]?{locale:t.getValue(`languageToLocale`,e[c(`locale`)])}:{},...c(`country`)!==`[NONE]`&&e[c(`country`)]?{country:t.getValue(`regionToCountry`,e[c(`country`)])}:{},...c(`countrySubDivision`)!==`[NONE]`&&e[c(`countrySubDivision`)]?{countrySubDivision:t.getValue(`regionToCountrySubDivision`,e[c(`countrySubDivision`)])}:{},...c(`requestStatus`)!==`[NONE]`&&t.getValue(`statusToRequestStatus`,e[c(`requestStatus`)])!==`[NONE]`&&e[c(`requestStatus`)]?{status:t.getValue(`statusToRequestStatus`,e[c(`requestStatus`)])}:{},...c(`createdAt`)!==`[NONE]`&&e[c(`createdAt`)]?{createdAt:new Date(e[c(`createdAt`)])}:{},...c(`dataSiloIds`)!==`[NONE]`&&e[c(`dataSiloIds`)]?{dataSiloIds:I(e[c(`dataSiloIds`)])}:{}}]})}async function Z(e,n,r){let{initializer:i}=await F(e,N,{logger:t}),a=i.identifiers.filter(({name:e})=>!r.getValue(`identifierNames`,e)&&!c.includes(e)),o=a.length===0?{}:await R.prompt(a.map(({name:e})=>{let t=d(n,e,!1);return{name:e,message:`Choose the column that will be used to map in the identifier: ${e}`,type:`list`,default:t[0],choices:t}}));return await Promise.all(Object.entries(o).map(([e,t])=>r.setValue(t,`identifierNames`,e))),{...r.getValue(`identifierNames`),...o}}async function Q(e,t,n,r){let i=r.filter(({name:e})=>!n.getValue(`attributeNames`,e)),a=i.length===0?{}:await R.prompt(i.map(({name:e})=>{let n=d(t,e,!1);return{name:e,message:`Choose the column that will be used to map in the attribute: ${e}`,type:`list`,default:n[0],choices:n}}));return await Promise.all(Object.entries(a).map(([e,t])=>n.setValue(t,`attributeNames`,e))),{...n.getValue(`attributeNames`),...a}}async function $({cacheFilepath:r,requestReceiptFolder:a,file:o,auth:s,sombraAuth:c,concurrency:l=100,defaultPhoneCountryCode:u=`1`,transcendUrl:d=e,attributes:p=[],emailIsVerified:_=!0,skipFilterStep:v=!1,skipSendingReceipt:y=!0,isTest:b=!1,isSilent:x=!0,debug:S=!1,dryRun:C=!1}){let E=new Date().getTime(),D=new L.SingleBar({},L.Presets.shades_classic),O=f(p),k=new V(r,i,{columnNames:{},requestTypeToRequestAction:{},subjectTypeToSubjectName:{},languageToLocale:{},statusToRequestStatus:{},identifierNames:{},attributeNames:{},regionToCountrySubDivision:{},regionToCountry:{}}),A=ee(a,`tr-request-upload-${new Date().toISOString().replace(/:/g,`-`)}-${o.split(`/`).pop()}`.replace(`.csv`,`.json`)),M=new V(A,n,{successfulRequests:[],duplicateRequests:[],failingRequests:[]}),N=await te(d,s,{logger:t,sombraApiKey:c,sombraUrl:process.env.SOMBRA_URL}),F=m(o,j.record(j.string,j.string)),I=w(F.map(e=>Object.keys(e)).flat());if(F.length===0)throw Error(`No Requests found in list! Ensure the first row of the CSV is a header and the rest are requests.`);if(S){let e=F[0];t.info(T.magenta(`First request: ${JSON.stringify(e,null,2)}`))}let R=v?F:await W(F),z=P(d,s),B=await ne(z,{logger:t}),H=await G(I,k),U=await Z(z,I,k),q=await Q(z,I,k,B);await K(z,R,{state:k,columnNameMap:H});let J=X(R,k,{defaultPhoneCountryCode:u,columnNameMap:H,identifierNameMap:U,attributeNameMap:q,requestAttributeKeys:B});S||D.start(J.length,0);let Y=0;await re(J,async([e,n],r)=>{let i=S?`email:${n.email} | coreIdentifier:${n.coreIdentifier}`:`row:${r.toString()}`;if(S&&t.info(T.magenta(`[${r+1}/${J.length}] Importing: ${JSON.stringify(n,null,2)}`)),C){t.info(T.magenta(`Bailing out on dry run because dryRun is set`));return}try{let a=await h(N,n,{details:`Uploaded by Transcend Cli: "tr-request-upload" : ${JSON.stringify(e,null,2)}`,isTest:b,emailIsVerified:_,skipSendingReceipt:y,isSilent:x,additionalAttributes:O});S&&(t.info(T.green(`[${r+1}/${J.length}] Successfully submitted the test data subject request: "${i}"`)),t.info(T.green(`[${r+1}/${J.length}] View it at: "${a.link}"`)));let o=M.getValue(`successfulRequests`);o.push({id:a.id,link:a.link,rowIndex:r,coreIdentifier:a.coreIdentifier,attemptedAt:new Date().toISOString()}),await M.setValue(o,`successfulRequests`)}catch(e){let a=`${e.message} - ${JSON.stringify(e.response?.body,null,2)}`,o=g(a);if(o===`Client error: You have already made this request.`){S&&t.info(T.yellow(`[${r+1}/${J.length}] Skipping request as it is a duplicate`));let e=M.getValue(`duplicateRequests`);e.push({coreIdentifier:n.coreIdentifier,rowIndex:r,attemptedAt:new Date().toISOString()}),await M.setValue(e,`duplicateRequests`)}else{let e=M.getValue(`failingRequests`);e.push({...n,rowIndex:r,error:o||a,attemptedAt:new Date().toISOString()}),await M.setValue(e,`failingRequests`),S&&(t.error(T.red(o||a)),t.error(T.red(`[${r+1}/${J.length}] Failed to submit request for: "${i}"`)))}}Y+=1,S||D.update(Y)},{concurrency:l}),D.stop();let $=new Date().getTime()-E;t.info(T.green(`Completed upload in "${$/1e3}" seconds.`)),M.getValue(`duplicateRequests`).length>0&&t.info(T.yellow(`Encountered "${M.getValue(`duplicateRequests`).length}" duplicate requests. See "${A}" to review the core identifiers for these requests.`)),M.getValue(`failingRequests`).length>0&&(t.error(T.red(`Encountered "${M.getValue(`failingRequests`).length}" errors. See "${A}" to review the error messages and inputs.`)),process.exit(1))}export{J as a,K as c,U as d,H as f,q as i,G as l,Q as n,X as o,Z as r,Y as s,$ as t,W as u};
-//# sourceMappingURL=uploadPrivacyRequestsFromCsv-B_hQwIn6.mjs.map

package/dist/uploadPrivacyRequestsFromCsv-B_hQwIn6.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"uploadPrivacyRequestsFromCsv-B_hQwIn6.mjs","names":[],"sources":["../src/lib/requests/mapEnumValues.ts","../src/lib/requests/getUniqueValuesForColumn.ts","../src/lib/requests/filterRows.ts","../src/lib/requests/mapCsvColumnsToApi.ts","../src/lib/requests/mapRequestEnumValues.ts","../src/lib/requests/mapCsvRowsToRequestInputs.ts","../src/lib/requests/mapColumnsToIdentifiers.ts","../src/lib/requests/mapColumnsToAttributes.ts","../src/lib/requests/uploadPrivacyRequestsFromCsv.ts"],"sourcesContent":["import { apply, ObjByString } from '@transcend-io/type-utils';\nimport inquirer from 'inquirer';\nimport autoCompletePrompt from 'inquirer-autocomplete-prompt';\n\nimport { fuzzySearch } from './fuzzyMatchColumns.js';\n\n/**\n * Map a set of inputs to a set of outputs\n *\n * @param csvInputs - Input list\n * @param expectedOutputs - Output list\n * @param cache - Cache\n * @returns Mapping from row to enum value\n */\nexport async function mapEnumValues<TValue extends string>(\n  csvInputs: string[],\n  expectedOutputs: TValue[],\n  cache: { [k in string]: TValue },\n): Promise<{ [k in string]: TValue }> {\n  inquirer.registerPrompt('autocomplete', autoCompletePrompt);\n\n  const inputs = csvInputs.map((item) => item || '<blank>').filter((value) => !cache[value]);\n  if (inputs.length === 0) {\n    return cache;\n  }\n  const result = await inquirer.prompt<{ [k in string]: TValue }>(\n    inputs.map((value) => ({\n      name: value,\n      message: `Map value of: ${value}`,\n      type: 'autocomplete',\n      default: expectedOutputs.find((x) => fuzzySearch(value, x)),\n      source: (answersSoFar: ObjByString, input: string) =>\n        !input\n          ? expectedOutputs\n          : expectedOutputs.filter((x) => typeof x === 'string' && fuzzySearch(input, x)),\n    })),\n  );\n  return {\n    ...cache,\n    ...apply(result, (r) =>\n      typeof r === 'string' ? (r as TValue) : (Object.values(r)[0] as TValue),\n    ),\n  };\n}\n","import { ObjByString } from '@transcend-io/type-utils';\nimport { uniq } from 'lodash-es';\n\n/**\n * Return the unique set of values for a column in a CSV\n *\n * @param rows - Rows to look up\n * @param columnName - Name of column to grab values for\n * @returns Unique set of values in that column\n */\nexport function getUniqueValuesForColumn(rows: ObjByString[], columnName: string): string[] {\n  return uniq(rows.map((row) => row[columnName] || '').flat());\n}\n","import { ObjByString } from '@transcend-io/type-utils';\nimport colors from 'colors';\nimport inquirer from 'inquirer';\nimport { uniq } from 'lodash-es';\n\nimport { logger } from '../../logger.js';\nimport { NONE } from './constants.js';\nimport { getUniqueValuesForColumn } from './getUniqueValuesForColumn.js';\n\n/**\n * Filter a list of CSV rows by column values\n * Choose columns that contain metadata to filter the requests\n *\n * @param rows - Rows to filter\n * @returns Filtered rows\n */\nexport async function filterRows(rows: ObjByString[]): Promise<ObjByString[]> {\n  // Determine set of column names\n  const columnNames = uniq(rows.map((x) => Object.keys(x)).flat());\n\n  // update these variables recursively\n  let filteredRows = rows;\n  let keepFiltering = true;\n\n  // loop over\n  while (keepFiltering) {\n    // Prompt user for column to filter on\n\n    const { filterColumnName } = await inquirer.prompt<{\n      /** Name of column to filter on */\n      filterColumnName: string;\n    }>([\n      {\n        name: 'filterColumnName',\n        // eslint-disable-next-line max-len\n        message: `If you need to filter the list of requests to import, choose the column to filter on. Currently ${filteredRows.length} rows.`,\n        type: 'list',\n        default: columnNames,\n        choices: [NONE, ...columnNames],\n      },\n    ]);\n\n    // Determine if filtering should continue, or loop should be exited\n    keepFiltering = NONE !== filterColumnName;\n    if (keepFiltering) {\n      const options = getUniqueValuesForColumn(filteredRows, filterColumnName);\n\n      const { valuesToKeep } = await inquirer.prompt<{\n        /** Values to keep  */\n        valuesToKeep: string[];\n      }>([\n        {\n          name: 'valuesToKeep',\n          message: 'Keep rows matching this value',\n          type: 'checkbox',\n          default: columnNames,\n          choices: options,\n        },\n      ]);\n\n      filteredRows = filteredRows.filter((request) =>\n        valuesToKeep.includes(request[filterColumnName]),\n      );\n    }\n  }\n\n  logger.info(colors.magenta(`Importing ${filteredRows.length} requests`));\n  return filteredRows;\n}\n","import type { PersistedState } from '@transcend-io/persisted-state';\nimport { getValues, getEntries } from '@transcend-io/type-utils';\nimport inquirer from 'inquirer';\nimport { startCase } from 'lodash-es';\n\nimport { ColumnName, CachedFileState, IS_REQUIRED, CAN_APPLY_IN_BULK } from './constants.js';\nimport { fuzzyMatchColumns } from './fuzzyMatchColumns.js';\n\n/**\n * Mapping from column name to request input parameter\n */\nexport type ColumnNameMap = {\n  [k in ColumnName]?: string;\n};\n\n/**\n * Determine the mapping between columns in CSV\n *\n * @param columnNames - The set of column names\n * @param state - The cached file state used to map DSR inputs\n * @returns The column name mapping\n */\nexport async function mapCsvColumnsToApi(\n  columnNames: string[],\n  state: PersistedState<typeof CachedFileState>,\n): Promise<ColumnNameMap> {\n  // Determine the columns that should be mapped\n  const columnQuestions = getValues(ColumnName).filter(\n    (name) => !state.getValue('columnNames', name),\n  );\n\n  // Skip mapping when everything is mapped\n  const columnNameMap =\n    columnQuestions.length === 0\n      ? {}\n      : // prompt questions to map columns\n        await inquirer.prompt<{\n          [k in ColumnName]?: string;\n        }>(\n          columnQuestions.map((name) => {\n            const field = startCase(name.replace('ColumnName', ''));\n            const matches = fuzzyMatchColumns(\n              columnNames,\n              field,\n              IS_REQUIRED[name],\n              !!CAN_APPLY_IN_BULK[name],\n            );\n            return {\n              name,\n              message: `Choose the column that will be used to map in the field: ${field}`,\n              type: 'list',\n              default: matches[0],\n              choices: matches,\n            };\n          }),\n        );\n\n  await Promise.all(getEntries(columnNameMap).map(([k, v]) => state.setValue(v, 'columnNames', k)));\n  return columnNameMap;\n}\n","import { LOCALE_KEY, type LocaleValue } from '@transcend-io/internationalization';\nimport type { PersistedState } from '@transcend-io/persisted-state';\nimport {\n  CompletedRequestStatus,\n  RequestAction,\n  IsoCountryCode,\n  IsoCountrySubdivisionCode,\n} from '@transcend-io/privacy-types';\nimport { makeGraphQLRequest, DATA_SUBJECTS, type DataSubject } from '@transcend-io/sdk';\nimport { ObjByString } from '@transcend-io/type-utils';\nimport colors from 'colors';\nimport { GraphQLClient } from 'graphql-request';\n\nimport { logger } from '../../logger.js';\nimport { CachedFileState, NONE, ColumnName } from './constants.js';\nimport { getUniqueValuesForColumn } from './getUniqueValuesForColumn.js';\nimport { ColumnNameMap } from './mapCsvColumnsToApi.js';\nimport { mapEnumValues } from './mapEnumValues.js';\n\n/**\n * Map the values in a CSV to the enum values in Transcend\n *\n * @param client - GraphQL client\n * @param requests - Set of privacy requests\n * @param options - Options\n */\nexport async function mapRequestEnumValues(\n  client: GraphQLClient,\n  requests: ObjByString[],\n  {\n    state,\n    columnNameMap,\n  }: {\n    /** State value to write cache to */\n    state: PersistedState<typeof CachedFileState>;\n    /** Mapping of column names */\n    columnNameMap: ColumnNameMap;\n  },\n): Promise<void> {\n  // Get mapped value\n  const getMappedName = (attribute: ColumnName): string =>\n    state.getValue('columnNames', attribute) || columnNameMap[attribute]!;\n\n  // Fetch all data subjects in the organization\n  const { internalSubjects } = await makeGraphQLRequest<{\n    /** Query response */\n    internalSubjects: DataSubject[];\n  }>(client, DATA_SUBJECTS, { logger });\n\n  // Map RequestAction\n  logger.info(colors.magenta('Determining mapping of columns for request action'));\n  const requestTypeToRequestAction: { [k in string]: RequestAction } = await mapEnumValues(\n    getUniqueValuesForColumn(requests, getMappedName(ColumnName.RequestType)),\n    Object.values(RequestAction),\n    state.getValue('requestTypeToRequestAction'),\n  );\n  await state.setValue(requestTypeToRequestAction, 'requestTypeToRequestAction');\n\n  // Map data subject type\n  logger.info(colors.magenta('Determining mapping of columns for subject'));\n  const subjectTypeToSubjectName: { [k in string]: string } = await mapEnumValues(\n    getUniqueValuesForColumn(requests, getMappedName(ColumnName.SubjectType)),\n    internalSubjects.map(({ type }) => type),\n    state.getValue('subjectTypeToSubjectName'),\n  );\n  await state.setValue(subjectTypeToSubjectName, 'subjectTypeToSubjectName');\n\n  // Map locale\n  logger.info(colors.magenta('Determining mapping of columns for locale'));\n  const languageToLocale: { [k in string]: LocaleValue } = await mapEnumValues(\n    getUniqueValuesForColumn(requests, getMappedName(ColumnName.Locale)),\n    Object.values(LOCALE_KEY),\n    state.getValue('languageToLocale'),\n  );\n  await state.setValue(languageToLocale, 'languageToLocale');\n  logger.info(colors.magenta('Determining mapping of columns for request status'));\n\n  // Map request status\n  logger.info(colors.magenta('Determining mapping of columns for request status'));\n  const requestStatusColumn = getMappedName(ColumnName.RequestStatus);\n  const statusToRequestStatus: {\n    [k in string]: CompletedRequestStatus | typeof NONE;\n  } =\n    requestStatusColumn === NONE\n      ? {}\n      : await mapEnumValues(\n          getUniqueValuesForColumn(requests, requestStatusColumn),\n          [...Object.values(CompletedRequestStatus), NONE],\n          state.getValue('statusToRequestStatus'),\n        );\n  await state.setValue(statusToRequestStatus, 'statusToRequestStatus');\n\n  // Map country\n  logger.info(colors.magenta('Determining mapping of columns for country'));\n  const countryColumn = getMappedName(ColumnName.Country);\n  const regionToCountry: {\n    [k in string]: IsoCountryCode | typeof NONE;\n  } =\n    countryColumn === NONE\n      ? {}\n      : await mapEnumValues(\n          getUniqueValuesForColumn(requests, countryColumn),\n          [...Object.values(IsoCountryCode), NONE],\n          state.getValue('regionToCountry'),\n        );\n  await state.setValue(regionToCountry, 'regionToCountry');\n\n  // Map country sub division\n  logger.info(colors.magenta('Determining mapping of columns for country sub division'));\n  const countrySubDivisionColumn = getMappedName(ColumnName.CountrySubDivision);\n  const regionToCountrySubDivision: {\n    [k in string]: IsoCountrySubdivisionCode | typeof NONE;\n  } =\n    countrySubDivisionColumn === NONE\n      ? {}\n      : await mapEnumValues(\n          getUniqueValuesForColumn(requests, countrySubDivisionColumn),\n          [...Object.values(IsoCountrySubdivisionCode), NONE],\n          state.getValue('regionToCountrySubDivision'),\n        );\n  await state.setValue(regionToCountrySubDivision, 'regionToCountrySubDivision');\n}\n","import { LOCALE_KEY } from '@transcend-io/internationalization';\nimport type { PersistedState } from '@transcend-io/persisted-state';\nimport {\n  NORMALIZE_PHONE_NUMBER,\n  CompletedRequestStatus,\n  RequestAction,\n  IdentifierType,\n  IsoCountryCode,\n  IsoCountrySubdivisionCode,\n} from '@transcend-io/privacy-types';\nimport type { AttributeKey } from '@transcend-io/sdk';\nimport { ObjByString, valuesOf } from '@transcend-io/type-utils';\nimport { splitCsvToList } from '@transcend-io/utils';\nimport * as t from 'io-ts';\nimport { DateFromISOString } from 'io-ts-types';\n\nimport { CachedFileState, BLANK, BULK_APPLY, ColumnName, NONE } from './constants.js';\nimport { AttributeNameMap } from './mapColumnsToAttributes.js';\nimport { IdentifierNameMap } from './mapColumnsToIdentifiers.js';\nimport { ColumnNameMap } from './mapCsvColumnsToApi.js';\nimport { ParsedAttributeInput } from './parseAttributesFromString.js';\n\n/**\n * Shape of additional identifiers\n *\n * key of object is IdentifierType\n */\nexport const AttestedExtraIdentifiers = t.record(\n  t.string,\n  t.array(\n    t.intersection([\n      t.type({\n        /** Value of identifier */\n        value: t.string,\n      }),\n      t.partial({\n        /** Name of identifier - option for non-custom identifier types */\n        name: t.string,\n      }),\n    ]),\n  ),\n);\n\n/** Type override */\nexport type AttestedExtraIdentifiers = t.TypeOf<typeof AttestedExtraIdentifiers>;\n\nexport const PrivacyRequestInput = t.intersection([\n  t.type({\n    /** Email of user */\n    email: t.string,\n    /** Extra identifiers */\n    attestedExtraIdentifiers: AttestedExtraIdentifiers,\n    /** Core identifier for user */\n    coreIdentifier: t.string,\n    /** Action type being submitted  */\n    requestType: valuesOf(RequestAction),\n    /** Type of data subject */\n    subjectType: t.string,\n  }),\n  t.partial({\n    /** Country */\n    country: valuesOf(IsoCountryCode),\n    /** Country sub division */\n    countrySubDivision: valuesOf(IsoCountrySubdivisionCode),\n    /** Attribute inputs */\n    attributes: t.array(ParsedAttributeInput),\n    /** The status that the request should be created as */\n    status: valuesOf(CompletedRequestStatus),\n    /** The time that the request was created */\n    createdAt: DateFromISOString,\n    /** Data silo IDs to submit for */\n    dataSiloIds: t.array(t.string),\n    /** Language key to map to */\n    locale: valuesOf(LOCALE_KEY),\n  }),\n]);\n\n/** Type override */\nexport type PrivacyRequestInput = t.TypeOf<typeof PrivacyRequestInput>;\n\n/**\n * Transform the identifier value based on type\n *\n * @param identifierValue - Value of identifier\n * @param identifierType - Type of identifier\n * @param defaultPhoneCountryCode - Default country code for phone numbers\n * @returns Post-processed identifier\n */\nexport function normalizeIdentifierValue(\n  identifierValue: string,\n  identifierType: IdentifierType,\n  defaultPhoneCountryCode: string,\n): string {\n  // Lowercase email\n  if (identifierType === IdentifierType.Email) {\n    return identifierValue.toLowerCase();\n  }\n\n  // Normalize phone number\n  if (identifierType === IdentifierType.Phone) {\n    const normalized = identifierValue\n      .replace(NORMALIZE_PHONE_NUMBER, '')\n      .replace(/[()]/g, '')\n      .replace(/[–]/g, '')\n      .replace(/[:]/g, '')\n      .replace(/[‭‬]/g, '')\n      .replace(/[A-Za-z]/g, '');\n    return !normalized\n      ? ''\n      : normalized.startsWith('+')\n        ? normalized\n        : `+${defaultPhoneCountryCode}${normalized}`;\n  }\n  return identifierValue;\n}\n\n/**\n * Take the raw rows in a CSV upload, and map those rows to the request\n * input shape that can be passed to the Transcend API to submit a privacy\n * request.\n *\n * @param requestInputs - CSV of requests to be uploaded\n * @param state - The cached set of mapping values\n * @param options - Options\n * @returns [raw input, request input] list\n */\nexport function mapCsvRowsToRequestInputs(\n  requestInputs: ObjByString[],\n  state: PersistedState<typeof CachedFileState>,\n  {\n    columnNameMap,\n    identifierNameMap,\n    attributeNameMap,\n    requestAttributeKeys,\n    defaultPhoneCountryCode = '1', // US\n  }: {\n    /** Default country code */\n    defaultPhoneCountryCode?: string;\n    /** Mapping of column names */\n    columnNameMap: ColumnNameMap;\n    /** Mapping of identifier names */\n    identifierNameMap: IdentifierNameMap;\n    /** Mapping of attribute names */\n    attributeNameMap: AttributeNameMap;\n    /** Request attribute keys */\n    requestAttributeKeys: AttributeKey[];\n  },\n): [Record<string, string>, PrivacyRequestInput][] {\n  // map the CSV to request input\n  const getMappedName = (attribute: ColumnName): string =>\n    state.getValue('columnNames', attribute) || columnNameMap[attribute]!;\n  return requestInputs.map((input): [Record<string, string>, PrivacyRequestInput] => {\n    // The extra identifiers to upload for this request\n    const attestedExtraIdentifiers: AttestedExtraIdentifiers = {};\n    Object.entries(identifierNameMap)\n      // filter out skipped identifiers\n      .filter(([, columnName]) => columnName !== NONE)\n      .forEach(([identifierName, columnName]) => {\n        // Determine the identifier type being specified\n        const identifierType = Object.values(IdentifierType).includes(\n          identifierName as any, // eslint-disable-line @typescript-eslint/no-explicit-any\n        )\n          ? (identifierName as IdentifierType)\n          : IdentifierType.Custom;\n\n        // Only add the identifier if the value exists\n        const identifierValue = input[columnName];\n        if (identifierValue) {\n          const normalized = normalizeIdentifierValue(\n            identifierValue,\n            identifierType,\n            defaultPhoneCountryCode,\n          );\n          if (normalized) {\n            // Initialize\n            if (!attestedExtraIdentifiers[identifierType]) {\n              attestedExtraIdentifiers[identifierType] = [];\n            }\n\n            // Add the identifier\n            attestedExtraIdentifiers[identifierType]!.push({\n              value: normalized,\n              name: identifierName,\n            });\n          }\n        }\n      });\n\n    // The extra attributes to upload for this request\n    const attributes: ParsedAttributeInput[] = [];\n    Object.entries(attributeNameMap)\n      // filter out skipped attributes\n      .filter(([, columnName]) => columnName !== NONE)\n      .forEach(([attributeName, columnName]) => {\n        // Only add the identifier if the value exists\n        const attributeValueString = input[columnName];\n        if (attributeValueString) {\n          // Add the attribute\n          const isMulti =\n            requestAttributeKeys.find((attr) => attr.name === attributeName)?.type ===\n            'MULTI_SELECT';\n          attributes.push({\n            values: isMulti ? splitCsvToList(attributeValueString) : attributeValueString,\n            key: attributeName,\n          });\n        }\n      });\n\n    const requestTypeColumn = getMappedName(ColumnName.RequestType);\n    const dataSubjectTypeColumn = getMappedName(ColumnName.SubjectType);\n    return [\n      input,\n      {\n        email: input[getMappedName(ColumnName.Email)],\n        attestedExtraIdentifiers,\n        attributes,\n        coreIdentifier: input[getMappedName(ColumnName.CoreIdentifier)],\n        requestType:\n          requestTypeColumn === BULK_APPLY\n            ? state.getValue('requestTypeToRequestAction', BLANK)\n            : state.getValue('requestTypeToRequestAction', input[requestTypeColumn]),\n        subjectType:\n          dataSubjectTypeColumn === BULK_APPLY\n            ? state.getValue('subjectTypeToSubjectName', BLANK)\n            : state.getValue('subjectTypeToSubjectName', input[dataSubjectTypeColumn]),\n        ...(getMappedName(ColumnName.Locale) !== NONE && input[getMappedName(ColumnName.Locale)]\n          ? {\n              locale: state.getValue('languageToLocale', input[getMappedName(ColumnName.Locale)]),\n            }\n          : {}),\n        ...(getMappedName(ColumnName.Country) !== NONE && input[getMappedName(ColumnName.Country)]\n          ? {\n              country: state.getValue(\n                'regionToCountry',\n                input[getMappedName(ColumnName.Country)],\n              ) as IsoCountryCode,\n            }\n          : {}),\n        ...(getMappedName(ColumnName.CountrySubDivision) !== NONE &&\n        input[getMappedName(ColumnName.CountrySubDivision)]\n          ? {\n              countrySubDivision: state.getValue(\n                'regionToCountrySubDivision',\n                input[getMappedName(ColumnName.CountrySubDivision)],\n              ) as IsoCountrySubdivisionCode,\n            }\n          : {}),\n        ...(getMappedName(ColumnName.RequestStatus) !== NONE &&\n        state.getValue('statusToRequestStatus', input[getMappedName(ColumnName.RequestStatus)]) !==\n          NONE &&\n        input[getMappedName(ColumnName.RequestStatus)]\n          ? {\n              status: state.getValue(\n                'statusToRequestStatus',\n                input[getMappedName(ColumnName.RequestStatus)],\n              ) as CompletedRequestStatus,\n            }\n          : {}),\n        ...(getMappedName(ColumnName.CreatedAt) !== NONE &&\n        input[getMappedName(ColumnName.CreatedAt)]\n          ? {\n              createdAt: new Date(input[getMappedName(ColumnName.CreatedAt)]),\n            }\n          : {}),\n        ...(getMappedName(ColumnName.DataSiloIds) !== NONE &&\n        input[getMappedName(ColumnName.DataSiloIds)]\n          ? {\n              dataSiloIds: splitCsvToList(input[getMappedName(ColumnName.DataSiloIds)]),\n            }\n          : {}),\n      },\n    ];\n  });\n}\n","import type { PersistedState } from '@transcend-io/persisted-state';\nimport { INITIALIZER, type Initializer, makeGraphQLRequest } from '@transcend-io/sdk';\nimport type { GraphQLClient } from 'graphql-request';\nimport inquirer from 'inquirer';\n\nimport { logger } from '../../logger.js';\nimport { CachedFileState, IDENTIFIER_BLOCK_LIST } from './constants.js';\nimport { fuzzyMatchColumns } from './fuzzyMatchColumns.js';\n\n/**\n * Mapping from identifier name to request input parameter\n */\nexport type IdentifierNameMap = {\n  [k in string]: string;\n};\n\n/**\n * Create a mapping from the identifier names that can be included\n * at request submission, to the names of the columns that map to those\n * identifiers.\n *\n * @param client - GraphQL client\n * @param columnNames - The set of all column names\n * @param state - Cached state of this mapping\n * @returns Mapping from identifier name to column name\n */\nexport async function mapColumnsToIdentifiers(\n  client: GraphQLClient,\n  columnNames: string[],\n  state: PersistedState<typeof CachedFileState>,\n): Promise<IdentifierNameMap> {\n  // Grab the initializer\n  const { initializer } = await makeGraphQLRequest<{\n    /** Query response */\n    initializer: Initializer;\n  }>(client, INITIALIZER, { logger });\n\n  // Determine the columns that should be mapped\n  const columnQuestions = initializer.identifiers.filter(\n    ({ name }) => !state.getValue('identifierNames', name) && !IDENTIFIER_BLOCK_LIST.includes(name),\n  );\n\n  // Skip mapping when everything is mapped\n  const identifierNameMap =\n    columnQuestions.length === 0\n      ? {}\n      : // prompt questions to map columns\n        await inquirer.prompt<{\n          [k in string]: string;\n        }>(\n          columnQuestions.map(({ name }) => {\n            const matches = fuzzyMatchColumns(columnNames, name, false);\n            return {\n              name,\n              message: `Choose the column that will be used to map in the identifier: ${name}`,\n              type: 'list',\n              default: matches[0],\n              choices: matches,\n            };\n          }),\n        );\n  await Promise.all(\n    Object.entries(identifierNameMap).map(([k, v]) => state.setValue(v, 'identifierNames', k)),\n  );\n\n  return {\n    ...state.getValue('identifierNames'),\n    ...identifierNameMap,\n  };\n}\n","import type { PersistedState } from '@transcend-io/persisted-state';\nimport type { AttributeKey } from '@transcend-io/sdk';\nimport type { GraphQLClient } from 'graphql-request';\nimport inquirer from 'inquirer';\n\nimport { CachedFileState } from './constants.js';\nimport { fuzzyMatchColumns } from './fuzzyMatchColumns.js';\n\n/**\n * Mapping from attribute name to request input parameter\n */\nexport type AttributeNameMap = {\n  [k in string]: string;\n};\n\n/**\n * Create a mapping from the attributes names that can be included\n * at request submission, to the names of the columns that map to those\n * attributes.\n *\n * @param client - GraphQL client\n * @param columnNames - The set of all column names\n * @param state - Cached state of this mapping\n * @param requestAttributeKeys - Attribute keys to map\n * @returns Mapping from attributes name to column name\n */\nexport async function mapColumnsToAttributes(\n  client: GraphQLClient,\n  columnNames: string[],\n  state: PersistedState<typeof CachedFileState>,\n  requestAttributeKeys: AttributeKey[],\n): Promise<AttributeNameMap> {\n  // Determine the columns that should be mapped\n  const columnQuestions = requestAttributeKeys.filter(\n    ({ name }) => !state.getValue('attributeNames', name),\n  );\n\n  // Skip mapping when everything is mapped\n  const attributeNameMap =\n    columnQuestions.length === 0\n      ? {}\n      : // prompt questions to map columns\n        await inquirer.prompt<{\n          [k in string]: string;\n        }>(\n          columnQuestions.map(({ name }) => {\n            const matches = fuzzyMatchColumns(columnNames, name, false);\n            return {\n              name,\n              message: `Choose the column that will be used to map in the attribute: ${name}`,\n              type: 'list',\n              default: matches[0],\n              choices: matches,\n            };\n          }),\n        );\n  await Promise.all(\n    Object.entries(attributeNameMap).map(([k, v]) => state.setValue(v, 'attributeNames', k)),\n  );\n\n  return {\n    ...state.getValue('attributeNames'),\n    ...attributeNameMap,\n  };\n}\n","import { join } from 'node:path';\n\nimport { PersistedState } from '@transcend-io/persisted-state';\nimport {\n  buildTranscendGraphQLClient,\n  createSombraGotInstance,\n  fetchAllRequestAttributeKeys,\n} from '@transcend-io/sdk';\nimport { map } from '@transcend-io/utils';\nimport cliProgress from 'cli-progress';\n/* eslint-disable max-lines */\nimport colors from 'colors';\nimport * as t from 'io-ts';\nimport { uniq } from 'lodash-es';\n\nimport { DEFAULT_TRANSCEND_API } from '../../constants.js';\nimport { logger } from '../../logger.js';\nimport { CachedRequestState, CachedFileState } from './constants.js';\nimport { extractClientError } from './extractClientError.js';\nimport { filterRows } from './filterRows.js';\nimport { mapColumnsToAttributes } from './mapColumnsToAttributes.js';\nimport { mapColumnsToIdentifiers } from './mapColumnsToIdentifiers.js';\nimport { mapCsvColumnsToApi } from './mapCsvColumnsToApi.js';\nimport { mapCsvRowsToRequestInputs } from './mapCsvRowsToRequestInputs.js';\nimport { mapRequestEnumValues } from './mapRequestEnumValues.js';\nimport { parseAttributesFromString } from './parseAttributesFromString.js';\nimport { readCsv } from './readCsv.js';\nimport { submitPrivacyRequest } from './submitPrivacyRequest.js';\n\n/**\n * Upload a set of privacy requests from CSV\n *\n * @param options - Options\n */\nexport async function uploadPrivacyRequestsFromCsv({\n  cacheFilepath,\n  requestReceiptFolder,\n  file,\n  auth,\n  sombraAuth,\n  concurrency = 100,\n  defaultPhoneCountryCode = '1', // USA\n  transcendUrl = DEFAULT_TRANSCEND_API,\n  attributes = [],\n  emailIsVerified = true,\n  skipFilterStep = false,\n  skipSendingReceipt = true,\n  isTest = false,\n  isSilent = true,\n  debug = false,\n  dryRun = false,\n}: {\n  /** File to cache metadata about mapping of CSV shape to script */\n  cacheFilepath: string;\n  /** File where request receipts are stored */\n  requestReceiptFolder: string;\n  /** CSV file path */\n  file: string;\n  /** Transcend API key authentication */\n  auth: string;\n  /** Default country code for phone numbers */\n  defaultPhoneCountryCode?: string;\n  /** Concurrency to upload in */\n  concurrency?: number;\n  /** API URL for Transcend backend */\n  transcendUrl?: string;\n  /** Sombra API key authentication */\n  sombraAuth?: string;\n  /** Include debug logs */\n  debug?: boolean;\n  /** Skip the step where requests are filtered */\n  skipFilterStep?: boolean;\n  /** Whether test requests are being uploaded */\n  isTest?: boolean;\n  /** Whether requests are uploaded in silent mode */\n  isSilent?: boolean;\n  /** Whether to send the email receipt */\n  skipSendingReceipt?: boolean;\n  /** Whether the email was verified up front */\n  emailIsVerified?: boolean;\n  /** Attributes string pre-parse */\n  attributes?: string[];\n  /** Whether a dry run is happening */\n  dryRun?: boolean;\n}): Promise<void> {\n  // Time duration\n  const t0 = new Date().getTime();\n  // create a new progress bar instance and use shades_classic theme\n  const progressBar = new cliProgress.SingleBar({}, cliProgress.Presets.shades_classic);\n\n  // Parse out the extra attributes to apply to all requests uploaded\n  const parsedAttributes = parseAttributesFromString(attributes);\n\n  // Create a new state to persist the metadata that\n  // maps the request inputs to the Transcend API shape\n  const state = new PersistedState(cacheFilepath, CachedFileState, {\n    columnNames: {},\n    requestTypeToRequestAction: {},\n    subjectTypeToSubjectName: {},\n    languageToLocale: {},\n    statusToRequestStatus: {},\n    identifierNames: {},\n    attributeNames: {},\n    regionToCountrySubDivision: {},\n    regionToCountry: {},\n  });\n\n  // Create a new state file to store the requests from this run.\n  // `toISOString()` contains colons (e.g. 2026-07-06T04:33:12.345Z) which are\n  // illegal characters in Windows filenames, so strip them out to keep the\n  // auto-generated receipt filename cross-platform.\n  const requestCacheFile = join(\n    requestReceiptFolder,\n    `tr-request-upload-${new Date()\n      .toISOString()\n      .replace(/:/g, '-')}-${file.split('/').pop()}`.replace('.csv', '.json'),\n  );\n  const requestState = new PersistedState(requestCacheFile, CachedRequestState, {\n    successfulRequests: [],\n    duplicateRequests: [],\n    failingRequests: [],\n  });\n\n  // Create sombra instance to communicate with\n  const sombra = await createSombraGotInstance(transcendUrl, auth, {\n    logger,\n    sombraApiKey: sombraAuth,\n    sombraUrl: process.env.SOMBRA_URL,\n  });\n\n  // Read in the list of integration requests\n  const requestsList = readCsv(file, t.record(t.string, t.string));\n  const columnNames = uniq(requestsList.map((x) => Object.keys(x)).flat());\n\n  // Log out an example request\n  if (requestsList.length === 0) {\n    throw new Error(\n      'No Requests found in list! Ensure the first row of the CSV is a header and the rest are requests.',\n    );\n  }\n  if (debug) {\n    const firstRequest = requestsList[0];\n    logger.info(colors.magenta(`First request: ${JSON.stringify(firstRequest, null, 2)}`));\n  }\n  // Determine what rows in the CSV should be imported\n  // Choose columns that contain metadata to filter the requests\n  const filteredRequestList = skipFilterStep ? requestsList : await filterRows(requestsList);\n\n  // Build a GraphQL client\n  const client = buildTranscendGraphQLClient(transcendUrl, auth);\n  // Grab the request attributes\n  const requestAttributeKeys = await fetchAllRequestAttributeKeys(client, { logger });\n  // Determine the columns that should be mapped\n  const columnNameMap = await mapCsvColumnsToApi(columnNames, state);\n  const identifierNameMap = await mapColumnsToIdentifiers(client, columnNames, state);\n  const attributeNameMap = await mapColumnsToAttributes(\n    client,\n    columnNames,\n    state,\n    requestAttributeKeys,\n  );\n  await mapRequestEnumValues(client, filteredRequestList, {\n    state,\n    columnNameMap,\n  });\n\n  // map the CSV to request input\n  const requestInputs = mapCsvRowsToRequestInputs(filteredRequestList, state, {\n    defaultPhoneCountryCode,\n    columnNameMap,\n    identifierNameMap,\n    attributeNameMap,\n    requestAttributeKeys,\n  });\n\n  // start the progress bar with a total value of 200 and start value of 0\n  if (!debug) {\n    progressBar.start(requestInputs.length, 0);\n  }\n  let total = 0;\n  // Submit each request\n  await map(\n    requestInputs,\n    async ([rawRow, requestInput], ind) => {\n      // The identifier to log, only include personal data if debug mode is on\n      const requestLogId = debug\n        ? `email:${requestInput.email} | coreIdentifier:${requestInput.coreIdentifier}`\n        : `row:${ind.toString()}`;\n\n      if (debug) {\n        logger.info(\n          colors.magenta(\n            `[${ind + 1}/${requestInputs.length}] Importing: ${JSON.stringify(\n              requestInput,\n              null,\n              2,\n            )}`,\n          ),\n        );\n      }\n\n      // Skip on dry run\n      if (dryRun) {\n        logger.info(colors.magenta('Bailing out on dry run because dryRun is set'));\n        return;\n      }\n\n      try {\n        // Make the GraphQL request to submit the privacy request\n        const requestResponse = await submitPrivacyRequest(sombra, requestInput, {\n          details: `Uploaded by Transcend Cli: \"tr-request-upload\" : ${JSON.stringify(\n            rawRow,\n            null,\n            2,\n          )}`,\n          isTest,\n          emailIsVerified,\n          skipSendingReceipt,\n          isSilent,\n          additionalAttributes: parsedAttributes,\n        });\n\n        // Log success\n        if (debug) {\n          logger.info(\n            colors.green(\n              `[${ind + 1}/${\n                requestInputs.length\n              }] Successfully submitted the test data subject request: \"${requestLogId}\"`,\n            ),\n          );\n          logger.info(\n            colors.green(\n              `[${ind + 1}/${requestInputs.length}] View it at: \"${requestResponse.link}\"`,\n            ),\n          );\n        }\n\n        // Cache successful upload\n        const successfulRequests = requestState.getValue('successfulRequests');\n        successfulRequests.push({\n          id: requestResponse.id,\n          link: requestResponse.link,\n          rowIndex: ind,\n          coreIdentifier: requestResponse.coreIdentifier,\n          attemptedAt: new Date().toISOString(),\n        });\n        await requestState.setValue(successfulRequests, 'successfulRequests');\n      } catch (err) {\n        const msg = `${err.message} - ${JSON.stringify(err.response?.body, null, 2)}`;\n        const clientError = extractClientError(msg);\n\n        if (clientError === 'Client error: You have already made this request.') {\n          if (debug) {\n            logger.info(\n              colors.yellow(\n                `[${ind + 1}/${requestInputs.length}] Skipping request as it is a duplicate`,\n              ),\n            );\n          }\n          const duplicateRequests = requestState.getValue('duplicateRequests');\n          duplicateRequests.push({\n            coreIdentifier: requestInput.coreIdentifier,\n            rowIndex: ind,\n            attemptedAt: new Date().toISOString(),\n          });\n          await requestState.setValue(duplicateRequests, 'duplicateRequests');\n        } else {\n          const failingRequests = requestState.getValue('failingRequests');\n          failingRequests.push({\n            ...requestInput,\n            rowIndex: ind,\n            error: clientError || msg,\n            attemptedAt: new Date().toISOString(),\n          });\n          await requestState.setValue(failingRequests, 'failingRequests');\n          if (debug) {\n            logger.error(colors.red(clientError || msg));\n            logger.error(\n              colors.red(\n                `[${ind + 1}/${\n                  requestInputs.length\n                }] Failed to submit request for: \"${requestLogId}\"`,\n              ),\n            );\n          }\n        }\n      }\n\n      total += 1;\n      if (!debug) {\n        progressBar.update(total);\n      }\n    },\n    {\n      concurrency,\n    },\n  );\n\n  progressBar.stop();\n  const t1 = new Date().getTime();\n  const totalTime = t1 - t0;\n\n  // Log completion time\n  logger.info(colors.green(`Completed upload in \"${totalTime / 1000}\" seconds.`));\n\n  // Log duplicates\n  if (requestState.getValue('duplicateRequests').length > 0) {\n    logger.info(\n      colors.yellow(\n        `Encountered \"${requestState.getValue('duplicateRequests').length}\" duplicate requests. ` +\n          `See \"${requestCacheFile}\" to review the core identifiers for these requests.`,\n      ),\n    );\n  }\n\n  // Log errors\n  if (requestState.getValue('failingRequests').length > 0) {\n    logger.error(\n      colors.red(\n        `Encountered \"${requestState.getValue('failingRequests').length}\" errors. ` +\n          `See \"${requestCacheFile}\" to review the error messages and inputs.`,\n      ),\n    );\n    process.exit(1);\n  }\n}\n/* eslint-enable max-lines */\n"],"mappings":"kzCAcA,eAAsB,EACpB,EACA,EACA,EACoC,CACpC,EAAS,eAAe,eAAgB,EAAmB,CAE3D,IAAM,EAAS,EAAU,IAAK,GAAS,GAAQ,UAAU,CAAC,OAAQ,GAAU,CAAC,EAAM,GAAO,CAC1F,GAAI,EAAO,SAAW,EACpB,OAAO,EAET,IAAM,EAAS,MAAM,EAAS,OAC5B,EAAO,IAAK,IAAW,CACrB,KAAM,EACN,QAAS,iBAAiB,IAC1B,KAAM,eACN,QAAS,EAAgB,KAAM,GAAM,EAAY,EAAO,EAAE,CAAC,CAC3D,QAAS,EAA2B,IACjC,EAEG,EAAgB,OAAQ,GAAM,OAAO,GAAM,UAAY,EAAY,EAAO,EAAE,CAAC,CAD7E,EAEP,EAAE,CACJ,CACD,MAAO,CACL,GAAG,EACH,GAAG,EAAM,EAAS,GAChB,OAAO,GAAM,SAAY,EAAgB,OAAO,OAAO,EAAE,CAAC,GAC3D,CACF,CChCH,SAAgB,EAAyB,EAAqB,EAA8B,CAC1F,OAAO,EAAK,EAAK,IAAK,GAAQ,EAAI,IAAe,GAAG,CAAC,MAAM,CAAC,CCK9D,eAAsB,EAAW,EAA6C,CAE5E,IAAM,EAAc,EAAK,EAAK,IAAK,GAAM,OAAO,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAG5D,EAAe,EACf,EAAgB,GAGpB,KAAO,GAAe,CAGpB,GAAM,CAAE,oBAAqB,MAAM,EAAS,OAGzC,CACD,CACE,KAAM,mBAEN,QAAS,mGAAmG,EAAa,OAAO,QAChI,KAAM,OACN,QAAS,EACT,QAAS,CAAC,EAAM,GAAG,EAAY,CAChC,CACF,CAAC,CAIF,GADA,EAAgB,IAAS,EACrB,EAAe,CACjB,IAAM,EAAU,EAAyB,EAAc,EAAiB,CAElE,CAAE,gBAAiB,MAAM,EAAS,OAGrC,CACD,CACE,KAAM,eACN,QAAS,gCACT,KAAM,WACN,QAAS,EACT,QAAS,EACV,CACF,CAAC,CAEF,EAAe,EAAa,OAAQ,GAClC,EAAa,SAAS,EAAQ,GAAkB,CACjD,EAKL,OADA,EAAO,KAAK,EAAO,QAAQ,aAAa,EAAa,OAAO,WAAW,CAAC,CACjE,EC7CT,eAAsB,EACpB,EACA,EACwB,CAExB,IAAM,EAAkB,EAAU,EAAW,CAAC,OAC3C,GAAS,CAAC,EAAM,SAAS,cAAe,EAAK,CAC/C,CAGK,EACJ,EAAgB,SAAW,EACvB,EAAE,CAEF,MAAM,EAAS,OAGb,EAAgB,IAAK,GAAS,CAC5B,IAAM,EAAQ,EAAU,EAAK,QAAQ,aAAc,GAAG,CAAC,CACjD,EAAU,EACd,EACA,EACA,EAAY,GACZ,CAAC,CAAC,EAAkB,GACrB,CACD,MAAO,CACL,OACA,QAAS,4DAA4D,IACrE,KAAM,OACN,QAAS,EAAQ,GACjB,QAAS,EACV,EACD,CACH,CAGP,OADA,MAAM,QAAQ,IAAI,EAAW,EAAc,CAAC,KAAK,CAAC,EAAG,KAAO,EAAM,SAAS,EAAG,cAAe,EAAE,CAAC,CAAC,CAC1F,EChCT,eAAsB,EACpB,EACA,EACA,CACE,QACA,iBAOa,CAEf,IAAM,EAAiB,GACrB,EAAM,SAAS,cAAe,EAAU,EAAI,EAAc,GAGtD,CAAE,oBAAqB,MAAM,EAGhC,EAAQ,EAAe,CAAE,SAAQ,CAAC,CAGrC,EAAO,KAAK,EAAO,QAAQ,oDAAoD,CAAC,CAChF,IAAM,EAA+D,MAAM,EACzE,EAAyB,EAAU,EAAA,cAAqC,CAAC,CACzE,OAAO,OAAO,EAAc,CAC5B,EAAM,SAAS,6BAA6B,CAC7C,CACD,MAAM,EAAM,SAAS,EAA4B,6BAA6B,CAG9E,EAAO,KAAK,EAAO,QAAQ,6CAA6C,CAAC,CACzE,IAAM,EAAsD,MAAM,EAChE,EAAyB,EAAU,EAAA,cAAqC,CAAC,CACzE,EAAiB,KAAK,CAAE,UAAW,EAAK,CACxC,EAAM,SAAS,2BAA2B,CAC3C,CACD,MAAM,EAAM,SAAS,EAA0B,2BAA2B,CAG1E,EAAO,KAAK,EAAO,QAAQ,4CAA4C,CAAC,CACxE,IAAM,EAAmD,MAAM,EAC7D,EAAyB,EAAU,EAAA,SAAgC,CAAC,CACpE,OAAO,OAAO,EAAW,CACzB,EAAM,SAAS,mBAAmB,CACnC,CACD,MAAM,EAAM,SAAS,EAAkB,mBAAmB,CAC1D,EAAO,KAAK,EAAO,QAAQ,oDAAoD,CAAC,CAGhF,EAAO,KAAK,EAAO,QAAQ,oDAAoD,CAAC,CAChF,IAAM,EAAsB,EAAA,gBAAuC,CAC7D,EAGJ,IAAA,SACI,EAAE,CACF,MAAM,EACJ,EAAyB,EAAU,EAAoB,CACvD,CAAC,GAAG,OAAO,OAAO,EAAuB,CAAE,EAAK,CAChD,EAAM,SAAS,wBAAwB,CACxC,CACP,MAAM,EAAM,SAAS,EAAuB,wBAAwB,CAGpE,EAAO,KAAK,EAAO,QAAQ,6CAA6C,CAAC,CACzE,IAAM,EAAgB,EAAA,UAAiC,CACjD,EAGJ,IAAA,SACI,EAAE,CACF,MAAM,EACJ,EAAyB,EAAU,EAAc,CACjD,CAAC,GAAG,OAAO,OAAO,EAAe,CAAE,EAAK,CACxC,EAAM,SAAS,kBAAkB,CAClC,CACP,MAAM,EAAM,SAAS,EAAiB,kBAAkB,CAGxD,EAAO,KAAK,EAAO,QAAQ,0DAA0D,CAAC,CACtF,IAAM,EAA2B,EAAA,qBAA4C,CACvE,EAGJ,IAAA,SACI,EAAE,CACF,MAAM,EACJ,EAAyB,EAAU,EAAyB,CAC5D,CAAC,GAAG,OAAO,OAAO,EAA0B,CAAE,EAAK,CACnD,EAAM,SAAS,6BAA6B,CAC7C,CACP,MAAM,EAAM,SAAS,EAA4B,6BAA6B,CC7FhF,MAAa,EAA2B,EAAE,OACxC,EAAE,OACF,EAAE,MACA,EAAE,aAAa,CACb,EAAE,KAAK,CAEL,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,KAAM,EAAE,OACT,CAAC,CACH,CAAC,CACH,CACF,CAKY,EAAsB,EAAE,aAAa,CAChD,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,yBAA0B,EAE1B,eAAgB,EAAE,OAElB,YAAa,EAAS,EAAc,CAEpC,YAAa,EAAE,OAChB,CAAC,CACF,EAAE,QAAQ,CAER,QAAS,EAAS,EAAe,CAEjC,mBAAoB,EAAS,EAA0B,CAEvD,WAAY,EAAE,MAAM,EAAqB,CAEzC,OAAQ,EAAS,EAAuB,CAExC,UAAW,EAEX,YAAa,EAAE,MAAM,EAAE,OAAO,CAE9B,OAAQ,EAAS,EAAW,CAC7B,CAAC,CACH,CAAC,CAaF,SAAgB,EACd,EACA,EACA,EACQ,CAER,GAAI,IAAmB,EAAe,MACpC,OAAO,EAAgB,aAAa,CAItC,GAAI,IAAmB,EAAe,MAAO,CAC3C,IAAM,EAAa,EAChB,QAAQ,EAAwB,GAAG,CACnC,QAAQ,QAAS,GAAG,CACpB,QAAQ,OAAQ,GAAG,CACnB,QAAQ,OAAQ,GAAG,CACnB,QAAQ,QAAS,GAAG,CACpB,QAAQ,YAAa,GAAG,CAC3B,OAAQ,EAEJ,EAAW,WAAW,IAAI,CACxB,EACA,IAAI,IAA0B,IAHhC,GAKN,OAAO,EAaT,SAAgB,EACd,EACA,EACA,CACE,gBACA,oBACA,mBACA,uBACA,0BAA0B,KAaqB,CAEjD,IAAM,EAAiB,GACrB,EAAM,SAAS,cAAe,EAAU,EAAI,EAAc,GAC5D,OAAO,EAAc,IAAK,GAAyD,CAEjF,IAAM,EAAqD,EAAE,CAC7D,OAAO,QAAQ,EAAkB,CAE9B,QAAQ,EAAG,KAAgB,IAAe,EAAK,CAC/C,SAAS,CAAC,EAAgB,KAAgB,CAEzC,IAAM,EAAiB,OAAO,OAAO,EAAe,CAAC,SACnD,EACD,CACI,EACD,EAAe,OAGb,EAAkB,EAAM,GAC9B,GAAI,EAAiB,CACnB,IAAM,EAAa,EACjB,EACA,EACA,EACD,CACG,IAEG,EAAyB,KAC5B,EAAyB,GAAkB,EAAE,EAI/C,EAAyB,GAAiB,KAAK,CAC7C,MAAO,EACP,KAAM,EACP,CAAC,IAGN,CAGJ,IAAM,EAAqC,EAAE,CAC7C,OAAO,QAAQ,EAAiB,CAE7B,QAAQ,EAAG,KAAgB,IAAe,EAAK,CAC/C,SAAS,CAAC,EAAe,KAAgB,CAExC,IAAM,EAAuB,EAAM,GACnC,GAAI,EAAsB,CAExB,IAAM,EACJ,EAAqB,KAAM,GAAS,EAAK,OAAS,EAAc,EAAE,OAClE,eACF,EAAW,KAAK,CACd,OAAQ,EAAU,EAAe,EAAqB,CAAG,EACzD,IAAK,EACN,CAAC,GAEJ,CAEJ,IAAM,EAAoB,EAAA,cAAqC,CACzD,EAAwB,EAAA,cAAqC,CACnE,MAAO,CACL,EACA,CACE,MAAO,EAAM,EAAA,QAA+B,EAC5C,2BACA,aACA,eAAgB,EAAM,EAAA,iBAAwC,EAC9D,YACE,IAAA,4BACI,EAAM,SAAS,6BAA8B,EAAM,CACnD,EAAM,SAAS,6BAA8B,EAAM,GAAmB,CAC5E,YACE,IAAA,4BACI,EAAM,SAAS,2BAA4B,EAAM,CACjD,EAAM,SAAS,2BAA4B,EAAM,GAAuB,CAC9E,GAAI,EAAA,SAAgC,GAAA,UAAa,EAAM,EAAA,SAAgC,EACnF,CACE,OAAQ,EAAM,SAAS,mBAAoB,EAAM,EAAA,SAAgC,EAAE,CACpF,CACD,EAAE,CACN,GAAI,EAAA,UAAiC,GAAA,UAAa,EAAM,EAAA,UAAiC,EACrF,CACE,QAAS,EAAM,SACb,kBACA,EAAM,EAAA,UAAiC,EACxC,CACF,CACD,EAAE,CACN,GAAI,EAAA,qBAA4C,GAAA,UAChD,EAAM,EAAA,qBAA4C,EAC9C,CACE,mBAAoB,EAAM,SACxB,6BACA,EAAM,EAAA,qBAA4C,EACnD,CACF,CACD,EAAE,CACN,GAAI,EAAA,gBAAuC,GAAA,UAC3C,EAAM,SAAS,wBAAyB,EAAM,EAAA,gBAAuC,EAAE,GAAA,UAEvF,EAAM,EAAA,gBAAuC,EACzC,CACE,OAAQ,EAAM,SACZ,wBACA,EAAM,EAAA,gBAAuC,EAC9C,CACF,CACD,EAAE,CACN,GAAI,EAAA,YAAmC,GAAA,UACvC,EAAM,EAAA,YAAmC,EACrC,CACE,UAAW,IAAI,KAAK,EAAM,EAAA,YAAmC,EAAE,CAChE,CACD,EAAE,CACN,GAAI,EAAA,cAAqC,GAAA,UACzC,EAAM,EAAA,cAAqC,EACvC,CACE,YAAa,EAAe,EAAM,EAAA,cAAqC,EAAE,CAC1E,CACD,EAAE,CACP,CACF,EACD,CCtPJ,eAAsB,EACpB,EACA,EACA,EAC4B,CAE5B,GAAM,CAAE,eAAgB,MAAM,EAG3B,EAAQ,EAAa,CAAE,SAAQ,CAAC,CAG7B,EAAkB,EAAY,YAAY,QAC7C,CAAE,UAAW,CAAC,EAAM,SAAS,kBAAmB,EAAK,EAAI,CAAC,EAAsB,SAAS,EAAK,CAChG,CAGK,EACJ,EAAgB,SAAW,EACvB,EAAE,CAEF,MAAM,EAAS,OAGb,EAAgB,KAAK,CAAE,UAAW,CAChC,IAAM,EAAU,EAAkB,EAAa,EAAM,GAAM,CAC3D,MAAO,CACL,OACA,QAAS,iEAAiE,IAC1E,KAAM,OACN,QAAS,EAAQ,GACjB,QAAS,EACV,EACD,CACH,CAKP,OAJA,MAAM,QAAQ,IACZ,OAAO,QAAQ,EAAkB,CAAC,KAAK,CAAC,EAAG,KAAO,EAAM,SAAS,EAAG,kBAAmB,EAAE,CAAC,CAC3F,CAEM,CACL,GAAG,EAAM,SAAS,kBAAkB,CACpC,GAAG,EACJ,CC1CH,eAAsB,EACpB,EACA,EACA,EACA,EAC2B,CAE3B,IAAM,EAAkB,EAAqB,QAC1C,CAAE,UAAW,CAAC,EAAM,SAAS,iBAAkB,EAAK,CACtD,CAGK,EACJ,EAAgB,SAAW,EACvB,EAAE,CAEF,MAAM,EAAS,OAGb,EAAgB,KAAK,CAAE,UAAW,CAChC,IAAM,EAAU,EAAkB,EAAa,EAAM,GAAM,CAC3D,MAAO,CACL,OACA,QAAS,gEAAgE,IACzE,KAAM,OACN,QAAS,EAAQ,GACjB,QAAS,EACV,EACD,CACH,CAKP,OAJA,MAAM,QAAQ,IACZ,OAAO,QAAQ,EAAiB,CAAC,KAAK,CAAC,EAAG,KAAO,EAAM,SAAS,EAAG,iBAAkB,EAAE,CAAC,CACzF,CAEM,CACL,GAAG,EAAM,SAAS,iBAAiB,CACnC,GAAG,EACJ,CC7BH,eAAsB,EAA6B,CACjD,gBACA,uBACA,OACA,OACA,aACA,cAAc,IACd,0BAA0B,IAC1B,eAAe,EACf,aAAa,EAAE,CACf,kBAAkB,GAClB,iBAAiB,GACjB,qBAAqB,GACrB,SAAS,GACT,WAAW,GACX,QAAQ,GACR,SAAS,IAkCO,CAEhB,IAAM,EAAK,IAAI,MAAM,CAAC,SAAS,CAEzB,EAAc,IAAI,EAAY,UAAU,EAAE,CAAE,EAAY,QAAQ,eAAe,CAG/E,EAAmB,EAA0B,EAAW,CAIxD,EAAQ,IAAI,EAAe,EAAe,EAAiB,CAC/D,YAAa,EAAE,CACf,2BAA4B,EAAE,CAC9B,yBAA0B,EAAE,CAC5B,iBAAkB,EAAE,CACpB,sBAAuB,EAAE,CACzB,gBAAiB,EAAE,CACnB,eAAgB,EAAE,CAClB,2BAA4B,EAAE,CAC9B,gBAAiB,EAAE,CACpB,CAAC,CAMI,EAAmB,GACvB,EACA,qBAAqB,IAAI,MAAM,CAC5B,aAAa,CACb,QAAQ,KAAM,IAAI,CAAC,GAAG,EAAK,MAAM,IAAI,CAAC,KAAK,GAAG,QAAQ,OAAQ,QAAQ,CAC1E,CACK,EAAe,IAAI,EAAe,EAAkB,EAAoB,CAC5E,mBAAoB,EAAE,CACtB,kBAAmB,EAAE,CACrB,gBAAiB,EAAE,CACpB,CAAC,CAGI,EAAS,MAAM,GAAwB,EAAc,EAAM,CAC/D,SACA,aAAc,EACd,UAAW,QAAQ,IAAI,WACxB,CAAC,CAGI,EAAe,EAAQ,EAAM,EAAE,OAAO,EAAE,OAAQ,EAAE,OAAO,CAAC,CAC1D,EAAc,EAAK,EAAa,IAAK,GAAM,OAAO,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAGxE,GAAI,EAAa,SAAW,EAC1B,MAAU,MACR,oGACD,CAEH,GAAI,EAAO,CACT,IAAM,EAAe,EAAa,GAClC,EAAO,KAAK,EAAO,QAAQ,kBAAkB,KAAK,UAAU,EAAc,KAAM,EAAE,GAAG,CAAC,CAIxF,IAAM,EAAsB,EAAiB,EAAe,MAAM,EAAW,EAAa,CAGpF,EAAS,EAA4B,EAAc,EAAK,CAExD,EAAuB,MAAM,GAA6B,EAAQ,CAAE,SAAQ,CAAC,CAE7E,EAAgB,MAAM,EAAmB,EAAa,EAAM,CAC5D,EAAoB,MAAM,EAAwB,EAAQ,EAAa,EAAM,CAC7E,EAAmB,MAAM,EAC7B,EACA,EACA,EACA,EACD,CACD,MAAM,EAAqB,EAAQ,EAAqB,CACtD,QACA,gBACD,CAAC,CAGF,IAAM,EAAgB,EAA0B,EAAqB,EAAO,CAC1E,0BACA,gBACA,oBACA,mBACA,uBACD,CAAC,CAGG,GACH,EAAY,MAAM,EAAc,OAAQ,EAAE,CAE5C,IAAI,EAAQ,EAEZ,MAAM,GACJ,EACA,MAAO,CAAC,EAAQ,GAAe,IAAQ,CAErC,IAAM,EAAe,EACjB,SAAS,EAAa,MAAM,oBAAoB,EAAa,iBAC7D,OAAO,EAAI,UAAU,GAezB,GAbI,GACF,EAAO,KACL,EAAO,QACL,IAAI,EAAM,EAAE,GAAG,EAAc,OAAO,eAAe,KAAK,UACtD,EACA,KACA,EACD,GACF,CACF,CAIC,EAAQ,CACV,EAAO,KAAK,EAAO,QAAQ,+CAA+C,CAAC,CAC3E,OAGF,GAAI,CAEF,IAAM,EAAkB,MAAM,EAAqB,EAAQ,EAAc,CACvE,QAAS,oDAAoD,KAAK,UAChE,EACA,KACA,EACD,GACD,SACA,kBACA,qBACA,WACA,qBAAsB,EACvB,CAAC,CAGE,IACF,EAAO,KACL,EAAO,MACL,IAAI,EAAM,EAAE,GACV,EAAc,OACf,2DAA2D,EAAa,GAC1E,CACF,CACD,EAAO,KACL,EAAO,MACL,IAAI,EAAM,EAAE,GAAG,EAAc,OAAO,iBAAiB,EAAgB,KAAK,GAC3E,CACF,EAIH,IAAM,EAAqB,EAAa,SAAS,qBAAqB,CACtE,EAAmB,KAAK,CACtB,GAAI,EAAgB,GACpB,KAAM,EAAgB,KACtB,SAAU,EACV,eAAgB,EAAgB,eAChC,YAAa,IAAI,MAAM,CAAC,aAAa,CACtC,CAAC,CACF,MAAM,EAAa,SAAS,EAAoB,qBAAqB,OAC9D,EAAK,CACZ,IAAM,EAAM,GAAG,EAAI,QAAQ,KAAK,KAAK,UAAU,EAAI,UAAU,KAAM,KAAM,EAAE,GACrE,EAAc,EAAmB,EAAI,CAE3C,GAAI,IAAgB,oDAAqD,CACnE,GACF,EAAO,KACL,EAAO,OACL,IAAI,EAAM,EAAE,GAAG,EAAc,OAAO,yCACrC,CACF,CAEH,IAAM,EAAoB,EAAa,SAAS,oBAAoB,CACpE,EAAkB,KAAK,CACrB,eAAgB,EAAa,eAC7B,SAAU,EACV,YAAa,IAAI,MAAM,CAAC,aAAa,CACtC,CAAC,CACF,MAAM,EAAa,SAAS,EAAmB,oBAAoB,KAC9D,CACL,IAAM,EAAkB,EAAa,SAAS,kBAAkB,CAChE,EAAgB,KAAK,CACnB,GAAG,EACH,SAAU,EACV,MAAO,GAAe,EACtB,YAAa,IAAI,MAAM,CAAC,aAAa,CACtC,CAAC,CACF,MAAM,EAAa,SAAS,EAAiB,kBAAkB,CAC3D,IACF,EAAO,MAAM,EAAO,IAAI,GAAe,EAAI,CAAC,CAC5C,EAAO,MACL,EAAO,IACL,IAAI,EAAM,EAAE,GACV,EAAc,OACf,mCAAmC,EAAa,GAClD,CACF,GAKP,GAAS,EACJ,GACH,EAAY,OAAO,EAAM,EAG7B,CACE,cACD,CACF,CAED,EAAY,MAAM,CAElB,IAAM,EADK,IAAI,MAAM,CAAC,SACF,CAAG,EAGvB,EAAO,KAAK,EAAO,MAAM,wBAAwB,EAAY,IAAK,YAAY,CAAC,CAG3E,EAAa,SAAS,oBAAoB,CAAC,OAAS,GACtD,EAAO,KACL,EAAO,OACL,gBAAgB,EAAa,SAAS,oBAAoB,CAAC,OAAO,6BACxD,EAAiB,sDAC5B,CACF,CAIC,EAAa,SAAS,kBAAkB,CAAC,OAAS,IACpD,EAAO,MACL,EAAO,IACL,gBAAgB,EAAa,SAAS,kBAAkB,CAAC,OAAO,iBACtD,EAAiB,4CAC5B,CACF,CACD,QAAQ,KAAK,EAAE"}