@transcend-io/cli 12.1.5 → 13.0.1

package/dist/codecs-CfcaFoZR.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"codecs-CfcaFoZR.mjs","names":[],"sources":["../src/codecs.ts"],"sourcesContent":["import {\n  InitialViewState,\n  BrowserLanguage,\n  UserPrivacySignalEnum,\n  OnConsentExpiry,\n} from '@transcend-io/airgap.js-types';\nimport { LOCALE_KEY } from '@transcend-io/internationalization';\nimport {\n  DataCategoryType,\n  ConsentBundleType,\n  EnricherType,\n  ProcessingPurpose,\n  RequestAction,\n  ComparisonOperator,\n  RequestActionObjectResolver,\n  AssessmentSyncColumn,\n  RetentionScheduleType,\n  AssessmentQuestionType,\n  DataFlowScope,\n  PromptAVendorEmailSendType,\n  RetentionScheduleOperation,\n  AssessmentsDisplayLogicAction,\n  DefaultConsentOption,\n  LogicOperator,\n  ConsentPrecedenceOption,\n  AssessmentSyncModel,\n  AssessmentQuestionSubType,\n  IsoCountryCode,\n  BrowserTimeZone,\n  IsoCountrySubdivisionCode,\n  ConsentTrackerStatus,\n  AttributeKeyType,\n  PromptAVendorEmailCompletionLinkType,\n  RegionsOperator,\n  UnknownRequestPolicy,\n  TelemetryPartitionStrategy,\n  SignedIabAgreementOption,\n  RegionDetectionMethod,\n  PreflightRequestStatus,\n  AttributeSupportedResourceType,\n  SubDataPointDataSubCategoryGuessStatus,\n  CodePackageType,\n  ActionItemPriorityOverride,\n  ActionItemCode,\n  ScopeName,\n  TranscendProduct,\n  PrivacyCenterComponentStyles,\n  PrivacyCenterTextStyles,\n  PreferenceStoreAuthLevel,\n  ConfigurableColorPaletteColor,\n  PrivacyCenterFooterLayout,\n  AssessmentFormTemplateStatus,\n  AssessmentFormStatus,\n  AssessmentFormTemplateSource,\n  UnstructuredSubDataPointRecommendationStatus,\n  PreferenceTopicType,\n  Controllership,\n  RetentionType,\n  DataProtectionImpactAssessmentStatus,\n  WorkflowConfigVisibility,\n  WorkflowConfigType,\n  CollectDataSubjectRegions,\n  ConsentThemeInput,\n  ConsentVariantInput,\n  PolicyType,\n} from '@transcend-io/privacy-types';\nimport { applyEnum, valuesOf } from '@transcend-io/type-utils';\n// eslint-disable-next-line eslint-comments/disable-enable-pair\n/* eslint-disable max-lines */\nimport * as t from 'io-ts';\n\n/**\n * Input to define email templates that can be used to communicate to end-users\n * about the status of their requests\n *\n * @see https://docs.transcend.io/docs/privacy-requests/configuring-requests/email-templates\n */\nexport const TemplateInput = t.type({\n  /** The title of the template */\n  title: t.string,\n});\n\n/** Type override */\nexport type TemplateInput = t.TypeOf<typeof TemplateInput>;\n\nexport const WebhookHeader = t.intersection([\n  t.type({\n    /** The name of the header to set. */\n    name: t.string,\n    /** The value of the header. */\n    value: t.string,\n  }),\n  t.partial({\n    /** The header contains a secret */\n    isSecret: t.boolean,\n  }),\n]);\n\n/** Type override */\nexport type WebhookHeader = t.TypeOf<typeof WebhookHeader>;\n\n/**\n * Input to define API keys that may be shared across data silos\n * in the data map. When creating new data silos through the yaml\n * cli, it is possible to specify which API key should be associated\n * with the newly created data silo.\n *\n * @see https://docs.transcend.io/docs/authentication\n */\nexport const ApiKeyInput = t.type({\n  /** The display title of the enricher */\n  title: t.string,\n});\n\n/** Type override */\nexport type ApiKeyInput = t.TypeOf<typeof ApiKeyInput>;\n\n/**\n * Input to define teams in Transcend\n * Users belong to teams and teams can be assigned to various resources\n *\n * @see https://docs.transcend.io/docs/security/access-control\n */\nexport const TeamInput = t.intersection([\n  t.type({\n    /** The display name of the team */\n    name: t.string,\n    /** Team description */\n    description: t.string,\n  }),\n  t.partial({\n    /** SSO department for automated provisioning */\n    'sso-department': t.string,\n    /** SSO group name for automated provisioning */\n    'sso-group': t.string,\n    /** SSO title mapping for automated provisioning */\n    'sso-title': t.string,\n    /** Parent organization team name to link this team to */\n    'parent-team-name': t.string,\n    /** List of user emails on the team */\n    users: t.array(t.string),\n    /** List of scopes that the team should have */\n    scopes: t.array(valuesOf(ScopeName)),\n  }),\n]);\n\n/** Type override */\nexport type TeamInput = t.TypeOf<typeof TeamInput>;\n\n/**\n * Input to define a preflight check (formerly called an \"enricher\")\n *\n * Define preflight check webhooks that will be executed prior to privacy\n * request workflows. Some examples may include:\n *  - identity enrichment: look up additional identifiers for that user.\n *                         i.e. map an email address to a user ID\n *  - fraud check: auto-cancel requests if the user is flagged for fraudulent behavior\n *  - customer check: auto-cancel request for some custom business criteria\n *\n * @see https://docs.transcend.io/docs/identity-enrichment\n */\nexport const EnricherInput = t.intersection([\n  t.type({\n    /** The display title of the preflight check */\n    title: t.string,\n\n    /**\n     * The names of the identifiers that can be resolved by this preflight check.\n     * i.e. email -> [userId, phone, advertisingId]\n     */\n    'output-identifiers': t.array(t.string),\n  }),\n  t.partial({\n    /** Internal description for why the preflight check is needed */\n    description: t.string,\n    /** The URL of the preflight check webhook */\n    url: t.string,\n    /** The type of preflight check */\n    type: valuesOf(EnricherType),\n    /**\n     * The name of the identifier that will be the input to this preflight check.\n     * Whenever a privacy request contains this identifier, the webhook will\n     * be called with the value of that identifier as input\n     */\n    'input-identifier': t.string,\n    /**\n     * A regular expression that can be used to match on for cancellation\n     */\n    testRegex: t.string,\n    /**\n     * For looker integration - the title of the looker query to run\n     */\n    lookerQueryTitle: t.string,\n    /**\n     * The duration (in ms) that the preflight check should take to execute.\n     */\n    expirationDuration: t.number,\n    /**\n     * The status that the preflight check should transfer to when condition is met.\n     */\n    transitionRequestStatus: valuesOf(PreflightRequestStatus),\n    /**\n     * For twilio integration - the phone numbers that can be used to send text codes\n     */\n    phoneNumbers: t.array(t.string),\n    /** The list of regions that should trigger the preflight check */\n    regionList: t.array(valuesOf({ ...IsoCountryCode, ...IsoCountrySubdivisionCode })),\n    /**\n     * Specify which data subjects the preflight check should run for\n     */\n    'data-subjects': t.array(t.string),\n    /** Headers to include in the webhook */\n    headers: t.array(WebhookHeader),\n    /** The privacy actions that the preflight check should run against */\n    'privacy-actions': t.array(valuesOf(RequestAction)),\n  }),\n]);\n\n/** Type override */\nexport type EnricherInput = t.TypeOf<typeof EnricherInput>;\n\n/** Alias for {@link EnricherInput} */\nexport const PreflightInput = EnricherInput;\n\n/** Type override */\nexport type PreflightInput = EnricherInput;\n\n/**\n * The processing purpose for a field\n */\nexport const ProcessingPurposePreviewInput = t.intersection([\n  t.type({\n    /** The parent purpose */\n    purpose: valuesOf(ProcessingPurpose),\n  }),\n  t.partial({\n    /** User-defined name for this processing purpose sub category */\n    name: t.string,\n  }),\n]);\n\n/** Type override */\nexport type ProcessingPurposePreviewInput = t.TypeOf<typeof ProcessingPurposePreviewInput>;\n\n/**\n * The data category for a field\n */\nexport const DataCategoryPreviewInput = t.intersection([\n  t.type({\n    /** The parent category */\n    category: valuesOf(DataCategoryType),\n  }),\n  t.partial({\n    /** User-defined name for this sub category */\n    name: t.string,\n  }),\n]);\n\n/** Type override */\nexport type DataCategoryPreviewInput = t.TypeOf<typeof DataCategoryPreviewInput>;\n\n/**\n * A guessed data category from the content classifier\n */\nexport const DataCategoryGuessInput = t.intersection([\n  t.type({\n    /** The parent category */\n    category: DataCategoryPreviewInput,\n    /** Status of guess */\n    status: valuesOf(SubDataPointDataSubCategoryGuessStatus),\n    /** Confidence level of guess */\n    confidence: t.number,\n  }),\n  t.partial({\n    /** classifier version that produced the guess */\n    classifierVersion: t.number,\n  }),\n]);\n\n/** Type override */\nexport type DataCategoryGuessInput = t.TypeOf<typeof DataCategoryGuessInput>;\n\n/**\n * A guessed data category from the content classifier\n */\nexport const DataCategoryRecommendationInput = t.intersection([\n  t.type({\n    /** The parent category */\n    category: DataCategoryPreviewInput,\n    /** Status of guess */\n    status: valuesOf(UnstructuredSubDataPointRecommendationStatus),\n    /** Confidence level of guess */\n    confidence: t.number,\n  }),\n  t.partial({\n    /** classifier version that produced the guess */\n    classifierVersion: t.number,\n  }),\n]);\n\n/** Type override */\nexport type DataCategoryRecommendationInput = t.TypeOf<typeof DataCategoryRecommendationInput>;\n\nexport const AttributeValueInput = t.intersection([\n  t.type({\n    /** Name of attribute value */\n    name: t.string,\n  }),\n  t.partial({\n    /** Description */\n    description: t.string,\n    /** Color */\n    color: t.string,\n  }),\n]);\n\n/** Type override */\nexport type AttributeValueInput = t.TypeOf<typeof AttributeValueInput>;\n\nexport const AttributeInput = t.intersection([\n  t.type({\n    /** Name of attribute */\n    name: t.string,\n    /** Type of attribute */\n    type: valuesOf(AttributeKeyType),\n  }),\n  t.partial({\n    /** Description of attribute */\n    description: t.string,\n    /** Resource types that the attribute is enabled on */\n    resources: t.array(valuesOf(AttributeSupportedResourceType)),\n    /** Values of attribute */\n    values: t.array(AttributeValueInput),\n  }),\n]);\n\n/** Type override */\nexport type AttributeInput = t.TypeOf<typeof AttributeInput>;\n\nexport const AttributePreview = t.type({\n  /** Attribute key */\n  key: t.string,\n  /** Attribute values */\n  values: t.array(t.string),\n});\n\n/** Type override */\nexport type AttributePreview = t.TypeOf<typeof AttributePreview>;\n\n/**\n * Vendor type definition.\n */\nexport const VendorInput = t.intersection([\n  t.type({\n    /** Title of vendor */\n    title: t.string,\n  }),\n  t.partial({\n    /** Description of vendor */\n    description: t.string,\n    /** DPA link */\n    dataProcessingAgreementLink: t.string,\n    /** Contract email */\n    contactName: t.string,\n    /** Contract phone */\n    contactPhone: t.string,\n    /** Address */\n    address: t.string,\n    /** Headquarters country */\n    headquarterCountry: valuesOf(IsoCountryCode),\n    /** Headquarters subdivision */\n    headquarterSubDivision: valuesOf(IsoCountrySubdivisionCode),\n    /** Website URL */\n    websiteUrl: t.string,\n    /** Business entity */\n    businessEntity: t.string,\n    /**\n     * The email addresses of the employees within your company that are the go-to individuals\n     * for managing this vendor\n     */\n    owners: t.array(t.string),\n    /**\n     * The names of teams within your Transcend instance that should be responsible\n     * for managing this vendor\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n  }),\n]);\n\n/**\n * Type override\n */\nexport type VendorInput = t.TypeOf<typeof VendorInput>;\n\n/**\n * DataCategory type definition.\n */\nexport const DataCategoryInput = t.intersection([\n  t.type({\n    /** Name of data category */\n    name: t.string,\n    /** Type of data category */\n    category: valuesOf(DataCategoryType),\n  }),\n  t.partial({\n    /** Description of data category */\n    description: t.string,\n    /** Regex for data category */\n    regex: t.string,\n    /**\n     * The email addresses of the employees within your company that are the go-to individuals\n     * for managing this data category\n     */\n    owners: t.array(t.string),\n    /**\n     * The names of teams within your Transcend instance that should be responsible\n     * for managing this data category.\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n  }),\n]);\n\n/**\n * Type override\n */\nexport type DataCategoryInput = t.TypeOf<typeof DataCategoryInput>;\n\n/**\n * ProcessingPurpose type definition.\n */\nexport const ProcessingPurposeInput = t.intersection([\n  t.type({\n    /** Name of processing purpose */\n    name: t.string,\n    /** Type of processing purpose */\n    purpose: valuesOf(ProcessingPurpose),\n  }),\n  t.partial({\n    /** Description of processing purpose */\n    description: t.string,\n    /**\n     * The email addresses of the employees within your company that are the go-to individuals\n     * for managing this processing purpose\n     */\n    owners: t.array(t.string),\n    /**\n     * The names of teams within your Transcend instance that should be responsible\n     * for managing this processing purpose.\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n  }),\n]);\n\n/**\n * Type override\n */\nexport type ProcessingPurposeInput = t.TypeOf<typeof ProcessingPurposeInput>;\n\n/**\n * Annotate specific fields within a datapoint. These are often database table columns.\n * Fields can also be a JSON object or separate file.\n */\nexport const FieldInput = t.intersection([\n  t.type({\n    /** The unique key of the field. When a database, this is the column name. */\n    key: t.string,\n  }),\n  t.partial({\n    /** The display title of the field */\n    title: t.string,\n    /** Description of the field */\n    description: t.union([t.string, t.null]),\n    /**\n     * What is the purpose of processing for this datapoint/table?\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/objects.ts\n     */\n    purposes: t.array(ProcessingPurposePreviewInput),\n    /**\n     * The category of personal data for this datapoint\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/objects.ts\n     */\n    categories: t.array(DataCategoryPreviewInput),\n    /**\n     * The category of personal data that have been guessed by the classifier this datapoint\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/objects.ts\n     */\n    'guessed-categories': t.array(DataCategoryGuessInput),\n    /**\n     * When true, this subdatapoint should be revealed in a data access request.\n     * When false, this field should be redacted\n     */\n    'access-request-visibility-enabled': t.boolean,\n    /**\n     * When true, this subdatapoint should be redacted during an erasure request.\n     * There normally is a choice of enabling hard deletion or redaction at the\n     * datapoint level, but if redaction is enabled, this column can be used\n     * to define which fields should be redacted.\n     */\n    'erasure-request-redaction-enabled': t.boolean,\n    /** Attributes tagged to subdatapoint */\n    attributes: t.array(AttributePreview),\n  }),\n]);\n\n/** Type override */\nexport type FieldInput = t.TypeOf<typeof FieldInput>;\n\n/**\n * Datapoints are the different types of data models that existing within your data silo.\n * If the data silo is a database, these would be your tables.\n * Note: These are currently called \"datapoints\" in the Transcend UI and documentation.\n *\n * @see https://docs.transcend.io/docs/the-data-map#datapoints\n */\nexport const DatapointInput = t.intersection([\n  t.type({\n    /** The unique key of the datapoint. For a database, this is the table name. */\n    key: t.string,\n  }),\n  t.partial({\n    /**\n     * Usually only relevant for databases,\n     * this field should include any schema information for a given datapoint.\n     *\n     * Examples:\n     * - In postgres, it's possible to have multiple tables with the same name under\n     * different schemas. e.g., \"public\", \"test\". So here you'd specify [\"public\"] or [\"test\"]\n     * - In Snowflake, it's possible to have different databases with different schemas,\n     * so you can specify [\"ANALYTICS\", \"public\"] to indicate that the datapoint belongs to\n     * the \"public\" schema of the \"ANALYTICS\" database.\n     */\n    path: t.array(t.string),\n    /** The display title of the enricher */\n    title: t.string,\n    /** Internal description for why the enricher is needed */\n    description: t.string,\n    /**\n     * Configure the category of data that this datapoint should be grouped by in a data access request.\n     *\n     * @see https://docs.transcend.io/docs/privacy-requests/connecting-data-silos/saas-tools#configuring-an-integration\n     */\n    'data-collection-tag': t.string,\n    /**\n     * The SQL queries that should be run for that datapoint in a privacy request.\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/actions.ts\n     */\n    'privacy-action-queries': t.partial(applyEnum(RequestActionObjectResolver, () => t.string)),\n    /**\n     * The types of privacy actions that this datapoint can implement\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/actions.ts\n     */\n    'privacy-actions': t.array(valuesOf(RequestActionObjectResolver)),\n    /**\n     * Provide field-level metadata for this datapoint.\n     * This is often the column metadata\n     */\n    fields: t.array(FieldInput),\n    /**\n     * The email addresses of the employees within your company that are the go-to individuals\n     * for managing this datapoint\n     */\n    owners: t.array(t.string),\n    /**\n     * The names of teams within your Transcend instance that should be responsible\n     * for managing this datapoint\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type DatapointInput = t.TypeOf<typeof DatapointInput>;\n\nexport const PromptAVendorEmailSettings = t.partial({\n  /** The email address of the user to notify when a promptAPerson integration */\n  'notify-email-address': t.string,\n  /**\n   * The frequency with which we should be sending emails for this data silo, in milliseconds.\n   */\n  'send-frequency': t.number,\n  /**\n   * The type of emails to send for this data silo, i.e. send an email for each DSR, across all open DSRs,\n   * or per profile in a DSR.\n   */\n  'send-type': valuesOf(PromptAVendorEmailSendType),\n  /**\n   * Indicates whether prompt-a-vendor emails should include a list of identifiers\n   * in addition to a link to the bulk processing UI.\n   */\n  'include-identifiers-attachment': t.boolean,\n  /**\n   * Indicates what kind of link to generate as part of the emails sent out for this Prompt-a-Vendor silo.\n   */\n  'completion-link-type': valuesOf(PromptAVendorEmailCompletionLinkType),\n  /**\n   * The frequency with which we should retry sending emails for this data silo, in milliseconds.\n   * Needs to be a string because the number can be larger than the MAX_INT\n   */\n  'manual-work-retry-frequency': t.string,\n});\n\n/** Type override */\nexport type PromptAVendorEmailSettings = t.TypeOf<typeof PromptAVendorEmailSettings>;\n\n/**\n * Input to define a business entity\n *\n * @see https://app.transcend.io/data-map/data-inventory/business-entities\n */\nexport const BusinessEntityInput = t.intersection([\n  t.type({\n    /** The title of the business entity */\n    title: t.string,\n  }),\n  t.partial({\n    /** Description of the business entity */\n    description: t.string,\n    /** Address of the business entity */\n    address: t.string,\n    /** Country of headquarters */\n    headquarterCountry: valuesOf(IsoCountryCode),\n    /** Subdivision of headquarters */\n    headquarterSubDivision: valuesOf(IsoCountrySubdivisionCode),\n    /** Data protection officer name for the business entity */\n    dataProtectionOfficerName: t.string,\n    /** Data protection officer email for the business entity */\n    dataProtectionOfficerEmail: t.string,\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n    /**\n     * The email addresses of the employees within your company that are the go-to individuals\n     * for managing this data silo\n     */\n    owners: t.array(t.string),\n    /**\n     * The names of teams within your Transcend instance that should be responsible\n     * for managing this data silo.\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type BusinessEntityInput = t.TypeOf<typeof BusinessEntityInput>;\n\nexport const RegionInput = t.partial({\n  /** The country */\n  country: valuesOf(IsoCountryCode),\n  /** The country subdivision */\n  countrySubDivision: valuesOf(IsoCountrySubdivisionCode),\n});\n\n/** Type override */\nexport type RegionInput = t.TypeOf<typeof RegionInput>;\n\n/**\n * Input to define a processing activity\n *\n * @see https://app.transcend.io/data-map/data-inventory/processing-activities\n */\nexport const ProcessingActivityInput = t.intersection([\n  t.type({\n    /** The title of the processing activity */\n    title: t.string,\n  }),\n  t.partial({\n    /** Description of the processing activity */\n    description: t.string,\n    /** Security measure details */\n    securityMeasureDetails: t.string,\n    /**\n     * Controllerships\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/datapoint.ts\n     */\n    controllerships: t.array(valuesOf(Controllership)),\n    /** Storage regions */\n    storageRegions: t.array(RegionInput),\n    /** Transfer regions */\n    transferRegions: t.array(RegionInput),\n    /**\n     * Retention type\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/datapoint.ts\n     */\n    retentionType: valuesOf(RetentionType),\n    /** Retention period in days */\n    retentionPeriod: t.number,\n    /** Data protection impact assessment link */\n    dataProtectionImpactAssessmentLink: t.string,\n    /**\n     * Data protection impact assessment status\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/processingActivity.ts.ts\n     */\n    dataProtectionImpactAssessmentStatus: valuesOf(DataProtectionImpactAssessmentStatus),\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n    /** Data silo titles */\n    dataSiloTitles: t.array(t.string),\n    /** Data subject types */\n    dataSubjectTypes: t.array(t.string),\n    /** Team names */\n    teamNames: t.array(t.string),\n    /** Owner emails */\n    ownerEmails: t.array(t.string),\n    /**\n     * The purposes of processing for this processing activity\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/objects.ts\n     */\n    processingSubPurposes: t.array(ProcessingPurposePreviewInput),\n    /**\n     * The categories of personal data for this processing activity\n     *\n     * @see https://github.com/transcend-io/privacy-types/blob/main/src/objects.ts\n     */\n    dataSubCategories: t.array(DataCategoryPreviewInput),\n    /** SaaS category titles */\n    saaSCategories: t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type ProcessingActivityInput = t.TypeOf<typeof ProcessingActivityInput>;\n\n/**\n * Software development kit inputs\n *\n * @see https://app.transcend.io/code-scanning/sdks\n */\nexport const SoftwareDevelopmentKitInput = t.intersection([\n  t.type({\n    /** Title of software development kit */\n    name: t.string,\n    /** Code package type */\n    codePackageType: valuesOf(CodePackageType),\n  }),\n  t.partial({\n    /** Description of the SDK */\n    description: t.string,\n    /** Github repository */\n    repositoryUrl: t.string,\n    /** Integration name */\n    catalogIntegrationName: t.string,\n    /** Doc links */\n    documentationLinks: t.array(t.string),\n    /** Emails of owners */\n    ownerEmails: t.array(t.string),\n    /** Team names */\n    teamNames: t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type SoftwareDevelopmentKitInput = t.TypeOf<typeof SoftwareDevelopmentKitInput>;\n\n/**\n * SDK defined for a code package\n */\nexport const CodePackageSdk = t.intersection([\n  t.type({\n    /** Name of SDK */\n    name: t.string,\n  }),\n  t.partial({\n    /** Version of SDK */\n    version: t.string,\n    /** Indicate if dependency is a dev dependency */\n    isDevDependency: t.boolean,\n  }),\n]);\n\n/** Type override */\nexport type CodePackageSdk = t.TypeOf<typeof CodePackageSdk>;\n\n/**\n * Input to define a code package\n *\n * @see https://app.transcend.io/code-scanning/code-packages\n */\nexport const CodePackageInput = t.intersection([\n  t.type({\n    /** The name of the package */\n    name: t.string,\n    /** Type of code package */\n    type: valuesOf(CodePackageType),\n    /** Relative path to code package within the repository */\n    relativePath: t.string,\n    /** Name of repository that the code packages are being uploaded to */\n    repositoryName: t.string,\n  }),\n  t.partial({\n    /** Description of the code package */\n    description: t.string,\n    /** Software development kits in the repository */\n    softwareDevelopmentKits: t.array(CodePackageSdk),\n    /** Names of the teams that manage the code package */\n    teamNames: t.array(t.string),\n    /** Names of the owner emails that manage the code package */\n    ownerEmails: t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type CodePackageInput = t.TypeOf<typeof CodePackageInput>;\n\n/**\n * Input to define a repository\n *\n * @see https://app.transcend.io/code-scanning/repositories\n */\nexport const RepositoryInput = t.intersection([\n  t.type({\n    /** The name of the repo */\n    name: t.string,\n    /** URL of repository */\n    url: t.string,\n  }),\n  t.partial({\n    /** Description of the repository */\n    description: t.string,\n    /** Names of the teams that manage the repository */\n    teamNames: t.array(t.string),\n    /** Names of the owner emails that manage the repository */\n    ownerEmails: t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type RepositoryInput = t.TypeOf<typeof RepositoryInput>;\n\n/**\n * Input to define a data subject\n *\n * @see https://app.transcend.io/privacy-requests/settings\n */\nexport const DataSubjectInput = t.intersection([\n  t.type({\n    /** The type of the data subject */\n    type: t.string,\n  }),\n  t.partial({\n    /** Whether the data subject is active on the Privacy Center & DSR API */\n    active: t.boolean,\n    /** The title of the data subject */\n    title: t.string,\n    /** Whether or not to default new requests made in the admin dashboard to silent mode */\n    adminDashboardDefaultSilentMode: t.boolean,\n    /**\n     * Whether requests can be submitted on behalf of this data subject by an authorized agent.\n     * Requires the Authorized Agents feature to be enabled for the organization.\n     */\n    supportsAuthorizedAgent: t.boolean,\n    /** Enabled request actions for the data subject */\n    actions: t.array(valuesOf(RequestAction)),\n  }),\n]);\n\n/** Type override */\nexport type DataSubjectInput = t.TypeOf<typeof DataSubjectInput>;\n\n/**\n * Input to define an action\n *\n * @see https://app.transcend.io/privacy-requests/settings\n */\nexport const ActionInput = t.intersection([\n  t.type({\n    /** The type of the data subject */\n    type: valuesOf(RequestAction),\n  }),\n  t.partial({\n    /** Whether or not to skip deletion phase when no data is found */\n    skipSecondaryIfNoFiles: t.boolean,\n    /** Whether to skip the downloadable step */\n    skipDownloadableStep: t.boolean,\n    /** Whether the request action requires review */\n    requiresReview: t.boolean,\n    /** The wait period for the action */\n    waitingPeriod: t.number,\n    /** The method in which the data subject's region is detected */\n    regionDetectionMethod: valuesOf(RegionDetectionMethod),\n    /** The list of regions to show in the form */\n    regionList: t.array(valuesOf({ ...IsoCountryCode, ...IsoCountrySubdivisionCode })),\n    /** The list of regions NOT to show in the form */\n    regionBlockList: t.array(valuesOf({ ...IsoCountryCode, ...IsoCountrySubdivisionCode })),\n  }),\n]);\n\n/** Type override */\nexport type ActionInput = t.TypeOf<typeof ActionInput>;\n\n/**\n * Input to define an identifier\n *\n * @see https://app.transcend.io/privacy-requests/identifiers\n */\nexport const IdentifierInput = t.intersection([\n  t.type({\n    /** The name of the identifier */\n    name: t.string,\n    /** The type of the identifier */\n    type: t.string,\n  }),\n  t.partial({\n    /** Regular expression to verify the identifier */\n    regex: t.string,\n    /** The fixed set of options that an identifier can take on */\n    selectOptions: t.array(t.string),\n    /** Whether or not the identifier is shown in the privacy center form */\n    privacyCenterVisibility: t.array(valuesOf(RequestAction)),\n    /** The set of data subjects that this identifier is enabled for */\n    dataSubjects: t.array(t.string),\n    /** When true, the identifier is a required field on the privacy center form */\n    isRequiredInForm: t.boolean,\n    /** Placeholder message for identifier */\n    placeholder: t.string,\n    /** Display title for identifier */\n    displayTitle: t.string,\n    /** Display description for identifier */\n    displayDescription: t.string,\n    /** The display order for the identifier */\n    displayOrder: t.number,\n    /** Whether or not the identifier is unique on the preference store */\n    isUniqueOnPreferenceStore: t.boolean,\n  }),\n]);\n\n/** Type override */\nexport type IdentifierInput = t.TypeOf<typeof IdentifierInput>;\n\n/**\n * Input to define a data flow\n *\n * @see https://app.transcend.io/consent-manager/data-flows/approved\n */\nexport const DataFlowInput = t.intersection([\n  t.type({\n    /** Value of data flow */\n    value: t.string,\n    /** Type of data flow */\n    type: valuesOf(DataFlowScope),\n  }),\n  t.partial({\n    /** Description of data flow */\n    description: t.string,\n    /** The tracking purposes that are required to be opted in for this data flow */\n    trackingPurposes: t.array(t.string),\n    /**\n     * Name of the consent service attached\n     */\n    service: t.string,\n    /**\n     * Status of the tracker (approved vs triage)\n     */\n    status: valuesOf(ConsentTrackerStatus),\n    /**\n     * The email addresses of the employees within your company that are the go-to individuals\n     * for managing this data silo\n     */\n    owners: t.array(t.string),\n    /**\n     * The names of teams within your Transcend instance that should be responsible\n     * for managing this data silo.\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n  }),\n]);\n\n/** Type override */\nexport type DataFlowInput = t.TypeOf<typeof DataFlowInput>;\n\nexport const CookieInput = t.intersection([\n  t.type({\n    /** Name of data flow */\n    name: t.string,\n  }),\n  t.partial({\n    /** Whether or not the cookie is a regular expression */\n    isRegex: t.boolean,\n    /** Description of data flow */\n    description: t.string,\n    /** The tracking purposes that are required to be opted in for this data flow */\n    trackingPurposes: t.array(t.string),\n    /**\n     * Name of the consent service attached\n     */\n    service: t.string,\n    /**\n     * Status of the tracker (approved vs triage)\n     */\n    status: valuesOf(ConsentTrackerStatus),\n    /**\n     * The email addresses of the employees within your company that are the go-to individuals\n     * for managing this data silo\n     */\n    owners: t.array(t.string),\n    /**\n     * The names of teams within your Transcend instance that should be responsible\n     * for managing this data silo.\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n  }),\n]);\n\n/** Type override */\nexport type CookieInput = t.TypeOf<typeof CookieInput>;\n\nexport const ConsentManageExperienceInput = t.intersection([\n  t.type({\n    /** Name of experience */\n    name: t.string,\n  }),\n  t.partial({\n    /** Name of experience */\n    displayName: t.string,\n    /** Region that define this regional experience */\n    regions: t.array(RegionInput),\n    /** How to handle consent expiry */\n    onConsentExpiry: valuesOf(OnConsentExpiry),\n    /** Consent expiration lever */\n    consentExpiry: t.number,\n    /** In vs not in operator */\n    operator: valuesOf(RegionsOperator),\n    /** Priority of experience */\n    displayPriority: t.number,\n    /** View state to prompt when auto prompting is enabled */\n    viewState: valuesOf(InitialViewState),\n    /** Purposes that can be opted out of in a particular experience */\n    purposes: t.array(\n      t.type({\n        /** Slug of purpose */\n        trackingType: t.string,\n      }),\n    ),\n    /** Purposes that are opted out by default in a particular experience */\n    optedOutPurposes: t.array(\n      t.type({\n        /** Slug of purpose */\n        trackingType: t.string,\n      }),\n    ),\n    /**\n     * Browser languages that define this regional experience\n     */\n    browserLanguages: t.array(valuesOf(BrowserLanguage)),\n    /** Browser time zones that define this regional experience */\n    browserTimeZones: t.array(valuesOf(BrowserTimeZone)),\n    /** ID of the consent UI variant assigned to this experience */\n    consentUiVariantSlug: t.string,\n  }),\n]);\n\n/** Type override */\nexport type ConsentManageExperienceInput = t.TypeOf<typeof ConsentManageExperienceInput>;\n\nexport const PartitionInput = t.intersection([\n  t.type({\n    /** Name of partition */\n    name: t.string,\n  }),\n  t.partial({\n    /** Value of partition, cannot be pushed, can only be pulled */\n    partition: t.string,\n  }),\n]);\n\n/** Type override */\nexport type PartitionInput = t.TypeOf<typeof PartitionInput>;\n\nexport const ConsentManagerInput = t.partial({\n  /** Airgap version */\n  version: t.string,\n  /** The consent manager domains in the instance */\n  bundleUrls: t.record(valuesOf(ConsentBundleType), t.string),\n  /** The consent manager domains in the instance */\n  domains: t.array(t.string),\n  /** Key used to partition consent records */\n  partition: t.string,\n  /** Precedence of signals vs user input */\n  consentPrecedence: valuesOf(ConsentPrecedenceOption),\n  /** The consent manager unknown request policy */\n  unknownRequestPolicy: valuesOf(UnknownRequestPolicy),\n  /** The consent manager unknown cookie policy */\n  unknownCookiePolicy: valuesOf(UnknownRequestPolicy),\n  /** The XDI sync endpoint for this airgap bundle */\n  syncEndpoint: t.string,\n  /** The telemetry partitioning strategy */\n  telemetryPartitioning: valuesOf(TelemetryPartitionStrategy),\n  /** Whether the site owner has signed the IAB agreement */\n  signedIabAgreement: valuesOf(SignedIabAgreementOption),\n  /** Regional experience configurations */\n  experiences: t.array(ConsentManageExperienceInput),\n  /** Theme config */\n  theme: t.partial({\n    /** Primary color */\n    primaryColor: t.string,\n    /** Font color */\n    fontColor: t.string,\n    /** Privacy policy URL */\n    privacyPolicy: t.string,\n    /** Auto-prompt setting */\n    prompt: t.number,\n  }),\n  // TODO: https://transcend.height.app/T-23919 - reconsider simpler yml shape\n  /** The Shared XDI host sync groups config (JSON) for this airgap bundle */\n  syncGroups: t.string,\n  consentVariants: t.array(ConsentVariantInput),\n  consentThemes: t.array(ConsentThemeInput),\n});\n\n/** Type override */\nexport type ConsentManagerInput = t.TypeOf<typeof ConsentManagerInput>;\n\n/**\n * Input to define a privacy center\n */\nexport const PrivacyCenterInput = t.partial({\n  /** Whether or not the entire privacy center is enabled or disabled */\n  isDisabled: t.boolean,\n  /** Whether or not to show the privacy requests button */\n  showPrivacyRequestButton: t.boolean,\n  /** Whether or not to show the policies page */\n  showPolicies: t.boolean,\n  /** Whether or not to show the tracking technologies page */\n  showTrackingTechnologies: t.boolean,\n  /** Whether or not to show the cookies on the tracking technologies page */\n  showCookies: t.boolean,\n  /** Whether or not to show the data flows on the tracking technologies page */\n  showDataFlows: t.boolean,\n  /** Whether or not to show the consent manager opt out options on the tracking technologies page */\n  showConsentManager: t.boolean,\n  /** Whether or not to show the manage your privacy page */\n  showManageYourPrivacy: t.boolean,\n  /** Whether or not to show the marketing preferences page */\n  showMarketingPreferences: t.boolean,\n  /** What languages are supported for the privacy center */\n  locales: t.array(valuesOf(LOCALE_KEY)),\n  /** The default locale for the privacy center */\n  defaultLocale: valuesOf(LOCALE_KEY),\n  /** Whether or not to prefer the browser default locale */\n  preferBrowserDefaultLocale: t.boolean,\n  /** The email addresses of the employees within your company that are the go-to individuals for managing this privacy center */\n  supportEmail: t.string,\n  /** The email addresses of the employees within your company that are the go-to individuals for managing this privacy center */\n  replyToEmail: t.string,\n  /** Whether or not to send emails from a no reply email */\n  useNoReplyEmailAddress: t.boolean,\n  /** Whether or not to use a custom email domain */\n  useCustomEmailDomain: t.boolean,\n  /** Whether or not to transcend access requests from JSON to CSV */\n  transformAccessReportJsonToCsv: t.boolean,\n  /**\n   * Privacy Center \"home\" / back-to-site link URL shown in the privacy center\n   * header\n   */\n  home: t.string,\n  /** Whether the side menu is expanded by default on the privacy center */\n  expandSideMenuByDefault: t.boolean,\n  /**\n   * Whether custom fields are required when submitting privacy requests from\n   * the privacy center workflows UI\n   */\n  workflowsCustomFieldsRequired: t.boolean,\n  /**\n   * Child organization URIs (or IDs) to display on a unified multi-brand\n   * privacy center. Resolved to organization IDs on push.\n   */\n  displayedChildOrganizationUris: t.array(t.string),\n  /** Footer layout for privacy center footer links */\n  footerLayout: valuesOf(PrivacyCenterFooterLayout),\n  /**\n   * Footer links displayed on the privacy center. Matched by title on push;\n   * links omitted from this list are deleted.\n   */\n  footerLinks: t.array(\n    t.intersection([\n      t.type({\n        /** Link title (default locale) */\n        title: t.string,\n      }),\n      t.partial({\n        /** Link URL (default locale); optional for icon-only links */\n        url: t.string,\n        /**\n         * When true with an icon set, render as icon-only (title is used for\n         * accessibility). When false with an icon set, render icon beside the\n         * visible label.\n         */\n        iconOnly: t.boolean,\n      }),\n    ]),\n  ),\n  /** The theme object of colors to display on the privacy center */\n  theme: t.partial({\n    /** The theme colors */\n    colors: t.partial(applyEnum(ConfigurableColorPaletteColor, () => t.string)),\n    /** Styles to apply to components */\n    componentStyles: PrivacyCenterComponentStyles,\n    /** Override styles */\n    textStyles: PrivacyCenterTextStyles,\n  }),\n});\n\n/** Type override */\nexport type PrivacyCenterInput = t.TypeOf<typeof PrivacyCenterInput>;\n\n/**\n * Input to define a policy\n */\nexport const PolicyInput = t.intersection([\n  t.type({\n    /** The title of the policy */\n    title: t.string,\n  }),\n  t.partial({\n    /**\n     * Policy type. On create, defaults from title\n     * (Privacy Policy / Cookie Policy / CUSTOM).\n     */\n    type: valuesOf(PolicyType),\n    /** Effective date of policy */\n    effectiveOn: t.string,\n    /** Whether or not to disable the effective date */\n    disableEffectiveOn: t.boolean,\n    /** Content of the policy */\n    content: t.string,\n    /** The languages for which the policy is disabled for */\n    disabledLocales: t.array(valuesOf(LOCALE_KEY)),\n  }),\n]);\n\n/** Type override */\nexport type PolicyInput = t.TypeOf<typeof PolicyInput>;\n\n/**\n * Input to define an internationalized message defined in Transcend\n */\nexport const IntlMessageInput = t.intersection([\n  t.type({\n    /** The ID of the message */\n    id: t.string,\n  }),\n  t.partial({\n    /** The hard-coded ID that the message refers to in the Privacy Center or Consent Manager UI, null if message is dynamic */\n    targetReactIntlId: t.string,\n    /** The description of the message */\n    description: t.string,\n    /** The default message to use */\n    defaultMessage: t.string,\n    /** The translations */\n    translations: t.partial(applyEnum(LOCALE_KEY, () => t.string)),\n  }),\n]);\n\n/** Type override */\nexport type IntlMessageInput = t.TypeOf<typeof IntlMessageInput>;\n\n/**\n * A set of deletion dependencies, either global (when `workflow` is omitted)\n * or scoped to a single DSR workflow.\n *\n * An empty `titles` list scoped to a workflow is an explicit override, meaning\n * that workflow runs the data silo with no dependencies at all.\n */\nexport const DeletionDependency = t.intersection([\n  t.type({\n    /**\n     * The titles of the data silos that must be deleted from first. This list can contain\n     * other internal systems defined in this file, as well as any of the SaaS tools connected\n     * in your Transcend instance.\n     */\n    titles: t.array(t.string),\n  }),\n  t.partial({\n    /**\n     * The internal name of the DSR workflow that these dependencies override the global\n     * configuration for. Omit to declare the global configuration.\n     */\n    workflow: t.string,\n  }),\n]);\n\n/** Type override */\nexport type DeletionDependency = t.TypeOf<typeof DeletionDependency>;\n\n/**\n * Removes a workflow's deletion dependency override so that the workflow falls back\n * to the global configuration.\n */\nexport const DeletionDependencyReset = t.type({\n  /** The internal name of the DSR workflow to remove the override from */\n  workflow: t.string,\n  /** Must be `true`; declares that the override should be removed */\n  'reset-to-global': t.literal(true),\n});\n\n/** Type override */\nexport type DeletionDependencyReset = t.TypeOf<typeof DeletionDependencyReset>;\n\n/**\n * A single object entry in a data silo's `deletion-dependencies` list.\n * Global dependencies are written as `{ titles: [...] }`; per-workflow overrides\n * include a `workflow` key.\n */\nexport const DeletionDependencyInput = t.union([DeletionDependency, DeletionDependencyReset]);\n\n/** Type override */\nexport type DeletionDependencyInput = t.TypeOf<typeof DeletionDependencyInput>;\n\n/**\n * The `deletion-dependencies` field for a data silo.\n *\n * Prefer a list of objects: `{ titles: [...] }` for the global configuration and\n * `{ workflow, titles }` or `{ workflow, reset-to-global: true }` for each override.\n * A bare list of titles is still accepted for global-only configuration. Mixing\n * titles and objects in the same list is not allowed.\n */\nexport const DeletionDependencies = t.union([t.array(t.string), t.array(DeletionDependencyInput)]);\n\n/** Type override */\nexport type DeletionDependencies = t.TypeOf<typeof DeletionDependencies>;\n\n/**\n * Input to define a data silo\n *\n * Define the data silos in your data map. A data silo can be a database,\n * or a web service that may use a collection of different data stores under the hood.\n *\n * @see https://docs.transcend.io/docs/the-data-map#data-silos\n */\nexport const DataSiloInput = t.intersection([\n  t.type({\n    /** The display title of the data silo */\n    title: t.string,\n    /**\n     * The type of integration. Common internal system types:\n     * server | database | cron  | promptAPerson\n     */\n    integrationName: t.string,\n  }),\n  t.partial({\n    /** For prompt a person or database integrations, the underlying integration name */\n    'outer-type': t.string,\n    /** A description for that data silo */\n    description: t.string,\n    /** The webhook URL to notify for data privacy requests */\n    url: t.string,\n    /** The title of the API key that will be used to respond to privacy requests */\n    'api-key-title': t.string,\n    /**\n     * The ID of the configured Sombra instance that processes privacy requests for this data silo.\n     * Useful for multi-Sombra organizations. Pull/push via `transcend inventory pull` / `push`.\n     */\n    'sombra-id': t.string,\n    /** Custom headers to include in outbound webhook */\n    headers: t.array(WebhookHeader),\n    /**\n     * Specify which data subjects may have personally-identifiable-information (PII) within this system\n     * This field can be omitted, and the default assumption will be that the system may potentially\n     * contain PII for any potential data subject type.\n     */\n    'data-subjects': t.array(t.string),\n    /**\n     * When this data silo implements a privacy request, these are the identifiers\n     * that should be looked up within this system.\n     */\n    'identity-keys': t.array(t.string),\n    /**\n     * When a data erasure request is being performed, this data silo should not be deleted from\n     * until all of the following data silos were deleted first. This list can contain other internal\n     * systems defined in this file, as well as any of the SaaS tools connected in your Transcend instance.\n     *\n     * Prefer a list of objects: `{ titles: [...] }` for the global configuration and\n     * `{ workflow, titles }` (or `{ workflow, reset-to-global: true }`) for each override.\n     * A bare list of titles is still accepted for global-only configuration. Workflows that\n     * are not listed keep whatever configuration they already have.\n     */\n    'deletion-dependencies': DeletionDependencies,\n    /**\n     * The email addresses of the employees within your company that are the go-to individuals\n     * for managing this data silo\n     */\n    owners: t.array(t.string),\n    /**\n     * The names of teams within your Transcend instance that should be responsible\n     * for managing this data silo.\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n    /**\n     * Specify this flag if the data silo is under development and should not be included\n     * in production privacy request workflows. Will still sync metadata to app.transcend.io.\n     */\n    disabled: t.boolean,\n    /**\n     * Datapoints defined within this data silo, see comment of `DatapointInput`\n     * for further details.\n     */\n    datapoints: t.array(DatapointInput),\n    /**\n     * Configure email notification settings for privacy requests\n     */\n    'email-settings': PromptAVendorEmailSettings,\n    /** Country of data silo hosting */\n    country: valuesOf(IsoCountryCode),\n    /** Sub-division of data silo hosting */\n    countrySubDivision: valuesOf(IsoCountrySubdivisionCode),\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n    /**\n     * The business entities associated with this data silo\n     */\n    businessEntityTitles: t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type DataSiloInput = t.TypeOf<typeof DataSiloInput>;\n\nexport const ActionItemCollectionInput = t.intersection([\n  t.type({\n    /** The display title of the enricher */\n    title: t.string,\n    /** Locations where collection is shown */\n    productLine: valuesOf(TranscendProduct),\n  }),\n  t.partial({\n    /** Description of collection */\n    description: t.string,\n    /** Whether hidden */\n    hidden: t.boolean,\n  }),\n]);\n\n/** Type override */\nexport type ActionItemCollectionInput = t.TypeOf<typeof ActionItemCollectionInput>;\n\n/**\n * Input to define an action item\n */\nexport const ActionItemInput = t.intersection([\n  t.type({\n    /** The display title of the enricher */\n    title: t.string,\n    /** Action item type */\n    type: valuesOf(ActionItemCode),\n    /** The titles of the collections that the action item is grouped within */\n    collections: t.array(t.string),\n  }),\n  t.partial({\n    /** Priority of the action item */\n    priority: valuesOf(ActionItemPriorityOverride),\n    /** Customer experience action item key */\n    customerExperienceActionItemId: t.string,\n    /** Due date of the action item */\n    dueDate: t.string,\n    /** Whether action item has been resolved */\n    resolved: t.boolean,\n    /** Notes */\n    notes: t.string,\n    /** Links to action items */\n    link: t.string,\n    /**\n     * The email addresses of the employees assigned to the action item\n     */\n    users: t.array(t.string),\n    /**\n     * The names of teams assigned to the action item\n     *\n     * @see https://docs.transcend.io/docs/security/access-control#teams\n     * for more information about how to create and manage teams\n     */\n    teams: t.array(t.string),\n    /**\n     * Attribute value and its corresponding attribute key\n     */\n    attributes: t.array(AttributePreview),\n  }),\n]);\n\n/** Type override */\nexport type ActionItemInput = t.TypeOf<typeof ActionItemInput>;\n\nexport const AssessmentRuleInput = t.intersection([\n  t.type({\n    /** The reference id of the question whose answer is compared by this rule */\n    'depends-on-question-reference-id': t.string,\n    /** The operator to use when comparing the question answer to the operands */\n    'comparison-operator': valuesOf(ComparisonOperator),\n  }),\n  t.partial({\n    /** The values to compare the question answer to */\n    'comparison-operands': t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type AssessmentRuleInput = t.TypeOf<typeof AssessmentRuleInput>;\n\nexport interface AssessmentNestedRuleInput {\n  /** The operator to use when comparing the nested rules */\n  'logic-operator': LogicOperator;\n  /** The rules to evaluate and be compared with to other using the LogicOperator */\n  rules?: AssessmentRuleInput[];\n  /** The nested rules to add one more level of nesting to the rules. They are also compared to each other. */\n  'nested-rules'?: AssessmentNestedRuleInput[];\n}\n\nexport const AssessmentNestedRuleInput: t.RecursiveType<t.Type<AssessmentNestedRuleInput>> =\n  t.recursion('AssessmentNestedRuleInput', (self) =>\n    t.intersection([\n      t.type({\n        /** The operator to use when comparing the nested rules */\n        'logic-operator': valuesOf(LogicOperator),\n      }),\n      t.partial({\n        /** The rules to evaluate and be compared with to other using the LogicOperator */\n        rules: t.array(AssessmentRuleInput),\n        /** The nested rules to add one more level of nesting to the rules. They are also compared to each other. */\n        'nested-rules': t.array(self),\n      }),\n    ]),\n  );\n\nexport const AssessmentDisplayLogicInput = t.intersection([\n  t.type({\n    /** The display logic type */\n    action: valuesOf(AssessmentsDisplayLogicAction),\n  }),\n  t.partial({\n    /** The rule to evaluate */\n    rule: AssessmentRuleInput,\n    /** The nested rule to evaluate */\n    'nested-rule': AssessmentNestedRuleInput,\n  }),\n]);\n\n/** Type override */\nexport type AssessmentDisplayLogicInput = t.TypeOf<typeof AssessmentDisplayLogicInput>;\n\nexport const RiskAssignmentInput = t.partial({\n  /** The risk level to assign to the question */\n  'risk-level': t.string,\n  /** The risk matrix column to assign to a question. */\n  'risk-matrix-column': t.string,\n  /** The risk matrix row to assign to a question. */\n  'risk-matrix-row': t.string,\n});\n\n/** Type override */\nexport type RiskAssignmentInput = t.TypeOf<typeof RiskAssignmentInput>;\n\nexport const RiskLogicInput = t.intersection([\n  t.type({\n    /** The values to compare */\n    'comparison-operands': t.array(t.string),\n    /** The operator */\n    'comparison-operator': valuesOf(ComparisonOperator),\n  }),\n  t.partial({\n    /** The risk level to assign to the question */\n    'risk-level': t.string,\n    /** The risk matrix column to assign to a question. */\n    'risk-matrix-column': t.string,\n    /** The risk matrix row to assign to a question. */\n    'risk-matrix-row': t.string,\n  }),\n]);\n\n/** Type override */\nexport type RiskLogicInput = t.TypeOf<typeof RiskLogicInput>;\n\nexport const AssessmentAnswerOptionInput = t.type({\n  /** Value of answer */\n  value: t.string,\n});\n\n/** Type override */\nexport type AssessmentAnswerOptionInput = t.TypeOf<typeof AssessmentAnswerOptionInput>;\n\nexport const AssessmentSectionQuestionInput = t.intersection([\n  t.type({\n    /** The title of the assessment section question */\n    title: t.string,\n    /** The question type */\n    type: valuesOf(AssessmentQuestionType),\n  }),\n  t.partial({\n    /** The sub-type of the assessment question */\n    'sub-type': valuesOf(AssessmentQuestionSubType),\n    /** The question placeholder */\n    placeholder: t.string,\n    /** The question description */\n    description: t.string,\n    /** Whether an answer is required */\n    'is-required': t.boolean,\n    /** Used to identify the question within a form or template so it can be referenced in conditional logic. */\n    'reference-id': t.string,\n    /** Display logic for the question */\n    'display-logic': AssessmentDisplayLogicInput,\n    /** Risk logic for the question */\n    'risk-logic': t.array(RiskLogicInput),\n    /** Risk category titles for the question */\n    'risk-categories': t.array(t.string),\n    /** Risk framework titles for the question */\n    'risk-framework': t.string,\n    /** Answer options for the question */\n    'answer-options': t.array(AssessmentAnswerOptionInput),\n    /** The selected answers to the assessments */\n    'selected-answers': t.array(t.string),\n    /** Allowed MIME types for the question */\n    'allowed-mime-types': t.array(t.string),\n    /** Allow selecting other options */\n    'allow-select-other': t.boolean,\n    /** Sync model for the question */\n    'sync-model': valuesOf(AssessmentSyncModel),\n    /** Sync column for the question */\n    'sync-column': valuesOf(AssessmentSyncColumn),\n    /** Attribute key / custom field name for the question */\n    'attribute-key': t.string,\n    /** Require risk evaluation for the question */\n    'require-risk-evaluation': t.boolean,\n    /** Require risk matrix evaluation for the question */\n    'require-risk-matrix-evaluation': t.boolean,\n  }),\n]);\n\n/** Type override */\nexport type AssessmentSectionQuestionInput = t.TypeOf<typeof AssessmentSectionQuestionInput>;\n\nexport const AssessmentSectionInput = t.intersection([\n  t.type({\n    /** The title of the assessment section */\n    title: t.string,\n    /** The questions in the assessment section */\n    questions: t.array(AssessmentSectionQuestionInput),\n  }),\n  t.partial({\n    /** Email address of those assigned */\n    assignees: t.array(t.string),\n    /** Email address of those externally assigned */\n    'external-assignees': t.array(t.string),\n    /** Status of section */\n    status: t.string,\n    /** Whether assessment is reviewed */\n    'is-reviewed': t.boolean,\n  }),\n]);\n\n/** Type override */\nexport type AssessmentSectionInput = t.TypeOf<typeof AssessmentSectionInput>;\n\nexport const AssessmentRetentionScheduleInput = t.type({\n  /** The retention schedule type */\n  type: valuesOf(RetentionScheduleType),\n  /** The duration of the retention schedule in days */\n  'duration-days': t.number,\n  /** The operation to perform on the retention schedule */\n  operand: valuesOf(RetentionScheduleOperation),\n});\n\n/** Type override */\nexport type AssessmentRetentionScheduleInput = t.TypeOf<typeof AssessmentRetentionScheduleInput>;\n\nexport const AssessmentTemplateInput = t.intersection([\n  t.type({\n    /** The title of the assessment template */\n    title: t.string,\n  }),\n  t.partial({\n    /** The Assessment sections under this assessment template */\n    sections: t.array(AssessmentSectionInput),\n    /** Description of assessment template */\n    description: t.string,\n    /** The status of the assessment */\n    status: valuesOf(AssessmentFormTemplateStatus),\n    /** The source of the assessment */\n    source: valuesOf(AssessmentFormTemplateSource),\n    /** The email of the user that created the assessment */\n    creator: t.string,\n    /** Whether the template is in a locked status */\n    locked: t.boolean,\n    /** ID of parent template this was cloned from */\n    'parent-id': t.string,\n    /** Whether the template is archived */\n    archived: t.boolean,\n    /** The date that the assessment was created */\n    'created-at': t.string,\n    /** The names of the custom fields associated to this assessment template */\n    'attribute-keys': t.array(t.string),\n    /** The retention schedule configuration */\n    'retention-schedule': AssessmentRetentionScheduleInput,\n    /** The titles of the email templates used in the assessment template */\n    templates: t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type AssessmentTemplateInput = t.TypeOf<typeof AssessmentTemplateInput>;\n\nexport const AssessmentResourceInput = t.type({\n  /** The title of the resource */\n  title: t.string,\n  /** The type of the resource */\n  type: valuesOf(AttributeSupportedResourceType),\n});\n\n/** Type override */\nexport type AssessmentResourceInput = t.TypeOf<typeof AssessmentResourceInput>;\n\nexport const AssessmentInput = t.intersection([\n  t.type({\n    /** The title of the assessment */\n    title: t.string,\n    /** The title of the assessment group */\n    group: t.string,\n  }),\n  t.partial({\n    /** The assessment sections */\n    sections: t.array(AssessmentSectionInput),\n    /** The email of the user that created the assessment */\n    creator: t.string,\n    /** The description of the assessment */\n    description: t.string,\n    /** The status of the assessment */\n    status: valuesOf(AssessmentFormStatus),\n    /** The emails of the transcend users assigned to the assessment */\n    assignees: t.array(t.string),\n    /** The emails of the external emails assigned to the assessment */\n    'external-assignees': t.array(t.string),\n    /** The emails of the assessment reviewers */\n    reviewers: t.array(t.string),\n    /** Whether the assessment is in a locked status */\n    locked: t.boolean,\n    /** Whether the assessment is archived */\n    archived: t.boolean,\n    /** Whether the form is created by an external user */\n    external: t.boolean,\n    /**\n     * Whether the form title is an internal label only, and the group title should be used in communications with assignees\n     */\n    'title-is-internal': t.boolean,\n    /** The date that the assessment is due */\n    'due-date': t.string,\n    /** The date that the assessment was created */\n    'created-at': t.string,\n    /** The date that the assessment was assigned at */\n    'assigned-at': t.string,\n    /** The date that the assessment was submitted at */\n    'submitted-at': t.string,\n    /** The date that the assessment was approved at */\n    'approved-at': t.string,\n    /** The date that the assessment was rejected at */\n    'rejected-at': t.string,\n    /** The linked data inventory resources */\n    resources: t.array(AssessmentResourceInput),\n    /** The linked data inventory synced rows */\n    rows: t.array(AssessmentResourceInput),\n    /** The assessment retention schedule */\n    'retention-schedule': AssessmentRetentionScheduleInput,\n    /** The assessment custom fields */\n    attributes: t.array(AttributePreview),\n  }),\n]);\n\n/** Type override */\nexport type AssessmentInput = t.TypeOf<typeof AssessmentInput>;\n\nexport const ConsentPreferenceTopicOptionValue = t.type({\n  /** Title of option value */\n  title: t.string,\n  /** API slug */\n  slug: t.string,\n});\n\n/** Type override */\nexport type ConsentPreferenceTopicOptionValue = t.TypeOf<typeof ConsentPreferenceTopicOptionValue>;\n\nexport const ConsentPreferenceTopic = t.intersection([\n  t.type({\n    /** The type of the preference topic */\n    type: valuesOf(PreferenceTopicType),\n    /** The title of the preference topic */\n    title: t.string,\n    /** The description of the preference topic */\n    description: t.string,\n    /** API slug for the preference topic (PascalCase; alphabetical letters only) */\n    slug: t.string,\n  }),\n  t.partial({\n    /** Hex color for the preference topic (pull-only; not writable via CLI push today) */\n    color: t.string,\n    /** Default value */\n    'default-configuration': t.string,\n    /** Whether the preference topic is shown in privacy center */\n    'show-in-privacy-center': t.boolean,\n    /** The options when type is single or multi select */\n    options: t.array(ConsentPreferenceTopicOptionValue),\n  }),\n]);\n\n/** Type override */\nexport type ConsentPreferenceTopic = t.TypeOf<typeof ConsentPreferenceTopic>;\n\nexport const ConsentPurpose = t.intersection([\n  t.type({\n    /** Consent purpose slug */\n    trackingType: t.string,\n    /** The title of the tracking purpose that appears in Consent Management and Privacy Center UIs  */\n    title: t.string,\n    /** The display name of this tracking purpose */\n    name: t.string,\n  }),\n  t.partial({\n    /** Description of purpose */\n    description: t.string,\n    /** Whether purpose is active */\n    'is-active': t.boolean,\n    /** Whether purpose is configurable */\n    configurable: t.boolean,\n    /** Display order of purpose for privacy center */\n    'display-order': t.number,\n    /** Whether purpose is shown in privacy center */\n    'show-in-privacy-center': t.boolean,\n    /** Whether purpose is show in consent manger */\n    'show-in-consent-manager': t.boolean,\n    /** The preference topics configured for the purpose */\n    'preference-topics': t.array(ConsentPreferenceTopic),\n    /** Authentication level for purpose on privacy center */\n    'auth-level': valuesOf(PreferenceStoreAuthLevel),\n    /** Opt out signals that should instantly opt out of this purpose */\n    'opt-out-signals': t.array(valuesOf(UserPrivacySignalEnum)),\n    /** Default consent value */\n    'default-consent': valuesOf(DefaultConsentOption),\n  }),\n]);\n\n/** Type override */\nexport type ConsentPurpose = t.TypeOf<typeof ConsentPurpose>;\n\n/**\n * Input for a purpose associated with a preference workflow config\n */\nexport const PreferenceWorkflowConfigPurposeInput = t.type({\n  /** The tracking type slug of the purpose */\n  'tracking-type': t.string,\n  /** The matching consent state for the purpose */\n  'matching-state': t.boolean,\n});\n\n/** Type override */\nexport type PreferenceWorkflowConfigPurposeInput = t.TypeOf<\n  typeof PreferenceWorkflowConfigPurposeInput\n>;\n\n/**\n * Input to define a preference workflow config.\n * Purposes are the source of truth; triggerCondition is derived on push\n * (same as Workflows → Preference Workflows in the admin dashboard).\n *\n * Exactly one mode per config:\n * - Legacy: action-type (+ optional data-silo-titles), no workflow-title\n * - V2: workflow-title (DSR workflow display title), no action-type / data-silo-titles\n */\nexport const PreferenceWorkflowConfigInput = t.intersection([\n  t.type({\n    /** The name of the preference workflow config */\n    name: t.string,\n    /**\n     * Purposes and their matching consent states.\n     * Used to derive triggerCondition as `{ And: [{ [tracking-type]: matching-state }, ...] }`.\n     */\n    purposes: t.array(PreferenceWorkflowConfigPurposeInput),\n  }),\n  t.partial({\n    /**\n     * DSR workflow display title (internalName when set, else external title).\n     * Workflows V2 mode — mutually exclusive with action-type / data-silo-titles.\n     */\n    'workflow-title': t.string,\n    /** The action type (e.g. ERASURE, ACCESS). Legacy mode; required when creating without workflow-title. */\n    'action-type': valuesOf(RequestAction),\n    /** The data subject type slug (e.g. customer) */\n    'data-subject-type': t.string,\n    /** Whether the config runs silently */\n    'is-silent': t.boolean,\n    /** Whether unauthenticated requests are allowed */\n    'allow-unauthenticated': t.boolean,\n    /** Whether the config is active */\n    'is-active': t.boolean,\n    /** Titles of data silos associated with this config (legacy mode only) */\n    'data-silo-titles': t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type PreferenceWorkflowConfigInput = t.TypeOf<typeof PreferenceWorkflowConfigInput>;\n\n/**\n * Input to define a workflow config. Push matches using a cascading key\n * (internal-name → title → action-type → data-subject-type → region-list) and\n * creates the workflow when no match exists (DSR only).\n */\nexport const WorkflowConfigInput = t.intersection([\n  t.type({\n    /** User-facing title */\n    title: t.string,\n    /** Request action type */\n    'action-type': valuesOf(RequestAction),\n  }),\n  t.partial({\n    /**\n     * Internal name of the workflow config. When provided, used as the first\n     * match key on push.\n     */\n    'internal-name': t.string,\n    /** Subtitle */\n    subtitle: t.string,\n    /** Description */\n    description: t.string,\n    /** Data subject type */\n    'data-subject-type': t.string,\n    /** Visibility tier */\n    visibility: valuesOf(WorkflowConfigVisibility),\n    /** Workflow config type (read-only on pull; included for reference) */\n    type: valuesOf(WorkflowConfigType),\n    /** Whether to collect the data subject's region during intake */\n    'collect-data-subject-regions': valuesOf(CollectDataSubjectRegions),\n    /** Region allow list */\n    'region-list': t.array(valuesOf({ ...IsoCountryCode, ...IsoCountrySubdivisionCode })),\n    /** Per-region request expiry times */\n    'expiry-time': t.array(\n      t.type({\n        /** Region code (or 'default') */\n        region: valuesOf({ default: 'default', ...IsoCountryCode, ...IsoCountrySubdivisionCode }),\n        /** Expiry time in days */\n        value: t.number,\n      }),\n    ),\n    /** Attribute key (custom field) names to associate with the workflow */\n    'attribute-keys': t.array(t.string),\n  }),\n]);\n\n/** Type override */\nexport type WorkflowConfigInput = t.TypeOf<typeof WorkflowConfigInput>;\n\n/**\n * Input to define a silo discovery results\n *\n * @see https://docs.transcend.io/docs/silo-discovery\n */\nexport const SiloDiscoveryResultInput = t.intersection([\n  t.type({\n    /** The unique identifier for the resource */\n    resourceId: t.string,\n    /** The plugin that found this results */\n    plugin: t.string, // Assuming Plugin is a string, replace with appropriate type if necessary\n    /** The suggested catalog for this results */\n    suggestedCatalog: t.string,\n    /** The likelihood that data is sensitive for this results */\n    containsSensitiveData: t.string,\n    /** The status of silo discovery triage */\n    status: t.string,\n  }),\n  t.partial({\n    /** The ISO country code for the AWS Region if applicable */\n    country: valuesOf(IsoCountryCode),\n    /** The ISO country subdivision code for the AWS Region if applicable */\n    countrySubDivision: valuesOf(IsoCountrySubdivisionCode),\n    /** The plaintext that we will pass into results */\n    plaintextContext: t.string,\n    /** The custom title of the data silo results */\n    title: t.union([t.string, t.null]),\n  }),\n]);\n\n/** Type override */\nexport type SiloDiscoveryResultInput = t.TypeOf<typeof SiloDiscoveryResultInput>;\n\nexport const TranscendInput = t.partial({\n  /**\n   * Action items\n   */\n  'action-items': t.array(ActionItemInput),\n  /**\n   * Action item collections\n   */\n  'action-item-collections': t.array(ActionItemCollectionInput),\n  /**\n   * API key definitions\n   */\n  'api-keys': t.array(ApiKeyInput),\n  /** Team definitions */\n  teams: t.array(TeamInput),\n  /**\n   * Email template definitions\n   */\n  templates: t.array(TemplateInput),\n  /**\n   * Preflight check definitions\n   */\n  preflights: t.array(PreflightInput),\n  /**\n   * @deprecated Use `preflights` instead. Kept for legacy transcend.yml support.\n   */\n  enrichers: t.array(PreflightInput),\n  /**\n   * Attribute definitions\n   */\n  attributes: t.array(AttributeInput),\n  /**\n   * Business entity definitions\n   */\n  'business-entities': t.array(BusinessEntityInput),\n  /**\n   * Vendor definitions\n   */\n  vendors: t.array(VendorInput),\n  /**\n   * Data categories definitions\n   */\n  'data-categories': t.array(DataCategoryInput),\n  /**\n   * Vendor definitions\n   */\n  'processing-purposes': t.array(ProcessingPurposeInput),\n  /**\n   * Data subject definitions\n   */\n  'data-subjects': t.array(DataSubjectInput),\n  /**\n   * Action definitions\n   */\n  actions: t.array(ActionInput),\n  /**\n   * Identifier definitions\n   */\n  identifiers: t.array(IdentifierInput),\n  /**\n   * Data silo definitions\n   */\n  'data-silos': t.array(DataSiloInput),\n  /**\n   * Data flow definitions\n   */\n  'data-flows': t.array(DataFlowInput),\n  /**\n   * Cookie definitions\n   */\n  cookies: t.array(CookieInput),\n  /**\n   * Consent manager definition\n   */\n  'consent-manager': ConsentManagerInput,\n  /**\n   * The privacy center configuration\n   */\n  'privacy-center': PrivacyCenterInput,\n  /**\n   * The policies configuration\n   */\n  policies: t.array(PolicyInput),\n  /**\n   * The internationalized messages configuration\n   */\n  messages: t.array(IntlMessageInput),\n  /** The full list of consent manager partitions (e.g. dev vs staging vs prod) */\n  partitions: t.array(PartitionInput),\n  /**\n   * The full list of assessment templates\n   */\n  'assessment-templates': t.array(AssessmentTemplateInput),\n  /**\n   * The full list of assessment results\n   */\n  assessments: t.array(AssessmentInput),\n  /**\n   * Processing activity definitions\n   */\n  'processing-activities': t.array(ProcessingActivityInput),\n  /**\n   * Consent and preference management purposes\n   */\n  purposes: t.array(ConsentPurpose),\n  /**\n   * The full list of silo discovery results\n   */\n  'system-discovery': t.array(SiloDiscoveryResultInput),\n  /**\n   * Preference workflow config definitions (Workflows → Preference Workflows)\n   */\n  'preference-workflow-configs': t.array(PreferenceWorkflowConfigInput),\n  /**\n   * DSR workflow config settings (create or update via cascading match key)\n   */\n  'workflow-configs': t.array(WorkflowConfigInput),\n  /**\n   * Preference management options for multi and single selects\n   */\n  'preference-options': t.array(ConsentPreferenceTopicOptionValue),\n});\n\n/** Type override */\nexport type TranscendInput = t.TypeOf<typeof TranscendInput>;\n\n/**\n * Fold legacy `enrichers` into `preflights` and drop the deprecated key.\n *\n * @param input - Parsed transcend.yml contents\n * @returns Input with only the canonical `preflights` key\n */\nexport function normalizeTranscendInput(input: TranscendInput): TranscendInput {\n  const { enrichers, preflights, ...rest } = input;\n  if (enrichers === undefined && preflights === undefined) {\n    return input;\n  }\n  return {\n    ...rest,\n    preflights: [...(preflights ?? []), ...(enrichers ?? [])],\n  };\n}\n\n/**\n * The output of `tr-generate-api-keys` that can be provided to `tr-push`\n */\nexport const StoredApiKey = t.type({\n  /** Name of instance */\n  organizationName: t.string,\n  /** API key */\n  apiKey: t.string,\n  /** Organization ID API key is for */\n  organizationId: t.string,\n});\n\n/** Type override */\nexport type StoredApiKey = t.TypeOf<typeof StoredApiKey>;\n\n/**\n * Minimal set required to mark as completed\n */\nexport const DataFlowCsvInput = t.intersection([\n  t.type({\n    /** The value of the data flow (host or regex) */\n    'Connections Made To': t.string,\n    /** The type of the data flow */\n    Type: valuesOf(DataFlowScope),\n    /** The CSV of purposes mapped to that data flow */\n    Purpose: t.string,\n  }),\n  t.partial({\n    /** The service that the data flow relates to */\n    Service: t.string,\n    /** Notes and descriptions for the data flow */\n    Notes: t.string,\n    /** Set of data flow owners */\n    Owners: t.string,\n    /** Set of data flow team owners */\n    Teams: t.string,\n    /** LIVE vs NEEDS_REVIEW aka Approved vs Triage  */\n    Status: valuesOf(ConsentTrackerStatus),\n  }),\n  // Custom attributes\n  t.record(t.string, t.string),\n]);\n\n/** Type override */\nexport type DataFlowCsvInput = t.TypeOf<typeof DataFlowCsvInput>;\n\nexport const CookieCsvInput = t.intersection([\n  t.type({\n    /** The value of the cookie */\n    Name: t.string,\n    /** The CSV of purposes mapped to that cookie */\n    Purpose: t.string,\n  }),\n  t.partial({\n    /** The service that the cookie relates to */\n    Service: t.string,\n    /** Notes and descriptions for the cookie */\n    Notes: t.string,\n    /** Set of cookie owners */\n    Owners: t.string,\n    /** Set of cookie team owners */\n    Teams: t.string,\n    /** LIVE vs NEEDS_REVIEW aka Approved vs Triage  */\n    Status: valuesOf(ConsentTrackerStatus),\n  }),\n  // Custom attributes\n  t.record(t.string, t.string),\n]);\n\n/** Type override */\nexport type CookieCsvInput = t.TypeOf<typeof CookieCsvInput>;\n\n/**\n * Export of (await airgap.getMetadata()).services\n */\nexport const ConsentManagerServiceMetadata = t.type({\n  /** The title of the service */\n  title: t.string,\n  /** The description */\n  description: t.string,\n  /** Cookies */\n  cookies: t.array(\n    t.type({\n      /** Name of cookie */\n      name: t.string,\n      /** Allowed purposes */\n      trackingPurposes: t.array(t.string),\n    }),\n  ),\n  /** Data Flows */\n  dataFlows: t.array(\n    t.type({\n      /** Value of data flow */\n      value: t.string,\n      /** Type of data flow */\n      type: valuesOf(DataFlowScope),\n      /** Allowed purposes */\n      trackingPurposes: t.array(t.string),\n    }),\n  ),\n});\n\n/** Type override */\nexport type ConsentManagerServiceMetadata = t.TypeOf<typeof ConsentManagerServiceMetadata>;\n\n/** The columns of a row of a OneTrust Assessment form to import into Transcend. */\nconst OneTrustAssessmentColumnInput = t.intersection([\n  t.type({\n    /** The title of the column */\n    title: t.string,\n  }),\n  t.partial({\n    /** The optional value of the column */\n    value: t.string,\n  }),\n]);\n\n/** A row with information of the OneTrust assessment form to import into Transcend */\nconst OneTrustAssessmentRowInput = t.type({\n  /** A list of columns within this row. */\n  columns: t.array(OneTrustAssessmentColumnInput),\n});\n\n/** Input for importing multiple OneTrust assessment forms into Transcend */\nexport const ImportOnetrustAssessmentsInput = t.partial({\n  /** 'The rows of the CSV file.' */\n  rows: t.array(OneTrustAssessmentRowInput),\n  /** 'The json record representing the assessment.' */\n  json: t.string,\n});\n/** Type override */\nexport type ImportOnetrustAssessmentsInput = t.TypeOf<typeof ImportOnetrustAssessmentsInput>;\n"],"mappings":"s5DA6EA,MAAa,EAAgB,EAAE,KAAK,CAElC,MAAO,EAAE,OACV,CAAC,CAKW,EAAgB,EAAE,aAAa,CAC1C,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,SAAU,EAAE,QACb,CAAC,CACH,CAAC,CAaW,EAAc,EAAE,KAAK,CAEhC,MAAO,EAAE,OACV,CAAC,CAWW,EAAY,EAAE,aAAa,CACtC,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,YAAa,EAAE,OAChB,CAAC,CACF,EAAE,QAAQ,CAER,iBAAkB,EAAE,OAEpB,YAAa,EAAE,OAEf,YAAa,EAAE,OAEf,mBAAoB,EAAE,OAEtB,MAAO,EAAE,MAAM,EAAE,OAAO,CAExB,OAAQ,EAAE,MAAM,EAAS,GAAU,CAAC,CACrC,CAAC,CACH,CAAC,CAiBW,EAAgB,EAAE,aAAa,CAC1C,EAAE,KAAK,CAEL,MAAO,EAAE,OAMT,qBAAsB,EAAE,MAAM,EAAE,OAAO,CACxC,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,IAAK,EAAE,OAEP,KAAM,EAAS,GAAa,CAM5B,mBAAoB,EAAE,OAItB,UAAW,EAAE,OAIb,iBAAkB,EAAE,OAIpB,mBAAoB,EAAE,OAItB,wBAAyB,EAAS,GAAuB,CAIzD,aAAc,EAAE,MAAM,EAAE,OAAO,CAE/B,WAAY,EAAE,MAAM,EAAS,CAAE,GAAG,EAAgB,GAAG,EAA2B,CAAC,CAAC,CAIlF,gBAAiB,EAAE,MAAM,EAAE,OAAO,CAElC,QAAS,EAAE,MAAM,EAAc,CAE/B,kBAAmB,EAAE,MAAM,EAAS,EAAc,CAAC,CACpD,CAAC,CACH,CAAC,CAMW,EAAiB,EAQjB,EAAgC,EAAE,aAAa,CAC1D,EAAE,KAAK,CAEL,QAAS,EAAS,EAAkB,CACrC,CAAC,CACF,EAAE,QAAQ,CAER,KAAM,EAAE,OACT,CAAC,CACH,CAAC,CAQW,EAA2B,EAAE,aAAa,CACrD,EAAE,KAAK,CAEL,SAAU,EAAS,GAAiB,CACrC,CAAC,CACF,EAAE,QAAQ,CAER,KAAM,EAAE,OACT,CAAC,CACH,CAAC,CAQW,EAAyB,EAAE,aAAa,CACnD,EAAE,KAAK,CAEL,SAAU,EAEV,OAAQ,EAAS,GAAuC,CAExD,WAAY,EAAE,OACf,CAAC,CACF,EAAE,QAAQ,CAER,kBAAmB,EAAE,OACtB,CAAC,CACH,CAAC,CAQW,GAAkC,EAAE,aAAa,CAC5D,EAAE,KAAK,CAEL,SAAU,EAEV,OAAQ,EAAS,GAA6C,CAE9D,WAAY,EAAE,OACf,CAAC,CACF,EAAE,QAAQ,CAER,kBAAmB,EAAE,OACtB,CAAC,CACH,CAAC,CAKW,EAAsB,EAAE,aAAa,CAChD,EAAE,KAAK,CAEL,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,MAAO,EAAE,OACV,CAAC,CACH,CAAC,CAKW,EAAiB,EAAE,aAAa,CAC3C,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,KAAM,EAAS,GAAiB,CACjC,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,UAAW,EAAE,MAAM,EAAS,EAA+B,CAAC,CAE5D,OAAQ,EAAE,MAAM,EAAoB,CACrC,CAAC,CACH,CAAC,CAKW,EAAmB,EAAE,KAAK,CAErC,IAAK,EAAE,OAEP,OAAQ,EAAE,MAAM,EAAE,OAAO,CAC1B,CAAC,CAQW,EAAc,EAAE,aAAa,CACxC,EAAE,KAAK,CAEL,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,4BAA6B,EAAE,OAE/B,YAAa,EAAE,OAEf,aAAc,EAAE,OAEhB,QAAS,EAAE,OAEX,mBAAoB,EAAS,EAAe,CAE5C,uBAAwB,EAAS,EAA0B,CAE3D,WAAY,EAAE,OAEd,eAAgB,EAAE,OAKlB,OAAQ,EAAE,MAAM,EAAE,OAAO,CAQzB,MAAO,EAAE,MAAM,EAAE,OAAO,CAIxB,WAAY,EAAE,MAAM,EAAiB,CACtC,CAAC,CACH,CAAC,CAUW,EAAoB,EAAE,aAAa,CAC9C,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,SAAU,EAAS,GAAiB,CACrC,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,MAAO,EAAE,OAKT,OAAQ,EAAE,MAAM,EAAE,OAAO,CAQzB,MAAO,EAAE,MAAM,EAAE,OAAO,CAIxB,WAAY,EAAE,MAAM,EAAiB,CACtC,CAAC,CACH,CAAC,CAUW,GAAyB,EAAE,aAAa,CACnD,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,QAAS,EAAS,EAAkB,CACrC,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAKf,OAAQ,EAAE,MAAM,EAAE,OAAO,CAQzB,MAAO,EAAE,MAAM,EAAE,OAAO,CAIxB,WAAY,EAAE,MAAM,EAAiB,CACtC,CAAC,CACH,CAAC,CAWW,EAAa,EAAE,aAAa,CACvC,EAAE,KAAK,CAEL,IAAK,EAAE,OACR,CAAC,CACF,EAAE,QAAQ,CAER,MAAO,EAAE,OAET,YAAa,EAAE,MAAM,CAAC,EAAE,OAAQ,EAAE,KAAK,CAAC,CAMxC,SAAU,EAAE,MAAM,EAA8B,CAMhD,WAAY,EAAE,MAAM,EAAyB,CAM7C,qBAAsB,EAAE,MAAM,EAAuB,CAKrD,oCAAqC,EAAE,QAOvC,oCAAqC,EAAE,QAEvC,WAAY,EAAE,MAAM,EAAiB,CACtC,CAAC,CACH,CAAC,CAYW,EAAiB,EAAE,aAAa,CAC3C,EAAE,KAAK,CAEL,IAAK,EAAE,OACR,CAAC,CACF,EAAE,QAAQ,CAYR,KAAM,EAAE,MAAM,EAAE,OAAO,CAEvB,MAAO,EAAE,OAET,YAAa,EAAE,OAMf,sBAAuB,EAAE,OAMzB,yBAA0B,EAAE,QAAQ,EAAU,MAAmC,EAAE,OAAO,CAAC,CAM3F,kBAAmB,EAAE,MAAM,EAAS,EAA4B,CAAC,CAKjE,OAAQ,EAAE,MAAM,EAAW,CAK3B,OAAQ,EAAE,MAAM,EAAE,OAAO,CAQzB,MAAO,EAAE,MAAM,EAAE,OAAO,CACzB,CAAC,CACH,CAAC,CAKW,EAA6B,EAAE,QAAQ,CAElD,uBAAwB,EAAE,OAI1B,iBAAkB,EAAE,OAKpB,YAAa,EAAS,GAA2B,CAKjD,iCAAkC,EAAE,QAIpC,uBAAwB,EAAS,GAAqC,CAKtE,8BAA+B,EAAE,OAClC,CAAC,CAUW,EAAsB,EAAE,aAAa,CAChD,EAAE,KAAK,CAEL,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,QAAS,EAAE,OAEX,mBAAoB,EAAS,EAAe,CAE5C,uBAAwB,EAAS,EAA0B,CAE3D,0BAA2B,EAAE,OAE7B,2BAA4B,EAAE,OAI9B,WAAY,EAAE,MAAM,EAAiB,CAKrC,OAAQ,EAAE,MAAM,EAAE,OAAO,CAQzB,MAAO,EAAE,MAAM,EAAE,OAAO,CACzB,CAAC,CACH,CAAC,CAKW,EAAc,EAAE,QAAQ,CAEnC,QAAS,EAAS,EAAe,CAEjC,mBAAoB,EAAS,EAA0B,CACxD,CAAC,CAUW,EAA0B,EAAE,aAAa,CACpD,EAAE,KAAK,CAEL,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,uBAAwB,EAAE,OAM1B,gBAAiB,EAAE,MAAM,EAAS,GAAe,CAAC,CAElD,eAAgB,EAAE,MAAM,EAAY,CAEpC,gBAAiB,EAAE,MAAM,EAAY,CAMrC,cAAe,EAAS,GAAc,CAEtC,gBAAiB,EAAE,OAEnB,mCAAoC,EAAE,OAMtC,qCAAsC,EAAS,GAAqC,CAIpF,WAAY,EAAE,MAAM,EAAiB,CAErC,eAAgB,EAAE,MAAM,EAAE,OAAO,CAEjC,iBAAkB,EAAE,MAAM,EAAE,OAAO,CAEnC,UAAW,EAAE,MAAM,EAAE,OAAO,CAE5B,YAAa,EAAE,MAAM,EAAE,OAAO,CAM9B,sBAAuB,EAAE,MAAM,EAA8B,CAM7D,kBAAmB,EAAE,MAAM,EAAyB,CAEpD,eAAgB,EAAE,MAAM,EAAE,OAAO,CAClC,CAAC,CACH,CAAC,CAUW,GAA8B,EAAE,aAAa,CACxD,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,gBAAiB,EAAS,EAAgB,CAC3C,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,cAAe,EAAE,OAEjB,uBAAwB,EAAE,OAE1B,mBAAoB,EAAE,MAAM,EAAE,OAAO,CAErC,YAAa,EAAE,MAAM,EAAE,OAAO,CAE9B,UAAW,EAAE,MAAM,EAAE,OAAO,CAC7B,CAAC,CACH,CAAC,CAQW,EAAiB,EAAE,aAAa,CAC3C,EAAE,KAAK,CAEL,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,QAAS,EAAE,OAEX,gBAAiB,EAAE,QACpB,CAAC,CACH,CAAC,CAUW,GAAmB,EAAE,aAAa,CAC7C,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,KAAM,EAAS,EAAgB,CAE/B,aAAc,EAAE,OAEhB,eAAgB,EAAE,OACnB,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,wBAAyB,EAAE,MAAM,EAAe,CAEhD,UAAW,EAAE,MAAM,EAAE,OAAO,CAE5B,YAAa,EAAE,MAAM,EAAE,OAAO,CAC/B,CAAC,CACH,CAAC,CAUW,GAAkB,EAAE,aAAa,CAC5C,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,IAAK,EAAE,OACR,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,UAAW,EAAE,MAAM,EAAE,OAAO,CAE5B,YAAa,EAAE,MAAM,EAAE,OAAO,CAC/B,CAAC,CACH,CAAC,CAUW,EAAmB,EAAE,aAAa,CAC7C,EAAE,KAAK,CAEL,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,OAAQ,EAAE,QAEV,MAAO,EAAE,OAET,gCAAiC,EAAE,QAKnC,wBAAyB,EAAE,QAE3B,QAAS,EAAE,MAAM,EAAS,EAAc,CAAC,CAC1C,CAAC,CACH,CAAC,CAUW,EAAc,EAAE,aAAa,CACxC,EAAE,KAAK,CAEL,KAAM,EAAS,EAAc,CAC9B,CAAC,CACF,EAAE,QAAQ,CAER,uBAAwB,EAAE,QAE1B,qBAAsB,EAAE,QAExB,eAAgB,EAAE,QAElB,cAAe,EAAE,OAEjB,sBAAuB,EAAS,GAAsB,CAEtD,WAAY,EAAE,MAAM,EAAS,CAAE,GAAG,EAAgB,GAAG,EAA2B,CAAC,CAAC,CAElF,gBAAiB,EAAE,MAAM,EAAS,CAAE,GAAG,EAAgB,GAAG,EAA2B,CAAC,CAAC,CACxF,CAAC,CACH,CAAC,CAUW,EAAkB,EAAE,aAAa,CAC5C,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,MAAO,EAAE,OAET,cAAe,EAAE,MAAM,EAAE,OAAO,CAEhC,wBAAyB,EAAE,MAAM,EAAS,EAAc,CAAC,CAEzD,aAAc,EAAE,MAAM,EAAE,OAAO,CAE/B,iBAAkB,EAAE,QAEpB,YAAa,EAAE,OAEf,aAAc,EAAE,OAEhB,mBAAoB,EAAE,OAEtB,aAAc,EAAE,OAEhB,0BAA2B,EAAE,QAC9B,CAAC,CACH,CAAC,CAUW,EAAgB,EAAE,aAAa,CAC1C,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,KAAM,EAAS,EAAc,CAC9B,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,iBAAkB,EAAE,MAAM,EAAE,OAAO,CAInC,QAAS,EAAE,OAIX,OAAQ,EAAS,EAAqB,CAKtC,OAAQ,EAAE,MAAM,EAAE,OAAO,CAQzB,MAAO,EAAE,MAAM,EAAE,OAAO,CAIxB,WAAY,EAAE,MAAM,EAAiB,CACtC,CAAC,CACH,CAAC,CAKW,EAAc,EAAE,aAAa,CACxC,EAAE,KAAK,CAEL,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,QAAS,EAAE,QAEX,YAAa,EAAE,OAEf,iBAAkB,EAAE,MAAM,EAAE,OAAO,CAInC,QAAS,EAAE,OAIX,OAAQ,EAAS,EAAqB,CAKtC,OAAQ,EAAE,MAAM,EAAE,OAAO,CAQzB,MAAO,EAAE,MAAM,EAAE,OAAO,CAIxB,WAAY,EAAE,MAAM,EAAiB,CACtC,CAAC,CACH,CAAC,CAKW,EAA+B,EAAE,aAAa,CACzD,EAAE,KAAK,CAEL,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,QAAS,EAAE,MAAM,EAAY,CAE7B,gBAAiB,EAAS,GAAgB,CAE1C,cAAe,EAAE,OAEjB,SAAU,EAAS,GAAgB,CAEnC,gBAAiB,EAAE,OAEnB,UAAW,EAAS,GAAiB,CAErC,SAAU,EAAE,MACV,EAAE,KAAK,CAEL,aAAc,EAAE,OACjB,CAAC,CACH,CAED,iBAAkB,EAAE,MAClB,EAAE,KAAK,CAEL,aAAc,EAAE,OACjB,CAAC,CACH,CAID,iBAAkB,EAAE,MAAM,EAAS,GAAgB,CAAC,CAEpD,iBAAkB,EAAE,MAAM,EAAS,GAAgB,CAAC,CAEpD,qBAAsB,EAAE,OACzB,CAAC,CACH,CAAC,CAKW,EAAiB,EAAE,aAAa,CAC3C,EAAE,KAAK,CAEL,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,UAAW,EAAE,OACd,CAAC,CACH,CAAC,CAKW,EAAsB,EAAE,QAAQ,CAE3C,QAAS,EAAE,OAEX,WAAY,EAAE,OAAO,EAAS,GAAkB,CAAE,EAAE,OAAO,CAE3D,QAAS,EAAE,MAAM,EAAE,OAAO,CAE1B,UAAW,EAAE,OAEb,kBAAmB,EAAS,GAAwB,CAEpD,qBAAsB,EAAS,EAAqB,CAEpD,oBAAqB,EAAS,EAAqB,CAEnD,aAAc,EAAE,OAEhB,sBAAuB,EAAS,GAA2B,CAE3D,mBAAoB,EAAS,GAAyB,CAEtD,YAAa,EAAE,MAAM,EAA6B,CAElD,MAAO,EAAE,QAAQ,CAEf,aAAc,EAAE,OAEhB,UAAW,EAAE,OAEb,cAAe,EAAE,OAEjB,OAAQ,EAAE,OACX,CAAC,CAGF,WAAY,EAAE,OACd,gBAAiB,EAAE,MAAM,GAAoB,CAC7C,cAAe,EAAE,MAAM,GAAkB,CAC1C,CAAC,CAQW,EAAqB,EAAE,QAAQ,CAE1C,WAAY,EAAE,QAEd,yBAA0B,EAAE,QAE5B,aAAc,EAAE,QAEhB,yBAA0B,EAAE,QAE5B,YAAa,EAAE,QAEf,cAAe,EAAE,QAEjB,mBAAoB,EAAE,QAEtB,sBAAuB,EAAE,QAEzB,yBAA0B,EAAE,QAE5B,QAAS,EAAE,MAAM,EAAS,EAAW,CAAC,CAEtC,cAAe,EAAS,EAAW,CAEnC,2BAA4B,EAAE,QAE9B,aAAc,EAAE,OAEhB,aAAc,EAAE,OAEhB,uBAAwB,EAAE,QAE1B,qBAAsB,EAAE,QAExB,+BAAgC,EAAE,QAKlC,KAAM,EAAE,OAER,wBAAyB,EAAE,QAK3B,8BAA+B,EAAE,QAKjC,+BAAgC,EAAE,MAAM,EAAE,OAAO,CAEjD,aAAc,EAAS,GAA0B,CAKjD,YAAa,EAAE,MACb,EAAE,aAAa,CACb,EAAE,KAAK,CAEL,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,IAAK,EAAE,OAMP,SAAU,EAAE,QACb,CAAC,CACH,CAAC,CACH,CAED,MAAO,EAAE,QAAQ,CAEf,OAAQ,EAAE,QAAQ,EAAU,OAAqC,EAAE,OAAO,CAAC,CAE3E,gBAAiB,GAEjB,WAAY,GACb,CAAC,CACH,CAAC,CAQW,GAAc,EAAE,aAAa,CACxC,EAAE,KAAK,CAEL,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAKR,KAAM,EAAS,GAAW,CAE1B,YAAa,EAAE,OAEf,mBAAoB,EAAE,QAEtB,QAAS,EAAE,OAEX,gBAAiB,EAAE,MAAM,EAAS,EAAW,CAAC,CAC/C,CAAC,CACH,CAAC,CAQW,GAAmB,EAAE,aAAa,CAC7C,EAAE,KAAK,CAEL,GAAI,EAAE,OACP,CAAC,CACF,EAAE,QAAQ,CAER,kBAAmB,EAAE,OAErB,YAAa,EAAE,OAEf,eAAgB,EAAE,OAElB,aAAc,EAAE,QAAQ,EAAU,MAAkB,EAAE,OAAO,CAAC,CAC/D,CAAC,CACH,CAAC,CAYW,GAAqB,EAAE,aAAa,CAC/C,EAAE,KAAK,CAML,OAAQ,EAAE,MAAM,EAAE,OAAO,CAC1B,CAAC,CACF,EAAE,QAAQ,CAKR,SAAU,EAAE,OACb,CAAC,CACH,CAAC,CASW,GAA0B,EAAE,KAAK,CAE5C,SAAU,EAAE,OAEZ,kBAAmB,EAAE,QAAQ,GAAK,CACnC,CAAC,CAUW,GAA0B,EAAE,MAAM,CAAC,GAAoB,GAAwB,CAAC,CAahF,GAAuB,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAE,EAAE,MAAM,GAAwB,CAAC,CAAC,CAarF,GAAgB,EAAE,aAAa,CAC1C,EAAE,KAAK,CAEL,MAAO,EAAE,OAKT,gBAAiB,EAAE,OACpB,CAAC,CACF,EAAE,QAAQ,CAER,aAAc,EAAE,OAEhB,YAAa,EAAE,OAEf,IAAK,EAAE,OAEP,gBAAiB,EAAE,OAKnB,YAAa,EAAE,OAEf,QAAS,EAAE,MAAM,EAAc,CAM/B,gBAAiB,EAAE,MAAM,EAAE,OAAO,CAKlC,gBAAiB,EAAE,MAAM,EAAE,OAAO,CAWlC,wBAAyB,GAKzB,OAAQ,EAAE,MAAM,EAAE,OAAO,CAQzB,MAAO,EAAE,MAAM,EAAE,OAAO,CAKxB,SAAU,EAAE,QAKZ,WAAY,EAAE,MAAM,EAAe,CAInC,iBAAkB,EAElB,QAAS,EAAS,EAAe,CAEjC,mBAAoB,EAAS,EAA0B,CAIvD,WAAY,EAAE,MAAM,EAAiB,CAIrC,qBAAsB,EAAE,MAAM,EAAE,OAAO,CACxC,CAAC,CACH,CAAC,CAKW,GAA4B,EAAE,aAAa,CACtD,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,YAAa,EAAS,GAAiB,CACxC,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,OAAQ,EAAE,QACX,CAAC,CACH,CAAC,CAQW,GAAkB,EAAE,aAAa,CAC5C,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,KAAM,EAAS,EAAe,CAE9B,YAAa,EAAE,MAAM,EAAE,OAAO,CAC/B,CAAC,CACF,EAAE,QAAQ,CAER,SAAU,EAAS,EAA2B,CAE9C,+BAAgC,EAAE,OAElC,QAAS,EAAE,OAEX,SAAU,EAAE,QAEZ,MAAO,EAAE,OAET,KAAM,EAAE,OAIR,MAAO,EAAE,MAAM,EAAE,OAAO,CAOxB,MAAO,EAAE,MAAM,EAAE,OAAO,CAIxB,WAAY,EAAE,MAAM,EAAiB,CACtC,CAAC,CACH,CAAC,CAKW,EAAsB,EAAE,aAAa,CAChD,EAAE,KAAK,CAEL,mCAAoC,EAAE,OAEtC,sBAAuB,EAAS,EAAmB,CACpD,CAAC,CACF,EAAE,QAAQ,CAER,sBAAuB,EAAE,MAAM,EAAE,OAAO,CACzC,CAAC,CACH,CAAC,CAcW,GACX,EAAE,UAAU,4BAA8B,GACxC,EAAE,aAAa,CACb,EAAE,KAAK,CAEL,iBAAkB,EAAS,GAAc,CAC1C,CAAC,CACF,EAAE,QAAQ,CAER,MAAO,EAAE,MAAM,EAAoB,CAEnC,eAAgB,EAAE,MAAM,EAAK,CAC9B,CAAC,CACH,CAAC,CACH,CAEU,GAA8B,EAAE,aAAa,CACxD,EAAE,KAAK,CAEL,OAAQ,EAAS,GAA8B,CAChD,CAAC,CACF,EAAE,QAAQ,CAER,KAAM,EAEN,cAAe,GAChB,CAAC,CACH,CAAC,CAKW,GAAsB,EAAE,QAAQ,CAE3C,aAAc,EAAE,OAEhB,qBAAsB,EAAE,OAExB,kBAAmB,EAAE,OACtB,CAAC,CAKW,GAAiB,EAAE,aAAa,CAC3C,EAAE,KAAK,CAEL,sBAAuB,EAAE,MAAM,EAAE,OAAO,CAExC,sBAAuB,EAAS,EAAmB,CACpD,CAAC,CACF,EAAE,QAAQ,CAER,aAAc,EAAE,OAEhB,qBAAsB,EAAE,OAExB,kBAAmB,EAAE,OACtB,CAAC,CACH,CAAC,CAKW,GAA8B,EAAE,KAAK,CAEhD,MAAO,EAAE,OACV,CAAC,CAKW,GAAiC,EAAE,aAAa,CAC3D,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,KAAM,EAAS,GAAuB,CACvC,CAAC,CACF,EAAE,QAAQ,CAER,WAAY,EAAS,GAA0B,CAE/C,YAAa,EAAE,OAEf,YAAa,EAAE,OAEf,cAAe,EAAE,QAEjB,eAAgB,EAAE,OAElB,gBAAiB,GAEjB,aAAc,EAAE,MAAM,GAAe,CAErC,kBAAmB,EAAE,MAAM,EAAE,OAAO,CAEpC,iBAAkB,EAAE,OAEpB,iBAAkB,EAAE,MAAM,GAA4B,CAEtD,mBAAoB,EAAE,MAAM,EAAE,OAAO,CAErC,qBAAsB,EAAE,MAAM,EAAE,OAAO,CAEvC,qBAAsB,EAAE,QAExB,aAAc,EAAS,GAAoB,CAE3C,cAAe,EAAS,GAAqB,CAE7C,gBAAiB,EAAE,OAEnB,0BAA2B,EAAE,QAE7B,iCAAkC,EAAE,QACrC,CAAC,CACH,CAAC,CAKW,EAAyB,EAAE,aAAa,CACnD,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,UAAW,EAAE,MAAM,GAA+B,CACnD,CAAC,CACF,EAAE,QAAQ,CAER,UAAW,EAAE,MAAM,EAAE,OAAO,CAE5B,qBAAsB,EAAE,MAAM,EAAE,OAAO,CAEvC,OAAQ,EAAE,OAEV,cAAe,EAAE,QAClB,CAAC,CACH,CAAC,CAKW,EAAmC,EAAE,KAAK,CAErD,KAAM,EAAS,GAAsB,CAErC,gBAAiB,EAAE,OAEnB,QAAS,EAAS,GAA2B,CAC9C,CAAC,CAKW,GAA0B,EAAE,aAAa,CACpD,EAAE,KAAK,CAEL,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,SAAU,EAAE,MAAM,EAAuB,CAEzC,YAAa,EAAE,OAEf,OAAQ,EAAS,GAA6B,CAE9C,OAAQ,EAAS,GAA6B,CAE9C,QAAS,EAAE,OAEX,OAAQ,EAAE,QAEV,YAAa,EAAE,OAEf,SAAU,EAAE,QAEZ,aAAc,EAAE,OAEhB,iBAAkB,EAAE,MAAM,EAAE,OAAO,CAEnC,qBAAsB,EAEtB,UAAW,EAAE,MAAM,EAAE,OAAO,CAC7B,CAAC,CACH,CAAC,CAKW,EAA0B,EAAE,KAAK,CAE5C,MAAO,EAAE,OAET,KAAM,EAAS,EAA+B,CAC/C,CAAC,CAKW,GAAkB,EAAE,aAAa,CAC5C,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,SAAU,EAAE,MAAM,EAAuB,CAEzC,QAAS,EAAE,OAEX,YAAa,EAAE,OAEf,OAAQ,EAAS,EAAqB,CAEtC,UAAW,EAAE,MAAM,EAAE,OAAO,CAE5B,qBAAsB,EAAE,MAAM,EAAE,OAAO,CAEvC,UAAW,EAAE,MAAM,EAAE,OAAO,CAE5B,OAAQ,EAAE,QAEV,SAAU,EAAE,QAEZ,SAAU,EAAE,QAIZ,oBAAqB,EAAE,QAEvB,WAAY,EAAE,OAEd,aAAc,EAAE,OAEhB,cAAe,EAAE,OAEjB,eAAgB,EAAE,OAElB,cAAe,EAAE,OAEjB,cAAe,EAAE,OAEjB,UAAW,EAAE,MAAM,EAAwB,CAE3C,KAAM,EAAE,MAAM,EAAwB,CAEtC,qBAAsB,EAEtB,WAAY,EAAE,MAAM,EAAiB,CACtC,CAAC,CACH,CAAC,CAKW,EAAoC,EAAE,KAAK,CAEtD,MAAO,EAAE,OAET,KAAM,EAAE,OACT,CAAC,CAKW,GAAyB,EAAE,aAAa,CACnD,EAAE,KAAK,CAEL,KAAM,EAAS,GAAoB,CAEnC,MAAO,EAAE,OAET,YAAa,EAAE,OAEf,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,MAAO,EAAE,OAET,wBAAyB,EAAE,OAE3B,yBAA0B,EAAE,QAE5B,QAAS,EAAE,MAAM,EAAkC,CACpD,CAAC,CACH,CAAC,CAKW,GAAiB,EAAE,aAAa,CAC3C,EAAE,KAAK,CAEL,aAAc,EAAE,OAEhB,MAAO,EAAE,OAET,KAAM,EAAE,OACT,CAAC,CACF,EAAE,QAAQ,CAER,YAAa,EAAE,OAEf,YAAa,EAAE,QAEf,aAAc,EAAE,QAEhB,gBAAiB,EAAE,OAEnB,yBAA0B,EAAE,QAE5B,0BAA2B,EAAE,QAE7B,oBAAqB,EAAE,MAAM,GAAuB,CAEpD,aAAc,EAAS,GAAyB,CAEhD,kBAAmB,EAAE,MAAM,EAAS,GAAsB,CAAC,CAE3D,kBAAmB,EAAS,GAAqB,CAClD,CAAC,CACH,CAAC,CAQW,GAAuC,EAAE,KAAK,CAEzD,gBAAiB,EAAE,OAEnB,iBAAkB,EAAE,QACrB,CAAC,CAgBW,GAAgC,EAAE,aAAa,CAC1D,EAAE,KAAK,CAEL,KAAM,EAAE,OAKR,SAAU,EAAE,MAAM,GAAqC,CACxD,CAAC,CACF,EAAE,QAAQ,CAKR,iBAAkB,EAAE,OAEpB,cAAe,EAAS,EAAc,CAEtC,oBAAqB,EAAE,OAEvB,YAAa,EAAE,QAEf,wBAAyB,EAAE,QAE3B,YAAa,EAAE,QAEf,mBAAoB,EAAE,MAAM,EAAE,OAAO,CACtC,CAAC,CACH,CAAC,CAUW,GAAsB,EAAE,aAAa,CAChD,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,cAAe,EAAS,EAAc,CACvC,CAAC,CACF,EAAE,QAAQ,CAKR,gBAAiB,EAAE,OAEnB,SAAU,EAAE,OAEZ,YAAa,EAAE,OAEf,oBAAqB,EAAE,OAEvB,WAAY,EAAS,GAAyB,CAE9C,KAAM,EAAS,GAAmB,CAElC,+BAAgC,EAAS,GAA0B,CAEnE,cAAe,EAAE,MAAM,EAAS,CAAE,GAAG,EAAgB,GAAG,EAA2B,CAAC,CAAC,CAErF,cAAe,EAAE,MACf,EAAE,KAAK,CAEL,OAAQ,EAAS,CAAE,QAAS,UAAW,GAAG,EAAgB,GAAG,EAA2B,CAAC,CAEzF,MAAO,EAAE,OACV,CAAC,CACH,CAED,iBAAkB,EAAE,MAAM,EAAE,OAAO,CACpC,CAAC,CACH,CAAC,CAUW,EAA2B,EAAE,aAAa,CACrD,EAAE,KAAK,CAEL,WAAY,EAAE,OAEd,OAAQ,EAAE,OAEV,iBAAkB,EAAE,OAEpB,sBAAuB,EAAE,OAEzB,OAAQ,EAAE,OACX,CAAC,CACF,EAAE,QAAQ,CAER,QAAS,EAAS,EAAe,CAEjC,mBAAoB,EAAS,EAA0B,CAEvD,iBAAkB,EAAE,OAEpB,MAAO,EAAE,MAAM,CAAC,EAAE,OAAQ,EAAE,KAAK,CAAC,CACnC,CAAC,CACH,CAAC,CAKW,GAAiB,EAAE,QAAQ,CAItC,eAAgB,EAAE,MAAM,GAAgB,CAIxC,0BAA2B,EAAE,MAAM,GAA0B,CAI7D,WAAY,EAAE,MAAM,EAAY,CAEhC,MAAO,EAAE,MAAM,EAAU,CAIzB,UAAW,EAAE,MAAM,EAAc,CAIjC,WAAY,EAAE,MAAM,EAAe,CAInC,UAAW,EAAE,MAAM,EAAe,CAIlC,WAAY,EAAE,MAAM,EAAe,CAInC,oBAAqB,EAAE,MAAM,EAAoB,CAIjD,QAAS,EAAE,MAAM,EAAY,CAI7B,kBAAmB,EAAE,MAAM,EAAkB,CAI7C,sBAAuB,EAAE,MAAM,GAAuB,CAItD,gBAAiB,EAAE,MAAM,EAAiB,CAI1C,QAAS,EAAE,MAAM,EAAY,CAI7B,YAAa,EAAE,MAAM,EAAgB,CAIrC,aAAc,EAAE,MAAM,GAAc,CAIpC,aAAc,EAAE,MAAM,EAAc,CAIpC,QAAS,EAAE,MAAM,EAAY,CAI7B,kBAAmB,EAInB,iBAAkB,EAIlB,SAAU,EAAE,MAAM,GAAY,CAI9B,SAAU,EAAE,MAAM,GAAiB,CAEnC,WAAY,EAAE,MAAM,EAAe,CAInC,uBAAwB,EAAE,MAAM,GAAwB,CAIxD,YAAa,EAAE,MAAM,GAAgB,CAIrC,wBAAyB,EAAE,MAAM,EAAwB,CAIzD,SAAU,EAAE,MAAM,GAAe,CAIjC,mBAAoB,EAAE,MAAM,EAAyB,CAIrD,8BAA+B,EAAE,MAAM,GAA8B,CAIrE,mBAAoB,EAAE,MAAM,GAAoB,CAIhD,qBAAsB,EAAE,MAAM,EAAkC,CACjE,CAAC,CAWF,SAAgB,GAAwB,EAAuC,CAC7E,GAAM,CAAE,YAAW,aAAY,GAAG,IAAS,EAI3C,OAHI,IAAc,IAAA,IAAa,IAAe,IAAA,GACrC,EAEF,CACL,GAAG,GACH,WAAY,CAAC,GAAI,GAAc,EAAE,CAAG,GAAI,GAAa,EAAE,CAAE,CAC1D,CAMH,MAAa,GAAe,EAAE,KAAK,CAEjC,iBAAkB,EAAE,OAEpB,OAAQ,EAAE,OAEV,eAAgB,EAAE,OACnB,CAAC,CAQW,GAAmB,EAAE,aAAa,CAC7C,EAAE,KAAK,CAEL,sBAAuB,EAAE,OAEzB,KAAM,EAAS,EAAc,CAE7B,QAAS,EAAE,OACZ,CAAC,CACF,EAAE,QAAQ,CAER,QAAS,EAAE,OAEX,MAAO,EAAE,OAET,OAAQ,EAAE,OAEV,MAAO,EAAE,OAET,OAAQ,EAAS,EAAqB,CACvC,CAAC,CAEF,EAAE,OAAO,EAAE,OAAQ,EAAE,OAAO,CAC7B,CAAC,CAKW,GAAiB,EAAE,aAAa,CAC3C,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,QAAS,EAAE,OACZ,CAAC,CACF,EAAE,QAAQ,CAER,QAAS,EAAE,OAEX,MAAO,EAAE,OAET,OAAQ,EAAE,OAEV,MAAO,EAAE,OAET,OAAQ,EAAS,EAAqB,CACvC,CAAC,CAEF,EAAE,OAAO,EAAE,OAAQ,EAAE,OAAO,CAC7B,CAAC,CAQW,GAAgC,EAAE,KAAK,CAElD,MAAO,EAAE,OAET,YAAa,EAAE,OAEf,QAAS,EAAE,MACT,EAAE,KAAK,CAEL,KAAM,EAAE,OAER,iBAAkB,EAAE,MAAM,EAAE,OAAO,CACpC,CAAC,CACH,CAED,UAAW,EAAE,MACX,EAAE,KAAK,CAEL,MAAO,EAAE,OAET,KAAM,EAAS,EAAc,CAE7B,iBAAkB,EAAE,MAAM,EAAE,OAAO,CACpC,CAAC,CACH,CACF,CAAC,CAMI,GAAgC,EAAE,aAAa,CACnD,EAAE,KAAK,CAEL,MAAO,EAAE,OACV,CAAC,CACF,EAAE,QAAQ,CAER,MAAO,EAAE,OACV,CAAC,CACH,CAAC,CAGI,GAA6B,EAAE,KAAK,CAExC,QAAS,EAAE,MAAM,GAA8B,CAChD,CAAC,CAGW,GAAiC,EAAE,QAAQ,CAEtD,KAAM,EAAE,MAAM,GAA2B,CAEzC,KAAM,EAAE,OACT,CAAC"}

package/dist/constants-DlH2vWm_.mjs

@@ -1,2 +0,0 @@
-import{CompletedRequestStatus as e,IsoCountryCode as t,IsoCountrySubdivisionCode as n,RequestAction as r}from"@transcend-io/privacy-types";import{LOCALE_KEY as i}from"@transcend-io/internationalization";import{applyEnum as a,valuesOf as o}from"@transcend-io/type-utils";import*as s from"io-ts";const c=`[NONE]`,l=`[APPLY VALUE TO ALL ROWS]`,u=`<blank>`,d=[`email`,`coreIdentifier`];let f=function(e){return e.Email=`email`,e.CoreIdentifier=`coreIdentifier`,e.RequestType=`requestType`,e.SubjectType=`subjectType`,e.Locale=`locale`,e.Country=`country`,e.CountrySubDivision=`countrySubDivision`,e.RequestStatus=`requestStatus`,e.CreatedAt=`createdAt`,e.DataSiloIds=`dataSiloIds`,e.WorkflowConfigId=`workflowConfigId`,e}({});const p={email:!1,coreIdentifier:!0,requestType:!0,subjectType:!0,requestStatus:!1,createdAt:!1,dataSiloIds:!1,locale:!1,country:!1,countrySubDivision:!1,workflowConfigId:!1},m={requestType:!0,subjectType:!0},h=s.type({columnNames:s.partial(a(f,()=>s.string)),identifierNames:s.record(s.string,s.string),attributeNames:s.record(s.string,s.string),requestTypeToRequestAction:s.record(s.string,o(r)),subjectTypeToSubjectName:s.record(s.string,s.string),languageToLocale:s.record(s.string,o(i)),regionToCountry:s.record(s.string,o({...t,[c]:c})),regionToCountrySubDivision:s.record(s.string,o({...n,[c]:c})),statusToRequestStatus:s.record(s.string,o({...e,[c]:c}))}),g=s.type({id:s.string,link:s.string,rowIndex:s.number,coreIdentifier:s.string,attemptedAt:s.string}),_=s.type({failingRequests:s.array(s.record(s.string,s.any)),successfulRequests:s.array(g),duplicateRequests:s.array(s.type({rowIndex:s.number,coreIdentifier:s.string,attemptedAt:s.string}))});export{_ as a,p as c,h as i,c as l,l as n,f as o,m as r,d as s,u as t,g as u};
-//# sourceMappingURL=constants-DlH2vWm_.mjs.map

package/dist/constants-DlH2vWm_.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants-DlH2vWm_.mjs","names":[],"sources":["../src/lib/requests/constants.ts"],"sourcesContent":["import { LOCALE_KEY } from '@transcend-io/internationalization';\nimport {\n  CompletedRequestStatus,\n  RequestAction,\n  IsoCountryCode,\n  IsoCountrySubdivisionCode,\n} from '@transcend-io/privacy-types';\nimport { applyEnum, valuesOf } from '@transcend-io/type-utils';\nimport * as t from 'io-ts';\n\nexport const NONE = '[NONE]' as const;\nexport const BULK_APPLY = '[APPLY VALUE TO ALL ROWS]' as const;\nexport const BLANK = '<blank>' as const;\n\n/** These are uploaded at the top level of the request */\nexport const IDENTIFIER_BLOCK_LIST = ['email', 'coreIdentifier'];\n\n/**\n * Column names to map\n */\nexport enum ColumnName {\n  /** The title of the email column */\n  Email = 'email',\n  /** The title of the core identifier column */\n  CoreIdentifier = 'coreIdentifier',\n  /** The title of the requestType column */\n  RequestType = 'requestType',\n  /** The title of the subjectType column */\n  SubjectType = 'subjectType',\n  /** The title of the locale column */\n  Locale = 'locale',\n  /** The country */\n  Country = 'country',\n  /** The country sub division */\n  CountrySubDivision = 'countrySubDivision',\n  /** The title of the requestStatus column */\n  RequestStatus = 'requestStatus',\n  /** The title of the createdAt column */\n  CreatedAt = 'createdAt',\n  /** The title of the dataSiloIds column */\n  DataSiloIds = 'dataSiloIds',\n  /** The title of the workflowConfigId column */\n  WorkflowConfigId = 'workflowConfigId',\n}\n\n/** These parameters are required in the Transcend DSR API */\nexport const IS_REQUIRED: { [k in ColumnName]: boolean } = {\n  [ColumnName.Email]: false,\n  [ColumnName.CoreIdentifier]: true,\n  [ColumnName.RequestType]: true,\n  [ColumnName.SubjectType]: true,\n  [ColumnName.RequestStatus]: false,\n  [ColumnName.CreatedAt]: false,\n  [ColumnName.DataSiloIds]: false,\n  [ColumnName.Locale]: false,\n  [ColumnName.Country]: false,\n  [ColumnName.CountrySubDivision]: false,\n  [ColumnName.WorkflowConfigId]: false,\n};\n\n/** These parameters can be specified for the entire CSV set if needed */\nexport const CAN_APPLY_IN_BULK: { [k in ColumnName]?: boolean } = {\n  [ColumnName.RequestType]: true,\n  [ColumnName.SubjectType]: true,\n};\n\n// Cache state\nexport const CachedFileState = t.type({\n  /** Mapping between the default request input column names and the CSV column name for that input */\n  columnNames: t.partial(applyEnum(ColumnName, () => t.string)),\n  /** Mapping between the identifier names and the CSV column name for that input */\n  identifierNames: t.record(t.string, t.string),\n  /** Mapping between the request attribute inputs and the CSV column name for that input */\n  attributeNames: t.record(t.string, t.string),\n  /** Mapping between CSV request type and Transcend Request Action */\n  requestTypeToRequestAction: t.record(t.string, valuesOf(RequestAction)),\n  /** Mapping between CSV data subject type and the name of the data subject in Transcend */\n  subjectTypeToSubjectName: t.record(t.string, t.string),\n  /** Mapping between language imported and Transcend locale code */\n  languageToLocale: t.record(t.string, valuesOf(LOCALE_KEY)),\n  /** Mapping between region and country code */\n  regionToCountry: t.record(t.string, valuesOf({ ...IsoCountryCode, [NONE]: NONE })),\n  /** Mapping between region and country sub division code */\n  regionToCountrySubDivision: t.record(\n    t.string,\n    valuesOf({ ...IsoCountrySubdivisionCode, [NONE]: NONE }),\n  ),\n  /** Mapping between request status in import to Transcend request status */\n  statusToRequestStatus: t.record(t.string, valuesOf({ ...CompletedRequestStatus, [NONE]: NONE })),\n});\n\n/** Type override */\nexport type CachedFileState = t.TypeOf<typeof CachedFileState>;\n\n/**\n * Successfully processed request\n */\nexport const SuccessfulRequest = t.type({\n  id: t.string,\n  link: t.string,\n  rowIndex: t.number,\n  coreIdentifier: t.string,\n  attemptedAt: t.string,\n});\n\n/** Type override */\nexport type SuccessfulRequest = t.TypeOf<typeof SuccessfulRequest>;\n\n// Cache state\nexport const CachedRequestState = t.type({\n  /** Set of privacy requests that failed to upload */\n  failingRequests: t.array(t.record(t.string, t.any)),\n  /** Successfully uploaded requests */\n  successfulRequests: t.array(SuccessfulRequest),\n  /** Duplicate requests */\n  duplicateRequests: t.array(\n    t.type({\n      rowIndex: t.number,\n      coreIdentifier: t.string,\n      attemptedAt: t.string,\n    }),\n  ),\n});\n\n/** Type override */\nexport type CachedRequestState = t.TypeOf<typeof CachedRequestState>;\n"],"mappings":"sSAUA,MAAa,EAAO,SACP,EAAa,4BACb,EAAQ,UAGR,EAAwB,CAAC,QAAS,iBAAiB,CAKhE,IAAY,EAAL,SAAA,EAAA,OAEL,GAAA,MAAA,QAEA,EAAA,eAAA,iBAEA,EAAA,YAAA,cAEA,EAAA,YAAA,cAEA,EAAA,OAAA,SAEA,EAAA,QAAA,UAEA,EAAA,mBAAA,qBAEA,EAAA,cAAA,gBAEA,EAAA,UAAA,YAEA,EAAA,YAAA,cAEA,EAAA,iBAAA,yBACD,CAGD,MAAa,EAA8C,OACrC,kBACS,eACH,eACA,iBACE,aACJ,eACE,UACL,WACC,sBACW,oBACF,GAChC,CAGY,EAAqD,aACtC,eACA,GAC3B,CAGY,EAAkB,EAAE,KAAK,CAEpC,YAAa,EAAE,QAAQ,EAAU,MAAkB,EAAE,OAAO,CAAC,CAE7D,gBAAiB,EAAE,OAAO,EAAE,OAAQ,EAAE,OAAO,CAE7C,eAAgB,EAAE,OAAO,EAAE,OAAQ,EAAE,OAAO,CAE5C,2BAA4B,EAAE,OAAO,EAAE,OAAQ,EAAS,EAAc,CAAC,CAEvE,yBAA0B,EAAE,OAAO,EAAE,OAAQ,EAAE,OAAO,CAEtD,iBAAkB,EAAE,OAAO,EAAE,OAAQ,EAAS,EAAW,CAAC,CAE1D,gBAAiB,EAAE,OAAO,EAAE,OAAQ,EAAS,CAAE,GAAG,GAAiB,GAAO,EAAM,CAAC,CAAC,CAElF,2BAA4B,EAAE,OAC5B,EAAE,OACF,EAAS,CAAE,GAAG,GAA4B,GAAO,EAAM,CAAC,CACzD,CAED,sBAAuB,EAAE,OAAO,EAAE,OAAQ,EAAS,CAAE,GAAG,GAAyB,GAAO,EAAM,CAAC,CAAC,CACjG,CAAC,CAQW,EAAoB,EAAE,KAAK,CACtC,GAAI,EAAE,OACN,KAAM,EAAE,OACR,SAAU,EAAE,OACZ,eAAgB,EAAE,OAClB,YAAa,EAAE,OAChB,CAAC,CAMW,EAAqB,EAAE,KAAK,CAEvC,gBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,OAAQ,EAAE,IAAI,CAAC,CAEnD,mBAAoB,EAAE,MAAM,EAAkB,CAE9C,kBAAmB,EAAE,MACnB,EAAE,KAAK,CACL,SAAU,EAAE,OACZ,eAAgB,EAAE,OAClB,YAAa,EAAE,OAChB,CAAC,CACH,CACF,CAAC"}

package/dist/fetchAllRequests-BI0tFl_a.mjs

@@ -1,2 +0,0 @@
-import{t as e}from"./logger-CPu6zbyQ.mjs";import{a as t,i as n}from"./request-BpKyN9Xm.mjs";import{IsoCountryCode as r,IsoCountrySubdivisionCode as i,RequestAction as a,RequestOrigin as o,RequestStatus as s}from"@transcend-io/privacy-types";import c from"colors";import{LOCALE_KEY as l}from"@transcend-io/internationalization";import{valuesOf as u}from"@transcend-io/type-utils";import*as d from"io-ts";import{makeGraphQLRequest as f}from"@transcend-io/sdk";import p from"cli-progress";const m=d.type({title:d.string,name:d.string,consent:d.boolean,enrichedPreferences:d.array(d.type({topic:d.string,selectValues:d.array(d.type({id:d.string,name:d.string,preferenceOption:d.type({id:d.string,slug:d.string,title:d.type({defaultMessage:d.string})})})),selectValue:d.type({id:d.string,name:d.string}),preferenceTopic:d.type({title:d.type({defaultMessage:d.string}),id:d.string,slug:d.string}),name:d.string,id:d.string,booleanValue:d.boolean}))}),h=d.intersection([d.type({id:d.string,createdAt:d.string,email:d.string,type:u(a),link:d.string,isSilent:d.boolean,origin:u(o),isTest:d.boolean,coreIdentifier:d.string,details:d.string,locale:u(l),status:u(s),subjectType:d.string,country:d.union([d.null,u(r)]),countrySubDivision:d.union([d.null,u(i)]),attributeValues:d.array(d.type({id:d.string,attributeKey:d.type({name:d.string,id:d.string}),name:d.string}))}),d.partial({daysRemaining:d.union([d.null,d.number]),successfullyCompletedAt:d.union([d.null,d.string]),purpose:m})]);async function g(n,r){let{requests:{totalCount:i}}=await f(n,t,{variables:{filterBy:r},logger:e});return i}async function _(r,{actions:i=[],statuses:a=[],origins:o=[],text:s,createdAtBefore:l,createdAtAfter:u,updatedAtBefore:d,updatedAtAfter:m,isTest:h,isSilent:g,isClosed:_,requestIds:v=[],onPage:y}={}){let b=!!y,x={text:s,type:i.length>0?i:void 0,status:a.length>0?a:void 0,origin:o.length>0?o:void 0,isTest:h,isSilent:g,isClosed:_,createdAtBefore:l?l.toISOString():void 0,createdAtAfter:u?u.toISOString():void 0,updatedAtBefore:d?d.toISOString():void 0,updatedAtAfter:m?m.toISOString():void 0},S=new Date().getTime(),C=new p.SingleBar({},p.Presets.shades_classic);if(!b){e.info(c.magenta(`Fetching requests...`));let{requests:{totalCount:n}}=await f(r,t,{variables:{filterBy:x},logger:e});n>100&&(e.info(c.magenta(`Fetching ${n} requests`)),C.start(n,0))}let w=[],T=0,E,D=!1;do{let{requests:{nodes:t,pageInfo:i}}=await f(r,n,{variables:{first:100,after:E,filterBy:x},logger:e});b?await y(t):w.push(...t),T+=t.length,E=i.endCursor??void 0,b||C.update(T),D=i.hasNextPage}while(D);if(!b){C.stop();let t=new Date().getTime()-S;e.info(c.green(`Completed fetching of ${T} request in "${t/1e3}" seconds.`))}if(b)return[];let O=w;return v&&v.length>0&&(O=O.filter(e=>v.includes(e.id)),e.info(c.green(`Filtered down to ${O.length} requests based on ${v.length} provided IDs.`))),O}export{g as i,m as n,_ as r,h as t};
-//# sourceMappingURL=fetchAllRequests-BI0tFl_a.mjs.map

package/dist/fetchAllRequests-BI0tFl_a.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"fetchAllRequests-BI0tFl_a.mjs","names":[],"sources":["../src/lib/graphql/fetchAllRequests.ts"],"sourcesContent":["import { LOCALE_KEY } from '@transcend-io/internationalization';\nimport {\n  RequestAction,\n  RequestOrigin,\n  RequestStatus,\n  IsoCountryCode,\n  IsoCountrySubdivisionCode,\n} from '@transcend-io/privacy-types';\nimport { makeGraphQLRequest } from '@transcend-io/sdk';\nimport { valuesOf } from '@transcend-io/type-utils';\nimport cliProgress from 'cli-progress';\nimport colors from 'colors';\nimport { GraphQLClient } from 'graphql-request';\nimport * as t from 'io-ts';\n\nimport { logger } from '../../logger.js';\nimport { REQUESTS, REQUESTS_COUNT } from './gqls/index.js';\n\nexport const RequestPurposeTrigger = t.type({\n  title: t.string,\n  name: t.string,\n  consent: t.boolean,\n  enrichedPreferences: t.array(\n    t.type({\n      topic: t.string,\n      selectValues: t.array(\n        t.type({\n          id: t.string,\n          name: t.string,\n          preferenceOption: t.type({\n            id: t.string,\n            slug: t.string,\n            title: t.type({\n              defaultMessage: t.string,\n            }),\n          }),\n        }),\n      ),\n      selectValue: t.type({\n        id: t.string,\n        name: t.string,\n      }),\n      preferenceTopic: t.type({\n        title: t.type({\n          defaultMessage: t.string,\n        }),\n        id: t.string,\n        slug: t.string,\n      }),\n      name: t.string,\n      id: t.string,\n      booleanValue: t.boolean,\n    }),\n  ),\n});\n\n/** Override type */\nexport type RequestPurposeTrigger = t.TypeOf<typeof RequestPurposeTrigger>;\n\nexport const PrivacyRequest = t.intersection([\n  t.type({\n    /** Request ID */\n    id: t.string,\n    /** Time request was made */\n    createdAt: t.string,\n    /** Email of request */\n    email: t.string,\n    /** The type of request */\n    type: valuesOf(RequestAction),\n    /** Link to request in Transcend dashboard */\n    link: t.string,\n    /** Whether request is in silent mode */\n    isSilent: t.boolean,\n    /** Where request was made */\n    origin: valuesOf(RequestOrigin),\n    /** Whether request is a test request */\n    isTest: t.boolean,\n    /** The core identifier of the request */\n    coreIdentifier: t.string,\n    /** Request details */\n    details: t.string,\n    /** Locale of request */\n    locale: valuesOf(LOCALE_KEY),\n    /** Status of request */\n    status: valuesOf(RequestStatus),\n    /** Type of data subject */\n    subjectType: t.string,\n    /** Country of request */\n    country: t.union([t.null, valuesOf(IsoCountryCode)]),\n    /** Subdivision of request */\n    countrySubDivision: t.union([t.null, valuesOf(IsoCountrySubdivisionCode)]),\n    /** Request attributes */\n    attributeValues: t.array(\n      t.type({\n        id: t.string,\n        attributeKey: t.type({ name: t.string, id: t.string }),\n        name: t.string,\n      }),\n    ),\n  }),\n  t.partial({\n    /** Days remaining until expired */\n    daysRemaining: t.union([t.null, t.number]),\n    /** Time when request was successfully completed */\n    successfullyCompletedAt: t.union([t.null, t.string]),\n    /** Purpose */\n    purpose: RequestPurposeTrigger,\n  }),\n]);\n\n/** Type override */\nexport type PrivacyRequest = t.TypeOf<typeof PrivacyRequest>;\n\nconst PAGE_SIZE = 100;\n\n/**\n * Fetch just the total count of requests matching a set of filters.\n * Useful for setting up a progress bar before streaming pages.\n *\n * @param client - GraphQL client\n * @param filterBy - Filter object (already serialized to ISO strings)\n * @returns The total count\n */\nexport async function fetchRequestsTotalCount(\n  client: GraphQLClient,\n  filterBy: Record<string, unknown>,\n): Promise<number> {\n  const {\n    requests: { totalCount },\n  } = await makeGraphQLRequest<{\n    /** Requests */\n    requests: {\n      /** Total count */\n      totalCount: number;\n    };\n  }>(client, REQUESTS_COUNT, { variables: { filterBy }, logger });\n  return totalCount;\n}\n\n/**\n * Fetch all requests matching a set of filters.\n *\n * When `onPage` is provided the function streams pages to the callback\n * and never accumulates nodes in memory — ideal for very large exports.\n * Without `onPage` the function returns all nodes in a single array\n * (existing behaviour, kept for backward compatibility).\n *\n * @param client - GraphQL client\n * @param options - Filter options\n * @returns List of requests (empty when using onPage)\n */\nexport async function fetchAllRequests(\n  client: GraphQLClient,\n  {\n    actions = [],\n    statuses = [],\n    origins = [],\n    text,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n    isTest,\n    isSilent,\n    isClosed,\n    requestIds = [],\n    onPage,\n  }: {\n    /** Actions to filter on */\n    actions?: RequestAction[];\n    /** Origins to filter on */\n    origins?: RequestOrigin[];\n    /** Statuses to filter on */\n    statuses?: RequestStatus[];\n    /** Filter for requests created before this date */\n    createdAtBefore?: Date;\n    /** Filter for requests created after this date */\n    createdAtAfter?: Date;\n    /** Filter for requests updated before this date */\n    updatedAtBefore?: Date;\n    /** Filter for requests updated after this date */\n    updatedAtAfter?: Date;\n    /** Filter for requests with a specific identifier */\n    text?: string;\n    /** Return test requests */\n    isTest?: boolean;\n    /** Return silent mode requests */\n    isSilent?: boolean;\n    /** Filter by whether request is active */\n    isClosed?: boolean;\n    /**\n     * Filter the list of requests for a set of IDs - these are applied\n     * at runtime while other filters are applied at the GraphQL level.\n     */\n    requestIds?: string[];\n    /** When provided, called with each page of nodes instead of accumulating in memory */\n    onPage?: (nodes: PrivacyRequest[]) => void | Promise<void>;\n  } = {},\n): Promise<PrivacyRequest[]> {\n  const streaming = !!onPage;\n\n  const filterBy = {\n    text,\n    type: actions.length > 0 ? actions : undefined,\n    status: statuses.length > 0 ? statuses : undefined,\n    origin: origins.length > 0 ? origins : undefined,\n    isTest,\n    isSilent,\n    isClosed,\n    createdAtBefore: createdAtBefore ? createdAtBefore.toISOString() : undefined,\n    createdAtAfter: createdAtAfter ? createdAtAfter.toISOString() : undefined,\n    updatedAtBefore: updatedAtBefore ? updatedAtBefore.toISOString() : undefined,\n    updatedAtAfter: updatedAtAfter ? updatedAtAfter.toISOString() : undefined,\n  };\n\n  // When streaming, the caller manages progress/logging — skip count query & bar\n  const t0 = new Date().getTime();\n  const progressBar = new cliProgress.SingleBar({}, cliProgress.Presets.shades_classic);\n\n  if (!streaming) {\n    logger.info(colors.magenta('Fetching requests...'));\n    const {\n      requests: { totalCount },\n    } = await makeGraphQLRequest<{\n      /** Requests */\n      requests: {\n        /** Total count */\n        totalCount: number;\n      };\n    }>(client, REQUESTS_COUNT, { variables: { filterBy }, logger });\n\n    if (totalCount > PAGE_SIZE) {\n      logger.info(colors.magenta(`Fetching ${totalCount} requests`));\n      progressBar.start(totalCount, 0);\n    }\n  }\n\n  const requests: PrivacyRequest[] = [];\n  let fetchedCount = 0;\n\n  // Paginate through all results\n  let cursor: string | undefined;\n  let shouldContinue = false;\n  do {\n    const {\n      requests: { nodes, pageInfo },\n    } = await makeGraphQLRequest<{\n      /** Requests */\n      requests: {\n        /** List */\n        nodes: PrivacyRequest[];\n        /** Pagination info */\n        pageInfo: {\n          /** Cursor for the last item */\n          endCursor: string | null;\n          /** Whether more pages exist */\n          hasNextPage: boolean;\n        };\n      };\n    }>(client, REQUESTS, {\n      variables: { first: PAGE_SIZE, after: cursor, filterBy },\n      logger,\n    });\n\n    if (streaming) {\n      await onPage!(nodes);\n    } else {\n      requests.push(...nodes);\n    }\n\n    fetchedCount += nodes.length;\n    cursor = pageInfo.endCursor ?? undefined;\n    if (!streaming) {\n      progressBar.update(fetchedCount);\n    }\n    shouldContinue = pageInfo.hasNextPage;\n  } while (shouldContinue);\n\n  if (!streaming) {\n    progressBar.stop();\n    const t1 = new Date().getTime();\n    const totalTime = t1 - t0;\n\n    logger.info(\n      colors.green(\n        `Completed fetching of ${fetchedCount} request in \"${totalTime / 1000}\" seconds.`,\n      ),\n    );\n  }\n\n  if (streaming) {\n    return [];\n  }\n\n  // Filter down requests by request ID\n  let allRequests = requests;\n  if (requestIds && requestIds.length > 0) {\n    allRequests = allRequests.filter((request) => requestIds.includes(request.id));\n    logger.info(\n      colors.green(\n        `Filtered down to ${allRequests.length} requests based on ${requestIds.length} provided IDs.`,\n      ),\n    );\n  }\n\n  return allRequests;\n}\n"],"mappings":"seAkBA,MAAa,EAAwB,EAAE,KAAK,CAC1C,MAAO,EAAE,OACT,KAAM,EAAE,OACR,QAAS,EAAE,QACX,oBAAqB,EAAE,MACrB,EAAE,KAAK,CACL,MAAO,EAAE,OACT,aAAc,EAAE,MACd,EAAE,KAAK,CACL,GAAI,EAAE,OACN,KAAM,EAAE,OACR,iBAAkB,EAAE,KAAK,CACvB,GAAI,EAAE,OACN,KAAM,EAAE,OACR,MAAO,EAAE,KAAK,CACZ,eAAgB,EAAE,OACnB,CAAC,CACH,CAAC,CACH,CAAC,CACH,CACD,YAAa,EAAE,KAAK,CAClB,GAAI,EAAE,OACN,KAAM,EAAE,OACT,CAAC,CACF,gBAAiB,EAAE,KAAK,CACtB,MAAO,EAAE,KAAK,CACZ,eAAgB,EAAE,OACnB,CAAC,CACF,GAAI,EAAE,OACN,KAAM,EAAE,OACT,CAAC,CACF,KAAM,EAAE,OACR,GAAI,EAAE,OACN,aAAc,EAAE,QACjB,CAAC,CACH,CACF,CAAC,CAKW,EAAiB,EAAE,aAAa,CAC3C,EAAE,KAAK,CAEL,GAAI,EAAE,OAEN,UAAW,EAAE,OAEb,MAAO,EAAE,OAET,KAAM,EAAS,EAAc,CAE7B,KAAM,EAAE,OAER,SAAU,EAAE,QAEZ,OAAQ,EAAS,EAAc,CAE/B,OAAQ,EAAE,QAEV,eAAgB,EAAE,OAElB,QAAS,EAAE,OAEX,OAAQ,EAAS,EAAW,CAE5B,OAAQ,EAAS,EAAc,CAE/B,YAAa,EAAE,OAEf,QAAS,EAAE,MAAM,CAAC,EAAE,KAAM,EAAS,EAAe,CAAC,CAAC,CAEpD,mBAAoB,EAAE,MAAM,CAAC,EAAE,KAAM,EAAS,EAA0B,CAAC,CAAC,CAE1E,gBAAiB,EAAE,MACjB,EAAE,KAAK,CACL,GAAI,EAAE,OACN,aAAc,EAAE,KAAK,CAAE,KAAM,EAAE,OAAQ,GAAI,EAAE,OAAQ,CAAC,CACtD,KAAM,EAAE,OACT,CAAC,CACH,CACF,CAAC,CACF,EAAE,QAAQ,CAER,cAAe,EAAE,MAAM,CAAC,EAAE,KAAM,EAAE,OAAO,CAAC,CAE1C,wBAAyB,EAAE,MAAM,CAAC,EAAE,KAAM,EAAE,OAAO,CAAC,CAEpD,QAAS,EACV,CAAC,CACH,CAAC,CAeF,eAAsB,EACpB,EACA,EACiB,CACjB,GAAM,CACJ,SAAU,CAAE,eACV,MAAM,EAMP,EAAQ,EAAgB,CAAE,UAAW,CAAE,WAAU,CAAE,SAAQ,CAAC,CAC/D,OAAO,EAeT,eAAsB,EACpB,EACA,CACE,UAAU,EAAE,CACZ,WAAW,EAAE,CACb,UAAU,EAAE,CACZ,OACA,kBACA,iBACA,kBACA,iBACA,SACA,WACA,WACA,aAAa,EAAE,CACf,UA+BE,EAAE,CACqB,CAC3B,IAAM,EAAY,CAAC,CAAC,EAEd,EAAW,CACf,OACA,KAAM,EAAQ,OAAS,EAAI,EAAU,IAAA,GACrC,OAAQ,EAAS,OAAS,EAAI,EAAW,IAAA,GACzC,OAAQ,EAAQ,OAAS,EAAI,EAAU,IAAA,GACvC,SACA,WACA,WACA,gBAAiB,EAAkB,EAAgB,aAAa,CAAG,IAAA,GACnE,eAAgB,EAAiB,EAAe,aAAa,CAAG,IAAA,GAChE,gBAAiB,EAAkB,EAAgB,aAAa,CAAG,IAAA,GACnE,eAAgB,EAAiB,EAAe,aAAa,CAAG,IAAA,GACjE,CAGK,EAAK,IAAI,MAAM,CAAC,SAAS,CACzB,EAAc,IAAI,EAAY,UAAU,EAAE,CAAE,EAAY,QAAQ,eAAe,CAErF,GAAI,CAAC,EAAW,CACd,EAAO,KAAK,EAAO,QAAQ,uBAAuB,CAAC,CACnD,GAAM,CACJ,SAAU,CAAE,eACV,MAAM,EAMP,EAAQ,EAAgB,CAAE,UAAW,CAAE,WAAU,CAAE,SAAQ,CAAC,CAE3D,EAAa,MACf,EAAO,KAAK,EAAO,QAAQ,YAAY,EAAW,WAAW,CAAC,CAC9D,EAAY,MAAM,EAAY,EAAE,EAIpC,IAAM,EAA6B,EAAE,CACjC,EAAe,EAGf,EACA,EAAiB,GACrB,EAAG,CACD,GAAM,CACJ,SAAU,CAAE,QAAO,aACjB,MAAM,EAaP,EAAQ,EAAU,CACnB,UAAW,CAAE,MAAO,IAAW,MAAO,EAAQ,WAAU,CACxD,SACD,CAAC,CAEE,EACF,MAAM,EAAQ,EAAM,CAEpB,EAAS,KAAK,GAAG,EAAM,CAGzB,GAAgB,EAAM,OACtB,EAAS,EAAS,WAAa,IAAA,GAC1B,GACH,EAAY,OAAO,EAAa,CAElC,EAAiB,EAAS,kBACnB,GAET,GAAI,CAAC,EAAW,CACd,EAAY,MAAM,CAElB,IAAM,EADK,IAAI,MAAM,CAAC,SACF,CAAG,EAEvB,EAAO,KACL,EAAO,MACL,yBAAyB,EAAa,eAAe,EAAY,IAAK,YACvE,CACF,CAGH,GAAI,EACF,MAAO,EAAE,CAIX,IAAI,EAAc,EAUlB,OATI,GAAc,EAAW,OAAS,IACpC,EAAc,EAAY,OAAQ,GAAY,EAAW,SAAS,EAAQ,GAAG,CAAC,CAC9E,EAAO,KACL,EAAO,MACL,oBAAoB,EAAY,OAAO,qBAAqB,EAAW,OAAO,gBAC/E,CACF,EAGI"}

package/dist/impl-BEiCEzl_2.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-BEiCEzl_2.mjs","names":[],"sources":["../src/commands/policy/download/impl.ts"],"sourcesContent":["import path from 'node:path';\n\nimport colors from 'colors';\nimport got from 'got';\n\nimport type { LocalContext } from '../../../context.js';\nimport { selectCommandLogger } from '../../../lib/cli/command-output.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { EMPTY_CELL } from '../constants.js';\nimport {\n  buildPolicyEngineClient,\n  policyEngineRequest,\n  printResult,\n  resolveBundleByName,\n  resolvePolicyBundleVersion,\n  setPolicyEngineCliDebug,\n} from '../helpers/index.js';\nimport type { GetPolicyBundleVersionResponse } from '../types.js';\n\n/** CLI flags for `transcend policy download`. */\nexport interface DownloadCommandFlags {\n  /** Tenant-unique bundle name */\n  'remote-bundle-name': string;\n  /**\n   * Caller-supplied version label to download.\n   * When omitted, downloads the bundle's currently active version.\n   */\n  version?: string;\n  /** Destination file path; defaults to `{bundleName}-{version}.tar.gz` */\n  output?: string;\n  /** Transcend API key */\n  auth: string;\n  /** Transcend API URL */\n  'transcend-url': string;\n  /** Print metadata + presigned URL as JSON without writing a file */\n  json: boolean;\n  /** Include technical error details when a command fails */\n  debug?: boolean;\n}\n\n/**\n * Builds the default output path for a downloaded policy bundle.\n *\n * @param bundleName - Tenant-unique bundle name\n * @param version - Caller-supplied version label\n * @returns Relative path `{bundleName}-{version}.tar.gz`\n */\nexport function defaultPolicyDownloadOutputPath(bundleName: string, version: string): string {\n  return `${bundleName}-${version}.tar.gz`;\n}\n\n/**\n * Formats download metadata for human-readable CLI output.\n *\n * @param body - Version metadata from the Policy Engine API\n * @param outputPath - Destination path written (or that would be written)\n * @returns Summary lines\n */\nfunction formatDownloadSummary(body: GetPolicyBundleVersionResponse, outputPath: string): string {\n  return [\n    `bundleName  ${body.bundleName}`,\n    `version     ${body.version}`,\n    `output      ${outputPath}`,\n    `sha256      ${body.sha256}`,\n    `sizeBytes   ${body.sizeBytes}`,\n    `uploadedAt  ${body.uploadedAt}`,\n    `activatedAt ${body.activatedAt ?? EMPTY_CELL}`,\n  ].join('\\n');\n}\n\n/**\n * Download a compiled policy bundle version to disk.\n *\n * Resolves `--remote-bundle-name` and an optional `--version` to IDs, fetches a\n * short-lived presigned S3 URL from the monolith, then downloads the `.tar.gz`\n * bytes directly from S3 (the monolith does not proxy the artifact).\n *\n * When `--version` is omitted, downloads the bundle's currently active version.\n * If the bundle has no active version, exits with an error.\n *\n * @param this - CLI context\n * @param flags - Command flags\n */\nexport async function download(\n  this: LocalContext,\n  {\n    'remote-bundle-name': bundleName,\n    version,\n    output,\n    auth,\n    'transcend-url': transcendUrl,\n    json,\n    debug = false,\n  }: DownloadCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n  setPolicyEngineCliDebug(debug);\n\n  const client = buildPolicyEngineClient(transcendUrl, auth);\n  const commandLogger = selectCommandLogger(this.logger, json);\n\n  const bundle = await resolveBundleByName(client, bundleName);\n  if (!bundle) {\n    throw new Error(`Policy bundle \"${bundleName}\" was not found for this organization.`);\n  }\n\n  let versionId: string;\n  if (version) {\n    const resolvedVersion = await resolvePolicyBundleVersion(client, bundle.id, { version });\n    versionId = resolvedVersion.id;\n  } else {\n    if (!bundle.activeVersionId) {\n      throw new Error(`Policy bundle \"${bundleName}\" has no active version.`);\n    }\n    versionId = bundle.activeVersionId;\n  }\n\n  commandLogger.info(\n    colors.green(\n      version\n        ? `Fetching download URL for bundle \"${bundleName}\" version \"${version}\"...`\n        : `Fetching download URL for active version of bundle \"${bundleName}\"...`,\n    ),\n  );\n\n  const body = await policyEngineRequest(\n    client\n      .get(`v1/policy-engine/policy-bundles/${bundle.id}/versions/${versionId}`)\n      .json<GetPolicyBundleVersionResponse>(),\n  );\n\n  if (json) {\n    printResult(this.process.stdout, {\n      json: true,\n      data: body,\n    });\n    return;\n  }\n\n  const outputPath = path.resolve(\n    output ?? defaultPolicyDownloadOutputPath(bundleName, body.version),\n  );\n\n  commandLogger.info(colors.green(`Downloading policy bundle to ${outputPath}...`));\n\n  let bundleBytes: Uint8Array;\n  try {\n    bundleBytes = await got(body.downloadUrl).buffer();\n  } catch (err) {\n    throw new Error(\n      `Failed to download policy bundle from the presigned URL: ${\n        err instanceof Error ? err.message : String(err)\n      }`,\n      { cause: err },\n    );\n  }\n\n  const outputDir = path.dirname(outputPath);\n  this.fs.mkdirSync(outputDir, { recursive: true });\n  this.fs.writeFileSync(outputPath, bundleBytes);\n\n  printResult(this.process.stdout, {\n    json: false,\n    data: body,\n    renderTable: () => formatDownloadSummary(body, outputPath),\n  });\n\n  commandLogger.info(colors.green('Policy bundle downloaded successfully.'));\n}\n"],"mappings":"oZA+CA,SAAgB,EAAgC,EAAoB,EAAyB,CAC3F,MAAO,GAAG,EAAW,GAAG,EAAQ,SAUlC,SAAS,EAAsB,EAAsC,EAA4B,CAC/F,MAAO,CACL,eAAe,EAAK,aACpB,eAAe,EAAK,UACpB,eAAe,IACf,eAAe,EAAK,SACpB,eAAe,EAAK,YACpB,eAAe,EAAK,aACpB,eAAe,EAAK,aAAA,MACrB,CAAC,KAAK;EAAK,CAgBd,eAAsB,EAEpB,CACE,qBAAsB,EACtB,UACA,SACA,OACA,gBAAiB,EACjB,OACA,QAAQ,IAEK,CACf,EAAoB,KAAK,QAAQ,CACjC,EAAwB,EAAM,CAE9B,IAAM,EAAS,EAAwB,EAAc,EAAK,CACpD,EAAgB,EAAoB,KAAK,OAAQ,EAAK,CAEtD,EAAS,MAAM,EAAoB,EAAQ,EAAW,CAC5D,GAAI,CAAC,EACH,MAAU,MAAM,kBAAkB,EAAW,wCAAwC,CAGvF,IAAI,EACJ,GAAI,EAEF,GAAY,MADkB,EAA2B,EAAQ,EAAO,GAAI,CAAE,UAAS,CAAC,EAC5D,OACvB,CACL,GAAI,CAAC,EAAO,gBACV,MAAU,MAAM,kBAAkB,EAAW,0BAA0B,CAEzE,EAAY,EAAO,gBAGrB,EAAc,KACZ,EAAO,MACL,EACI,qCAAqC,EAAW,aAAa,EAAQ,MACrE,uDAAuD,EAAW,MACvE,CACF,CAED,IAAM,EAAO,MAAM,EACjB,EACG,IAAI,mCAAmC,EAAO,GAAG,YAAY,IAAY,CACzE,MAAsC,CAC1C,CAED,GAAI,EAAM,CACR,EAAY,KAAK,QAAQ,OAAQ,CAC/B,KAAM,GACN,KAAM,EACP,CAAC,CACF,OAGF,IAAM,EAAa,EAAK,QACtB,GAAU,EAAgC,EAAY,EAAK,QAAQ,CACpE,CAED,EAAc,KAAK,EAAO,MAAM,gCAAgC,EAAW,KAAK,CAAC,CAEjF,IAAI,EACJ,GAAI,CACF,EAAc,MAAM,EAAI,EAAK,YAAY,CAAC,QAAQ,OAC3C,EAAK,CACZ,MAAU,MACR,4DACE,aAAe,MAAQ,EAAI,QAAU,OAAO,EAAI,GAElD,CAAE,MAAO,EAAK,CACf,CAGH,IAAM,EAAY,EAAK,QAAQ,EAAW,CAC1C,KAAK,GAAG,UAAU,EAAW,CAAE,UAAW,GAAM,CAAC,CACjD,KAAK,GAAG,cAAc,EAAY,EAAY,CAE9C,EAAY,KAAK,QAAQ,OAAQ,CAC/B,KAAM,GACN,KAAM,EACN,gBAAmB,EAAsB,EAAM,EAAW,CAC3D,CAAC,CAEF,EAAc,KAAK,EAAO,MAAM,yCAAyC,CAAC"}

package/dist/impl-Cb-7C1Ml2.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-Cb-7C1Ml2.mjs","names":["POLICY_SKILL_MD","POLICY_SETUP_TOOLING_REFERENCE_MD","POLICY_AUTHORING_REFERENCE_MD","POLICY_TESTING_DEBUGGING_REFERENCE_MD","POLICY_PUBLISHING_REFERENCE_MD","CLI_VERSION"],"sources":["../src/lib/policy/policy-scaffold-model.ts","../../../skills/transcend-policy-engine/references/authoring.md","../../../skills/transcend-policy-engine/references/publishing.md","../../../skills/transcend-policy-engine/references/setup-tooling.md","../../../skills/transcend-policy-engine/references/testing-debugging.md","../../../skills/transcend-policy-engine/SKILL.md","../src/lib/policy/policy-skill.ts","../src/lib/policy/policy-scaffold-output.ts","../src/lib/policy/policy-scaffold-planning.ts","../src/commands/policy/init/impl.ts"],"sourcesContent":["import type { ExistingProjectSkillDirectory } from '../scaffolding/agent-skill.js';\nimport type { ProjectPlan } from '../scaffolding/project-plan.js';\n\n/** Version of the stable policy initialization JSON result. */\nexport const POLICY_INIT_RESULT_VERSION = 3 as const;\n\n/** Optional repository integrations for policy authoring. */\nexport const PolicySetupFeature = {\n  /** Repository-level editor configuration. */\n  Editor: 'editor',\n  /** Managed policy authoring skill. */\n  Skill: 'skill',\n  /** Credential-free continuous integration. */\n  Ci: 'ci',\n} as const;\n\n/** Optional repository integration for policy authoring. */\nexport type PolicySetupFeature = (typeof PolicySetupFeature)[keyof typeof PolicySetupFeature];\n\n/** Repository and target state collected before policy planning. */\nexport interface PolicyProjectState {\n  /** Directory from which the CLI was invoked. */\n  invocationDirectory: string;\n  /** Absolute user-selected policy directory. */\n  targetDirectory: string;\n  /** Repository or invocation root that owns setup artifacts. */\n  projectRoot: string;\n  /** Nearest repository root, when present. */\n  repositoryRoot?: string;\n  /** Existing project-level skill directories. */\n  existingSkillDirectories: ExistingProjectSkillDirectory[];\n  /** Whether the repository appears to use GitHub. */\n  usesGithub: boolean;\n  /** Case-preserving relative paths below the policy directory. */\n  relativePaths: string[];\n  /** Relative file and link paths below the policy directory. */\n  relativeFilePaths: string[];\n}\n\n/** A complete, validated policy initialization plan. */\nexport interface PolicyInitProjectPlan extends ProjectPlan {\n  /** JSON contract version. */\n  version: typeof POLICY_INIT_RESULT_VERSION;\n  /** Command that produced the plan. */\n  command: 'init';\n  /** Absolute policy project directory. */\n  targetDirectory: string;\n  /** Absolute policy manifest path. */\n  manifestPath: string;\n  /** Files inspected and deliberately left unchanged. */\n  unchanged: string[];\n  /** Non-fatal plan warnings. */\n  warnings: string[];\n  /** Raw commands shown after a successful apply. */\n  nextSteps: string[];\n  /** Exact generated example that remains safe to replace. */\n  disposableExamplePath?: string;\n  /** Selected repository integrations. */\n  features: PolicySetupFeature[];\n}\n",null,null,null,null,null,"import POLICY_AUTHORING_REFERENCE_MD from '../../../../../skills/transcend-policy-engine/references/authoring.md';\nimport POLICY_PUBLISHING_REFERENCE_MD from '../../../../../skills/transcend-policy-engine/references/publishing.md';\nimport POLICY_SETUP_TOOLING_REFERENCE_MD from '../../../../../skills/transcend-policy-engine/references/setup-tooling.md';\nimport POLICY_TESTING_DEBUGGING_REFERENCE_MD from '../../../../../skills/transcend-policy-engine/references/testing-debugging.md';\nimport POLICY_SKILL_MD from '../../../../../skills/transcend-policy-engine/SKILL.md';\nimport type { AgentSkillFile } from '../scaffolding/agent-skill.js';\n\n/** Namespaced directory and frontmatter name for the installed Agent Skill. */\nexport const POLICY_SKILL_NAME = 'transcend-policy-engine';\n\nexport {\n  POLICY_AUTHORING_REFERENCE_MD,\n  POLICY_PUBLISHING_REFERENCE_MD,\n  POLICY_SETUP_TOOLING_REFERENCE_MD,\n  POLICY_SKILL_MD,\n  POLICY_TESTING_DEBUGGING_REFERENCE_MD,\n};\n\n/** Complete portable Policy Engine Agent Skill file set. */\nexport const POLICY_SKILL_FILES: readonly AgentSkillFile[] = [\n  { path: 'SKILL.md', contents: POLICY_SKILL_MD },\n  { path: 'references/setup-tooling.md', contents: POLICY_SETUP_TOOLING_REFERENCE_MD },\n  { path: 'references/authoring.md', contents: POLICY_AUTHORING_REFERENCE_MD },\n  { path: 'references/testing-debugging.md', contents: POLICY_TESTING_DEBUGGING_REFERENCE_MD },\n  { path: 'references/publishing.md', contents: POLICY_PUBLISHING_REFERENCE_MD },\n];\n","import {\n  toPublicPlannedChange,\n  type PublicPlannedChange,\n} from '../scaffolding/project-plan-output.js';\nimport type { PolicyInitProjectPlan, PolicySetupFeature } from './policy-scaffold-model.js';\nimport { POLICY_SKILL_NAME } from './policy-skill.js';\n\n/** Detected local policy tool versions. */\nexport interface PolicyInitToolVersions {\n  /** OPA version, or null when missing or incompatible. */\n  opa: string | null;\n  /** Regal version, or null when missing or incompatible. */\n  regal: string | null;\n}\n\n/** Stable machine-readable policy initialization result. */\nexport interface PolicyInitPlanResult {\n  /** JSON contract version. */\n  version: number;\n  /** Command that produced the result. */\n  command: 'init';\n  /** Whether the plan was applied. */\n  applied: boolean;\n  /** Whether this was a dry run. */\n  dryRun: boolean;\n  /** Absolute policy target directory. */\n  targetDirectory: string;\n  /** Absolute policy manifest path. */\n  manifestPath: string;\n  /** Planned mutations without file contents. */\n  changes: PublicPlannedChange[];\n  /** Non-fatal preservation and runtime warnings. */\n  warnings: string[];\n  /** Suggested raw one-line follow-up commands. */\n  nextSteps: string[];\n  /** Explicitly selected repository integrations. */\n  features: PolicySetupFeature[];\n  /** Compact prompt for continuing with a coding agent. */\n  aiHandoff: string;\n  /** Compatible local policy tool versions. */\n  tools: PolicyInitToolVersions;\n}\n\n/**\n * Build the compact policy implementation and CI handoff.\n *\n * @param options - Portable project path and next step\n * @returns Raw one-line prompt\n */\nexport function buildPolicyInitAiHandoff(options: {\n  /** Display path to the policy project. */\n  projectPath: string;\n  /** Whether the policy authoring skill was installed. */\n  hasSkill: boolean;\n  /** Copyable new-bundle command. */\n  newCommand: string;\n}): string {\n  const instruction = options.hasSkill ? `Use the \\`${POLICY_SKILL_NAME}\\` skill and run` : 'Run';\n  return (\n    `${instruction} ${options.newCommand} to add a bundle from a template, ` +\n    `then adapt the policy document tree and input/output contract to the intended application.`\n  );\n}\n\n/**\n * Build the stable machine-readable initialization result.\n *\n * @param plan - Policy project plan\n * @param options - Apply and runtime state\n * @returns Public JSON result\n */\nexport function buildPolicyInitPlanResult(\n  plan: PolicyInitProjectPlan,\n  options: {\n    /** Whether the plan was applied. */\n    applied: boolean;\n    /** Whether this was a dry run. */\n    dryRun: boolean;\n    /** Working directory for portable paths. */\n    cwd: string;\n    /** Compact coding-agent prompt. */\n    aiHandoff: string;\n    /** Compatible local policy tool versions. */\n    tools: PolicyInitToolVersions;\n  },\n): PolicyInitPlanResult {\n  return {\n    version: plan.version,\n    command: plan.command,\n    applied: options.applied,\n    dryRun: options.dryRun,\n    targetDirectory: plan.targetDirectory,\n    manifestPath: plan.manifestPath,\n    changes: plan.changes.map((change) => toPublicPlannedChange(options.cwd, change)),\n    warnings: plan.warnings,\n    nextSteps: plan.nextSteps,\n    features: [...plan.features],\n    aiHandoff: options.aiHandoff,\n    tools: options.tools,\n  };\n}\n","import { isAbsolute, join, posix, relative, sep } from 'node:path';\n\nimport {\n  getManagedAgentSkillCandidatePaths,\n  planManagedAgentSkill,\n  type ManagedAgentSkillDefinition,\n} from '../scaffolding/agent-skill.js';\nimport { displayProjectPath } from '../scaffolding/project-plan-output.js';\nimport {\n  getPlanningPathSnapshot,\n  getPlanningFileSnapshot,\n  planFileChange,\n  type PlanningPathSnapshot,\n} from '../scaffolding/project-plan.js';\nimport {\n  generatePolicyGithubActionsWorkflow,\n  POLICY_CI_WORKFLOW_PATH,\n} from './policy-scaffold-artifacts.js';\nimport {\n  mergePolicyEditorExtensions,\n  mergePolicyEditorSettings,\n  mergePolicyEditorTasks,\n  type PolicyEditorMergeResult,\n} from './policy-scaffold-config.js';\nimport {\n  POLICY_INIT_RESULT_VERSION,\n  PolicySetupFeature,\n  type PolicyInitProjectPlan,\n  type PolicyProjectState,\n  type PolicySetupFeature as PolicySetupFeatureType,\n} from './policy-scaffold-model.js';\nimport {\n  generatePolicyWorkspaceFiles,\n  POLICY_STARTER_BUNDLE_DIRECTORY,\n  type PolicyStarterFile,\n} from './policy-scaffold-templates.js';\nimport { POLICY_SKILL_FILES, POLICY_SKILL_NAME } from './policy-skill.js';\n\n/** Managed Policy Engine Agent Skill definition. */\nconst POLICY_MANAGED_SKILL: ManagedAgentSkillDefinition = {\n  name: POLICY_SKILL_NAME,\n  displayName: 'Policy Engine',\n  owner: '@transcend-io/cli',\n  files: POLICY_SKILL_FILES,\n};\n\n/** In-memory input consumed by the pure policy initializer. */\nexport interface PolicyInitPlanningInput {\n  /** Project discovery state. */\n  state: PolicyProjectState;\n  /** Potential mutation paths keyed by absolute path. */\n  snapshots: Readonly<Record<string, PlanningPathSnapshot>>;\n}\n\n/** Optional repository setup selected for policy initialization. */\nexport interface PolicyInitPlanOptions {\n  /** Selected setup features. */\n  features: readonly PolicySetupFeatureType[];\n  /** Exact released Transcend CLI version for generated CI. */\n  cliVersion: string;\n}\n\n/**\n * Enumerate all core starter paths that could be created.\n *\n * @param state - Policy project state\n * @param options - Selected repository setup\n * @returns Absolute candidate paths\n */\nexport function getPolicyInitPlanningCandidatePaths(\n  state: PolicyProjectState,\n  options: Pick<PolicyInitPlanOptions, 'features'>,\n): string[] {\n  const paths = new Set(\n    generatePolicyWorkspaceFiles().map(({ path }) => join(state.targetDirectory, path)),\n  );\n  const selected = new Set(options.features);\n  if (selected.has(PolicySetupFeature.Editor)) {\n    paths.add(join(state.projectRoot, '.vscode', 'settings.json'));\n    paths.add(join(state.projectRoot, '.vscode', 'extensions.json'));\n    paths.add(join(state.projectRoot, '.vscode', 'tasks.json'));\n  }\n  if (selected.has(PolicySetupFeature.Skill)) {\n    getManagedAgentSkillCandidatePaths(\n      state.projectRoot,\n      state.existingSkillDirectories,\n      POLICY_MANAGED_SKILL,\n    ).forEach((path) => paths.add(path));\n  }\n  if (selected.has(PolicySetupFeature.Ci) && state.repositoryRoot && state.usesGithub) {\n    paths.add(join(state.repositoryRoot, POLICY_CI_WORKFLOW_PATH));\n  }\n  return [...paths].sort((left, right) => left.localeCompare(right));\n}\n\n/**\n * Ensure a destination stays below an approved project root.\n *\n * @param root - Approved root\n * @param path - Candidate path\n */\nfunction assertContained(root: string, path: string): void {\n  const child = relative(root, path);\n  if (child === '..' || child.startsWith(`..${sep}`) || isAbsolute(child)) {\n    throw new Error(`Refusing to modify path outside project root: ${path}`);\n  }\n}\n\n/**\n * Enumerate generated file and directory paths allowed in an exact starter.\n *\n * @param files - Starter files\n * @returns POSIX relative paths\n */\nfunction starterRelativePaths(files: readonly PolicyStarterFile[]): Set<string> {\n  const paths = new Set<string>([`${POLICY_STARTER_BUNDLE_DIRECTORY}/input.json`]);\n  files.forEach(({ path }) => {\n    paths.add(path);\n    let parent = posix.dirname(path);\n    while (parent !== '.') {\n      paths.add(parent);\n      parent = posix.dirname(parent);\n    }\n  });\n  return paths;\n}\n\n/**\n * Add or classify one regular-file mutation.\n *\n * @param plan - Policy plan being assembled\n * @param input - Collected snapshots\n * @param options - Desired file\n */\nfunction addFileChange(\n  plan: PolicyInitProjectPlan,\n  input: PolicyInitPlanningInput,\n  options: {\n    /** Absolute destination path. */\n    path: string;\n    /** Complete desired contents. */\n    contents: string;\n    /** Human-readable plan description. */\n    description: string;\n    /** Refuse existing contents. */\n    createOnly?: boolean;\n  },\n): void {\n  const change = planFileChange({\n    snapshot: getPlanningFileSnapshot(input.snapshots, options.path),\n    after: options.contents,\n    description: options.description,\n    ...(options.createOnly === undefined ? {} : { createOnly: options.createOnly }),\n  });\n  if (change) {\n    plan.changes.push(change);\n  } else {\n    plan.unchanged.push(options.path);\n  }\n}\n\n/**\n * Add one safe editor merge and its preservation warnings.\n *\n * @param plan - Policy plan being assembled\n * @param input - Collected snapshots\n * @param path - Absolute editor artifact path\n * @param result - Pure JSONC merge result\n * @param description - Human-readable plan description\n * @param cwd - Invocation directory for portable warning paths\n */\nfunction addEditorMerge(\n  plan: PolicyInitProjectPlan,\n  input: PolicyInitPlanningInput,\n  path: string,\n  result: PolicyEditorMergeResult,\n  description: string,\n  cwd: string,\n): void {\n  addFileChange(plan, input, {\n    path,\n    contents: result.contents,\n    description,\n  });\n  plan.warnings.push(\n    ...result.warnings.map((warning) => `${warning} (${displayProjectPath(cwd, path)})`),\n  );\n}\n\n/**\n * Build a safe policy project plan without reading the filesystem.\n *\n * Empty targets receive the complete starter. Existing targets are classified\n * only; no domain file is added, merged, or overwritten.\n *\n * @param input - Collected project state and path snapshots\n * @param options - Selected setup and pinned CLI version\n * @returns Validated policy initialization plan\n */\nexport function buildPolicyInitPlan(\n  input: PolicyInitPlanningInput,\n  options: PolicyInitPlanOptions,\n): PolicyInitProjectPlan {\n  const { state } = input;\n  const files = generatePolicyWorkspaceFiles();\n  const newCommand = 'transcend policy new';\n  const plan: PolicyInitProjectPlan = {\n    version: POLICY_INIT_RESULT_VERSION,\n    command: 'init',\n    rootDirectory: state.projectRoot,\n    targetDirectory: state.targetDirectory,\n    // Init creates a workspace only; bundles (and their .manifest) come from `policy new`.\n    manifestPath: state.targetDirectory,\n    changes: [],\n    unchanged: [],\n    warnings: [],\n    nextSteps: [newCommand],\n    features: [...options.features],\n  };\n\n  const candidatePaths = getPolicyInitPlanningCandidatePaths(state, options);\n  assertContained(state.projectRoot, state.targetDirectory);\n  candidatePaths.forEach((path) => assertContained(state.projectRoot, path));\n\n  if (state.relativeFilePaths.length === 0) {\n    plan.directoryPreconditions = [\n      {\n        path: state.targetDirectory,\n        relativePaths: [...state.relativePaths],\n      },\n    ];\n    files.forEach((file) => {\n      const path = join(state.targetDirectory, file.path);\n      const snapshot = getPlanningPathSnapshot(input.snapshots, path);\n      if (snapshot.kind !== 'absent') {\n        throw new Error(`Expected an empty policy target, but found an entry at: ${path}`);\n      }\n      addFileChange(plan, input, {\n        path,\n        contents: file.contents,\n        description: file.description,\n        createOnly: true,\n      });\n    });\n  } else {\n    let allWorkspaceFilesMatch = true;\n    files.forEach((file) => {\n      const path = join(state.targetDirectory, file.path);\n      const snapshot = getPlanningPathSnapshot(input.snapshots, path);\n      if (snapshot.kind === 'file' && snapshot.contents === file.contents) {\n        plan.unchanged.push(path);\n        return;\n      }\n      allWorkspaceFilesMatch = false;\n      if (snapshot.kind !== 'absent') {\n        plan.unchanged.push(path);\n        plan.warnings.push(\n          `Existing policy scaffold path was left unchanged: ${displayProjectPath(\n            state.invocationDirectory,\n            path,\n          )}`,\n        );\n      }\n    });\n\n    const allowedPaths = starterRelativePaths(files);\n    const hasCustomPaths = state.relativeFilePaths.some((path) => !allowedPaths.has(path));\n    if (!allWorkspaceFilesMatch || hasCustomPaths) {\n      plan.warnings.push(\n        `Existing policy target contains custom or partial content, so no workspace files were added or overwritten. ` +\n          `Review ${displayProjectPath(\n            state.invocationDirectory,\n            state.targetDirectory,\n          )} manually, then run \\`${newCommand}\\`.`,\n      );\n    }\n  }\n\n  const selected = new Set(options.features);\n  const root = state.projectRoot;\n  if (selected.has(PolicySetupFeature.Editor)) {\n    const settingsPath = join(root, '.vscode', 'settings.json');\n    const extensionsPath = join(root, '.vscode', 'extensions.json');\n    const tasksPath = join(root, '.vscode', 'tasks.json');\n\n    type EditorMergeFn = (\n      contents: string | null,\n      repositoryRoot: string,\n      targetDirectory: string,\n    ) => PolicyEditorMergeResult;\n    const editorArtifacts: {\n      /** Absolute path. */\n      path: string;\n      /** Plan description. */\n      description: string;\n      /** Merge function. */\n      merge: EditorMergeFn;\n    }[] = [\n      {\n        path: settingsPath,\n        description: 'Merge strict target-scoped OPA and Rego editor settings',\n        merge: (contents, repositoryRoot, targetDirectory) =>\n          mergePolicyEditorSettings(contents, repositoryRoot, targetDirectory),\n      },\n      {\n        path: extensionsPath,\n        description: 'Recommend the OPA extension and discourage its syntax-only conflict',\n        merge: (contents) => mergePolicyEditorExtensions(contents),\n      },\n      {\n        path: tasksPath,\n        description: 'Create the VS Code task configuration',\n        merge: (contents, repositoryRoot, targetDirectory) =>\n          mergePolicyEditorTasks(contents, repositoryRoot, targetDirectory),\n      },\n    ];\n    editorArtifacts.forEach(({ path, description, merge }) => {\n      const snapshot = getPlanningPathSnapshot(input.snapshots, path);\n      if (snapshot.kind !== 'absent' && snapshot.kind !== 'file') {\n        plan.unchanged.push(path);\n        plan.warnings.push(\n          `Existing VS Code artifact is not a regular file and was left unchanged: ${displayProjectPath(\n            state.invocationDirectory,\n            path,\n          )}`,\n        );\n        return;\n      }\n      addEditorMerge(\n        plan,\n        input,\n        path,\n        merge(snapshot.kind === 'file' ? snapshot.contents : null, root, state.targetDirectory),\n        description,\n        state.invocationDirectory,\n      );\n    });\n  }\n\n  if (selected.has(PolicySetupFeature.Skill)) {\n    const skillPlan = planManagedAgentSkill({\n      rootDirectory: root,\n      existingDirectories: state.existingSkillDirectories,\n      snapshots: input.snapshots,\n      skill: POLICY_MANAGED_SKILL,\n      preserveModified: true,\n    });\n    plan.changes.push(...skillPlan.changes);\n    plan.unchanged.push(...skillPlan.unchanged);\n    plan.warnings.push(\n      ...skillPlan.warnings.map((warning) => {\n        return skillPlan.unchanged.reduce(\n          (rendered, path) =>\n            rendered.replace(path, displayProjectPath(state.invocationDirectory, path)),\n          warning,\n        );\n      }),\n    );\n  }\n\n  if (selected.has(PolicySetupFeature.Ci)) {\n    if (!state.repositoryRoot || !state.usesGithub) {\n      plan.warnings.push(\n        'GitHub Actions setup was selected, but this target is not inside a detected GitHub repository.',\n      );\n    } else {\n      const workflowPath = join(state.repositoryRoot, POLICY_CI_WORKFLOW_PATH);\n      const workspaceDirectory =\n        relative(state.repositoryRoot, state.targetDirectory).split(sep).join('/') || '.';\n      const workflowContents = generatePolicyGithubActionsWorkflow({\n        cliVersion: options.cliVersion,\n        workspaceDirectory,\n        bundleDirectories: [],\n      });\n      const workflowSnapshot = getPlanningPathSnapshot(input.snapshots, workflowPath);\n      if (workflowSnapshot.kind === 'absent') {\n        addFileChange(plan, input, {\n          path: workflowPath,\n          contents: workflowContents,\n          description: 'Add credential-free Policy Engine validation',\n          createOnly: true,\n        });\n      } else if (\n        workflowSnapshot.kind === 'file' &&\n        workflowSnapshot.contents === workflowContents\n      ) {\n        plan.unchanged.push(workflowPath);\n      } else {\n        plan.unchanged.push(workflowPath);\n        plan.warnings.push(\n          `Existing GitHub Actions workflow was left unchanged: ${displayProjectPath(\n            state.invocationDirectory,\n            workflowPath,\n          )}. Adapt it manually to validate each policy bundle.`,\n        );\n      }\n    }\n  }\n\n  plan.changes.forEach(({ path }) => assertContained(state.projectRoot, path));\n  return plan;\n}\n","import colors from 'colors';\n\nimport { version as CLI_VERSION } from '../../../constants.js';\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport {\n  runCapturedProcess,\n  type CapturedProcessResult,\n  type CapturedProcessRunner,\n} from '../../../lib/cli/run-captured-process.js';\nimport {\n  DEFAULT_POLICY_PROJECT_DIRECTORY,\n  discoverPolicyProject,\n} from '../../../lib/policy/policy-project-discovery.js';\nimport {\n  OPA_INSTALL_URL,\n  OPA_MISSING_MESSAGE,\n  parsePolicyToolVersion,\n  MINIMUM_POLICY_STARTER_REGAL_VERSION,\n  REGAL_INSTALL_URL,\n  REGAL_MISSING_MESSAGE,\n  unsupportedOpaVersionMessage,\n  unsupportedRegalVersionMessage,\n} from '../../../lib/policy/policy-runtime.js';\nimport {\n  PolicySetupFeature,\n  type PolicySetupFeature as PolicySetupFeatureType,\n} from '../../../lib/policy/policy-scaffold-model.js';\nimport {\n  buildPolicyInitAiHandoff,\n  buildPolicyInitPlanResult,\n  type PolicyInitToolVersions,\n} from '../../../lib/policy/policy-scaffold-output.js';\nimport {\n  buildPolicyInitPlan,\n  getPolicyInitPlanningCandidatePaths,\n} from '../../../lib/policy/policy-scaffold-planning.js';\nimport { POLICY_STARTER_OPA_VERSION } from '../../../lib/policy/policy-scaffold-templates.js';\nimport { collectPlanningSnapshots } from '../../../lib/scaffolding/project-discovery.js';\nimport { applyProjectPlan } from '../../../lib/scaffolding/project-plan-apply.js';\nimport {\n  displayProjectPath,\n  quoteShellArgument,\n  renderProjectPlan,\n} from '../../../lib/scaffolding/project-plan-output.js';\nimport {\n  isInteractivePromptInvocation,\n  PromptCancelledError,\n  resolveSetupFeatures,\n  ScaffoldPrompts,\n} from '../../../lib/scaffolding/prompts.js';\n\n/** Flags for `transcend policy init`. */\nexport interface PolicyInitFlags {\n  /** Install repository-level VS Code setup. */\n  editor?: boolean;\n  /** Install the Policy Engine Agent Skill. */\n  skill?: boolean;\n  /** Install validation-only GitHub Actions CI. */\n  ci?: boolean;\n  /** Disable prompts. */\n  noInteractive: boolean;\n  /** Render but do not apply the plan. */\n  dryRun: boolean;\n  /** Approve the final displayed plan. */\n  yes: boolean;\n  /** Emit one stable JSON result on stdout. */\n  json: boolean;\n}\n\n/** User-facing optional setup labels. */\nconst SETUP_LABELS: Readonly<Record<PolicySetupFeatureType, string>> = {\n  [PolicySetupFeature.Editor]: 'VS Code settings and lint task',\n  [PolicySetupFeature.Skill]: 'Policy Engine Agent Skill',\n  [PolicySetupFeature.Ci]: 'Validation-only GitHub Actions',\n};\n\n/** All optional setup features in stable prompt order. */\nconst ALL_SETUP_FEATURES = Object.values(PolicySetupFeature);\n\n/** Runtime compatibility detected before policy planning. */\ninterface PolicyRuntimeProbe {\n  /** Compatible tool versions. */\n  tools: PolicyInitToolVersions;\n  /** Missing or incompatible runtime guidance. */\n  warnings: string[];\n}\n\n/**\n * Explain a failed version subprocess with official installation guidance.\n *\n * @param tool - Policy tool name\n * @param result - Failed captured process\n * @returns Actionable warning\n */\nfunction failedVersionProbeMessage(tool: 'OPA' | 'Regal', result: CapturedProcessResult): string {\n  const detail = [result.stdout.trim(), result.stderr.trim()].filter(Boolean).join('\\n');\n  const url = tool === 'OPA' ? OPA_INSTALL_URL : REGAL_INSTALL_URL;\n  const requirement =\n    tool === 'OPA' ? 'OPA 1.x' : `Regal ${MINIMUM_POLICY_STARTER_REGAL_VERSION} or newer`;\n  return (\n    `${requirement} is required, but \\`${tool.toLowerCase()} version\\` exited with code ` +\n    `${result.code}${detail ? `: ${detail}` : '.'} ` +\n    `Install or upgrade it using the official instructions: ${url}`\n  );\n}\n\n/**\n * Probe both local policy runtimes without installing or modifying them.\n *\n * @param context - CLI context\n * @param cwd - Invocation working directory\n * @param runner - Captured subprocess runner\n * @returns Compatible versions and exact runtime guidance\n */\nasync function probePolicyRuntimes(\n  context: LocalContext,\n  cwd: string,\n  runner: CapturedProcessRunner,\n): Promise<PolicyRuntimeProbe> {\n  const tools: PolicyInitToolVersions = { opa: null, regal: null };\n  const warnings: string[] = [];\n\n  const opaResult = await runner('opa', ['version'], { cwd }, context);\n  if (opaResult.error?.code === 'ENOENT') {\n    warnings.push(OPA_MISSING_MESSAGE);\n  } else {\n    const output = `${opaResult.stdout}\\n${opaResult.stderr}`;\n    const unsupported = unsupportedOpaVersionMessage(output);\n    if (opaResult.code !== 0) {\n      warnings.push(unsupported ?? failedVersionProbeMessage('OPA', opaResult));\n    } else if (unsupported) {\n      warnings.push(unsupported);\n    } else {\n      tools.opa = parsePolicyToolVersion(output)!.version;\n    }\n  }\n\n  const regalResult = await runner('regal', ['version'], { cwd }, context);\n  if (regalResult.error?.code === 'ENOENT') {\n    warnings.push(REGAL_MISSING_MESSAGE);\n  } else {\n    const output = `${regalResult.stdout}\\n${regalResult.stderr}`;\n    const unsupported = unsupportedRegalVersionMessage(\n      output,\n      MINIMUM_POLICY_STARTER_REGAL_VERSION,\n      `the generated OPA ${POLICY_STARTER_OPA_VERSION} capabilities configuration`,\n    );\n    if (regalResult.code !== 0) {\n      warnings.push(unsupported ?? failedVersionProbeMessage('Regal', regalResult));\n    } else if (unsupported) {\n      warnings.push(unsupported);\n    } else {\n      tools.regal = parsePolicyToolVersion(output)!.version;\n    }\n  }\n\n  return { tools, warnings };\n}\n\n/**\n * Initialize a credential-free local Policy Engine project.\n *\n * @param this - CLI context\n * @param flags - Scaffold and interaction flags\n * @param directory - Target policy directory\n * @param runner - Captured policy tool runner\n */\nexport async function init(\n  this: LocalContext,\n  flags: PolicyInitFlags,\n  directory: string = DEFAULT_POLICY_PROJECT_DIRECTORY,\n  runner: CapturedProcessRunner = runCapturedProcess,\n): Promise<void> {\n  doneInputValidation(this.process);\n  try {\n    const runtime = await probePolicyRuntimes(this, this.process.cwd(), runner);\n    const state = discoverPolicyProject(this, directory);\n    const prompts = new ScaffoldPrompts(this);\n    const interactive = isInteractivePromptInvocation(\n      flags,\n      this.process.stdin.isTTY,\n      this.process.stderr.isTTY,\n    );\n    const features = await resolveSetupFeatures(prompts, {\n      features: ALL_SETUP_FEATURES,\n      labels: SETUP_LABELS,\n      enabled: {\n        [PolicySetupFeature.Editor]: flags.editor,\n        [PolicySetupFeature.Skill]: flags.skill,\n        [PolicySetupFeature.Ci]: flags.ci,\n      },\n      interactive,\n    });\n    const candidatePaths = getPolicyInitPlanningCandidatePaths(state, { features });\n    const snapshots = collectPlanningSnapshots(this, state.projectRoot, candidatePaths);\n\n    const plan = buildPolicyInitPlan(\n      { state, snapshots },\n      {\n        features,\n        cliVersion: CLI_VERSION,\n      },\n    );\n    plan.warnings.push(...runtime.warnings);\n\n    if (!flags.json) {\n      this.logger.info(\n        renderProjectPlan(plan, {\n          cwd: this.process.cwd(),\n          title: 'Policy initialization plan',\n          details: [{ label: 'Target', path: plan.targetDirectory }],\n        }),\n      );\n    }\n\n    let approved = plan.changes.length === 0 || flags.dryRun;\n    if (plan.changes.length > 0 && !flags.dryRun) {\n      if (flags.yes) {\n        approved = true;\n      } else if (interactive) {\n        approved = await prompts.confirm('Apply this complete plan?', true);\n      } else {\n        throw new Error(\n          'The plan requires approval in a non-interactive invocation. Review with --dryRun, then pass --yes.',\n        );\n      }\n    }\n\n    if (approved && !flags.dryRun && plan.changes.length > 0) {\n      await applyProjectPlan(this, plan);\n    }\n    const applied = approved && !flags.dryRun && plan.changes.length > 0;\n    const setupAvailable = approved && !flags.dryRun;\n    const aiHandoff = buildPolicyInitAiHandoff({\n      projectPath: quoteShellArgument(\n        displayProjectPath(this.process.cwd(), state.targetDirectory),\n      ),\n      hasSkill: setupAvailable && features.includes(PolicySetupFeature.Skill),\n      newCommand: plan.nextSteps[0]!,\n    });\n    const result = buildPolicyInitPlanResult(plan, {\n      applied,\n      dryRun: flags.dryRun,\n      cwd: this.process.cwd(),\n      aiHandoff,\n      tools: runtime.tools,\n    });\n    if (flags.json) {\n      this.process.stdout.write(`${JSON.stringify(result)}\\n`);\n      return;\n    }\n    if (flags.dryRun) {\n      this.logger.info(colors.yellow('Dry run complete. No changes were written.'));\n      return;\n    }\n    if (!approved) {\n      this.logger.info(colors.yellow('No changes applied.'));\n      return;\n    }\n    if (plan.changes.length === 0) {\n      const message =\n        plan.warnings.length === runtime.warnings.length\n          ? 'Policy project is already initialized.'\n          : 'Existing policy project was left unchanged.';\n      this.logger.info(colors.green(message));\n    } else {\n      this.logger.info(colors.green('Policy project initialized.'));\n    }\n    if (plan.nextSteps.length > 0) {\n      this.logger.info(`\\n${colors.bold('Next steps')}`);\n      plan.nextSteps.forEach((step) => this.logger.info(step));\n    }\n    this.logger.info(`\\n${colors.bold('AI handoff — paste into your coding agent')}`);\n    this.logger.info(aiHandoff);\n  } catch (error) {\n    if (error instanceof PromptCancelledError) {\n      return this.process.exit(130);\n    }\n    throw error;\n  }\n}\n"],"mappings":"uyBAOA,MAAa,EAAqB,CAEhC,OAAQ,SAER,MAAO,QAEP,GAAI,KACL,OCdD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ICAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ICAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ICAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ICAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ECQA,MAAa,EAAoB,0BAWpB,EAAgD,CAC3D,CAAE,KAAM,WAAY,SAAUA,EAAiB,CAC/C,CAAE,KAAM,8BAA+B,SAAUC,EAAmC,CACpF,CAAE,KAAM,0BAA2B,SAAUC,EAA+B,CAC5E,CAAE,KAAM,kCAAmC,SAAUC,EAAuC,CAC5F,CAAE,KAAM,2BAA4B,SAAUC,EAAgC,CAC/E,CCwBD,SAAgB,EAAyB,EAO9B,CAET,MACE,GAFkB,EAAQ,SAAW,aAAa,EAAkB,kBAAoB,MAEzE,GAAG,EAAQ,WAAW,8HAYzC,SAAgB,EACd,EACA,EAYsB,CACtB,MAAO,CACL,QAAS,EAAK,QACd,QAAS,EAAK,QACd,QAAS,EAAQ,QACjB,OAAQ,EAAQ,OAChB,gBAAiB,EAAK,gBACtB,aAAc,EAAK,aACnB,QAAS,EAAK,QAAQ,IAAK,GAAW,EAAsB,EAAQ,IAAK,EAAO,CAAC,CACjF,SAAU,EAAK,SACf,UAAW,EAAK,UAChB,SAAU,CAAC,GAAG,EAAK,SAAS,CAC5B,UAAW,EAAQ,UACnB,MAAO,EAAQ,MAChB,CC5DH,MAAM,EAAoD,CACxD,KAAM,EACN,YAAa,gBACb,MAAO,oBACP,MAAO,EACR,CAyBD,SAAgB,EACd,EACA,EACU,CACV,IAAM,EAAQ,IAAI,IAChB,GAA8B,CAAC,KAAK,CAAE,UAAW,EAAK,EAAM,gBAAiB,EAAK,CAAC,CACpF,CACK,EAAW,IAAI,IAAI,EAAQ,SAAS,CAgB1C,OAfI,EAAS,IAAI,EAAmB,OAAO,GACzC,EAAM,IAAI,EAAK,EAAM,YAAa,UAAW,gBAAgB,CAAC,CAC9D,EAAM,IAAI,EAAK,EAAM,YAAa,UAAW,kBAAkB,CAAC,CAChE,EAAM,IAAI,EAAK,EAAM,YAAa,UAAW,aAAa,CAAC,EAEzD,EAAS,IAAI,EAAmB,MAAM,EACxC,EACE,EAAM,YACN,EAAM,yBACN,EACD,CAAC,QAAS,GAAS,EAAM,IAAI,EAAK,CAAC,CAElC,EAAS,IAAI,EAAmB,GAAG,EAAI,EAAM,gBAAkB,EAAM,YACvE,EAAM,IAAI,EAAK,EAAM,eAAgB,EAAwB,CAAC,CAEzD,CAAC,GAAG,EAAM,CAAC,MAAM,EAAM,IAAU,EAAK,cAAc,EAAM,CAAC,CASpE,SAAS,EAAgB,EAAc,EAAoB,CACzD,IAAM,EAAQ,EAAS,EAAM,EAAK,CAClC,GAAI,IAAU,MAAQ,EAAM,WAAW,KAAK,IAAM,EAAI,EAAW,EAAM,CACrE,MAAU,MAAM,iDAAiD,IAAO,CAU5E,SAAS,GAAqB,EAAkD,CAC9E,IAAM,EAAQ,IAAI,IAAY,CAAC,GAAG,EAAgC,aAAa,CAAC,CAShF,OARA,EAAM,SAAS,CAAE,UAAW,CAC1B,EAAM,IAAI,EAAK,CACf,IAAI,EAAS,EAAM,QAAQ,EAAK,CAChC,KAAO,IAAW,KAChB,EAAM,IAAI,EAAO,CACjB,EAAS,EAAM,QAAQ,EAAO,EAEhC,CACK,EAUT,SAAS,EACP,EACA,EACA,EAUM,CACN,IAAM,EAAS,EAAe,CAC5B,SAAU,EAAwB,EAAM,UAAW,EAAQ,KAAK,CAChE,MAAO,EAAQ,SACf,YAAa,EAAQ,YACrB,GAAI,EAAQ,aAAe,IAAA,GAAY,EAAE,CAAG,CAAE,WAAY,EAAQ,WAAY,CAC/E,CAAC,CACE,EACF,EAAK,QAAQ,KAAK,EAAO,CAEzB,EAAK,UAAU,KAAK,EAAQ,KAAK,CAcrC,SAAS,GACP,EACA,EACA,EACA,EACA,EACA,EACM,CACN,EAAc,EAAM,EAAO,CACzB,OACA,SAAU,EAAO,SACjB,cACD,CAAC,CACF,EAAK,SAAS,KACZ,GAAG,EAAO,SAAS,IAAK,GAAY,GAAG,EAAQ,IAAI,EAAmB,EAAK,EAAK,CAAC,GAAG,CACrF,CAaH,SAAgB,GACd,EACA,EACuB,CACvB,GAAM,CAAE,SAAU,EACZ,EAAQ,GAA8B,CACtC,EAAa,uBACb,EAA8B,CAClC,QAAA,EACA,QAAS,OACT,cAAe,EAAM,YACrB,gBAAiB,EAAM,gBAEvB,aAAc,EAAM,gBACpB,QAAS,EAAE,CACX,UAAW,EAAE,CACb,SAAU,EAAE,CACZ,UAAW,CAAC,EAAW,CACvB,SAAU,CAAC,GAAG,EAAQ,SAAS,CAChC,CAEK,EAAiB,EAAoC,EAAO,EAAQ,CAI1E,GAHA,EAAgB,EAAM,YAAa,EAAM,gBAAgB,CACzD,EAAe,QAAS,GAAS,EAAgB,EAAM,YAAa,EAAK,CAAC,CAEtE,EAAM,kBAAkB,SAAW,EACrC,EAAK,uBAAyB,CAC5B,CACE,KAAM,EAAM,gBACZ,cAAe,CAAC,GAAG,EAAM,cAAc,CACxC,CACF,CACD,EAAM,QAAS,GAAS,CACtB,IAAM,EAAO,EAAK,EAAM,gBAAiB,EAAK,KAAK,CAEnD,GADiB,EAAwB,EAAM,UAAW,EAC9C,CAAC,OAAS,SACpB,MAAU,MAAM,2DAA2D,IAAO,CAEpF,EAAc,EAAM,EAAO,CACzB,OACA,SAAU,EAAK,SACf,YAAa,EAAK,YAClB,WAAY,GACb,CAAC,EACF,KACG,CACL,IAAI,EAAyB,GAC7B,EAAM,QAAS,GAAS,CACtB,IAAM,EAAO,EAAK,EAAM,gBAAiB,EAAK,KAAK,CAC7C,EAAW,EAAwB,EAAM,UAAW,EAAK,CAC/D,GAAI,EAAS,OAAS,QAAU,EAAS,WAAa,EAAK,SAAU,CACnE,EAAK,UAAU,KAAK,EAAK,CACzB,OAEF,EAAyB,GACrB,EAAS,OAAS,WACpB,EAAK,UAAU,KAAK,EAAK,CACzB,EAAK,SAAS,KACZ,qDAAqD,EACnD,EAAM,oBACN,EACD,GACF,GAEH,CAEF,IAAM,EAAe,GAAqB,EAAM,CAC1C,EAAiB,EAAM,kBAAkB,KAAM,GAAS,CAAC,EAAa,IAAI,EAAK,CAAC,EAClF,CAAC,GAA0B,IAC7B,EAAK,SAAS,KACZ,sHACY,EACR,EAAM,oBACN,EAAM,gBACP,CAAC,wBAAwB,EAAW,KACxC,CAIL,IAAM,EAAW,IAAI,IAAI,EAAQ,SAAS,CACpC,EAAO,EAAM,YACnB,GAAI,EAAS,IAAI,EAAmB,OAAO,CAAE,CAC3C,IAAM,EAAe,EAAK,EAAM,UAAW,gBAAgB,CACrD,EAAiB,EAAK,EAAM,UAAW,kBAAkB,CACzD,EAAY,EAAK,EAAM,UAAW,aAAa,CAiCrD,CAlBE,CACE,KAAM,EACN,YAAa,0DACb,OAAQ,EAAU,EAAgB,IAChC,GAA0B,EAAU,EAAgB,EAAgB,CACvE,CACD,CACE,KAAM,EACN,YAAa,sEACb,MAAQ,GAAa,GAA4B,EAAS,CAC3D,CACD,CACE,KAAM,EACN,YAAa,wCACb,OAAQ,EAAU,EAAgB,IAChC,GAAuB,EAAU,EAAgB,EAAgB,CACpE,CAEY,CAAC,SAAS,CAAE,OAAM,cAAa,WAAY,CACxD,IAAM,EAAW,EAAwB,EAAM,UAAW,EAAK,CAC/D,GAAI,EAAS,OAAS,UAAY,EAAS,OAAS,OAAQ,CAC1D,EAAK,UAAU,KAAK,EAAK,CACzB,EAAK,SAAS,KACZ,2EAA2E,EACzE,EAAM,oBACN,EACD,GACF,CACD,OAEF,GACE,EACA,EACA,EACA,EAAM,EAAS,OAAS,OAAS,EAAS,SAAW,KAAM,EAAM,EAAM,gBAAgB,CACvF,EACA,EAAM,oBACP,EACD,CAGJ,GAAI,EAAS,IAAI,EAAmB,MAAM,CAAE,CAC1C,IAAM,EAAY,EAAsB,CACtC,cAAe,EACf,oBAAqB,EAAM,yBAC3B,UAAW,EAAM,UACjB,MAAO,EACP,iBAAkB,GACnB,CAAC,CACF,EAAK,QAAQ,KAAK,GAAG,EAAU,QAAQ,CACvC,EAAK,UAAU,KAAK,GAAG,EAAU,UAAU,CAC3C,EAAK,SAAS,KACZ,GAAG,EAAU,SAAS,IAAK,GAClB,EAAU,UAAU,QACxB,EAAU,IACT,EAAS,QAAQ,EAAM,EAAmB,EAAM,oBAAqB,EAAK,CAAC,CAC7E,EACD,CACD,CACH,CAGH,GAAI,EAAS,IAAI,EAAmB,GAAG,CACrC,GAAI,CAAC,EAAM,gBAAkB,CAAC,EAAM,WAClC,EAAK,SAAS,KACZ,iGACD,KACI,CACL,IAAM,EAAe,EAAK,EAAM,eAAgB,EAAwB,CAClE,EACJ,EAAS,EAAM,eAAgB,EAAM,gBAAgB,CAAC,MAAM,EAAI,CAAC,KAAK,IAAI,EAAI,IAC1E,EAAmB,GAAoC,CAC3D,WAAY,EAAQ,WACpB,qBACA,kBAAmB,EAAE,CACtB,CAAC,CACI,EAAmB,EAAwB,EAAM,UAAW,EAAa,CAC3E,EAAiB,OAAS,SAC5B,EAAc,EAAM,EAAO,CACzB,KAAM,EACN,SAAU,EACV,YAAa,+CACb,WAAY,GACb,CAAC,CAEF,EAAiB,OAAS,QAC1B,EAAiB,WAAa,EAE9B,EAAK,UAAU,KAAK,EAAa,EAEjC,EAAK,UAAU,KAAK,EAAa,CACjC,EAAK,SAAS,KACZ,wDAAwD,EACtD,EAAM,oBACN,EACD,CAAC,qDACH,EAMP,OADA,EAAK,QAAQ,SAAS,CAAE,UAAW,EAAgB,EAAM,YAAa,EAAK,CAAC,CACrE,ECzUT,MAAM,GAAiE,EACpE,EAAmB,QAAS,kCAC5B,EAAmB,OAAQ,6BAC3B,EAAmB,IAAK,iCAC1B,CAGK,GAAqB,OAAO,OAAO,EAAmB,CAiB5D,SAAS,EAA0B,EAAuB,EAAuC,CAC/F,IAAM,EAAS,CAAC,EAAO,OAAO,MAAM,CAAE,EAAO,OAAO,MAAM,CAAC,CAAC,OAAO,QAAQ,CAAC,KAAK;EAAK,CAChF,EAAM,IAAS,MAAQ,EAAkB,EAG/C,MACE,GAFA,IAAS,MAAQ,UAAY,SAAS,EAAqC,WAE5D,sBAAsB,EAAK,aAAa,CAAC,8BACrD,EAAO,OAAO,EAAS,KAAK,IAAW,IAAI,0DACY,IAY9D,eAAe,GACb,EACA,EACA,EAC6B,CAC7B,IAAM,EAAgC,CAAE,IAAK,KAAM,MAAO,KAAM,CAC1D,EAAqB,EAAE,CAEvB,EAAY,MAAM,EAAO,MAAO,CAAC,UAAU,CAAE,CAAE,MAAK,CAAE,EAAQ,CACpE,GAAI,EAAU,OAAO,OAAS,SAC5B,EAAS,KAAK,EAAoB,KAC7B,CACL,IAAM,EAAS,GAAG,EAAU,OAAO,IAAI,EAAU,SAC3C,EAAc,EAA6B,EAAO,CACpD,EAAU,OAAS,EAEZ,EACT,EAAS,KAAK,EAAY,CAE1B,EAAM,IAAM,EAAuB,EAAO,CAAE,QAJ5C,EAAS,KAAK,GAAe,EAA0B,MAAO,EAAU,CAAC,CAQ7E,IAAM,EAAc,MAAM,EAAO,QAAS,CAAC,UAAU,CAAE,CAAE,MAAK,CAAE,EAAQ,CACxE,GAAI,EAAY,OAAO,OAAS,SAC9B,EAAS,KAAK,EAAsB,KAC/B,CACL,IAAM,EAAS,GAAG,EAAY,OAAO,IAAI,EAAY,SAC/C,EAAc,EAClB,EACA,EACA,qBAAqB,EAA2B,6BACjD,CACG,EAAY,OAAS,EAEd,EACT,EAAS,KAAK,EAAY,CAE1B,EAAM,MAAQ,EAAuB,EAAO,CAAE,QAJ9C,EAAS,KAAK,GAAe,EAA0B,QAAS,EAAY,CAAC,CAQjF,MAAO,CAAE,QAAO,WAAU,CAW5B,eAAsB,EAEpB,EACA,EAAoB,EACpB,EAAgC,EACjB,CACf,EAAoB,KAAK,QAAQ,CACjC,GAAI,CACF,IAAM,EAAU,MAAM,GAAoB,KAAM,KAAK,QAAQ,KAAK,CAAE,EAAO,CACrE,EAAQ,EAAsB,KAAM,EAAU,CAC9C,EAAU,IAAI,EAAgB,KAAK,CACnC,EAAc,EAClB,EACA,KAAK,QAAQ,MAAM,MACnB,KAAK,QAAQ,OAAO,MACrB,CACK,EAAW,MAAM,EAAqB,EAAS,CACnD,SAAU,GACV,OAAQ,GACR,QAAS,EACN,EAAmB,QAAS,EAAM,QAClC,EAAmB,OAAQ,EAAM,OACjC,EAAmB,IAAK,EAAM,GAChC,CACD,cACD,CAAC,CACI,EAAiB,EAAoC,EAAO,CAAE,WAAU,CAAC,CAGzE,EAAO,GACX,CAAE,QAAO,UAHO,EAAyB,KAAM,EAAM,YAAa,EAGhD,CAAE,CACpB,CACE,WACA,WAAYC,EACb,CACF,CACD,EAAK,SAAS,KAAK,GAAG,EAAQ,SAAS,CAElC,EAAM,MACT,KAAK,OAAO,KACV,EAAkB,EAAM,CACtB,IAAK,KAAK,QAAQ,KAAK,CACvB,MAAO,6BACP,QAAS,CAAC,CAAE,MAAO,SAAU,KAAM,EAAK,gBAAiB,CAAC,CAC3D,CAAC,CACH,CAGH,IAAI,EAAW,EAAK,QAAQ,SAAW,GAAK,EAAM,OAClD,GAAI,EAAK,QAAQ,OAAS,GAAK,CAAC,EAAM,OACpC,GAAI,EAAM,IACR,EAAW,WACF,EACT,EAAW,MAAM,EAAQ,QAAQ,4BAA6B,GAAK,MAEnE,MAAU,MACR,qGACD,CAID,GAAY,CAAC,EAAM,QAAU,EAAK,QAAQ,OAAS,GACrD,MAAM,EAAiB,KAAM,EAAK,CAEpC,IAAM,EAAU,GAAY,CAAC,EAAM,QAAU,EAAK,QAAQ,OAAS,EAC7D,EAAiB,GAAY,CAAC,EAAM,OACpC,EAAY,EAAyB,CACzC,YAAa,EACX,EAAmB,KAAK,QAAQ,KAAK,CAAE,EAAM,gBAAgB,CAC9D,CACD,SAAU,GAAkB,EAAS,SAAS,EAAmB,MAAM,CACvE,WAAY,EAAK,UAAU,GAC5B,CAAC,CACI,EAAS,EAA0B,EAAM,CAC7C,UACA,OAAQ,EAAM,OACd,IAAK,KAAK,QAAQ,KAAK,CACvB,YACA,MAAO,EAAQ,MAChB,CAAC,CACF,GAAI,EAAM,KAAM,CACd,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAO,CAAC,IAAI,CACxD,OAEF,GAAI,EAAM,OAAQ,CAChB,KAAK,OAAO,KAAK,EAAO,OAAO,6CAA6C,CAAC,CAC7E,OAEF,GAAI,CAAC,EAAU,CACb,KAAK,OAAO,KAAK,EAAO,OAAO,sBAAsB,CAAC,CACtD,OAEF,GAAI,EAAK,QAAQ,SAAW,EAAG,CAC7B,IAAM,EACJ,EAAK,SAAS,SAAW,EAAQ,SAAS,OACtC,yCACA,8CACN,KAAK,OAAO,KAAK,EAAO,MAAM,EAAQ,CAAC,MAEvC,KAAK,OAAO,KAAK,EAAO,MAAM,8BAA8B,CAAC,CAE3D,EAAK,UAAU,OAAS,IAC1B,KAAK,OAAO,KAAK,KAAK,EAAO,KAAK,aAAa,GAAG,CAClD,EAAK,UAAU,QAAS,GAAS,KAAK,OAAO,KAAK,EAAK,CAAC,EAE1D,KAAK,OAAO,KAAK,KAAK,EAAO,KAAK,4CAA4C,GAAG,CACjF,KAAK,OAAO,KAAK,EAAU,OACpB,EAAO,CACd,GAAI,aAAiB,EACnB,OAAO,KAAK,QAAQ,KAAK,IAAI,CAE/B,MAAM"}

package/dist/impl-D6rMLiNB2.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-D6rMLiNB2.mjs","names":["fg"],"sources":["../src/commands/policy/helpers/buildOpaBundleTarball.ts","../src/commands/policy/helpers/buildPolicyBundleFormData.ts","../src/commands/policy/helpers/defaultPolicyVersionLabel.ts","../src/lib/policy/policy-publish-hints.ts","../src/commands/policy/publish/impl.ts"],"sourcesContent":["import { spawnSync } from 'node:child_process';\nimport fs from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\nimport { gunzipSync } from 'node:zlib';\n\nimport { MAX_BUNDLE_COMPRESSED_BYTES, MAX_BUNDLE_DECOMPRESSED_BYTES } from '@transcend-io/utils';\nimport fg from 'fast-glob';\n\nimport { validatePolicyBundleContents } from '../../../lib/policy/policy-bundle-manifest.js';\nimport { POLICY_MANIFEST_FILENAME } from '../../../lib/policy/policy-scaffold-templates.js';\nimport { assertOpaInstalled } from './assertOpaInstalled.js';\nimport { runOPACapture } from './runOpa.js';\n\n/** Result of collecting publishable entries from a policy bundle directory. */\ninterface PolicyBundleArchiveContents {\n  /** Relative paths to include in the upload tarball (manifest first, then rego) */\n  entries: string[];\n}\n\n/**\n * Collects `.manifest` and publishable `.rego` files from a policy directory.\n *\n * @param dir - Absolute path to the policy bundle directory\n * @returns Validated archive entries\n */\nfunction collectPolicyBundleArchiveEntries(dir: string): PolicyBundleArchiveContents {\n  const regoFiles = fg\n    .sync('**/*.rego', {\n      cwd: dir,\n      onlyFiles: true,\n      dot: false,\n    })\n    .sort();\n  const onDiskManifestPath = path.join(dir, POLICY_MANIFEST_FILENAME);\n  const { publishableRegoPaths } = validatePolicyBundleContents(\n    fs.existsSync(onDiskManifestPath) ? fs.readFileSync(onDiskManifestPath, 'utf8') : undefined,\n    regoFiles.map((relativePath) => ({\n      path: relativePath,\n      contents: fs.readFileSync(path.join(dir, relativePath), 'utf8'),\n    })),\n  );\n\n  return {\n    entries: [POLICY_MANIFEST_FILENAME, ...publishableRegoPaths],\n  };\n}\n\n/**\n * Verifies that a policy directory compiles end-to-end with `opa build`.\n *\n * The compiled output is discarded — the server receives the `.manifest` +\n * `.rego` archive produced by {@link buildOpaBundleTarball}, not the OPA bundle\n * — but a successful build guarantees the policies compile and link, surfacing\n * errors (syntax, missing imports, undefined references, etc.) before upload.\n *\n * @param dir - Absolute path to the policy bundle directory\n */\nasync function assertBundleCompiles(dir: string): Promise<void> {\n  const buildOutputPath = path.join(\n    os.tmpdir(),\n    `transcend-policy-bundle-build-${Date.now()}-${Math.random().toString(36).slice(2)}.tar.gz`,\n  );\n  try {\n    // Run with `cwd` set to the bundle directory and pass `.` so `opa build`\n    // resolves the bundle root correctly. Bundle mode (`-b`) keeps local\n    // `input.json` / `input.example.json` fixtures from merging as data.\n    // `*_test.rego` files are local-only.\n    const { code, stderr } = await runOPACapture(\n      ['build', '--ignore', '*_test.rego', '-b', '-o', buildOutputPath, '.'],\n      { cwd: dir },\n    );\n    if (code !== 0) {\n      throw new Error(stderr.trim() || `opa build failed with exit code ${code}`);\n    }\n  } finally {\n    if (fs.existsSync(buildOutputPath)) {\n      fs.unlinkSync(buildOutputPath);\n    }\n  }\n}\n\n/**\n * Formats a byte count as a human-readable size with binary units.\n *\n * @param bytes - Number of bytes\n * @returns Human-readable size, e.g. `14 MiB` or `4 KiB`\n */\nfunction formatBytes(bytes: number): string {\n  if (bytes < 1024) {\n    return `${bytes} B`;\n  }\n  const kib = bytes / 1024;\n  if (kib < 1024) {\n    return `${kib % 1 === 0 ? kib.toFixed(0) : kib.toFixed(1)} KiB`;\n  }\n  const mib = kib / 1024;\n  return `${mib % 1 === 0 ? mib.toFixed(0) : mib.toFixed(1)} MiB`;\n}\n\n/**\n * Builds a gzip-compressed policy bundle tarball for upload to Transcend.\n *\n * The Policy Engine API expects a plain archive containing `.manifest` and\n * one or more `.rego` files. Local projects author an OPA `.manifest` and it\n * is uploaded directly — no rename at pack time. Before packaging, the\n * manifest is validated (shape + root coverage) and the bundle is validated\n * with `opa check` (strict Rego linting) and `opa build` (full compilation) so\n * failures surface client-side rather than after upload.\n *\n * @param dir - Directory containing `.manifest` and `.rego` policy files\n * @returns Absolute path to the generated `.tar.gz` bundle\n */\nexport async function buildOpaBundleTarball(dir: string): Promise<string> {\n  assertOpaInstalled();\n\n  const resolvedDir = path.resolve(dir);\n  if (!fs.existsSync(resolvedDir) || !fs.statSync(resolvedDir).isDirectory()) {\n    throw new Error(`Policy directory does not exist or is not a directory: ${resolvedDir}`);\n  }\n\n  // Validate the manifest shape and that roots cover every Rego package before\n  // invoking OPA, so invalid manifests surface a clear error instead of an\n  // opaque `opa build failed with exit code 1`.\n  const { entries: archiveEntries } = collectPolicyBundleArchiveEntries(resolvedDir);\n\n  // Match the Rego v1 validation the Policy Engine API runs on upload.\n  const { code: checkCode, stderr: checkStderr } = await runOPACapture([\n    'check',\n    '--strict',\n    resolvedDir,\n  ]);\n  if (checkCode !== 0) {\n    throw new Error(checkStderr.trim() || `opa check failed with exit code ${checkCode}`);\n  }\n\n  // Ensure the bundle compiles end-to-end before packaging for upload.\n  await assertBundleCompiles(resolvedDir);\n\n  const outputPath = path.join(\n    os.tmpdir(),\n    `transcend-policy-bundle-${Date.now()}-${Math.random().toString(36).slice(2)}.tar.gz`,\n  );\n  const tarResult = spawnSync('tar', ['-czf', outputPath, '-C', resolvedDir, ...archiveEntries], {\n    env: { ...process.env, COPYFILE_DISABLE: '1' },\n    encoding: 'utf8',\n  });\n  if (tarResult.status !== 0) {\n    throw new Error(\n      `Failed to create policy bundle archive: ${tarResult.stderr.trim() || 'tar failed'}`,\n    );\n  }\n\n  const compressedBytes = fs.readFileSync(outputPath);\n  if (compressedBytes.byteLength > MAX_BUNDLE_COMPRESSED_BYTES) {\n    fs.unlinkSync(outputPath);\n    throw new Error(\n      `Policy bundle exceeds the ${formatBytes(MAX_BUNDLE_COMPRESSED_BYTES)} compressed upload limit ` +\n        `(bundle is ${formatBytes(compressedBytes.byteLength)}). ` +\n        `The server also rejects decompressed bundles larger than ${formatBytes(MAX_BUNDLE_DECOMPRESSED_BYTES)}.`,\n    );\n  }\n\n  const decompressedBytes = gunzipSync(compressedBytes);\n  if (decompressedBytes.byteLength > MAX_BUNDLE_DECOMPRESSED_BYTES) {\n    fs.unlinkSync(outputPath);\n    throw new Error(\n      `Policy bundle exceeds the ${formatBytes(MAX_BUNDLE_DECOMPRESSED_BYTES)} decompressed upload limit ` +\n        `(bundle is ${formatBytes(decompressedBytes.byteLength)} decompressed).`,\n    );\n  }\n\n  return outputPath;\n}\n","import fs from 'node:fs';\nimport path from 'node:path';\n\n/** Fields for building a policy bundle upload form. */\nexport interface BuildPolicyBundleFormDataOptions {\n  /** Absolute path to the bundle tarball */\n  bundlePath: string;\n  /** Version label */\n  version: string;\n  /** Optional description */\n  description?: string;\n  /** Bundle name (only for create) */\n  bundleName?: string;\n}\n\n/**\n * Builds multipart form data for a policy bundle upload.\n *\n * @param options - Upload fields\n * @returns FormData ready for POST\n */\nexport function buildPolicyBundleFormData(options: BuildPolicyBundleFormDataOptions): FormData {\n  const bundleBytes = fs.readFileSync(options.bundlePath);\n  const form = new FormData();\n  form.append(\n    'bundle',\n    new Blob([bundleBytes], { type: 'application/gzip' }),\n    path.basename(options.bundlePath),\n  );\n  form.append('version', options.version);\n  if (options.description) {\n    form.append('description', options.description);\n  }\n  if (options.bundleName) {\n    form.append('bundleName', options.bundleName);\n  }\n  return form;\n}\n","/**\n * Formats a date as `yyyy-mm-dd-hh-mm-ss` in UTC.\n *\n * @param date - Date to format\n * @returns Timestamp label\n */\nfunction formatPolicyVersionTimestamp(date: Date): string {\n  return date.toISOString().slice(0, 19).replace(/[T:]/g, '-');\n}\n\n/**\n * Returns a default version label from the bundle name and current UTC timestamp.\n *\n * @param bundleName - Tenant-unique policy bundle name\n * @param now - Current time (for testing)\n * @returns Version label in `{bundleName}-yyyy-mm-dd-hh-mm-ss` form\n */\nexport function defaultPolicyVersionLabel(bundleName: string, now: Date = new Date()): string {\n  return `${bundleName}-${formatPolicyVersionTimestamp(now)}`;\n}\n","import {\n  PERMISSIONS_POLICY_BUNDLE_NAME,\n  PolicyTemplate,\n  type PolicyTemplateName,\n} from './policy-scaffold-templates.js';\n\n/** Inputs used to soft-warn about Permissions vs generic publish naming. */\nexport interface PolicyPublishBundleNameHintInput {\n  /** Optional scaffold template from `.manifest` metadata. */\n  template?: PolicyTemplateName;\n  /** Declared OPA package roots. */\n  roots: string[];\n}\n\n/**\n * Whether local authoring signals suggest a Permissions API bundle.\n *\n * Prefers explicit `metadata.transcend.io.template`. Without metadata, falls\n * back to a root that is exactly `permissions` or nested under it.\n *\n * @param input - Manifest template hint and roots\n * @returns Whether the local tree looks Permissions-oriented\n */\nfunction looksLikePermissionsBundle(input: PolicyPublishBundleNameHintInput): boolean {\n  if (input.template === PolicyTemplate.Permissions) {\n    return true;\n  }\n  if (input.template === PolicyTemplate.Generic) {\n    return false;\n  }\n  return input.roots.some(\n    (root) =>\n      root === PERMISSIONS_POLICY_BUNDLE_NAME ||\n      root.startsWith(`${PERMISSIONS_POLICY_BUNDLE_NAME}/`),\n  );\n}\n\n/**\n * Soft-warning when `--remote-bundle-name` disagrees with Permissions conventions.\n *\n * Upload does not enforce bundle kinds. Permissions API only loads the\n * remote bundle named {@link PERMISSIONS_POLICY_BUNDLE_NAME}.\n *\n * @param bundleName - Value of `--remote-bundle-name`\n * @param input - Local manifest template/roots\n * @returns Warning text, or undefined when names align\n */\nexport function formatPolicyPublishBundleNameHint(\n  bundleName: string,\n  input: PolicyPublishBundleNameHintInput,\n): string | undefined {\n  const permissionsLocal = looksLikePermissionsBundle(input);\n  const permissionsRemote = bundleName === PERMISSIONS_POLICY_BUNDLE_NAME;\n\n  if (permissionsLocal && !permissionsRemote) {\n    return (\n      `This directory looks like a Permissions API policy, but --remote-bundle-name is ` +\n      `\"${bundleName}\". Permissions API only loads the remote bundle named ` +\n      `\"${PERMISSIONS_POLICY_BUNDLE_NAME}\". Upload still succeeds; pass ` +\n      `--remote-bundle-name=${PERMISSIONS_POLICY_BUNDLE_NAME} if that is the intended path.`\n    );\n  }\n\n  if (!permissionsLocal && permissionsRemote) {\n    return (\n      `--remote-bundle-name=${PERMISSIONS_POLICY_BUNDLE_NAME} reserves the Permissions API ` +\n      `path. Upload treats all bundles the same; only that fixed name is queried by ` +\n      `the Permissions API. Continue only if you intend this bundle for the Permissions API.`\n    );\n  }\n\n  return undefined;\n}\n","import { join } from 'node:path';\n\nimport colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { selectCommandLogger } from '../../../lib/cli/command-output.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { buildExampleCommand } from '../../../lib/docgen/buildExamples.js';\nimport { inquirerConfirmBoolean } from '../../../lib/helpers/inquirer.js';\nimport { parsePolicyBundleManifest } from '../../../lib/policy/policy-bundle-manifest.js';\nimport { resolvePolicyProjectDirectory } from '../../../lib/policy/policy-project-discovery.js';\nimport { formatPolicyPublishBundleNameHint } from '../../../lib/policy/policy-publish-hints.js';\nimport { POLICY_MANIFEST_FILENAME } from '../../../lib/policy/policy-scaffold-templates.js';\nimport { isInteractivePromptInvocation } from '../../../lib/scaffolding/prompts.js';\nimport type { ActivateCommandFlags } from '../activate/impl.js';\nimport {\n  buildPolicyBundleFormData,\n  buildPolicyEngineClient,\n  buildOpaBundleTarball,\n  defaultPolicyVersionLabel,\n  formatPolicyBundleVersionSummary,\n  policyEngineRequest,\n  printResult,\n  resolveBundleIdByName,\n  setPolicyEngineCliDebug,\n} from '../helpers/index.js';\nimport type { CreatePolicyBundleResponse, CreatePolicyBundleVersionResponse } from '../types.js';\n\n/** CLI flags for `transcend policy publish`. */\nexport interface PublishCommandFlags {\n  /** Tenant-unique bundle name */\n  'remote-bundle-name': string;\n  /** Transcend API key */\n  auth: string;\n  /** Transcend API URL */\n  'transcend-url': string;\n  /** Version label (defaults to `{bundleName}-yyyy-mm-dd-hh-mm-ss`) */\n  version?: string;\n  /** Optional version description */\n  description?: string;\n  /** Print raw JSON response */\n  json: boolean;\n  /** Skip the \"create new bundle\" confirmation */\n  yes: boolean;\n  /** Include technical error details when a command fails */\n  debug?: boolean;\n}\n\n/**\n * Build and upload a new immutable policy bundle version.\n *\n * @param this - CLI context\n * @param flags - Command flags\n * @param directory - Policy bundle directory containing a `.manifest`\n */\nexport async function publish(\n  this: LocalContext,\n  {\n    'remote-bundle-name': bundleName,\n    auth,\n    'transcend-url': transcendUrl,\n    version,\n    description,\n    json,\n    yes,\n    debug = false,\n  }: PublishCommandFlags,\n  directory: string,\n): Promise<void> {\n  doneInputValidation(this.process);\n  setPolicyEngineCliDebug(debug);\n\n  const commandLogger = selectCommandLogger(this.logger, json);\n  const resolvedDir = resolvePolicyProjectDirectory(this.process.cwd(), directory);\n  const versionLabel = version ?? defaultPolicyVersionLabel(bundleName);\n  const client = buildPolicyEngineClient(transcendUrl, auth);\n  const interactive = isInteractivePromptInvocation(\n    { json, noInteractive: false },\n    this.process.stdin.isTTY,\n    this.process.stderr.isTTY,\n  );\n\n  let bundlePath: string | undefined;\n  try {\n    commandLogger.info(colors.green(`Building policy bundle from ${resolvedDir}...`));\n    bundlePath = await buildOpaBundleTarball(resolvedDir);\n\n    try {\n      const manifestPath = join(resolvedDir, POLICY_MANIFEST_FILENAME);\n      const manifest = parsePolicyBundleManifest(this.fs.readFileSync(manifestPath, 'utf8'));\n      const bundleNameHint = formatPolicyPublishBundleNameHint(bundleName, manifest);\n      if (bundleNameHint) {\n        commandLogger.warn(colors.yellow(bundleNameHint));\n      }\n    } catch {\n      // Best-effort authoring hint; tarball build already validated the manifest.\n    }\n\n    const existingBundleId = await resolveBundleIdByName(client, bundleName);\n\n    let responseBody: CreatePolicyBundleResponse | CreatePolicyBundleVersionResponse;\n\n    if (existingBundleId) {\n      commandLogger.info(colors.green(`Uploading new version for bundle \"${bundleName}\"...`));\n      const form = buildPolicyBundleFormData({\n        bundlePath,\n        version: versionLabel,\n        description,\n      });\n      responseBody = await policyEngineRequest(\n        client\n          .post(`v1/policy-engine/policy-bundles/${existingBundleId}/versions`, { body: form })\n          .json<CreatePolicyBundleVersionResponse>(),\n      );\n    } else {\n      if (!interactive && !yes) {\n        this.logger.error(\n          colors.red(\n            'Cannot create a new bundle in non-interactive or JSON mode; pass --yes to confirm.',\n          ),\n        );\n        this.process.exit(1);\n        return;\n      }\n\n      if (!yes) {\n        commandLogger.warn(\n          colors.yellow(`No policy bundle named \"${bundleName}\" exists for this organization.`),\n        );\n        const shouldCreate = await inquirerConfirmBoolean({\n          message: `No policy bundle named \"${bundleName}\" exists. Create a new bundle and upload its first version?`,\n        });\n        if (!shouldCreate) {\n          commandLogger.info(colors.yellow('Publish cancelled.'));\n          return;\n        }\n      }\n\n      commandLogger.info(\n        colors.green(`Creating bundle \"${bundleName}\" and uploading first version...`),\n      );\n      const createForm = buildPolicyBundleFormData({\n        bundlePath,\n        version: versionLabel,\n        description,\n        bundleName,\n      });\n      responseBody = await policyEngineRequest(\n        client\n          .post('v1/policy-engine/policy-bundles', {\n            body: createForm,\n          })\n          .json<CreatePolicyBundleResponse>(),\n      );\n    }\n\n    printResult(this.process.stdout, {\n      json,\n      data: responseBody,\n      renderTable: () => formatPolicyBundleVersionSummary(responseBody.version),\n    });\n\n    commandLogger.info(colors.green('Policy bundle version uploaded successfully.'));\n\n    const activateCommand = buildExampleCommand<ActivateCommandFlags>(['policy', 'activate'], {\n      version: responseBody.version.version,\n      'remote-bundle-name': bundleName,\n    });\n    commandLogger.info(\n      colors.yellow(\n        `Publishing a policy does not activate it. To activate this version, run:\\n  ${activateCommand}`,\n      ),\n    );\n  } finally {\n    if (bundlePath && this.fs.existsSync(bundlePath)) {\n      this.fs.unlinkSync(bundlePath);\n    }\n  }\n}\n"],"mappings":"o+BA0BA,SAAS,EAAkC,EAA0C,CACnF,IAAM,EAAYA,EACf,KAAK,YAAa,CACjB,IAAK,EACL,UAAW,GACX,IAAK,GACN,CAAC,CACD,MAAM,CACH,EAAqB,EAAK,KAAK,EAAK,EAAyB,CAC7D,CAAE,wBAAyB,EAC/B,EAAG,WAAW,EAAmB,CAAG,EAAG,aAAa,EAAoB,OAAO,CAAG,IAAA,GAClF,EAAU,IAAK,IAAkB,CAC/B,KAAM,EACN,SAAU,EAAG,aAAa,EAAK,KAAK,EAAK,EAAa,CAAE,OAAO,CAChE,EAAE,CACJ,CAED,MAAO,CACL,QAAS,CAAC,EAA0B,GAAG,EAAqB,CAC7D,CAaH,eAAe,EAAqB,EAA4B,CAC9D,IAAM,EAAkB,EAAK,KAC3B,EAAG,QAAQ,CACX,iCAAiC,KAAK,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,MAAM,EAAE,CAAC,SACpF,CACD,GAAI,CAKF,GAAM,CAAE,OAAM,UAAW,MAAM,EAC7B,CAAC,QAAS,WAAY,cAAe,KAAM,KAAM,EAAiB,IAAI,CACtE,CAAE,IAAK,EAAK,CACb,CACD,GAAI,IAAS,EACX,MAAU,MAAM,EAAO,MAAM,EAAI,mCAAmC,IAAO,QAErE,CACJ,EAAG,WAAW,EAAgB,EAChC,EAAG,WAAW,EAAgB,EAWpC,SAAS,EAAY,EAAuB,CAC1C,GAAI,EAAQ,KACV,MAAO,GAAG,EAAM,IAElB,IAAM,EAAM,EAAQ,KACpB,GAAI,EAAM,KACR,MAAO,GAAG,EAAM,GAAM,EAAI,EAAI,QAAQ,EAAE,CAAG,EAAI,QAAQ,EAAE,CAAC,MAE5D,IAAM,EAAM,EAAM,KAClB,MAAO,GAAG,EAAM,GAAM,EAAI,EAAI,QAAQ,EAAE,CAAG,EAAI,QAAQ,EAAE,CAAC,MAgB5D,eAAsB,EAAsB,EAA8B,CACxE,GAAoB,CAEpB,IAAM,EAAc,EAAK,QAAQ,EAAI,CACrC,GAAI,CAAC,EAAG,WAAW,EAAY,EAAI,CAAC,EAAG,SAAS,EAAY,CAAC,aAAa,CACxE,MAAU,MAAM,0DAA0D,IAAc,CAM1F,GAAM,CAAE,QAAS,GAAmB,EAAkC,EAAY,CAG5E,CAAE,KAAM,EAAW,OAAQ,GAAgB,MAAM,EAAc,CACnE,QACA,WACA,EACD,CAAC,CACF,GAAI,IAAc,EAChB,MAAU,MAAM,EAAY,MAAM,EAAI,mCAAmC,IAAY,CAIvF,MAAM,EAAqB,EAAY,CAEvC,IAAM,EAAa,EAAK,KACtB,EAAG,QAAQ,CACX,2BAA2B,KAAK,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,MAAM,EAAE,CAAC,SAC9E,CACK,EAAY,EAAU,MAAO,CAAC,OAAQ,EAAY,KAAM,EAAa,GAAG,EAAe,CAAE,CAC7F,IAAK,CAAE,GAAG,QAAQ,IAAK,iBAAkB,IAAK,CAC9C,SAAU,OACX,CAAC,CACF,GAAI,EAAU,SAAW,EACvB,MAAU,MACR,2CAA2C,EAAU,OAAO,MAAM,EAAI,eACvE,CAGH,IAAM,EAAkB,EAAG,aAAa,EAAW,CACnD,GAAI,EAAgB,WAAa,EAE/B,MADA,EAAG,WAAW,EAAW,CACf,MACR,6BAA6B,EAAY,EAA4B,CAAC,sCACtD,EAAY,EAAgB,WAAW,CAAC,8DACM,EAAY,EAA8B,CAAC,GAC1G,CAGH,IAAM,EAAoB,EAAW,EAAgB,CACrD,GAAI,EAAkB,WAAa,EAEjC,MADA,EAAG,WAAW,EAAW,CACf,MACR,6BAA6B,EAAY,EAA8B,CAAC,wCACxD,EAAY,EAAkB,WAAW,CAAC,iBAC3D,CAGH,OAAO,ECvJT,SAAgB,EAA0B,EAAqD,CAC7F,IAAM,EAAc,EAAG,aAAa,EAAQ,WAAW,CACjD,EAAO,IAAI,SAajB,OAZA,EAAK,OACH,SACA,IAAI,KAAK,CAAC,EAAY,CAAE,CAAE,KAAM,mBAAoB,CAAC,CACrD,EAAK,SAAS,EAAQ,WAAW,CAClC,CACD,EAAK,OAAO,UAAW,EAAQ,QAAQ,CACnC,EAAQ,aACV,EAAK,OAAO,cAAe,EAAQ,YAAY,CAE7C,EAAQ,YACV,EAAK,OAAO,aAAc,EAAQ,WAAW,CAExC,EC9BT,SAAS,EAA6B,EAAoB,CACxD,OAAO,EAAK,aAAa,CAAC,MAAM,EAAG,GAAG,CAAC,QAAQ,QAAS,IAAI,CAU9D,SAAgB,EAA0B,EAAoB,EAAY,IAAI,KAAgB,CAC5F,MAAO,GAAG,EAAW,GAAG,EAA6B,EAAI,GCK3D,SAAS,EAA2B,EAAkD,CAOpF,OANI,EAAM,WAAa,EAAe,YAC7B,GAEL,EAAM,WAAa,EAAe,QAC7B,GAEF,EAAM,MAAM,KAChB,GACC,IAAA,eACA,EAAK,WAAW,eAAqC,CACxD,CAaH,SAAgB,EACd,EACA,EACoB,CACpB,IAAM,EAAmB,EAA2B,EAAM,CACpD,EAAoB,IAAe,EAEzC,GAAI,GAAoB,CAAC,EACvB,MACE,oFACI,EAAW,yDACX,EAA+B,sDACX,EAA+B,gCAI3D,GAAI,CAAC,GAAoB,EACvB,MACE,wBAAwB,EAA+B,kMCV7D,eAAsB,EAEpB,CACE,qBAAsB,EACtB,OACA,gBAAiB,EACjB,UACA,cACA,OACA,MACA,QAAQ,IAEV,EACe,CACf,EAAoB,KAAK,QAAQ,CACjC,EAAwB,EAAM,CAE9B,IAAM,EAAgB,EAAoB,KAAK,OAAQ,EAAK,CACtD,EAAc,EAA8B,KAAK,QAAQ,KAAK,CAAE,EAAU,CAC1E,EAAe,GAAW,EAA0B,EAAW,CAC/D,EAAS,EAAwB,EAAc,EAAK,CACpD,EAAc,EAClB,CAAE,OAAM,cAAe,GAAO,CAC9B,KAAK,QAAQ,MAAM,MACnB,KAAK,QAAQ,OAAO,MACrB,CAEG,EACJ,GAAI,CACF,EAAc,KAAK,EAAO,MAAM,+BAA+B,EAAY,KAAK,CAAC,CACjF,EAAa,MAAM,EAAsB,EAAY,CAErD,GAAI,CACF,IAAM,EAAe,EAAK,EAAa,EAAyB,CAE1D,EAAiB,EAAkC,EADxC,EAA0B,KAAK,GAAG,aAAa,EAAc,OAAO,CACR,CAAC,CAC1E,GACF,EAAc,KAAK,EAAO,OAAO,EAAe,CAAC,MAE7C,EAIR,IAAM,EAAmB,MAAM,EAAsB,EAAQ,EAAW,CAEpE,EAEJ,GAAI,EAAkB,CACpB,EAAc,KAAK,EAAO,MAAM,qCAAqC,EAAW,MAAM,CAAC,CACvF,IAAM,EAAO,EAA0B,CACrC,aACA,QAAS,EACT,cACD,CAAC,CACF,EAAe,MAAM,EACnB,EACG,KAAK,mCAAmC,EAAiB,WAAY,CAAE,KAAM,EAAM,CAAC,CACpF,MAAyC,CAC7C,KACI,CACL,GAAI,CAAC,GAAe,CAAC,EAAK,CACxB,KAAK,OAAO,MACV,EAAO,IACL,qFACD,CACF,CACD,KAAK,QAAQ,KAAK,EAAE,CACpB,OAGF,GAAI,CAAC,IACH,EAAc,KACZ,EAAO,OAAO,2BAA2B,EAAW,iCAAiC,CACtF,CAIG,CAAC,MAHsB,EAAuB,CAChD,QAAS,2BAA2B,EAAW,6DAChD,CAAC,EACiB,CACjB,EAAc,KAAK,EAAO,OAAO,qBAAqB,CAAC,CACvD,OAIJ,EAAc,KACZ,EAAO,MAAM,oBAAoB,EAAW,kCAAkC,CAC/E,CACD,IAAM,EAAa,EAA0B,CAC3C,aACA,QAAS,EACT,cACA,aACD,CAAC,CACF,EAAe,MAAM,EACnB,EACG,KAAK,kCAAmC,CACvC,KAAM,EACP,CAAC,CACD,MAAkC,CACtC,CAGH,EAAY,KAAK,QAAQ,OAAQ,CAC/B,OACA,KAAM,EACN,gBAAmB,EAAiC,EAAa,QAAQ,CAC1E,CAAC,CAEF,EAAc,KAAK,EAAO,MAAM,+CAA+C,CAAC,CAEhF,IAAM,EAAkB,EAA0C,CAAC,SAAU,WAAW,CAAE,CACxF,QAAS,EAAa,QAAQ,QAC9B,qBAAsB,EACvB,CAAC,CACF,EAAc,KACZ,EAAO,OACL,+EAA+E,IAChF,CACF,QACO,CACJ,GAAc,KAAK,GAAG,WAAW,EAAW,EAC9C,KAAK,GAAG,WAAW,EAAW"}

package/dist/impl-DNOgBcsu.mjs

@@ -1,3 +0,0 @@
-import{c as e,i as t,n,t as r}from"./policy-project-discovery-DTSl0Gfl.mjs";import{c as i,i as a,l as o,o as s,s as c}from"./policy-runtime-6jmkXlBk.mjs";import{n as l}from"./policy-bundle-manifest-DbbTXe0u.mjs";import{n as u}from"./inquirer-jzIQWAvq.mjs";import{t as d}from"./done-input-validation-LiTaCEzF.mjs";import{r as f}from"./prompts-BhXfYD6g.mjs";import{t as p}from"./run-captured-process-BjaSDWXG.mjs";import m from"node:path";import h from"colors";const g=[`manifest`,`opa-version`,`regal-version`,`format`,`opa-check`,`regal-lint`,`opa-test`],_={manifest:`Manifest and package roots`,"opa-version":`OPA 1.x`,"regal-version":`Regal`,format:`OPA formatting`,"opa-check":`OPA strict check`,"regal-lint":`Regal lint`,"opa-test":`OPA tests`};function v(e,t){return[e.stdout.trim(),e.stderr.trim()].filter(Boolean).join(`
-`)||t}function y(e,t){return[...new Set(e.split(/\r?\n/gu).map(e=>e.trim()).filter(Boolean).map(e=>m.isAbsolute(e)?m.relative(t,e).split(m.sep).join(`/`):e.split(m.sep).join(`/`)))].sort()}function b(e,t,n=t){return e.fs.readdirSync(n,{withFileTypes:!0}).sort((e,t)=>e.name.localeCompare(t.name)).flatMap(r=>{let i=m.join(n,r.name);return r.isDirectory()?b(e,t,i):!r.isFile()||!r.name.endsWith(`.rego`)?[]:[{path:m.relative(t,i).split(m.sep).join(`/`),contents:e.fs.readFileSync(i,`utf8`)}]})}function x(e,t){let n=t;for(;;){let t=m.join(n,`.regal`,`config.yaml`);if(e.fs.existsSync(t))return t;let r=m.join(n,`.regal.yaml`);if(e.fs.existsSync(r))return r;let i=m.dirname(n);if(i===n)return;n=i}}function S(e,t,n){n?e.logger.info(`${h.bold(n)}\n`):e.logger.info(`${h.bold(`Policy verification`)}\n`),t.checks.forEach(({name:n,status:r})=>{let i=r===`passed`?`PASS`:r===`failed`?`FAIL`:`SKIP`,a=r===`passed`?h.green(i):r===`failed`?h.red(i):h.yellow(i),o=n===`opa-version`&&t.tools.opa?` (${t.tools.opa})`:n===`regal-version`&&t.tools.regal?` (${t.tools.regal})`:``;e.logger.info(`${a} ${_[n]}${o}`)}),t.diagnostics.length>0&&e.logger.error(``),t.diagnostics.forEach(t=>{let n=t.path?`${t.path}: `:``;e.logger.error(h.red(`error [${t.code}]: ${n}${t.message}`))}),t.status===`passed`?(e.logger.info(``),e.logger.info(h.green(`Policy verification passed.`))):(e.logger.error(``),e.logger.error(h.red(`Policy verification failed.`)))}async function C({fix:t,noInteractive:n,json:r},d,p){let _=g.map(e=>({name:e,status:`skipped`})),S=[],C={version:1,status:`passed`,directory:d,fix:t,tools:{opa:null,regal:null},checks:_,unformattedFiles:[],fixedFiles:[],diagnostics:S},w=(e,t)=>{_.find(t=>t.name===e).status=t},T=(e,t,n)=>{S.push({code:e,severity:`error`,message:t,...n?{path:n}:{}})};if(!this.fs.existsSync(d)||!this.fs.statSync(d).isDirectory())return w(`manifest`,`failed`),T(`project.directory`,`Policy directory does not exist or is not a directory: ${d}`,m.relative(this.process.cwd(),d)),C.status=`failed`,C;let E=m.join(d,e);try{l(this.fs.existsSync(E)?this.fs.readFileSync(E,`utf8`):void 0,b(this,d)),w(`manifest`,`passed`)}catch(e){w(`manifest`,`failed`),T(`manifest.invalid`,e instanceof Error?e.message:String(e),m.relative(this.process.cwd(),E))}let D=await p(`opa`,[`version`],{cwd:d},this);if(D.error?.code===`ENOENT`)w(`opa-version`,`failed`),T(`opa.missing`,a);else{let e=`${D.stdout}\n${D.stderr}`,t=i(e);D.code!==0||t?(w(`opa-version`,`failed`),T(`opa.version`,t??v(D,`Unable to determine the installed OPA version.`))):(C.tools.opa=c(e).version,w(`opa-version`,`passed`))}let O=await p(`regal`,[`version`],{cwd:d},this);if(O.error?.code===`ENOENT`)w(`regal-version`,`failed`),T(`regal.missing`,s);else{let e=`${O.stdout}\n${O.stderr}`,t=o(e);O.code!==0||t?(w(`regal-version`,`failed`),T(`regal.version`,t??v(O,`Unable to determine the installed Regal version.`))):(C.tools.regal=c(e).version,w(`regal-version`,`passed`))}if(C.tools.opa){let e=await p(`opa`,[`fmt`,`--list`,d],{cwd:d},this);if(e.code!==0)w(`format`,`failed`),T(`opa.format`,v(e,`opa fmt --list failed with exit code ${e.code}`));else if(C.unformattedFiles=y(e.stdout,d),C.unformattedFiles.length===0)w(`format`,`passed`);else{let e=t,i=f({json:r,noInteractive:n},this.process.stdin.isTTY,this.process.stderr.isTTY);if(!r&&!t){this.logger.error(h.red(`Policy files are not formatted:`)),C.unformattedFiles.forEach(e=>{this.logger.error(h.red(`  - ${e}`))});let e=await p(`opa`,[`fmt`,`--diff`,d],{cwd:d},this),t=e.stdout.trim()||e.stderr.trim();t&&(this.logger.error(``),this.logger.error(t))}if(!t&&i)try{e=await u({message:`Format the unformatted policy files listed above?`})}catch(e){let t=e instanceof Error?e.message:String(e);throw/force closed|prompt.*cancel|user.*close|SIGINT/iu.test(t)&&this.process.exit(130),e}if(e){let e=await p(`opa`,[`fmt`,`--write`,d],{cwd:d},this);e.code===0?(C.fixedFiles=[...C.unformattedFiles],w(`format`,`passed`)):(w(`format`,`failed`),T(`opa.format-fix`,v(e,`opa fmt --write failed with exit code ${e.code}`)))}else w(`format`,`failed`),T(`opa.format-required`,"Policy files are not formatted. Re-run `transcend policy lint --fix` to repair them.")}let i=await p(`opa`,[`check`,`--strict`,`--ignore`,`*_test.rego`,d],{cwd:d},this);i.code===0?w(`opa-check`,`passed`):(w(`opa-check`,`failed`),T(`opa.check`,v(i,`opa check failed with exit code ${i.code}`)))}if(C.tools.regal){let e=x(this,d),t=await p(`regal`,[`lint`,`--fail-level`,`warning`,...e?[`--config-file`,e]:[],d],{cwd:d},this);t.code===0?w(`regal-lint`,`passed`):(w(`regal-lint`,`failed`),T(`regal.lint`,v(t,`regal lint failed with exit code ${t.code}`)))}if(C.tools.opa){let e=await p(`opa`,[`test`,`--fail-on-empty`,`-b`,d],{cwd:d},this);e.code===0?w(`opa-test`,`passed`):(w(`opa-test`,`failed`),T(`opa.test`,v(e,`opa test --fail-on-empty -b failed with exit code ${e.code}`)))}return C.status=_.some(({status:e})=>e===`failed`)?`failed`:`passed`,C}async function w(e,i=r,a=p){d(this.process);let{fix:o=!1,noInteractive:s=!1,json:c=!1}=e,l=t(this.process.cwd(),i);if(!this.fs.existsSync(l)||!this.fs.statSync(l).isDirectory()){let e={version:1,status:`failed`,directory:l,fix:o,tools:{opa:null,regal:null},checks:g.map(e=>({name:e,status:e===`manifest`?`failed`:`skipped`})),unformattedFiles:[],fixedFiles:[],diagnostics:[{code:`project.directory`,severity:`error`,message:`Policy directory does not exist or is not a directory: ${l}`,path:m.relative(this.process.cwd(),l)}]};c?this.process.stdout.write(`${JSON.stringify(e)}\n`):S(this,e),this.process.exitCode=1;return}let u=n(this,l);if(u.length===0){let e={version:1,status:`failed`,directory:l,fix:o,tools:{opa:null,regal:null},checks:g.map(e=>({name:e,status:e===`manifest`?`failed`:`skipped`})),unformattedFiles:[],fixedFiles:[],diagnostics:[{code:`project.bundles`,severity:`error`,message:"No publishable policy bundles found. Add one with `transcend policy new`, or pass a directory that contains a `.manifest`.",path:m.relative(this.process.cwd(),l)||`.`}]};c?this.process.stdout.write(`${JSON.stringify(e)}\n`):S(this,e),this.process.exitCode=1;return}let f=[];for(let e of u)f.push(await C.call(this,{fix:o,noInteractive:s,json:c},e,a));let h=f.some(e=>e.status===`failed`);if(c)if(f.length===1)this.process.stdout.write(`${JSON.stringify(f[0])}\n`);else{let e={version:2,status:h?`failed`:`passed`,directory:l,fix:o,results:f};this.process.stdout.write(`${JSON.stringify(e)}\n`)}else f.length===1?S(this,f[0]):f.forEach((e,t)=>{t>0&&this.logger.info(``);let n=m.relative(this.process.cwd(),e.directory)||e.directory;S(this,e,`Policy verification — ${n}`)});h&&(this.process.exitCode=1)}export{w as lint};
-//# sourceMappingURL=impl-DNOgBcsu.mjs.map

package/dist/impl-DNOgBcsu.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"impl-DNOgBcsu.mjs","names":[],"sources":["../src/lib/policy/policy-lint-model.ts","../src/lib/policy/policy-lint-output.ts","../src/commands/policy/lint/impl.ts"],"sourcesContent":["/** Stable policy lint result schema version. */\nexport const POLICY_LINT_RESULT_VERSION = 1;\n\n/** Stable multi-bundle lint result schema version. */\nexport const POLICY_LINT_MULTI_RESULT_VERSION = 2;\n\n/** Status of the full gate or an individual verification. */\nexport type PolicyLintStatus = 'passed' | 'failed' | 'skipped';\n\n/** One named policy verification. */\nexport interface PolicyLintCheck {\n  /** Stable verification name. */\n  name:\n    | 'manifest'\n    | 'opa-version'\n    | 'regal-version'\n    | 'format'\n    | 'opa-check'\n    | 'regal-lint'\n    | 'opa-test';\n  /** Verification outcome. */\n  status: PolicyLintStatus;\n}\n\n/** Stable verification execution order. */\nexport const POLICY_LINT_CHECK_NAMES: PolicyLintCheck['name'][] = [\n  'manifest',\n  'opa-version',\n  'regal-version',\n  'format',\n  'opa-check',\n  'regal-lint',\n  'opa-test',\n];\n\n/** User-facing verification labels. */\nexport const POLICY_LINT_CHECK_LABELS: Readonly<Record<PolicyLintCheck['name'], string>> = {\n  manifest: 'Manifest and package roots',\n  'opa-version': 'OPA 1.x',\n  'regal-version': 'Regal',\n  format: 'OPA formatting',\n  'opa-check': 'OPA strict check',\n  'regal-lint': 'Regal lint',\n  'opa-test': 'OPA tests',\n};\n\n/** One machine-readable policy lint diagnostic. */\nexport interface PolicyLintDiagnostic {\n  /** Stable diagnostic identifier. */\n  code: string;\n  /** Diagnostic severity. */\n  severity: 'error';\n  /** Human-readable detail, including captured tool output when available. */\n  message: string;\n  /** Optional path relative to the invocation directory. */\n  path?: string;\n}\n\n/** Detected local policy tool versions. */\nexport interface PolicyLintTools {\n  /** Detected OPA version, or null when missing or unsupported. */\n  opa: string | null;\n  /** Detected Regal version, or null when missing or unsupported. */\n  regal: string | null;\n}\n\n/** Stable result emitted by `transcend policy lint --json` for one bundle. */\nexport interface PolicyLintResult {\n  /** Result schema version. */\n  version: typeof POLICY_LINT_RESULT_VERSION;\n  /** Overall verification outcome. */\n  status: Exclude<PolicyLintStatus, 'skipped'>;\n  /** Absolute policy bundle directory. */\n  directory: string;\n  /** Whether formatting repair was explicitly requested. */\n  fix: boolean;\n  /** Detected supported tool versions. */\n  tools: PolicyLintTools;\n  /** Verification outcomes in stable execution order. */\n  checks: PolicyLintCheck[];\n  /** Files found to need OPA formatting, relative to the policy directory. */\n  unformattedFiles: string[];\n  /** Files repaired with OPA formatting, relative to the policy directory. */\n  fixedFiles: string[];\n  /** Ordered verification diagnostics. */\n  diagnostics: PolicyLintDiagnostic[];\n}\n\n/**\n * Stable result when `transcend policy lint --json` verifies multiple bundles.\n *\n * Emitted only when the selected path is a workspace with more than one\n * publishable `*-bundle/` directory.\n */\nexport interface PolicyLintMultiResult {\n  /** Result schema version. */\n  version: typeof POLICY_LINT_MULTI_RESULT_VERSION;\n  /** Overall verification outcome across all bundles. */\n  status: Exclude<PolicyLintStatus, 'skipped'>;\n  /** Absolute policy workspace directory that was searched. */\n  directory: string;\n  /** Whether formatting repair was explicitly requested. */\n  fix: boolean;\n  /** Per-bundle results in discovery order. */\n  results: PolicyLintResult[];\n}\n","import path from 'node:path';\n\nimport type { CapturedProcessResult } from '../cli/run-captured-process.js';\n\n/**\n * Use captured tool output as a concise diagnostic.\n *\n * @param result - Captured process result\n * @param fallback - Message used when the tool emitted no output\n * @returns Diagnostic message\n */\nexport function getPolicyProcessFailureMessage(\n  result: CapturedProcessResult,\n  fallback: string,\n): string {\n  const output = [result.stdout.trim(), result.stderr.trim()].filter(Boolean).join('\\n');\n  return output || fallback;\n}\n\n/**\n * Convert absolute OPA formatter paths to stable project-relative paths.\n *\n * @param stdout - `opa fmt --list` output\n * @param projectDirectory - Absolute policy directory\n * @returns Sorted unique paths\n */\nexport function parseUnformattedPolicyFiles(stdout: string, projectDirectory: string): string[] {\n  return [\n    ...new Set(\n      stdout\n        .split(/\\r?\\n/gu)\n        .map((file) => file.trim())\n        .filter(Boolean)\n        .map((file) =>\n          path.isAbsolute(file)\n            ? path.relative(projectDirectory, file).split(path.sep).join('/')\n            : file.split(path.sep).join('/'),\n        ),\n    ),\n  ].sort();\n}\n","import path from 'node:path';\n\nimport colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport {\n  runCapturedProcess,\n  type CapturedProcessRunner,\n} from '../../../lib/cli/run-captured-process.js';\nimport { inquirerConfirmBoolean } from '../../../lib/helpers/inquirer.js';\nimport {\n  type PolicyBundleRegoFile,\n  validatePolicyBundleContents,\n} from '../../../lib/policy/policy-bundle-manifest.js';\nimport {\n  type PolicyLintCheck,\n  type PolicyLintDiagnostic,\n  type PolicyLintMultiResult,\n  type PolicyLintResult,\n  POLICY_LINT_CHECK_LABELS,\n  POLICY_LINT_CHECK_NAMES,\n  POLICY_LINT_MULTI_RESULT_VERSION,\n  POLICY_LINT_RESULT_VERSION,\n} from '../../../lib/policy/policy-lint-model.js';\nimport {\n  getPolicyProcessFailureMessage,\n  parseUnformattedPolicyFiles,\n} from '../../../lib/policy/policy-lint-output.js';\nimport {\n  DEFAULT_POLICY_PROJECT_DIRECTORY,\n  discoverPolicyBundleDirectories,\n  resolvePolicyProjectDirectory,\n} from '../../../lib/policy/policy-project-discovery.js';\nimport {\n  OPA_MISSING_MESSAGE,\n  parsePolicyToolVersion,\n  REGAL_MISSING_MESSAGE,\n  unsupportedOpaVersionMessage,\n  unsupportedRegalVersionMessage,\n} from '../../../lib/policy/policy-runtime.js';\nimport { POLICY_MANIFEST_FILENAME } from '../../../lib/policy/policy-scaffold-templates.js';\nimport { isInteractivePromptInvocation } from '../../../lib/scaffolding/prompts.js';\n\n/** CLI flags for `transcend policy lint`. */\nexport interface LintCommandFlags {\n  /** Apply OPA formatting. */\n  fix: boolean;\n  /** Disable the optional formatting confirmation. */\n  noInteractive: boolean;\n  /** Emit one stable JSON result on stdout. */\n  json: boolean;\n}\n\n/**\n * Collect Rego source snapshots without following symlinks.\n *\n * @param context - CLI context\n * @param projectDirectory - Absolute policy directory\n * @param currentDirectory - Current recursive directory\n * @returns Deterministically ordered Rego snapshots\n */\nfunction collectRegoFiles(\n  context: LocalContext,\n  projectDirectory: string,\n  currentDirectory: string = projectDirectory,\n): PolicyBundleRegoFile[] {\n  return context.fs\n    .readdirSync(currentDirectory, { withFileTypes: true })\n    .sort((left, right) => left.name.localeCompare(right.name))\n    .flatMap((entry) => {\n      const absolutePath = path.join(currentDirectory, entry.name);\n      if (entry.isDirectory()) {\n        return collectRegoFiles(context, projectDirectory, absolutePath);\n      }\n      if (!entry.isFile() || !entry.name.endsWith('.rego')) {\n        return [];\n      }\n      return [\n        {\n          path: path.relative(projectDirectory, absolutePath).split(path.sep).join('/'),\n          contents: context.fs.readFileSync(absolutePath, 'utf8'),\n        },\n      ];\n    });\n}\n\n/**\n * Resolve a Regal config file for a bundle, walking up to the workspace.\n *\n * @param context - CLI context\n * @param bundleDirectory - Absolute bundle directory\n * @returns Absolute config path, or undefined when none is found\n */\nfunction resolveRegalConfigFile(\n  context: LocalContext,\n  bundleDirectory: string,\n): string | undefined {\n  let current = bundleDirectory;\n  for (;;) {\n    const nestedRegalConfig = path.join(current, '.regal', 'config.yaml');\n    if (context.fs.existsSync(nestedRegalConfig)) {\n      return nestedRegalConfig;\n    }\n    const rootRegalConfig = path.join(current, '.regal.yaml');\n    if (context.fs.existsSync(rootRegalConfig)) {\n      return rootRegalConfig;\n    }\n    const parent = path.dirname(current);\n    if (parent === current) {\n      return undefined;\n    }\n    current = parent;\n  }\n}\n\n/**\n * Render the terminal summary for a policy verification result.\n *\n * @param context - CLI context\n * @param result - Completed verification result\n * @param heading - Optional section heading when linting multiple bundles\n */\nfunction renderResult(context: LocalContext, result: PolicyLintResult, heading?: string): void {\n  if (heading) {\n    context.logger.info(`${colors.bold(heading)}\\n`);\n  } else {\n    context.logger.info(`${colors.bold('Policy verification')}\\n`);\n  }\n  result.checks.forEach(({ name, status }) => {\n    const label = status === 'passed' ? 'PASS' : status === 'failed' ? 'FAIL' : 'SKIP';\n    const styledLabel =\n      status === 'passed'\n        ? colors.green(label)\n        : status === 'failed'\n          ? colors.red(label)\n          : colors.yellow(label);\n    const version =\n      name === 'opa-version' && result.tools.opa\n        ? ` (${result.tools.opa})`\n        : name === 'regal-version' && result.tools.regal\n          ? ` (${result.tools.regal})`\n          : '';\n    context.logger.info(`${styledLabel} ${POLICY_LINT_CHECK_LABELS[name]}${version}`);\n  });\n  if (result.diagnostics.length > 0) {\n    context.logger.error('');\n  }\n  result.diagnostics.forEach((diagnostic) => {\n    const location = diagnostic.path ? `${diagnostic.path}: ` : '';\n    context.logger.error(\n      colors.red(`error [${diagnostic.code}]: ${location}${diagnostic.message}`),\n    );\n  });\n  if (result.status === 'passed') {\n    context.logger.info('');\n    context.logger.info(colors.green('Policy verification passed.'));\n  } else {\n    context.logger.error('');\n    context.logger.error(colors.red('Policy verification failed.'));\n  }\n}\n\n/**\n * Verify one publishable policy bundle directory.\n *\n * @param context - CLI context\n * @param flags - Command flags\n * @param resolvedDir - Absolute bundle directory\n * @param runner - Captured subprocess runner\n * @returns Completed verification result\n */\nasync function lintBundle(\n  this: LocalContext,\n  { fix, noInteractive, json }: LintCommandFlags,\n  resolvedDir: string,\n  runner: CapturedProcessRunner,\n): Promise<PolicyLintResult> {\n  const checks: PolicyLintCheck[] = POLICY_LINT_CHECK_NAMES.map((name) => ({\n    name,\n    status: 'skipped',\n  }));\n  const diagnostics: PolicyLintDiagnostic[] = [];\n  const result: PolicyLintResult = {\n    version: POLICY_LINT_RESULT_VERSION,\n    status: 'passed',\n    directory: resolvedDir,\n    fix,\n    tools: { opa: null, regal: null },\n    checks,\n    unformattedFiles: [],\n    fixedFiles: [],\n    diagnostics,\n  };\n  const setStatus = (name: PolicyLintCheck['name'], status: PolicyLintCheck['status']): void => {\n    checks.find((check) => check.name === name)!.status = status;\n  };\n  const addError = (code: string, message: string, diagnosticPath?: string): void => {\n    diagnostics.push({\n      code,\n      severity: 'error',\n      message,\n      ...(diagnosticPath ? { path: diagnosticPath } : {}),\n    });\n  };\n\n  if (!this.fs.existsSync(resolvedDir) || !this.fs.statSync(resolvedDir).isDirectory()) {\n    setStatus('manifest', 'failed');\n    addError(\n      'project.directory',\n      `Policy directory does not exist or is not a directory: ${resolvedDir}`,\n      path.relative(this.process.cwd(), resolvedDir),\n    );\n    result.status = 'failed';\n    return result;\n  }\n\n  const manifestPath = path.join(resolvedDir, POLICY_MANIFEST_FILENAME);\n  try {\n    validatePolicyBundleContents(\n      this.fs.existsSync(manifestPath) ? this.fs.readFileSync(manifestPath, 'utf8') : undefined,\n      collectRegoFiles(this, resolvedDir),\n    );\n    setStatus('manifest', 'passed');\n  } catch (error) {\n    setStatus('manifest', 'failed');\n    addError(\n      'manifest.invalid',\n      error instanceof Error ? error.message : String(error),\n      path.relative(this.process.cwd(), manifestPath),\n    );\n  }\n\n  const opaVersionResult = await runner('opa', ['version'], { cwd: resolvedDir }, this);\n  if (opaVersionResult.error?.code === 'ENOENT') {\n    setStatus('opa-version', 'failed');\n    addError('opa.missing', OPA_MISSING_MESSAGE);\n  } else {\n    const opaVersionOutput = `${opaVersionResult.stdout}\\n${opaVersionResult.stderr}`;\n    const unsupportedOpa = unsupportedOpaVersionMessage(opaVersionOutput);\n    if (opaVersionResult.code !== 0 || unsupportedOpa) {\n      setStatus('opa-version', 'failed');\n      addError(\n        'opa.version',\n        unsupportedOpa ??\n          getPolicyProcessFailureMessage(\n            opaVersionResult,\n            'Unable to determine the installed OPA version.',\n          ),\n      );\n    } else {\n      result.tools.opa = parsePolicyToolVersion(opaVersionOutput)!.version;\n      setStatus('opa-version', 'passed');\n    }\n  }\n\n  const regalVersionResult = await runner('regal', ['version'], { cwd: resolvedDir }, this);\n  if (regalVersionResult.error?.code === 'ENOENT') {\n    setStatus('regal-version', 'failed');\n    addError('regal.missing', REGAL_MISSING_MESSAGE);\n  } else {\n    const regalVersionOutput = `${regalVersionResult.stdout}\\n${regalVersionResult.stderr}`;\n    const unsupportedRegal = unsupportedRegalVersionMessage(regalVersionOutput);\n    if (regalVersionResult.code !== 0 || unsupportedRegal) {\n      setStatus('regal-version', 'failed');\n      addError(\n        'regal.version',\n        unsupportedRegal ??\n          getPolicyProcessFailureMessage(\n            regalVersionResult,\n            'Unable to determine the installed Regal version.',\n          ),\n      );\n    } else {\n      result.tools.regal = parsePolicyToolVersion(regalVersionOutput)!.version;\n      setStatus('regal-version', 'passed');\n    }\n  }\n\n  if (result.tools.opa) {\n    const formatResult = await runner(\n      'opa',\n      ['fmt', '--list', resolvedDir],\n      { cwd: resolvedDir },\n      this,\n    );\n    if (formatResult.code !== 0) {\n      setStatus('format', 'failed');\n      addError(\n        'opa.format',\n        getPolicyProcessFailureMessage(\n          formatResult,\n          `opa fmt --list failed with exit code ${formatResult.code}`,\n        ),\n      );\n    } else {\n      result.unformattedFiles = parseUnformattedPolicyFiles(formatResult.stdout, resolvedDir);\n      if (result.unformattedFiles.length === 0) {\n        setStatus('format', 'passed');\n      } else {\n        let shouldFormat = fix;\n        const interactive = isInteractivePromptInvocation(\n          { json, noInteractive },\n          this.process.stdin.isTTY,\n          this.process.stderr.isTTY,\n        );\n        if (!json && !fix) {\n          this.logger.error(colors.red('Policy files are not formatted:'));\n          result.unformattedFiles.forEach((file) => {\n            this.logger.error(colors.red(`  - ${file}`));\n          });\n          const diffResult = await runner(\n            'opa',\n            ['fmt', '--diff', resolvedDir],\n            { cwd: resolvedDir },\n            this,\n          );\n          const diff = diffResult.stdout.trim() || diffResult.stderr.trim();\n          if (diff) {\n            this.logger.error('');\n            this.logger.error(diff);\n          }\n        }\n        if (!fix && interactive) {\n          try {\n            shouldFormat = await inquirerConfirmBoolean({\n              message: 'Format the unformatted policy files listed above?',\n            });\n          } catch (error) {\n            const message = error instanceof Error ? error.message : String(error);\n            if (/force closed|prompt.*cancel|user.*close|SIGINT/iu.test(message)) {\n              this.process.exit(130);\n            }\n            throw error;\n          }\n        }\n        if (shouldFormat) {\n          const writeResult = await runner(\n            'opa',\n            ['fmt', '--write', resolvedDir],\n            { cwd: resolvedDir },\n            this,\n          );\n          if (writeResult.code === 0) {\n            result.fixedFiles = [...result.unformattedFiles];\n            setStatus('format', 'passed');\n          } else {\n            setStatus('format', 'failed');\n            addError(\n              'opa.format-fix',\n              getPolicyProcessFailureMessage(\n                writeResult,\n                `opa fmt --write failed with exit code ${writeResult.code}`,\n              ),\n            );\n          }\n        } else {\n          setStatus('format', 'failed');\n          addError(\n            'opa.format-required',\n            'Policy files are not formatted. Re-run `transcend policy lint --fix` to repair them.',\n          );\n        }\n      }\n    }\n\n    const checkResult = await runner(\n      'opa',\n      ['check', '--strict', '--ignore', '*_test.rego', resolvedDir],\n      { cwd: resolvedDir },\n      this,\n    );\n    if (checkResult.code === 0) {\n      setStatus('opa-check', 'passed');\n    } else {\n      setStatus('opa-check', 'failed');\n      addError(\n        'opa.check',\n        getPolicyProcessFailureMessage(\n          checkResult,\n          `opa check failed with exit code ${checkResult.code}`,\n        ),\n      );\n    }\n  }\n\n  if (result.tools.regal) {\n    const regalConfig = resolveRegalConfigFile(this, resolvedDir);\n    const regalResult = await runner(\n      'regal',\n      [\n        'lint',\n        '--fail-level',\n        'warning',\n        ...(regalConfig ? ['--config-file', regalConfig] : []),\n        resolvedDir,\n      ],\n      { cwd: resolvedDir },\n      this,\n    );\n    if (regalResult.code === 0) {\n      setStatus('regal-lint', 'passed');\n    } else {\n      setStatus('regal-lint', 'failed');\n      addError(\n        'regal.lint',\n        getPolicyProcessFailureMessage(\n          regalResult,\n          `regal lint failed with exit code ${regalResult.code}`,\n        ),\n      );\n    }\n  }\n\n  if (result.tools.opa) {\n    const testResult = await runner(\n      'opa',\n      ['test', '--fail-on-empty', '-b', resolvedDir],\n      { cwd: resolvedDir },\n      this,\n    );\n    if (testResult.code === 0) {\n      setStatus('opa-test', 'passed');\n    } else {\n      setStatus('opa-test', 'failed');\n      addError(\n        'opa.test',\n        getPolicyProcessFailureMessage(\n          testResult,\n          `opa test --fail-on-empty -b failed with exit code ${testResult.code}`,\n        ),\n      );\n    }\n  }\n\n  result.status = checks.some(({ status }) => status === 'failed') ? 'failed' : 'passed';\n  return result;\n}\n\n/**\n * Verify local policy bundles with the shared upload contract, OPA, and Regal.\n *\n * With no directory (or the default workspace path), discovers every immediate\n * child that contains a `.manifest` and verifies each. Pass one bundle path to\n * verify a single publishable unit.\n *\n * @param this - CLI context\n * @param flags - Command flags\n * @param directory - Policy workspace or bundle directory\n * @param runner - Captured subprocess runner\n */\nexport async function lint(\n  this: LocalContext,\n  flags: LintCommandFlags,\n  directory: string = DEFAULT_POLICY_PROJECT_DIRECTORY,\n  runner: CapturedProcessRunner = runCapturedProcess,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  const { fix = false, noInteractive = false, json = false } = flags;\n  const resolvedDir = resolvePolicyProjectDirectory(this.process.cwd(), directory);\n\n  if (!this.fs.existsSync(resolvedDir) || !this.fs.statSync(resolvedDir).isDirectory()) {\n    const missing: PolicyLintResult = {\n      version: POLICY_LINT_RESULT_VERSION,\n      status: 'failed',\n      directory: resolvedDir,\n      fix,\n      tools: { opa: null, regal: null },\n      checks: POLICY_LINT_CHECK_NAMES.map((name) => ({\n        name,\n        status: name === 'manifest' ? 'failed' : 'skipped',\n      })),\n      unformattedFiles: [],\n      fixedFiles: [],\n      diagnostics: [\n        {\n          code: 'project.directory',\n          severity: 'error',\n          message: `Policy directory does not exist or is not a directory: ${resolvedDir}`,\n          path: path.relative(this.process.cwd(), resolvedDir),\n        },\n      ],\n    };\n    if (json) {\n      this.process.stdout.write(`${JSON.stringify(missing)}\\n`);\n    } else {\n      renderResult(this, missing);\n    }\n    this.process.exitCode = 1;\n    return;\n  }\n\n  const bundleDirectories = discoverPolicyBundleDirectories(this, resolvedDir);\n  if (bundleDirectories.length === 0) {\n    const empty: PolicyLintResult = {\n      version: POLICY_LINT_RESULT_VERSION,\n      status: 'failed',\n      directory: resolvedDir,\n      fix,\n      tools: { opa: null, regal: null },\n      checks: POLICY_LINT_CHECK_NAMES.map((name) => ({\n        name,\n        status: name === 'manifest' ? 'failed' : 'skipped',\n      })),\n      unformattedFiles: [],\n      fixedFiles: [],\n      diagnostics: [\n        {\n          code: 'project.bundles',\n          severity: 'error',\n          message:\n            'No publishable policy bundles found. Add one with `transcend policy new`, ' +\n            'or pass a directory that contains a `.manifest`.',\n          path: path.relative(this.process.cwd(), resolvedDir) || '.',\n        },\n      ],\n    };\n    if (json) {\n      this.process.stdout.write(`${JSON.stringify(empty)}\\n`);\n    } else {\n      renderResult(this, empty);\n    }\n    this.process.exitCode = 1;\n    return;\n  }\n\n  const results: PolicyLintResult[] = [];\n  for (const bundleDirectory of bundleDirectories) {\n    results.push(\n      await lintBundle.call(this, { fix, noInteractive, json }, bundleDirectory, runner),\n    );\n  }\n\n  const failed = results.some((result) => result.status === 'failed');\n  if (json) {\n    if (results.length === 1) {\n      this.process.stdout.write(`${JSON.stringify(results[0])}\\n`);\n    } else {\n      const multi: PolicyLintMultiResult = {\n        version: POLICY_LINT_MULTI_RESULT_VERSION,\n        status: failed ? 'failed' : 'passed',\n        directory: resolvedDir,\n        fix,\n        results,\n      };\n      this.process.stdout.write(`${JSON.stringify(multi)}\\n`);\n    }\n  } else if (results.length === 1) {\n    renderResult(this, results[0]!);\n  } else {\n    results.forEach((result, index) => {\n      if (index > 0) {\n        this.logger.info('');\n      }\n      const relative = path.relative(this.process.cwd(), result.directory) || result.directory;\n      renderResult(this, result, `Policy verification — ${relative}`);\n    });\n  }\n\n  if (failed) {\n    this.process.exitCode = 1;\n  }\n}\n"],"mappings":"2cAyBA,MAAa,EAAqD,CAChE,WACA,cACA,gBACA,SACA,YACA,aACA,WACD,CAGY,EAA8E,CACzF,SAAU,6BACV,cAAe,UACf,gBAAiB,QACjB,OAAQ,iBACR,YAAa,mBACb,aAAc,aACd,WAAY,YACb,CCjCD,SAAgB,EACd,EACA,EACQ,CAER,MADe,CAAC,EAAO,OAAO,MAAM,CAAE,EAAO,OAAO,MAAM,CAAC,CAAC,OAAO,QAAQ,CAAC,KAAK;EACpE,EAAI,EAUnB,SAAgB,EAA4B,EAAgB,EAAoC,CAC9F,MAAO,CACL,GAAG,IAAI,IACL,EACG,MAAM,UAAU,CAChB,IAAK,GAAS,EAAK,MAAM,CAAC,CAC1B,OAAO,QAAQ,CACf,IAAK,GACJ,EAAK,WAAW,EAAK,CACjB,EAAK,SAAS,EAAkB,EAAK,CAAC,MAAM,EAAK,IAAI,CAAC,KAAK,IAAI,CAC/D,EAAK,MAAM,EAAK,IAAI,CAAC,KAAK,IAAI,CACnC,CACJ,CACF,CAAC,MAAM,CCuBV,SAAS,EACP,EACA,EACA,EAA2B,EACH,CACxB,OAAO,EAAQ,GACZ,YAAY,EAAkB,CAAE,cAAe,GAAM,CAAC,CACtD,MAAM,EAAM,IAAU,EAAK,KAAK,cAAc,EAAM,KAAK,CAAC,CAC1D,QAAS,GAAU,CAClB,IAAM,EAAe,EAAK,KAAK,EAAkB,EAAM,KAAK,CAO5D,OANI,EAAM,aAAa,CACd,EAAiB,EAAS,EAAkB,EAAa,CAE9D,CAAC,EAAM,QAAQ,EAAI,CAAC,EAAM,KAAK,SAAS,QAAQ,CAC3C,EAAE,CAEJ,CACL,CACE,KAAM,EAAK,SAAS,EAAkB,EAAa,CAAC,MAAM,EAAK,IAAI,CAAC,KAAK,IAAI,CAC7E,SAAU,EAAQ,GAAG,aAAa,EAAc,OAAO,CACxD,CACF,EACD,CAUN,SAAS,EACP,EACA,EACoB,CACpB,IAAI,EAAU,EACd,OAAS,CACP,IAAM,EAAoB,EAAK,KAAK,EAAS,SAAU,cAAc,CACrE,GAAI,EAAQ,GAAG,WAAW,EAAkB,CAC1C,OAAO,EAET,IAAM,EAAkB,EAAK,KAAK,EAAS,cAAc,CACzD,GAAI,EAAQ,GAAG,WAAW,EAAgB,CACxC,OAAO,EAET,IAAM,EAAS,EAAK,QAAQ,EAAQ,CACpC,GAAI,IAAW,EACb,OAEF,EAAU,GAWd,SAAS,EAAa,EAAuB,EAA0B,EAAwB,CACzF,EACF,EAAQ,OAAO,KAAK,GAAG,EAAO,KAAK,EAAQ,CAAC,IAAI,CAEhD,EAAQ,OAAO,KAAK,GAAG,EAAO,KAAK,sBAAsB,CAAC,IAAI,CAEhE,EAAO,OAAO,SAAS,CAAE,OAAM,YAAa,CAC1C,IAAM,EAAQ,IAAW,SAAW,OAAS,IAAW,SAAW,OAAS,OACtE,EACJ,IAAW,SACP,EAAO,MAAM,EAAM,CACnB,IAAW,SACT,EAAO,IAAI,EAAM,CACjB,EAAO,OAAO,EAAM,CACtB,EACJ,IAAS,eAAiB,EAAO,MAAM,IACnC,KAAK,EAAO,MAAM,IAAI,GACtB,IAAS,iBAAmB,EAAO,MAAM,MACvC,KAAK,EAAO,MAAM,MAAM,GACxB,GACR,EAAQ,OAAO,KAAK,GAAG,EAAY,GAAG,EAAyB,KAAQ,IAAU,EACjF,CACE,EAAO,YAAY,OAAS,GAC9B,EAAQ,OAAO,MAAM,GAAG,CAE1B,EAAO,YAAY,QAAS,GAAe,CACzC,IAAM,EAAW,EAAW,KAAO,GAAG,EAAW,KAAK,IAAM,GAC5D,EAAQ,OAAO,MACb,EAAO,IAAI,UAAU,EAAW,KAAK,KAAK,IAAW,EAAW,UAAU,CAC3E,EACD,CACE,EAAO,SAAW,UACpB,EAAQ,OAAO,KAAK,GAAG,CACvB,EAAQ,OAAO,KAAK,EAAO,MAAM,8BAA8B,CAAC,GAEhE,EAAQ,OAAO,MAAM,GAAG,CACxB,EAAQ,OAAO,MAAM,EAAO,IAAI,8BAA8B,CAAC,EAanE,eAAe,EAEb,CAAE,MAAK,gBAAe,QACtB,EACA,EAC2B,CAC3B,IAAM,EAA4B,EAAwB,IAAK,IAAU,CACvE,OACA,OAAQ,UACT,EAAE,CACG,EAAsC,EAAE,CACxC,EAA2B,CAC/B,QAAA,EACA,OAAQ,SACR,UAAW,EACX,MACA,MAAO,CAAE,IAAK,KAAM,MAAO,KAAM,CACjC,SACA,iBAAkB,EAAE,CACpB,WAAY,EAAE,CACd,cACD,CACK,GAAa,EAA+B,IAA4C,CAC5F,EAAO,KAAM,GAAU,EAAM,OAAS,EAAK,CAAE,OAAS,GAElD,GAAY,EAAc,EAAiB,IAAkC,CACjF,EAAY,KAAK,CACf,OACA,SAAU,QACV,UACA,GAAI,EAAiB,CAAE,KAAM,EAAgB,CAAG,EAAE,CACnD,CAAC,EAGJ,GAAI,CAAC,KAAK,GAAG,WAAW,EAAY,EAAI,CAAC,KAAK,GAAG,SAAS,EAAY,CAAC,aAAa,CAQlF,OAPA,EAAU,WAAY,SAAS,CAC/B,EACE,oBACA,0DAA0D,IAC1D,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAY,CAC/C,CACD,EAAO,OAAS,SACT,EAGT,IAAM,EAAe,EAAK,KAAK,EAAa,EAAyB,CACrE,GAAI,CACF,EACE,KAAK,GAAG,WAAW,EAAa,CAAG,KAAK,GAAG,aAAa,EAAc,OAAO,CAAG,IAAA,GAChF,EAAiB,KAAM,EAAY,CACpC,CACD,EAAU,WAAY,SAAS,OACxB,EAAO,CACd,EAAU,WAAY,SAAS,CAC/B,EACE,mBACA,aAAiB,MAAQ,EAAM,QAAU,OAAO,EAAM,CACtD,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAa,CAChD,CAGH,IAAM,EAAmB,MAAM,EAAO,MAAO,CAAC,UAAU,CAAE,CAAE,IAAK,EAAa,CAAE,KAAK,CACrF,GAAI,EAAiB,OAAO,OAAS,SACnC,EAAU,cAAe,SAAS,CAClC,EAAS,cAAe,EAAoB,KACvC,CACL,IAAM,EAAmB,GAAG,EAAiB,OAAO,IAAI,EAAiB,SACnE,EAAiB,EAA6B,EAAiB,CACjE,EAAiB,OAAS,GAAK,GACjC,EAAU,cAAe,SAAS,CAClC,EACE,cACA,GACE,EACE,EACA,iDACD,CACJ,GAED,EAAO,MAAM,IAAM,EAAuB,EAAiB,CAAE,QAC7D,EAAU,cAAe,SAAS,EAItC,IAAM,EAAqB,MAAM,EAAO,QAAS,CAAC,UAAU,CAAE,CAAE,IAAK,EAAa,CAAE,KAAK,CACzF,GAAI,EAAmB,OAAO,OAAS,SACrC,EAAU,gBAAiB,SAAS,CACpC,EAAS,gBAAiB,EAAsB,KAC3C,CACL,IAAM,EAAqB,GAAG,EAAmB,OAAO,IAAI,EAAmB,SACzE,EAAmB,EAA+B,EAAmB,CACvE,EAAmB,OAAS,GAAK,GACnC,EAAU,gBAAiB,SAAS,CACpC,EACE,gBACA,GACE,EACE,EACA,mDACD,CACJ,GAED,EAAO,MAAM,MAAQ,EAAuB,EAAmB,CAAE,QACjE,EAAU,gBAAiB,SAAS,EAIxC,GAAI,EAAO,MAAM,IAAK,CACpB,IAAM,EAAe,MAAM,EACzB,MACA,CAAC,MAAO,SAAU,EAAY,CAC9B,CAAE,IAAK,EAAa,CACpB,KACD,CACD,GAAI,EAAa,OAAS,EACxB,EAAU,SAAU,SAAS,CAC7B,EACE,aACA,EACE,EACA,wCAAwC,EAAa,OACtD,CACF,SAED,EAAO,iBAAmB,EAA4B,EAAa,OAAQ,EAAY,CACnF,EAAO,iBAAiB,SAAW,EACrC,EAAU,SAAU,SAAS,KACxB,CACL,IAAI,EAAe,EACb,EAAc,EAClB,CAAE,OAAM,gBAAe,CACvB,KAAK,QAAQ,MAAM,MACnB,KAAK,QAAQ,OAAO,MACrB,CACD,GAAI,CAAC,GAAQ,CAAC,EAAK,CACjB,KAAK,OAAO,MAAM,EAAO,IAAI,kCAAkC,CAAC,CAChE,EAAO,iBAAiB,QAAS,GAAS,CACxC,KAAK,OAAO,MAAM,EAAO,IAAI,OAAO,IAAO,CAAC,EAC5C,CACF,IAAM,EAAa,MAAM,EACvB,MACA,CAAC,MAAO,SAAU,EAAY,CAC9B,CAAE,IAAK,EAAa,CACpB,KACD,CACK,EAAO,EAAW,OAAO,MAAM,EAAI,EAAW,OAAO,MAAM,CAC7D,IACF,KAAK,OAAO,MAAM,GAAG,CACrB,KAAK,OAAO,MAAM,EAAK,EAG3B,GAAI,CAAC,GAAO,EACV,GAAI,CACF,EAAe,MAAM,EAAuB,CAC1C,QAAS,oDACV,CAAC,OACK,EAAO,CACd,IAAM,EAAU,aAAiB,MAAQ,EAAM,QAAU,OAAO,EAAM,CAItE,KAHI,mDAAmD,KAAK,EAAQ,EAClE,KAAK,QAAQ,KAAK,IAAI,CAElB,EAGV,GAAI,EAAc,CAChB,IAAM,EAAc,MAAM,EACxB,MACA,CAAC,MAAO,UAAW,EAAY,CAC/B,CAAE,IAAK,EAAa,CACpB,KACD,CACG,EAAY,OAAS,GACvB,EAAO,WAAa,CAAC,GAAG,EAAO,iBAAiB,CAChD,EAAU,SAAU,SAAS,GAE7B,EAAU,SAAU,SAAS,CAC7B,EACE,iBACA,EACE,EACA,yCAAyC,EAAY,OACtD,CACF,OAGH,EAAU,SAAU,SAAS,CAC7B,EACE,sBACA,uFACD,CAKP,IAAM,EAAc,MAAM,EACxB,MACA,CAAC,QAAS,WAAY,WAAY,cAAe,EAAY,CAC7D,CAAE,IAAK,EAAa,CACpB,KACD,CACG,EAAY,OAAS,EACvB,EAAU,YAAa,SAAS,EAEhC,EAAU,YAAa,SAAS,CAChC,EACE,YACA,EACE,EACA,mCAAmC,EAAY,OAChD,CACF,EAIL,GAAI,EAAO,MAAM,MAAO,CACtB,IAAM,EAAc,EAAuB,KAAM,EAAY,CACvD,EAAc,MAAM,EACxB,QACA,CACE,OACA,eACA,UACA,GAAI,EAAc,CAAC,gBAAiB,EAAY,CAAG,EAAE,CACrD,EACD,CACD,CAAE,IAAK,EAAa,CACpB,KACD,CACG,EAAY,OAAS,EACvB,EAAU,aAAc,SAAS,EAEjC,EAAU,aAAc,SAAS,CACjC,EACE,aACA,EACE,EACA,oCAAoC,EAAY,OACjD,CACF,EAIL,GAAI,EAAO,MAAM,IAAK,CACpB,IAAM,EAAa,MAAM,EACvB,MACA,CAAC,OAAQ,kBAAmB,KAAM,EAAY,CAC9C,CAAE,IAAK,EAAa,CACpB,KACD,CACG,EAAW,OAAS,EACtB,EAAU,WAAY,SAAS,EAE/B,EAAU,WAAY,SAAS,CAC/B,EACE,WACA,EACE,EACA,qDAAqD,EAAW,OACjE,CACF,EAKL,MADA,GAAO,OAAS,EAAO,MAAM,CAAE,YAAa,IAAW,SAAS,CAAG,SAAW,SACvE,EAeT,eAAsB,EAEpB,EACA,EAAoB,EACpB,EAAgC,EACjB,CACf,EAAoB,KAAK,QAAQ,CAEjC,GAAM,CAAE,MAAM,GAAO,gBAAgB,GAAO,OAAO,IAAU,EACvD,EAAc,EAA8B,KAAK,QAAQ,KAAK,CAAE,EAAU,CAEhF,GAAI,CAAC,KAAK,GAAG,WAAW,EAAY,EAAI,CAAC,KAAK,GAAG,SAAS,EAAY,CAAC,aAAa,CAAE,CACpF,IAAM,EAA4B,CAChC,QAAA,EACA,OAAQ,SACR,UAAW,EACX,MACA,MAAO,CAAE,IAAK,KAAM,MAAO,KAAM,CACjC,OAAQ,EAAwB,IAAK,IAAU,CAC7C,OACA,OAAQ,IAAS,WAAa,SAAW,UAC1C,EAAE,CACH,iBAAkB,EAAE,CACpB,WAAY,EAAE,CACd,YAAa,CACX,CACE,KAAM,oBACN,SAAU,QACV,QAAS,0DAA0D,IACnE,KAAM,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAY,CACrD,CACF,CACF,CACG,EACF,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAQ,CAAC,IAAI,CAEzD,EAAa,KAAM,EAAQ,CAE7B,KAAK,QAAQ,SAAW,EACxB,OAGF,IAAM,EAAoB,EAAgC,KAAM,EAAY,CAC5E,GAAI,EAAkB,SAAW,EAAG,CAClC,IAAM,EAA0B,CAC9B,QAAA,EACA,OAAQ,SACR,UAAW,EACX,MACA,MAAO,CAAE,IAAK,KAAM,MAAO,KAAM,CACjC,OAAQ,EAAwB,IAAK,IAAU,CAC7C,OACA,OAAQ,IAAS,WAAa,SAAW,UAC1C,EAAE,CACH,iBAAkB,EAAE,CACpB,WAAY,EAAE,CACd,YAAa,CACX,CACE,KAAM,kBACN,SAAU,QACV,QACE,6HAEF,KAAM,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAY,EAAI,IACzD,CACF,CACF,CACG,EACF,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAM,CAAC,IAAI,CAEvD,EAAa,KAAM,EAAM,CAE3B,KAAK,QAAQ,SAAW,EACxB,OAGF,IAAM,EAA8B,EAAE,CACtC,IAAK,IAAM,KAAmB,EAC5B,EAAQ,KACN,MAAM,EAAW,KAAK,KAAM,CAAE,MAAK,gBAAe,OAAM,CAAE,EAAiB,EAAO,CACnF,CAGH,IAAM,EAAS,EAAQ,KAAM,GAAW,EAAO,SAAW,SAAS,CACnE,GAAI,EACF,GAAI,EAAQ,SAAW,EACrB,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAQ,GAAG,CAAC,IAAI,KACvD,CACL,IAAM,EAA+B,CACnC,QAAA,EACA,OAAQ,EAAS,SAAW,SAC5B,UAAW,EACX,MACA,UACD,CACD,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAM,CAAC,IAAI,MAEhD,EAAQ,SAAW,EAC5B,EAAa,KAAM,EAAQ,GAAI,CAE/B,EAAQ,SAAS,EAAQ,IAAU,CAC7B,EAAQ,GACV,KAAK,OAAO,KAAK,GAAG,CAEtB,IAAM,EAAW,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAO,UAAU,EAAI,EAAO,UAC/E,EAAa,KAAM,EAAQ,yBAAyB,IAAW,EAC/D,CAGA,IACF,KAAK,QAAQ,SAAW"}