@transcend-io/cli 13.0.1 → 13.0.3

package/dist/{impl-Q2ZDQO_y2.mjs.map → impl-BAjCrulN2.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"impl-Q2ZDQO_y2.mjs","names":[],"sources":["../src/lib/policy/policy-lint-model.ts","../src/commands/policy/lint/impl.ts"],"sourcesContent":["/** Stable policy lint result schema version. */\nexport const POLICY_LINT_RESULT_VERSION = 1;\n\n/** Stable multi-bundle lint result schema version. */\nexport const POLICY_LINT_MULTI_RESULT_VERSION = 1;\n\n/** Status of the lint gate or an individual step. */\nexport type PolicyLintStatus = 'passed' | 'failed' | 'skipped';\n\n/** One named policy lint step. */\nexport interface PolicyLintStep {\n  /** Stable step name. */\n  name: 'opa-version' | 'regal-version' | 'format' | 'regal-lint';\n  /** Step outcome. */\n  status: PolicyLintStatus;\n}\n\n/** Stable lint step execution order. */\nexport const POLICY_LINT_STEP_NAMES: PolicyLintStep['name'][] = [\n  'opa-version',\n  'regal-version',\n  'format',\n  'regal-lint',\n];\n\n/** User-facing lint step labels. */\nexport const POLICY_LINT_STEP_LABELS: Readonly<Record<PolicyLintStep['name'], string>> = {\n  'opa-version': 'OPA 1.x',\n  'regal-version': 'Regal',\n  format: 'OPA formatting',\n  'regal-lint': 'Regal lint',\n};\n\n/** One machine-readable policy lint diagnostic. */\nexport interface PolicyLintDiagnostic {\n  /** Stable diagnostic identifier. */\n  code: string;\n  /** Diagnostic severity. */\n  severity: 'error';\n  /** Human-readable detail, including captured tool output when available. */\n  message: string;\n  /** Optional path relative to the invocation directory. */\n  path?: string;\n}\n\n/** Detected local policy tool versions. */\nexport interface PolicyLintTools {\n  /** Detected OPA version, or null when missing or unsupported. */\n  opa: string | null;\n  /** Detected Regal version, or null when missing or unsupported. */\n  regal: string | null;\n}\n\n/** Stable result emitted by `transcend policy lint --json` for one bundle. */\nexport interface PolicyLintResult {\n  /** Result schema version. */\n  version: typeof POLICY_LINT_RESULT_VERSION;\n  /** Overall lint outcome. */\n  status: Exclude<PolicyLintStatus, 'skipped'>;\n  /** Absolute policy bundle directory. */\n  directory: string;\n  /** Whether formatting repair was explicitly requested. */\n  fix: boolean;\n  /** Detected supported tool versions. */\n  tools: PolicyLintTools;\n  /** Lint step outcomes in stable execution order. */\n  checks: PolicyLintStep[];\n  /** Files found to need OPA formatting, relative to the policy directory. */\n  unformattedFiles: string[];\n  /** Files repaired with OPA formatting, relative to the policy directory. */\n  fixedFiles: string[];\n  /** Ordered lint diagnostics. */\n  diagnostics: PolicyLintDiagnostic[];\n}\n\n/**\n * Stable result when `transcend policy lint --json` lints multiple bundles.\n *\n * Emitted only when the selected path is a workspace with more than one\n * publishable `*-bundle/` directory.\n */\nexport interface PolicyLintMultiResult {\n  /** Result schema version. */\n  version: typeof POLICY_LINT_MULTI_RESULT_VERSION;\n  /** Overall lint outcome across all bundles. */\n  status: Exclude<PolicyLintStatus, 'skipped'>;\n  /** Absolute policy workspace directory that was searched. */\n  directory: string;\n  /** Whether formatting repair was explicitly requested. */\n  fix: boolean;\n  /** Per-bundle results in discovery order. */\n  results: PolicyLintResult[];\n}\n","import path from 'node:path';\n\nimport colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport {\n  runCapturedProcess,\n  type CapturedProcessRunner,\n} from '../../../lib/cli/run-captured-process.js';\nimport {\n  type PolicyLintDiagnostic,\n  type PolicyLintMultiResult,\n  type PolicyLintResult,\n  type PolicyLintStep,\n  POLICY_LINT_MULTI_RESULT_VERSION,\n  POLICY_LINT_RESULT_VERSION,\n  POLICY_LINT_STEP_LABELS,\n  POLICY_LINT_STEP_NAMES,\n} from '../../../lib/policy/policy-lint-model.js';\nimport {\n  DEFAULT_POLICY_PROJECT_DIRECTORY,\n  discoverPolicyBundleDirectories,\n  resolvePolicyProjectDirectory,\n} from '../../../lib/policy/policy-project-discovery.js';\nimport { probePolicyToolVersions } from '../helpers/probePolicyToolVersions.js';\nimport { runOpaFormatStep } from '../helpers/runOpaFormatStep.js';\nimport { runRegalLintStep } from '../helpers/runRegalLintStep.js';\n\n/** CLI flags for `transcend policy lint`. */\nexport interface LintCommandFlags {\n  /** Apply OPA formatting. */\n  fix: boolean;\n  /** Disable the optional formatting confirmation. */\n  noInteractive: boolean;\n  /** Emit one stable JSON result on stdout. */\n  json: boolean;\n}\n\n/**\n * Render the terminal summary for a policy lint result.\n *\n * @param context - CLI context\n * @param result - Completed lint result\n * @param heading - Optional section heading when linting multiple bundles\n */\nfunction renderResult(context: LocalContext, result: PolicyLintResult, heading?: string): void {\n  if (heading) {\n    context.logger.info(`${colors.bold(heading)}\\n`);\n  } else {\n    context.logger.info(`${colors.bold('Policy lint')}\\n`);\n  }\n  result.checks.forEach(({ name, status }) => {\n    const label = status === 'passed' ? 'PASS' : status === 'failed' ? 'FAIL' : 'SKIP';\n    const styledLabel =\n      status === 'passed'\n        ? colors.green(label)\n        : status === 'failed'\n          ? colors.red(label)\n          : colors.yellow(label);\n    const version =\n      name === 'opa-version' && result.tools.opa\n        ? ` (${result.tools.opa})`\n        : name === 'regal-version' && result.tools.regal\n          ? ` (${result.tools.regal})`\n          : '';\n    context.logger.info(`${styledLabel} ${POLICY_LINT_STEP_LABELS[name]}${version}`);\n  });\n  if (result.diagnostics.length > 0) {\n    context.logger.error('');\n  }\n  result.diagnostics.forEach((diagnostic) => {\n    const location = diagnostic.path ? `${diagnostic.path}: ` : '';\n    context.logger.error(\n      colors.red(`error [${diagnostic.code}]: ${location}${diagnostic.message}`),\n    );\n  });\n  if (result.status === 'passed') {\n    context.logger.info('');\n    context.logger.info(colors.green('Policy lint passed.'));\n  } else {\n    context.logger.error('');\n    context.logger.error(colors.red('Policy lint failed.'));\n  }\n}\n\n/**\n * Lint one publishable policy bundle directory (format + Regal).\n *\n * @param this - CLI context\n * @param flags - Command flags\n * @param resolvedDir - Absolute bundle directory\n * @param runner - Captured subprocess runner\n * @returns Completed lint result\n */\nasync function lintBundle(\n  this: LocalContext,\n  { fix, noInteractive, json }: LintCommandFlags,\n  resolvedDir: string,\n  runner: CapturedProcessRunner,\n): Promise<PolicyLintResult> {\n  const checks: PolicyLintStep[] = POLICY_LINT_STEP_NAMES.map((name) => ({\n    name,\n    status: 'skipped',\n  }));\n  const diagnostics: PolicyLintDiagnostic[] = [];\n  const result: PolicyLintResult = {\n    version: POLICY_LINT_RESULT_VERSION,\n    status: 'passed',\n    directory: resolvedDir,\n    fix,\n    tools: { opa: null, regal: null },\n    checks,\n    unformattedFiles: [],\n    fixedFiles: [],\n    diagnostics,\n  };\n  const setStatus = (name: PolicyLintStep['name'], status: PolicyLintStep['status']): void => {\n    checks.find((check) => check.name === name)!.status = status;\n  };\n  const addError = (code: string, message: string, diagnosticPath?: string): void => {\n    diagnostics.push({\n      code,\n      severity: 'error',\n      message,\n      ...(diagnosticPath ? { path: diagnosticPath } : {}),\n    });\n  };\n\n  if (!this.fs.existsSync(resolvedDir) || !this.fs.statSync(resolvedDir).isDirectory()) {\n    setStatus('opa-version', 'failed');\n    addError(\n      'project.directory',\n      `Policy directory does not exist or is not a directory: ${resolvedDir}`,\n      path.relative(this.process.cwd(), resolvedDir),\n    );\n    result.status = 'failed';\n    return result;\n  }\n\n  const toolVersions = await probePolicyToolVersions.call(this, resolvedDir, runner);\n  result.tools = { opa: toolVersions.opa, regal: toolVersions.regal };\n  setStatus('opa-version', toolVersions.opaStatus);\n  setStatus('regal-version', toolVersions.regalStatus);\n  toolVersions.diagnostics.forEach((diagnostic) => {\n    addError(diagnostic.code, diagnostic.message);\n  });\n\n  if (result.tools.opa) {\n    const formatStep = await runOpaFormatStep.call(this, {\n      resolvedDir,\n      fix,\n      noInteractive,\n      json,\n      fixCommandHint: 'transcend policy lint --fix',\n      runner,\n    });\n    result.unformattedFiles = formatStep.unformattedFiles;\n    result.fixedFiles = formatStep.fixedFiles;\n    setStatus('format', formatStep.status);\n    formatStep.diagnostics.forEach((diagnostic) => {\n      addError(diagnostic.code, diagnostic.message);\n    });\n  }\n\n  if (result.tools.regal) {\n    const regalStep = await runRegalLintStep.call(this, { resolvedDir, runner });\n    setStatus('regal-lint', regalStep.status);\n    regalStep.diagnostics.forEach((diagnostic) => {\n      addError(diagnostic.code, diagnostic.message);\n    });\n  }\n\n  result.status = checks.some(({ status }) => status === 'failed') ? 'failed' : 'passed';\n  return result;\n}\n\n/**\n * Lint local policy bundles with OPA formatting and Regal.\n *\n * With no directory (or the default workspace path), discovers every immediate\n * child that contains a `.manifest` and lints each. Pass one bundle path to\n * lint a single publishable unit.\n *\n * @param this - CLI context\n * @param flags - Command flags\n * @param directory - Policy workspace or bundle directory\n * @param runner - Captured subprocess runner\n */\nexport async function lint(\n  this: LocalContext,\n  flags: LintCommandFlags,\n  directory: string = DEFAULT_POLICY_PROJECT_DIRECTORY,\n  runner: CapturedProcessRunner = runCapturedProcess,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  const { fix = false, noInteractive = false, json = false } = flags;\n  const resolvedDir = resolvePolicyProjectDirectory(this.process.cwd(), directory);\n\n  if (!this.fs.existsSync(resolvedDir) || !this.fs.statSync(resolvedDir).isDirectory()) {\n    const missing: PolicyLintResult = {\n      version: POLICY_LINT_RESULT_VERSION,\n      status: 'failed',\n      directory: resolvedDir,\n      fix,\n      tools: { opa: null, regal: null },\n      checks: POLICY_LINT_STEP_NAMES.map((name) => ({\n        name,\n        status: name === 'opa-version' ? 'failed' : 'skipped',\n      })),\n      unformattedFiles: [],\n      fixedFiles: [],\n      diagnostics: [\n        {\n          code: 'project.directory',\n          severity: 'error',\n          message: `Policy directory does not exist or is not a directory: ${resolvedDir}`,\n          path: path.relative(this.process.cwd(), resolvedDir),\n        },\n      ],\n    };\n    if (json) {\n      this.process.stdout.write(`${JSON.stringify(missing)}\\n`);\n    } else {\n      renderResult(this, missing);\n    }\n    this.process.exitCode = 1;\n    return;\n  }\n\n  const bundleDirectories = discoverPolicyBundleDirectories(this, resolvedDir);\n  if (bundleDirectories.length === 0) {\n    const empty: PolicyLintResult = {\n      version: POLICY_LINT_RESULT_VERSION,\n      status: 'failed',\n      directory: resolvedDir,\n      fix,\n      tools: { opa: null, regal: null },\n      checks: POLICY_LINT_STEP_NAMES.map((name) => ({\n        name,\n        status: name === 'opa-version' ? 'failed' : 'skipped',\n      })),\n      unformattedFiles: [],\n      fixedFiles: [],\n      diagnostics: [\n        {\n          code: 'project.bundles',\n          severity: 'error',\n          message:\n            'No publishable policy bundles found. Add one with `transcend policy new`, ' +\n            'or pass a directory that contains a `.manifest`.',\n          path: path.relative(this.process.cwd(), resolvedDir) || '.',\n        },\n      ],\n    };\n    if (json) {\n      this.process.stdout.write(`${JSON.stringify(empty)}\\n`);\n    } else {\n      renderResult(this, empty);\n    }\n    this.process.exitCode = 1;\n    return;\n  }\n\n  const results: PolicyLintResult[] = [];\n  for (const bundleDirectory of bundleDirectories) {\n    results.push(\n      await lintBundle.call(this, { fix, noInteractive, json }, bundleDirectory, runner),\n    );\n  }\n\n  const failed = results.some((result) => result.status === 'failed');\n  if (json) {\n    if (results.length === 1) {\n      this.process.stdout.write(`${JSON.stringify(results[0])}\\n`);\n    } else {\n      const multi: PolicyLintMultiResult = {\n        version: POLICY_LINT_MULTI_RESULT_VERSION,\n        status: failed ? 'failed' : 'passed',\n        directory: resolvedDir,\n        fix,\n        results,\n      };\n      this.process.stdout.write(`${JSON.stringify(multi)}\\n`);\n    }\n  } else if (results.length === 1) {\n    renderResult(this, results[0]!);\n  } else {\n    results.forEach((result, index) => {\n      if (index > 0) {\n        this.logger.info('');\n      }\n      const relative = path.relative(this.process.cwd(), result.directory) || result.directory;\n      renderResult(this, result, `Policy lint — ${relative}`);\n    });\n  }\n\n  if (failed) {\n    this.process.exitCode = 1;\n  }\n}\n"],"mappings":"4SAkBA,MAAa,EAAmD,CAC9D,cACA,gBACA,SACA,aACD,CAGY,EAA4E,CACvF,cAAe,UACf,gBAAiB,QACjB,OAAQ,iBACR,aAAc,aACf,CCeD,SAAS,EAAa,EAAuB,EAA0B,EAAwB,CACzF,EACF,EAAQ,OAAO,KAAK,GAAG,EAAO,KAAK,EAAQ,CAAC,IAAI,CAEhD,EAAQ,OAAO,KAAK,GAAG,EAAO,KAAK,cAAc,CAAC,IAAI,CAExD,EAAO,OAAO,SAAS,CAAE,OAAM,YAAa,CAC1C,IAAM,EAAQ,IAAW,SAAW,OAAS,IAAW,SAAW,OAAS,OACtE,EACJ,IAAW,SACP,EAAO,MAAM,EAAM,CACnB,IAAW,SACT,EAAO,IAAI,EAAM,CACjB,EAAO,OAAO,EAAM,CACtB,EACJ,IAAS,eAAiB,EAAO,MAAM,IACnC,KAAK,EAAO,MAAM,IAAI,GACtB,IAAS,iBAAmB,EAAO,MAAM,MACvC,KAAK,EAAO,MAAM,MAAM,GACxB,GACR,EAAQ,OAAO,KAAK,GAAG,EAAY,GAAG,EAAwB,KAAQ,IAAU,EAChF,CACE,EAAO,YAAY,OAAS,GAC9B,EAAQ,OAAO,MAAM,GAAG,CAE1B,EAAO,YAAY,QAAS,GAAe,CACzC,IAAM,EAAW,EAAW,KAAO,GAAG,EAAW,KAAK,IAAM,GAC5D,EAAQ,OAAO,MACb,EAAO,IAAI,UAAU,EAAW,KAAK,KAAK,IAAW,EAAW,UAAU,CAC3E,EACD,CACE,EAAO,SAAW,UACpB,EAAQ,OAAO,KAAK,GAAG,CACvB,EAAQ,OAAO,KAAK,EAAO,MAAM,sBAAsB,CAAC,GAExD,EAAQ,OAAO,MAAM,GAAG,CACxB,EAAQ,OAAO,MAAM,EAAO,IAAI,sBAAsB,CAAC,EAa3D,eAAe,EAEb,CAAE,MAAK,gBAAe,QACtB,EACA,EAC2B,CAC3B,IAAM,EAA2B,EAAuB,IAAK,IAAU,CACrE,OACA,OAAQ,UACT,EAAE,CACG,EAAsC,EAAE,CACxC,EAA2B,CAC/B,QAAA,EACA,OAAQ,SACR,UAAW,EACX,MACA,MAAO,CAAE,IAAK,KAAM,MAAO,KAAM,CACjC,SACA,iBAAkB,EAAE,CACpB,WAAY,EAAE,CACd,cACD,CACK,GAAa,EAA8B,IAA2C,CAC1F,EAAO,KAAM,GAAU,EAAM,OAAS,EAAK,CAAE,OAAS,GAElD,GAAY,EAAc,EAAiB,IAAkC,CACjF,EAAY,KAAK,CACf,OACA,SAAU,QACV,UACA,GAAI,EAAiB,CAAE,KAAM,EAAgB,CAAG,EAAE,CACnD,CAAC,EAGJ,GAAI,CAAC,KAAK,GAAG,WAAW,EAAY,EAAI,CAAC,KAAK,GAAG,SAAS,EAAY,CAAC,aAAa,CAQlF,OAPA,EAAU,cAAe,SAAS,CAClC,EACE,oBACA,0DAA0D,IAC1D,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAY,CAC/C,CACD,EAAO,OAAS,SACT,EAGT,IAAM,EAAe,MAAM,EAAwB,KAAK,KAAM,EAAa,EAAO,CAQlF,GAPA,EAAO,MAAQ,CAAE,IAAK,EAAa,IAAK,MAAO,EAAa,MAAO,CACnE,EAAU,cAAe,EAAa,UAAU,CAChD,EAAU,gBAAiB,EAAa,YAAY,CACpD,EAAa,YAAY,QAAS,GAAe,CAC/C,EAAS,EAAW,KAAM,EAAW,QAAQ,EAC7C,CAEE,EAAO,MAAM,IAAK,CACpB,IAAM,EAAa,MAAM,EAAiB,KAAK,KAAM,CACnD,cACA,MACA,gBACA,OACA,eAAgB,8BAChB,SACD,CAAC,CACF,EAAO,iBAAmB,EAAW,iBACrC,EAAO,WAAa,EAAW,WAC/B,EAAU,SAAU,EAAW,OAAO,CACtC,EAAW,YAAY,QAAS,GAAe,CAC7C,EAAS,EAAW,KAAM,EAAW,QAAQ,EAC7C,CAGJ,GAAI,EAAO,MAAM,MAAO,CACtB,IAAM,EAAY,MAAM,EAAiB,KAAK,KAAM,CAAE,cAAa,SAAQ,CAAC,CAC5E,EAAU,aAAc,EAAU,OAAO,CACzC,EAAU,YAAY,QAAS,GAAe,CAC5C,EAAS,EAAW,KAAM,EAAW,QAAQ,EAC7C,CAIJ,MADA,GAAO,OAAS,EAAO,MAAM,CAAE,YAAa,IAAW,SAAS,CAAG,SAAW,SACvE,EAeT,eAAsB,EAEpB,EACA,EAAoB,EACpB,EAAgC,EACjB,CACf,EAAoB,KAAK,QAAQ,CAEjC,GAAM,CAAE,MAAM,GAAO,gBAAgB,GAAO,OAAO,IAAU,EACvD,EAAc,EAA8B,KAAK,QAAQ,KAAK,CAAE,EAAU,CAEhF,GAAI,CAAC,KAAK,GAAG,WAAW,EAAY,EAAI,CAAC,KAAK,GAAG,SAAS,EAAY,CAAC,aAAa,CAAE,CACpF,IAAM,EAA4B,CAChC,QAAA,EACA,OAAQ,SACR,UAAW,EACX,MACA,MAAO,CAAE,IAAK,KAAM,MAAO,KAAM,CACjC,OAAQ,EAAuB,IAAK,IAAU,CAC5C,OACA,OAAQ,IAAS,cAAgB,SAAW,UAC7C,EAAE,CACH,iBAAkB,EAAE,CACpB,WAAY,EAAE,CACd,YAAa,CACX,CACE,KAAM,oBACN,SAAU,QACV,QAAS,0DAA0D,IACnE,KAAM,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAY,CACrD,CACF,CACF,CACG,EACF,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAQ,CAAC,IAAI,CAEzD,EAAa,KAAM,EAAQ,CAE7B,KAAK,QAAQ,SAAW,EACxB,OAGF,IAAM,EAAoB,EAAgC,KAAM,EAAY,CAC5E,GAAI,EAAkB,SAAW,EAAG,CAClC,IAAM,EAA0B,CAC9B,QAAA,EACA,OAAQ,SACR,UAAW,EACX,MACA,MAAO,CAAE,IAAK,KAAM,MAAO,KAAM,CACjC,OAAQ,EAAuB,IAAK,IAAU,CAC5C,OACA,OAAQ,IAAS,cAAgB,SAAW,UAC7C,EAAE,CACH,iBAAkB,EAAE,CACpB,WAAY,EAAE,CACd,YAAa,CACX,CACE,KAAM,kBACN,SAAU,QACV,QACE,6HAEF,KAAM,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAY,EAAI,IACzD,CACF,CACF,CACG,EACF,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAM,CAAC,IAAI,CAEvD,EAAa,KAAM,EAAM,CAE3B,KAAK,QAAQ,SAAW,EACxB,OAGF,IAAM,EAA8B,EAAE,CACtC,IAAK,IAAM,KAAmB,EAC5B,EAAQ,KACN,MAAM,EAAW,KAAK,KAAM,CAAE,MAAK,gBAAe,OAAM,CAAE,EAAiB,EAAO,CACnF,CAGH,IAAM,EAAS,EAAQ,KAAM,GAAW,EAAO,SAAW,SAAS,CACnE,GAAI,EACF,GAAI,EAAQ,SAAW,EACrB,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAQ,GAAG,CAAC,IAAI,KACvD,CACL,IAAM,EAA+B,CACnC,QAAA,EACA,OAAQ,EAAS,SAAW,SAC5B,UAAW,EACX,MACA,UACD,CACD,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAM,CAAC,IAAI,MAEhD,EAAQ,SAAW,EAC5B,EAAa,KAAM,EAAQ,GAAI,CAE/B,EAAQ,SAAS,EAAQ,IAAU,CAC7B,EAAQ,GACV,KAAK,OAAO,KAAK,GAAG,CAEtB,IAAM,EAAW,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAO,UAAU,EAAI,EAAO,UAC/E,EAAa,KAAM,EAAQ,iBAAiB,IAAW,EACvD,CAGA,IACF,KAAK,QAAQ,SAAW"}
+{"version":3,"file":"impl-BAjCrulN2.mjs","names":[],"sources":["../src/lib/policy/policy-lint-model.ts","../src/commands/policy/lint/impl.ts"],"sourcesContent":["/** Stable policy lint result schema version. */\nexport const POLICY_LINT_RESULT_VERSION = 1;\n\n/** Stable multi-bundle lint result schema version. */\nexport const POLICY_LINT_MULTI_RESULT_VERSION = 1;\n\n/** Status of the lint gate or an individual step. */\nexport type PolicyLintStatus = 'passed' | 'failed' | 'skipped';\n\n/** One named policy lint step. */\nexport interface PolicyLintStep {\n  /** Stable step name. */\n  name: 'opa-version' | 'regal-version' | 'format' | 'regal-lint';\n  /** Step outcome. */\n  status: PolicyLintStatus;\n}\n\n/** Stable lint step execution order. */\nexport const POLICY_LINT_STEP_NAMES: PolicyLintStep['name'][] = [\n  'opa-version',\n  'regal-version',\n  'format',\n  'regal-lint',\n];\n\n/** User-facing lint step labels. */\nexport const POLICY_LINT_STEP_LABELS: Readonly<Record<PolicyLintStep['name'], string>> = {\n  'opa-version': 'OPA 1.x',\n  'regal-version': 'Regal',\n  format: 'OPA formatting',\n  'regal-lint': 'Regal lint',\n};\n\n/** One machine-readable policy lint diagnostic. */\nexport interface PolicyLintDiagnostic {\n  /** Stable diagnostic identifier. */\n  code: string;\n  /** Diagnostic severity. */\n  severity: 'error';\n  /** Human-readable detail, including captured tool output when available. */\n  message: string;\n  /** Optional path relative to the invocation directory. */\n  path?: string;\n}\n\n/** Detected local policy tool versions. */\nexport interface PolicyLintTools {\n  /** Detected OPA version, or null when missing or unsupported. */\n  opa: string | null;\n  /** Detected Regal version, or null when missing or unsupported. */\n  regal: string | null;\n}\n\n/** Stable result emitted by `transcend policy lint --json` for one bundle. */\nexport interface PolicyLintResult {\n  /** Result schema version. */\n  version: typeof POLICY_LINT_RESULT_VERSION;\n  /** Overall lint outcome. */\n  status: Exclude<PolicyLintStatus, 'skipped'>;\n  /** Absolute policy bundle directory. */\n  directory: string;\n  /** Whether formatting repair was explicitly requested. */\n  fix: boolean;\n  /** Detected supported tool versions. */\n  tools: PolicyLintTools;\n  /** Lint step outcomes in stable execution order. */\n  checks: PolicyLintStep[];\n  /** Files found to need OPA formatting, relative to the policy directory. */\n  unformattedFiles: string[];\n  /** Files repaired with OPA formatting, relative to the policy directory. */\n  fixedFiles: string[];\n  /** Ordered lint diagnostics. */\n  diagnostics: PolicyLintDiagnostic[];\n}\n\n/**\n * Stable result when `transcend policy lint --json` lints multiple bundles.\n *\n * Emitted only when the selected path is a workspace with more than one\n * publishable `*-bundle/` directory.\n */\nexport interface PolicyLintMultiResult {\n  /** Result schema version. */\n  version: typeof POLICY_LINT_MULTI_RESULT_VERSION;\n  /** Overall lint outcome across all bundles. */\n  status: Exclude<PolicyLintStatus, 'skipped'>;\n  /** Absolute policy workspace directory that was searched. */\n  directory: string;\n  /** Whether formatting repair was explicitly requested. */\n  fix: boolean;\n  /** Per-bundle results in discovery order. */\n  results: PolicyLintResult[];\n}\n","import path from 'node:path';\n\nimport colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport {\n  runCapturedProcess,\n  type CapturedProcessRunner,\n} from '../../../lib/cli/run-captured-process.js';\nimport {\n  type PolicyLintDiagnostic,\n  type PolicyLintMultiResult,\n  type PolicyLintResult,\n  type PolicyLintStep,\n  POLICY_LINT_MULTI_RESULT_VERSION,\n  POLICY_LINT_RESULT_VERSION,\n  POLICY_LINT_STEP_LABELS,\n  POLICY_LINT_STEP_NAMES,\n} from '../../../lib/policy/policy-lint-model.js';\nimport {\n  DEFAULT_POLICY_PROJECT_DIRECTORY,\n  discoverPolicyBundleDirectories,\n  resolvePolicyProjectDirectory,\n} from '../../../lib/policy/policy-project-discovery.js';\nimport { probePolicyToolVersions } from '../helpers/probePolicyToolVersions.js';\nimport { runOpaFormatStep } from '../helpers/runOpaFormatStep.js';\nimport { runRegalLintStep } from '../helpers/runRegalLintStep.js';\n\n/** CLI flags for `transcend policy lint`. */\nexport interface LintCommandFlags {\n  /** Apply OPA formatting. */\n  fix: boolean;\n  /** Disable the optional formatting confirmation. */\n  noInteractive: boolean;\n  /** Emit one stable JSON result on stdout. */\n  json: boolean;\n}\n\n/**\n * Render the terminal summary for a policy lint result.\n *\n * @param context - CLI context\n * @param result - Completed lint result\n * @param heading - Optional section heading when linting multiple bundles\n */\nfunction renderResult(context: LocalContext, result: PolicyLintResult, heading?: string): void {\n  if (heading) {\n    context.logger.info(`${colors.bold(heading)}\\n`);\n  } else {\n    context.logger.info(`${colors.bold('Policy lint')}\\n`);\n  }\n  result.checks.forEach(({ name, status }) => {\n    const label = status === 'passed' ? 'PASS' : status === 'failed' ? 'FAIL' : 'SKIP';\n    const styledLabel =\n      status === 'passed'\n        ? colors.green(label)\n        : status === 'failed'\n          ? colors.red(label)\n          : colors.yellow(label);\n    const version =\n      name === 'opa-version' && result.tools.opa\n        ? ` (${result.tools.opa})`\n        : name === 'regal-version' && result.tools.regal\n          ? ` (${result.tools.regal})`\n          : '';\n    context.logger.info(`${styledLabel} ${POLICY_LINT_STEP_LABELS[name]}${version}`);\n  });\n  if (result.diagnostics.length > 0) {\n    context.logger.error('');\n  }\n  result.diagnostics.forEach((diagnostic) => {\n    const location = diagnostic.path ? `${diagnostic.path}: ` : '';\n    context.logger.error(\n      colors.red(`error [${diagnostic.code}]: ${location}${diagnostic.message}`),\n    );\n  });\n  if (result.status === 'passed') {\n    context.logger.info('');\n    context.logger.info(colors.green('Policy lint passed.'));\n  } else {\n    context.logger.error('');\n    context.logger.error(colors.red('Policy lint failed.'));\n  }\n}\n\n/**\n * Lint one publishable policy bundle directory (format + Regal).\n *\n * @param this - CLI context\n * @param flags - Command flags\n * @param resolvedDir - Absolute bundle directory\n * @param runner - Captured subprocess runner\n * @returns Completed lint result\n */\nasync function lintBundle(\n  this: LocalContext,\n  { fix, noInteractive, json }: LintCommandFlags,\n  resolvedDir: string,\n  runner: CapturedProcessRunner,\n): Promise<PolicyLintResult> {\n  const checks: PolicyLintStep[] = POLICY_LINT_STEP_NAMES.map((name) => ({\n    name,\n    status: 'skipped',\n  }));\n  const diagnostics: PolicyLintDiagnostic[] = [];\n  const result: PolicyLintResult = {\n    version: POLICY_LINT_RESULT_VERSION,\n    status: 'passed',\n    directory: resolvedDir,\n    fix,\n    tools: { opa: null, regal: null },\n    checks,\n    unformattedFiles: [],\n    fixedFiles: [],\n    diagnostics,\n  };\n  const setStatus = (name: PolicyLintStep['name'], status: PolicyLintStep['status']): void => {\n    checks.find((check) => check.name === name)!.status = status;\n  };\n  const addError = (code: string, message: string, diagnosticPath?: string): void => {\n    diagnostics.push({\n      code,\n      severity: 'error',\n      message,\n      ...(diagnosticPath ? { path: diagnosticPath } : {}),\n    });\n  };\n\n  if (!this.fs.existsSync(resolvedDir) || !this.fs.statSync(resolvedDir).isDirectory()) {\n    setStatus('opa-version', 'failed');\n    addError(\n      'project.directory',\n      `Policy directory does not exist or is not a directory: ${resolvedDir}`,\n      path.relative(this.process.cwd(), resolvedDir),\n    );\n    result.status = 'failed';\n    return result;\n  }\n\n  const toolVersions = await probePolicyToolVersions.call(this, resolvedDir, runner);\n  result.tools = { opa: toolVersions.opa, regal: toolVersions.regal };\n  setStatus('opa-version', toolVersions.opaStatus);\n  setStatus('regal-version', toolVersions.regalStatus);\n  toolVersions.diagnostics.forEach((diagnostic) => {\n    addError(diagnostic.code, diagnostic.message);\n  });\n\n  if (result.tools.opa) {\n    const formatStep = await runOpaFormatStep.call(this, {\n      resolvedDir,\n      fix,\n      noInteractive,\n      json,\n      fixCommandHint: 'transcend policy lint --fix',\n      runner,\n    });\n    result.unformattedFiles = formatStep.unformattedFiles;\n    result.fixedFiles = formatStep.fixedFiles;\n    setStatus('format', formatStep.status);\n    formatStep.diagnostics.forEach((diagnostic) => {\n      addError(diagnostic.code, diagnostic.message);\n    });\n  }\n\n  if (result.tools.regal) {\n    const regalStep = await runRegalLintStep.call(this, { resolvedDir, runner });\n    setStatus('regal-lint', regalStep.status);\n    regalStep.diagnostics.forEach((diagnostic) => {\n      addError(diagnostic.code, diagnostic.message);\n    });\n  }\n\n  result.status = checks.some(({ status }) => status === 'failed') ? 'failed' : 'passed';\n  return result;\n}\n\n/**\n * Lint local policy bundles with OPA formatting and Regal.\n *\n * With no directory (or the default workspace path), discovers every immediate\n * child that contains a `.manifest` and lints each. Pass one bundle path to\n * lint a single publishable unit.\n *\n * @param this - CLI context\n * @param flags - Command flags\n * @param directory - Policy workspace or bundle directory\n * @param runner - Captured subprocess runner\n */\nexport async function lint(\n  this: LocalContext,\n  flags: LintCommandFlags,\n  directory: string = DEFAULT_POLICY_PROJECT_DIRECTORY,\n  runner: CapturedProcessRunner = runCapturedProcess,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  const { fix = false, noInteractive = false, json = false } = flags;\n  const resolvedDir = resolvePolicyProjectDirectory(this.process.cwd(), directory);\n\n  if (!this.fs.existsSync(resolvedDir) || !this.fs.statSync(resolvedDir).isDirectory()) {\n    const missing: PolicyLintResult = {\n      version: POLICY_LINT_RESULT_VERSION,\n      status: 'failed',\n      directory: resolvedDir,\n      fix,\n      tools: { opa: null, regal: null },\n      checks: POLICY_LINT_STEP_NAMES.map((name) => ({\n        name,\n        status: name === 'opa-version' ? 'failed' : 'skipped',\n      })),\n      unformattedFiles: [],\n      fixedFiles: [],\n      diagnostics: [\n        {\n          code: 'project.directory',\n          severity: 'error',\n          message: `Policy directory does not exist or is not a directory: ${resolvedDir}`,\n          path: path.relative(this.process.cwd(), resolvedDir),\n        },\n      ],\n    };\n    if (json) {\n      this.process.stdout.write(`${JSON.stringify(missing)}\\n`);\n    } else {\n      renderResult(this, missing);\n    }\n    this.process.exitCode = 1;\n    return;\n  }\n\n  const bundleDirectories = discoverPolicyBundleDirectories(this, resolvedDir);\n  if (bundleDirectories.length === 0) {\n    const empty: PolicyLintResult = {\n      version: POLICY_LINT_RESULT_VERSION,\n      status: 'failed',\n      directory: resolvedDir,\n      fix,\n      tools: { opa: null, regal: null },\n      checks: POLICY_LINT_STEP_NAMES.map((name) => ({\n        name,\n        status: name === 'opa-version' ? 'failed' : 'skipped',\n      })),\n      unformattedFiles: [],\n      fixedFiles: [],\n      diagnostics: [\n        {\n          code: 'project.bundles',\n          severity: 'error',\n          message:\n            'No publishable policy bundles found. Add one with `transcend policy new`, ' +\n            'or pass a directory that contains a `.manifest`.',\n          path: path.relative(this.process.cwd(), resolvedDir) || '.',\n        },\n      ],\n    };\n    if (json) {\n      this.process.stdout.write(`${JSON.stringify(empty)}\\n`);\n    } else {\n      renderResult(this, empty);\n    }\n    this.process.exitCode = 1;\n    return;\n  }\n\n  const results: PolicyLintResult[] = [];\n  for (const bundleDirectory of bundleDirectories) {\n    results.push(\n      await lintBundle.call(this, { fix, noInteractive, json }, bundleDirectory, runner),\n    );\n  }\n\n  const failed = results.some((result) => result.status === 'failed');\n  if (json) {\n    if (results.length === 1) {\n      this.process.stdout.write(`${JSON.stringify(results[0])}\\n`);\n    } else {\n      const multi: PolicyLintMultiResult = {\n        version: POLICY_LINT_MULTI_RESULT_VERSION,\n        status: failed ? 'failed' : 'passed',\n        directory: resolvedDir,\n        fix,\n        results,\n      };\n      this.process.stdout.write(`${JSON.stringify(multi)}\\n`);\n    }\n  } else if (results.length === 1) {\n    renderResult(this, results[0]!);\n  } else {\n    results.forEach((result, index) => {\n      if (index > 0) {\n        this.logger.info('');\n      }\n      const relative = path.relative(this.process.cwd(), result.directory) || result.directory;\n      renderResult(this, result, `Policy lint — ${relative}`);\n    });\n  }\n\n  if (failed) {\n    this.process.exitCode = 1;\n  }\n}\n"],"mappings":"4SAkBA,MAAa,EAAmD,CAC9D,cACA,gBACA,SACA,aACD,CAGY,EAA4E,CACvF,cAAe,UACf,gBAAiB,QACjB,OAAQ,iBACR,aAAc,aACf,CCeD,SAAS,EAAa,EAAuB,EAA0B,EAAwB,CACzF,EACF,EAAQ,OAAO,KAAK,GAAG,EAAO,KAAK,EAAQ,CAAC,IAAI,CAEhD,EAAQ,OAAO,KAAK,GAAG,EAAO,KAAK,cAAc,CAAC,IAAI,CAExD,EAAO,OAAO,SAAS,CAAE,OAAM,YAAa,CAC1C,IAAM,EAAQ,IAAW,SAAW,OAAS,IAAW,SAAW,OAAS,OACtE,EACJ,IAAW,SACP,EAAO,MAAM,EAAM,CACnB,IAAW,SACT,EAAO,IAAI,EAAM,CACjB,EAAO,OAAO,EAAM,CACtB,EACJ,IAAS,eAAiB,EAAO,MAAM,IACnC,KAAK,EAAO,MAAM,IAAI,GACtB,IAAS,iBAAmB,EAAO,MAAM,MACvC,KAAK,EAAO,MAAM,MAAM,GACxB,GACR,EAAQ,OAAO,KAAK,GAAG,EAAY,GAAG,EAAwB,KAAQ,IAAU,EAChF,CACE,EAAO,YAAY,OAAS,GAC9B,EAAQ,OAAO,MAAM,GAAG,CAE1B,EAAO,YAAY,QAAS,GAAe,CACzC,IAAM,EAAW,EAAW,KAAO,GAAG,EAAW,KAAK,IAAM,GAC5D,EAAQ,OAAO,MACb,EAAO,IAAI,UAAU,EAAW,KAAK,KAAK,IAAW,EAAW,UAAU,CAC3E,EACD,CACE,EAAO,SAAW,UACpB,EAAQ,OAAO,KAAK,GAAG,CACvB,EAAQ,OAAO,KAAK,EAAO,MAAM,sBAAsB,CAAC,GAExD,EAAQ,OAAO,MAAM,GAAG,CACxB,EAAQ,OAAO,MAAM,EAAO,IAAI,sBAAsB,CAAC,EAa3D,eAAe,EAEb,CAAE,MAAK,gBAAe,QACtB,EACA,EAC2B,CAC3B,IAAM,EAA2B,EAAuB,IAAK,IAAU,CACrE,OACA,OAAQ,UACT,EAAE,CACG,EAAsC,EAAE,CACxC,EAA2B,CAC/B,QAAA,EACA,OAAQ,SACR,UAAW,EACX,MACA,MAAO,CAAE,IAAK,KAAM,MAAO,KAAM,CACjC,SACA,iBAAkB,EAAE,CACpB,WAAY,EAAE,CACd,cACD,CACK,GAAa,EAA8B,IAA2C,CAC1F,EAAO,KAAM,GAAU,EAAM,OAAS,EAAK,CAAE,OAAS,GAElD,GAAY,EAAc,EAAiB,IAAkC,CACjF,EAAY,KAAK,CACf,OACA,SAAU,QACV,UACA,GAAI,EAAiB,CAAE,KAAM,EAAgB,CAAG,EAAE,CACnD,CAAC,EAGJ,GAAI,CAAC,KAAK,GAAG,WAAW,EAAY,EAAI,CAAC,KAAK,GAAG,SAAS,EAAY,CAAC,aAAa,CAQlF,OAPA,EAAU,cAAe,SAAS,CAClC,EACE,oBACA,0DAA0D,IAC1D,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAY,CAC/C,CACD,EAAO,OAAS,SACT,EAGT,IAAM,EAAe,MAAM,EAAwB,KAAK,KAAM,EAAa,EAAO,CAQlF,GAPA,EAAO,MAAQ,CAAE,IAAK,EAAa,IAAK,MAAO,EAAa,MAAO,CACnE,EAAU,cAAe,EAAa,UAAU,CAChD,EAAU,gBAAiB,EAAa,YAAY,CACpD,EAAa,YAAY,QAAS,GAAe,CAC/C,EAAS,EAAW,KAAM,EAAW,QAAQ,EAC7C,CAEE,EAAO,MAAM,IAAK,CACpB,IAAM,EAAa,MAAM,EAAiB,KAAK,KAAM,CACnD,cACA,MACA,gBACA,OACA,eAAgB,8BAChB,SACD,CAAC,CACF,EAAO,iBAAmB,EAAW,iBACrC,EAAO,WAAa,EAAW,WAC/B,EAAU,SAAU,EAAW,OAAO,CACtC,EAAW,YAAY,QAAS,GAAe,CAC7C,EAAS,EAAW,KAAM,EAAW,QAAQ,EAC7C,CAGJ,GAAI,EAAO,MAAM,MAAO,CACtB,IAAM,EAAY,MAAM,EAAiB,KAAK,KAAM,CAAE,cAAa,SAAQ,CAAC,CAC5E,EAAU,aAAc,EAAU,OAAO,CACzC,EAAU,YAAY,QAAS,GAAe,CAC5C,EAAS,EAAW,KAAM,EAAW,QAAQ,EAC7C,CAIJ,MADA,GAAO,OAAS,EAAO,MAAM,CAAE,YAAa,IAAW,SAAS,CAAG,SAAW,SACvE,EAeT,eAAsB,EAEpB,EACA,EAAoB,EACpB,EAAgC,EACjB,CACf,EAAoB,KAAK,QAAQ,CAEjC,GAAM,CAAE,MAAM,GAAO,gBAAgB,GAAO,OAAO,IAAU,EACvD,EAAc,EAA8B,KAAK,QAAQ,KAAK,CAAE,EAAU,CAEhF,GAAI,CAAC,KAAK,GAAG,WAAW,EAAY,EAAI,CAAC,KAAK,GAAG,SAAS,EAAY,CAAC,aAAa,CAAE,CACpF,IAAM,EAA4B,CAChC,QAAA,EACA,OAAQ,SACR,UAAW,EACX,MACA,MAAO,CAAE,IAAK,KAAM,MAAO,KAAM,CACjC,OAAQ,EAAuB,IAAK,IAAU,CAC5C,OACA,OAAQ,IAAS,cAAgB,SAAW,UAC7C,EAAE,CACH,iBAAkB,EAAE,CACpB,WAAY,EAAE,CACd,YAAa,CACX,CACE,KAAM,oBACN,SAAU,QACV,QAAS,0DAA0D,IACnE,KAAM,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAY,CACrD,CACF,CACF,CACG,EACF,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAQ,CAAC,IAAI,CAEzD,EAAa,KAAM,EAAQ,CAE7B,KAAK,QAAQ,SAAW,EACxB,OAGF,IAAM,EAAoB,EAAgC,KAAM,EAAY,CAC5E,GAAI,EAAkB,SAAW,EAAG,CAClC,IAAM,EAA0B,CAC9B,QAAA,EACA,OAAQ,SACR,UAAW,EACX,MACA,MAAO,CAAE,IAAK,KAAM,MAAO,KAAM,CACjC,OAAQ,EAAuB,IAAK,IAAU,CAC5C,OACA,OAAQ,IAAS,cAAgB,SAAW,UAC7C,EAAE,CACH,iBAAkB,EAAE,CACpB,WAAY,EAAE,CACd,YAAa,CACX,CACE,KAAM,kBACN,SAAU,QACV,QACE,6HAEF,KAAM,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAY,EAAI,IACzD,CACF,CACF,CACG,EACF,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAM,CAAC,IAAI,CAEvD,EAAa,KAAM,EAAM,CAE3B,KAAK,QAAQ,SAAW,EACxB,OAGF,IAAM,EAA8B,EAAE,CACtC,IAAK,IAAM,KAAmB,EAC5B,EAAQ,KACN,MAAM,EAAW,KAAK,KAAM,CAAE,MAAK,gBAAe,OAAM,CAAE,EAAiB,EAAO,CACnF,CAGH,IAAM,EAAS,EAAQ,KAAM,GAAW,EAAO,SAAW,SAAS,CACnE,GAAI,EACF,GAAI,EAAQ,SAAW,EACrB,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAQ,GAAG,CAAC,IAAI,KACvD,CACL,IAAM,EAA+B,CACnC,QAAA,EACA,OAAQ,EAAS,SAAW,SAC5B,UAAW,EACX,MACA,UACD,CACD,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAM,CAAC,IAAI,MAEhD,EAAQ,SAAW,EAC5B,EAAa,KAAM,EAAQ,GAAI,CAE/B,EAAQ,SAAS,EAAQ,IAAU,CAC7B,EAAQ,GACV,KAAK,OAAO,KAAK,GAAG,CAEtB,IAAM,EAAW,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAO,UAAU,EAAI,EAAO,UAC/E,EAAa,KAAM,EAAQ,iBAAiB,IAAW,EACvD,CAGA,IACF,KAAK,QAAQ,SAAW"}

package/dist/{impl-Dj4IYEXg.mjs → impl-BBZWhsZx.mjs}

@@ -1,2 +1,2 @@
-import{t as e}from"./markSilentPrivacyRequests-CZIAGpw2.mjs";import{t}from"./done-input-validation-LiTaCEzF.mjs";async function n({auth:n,transcendUrl:r,actions:i,statuses:a,requestIds:o,createdAtBefore:s,createdAtAfter:c,updatedAtBefore:l,updatedAtAfter:u,concurrency:d}){t(this.process),await e({transcendUrl:r,requestActions:i,auth:n,requestIds:o,statuses:a,concurrency:d,createdAtBefore:s,createdAtAfter:c,updatedAtBefore:l,updatedAtAfter:u})}export{n as markSilent};
-//# sourceMappingURL=impl-Dj4IYEXg.mjs.map
+import{t as e}from"./markSilentPrivacyRequests-E3h17a-G.mjs";import{t}from"./done-input-validation-LiTaCEzF.mjs";async function n({auth:n,transcendUrl:r,actions:i,statuses:a,requestIds:o,createdAtBefore:s,createdAtAfter:c,updatedAtBefore:l,updatedAtAfter:u,concurrency:d}){t(this.process),await e({transcendUrl:r,requestActions:i,auth:n,requestIds:o,statuses:a,concurrency:d,createdAtBefore:s,createdAtAfter:c,updatedAtBefore:l,updatedAtAfter:u})}export{n as markSilent};
+//# sourceMappingURL=impl-BBZWhsZx.mjs.map

package/dist/{impl-Dj4IYEXg.mjs.map → impl-BBZWhsZx.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"impl-Dj4IYEXg.mjs","names":[],"sources":["../src/commands/request/mark-silent/impl.ts"],"sourcesContent":["import type { RequestAction, RequestStatus } from '@transcend-io/privacy-types';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { markSilentPrivacyRequests } from '../../../lib/requests/index.js';\n\nexport interface MarkSilentCommandFlags {\n  auth: string;\n  actions: RequestAction[];\n  statuses?: RequestStatus[];\n  requestIds?: string[];\n  createdAtBefore?: Date;\n  createdAtAfter?: Date;\n  updatedAtBefore?: Date;\n  updatedAtAfter?: Date;\n  transcendUrl: string;\n  concurrency: number;\n}\n\nexport async function markSilent(\n  this: LocalContext,\n  {\n    auth,\n    transcendUrl,\n    actions,\n    statuses,\n    requestIds,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n    concurrency,\n  }: MarkSilentCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await markSilentPrivacyRequests({\n    transcendUrl,\n    requestActions: actions,\n    auth,\n    requestIds,\n    statuses,\n    concurrency,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n  });\n}\n"],"mappings":"iHAmBA,eAAsB,EAEpB,CACE,OACA,eACA,UACA,WACA,aACA,kBACA,iBACA,kBACA,iBACA,eAEa,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAA0B,CAC9B,eACA,eAAgB,EAChB,OACA,aACA,WACA,cACA,kBACA,iBACA,kBACA,iBACD,CAAC"}
+{"version":3,"file":"impl-BBZWhsZx.mjs","names":[],"sources":["../src/commands/request/mark-silent/impl.ts"],"sourcesContent":["import type { RequestAction, RequestStatus } from '@transcend-io/privacy-types';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { markSilentPrivacyRequests } from '../../../lib/requests/index.js';\n\nexport interface MarkSilentCommandFlags {\n  auth: string;\n  actions: RequestAction[];\n  statuses?: RequestStatus[];\n  requestIds?: string[];\n  createdAtBefore?: Date;\n  createdAtAfter?: Date;\n  updatedAtBefore?: Date;\n  updatedAtAfter?: Date;\n  transcendUrl: string;\n  concurrency: number;\n}\n\nexport async function markSilent(\n  this: LocalContext,\n  {\n    auth,\n    transcendUrl,\n    actions,\n    statuses,\n    requestIds,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n    concurrency,\n  }: MarkSilentCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await markSilentPrivacyRequests({\n    transcendUrl,\n    requestActions: actions,\n    auth,\n    requestIds,\n    statuses,\n    concurrency,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n  });\n}\n"],"mappings":"iHAmBA,eAAsB,EAEpB,CACE,OACA,eACA,UACA,WACA,aACA,kBACA,iBACA,kBACA,iBACA,eAEa,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAA0B,CAC9B,eACA,eAAgB,EAChB,OACA,aACA,WACA,cACA,kBACA,iBACA,kBACA,iBACD,CAAC"}

package/dist/{impl-7NFxUzSa.mjs → impl-BD4PMYc7.mjs}

@@ -1,2 +1,2 @@
-import{t as e}from"./pullManualEnrichmentIdentifiersToCsv-D710M8kt.mjs";import{t}from"./done-input-validation-LiTaCEzF.mjs";async function n({auth:n,transcendUrl:r,file:i,concurrency:a,actions:o,sombraAuth:s}){t(this.process),await e({file:i,transcendUrl:r,concurrency:a,requestActions:o,auth:n,sombraAuth:s})}export{n as pullIdentifiers};
-//# sourceMappingURL=impl-7NFxUzSa.mjs.map
+import{t as e}from"./pullManualEnrichmentIdentifiersToCsv-BHTHcIcT.mjs";import{t}from"./done-input-validation-LiTaCEzF.mjs";async function n({auth:n,transcendUrl:r,file:i,concurrency:a,actions:o,sombraAuth:s}){t(this.process),await e({file:i,transcendUrl:r,concurrency:a,requestActions:o,auth:n,sombraAuth:s})}export{n as pullIdentifiers};
+//# sourceMappingURL=impl-BD4PMYc7.mjs.map

package/dist/{impl-7NFxUzSa.mjs.map → impl-BD4PMYc7.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"impl-7NFxUzSa.mjs","names":[],"sources":["../src/commands/request/preflight/pull-identifiers/impl.ts"],"sourcesContent":["import type { RequestAction } from '@transcend-io/privacy-types';\n\nimport type { LocalContext } from '../../../../context.js';\nimport { doneInputValidation } from '../../../../lib/cli/done-input-validation.js';\nimport { pullManualEnrichmentIdentifiersToCsv } from '../../../../lib/manual-enrichment/index.js';\n\nexport interface PullIdentifiersCommandFlags {\n  auth: string;\n  sombraAuth?: string;\n  transcendUrl: string;\n  file: string;\n  actions?: RequestAction[];\n  concurrency: number;\n}\n\nexport async function pullIdentifiers(\n  this: LocalContext,\n  { auth, transcendUrl, file, concurrency, actions, sombraAuth }: PullIdentifiersCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await pullManualEnrichmentIdentifiersToCsv({\n    file,\n    transcendUrl,\n    concurrency,\n    requestActions: actions,\n    auth,\n    sombraAuth,\n  });\n}\n"],"mappings":"4HAeA,eAAsB,EAEpB,CAAE,OAAM,eAAc,OAAM,cAAa,UAAS,cACnC,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAAqC,CACzC,OACA,eACA,cACA,eAAgB,EAChB,OACA,aACD,CAAC"}
+{"version":3,"file":"impl-BD4PMYc7.mjs","names":[],"sources":["../src/commands/request/preflight/pull-identifiers/impl.ts"],"sourcesContent":["import type { RequestAction } from '@transcend-io/privacy-types';\n\nimport type { LocalContext } from '../../../../context.js';\nimport { doneInputValidation } from '../../../../lib/cli/done-input-validation.js';\nimport { pullManualEnrichmentIdentifiersToCsv } from '../../../../lib/manual-enrichment/index.js';\n\nexport interface PullIdentifiersCommandFlags {\n  auth: string;\n  sombraAuth?: string;\n  transcendUrl: string;\n  file: string;\n  actions?: RequestAction[];\n  concurrency: number;\n}\n\nexport async function pullIdentifiers(\n  this: LocalContext,\n  { auth, transcendUrl, file, concurrency, actions, sombraAuth }: PullIdentifiersCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await pullManualEnrichmentIdentifiersToCsv({\n    file,\n    transcendUrl,\n    concurrency,\n    requestActions: actions,\n    auth,\n    sombraAuth,\n  });\n}\n"],"mappings":"4HAeA,eAAsB,EAEpB,CAAE,OAAM,eAAc,OAAM,cAAa,UAAS,cACnC,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAAqC,CACzC,OACA,eACA,cACA,eAAgB,EAChB,OACA,aACD,CAAC"}

package/dist/{impl-CaErz960.mjs → impl-BGhYmH5L.mjs}

@@ -1,2 +1,2 @@
-import{t as e}from"./updateConsentManagerVersionToLatest-EJaexjTY.mjs";import{t}from"./validateTranscendAuth-BrVGfq6X.mjs";import{t as n}from"./done-input-validation-LiTaCEzF.mjs";import{ConsentBundleType as r}from"@transcend-io/privacy-types";import i from"colors";import{mapSeries as a}from"@transcend-io/utils";async function o({auth:o,bundleTypes:s=[r.Production,r.Test],deploy:c,transcendUrl:l}){n(this.process);let u=await t(o,this);typeof u==`string`?(await e({deploy:c,transcendUrl:l,auth:u,bundleTypes:s}),this.logger.info(i.green(`Successfully updated Consent Manager!`))):(await a(u,async t=>{this.logger.info(i.magenta(`Updating Consent Manager for organization "${t.organizationName}"...`)),await e({deploy:c,transcendUrl:l,auth:t.apiKey,bundleTypes:s}),this.logger.info(i.green(`Successfully updated Consent Manager for organization "${t.organizationName}"!`))}),this.logger.info(i.green(`Successfully updated Consent Managers!`)))}export{o as updateConsentManager};
-//# sourceMappingURL=impl-CaErz960.mjs.map
+import{t as e}from"./updateConsentManagerVersionToLatest-Cp8jWMFs.mjs";import{t}from"./validateTranscendAuth-BrVGfq6X.mjs";import{t as n}from"./done-input-validation-LiTaCEzF.mjs";import{ConsentBundleType as r}from"@transcend-io/privacy-types";import i from"colors";import{mapSeries as a}from"@transcend-io/utils";async function o({auth:o,bundleTypes:s=[r.Production,r.Test],deploy:c,transcendUrl:l}){n(this.process);let u=await t(o,this);typeof u==`string`?(await e({deploy:c,transcendUrl:l,auth:u,bundleTypes:s}),this.logger.info(i.green(`Successfully updated Consent Manager!`))):(await a(u,async t=>{this.logger.info(i.magenta(`Updating Consent Manager for organization "${t.organizationName}"...`)),await e({deploy:c,transcendUrl:l,auth:t.apiKey,bundleTypes:s}),this.logger.info(i.green(`Successfully updated Consent Manager for organization "${t.organizationName}"!`))}),this.logger.info(i.green(`Successfully updated Consent Managers!`)))}export{o as updateConsentManager};
+//# sourceMappingURL=impl-BGhYmH5L.mjs.map

package/dist/{impl-CaErz960.mjs.map → impl-BGhYmH5L.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"impl-CaErz960.mjs","names":[],"sources":["../src/commands/consent/update-consent-manager/impl.ts"],"sourcesContent":["import { ConsentBundleType } from '@transcend-io/privacy-types';\nimport { mapSeries } from '@transcend-io/utils';\nimport colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { validateTranscendAuth } from '../../../lib/api-keys/index.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { updateConsentManagerVersionToLatest } from '../../../lib/consent-manager/index.js';\n\nexport interface UpdateConsentManagerCommandFlags {\n  auth: string;\n  bundleTypes: ConsentBundleType[];\n  deploy: boolean;\n  transcendUrl: string;\n}\n\nexport async function updateConsentManager(\n  this: LocalContext,\n  {\n    auth,\n    bundleTypes = [ConsentBundleType.Production, ConsentBundleType.Test],\n    deploy,\n    transcendUrl,\n  }: UpdateConsentManagerCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  // Parse authentication as API key or path to list of API keys\n  const apiKeyOrList = await validateTranscendAuth(auth, this);\n\n  // Handle single update\n  if (typeof apiKeyOrList === 'string') {\n    // Update consent manager\n    await updateConsentManagerVersionToLatest({\n      deploy,\n      transcendUrl,\n      auth: apiKeyOrList,\n      bundleTypes,\n    });\n    this.logger.info(colors.green('Successfully updated Consent Manager!'));\n  } else {\n    await mapSeries(apiKeyOrList, async (apiKey) => {\n      this.logger.info(\n        colors.magenta(`Updating Consent Manager for organization \"${apiKey.organizationName}\"...`),\n      );\n\n      await updateConsentManagerVersionToLatest({\n        deploy,\n        transcendUrl,\n        auth: apiKey.apiKey,\n        bundleTypes,\n      });\n\n      this.logger.info(\n        colors.green(\n          `Successfully updated Consent Manager for organization \"${apiKey.organizationName}\"!`,\n        ),\n      );\n    });\n    this.logger.info(colors.green('Successfully updated Consent Managers!'));\n  }\n}\n"],"mappings":"0TAgBA,eAAsB,EAEpB,CACE,OACA,cAAc,CAAC,EAAkB,WAAY,EAAkB,KAAK,CACpE,SACA,gBAEa,CACf,EAAoB,KAAK,QAAQ,CAGjC,IAAM,EAAe,MAAM,EAAsB,EAAM,KAAK,CAGxD,OAAO,GAAiB,UAE1B,MAAM,EAAoC,CACxC,SACA,eACA,KAAM,EACN,cACD,CAAC,CACF,KAAK,OAAO,KAAK,EAAO,MAAM,wCAAwC,CAAC,GAEvE,MAAM,EAAU,EAAc,KAAO,IAAW,CAC9C,KAAK,OAAO,KACV,EAAO,QAAQ,8CAA8C,EAAO,iBAAiB,MAAM,CAC5F,CAED,MAAM,EAAoC,CACxC,SACA,eACA,KAAM,EAAO,OACb,cACD,CAAC,CAEF,KAAK,OAAO,KACV,EAAO,MACL,0DAA0D,EAAO,iBAAiB,IACnF,CACF,EACD,CACF,KAAK,OAAO,KAAK,EAAO,MAAM,yCAAyC,CAAC"}
+{"version":3,"file":"impl-BGhYmH5L.mjs","names":[],"sources":["../src/commands/consent/update-consent-manager/impl.ts"],"sourcesContent":["import { ConsentBundleType } from '@transcend-io/privacy-types';\nimport { mapSeries } from '@transcend-io/utils';\nimport colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { validateTranscendAuth } from '../../../lib/api-keys/index.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { updateConsentManagerVersionToLatest } from '../../../lib/consent-manager/index.js';\n\nexport interface UpdateConsentManagerCommandFlags {\n  auth: string;\n  bundleTypes: ConsentBundleType[];\n  deploy: boolean;\n  transcendUrl: string;\n}\n\nexport async function updateConsentManager(\n  this: LocalContext,\n  {\n    auth,\n    bundleTypes = [ConsentBundleType.Production, ConsentBundleType.Test],\n    deploy,\n    transcendUrl,\n  }: UpdateConsentManagerCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  // Parse authentication as API key or path to list of API keys\n  const apiKeyOrList = await validateTranscendAuth(auth, this);\n\n  // Handle single update\n  if (typeof apiKeyOrList === 'string') {\n    // Update consent manager\n    await updateConsentManagerVersionToLatest({\n      deploy,\n      transcendUrl,\n      auth: apiKeyOrList,\n      bundleTypes,\n    });\n    this.logger.info(colors.green('Successfully updated Consent Manager!'));\n  } else {\n    await mapSeries(apiKeyOrList, async (apiKey) => {\n      this.logger.info(\n        colors.magenta(`Updating Consent Manager for organization \"${apiKey.organizationName}\"...`),\n      );\n\n      await updateConsentManagerVersionToLatest({\n        deploy,\n        transcendUrl,\n        auth: apiKey.apiKey,\n        bundleTypes,\n      });\n\n      this.logger.info(\n        colors.green(\n          `Successfully updated Consent Manager for organization \"${apiKey.organizationName}\"!`,\n        ),\n      );\n    });\n    this.logger.info(colors.green('Successfully updated Consent Managers!'));\n  }\n}\n"],"mappings":"0TAgBA,eAAsB,EAEpB,CACE,OACA,cAAc,CAAC,EAAkB,WAAY,EAAkB,KAAK,CACpE,SACA,gBAEa,CACf,EAAoB,KAAK,QAAQ,CAGjC,IAAM,EAAe,MAAM,EAAsB,EAAM,KAAK,CAGxD,OAAO,GAAiB,UAE1B,MAAM,EAAoC,CACxC,SACA,eACA,KAAM,EACN,cACD,CAAC,CACF,KAAK,OAAO,KAAK,EAAO,MAAM,wCAAwC,CAAC,GAEvE,MAAM,EAAU,EAAc,KAAO,IAAW,CAC9C,KAAK,OAAO,KACV,EAAO,QAAQ,8CAA8C,EAAO,iBAAiB,MAAM,CAC5F,CAED,MAAM,EAAoC,CACxC,SACA,eACA,KAAM,EAAO,OACb,cACD,CAAC,CAEF,KAAK,OAAO,KACV,EAAO,MACL,0DAA0D,EAAO,iBAAiB,IACnF,CACF,EACD,CACF,KAAK,OAAO,KAAK,EAAO,MAAM,yCAAyC,CAAC"}

package/dist/{impl-nWslO7Lu.mjs → impl-BNc1Lcus.mjs}

@@ -1,2 +1,2 @@
-import{t as e}from"./downloadPrivacyRequestFiles-CF_QjkR9.mjs";import{t}from"./done-input-validation-LiTaCEzF.mjs";import{RequestStatus as n}from"@transcend-io/privacy-types";async function r({auth:r,transcendUrl:i,folderPath:a,requestIds:o,statuses:s=[n.Approving,n.Downloadable],concurrency:c,createdAtBefore:l,createdAtAfter:u,updatedAtBefore:d,updatedAtAfter:f,approveAfterDownload:p}){t(this.process),await e({transcendUrl:i,auth:r,folderPath:a,requestIds:o,statuses:s,concurrency:c,createdAtBefore:l,createdAtAfter:u,updatedAtBefore:d,updatedAtAfter:f,approveAfterDownload:p})}export{r as downloadFiles};
-//# sourceMappingURL=impl-nWslO7Lu.mjs.map
+import{t as e}from"./downloadPrivacyRequestFiles-BvlzD_04.mjs";import{t}from"./done-input-validation-LiTaCEzF.mjs";import{RequestStatus as n}from"@transcend-io/privacy-types";async function r({auth:r,transcendUrl:i,folderPath:a,requestIds:o,statuses:s=[n.Approving,n.Downloadable],concurrency:c,createdAtBefore:l,createdAtAfter:u,updatedAtBefore:d,updatedAtAfter:f,approveAfterDownload:p}){t(this.process),await e({transcendUrl:i,auth:r,folderPath:a,requestIds:o,statuses:s,concurrency:c,createdAtBefore:l,createdAtAfter:u,updatedAtBefore:d,updatedAtAfter:f,approveAfterDownload:p})}export{r as downloadFiles};
+//# sourceMappingURL=impl-BNc1Lcus.mjs.map

package/dist/{impl-nWslO7Lu.mjs.map → impl-BNc1Lcus.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"impl-nWslO7Lu.mjs","names":[],"sources":["../src/commands/request/download-files/impl.ts"],"sourcesContent":["import { RequestStatus } from '@transcend-io/privacy-types';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { downloadPrivacyRequestFiles } from '../../../lib/requests/index.js';\n\nexport interface DownloadFilesCommandFlags {\n  auth: string;\n  sombraAuth?: string;\n  concurrency: number;\n  requestIds?: string[];\n  statuses?: RequestStatus[];\n  folderPath: string;\n  createdAtBefore?: Date;\n  createdAtAfter?: Date;\n  updatedAtBefore?: Date;\n  updatedAtAfter?: Date;\n  approveAfterDownload: boolean;\n  transcendUrl: string;\n}\n\nexport async function downloadFiles(\n  this: LocalContext,\n  {\n    auth,\n    transcendUrl,\n    folderPath,\n    requestIds,\n    statuses = [RequestStatus.Approving, RequestStatus.Downloadable],\n    concurrency,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n    approveAfterDownload,\n  }: DownloadFilesCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await downloadPrivacyRequestFiles({\n    transcendUrl,\n    auth,\n    folderPath,\n    requestIds,\n    statuses,\n    concurrency,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n    approveAfterDownload,\n  });\n}\n"],"mappings":"+KAqBA,eAAsB,EAEpB,CACE,OACA,eACA,aACA,aACA,WAAW,CAAC,EAAc,UAAW,EAAc,aAAa,CAChE,cACA,kBACA,iBACA,kBACA,iBACA,wBAEa,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAA4B,CAChC,eACA,OACA,aACA,aACA,WACA,cACA,kBACA,iBACA,kBACA,iBACA,uBACD,CAAC"}
+{"version":3,"file":"impl-BNc1Lcus.mjs","names":[],"sources":["../src/commands/request/download-files/impl.ts"],"sourcesContent":["import { RequestStatus } from '@transcend-io/privacy-types';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { downloadPrivacyRequestFiles } from '../../../lib/requests/index.js';\n\nexport interface DownloadFilesCommandFlags {\n  auth: string;\n  sombraAuth?: string;\n  concurrency: number;\n  requestIds?: string[];\n  statuses?: RequestStatus[];\n  folderPath: string;\n  createdAtBefore?: Date;\n  createdAtAfter?: Date;\n  updatedAtBefore?: Date;\n  updatedAtAfter?: Date;\n  approveAfterDownload: boolean;\n  transcendUrl: string;\n}\n\nexport async function downloadFiles(\n  this: LocalContext,\n  {\n    auth,\n    transcendUrl,\n    folderPath,\n    requestIds,\n    statuses = [RequestStatus.Approving, RequestStatus.Downloadable],\n    concurrency,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n    approveAfterDownload,\n  }: DownloadFilesCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await downloadPrivacyRequestFiles({\n    transcendUrl,\n    auth,\n    folderPath,\n    requestIds,\n    statuses,\n    concurrency,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n    approveAfterDownload,\n  });\n}\n"],"mappings":"+KAqBA,eAAsB,EAEpB,CACE,OACA,eACA,aACA,aACA,WAAW,CAAC,EAAc,UAAW,EAAc,aAAa,CAChE,cACA,kBACA,iBACA,kBACA,iBACA,wBAEa,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAA4B,CAChC,eACA,OACA,aACA,aACA,WACA,cACA,kBACA,iBACA,kBACA,iBACA,uBACD,CAAC"}

package/dist/{impl-BvL9wElZ.mjs → impl-B_P9kAcg.mjs}

@@ -1,2 +1,2 @@
-import{t as e}from"./skipPreflightJobs-BkTH4QOf.mjs";import{t}from"./done-input-validation-LiTaCEzF.mjs";async function n({auth:n,transcendUrl:r,enricherIds:i}){t(this.process),await e({transcendUrl:r,auth:n,enricherIds:i})}export{n as skipPreflightJobs};
-//# sourceMappingURL=impl-BvL9wElZ.mjs.map
+import{t as e}from"./skipPreflightJobs-ClvnPd8r.mjs";import{t}from"./done-input-validation-LiTaCEzF.mjs";async function n({auth:n,transcendUrl:r,enricherIds:i}){t(this.process),await e({transcendUrl:r,auth:n,enricherIds:i})}export{n as skipPreflightJobs};
+//# sourceMappingURL=impl-B_P9kAcg.mjs.map

package/dist/{impl-BvL9wElZ.mjs.map → impl-B_P9kAcg.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"impl-BvL9wElZ.mjs","names":["skipPreflightJobsHelper"],"sources":["../src/commands/request/skip-preflight-jobs/impl.ts"],"sourcesContent":["import type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { skipPreflightJobs as skipPreflightJobsHelper } from '../../../lib/requests/index.js';\n\nexport interface SkipPreflightJobsCommandFlags {\n  auth: string;\n  enricherIds: string[];\n  transcendUrl: string;\n}\n\nexport async function skipPreflightJobs(\n  this: LocalContext,\n  { auth, transcendUrl, enricherIds }: SkipPreflightJobsCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await skipPreflightJobsHelper({\n    transcendUrl,\n    auth,\n    enricherIds,\n  });\n}\n"],"mappings":"yGAUA,eAAsB,EAEpB,CAAE,OAAM,eAAc,eACP,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAMA,EAAwB,CAC5B,eACA,OACA,cACD,CAAC"}
+{"version":3,"file":"impl-B_P9kAcg.mjs","names":["skipPreflightJobsHelper"],"sources":["../src/commands/request/skip-preflight-jobs/impl.ts"],"sourcesContent":["import type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { skipPreflightJobs as skipPreflightJobsHelper } from '../../../lib/requests/index.js';\n\nexport interface SkipPreflightJobsCommandFlags {\n  auth: string;\n  enricherIds: string[];\n  transcendUrl: string;\n}\n\nexport async function skipPreflightJobs(\n  this: LocalContext,\n  { auth, transcendUrl, enricherIds }: SkipPreflightJobsCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await skipPreflightJobsHelper({\n    transcendUrl,\n    auth,\n    enricherIds,\n  });\n}\n"],"mappings":"yGAUA,eAAsB,EAEpB,CAAE,OAAM,eAAc,eACP,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAMA,EAAwB,CAC5B,eACA,OACA,cACD,CAAC"}

package/dist/{impl-Bhmoagby.mjs → impl-BhFUhO0f.mjs}

@@ -1,2 +1,2 @@
-import{t as e}from"./pushManualEnrichmentIdentifiersFromCsv-6xOUhOpJ.mjs";import{t}from"./done-input-validation-LiTaCEzF.mjs";async function n({auth:n,transcendUrl:r,file:i,enricherId:a,concurrency:o,markSilent:s,sombraAuth:c}){t(this.process),await e({file:i,transcendUrl:r,enricherId:a,concurrency:o,markSilent:s,auth:n,sombraAuth:c})}export{n as pushIdentifiers};
-//# sourceMappingURL=impl-Bhmoagby.mjs.map
+import{t as e}from"./pushManualEnrichmentIdentifiersFromCsv-DD34XZcc.mjs";import{t}from"./done-input-validation-LiTaCEzF.mjs";async function n({auth:n,transcendUrl:r,file:i,enricherId:a,concurrency:o,markSilent:s,sombraAuth:c}){t(this.process),await e({file:i,transcendUrl:r,enricherId:a,concurrency:o,markSilent:s,auth:n,sombraAuth:c})}export{n as pushIdentifiers};
+//# sourceMappingURL=impl-BhFUhO0f.mjs.map

package/dist/{impl-Bhmoagby.mjs.map → impl-BhFUhO0f.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"impl-Bhmoagby.mjs","names":[],"sources":["../src/commands/request/preflight/push-identifiers/impl.ts"],"sourcesContent":["import type { LocalContext } from '../../../../context.js';\nimport { doneInputValidation } from '../../../../lib/cli/done-input-validation.js';\nimport { pushManualEnrichmentIdentifiersFromCsv } from '../../../../lib/manual-enrichment/index.js';\n\nexport interface PushIdentifiersCommandFlags {\n  auth: string;\n  enricherId: string;\n  sombraAuth?: string;\n  transcendUrl: string;\n  file: string;\n  markSilent: boolean;\n  concurrency: number;\n}\n\nexport async function pushIdentifiers(\n  this: LocalContext,\n  {\n    auth,\n    transcendUrl,\n    file,\n    enricherId,\n    concurrency,\n    markSilent,\n    sombraAuth,\n  }: PushIdentifiersCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await pushManualEnrichmentIdentifiersFromCsv({\n    file,\n    transcendUrl,\n    enricherId,\n    concurrency,\n    markSilent,\n    auth,\n    sombraAuth,\n  });\n}\n"],"mappings":"8HAcA,eAAsB,EAEpB,CACE,OACA,eACA,OACA,aACA,cACA,aACA,cAEa,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAAuC,CAC3C,OACA,eACA,aACA,cACA,aACA,OACA,aACD,CAAC"}
+{"version":3,"file":"impl-BhFUhO0f.mjs","names":[],"sources":["../src/commands/request/preflight/push-identifiers/impl.ts"],"sourcesContent":["import type { LocalContext } from '../../../../context.js';\nimport { doneInputValidation } from '../../../../lib/cli/done-input-validation.js';\nimport { pushManualEnrichmentIdentifiersFromCsv } from '../../../../lib/manual-enrichment/index.js';\n\nexport interface PushIdentifiersCommandFlags {\n  auth: string;\n  enricherId: string;\n  sombraAuth?: string;\n  transcendUrl: string;\n  file: string;\n  markSilent: boolean;\n  concurrency: number;\n}\n\nexport async function pushIdentifiers(\n  this: LocalContext,\n  {\n    auth,\n    transcendUrl,\n    file,\n    enricherId,\n    concurrency,\n    markSilent,\n    sombraAuth,\n  }: PushIdentifiersCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await pushManualEnrichmentIdentifiersFromCsv({\n    file,\n    transcendUrl,\n    enricherId,\n    concurrency,\n    markSilent,\n    auth,\n    sombraAuth,\n  });\n}\n"],"mappings":"8HAcA,eAAsB,EAEpB,CACE,OACA,eACA,OACA,aACA,cACA,aACA,cAEa,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAAuC,CAC3C,OACA,eACA,aACA,cACA,aACA,OACA,aACD,CAAC"}

package/dist/{impl-DY_TNWaO.mjs → impl-Bq99M_E8.mjs}

@@ -1,2 +1,2 @@
-import{t as e}from"./notifyPrivacyRequestsAdditionalTime-KiF9dkuk.mjs";import{t}from"./done-input-validation-LiTaCEzF.mjs";async function n({auth:n,transcendUrl:r,createdAtBefore:i,createdAtAfter:a,updatedAtBefore:o,updatedAtAfter:s,actions:c,daysLeft:l,days:u,requestIds:d,emailTemplate:f,concurrency:p}){t(this.process),await e({transcendUrl:r,requestActions:c,auth:n,emailTemplate:f,days:u,daysLeft:l,requestIds:d,concurrency:p,createdAtBefore:i,createdAtAfter:a,updatedAtBefore:o,updatedAtAfter:s})}export{n as notifyAdditionalTime};
-//# sourceMappingURL=impl-DY_TNWaO.mjs.map
+import{t as e}from"./notifyPrivacyRequestsAdditionalTime-DfvVgEqC.mjs";import{t}from"./done-input-validation-LiTaCEzF.mjs";async function n({auth:n,transcendUrl:r,createdAtBefore:i,createdAtAfter:a,updatedAtBefore:o,updatedAtAfter:s,actions:c,daysLeft:l,days:u,requestIds:d,emailTemplate:f,concurrency:p}){t(this.process),await e({transcendUrl:r,requestActions:c,auth:n,emailTemplate:f,days:u,daysLeft:l,requestIds:d,concurrency:p,createdAtBefore:i,createdAtAfter:a,updatedAtBefore:o,updatedAtAfter:s})}export{n as notifyAdditionalTime};
+//# sourceMappingURL=impl-Bq99M_E8.mjs.map

package/dist/{impl-DY_TNWaO.mjs.map → impl-Bq99M_E8.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"impl-DY_TNWaO.mjs","names":[],"sources":["../src/commands/request/notify-additional-time/impl.ts"],"sourcesContent":["import type { RequestAction } from '@transcend-io/privacy-types';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { notifyPrivacyRequestsAdditionalTime } from '../../../lib/requests/index.js';\n\nexport interface NotifyAdditionalTimeCommandFlags {\n  auth: string;\n  createdAtBefore: Date;\n  createdAtAfter?: Date;\n  updatedAtBefore?: Date;\n  updatedAtAfter?: Date;\n  actions?: RequestAction[];\n  daysLeft: number;\n  days: number;\n  requestIds?: string[];\n  emailTemplate: string;\n  transcendUrl: string;\n  concurrency: number;\n}\n\nexport async function notifyAdditionalTime(\n  this: LocalContext,\n  {\n    auth,\n    transcendUrl,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n    actions,\n    daysLeft,\n    days,\n    requestIds,\n    emailTemplate,\n    concurrency,\n  }: NotifyAdditionalTimeCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await notifyPrivacyRequestsAdditionalTime({\n    transcendUrl,\n    requestActions: actions,\n    auth,\n    emailTemplate,\n    days,\n    daysLeft,\n    requestIds,\n    concurrency,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n  });\n}\n"],"mappings":"2HAqBA,eAAsB,EAEpB,CACE,OACA,eACA,kBACA,iBACA,kBACA,iBACA,UACA,WACA,OACA,aACA,gBACA,eAEa,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAAoC,CACxC,eACA,eAAgB,EAChB,OACA,gBACA,OACA,WACA,aACA,cACA,kBACA,iBACA,kBACA,iBACD,CAAC"}
+{"version":3,"file":"impl-Bq99M_E8.mjs","names":[],"sources":["../src/commands/request/notify-additional-time/impl.ts"],"sourcesContent":["import type { RequestAction } from '@transcend-io/privacy-types';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { notifyPrivacyRequestsAdditionalTime } from '../../../lib/requests/index.js';\n\nexport interface NotifyAdditionalTimeCommandFlags {\n  auth: string;\n  createdAtBefore: Date;\n  createdAtAfter?: Date;\n  updatedAtBefore?: Date;\n  updatedAtAfter?: Date;\n  actions?: RequestAction[];\n  daysLeft: number;\n  days: number;\n  requestIds?: string[];\n  emailTemplate: string;\n  transcendUrl: string;\n  concurrency: number;\n}\n\nexport async function notifyAdditionalTime(\n  this: LocalContext,\n  {\n    auth,\n    transcendUrl,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n    actions,\n    daysLeft,\n    days,\n    requestIds,\n    emailTemplate,\n    concurrency,\n  }: NotifyAdditionalTimeCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  await notifyPrivacyRequestsAdditionalTime({\n    transcendUrl,\n    requestActions: actions,\n    auth,\n    emailTemplate,\n    days,\n    daysLeft,\n    requestIds,\n    concurrency,\n    createdAtBefore,\n    createdAtAfter,\n    updatedAtBefore,\n    updatedAtAfter,\n  });\n}\n"],"mappings":"2HAqBA,eAAsB,EAEpB,CACE,OACA,eACA,kBACA,iBACA,kBACA,iBACA,UACA,WACA,OACA,aACA,gBACA,eAEa,CACf,EAAoB,KAAK,QAAQ,CAEjC,MAAM,EAAoC,CACxC,eACA,eAAgB,EAChB,OACA,gBACA,OACA,WACA,aACA,cACA,kBACA,iBACA,kBACA,iBACD,CAAC"}

package/dist/{impl-B9vbcV8J.mjs → impl-CCq87iM2.mjs}

@@ -1,2 +1,2 @@
-import{g as e}from"./constants-I694qbRg.mjs";import{r as t,t as n}from"./project-plan-output-BHHlkLxe.mjs";import{t as r}from"./project-discovery-CWRjlFnC.mjs";import{t as i}from"./done-input-validation-LiTaCEzF.mjs";import{n as a}from"./project-discovery-g29vd44a.mjs";import{i as o,n as s,r as c,t as l}from"./prompts-BhXfYD6g.mjs";import{t as u}from"./run-captured-process-BjaSDWXG.mjs";import{r as d,t as f}from"./deno-runtime-CB2HBach.mjs";import{t as p}from"./scaffold-model-CUZER0BC.mjs";import{t as m}from"./project-plan-apply-Bg_1eMX9.mjs";import{c as h,i as g,n as _,s as v}from"./scaffold-planning-Bp_yqZWx.mjs";import y from"colors";import{CUSTOM_FUNCTION_TYPES_VERSION as b}from"@transcend-io/custom-function-types";const x={[p.Deno]:`Deno configuration`,[p.Editor]:`VS Code settings`,[p.Skill]:`Agent skill`,[p.Ci]:`GitHub Actions`},S=Object.values(p);async function C(C,w){i(this.process);try{let i=a(this,{...w?{directory:w}:{},...C.manifest?{manifest:C.manifest}:{}}),l=new s(this),T=c(C,this.process.stdin.isTTY,this.process.stderr.isTTY),E=await o(l,{features:S,labels:x,enabled:{[p.Deno]:C.deno,[p.Editor]:C.editor,[p.Skill]:C.skill,[p.Ci]:C.ci},interactive:T}),D=_({state:i,snapshots:r(this,i.projectRoot,g(i,{features:E})),contractVersion:b,cliVersion:e},{features:E});if(E.includes(p.Deno)){let e=await u(`deno`,[`--version`],{cwd:this.process.cwd()},this);if(e.error?.code===`ENOENT`)D.warnings.push(`Deno 2.x is not installed. Install it from ${f}`);else if(e.code!==0)D.warnings.push(`Deno was found, but its version could not be determined. Deno 2.x is required. See ${f}`);else{let t=d(e.stdout);t.level!==`compatible`&&D.warnings.push(t.message)}}C.json||this.logger.info(t(D,{cwd:this.process.cwd(),title:`Custom Function plan`,details:[{label:`Target`,path:D.targetDirectory},{label:`Manifest`,path:D.manifestPath}]}));let O=D.changes.length===0||C.dryRun;if(D.changes.length>0&&!C.dryRun)if(C.yes)O=!0;else if(T)O=await l.confirm(`Apply this complete plan?`,!0);else throw Error(`The plan requires approval in a non-interactive invocation. Review with --dryRun, then pass --yes.`);O&&!C.dryRun&&D.changes.length>0&&await m(this,D);let k=O&&!C.dryRun&&D.changes.length>0,A=O&&!C.dryRun,j=h({targetDirectory:n(this.process.cwd(),i.targetDirectory),manifestPath:n(this.process.cwd(),i.manifestPath),cliVersion:e,hasSkill:A&&E.includes(p.Skill),hasGithubWorkflow:A&&E.includes(p.Ci)&&!!(i.repositoryRoot&&i.usesGithub)}),M=v(D,{applied:k,dryRun:C.dryRun,cwd:this.process.cwd(),aiHandoff:j});if(C.json){this.process.stdout.write(`${JSON.stringify(M)}\n`);return}if(C.dryRun){this.logger.info(y.yellow(`Dry run complete. No changes were written.`));return}if(!O){this.logger.info(y.yellow(`No changes applied.`));return}if(D.changes.length===0){this.logger.info(y.green(`Custom Function project is already initialized.`));return}this.logger.info(y.green(`Custom Function project initialized.`)),D.nextSteps.length>0&&(this.logger.info(`\n${y.bold(`Next steps`)}`),D.nextSteps.forEach(e=>this.logger.info(e))),this.logger.info(`\n${y.bold(`AI handoff — paste into your coding agent`)}`),this.logger.info(j)}catch(e){throw e instanceof l&&this.process.exit(130),e}}export{C as init};
-//# sourceMappingURL=impl-B9vbcV8J.mjs.map
+import{g as e}from"./constants-BUOpqzcO.mjs";import{r as t,t as n}from"./project-plan-output-BHHlkLxe.mjs";import{t as r}from"./project-discovery-CWRjlFnC.mjs";import{t as i}from"./done-input-validation-LiTaCEzF.mjs";import{n as a}from"./project-discovery-g29vd44a.mjs";import{i as o,n as s,r as c,t as l}from"./prompts-BhXfYD6g.mjs";import{t as u}from"./run-captured-process-BjaSDWXG.mjs";import{r as d,t as f}from"./deno-runtime-CB2HBach.mjs";import{t as p}from"./scaffold-model-CUZER0BC.mjs";import{t as m}from"./project-plan-apply-Bg_1eMX9.mjs";import{c as h,i as g,n as _,s as v}from"./scaffold-planning-Bp_yqZWx.mjs";import y from"colors";import{CUSTOM_FUNCTION_TYPES_VERSION as b}from"@transcend-io/custom-function-types";const x={[p.Deno]:`Deno configuration`,[p.Editor]:`VS Code settings`,[p.Skill]:`Agent skill`,[p.Ci]:`GitHub Actions`},S=Object.values(p);async function C(C,w){i(this.process);try{let i=a(this,{...w?{directory:w}:{},...C.manifest?{manifest:C.manifest}:{}}),l=new s(this),T=c(C,this.process.stdin.isTTY,this.process.stderr.isTTY),E=await o(l,{features:S,labels:x,enabled:{[p.Deno]:C.deno,[p.Editor]:C.editor,[p.Skill]:C.skill,[p.Ci]:C.ci},interactive:T}),D=_({state:i,snapshots:r(this,i.projectRoot,g(i,{features:E})),contractVersion:b,cliVersion:e},{features:E});if(E.includes(p.Deno)){let e=await u(`deno`,[`--version`],{cwd:this.process.cwd()},this);if(e.error?.code===`ENOENT`)D.warnings.push(`Deno 2.x is not installed. Install it from ${f}`);else if(e.code!==0)D.warnings.push(`Deno was found, but its version could not be determined. Deno 2.x is required. See ${f}`);else{let t=d(e.stdout);t.level!==`compatible`&&D.warnings.push(t.message)}}C.json||this.logger.info(t(D,{cwd:this.process.cwd(),title:`Custom Function plan`,details:[{label:`Target`,path:D.targetDirectory},{label:`Manifest`,path:D.manifestPath}]}));let O=D.changes.length===0||C.dryRun;if(D.changes.length>0&&!C.dryRun)if(C.yes)O=!0;else if(T)O=await l.confirm(`Apply this complete plan?`,!0);else throw Error(`The plan requires approval in a non-interactive invocation. Review with --dryRun, then pass --yes.`);O&&!C.dryRun&&D.changes.length>0&&await m(this,D);let k=O&&!C.dryRun&&D.changes.length>0,A=O&&!C.dryRun,j=h({targetDirectory:n(this.process.cwd(),i.targetDirectory),manifestPath:n(this.process.cwd(),i.manifestPath),cliVersion:e,hasSkill:A&&E.includes(p.Skill),hasGithubWorkflow:A&&E.includes(p.Ci)&&!!(i.repositoryRoot&&i.usesGithub)}),M=v(D,{applied:k,dryRun:C.dryRun,cwd:this.process.cwd(),aiHandoff:j});if(C.json){this.process.stdout.write(`${JSON.stringify(M)}\n`);return}if(C.dryRun){this.logger.info(y.yellow(`Dry run complete. No changes were written.`));return}if(!O){this.logger.info(y.yellow(`No changes applied.`));return}if(D.changes.length===0){this.logger.info(y.green(`Custom Function project is already initialized.`));return}this.logger.info(y.green(`Custom Function project initialized.`)),D.nextSteps.length>0&&(this.logger.info(`\n${y.bold(`Next steps`)}`),D.nextSteps.forEach(e=>this.logger.info(e))),this.logger.info(`\n${y.bold(`AI handoff — paste into your coding agent`)}`),this.logger.info(j)}catch(e){throw e instanceof l&&this.process.exit(130),e}}export{C as init};
+//# sourceMappingURL=impl-CCq87iM2.mjs.map

package/dist/{impl-B9vbcV8J.mjs.map → impl-CCq87iM2.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"impl-B9vbcV8J.mjs","names":["CLI_VERSION"],"sources":["../src/commands/custom-functions/init/impl.ts"],"sourcesContent":["import { CUSTOM_FUNCTION_TYPES_VERSION } from '@transcend-io/custom-function-types';\nimport colors from 'colors';\n\nimport { version as CLI_VERSION } from '../../../constants.js';\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { runCapturedProcess } from '../../../lib/cli/run-captured-process.js';\nimport { buildInitAiHandoff } from '../../../lib/custom-functions/ai-handoff.js';\nimport {\n  DENO_INSTALL_URL,\n  getDenoRuntimeCompatibility,\n  SUPPORTED_DENO_MAJOR_VERSION,\n} from '../../../lib/custom-functions/deno-runtime.js';\nimport { discoverCustomFunctionProject } from '../../../lib/custom-functions/project-discovery.js';\nimport {\n  CustomFunctionSetupFeature,\n  type CustomFunctionSetupFeature as CustomFunctionSetupFeatureType,\n} from '../../../lib/custom-functions/scaffold-model.js';\nimport { buildPlanResult } from '../../../lib/custom-functions/scaffold-output.js';\nimport {\n  buildInitPlan,\n  getInitPlanningCandidatePaths,\n} from '../../../lib/custom-functions/scaffold-planning.js';\nimport { collectPlanningSnapshots } from '../../../lib/scaffolding/project-discovery.js';\nimport { applyProjectPlan } from '../../../lib/scaffolding/project-plan-apply.js';\nimport {\n  displayProjectPath,\n  renderProjectPlan,\n} from '../../../lib/scaffolding/project-plan-output.js';\nimport {\n  isInteractivePromptInvocation,\n  PromptCancelledError,\n  resolveSetupFeatures,\n  ScaffoldPrompts,\n} from '../../../lib/scaffolding/prompts.js';\n\n/** Flags for `custom-functions init`. */\nexport interface CustomFunctionInitFlags {\n  /** Explicit manifest path. */\n  manifest?: string;\n  /** Install Deno configuration. */\n  deno?: boolean;\n  /** Install editor recommendations. */\n  editor?: boolean;\n  /** Install the coding-agent skill. */\n  skill?: boolean;\n  /** Install GitHub Actions validation. */\n  ci?: boolean;\n  /** Disable prompts. */\n  noInteractive: boolean;\n  /** Render but do not apply. */\n  dryRun: boolean;\n  /** Approve the final displayed plan. */\n  yes: boolean;\n  /** Emit one stable JSON result on stdout. */\n  json: boolean;\n}\n\n/** User-facing setup labels. */\nconst SETUP_LABELS: Readonly<Record<CustomFunctionSetupFeatureType, string>> = {\n  [CustomFunctionSetupFeature.Deno]: 'Deno configuration',\n  [CustomFunctionSetupFeature.Editor]: 'VS Code settings',\n  [CustomFunctionSetupFeature.Skill]: 'Agent skill',\n  [CustomFunctionSetupFeature.Ci]: 'GitHub Actions',\n};\n\n/** All optional setup features in stable prompt order. */\nconst ALL_SETUP_FEATURES = Object.values(CustomFunctionSetupFeature);\n\n/**\n * Initialize a credential-free local Custom Function project.\n *\n * @param this - CLI context\n * @param flags - Scaffold and interaction flags\n * @param directory - Optional target directory\n */\nexport async function init(\n  this: LocalContext,\n  flags: CustomFunctionInitFlags,\n  directory?: string,\n): Promise<void> {\n  doneInputValidation(this.process);\n  try {\n    const state = discoverCustomFunctionProject(this, {\n      ...(directory ? { directory } : {}),\n      ...(flags.manifest ? { manifest: flags.manifest } : {}),\n    });\n    const prompts = new ScaffoldPrompts(this);\n    const interactive = isInteractivePromptInvocation(\n      flags,\n      this.process.stdin.isTTY,\n      this.process.stderr.isTTY,\n    );\n    const features = await resolveSetupFeatures(prompts, {\n      features: ALL_SETUP_FEATURES,\n      labels: SETUP_LABELS,\n      enabled: {\n        [CustomFunctionSetupFeature.Deno]: flags.deno,\n        [CustomFunctionSetupFeature.Editor]: flags.editor,\n        [CustomFunctionSetupFeature.Skill]: flags.skill,\n        [CustomFunctionSetupFeature.Ci]: flags.ci,\n      },\n      interactive,\n    });\n    const snapshots = collectPlanningSnapshots(\n      this,\n      state.projectRoot,\n      getInitPlanningCandidatePaths(state, { features }),\n    );\n    const plan = buildInitPlan(\n      {\n        state,\n        snapshots,\n        contractVersion: CUSTOM_FUNCTION_TYPES_VERSION,\n        cliVersion: CLI_VERSION,\n      },\n      { features },\n    );\n    if (features.includes(CustomFunctionSetupFeature.Deno)) {\n      const denoVersion = await runCapturedProcess(\n        'deno',\n        ['--version'],\n        { cwd: this.process.cwd() },\n        this,\n      );\n      if (denoVersion.error?.code === 'ENOENT') {\n        plan.warnings.push(\n          `Deno ${SUPPORTED_DENO_MAJOR_VERSION}.x is not installed. Install it from ${DENO_INSTALL_URL}`,\n        );\n      } else if (denoVersion.code !== 0) {\n        plan.warnings.push(\n          `Deno was found, but its version could not be determined. Deno ${SUPPORTED_DENO_MAJOR_VERSION}.x is required. See ${DENO_INSTALL_URL}`,\n        );\n      } else {\n        const compatibility = getDenoRuntimeCompatibility(denoVersion.stdout);\n        if (compatibility.level !== 'compatible') {\n          plan.warnings.push(compatibility.message);\n        }\n      }\n    }\n    if (!flags.json) {\n      this.logger.info(\n        renderProjectPlan(plan, {\n          cwd: this.process.cwd(),\n          title: 'Custom Function plan',\n          details: [\n            { label: 'Target', path: plan.targetDirectory },\n            { label: 'Manifest', path: plan.manifestPath },\n          ],\n        }),\n      );\n    }\n\n    let approved = plan.changes.length === 0 || flags.dryRun;\n    if (plan.changes.length > 0 && !flags.dryRun) {\n      if (flags.yes) {\n        approved = true;\n      } else if (interactive) {\n        approved = await prompts.confirm('Apply this complete plan?', true);\n      } else {\n        throw new Error(\n          'The plan requires approval in a non-interactive invocation. Review with --dryRun, then pass --yes.',\n        );\n      }\n    }\n\n    if (approved && !flags.dryRun && plan.changes.length > 0) {\n      await applyProjectPlan(this, plan);\n    }\n    const applied = approved && !flags.dryRun && plan.changes.length > 0;\n    const setupAvailable = approved && !flags.dryRun;\n    const aiHandoff = buildInitAiHandoff({\n      targetDirectory: displayProjectPath(this.process.cwd(), state.targetDirectory),\n      manifestPath: displayProjectPath(this.process.cwd(), state.manifestPath),\n      cliVersion: CLI_VERSION,\n      hasSkill: setupAvailable && features.includes(CustomFunctionSetupFeature.Skill),\n      hasGithubWorkflow:\n        setupAvailable &&\n        features.includes(CustomFunctionSetupFeature.Ci) &&\n        Boolean(state.repositoryRoot && state.usesGithub),\n    });\n    const result = buildPlanResult(plan, {\n      applied,\n      dryRun: flags.dryRun,\n      cwd: this.process.cwd(),\n      aiHandoff,\n    });\n    if (flags.json) {\n      this.process.stdout.write(`${JSON.stringify(result)}\\n`);\n      return;\n    }\n    if (flags.dryRun) {\n      this.logger.info(colors.yellow('Dry run complete. No changes were written.'));\n      return;\n    }\n    if (!approved) {\n      this.logger.info(colors.yellow('No changes applied.'));\n      return;\n    }\n    if (plan.changes.length === 0) {\n      this.logger.info(colors.green('Custom Function project is already initialized.'));\n      return;\n    }\n    this.logger.info(colors.green('Custom Function project initialized.'));\n    if (plan.nextSteps.length > 0) {\n      this.logger.info(`\\n${colors.bold('Next steps')}`);\n      plan.nextSteps.forEach((step) => this.logger.info(step));\n    }\n    this.logger.info(`\\n${colors.bold('AI handoff — paste into your coding agent')}`);\n    this.logger.info(aiHandoff);\n  } catch (error) {\n    if (error instanceof PromptCancelledError) {\n      this.process.exit(130);\n    }\n    throw error;\n  }\n}\n"],"mappings":"ytBA2DA,MAAM,EAAyE,EAC5E,EAA2B,MAAO,sBAClC,EAA2B,QAAS,oBACpC,EAA2B,OAAQ,eACnC,EAA2B,IAAK,iBAClC,CAGK,EAAqB,OAAO,OAAO,EAA2B,CASpE,eAAsB,EAEpB,EACA,EACe,CACf,EAAoB,KAAK,QAAQ,CACjC,GAAI,CACF,IAAM,EAAQ,EAA8B,KAAM,CAChD,GAAI,EAAY,CAAE,YAAW,CAAG,EAAE,CAClC,GAAI,EAAM,SAAW,CAAE,SAAU,EAAM,SAAU,CAAG,EAAE,CACvD,CAAC,CACI,EAAU,IAAI,EAAgB,KAAK,CACnC,EAAc,EAClB,EACA,KAAK,QAAQ,MAAM,MACnB,KAAK,QAAQ,OAAO,MACrB,CACK,EAAW,MAAM,EAAqB,EAAS,CACnD,SAAU,EACV,OAAQ,EACR,QAAS,EACN,EAA2B,MAAO,EAAM,MACxC,EAA2B,QAAS,EAAM,QAC1C,EAA2B,OAAQ,EAAM,OACzC,EAA2B,IAAK,EAAM,GACxC,CACD,cACD,CAAC,CAMI,EAAO,EACX,CACE,QACA,UARc,EAChB,KACA,EAAM,YACN,EAA8B,EAAO,CAAE,WAAU,CAAC,CAKvC,CACT,gBAAiB,EACjB,WAAYA,EACb,CACD,CAAE,WAAU,CACb,CACD,GAAI,EAAS,SAAS,EAA2B,KAAK,CAAE,CACtD,IAAM,EAAc,MAAM,EACxB,OACA,CAAC,YAAY,CACb,CAAE,IAAK,KAAK,QAAQ,KAAK,CAAE,CAC3B,KACD,CACD,GAAI,EAAY,OAAO,OAAS,SAC9B,EAAK,SAAS,KACZ,8CAA4E,IAC7E,SACQ,EAAY,OAAS,EAC9B,EAAK,SAAS,KACZ,sFAAoH,IACrH,KACI,CACL,IAAM,EAAgB,EAA4B,EAAY,OAAO,CACjE,EAAc,QAAU,cAC1B,EAAK,SAAS,KAAK,EAAc,QAAQ,EAI1C,EAAM,MACT,KAAK,OAAO,KACV,EAAkB,EAAM,CACtB,IAAK,KAAK,QAAQ,KAAK,CACvB,MAAO,uBACP,QAAS,CACP,CAAE,MAAO,SAAU,KAAM,EAAK,gBAAiB,CAC/C,CAAE,MAAO,WAAY,KAAM,EAAK,aAAc,CAC/C,CACF,CAAC,CACH,CAGH,IAAI,EAAW,EAAK,QAAQ,SAAW,GAAK,EAAM,OAClD,GAAI,EAAK,QAAQ,OAAS,GAAK,CAAC,EAAM,OACpC,GAAI,EAAM,IACR,EAAW,WACF,EACT,EAAW,MAAM,EAAQ,QAAQ,4BAA6B,GAAK,MAEnE,MAAU,MACR,qGACD,CAID,GAAY,CAAC,EAAM,QAAU,EAAK,QAAQ,OAAS,GACrD,MAAM,EAAiB,KAAM,EAAK,CAEpC,IAAM,EAAU,GAAY,CAAC,EAAM,QAAU,EAAK,QAAQ,OAAS,EAC7D,EAAiB,GAAY,CAAC,EAAM,OACpC,EAAY,EAAmB,CACnC,gBAAiB,EAAmB,KAAK,QAAQ,KAAK,CAAE,EAAM,gBAAgB,CAC9E,aAAc,EAAmB,KAAK,QAAQ,KAAK,CAAE,EAAM,aAAa,CACxE,WAAYA,EACZ,SAAU,GAAkB,EAAS,SAAS,EAA2B,MAAM,CAC/E,kBACE,GACA,EAAS,SAAS,EAA2B,GAAG,EAChD,GAAQ,EAAM,gBAAkB,EAAM,YACzC,CAAC,CACI,EAAS,EAAgB,EAAM,CACnC,UACA,OAAQ,EAAM,OACd,IAAK,KAAK,QAAQ,KAAK,CACvB,YACD,CAAC,CACF,GAAI,EAAM,KAAM,CACd,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAO,CAAC,IAAI,CACxD,OAEF,GAAI,EAAM,OAAQ,CAChB,KAAK,OAAO,KAAK,EAAO,OAAO,6CAA6C,CAAC,CAC7E,OAEF,GAAI,CAAC,EAAU,CACb,KAAK,OAAO,KAAK,EAAO,OAAO,sBAAsB,CAAC,CACtD,OAEF,GAAI,EAAK,QAAQ,SAAW,EAAG,CAC7B,KAAK,OAAO,KAAK,EAAO,MAAM,kDAAkD,CAAC,CACjF,OAEF,KAAK,OAAO,KAAK,EAAO,MAAM,uCAAuC,CAAC,CAClE,EAAK,UAAU,OAAS,IAC1B,KAAK,OAAO,KAAK,KAAK,EAAO,KAAK,aAAa,GAAG,CAClD,EAAK,UAAU,QAAS,GAAS,KAAK,OAAO,KAAK,EAAK,CAAC,EAE1D,KAAK,OAAO,KAAK,KAAK,EAAO,KAAK,4CAA4C,GAAG,CACjF,KAAK,OAAO,KAAK,EAAU,OACpB,EAAO,CAId,MAHI,aAAiB,GACnB,KAAK,QAAQ,KAAK,IAAI,CAElB"}
+{"version":3,"file":"impl-CCq87iM2.mjs","names":["CLI_VERSION"],"sources":["../src/commands/custom-functions/init/impl.ts"],"sourcesContent":["import { CUSTOM_FUNCTION_TYPES_VERSION } from '@transcend-io/custom-function-types';\nimport colors from 'colors';\n\nimport { version as CLI_VERSION } from '../../../constants.js';\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { runCapturedProcess } from '../../../lib/cli/run-captured-process.js';\nimport { buildInitAiHandoff } from '../../../lib/custom-functions/ai-handoff.js';\nimport {\n  DENO_INSTALL_URL,\n  getDenoRuntimeCompatibility,\n  SUPPORTED_DENO_MAJOR_VERSION,\n} from '../../../lib/custom-functions/deno-runtime.js';\nimport { discoverCustomFunctionProject } from '../../../lib/custom-functions/project-discovery.js';\nimport {\n  CustomFunctionSetupFeature,\n  type CustomFunctionSetupFeature as CustomFunctionSetupFeatureType,\n} from '../../../lib/custom-functions/scaffold-model.js';\nimport { buildPlanResult } from '../../../lib/custom-functions/scaffold-output.js';\nimport {\n  buildInitPlan,\n  getInitPlanningCandidatePaths,\n} from '../../../lib/custom-functions/scaffold-planning.js';\nimport { collectPlanningSnapshots } from '../../../lib/scaffolding/project-discovery.js';\nimport { applyProjectPlan } from '../../../lib/scaffolding/project-plan-apply.js';\nimport {\n  displayProjectPath,\n  renderProjectPlan,\n} from '../../../lib/scaffolding/project-plan-output.js';\nimport {\n  isInteractivePromptInvocation,\n  PromptCancelledError,\n  resolveSetupFeatures,\n  ScaffoldPrompts,\n} from '../../../lib/scaffolding/prompts.js';\n\n/** Flags for `custom-functions init`. */\nexport interface CustomFunctionInitFlags {\n  /** Explicit manifest path. */\n  manifest?: string;\n  /** Install Deno configuration. */\n  deno?: boolean;\n  /** Install editor recommendations. */\n  editor?: boolean;\n  /** Install the coding-agent skill. */\n  skill?: boolean;\n  /** Install GitHub Actions validation. */\n  ci?: boolean;\n  /** Disable prompts. */\n  noInteractive: boolean;\n  /** Render but do not apply. */\n  dryRun: boolean;\n  /** Approve the final displayed plan. */\n  yes: boolean;\n  /** Emit one stable JSON result on stdout. */\n  json: boolean;\n}\n\n/** User-facing setup labels. */\nconst SETUP_LABELS: Readonly<Record<CustomFunctionSetupFeatureType, string>> = {\n  [CustomFunctionSetupFeature.Deno]: 'Deno configuration',\n  [CustomFunctionSetupFeature.Editor]: 'VS Code settings',\n  [CustomFunctionSetupFeature.Skill]: 'Agent skill',\n  [CustomFunctionSetupFeature.Ci]: 'GitHub Actions',\n};\n\n/** All optional setup features in stable prompt order. */\nconst ALL_SETUP_FEATURES = Object.values(CustomFunctionSetupFeature);\n\n/**\n * Initialize a credential-free local Custom Function project.\n *\n * @param this - CLI context\n * @param flags - Scaffold and interaction flags\n * @param directory - Optional target directory\n */\nexport async function init(\n  this: LocalContext,\n  flags: CustomFunctionInitFlags,\n  directory?: string,\n): Promise<void> {\n  doneInputValidation(this.process);\n  try {\n    const state = discoverCustomFunctionProject(this, {\n      ...(directory ? { directory } : {}),\n      ...(flags.manifest ? { manifest: flags.manifest } : {}),\n    });\n    const prompts = new ScaffoldPrompts(this);\n    const interactive = isInteractivePromptInvocation(\n      flags,\n      this.process.stdin.isTTY,\n      this.process.stderr.isTTY,\n    );\n    const features = await resolveSetupFeatures(prompts, {\n      features: ALL_SETUP_FEATURES,\n      labels: SETUP_LABELS,\n      enabled: {\n        [CustomFunctionSetupFeature.Deno]: flags.deno,\n        [CustomFunctionSetupFeature.Editor]: flags.editor,\n        [CustomFunctionSetupFeature.Skill]: flags.skill,\n        [CustomFunctionSetupFeature.Ci]: flags.ci,\n      },\n      interactive,\n    });\n    const snapshots = collectPlanningSnapshots(\n      this,\n      state.projectRoot,\n      getInitPlanningCandidatePaths(state, { features }),\n    );\n    const plan = buildInitPlan(\n      {\n        state,\n        snapshots,\n        contractVersion: CUSTOM_FUNCTION_TYPES_VERSION,\n        cliVersion: CLI_VERSION,\n      },\n      { features },\n    );\n    if (features.includes(CustomFunctionSetupFeature.Deno)) {\n      const denoVersion = await runCapturedProcess(\n        'deno',\n        ['--version'],\n        { cwd: this.process.cwd() },\n        this,\n      );\n      if (denoVersion.error?.code === 'ENOENT') {\n        plan.warnings.push(\n          `Deno ${SUPPORTED_DENO_MAJOR_VERSION}.x is not installed. Install it from ${DENO_INSTALL_URL}`,\n        );\n      } else if (denoVersion.code !== 0) {\n        plan.warnings.push(\n          `Deno was found, but its version could not be determined. Deno ${SUPPORTED_DENO_MAJOR_VERSION}.x is required. See ${DENO_INSTALL_URL}`,\n        );\n      } else {\n        const compatibility = getDenoRuntimeCompatibility(denoVersion.stdout);\n        if (compatibility.level !== 'compatible') {\n          plan.warnings.push(compatibility.message);\n        }\n      }\n    }\n    if (!flags.json) {\n      this.logger.info(\n        renderProjectPlan(plan, {\n          cwd: this.process.cwd(),\n          title: 'Custom Function plan',\n          details: [\n            { label: 'Target', path: plan.targetDirectory },\n            { label: 'Manifest', path: plan.manifestPath },\n          ],\n        }),\n      );\n    }\n\n    let approved = plan.changes.length === 0 || flags.dryRun;\n    if (plan.changes.length > 0 && !flags.dryRun) {\n      if (flags.yes) {\n        approved = true;\n      } else if (interactive) {\n        approved = await prompts.confirm('Apply this complete plan?', true);\n      } else {\n        throw new Error(\n          'The plan requires approval in a non-interactive invocation. Review with --dryRun, then pass --yes.',\n        );\n      }\n    }\n\n    if (approved && !flags.dryRun && plan.changes.length > 0) {\n      await applyProjectPlan(this, plan);\n    }\n    const applied = approved && !flags.dryRun && plan.changes.length > 0;\n    const setupAvailable = approved && !flags.dryRun;\n    const aiHandoff = buildInitAiHandoff({\n      targetDirectory: displayProjectPath(this.process.cwd(), state.targetDirectory),\n      manifestPath: displayProjectPath(this.process.cwd(), state.manifestPath),\n      cliVersion: CLI_VERSION,\n      hasSkill: setupAvailable && features.includes(CustomFunctionSetupFeature.Skill),\n      hasGithubWorkflow:\n        setupAvailable &&\n        features.includes(CustomFunctionSetupFeature.Ci) &&\n        Boolean(state.repositoryRoot && state.usesGithub),\n    });\n    const result = buildPlanResult(plan, {\n      applied,\n      dryRun: flags.dryRun,\n      cwd: this.process.cwd(),\n      aiHandoff,\n    });\n    if (flags.json) {\n      this.process.stdout.write(`${JSON.stringify(result)}\\n`);\n      return;\n    }\n    if (flags.dryRun) {\n      this.logger.info(colors.yellow('Dry run complete. No changes were written.'));\n      return;\n    }\n    if (!approved) {\n      this.logger.info(colors.yellow('No changes applied.'));\n      return;\n    }\n    if (plan.changes.length === 0) {\n      this.logger.info(colors.green('Custom Function project is already initialized.'));\n      return;\n    }\n    this.logger.info(colors.green('Custom Function project initialized.'));\n    if (plan.nextSteps.length > 0) {\n      this.logger.info(`\\n${colors.bold('Next steps')}`);\n      plan.nextSteps.forEach((step) => this.logger.info(step));\n    }\n    this.logger.info(`\\n${colors.bold('AI handoff — paste into your coding agent')}`);\n    this.logger.info(aiHandoff);\n  } catch (error) {\n    if (error instanceof PromptCancelledError) {\n      this.process.exit(130);\n    }\n    throw error;\n  }\n}\n"],"mappings":"ytBA2DA,MAAM,EAAyE,EAC5E,EAA2B,MAAO,sBAClC,EAA2B,QAAS,oBACpC,EAA2B,OAAQ,eACnC,EAA2B,IAAK,iBAClC,CAGK,EAAqB,OAAO,OAAO,EAA2B,CASpE,eAAsB,EAEpB,EACA,EACe,CACf,EAAoB,KAAK,QAAQ,CACjC,GAAI,CACF,IAAM,EAAQ,EAA8B,KAAM,CAChD,GAAI,EAAY,CAAE,YAAW,CAAG,EAAE,CAClC,GAAI,EAAM,SAAW,CAAE,SAAU,EAAM,SAAU,CAAG,EAAE,CACvD,CAAC,CACI,EAAU,IAAI,EAAgB,KAAK,CACnC,EAAc,EAClB,EACA,KAAK,QAAQ,MAAM,MACnB,KAAK,QAAQ,OAAO,MACrB,CACK,EAAW,MAAM,EAAqB,EAAS,CACnD,SAAU,EACV,OAAQ,EACR,QAAS,EACN,EAA2B,MAAO,EAAM,MACxC,EAA2B,QAAS,EAAM,QAC1C,EAA2B,OAAQ,EAAM,OACzC,EAA2B,IAAK,EAAM,GACxC,CACD,cACD,CAAC,CAMI,EAAO,EACX,CACE,QACA,UARc,EAChB,KACA,EAAM,YACN,EAA8B,EAAO,CAAE,WAAU,CAAC,CAKvC,CACT,gBAAiB,EACjB,WAAYA,EACb,CACD,CAAE,WAAU,CACb,CACD,GAAI,EAAS,SAAS,EAA2B,KAAK,CAAE,CACtD,IAAM,EAAc,MAAM,EACxB,OACA,CAAC,YAAY,CACb,CAAE,IAAK,KAAK,QAAQ,KAAK,CAAE,CAC3B,KACD,CACD,GAAI,EAAY,OAAO,OAAS,SAC9B,EAAK,SAAS,KACZ,8CAA4E,IAC7E,SACQ,EAAY,OAAS,EAC9B,EAAK,SAAS,KACZ,sFAAoH,IACrH,KACI,CACL,IAAM,EAAgB,EAA4B,EAAY,OAAO,CACjE,EAAc,QAAU,cAC1B,EAAK,SAAS,KAAK,EAAc,QAAQ,EAI1C,EAAM,MACT,KAAK,OAAO,KACV,EAAkB,EAAM,CACtB,IAAK,KAAK,QAAQ,KAAK,CACvB,MAAO,uBACP,QAAS,CACP,CAAE,MAAO,SAAU,KAAM,EAAK,gBAAiB,CAC/C,CAAE,MAAO,WAAY,KAAM,EAAK,aAAc,CAC/C,CACF,CAAC,CACH,CAGH,IAAI,EAAW,EAAK,QAAQ,SAAW,GAAK,EAAM,OAClD,GAAI,EAAK,QAAQ,OAAS,GAAK,CAAC,EAAM,OACpC,GAAI,EAAM,IACR,EAAW,WACF,EACT,EAAW,MAAM,EAAQ,QAAQ,4BAA6B,GAAK,MAEnE,MAAU,MACR,qGACD,CAID,GAAY,CAAC,EAAM,QAAU,EAAK,QAAQ,OAAS,GACrD,MAAM,EAAiB,KAAM,EAAK,CAEpC,IAAM,EAAU,GAAY,CAAC,EAAM,QAAU,EAAK,QAAQ,OAAS,EAC7D,EAAiB,GAAY,CAAC,EAAM,OACpC,EAAY,EAAmB,CACnC,gBAAiB,EAAmB,KAAK,QAAQ,KAAK,CAAE,EAAM,gBAAgB,CAC9E,aAAc,EAAmB,KAAK,QAAQ,KAAK,CAAE,EAAM,aAAa,CACxE,WAAYA,EACZ,SAAU,GAAkB,EAAS,SAAS,EAA2B,MAAM,CAC/E,kBACE,GACA,EAAS,SAAS,EAA2B,GAAG,EAChD,GAAQ,EAAM,gBAAkB,EAAM,YACzC,CAAC,CACI,EAAS,EAAgB,EAAM,CACnC,UACA,OAAQ,EAAM,OACd,IAAK,KAAK,QAAQ,KAAK,CACvB,YACD,CAAC,CACF,GAAI,EAAM,KAAM,CACd,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAO,CAAC,IAAI,CACxD,OAEF,GAAI,EAAM,OAAQ,CAChB,KAAK,OAAO,KAAK,EAAO,OAAO,6CAA6C,CAAC,CAC7E,OAEF,GAAI,CAAC,EAAU,CACb,KAAK,OAAO,KAAK,EAAO,OAAO,sBAAsB,CAAC,CACtD,OAEF,GAAI,EAAK,QAAQ,SAAW,EAAG,CAC7B,KAAK,OAAO,KAAK,EAAO,MAAM,kDAAkD,CAAC,CACjF,OAEF,KAAK,OAAO,KAAK,EAAO,MAAM,uCAAuC,CAAC,CAClE,EAAK,UAAU,OAAS,IAC1B,KAAK,OAAO,KAAK,KAAK,EAAO,KAAK,aAAa,GAAG,CAClD,EAAK,UAAU,QAAS,GAAS,KAAK,OAAO,KAAK,EAAK,CAAC,EAE1D,KAAK,OAAO,KAAK,KAAK,EAAO,KAAK,4CAA4C,GAAG,CACjF,KAAK,OAAO,KAAK,EAAU,OACpB,EAAO,CAId,MAHI,aAAiB,GACnB,KAAK,QAAQ,KAAK,IAAI,CAElB"}

package/dist/{impl-C-hBO0Wa2.mjs → impl-CDYRjRUX2.mjs}

@@ -1,2 +1,2 @@
-import{n as e}from"./constants-I694qbRg.mjs";import{s as t}from"./writeCsv-CNZrq3zU.mjs";import{t as n}from"./pullAllDatapoints-CNqQSSmF.mjs";import{t as r}from"./done-input-validation-LiTaCEzF.mjs";import{groupBy as i,uniq as a}from"lodash-es";import o from"colors";import{buildTranscendGraphQLClient as s}from"@transcend-io/sdk";async function c({auth:c,file:l,transcendUrl:u,dataSiloIds:d,includeAttributes:f,includeGuessedCategories:p,parentCategories:m,subCategories:h=[]}){r(this.process);try{let e=await n(s(u,c),{dataSiloIds:d,includeGuessedCategories:p,parentCategories:m,includeAttributes:f,subCategories:h});this.logger.info(o.magenta(`Writing datapoints to file "${l}"...`));let r=[];await t(l,e.map(e=>{let t={"Property ID":e.id,"Data Silo":e.dataSilo.title,Object:e.dataPoint.name,"Object Path":e.dataPoint.path.join(`.`),Property:e.name,"Property Description":e.description,"Data Categories":e.categories.map(e=>`${e.category}:${e.name}`).join(`, `),"Guessed Category":e.pendingCategoryGuesses?.[0]?`${e.pendingCategoryGuesses[0].category.category}:${e.pendingCategoryGuesses[0].category.name}`:``,"Processing Purposes":e.purposes.map(e=>`${e.purpose}:${e.name}`).join(`, `),...Object.entries(i(e.attributeValues||[],({attributeKey:e})=>e.name)).reduce((e,[t,n])=>(e[t]=n.map(e=>e.name).join(`,`),e),{})};return r=a([...r,...Object.keys(t)]),t}),r)}catch(e){this.logger.error(o.red(`An error occurred syncing the datapoints: ${e.message}`)),this.process.exit(1)}this.logger.info(o.green(`Successfully synced datapoints to disk at ${l}! View at ${e}`))}export{c as pullDatapoints};
-//# sourceMappingURL=impl-C-hBO0Wa2.mjs.map
+import{n as e}from"./constants-BUOpqzcO.mjs";import{s as t}from"./writeCsv-CNZrq3zU.mjs";import{t as n}from"./pullAllDatapoints-CNqQSSmF.mjs";import{t as r}from"./done-input-validation-LiTaCEzF.mjs";import{groupBy as i,uniq as a}from"lodash-es";import o from"colors";import{buildTranscendGraphQLClient as s}from"@transcend-io/sdk";async function c({auth:c,file:l,transcendUrl:u,dataSiloIds:d,includeAttributes:f,includeGuessedCategories:p,parentCategories:m,subCategories:h=[]}){r(this.process);try{let e=await n(s(u,c),{dataSiloIds:d,includeGuessedCategories:p,parentCategories:m,includeAttributes:f,subCategories:h});this.logger.info(o.magenta(`Writing datapoints to file "${l}"...`));let r=[];await t(l,e.map(e=>{let t={"Property ID":e.id,"Data Silo":e.dataSilo.title,Object:e.dataPoint.name,"Object Path":e.dataPoint.path.join(`.`),Property:e.name,"Property Description":e.description,"Data Categories":e.categories.map(e=>`${e.category}:${e.name}`).join(`, `),"Guessed Category":e.pendingCategoryGuesses?.[0]?`${e.pendingCategoryGuesses[0].category.category}:${e.pendingCategoryGuesses[0].category.name}`:``,"Processing Purposes":e.purposes.map(e=>`${e.purpose}:${e.name}`).join(`, `),...Object.entries(i(e.attributeValues||[],({attributeKey:e})=>e.name)).reduce((e,[t,n])=>(e[t]=n.map(e=>e.name).join(`,`),e),{})};return r=a([...r,...Object.keys(t)]),t}),r)}catch(e){this.logger.error(o.red(`An error occurred syncing the datapoints: ${e.message}`)),this.process.exit(1)}this.logger.info(o.green(`Successfully synced datapoints to disk at ${l}! View at ${e}`))}export{c as pullDatapoints};
+//# sourceMappingURL=impl-CDYRjRUX2.mjs.map

package/dist/{impl-C-hBO0Wa2.mjs.map → impl-CDYRjRUX2.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"impl-C-hBO0Wa2.mjs","names":[],"sources":["../src/commands/inventory/pull-datapoints/impl.ts"],"sourcesContent":["import { DataCategoryType } from '@transcend-io/privacy-types';\nimport { buildTranscendGraphQLClient } from '@transcend-io/sdk';\nimport colors from 'colors';\nimport { uniq, groupBy } from 'lodash-es';\n\nimport { ADMIN_DASH_DATAPOINTS } from '../../../constants.js';\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { pullAllDatapoints } from '../../../lib/data-inventory/index.js';\nimport { writeLargeCsv } from '../../../lib/helpers/index.js';\n\nexport interface PullDatapointsCommandFlags {\n  auth: string;\n  file: string;\n  transcendUrl: string;\n  dataSiloIds?: string[];\n  includeAttributes: boolean;\n  includeGuessedCategories: boolean;\n  parentCategories?: DataCategoryType[];\n  subCategories?: string[];\n}\n\nexport async function pullDatapoints(\n  this: LocalContext,\n  {\n    auth,\n    file,\n    transcendUrl,\n    dataSiloIds,\n    includeAttributes,\n    includeGuessedCategories,\n    parentCategories,\n    subCategories = [],\n  }: PullDatapointsCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  try {\n    // Create a GraphQL client\n    const client = buildTranscendGraphQLClient(transcendUrl, auth);\n\n    const dataPoints = await pullAllDatapoints(client, {\n      dataSiloIds,\n      includeGuessedCategories,\n      parentCategories,\n      includeAttributes,\n      subCategories, // TODO: https://transcend.height.app/T-40482 - do by name not ID\n    });\n\n    this.logger.info(colors.magenta(`Writing datapoints to file \"${file}\"...`));\n    let headers: string[] = [];\n    const inputs = dataPoints.map((point) => {\n      const result = {\n        'Property ID': point.id,\n        'Data Silo': point.dataSilo.title,\n        Object: point.dataPoint.name,\n        'Object Path': point.dataPoint.path.join('.'),\n        Property: point.name,\n        'Property Description': point.description,\n        'Data Categories': point.categories\n          .map((category) => `${category.category}:${category.name}`)\n          .join(', '),\n        'Guessed Category': point.pendingCategoryGuesses?.[0]\n          ? `${point.pendingCategoryGuesses![0]!.category.category}:${\n              point.pendingCategoryGuesses![0]!.category.name\n            }`\n          : '',\n        'Processing Purposes': point.purposes\n          .map((purpose) => `${purpose.purpose}:${purpose.name}`)\n          .join(', '),\n        ...Object.entries(\n          groupBy(point.attributeValues || [], ({ attributeKey }) => attributeKey.name),\n        ).reduce(\n          (acc, [key, values]) => {\n            acc[key] = values.map((value) => value.name).join(',');\n            return acc;\n          },\n          {} as Record<string, string>,\n        ),\n      };\n      headers = uniq([...headers, ...Object.keys(result)]);\n      return result;\n    });\n    await writeLargeCsv(file, inputs, headers);\n  } catch (err) {\n    this.logger.error(colors.red(`An error occurred syncing the datapoints: ${err.message}`));\n    this.process.exit(1);\n  }\n\n  // Indicate success\n  this.logger.info(\n    colors.green(\n      `Successfully synced datapoints to disk at ${file}! View at ${ADMIN_DASH_DATAPOINTS}`,\n    ),\n  );\n}\n"],"mappings":"2UAsBA,eAAsB,EAEpB,CACE,OACA,OACA,eACA,cACA,oBACA,2BACA,mBACA,gBAAgB,EAAE,EAEL,CACf,EAAoB,KAAK,QAAQ,CAEjC,GAAI,CAIF,IAAM,EAAa,MAAM,EAFV,EAA4B,EAAc,EAER,CAAE,CACjD,cACA,2BACA,mBACA,oBACA,gBACD,CAAC,CAEF,KAAK,OAAO,KAAK,EAAO,QAAQ,+BAA+B,EAAK,MAAM,CAAC,CAC3E,IAAI,EAAoB,EAAE,CAiC1B,MAAM,EAAc,EAhCL,EAAW,IAAK,GAAU,CACvC,IAAM,EAAS,CACb,cAAe,EAAM,GACrB,YAAa,EAAM,SAAS,MAC5B,OAAQ,EAAM,UAAU,KACxB,cAAe,EAAM,UAAU,KAAK,KAAK,IAAI,CAC7C,SAAU,EAAM,KAChB,uBAAwB,EAAM,YAC9B,kBAAmB,EAAM,WACtB,IAAK,GAAa,GAAG,EAAS,SAAS,GAAG,EAAS,OAAO,CAC1D,KAAK,KAAK,CACb,mBAAoB,EAAM,yBAAyB,GAC/C,GAAG,EAAM,uBAAwB,GAAI,SAAS,SAAS,GACrD,EAAM,uBAAwB,GAAI,SAAS,OAE7C,GACJ,sBAAuB,EAAM,SAC1B,IAAK,GAAY,GAAG,EAAQ,QAAQ,GAAG,EAAQ,OAAO,CACtD,KAAK,KAAK,CACb,GAAG,OAAO,QACR,EAAQ,EAAM,iBAAmB,EAAE,EAAG,CAAE,kBAAmB,EAAa,KAAK,CAC9E,CAAC,QACC,EAAK,CAAC,EAAK,MACV,EAAI,GAAO,EAAO,IAAK,GAAU,EAAM,KAAK,CAAC,KAAK,IAAI,CAC/C,GAET,EAAE,CACH,CACF,CAED,MADA,GAAU,EAAK,CAAC,GAAG,EAAS,GAAG,OAAO,KAAK,EAAO,CAAC,CAAC,CAC7C,GAEuB,CAAE,EAAQ,OACnC,EAAK,CACZ,KAAK,OAAO,MAAM,EAAO,IAAI,6CAA6C,EAAI,UAAU,CAAC,CACzF,KAAK,QAAQ,KAAK,EAAE,CAItB,KAAK,OAAO,KACV,EAAO,MACL,6CAA6C,EAAK,YAAY,IAC/D,CACF"}
+{"version":3,"file":"impl-CDYRjRUX2.mjs","names":[],"sources":["../src/commands/inventory/pull-datapoints/impl.ts"],"sourcesContent":["import { DataCategoryType } from '@transcend-io/privacy-types';\nimport { buildTranscendGraphQLClient } from '@transcend-io/sdk';\nimport colors from 'colors';\nimport { uniq, groupBy } from 'lodash-es';\n\nimport { ADMIN_DASH_DATAPOINTS } from '../../../constants.js';\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { pullAllDatapoints } from '../../../lib/data-inventory/index.js';\nimport { writeLargeCsv } from '../../../lib/helpers/index.js';\n\nexport interface PullDatapointsCommandFlags {\n  auth: string;\n  file: string;\n  transcendUrl: string;\n  dataSiloIds?: string[];\n  includeAttributes: boolean;\n  includeGuessedCategories: boolean;\n  parentCategories?: DataCategoryType[];\n  subCategories?: string[];\n}\n\nexport async function pullDatapoints(\n  this: LocalContext,\n  {\n    auth,\n    file,\n    transcendUrl,\n    dataSiloIds,\n    includeAttributes,\n    includeGuessedCategories,\n    parentCategories,\n    subCategories = [],\n  }: PullDatapointsCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  try {\n    // Create a GraphQL client\n    const client = buildTranscendGraphQLClient(transcendUrl, auth);\n\n    const dataPoints = await pullAllDatapoints(client, {\n      dataSiloIds,\n      includeGuessedCategories,\n      parentCategories,\n      includeAttributes,\n      subCategories, // TODO: https://transcend.height.app/T-40482 - do by name not ID\n    });\n\n    this.logger.info(colors.magenta(`Writing datapoints to file \"${file}\"...`));\n    let headers: string[] = [];\n    const inputs = dataPoints.map((point) => {\n      const result = {\n        'Property ID': point.id,\n        'Data Silo': point.dataSilo.title,\n        Object: point.dataPoint.name,\n        'Object Path': point.dataPoint.path.join('.'),\n        Property: point.name,\n        'Property Description': point.description,\n        'Data Categories': point.categories\n          .map((category) => `${category.category}:${category.name}`)\n          .join(', '),\n        'Guessed Category': point.pendingCategoryGuesses?.[0]\n          ? `${point.pendingCategoryGuesses![0]!.category.category}:${\n              point.pendingCategoryGuesses![0]!.category.name\n            }`\n          : '',\n        'Processing Purposes': point.purposes\n          .map((purpose) => `${purpose.purpose}:${purpose.name}`)\n          .join(', '),\n        ...Object.entries(\n          groupBy(point.attributeValues || [], ({ attributeKey }) => attributeKey.name),\n        ).reduce(\n          (acc, [key, values]) => {\n            acc[key] = values.map((value) => value.name).join(',');\n            return acc;\n          },\n          {} as Record<string, string>,\n        ),\n      };\n      headers = uniq([...headers, ...Object.keys(result)]);\n      return result;\n    });\n    await writeLargeCsv(file, inputs, headers);\n  } catch (err) {\n    this.logger.error(colors.red(`An error occurred syncing the datapoints: ${err.message}`));\n    this.process.exit(1);\n  }\n\n  // Indicate success\n  this.logger.info(\n    colors.green(\n      `Successfully synced datapoints to disk at ${file}! View at ${ADMIN_DASH_DATAPOINTS}`,\n    ),\n  );\n}\n"],"mappings":"2UAsBA,eAAsB,EAEpB,CACE,OACA,OACA,eACA,cACA,oBACA,2BACA,mBACA,gBAAgB,EAAE,EAEL,CACf,EAAoB,KAAK,QAAQ,CAEjC,GAAI,CAIF,IAAM,EAAa,MAAM,EAFV,EAA4B,EAAc,EAER,CAAE,CACjD,cACA,2BACA,mBACA,oBACA,gBACD,CAAC,CAEF,KAAK,OAAO,KAAK,EAAO,QAAQ,+BAA+B,EAAK,MAAM,CAAC,CAC3E,IAAI,EAAoB,EAAE,CAiC1B,MAAM,EAAc,EAhCL,EAAW,IAAK,GAAU,CACvC,IAAM,EAAS,CACb,cAAe,EAAM,GACrB,YAAa,EAAM,SAAS,MAC5B,OAAQ,EAAM,UAAU,KACxB,cAAe,EAAM,UAAU,KAAK,KAAK,IAAI,CAC7C,SAAU,EAAM,KAChB,uBAAwB,EAAM,YAC9B,kBAAmB,EAAM,WACtB,IAAK,GAAa,GAAG,EAAS,SAAS,GAAG,EAAS,OAAO,CAC1D,KAAK,KAAK,CACb,mBAAoB,EAAM,yBAAyB,GAC/C,GAAG,EAAM,uBAAwB,GAAI,SAAS,SAAS,GACrD,EAAM,uBAAwB,GAAI,SAAS,OAE7C,GACJ,sBAAuB,EAAM,SAC1B,IAAK,GAAY,GAAG,EAAQ,QAAQ,GAAG,EAAQ,OAAO,CACtD,KAAK,KAAK,CACb,GAAG,OAAO,QACR,EAAQ,EAAM,iBAAmB,EAAE,EAAG,CAAE,kBAAmB,EAAa,KAAK,CAC9E,CAAC,QACC,EAAK,CAAC,EAAK,MACV,EAAI,GAAO,EAAO,IAAK,GAAU,EAAM,KAAK,CAAC,KAAK,IAAI,CAC/C,GAET,EAAE,CACH,CACF,CAED,MADA,GAAU,EAAK,CAAC,GAAG,EAAS,GAAG,OAAO,KAAK,EAAO,CAAC,CAAC,CAC7C,GAEuB,CAAE,EAAQ,OACnC,EAAK,CACZ,KAAK,OAAO,MAAM,EAAO,IAAI,6CAA6C,EAAI,UAAU,CAAC,CACzF,KAAK,QAAQ,KAAK,EAAE,CAItB,KAAK,OAAO,KACV,EAAO,MACL,6CAA6C,EAAK,YAAY,IAC/D,CACF"}

package/dist/{impl-CzgNvB64.mjs → impl-CKmjV5Y7.mjs}

@@ -1,2 +1,2 @@
-import{t as e}from"./constants-I694qbRg.mjs";import{t}from"./logger-CPu6zbyQ.mjs";import{n}from"./syncCodePackages-DJnrcX5l.mjs";import{t as r}from"./done-input-validation-LiTaCEzF.mjs";import{t as i}from"./constants-DC_bBO09.mjs";import a from"colors";import o from"fast-glob";import{getEntries as s}from"@transcend-io/type-utils";import{buildTranscendGraphQLClient as c}from"@transcend-io/sdk";import{execSync as l}from"child_process";async function u({scanPath:e,ignoreDirs:n=[],repositoryName:r}){return(await Promise.all(s(i).map(async([i,s])=>{let{ignoreDirs:c,supportedFiles:l,scanFunction:u}=s,d=[...n,...c].filter(e=>e.length>0);try{let n=await o(`${e}/**/${l.join(`|`)}`,{ignore:d.map(t=>`${e}/**/${t}`),unique:!0,onlyFiles:!0});t.info(a.magenta(`Scanning: ${n.length} files of type ${i}`));let s=n.map(t=>u(t).map(n=>({...n,relativePath:t.replace(`${e}/`,``)}))).flat();return t.info(a.green(`Found: ${s.length} packages and ${s.map(({softwareDevelopmentKits:e=[]})=>e).flat().length} sdks`)),s.map(e=>({...e,type:i,repositoryName:r}))}catch(e){throw Error(`Error scanning globs ${l} with error: ${e}`)}}))).flat()}const d=`A repository name must be provided. You can specify using --repositoryName=$REPO_NAME or by ensuring the command "git config --get remote.origin.url" returns the name of the repository`;async function f({auth:t,scanPath:i,ignoreDirs:o,repositoryName:s,transcendUrl:f}){r(this.process);let p=s;if(!p)try{let e=l(`cd ${i} && git config --get remote.origin.url`).toString(`utf-8`).trim();[p]=e.includes(`https:`)?e.split(`/`).slice(3).join(`/`).split(`.`):(e.split(`:`).pop()||``).split(`.`),p||(this.logger.error(a.red(d)),this.process.exit(1))}catch(e){this.logger.error(a.red(`${d} - Got error: ${e.message}`)),this.process.exit(1)}let m=c(f,t),h=await u({scanPath:i,ignoreDirs:o,repositoryName:p});await n(m,h);let g=new URL(e);g.pathname=`/code-scanning/code-packages`,this.logger.info(a.green(`Scan found ${h.length} packages at ${i}! View results at '${g.href}'`))}export{f as scanPackages};
-//# sourceMappingURL=impl-CzgNvB64.mjs.map
+import{t as e}from"./constants-BUOpqzcO.mjs";import{t}from"./logger-CPu6zbyQ.mjs";import{n}from"./syncCodePackages-DJnrcX5l.mjs";import{t as r}from"./done-input-validation-LiTaCEzF.mjs";import{t as i}from"./constants-DC_bBO09.mjs";import a from"colors";import o from"fast-glob";import{getEntries as s}from"@transcend-io/type-utils";import{buildTranscendGraphQLClient as c}from"@transcend-io/sdk";import{execSync as l}from"child_process";async function u({scanPath:e,ignoreDirs:n=[],repositoryName:r}){return(await Promise.all(s(i).map(async([i,s])=>{let{ignoreDirs:c,supportedFiles:l,scanFunction:u}=s,d=[...n,...c].filter(e=>e.length>0);try{let n=await o(`${e}/**/${l.join(`|`)}`,{ignore:d.map(t=>`${e}/**/${t}`),unique:!0,onlyFiles:!0});t.info(a.magenta(`Scanning: ${n.length} files of type ${i}`));let s=n.map(t=>u(t).map(n=>({...n,relativePath:t.replace(`${e}/`,``)}))).flat();return t.info(a.green(`Found: ${s.length} packages and ${s.map(({softwareDevelopmentKits:e=[]})=>e).flat().length} sdks`)),s.map(e=>({...e,type:i,repositoryName:r}))}catch(e){throw Error(`Error scanning globs ${l} with error: ${e}`)}}))).flat()}const d=`A repository name must be provided. You can specify using --repositoryName=$REPO_NAME or by ensuring the command "git config --get remote.origin.url" returns the name of the repository`;async function f({auth:t,scanPath:i,ignoreDirs:o,repositoryName:s,transcendUrl:f}){r(this.process);let p=s;if(!p)try{let e=l(`cd ${i} && git config --get remote.origin.url`).toString(`utf-8`).trim();[p]=e.includes(`https:`)?e.split(`/`).slice(3).join(`/`).split(`.`):(e.split(`:`).pop()||``).split(`.`),p||(this.logger.error(a.red(d)),this.process.exit(1))}catch(e){this.logger.error(a.red(`${d} - Got error: ${e.message}`)),this.process.exit(1)}let m=c(f,t),h=await u({scanPath:i,ignoreDirs:o,repositoryName:p});await n(m,h);let g=new URL(e);g.pathname=`/code-scanning/code-packages`,this.logger.info(a.green(`Scan found ${h.length} packages at ${i}! View results at '${g.href}'`))}export{f as scanPackages};
+//# sourceMappingURL=impl-CKmjV5Y7.mjs.map

package/dist/{impl-CzgNvB64.mjs.map → impl-CKmjV5Y7.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"impl-CzgNvB64.mjs","names":[],"sources":["../src/lib/code-scanning/findCodePackagesInFolder.ts","../src/commands/inventory/scan-packages/impl.ts"],"sourcesContent":["import { getEntries } from '@transcend-io/type-utils';\nimport colors from 'colors';\nimport fastGlob from 'fast-glob';\n\nimport { CodePackageInput } from '../../codecs.js';\nimport { logger } from '../../logger.js';\nimport { CODE_SCANNING_CONFIGS } from './constants.js';\n\n/**\n * Helper to scan and discovery all of the code packages within a folder\n *\n * @param options - Options\n * @returns the list of integrations\n */\nexport async function findCodePackagesInFolder({\n  scanPath,\n  ignoreDirs = [],\n  repositoryName,\n}: {\n  /** The name of the github repository reporting packages for */\n  repositoryName: string;\n  /** Where to look for package.json files */\n  scanPath: string;\n  /** The directories to ignore (excludes node_modules and serverless-build) */\n  ignoreDirs?: string[];\n}): Promise<CodePackageInput[]> {\n  const allCodePackages = await Promise.all(\n    getEntries(CODE_SCANNING_CONFIGS).map(async ([codePackageType, config]) => {\n      const { ignoreDirs: configIgnoreDirs, supportedFiles, scanFunction } = config;\n      const dirsToIgnore = [...ignoreDirs, ...configIgnoreDirs].filter((dir) => dir.length > 0);\n      try {\n        const filesToScan: string[] = await fastGlob(`${scanPath}/**/${supportedFiles.join('|')}`, {\n          ignore: dirsToIgnore.map((dir: string) => `${scanPath}/**/${dir}`),\n          unique: true,\n          onlyFiles: true,\n        });\n        logger.info(\n          colors.magenta(`Scanning: ${filesToScan.length} files of type ${codePackageType}`),\n        );\n        const allPackages = filesToScan\n          .map((filePath) =>\n            scanFunction(filePath).map((result) => ({\n              ...result,\n              relativePath: filePath.replace(`${scanPath}/`, ''),\n            })),\n          )\n          .flat();\n        logger.info(\n          colors.green(\n            `Found: ${allPackages.length} packages and ${\n              allPackages.map(({ softwareDevelopmentKits = [] }) => softwareDevelopmentKits).flat()\n                .length\n            } sdks`,\n          ),\n        );\n\n        return allPackages.map(\n          (pkg): CodePackageInput => ({\n            ...pkg,\n            type: codePackageType,\n            repositoryName,\n          }),\n        );\n      } catch (error) {\n        throw new Error(`Error scanning globs ${supportedFiles} with error: ${error}`);\n      }\n    }),\n  );\n\n  return allCodePackages.flat();\n}\n","import { execSync } from 'child_process';\n\nimport { buildTranscendGraphQLClient } from '@transcend-io/sdk';\nimport colors from 'colors';\n\nimport { ADMIN_DASH } from '../../../constants.js';\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { findCodePackagesInFolder } from '../../../lib/code-scanning/index.js';\nimport { syncCodePackages } from '../../../lib/graphql/index.js';\n\nconst REPO_ERROR =\n  'A repository name must be provided. ' +\n  'You can specify using --repositoryName=$REPO_NAME or by ensuring the ' +\n  'command \"git config --get remote.origin.url\" returns the name of the repository';\n\nexport interface ScanPackagesCommandFlags {\n  auth: string;\n  scanPath: string;\n  ignoreDirs?: string[];\n  repositoryName?: string;\n  transcendUrl: string;\n}\n\nexport async function scanPackages(\n  this: LocalContext,\n  { auth, scanPath, ignoreDirs, repositoryName, transcendUrl }: ScanPackagesCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  // Ensure repository name is specified\n  let gitRepositoryName = repositoryName;\n  if (!gitRepositoryName) {\n    try {\n      const name = execSync(`cd ${scanPath} && git config --get remote.origin.url`);\n      // Trim and parse the URL\n      const url = name.toString('utf-8').trim();\n      [gitRepositoryName] = !url.includes('https:')\n        ? (url.split(':').pop() || '').split('.')\n        : url.split('/').slice(3).join('/').split('.');\n      if (!gitRepositoryName) {\n        this.logger.error(colors.red(REPO_ERROR));\n        this.process.exit(1);\n      }\n    } catch (err) {\n      this.logger.error(colors.red(`${REPO_ERROR} - Got error: ${err.message}`));\n      this.process.exit(1);\n    }\n  }\n\n  // Create a GraphQL client\n  const client = buildTranscendGraphQLClient(transcendUrl, auth);\n\n  // Scan the codebase to discovery packages\n  const results = await findCodePackagesInFolder({\n    scanPath,\n    ignoreDirs,\n    repositoryName: gitRepositoryName,\n  });\n\n  // Report scan to Transcend\n  await syncCodePackages(client, results);\n\n  const newUrl = new URL(ADMIN_DASH);\n  newUrl.pathname = '/code-scanning/code-packages';\n\n  // Indicate success\n  this.logger.info(\n    colors.green(\n      `Scan found ${results.length} packages at ${scanPath}! ` + `View results at '${newUrl.href}'`,\n    ),\n  );\n}\n"],"mappings":"qbAcA,eAAsB,EAAyB,CAC7C,WACA,aAAa,EAAE,CACf,kBAQ8B,CA4C9B,OAAO,MA3CuB,QAAQ,IACpC,EAAW,EAAsB,CAAC,IAAI,MAAO,CAAC,EAAiB,KAAY,CACzE,GAAM,CAAE,WAAY,EAAkB,iBAAgB,gBAAiB,EACjE,EAAe,CAAC,GAAG,EAAY,GAAG,EAAiB,CAAC,OAAQ,GAAQ,EAAI,OAAS,EAAE,CACzF,GAAI,CACF,IAAM,EAAwB,MAAM,EAAS,GAAG,EAAS,MAAM,EAAe,KAAK,IAAI,GAAI,CACzF,OAAQ,EAAa,IAAK,GAAgB,GAAG,EAAS,MAAM,IAAM,CAClE,OAAQ,GACR,UAAW,GACZ,CAAC,CACF,EAAO,KACL,EAAO,QAAQ,aAAa,EAAY,OAAO,iBAAiB,IAAkB,CACnF,CACD,IAAM,EAAc,EACjB,IAAK,GACJ,EAAa,EAAS,CAAC,IAAK,IAAY,CACtC,GAAG,EACH,aAAc,EAAS,QAAQ,GAAG,EAAS,GAAI,GAAG,CACnD,EAAE,CACJ,CACA,MAAM,CAUT,OATA,EAAO,KACL,EAAO,MACL,UAAU,EAAY,OAAO,gBAC3B,EAAY,KAAK,CAAE,0BAA0B,EAAE,IAAO,EAAwB,CAAC,MAAM,CAClF,OACJ,OACF,CACF,CAEM,EAAY,IAChB,IAA2B,CAC1B,GAAG,EACH,KAAM,EACN,iBACD,EACF,OACM,EAAO,CACd,MAAU,MAAM,wBAAwB,EAAe,eAAe,IAAQ,GAEhF,CACH,EAEsB,MAAM,CC1D/B,MAAM,EACJ,2LAYF,eAAsB,EAEpB,CAAE,OAAM,WAAU,aAAY,iBAAgB,gBAC/B,CACf,EAAoB,KAAK,QAAQ,CAGjC,IAAI,EAAoB,EACxB,GAAI,CAAC,EACH,GAAI,CAGF,IAAM,EAFO,EAAS,MAAM,EAAS,wCAErB,CAAC,SAAS,QAAQ,CAAC,MAAM,CACzC,CAAC,GAAsB,EAAI,SAAS,SAAS,CAEzC,EAAI,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,EAD3C,EAAI,MAAM,IAAI,CAAC,KAAK,EAAI,IAAI,MAAM,IAAI,CAEtC,IACH,KAAK,OAAO,MAAM,EAAO,IAAI,EAAW,CAAC,CACzC,KAAK,QAAQ,KAAK,EAAE,QAEf,EAAK,CACZ,KAAK,OAAO,MAAM,EAAO,IAAI,GAAG,EAAW,gBAAgB,EAAI,UAAU,CAAC,CAC1E,KAAK,QAAQ,KAAK,EAAE,CAKxB,IAAM,EAAS,EAA4B,EAAc,EAAK,CAGxD,EAAU,MAAM,EAAyB,CAC7C,WACA,aACA,eAAgB,EACjB,CAAC,CAGF,MAAM,EAAiB,EAAQ,EAAQ,CAEvC,IAAM,EAAS,IAAI,IAAI,EAAW,CAClC,EAAO,SAAW,+BAGlB,KAAK,OAAO,KACV,EAAO,MACL,cAAc,EAAQ,OAAO,eAAe,EAAS,qBAA0B,EAAO,KAAK,GAC5F,CACF"}
+{"version":3,"file":"impl-CKmjV5Y7.mjs","names":[],"sources":["../src/lib/code-scanning/findCodePackagesInFolder.ts","../src/commands/inventory/scan-packages/impl.ts"],"sourcesContent":["import { getEntries } from '@transcend-io/type-utils';\nimport colors from 'colors';\nimport fastGlob from 'fast-glob';\n\nimport { CodePackageInput } from '../../codecs.js';\nimport { logger } from '../../logger.js';\nimport { CODE_SCANNING_CONFIGS } from './constants.js';\n\n/**\n * Helper to scan and discovery all of the code packages within a folder\n *\n * @param options - Options\n * @returns the list of integrations\n */\nexport async function findCodePackagesInFolder({\n  scanPath,\n  ignoreDirs = [],\n  repositoryName,\n}: {\n  /** The name of the github repository reporting packages for */\n  repositoryName: string;\n  /** Where to look for package.json files */\n  scanPath: string;\n  /** The directories to ignore (excludes node_modules and serverless-build) */\n  ignoreDirs?: string[];\n}): Promise<CodePackageInput[]> {\n  const allCodePackages = await Promise.all(\n    getEntries(CODE_SCANNING_CONFIGS).map(async ([codePackageType, config]) => {\n      const { ignoreDirs: configIgnoreDirs, supportedFiles, scanFunction } = config;\n      const dirsToIgnore = [...ignoreDirs, ...configIgnoreDirs].filter((dir) => dir.length > 0);\n      try {\n        const filesToScan: string[] = await fastGlob(`${scanPath}/**/${supportedFiles.join('|')}`, {\n          ignore: dirsToIgnore.map((dir: string) => `${scanPath}/**/${dir}`),\n          unique: true,\n          onlyFiles: true,\n        });\n        logger.info(\n          colors.magenta(`Scanning: ${filesToScan.length} files of type ${codePackageType}`),\n        );\n        const allPackages = filesToScan\n          .map((filePath) =>\n            scanFunction(filePath).map((result) => ({\n              ...result,\n              relativePath: filePath.replace(`${scanPath}/`, ''),\n            })),\n          )\n          .flat();\n        logger.info(\n          colors.green(\n            `Found: ${allPackages.length} packages and ${\n              allPackages.map(({ softwareDevelopmentKits = [] }) => softwareDevelopmentKits).flat()\n                .length\n            } sdks`,\n          ),\n        );\n\n        return allPackages.map(\n          (pkg): CodePackageInput => ({\n            ...pkg,\n            type: codePackageType,\n            repositoryName,\n          }),\n        );\n      } catch (error) {\n        throw new Error(`Error scanning globs ${supportedFiles} with error: ${error}`);\n      }\n    }),\n  );\n\n  return allCodePackages.flat();\n}\n","import { execSync } from 'child_process';\n\nimport { buildTranscendGraphQLClient } from '@transcend-io/sdk';\nimport colors from 'colors';\n\nimport { ADMIN_DASH } from '../../../constants.js';\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport { findCodePackagesInFolder } from '../../../lib/code-scanning/index.js';\nimport { syncCodePackages } from '../../../lib/graphql/index.js';\n\nconst REPO_ERROR =\n  'A repository name must be provided. ' +\n  'You can specify using --repositoryName=$REPO_NAME or by ensuring the ' +\n  'command \"git config --get remote.origin.url\" returns the name of the repository';\n\nexport interface ScanPackagesCommandFlags {\n  auth: string;\n  scanPath: string;\n  ignoreDirs?: string[];\n  repositoryName?: string;\n  transcendUrl: string;\n}\n\nexport async function scanPackages(\n  this: LocalContext,\n  { auth, scanPath, ignoreDirs, repositoryName, transcendUrl }: ScanPackagesCommandFlags,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  // Ensure repository name is specified\n  let gitRepositoryName = repositoryName;\n  if (!gitRepositoryName) {\n    try {\n      const name = execSync(`cd ${scanPath} && git config --get remote.origin.url`);\n      // Trim and parse the URL\n      const url = name.toString('utf-8').trim();\n      [gitRepositoryName] = !url.includes('https:')\n        ? (url.split(':').pop() || '').split('.')\n        : url.split('/').slice(3).join('/').split('.');\n      if (!gitRepositoryName) {\n        this.logger.error(colors.red(REPO_ERROR));\n        this.process.exit(1);\n      }\n    } catch (err) {\n      this.logger.error(colors.red(`${REPO_ERROR} - Got error: ${err.message}`));\n      this.process.exit(1);\n    }\n  }\n\n  // Create a GraphQL client\n  const client = buildTranscendGraphQLClient(transcendUrl, auth);\n\n  // Scan the codebase to discovery packages\n  const results = await findCodePackagesInFolder({\n    scanPath,\n    ignoreDirs,\n    repositoryName: gitRepositoryName,\n  });\n\n  // Report scan to Transcend\n  await syncCodePackages(client, results);\n\n  const newUrl = new URL(ADMIN_DASH);\n  newUrl.pathname = '/code-scanning/code-packages';\n\n  // Indicate success\n  this.logger.info(\n    colors.green(\n      `Scan found ${results.length} packages at ${scanPath}! ` + `View results at '${newUrl.href}'`,\n    ),\n  );\n}\n"],"mappings":"qbAcA,eAAsB,EAAyB,CAC7C,WACA,aAAa,EAAE,CACf,kBAQ8B,CA4C9B,OAAO,MA3CuB,QAAQ,IACpC,EAAW,EAAsB,CAAC,IAAI,MAAO,CAAC,EAAiB,KAAY,CACzE,GAAM,CAAE,WAAY,EAAkB,iBAAgB,gBAAiB,EACjE,EAAe,CAAC,GAAG,EAAY,GAAG,EAAiB,CAAC,OAAQ,GAAQ,EAAI,OAAS,EAAE,CACzF,GAAI,CACF,IAAM,EAAwB,MAAM,EAAS,GAAG,EAAS,MAAM,EAAe,KAAK,IAAI,GAAI,CACzF,OAAQ,EAAa,IAAK,GAAgB,GAAG,EAAS,MAAM,IAAM,CAClE,OAAQ,GACR,UAAW,GACZ,CAAC,CACF,EAAO,KACL,EAAO,QAAQ,aAAa,EAAY,OAAO,iBAAiB,IAAkB,CACnF,CACD,IAAM,EAAc,EACjB,IAAK,GACJ,EAAa,EAAS,CAAC,IAAK,IAAY,CACtC,GAAG,EACH,aAAc,EAAS,QAAQ,GAAG,EAAS,GAAI,GAAG,CACnD,EAAE,CACJ,CACA,MAAM,CAUT,OATA,EAAO,KACL,EAAO,MACL,UAAU,EAAY,OAAO,gBAC3B,EAAY,KAAK,CAAE,0BAA0B,EAAE,IAAO,EAAwB,CAAC,MAAM,CAClF,OACJ,OACF,CACF,CAEM,EAAY,IAChB,IAA2B,CAC1B,GAAG,EACH,KAAM,EACN,iBACD,EACF,OACM,EAAO,CACd,MAAU,MAAM,wBAAwB,EAAe,eAAe,IAAQ,GAEhF,CACH,EAEsB,MAAM,CC1D/B,MAAM,EACJ,2LAYF,eAAsB,EAEpB,CAAE,OAAM,WAAU,aAAY,iBAAgB,gBAC/B,CACf,EAAoB,KAAK,QAAQ,CAGjC,IAAI,EAAoB,EACxB,GAAI,CAAC,EACH,GAAI,CAGF,IAAM,EAFO,EAAS,MAAM,EAAS,wCAErB,CAAC,SAAS,QAAQ,CAAC,MAAM,CACzC,CAAC,GAAsB,EAAI,SAAS,SAAS,CAEzC,EAAI,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,EAD3C,EAAI,MAAM,IAAI,CAAC,KAAK,EAAI,IAAI,MAAM,IAAI,CAEtC,IACH,KAAK,OAAO,MAAM,EAAO,IAAI,EAAW,CAAC,CACzC,KAAK,QAAQ,KAAK,EAAE,QAEf,EAAK,CACZ,KAAK,OAAO,MAAM,EAAO,IAAI,GAAG,EAAW,gBAAgB,EAAI,UAAU,CAAC,CAC1E,KAAK,QAAQ,KAAK,EAAE,CAKxB,IAAM,EAAS,EAA4B,EAAc,EAAK,CAGxD,EAAU,MAAM,EAAyB,CAC7C,WACA,aACA,eAAgB,EACjB,CAAC,CAGF,MAAM,EAAiB,EAAQ,EAAQ,CAEvC,IAAM,EAAS,IAAI,IAAI,EAAW,CAClC,EAAO,SAAW,+BAGlB,KAAK,OAAO,KACV,EAAO,MACL,cAAc,EAAQ,OAAO,eAAe,EAAS,qBAA0B,EAAO,KAAK,GAC5F,CACF"}

package/dist/{impl-BfS6LtNo2.mjs → impl-CZdJmC_12.mjs}

@@ -1,2 +1,2 @@
-import{c as e,i as t,n,t as r}from"./policy-project-discovery-BSQ2Cow0.mjs";import{n as i}from"./policy-bundle-manifest-DW1kUjMf.mjs";import{t as a}from"./done-input-validation-LiTaCEzF.mjs";import{t as o}from"./run-captured-process-BjaSDWXG.mjs";import{i as s,n as c,r as l,t as u}from"./runRegalLintStep-DPaMm7Gg.mjs";import d from"node:path";import f from"colors";const p=[`manifest`,`opa-version`,`regal-version`,`format`,`opa-check`,`regal-lint`,`opa-test`],m={manifest:`Manifest and package roots`,"opa-version":`OPA 1.x`,"regal-version":`Regal`,format:`OPA formatting`,"opa-check":`OPA strict check`,"regal-lint":`Regal lint`,"opa-test":`OPA tests`};function h(e,t,n=t){return e.fs.readdirSync(n,{withFileTypes:!0}).sort((e,t)=>e.name.localeCompare(t.name)).flatMap(r=>{let i=d.join(n,r.name);return r.isDirectory()?h(e,t,i):!r.isFile()||!r.name.endsWith(`.rego`)?[]:[{path:d.relative(t,i).split(d.sep).join(`/`),contents:e.fs.readFileSync(i,`utf8`)}]})}function g(e,t,n){n?e.logger.info(`${f.bold(n)}\n`):e.logger.info(`${f.bold(`Policy verification`)}\n`),t.checks.forEach(({name:n,status:r})=>{let i=r===`passed`?`PASS`:r===`failed`?`FAIL`:`SKIP`,a=r===`passed`?f.green(i):r===`failed`?f.red(i):f.yellow(i),o=n===`opa-version`&&t.tools.opa?` (${t.tools.opa})`:n===`regal-version`&&t.tools.regal?` (${t.tools.regal})`:``;e.logger.info(`${a} ${m[n]}${o}`)}),t.diagnostics.length>0&&e.logger.error(``),t.diagnostics.forEach(t=>{let n=t.path?`${t.path}: `:``;e.logger.error(f.red(`error [${t.code}]: ${n}${t.message}`))}),t.status===`passed`?(e.logger.info(``),e.logger.info(f.green(`Policy verification passed.`))):(e.logger.error(``),e.logger.error(f.red(`Policy verification failed.`)))}async function _({fix:t,noInteractive:n,json:r},a,o){let f=p.map(e=>({name:e,status:`skipped`})),m=[],g={version:1,status:`passed`,directory:a,fix:t,tools:{opa:null,regal:null},checks:f,unformattedFiles:[],fixedFiles:[],diagnostics:m},_=(e,t)=>{f.find(t=>t.name===e).status=t},v=(e,t,n)=>{m.push({code:e,severity:`error`,message:t,...n?{path:n}:{}})};if(!this.fs.existsSync(a)||!this.fs.statSync(a).isDirectory())return _(`manifest`,`failed`),v(`project.directory`,`Policy directory does not exist or is not a directory: ${a}`,d.relative(this.process.cwd(),a)),g.status=`failed`,g;let y=d.join(a,e);try{i(this.fs.existsSync(y)?this.fs.readFileSync(y,`utf8`):void 0,h(this,a)),_(`manifest`,`passed`)}catch(e){_(`manifest`,`failed`),v(`manifest.invalid`,e instanceof Error?e.message:String(e),d.relative(this.process.cwd(),y))}let b=await l.call(this,a,o);if(g.tools={opa:b.opa,regal:b.regal},_(`opa-version`,b.opaStatus),_(`regal-version`,b.regalStatus),b.diagnostics.forEach(e=>{v(e.code,e.message)}),g.tools.opa){let e=await c.call(this,{resolvedDir:a,fix:t,noInteractive:n,json:r,fixCommandHint:`transcend policy check --fix`,runner:o});g.unformattedFiles=e.unformattedFiles,g.fixedFiles=e.fixedFiles,_(`format`,e.status),e.diagnostics.forEach(e=>{v(e.code,e.message)});let i=await o(`opa`,[`check`,`--strict`,`--ignore`,`*_test.rego`,a],{cwd:a},this);i.code===0?_(`opa-check`,`passed`):(_(`opa-check`,`failed`),v(`opa.check`,s(i,`opa check failed with exit code ${i.code}`)))}if(g.tools.regal){let e=await u.call(this,{resolvedDir:a,runner:o});_(`regal-lint`,e.status),e.diagnostics.forEach(e=>{v(e.code,e.message)})}if(g.tools.opa){let e=await o(`opa`,[`test`,`--fail-on-empty`,`-b`,a],{cwd:a},this);e.code===0?_(`opa-test`,`passed`):(_(`opa-test`,`failed`),v(`opa.test`,s(e,`opa test --fail-on-empty -b failed with exit code ${e.code}`)))}return g.status=f.some(({status:e})=>e===`failed`)?`failed`:`passed`,g}async function v(e,i=r,s=o){a(this.process);let{fix:c=!1,noInteractive:l=!1,json:u=!1}=e,f=t(this.process.cwd(),i);if(!this.fs.existsSync(f)||!this.fs.statSync(f).isDirectory()){let e={version:1,status:`failed`,directory:f,fix:c,tools:{opa:null,regal:null},checks:p.map(e=>({name:e,status:e===`manifest`?`failed`:`skipped`})),unformattedFiles:[],fixedFiles:[],diagnostics:[{code:`project.directory`,severity:`error`,message:`Policy directory does not exist or is not a directory: ${f}`,path:d.relative(this.process.cwd(),f)}]};u?this.process.stdout.write(`${JSON.stringify(e)}\n`):g(this,e),this.process.exitCode=1;return}let m=n(this,f);if(m.length===0){let e={version:1,status:`failed`,directory:f,fix:c,tools:{opa:null,regal:null},checks:p.map(e=>({name:e,status:e===`manifest`?`failed`:`skipped`})),unformattedFiles:[],fixedFiles:[],diagnostics:[{code:`project.bundles`,severity:`error`,message:"No publishable policy bundles found. Add one with `transcend policy new`, or pass a directory that contains a `.manifest`.",path:d.relative(this.process.cwd(),f)||`.`}]};u?this.process.stdout.write(`${JSON.stringify(e)}\n`):g(this,e),this.process.exitCode=1;return}let h=[];for(let e of m)h.push(await _.call(this,{fix:c,noInteractive:l,json:u},e,s));let v=h.some(e=>e.status===`failed`);if(u)if(h.length===1)this.process.stdout.write(`${JSON.stringify(h[0])}\n`);else{let e={version:2,status:v?`failed`:`passed`,directory:f,fix:c,results:h};this.process.stdout.write(`${JSON.stringify(e)}\n`)}else h.length===1?g(this,h[0]):h.forEach((e,t)=>{t>0&&this.logger.info(``);let n=d.relative(this.process.cwd(),e.directory)||e.directory;g(this,e,`Policy verification — ${n}`)});v&&(this.process.exitCode=1)}export{v as check};
-//# sourceMappingURL=impl-BfS6LtNo2.mjs.map
+import{c as e,i as t,n,t as r}from"./policy-project-discovery-D16kgZwZ.mjs";import{n as i}from"./policy-bundle-manifest-DnqWtiDa.mjs";import{t as a}from"./done-input-validation-LiTaCEzF.mjs";import{t as o}from"./run-captured-process-BjaSDWXG.mjs";import{i as s,n as c,r as l,t as u}from"./runRegalLintStep-DPaMm7Gg.mjs";import d from"node:path";import f from"colors";const p=[`manifest`,`opa-version`,`regal-version`,`format`,`opa-check`,`regal-lint`,`opa-test`],m={manifest:`Manifest and package roots`,"opa-version":`OPA 1.x`,"regal-version":`Regal`,format:`OPA formatting`,"opa-check":`OPA strict check`,"regal-lint":`Regal lint`,"opa-test":`OPA tests`};function h(e,t,n=t){return e.fs.readdirSync(n,{withFileTypes:!0}).sort((e,t)=>e.name.localeCompare(t.name)).flatMap(r=>{let i=d.join(n,r.name);return r.isDirectory()?h(e,t,i):!r.isFile()||!r.name.endsWith(`.rego`)?[]:[{path:d.relative(t,i).split(d.sep).join(`/`),contents:e.fs.readFileSync(i,`utf8`)}]})}function g(e,t,n){n?e.logger.info(`${f.bold(n)}\n`):e.logger.info(`${f.bold(`Policy verification`)}\n`),t.checks.forEach(({name:n,status:r})=>{let i=r===`passed`?`PASS`:r===`failed`?`FAIL`:`SKIP`,a=r===`passed`?f.green(i):r===`failed`?f.red(i):f.yellow(i),o=n===`opa-version`&&t.tools.opa?` (${t.tools.opa})`:n===`regal-version`&&t.tools.regal?` (${t.tools.regal})`:``;e.logger.info(`${a} ${m[n]}${o}`)}),t.diagnostics.length>0&&e.logger.error(``),t.diagnostics.forEach(t=>{let n=t.path?`${t.path}: `:``;e.logger.error(f.red(`error [${t.code}]: ${n}${t.message}`))}),t.status===`passed`?(e.logger.info(``),e.logger.info(f.green(`Policy verification passed.`))):(e.logger.error(``),e.logger.error(f.red(`Policy verification failed.`)))}async function _({fix:t,noInteractive:n,json:r},a,o){let f=p.map(e=>({name:e,status:`skipped`})),m=[],g={version:1,status:`passed`,directory:a,fix:t,tools:{opa:null,regal:null},checks:f,unformattedFiles:[],fixedFiles:[],diagnostics:m},_=(e,t)=>{f.find(t=>t.name===e).status=t},v=(e,t,n)=>{m.push({code:e,severity:`error`,message:t,...n?{path:n}:{}})};if(!this.fs.existsSync(a)||!this.fs.statSync(a).isDirectory())return _(`manifest`,`failed`),v(`project.directory`,`Policy directory does not exist or is not a directory: ${a}`,d.relative(this.process.cwd(),a)),g.status=`failed`,g;let y=d.join(a,e);try{i(this.fs.existsSync(y)?this.fs.readFileSync(y,`utf8`):void 0,h(this,a)),_(`manifest`,`passed`)}catch(e){_(`manifest`,`failed`),v(`manifest.invalid`,e instanceof Error?e.message:String(e),d.relative(this.process.cwd(),y))}let b=await l.call(this,a,o);if(g.tools={opa:b.opa,regal:b.regal},_(`opa-version`,b.opaStatus),_(`regal-version`,b.regalStatus),b.diagnostics.forEach(e=>{v(e.code,e.message)}),g.tools.opa){let e=await c.call(this,{resolvedDir:a,fix:t,noInteractive:n,json:r,fixCommandHint:`transcend policy check --fix`,runner:o});g.unformattedFiles=e.unformattedFiles,g.fixedFiles=e.fixedFiles,_(`format`,e.status),e.diagnostics.forEach(e=>{v(e.code,e.message)});let i=await o(`opa`,[`check`,`--strict`,`--ignore`,`*_test.rego`,a],{cwd:a},this);i.code===0?_(`opa-check`,`passed`):(_(`opa-check`,`failed`),v(`opa.check`,s(i,`opa check failed with exit code ${i.code}`)))}if(g.tools.regal){let e=await u.call(this,{resolvedDir:a,runner:o});_(`regal-lint`,e.status),e.diagnostics.forEach(e=>{v(e.code,e.message)})}if(g.tools.opa){let e=await o(`opa`,[`test`,`--fail-on-empty`,`-b`,a],{cwd:a},this);e.code===0?_(`opa-test`,`passed`):(_(`opa-test`,`failed`),v(`opa.test`,s(e,`opa test --fail-on-empty -b failed with exit code ${e.code}`)))}return g.status=f.some(({status:e})=>e===`failed`)?`failed`:`passed`,g}async function v(e,i=r,s=o){a(this.process);let{fix:c=!1,noInteractive:l=!1,json:u=!1}=e,f=t(this.process.cwd(),i);if(!this.fs.existsSync(f)||!this.fs.statSync(f).isDirectory()){let e={version:1,status:`failed`,directory:f,fix:c,tools:{opa:null,regal:null},checks:p.map(e=>({name:e,status:e===`manifest`?`failed`:`skipped`})),unformattedFiles:[],fixedFiles:[],diagnostics:[{code:`project.directory`,severity:`error`,message:`Policy directory does not exist or is not a directory: ${f}`,path:d.relative(this.process.cwd(),f)}]};u?this.process.stdout.write(`${JSON.stringify(e)}\n`):g(this,e),this.process.exitCode=1;return}let m=n(this,f);if(m.length===0){let e={version:1,status:`failed`,directory:f,fix:c,tools:{opa:null,regal:null},checks:p.map(e=>({name:e,status:e===`manifest`?`failed`:`skipped`})),unformattedFiles:[],fixedFiles:[],diagnostics:[{code:`project.bundles`,severity:`error`,message:"No publishable policy bundles found. Add one with `transcend policy new`, or pass a directory that contains a `.manifest`.",path:d.relative(this.process.cwd(),f)||`.`}]};u?this.process.stdout.write(`${JSON.stringify(e)}\n`):g(this,e),this.process.exitCode=1;return}let h=[];for(let e of m)h.push(await _.call(this,{fix:c,noInteractive:l,json:u},e,s));let v=h.some(e=>e.status===`failed`);if(u)if(h.length===1)this.process.stdout.write(`${JSON.stringify(h[0])}\n`);else{let e={version:2,status:v?`failed`:`passed`,directory:f,fix:c,results:h};this.process.stdout.write(`${JSON.stringify(e)}\n`)}else h.length===1?g(this,h[0]):h.forEach((e,t)=>{t>0&&this.logger.info(``);let n=d.relative(this.process.cwd(),e.directory)||e.directory;g(this,e,`Policy verification — ${n}`)});v&&(this.process.exitCode=1)}export{v as check};
+//# sourceMappingURL=impl-CZdJmC_12.mjs.map

package/dist/{impl-BfS6LtNo2.mjs.map → impl-CZdJmC_12.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"impl-BfS6LtNo2.mjs","names":[],"sources":["../src/lib/policy/policy-check-model.ts","../src/commands/policy/helpers/collectPolicyRegoFiles.ts","../src/commands/policy/check/impl.ts"],"sourcesContent":["/** Stable policy check result schema version. */\nexport const POLICY_CHECK_RESULT_VERSION = 1;\n\n/** Stable multi-bundle check result schema version. */\nexport const POLICY_CHECK_MULTI_RESULT_VERSION = 2;\n\n/** Status of the full gate or an individual verification. */\nexport type PolicyCheckStatus = 'passed' | 'failed' | 'skipped';\n\n/** One named policy verification. */\nexport interface PolicyCheckStep {\n  /** Stable verification name. */\n  name:\n    | 'manifest'\n    | 'opa-version'\n    | 'regal-version'\n    | 'format'\n    | 'opa-check'\n    | 'regal-lint'\n    | 'opa-test';\n  /** Verification outcome. */\n  status: PolicyCheckStatus;\n}\n\n/** Stable verification execution order. */\nexport const POLICY_CHECK_STEP_NAMES: PolicyCheckStep['name'][] = [\n  'manifest',\n  'opa-version',\n  'regal-version',\n  'format',\n  'opa-check',\n  'regal-lint',\n  'opa-test',\n];\n\n/** User-facing verification labels. */\nexport const POLICY_CHECK_STEP_LABELS: Readonly<Record<PolicyCheckStep['name'], string>> = {\n  manifest: 'Manifest and package roots',\n  'opa-version': 'OPA 1.x',\n  'regal-version': 'Regal',\n  format: 'OPA formatting',\n  'opa-check': 'OPA strict check',\n  'regal-lint': 'Regal lint',\n  'opa-test': 'OPA tests',\n};\n\n/** One machine-readable policy check diagnostic. */\nexport interface PolicyCheckDiagnostic {\n  /** Stable diagnostic identifier. */\n  code: string;\n  /** Diagnostic severity. */\n  severity: 'error';\n  /** Human-readable detail, including captured tool output when available. */\n  message: string;\n  /** Optional path relative to the invocation directory. */\n  path?: string;\n}\n\n/** Detected local policy tool versions. */\nexport interface PolicyCheckTools {\n  /** Detected OPA version, or null when missing or unsupported. */\n  opa: string | null;\n  /** Detected Regal version, or null when missing or unsupported. */\n  regal: string | null;\n}\n\n/** Stable result emitted by `transcend policy check --json` for one bundle. */\nexport interface PolicyCheckResult {\n  /** Result schema version. */\n  version: typeof POLICY_CHECK_RESULT_VERSION;\n  /** Overall verification outcome. */\n  status: Exclude<PolicyCheckStatus, 'skipped'>;\n  /** Absolute policy bundle directory. */\n  directory: string;\n  /** Whether formatting repair was explicitly requested. */\n  fix: boolean;\n  /** Detected supported tool versions. */\n  tools: PolicyCheckTools;\n  /** Verification outcomes in stable execution order. */\n  checks: PolicyCheckStep[];\n  /** Files found to need OPA formatting, relative to the policy directory. */\n  unformattedFiles: string[];\n  /** Files repaired with OPA formatting, relative to the policy directory. */\n  fixedFiles: string[];\n  /** Ordered verification diagnostics. */\n  diagnostics: PolicyCheckDiagnostic[];\n}\n\n/**\n * Stable result when `transcend policy check --json` verifies multiple bundles.\n *\n * Emitted only when the selected path is a workspace with more than one\n * publishable `*-bundle/` directory.\n */\nexport interface PolicyCheckMultiResult {\n  /** Result schema version. */\n  version: typeof POLICY_CHECK_MULTI_RESULT_VERSION;\n  /** Overall verification outcome across all bundles. */\n  status: Exclude<PolicyCheckStatus, 'skipped'>;\n  /** Absolute policy workspace directory that was searched. */\n  directory: string;\n  /** Whether formatting repair was explicitly requested. */\n  fix: boolean;\n  /** Per-bundle results in discovery order. */\n  results: PolicyCheckResult[];\n}\n","import path from 'node:path';\n\nimport type { LocalContext } from '../../../context.js';\nimport type { PolicyBundleRegoFile } from '../../../lib/policy/policy-bundle-manifest.js';\n\n/**\n * Collect Rego source snapshots without following symlinks.\n *\n * @param context - CLI context\n * @param projectDirectory - Absolute policy directory\n * @param currentDirectory - Current recursive directory\n * @returns Deterministically ordered Rego snapshots\n */\nexport function collectPolicyRegoFiles(\n  context: LocalContext,\n  projectDirectory: string,\n  currentDirectory: string = projectDirectory,\n): PolicyBundleRegoFile[] {\n  return context.fs\n    .readdirSync(currentDirectory, { withFileTypes: true })\n    .sort((left, right) => left.name.localeCompare(right.name))\n    .flatMap((entry) => {\n      const absolutePath = path.join(currentDirectory, entry.name);\n      if (entry.isDirectory()) {\n        return collectPolicyRegoFiles(context, projectDirectory, absolutePath);\n      }\n      if (!entry.isFile() || !entry.name.endsWith('.rego')) {\n        return [];\n      }\n      return [\n        {\n          path: path.relative(projectDirectory, absolutePath).split(path.sep).join('/'),\n          contents: context.fs.readFileSync(absolutePath, 'utf8'),\n        },\n      ];\n    });\n}\n","import path from 'node:path';\n\nimport colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport {\n  runCapturedProcess,\n  type CapturedProcessRunner,\n} from '../../../lib/cli/run-captured-process.js';\nimport { validatePolicyBundleContents } from '../../../lib/policy/policy-bundle-manifest.js';\nimport {\n  type PolicyCheckDiagnostic,\n  type PolicyCheckMultiResult,\n  type PolicyCheckResult,\n  type PolicyCheckStep,\n  POLICY_CHECK_MULTI_RESULT_VERSION,\n  POLICY_CHECK_RESULT_VERSION,\n  POLICY_CHECK_STEP_LABELS,\n  POLICY_CHECK_STEP_NAMES,\n} from '../../../lib/policy/policy-check-model.js';\nimport { getPolicyProcessFailureMessage } from '../../../lib/policy/policy-process-output.js';\nimport {\n  DEFAULT_POLICY_PROJECT_DIRECTORY,\n  discoverPolicyBundleDirectories,\n  resolvePolicyProjectDirectory,\n} from '../../../lib/policy/policy-project-discovery.js';\nimport { POLICY_MANIFEST_FILENAME } from '../../../lib/policy/policy-scaffold-templates.js';\nimport { collectPolicyRegoFiles } from '../helpers/collectPolicyRegoFiles.js';\nimport { probePolicyToolVersions } from '../helpers/probePolicyToolVersions.js';\nimport { runOpaFormatStep } from '../helpers/runOpaFormatStep.js';\nimport { runRegalLintStep } from '../helpers/runRegalLintStep.js';\n\n/** CLI flags for `transcend policy check`. */\nexport interface CheckCommandFlags {\n  /** Apply OPA formatting. */\n  fix: boolean;\n  /** Disable the optional formatting confirmation. */\n  noInteractive: boolean;\n  /** Emit one stable JSON result on stdout. */\n  json: boolean;\n}\n\n/**\n * Render the terminal summary for a policy verification result.\n *\n * @param context - CLI context\n * @param result - Completed verification result\n * @param heading - Optional section heading when checking multiple bundles\n */\nfunction renderResult(context: LocalContext, result: PolicyCheckResult, heading?: string): void {\n  if (heading) {\n    context.logger.info(`${colors.bold(heading)}\\n`);\n  } else {\n    context.logger.info(`${colors.bold('Policy verification')}\\n`);\n  }\n  result.checks.forEach(({ name, status }) => {\n    const label = status === 'passed' ? 'PASS' : status === 'failed' ? 'FAIL' : 'SKIP';\n    const styledLabel =\n      status === 'passed'\n        ? colors.green(label)\n        : status === 'failed'\n          ? colors.red(label)\n          : colors.yellow(label);\n    const version =\n      name === 'opa-version' && result.tools.opa\n        ? ` (${result.tools.opa})`\n        : name === 'regal-version' && result.tools.regal\n          ? ` (${result.tools.regal})`\n          : '';\n    context.logger.info(`${styledLabel} ${POLICY_CHECK_STEP_LABELS[name]}${version}`);\n  });\n  if (result.diagnostics.length > 0) {\n    context.logger.error('');\n  }\n  result.diagnostics.forEach((diagnostic) => {\n    const location = diagnostic.path ? `${diagnostic.path}: ` : '';\n    context.logger.error(\n      colors.red(`error [${diagnostic.code}]: ${location}${diagnostic.message}`),\n    );\n  });\n  if (result.status === 'passed') {\n    context.logger.info('');\n    context.logger.info(colors.green('Policy verification passed.'));\n  } else {\n    context.logger.error('');\n    context.logger.error(colors.red('Policy verification failed.'));\n  }\n}\n\n/**\n * Verify one publishable policy bundle directory.\n *\n * @param this - CLI context\n * @param flags - Command flags\n * @param resolvedDir - Absolute bundle directory\n * @param runner - Captured subprocess runner\n * @returns Completed verification result\n */\nasync function checkBundle(\n  this: LocalContext,\n  { fix, noInteractive, json }: CheckCommandFlags,\n  resolvedDir: string,\n  runner: CapturedProcessRunner,\n): Promise<PolicyCheckResult> {\n  const checks: PolicyCheckStep[] = POLICY_CHECK_STEP_NAMES.map((name) => ({\n    name,\n    status: 'skipped',\n  }));\n  const diagnostics: PolicyCheckDiagnostic[] = [];\n  const result: PolicyCheckResult = {\n    version: POLICY_CHECK_RESULT_VERSION,\n    status: 'passed',\n    directory: resolvedDir,\n    fix,\n    tools: { opa: null, regal: null },\n    checks,\n    unformattedFiles: [],\n    fixedFiles: [],\n    diagnostics,\n  };\n  const setStatus = (name: PolicyCheckStep['name'], status: PolicyCheckStep['status']): void => {\n    checks.find((check) => check.name === name)!.status = status;\n  };\n  const addError = (code: string, message: string, diagnosticPath?: string): void => {\n    diagnostics.push({\n      code,\n      severity: 'error',\n      message,\n      ...(diagnosticPath ? { path: diagnosticPath } : {}),\n    });\n  };\n\n  if (!this.fs.existsSync(resolvedDir) || !this.fs.statSync(resolvedDir).isDirectory()) {\n    setStatus('manifest', 'failed');\n    addError(\n      'project.directory',\n      `Policy directory does not exist or is not a directory: ${resolvedDir}`,\n      path.relative(this.process.cwd(), resolvedDir),\n    );\n    result.status = 'failed';\n    return result;\n  }\n\n  const manifestPath = path.join(resolvedDir, POLICY_MANIFEST_FILENAME);\n  try {\n    validatePolicyBundleContents(\n      this.fs.existsSync(manifestPath) ? this.fs.readFileSync(manifestPath, 'utf8') : undefined,\n      collectPolicyRegoFiles(this, resolvedDir),\n    );\n    setStatus('manifest', 'passed');\n  } catch (error) {\n    setStatus('manifest', 'failed');\n    addError(\n      'manifest.invalid',\n      error instanceof Error ? error.message : String(error),\n      path.relative(this.process.cwd(), manifestPath),\n    );\n  }\n\n  const toolVersions = await probePolicyToolVersions.call(this, resolvedDir, runner);\n  result.tools = { opa: toolVersions.opa, regal: toolVersions.regal };\n  setStatus('opa-version', toolVersions.opaStatus);\n  setStatus('regal-version', toolVersions.regalStatus);\n  toolVersions.diagnostics.forEach((diagnostic) => {\n    addError(diagnostic.code, diagnostic.message);\n  });\n\n  if (result.tools.opa) {\n    const formatStep = await runOpaFormatStep.call(this, {\n      resolvedDir,\n      fix,\n      noInteractive,\n      json,\n      fixCommandHint: 'transcend policy check --fix',\n      runner,\n    });\n    result.unformattedFiles = formatStep.unformattedFiles;\n    result.fixedFiles = formatStep.fixedFiles;\n    setStatus('format', formatStep.status);\n    formatStep.diagnostics.forEach((diagnostic) => {\n      addError(diagnostic.code, diagnostic.message);\n    });\n\n    const checkResult = await runner(\n      'opa',\n      ['check', '--strict', '--ignore', '*_test.rego', resolvedDir],\n      { cwd: resolvedDir },\n      this,\n    );\n    if (checkResult.code === 0) {\n      setStatus('opa-check', 'passed');\n    } else {\n      setStatus('opa-check', 'failed');\n      addError(\n        'opa.check',\n        getPolicyProcessFailureMessage(\n          checkResult,\n          `opa check failed with exit code ${checkResult.code}`,\n        ),\n      );\n    }\n  }\n\n  if (result.tools.regal) {\n    const regalStep = await runRegalLintStep.call(this, { resolvedDir, runner });\n    setStatus('regal-lint', regalStep.status);\n    regalStep.diagnostics.forEach((diagnostic) => {\n      addError(diagnostic.code, diagnostic.message);\n    });\n  }\n\n  if (result.tools.opa) {\n    const testResult = await runner(\n      'opa',\n      ['test', '--fail-on-empty', '-b', resolvedDir],\n      { cwd: resolvedDir },\n      this,\n    );\n    if (testResult.code === 0) {\n      setStatus('opa-test', 'passed');\n    } else {\n      setStatus('opa-test', 'failed');\n      addError(\n        'opa.test',\n        getPolicyProcessFailureMessage(\n          testResult,\n          `opa test --fail-on-empty -b failed with exit code ${testResult.code}`,\n        ),\n      );\n    }\n  }\n\n  result.status = checks.some(({ status }) => status === 'failed') ? 'failed' : 'passed';\n  return result;\n}\n\n/**\n * Verify local policy bundles with the shared upload contract, OPA, and Regal.\n *\n * With no directory (or the default workspace path), discovers every immediate\n * child that contains a `.manifest` and verifies each. Pass one bundle path to\n * verify a single publishable unit.\n *\n * @param this - CLI context\n * @param flags - Command flags\n * @param directory - Policy workspace or bundle directory\n * @param runner - Captured subprocess runner\n */\nexport async function check(\n  this: LocalContext,\n  flags: CheckCommandFlags,\n  directory: string = DEFAULT_POLICY_PROJECT_DIRECTORY,\n  runner: CapturedProcessRunner = runCapturedProcess,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  const { fix = false, noInteractive = false, json = false } = flags;\n  const resolvedDir = resolvePolicyProjectDirectory(this.process.cwd(), directory);\n\n  if (!this.fs.existsSync(resolvedDir) || !this.fs.statSync(resolvedDir).isDirectory()) {\n    const missing: PolicyCheckResult = {\n      version: POLICY_CHECK_RESULT_VERSION,\n      status: 'failed',\n      directory: resolvedDir,\n      fix,\n      tools: { opa: null, regal: null },\n      checks: POLICY_CHECK_STEP_NAMES.map((name) => ({\n        name,\n        status: name === 'manifest' ? 'failed' : 'skipped',\n      })),\n      unformattedFiles: [],\n      fixedFiles: [],\n      diagnostics: [\n        {\n          code: 'project.directory',\n          severity: 'error',\n          message: `Policy directory does not exist or is not a directory: ${resolvedDir}`,\n          path: path.relative(this.process.cwd(), resolvedDir),\n        },\n      ],\n    };\n    if (json) {\n      this.process.stdout.write(`${JSON.stringify(missing)}\\n`);\n    } else {\n      renderResult(this, missing);\n    }\n    this.process.exitCode = 1;\n    return;\n  }\n\n  const bundleDirectories = discoverPolicyBundleDirectories(this, resolvedDir);\n  if (bundleDirectories.length === 0) {\n    const empty: PolicyCheckResult = {\n      version: POLICY_CHECK_RESULT_VERSION,\n      status: 'failed',\n      directory: resolvedDir,\n      fix,\n      tools: { opa: null, regal: null },\n      checks: POLICY_CHECK_STEP_NAMES.map((name) => ({\n        name,\n        status: name === 'manifest' ? 'failed' : 'skipped',\n      })),\n      unformattedFiles: [],\n      fixedFiles: [],\n      diagnostics: [\n        {\n          code: 'project.bundles',\n          severity: 'error',\n          message:\n            'No publishable policy bundles found. Add one with `transcend policy new`, ' +\n            'or pass a directory that contains a `.manifest`.',\n          path: path.relative(this.process.cwd(), resolvedDir) || '.',\n        },\n      ],\n    };\n    if (json) {\n      this.process.stdout.write(`${JSON.stringify(empty)}\\n`);\n    } else {\n      renderResult(this, empty);\n    }\n    this.process.exitCode = 1;\n    return;\n  }\n\n  const results: PolicyCheckResult[] = [];\n  for (const bundleDirectory of bundleDirectories) {\n    results.push(\n      await checkBundle.call(this, { fix, noInteractive, json }, bundleDirectory, runner),\n    );\n  }\n\n  const failed = results.some((result) => result.status === 'failed');\n  if (json) {\n    if (results.length === 1) {\n      this.process.stdout.write(`${JSON.stringify(results[0])}\\n`);\n    } else {\n      const multi: PolicyCheckMultiResult = {\n        version: POLICY_CHECK_MULTI_RESULT_VERSION,\n        status: failed ? 'failed' : 'passed',\n        directory: resolvedDir,\n        fix,\n        results,\n      };\n      this.process.stdout.write(`${JSON.stringify(multi)}\\n`);\n    }\n  } else if (results.length === 1) {\n    renderResult(this, results[0]!);\n  } else {\n    results.forEach((result, index) => {\n      if (index > 0) {\n        this.logger.info('');\n      }\n      const relative = path.relative(this.process.cwd(), result.directory) || result.directory;\n      renderResult(this, result, `Policy verification — ${relative}`);\n    });\n  }\n\n  if (failed) {\n    this.process.exitCode = 1;\n  }\n}\n"],"mappings":"+WAyBA,MAAa,EAAqD,CAChE,WACA,cACA,gBACA,SACA,YACA,aACA,WACD,CAGY,EAA8E,CACzF,SAAU,6BACV,cAAe,UACf,gBAAiB,QACjB,OAAQ,iBACR,YAAa,mBACb,aAAc,aACd,WAAY,YACb,CC/BD,SAAgB,EACd,EACA,EACA,EAA2B,EACH,CACxB,OAAO,EAAQ,GACZ,YAAY,EAAkB,CAAE,cAAe,GAAM,CAAC,CACtD,MAAM,EAAM,IAAU,EAAK,KAAK,cAAc,EAAM,KAAK,CAAC,CAC1D,QAAS,GAAU,CAClB,IAAM,EAAe,EAAK,KAAK,EAAkB,EAAM,KAAK,CAO5D,OANI,EAAM,aAAa,CACd,EAAuB,EAAS,EAAkB,EAAa,CAEpE,CAAC,EAAM,QAAQ,EAAI,CAAC,EAAM,KAAK,SAAS,QAAQ,CAC3C,EAAE,CAEJ,CACL,CACE,KAAM,EAAK,SAAS,EAAkB,EAAa,CAAC,MAAM,EAAK,IAAI,CAAC,KAAK,IAAI,CAC7E,SAAU,EAAQ,GAAG,aAAa,EAAc,OAAO,CACxD,CACF,EACD,CCeN,SAAS,EAAa,EAAuB,EAA2B,EAAwB,CAC1F,EACF,EAAQ,OAAO,KAAK,GAAG,EAAO,KAAK,EAAQ,CAAC,IAAI,CAEhD,EAAQ,OAAO,KAAK,GAAG,EAAO,KAAK,sBAAsB,CAAC,IAAI,CAEhE,EAAO,OAAO,SAAS,CAAE,OAAM,YAAa,CAC1C,IAAM,EAAQ,IAAW,SAAW,OAAS,IAAW,SAAW,OAAS,OACtE,EACJ,IAAW,SACP,EAAO,MAAM,EAAM,CACnB,IAAW,SACT,EAAO,IAAI,EAAM,CACjB,EAAO,OAAO,EAAM,CACtB,EACJ,IAAS,eAAiB,EAAO,MAAM,IACnC,KAAK,EAAO,MAAM,IAAI,GACtB,IAAS,iBAAmB,EAAO,MAAM,MACvC,KAAK,EAAO,MAAM,MAAM,GACxB,GACR,EAAQ,OAAO,KAAK,GAAG,EAAY,GAAG,EAAyB,KAAQ,IAAU,EACjF,CACE,EAAO,YAAY,OAAS,GAC9B,EAAQ,OAAO,MAAM,GAAG,CAE1B,EAAO,YAAY,QAAS,GAAe,CACzC,IAAM,EAAW,EAAW,KAAO,GAAG,EAAW,KAAK,IAAM,GAC5D,EAAQ,OAAO,MACb,EAAO,IAAI,UAAU,EAAW,KAAK,KAAK,IAAW,EAAW,UAAU,CAC3E,EACD,CACE,EAAO,SAAW,UACpB,EAAQ,OAAO,KAAK,GAAG,CACvB,EAAQ,OAAO,KAAK,EAAO,MAAM,8BAA8B,CAAC,GAEhE,EAAQ,OAAO,MAAM,GAAG,CACxB,EAAQ,OAAO,MAAM,EAAO,IAAI,8BAA8B,CAAC,EAanE,eAAe,EAEb,CAAE,MAAK,gBAAe,QACtB,EACA,EAC4B,CAC5B,IAAM,EAA4B,EAAwB,IAAK,IAAU,CACvE,OACA,OAAQ,UACT,EAAE,CACG,EAAuC,EAAE,CACzC,EAA4B,CAChC,QAAA,EACA,OAAQ,SACR,UAAW,EACX,MACA,MAAO,CAAE,IAAK,KAAM,MAAO,KAAM,CACjC,SACA,iBAAkB,EAAE,CACpB,WAAY,EAAE,CACd,cACD,CACK,GAAa,EAA+B,IAA4C,CAC5F,EAAO,KAAM,GAAU,EAAM,OAAS,EAAK,CAAE,OAAS,GAElD,GAAY,EAAc,EAAiB,IAAkC,CACjF,EAAY,KAAK,CACf,OACA,SAAU,QACV,UACA,GAAI,EAAiB,CAAE,KAAM,EAAgB,CAAG,EAAE,CACnD,CAAC,EAGJ,GAAI,CAAC,KAAK,GAAG,WAAW,EAAY,EAAI,CAAC,KAAK,GAAG,SAAS,EAAY,CAAC,aAAa,CAQlF,OAPA,EAAU,WAAY,SAAS,CAC/B,EACE,oBACA,0DAA0D,IAC1D,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAY,CAC/C,CACD,EAAO,OAAS,SACT,EAGT,IAAM,EAAe,EAAK,KAAK,EAAa,EAAyB,CACrE,GAAI,CACF,EACE,KAAK,GAAG,WAAW,EAAa,CAAG,KAAK,GAAG,aAAa,EAAc,OAAO,CAAG,IAAA,GAChF,EAAuB,KAAM,EAAY,CAC1C,CACD,EAAU,WAAY,SAAS,OACxB,EAAO,CACd,EAAU,WAAY,SAAS,CAC/B,EACE,mBACA,aAAiB,MAAQ,EAAM,QAAU,OAAO,EAAM,CACtD,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAa,CAChD,CAGH,IAAM,EAAe,MAAM,EAAwB,KAAK,KAAM,EAAa,EAAO,CAQlF,GAPA,EAAO,MAAQ,CAAE,IAAK,EAAa,IAAK,MAAO,EAAa,MAAO,CACnE,EAAU,cAAe,EAAa,UAAU,CAChD,EAAU,gBAAiB,EAAa,YAAY,CACpD,EAAa,YAAY,QAAS,GAAe,CAC/C,EAAS,EAAW,KAAM,EAAW,QAAQ,EAC7C,CAEE,EAAO,MAAM,IAAK,CACpB,IAAM,EAAa,MAAM,EAAiB,KAAK,KAAM,CACnD,cACA,MACA,gBACA,OACA,eAAgB,+BAChB,SACD,CAAC,CACF,EAAO,iBAAmB,EAAW,iBACrC,EAAO,WAAa,EAAW,WAC/B,EAAU,SAAU,EAAW,OAAO,CACtC,EAAW,YAAY,QAAS,GAAe,CAC7C,EAAS,EAAW,KAAM,EAAW,QAAQ,EAC7C,CAEF,IAAM,EAAc,MAAM,EACxB,MACA,CAAC,QAAS,WAAY,WAAY,cAAe,EAAY,CAC7D,CAAE,IAAK,EAAa,CACpB,KACD,CACG,EAAY,OAAS,EACvB,EAAU,YAAa,SAAS,EAEhC,EAAU,YAAa,SAAS,CAChC,EACE,YACA,EACE,EACA,mCAAmC,EAAY,OAChD,CACF,EAIL,GAAI,EAAO,MAAM,MAAO,CACtB,IAAM,EAAY,MAAM,EAAiB,KAAK,KAAM,CAAE,cAAa,SAAQ,CAAC,CAC5E,EAAU,aAAc,EAAU,OAAO,CACzC,EAAU,YAAY,QAAS,GAAe,CAC5C,EAAS,EAAW,KAAM,EAAW,QAAQ,EAC7C,CAGJ,GAAI,EAAO,MAAM,IAAK,CACpB,IAAM,EAAa,MAAM,EACvB,MACA,CAAC,OAAQ,kBAAmB,KAAM,EAAY,CAC9C,CAAE,IAAK,EAAa,CACpB,KACD,CACG,EAAW,OAAS,EACtB,EAAU,WAAY,SAAS,EAE/B,EAAU,WAAY,SAAS,CAC/B,EACE,WACA,EACE,EACA,qDAAqD,EAAW,OACjE,CACF,EAKL,MADA,GAAO,OAAS,EAAO,MAAM,CAAE,YAAa,IAAW,SAAS,CAAG,SAAW,SACvE,EAeT,eAAsB,EAEpB,EACA,EAAoB,EACpB,EAAgC,EACjB,CACf,EAAoB,KAAK,QAAQ,CAEjC,GAAM,CAAE,MAAM,GAAO,gBAAgB,GAAO,OAAO,IAAU,EACvD,EAAc,EAA8B,KAAK,QAAQ,KAAK,CAAE,EAAU,CAEhF,GAAI,CAAC,KAAK,GAAG,WAAW,EAAY,EAAI,CAAC,KAAK,GAAG,SAAS,EAAY,CAAC,aAAa,CAAE,CACpF,IAAM,EAA6B,CACjC,QAAA,EACA,OAAQ,SACR,UAAW,EACX,MACA,MAAO,CAAE,IAAK,KAAM,MAAO,KAAM,CACjC,OAAQ,EAAwB,IAAK,IAAU,CAC7C,OACA,OAAQ,IAAS,WAAa,SAAW,UAC1C,EAAE,CACH,iBAAkB,EAAE,CACpB,WAAY,EAAE,CACd,YAAa,CACX,CACE,KAAM,oBACN,SAAU,QACV,QAAS,0DAA0D,IACnE,KAAM,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAY,CACrD,CACF,CACF,CACG,EACF,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAQ,CAAC,IAAI,CAEzD,EAAa,KAAM,EAAQ,CAE7B,KAAK,QAAQ,SAAW,EACxB,OAGF,IAAM,EAAoB,EAAgC,KAAM,EAAY,CAC5E,GAAI,EAAkB,SAAW,EAAG,CAClC,IAAM,EAA2B,CAC/B,QAAA,EACA,OAAQ,SACR,UAAW,EACX,MACA,MAAO,CAAE,IAAK,KAAM,MAAO,KAAM,CACjC,OAAQ,EAAwB,IAAK,IAAU,CAC7C,OACA,OAAQ,IAAS,WAAa,SAAW,UAC1C,EAAE,CACH,iBAAkB,EAAE,CACpB,WAAY,EAAE,CACd,YAAa,CACX,CACE,KAAM,kBACN,SAAU,QACV,QACE,6HAEF,KAAM,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAY,EAAI,IACzD,CACF,CACF,CACG,EACF,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAM,CAAC,IAAI,CAEvD,EAAa,KAAM,EAAM,CAE3B,KAAK,QAAQ,SAAW,EACxB,OAGF,IAAM,EAA+B,EAAE,CACvC,IAAK,IAAM,KAAmB,EAC5B,EAAQ,KACN,MAAM,EAAY,KAAK,KAAM,CAAE,MAAK,gBAAe,OAAM,CAAE,EAAiB,EAAO,CACpF,CAGH,IAAM,EAAS,EAAQ,KAAM,GAAW,EAAO,SAAW,SAAS,CACnE,GAAI,EACF,GAAI,EAAQ,SAAW,EACrB,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAQ,GAAG,CAAC,IAAI,KACvD,CACL,IAAM,EAAgC,CACpC,QAAA,EACA,OAAQ,EAAS,SAAW,SAC5B,UAAW,EACX,MACA,UACD,CACD,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAM,CAAC,IAAI,MAEhD,EAAQ,SAAW,EAC5B,EAAa,KAAM,EAAQ,GAAI,CAE/B,EAAQ,SAAS,EAAQ,IAAU,CAC7B,EAAQ,GACV,KAAK,OAAO,KAAK,GAAG,CAEtB,IAAM,EAAW,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAO,UAAU,EAAI,EAAO,UAC/E,EAAa,KAAM,EAAQ,yBAAyB,IAAW,EAC/D,CAGA,IACF,KAAK,QAAQ,SAAW"}
+{"version":3,"file":"impl-CZdJmC_12.mjs","names":[],"sources":["../src/lib/policy/policy-check-model.ts","../src/commands/policy/helpers/collectPolicyRegoFiles.ts","../src/commands/policy/check/impl.ts"],"sourcesContent":["/** Stable policy check result schema version. */\nexport const POLICY_CHECK_RESULT_VERSION = 1;\n\n/** Stable multi-bundle check result schema version. */\nexport const POLICY_CHECK_MULTI_RESULT_VERSION = 2;\n\n/** Status of the full gate or an individual verification. */\nexport type PolicyCheckStatus = 'passed' | 'failed' | 'skipped';\n\n/** One named policy verification. */\nexport interface PolicyCheckStep {\n  /** Stable verification name. */\n  name:\n    | 'manifest'\n    | 'opa-version'\n    | 'regal-version'\n    | 'format'\n    | 'opa-check'\n    | 'regal-lint'\n    | 'opa-test';\n  /** Verification outcome. */\n  status: PolicyCheckStatus;\n}\n\n/** Stable verification execution order. */\nexport const POLICY_CHECK_STEP_NAMES: PolicyCheckStep['name'][] = [\n  'manifest',\n  'opa-version',\n  'regal-version',\n  'format',\n  'opa-check',\n  'regal-lint',\n  'opa-test',\n];\n\n/** User-facing verification labels. */\nexport const POLICY_CHECK_STEP_LABELS: Readonly<Record<PolicyCheckStep['name'], string>> = {\n  manifest: 'Manifest and package roots',\n  'opa-version': 'OPA 1.x',\n  'regal-version': 'Regal',\n  format: 'OPA formatting',\n  'opa-check': 'OPA strict check',\n  'regal-lint': 'Regal lint',\n  'opa-test': 'OPA tests',\n};\n\n/** One machine-readable policy check diagnostic. */\nexport interface PolicyCheckDiagnostic {\n  /** Stable diagnostic identifier. */\n  code: string;\n  /** Diagnostic severity. */\n  severity: 'error';\n  /** Human-readable detail, including captured tool output when available. */\n  message: string;\n  /** Optional path relative to the invocation directory. */\n  path?: string;\n}\n\n/** Detected local policy tool versions. */\nexport interface PolicyCheckTools {\n  /** Detected OPA version, or null when missing or unsupported. */\n  opa: string | null;\n  /** Detected Regal version, or null when missing or unsupported. */\n  regal: string | null;\n}\n\n/** Stable result emitted by `transcend policy check --json` for one bundle. */\nexport interface PolicyCheckResult {\n  /** Result schema version. */\n  version: typeof POLICY_CHECK_RESULT_VERSION;\n  /** Overall verification outcome. */\n  status: Exclude<PolicyCheckStatus, 'skipped'>;\n  /** Absolute policy bundle directory. */\n  directory: string;\n  /** Whether formatting repair was explicitly requested. */\n  fix: boolean;\n  /** Detected supported tool versions. */\n  tools: PolicyCheckTools;\n  /** Verification outcomes in stable execution order. */\n  checks: PolicyCheckStep[];\n  /** Files found to need OPA formatting, relative to the policy directory. */\n  unformattedFiles: string[];\n  /** Files repaired with OPA formatting, relative to the policy directory. */\n  fixedFiles: string[];\n  /** Ordered verification diagnostics. */\n  diagnostics: PolicyCheckDiagnostic[];\n}\n\n/**\n * Stable result when `transcend policy check --json` verifies multiple bundles.\n *\n * Emitted only when the selected path is a workspace with more than one\n * publishable `*-bundle/` directory.\n */\nexport interface PolicyCheckMultiResult {\n  /** Result schema version. */\n  version: typeof POLICY_CHECK_MULTI_RESULT_VERSION;\n  /** Overall verification outcome across all bundles. */\n  status: Exclude<PolicyCheckStatus, 'skipped'>;\n  /** Absolute policy workspace directory that was searched. */\n  directory: string;\n  /** Whether formatting repair was explicitly requested. */\n  fix: boolean;\n  /** Per-bundle results in discovery order. */\n  results: PolicyCheckResult[];\n}\n","import path from 'node:path';\n\nimport type { LocalContext } from '../../../context.js';\nimport type { PolicyBundleRegoFile } from '../../../lib/policy/policy-bundle-manifest.js';\n\n/**\n * Collect Rego source snapshots without following symlinks.\n *\n * @param context - CLI context\n * @param projectDirectory - Absolute policy directory\n * @param currentDirectory - Current recursive directory\n * @returns Deterministically ordered Rego snapshots\n */\nexport function collectPolicyRegoFiles(\n  context: LocalContext,\n  projectDirectory: string,\n  currentDirectory: string = projectDirectory,\n): PolicyBundleRegoFile[] {\n  return context.fs\n    .readdirSync(currentDirectory, { withFileTypes: true })\n    .sort((left, right) => left.name.localeCompare(right.name))\n    .flatMap((entry) => {\n      const absolutePath = path.join(currentDirectory, entry.name);\n      if (entry.isDirectory()) {\n        return collectPolicyRegoFiles(context, projectDirectory, absolutePath);\n      }\n      if (!entry.isFile() || !entry.name.endsWith('.rego')) {\n        return [];\n      }\n      return [\n        {\n          path: path.relative(projectDirectory, absolutePath).split(path.sep).join('/'),\n          contents: context.fs.readFileSync(absolutePath, 'utf8'),\n        },\n      ];\n    });\n}\n","import path from 'node:path';\n\nimport colors from 'colors';\n\nimport type { LocalContext } from '../../../context.js';\nimport { doneInputValidation } from '../../../lib/cli/done-input-validation.js';\nimport {\n  runCapturedProcess,\n  type CapturedProcessRunner,\n} from '../../../lib/cli/run-captured-process.js';\nimport { validatePolicyBundleContents } from '../../../lib/policy/policy-bundle-manifest.js';\nimport {\n  type PolicyCheckDiagnostic,\n  type PolicyCheckMultiResult,\n  type PolicyCheckResult,\n  type PolicyCheckStep,\n  POLICY_CHECK_MULTI_RESULT_VERSION,\n  POLICY_CHECK_RESULT_VERSION,\n  POLICY_CHECK_STEP_LABELS,\n  POLICY_CHECK_STEP_NAMES,\n} from '../../../lib/policy/policy-check-model.js';\nimport { getPolicyProcessFailureMessage } from '../../../lib/policy/policy-process-output.js';\nimport {\n  DEFAULT_POLICY_PROJECT_DIRECTORY,\n  discoverPolicyBundleDirectories,\n  resolvePolicyProjectDirectory,\n} from '../../../lib/policy/policy-project-discovery.js';\nimport { POLICY_MANIFEST_FILENAME } from '../../../lib/policy/policy-scaffold-templates.js';\nimport { collectPolicyRegoFiles } from '../helpers/collectPolicyRegoFiles.js';\nimport { probePolicyToolVersions } from '../helpers/probePolicyToolVersions.js';\nimport { runOpaFormatStep } from '../helpers/runOpaFormatStep.js';\nimport { runRegalLintStep } from '../helpers/runRegalLintStep.js';\n\n/** CLI flags for `transcend policy check`. */\nexport interface CheckCommandFlags {\n  /** Apply OPA formatting. */\n  fix: boolean;\n  /** Disable the optional formatting confirmation. */\n  noInteractive: boolean;\n  /** Emit one stable JSON result on stdout. */\n  json: boolean;\n}\n\n/**\n * Render the terminal summary for a policy verification result.\n *\n * @param context - CLI context\n * @param result - Completed verification result\n * @param heading - Optional section heading when checking multiple bundles\n */\nfunction renderResult(context: LocalContext, result: PolicyCheckResult, heading?: string): void {\n  if (heading) {\n    context.logger.info(`${colors.bold(heading)}\\n`);\n  } else {\n    context.logger.info(`${colors.bold('Policy verification')}\\n`);\n  }\n  result.checks.forEach(({ name, status }) => {\n    const label = status === 'passed' ? 'PASS' : status === 'failed' ? 'FAIL' : 'SKIP';\n    const styledLabel =\n      status === 'passed'\n        ? colors.green(label)\n        : status === 'failed'\n          ? colors.red(label)\n          : colors.yellow(label);\n    const version =\n      name === 'opa-version' && result.tools.opa\n        ? ` (${result.tools.opa})`\n        : name === 'regal-version' && result.tools.regal\n          ? ` (${result.tools.regal})`\n          : '';\n    context.logger.info(`${styledLabel} ${POLICY_CHECK_STEP_LABELS[name]}${version}`);\n  });\n  if (result.diagnostics.length > 0) {\n    context.logger.error('');\n  }\n  result.diagnostics.forEach((diagnostic) => {\n    const location = diagnostic.path ? `${diagnostic.path}: ` : '';\n    context.logger.error(\n      colors.red(`error [${diagnostic.code}]: ${location}${diagnostic.message}`),\n    );\n  });\n  if (result.status === 'passed') {\n    context.logger.info('');\n    context.logger.info(colors.green('Policy verification passed.'));\n  } else {\n    context.logger.error('');\n    context.logger.error(colors.red('Policy verification failed.'));\n  }\n}\n\n/**\n * Verify one publishable policy bundle directory.\n *\n * @param this - CLI context\n * @param flags - Command flags\n * @param resolvedDir - Absolute bundle directory\n * @param runner - Captured subprocess runner\n * @returns Completed verification result\n */\nasync function checkBundle(\n  this: LocalContext,\n  { fix, noInteractive, json }: CheckCommandFlags,\n  resolvedDir: string,\n  runner: CapturedProcessRunner,\n): Promise<PolicyCheckResult> {\n  const checks: PolicyCheckStep[] = POLICY_CHECK_STEP_NAMES.map((name) => ({\n    name,\n    status: 'skipped',\n  }));\n  const diagnostics: PolicyCheckDiagnostic[] = [];\n  const result: PolicyCheckResult = {\n    version: POLICY_CHECK_RESULT_VERSION,\n    status: 'passed',\n    directory: resolvedDir,\n    fix,\n    tools: { opa: null, regal: null },\n    checks,\n    unformattedFiles: [],\n    fixedFiles: [],\n    diagnostics,\n  };\n  const setStatus = (name: PolicyCheckStep['name'], status: PolicyCheckStep['status']): void => {\n    checks.find((check) => check.name === name)!.status = status;\n  };\n  const addError = (code: string, message: string, diagnosticPath?: string): void => {\n    diagnostics.push({\n      code,\n      severity: 'error',\n      message,\n      ...(diagnosticPath ? { path: diagnosticPath } : {}),\n    });\n  };\n\n  if (!this.fs.existsSync(resolvedDir) || !this.fs.statSync(resolvedDir).isDirectory()) {\n    setStatus('manifest', 'failed');\n    addError(\n      'project.directory',\n      `Policy directory does not exist or is not a directory: ${resolvedDir}`,\n      path.relative(this.process.cwd(), resolvedDir),\n    );\n    result.status = 'failed';\n    return result;\n  }\n\n  const manifestPath = path.join(resolvedDir, POLICY_MANIFEST_FILENAME);\n  try {\n    validatePolicyBundleContents(\n      this.fs.existsSync(manifestPath) ? this.fs.readFileSync(manifestPath, 'utf8') : undefined,\n      collectPolicyRegoFiles(this, resolvedDir),\n    );\n    setStatus('manifest', 'passed');\n  } catch (error) {\n    setStatus('manifest', 'failed');\n    addError(\n      'manifest.invalid',\n      error instanceof Error ? error.message : String(error),\n      path.relative(this.process.cwd(), manifestPath),\n    );\n  }\n\n  const toolVersions = await probePolicyToolVersions.call(this, resolvedDir, runner);\n  result.tools = { opa: toolVersions.opa, regal: toolVersions.regal };\n  setStatus('opa-version', toolVersions.opaStatus);\n  setStatus('regal-version', toolVersions.regalStatus);\n  toolVersions.diagnostics.forEach((diagnostic) => {\n    addError(diagnostic.code, diagnostic.message);\n  });\n\n  if (result.tools.opa) {\n    const formatStep = await runOpaFormatStep.call(this, {\n      resolvedDir,\n      fix,\n      noInteractive,\n      json,\n      fixCommandHint: 'transcend policy check --fix',\n      runner,\n    });\n    result.unformattedFiles = formatStep.unformattedFiles;\n    result.fixedFiles = formatStep.fixedFiles;\n    setStatus('format', formatStep.status);\n    formatStep.diagnostics.forEach((diagnostic) => {\n      addError(diagnostic.code, diagnostic.message);\n    });\n\n    const checkResult = await runner(\n      'opa',\n      ['check', '--strict', '--ignore', '*_test.rego', resolvedDir],\n      { cwd: resolvedDir },\n      this,\n    );\n    if (checkResult.code === 0) {\n      setStatus('opa-check', 'passed');\n    } else {\n      setStatus('opa-check', 'failed');\n      addError(\n        'opa.check',\n        getPolicyProcessFailureMessage(\n          checkResult,\n          `opa check failed with exit code ${checkResult.code}`,\n        ),\n      );\n    }\n  }\n\n  if (result.tools.regal) {\n    const regalStep = await runRegalLintStep.call(this, { resolvedDir, runner });\n    setStatus('regal-lint', regalStep.status);\n    regalStep.diagnostics.forEach((diagnostic) => {\n      addError(diagnostic.code, diagnostic.message);\n    });\n  }\n\n  if (result.tools.opa) {\n    const testResult = await runner(\n      'opa',\n      ['test', '--fail-on-empty', '-b', resolvedDir],\n      { cwd: resolvedDir },\n      this,\n    );\n    if (testResult.code === 0) {\n      setStatus('opa-test', 'passed');\n    } else {\n      setStatus('opa-test', 'failed');\n      addError(\n        'opa.test',\n        getPolicyProcessFailureMessage(\n          testResult,\n          `opa test --fail-on-empty -b failed with exit code ${testResult.code}`,\n        ),\n      );\n    }\n  }\n\n  result.status = checks.some(({ status }) => status === 'failed') ? 'failed' : 'passed';\n  return result;\n}\n\n/**\n * Verify local policy bundles with the shared upload contract, OPA, and Regal.\n *\n * With no directory (or the default workspace path), discovers every immediate\n * child that contains a `.manifest` and verifies each. Pass one bundle path to\n * verify a single publishable unit.\n *\n * @param this - CLI context\n * @param flags - Command flags\n * @param directory - Policy workspace or bundle directory\n * @param runner - Captured subprocess runner\n */\nexport async function check(\n  this: LocalContext,\n  flags: CheckCommandFlags,\n  directory: string = DEFAULT_POLICY_PROJECT_DIRECTORY,\n  runner: CapturedProcessRunner = runCapturedProcess,\n): Promise<void> {\n  doneInputValidation(this.process);\n\n  const { fix = false, noInteractive = false, json = false } = flags;\n  const resolvedDir = resolvePolicyProjectDirectory(this.process.cwd(), directory);\n\n  if (!this.fs.existsSync(resolvedDir) || !this.fs.statSync(resolvedDir).isDirectory()) {\n    const missing: PolicyCheckResult = {\n      version: POLICY_CHECK_RESULT_VERSION,\n      status: 'failed',\n      directory: resolvedDir,\n      fix,\n      tools: { opa: null, regal: null },\n      checks: POLICY_CHECK_STEP_NAMES.map((name) => ({\n        name,\n        status: name === 'manifest' ? 'failed' : 'skipped',\n      })),\n      unformattedFiles: [],\n      fixedFiles: [],\n      diagnostics: [\n        {\n          code: 'project.directory',\n          severity: 'error',\n          message: `Policy directory does not exist or is not a directory: ${resolvedDir}`,\n          path: path.relative(this.process.cwd(), resolvedDir),\n        },\n      ],\n    };\n    if (json) {\n      this.process.stdout.write(`${JSON.stringify(missing)}\\n`);\n    } else {\n      renderResult(this, missing);\n    }\n    this.process.exitCode = 1;\n    return;\n  }\n\n  const bundleDirectories = discoverPolicyBundleDirectories(this, resolvedDir);\n  if (bundleDirectories.length === 0) {\n    const empty: PolicyCheckResult = {\n      version: POLICY_CHECK_RESULT_VERSION,\n      status: 'failed',\n      directory: resolvedDir,\n      fix,\n      tools: { opa: null, regal: null },\n      checks: POLICY_CHECK_STEP_NAMES.map((name) => ({\n        name,\n        status: name === 'manifest' ? 'failed' : 'skipped',\n      })),\n      unformattedFiles: [],\n      fixedFiles: [],\n      diagnostics: [\n        {\n          code: 'project.bundles',\n          severity: 'error',\n          message:\n            'No publishable policy bundles found. Add one with `transcend policy new`, ' +\n            'or pass a directory that contains a `.manifest`.',\n          path: path.relative(this.process.cwd(), resolvedDir) || '.',\n        },\n      ],\n    };\n    if (json) {\n      this.process.stdout.write(`${JSON.stringify(empty)}\\n`);\n    } else {\n      renderResult(this, empty);\n    }\n    this.process.exitCode = 1;\n    return;\n  }\n\n  const results: PolicyCheckResult[] = [];\n  for (const bundleDirectory of bundleDirectories) {\n    results.push(\n      await checkBundle.call(this, { fix, noInteractive, json }, bundleDirectory, runner),\n    );\n  }\n\n  const failed = results.some((result) => result.status === 'failed');\n  if (json) {\n    if (results.length === 1) {\n      this.process.stdout.write(`${JSON.stringify(results[0])}\\n`);\n    } else {\n      const multi: PolicyCheckMultiResult = {\n        version: POLICY_CHECK_MULTI_RESULT_VERSION,\n        status: failed ? 'failed' : 'passed',\n        directory: resolvedDir,\n        fix,\n        results,\n      };\n      this.process.stdout.write(`${JSON.stringify(multi)}\\n`);\n    }\n  } else if (results.length === 1) {\n    renderResult(this, results[0]!);\n  } else {\n    results.forEach((result, index) => {\n      if (index > 0) {\n        this.logger.info('');\n      }\n      const relative = path.relative(this.process.cwd(), result.directory) || result.directory;\n      renderResult(this, result, `Policy verification — ${relative}`);\n    });\n  }\n\n  if (failed) {\n    this.process.exitCode = 1;\n  }\n}\n"],"mappings":"+WAyBA,MAAa,EAAqD,CAChE,WACA,cACA,gBACA,SACA,YACA,aACA,WACD,CAGY,EAA8E,CACzF,SAAU,6BACV,cAAe,UACf,gBAAiB,QACjB,OAAQ,iBACR,YAAa,mBACb,aAAc,aACd,WAAY,YACb,CC/BD,SAAgB,EACd,EACA,EACA,EAA2B,EACH,CACxB,OAAO,EAAQ,GACZ,YAAY,EAAkB,CAAE,cAAe,GAAM,CAAC,CACtD,MAAM,EAAM,IAAU,EAAK,KAAK,cAAc,EAAM,KAAK,CAAC,CAC1D,QAAS,GAAU,CAClB,IAAM,EAAe,EAAK,KAAK,EAAkB,EAAM,KAAK,CAO5D,OANI,EAAM,aAAa,CACd,EAAuB,EAAS,EAAkB,EAAa,CAEpE,CAAC,EAAM,QAAQ,EAAI,CAAC,EAAM,KAAK,SAAS,QAAQ,CAC3C,EAAE,CAEJ,CACL,CACE,KAAM,EAAK,SAAS,EAAkB,EAAa,CAAC,MAAM,EAAK,IAAI,CAAC,KAAK,IAAI,CAC7E,SAAU,EAAQ,GAAG,aAAa,EAAc,OAAO,CACxD,CACF,EACD,CCeN,SAAS,EAAa,EAAuB,EAA2B,EAAwB,CAC1F,EACF,EAAQ,OAAO,KAAK,GAAG,EAAO,KAAK,EAAQ,CAAC,IAAI,CAEhD,EAAQ,OAAO,KAAK,GAAG,EAAO,KAAK,sBAAsB,CAAC,IAAI,CAEhE,EAAO,OAAO,SAAS,CAAE,OAAM,YAAa,CAC1C,IAAM,EAAQ,IAAW,SAAW,OAAS,IAAW,SAAW,OAAS,OACtE,EACJ,IAAW,SACP,EAAO,MAAM,EAAM,CACnB,IAAW,SACT,EAAO,IAAI,EAAM,CACjB,EAAO,OAAO,EAAM,CACtB,EACJ,IAAS,eAAiB,EAAO,MAAM,IACnC,KAAK,EAAO,MAAM,IAAI,GACtB,IAAS,iBAAmB,EAAO,MAAM,MACvC,KAAK,EAAO,MAAM,MAAM,GACxB,GACR,EAAQ,OAAO,KAAK,GAAG,EAAY,GAAG,EAAyB,KAAQ,IAAU,EACjF,CACE,EAAO,YAAY,OAAS,GAC9B,EAAQ,OAAO,MAAM,GAAG,CAE1B,EAAO,YAAY,QAAS,GAAe,CACzC,IAAM,EAAW,EAAW,KAAO,GAAG,EAAW,KAAK,IAAM,GAC5D,EAAQ,OAAO,MACb,EAAO,IAAI,UAAU,EAAW,KAAK,KAAK,IAAW,EAAW,UAAU,CAC3E,EACD,CACE,EAAO,SAAW,UACpB,EAAQ,OAAO,KAAK,GAAG,CACvB,EAAQ,OAAO,KAAK,EAAO,MAAM,8BAA8B,CAAC,GAEhE,EAAQ,OAAO,MAAM,GAAG,CACxB,EAAQ,OAAO,MAAM,EAAO,IAAI,8BAA8B,CAAC,EAanE,eAAe,EAEb,CAAE,MAAK,gBAAe,QACtB,EACA,EAC4B,CAC5B,IAAM,EAA4B,EAAwB,IAAK,IAAU,CACvE,OACA,OAAQ,UACT,EAAE,CACG,EAAuC,EAAE,CACzC,EAA4B,CAChC,QAAA,EACA,OAAQ,SACR,UAAW,EACX,MACA,MAAO,CAAE,IAAK,KAAM,MAAO,KAAM,CACjC,SACA,iBAAkB,EAAE,CACpB,WAAY,EAAE,CACd,cACD,CACK,GAAa,EAA+B,IAA4C,CAC5F,EAAO,KAAM,GAAU,EAAM,OAAS,EAAK,CAAE,OAAS,GAElD,GAAY,EAAc,EAAiB,IAAkC,CACjF,EAAY,KAAK,CACf,OACA,SAAU,QACV,UACA,GAAI,EAAiB,CAAE,KAAM,EAAgB,CAAG,EAAE,CACnD,CAAC,EAGJ,GAAI,CAAC,KAAK,GAAG,WAAW,EAAY,EAAI,CAAC,KAAK,GAAG,SAAS,EAAY,CAAC,aAAa,CAQlF,OAPA,EAAU,WAAY,SAAS,CAC/B,EACE,oBACA,0DAA0D,IAC1D,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAY,CAC/C,CACD,EAAO,OAAS,SACT,EAGT,IAAM,EAAe,EAAK,KAAK,EAAa,EAAyB,CACrE,GAAI,CACF,EACE,KAAK,GAAG,WAAW,EAAa,CAAG,KAAK,GAAG,aAAa,EAAc,OAAO,CAAG,IAAA,GAChF,EAAuB,KAAM,EAAY,CAC1C,CACD,EAAU,WAAY,SAAS,OACxB,EAAO,CACd,EAAU,WAAY,SAAS,CAC/B,EACE,mBACA,aAAiB,MAAQ,EAAM,QAAU,OAAO,EAAM,CACtD,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAa,CAChD,CAGH,IAAM,EAAe,MAAM,EAAwB,KAAK,KAAM,EAAa,EAAO,CAQlF,GAPA,EAAO,MAAQ,CAAE,IAAK,EAAa,IAAK,MAAO,EAAa,MAAO,CACnE,EAAU,cAAe,EAAa,UAAU,CAChD,EAAU,gBAAiB,EAAa,YAAY,CACpD,EAAa,YAAY,QAAS,GAAe,CAC/C,EAAS,EAAW,KAAM,EAAW,QAAQ,EAC7C,CAEE,EAAO,MAAM,IAAK,CACpB,IAAM,EAAa,MAAM,EAAiB,KAAK,KAAM,CACnD,cACA,MACA,gBACA,OACA,eAAgB,+BAChB,SACD,CAAC,CACF,EAAO,iBAAmB,EAAW,iBACrC,EAAO,WAAa,EAAW,WAC/B,EAAU,SAAU,EAAW,OAAO,CACtC,EAAW,YAAY,QAAS,GAAe,CAC7C,EAAS,EAAW,KAAM,EAAW,QAAQ,EAC7C,CAEF,IAAM,EAAc,MAAM,EACxB,MACA,CAAC,QAAS,WAAY,WAAY,cAAe,EAAY,CAC7D,CAAE,IAAK,EAAa,CACpB,KACD,CACG,EAAY,OAAS,EACvB,EAAU,YAAa,SAAS,EAEhC,EAAU,YAAa,SAAS,CAChC,EACE,YACA,EACE,EACA,mCAAmC,EAAY,OAChD,CACF,EAIL,GAAI,EAAO,MAAM,MAAO,CACtB,IAAM,EAAY,MAAM,EAAiB,KAAK,KAAM,CAAE,cAAa,SAAQ,CAAC,CAC5E,EAAU,aAAc,EAAU,OAAO,CACzC,EAAU,YAAY,QAAS,GAAe,CAC5C,EAAS,EAAW,KAAM,EAAW,QAAQ,EAC7C,CAGJ,GAAI,EAAO,MAAM,IAAK,CACpB,IAAM,EAAa,MAAM,EACvB,MACA,CAAC,OAAQ,kBAAmB,KAAM,EAAY,CAC9C,CAAE,IAAK,EAAa,CACpB,KACD,CACG,EAAW,OAAS,EACtB,EAAU,WAAY,SAAS,EAE/B,EAAU,WAAY,SAAS,CAC/B,EACE,WACA,EACE,EACA,qDAAqD,EAAW,OACjE,CACF,EAKL,MADA,GAAO,OAAS,EAAO,MAAM,CAAE,YAAa,IAAW,SAAS,CAAG,SAAW,SACvE,EAeT,eAAsB,EAEpB,EACA,EAAoB,EACpB,EAAgC,EACjB,CACf,EAAoB,KAAK,QAAQ,CAEjC,GAAM,CAAE,MAAM,GAAO,gBAAgB,GAAO,OAAO,IAAU,EACvD,EAAc,EAA8B,KAAK,QAAQ,KAAK,CAAE,EAAU,CAEhF,GAAI,CAAC,KAAK,GAAG,WAAW,EAAY,EAAI,CAAC,KAAK,GAAG,SAAS,EAAY,CAAC,aAAa,CAAE,CACpF,IAAM,EAA6B,CACjC,QAAA,EACA,OAAQ,SACR,UAAW,EACX,MACA,MAAO,CAAE,IAAK,KAAM,MAAO,KAAM,CACjC,OAAQ,EAAwB,IAAK,IAAU,CAC7C,OACA,OAAQ,IAAS,WAAa,SAAW,UAC1C,EAAE,CACH,iBAAkB,EAAE,CACpB,WAAY,EAAE,CACd,YAAa,CACX,CACE,KAAM,oBACN,SAAU,QACV,QAAS,0DAA0D,IACnE,KAAM,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAY,CACrD,CACF,CACF,CACG,EACF,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAQ,CAAC,IAAI,CAEzD,EAAa,KAAM,EAAQ,CAE7B,KAAK,QAAQ,SAAW,EACxB,OAGF,IAAM,EAAoB,EAAgC,KAAM,EAAY,CAC5E,GAAI,EAAkB,SAAW,EAAG,CAClC,IAAM,EAA2B,CAC/B,QAAA,EACA,OAAQ,SACR,UAAW,EACX,MACA,MAAO,CAAE,IAAK,KAAM,MAAO,KAAM,CACjC,OAAQ,EAAwB,IAAK,IAAU,CAC7C,OACA,OAAQ,IAAS,WAAa,SAAW,UAC1C,EAAE,CACH,iBAAkB,EAAE,CACpB,WAAY,EAAE,CACd,YAAa,CACX,CACE,KAAM,kBACN,SAAU,QACV,QACE,6HAEF,KAAM,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAY,EAAI,IACzD,CACF,CACF,CACG,EACF,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAM,CAAC,IAAI,CAEvD,EAAa,KAAM,EAAM,CAE3B,KAAK,QAAQ,SAAW,EACxB,OAGF,IAAM,EAA+B,EAAE,CACvC,IAAK,IAAM,KAAmB,EAC5B,EAAQ,KACN,MAAM,EAAY,KAAK,KAAM,CAAE,MAAK,gBAAe,OAAM,CAAE,EAAiB,EAAO,CACpF,CAGH,IAAM,EAAS,EAAQ,KAAM,GAAW,EAAO,SAAW,SAAS,CACnE,GAAI,EACF,GAAI,EAAQ,SAAW,EACrB,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAQ,GAAG,CAAC,IAAI,KACvD,CACL,IAAM,EAAgC,CACpC,QAAA,EACA,OAAQ,EAAS,SAAW,SAC5B,UAAW,EACX,MACA,UACD,CACD,KAAK,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAM,CAAC,IAAI,MAEhD,EAAQ,SAAW,EAC5B,EAAa,KAAM,EAAQ,GAAI,CAE/B,EAAQ,SAAS,EAAQ,IAAU,CAC7B,EAAQ,GACV,KAAK,OAAO,KAAK,GAAG,CAEtB,IAAM,EAAW,EAAK,SAAS,KAAK,QAAQ,KAAK,CAAE,EAAO,UAAU,EAAI,EAAO,UAC/E,EAAa,KAAM,EAAQ,yBAAyB,IAAW,EAC/D,CAGA,IACF,KAAK,QAAQ,SAAW"}

package/dist/{impl-Bpiggf8H.mjs → impl-CfPkCpml.mjs}

@@ -1,2 +1,2 @@
-import{t as e}from"./pullChunkedCustomSiloOutstandingIdentifiers-ekuEZlzq.mjs";import{i as t,s as n}from"./writeCsv-CNZrq3zU.mjs";import{t as r}from"./done-input-validation-LiTaCEzF.mjs";import{uniq as i}from"lodash-es";import a from"colors";async function o({file:o,transcendUrl:s,auth:c,sombraAuth:l,dataSiloId:u,actions:d,pageLimit:f,skipRequestCount:p,chunkSize:m}){p&&this.logger.info(a.yellow(`Skipping request count as requested. This may help speed up the call.`)),(Number.isNaN(m)||m<=0||m%f!==0)&&(this.logger.error(a.red(`Invalid chunk size: "${m}". Must be a positive integer that is a multiple of ${f}.`)),this.process.exit(1)),r(this.process);let{baseName:h,extension:g}=t(o),_=0;await e({transcendUrl:s,apiPageSize:f,savePageSize:m,onSave:async e=>{let t=`${h}-${_}${g}`;return this.logger.info(a.blue(`Saving ${e.length} identifiers to file "${t}"`)),await n(t,e,i(e.map(e=>Object.keys(e)).flat())),this.logger.info(a.green(`Successfully wrote ${e.length} identifiers to file "${t}"`)),_+=1,Promise.resolve()},actions:d,auth:c,sombraAuth:l,dataSiloId:u,skipRequestCount:p})}export{o as pullIdentifiers};
-//# sourceMappingURL=impl-Bpiggf8H.mjs.map
+import{t as e}from"./pullChunkedCustomSiloOutstandingIdentifiers-CtFtj3aL.mjs";import{i as t,s as n}from"./writeCsv-CNZrq3zU.mjs";import{t as r}from"./done-input-validation-LiTaCEzF.mjs";import{uniq as i}from"lodash-es";import a from"colors";async function o({file:o,transcendUrl:s,auth:c,sombraAuth:l,dataSiloId:u,actions:d,pageLimit:f,skipRequestCount:p,chunkSize:m}){p&&this.logger.info(a.yellow(`Skipping request count as requested. This may help speed up the call.`)),(Number.isNaN(m)||m<=0||m%f!==0)&&(this.logger.error(a.red(`Invalid chunk size: "${m}". Must be a positive integer that is a multiple of ${f}.`)),this.process.exit(1)),r(this.process);let{baseName:h,extension:g}=t(o),_=0;await e({transcendUrl:s,apiPageSize:f,savePageSize:m,onSave:async e=>{let t=`${h}-${_}${g}`;return this.logger.info(a.blue(`Saving ${e.length} identifiers to file "${t}"`)),await n(t,e,i(e.map(e=>Object.keys(e)).flat())),this.logger.info(a.green(`Successfully wrote ${e.length} identifiers to file "${t}"`)),_+=1,Promise.resolve()},actions:d,auth:c,sombraAuth:l,dataSiloId:u,skipRequestCount:p})}export{o as pullIdentifiers};
+//# sourceMappingURL=impl-CfPkCpml.mjs.map