@transcend-io/cli 8.36.0 → 8.37.0

package/dist/{uploadConsents-Y2WZFgxP.cjs → uploadConsents-XYRco1_L.cjs}

@@ -1,2 +1,2 @@
-const e=require(`./enums-CBXlBJii.cjs`),t=require(`./constants-CmHjougS.cjs`),n=require(`./syncConfigurationToTranscend-Drb8I8lD.cjs`),r=require(`./logger-BaHHbWVd.cjs`);let i=require(`@transcend-io/type-utils`),a=require(`colors`);a=e.s(a);let o=require(`io-ts`);o=e.s(o);let s=require(`cli-progress`);s=e.s(s);let c=require(`crypto`);c=e.s(c);let l=require(`jsonwebtoken`);l=e.s(l);function u(e,t,n){let r=Buffer.from(n,`base64`),i=Buffer.from(t,`base64`),a=Buffer.from(`A65959A6`,`hex`),o=c.createCipheriv(`id-aes256-wrap-pad`,i,a),s={encryptedIdentifier:Buffer.concat([o.update(e),o.final()]).toString(`base64`)};return l.sign(s,r,{algorithm:`HS384`})}const d=/^[0-9][Y|N]([Y|N])[Y|N]$/,f=o.record(o.string,o.union([o.boolean,o.literal(`Auto`)]));async function p({base64EncryptionKey:e,base64SigningKey:o,preferences:c,partition:l,concurrency:p=100,transcendUrl:m=t.o}){let h=n.$r(m),g=c.filter(e=>e.usp&&!d.test(e.usp));if(g.length>0)throw Error(`Received invalid usp strings: ${JSON.stringify(g,null,2)}`);let _=c.map((e,t)=>[e,t]).filter(([e])=>{if(!e.purposes)return!1;try{return(0,i.decodeCodec)(f,e.purposes),!1}catch{return!0}});if(_.length>0)throw Error(`Received invalid purpose maps: ${JSON.stringify(_,null,2)}`);let v=c.filter(e=>!e.usp&&!e.purposes);if(v.length>0)throw Error(`Received invalid inputs, expected either purposes or usp to be defined: ${JSON.stringify(v,null,2)}`);r.t.info(a.default.magenta(`Uploading ${c.length} user preferences to partition ${l}`));let y=new Date().getTime(),b=new s.default.SingleBar({},s.default.Presets.shades_classic),x=0;b.start(c.length,0),await n.Ts(c,async({userId:t,confirmed:n=`true`,updated:s,prompted:c,purposes:p,...m})=>{let g=u(t,e,o),[,_]=m.usp&&d.exec(m.usp)||[],v={token:g,partition:l,consent:{confirmed:n===`true`,purposes:p?(0,i.decodeCodec)(f,p):m.usp?{SaleOfInfo:_===`Y`}:{},...s?{updated:s===`true`}:{},...c?{prompted:c===`true`}:{},...m}};try{await h.post(`sync`,{json:v}).json()}catch(e){try{let t=JSON.parse(e?.response?.body||`{}`);t.error&&r.t.error(a.default.red(`Error: ${t.error}`))}catch{}throw Error(`Received an error from server: ${e?.response?.body||e?.message}`)}x+=1,b.update(x)},{concurrency:p}),b.stop();let S=new Date().getTime()-y;r.t.info(a.default.green(`Successfully uploaded ${c.length} user preferences to partition ${l} in "${S/1e3}" seconds!`))}Object.defineProperty(exports,`i`,{enumerable:!0,get:function(){return u}}),Object.defineProperty(exports,`n`,{enumerable:!0,get:function(){return d}}),Object.defineProperty(exports,`r`,{enumerable:!0,get:function(){return p}}),Object.defineProperty(exports,`t`,{enumerable:!0,get:function(){return f}});
-//# sourceMappingURL=uploadConsents-Y2WZFgxP.cjs.map
+const e=require(`./chunk-Bmb41Sf3.cjs`),t=require(`./constants-7qBywLgI.cjs`),n=require(`./syncConfigurationToTranscend-Bd0ZTIm1.cjs`),r=require(`./logger-DQwEYtSS.cjs`);let i=require(`@transcend-io/type-utils`),a=require(`colors`);a=e.t(a);let o=require(`io-ts`);o=e.t(o);let s=require(`cli-progress`);s=e.t(s);let c=require(`crypto`);c=e.t(c);let l=require(`jsonwebtoken`);l=e.t(l);function u(e,t,n){let r=Buffer.from(n,`base64`),i=Buffer.from(t,`base64`),a=Buffer.from(`A65959A6`,`hex`),o=c.createCipheriv(`id-aes256-wrap-pad`,i,a),s={encryptedIdentifier:Buffer.concat([o.update(e),o.final()]).toString(`base64`)};return l.sign(s,r,{algorithm:`HS384`})}const d=/^[0-9][Y|N]([Y|N])[Y|N]$/,f=o.record(o.string,o.union([o.boolean,o.literal(`Auto`)]));async function p({base64EncryptionKey:e,base64SigningKey:o,preferences:c,partition:l,concurrency:p=100,transcendUrl:m=t.o}){let h=n.$r(m),g=c.filter(e=>e.usp&&!d.test(e.usp));if(g.length>0)throw Error(`Received invalid usp strings: ${JSON.stringify(g,null,2)}`);let _=c.map((e,t)=>[e,t]).filter(([e])=>{if(!e.purposes)return!1;try{return(0,i.decodeCodec)(f,e.purposes),!1}catch{return!0}});if(_.length>0)throw Error(`Received invalid purpose maps: ${JSON.stringify(_,null,2)}`);let v=c.filter(e=>!e.usp&&!e.purposes);if(v.length>0)throw Error(`Received invalid inputs, expected either purposes or usp to be defined: ${JSON.stringify(v,null,2)}`);r.t.info(a.default.magenta(`Uploading ${c.length} user preferences to partition ${l}`));let y=new Date().getTime(),b=new s.default.SingleBar({},s.default.Presets.shades_classic),x=0;b.start(c.length,0),await n.Ts(c,async({userId:t,confirmed:n=`true`,updated:s,prompted:c,purposes:p,...m})=>{let g=u(t,e,o),[,_]=m.usp&&d.exec(m.usp)||[],v={token:g,partition:l,consent:{confirmed:n===`true`,purposes:p?(0,i.decodeCodec)(f,p):m.usp?{SaleOfInfo:_===`Y`}:{},...s?{updated:s===`true`}:{},...c?{prompted:c===`true`}:{},...m}};try{await h.post(`sync`,{json:v}).json()}catch(e){try{let t=JSON.parse(e?.response?.body||`{}`);t.error&&r.t.error(a.default.red(`Error: ${t.error}`))}catch{}throw Error(`Received an error from server: ${e?.response?.body||e?.message}`)}x+=1,b.update(x)},{concurrency:p}),b.stop();let S=new Date().getTime()-y;r.t.info(a.default.green(`Successfully uploaded ${c.length} user preferences to partition ${l} in "${S/1e3}" seconds!`))}Object.defineProperty(exports,`i`,{enumerable:!0,get:function(){return u}}),Object.defineProperty(exports,`n`,{enumerable:!0,get:function(){return d}}),Object.defineProperty(exports,`r`,{enumerable:!0,get:function(){return p}}),Object.defineProperty(exports,`t`,{enumerable:!0,get:function(){return f}});
+//# sourceMappingURL=uploadConsents-XYRco1_L.cjs.map

package/dist/{uploadConsents-Y2WZFgxP.cjs.map → uploadConsents-XYRco1_L.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"uploadConsents-Y2WZFgxP.cjs","names":["jwt","t","DEFAULT_TRANSCEND_CONSENT_API","createTranscendConsentGotInstance","cliProgress","map"],"sources":["../src/lib/consent-manager/createConsentToken.ts","../src/lib/consent-manager/uploadConsents.ts"],"sourcesContent":["import * as crypto from 'crypto';\nimport * as jwt from 'jsonwebtoken';\n\n/**\n * Function to create a consent manager token\n *\n * @see https://docs.transcend.io/docs/consent/reference/managed-consent-database\n * @param userId - User ID\n * @param base64EncryptionKey - Encryption key\n * @param base64SigningKey - Signing key\n * @returns Token\n */\nexport function createConsentToken(\n  userId: string,\n  base64EncryptionKey: string,\n  base64SigningKey: string,\n): string {\n  // Read on for where to find these keys\n  const signingKey = Buffer.from(base64SigningKey, 'base64');\n  const encryptionKey = Buffer.from(base64EncryptionKey, 'base64');\n\n  // NIST's AES-KWP implementation { aes 48 } - see https://tools.ietf.org/html/rfc5649\n  const encryptionAlgorithm = 'id-aes256-wrap-pad';\n  // Initial Value for AES-KWP integrity check - see https://tools.ietf.org/html/rfc5649#section-3\n  const iv = Buffer.from('A65959A6', 'hex');\n  // Set up encryption algorithm\n  const cipher = crypto.createCipheriv(encryptionAlgorithm, encryptionKey, iv);\n\n  // Encrypt the userId and base64-encode the result\n  const encryptedIdentifier = Buffer.concat([\n    cipher.update(userId),\n    cipher.final(),\n  ]).toString('base64');\n\n  // Create the JWT content - jwt.sign will add a 'iat' (issued at) field to the payload\n  // If you wanted to add something manually, consider\n  // const issued: Date = new Date();\n  // const isoDate = issued.toISOString();\n  const jwtPayload = {\n    encryptedIdentifier,\n  };\n\n  // Create a JSON web token and HMAC it with SHA-384\n  const consentToken = jwt.sign(jwtPayload, signingKey, {\n    algorithm: 'HS384',\n  });\n\n  return consentToken;\n}\n","import { createTranscendConsentGotInstance } from '../graphql';\nimport colors from 'colors';\nimport * as t from 'io-ts';\nimport { DEFAULT_TRANSCEND_CONSENT_API } from '../../constants';\nimport { map } from '../bluebird';\nimport { createConsentToken } from './createConsentToken';\nimport { logger } from '../../logger';\nimport cliProgress from 'cli-progress';\nimport { decodeCodec } from '@transcend-io/type-utils';\nimport type { ConsentPreferenceUpload } from './types';\nimport { ConsentPreferencesBody } from '@transcend-io/airgap.js-types';\n\nexport const USP_STRING_REGEX = /^[0-9][Y|N]([Y|N])[Y|N]$/;\n\nexport const PurposeMap = t.record(\n  t.string,\n  t.union([t.boolean, t.literal('Auto')]),\n);\n\n/**\n * Upload a set of consent preferences\n *\n * @param options - Options\n */\nexport async function uploadConsents({\n  base64EncryptionKey,\n  base64SigningKey,\n  preferences,\n  partition,\n  concurrency = 100,\n  transcendUrl = DEFAULT_TRANSCEND_CONSENT_API,\n}: {\n  /** base64 encryption key */\n  base64EncryptionKey: string;\n  /** base64 signing key */\n  base64SigningKey: string;\n  /** Partition key */\n  partition: string;\n  /** Sombra API key authentication */\n  preferences: ConsentPreferenceUpload[];\n  /** API URL for Transcend backend */\n  transcendUrl?: string;\n  /** Concurrency limit for approving */\n  concurrency?: number;\n}): Promise<void> {\n  // Create connection to API\n  const transcendConsentApi = createTranscendConsentGotInstance(transcendUrl);\n\n  // Ensure usp strings are valid\n  const invalidUspStrings = preferences.filter(\n    (pref) => pref.usp && !USP_STRING_REGEX.test(pref.usp),\n  );\n  if (invalidUspStrings.length > 0) {\n    throw new Error(\n      `Received invalid usp strings: ${JSON.stringify(\n        invalidUspStrings,\n        null,\n        2,\n      )}`,\n    );\n  }\n\n  // Ensure purpose maps are valid\n  const invalidPurposeMaps = preferences\n    .map((pref, ind) => [pref, ind] as [ConsentPreferenceUpload, number])\n    .filter(([pref]) => {\n      if (!pref.purposes) {\n        return false;\n      }\n      try {\n        decodeCodec(PurposeMap, pref.purposes);\n        return false;\n      } catch {\n        return true;\n      }\n    });\n  if (invalidPurposeMaps.length > 0) {\n    throw new Error(\n      `Received invalid purpose maps: ${JSON.stringify(\n        invalidPurposeMaps,\n        null,\n        2,\n      )}`,\n    );\n  }\n\n  // Ensure usp or preferences are provided\n  const invalidInputs = preferences.filter(\n    (pref) => !pref.usp && !pref.purposes,\n  );\n  if (invalidInputs.length > 0) {\n    throw new Error(\n      `Received invalid inputs, expected either purposes or usp to be defined: ${JSON.stringify(\n        invalidInputs,\n        null,\n        2,\n      )}`,\n    );\n  }\n\n  logger.info(\n    colors.magenta(\n      `Uploading ${preferences.length} user preferences to partition ${partition}`,\n    ),\n  );\n\n  // Time duration\n  const t0 = new Date().getTime();\n  // create a new progress bar instance and use shades_classic theme\n  const progressBar = new cliProgress.SingleBar(\n    {},\n    cliProgress.Presets.shades_classic,\n  );\n\n  // Build a GraphQL client\n  let total = 0;\n  progressBar.start(preferences.length, 0);\n  await map(\n    preferences,\n    async ({\n      userId,\n      confirmed = 'true',\n      updated,\n      prompted,\n      purposes,\n      ...consent\n    }) => {\n      const token = createConsentToken(\n        userId,\n        base64EncryptionKey,\n        base64SigningKey,\n      );\n\n      // parse usp string\n      const [, saleStatus] = consent.usp\n        ? USP_STRING_REGEX.exec(consent.usp) || []\n        : [];\n\n      const input = {\n        token,\n        partition,\n        consent: {\n          confirmed: confirmed === 'true',\n          purposes: purposes\n            ? decodeCodec(PurposeMap, purposes)\n            : consent.usp\n            ? { SaleOfInfo: saleStatus === 'Y' }\n            : {},\n          ...(updated ? { updated: updated === 'true' } : {}),\n          ...(prompted ? { prompted: prompted === 'true' } : {}),\n          ...consent,\n        },\n      } as ConsentPreferencesBody;\n\n      // Make the request\n      try {\n        await transcendConsentApi\n          .post('sync', {\n            json: input,\n          })\n          .json();\n      } catch (err) {\n        try {\n          const parsed = JSON.parse(err?.response?.body || '{}');\n          if (parsed.error) {\n            logger.error(colors.red(`Error: ${parsed.error}`));\n          }\n        } catch (e) {\n          // continue\n        }\n        throw new Error(\n          `Received an error from server: ${\n            err?.response?.body || err?.message\n          }`,\n        );\n      }\n\n      total += 1;\n      progressBar.update(total);\n    },\n    { concurrency },\n  );\n\n  progressBar.stop();\n  const t1 = new Date().getTime();\n  const totalTime = t1 - t0;\n\n  logger.info(\n    colors.green(\n      `Successfully uploaded ${\n        preferences.length\n      } user preferences to partition ${partition} in \"${\n        totalTime / 1000\n      }\" seconds!`,\n    ),\n  );\n}\n"],"mappings":"gYAYA,SAAgB,EACd,EACA,EACA,EACQ,CAER,IAAM,EAAa,OAAO,KAAK,EAAkB,SAAS,CACpD,EAAgB,OAAO,KAAK,EAAqB,SAAS,CAK1D,EAAK,OAAO,KAAK,WAAY,MAAM,CAEnC,EAAS,EAAO,eAAe,qBAAqB,EAAe,EAAG,CAYtE,EAAa,CACjB,oBAV0B,OAAO,OAAO,CACxC,EAAO,OAAO,EAAO,CACrB,EAAO,OAAO,CACf,CAAC,CAAC,SAAS,SAAS,CAQpB,CAOD,OAJqBA,EAAI,KAAK,EAAY,EAAY,CACpD,UAAW,QACZ,CAAC,CCjCJ,MAAa,EAAmB,2BAEnB,EAAaC,EAAE,OAC1BA,EAAE,OACFA,EAAE,MAAM,CAACA,EAAE,QAASA,EAAE,QAAQ,OAAO,CAAC,CAAC,CACxC,CAOD,eAAsB,EAAe,CACnC,sBACA,mBACA,cACA,YACA,cAAc,IACd,eAAeC,EAAAA,GAcC,CAEhB,IAAM,EAAsBC,EAAAA,GAAkC,EAAa,CAGrE,EAAoB,EAAY,OACnC,GAAS,EAAK,KAAO,CAAC,EAAiB,KAAK,EAAK,IAAI,CACvD,CACD,GAAI,EAAkB,OAAS,EAC7B,MAAU,MACR,iCAAiC,KAAK,UACpC,EACA,KACA,EACD,GACF,CAIH,IAAM,EAAqB,EACxB,KAAK,EAAM,IAAQ,CAAC,EAAM,EAAI,CAAsC,CACpE,QAAQ,CAAC,KAAU,CAClB,GAAI,CAAC,EAAK,SACR,MAAO,GAET,GAAI,CAEF,OADA,EAAA,EAAA,aAAY,EAAY,EAAK,SAAS,CAC/B,QACD,CACN,MAAO,KAET,CACJ,GAAI,EAAmB,OAAS,EAC9B,MAAU,MACR,kCAAkC,KAAK,UACrC,EACA,KACA,EACD,GACF,CAIH,IAAM,EAAgB,EAAY,OAC/B,GAAS,CAAC,EAAK,KAAO,CAAC,EAAK,SAC9B,CACD,GAAI,EAAc,OAAS,EACzB,MAAU,MACR,2EAA2E,KAAK,UAC9E,EACA,KACA,EACD,GACF,CAGH,EAAA,EAAO,KACL,EAAA,QAAO,QACL,aAAa,EAAY,OAAO,iCAAiC,IAClE,CACF,CAGD,IAAM,EAAK,IAAI,MAAM,CAAC,SAAS,CAEzB,EAAc,IAAIC,EAAAA,QAAY,UAClC,EAAE,CACFA,EAAAA,QAAY,QAAQ,eACrB,CAGG,EAAQ,EACZ,EAAY,MAAM,EAAY,OAAQ,EAAE,CACxC,MAAMC,EAAAA,GACJ,EACA,MAAO,CACL,SACA,YAAY,OACZ,UACA,WACA,WACA,GAAG,KACC,CACJ,IAAM,EAAQ,EACZ,EACA,EACA,EACD,CAGK,EAAG,GAAc,EAAQ,KAC3B,EAAiB,KAAK,EAAQ,IAAI,EAClC,EAAE,CAEA,EAAQ,CACZ,QACA,YACA,QAAS,CACP,UAAW,IAAc,OACzB,SAAU,GAAA,EAAA,EAAA,aACM,EAAY,EAAS,CACjC,EAAQ,IACR,CAAE,WAAY,IAAe,IAAK,CAClC,EAAE,CACN,GAAI,EAAU,CAAE,QAAS,IAAY,OAAQ,CAAG,EAAE,CAClD,GAAI,EAAW,CAAE,SAAU,IAAa,OAAQ,CAAG,EAAE,CACrD,GAAG,EACJ,CACF,CAGD,GAAI,CACF,MAAM,EACH,KAAK,OAAQ,CACZ,KAAM,EACP,CAAC,CACD,MAAM,OACF,EAAK,CACZ,GAAI,CACF,IAAM,EAAS,KAAK,MAAM,GAAK,UAAU,MAAQ,KAAK,CAClD,EAAO,OACT,EAAA,EAAO,MAAM,EAAA,QAAO,IAAI,UAAU,EAAO,QAAQ,CAAC,MAE1C,EAGZ,MAAU,MACR,kCACE,GAAK,UAAU,MAAQ,GAAK,UAE/B,CAGH,GAAS,EACT,EAAY,OAAO,EAAM,EAE3B,CAAE,cAAa,CAChB,CAED,EAAY,MAAM,CAElB,IAAM,EADK,IAAI,MAAM,CAAC,SAAS,CACR,EAEvB,EAAA,EAAO,KACL,EAAA,QAAO,MACL,yBACE,EAAY,OACb,iCAAiC,EAAU,OAC1C,EAAY,IACb,YACF,CACF"}
+{"version":3,"file":"uploadConsents-XYRco1_L.cjs","names":["jwt","t","DEFAULT_TRANSCEND_CONSENT_API","createTranscendConsentGotInstance","cliProgress","map"],"sources":["../src/lib/consent-manager/createConsentToken.ts","../src/lib/consent-manager/uploadConsents.ts"],"sourcesContent":["import * as crypto from 'crypto';\nimport * as jwt from 'jsonwebtoken';\n\n/**\n * Function to create a consent manager token\n *\n * @see https://docs.transcend.io/docs/consent/reference/managed-consent-database\n * @param userId - User ID\n * @param base64EncryptionKey - Encryption key\n * @param base64SigningKey - Signing key\n * @returns Token\n */\nexport function createConsentToken(\n  userId: string,\n  base64EncryptionKey: string,\n  base64SigningKey: string,\n): string {\n  // Read on for where to find these keys\n  const signingKey = Buffer.from(base64SigningKey, 'base64');\n  const encryptionKey = Buffer.from(base64EncryptionKey, 'base64');\n\n  // NIST's AES-KWP implementation { aes 48 } - see https://tools.ietf.org/html/rfc5649\n  const encryptionAlgorithm = 'id-aes256-wrap-pad';\n  // Initial Value for AES-KWP integrity check - see https://tools.ietf.org/html/rfc5649#section-3\n  const iv = Buffer.from('A65959A6', 'hex');\n  // Set up encryption algorithm\n  const cipher = crypto.createCipheriv(encryptionAlgorithm, encryptionKey, iv);\n\n  // Encrypt the userId and base64-encode the result\n  const encryptedIdentifier = Buffer.concat([\n    cipher.update(userId),\n    cipher.final(),\n  ]).toString('base64');\n\n  // Create the JWT content - jwt.sign will add a 'iat' (issued at) field to the payload\n  // If you wanted to add something manually, consider\n  // const issued: Date = new Date();\n  // const isoDate = issued.toISOString();\n  const jwtPayload = {\n    encryptedIdentifier,\n  };\n\n  // Create a JSON web token and HMAC it with SHA-384\n  const consentToken = jwt.sign(jwtPayload, signingKey, {\n    algorithm: 'HS384',\n  });\n\n  return consentToken;\n}\n","import { createTranscendConsentGotInstance } from '../graphql';\nimport colors from 'colors';\nimport * as t from 'io-ts';\nimport { DEFAULT_TRANSCEND_CONSENT_API } from '../../constants';\nimport { map } from '../bluebird';\nimport { createConsentToken } from './createConsentToken';\nimport { logger } from '../../logger';\nimport cliProgress from 'cli-progress';\nimport { decodeCodec } from '@transcend-io/type-utils';\nimport type { ConsentPreferenceUpload } from './types';\nimport { ConsentPreferencesBody } from '@transcend-io/airgap.js-types';\n\nexport const USP_STRING_REGEX = /^[0-9][Y|N]([Y|N])[Y|N]$/;\n\nexport const PurposeMap = t.record(\n  t.string,\n  t.union([t.boolean, t.literal('Auto')]),\n);\n\n/**\n * Upload a set of consent preferences\n *\n * @param options - Options\n */\nexport async function uploadConsents({\n  base64EncryptionKey,\n  base64SigningKey,\n  preferences,\n  partition,\n  concurrency = 100,\n  transcendUrl = DEFAULT_TRANSCEND_CONSENT_API,\n}: {\n  /** base64 encryption key */\n  base64EncryptionKey: string;\n  /** base64 signing key */\n  base64SigningKey: string;\n  /** Partition key */\n  partition: string;\n  /** Sombra API key authentication */\n  preferences: ConsentPreferenceUpload[];\n  /** API URL for Transcend backend */\n  transcendUrl?: string;\n  /** Concurrency limit for approving */\n  concurrency?: number;\n}): Promise<void> {\n  // Create connection to API\n  const transcendConsentApi = createTranscendConsentGotInstance(transcendUrl);\n\n  // Ensure usp strings are valid\n  const invalidUspStrings = preferences.filter(\n    (pref) => pref.usp && !USP_STRING_REGEX.test(pref.usp),\n  );\n  if (invalidUspStrings.length > 0) {\n    throw new Error(\n      `Received invalid usp strings: ${JSON.stringify(\n        invalidUspStrings,\n        null,\n        2,\n      )}`,\n    );\n  }\n\n  // Ensure purpose maps are valid\n  const invalidPurposeMaps = preferences\n    .map((pref, ind) => [pref, ind] as [ConsentPreferenceUpload, number])\n    .filter(([pref]) => {\n      if (!pref.purposes) {\n        return false;\n      }\n      try {\n        decodeCodec(PurposeMap, pref.purposes);\n        return false;\n      } catch {\n        return true;\n      }\n    });\n  if (invalidPurposeMaps.length > 0) {\n    throw new Error(\n      `Received invalid purpose maps: ${JSON.stringify(\n        invalidPurposeMaps,\n        null,\n        2,\n      )}`,\n    );\n  }\n\n  // Ensure usp or preferences are provided\n  const invalidInputs = preferences.filter(\n    (pref) => !pref.usp && !pref.purposes,\n  );\n  if (invalidInputs.length > 0) {\n    throw new Error(\n      `Received invalid inputs, expected either purposes or usp to be defined: ${JSON.stringify(\n        invalidInputs,\n        null,\n        2,\n      )}`,\n    );\n  }\n\n  logger.info(\n    colors.magenta(\n      `Uploading ${preferences.length} user preferences to partition ${partition}`,\n    ),\n  );\n\n  // Time duration\n  const t0 = new Date().getTime();\n  // create a new progress bar instance and use shades_classic theme\n  const progressBar = new cliProgress.SingleBar(\n    {},\n    cliProgress.Presets.shades_classic,\n  );\n\n  // Build a GraphQL client\n  let total = 0;\n  progressBar.start(preferences.length, 0);\n  await map(\n    preferences,\n    async ({\n      userId,\n      confirmed = 'true',\n      updated,\n      prompted,\n      purposes,\n      ...consent\n    }) => {\n      const token = createConsentToken(\n        userId,\n        base64EncryptionKey,\n        base64SigningKey,\n      );\n\n      // parse usp string\n      const [, saleStatus] = consent.usp\n        ? USP_STRING_REGEX.exec(consent.usp) || []\n        : [];\n\n      const input = {\n        token,\n        partition,\n        consent: {\n          confirmed: confirmed === 'true',\n          purposes: purposes\n            ? decodeCodec(PurposeMap, purposes)\n            : consent.usp\n            ? { SaleOfInfo: saleStatus === 'Y' }\n            : {},\n          ...(updated ? { updated: updated === 'true' } : {}),\n          ...(prompted ? { prompted: prompted === 'true' } : {}),\n          ...consent,\n        },\n      } as ConsentPreferencesBody;\n\n      // Make the request\n      try {\n        await transcendConsentApi\n          .post('sync', {\n            json: input,\n          })\n          .json();\n      } catch (err) {\n        try {\n          const parsed = JSON.parse(err?.response?.body || '{}');\n          if (parsed.error) {\n            logger.error(colors.red(`Error: ${parsed.error}`));\n          }\n        } catch (e) {\n          // continue\n        }\n        throw new Error(\n          `Received an error from server: ${\n            err?.response?.body || err?.message\n          }`,\n        );\n      }\n\n      total += 1;\n      progressBar.update(total);\n    },\n    { concurrency },\n  );\n\n  progressBar.stop();\n  const t1 = new Date().getTime();\n  const totalTime = t1 - t0;\n\n  logger.info(\n    colors.green(\n      `Successfully uploaded ${\n        preferences.length\n      } user preferences to partition ${partition} in \"${\n        totalTime / 1000\n      }\" seconds!`,\n    ),\n  );\n}\n"],"mappings":"gYAYA,SAAgB,EACd,EACA,EACA,EACQ,CAER,IAAM,EAAa,OAAO,KAAK,EAAkB,SAAS,CACpD,EAAgB,OAAO,KAAK,EAAqB,SAAS,CAK1D,EAAK,OAAO,KAAK,WAAY,MAAM,CAEnC,EAAS,EAAO,eAAe,qBAAqB,EAAe,EAAG,CAYtE,EAAa,CACjB,oBAV0B,OAAO,OAAO,CACxC,EAAO,OAAO,EAAO,CACrB,EAAO,OAAO,CACf,CAAC,CAAC,SAAS,SAAS,CAQpB,CAOD,OAJqBA,EAAI,KAAK,EAAY,EAAY,CACpD,UAAW,QACZ,CAAC,CCjCJ,MAAa,EAAmB,2BAEnB,EAAaC,EAAE,OAC1BA,EAAE,OACFA,EAAE,MAAM,CAACA,EAAE,QAASA,EAAE,QAAQ,OAAO,CAAC,CAAC,CACxC,CAOD,eAAsB,EAAe,CACnC,sBACA,mBACA,cACA,YACA,cAAc,IACd,eAAeC,EAAAA,GAcC,CAEhB,IAAM,EAAsBC,EAAAA,GAAkC,EAAa,CAGrE,EAAoB,EAAY,OACnC,GAAS,EAAK,KAAO,CAAC,EAAiB,KAAK,EAAK,IAAI,CACvD,CACD,GAAI,EAAkB,OAAS,EAC7B,MAAU,MACR,iCAAiC,KAAK,UACpC,EACA,KACA,EACD,GACF,CAIH,IAAM,EAAqB,EACxB,KAAK,EAAM,IAAQ,CAAC,EAAM,EAAI,CAAsC,CACpE,QAAQ,CAAC,KAAU,CAClB,GAAI,CAAC,EAAK,SACR,MAAO,GAET,GAAI,CAEF,OADA,EAAA,EAAA,aAAY,EAAY,EAAK,SAAS,CAC/B,QACD,CACN,MAAO,KAET,CACJ,GAAI,EAAmB,OAAS,EAC9B,MAAU,MACR,kCAAkC,KAAK,UACrC,EACA,KACA,EACD,GACF,CAIH,IAAM,EAAgB,EAAY,OAC/B,GAAS,CAAC,EAAK,KAAO,CAAC,EAAK,SAC9B,CACD,GAAI,EAAc,OAAS,EACzB,MAAU,MACR,2EAA2E,KAAK,UAC9E,EACA,KACA,EACD,GACF,CAGH,EAAA,EAAO,KACL,EAAA,QAAO,QACL,aAAa,EAAY,OAAO,iCAAiC,IAClE,CACF,CAGD,IAAM,EAAK,IAAI,MAAM,CAAC,SAAS,CAEzB,EAAc,IAAIC,EAAAA,QAAY,UAClC,EAAE,CACFA,EAAAA,QAAY,QAAQ,eACrB,CAGG,EAAQ,EACZ,EAAY,MAAM,EAAY,OAAQ,EAAE,CACxC,MAAMC,EAAAA,GACJ,EACA,MAAO,CACL,SACA,YAAY,OACZ,UACA,WACA,WACA,GAAG,KACC,CACJ,IAAM,EAAQ,EACZ,EACA,EACA,EACD,CAGK,EAAG,GAAc,EAAQ,KAC3B,EAAiB,KAAK,EAAQ,IAAI,EAClC,EAAE,CAEA,EAAQ,CACZ,QACA,YACA,QAAS,CACP,UAAW,IAAc,OACzB,SAAU,GAAA,EAAA,EAAA,aACM,EAAY,EAAS,CACjC,EAAQ,IACR,CAAE,WAAY,IAAe,IAAK,CAClC,EAAE,CACN,GAAI,EAAU,CAAE,QAAS,IAAY,OAAQ,CAAG,EAAE,CAClD,GAAI,EAAW,CAAE,SAAU,IAAa,OAAQ,CAAG,EAAE,CACrD,GAAG,EACJ,CACF,CAGD,GAAI,CACF,MAAM,EACH,KAAK,OAAQ,CACZ,KAAM,EACP,CAAC,CACD,MAAM,OACF,EAAK,CACZ,GAAI,CACF,IAAM,EAAS,KAAK,MAAM,GAAK,UAAU,MAAQ,KAAK,CAClD,EAAO,OACT,EAAA,EAAO,MAAM,EAAA,QAAO,IAAI,UAAU,EAAO,QAAQ,CAAC,MAE1C,EAGZ,MAAU,MACR,kCACE,GAAK,UAAU,MAAQ,GAAK,UAE/B,CAGH,GAAS,EACT,EAAY,OAAO,EAAM,EAE3B,CAAE,cAAa,CAChB,CAED,EAAY,MAAM,CAElB,IAAM,EADK,IAAI,MAAM,CAAC,SAAS,CACR,EAEvB,EAAA,EAAO,KACL,EAAA,QAAO,MACL,yBACE,EAAY,OACb,iCAAiC,EAAU,OAC1C,EAAY,IACb,YACF,CACF"}

package/package.json

@@ -2,7 +2,7 @@
   "author": "Transcend Inc.",
   "name": "@transcend-io/cli",
   "description": "A command line interface for programmatic operations across Transcend.",
-  "version": "8.36.0",
+  "version": "8.37.0",
   "homepage": "https://github.com/transcend-io/cli",
   "repository": {
     "type": "git",

package/dist/app-CnSMU1Jq.cjs

@@ -1,118 +0,0 @@
-const e=require(`./enums-CBXlBJii.cjs`),t=require(`./command-FrwAB8R3.cjs`),n=require(`./constants-CmHjougS.cjs`);let r=require(`@stricli/core`),i=require(`@stricli/auto-complete`),a=require(`@transcend-io/privacy-types`);const o=(0,r.buildCommand)({loader:async()=>{let{generateApiKeys:e}=await Promise.resolve().then(()=>require(`./impl-DJMqsQ7L.cjs`));return e},parameters:{flags:{email:{kind:`parsed`,parse:String,brief:`The email address that you use to log into Transcend`},password:{kind:`parsed`,parse:String,brief:`The password for your account login`},apiKeyTitle:{kind:`parsed`,parse:String,brief:`The title of the API key being generated or destroyed`},file:{kind:`parsed`,parse:String,brief:`The file where API keys should be written to`},scopes:{kind:`enum`,values:n.l,variadic:`,`,brief:`The list of scopes that should be given to the API key`},deleteExistingApiKey:{kind:`boolean`,brief:`When true, if an API key exists with the specified apiKeyTitle, the existing API key is deleted`,default:!0},createNewApiKey:{kind:`boolean`,brief:`When true, new API keys will be created. Set to false if you simply want to delete all API keys with a title`,default:!0},parentOrganizationId:{kind:`parsed`,parse:t.d,brief:`Filter for only a specific organization by ID, returning all child accounts associated with that organization`,optional:!0},transcendUrl:t.s()}},docs:{brief:`Generate API keys`,fullDescription:`This command allows for creating API keys across multiple Transcend instances. This is useful for customers that are managing many Transcend instances and need to regularly create, cycle or delete API keys across all of their instances.
-
-Unlike the other commands that rely on API key authentication, this command relies upon username/password authentication. This command will spit out the API keys into a JSON file, and that JSON file can be used in subsequent CLI commands.
-
-Authentication requires your email and password for the Transcend account. This command will only generate API keys for Transcend instances where you have the permission to "Manage API Keys".`}}),s=(0,r.buildCommand)({loader:async()=>{let{chunkCsv:e}=await Promise.resolve().then(()=>require(`./impl-CA649Byw.cjs`));return e},parameters:{flags:{directory:{kind:`parsed`,parse:String,brief:`Directory containing CSV files to split (required)`},outputDir:{kind:`parsed`,parse:String,brief:`Directory to write chunk files (defaults to each input file's directory)`,optional:!0},clearOutputDir:{kind:`boolean`,brief:`Clear the output directory before writing chunks`,default:!0},chunkSizeMB:{kind:`parsed`,parse:e=>{let t=Number(e);if(!Number.isFinite(t)||t<=0)throw Error(`chunkSizeMB must be a positive number`);return t},brief:`Approximate chunk size in megabytes. Keep well under JS string size limits`,default:`10`},concurrency:{kind:`parsed`,parse:e=>Math.max(1,Number(e)||0),brief:`Max number of worker processes (defaults based on CPU and file count)`,optional:!0},viewerMode:{kind:`boolean`,brief:`Run in non-interactive viewer mode (no attach UI, auto-artifacts)`,default:!1}}},docs:{brief:`Chunk all CSVs in a directory into smaller CSV files`,fullDescription:`Streams every CSV in --directory and writes chunked files of approximately N MB each.
-- Runs files in parallel across worker processes (configurable via --concurrency).
-- Validates row-length consistency against the header row; logs periodic progress and memory usage.`}}),c=(0,r.buildCommand)({loader:async()=>{let{parquetToCsv:e}=await Promise.resolve().then(()=>require(`./impl-BqwFuOOo.cjs`));return e},parameters:{flags:{directory:{kind:`parsed`,parse:String,brief:`Directory containing Parquet files to convert (required)`},outputDir:{kind:`parsed`,parse:String,brief:`Directory to write CSV files (defaults to each input file's directory)`,optional:!0},clearOutputDir:{kind:`boolean`,brief:`Clear the output directory before writing CSVs`,default:!0},concurrency:{kind:`parsed`,parse:e=>Math.max(1,Number(e)||0),brief:`Max number of worker processes (defaults based on CPU and file count)`,optional:!0},viewerMode:{kind:`boolean`,brief:`Run in non-interactive viewer mode (no attach UI, auto-artifacts)`,default:!1}}},docs:{brief:`Convert all Parquet files in a directory to CSV`,fullDescription:`Streams every .parquet in --directory and writes CSV output files
-- Runs files in parallel across worker processes (configurable via --concurrency).
-- Validates row consistency; logs periodic progress and memory usage.
-
-This is a useful administrative tool for converting Parquet exports to CSV for the purposes
-of uploading DSRs or Consent Preferences. e.g. transcend consent upload-preferences ...`}}),l=(0,r.buildRouteMap)({routes:{"generate-api-keys":o,"chunk-csv":s,"parquet-to-csv":c},docs:{brief:`Admin commands`}}),u=(0,r.buildCommand)({loader:async()=>{let{buildXdiSyncEndpoint:e}=await Promise.resolve().then(()=>require(`./impl-CCuP7d9d.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ViewConsentManager]}),xdiLocation:{kind:`parsed`,parse:String,brief:`The location of the XDI that will be loaded by the generated sync endpoint`},file:{kind:`parsed`,parse:String,brief:`The HTML file path where the sync endpoint should be written`,default:`./sync-endpoint.html`},removeIpAddresses:{kind:`boolean`,brief:`When true, remove IP addresses from the domain list`,default:!0},domainBlockList:{kind:`parsed`,parse:t.c,brief:`The set of domains that should be excluded from the sync endpoint. Comma-separated list.`,default:`localhost`},xdiAllowedCommands:{kind:`parsed`,parse:String,brief:`The allowed set of XDI commands`,default:`ConsentManager:Sync`},transcendUrl:t.s()}},docs:{brief:`Build XDI sync endpoint`,fullDescription:`This command allows for building of the XDI Sync Endpoint across a set of Transcend accounts.`}}),d=(0,r.buildCommand)({loader:async()=>{let{pullConsentMetrics:e}=await Promise.resolve().then(()=>require(`./impl-BzfO2Fr-.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ViewConsentManager]}),start:{kind:`parsed`,parse:t.l,brief:`The start date to pull metrics from`},end:{kind:`parsed`,parse:t.l,brief:`The end date to pull metrics until`,optional:!0},folder:{kind:`parsed`,parse:String,brief:`The folder to save metrics to`,default:`./consent-metrics/`},bin:{kind:`parsed`,parse:String,brief:`The bin metric when pulling data (1h or 1d)`,default:`1d`},transcendUrl:t.s()}},docs:{brief:`Pull consent metrics`,fullDescription:"This command allows for pulling consent manager metrics for a Transcend account, or a set of Transcend accounts.\n\nBy default, the consent metrics will be written to a folder named `consent-metrics` within the directory where you run the command. You can override the location that these CSVs are written to using the flag `--folder=./my-folder/`. This folder will contain a set of CSV files:\n\n- `CONSENT_CHANGES_TIMESERIES_optIn.csv` -> this is a feed containing the number of explicit opt in events that happen - these are calls to `airgap.setConsent(event, { SaleOfInfo: true });`\n- `CONSENT_CHANGES_TIMESERIES_optOut.csv` -> this is a feed containing the number of explicit opt out events that happen - these are calls to `airgap.setConsent(event, { SaleOfInfo: false });`\n- `CONSENT_SESSIONS_BY_REGIME_Default.csv` -> this contains the number of sessions detected for the bin period\n- `PRIVACY_SIGNAL_TIMESERIES_DNT.csv` -> the number of DNT signals detected.\n- `PRIVACY_SIGNAL_TIMESERIES_GPC.csv` -> the number of GPC signals detected."}}),f=(0,r.buildCommand)({loader:async()=>{let{pullConsentPreferences:e}=await Promise.resolve().then(()=>require(`./impl-DEsdC5Z4.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ViewManagedConsentDatabaseAdminApi,a.ScopeName.ViewRequestIdentitySettings,a.ScopeName.ViewPreferenceStoreSettings]}),partition:{kind:`parsed`,parse:String,brief:`Partition ID to query in the Preference Store`},sombraAuth:t.o(),file:{kind:`parsed`,parse:String,brief:`Path to CSV output file`,default:`./preferences.csv`},transcendUrl:t.s(),timestampBefore:{kind:`parsed`,parse:t.l,brief:`Filter: preferences collected before this time (timestampBefore)`,optional:!0},timestampAfter:{kind:`parsed`,parse:t.l,brief:`Filter: preferences collected after this time (timestampAfter)`,optional:!0},updatedBefore:{kind:`parsed`,parse:t.l,brief:`Filter: preferences updated before this time (system.updatedAt)`,optional:!0},updatedAfter:{kind:`parsed`,parse:t.l,brief:`Filter: preferences updated after this time (system.updatedAt)`,optional:!0},identifiers:{kind:`parsed`,parse:String,variadic:`,`,brief:`Filter specific users by identifier(s) as "name:value". If name is omitted, defaults to "email". Multiple values separated by commas.`,optional:!0},concurrency:{kind:`parsed`,parse:r.numberParser,brief:`Page size / concurrency used when downloading (1–50 per API). Higher = fewer pages.`,default:`50`},shouldChunk:{kind:`boolean`,brief:`Whether to download requests in timestamp window chunks.`,default:!0},exportIdentifiersWithDelimiter:{kind:`parsed`,parse:String,brief:`Delimiter to use when combining multiple identifiers into a single column in the output CSV.`,default:`,`},windowConcurrency:{kind:`parsed`,parse:r.numberParser,brief:`When chunking, how many windows to download in parallel (higher = faster, but more load).`,default:`80`},maxChunks:{kind:`parsed`,parse:r.numberParser,brief:`Maximum number of chunks to download (higher = more data, but more load).`,default:`20000`},maxLookbackDays:{kind:`parsed`,parse:r.numberParser,brief:`Maximum lookback period in days for fetching consent preferences.`,default:`3650`}}},docs:{brief:`Pull consent preferences from the Managed Consent Database`,fullDescription:`Uses POST /v1/preferences/{partition}/query with cursor-based pagination. Supports filtering by identifiers, collection timestamps, and system.updatedAt.`}}),p=(0,r.buildCommand)({loader:async()=>{let{updateConsentManager:e}=await Promise.resolve().then(()=>require(`./impl-CCPd6sqk.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ManageConsentManagerDeveloperSettings]}),bundleTypes:{kind:`enum`,values:Object.values(a.ConsentBundleType),brief:`The bundle types to deploy. Defaults to PRODUCTION,TEST.`,variadic:`,`},deploy:{kind:`boolean`,brief:`When true, deploy the Consent Manager after updating the version`,default:!1},transcendUrl:t.s()}},docs:{brief:`Update consent manager`,fullDescription:`This command allows for updating Consent Manager to latest version. The Consent Manager bundle can also be deployed using this command.`}}),m=(0,r.buildCommand)({loader:async()=>{let{uploadConsentPreferences:e}=await Promise.resolve().then(()=>require(`./impl-CKCV2er8.cjs`));return e},parameters:{flags:{base64EncryptionKey:{kind:`parsed`,parse:String,brief:`The encryption key used to encrypt the userId`},base64SigningKey:{kind:`parsed`,parse:String,brief:`The signing key used to prove authentication of consent request`},partition:{kind:`parsed`,parse:String,brief:`The partition key to download consent preferences to`},file:{kind:`parsed`,parse:String,brief:`The file to pull consent preferences from`,default:`./preferences.csv`},consentUrl:t.a(),concurrency:{kind:`parsed`,parse:r.numberParser,brief:`The concurrency to use when uploading requests in parallel`,default:`100`}}},docs:{brief:`Upload consent preferences to the Managed Consent Database`,fullDescription:`This command allows for updating of consent preferences to the Managed Consent Database.`}}),h=(0,r.buildCommand)({loader:async()=>{let{uploadCookiesFromCsv:e}=await Promise.resolve().then(()=>require(`./impl-DbD3dI7B.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ManageDataFlow]}),trackerStatus:{kind:`enum`,values:Object.values(a.ConsentTrackerStatus),brief:`The status of the cookies you will upload.`},file:{kind:`parsed`,parse:String,brief:`Path to the CSV file to upload`,default:`./cookies.csv`},transcendUrl:t.s()}},docs:{brief:`Upload cookies from CSV`,fullDescription:`Upload cookies from CSV. This command allows for uploading of cookies from CSV.
-
-Step 1) Download the CSV of cookies that you want to edit from the Admin Dashboard under [Consent Management -> Cookies](https://app.transcend.io/consent-manager/cookies). You can download cookies from both the "Triage" and "Approved" tabs.
-
-Step 2) You can edit the contents of the CSV file as needed. You may adjust the "Purpose" column, adjust the "Notes" column, add "Owners" and "Teams" or even add custom columns with additional metadata.
-
-Step 3) Upload the modified CSV file back into the dashboard with this command.`}}),g=(0,r.buildCommand)({loader:async()=>{let{uploadDataFlowsFromCsv:e}=await Promise.resolve().then(()=>require(`./impl-TTDhp7Hu.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ManageDataFlow]}),trackerStatus:{kind:`enum`,values:Object.values(a.ConsentTrackerStatus),brief:`The status of the data flows you will upload.`},file:{kind:`parsed`,parse:String,brief:`Path to the CSV file to upload`,default:`./data-flows.csv`},classifyService:{kind:`boolean`,brief:`When true, automatically assign the service for a data flow based on the domain that is specified`,default:!1},transcendUrl:t.s()}},docs:{brief:`Upload data flows from CSV`,fullDescription:`Upload data flows from CSV. This command allows for uploading of data flows from CSV.
-
-Step 1) Download the CSV of data flows that you want to edit from the Admin Dashboard under [Consent Management -> Data Flows](https://app.transcend.io/consent-manager/data-flows). You can download data flows from both the "Triage" and "Approved" tabs.
-
-Step 2) You can edit the contents of the CSV file as needed. You may adjust the "Purpose" column, adjust the "Notes" column, add "Owners" and "Teams" or even add custom columns with additional metadata.
-
-Step 3) Upload the modified CSV file back into the dashboard with this command.`}}),_=(0,r.buildCommand)({loader:async()=>{let{uploadPreferences:e}=await Promise.resolve().then(()=>require(`./impl-Ym65hOwf.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ManageStoredPreferences,a.ScopeName.ViewManagedConsentDatabaseAdminApi,a.ScopeName.ViewPreferenceStoreSettings]}),partition:{kind:`parsed`,parse:String,brief:`The partition key to download consent preferences to`},sombraAuth:t.o(),transcendUrl:t.s(),file:{kind:`parsed`,parse:String,brief:`Path to the CSV file to load preferences from`,optional:!0},directory:{kind:`parsed`,parse:String,brief:`Path to the directory of CSV files to load preferences from`,optional:!0},dryRun:{kind:`boolean`,brief:`Whether to do a dry run only - will write results to receiptFilepath without updating Transcend`,default:!1},skipExistingRecordCheck:{kind:`boolean`,brief:`Whether to skip the check for existing records. SHOULD ONLY BE USED FOR INITIAL UPLOAD`,default:!1},receiptFileDir:{kind:`parsed`,parse:String,brief:`Directory path where the response receipts should be saved`,default:`./receipts`},skipWorkflowTriggers:{kind:`boolean`,brief:`Whether to skip workflow triggers when uploading to preference store`,default:!1},forceTriggerWorkflows:{kind:`boolean`,brief:`Whether to force trigger workflows for existing consent records`,default:!1},skipConflictUpdates:{kind:`boolean`,brief:`Whether to skip uploading of any records where the preference store and file have a hard conflict`,default:!1},isSilent:{kind:`boolean`,brief:`Whether to skip sending emails in workflows`,default:!0},attributes:{kind:`parsed`,parse:String,brief:`Attributes to add to any DSR request if created. Comma-separated list of key:value pairs.`,default:`Tags:transcend-cli,Source:transcend-cli`},receiptFilepath:{kind:`parsed`,parse:String,brief:`Store resulting, continuing where left off`,default:`./preference-management-upload-receipts.json`},concurrency:{kind:`parsed`,parse:r.numberParser,brief:`The concurrency to use when uploading in parallel`,default:`10`}}},docs:{brief:`Upload preference management data to your Preference Store`,fullDescription:`Upload preference management data to your Preference Store.
-
-This command prompts you to map the shape of the CSV to the shape of the Transcend API. There is no requirement for the shape of the incoming CSV, as the script will handle the mapping process.
-
-The script will also produce a JSON cache file that allows for the mappings to be preserved between runs.`}}),v=(0,r.buildCommand)({loader:async()=>{let{generateAccessTokens:e}=await Promise.resolve().then(()=>require(`./impl-3XEvFo-7.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.GeneratePreferenceAccessTokens]}),file:{kind:`parsed`,parse:String,brief:`Path to the CSV file containing user identifiers to generate access tokens for`},subjectType:{kind:`parsed`,parse:String,brief:`Slug for the data subject that the user will be logged in as on the Privacy Center. e.g. "customer" or "employee"`},emailColumnName:{kind:`parsed`,parse:String,brief:`Name of the column in the CSV that contains user email addresses`,default:`email`},coreIdentifierColumnName:{kind:`parsed`,parse:String,optional:!0,brief:`Name of the column in the CSV that contains user core identifiers`},duration:{kind:`parsed`,parse:t.u,brief:'How long the access tokens should be valid. Accepts human-friendly values like "2 days", "10h", "90 minutes". A bare number is interpreted as seconds (e.g., "300" = 5 minutes). Powered by the `ms` library: https://github.com/vercel/ms',default:`1y`},transcendUrl:t.s()}},docs:{brief:`Generate access tokens`,fullDescription:`This command allows for the generation of access tokens for users specified in a CSV file.`}}),y=(0,r.buildCommand)({loader:async()=>{let{deletePreferenceRecords:e}=await Promise.resolve().then(()=>require(`./impl-CKASqgZA.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ManageStoredPreferences]}),sombraAuth:t.o(),partition:{kind:`parsed`,parse:String,brief:`Partition ID to used to delete preference records from`},timestamp:{kind:`parsed`,parse:t.l,brief:`The timestamp when the deletion operation is made. Used for logging purposes.`},file:{kind:`parsed`,parse:String,optional:!0,brief:`Path to the CSV file used to identify preference records to delete`},directory:{kind:`parsed`,parse:String,brief:`Path to the directory of CSV files to load preferences from`,optional:!0},transcendUrl:t.s(),maxItemsInChunk:{kind:`parsed`,parse:r.numberParser,brief:`When chunking, how many items to delete in a single chunk (higher = faster, but more load).`,default:`10`},maxConcurrency:{kind:`parsed`,parse:r.numberParser,brief:`Number of concurrent requests to make when deleting preference records. (Higher = faster, but more load and rate limiting errors).`,default:`10`},fileConcurrency:{kind:`parsed`,parse:r.numberParser,brief:`Number of files to process concurrently when deleting preference records from multiple files.`,default:`5`},receiptDirectory:{kind:`parsed`,parse:String,brief:`Directory to write receipts of failed deletions to.`,default:`./receipts`}}},docs:{brief:`Delete consent preference records in bulk from Preference Store`,fullDescription:`Uses POST /v1/preferences/{partition}/delete route on sombra to delete consent preference records in bulk from Preference Store based on a CSV file input. Refer to examples/cli-upload-preferences-example.csv for the expected format of the CSV file. The CSV expects the following headers: "name" and "value". The "name" field corresponds to the identifier name as defined on https://app.transcend.io/privacy-requests/identifiers The "value" refers to the actual identifier value for the user whose preference record is being deleted. For Large scale deletions, consider chunking the input CSV into smaller files and using the --directory option to process them concurrently.`}}),b=(0,r.buildRouteMap)({routes:{"build-xdi-sync-endpoint":u,"generate-access-tokens":v,"pull-consent-metrics":d,"pull-consent-preferences":f,"update-consent-manager":p,"upload-consent-preferences":m,"upload-cookies-from-csv":h,"upload-data-flows-from-csv":g,"upload-preferences":_,"delete-preference-records":y},docs:{brief:`Consent commands`}}),x=(0,r.buildCommand)({loader:async()=>{let{deriveDataSilosFromDataFlowsCrossInstance:e}=await Promise.resolve().then(()=>require(`./impl-cFJaGYul.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[]}),dataFlowsYmlFolder:{kind:`parsed`,parse:String,brief:`The folder that contains data flow yml files`},output:{kind:`parsed`,parse:String,brief:`The output transcend.yml file containing the data silo configurations`,default:`./transcend.yml`},ignoreYmls:{kind:`parsed`,parse:String,variadic:`,`,brief:`The set of yml files that should be skipped when uploading`,optional:!0},transcendUrl:t.s()}},docs:{brief:`Derive data silos from data flows cross instance`,fullDescription:`Given a folder of data flow transcend.yml configurations, convert those configurations to a single transcend.yml configurations of all related data silos.`}}),S=(0,r.buildCommand)({loader:async()=>{let{deriveDataSilosFromDataFlows:e}=await Promise.resolve().then(()=>require(`./impl-C1jpyDxO.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[]}),dataFlowsYmlFolder:{kind:`parsed`,parse:String,brief:`The folder that contains data flow yml files`},dataSilosYmlFolder:{kind:`parsed`,parse:String,brief:`The folder that contains data silo yml files`},ignoreYmls:{kind:`parsed`,parse:String,variadic:`,`,brief:`The set of yml files that should be skipped when uploading`,optional:!0},transcendUrl:t.s()}},docs:{brief:`Derive data silos from data flows`,fullDescription:`Given a folder of data flow transcend.yml configurations, convert those configurations to set of data silo transcend.yml configurations.`}}),C=(0,r.buildCommand)({loader:async()=>{let{discoverSilos:e}=await Promise.resolve().then(()=>require(`./impl-Cq9g8eCi.cjs`));return e},parameters:{flags:{scanPath:{kind:`parsed`,parse:String,brief:`File path in the project to scan`},dataSiloId:{kind:`parsed`,parse:t.d,brief:`The UUID of the corresponding data silo`},auth:t.i({scopes:[a.ScopeName.ManageAssignedDataInventory],requiresSiloScope:!0}),fileGlobs:{kind:`parsed`,parse:String,brief:`You can pass a glob syntax pattern(s) to specify additional file paths to scan. Comma-separated list of globs.`,default:``},ignoreDirs:{kind:`parsed`,parse:String,brief:`Comma-separated list of directories to ignore.`,default:``},transcendUrl:t.s()}},docs:{brief:`Scan dependency management files to discover new data silos.`,fullDescription:`We support scanning for new data silos in JavaScript, Python, Gradle, and CocoaPods projects.
-
-To get started, add a data silo for the corresponding project type with the "silo discovery" plugin enabled. For example, if you want to scan a JavaScript project, add a package.json data silo. Then, specify the data silo ID in the "--dataSiloId" parameter.`}}),w=(0,r.buildCommand)({loader:async()=>{let{pullDatapoints:e}=await Promise.resolve().then(()=>require(`./impl-BABdXCjW.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ViewDataInventory]}),file:{kind:`parsed`,parse:String,brief:`The file to save datapoints to`,default:`./datapoints.csv`},transcendUrl:t.s(),dataSiloIds:{kind:`parsed`,parse:String,variadic:`,`,brief:`List of data silo IDs to filter by`,optional:!0},includeAttributes:{kind:`boolean`,brief:`Whether to include attributes in the output`,default:!1},includeGuessedCategories:{kind:`boolean`,brief:`Whether to include guessed categories in the output`,default:!1},parentCategories:{kind:`enum`,values:Object.values(a.DataCategoryType),brief:`List of parent categories to filter by`,variadic:`,`,optional:!0},subCategories:{kind:`parsed`,parse:String,brief:`List of subcategories to filter by`,variadic:`,`,optional:!0}}},docs:{brief:`Export the datapoints from your Data Inventory into a CSV.`}}),T=(0,r.buildCommand)({loader:async()=>{let{pullUnstructuredDiscoveryFiles:e}=await Promise.resolve().then(()=>require(`./impl-1ibTRBn4.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ViewDataInventory]}),file:{kind:`parsed`,parse:String,brief:`The file to save datapoints to`,default:`./unstructured-discovery-files.csv`},transcendUrl:t.s(),dataSiloIds:{kind:`parsed`,parse:String,brief:`List of data silo IDs to filter by`,variadic:`,`,optional:!0},subCategories:{kind:`parsed`,parse:String,brief:`List of data categories to filter by`,variadic:`,`,optional:!0},status:{kind:`enum`,values:Object.values(a.UnstructuredSubDataPointRecommendationStatus),brief:`List of classification statuses to filter by`,variadic:`,`,optional:!0},includeEncryptedSnippets:{kind:`boolean`,brief:`Whether to include encrypted snippets of the entries classified`,default:!1}}},docs:{brief:`Pull unstructured discovery files`,fullDescription:`This command allows for pulling Unstructured Discovery into a CSV.`}}),E=(0,r.buildCommand)({loader:async()=>{let{push:e}=await Promise.resolve().then(()=>require(`./impl-DuVC84LE.cjs`));return e},parameters:{flags:{auth:t.i({scopes:`Varies`}),file:{kind:`parsed`,parse:String,brief:`Path to the YAML file to push from`,default:`./transcend.yml`},transcendUrl:t.s(),pageSize:{kind:`parsed`,parse:r.numberParser,brief:`The page size to use when paginating over the API`,default:`50`},variables:{kind:`parsed`,parse:String,brief:`The variables to template into the YAML file when pushing configuration. Comma-separated list of key:value pairs.`,default:``},publishToPrivacyCenter:{kind:`boolean`,brief:`When true, publish the configuration to the Privacy Center`,default:!1},classifyService:{kind:`boolean`,brief:`When true, automatically assign the service for a data flow based on the domain that is specified`,default:!1},deleteExtraAttributeValues:{kind:`boolean`,brief:`When true and syncing attributes, delete any extra attributes instead of just upserting`,default:!1}}},docs:{brief:`Push metadata from transcend.yml to Transcend`,fullDescription:`Given a transcend.yml file, sync the contents up to your Transcend instance.`}}),D=(0,r.buildCommand)({loader:async()=>{let{scanPackages:e}=await Promise.resolve().then(()=>require(`./impl--0AUtPOO.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ManageCodeScanning]}),scanPath:{kind:`parsed`,parse:String,brief:`File path in the project to scan`,default:`./`},ignoreDirs:{kind:`parsed`,parse:String,variadic:`,`,brief:`List of directories to ignore in scan`,optional:!0},repositoryName:{kind:`parsed`,parse:String,brief:`Name of the git repository that the package should be tied to`,optional:!0},transcendUrl:t.s()}},docs:{brief:`Scan dependency management files to inventory code dependencies.`,fullDescription:`Transcend scans packages and dependencies for the following frameworks:
-
-- package.json
-- requirements.txt & setup.py
-- Podfile
-- Package.resolved
-- build.gradle
-- pubspec.yaml
-- Gemfile & .gemspec
-- composer.json
-
-This command will scan the folder you point at to look for any of these files. Once found, the build file will be parsed in search of dependencies. Those code packages and dependencies will be uploaded to Transcend. The information uploaded to Transcend is:
-
-- repository name
-- package names
-- dependency names and versions
-- package descriptions`}});function O(e,t,r){let i=e.join(` `),a=A(t),{forceSingleLine:o=!1,argsIndent:s=2}=r??{};return a.length===0?`${n.p} ${i}`:`${n.p} ${`${n.p} ${i} ${a.join(` `)}`.length<=117&&!o?`${i} ${a.join(` `)}`:`${i} \\\n${` `.repeat(s)}${a.join(` \\\n${` `.repeat(s)}`)}`}`}function k(e,t=0){if(typeof e==`boolean`)return e?`true`:`false`;if(typeof e==`number`)return e.toString();if(e instanceof Date)return e.toISOString();if(Array.isArray(e)&&t===0){let n=e.map(e=>k(e,t+1));return n.every(e=>e.startsWith(`$`)||e.includes(` `))?`"${n.join(`,`)}"`:n.join(`,`)}if(typeof e==`string`)return t===1?e.startsWith(`$`)?`$\{${e.slice(1)}}`:e:e.startsWith(`$`)||e.includes(` `)?`"${e}"`:e;throw Error(`Unsupported value type: ${typeof e}`)}function A(e,t=0){return Object.entries(e).map(([e,n])=>typeof n==`boolean`&&n?`--${e}`:`--${e}=${k(n,t)}`)}const j=(0,r.buildCommand)({loader:async()=>{let{consentManagerServiceJsonToYml:e}=await Promise.resolve().then(()=>require(`./impl-BN61r-PG.cjs`));return e},parameters:{flags:{file:{kind:`parsed`,parse:String,brief:`Path to the services.json file, output of await airgap.getMetadata()`,default:`./services.json`},output:{kind:`parsed`,parse:String,brief:`Path to the output transcend.yml to write to`,default:`./transcend.yml`}}},docs:{brief:`Convert consent manager services to transcend.yml`,fullDescription:`Import the services from an airgap.js file into a Transcend instance.
-
-1. Run \`await airgap.getMetadata()\` on a site with airgap
-2. Right click on the printed object, and click \`Copy object\`
-3. Place output of file in a file named \`services.json\`
-4. Run:
-
-   ${O([`inventory`,`consent-manager-service-json-to-yml`],{file:`./services.json`,output:`./transcend.yml`},{argsIndent:5})}
-
-5. Run:
-
-   ${O([`inventory`,`push`],{auth:`$TRANSCEND_API_KEY`,file:`./transcend.yml`,classifyService:!0},{argsIndent:5})}`}}),M=(0,r.buildCommand)({loader:async()=>{let{consentManagersToBusinessEntities:e}=await Promise.resolve().then(()=>require(`./impl-DLeBB5Zk.cjs`));return e},parameters:{flags:{consentManagerYmlFolder:{kind:`parsed`,parse:String,brief:`Path to the folder of Consent Manager transcend.yml files to combine`},output:{kind:`parsed`,parse:String,brief:`Path to the output transcend.yml with business entity configuration`,default:`./combined-business-entities.yml`}}},docs:{brief:`Convert consent managers to business entities`,fullDescription:`This command allows for converting a folder or Consent Manager transcend.yml files into a single transcend.yml file where each consent manager configuration is a Business Entity in the data inventory.`}}),N=(0,r.buildRouteMap)({routes:{pull:t.r,push:E,"scan-packages":D,"discover-silos":C,"pull-datapoints":w,"pull-unstructured-discovery-files":T,"derive-data-silos-from-data-flows":S,"derive-data-silos-from-data-flows-cross-instance":x,"consent-manager-service-json-to-yml":j,"consent-managers-to-business-entities":M},docs:{brief:`Inventory commands`}}),P=(0,r.buildCommand)({loader:async()=>{let{syncOt:e}=await Promise.resolve().then(()=>require(`./impl-B4f6W0BP.cjs`));return e},parameters:{flags:{hostname:{kind:`parsed`,parse:String,brief:`The domain of the OneTrust environment from which to pull the resource`,optional:!0},oneTrustAuth:{kind:`parsed`,parse:String,brief:`The OAuth access token with the scopes necessary to access the OneTrust Public APIs`,optional:!0},source:{kind:`enum`,values:Object.values(e.r),brief:`Whether to read the assessments from OneTrust or from a file`,default:e.r.OneTrust},transcendAuth:{...t.i({scopes:[a.ScopeName.ManageAssessments]}),optional:!0},transcendUrl:t.s(),file:{kind:`parsed`,parse:String,brief:`Path to the file to pull the resource into. Must be a json file!`,optional:!0},resource:{kind:`enum`,values:Object.values(e.n),brief:`The resource to pull from OneTrust. For now, only assessments is supported`,default:e.n.Assessments},dryRun:{kind:`boolean`,brief:`Whether to export the resource to a file rather than sync to Transcend`,default:!1},debug:{kind:`boolean`,brief:`Whether to print detailed logs in case of error`,default:!1}}},docs:{brief:`Sync OneTrust data`,fullDescription:`Pulls resources from a OneTrust and syncs them to a Transcend instance. For now, it only supports retrieving OneTrust Assessments.
-
-This command can be helpful if you are looking to:
-- Pull resources from your OneTrust account.
-- Migrate your resources from your OneTrust account to Transcend.
-
-OneTrust authentication requires an OAuth Token with scope for accessing the assessment endpoints.
-If syncing the resources to Transcend, you will also need to generate an API key on the Transcend Admin Dashboard.`}}),ee=(0,r.buildRouteMap)({routes:{"sync-ot":P},docs:{brief:`Migration commands`}}),F=(0,r.buildCommand)({loader:async()=>{let{approve:e}=await Promise.resolve().then(()=>require(`./impl-9qObj_On.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.RequestApproval,a.ScopeName.ViewRequests,a.ScopeName.ManageRequestCompilation]}),actions:{kind:`enum`,values:Object.values(a.RequestAction),variadic:`,`,brief:`The request actions to approve`},origins:{kind:`enum`,values:Object.values(a.RequestOrigin),variadic:`,`,brief:`The request origins to approve`,optional:!0},silentModeBefore:{kind:`parsed`,parse:t.l,brief:`Any requests made before this date should be marked as silent mode`,optional:!0},createdAtBefore:{kind:`parsed`,parse:t.l,brief:`Approve requests that were submitted before this time`,optional:!0},createdAtAfter:{kind:`parsed`,parse:t.l,brief:`Approve requests that were submitted after this time`,optional:!0},transcendUrl:t.s(),concurrency:{kind:`parsed`,parse:r.numberParser,brief:`The concurrency to use when uploading requests in parallel`,default:`50`}}},docs:{brief:`Bulk approve a set of privacy requests`,fullDescription:`Bulk approve a set of privacy requests from the DSR Automation -> Incoming Requests tab.`}}),I=(0,r.buildCommand)({loader:async()=>{let{cancel:e}=await Promise.resolve().then(()=>require(`./impl-Bd239j4R.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ViewRequests,a.ScopeName.RequestApproval]}),actions:{kind:`enum`,values:Object.values(a.RequestAction),variadic:`,`,brief:`The request actions to cancel`},statuses:{kind:`enum`,values:Object.values(a.RequestStatus),variadic:`,`,brief:`The request statuses to cancel. Comma-separated list.`,optional:!0},requestIds:{kind:`parsed`,parse:String,variadic:`,`,brief:`Specify the specific request IDs to cancel`,optional:!0},silentModeBefore:{kind:`parsed`,parse:t.l,brief:`Any requests made before this date should be marked as silent mode for canceling to skip email sending`,optional:!0},createdAtBefore:{kind:`parsed`,parse:t.l,brief:`Cancel requests that were submitted before this time`,optional:!0},createdAtAfter:{kind:`parsed`,parse:t.l,brief:`Cancel requests that were submitted after this time`,optional:!0},cancellationTitle:{kind:`parsed`,parse:String,brief:`The title of the email template that should be sent to the requests upon cancelation`,default:`Request Canceled`},transcendUrl:t.s(),concurrency:{kind:`parsed`,parse:r.numberParser,brief:`The concurrency to use when uploading requests in parallel`,default:`50`}}},docs:{brief:`Bulk cancel a set of privacy requests`,fullDescription:`Bulk cancel a set of privacy requests from the DSR Automation -> Incoming Requests tab.`}}),L=(0,r.buildCommand)({loader:async()=>{let{markIdentifiersCompleted:e}=await Promise.resolve().then(()=>require(`./impl-Dsj6D_fG.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[],requiresSiloScope:!0}),dataSiloId:{kind:`parsed`,parse:t.d,brief:`The ID of the data silo to pull in`},file:{kind:`parsed`,parse:String,brief:`Path to the CSV file where identifiers will be written to`,default:`./cron-identifiers.csv`},transcendUrl:t.s(),sombraAuth:t.o()}},docs:{brief:`Mark identifiers as completed after processing.`,fullDescription:`This command takes the output of "${O([`request`,`cron`,`pull-identifiers`],{})}" and notifies Transcend that all of the requests in the CSV have been processed.
-This is used in the workflow like:
-
-1. Pull identifiers to CSV:
-
-   ${O([`request`,`cron`,`pull-identifiers`],{auth:`$TRANSCEND_API_KEY`,dataSiloId:`70810f2e-cf90-43f6-9776-901a5950599f`,actions:[a.RequestAction.Erasure],file:`./outstanding-requests.csv`},{argsIndent:5})}
-
-2. Run your process to operate on that CSV of requests.
-
-3. Notify Transcend of completion
-
-   ${O([`request`,`cron`,`mark-identifiers-completed`],{auth:`$TRANSCEND_API_KEY`,dataSiloId:`70810f2e-cf90-43f6-9776-901a5950599f`,file:`./outstanding-requests.csv`},{argsIndent:5})}
-
-Read more at https://docs.transcend.io/docs/integrations/cron-job-integration.`}}),R=(0,r.buildCommand)({loader:async()=>{let{pullIdentifiers:e}=await Promise.resolve().then(()=>require(`./impl-Bm8T2x0z.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[],requiresSiloScope:!0}),dataSiloId:{kind:`parsed`,parse:t.d,brief:`The ID of the data silo to pull in`},actions:{kind:`enum`,values:Object.values(a.RequestAction),variadic:`,`,brief:`The request actions to restart`},file:{kind:`parsed`,parse:String,brief:`Path to the CSV file where identifiers will be written to`,default:`./cron-identifiers.csv`},transcendUrl:t.s(),sombraAuth:t.o(),pageLimit:{kind:`parsed`,parse:r.numberParser,brief:`The page limit to use when pulling in pages of identifiers`,default:`100`},skipRequestCount:{kind:`boolean`,brief:`Whether to skip the count of all outstanding requests. This is required to render the progress bar, but can take a long time to run if you have a large number of outstanding requests to process. In that case, we recommend setting skipRequestCount=true so that you can still proceed with fetching the identifiers`,default:!1},chunkSize:{kind:`parsed`,parse:r.numberParser,brief:`Maximum number of rows per CSV file. For large datasets, the output will be automatically split into multiple files to avoid file system size limits. Each file will contain at most this many rows`,default:`10000`}}},docs:{brief:`Pull identifiers of outstanding requests for a data silo to a CSV.`,fullDescription:`If you are using the cron job integration, you can run this command to pull the outstanding identifiers for the data silo to a CSV.
-
-For large datasets, the output will be automatically split into multiple CSV files to avoid file system size limits. Use the --chunkSize parameter to control the maximum number of rows per file.
-
-Read more at https://docs.transcend.io/docs/integrations/cron-job-integration.`}}),z=(0,r.buildCommand)({loader:async()=>{let{pullProfiles:e}=await Promise.resolve().then(()=>require(`./impl-CXnE8Ev7.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[],requiresSiloScope:!0}),cronDataSiloId:{kind:`parsed`,parse:t.d,brief:`The ID of the cron data silo to pull in`},targetDataSiloId:{kind:`parsed`,parse:t.d,brief:`The ID of the target data silo to pull in`},actions:{kind:`enum`,values:Object.values(a.RequestAction),variadic:`,`,brief:`The request actions to restart`},file:{kind:`parsed`,parse:String,brief:`Path to the CSV file where identifiers will be written to`,default:`./cron-identifiers.csv`},fileTarget:{kind:`parsed`,parse:String,brief:`Path to the CSV file where identifiers will be written to`,default:`./cron-identifiers-target.csv`},transcendUrl:t.s(),sombraAuth:t.o(),pageLimit:{kind:`parsed`,parse:r.numberParser,brief:`The page limit to use when pulling in pages of identifiers`,default:`100`},skipRequestCount:{kind:`boolean`,brief:`Whether to skip the count of all outstanding requests. This is required to render the progress bar, but can take a long time to run if you have a large number of outstanding requests to process. In that case, we recommend setting skipRequestCount=true so that you can still proceed with fetching the identifiers`,default:!1},chunkSize:{kind:`parsed`,parse:r.numberParser,brief:`Maximum number of rows per CSV file. For large datasets, the output will be automatically split into multiple files to avoid file system size limits. Each file will contain at most this many rows`,default:`10000`}}},docs:{brief:`Pull profiles of outstanding requests for a data silo to a CSV.`,fullDescription:`If you are using the cron job integration, you can run this command to pull the outstanding profiles for the data silo to a CSV.
-
-For large datasets, the output will be automatically split into multiple CSV files to avoid file system size limits. Use the --chunkSize parameter to control the maximum number of rows per file.
-
-Read more at https://docs.transcend.io/docs/integrations/cron-job-integration.`}}),B=(0,r.buildRouteMap)({routes:{"pull-identifiers":R,"pull-profiles":z,"mark-identifiers-completed":L},docs:{brief:`Cron commands`,hideRoute:{"pull-profiles":!0}}}),V=(0,r.buildCommand)({loader:async()=>{let{downloadFiles:e}=await Promise.resolve().then(()=>require(`./impl-JkokB3Un.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ViewRequestCompilation,a.ScopeName.ViewRequests,a.ScopeName.RequestApproval]}),sombraAuth:t.o(),concurrency:{kind:`parsed`,parse:r.numberParser,brief:`The concurrency to use when downloading requests in parallel`,default:`10`},requestIds:{kind:`parsed`,parse:String,variadic:`,`,brief:`Specify the specific request IDs to download`,optional:!0},statuses:{kind:`enum`,values:Object.values(a.RequestStatus),variadic:`,`,brief:`The request statuses to download. Comma-separated list. Defaults to APPROVING,DOWNLOADABLE.`,optional:!0},folderPath:{kind:`parsed`,parse:String,brief:`The folder to download files to`,default:`./dsr-files`},createdAtBefore:{kind:`parsed`,parse:t.l,brief:`Download requests that were submitted before this time`,optional:!0},createdAtAfter:{kind:`parsed`,parse:t.l,brief:`Download requests that were submitted after this time`,optional:!0},approveAfterDownload:{kind:`boolean`,brief:`If the request is in status=APPROVING, approve the request after its downloaded`,default:!1},transcendUrl:t.s()}},docs:{brief:`Download the files associated with a Data Subject Access Request (DSAR)`,fullDescription:`Download the files associated with a Data Subject Access Request (DSAR) from DSR Automation -> Incoming Requests tab.`}}),H=(0,r.buildCommand)({loader:async()=>{let{enricherRestart:e}=await Promise.resolve().then(()=>require(`./impl-D9_MKLLL.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ManageRequestCompilation]}),enricherId:{kind:`parsed`,parse:String,brief:`The ID of the enricher to restart`},actions:{kind:`enum`,values:Object.values(a.RequestAction),variadic:`,`,brief:`The request action to restart`,optional:!0},requestEnricherStatuses:{kind:`enum`,values:Object.values(a.RequestEnricherStatus),variadic:`,`,brief:`The request enricher statuses to restart`,optional:!0},transcendUrl:t.s(),concurrency:{kind:`parsed`,parse:r.numberParser,brief:`The concurrency to use when uploading requests in parallel`,default:`15`},requestIds:{kind:`parsed`,parse:String,variadic:`,`,brief:`Specify the specific request IDs to restart`,optional:!0},createdAtBefore:{kind:`parsed`,parse:t.l,brief:`Restart requests that were submitted before this time`,optional:!0},createdAtAfter:{kind:`parsed`,parse:t.l,brief:`Restart requests that were submitted after this time`,optional:!0}}},docs:{brief:`Bulk restart a particular enricher across a series of DSRs`,fullDescription:`Bulk restart a particular enricher across a series of DSRs.
-
-The API key needs the following scopes:
-- Manage Request Compilation`}}),U=(0,r.buildCommand)({loader:async()=>{let{_export:e}=await Promise.resolve().then(()=>require(`./impl-CeoJtFk7.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ViewRequests,a.ScopeName.ViewRequestCompilation]}),sombraAuth:t.o(),actions:{kind:`enum`,values:Object.values(a.RequestAction),variadic:`,`,brief:`The request actions to export`,optional:!0},statuses:{kind:`enum`,values:Object.values(a.RequestStatus),variadic:`,`,brief:`The request statuses to export`,optional:!0},transcendUrl:t.s(),file:{kind:`parsed`,parse:String,brief:`Path to the CSV file where identifiers will be written to`,default:`./transcend-request-export.csv`},concurrency:{kind:`parsed`,parse:r.numberParser,brief:`The concurrency to use when uploading requests in parallel`,default:`50`},skipRequestIdentifiers:{kind:`boolean`,brief:`Skip exporting request identifiers`,optional:!0},createdAtBefore:{kind:`parsed`,parse:t.l,brief:`Pull requests that were submitted before this time`,optional:!0},createdAtAfter:{kind:`parsed`,parse:t.l,brief:`Pull requests that were submitted after this time`,optional:!0},showTests:{kind:`boolean`,brief:`Filter for test requests or production requests - when not provided, pulls both`,optional:!0},pageLimit:{kind:`parsed`,parse:r.numberParser,brief:`The page limit to use when pulling in pages of requests`,default:`100`}}},docs:{brief:`Export privacy requests and request identifiers to a CSV file`,fullDescription:`Export privacy requests and request identifiers to a CSV file.`}}),W=(0,r.buildCommand)({loader:async()=>{let{markSilent:e}=await Promise.resolve().then(()=>require(`./impl-C4VIGK1G.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ManageRequestCompilation]}),actions:{kind:`enum`,values:Object.values(a.RequestAction),variadic:`,`,brief:`The request actions to mark silent`},statuses:{kind:`enum`,values:Object.values(a.RequestStatus),variadic:`,`,brief:`The request statuses to mark silent. Comma-separated list. Defaults to REQUEST_MADE,WAITING,ENRICHING,COMPILING,DELAYED,APPROVING,SECONDARY,SECONDARY_APPROVING.`,optional:!0},requestIds:{kind:`parsed`,parse:String,variadic:`,`,brief:`Specify the specific request IDs to mark silent`,optional:!0},createdAtBefore:{kind:`parsed`,parse:t.l,brief:`Mark silent requests that were submitted before this time`,optional:!0},createdAtAfter:{kind:`parsed`,parse:t.l,brief:`Mark silent requests that were submitted after this time`,optional:!0},transcendUrl:t.s(),concurrency:{kind:`parsed`,parse:r.numberParser,brief:`The concurrency to use when uploading requests in parallel`,default:`50`}}},docs:{brief:`Bulk update a set of privacy requests to be in silent mode`,fullDescription:`Bulk update a set of privacy requests from the DSR Automation -> Incoming Requests tab to be in silent mode.`}}),G=(0,r.buildCommand)({loader:async()=>{let{notifyAdditionalTime:e}=await Promise.resolve().then(()=>require(`./impl-rYMBoT4c.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ViewRequests,a.ScopeName.RequestApproval]}),createdAtBefore:{kind:`parsed`,parse:t.l,brief:`Notify requests that are open but submitted before this time`},createdAtAfter:{kind:`parsed`,parse:t.l,brief:`Notify requests that are open but submitted after this time`,optional:!0},actions:{kind:`enum`,values:Object.values(a.RequestAction),variadic:`,`,brief:`The request actions to notify`,optional:!0},daysLeft:{kind:`parsed`,parse:r.numberParser,brief:`Only notify requests that have less than this number of days until they are considered expired`,default:`10`},days:{kind:`parsed`,parse:r.numberParser,brief:`The number of days to adjust the expiration of the request to`,default:`45`},requestIds:{kind:`parsed`,parse:String,variadic:`,`,brief:`Specify the specific request IDs to notify`,optional:!0},emailTemplate:{kind:`parsed`,parse:String,brief:`The title of the email template that should be sent to the requests`,default:`Additional Time Needed`},transcendUrl:t.s(),concurrency:{kind:`parsed`,parse:r.numberParser,brief:`The concurrency to use when uploading requests in parallel`,default:`50`}}},docs:{brief:`Bulk notify a set of privacy requests that more time is needed`,fullDescription:`Bulk notify a set of privacy requests from the DSR Automation -> Incoming Requests tab that more time is needed to complete the request. Note any request in silent mode will not be emailed.`}}),K=(0,r.buildCommand)({loader:async()=>{let{pullIdentifiers:e}=await Promise.resolve().then(()=>require(`./impl-Ij4ebiVO.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ViewRequests,a.ScopeName.ViewRequestCompilation]}),sombraAuth:t.o(),transcendUrl:t.s(),file:{kind:`parsed`,parse:String,brief:`Path to the CSV file where requests will be written to`,default:`./manual-enrichment-identifiers.csv`},actions:{kind:`enum`,values:Object.values(a.RequestAction),variadic:`,`,brief:`The request actions to pull for`,optional:!0},concurrency:{kind:`parsed`,parse:r.numberParser,brief:`The concurrency to use when uploading requests in parallel`,default:`100`}}},docs:{brief:`Pull identifiers for manual enrichment`,fullDescription:`This command pulls down the set of privacy requests that are currently pending manual enrichment.
-
-This is useful for the following workflow:
-
-1. Pull identifiers to CSV:
-
-   ${O([`request`,`preflight`,`pull-identifiers`],{file:`./enrichment-requests.csv`},{argsIndent:5})}
-
-2. Fill out the CSV with additional identifiers
-
-3. Push updated back to Transcend:
-
-   ${O([`request`,`preflight`,`push-identifiers`],{file:`./enrichment-requests.csv`},{argsIndent:5})}`}}),q=(0,r.buildCommand)({loader:async()=>{let{pushIdentifiers:e}=await Promise.resolve().then(()=>require(`./impl-BYBww_ic.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ManageRequestIdentities,a.ScopeName.ManageRequestCompilation]}),enricherId:{kind:`parsed`,parse:t.d,brief:`The ID of the Request Enricher to upload to`},sombraAuth:t.o(),transcendUrl:t.s(),file:{kind:`parsed`,parse:String,brief:`Path to the CSV file where requests will be written to`,default:`./manual-enrichment-identifiers.csv`},markSilent:{kind:`boolean`,brief:`When true, set requests into silent mode before enriching`,default:!1},concurrency:{kind:`parsed`,parse:r.numberParser,brief:`The concurrency to use when uploading requests in parallel`,default:`100`}}},docs:{brief:`Push identifiers for manual enrichment`,fullDescription:`This command push up a set of identifiers for a set of requests pending manual enrichment.
-
-This is useful for the following workflow:
-
-1. Pull identifiers to CSV:
-
-   ${O([`request`,`preflight`,`pull-identifiers`],{file:`./enrichment-requests.csv`},{argsIndent:5})}
-
-2. Fill out the CSV with additional identifiers
-
-3. Push updated back to Transcend:
-
-   ${O([`request`,`preflight`,`push-identifiers`],{file:`./enrichment-requests.csv`},{argsIndent:5})}`}}),J=(0,r.buildRouteMap)({routes:{"pull-identifiers":K,"push-identifiers":q},docs:{brief:`Preflight commands`}}),Y=(0,r.buildCommand)({loader:async()=>{let{rejectUnverifiedIdentifiers:e}=await Promise.resolve().then(()=>require(`./impl-D1MnxAqp.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ManageRequestCompilation]}),identifierNames:{kind:`parsed`,parse:String,variadic:`,`,brief:`The names of identifiers to clear out`},actions:{kind:`enum`,values:Object.values(a.RequestAction),variadic:`,`,brief:`The request action to restart`,optional:!0},transcendUrl:t.s()}},docs:{brief:`Bulk clear out any request identifiers that are unverified`,fullDescription:`Bulk clear out any request identifiers that are unverified.`}}),X=(0,r.buildCommand)({loader:async()=>{let{restart:e}=await Promise.resolve().then(()=>require(`./impl-B19iyoiR.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.MakeDataSubjectRequest,a.ScopeName.ViewRequestCompilation]}),actions:{kind:`enum`,values:Object.values(a.RequestAction),variadic:`,`,brief:`The request actions to restart`},statuses:{kind:`enum`,values:Object.values(a.RequestStatus),variadic:`,`,brief:`The request statuses to restart`},transcendUrl:t.s(),requestReceiptFolder:{kind:`parsed`,parse:String,brief:`The path to the folder where receipts of each upload are stored`,default:`./privacy-request-upload-receipts`},sombraAuth:t.o(),concurrency:{kind:`parsed`,parse:r.numberParser,brief:`The concurrency to use when uploading requests in parallel`,default:`15`},requestIds:{kind:`parsed`,parse:String,variadic:`,`,brief:`Specify the specific request IDs to restart`,optional:!0},emailIsVerified:{kind:`boolean`,brief:`Indicate whether the primary email address is verified. Set to false to send a verification email`,default:!0},createdAt:{kind:`parsed`,parse:t.l,brief:`Restart requests that were submitted before a specific date`,optional:!0},silentModeBefore:{kind:`parsed`,parse:t.l,brief:`Requests older than this date should be marked as silent mode`,optional:!0},createdAtBefore:{kind:`parsed`,parse:t.l,brief:`Restart requests that were submitted before this time`,optional:!0},createdAtAfter:{kind:`parsed`,parse:t.l,brief:`Restart requests that were submitted after this time`,optional:!0},sendEmailReceipt:{kind:`boolean`,brief:`Send email receipts to the restarted requests`,default:!1},copyIdentifiers:{kind:`boolean`,brief:`Copy over all enriched identifiers from the initial request`,default:!1},skipWaitingPeriod:{kind:`boolean`,brief:`Skip queued state of request and go straight to compiling`,default:!1}}},docs:{brief:`Bulk update a set of privacy requests based on a set of request filters`,fullDescription:`Bulk update a set of privacy requests based on a set of request filters.`}}),Z=(0,r.buildCommand)({loader:async()=>{let{skipPreflightJobs:e}=await Promise.resolve().then(()=>require(`./impl-BtfHdJB-.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ManageRequestCompilation]}),enricherIds:{kind:`parsed`,parse:String,variadic:`,`,brief:`The ID of the enrichers to skip privacy request jobs for`},transcendUrl:t.s()}},docs:{brief:`Skip preflight jobs`,fullDescription:`This command allows for bulk skipping preflight checks.`}}),Q=(0,r.buildCommand)({loader:async()=>{let{markRequestDataSilosCompleted:e}=await Promise.resolve().then(()=>require(`./impl-Dwd8vWoq.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ManageRequestCompilation]}),dataSiloId:{kind:`parsed`,parse:t.d,brief:`The ID of the data silo to pull in`},file:{kind:`parsed`,parse:String,brief:`Path to the CSV file where identifiers will be written to. The CSV is expected to have 1 column named "Request Id".`,default:`./request-identifiers.csv`},transcendUrl:t.s()}},docs:{brief:`Mark request data silos as completed`,fullDescription:`This command takes in a CSV of Request IDs as well as a Data Silo ID and marks all associated privacy request jobs as completed.
-This command is useful with the "Bulk Response" UI. The CSV is expected to have 1 column named "Request Id".`}}),$=(0,r.buildCommand)({loader:async()=>{let{retryRequestDataSilos:e}=await Promise.resolve().then(()=>require(`./impl-Emn0jZNk.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ManageRequestCompilation]}),dataSiloId:{kind:`parsed`,parse:t.d,brief:`The ID of the data silo to pull in`},actions:{kind:`enum`,values:Object.values(a.RequestAction),variadic:`,`,brief:`The request actions to restart`},transcendUrl:t.s()}},docs:{brief:`Retry request data silos`,fullDescription:`This command allows for bulk restarting a set of data silos jobs for open privacy requests. This is equivalent to clicking the "Wipe and Retry" button for a particular data silo across a set of privacy requests.`}}),te=(0,r.buildCommand)({loader:async()=>{let{skipRequestDataSilos:e}=await Promise.resolve().then(()=>require(`./impl-TDjUVCrV.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.ManageRequestCompilation]}),dataSiloId:{kind:`parsed`,parse:t.d,brief:`The ID of the data silo to skip privacy request jobs for`},transcendUrl:t.s(),statuses:{kind:`enum`,values:Object.values(a.RequestStatus),variadic:`,`,brief:`The request statuses to skip`},status:{kind:`enum`,values:[a.RequestDataSiloStatus.Skipped,a.RequestDataSiloStatus.Resolved],brief:`The status to set the request data silo job to`,default:a.RequestDataSiloStatus.Skipped}}},docs:{brief:`Skip request data silos`,fullDescription:`This command allows for bulk skipping all open privacy request jobs for a particular data silo. This command is useful if you want to disable a data silo and then clear out any active privacy requests that are still queued up for that data silo.`}}),ne=(0,r.buildRouteMap)({routes:{"mark-request-data-silos-completed":Q,"retry-request-data-silos":$,"skip-request-data-silos":te},docs:{brief:`System commands`}}),re=(0,r.buildCommand)({loader:async()=>{let{upload:e}=await Promise.resolve().then(()=>require(`./impl-BnkpDlXg.cjs`));return e},parameters:{flags:{auth:t.i({scopes:[a.ScopeName.MakeDataSubjectRequest,a.ScopeName.ViewRequestIdentitySettings,a.ScopeName.ViewGlobalAttributes]}),file:{kind:`parsed`,parse:String,brief:`Path to the CSV file of requests to upload`,default:`./requests.csv`},transcendUrl:t.s(),cacheFilepath:{kind:`parsed`,parse:String,brief:`The path to the JSON file encoding the metadata used to map the CSV shape to Transcend API`,default:`./transcend-privacy-requests-cache.json`},requestReceiptFolder:{kind:`parsed`,parse:String,brief:`The path to the folder where receipts of each upload are stored`,default:`./privacy-request-upload-receipts`},sombraAuth:t.o(),concurrency:{kind:`parsed`,parse:r.numberParser,brief:`The concurrency to use when uploading requests in parallel`,default:`50`},attributes:{kind:`parsed`,parse:String,brief:`Tag all of the requests with the following attributes. Format: key1:value1;value2,key2:value3;value4`,default:`Tags:transcend-cli`},isTest:{kind:`boolean`,brief:`Flag whether the requests being uploaded are test requests or regular requests`,default:!1},isSilent:{kind:`boolean`,brief:`Flag whether the requests being uploaded should be submitted in silent mode`,default:!0},skipSendingReceipt:{kind:`boolean`,brief:`Flag whether to skip sending of the receipt email`,default:!1},emailIsVerified:{kind:`boolean`,brief:`Indicate whether the email address being uploaded is pre-verified. Set to false to send a verification email`,default:!0},skipFilterStep:{kind:`boolean`,brief:`When true, skip the interactive step to filter down the CSV`,default:!1},dryRun:{kind:`boolean`,brief:`When true, perform a dry run of the upload instead of calling the API to submit the requests`,default:!1},debug:{kind:`boolean`,brief:`Debug logging`,default:!1},defaultPhoneCountryCode:{kind:`parsed`,parse:String,brief:`When uploading phone numbers, if the phone number is missing a country code, assume this country code`,default:`1`}}},docs:{brief:`Upload a set of requests from a CSV`,fullDescription:`Upload a set of requests from a CSV.
-
-This command prompts you to map the shape of the CSV to the shape of the Transcend API. There is no requirement for the shape of the incoming CSV, as the script will handle the mapping process.
-
-The script will also produce a JSON cache file that allows for the mappings to be preserved between runs.`}}),ie=(0,r.buildRouteMap)({routes:{approve:F,upload:re,"download-files":V,cancel:I,restart:X,"notify-additional-time":G,"mark-silent":W,"enricher-restart":H,"reject-unverified-identifiers":Y,export:U,"skip-preflight-jobs":Z,system:ne,preflight:J,cron:B},docs:{brief:`All commands related to DSR requests`}}),ae=(0,r.buildRouteMap)({routes:{request:ie,consent:b,inventory:N,admin:l,migration:ee,install:(0,i.buildInstallCommand)(`@transcend-io/transcend`,{bash:`__@transcend-io/cli_bash_complete`}),uninstall:(0,i.buildUninstallCommand)(`@transcend-io/transcend`,{bash:!0})},docs:{brief:n.m,hideRoute:{install:!0,uninstall:!0}}}),oe=(0,r.buildApplication)(ae,{name:n.p,versionInfo:{currentVersion:n.h}});Object.defineProperty(exports,`t`,{enumerable:!0,get:function(){return oe}});
-//# sourceMappingURL=app-CnSMU1Jq.cjs.map