@transcend-io/cli 8.37.0 → 8.37.2

package/README.md

@@ -190,7 +190,7 @@ data-silos:
 
 ```txt
 USAGE
-  transcend request approve (--auth value) (--actions AUTOMATED_DECISION_MAKING_OPT_OUT|USE_OF_SENSITIVE_INFORMATION_OPT_OUT|CONTACT_OPT_OUT|SALE_OPT_OUT|TRACKING_OPT_OUT|CUSTOM_OPT_OUT|AUTOMATED_DECISION_MAKING_OPT_IN|USE_OF_SENSITIVE_INFORMATION_OPT_IN|SALE_OPT_IN|TRACKING_OPT_IN|CONTACT_OPT_IN|CUSTOM_OPT_IN|ACCESS|ERASURE|RECTIFICATION|RESTRICTION|BUSINESS_PURPOSE|PLACE_ON_LEGAL_HOLD|REMOVE_FROM_LEGAL_HOLD) [--origins PRIVACY_CENTER|ADMIN_DASHBOARD|API|SHOPIFY] [--silentModeBefore value] [--createdAtBefore value] [--createdAtAfter value] [--transcendUrl value] [--concurrency value]
+  transcend request approve (--auth value) (--actions AUTOMATED_DECISION_MAKING_OPT_OUT|USE_OF_SENSITIVE_INFORMATION_OPT_OUT|CONTACT_OPT_OUT|SALE_OPT_OUT|TRACKING_OPT_OUT|CUSTOM_OPT_OUT|AUTOMATED_DECISION_MAKING_OPT_IN|USE_OF_SENSITIVE_INFORMATION_OPT_IN|SALE_OPT_IN|TRACKING_OPT_IN|CONTACT_OPT_IN|CUSTOM_OPT_IN|ACCESS|ERASURE|RECTIFICATION|RESTRICTION|BUSINESS_PURPOSE|PLACE_ON_LEGAL_HOLD|REMOVE_FROM_LEGAL_HOLD) [--origins PRIVACY_CENTER|ADMIN_DASHBOARD|API|SHOPIFY] [--silentModeBefore value] [--createdAtBefore value] [--createdAtAfter value] [--updatedAtBefore value] [--updatedAtAfter value] [--transcendUrl value] [--concurrency value]
   transcend request approve --help
 
 Bulk approve a set of privacy requests from the DSR Automation -> Incoming Requests tab.
@@ -202,6 +202,8 @@ FLAGS
      [--silentModeBefore]  Any requests made before this date should be marked as silent mode
      [--createdAtBefore]   Approve requests that were submitted before this time
      [--createdAtAfter]    Approve requests that were submitted after this time
+     [--updatedAtBefore]   Approve requests that were last updated before this time
+     [--updatedAtAfter]    Approve requests that were last updated after this time
      [--transcendUrl]      URL of the Transcend backend. Use https://api.us.transcend.io for US hosting                                                         [default = https://api.transcend.io]
      [--concurrency]       The concurrency to use when uploading requests in parallel                                                                           [default = 50]
   -h  --help               Print help information and exit
@@ -390,7 +392,7 @@ transcend request upload \
 
 ```txt
 USAGE
-  transcend request download-files (--auth value) [--sombraAuth value] [--concurrency value] [--requestIds value]... [--statuses REQUEST_MADE|FAILED_VERIFICATION|ENRICHING|ON_HOLD|WAITING|COMPILING|APPROVING|DELAYED|COMPLETED|DOWNLOADABLE|VIEW_CATEGORIES|CANCELED|SECONDARY|SECONDARY_COMPLETED|SECONDARY_APPROVING|REVOKED] [--folderPath value] [--createdAtBefore value] [--createdAtAfter value] [--approveAfterDownload] [--transcendUrl value]
+  transcend request download-files (--auth value) [--sombraAuth value] [--concurrency value] [--requestIds value]... [--statuses REQUEST_MADE|FAILED_VERIFICATION|ENRICHING|ON_HOLD|WAITING|COMPILING|APPROVING|DELAYED|COMPLETED|DOWNLOADABLE|VIEW_CATEGORIES|CANCELED|SECONDARY|SECONDARY_COMPLETED|SECONDARY_APPROVING|REVOKED] [--folderPath value] [--createdAtBefore value] [--createdAtAfter value] [--updatedAtBefore value] [--updatedAtAfter value] [--approveAfterDownload] [--transcendUrl value]
   transcend request download-files --help
 
 Download the files associated with a Data Subject Access Request (DSAR) from DSR Automation -> Incoming Requests tab.
@@ -404,6 +406,8 @@ FLAGS
      [--folderPath]            The folder to download files to                                                                                                        [default = ./dsr-files]
      [--createdAtBefore]       Download requests that were submitted before this time
      [--createdAtAfter]        Download requests that were submitted after this time
+     [--updatedAtBefore]       Download requests that were last updated before this time
+     [--updatedAtAfter]        Download requests that were last updated after this time
      [--approveAfterDownload]  If the request is in status=APPROVING, approve the request after its downloaded                                                        [default = false]
      [--transcendUrl]          URL of the Transcend backend. Use https://api.us.transcend.io for US hosting                                                           [default = https://api.transcend.io]
   -h  --help                   Print help information and exit
@@ -472,7 +476,7 @@ transcend request download-files \
 
 ```txt
 USAGE
-  transcend request cancel (--auth value) (--actions AUTOMATED_DECISION_MAKING_OPT_OUT|USE_OF_SENSITIVE_INFORMATION_OPT_OUT|CONTACT_OPT_OUT|SALE_OPT_OUT|TRACKING_OPT_OUT|CUSTOM_OPT_OUT|AUTOMATED_DECISION_MAKING_OPT_IN|USE_OF_SENSITIVE_INFORMATION_OPT_IN|SALE_OPT_IN|TRACKING_OPT_IN|CONTACT_OPT_IN|CUSTOM_OPT_IN|ACCESS|ERASURE|RECTIFICATION|RESTRICTION|BUSINESS_PURPOSE|PLACE_ON_LEGAL_HOLD|REMOVE_FROM_LEGAL_HOLD) [--statuses REQUEST_MADE|FAILED_VERIFICATION|ENRICHING|ON_HOLD|WAITING|COMPILING|APPROVING|DELAYED|COMPLETED|DOWNLOADABLE|VIEW_CATEGORIES|CANCELED|SECONDARY|SECONDARY_COMPLETED|SECONDARY_APPROVING|REVOKED] [--requestIds value]... [--silentModeBefore value] [--createdAtBefore value] [--createdAtAfter value] [--cancellationTitle value] [--transcendUrl value] [--concurrency value]
+  transcend request cancel (--auth value) (--actions AUTOMATED_DECISION_MAKING_OPT_OUT|USE_OF_SENSITIVE_INFORMATION_OPT_OUT|CONTACT_OPT_OUT|SALE_OPT_OUT|TRACKING_OPT_OUT|CUSTOM_OPT_OUT|AUTOMATED_DECISION_MAKING_OPT_IN|USE_OF_SENSITIVE_INFORMATION_OPT_IN|SALE_OPT_IN|TRACKING_OPT_IN|CONTACT_OPT_IN|CUSTOM_OPT_IN|ACCESS|ERASURE|RECTIFICATION|RESTRICTION|BUSINESS_PURPOSE|PLACE_ON_LEGAL_HOLD|REMOVE_FROM_LEGAL_HOLD) [--statuses REQUEST_MADE|FAILED_VERIFICATION|ENRICHING|ON_HOLD|WAITING|COMPILING|APPROVING|DELAYED|COMPLETED|DOWNLOADABLE|VIEW_CATEGORIES|CANCELED|SECONDARY|SECONDARY_COMPLETED|SECONDARY_APPROVING|REVOKED] [--requestIds value]... [--silentModeBefore value] [--createdAtBefore value] [--createdAtAfter value] [--updatedAtBefore value] [--updatedAtAfter value] [--cancellationTitle value] [--transcendUrl value] [--concurrency value]
   transcend request cancel --help
 
 Bulk cancel a set of privacy requests from the DSR Automation -> Incoming Requests tab.
@@ -485,6 +489,8 @@ FLAGS
      [--silentModeBefore]   Any requests made before this date should be marked as silent mode for canceling to skip email sending
      [--createdAtBefore]    Cancel requests that were submitted before this time
      [--createdAtAfter]     Cancel requests that were submitted after this time
+     [--updatedAtBefore]    Cancel requests that were last updated before this time
+     [--updatedAtAfter]     Cancel requests that were last updated after this time
      [--cancellationTitle]  The title of the email template that should be sent to the requests upon cancelation                   [default = Request Canceled]
      [--transcendUrl]       URL of the Transcend backend. Use https://api.us.transcend.io for US hosting                           [default = https://api.transcend.io]
      [--concurrency]        The concurrency to use when uploading requests in parallel                                             [default = 50]
@@ -556,7 +562,7 @@ transcend request cancel \
 
 ```txt
 USAGE
-  transcend request restart (--auth value) (--actions AUTOMATED_DECISION_MAKING_OPT_OUT|USE_OF_SENSITIVE_INFORMATION_OPT_OUT|CONTACT_OPT_OUT|SALE_OPT_OUT|TRACKING_OPT_OUT|CUSTOM_OPT_OUT|AUTOMATED_DECISION_MAKING_OPT_IN|USE_OF_SENSITIVE_INFORMATION_OPT_IN|SALE_OPT_IN|TRACKING_OPT_IN|CONTACT_OPT_IN|CUSTOM_OPT_IN|ACCESS|ERASURE|RECTIFICATION|RESTRICTION|BUSINESS_PURPOSE|PLACE_ON_LEGAL_HOLD|REMOVE_FROM_LEGAL_HOLD) (--statuses REQUEST_MADE|FAILED_VERIFICATION|ENRICHING|ON_HOLD|WAITING|COMPILING|APPROVING|DELAYED|COMPLETED|DOWNLOADABLE|VIEW_CATEGORIES|CANCELED|SECONDARY|SECONDARY_COMPLETED|SECONDARY_APPROVING|REVOKED) [--transcendUrl value] [--requestReceiptFolder value] [--sombraAuth value] [--concurrency value] [--requestIds value]... [--emailIsVerified] [--createdAt value] [--silentModeBefore value] [--createdAtBefore value] [--createdAtAfter value] [--sendEmailReceipt] [--copyIdentifiers] [--skipWaitingPeriod]
+  transcend request restart (--auth value) (--actions AUTOMATED_DECISION_MAKING_OPT_OUT|USE_OF_SENSITIVE_INFORMATION_OPT_OUT|CONTACT_OPT_OUT|SALE_OPT_OUT|TRACKING_OPT_OUT|CUSTOM_OPT_OUT|AUTOMATED_DECISION_MAKING_OPT_IN|USE_OF_SENSITIVE_INFORMATION_OPT_IN|SALE_OPT_IN|TRACKING_OPT_IN|CONTACT_OPT_IN|CUSTOM_OPT_IN|ACCESS|ERASURE|RECTIFICATION|RESTRICTION|BUSINESS_PURPOSE|PLACE_ON_LEGAL_HOLD|REMOVE_FROM_LEGAL_HOLD) (--statuses REQUEST_MADE|FAILED_VERIFICATION|ENRICHING|ON_HOLD|WAITING|COMPILING|APPROVING|DELAYED|COMPLETED|DOWNLOADABLE|VIEW_CATEGORIES|CANCELED|SECONDARY|SECONDARY_COMPLETED|SECONDARY_APPROVING|REVOKED) [--transcendUrl value] [--requestReceiptFolder value] [--sombraAuth value] [--concurrency value] [--requestIds value]... [--emailIsVerified] [--createdAt value] [--silentModeBefore value] [--createdAtBefore value] [--createdAtAfter value] [--updatedAtBefore value] [--updatedAtAfter value] [--sendEmailReceipt] [--copyIdentifiers] [--skipWaitingPeriod]
   transcend request restart --help
 
 Bulk update a set of privacy requests based on a set of request filters.
@@ -575,6 +581,8 @@ FLAGS
      [--silentModeBefore]                     Requests older than this date should be marked as silent mode
      [--createdAtBefore]                      Restart requests that were submitted before this time
      [--createdAtAfter]                       Restart requests that were submitted after this time
+     [--updatedAtBefore]                      Restart requests that were last updated before this time
+     [--updatedAtAfter]                       Restart requests that were last updated after this time
      [--sendEmailReceipt]                     Send email receipts to the restarted requests                                                             [default = false]
      [--copyIdentifiers]                      Copy over all enriched identifiers from the initial request                                               [default = false]
      [--skipWaitingPeriod]                    Skip queued state of request and go straight to compiling                                                 [default = false]
@@ -705,23 +713,25 @@ transcend request restart \
 
 ```txt
 USAGE
-  transcend request notify-additional-time (--auth value) (--createdAtBefore value) [--createdAtAfter value] [--actions AUTOMATED_DECISION_MAKING_OPT_OUT|USE_OF_SENSITIVE_INFORMATION_OPT_OUT|CONTACT_OPT_OUT|SALE_OPT_OUT|TRACKING_OPT_OUT|CUSTOM_OPT_OUT|AUTOMATED_DECISION_MAKING_OPT_IN|USE_OF_SENSITIVE_INFORMATION_OPT_IN|SALE_OPT_IN|TRACKING_OPT_IN|CONTACT_OPT_IN|CUSTOM_OPT_IN|ACCESS|ERASURE|RECTIFICATION|RESTRICTION|BUSINESS_PURPOSE|PLACE_ON_LEGAL_HOLD|REMOVE_FROM_LEGAL_HOLD] [--daysLeft value] [--days value] [--requestIds value]... [--emailTemplate value] [--transcendUrl value] [--concurrency value]
+  transcend request notify-additional-time (--auth value) (--createdAtBefore value) [--createdAtAfter value] [--updatedAtBefore value] [--updatedAtAfter value] [--actions AUTOMATED_DECISION_MAKING_OPT_OUT|USE_OF_SENSITIVE_INFORMATION_OPT_OUT|CONTACT_OPT_OUT|SALE_OPT_OUT|TRACKING_OPT_OUT|CUSTOM_OPT_OUT|AUTOMATED_DECISION_MAKING_OPT_IN|USE_OF_SENSITIVE_INFORMATION_OPT_IN|SALE_OPT_IN|TRACKING_OPT_IN|CONTACT_OPT_IN|CUSTOM_OPT_IN|ACCESS|ERASURE|RECTIFICATION|RESTRICTION|BUSINESS_PURPOSE|PLACE_ON_LEGAL_HOLD|REMOVE_FROM_LEGAL_HOLD] [--daysLeft value] [--days value] [--requestIds value]... [--emailTemplate value] [--transcendUrl value] [--concurrency value]
   transcend request notify-additional-time --help
 
 Bulk notify a set of privacy requests from the DSR Automation -> Incoming Requests tab that more time is needed to complete the request. Note any request in silent mode will not be emailed.
 
 FLAGS
-      --auth             The Transcend API key. Requires scopes: "View Incoming Requests", "Request Approval and Communication"
-      --createdAtBefore  Notify requests that are open but submitted before this time
-     [--createdAtAfter]  Notify requests that are open but submitted after this time
-     [--actions]         The request actions to notify                                                                          [AUTOMATED_DECISION_MAKING_OPT_OUT|USE_OF_SENSITIVE_INFORMATION_OPT_OUT|CONTACT_OPT_OUT|SALE_OPT_OUT|TRACKING_OPT_OUT|CUSTOM_OPT_OUT|AUTOMATED_DECISION_MAKING_OPT_IN|USE_OF_SENSITIVE_INFORMATION_OPT_IN|SALE_OPT_IN|TRACKING_OPT_IN|CONTACT_OPT_IN|CUSTOM_OPT_IN|ACCESS|ERASURE|RECTIFICATION|RESTRICTION|BUSINESS_PURPOSE|PLACE_ON_LEGAL_HOLD|REMOVE_FROM_LEGAL_HOLD, separator = ,]
-     [--daysLeft]        Only notify requests that have less than this number of days until they are considered expired         [default = 10]
-     [--days]            The number of days to adjust the expiration of the request to                                          [default = 45]
-     [--requestIds]...   Specify the specific request IDs to notify                                                             [separator = ,]
-     [--emailTemplate]   The title of the email template that should be sent to the requests                                    [default = Additional Time Needed]
-     [--transcendUrl]    URL of the Transcend backend. Use https://api.us.transcend.io for US hosting                           [default = https://api.transcend.io]
-     [--concurrency]     The concurrency to use when uploading requests in parallel                                             [default = 50]
-  -h  --help             Print help information and exit
+      --auth              The Transcend API key. Requires scopes: "View Incoming Requests", "Request Approval and Communication"
+      --createdAtBefore   Notify requests that are open but submitted before this time
+     [--createdAtAfter]   Notify requests that are open but submitted after this time
+     [--updatedAtBefore]  Notify requests that were last updated before this time
+     [--updatedAtAfter]   Notify requests that were last updated after this time
+     [--actions]          The request actions to notify                                                                          [AUTOMATED_DECISION_MAKING_OPT_OUT|USE_OF_SENSITIVE_INFORMATION_OPT_OUT|CONTACT_OPT_OUT|SALE_OPT_OUT|TRACKING_OPT_OUT|CUSTOM_OPT_OUT|AUTOMATED_DECISION_MAKING_OPT_IN|USE_OF_SENSITIVE_INFORMATION_OPT_IN|SALE_OPT_IN|TRACKING_OPT_IN|CONTACT_OPT_IN|CUSTOM_OPT_IN|ACCESS|ERASURE|RECTIFICATION|RESTRICTION|BUSINESS_PURPOSE|PLACE_ON_LEGAL_HOLD|REMOVE_FROM_LEGAL_HOLD, separator = ,]
+     [--daysLeft]         Only notify requests that have less than this number of days until they are considered expired         [default = 10]
+     [--days]             The number of days to adjust the expiration of the request to                                          [default = 45]
+     [--requestIds]...    Specify the specific request IDs to notify                                                             [separator = ,]
+     [--emailTemplate]    The title of the email template that should be sent to the requests                                    [default = Additional Time Needed]
+     [--transcendUrl]     URL of the Transcend backend. Use https://api.us.transcend.io for US hosting                           [default = https://api.transcend.io]
+     [--concurrency]      The concurrency to use when uploading requests in parallel                                             [default = 50]
+  -h  --help              Print help information and exit
 ```
 
 #### Examples
@@ -808,7 +818,7 @@ transcend request notify-additional-time \
 
 ```txt
 USAGE
-  transcend request mark-silent (--auth value) (--actions AUTOMATED_DECISION_MAKING_OPT_OUT|USE_OF_SENSITIVE_INFORMATION_OPT_OUT|CONTACT_OPT_OUT|SALE_OPT_OUT|TRACKING_OPT_OUT|CUSTOM_OPT_OUT|AUTOMATED_DECISION_MAKING_OPT_IN|USE_OF_SENSITIVE_INFORMATION_OPT_IN|SALE_OPT_IN|TRACKING_OPT_IN|CONTACT_OPT_IN|CUSTOM_OPT_IN|ACCESS|ERASURE|RECTIFICATION|RESTRICTION|BUSINESS_PURPOSE|PLACE_ON_LEGAL_HOLD|REMOVE_FROM_LEGAL_HOLD) [--statuses REQUEST_MADE|FAILED_VERIFICATION|ENRICHING|ON_HOLD|WAITING|COMPILING|APPROVING|DELAYED|COMPLETED|DOWNLOADABLE|VIEW_CATEGORIES|CANCELED|SECONDARY|SECONDARY_COMPLETED|SECONDARY_APPROVING|REVOKED] [--requestIds value]... [--createdAtBefore value] [--createdAtAfter value] [--transcendUrl value] [--concurrency value]
+  transcend request mark-silent (--auth value) (--actions AUTOMATED_DECISION_MAKING_OPT_OUT|USE_OF_SENSITIVE_INFORMATION_OPT_OUT|CONTACT_OPT_OUT|SALE_OPT_OUT|TRACKING_OPT_OUT|CUSTOM_OPT_OUT|AUTOMATED_DECISION_MAKING_OPT_IN|USE_OF_SENSITIVE_INFORMATION_OPT_IN|SALE_OPT_IN|TRACKING_OPT_IN|CONTACT_OPT_IN|CUSTOM_OPT_IN|ACCESS|ERASURE|RECTIFICATION|RESTRICTION|BUSINESS_PURPOSE|PLACE_ON_LEGAL_HOLD|REMOVE_FROM_LEGAL_HOLD) [--statuses REQUEST_MADE|FAILED_VERIFICATION|ENRICHING|ON_HOLD|WAITING|COMPILING|APPROVING|DELAYED|COMPLETED|DOWNLOADABLE|VIEW_CATEGORIES|CANCELED|SECONDARY|SECONDARY_COMPLETED|SECONDARY_APPROVING|REVOKED] [--requestIds value]... [--createdAtBefore value] [--createdAtAfter value] [--updatedAtBefore value] [--updatedAtAfter value] [--transcendUrl value] [--concurrency value]
   transcend request mark-silent --help
 
 Bulk update a set of privacy requests from the DSR Automation -> Incoming Requests tab to be in silent mode.
@@ -820,6 +830,8 @@ FLAGS
      [--requestIds]...    Specify the specific request IDs to mark silent                                                                                                                  [separator = ,]
      [--createdAtBefore]  Mark silent requests that were submitted before this time
      [--createdAtAfter]   Mark silent requests that were submitted after this time
+     [--updatedAtBefore]  Mark silent requests that were last updated before this time
+     [--updatedAtAfter]   Mark silent requests that were last updated after this time
      [--transcendUrl]     URL of the Transcend backend. Use https://api.us.transcend.io for US hosting                                                                                     [default = https://api.transcend.io]
      [--concurrency]      The concurrency to use when uploading requests in parallel                                                                                                       [default = 50]
   -h  --help              Print help information and exit
@@ -878,7 +890,7 @@ transcend request mark-silent --auth="$TRANSCEND_API_KEY" --actions=ERASURE --co
 
 ```txt
 USAGE
-  transcend request enricher-restart (--auth value) (--enricherId value) [--actions AUTOMATED_DECISION_MAKING_OPT_OUT|USE_OF_SENSITIVE_INFORMATION_OPT_OUT|CONTACT_OPT_OUT|SALE_OPT_OUT|TRACKING_OPT_OUT|CUSTOM_OPT_OUT|AUTOMATED_DECISION_MAKING_OPT_IN|USE_OF_SENSITIVE_INFORMATION_OPT_IN|SALE_OPT_IN|TRACKING_OPT_IN|CONTACT_OPT_IN|CUSTOM_OPT_IN|ACCESS|ERASURE|RECTIFICATION|RESTRICTION|BUSINESS_PURPOSE|PLACE_ON_LEGAL_HOLD|REMOVE_FROM_LEGAL_HOLD] [--requestEnricherStatuses QUEUED|WAITING|SKIPPED|ERROR|RESOLVED|ACTION_REQUIRED|REMOTE_PROCESSING|WAITING_ON_DEPENDENCIES|POLLING] [--transcendUrl value] [--concurrency value] [--requestIds value]... [--createdAtBefore value] [--createdAtAfter value]
+  transcend request enricher-restart (--auth value) (--enricherId value) [--actions AUTOMATED_DECISION_MAKING_OPT_OUT|USE_OF_SENSITIVE_INFORMATION_OPT_OUT|CONTACT_OPT_OUT|SALE_OPT_OUT|TRACKING_OPT_OUT|CUSTOM_OPT_OUT|AUTOMATED_DECISION_MAKING_OPT_IN|USE_OF_SENSITIVE_INFORMATION_OPT_IN|SALE_OPT_IN|TRACKING_OPT_IN|CONTACT_OPT_IN|CUSTOM_OPT_IN|ACCESS|ERASURE|RECTIFICATION|RESTRICTION|BUSINESS_PURPOSE|PLACE_ON_LEGAL_HOLD|REMOVE_FROM_LEGAL_HOLD] [--requestEnricherStatuses QUEUED|WAITING|SKIPPED|ERROR|RESOLVED|ACTION_REQUIRED|REMOTE_PROCESSING|WAITING_ON_DEPENDENCIES|POLLING] [--transcendUrl value] [--concurrency value] [--requestIds value]... [--createdAtBefore value] [--createdAtAfter value] [--updatedAtBefore value] [--updatedAtAfter value]
   transcend request enricher-restart --help
 
 Bulk restart a particular enricher across a series of DSRs.
@@ -896,6 +908,8 @@ FLAGS
      [--requestIds]...            Specify the specific request IDs to restart                                  [separator = ,]
      [--createdAtBefore]          Restart requests that were submitted before this time
      [--createdAtAfter]           Restart requests that were submitted after this time
+     [--updatedAtBefore]          Restart requests that were last updated before this time
+     [--updatedAtAfter]           Restart requests that were last updated after this time
   -h  --help                      Print help information and exit
 ```
 
@@ -1000,7 +1014,7 @@ transcend request reject-unverified-identifiers \
 
 ```txt
 USAGE
-  transcend request export (--auth value) [--sombraAuth value] [--actions AUTOMATED_DECISION_MAKING_OPT_OUT|USE_OF_SENSITIVE_INFORMATION_OPT_OUT|CONTACT_OPT_OUT|SALE_OPT_OUT|TRACKING_OPT_OUT|CUSTOM_OPT_OUT|AUTOMATED_DECISION_MAKING_OPT_IN|USE_OF_SENSITIVE_INFORMATION_OPT_IN|SALE_OPT_IN|TRACKING_OPT_IN|CONTACT_OPT_IN|CUSTOM_OPT_IN|ACCESS|ERASURE|RECTIFICATION|RESTRICTION|BUSINESS_PURPOSE|PLACE_ON_LEGAL_HOLD|REMOVE_FROM_LEGAL_HOLD] [--statuses REQUEST_MADE|FAILED_VERIFICATION|ENRICHING|ON_HOLD|WAITING|COMPILING|APPROVING|DELAYED|COMPLETED|DOWNLOADABLE|VIEW_CATEGORIES|CANCELED|SECONDARY|SECONDARY_COMPLETED|SECONDARY_APPROVING|REVOKED] [--transcendUrl value] [--file value] [--concurrency value] [--skipRequestIdentifiers] [--createdAtBefore value] [--createdAtAfter value] [--showTests] [--pageLimit value]
+  transcend request export (--auth value) [--sombraAuth value] [--actions AUTOMATED_DECISION_MAKING_OPT_OUT|USE_OF_SENSITIVE_INFORMATION_OPT_OUT|CONTACT_OPT_OUT|SALE_OPT_OUT|TRACKING_OPT_OUT|CUSTOM_OPT_OUT|AUTOMATED_DECISION_MAKING_OPT_IN|USE_OF_SENSITIVE_INFORMATION_OPT_IN|SALE_OPT_IN|TRACKING_OPT_IN|CONTACT_OPT_IN|CUSTOM_OPT_IN|ACCESS|ERASURE|RECTIFICATION|RESTRICTION|BUSINESS_PURPOSE|PLACE_ON_LEGAL_HOLD|REMOVE_FROM_LEGAL_HOLD] [--statuses REQUEST_MADE|FAILED_VERIFICATION|ENRICHING|ON_HOLD|WAITING|COMPILING|APPROVING|DELAYED|COMPLETED|DOWNLOADABLE|VIEW_CATEGORIES|CANCELED|SECONDARY|SECONDARY_COMPLETED|SECONDARY_APPROVING|REVOKED] [--transcendUrl value] [--file value] [--concurrency value] [--skipRequestIdentifiers] [--createdAtBefore value] [--createdAtAfter value] [--updatedAtBefore value] [--updatedAtAfter value] [--showTests] [--pageLimit value]
   transcend request export --help
 
 Export privacy requests and request identifiers to a CSV file.
@@ -1016,6 +1030,8 @@ FLAGS
      [--skipRequestIdentifiers/--noSkipRequestIdentifiers]  Skip exporting request identifiers
      [--createdAtBefore]                                    Pull requests that were submitted before this time
      [--createdAtAfter]                                     Pull requests that were submitted after this time
+     [--updatedAtBefore]                                    Pull requests that were last updated before this time
+     [--updatedAtAfter]                                     Pull requests that were last updated after this time
      [--showTests/--noShowTests]                            Filter for test requests or production requests - when not provided, pulls both
      [--pageLimit]                                          The page limit to use when pulling in pages of requests                                          [default = 100]
   -h  --help                                                Print help information and exit

package/dist/{api-keys-eh_rPCV_.cjs → api-keys-Bvt2HbSv.cjs}

@@ -1,2 +1,2 @@
-const e=require(`./chunk-Bmb41Sf3.cjs`),t=require(`./constants-7qBywLgI.cjs`),n=require(`./syncConfigurationToTranscend-Bd0ZTIm1.cjs`),r=require(`./logger-DQwEYtSS.cjs`),i=require(`./codecs-Bvmb8o9R.cjs`);let a=require(`@transcend-io/type-utils`),o=require(`node:fs`),s=require(`node:path`),c=require(`colors`);c=e.t(c);let l=require(`io-ts`);l=e.t(l);async function u({email:e,password:i,scopes:a,apiKeyTitle:o,parentOrganizationId:s,deleteExistingApiKey:l=!0,createNewApiKey:u=!0,transcendUrl:d=t.a}){let f=await n.ni(d,{});r.t.info(c.default.magenta(`Logging in using email and password.`));let{roles:p,loginCookie:m}=await n.Hn(f,{email:e,password:i});r.t.info(c.default.green(`Successfully logged in and found ${p.length} role${p.length===1?``:`s`}!`));let h=s?p.filter(e=>e.organization.id===s||e.organization.parentOrganizationId===s):p;f.setHeaders({Cookie:m});let g=[],_=[];return r.t.info(c.default.magenta(`Generating API keys with title: ${o}, scopes: ${a.join(`,`)}.`)),await n.Es(h,async t=>{try{await n.Vn(f,{roleId:t.id,email:e}),r.t.info(c.default.magenta(`Checking if API key already exists in organization "${t.organization.name}" with title: "${o}".`));let[i]=await n.ar(f,[o]);if(i&&l)r.t.info(c.default.yellow(`Deleting existing API key in "${t.organization.name}" with title: "${o}".`)),await n.Bn(f,i.id),r.t.info(c.default.green(`Successfully deleted API key in "${t.organization.name}" with title: "${o}".`));else if(i)throw Error(`API key already exists with title: "${o}"`);if(u){r.t.info(c.default.magenta(`Creating API key in "${t.organization.name}" with title: "${o}".`));let{apiKey:e}=await n.zn(f,{title:o,scopes:a});g.push({organizationName:t.organization.name,organizationId:t.organization.id,apiKey:e}),r.t.info(c.default.green(`Successfully created API key in "${t.organization.name}" with title: "${o}".`))}else g.push({organizationName:t.organization.name,organizationId:t.organization.id,apiKey:``})}catch(e){r.t.error(c.default.red(`Failed to create API key in organization "${t.organization.name}"! - ${e.message}`)),_.push({organizationName:t.organization.name,organizationId:t.organization.id,error:e.message})}}),r.t.info(c.default.green(`Successfully created ${g.length} API key${g.length===1?``:`s`}`)),_.length>0&&r.t.error(c.default.red(`Failed to create ${_.length} API key${_.length===1?``:`s`}!`)),{errors:_,apiKeys:g}}function d(e){return e||(r.t.error(c.default.red(`A Transcend API key must be provided. You can specify using --auth=$TRANSCEND_API_KEY`)),process.exit(1)),(0,o.existsSync)(e)?(0,a.decodeCodec)(l.array(i.mt),(0,o.readFileSync)(e,`utf-8`)):e}function f(e,t,n=!1){if(!(0,o.existsSync)(e))return[];let r=(0,o.readdirSync)(e).filter(e=>t?t.filter(t=>e.endsWith(t)).length:!0).filter(e=>e.indexOf(`.`)>0);return n?r.map(e=>e.replace(/\.[^/.]+$/,``)):r}function p(e){return(0,o.readdirSync)(e).filter(t=>(0,o.statSync)((0,s.join)(e,t)).isDirectory())}Object.defineProperty(exports,`i`,{enumerable:!0,get:function(){return u}}),Object.defineProperty(exports,`n`,{enumerable:!0,get:function(){return f}}),Object.defineProperty(exports,`r`,{enumerable:!0,get:function(){return d}}),Object.defineProperty(exports,`t`,{enumerable:!0,get:function(){return p}});
-//# sourceMappingURL=api-keys-eh_rPCV_.cjs.map
+const e=require(`./chunk-Bmb41Sf3.cjs`),t=require(`./constants-K6pQQtc7.cjs`),n=require(`./syncConfigurationToTranscend-DKliAJhK.cjs`),r=require(`./logger-DQwEYtSS.cjs`),i=require(`./codecs-Bvmb8o9R.cjs`);let a=require(`@transcend-io/type-utils`),o=require(`node:fs`),s=require(`node:path`),c=require(`colors`);c=e.t(c);let l=require(`io-ts`);l=e.t(l);async function u({email:e,password:i,scopes:a,apiKeyTitle:o,parentOrganizationId:s,deleteExistingApiKey:l=!0,createNewApiKey:u=!0,transcendUrl:d=t.a}){let f=await n.ni(d,{});r.t.info(c.default.magenta(`Logging in using email and password.`));let{roles:p,loginCookie:m}=await n.Hn(f,{email:e,password:i});r.t.info(c.default.green(`Successfully logged in and found ${p.length} role${p.length===1?``:`s`}!`));let h=s?p.filter(e=>e.organization.id===s||e.organization.parentOrganizationId===s):p;f.setHeaders({Cookie:m});let g=[],_=[];return r.t.info(c.default.magenta(`Generating API keys with title: ${o}, scopes: ${a.join(`,`)}.`)),await n.Es(h,async t=>{try{await n.Vn(f,{roleId:t.id,email:e}),r.t.info(c.default.magenta(`Checking if API key already exists in organization "${t.organization.name}" with title: "${o}".`));let[i]=await n.ar(f,[o]);if(i&&l)r.t.info(c.default.yellow(`Deleting existing API key in "${t.organization.name}" with title: "${o}".`)),await n.Bn(f,i.id),r.t.info(c.default.green(`Successfully deleted API key in "${t.organization.name}" with title: "${o}".`));else if(i)throw Error(`API key already exists with title: "${o}"`);if(u){r.t.info(c.default.magenta(`Creating API key in "${t.organization.name}" with title: "${o}".`));let{apiKey:e}=await n.zn(f,{title:o,scopes:a});g.push({organizationName:t.organization.name,organizationId:t.organization.id,apiKey:e}),r.t.info(c.default.green(`Successfully created API key in "${t.organization.name}" with title: "${o}".`))}else g.push({organizationName:t.organization.name,organizationId:t.organization.id,apiKey:``})}catch(e){r.t.error(c.default.red(`Failed to create API key in organization "${t.organization.name}"! - ${e.message}`)),_.push({organizationName:t.organization.name,organizationId:t.organization.id,error:e.message})}}),r.t.info(c.default.green(`Successfully created ${g.length} API key${g.length===1?``:`s`}`)),_.length>0&&r.t.error(c.default.red(`Failed to create ${_.length} API key${_.length===1?``:`s`}!`)),{errors:_,apiKeys:g}}function d(e){return e||(r.t.error(c.default.red(`A Transcend API key must be provided. You can specify using --auth=$TRANSCEND_API_KEY`)),process.exit(1)),(0,o.existsSync)(e)?(0,a.decodeCodec)(l.array(i.mt),(0,o.readFileSync)(e,`utf-8`)):e}function f(e,t,n=!1){if(!(0,o.existsSync)(e))return[];let r=(0,o.readdirSync)(e).filter(e=>t?t.filter(t=>e.endsWith(t)).length:!0).filter(e=>e.indexOf(`.`)>0);return n?r.map(e=>e.replace(/\.[^/.]+$/,``)):r}function p(e){return(0,o.readdirSync)(e).filter(t=>(0,o.statSync)((0,s.join)(e,t)).isDirectory())}Object.defineProperty(exports,`i`,{enumerable:!0,get:function(){return u}}),Object.defineProperty(exports,`n`,{enumerable:!0,get:function(){return f}}),Object.defineProperty(exports,`r`,{enumerable:!0,get:function(){return d}}),Object.defineProperty(exports,`t`,{enumerable:!0,get:function(){return p}});
+//# sourceMappingURL=api-keys-Bvt2HbSv.cjs.map

package/dist/{api-keys-eh_rPCV_.cjs.map → api-keys-Bvt2HbSv.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"api-keys-eh_rPCV_.cjs","names":["DEFAULT_TRANSCEND_API","buildTranscendGraphQLClientGeneric","loginUser","mapSeries","assumeRole","fetchAllApiKeys","deleteApiKey","createApiKey","t","StoredApiKey"],"sources":["../src/lib/api-keys/generateCrossAccountApiKeys.ts","../src/lib/api-keys/validateTranscendAuth.ts","../src/lib/api-keys/listFiles.ts","../src/lib/api-keys/listDirectories.ts"],"sourcesContent":["import { mapSeries } from '../bluebird';\nimport {\n  buildTranscendGraphQLClientGeneric,\n  loginUser,\n  createApiKey,\n  fetchAllApiKeys,\n  deleteApiKey,\n  assumeRole,\n} from '../graphql';\nimport { ScopeName } from '@transcend-io/privacy-types';\nimport colors from 'colors';\nimport { StoredApiKey } from '../../codecs';\nimport { logger } from '../../logger';\nimport { DEFAULT_TRANSCEND_API } from '../../constants';\n\nexport interface ApiKeyGenerateError {\n  /** Name of instance */\n  organizationName: string;\n  /** Error */\n  error: string;\n  /** Organization ID API key is for */\n  organizationId: string;\n}\n\n/**\n * Generate API keys across multiple transcend accounts\n *\n * @param options - Options\n * @returns Number of API keys created\n */\nexport async function generateCrossAccountApiKeys({\n  email,\n  password,\n  scopes,\n  apiKeyTitle,\n  parentOrganizationId,\n  deleteExistingApiKey = true,\n  createNewApiKey = true,\n  transcendUrl = DEFAULT_TRANSCEND_API,\n}: {\n  /** Email address of user generating API keys */\n  email: string;\n  /** Password of user generating API keys */\n  password: string;\n  /** Filter for organizations that match this parent organization ID */\n  parentOrganizationId?: string;\n  /** Title of the API create to create */\n  apiKeyTitle: string;\n  /** Title of the API create to create */\n  scopes: ScopeName[];\n  /** API URL for Transcend backend */\n  transcendUrl?: string;\n  /** When true delete existing API keys with that title, if set to false an API key exists with that title, an error is thrown */\n  deleteExistingApiKey?: boolean;\n  /** When true, generate new API keys, otherwise only will delete past API keys */\n  createNewApiKey?: boolean;\n}): Promise<{\n  /** Successfully generated */\n  apiKeys: StoredApiKey[];\n  /** Error results */\n  errors: ApiKeyGenerateError[];\n}> {\n  // Create GraphQL client\n  const client = await buildTranscendGraphQLClientGeneric(transcendUrl, {});\n\n  // Login the user\n  logger.info(colors.magenta('Logging in using email and password.'));\n  const { roles, loginCookie } = await loginUser(client, { email, password });\n  logger.info(\n    colors.green(\n      `Successfully logged in and found ${roles.length} role${\n        roles.length === 1 ? '' : 's'\n      }!`,\n    ),\n  );\n\n  // Filter down by parentOrganizationId\n  const filteredRoles = parentOrganizationId\n    ? roles.filter(\n        (role) =>\n          role.organization.id === parentOrganizationId ||\n          role.organization.parentOrganizationId === parentOrganizationId,\n      )\n    : roles;\n\n  // Save cookie to call route subsequent times\n  client.setHeaders({\n    Cookie: loginCookie,\n  });\n\n  // Save the resulting API keys\n  const results: StoredApiKey[] = [];\n  const errors: ApiKeyGenerateError[] = [];\n\n  // Generate API keys\n  logger.info(\n    colors.magenta(\n      `Generating API keys with title: ${apiKeyTitle}, scopes: ${scopes.join(\n        ',',\n      )}.`,\n    ),\n  );\n\n  // Map over each role\n  await mapSeries(filteredRoles, async (role) => {\n    try {\n      // Log into the other instance\n      await assumeRole(client, { roleId: role.id, email });\n\n      // Grab API keys with that title\n      logger.info(\n        colors.magenta(\n          `Checking if API key already exists in organization \"${role.organization.name}\" with title: \"${apiKeyTitle}\".`,\n        ),\n      );\n\n      // Delete existing API key\n      const [apiKeyWithTitle] = await fetchAllApiKeys(client, [apiKeyTitle]);\n      if (apiKeyWithTitle && deleteExistingApiKey) {\n        logger.info(\n          colors.yellow(\n            `Deleting existing API key in \"${role.organization.name}\" with title: \"${apiKeyTitle}\".`,\n          ),\n        );\n        await deleteApiKey(client, apiKeyWithTitle.id);\n        logger.info(\n          colors.green(\n            `Successfully deleted API key in \"${role.organization.name}\" with title: \"${apiKeyTitle}\".`,\n          ),\n        );\n      } else if (apiKeyWithTitle) {\n        // throw error if one exists but not configured to delete\n        throw new Error(`API key already exists with title: \"${apiKeyTitle}\"`);\n      }\n\n      // Create the API key\n      if (createNewApiKey) {\n        logger.info(\n          colors.magenta(\n            `Creating API key in \"${role.organization.name}\" with title: \"${apiKeyTitle}\".`,\n          ),\n        );\n        const { apiKey } = await createApiKey(client, {\n          title: apiKeyTitle,\n          scopes,\n        });\n        results.push({\n          organizationName: role.organization.name,\n          organizationId: role.organization.id,\n          apiKey,\n        });\n        logger.info(\n          colors.green(\n            `Successfully created API key in \"${role.organization.name}\" with title: \"${apiKeyTitle}\".`,\n          ),\n        );\n      } else {\n        // Delete only\n        results.push({\n          organizationName: role.organization.name,\n          organizationId: role.organization.id,\n          apiKey: '',\n        });\n      }\n    } catch (err) {\n      logger.error(\n        colors.red(\n          `Failed to create API key in organization \"${role.organization.name}\"! - ${err.message}`,\n        ),\n      );\n      errors.push({\n        organizationName: role.organization.name,\n        organizationId: role.organization.id,\n        error: err.message,\n      });\n    }\n  });\n  logger.info(\n    colors.green(\n      `Successfully created ${results.length} API key${\n        results.length === 1 ? '' : 's'\n      }`,\n    ),\n  );\n\n  if (errors.length > 0) {\n    logger.error(\n      colors.red(\n        `Failed to create ${errors.length} API key${\n          errors.length === 1 ? '' : 's'\n        }!`,\n      ),\n    );\n  }\n\n  return { errors, apiKeys: results };\n}\n","import { decodeCodec } from '@transcend-io/type-utils';\nimport colors from 'colors';\nimport * as t from 'io-ts';\nimport { logger } from '../../logger';\nimport { existsSync, readFileSync } from 'node:fs';\nimport { StoredApiKey } from '../../codecs';\n\n/**\n * Determine if the `--auth` parameter is an API key or a path to a JSON\n * file containing a list of API keys.\n *\n * @param auth - Raw auth parameter\n * @returns The API key or the list API keys\n */\nexport function validateTranscendAuth(auth: string): string | StoredApiKey[] {\n  // Ensure auth is passed\n  if (!auth) {\n    logger.error(\n      colors.red(\n        'A Transcend API key must be provided. You can specify using --auth=$TRANSCEND_API_KEY',\n      ),\n    );\n    process.exit(1);\n  }\n\n  // Read from disk\n  if (existsSync(auth)) {\n    // validate that file is a list of API keys\n    return decodeCodec(t.array(StoredApiKey), readFileSync(auth, 'utf-8'));\n  }\n\n  // Return as single API key\n  return auth;\n}\n","import { existsSync, readdirSync } from 'node:fs';\n\n/**\n * List the files in a directory\n *\n * ```typescript\n * // The directory to search\n * const directory = '/User/test/transcend/my-app/app/containers';\n * // Returns ['test.js']\n * listFiles(directory);\n * ```\n *\n * @param directory - The directory to search\n * @param validExtensions - The list of valid extensions\n * @param removeExtensions - When true, remove the extensions from the listed files\n * @returns The list of files in the directory\n */\nexport function listFiles(\n  directory: string,\n  validExtensions?: string[],\n  removeExtensions = false,\n): string[] {\n  if (!existsSync(directory)) {\n    return [];\n  }\n\n  const files = readdirSync(directory)\n    .filter((fil) =>\n      validExtensions\n        ? validExtensions.filter((ext) => fil.endsWith(ext)).length\n        : true,\n    )\n    .filter((fil) => fil.indexOf('.') > 0);\n\n  return removeExtensions\n    ? files.map((fil) => fil.replace(/\\.[^/.]+$/, ''))\n    : files;\n}\n","import { readdirSync, statSync } from 'node:fs';\nimport { join } from 'node:path';\n\n/**\n * List the folders in a directory\n *\n * @param startDir - The base directory to list from\n * @returns The list of folders in that directory\n */\nexport function listDirectories(startDir: string): string[] {\n  return readdirSync(startDir).filter((entryName) =>\n    statSync(join(startDir, entryName)).isDirectory(),\n  );\n}\n"],"mappings":"gWA8BA,eAAsB,EAA4B,CAChD,QACA,WACA,SACA,cACA,uBACA,uBAAuB,GACvB,kBAAkB,GAClB,eAAeA,EAAAA,GAuBd,CAED,IAAM,EAAS,MAAMC,EAAAA,GAAmC,EAAc,EAAE,CAAC,CAGzE,EAAA,EAAO,KAAK,EAAA,QAAO,QAAQ,uCAAuC,CAAC,CACnE,GAAM,CAAE,QAAO,eAAgB,MAAMC,EAAAA,GAAU,EAAQ,CAAE,QAAO,WAAU,CAAC,CAC3E,EAAA,EAAO,KACL,EAAA,QAAO,MACL,oCAAoC,EAAM,OAAO,OAC/C,EAAM,SAAW,EAAI,GAAK,IAC3B,GACF,CACF,CAGD,IAAM,EAAgB,EAClB,EAAM,OACH,GACC,EAAK,aAAa,KAAO,GACzB,EAAK,aAAa,uBAAyB,EAC9C,CACD,EAGJ,EAAO,WAAW,CAChB,OAAQ,EACT,CAAC,CAGF,IAAM,EAA0B,EAAE,CAC5B,EAAgC,EAAE,CAuGxC,OApGA,EAAA,EAAO,KACL,EAAA,QAAO,QACL,mCAAmC,EAAY,YAAY,EAAO,KAChE,IACD,CAAC,GACH,CACF,CAGD,MAAMC,EAAAA,GAAU,EAAe,KAAO,IAAS,CAC7C,GAAI,CAEF,MAAMC,EAAAA,GAAW,EAAQ,CAAE,OAAQ,EAAK,GAAI,QAAO,CAAC,CAGpD,EAAA,EAAO,KACL,EAAA,QAAO,QACL,uDAAuD,EAAK,aAAa,KAAK,iBAAiB,EAAY,IAC5G,CACF,CAGD,GAAM,CAAC,GAAmB,MAAMC,EAAAA,GAAgB,EAAQ,CAAC,EAAY,CAAC,CACtE,GAAI,GAAmB,EACrB,EAAA,EAAO,KACL,EAAA,QAAO,OACL,iCAAiC,EAAK,aAAa,KAAK,iBAAiB,EAAY,IACtF,CACF,CACD,MAAMC,EAAAA,GAAa,EAAQ,EAAgB,GAAG,CAC9C,EAAA,EAAO,KACL,EAAA,QAAO,MACL,oCAAoC,EAAK,aAAa,KAAK,iBAAiB,EAAY,IACzF,CACF,SACQ,EAET,MAAU,MAAM,uCAAuC,EAAY,GAAG,CAIxE,GAAI,EAAiB,CACnB,EAAA,EAAO,KACL,EAAA,QAAO,QACL,wBAAwB,EAAK,aAAa,KAAK,iBAAiB,EAAY,IAC7E,CACF,CACD,GAAM,CAAE,UAAW,MAAMC,EAAAA,GAAa,EAAQ,CAC5C,MAAO,EACP,SACD,CAAC,CACF,EAAQ,KAAK,CACX,iBAAkB,EAAK,aAAa,KACpC,eAAgB,EAAK,aAAa,GAClC,SACD,CAAC,CACF,EAAA,EAAO,KACL,EAAA,QAAO,MACL,oCAAoC,EAAK,aAAa,KAAK,iBAAiB,EAAY,IACzF,CACF,MAGD,EAAQ,KAAK,CACX,iBAAkB,EAAK,aAAa,KACpC,eAAgB,EAAK,aAAa,GAClC,OAAQ,GACT,CAAC,OAEG,EAAK,CACZ,EAAA,EAAO,MACL,EAAA,QAAO,IACL,6CAA6C,EAAK,aAAa,KAAK,OAAO,EAAI,UAChF,CACF,CACD,EAAO,KAAK,CACV,iBAAkB,EAAK,aAAa,KACpC,eAAgB,EAAK,aAAa,GAClC,MAAO,EAAI,QACZ,CAAC,GAEJ,CACF,EAAA,EAAO,KACL,EAAA,QAAO,MACL,wBAAwB,EAAQ,OAAO,UACrC,EAAQ,SAAW,EAAI,GAAK,MAE/B,CACF,CAEG,EAAO,OAAS,GAClB,EAAA,EAAO,MACL,EAAA,QAAO,IACL,oBAAoB,EAAO,OAAO,UAChC,EAAO,SAAW,EAAI,GAAK,IAC5B,GACF,CACF,CAGI,CAAE,SAAQ,QAAS,EAAS,CCrLrC,SAAgB,EAAsB,EAAuC,CAkB3E,OAhBK,IACH,EAAA,EAAO,MACL,EAAA,QAAO,IACL,wFACD,CACF,CACD,QAAQ,KAAK,EAAE,GAIjB,EAAA,EAAA,YAAe,EAAK,EAElB,EAAA,EAAA,aAAmBC,EAAE,MAAMC,EAAAA,GAAa,EAAA,EAAA,EAAA,cAAe,EAAM,QAAQ,CAAC,CAIjE,ECfT,SAAgB,EACd,EACA,EACA,EAAmB,GACT,CACV,GAAI,EAAA,EAAA,EAAA,YAAY,EAAU,CACxB,MAAO,EAAE,CAGX,IAAM,GAAA,EAAA,EAAA,aAAoB,EAAU,CACjC,OAAQ,GACP,EACI,EAAgB,OAAQ,GAAQ,EAAI,SAAS,EAAI,CAAC,CAAC,OACnD,GACL,CACA,OAAQ,GAAQ,EAAI,QAAQ,IAAI,CAAG,EAAE,CAExC,OAAO,EACH,EAAM,IAAK,GAAQ,EAAI,QAAQ,YAAa,GAAG,CAAC,CAChD,EC3BN,SAAgB,EAAgB,EAA4B,CAC1D,OAAA,EAAA,EAAA,aAAmB,EAAS,CAAC,OAAQ,IAAA,EAAA,EAAA,WAAA,EAAA,EAAA,MACrB,EAAU,EAAU,CAAC,CAAC,aAAa,CAClD"}
+{"version":3,"file":"api-keys-Bvt2HbSv.cjs","names":["DEFAULT_TRANSCEND_API","buildTranscendGraphQLClientGeneric","loginUser","mapSeries","assumeRole","fetchAllApiKeys","deleteApiKey","createApiKey","t","StoredApiKey"],"sources":["../src/lib/api-keys/generateCrossAccountApiKeys.ts","../src/lib/api-keys/validateTranscendAuth.ts","../src/lib/api-keys/listFiles.ts","../src/lib/api-keys/listDirectories.ts"],"sourcesContent":["import { mapSeries } from '../bluebird';\nimport {\n  buildTranscendGraphQLClientGeneric,\n  loginUser,\n  createApiKey,\n  fetchAllApiKeys,\n  deleteApiKey,\n  assumeRole,\n} from '../graphql';\nimport { ScopeName } from '@transcend-io/privacy-types';\nimport colors from 'colors';\nimport { StoredApiKey } from '../../codecs';\nimport { logger } from '../../logger';\nimport { DEFAULT_TRANSCEND_API } from '../../constants';\n\nexport interface ApiKeyGenerateError {\n  /** Name of instance */\n  organizationName: string;\n  /** Error */\n  error: string;\n  /** Organization ID API key is for */\n  organizationId: string;\n}\n\n/**\n * Generate API keys across multiple transcend accounts\n *\n * @param options - Options\n * @returns Number of API keys created\n */\nexport async function generateCrossAccountApiKeys({\n  email,\n  password,\n  scopes,\n  apiKeyTitle,\n  parentOrganizationId,\n  deleteExistingApiKey = true,\n  createNewApiKey = true,\n  transcendUrl = DEFAULT_TRANSCEND_API,\n}: {\n  /** Email address of user generating API keys */\n  email: string;\n  /** Password of user generating API keys */\n  password: string;\n  /** Filter for organizations that match this parent organization ID */\n  parentOrganizationId?: string;\n  /** Title of the API create to create */\n  apiKeyTitle: string;\n  /** Title of the API create to create */\n  scopes: ScopeName[];\n  /** API URL for Transcend backend */\n  transcendUrl?: string;\n  /** When true delete existing API keys with that title, if set to false an API key exists with that title, an error is thrown */\n  deleteExistingApiKey?: boolean;\n  /** When true, generate new API keys, otherwise only will delete past API keys */\n  createNewApiKey?: boolean;\n}): Promise<{\n  /** Successfully generated */\n  apiKeys: StoredApiKey[];\n  /** Error results */\n  errors: ApiKeyGenerateError[];\n}> {\n  // Create GraphQL client\n  const client = await buildTranscendGraphQLClientGeneric(transcendUrl, {});\n\n  // Login the user\n  logger.info(colors.magenta('Logging in using email and password.'));\n  const { roles, loginCookie } = await loginUser(client, { email, password });\n  logger.info(\n    colors.green(\n      `Successfully logged in and found ${roles.length} role${\n        roles.length === 1 ? '' : 's'\n      }!`,\n    ),\n  );\n\n  // Filter down by parentOrganizationId\n  const filteredRoles = parentOrganizationId\n    ? roles.filter(\n        (role) =>\n          role.organization.id === parentOrganizationId ||\n          role.organization.parentOrganizationId === parentOrganizationId,\n      )\n    : roles;\n\n  // Save cookie to call route subsequent times\n  client.setHeaders({\n    Cookie: loginCookie,\n  });\n\n  // Save the resulting API keys\n  const results: StoredApiKey[] = [];\n  const errors: ApiKeyGenerateError[] = [];\n\n  // Generate API keys\n  logger.info(\n    colors.magenta(\n      `Generating API keys with title: ${apiKeyTitle}, scopes: ${scopes.join(\n        ',',\n      )}.`,\n    ),\n  );\n\n  // Map over each role\n  await mapSeries(filteredRoles, async (role) => {\n    try {\n      // Log into the other instance\n      await assumeRole(client, { roleId: role.id, email });\n\n      // Grab API keys with that title\n      logger.info(\n        colors.magenta(\n          `Checking if API key already exists in organization \"${role.organization.name}\" with title: \"${apiKeyTitle}\".`,\n        ),\n      );\n\n      // Delete existing API key\n      const [apiKeyWithTitle] = await fetchAllApiKeys(client, [apiKeyTitle]);\n      if (apiKeyWithTitle && deleteExistingApiKey) {\n        logger.info(\n          colors.yellow(\n            `Deleting existing API key in \"${role.organization.name}\" with title: \"${apiKeyTitle}\".`,\n          ),\n        );\n        await deleteApiKey(client, apiKeyWithTitle.id);\n        logger.info(\n          colors.green(\n            `Successfully deleted API key in \"${role.organization.name}\" with title: \"${apiKeyTitle}\".`,\n          ),\n        );\n      } else if (apiKeyWithTitle) {\n        // throw error if one exists but not configured to delete\n        throw new Error(`API key already exists with title: \"${apiKeyTitle}\"`);\n      }\n\n      // Create the API key\n      if (createNewApiKey) {\n        logger.info(\n          colors.magenta(\n            `Creating API key in \"${role.organization.name}\" with title: \"${apiKeyTitle}\".`,\n          ),\n        );\n        const { apiKey } = await createApiKey(client, {\n          title: apiKeyTitle,\n          scopes,\n        });\n        results.push({\n          organizationName: role.organization.name,\n          organizationId: role.organization.id,\n          apiKey,\n        });\n        logger.info(\n          colors.green(\n            `Successfully created API key in \"${role.organization.name}\" with title: \"${apiKeyTitle}\".`,\n          ),\n        );\n      } else {\n        // Delete only\n        results.push({\n          organizationName: role.organization.name,\n          organizationId: role.organization.id,\n          apiKey: '',\n        });\n      }\n    } catch (err) {\n      logger.error(\n        colors.red(\n          `Failed to create API key in organization \"${role.organization.name}\"! - ${err.message}`,\n        ),\n      );\n      errors.push({\n        organizationName: role.organization.name,\n        organizationId: role.organization.id,\n        error: err.message,\n      });\n    }\n  });\n  logger.info(\n    colors.green(\n      `Successfully created ${results.length} API key${\n        results.length === 1 ? '' : 's'\n      }`,\n    ),\n  );\n\n  if (errors.length > 0) {\n    logger.error(\n      colors.red(\n        `Failed to create ${errors.length} API key${\n          errors.length === 1 ? '' : 's'\n        }!`,\n      ),\n    );\n  }\n\n  return { errors, apiKeys: results };\n}\n","import { decodeCodec } from '@transcend-io/type-utils';\nimport colors from 'colors';\nimport * as t from 'io-ts';\nimport { logger } from '../../logger';\nimport { existsSync, readFileSync } from 'node:fs';\nimport { StoredApiKey } from '../../codecs';\n\n/**\n * Determine if the `--auth` parameter is an API key or a path to a JSON\n * file containing a list of API keys.\n *\n * @param auth - Raw auth parameter\n * @returns The API key or the list API keys\n */\nexport function validateTranscendAuth(auth: string): string | StoredApiKey[] {\n  // Ensure auth is passed\n  if (!auth) {\n    logger.error(\n      colors.red(\n        'A Transcend API key must be provided. You can specify using --auth=$TRANSCEND_API_KEY',\n      ),\n    );\n    process.exit(1);\n  }\n\n  // Read from disk\n  if (existsSync(auth)) {\n    // validate that file is a list of API keys\n    return decodeCodec(t.array(StoredApiKey), readFileSync(auth, 'utf-8'));\n  }\n\n  // Return as single API key\n  return auth;\n}\n","import { existsSync, readdirSync } from 'node:fs';\n\n/**\n * List the files in a directory\n *\n * ```typescript\n * // The directory to search\n * const directory = '/User/test/transcend/my-app/app/containers';\n * // Returns ['test.js']\n * listFiles(directory);\n * ```\n *\n * @param directory - The directory to search\n * @param validExtensions - The list of valid extensions\n * @param removeExtensions - When true, remove the extensions from the listed files\n * @returns The list of files in the directory\n */\nexport function listFiles(\n  directory: string,\n  validExtensions?: string[],\n  removeExtensions = false,\n): string[] {\n  if (!existsSync(directory)) {\n    return [];\n  }\n\n  const files = readdirSync(directory)\n    .filter((fil) =>\n      validExtensions\n        ? validExtensions.filter((ext) => fil.endsWith(ext)).length\n        : true,\n    )\n    .filter((fil) => fil.indexOf('.') > 0);\n\n  return removeExtensions\n    ? files.map((fil) => fil.replace(/\\.[^/.]+$/, ''))\n    : files;\n}\n","import { readdirSync, statSync } from 'node:fs';\nimport { join } from 'node:path';\n\n/**\n * List the folders in a directory\n *\n * @param startDir - The base directory to list from\n * @returns The list of folders in that directory\n */\nexport function listDirectories(startDir: string): string[] {\n  return readdirSync(startDir).filter((entryName) =>\n    statSync(join(startDir, entryName)).isDirectory(),\n  );\n}\n"],"mappings":"gWA8BA,eAAsB,EAA4B,CAChD,QACA,WACA,SACA,cACA,uBACA,uBAAuB,GACvB,kBAAkB,GAClB,eAAeA,EAAAA,GAuBd,CAED,IAAM,EAAS,MAAMC,EAAAA,GAAmC,EAAc,EAAE,CAAC,CAGzE,EAAA,EAAO,KAAK,EAAA,QAAO,QAAQ,uCAAuC,CAAC,CACnE,GAAM,CAAE,QAAO,eAAgB,MAAMC,EAAAA,GAAU,EAAQ,CAAE,QAAO,WAAU,CAAC,CAC3E,EAAA,EAAO,KACL,EAAA,QAAO,MACL,oCAAoC,EAAM,OAAO,OAC/C,EAAM,SAAW,EAAI,GAAK,IAC3B,GACF,CACF,CAGD,IAAM,EAAgB,EAClB,EAAM,OACH,GACC,EAAK,aAAa,KAAO,GACzB,EAAK,aAAa,uBAAyB,EAC9C,CACD,EAGJ,EAAO,WAAW,CAChB,OAAQ,EACT,CAAC,CAGF,IAAM,EAA0B,EAAE,CAC5B,EAAgC,EAAE,CAuGxC,OApGA,EAAA,EAAO,KACL,EAAA,QAAO,QACL,mCAAmC,EAAY,YAAY,EAAO,KAChE,IACD,CAAC,GACH,CACF,CAGD,MAAMC,EAAAA,GAAU,EAAe,KAAO,IAAS,CAC7C,GAAI,CAEF,MAAMC,EAAAA,GAAW,EAAQ,CAAE,OAAQ,EAAK,GAAI,QAAO,CAAC,CAGpD,EAAA,EAAO,KACL,EAAA,QAAO,QACL,uDAAuD,EAAK,aAAa,KAAK,iBAAiB,EAAY,IAC5G,CACF,CAGD,GAAM,CAAC,GAAmB,MAAMC,EAAAA,GAAgB,EAAQ,CAAC,EAAY,CAAC,CACtE,GAAI,GAAmB,EACrB,EAAA,EAAO,KACL,EAAA,QAAO,OACL,iCAAiC,EAAK,aAAa,KAAK,iBAAiB,EAAY,IACtF,CACF,CACD,MAAMC,EAAAA,GAAa,EAAQ,EAAgB,GAAG,CAC9C,EAAA,EAAO,KACL,EAAA,QAAO,MACL,oCAAoC,EAAK,aAAa,KAAK,iBAAiB,EAAY,IACzF,CACF,SACQ,EAET,MAAU,MAAM,uCAAuC,EAAY,GAAG,CAIxE,GAAI,EAAiB,CACnB,EAAA,EAAO,KACL,EAAA,QAAO,QACL,wBAAwB,EAAK,aAAa,KAAK,iBAAiB,EAAY,IAC7E,CACF,CACD,GAAM,CAAE,UAAW,MAAMC,EAAAA,GAAa,EAAQ,CAC5C,MAAO,EACP,SACD,CAAC,CACF,EAAQ,KAAK,CACX,iBAAkB,EAAK,aAAa,KACpC,eAAgB,EAAK,aAAa,GAClC,SACD,CAAC,CACF,EAAA,EAAO,KACL,EAAA,QAAO,MACL,oCAAoC,EAAK,aAAa,KAAK,iBAAiB,EAAY,IACzF,CACF,MAGD,EAAQ,KAAK,CACX,iBAAkB,EAAK,aAAa,KACpC,eAAgB,EAAK,aAAa,GAClC,OAAQ,GACT,CAAC,OAEG,EAAK,CACZ,EAAA,EAAO,MACL,EAAA,QAAO,IACL,6CAA6C,EAAK,aAAa,KAAK,OAAO,EAAI,UAChF,CACF,CACD,EAAO,KAAK,CACV,iBAAkB,EAAK,aAAa,KACpC,eAAgB,EAAK,aAAa,GAClC,MAAO,EAAI,QACZ,CAAC,GAEJ,CACF,EAAA,EAAO,KACL,EAAA,QAAO,MACL,wBAAwB,EAAQ,OAAO,UACrC,EAAQ,SAAW,EAAI,GAAK,MAE/B,CACF,CAEG,EAAO,OAAS,GAClB,EAAA,EAAO,MACL,EAAA,QAAO,IACL,oBAAoB,EAAO,OAAO,UAChC,EAAO,SAAW,EAAI,GAAK,IAC5B,GACF,CACF,CAGI,CAAE,SAAQ,QAAS,EAAS,CCrLrC,SAAgB,EAAsB,EAAuC,CAkB3E,OAhBK,IACH,EAAA,EAAO,MACL,EAAA,QAAO,IACL,wFACD,CACF,CACD,QAAQ,KAAK,EAAE,GAIjB,EAAA,EAAA,YAAe,EAAK,EAElB,EAAA,EAAA,aAAmBC,EAAE,MAAMC,EAAAA,GAAa,EAAA,EAAA,EAAA,cAAe,EAAM,QAAQ,CAAC,CAIjE,ECfT,SAAgB,EACd,EACA,EACA,EAAmB,GACT,CACV,GAAI,EAAA,EAAA,EAAA,YAAY,EAAU,CACxB,MAAO,EAAE,CAGX,IAAM,GAAA,EAAA,EAAA,aAAoB,EAAU,CACjC,OAAQ,GACP,EACI,EAAgB,OAAQ,GAAQ,EAAI,SAAS,EAAI,CAAC,CAAC,OACnD,GACL,CACA,OAAQ,GAAQ,EAAI,QAAQ,IAAI,CAAG,EAAE,CAExC,OAAO,EACH,EAAM,IAAK,GAAQ,EAAI,QAAQ,YAAa,GAAG,CAAC,CAChD,EC3BN,SAAgB,EAAgB,EAA4B,CAC1D,OAAA,EAAA,EAAA,aAAmB,EAAS,CAAC,OAAQ,IAAA,EAAA,EAAA,WAAA,EAAA,EAAA,MACrB,EAAU,EAAU,CAAC,CAAC,aAAa,CAClD"}