@transcend-io/sdk 1.9.4 → 2.0.0

package/dist/index.d.mts

@@ -2,7 +2,7 @@ import { Logger } from "@transcend-io/utils";
 import { GraphQLClient, RequestDocument, Variables } from "graphql-request";
 import { Got } from "got";
 import { DocumentNode } from "graphql";
-import { ActionItemCode, ActionItemPriorityOverride, AirgapBundleAnalyticsBinInterval, AirgapBundleAnalyticsDimension, AirgapBundleAnalyticsMetric, AssessmentFormStatus, AssessmentQuestionSubType, AssessmentQuestionType, AssessmentSyncColumn, AssessmentSyncModel, AttributeKeyType, AttributeSupportedResourceType, BrowserTimeZone, ChatCompletionRole, CodePackageType, CollectDataSubjectRegions, ConfidenceLabel, ConsentBundleType, ConsentManagerMetricBin, ConsentPrecedenceOption, ConsentThemeInput, ConsentTrackerSource, ConsentTrackerStatus, ConsentUiUserFlow, ConsentVariantInput, Controllership, DataCategoryType, DataFlowScope, DataProtectionImpactAssessmentStatus, DefaultConsentOption, EnricherType, IdentifierType, IsoCountryCode, IsoCountrySubdivisionCode, LargeLanguageModelClient, LogicOperator, OrderDirection, PolicyType, PreferenceQueryResponseItem, PreferenceStoreAuthLevel, PreferenceStoreIdentifier, PreferenceStorePurposeResponse, PreferenceTopicType, PreflightRequestStatus, PrivacyCenterFooterLayout, PrivacyCenterThemePartial, ProcessingPurpose, PromptAVendorEmailCompletionLinkType, PromptAVendorEmailSendType, PromptFilePurpose, QueueStatus, RegionDetectionMethod, RegionsOperator, RequestAction, RequestActionObjectResolver, RequestDataSiloStatus, RequestEnricherStatus, RequestStatus, RetentionScheduleOperation, RetentionScheduleType, RetentionType, ScopeName, SignedIabAgreementOption, SombraStandardScope, SubDataPointDataSubCategoryGuessStatus, TelemetryPartitionStrategy, ThemeConfiguration, TranscendProduct, UIConfiguration, UiVariantStatus, UnknownRequestPolicy, WorkflowConfigType, WorkflowConfigVisibility } from "@transcend-io/privacy-types";
+import { ActionItemCode, ActionItemPriorityOverride, AirgapBundleAnalyticsBinInterval, AirgapBundleAnalyticsDimension, AirgapBundleAnalyticsMetric, AssessmentFormStatus, AssessmentQuestionSubType, AssessmentQuestionType, AssessmentSyncColumn, AssessmentSyncModel, AttributeKeyType, AttributeSupportedResourceType, BrowserTimeZone, ChatCompletionRole, CodePackageType, CollectDataSubjectRegions, ConfidenceLabel, ConsentBundleType, ConsentManagerMetricBin, ConsentPrecedenceOption, ConsentThemeInput, ConsentTrackerSource, ConsentTrackerStatus, ConsentUiUserFlow, ConsentVariantInput, Controllership, CustomFunctionLifecycleState, CustomFunctionPayloadType, CustomFunctionType, CustomFunctionVersionLifecycleState, DataCategoryType, DataFlowScope, DataProtectionImpactAssessmentStatus, DefaultConsentOption, EnricherType, IdentifierType, IsoCountryCode, IsoCountrySubdivisionCode, LargeLanguageModelClient, LogicOperator, OrderDirection, PolicyType, PreferenceQueryResponseItem, PreferenceStoreAuthLevel, PreferenceStoreIdentifier, PreferenceStorePurposeResponse, PreferenceTopicType, PreflightRequestStatus, PrivacyCenterFooterLayout, PrivacyCenterThemePartial, ProcessingPurpose, PromptAVendorEmailCompletionLinkType, PromptAVendorEmailSendType, PromptFilePurpose, QueueStatus, RegionDetectionMethod, RegionsOperator, RequestAction, RequestActionObjectResolver, RequestDataSiloStatus, RequestEnricherStatus, RequestStatus, RetentionScheduleOperation, RetentionScheduleType, RetentionType, ScopeName, SignedIabAgreementOption, SombraStandardScope, SubDataPointDataSubCategoryGuessStatus, TelemetryPartitionStrategy, ThemeConfiguration, TranscendProduct, UIConfiguration, UiVariantStatus, UnknownRequestPolicy, WorkflowConfigType, WorkflowConfigVisibility } from "@transcend-io/privacy-types";
 import * as t from "io-ts";
 import { BrowserLanguage, InitialViewState, OnConsentExpiry, UserPrivacySignalEnum } from "@transcend-io/airgap.js-types";
 import { LocaleValue } from "@transcend-io/internationalization";
@@ -99,6 +99,11 @@ declare function createSombraGotInstance(transcendUrl: string, transcendApiKey:
   /** Logger instance */logger?: Logger; /** Sombra API key */
   sombraApiKey?: string; /** Override Sombra URL (replaces process.env.SOMBRA_URL lookup) */
   sombraUrl?: string;
+  /**
+   * Connect to a specific Sombra gateway by ID instead of the
+   * organization's primary gateway
+   */
+  sombraId?: string;
 }): Promise<Got>;
 //#endregion
 //#region src/api/withTransientRetry.d.ts
@@ -854,6 +859,22 @@ declare function syncDataCategories(client: GraphQLClient, inputs: DataCategoryI
 }): Promise<boolean>;
 //#endregion
 //#region src/data-inventory/syncDataSiloDependencies.d.ts
+/**
+ * A set of data silos that another data silo depends on during an erasure request,
+ * either globally or scoped to a single erasure workflow.
+ */
+interface DependedOnDataSiloInput {
+  /** IDs of the data silos depended on */
+  ids?: string[];
+  /** Titles of the data silos depended on */
+  titles?: string[];
+  /** ID of the workflow config this override applies to. Omit for the global configuration */
+  workflowConfigId?: string;
+  /** Internal name of the workflow config this override applies to. Omit for the global configuration */
+  workflowConfigInternalName?: string;
+  /** Clear the workflow-scoped override so the data silo falls back to the global configuration */
+  resetToGlobal?: boolean;
+}
 /**
  * Sync data silo dependencies
  *
@@ -862,7 +883,7 @@ declare function syncDataCategories(client: GraphQLClient, inputs: DataCategoryI
  * @returns True upon success
  */
 declare function syncDataSiloDependencies(client: GraphQLClient, options: {
-  /** Pairs of [data silo ID, dependency titles] */input: [string, string[]][]; /** Logger instance */
+  /** Pairs of [data silo ID, dependency entries] */input: [string, DependedOnDataSiloInput[]][]; /** Logger instance */
   logger?: Logger;
 }): Promise<boolean>;
 //#endregion
@@ -45081,6 +45102,535 @@ declare function syncSoftwareDevelopmentKits(client: GraphQLClient, softwareDeve
   success: boolean;
 }>;
 //#endregion
+//#region src/custom-functions/codeSigning.d.ts
+/**
+ * The execution context for a custom function's code.
+ */
+interface CustomFunctionCodeContextInput {
+  /** Environment variables made available to the function (values are encrypted at sign time) */
+  userDefinedEnv: Record<string, string>;
+  /** Hosts the function is allowed to make network requests to */
+  allowedHosts: string[];
+  /** Whether the function may import third party modules */
+  allowThirdPartyImports?: boolean;
+  /** Execution timeout in milliseconds (capped by the Sombra gateway configuration) */
+  timeoutMs?: number;
+}
+/**
+ * The plaintext payload sent to the Sombra customer-ingress
+ * `/v1/custom/sign` endpoint.
+ */
+interface CustomFunctionSignPayload {
+  /** The plaintext TypeScript source code of the custom function */
+  code: string;
+  /** The execution context for the code */
+  context: CustomFunctionCodeContextInput;
+}
+/**
+ * Decode the payload of a JWT without verifying its signature.
+ *
+ * Custom function code and context JWTs are HMAC-signed by Sombra but their
+ * payloads are readable base64url JSON. Since the JWTs are fetched over the
+ * authenticated GraphQL API, decoding without verification is safe for the
+ * purposes of change detection.
+ *
+ * @param token - The JWT string
+ * @returns The decoded payload object, or undefined if the JWT is malformed
+ */
+declare function decodeJwtPayload<T extends object>(token: string): T | undefined;
+/**
+ * The decoded payload of a signed custom function code JWT.
+ */
+interface SignedCustomFunctionCode {
+  /** The base64-encoded source code */
+  base64Code: string;
+}
+/**
+ * The decoded payload of a signed custom function code context JWT. The
+ * environment variable values are encrypted at sign time, so only their names
+ * are comparable.
+ */
+interface SignedCustomFunctionCodeContext {
+  /** Hosts the function is allowed to make network requests to */
+  allowedHosts?: string[];
+  /** Whether the function may import third party modules */
+  allowThirdPartyImports?: boolean;
+  /** Execution timeout in milliseconds */
+  timeoutMs?: number;
+  /** Environment variables, with values encrypted by the Sombra gateway */
+  userDefinedEncryptedEnv?: Record<string, unknown>;
+}
+/**
+ * The result of comparing a local custom function definition against the
+ * signed code and context currently stored in Transcend.
+ */
+interface CustomFunctionDiff {
+  /** Whether any comparable field differs */
+  changed: boolean;
+  /** Human-readable list of fields that differ */
+  changedFields: string[];
+}
+/**
+ * Compare a desired sign payload against the signed code/context JWTs of an
+ * existing custom function version.
+ *
+ * Environment variable *values* are encrypted server-side and cannot be
+ * compared — only their names are diffed. Callers should offer a force flag to
+ * re-push when only env values change.
+ *
+ * @param desired - The desired code and context
+ * @param existing - The existing signed JWTs from the API
+ * @returns The diff result
+ */
+declare function diffCustomFunctionCode(desired: CustomFunctionSignPayload, existing: {
+  /** The signed code JWT of the existing version */signedCodeJwt: string; /** The signed code context JWT of the existing version */
+  signedCodeContextJwt: string;
+}): CustomFunctionDiff;
+//#endregion
+//#region src/custom-functions/fetchAllCustomFunctions.d.ts
+/**
+ * Preview of a custom function version.
+ */
+interface CustomFunctionVersionPreview {
+  /** Version ID */
+  id: string;
+  /** Monotonic version number (e.g. "1.0") */
+  versionNumber: string;
+  /** Lifecycle state of the version */
+  lifecycleState: CustomFunctionVersionLifecycleState;
+  /** Signed code JWT for this specific version's code */
+  signedCodeJwt: string;
+}
+/**
+ * A custom function as returned by the `customFunctions` query.
+ */
+interface CustomFunction {
+  /** Custom function ID */
+  id: string;
+  /** Display name */
+  name: string;
+  /** Description */
+  description?: string | null;
+  /** Product-facing type */
+  type: CustomFunctionType;
+  /** Lifecycle state */
+  lifecycleState: CustomFunctionLifecycleState;
+  /** ID of the Sombra gateway the function belongs to (signs its code and runs it) */
+  sombraId?: string | null;
+  /** ID of the data silo (DSR integration) the function is linked to, for DSR functions */
+  dataSiloId?: string | null;
+  /** Signed code JWT of the preferred (draft if pending, else active) version */
+  signedCodeJwt: string;
+  /** Signed code context JWT of the preferred version */
+  signedCodeContextJwt: string;
+  /** Whether a draft version is newer than the current active version */
+  hasPendingDraft: boolean;
+  /** Current active version metadata */
+  activeVersion?: CustomFunctionVersionPreview | null;
+  /** Pending draft version metadata */
+  draftVersion?: CustomFunctionVersionPreview | null;
+}
+/**
+ * Fetch all custom functions in the organization
+ *
+ * @param client - GraphQL client
+ * @param options - Options
+ * @returns All custom functions in the organization
+ */
+declare function fetchAllCustomFunctions(client: GraphQLClient, options?: {
+  /** Logger instance */logger?: Logger; /** Filter options */
+  filterBy?: {
+    /** Filter by text match on name or description */text?: string;
+  };
+}): Promise<CustomFunction[]>;
+//#endregion
+//#region src/custom-functions/runCustomFunctionTest.d.ts
+/**
+ * A log line emitted while executing a custom function.
+ */
+interface CustomFunctionExecutionLog {
+  /** The logged message */
+  message: string;
+  /** The stream/file the message was written to (e.g. stdout, stderr) */
+  file: string;
+}
+/**
+ * The error a custom function execution failed with, when it failed.
+ */
+interface CustomFunctionExecutionError {
+  /** Error message */
+  message: string;
+  /** Stack trace, when available */
+  stack?: string | null;
+}
+/**
+ * The result of executing a custom function via the `runCustomFunction`
+ * mutation.
+ */
+interface CustomFunctionExecutionResult {
+  /** Process exit code (negative values are internal "success with warnings" codes) */
+  exitCode: number;
+  /** The error the execution failed with, when it failed */
+  error?: CustomFunctionExecutionError | null;
+  /** Log lines emitted during execution */
+  logs: CustomFunctionExecutionLog[];
+  /** Execution profile */
+  profile: {
+    /** Wall-clock execution time in milliseconds */timeMs: number;
+  };
+}
+/**
+ * The outcome of test-running a custom function.
+ */
+interface CustomFunctionTestRunResult {
+  /** Whether the test passed (no error and a non-failure exit code) */
+  passed: boolean;
+  /** The raw execution result (error, logs, exit code, timing) */
+  result: CustomFunctionExecutionResult;
+}
+/**
+ * A single test payload to run a custom function with before pushing.
+ */
+interface CustomFunctionTestPayload {
+  /** The JSON test payload */
+  payload: object;
+  /**
+   * Which export the payload invokes for DSR functions (`DATA_POINT` →
+   * `default`, `REQUEST_ENRICHER` → `enricher`). Defaults to DATA_POINT.
+   * GENERAL functions are always run as Maestro payloads and ignore this
+   */
+  payloadType?: CustomFunctionPayloadType;
+}
+/**
+ * Whether an execution result counts as a passing test.
+ *
+ * Mirrors the Admin Dashboard's function editor: a run passes when it
+ * produced no error and exited with a code <= 0 (negative codes are internal
+ * success-with-metadata codes).
+ *
+ * @param result - The execution result
+ * @returns True when the run passed
+ */
+declare function didCustomFunctionTestPass(result: Pick<CustomFunctionExecutionResult, 'error' | 'exitCode'>): boolean;
+/**
+ * Test-run custom function code that has been signed but not yet saved.
+ *
+ * Sends the pre-signed code/context JWT pair to the `runCustomFunction`
+ * mutation as a test run (`isCustomFunctionTestRun: true`). The backend
+ * verifies JWT provenance against the target Sombra gateway, executes the
+ * code on that gateway, and returns the execution result — nothing is
+ * persisted.
+ *
+ * - GENERAL functions run against `sombraId` (or the organization's primary
+ *   Sombra) with the payload validated as a Maestro payload.
+ * - DSR functions run against the Sombra of the data silo referenced by
+ *   `extras.dataSilo.id` in the payload; `payloadType` selects which export
+ *   is invoked (`DATA_POINT` → `default`, `REQUEST_ENRICHER` → `enricher`).
+ *
+ * Requires backend support for pre-signed JWTs on `runCustomFunction`; older
+ * backends reject the JWT fields with a friendly upgrade error.
+ *
+ * @param client - GraphQL client authenticated with a Transcend API key
+ * @param options - Options
+ * @returns The execution result plus a `passed` boolean
+ */
+declare function runCustomFunctionTest(client: GraphQLClient, options: {
+  /** Product-facing type of the custom function under test */type: CustomFunctionType; /** Pre-signed code JWT from the Sombra customer-ingress `/v1/custom/sign` route */
+  signedCodeJwt: string; /** Pre-signed code context JWT from the same sign call */
+  signedCodeContextJwt: string; /** The JSON test payload to invoke the function with (base64-encoded on the wire) */
+  payload: object; /** Dedicated Sombra gateway ID (GENERAL only; DSR derives it from the payload's data silo) */
+  sombraId?: string;
+  /**
+   * Which export to invoke for DSR functions (`DATA_POINT` → `default`,
+   * `REQUEST_ENRICHER` → `enricher`). Defaults to DATA_POINT. GENERAL
+   * functions are always run as Maestro payloads and ignore this setting
+   */
+  payloadType?: CustomFunctionPayloadType; /** Logger instance */
+  logger?: Logger;
+}): Promise<CustomFunctionTestRunResult>;
+//#endregion
+//#region src/custom-functions/syncCustomFunction.d.ts
+/**
+ * The desired state of a custom function to sync to Transcend.
+ */
+interface CustomFunctionConfigInput {
+  /**
+   * Custom function ID to update. When set, this is the sync key and the
+   * function must already exist. When omitted, the function is matched by
+   * exact name — which fails if multiple functions share the name.
+   */
+  id?: string;
+  /** Display name of the custom function (the sync key when no `id` is set) */
+  name: string;
+  /** The plaintext TypeScript source code */
+  code: string;
+  /** Description of the custom function */
+  description?: string;
+  /** Product-facing type. Defaults to GENERAL */
+  type?: CustomFunctionType;
+  /** Data silo ID the function is attached to (required for DSR functions) */
+  dataSiloId?: string;
+  /** Dedicated Sombra gateway ID (defaults to the organization's primary Sombra) */
+  sombraId?: string;
+  /** Hosts the function is allowed to make network requests to */
+  allowedHosts?: string[];
+  /** Whether the function may import third party modules */
+  allowThirdPartyImports?: boolean;
+  /** Execution timeout in milliseconds */
+  timeoutMs?: number;
+  /** Environment variables to expose to the function */
+  env?: Record<string, string>;
+}
+/**
+ * The outcome of syncing a single custom function.
+ */
+type CustomFunctionSyncOutcome = /** A new custom function was created */'created' /** A new revision was pushed to an existing custom function */ | 'updated' /** Only metadata (name/description) changed; updated without a new code revision */ | 'metadata-updated' /** No changes detected; nothing was pushed */ | 'skipped' /** The test run failed; nothing was pushed */ | 'test-failed' /** Dry run: a new custom function would be created */ | 'would-create' /** Dry run: a new revision would be pushed */ | 'would-update';
+/**
+ * The result of running one test payload during a sync, tagged with the
+ * export the payload invoked.
+ */
+interface CustomFunctionSyncTestResult extends CustomFunctionTestRunResult {
+  /** Which export the payload invoked (DSR functions; DATA_POINT when omitted) */
+  payloadType?: CustomFunctionTestPayload['payloadType'];
+}
+/**
+ * The result of syncing a single custom function.
+ */
+interface CustomFunctionSyncResult {
+  /** The sync outcome */
+  outcome: CustomFunctionSyncOutcome;
+  /** The custom function ID (when it exists or was created) */
+  customFunctionId?: string;
+  /** The version number that is now active or drafted (when a revision was pushed) */
+  versionNumber?: string;
+  /** Fields that changed, driving the update (empty on create/skip) */
+  changedFields: string[];
+  /** Whether the pushed revision was promoted to active */
+  promoted: boolean;
+  /** The test-run results (one per payload), when the code was tested */
+  testResults?: CustomFunctionSyncTestResult[];
+  /** The data silo (DSR integration) the function is linked to, for DSR functions */
+  dataSiloId?: string;
+  /**
+   * Whether a new data silo (DSR integration) was created during this sync.
+   * On a `test-failed` outcome this means the auto-created silo was rolled
+   * back (deleted) — `dataSiloId` is absent in that case.
+   */
+  createdDataSilo?: boolean;
+}
+/**
+ * Sync a custom function definition (metadata + code revision) to Transcend.
+ *
+ * - When no custom function with the given name exists, one is created.
+ * - A new DSR function without a `dataSiloId` also gets its DSR integration
+ *   created: a `customFunction`-catalog data silo shell is created first (the
+ *   backend needs it to exist for the test run), the code is tested against
+ *   it, and on a passing test the function is created and linked. A failing
+ *   test rolls the silo back (deletes it).
+ * - When one exists and the code/context changed, a new draft revision is
+ *   created and (unless `promote` is false) promoted to active.
+ * - When only metadata changed (description, or name for id-pinned entries),
+ *   the function record is updated in place — no signing, no test runs, and
+ *   no new code revision.
+ * - When nothing changed, the function is skipped (unless `force` is set).
+ *
+ * Code is signed against the Sombra customer-ingress `/v1/custom/sign` route
+ * before being saved via the GraphQL API, so plaintext code and env values
+ * never reach Transcend's backend.
+ *
+ * Environment variable values are encrypted server-side and cannot be diffed;
+ * use `force` to re-push when only env values changed.
+ *
+ * @param client - GraphQL client authenticated with a Transcend API key
+ * @param options - Options
+ * @returns The sync result
+ */
+declare function syncCustomFunction(client: GraphQLClient, options: {
+  /** The desired custom function state */input: CustomFunctionConfigInput;
+  /**
+   * Got instance authenticated against the customer ingress of the Sombra
+   * gateway the function belongs to (see `resolveEffectiveSombraId`).
+   * Required unless `dryRun` is set
+   */
+  sombra?: Got; /** Default Sombra gateway ID when neither the config nor the existing function specify one */
+  defaultSombraId?: string; /** All existing custom functions in the organization (see `fetchAllCustomFunctions`) */
+  existing: CustomFunction[]; /** Whether to promote new revisions to active. Defaults to true */
+  promote?: boolean; /** When true, report what would happen without mutating anything */
+  dryRun?: boolean; /** When true, push a new revision even if no changes were detected */
+  force?: boolean;
+  /**
+   * JSON test payloads to run the freshly signed code with before pushing.
+   * Every payload is run via the `runCustomFunction` mutation (DSR
+   * functions can cover both the default and enricher exports via
+   * `payloadType`) and all must pass — any failure rejects the push
+   * (outcome `test-failed`). Skipped on dry runs (nothing is signed).
+   */
+  testPayloads?: CustomFunctionTestPayload[]; /** Logger instance */
+  logger?: Logger;
+}): Promise<CustomFunctionSyncResult>;
+//#endregion
+//#region src/custom-functions/buildCustomFunctionSignPayload.d.ts
+/**
+ * Build the sign payload for a custom function config.
+ *
+ * @param input - The custom function config
+ * @returns The plaintext sign payload
+ */
+declare function buildCustomFunctionSignPayload(input: CustomFunctionConfigInput): CustomFunctionSignPayload;
+//#endregion
+//#region src/custom-functions/customFunctionDataSilo.d.ts
+/**
+ * The integration/catalog name for custom function DSR integrations. Silos
+ * created with this catalog get `customSiloConnectionStrategy =
+ * CUSTOM_FUNCTION` and start `NOT_CONFIGURED` until a custom function is
+ * attached — the same shell the Admin Dashboard creates for a new DSR
+ * function.
+ */
+declare const CUSTOM_FUNCTION_INTEGRATION_NAME = "customFunction";
+/**
+ * A newly created custom function data silo (DSR integration).
+ */
+interface CustomFunctionDataSilo {
+  /** Data silo ID */
+  id: string;
+  /** Data silo title */
+  title: string;
+}
+/**
+ * Create the data silo (DSR integration) backing a new DSR custom function.
+ *
+ * The silo is an inert `customFunction`-catalog shell: it has no function
+ * attached yet and stays `NOT_CONFIGURED` until `createCustomFunction` links
+ * one (which flips it to `Connected`). The `customFunction` catalog requires
+ * a Sombra gateway on create — the function's code runs on that gateway.
+ *
+ * @param client - GraphQL client authenticated with a Transcend API key
+ * @param options - Options
+ * @returns The created data silo
+ */
+declare function createCustomFunctionDataSilo(client: GraphQLClient, options: {
+  /** Title of the integration (conventionally the custom function name) */title: string; /** The Sombra gateway the function belongs to */
+  sombraId: string; /** Logger instance */
+  logger?: Logger;
+}): Promise<CustomFunctionDataSilo>;
+/**
+ * Delete a data silo. Used to roll back a just-created custom function data
+ * silo when the function's test run fails before anything was linked to it.
+ *
+ * @param client - GraphQL client authenticated with a Transcend API key
+ * @param dataSiloId - The data silo ID to delete
+ * @param options - Options
+ */
+declare function deleteDataSilo(client: GraphQLClient, dataSiloId: string, options?: {
+  /** Logger instance */logger?: Logger;
+}): Promise<void>;
+//#endregion
+//#region src/custom-functions/gqls/customFunction.d.ts
+declare const CUSTOM_FUNCTIONS: string;
+declare const CREATE_CUSTOM_FUNCTION: string;
+declare const UPDATE_STANDALONE_CUSTOM_FUNCTION: string;
+declare const CREATE_CUSTOM_FUNCTION_DATA_SILO: string;
+declare const DELETE_DATA_SILOS: string;
+declare const RUN_CUSTOM_FUNCTION: string;
+declare const PROMOTE_CUSTOM_FUNCTION_VERSION: string;
+//#endregion
+//#region src/custom-functions/injectDataSiloIntoDsrTestPayload.d.ts
+/**
+ * Inject the resolved data silo into a DSR test payload.
+ *
+ * The backend's unsaved-DSR test path resolves the execution Sombra from
+ * `extras.dataSilo.id`, so the payload must reference the function's actual
+ * data silo — which the payload file cannot know for silos created during
+ * the same push. The silo `id` is always overridden; other `extras.dataSilo`
+ * fields from the payload file are preserved. The backend validates DSR
+ * payloads against the full webhook notification codec, which requires
+ * `title`, `description`, and `link` on the data silo — those are defaulted
+ * when the payload file omits them.
+ *
+ * @param payload - The DSR test payload from the manifest
+ * @param dataSilo - The resolved data silo
+ * @returns The payload with `extras.dataSilo` pointing at the resolved silo
+ */
+declare function injectDataSiloIntoDsrTestPayload(payload: object, dataSilo: {
+  /** Data silo ID */id: string; /** Fallback title when the payload does not carry one */
+  title: string;
+}): object;
+//#endregion
+//#region src/custom-functions/resolveEffectiveSombraId.d.ts
+/**
+ * Resolve which Sombra gateway a custom function's code must be signed
+ * against.
+ *
+ * Each custom function belongs to a single gateway, whose keys sign the code
+ * and encrypt the env values — signing against any other gateway would
+ * produce JWTs that fail verification at execution time. The gateway is
+ * resolved as: the config's `sombraId`, else the existing function's
+ * gateway, else the caller's default (e.g. a CLI flag), else `undefined`
+ * meaning the organization's primary Sombra.
+ *
+ * A config that pins a different gateway than the existing function is an
+ * error — the gateway of an existing function cannot be changed by a push.
+ *
+ * @param input - The custom function config
+ * @param existing - The matching existing custom function, when there is one
+ * @param defaultSombraId - Fallback gateway ID when neither the config nor the existing function specify one
+ * @returns The Sombra gateway ID to sign against, or undefined for the primary gateway
+ */
+declare function resolveEffectiveSombraId(input: Pick<CustomFunctionConfigInput, 'name' | 'sombraId'>, existing: Pick<CustomFunction, 'id' | 'sombraId'> | undefined, defaultSombraId?: string): string | undefined;
+/**
+ * Resolve the organization's primary Sombra gateway ID.
+ *
+ * @param client - GraphQL client authenticated with a Transcend API key
+ * @param logger - Logger instance
+ * @returns The primary Sombra ID
+ */
+declare function resolvePrimarySombraId(client: GraphQLClient, logger?: Logger): Promise<string>;
+//#endregion
+//#region src/custom-functions/resolveExistingCustomFunction.d.ts
+/**
+ * Resolve which existing custom function a config refers to.
+ *
+ * When the config has an `id`, it must match an existing function. Otherwise
+ * the function is matched by exact name; an ambiguous name (multiple existing
+ * functions with the same name) is an error that the caller should resolve by
+ * adding an `id` to the config.
+ *
+ * @param existing - All existing custom functions in the organization
+ * @param input - The custom function config
+ * @returns The matching custom function, or undefined when it should be created
+ */
+declare function resolveExistingCustomFunction(existing: CustomFunction[], input: Pick<CustomFunctionConfigInput, 'id' | 'name'>): CustomFunction | undefined;
+//#endregion
+//#region src/custom-functions/signCustomFunctionCode.d.ts
+/**
+ * The signed JWT pair returned by Sombra's customer-ingress
+ * `/v1/custom/sign` endpoint.
+ */
+interface SignedCustomFunctionJwts {
+  /** HMAC-signed JWT wrapping the function code */
+  signedCodeJwt: string;
+  /** HMAC-signed JWT wrapping the execution context (env values encrypted at sign time) */
+  signedCodeContextJwt: string;
+}
+/**
+ * Sign custom function code against the Sombra customer-ingress
+ * `/v1/custom/sign` route.
+ *
+ * The route is authenticated by the sombra instance's bearer headers (the
+ * Transcend API key, plus the Sombra internal key when self-hosting — see
+ * `createSombraGotInstance`). Code and env values travel to the customer's
+ * own Sombra gateway over TLS and never reach Transcend's backend in
+ * plaintext.
+ *
+ * @param sombra - Got instance authenticated against the Sombra customer ingress
+ * @param payload - The plaintext code and execution context to sign
+ * @param options - Options
+ * @returns The signed code and context JWTs to store via the GraphQL API
+ */
+declare function signCustomFunctionCode(sombra: Got, payload: CustomFunctionSignPayload, options?: {
+  /** Existing custom function ID, forwarded for Sombra log context */customFunctionId?: string;
+}): Promise<SignedCustomFunctionJwts>;
+//#endregion
 //#region src/index.d.ts
 interface MonorepoPackageDefinition {
   directory: string;
@@ -45089,5 +45639,5 @@ interface MonorepoPackageDefinition {
 }
 declare function createMonorepoPackageDefinition(name: string, directory: string): MonorepoPackageDefinition;
 //#endregion
-export { AIRGAP_BUNDLE_AGGREGATE_ANALYTICS, AIRGAP_BUNDLE_TIMESERIES_ANALYTICS, ASSESSMENTS, ASSESSMENT_SECTION_FIELDS, ATTRIBUTE_KEYS_REQUESTS, ATTRIBUTE_VALUE_FIELDS, Action, ActionItem, ActionItemAttributeKey, ActionItemCollection, ActionItemCollectionInput, ActionItemInput, ActionItemRaw, AddMessagesToPromptRunInput, Agent, AgentFile, AgentFileFilterBy, AgentFileInput, AgentFunction, AgentFunctionInput, AgentInput, AirgapBundleAggregateAnalyticsDimensionsGql, AirgapBundleAggregateAnalyticsItemGql, AirgapBundleTimeseriesAnalyticsItemGql, ApiKey, Assessment, AssessmentAction, AssessmentAnswer, AssessmentAnswerOption, AssessmentComment, AssessmentGroup, AssessmentNestedRule, AssessmentPreviousSubmission, AssessmentQuestion, AssessmentResource, AssessmentRiskLogic, AssessmentRule, AssessmentRuleWithOperands, AssessmentRuleWithoutOperands, AssessmentSection, Attribute, AttributeInput, AttributeKey, AttributeValue, AttributeValueInput, BULK_REQUEST_FILES, BusinessEntity, BusinessEntityInput, CHANGE_REQUEST_DATA_SILO_STATUS, CODE_PACKAGES, CONSENT_MANAGER_ANALYTICS_DATA, CONSENT_PARTITIONS, CONSENT_WORKFLOW_TRIGGERS, COOKIES, COOKIE_STATS, CREATE_CODE_PACKAGE, CREATE_CONSENT_EXPERIENCE, CREATE_CONSENT_MANAGER, CREATE_CONSENT_PARTITION, CREATE_CONSENT_UI_THEME, CREATE_CONSENT_UI_VARIANT, CREATE_DATA_FLOWS, CREATE_DATA_SILOS, CREATE_DATA_SUBJECT, CREATE_ENRICHER, CREATE_IDENTIFIER, CREATE_OR_UPDATE_CONSENT_WORKFLOW_TRIGGER, CREATE_PROCESSING_PURPOSE_SUB_CATEGORY, Catalog, ChunkMode, CodePackage, ColumnIdentifierMap, ColumnMetadataMap, ColumnPurposeMap, ConsentExperience, ConsentManageExperienceInput, ConsentManager, ConsentManagerInput, ConsentManagerMetric, ConsentPreferenceResponse, ConsentUiTheme, ConsentUiThemesQueryResponse, ConsentUiVariant, ConsentUiVariantsQueryResponse, ConsentWorkflowTrigger, ConsentWorkflowTriggerPurposeInput, ConsentWorkflowTriggerSyncInput, CookieInput, CookieOrder, CreatedApiKey, DATAPOINT_EXPORT, DATA_FLOWS, DATA_FLOW_STATS, DATA_POINTS, DATA_POINT_COUNT, DATA_SILOS, DATA_SILOS_ENRICHED, DATA_SILO_EXPORT, DATA_SILO_SOMBRA, DATA_SUBJECTS, DELETE_COOKIES, DELETE_DATA_FLOWS, DELETE_PRIVACY_CENTER_FOOTER_LINKS, DEPLOYED_PRIVACY_CENTER_URL, DEPLOY_CONSENT_MANAGER, DataCategoryInput, DataFlowAttributeInput, DataFlowInput, DataFlowOrder, DataPoint, DataPointWithSubDataPoint, DataSilo, type DataSiloAttributeValue, DataSiloEnriched, DataSubCategory, DataSubject, DataSubjectInput, DataSubjectRef, DeletePreferenceRecordCliCsvRow, DeletePreferenceRecordsInput, DeletePreferenceRecordsResponse, ENRICHERS, EXPERIENCES, Enricher, EnricherInput, ExternalUser, FETCH_CONSENT_MANAGER, FETCH_CONSENT_MANAGER_ID, FETCH_CONSENT_MANAGER_THEME, FETCH_CONSENT_UI_THEMES, FETCH_CONSENT_UI_VARIANTS, FETCH_PRIVACY_CENTER_ID, FailingPreferenceUpdates, FetchApiKeysInput, FileFormatState, FileMetadataState, FormattedAttribute, IMPORT_ONE_TRUST_ASSESSMENT_FORMS, INITIALIZER, Identifier, IdentifierInput, IdentifierMetadataForPreference, IdentifiersAndCreateMissingInput, IndexedCatalogs, Initializer, IntlMessageInput, LargeLanguageModel, Message, MetadataMapping, MonorepoPackageDefinition, NEW_IDENTIFIER_TYPES, NOOP_LOGGER, OWNER_FIELDS, OrganizationPreview, POLICIES, PRIVACY_CENTER, PROCESSING_PURPOSE_SUB_CATEGORIES, PURPOSES, ParentOrganizationTeam, PartitionInput, PendingSafePreferenceUpdates, PendingWithConflictPreferenceUpdates, Plugin, PluginResponse, Policy, PolicyInput, PreferenceAccessTokenInput, PreferenceAccessTokenInputWithIndex, PreferenceIdentifier, PreferenceOptionValue, PreferenceOptionValueInput, PreferenceState, PreferenceTopic, type PreferenceTopicSyncInput, PreferenceUpdateMap, PreferenceUploadReferenceData, PreferencesQueryFilter, PrivacyCenter, PrivacyCenterChildOrganization, PrivacyCenterFooterLink, PrivacyCenterFooterLinkIcon, PrivacyCenterFooterLinkInput, PrivacyCenterInput, ProcessingActivity, ProcessingActivityInput, ProcessingPurposeInput, ProcessingPurposeSubCategory, PromptThread, Purpose, type PurposeInput, PurposeRowMapping, PurposeWithPreferences, REDUCED_REQUESTS_FOR_DATA_SILO_COUNT, REMOVE_REQUEST_IDENTIFIERS, REQUEST_DATA_SILOS, REQUEST_ENRICHERS, REQUEST_FILES, REQUEST_IDENTIFIERS, RETRY_REQUEST_DATA_SILO, RETRY_REQUEST_ENRICHER, RETRY_TRANSIENT_MSGS, Region, RegionInput, Repository, RepositoryInput, RequestDataSilo, RequestDataSiloFilters, RequestEnricher, RequestFile, RequestFileCursor, RequestFileResponse, RequestIdentifier, RequestIdentifierMetadata, RequestIdentifiersResponse, RequestUploadReceipts, RetentionSchedule, RetryOptions, RiskCategory, RiskFramework, RiskLevel, RiskMatrix, RiskMatrixColumn, RiskMatrixRow, SERVICE_FIELDS, SKIP_REQUEST_ENRICHER, SOMBRA_VERSION, SUB_DATA_POINTS, SUB_DATA_POINTS_COUNT, SUB_DATA_POINTS_WITH_GUESSES, SYNC_ATTRIBUTE_TYPES, SiloDiscoveryRawResult, SiloDiscoveryResult, SkippedPreferenceUpdates, SoftwareDevelopmentKit, SoftwareDevelopmentKitInput, SubDataPoint, SubDataPointCategory, SubDataPointPurpose, SyncActionInput, SyncPurposesResult, SyncTemplateInput, SyncedConsentUiTheme, SyncedConsentUiVariant, TEAM_FIELDS, TOGGLE_CONSENT_PRECEDENCE, TOGGLE_DATA_SUBJECT, TOGGLE_TELEMETRY_PARTITION_STRATEGY, TOGGLE_UNKNOWN_COOKIE_POLICY, TOGGLE_UNKNOWN_REQUEST_POLICY, TRACKING_PURPOSE_FIELDS, Team, TeamInput, Template, TranscendAttributeValueGql, TranscendCliAirgapBundleAggregateAnalyticsResponse, TranscendCliAirgapBundleTimeseriesAnalyticsResponse, TranscendCliConsentPartitionsResponse, TranscendCliCookieStatsResponse, TranscendCliCookiesResponse, TranscendCliCreateConsentExperienceResponse, TranscendCliCreateConsentPartitionResponse, TranscendCliCreateDataFlowsResponse, TranscendCliDataFlowStatsResponse, TranscendCliDataFlowsResponse, TranscendCliDeleteCookiesResponse, TranscendCliDeleteDataFlowsResponse, TranscendCliExperiencesResponse, TranscendCliFetchConsentManagerIdResponse, TranscendCliFetchConsentManagerResponse, TranscendCliFetchConsentManagerThemeResponse, TranscendCliPurposesResponse, TranscendCliUpdateConsentExperienceResponse, TranscendCliUpdateDataFlowsResponse, TranscendCliUpdateOrCreateCookiesResponse, TranscendClientMutationIdResponse, TranscendConsentManagerConfigGql, TranscendConsentManagerGql, TranscendConsentManagerThemeGql, TranscendConsentPartitionGql, TranscendCookieDomainGql, TranscendCookieGql, TranscendCookieServiceGql, TranscendDataFlowGql, TranscendExperienceGql, TranscendExperiencePurposeGql, TranscendExperienceRegionGql, TranscendMappedDataSiloGql, TranscendOwnerGql, TranscendPreferenceTopicGql, TranscendPreferenceTopicTitle, TranscendPurposeGql, TranscendTeamGql, TranscendTrackerStatsGql, TranscendTrackingPurposeGql, TranscendUpdateCookieInputGql, TranscendUpdateDataFlowInputGql, UPDATE_CODE_PACKAGES, UPDATE_CONSENT_EXPERIENCE, UPDATE_CONSENT_MANAGER_DOMAINS, UPDATE_CONSENT_MANAGER_PARTITION, UPDATE_CONSENT_MANAGER_THEME, UPDATE_CONSENT_MANAGER_TO_LATEST, UPDATE_CONSENT_MANAGER_VERSION, UPDATE_CONSENT_UI_THEME, UPDATE_CONSENT_UI_VARIANT, UPDATE_DATA_FLOWS, UPDATE_DATA_SILOS, UPDATE_DATA_SUBJECT, UPDATE_ENRICHER, UPDATE_IDENTIFIER, UPDATE_LOAD_OPTIONS, UPDATE_OR_CREATE_COOKIES, UPDATE_OR_CREATE_DATA_POINT, UPDATE_POLICIES, UPDATE_PRIVACY_CENTER, UPDATE_PRIVACY_CENTER_FOOTER_LINKS, UPDATE_PROCESSING_PURPOSE_SUB_CATEGORIES, User, UserPreview, UserRole, Vendor, VendorInput, WorkflowConfigMatchInput, WorkflowConfigMatchResolution, WorkflowConfigNode, WorkflowConfigSummary, WorkflowConfigSyncInput, addMessagesToPromptRun, assumeRole, buildConsentChunks, buildTranscendGraphQLClient, buildTranscendGraphQLClientGeneric, buildTriggerConditionFromPurposes, checkIfPendingPreferenceUpdatesAreNoOp, checkIfPendingPreferenceUpdatesCauseConflict, consentWindowHasAny, convertToDataSubjectAllowlist, convertToDataSubjectBlockList, createActionItemCollection, createActionItems, createAgent, createAgentFile, createAgentFunction, createApiKey, createBusinessEntity, createDataCategory, createDataFlows, createDataSubject, createMonorepoPackageDefinition, createOrUpdatePreferenceOptionValues, createPreferenceAccessTokens, createProcessingPurpose, createRepository, createSoftwareDevelopmentKit, createSombraGotInstance, createTeam, createTranscendConsentGotInstance, createVendor, deleteApiKey, deployConsentManager, fetchActiveSiloDiscoPlugin, fetchAirgapBundleAggregateAnalytics, fetchAirgapBundleTimeseriesAnalytics, fetchAllActionItemCollections, fetchAllActionItems, fetchAllActions, fetchAllAgentFiles, fetchAllAgentFunctions, fetchAllAgents, fetchAllApiKeys, fetchAllAssessments, fetchAllAttributeValues, fetchAllAttributes, fetchAllBusinessEntities, fetchAllCatalogs, fetchAllCodePackages, fetchAllConsentWorkflowTriggers, fetchAllCookies, fetchAllDataCategories, fetchAllDataFlows, fetchAllDataPoints, fetchAllDataSilos, fetchAllDataSubjects, fetchAllEnrichers, fetchAllIdentifiers, fetchAllLargeLanguageModels, fetchAllMessages, fetchAllPolicies, fetchAllPreferenceOptionValues, fetchAllPreferenceTopics, fetchAllPrivacyCenters, fetchAllProcessingActivities, fetchAllProcessingPurposes, fetchAllPromptThreads, fetchAllPurposes, fetchAllPurposesAndPreferences, fetchAllRepositories, fetchAllRequestAttributeKeys, fetchAllRequestEnrichers, fetchAllRequestIdentifierMetadata, fetchAllRequestIdentifiers, fetchAllSiloDiscoveryResults, fetchAllSoftwareDevelopmentKits, fetchAllSubDataPoints, fetchAllTeams, fetchAllTemplates, fetchAllUsers, fetchAllVendors, fetchAllWorkflowConfigs, fetchAndIndexCatalogs, fetchApiKeys, fetchConsentManager, fetchConsentManagerAnalyticsData, fetchConsentManagerExperiences, fetchConsentManagerId, fetchConsentManagerTheme, fetchConsentPreferences, fetchConsentPreferencesChunked, fetchConsentThemes, fetchConsentVariants, fetchEnrichedDataSilos, fetchIdentifiersAndCreateMissing, fetchParentOrganizationTeams, fetchPartitions, fetchPrivacyCenterId, fetchPrivacyCenterUrl, fetchRequestDataSilo, fetchRequestDataSilos, fetchRequestDataSilosCount, fetchRequestFilesForRequest, findEarliestDayWithData, findLatestDayWithData, formatAttributeValues, formatRegions, getBoundsFromConsentFilter, getComparisonTimeForRecord, getPreferenceIdentifiersFromRow, getPreferenceMetadataFromRow, getPreferenceUpdatesFromRow, getPreferencesForIdentifiers, getUniquePreferenceIdentifierNamesFromRow, getWorkflowConfigDisplayTitle, inferPolicyTypeFromTitle, isConsentWorkflowTriggerV2Mode, isTransientError, iterateConsentPages, loadReferenceData, loginUser, makeGraphQLRequest, parseAssessmentDisplayLogic, parseAssessmentRiskLogic, parsePurposesFromTriggerCondition, pickConsentChunkMode, resolveDisplayedChildOrganizationIds, resolveParentTeamIdsByName, resolveWorkflowConfigByTitle, resolveWorkflowConfigMatch, resolveWorkflowTitleFromId, retryRequestEnricher, setResourceAttributes, syncAction, syncActionItemCollections, syncActionItems, syncAgentFiles, syncAgentFunctions, syncAgents, syncAttribute, syncBusinessEntities, syncConsentManager, syncConsentManagerExperiences, syncConsentUiThemes, syncConsentUiVariants, syncConsentWorkflowTriggers, syncCookies, syncDataCategories, syncDataFlows, syncDataSiloDependencies, syncDataSubject, syncEnricher, syncIdentifier, syncIntlMessages, syncPartitions, syncPolicies, syncPreferenceOptionValues, syncPreferenceTopics, syncPrivacyCenter, syncPrivacyCenterFooterLinks, syncProcessingActivities, syncProcessingPurposes, syncPurposes, syncRepositories, syncSoftwareDevelopmentKits, syncTeams, syncTemplate, syncVendors, syncWorkflowConfigs, transformPreferenceRecordToCsv, updateActionItem, updateActionItemCollection, updateAgentFiles, updateAgentFunctions, updateAgents, updateBusinessEntities, updateConsentManagerToLatest, updateDataCategories, updateDataFlows, updateIntlMessages, updateOrCreateCookies, updatePolicies, updateProcessingPurposes, updateRepositories, updateSoftwareDevelopmentKits, updateTeam, updateVendors, uploadSiloDiscoveryResults, validateConsentWorkflowTriggerMode, validateSombraVersion, withTransientRetry, workflowConfigInputLabel, workflowConfigMatchKey, workflowRegionListKey };
+export { AIRGAP_BUNDLE_AGGREGATE_ANALYTICS, AIRGAP_BUNDLE_TIMESERIES_ANALYTICS, ASSESSMENTS, ASSESSMENT_SECTION_FIELDS, ATTRIBUTE_KEYS_REQUESTS, ATTRIBUTE_VALUE_FIELDS, Action, ActionItem, ActionItemAttributeKey, ActionItemCollection, ActionItemCollectionInput, ActionItemInput, ActionItemRaw, AddMessagesToPromptRunInput, Agent, AgentFile, AgentFileFilterBy, AgentFileInput, AgentFunction, AgentFunctionInput, AgentInput, AirgapBundleAggregateAnalyticsDimensionsGql, AirgapBundleAggregateAnalyticsItemGql, AirgapBundleTimeseriesAnalyticsItemGql, ApiKey, Assessment, AssessmentAction, AssessmentAnswer, AssessmentAnswerOption, AssessmentComment, AssessmentGroup, AssessmentNestedRule, AssessmentPreviousSubmission, AssessmentQuestion, AssessmentResource, AssessmentRiskLogic, AssessmentRule, AssessmentRuleWithOperands, AssessmentRuleWithoutOperands, AssessmentSection, Attribute, AttributeInput, AttributeKey, AttributeValue, AttributeValueInput, BULK_REQUEST_FILES, BusinessEntity, BusinessEntityInput, CHANGE_REQUEST_DATA_SILO_STATUS, CODE_PACKAGES, CONSENT_MANAGER_ANALYTICS_DATA, CONSENT_PARTITIONS, CONSENT_WORKFLOW_TRIGGERS, COOKIES, COOKIE_STATS, CREATE_CODE_PACKAGE, CREATE_CONSENT_EXPERIENCE, CREATE_CONSENT_MANAGER, CREATE_CONSENT_PARTITION, CREATE_CONSENT_UI_THEME, CREATE_CONSENT_UI_VARIANT, CREATE_CUSTOM_FUNCTION, CREATE_CUSTOM_FUNCTION_DATA_SILO, CREATE_DATA_FLOWS, CREATE_DATA_SILOS, CREATE_DATA_SUBJECT, CREATE_ENRICHER, CREATE_IDENTIFIER, CREATE_OR_UPDATE_CONSENT_WORKFLOW_TRIGGER, CREATE_PROCESSING_PURPOSE_SUB_CATEGORY, CUSTOM_FUNCTIONS, CUSTOM_FUNCTION_INTEGRATION_NAME, Catalog, ChunkMode, CodePackage, ColumnIdentifierMap, ColumnMetadataMap, ColumnPurposeMap, ConsentExperience, ConsentManageExperienceInput, ConsentManager, ConsentManagerInput, ConsentManagerMetric, ConsentPreferenceResponse, ConsentUiTheme, ConsentUiThemesQueryResponse, ConsentUiVariant, ConsentUiVariantsQueryResponse, ConsentWorkflowTrigger, ConsentWorkflowTriggerPurposeInput, ConsentWorkflowTriggerSyncInput, CookieInput, CookieOrder, CreatedApiKey, CustomFunction, CustomFunctionCodeContextInput, CustomFunctionConfigInput, CustomFunctionDataSilo, CustomFunctionDiff, CustomFunctionExecutionError, CustomFunctionExecutionLog, CustomFunctionExecutionResult, CustomFunctionSignPayload, CustomFunctionSyncOutcome, CustomFunctionSyncResult, CustomFunctionSyncTestResult, CustomFunctionTestPayload, CustomFunctionTestRunResult, CustomFunctionVersionPreview, DATAPOINT_EXPORT, DATA_FLOWS, DATA_FLOW_STATS, DATA_POINTS, DATA_POINT_COUNT, DATA_SILOS, DATA_SILOS_ENRICHED, DATA_SILO_EXPORT, DATA_SILO_SOMBRA, DATA_SUBJECTS, DELETE_COOKIES, DELETE_DATA_FLOWS, DELETE_DATA_SILOS, DELETE_PRIVACY_CENTER_FOOTER_LINKS, DEPLOYED_PRIVACY_CENTER_URL, DEPLOY_CONSENT_MANAGER, DataCategoryInput, DataFlowAttributeInput, DataFlowInput, DataFlowOrder, DataPoint, DataPointWithSubDataPoint, DataSilo, type DataSiloAttributeValue, DataSiloEnriched, DataSubCategory, DataSubject, DataSubjectInput, DataSubjectRef, DeletePreferenceRecordCliCsvRow, DeletePreferenceRecordsInput, DeletePreferenceRecordsResponse, DependedOnDataSiloInput, ENRICHERS, EXPERIENCES, Enricher, EnricherInput, ExternalUser, FETCH_CONSENT_MANAGER, FETCH_CONSENT_MANAGER_ID, FETCH_CONSENT_MANAGER_THEME, FETCH_CONSENT_UI_THEMES, FETCH_CONSENT_UI_VARIANTS, FETCH_PRIVACY_CENTER_ID, FailingPreferenceUpdates, FetchApiKeysInput, FileFormatState, FileMetadataState, FormattedAttribute, IMPORT_ONE_TRUST_ASSESSMENT_FORMS, INITIALIZER, Identifier, IdentifierInput, IdentifierMetadataForPreference, IdentifiersAndCreateMissingInput, IndexedCatalogs, Initializer, IntlMessageInput, LargeLanguageModel, Message, MetadataMapping, MonorepoPackageDefinition, NEW_IDENTIFIER_TYPES, NOOP_LOGGER, OWNER_FIELDS, OrganizationPreview, POLICIES, PRIVACY_CENTER, PROCESSING_PURPOSE_SUB_CATEGORIES, PROMOTE_CUSTOM_FUNCTION_VERSION, PURPOSES, ParentOrganizationTeam, PartitionInput, PendingSafePreferenceUpdates, PendingWithConflictPreferenceUpdates, Plugin, PluginResponse, Policy, PolicyInput, PreferenceAccessTokenInput, PreferenceAccessTokenInputWithIndex, PreferenceIdentifier, PreferenceOptionValue, PreferenceOptionValueInput, PreferenceState, PreferenceTopic, type PreferenceTopicSyncInput, PreferenceUpdateMap, PreferenceUploadReferenceData, PreferencesQueryFilter, PrivacyCenter, PrivacyCenterChildOrganization, PrivacyCenterFooterLink, PrivacyCenterFooterLinkIcon, PrivacyCenterFooterLinkInput, PrivacyCenterInput, ProcessingActivity, ProcessingActivityInput, ProcessingPurposeInput, ProcessingPurposeSubCategory, PromptThread, Purpose, type PurposeInput, PurposeRowMapping, PurposeWithPreferences, REDUCED_REQUESTS_FOR_DATA_SILO_COUNT, REMOVE_REQUEST_IDENTIFIERS, REQUEST_DATA_SILOS, REQUEST_ENRICHERS, REQUEST_FILES, REQUEST_IDENTIFIERS, RETRY_REQUEST_DATA_SILO, RETRY_REQUEST_ENRICHER, RETRY_TRANSIENT_MSGS, RUN_CUSTOM_FUNCTION, Region, RegionInput, Repository, RepositoryInput, RequestDataSilo, RequestDataSiloFilters, RequestEnricher, RequestFile, RequestFileCursor, RequestFileResponse, RequestIdentifier, RequestIdentifierMetadata, RequestIdentifiersResponse, RequestUploadReceipts, RetentionSchedule, RetryOptions, RiskCategory, RiskFramework, RiskLevel, RiskMatrix, RiskMatrixColumn, RiskMatrixRow, SERVICE_FIELDS, SKIP_REQUEST_ENRICHER, SOMBRA_VERSION, SUB_DATA_POINTS, SUB_DATA_POINTS_COUNT, SUB_DATA_POINTS_WITH_GUESSES, SYNC_ATTRIBUTE_TYPES, SignedCustomFunctionCode, SignedCustomFunctionCodeContext, SignedCustomFunctionJwts, SiloDiscoveryRawResult, SiloDiscoveryResult, SkippedPreferenceUpdates, SoftwareDevelopmentKit, SoftwareDevelopmentKitInput, SubDataPoint, SubDataPointCategory, SubDataPointPurpose, SyncActionInput, SyncPurposesResult, SyncTemplateInput, SyncedConsentUiTheme, SyncedConsentUiVariant, TEAM_FIELDS, TOGGLE_CONSENT_PRECEDENCE, TOGGLE_DATA_SUBJECT, TOGGLE_TELEMETRY_PARTITION_STRATEGY, TOGGLE_UNKNOWN_COOKIE_POLICY, TOGGLE_UNKNOWN_REQUEST_POLICY, TRACKING_PURPOSE_FIELDS, Team, TeamInput, Template, TranscendAttributeValueGql, TranscendCliAirgapBundleAggregateAnalyticsResponse, TranscendCliAirgapBundleTimeseriesAnalyticsResponse, TranscendCliConsentPartitionsResponse, TranscendCliCookieStatsResponse, TranscendCliCookiesResponse, TranscendCliCreateConsentExperienceResponse, TranscendCliCreateConsentPartitionResponse, TranscendCliCreateDataFlowsResponse, TranscendCliDataFlowStatsResponse, TranscendCliDataFlowsResponse, TranscendCliDeleteCookiesResponse, TranscendCliDeleteDataFlowsResponse, TranscendCliExperiencesResponse, TranscendCliFetchConsentManagerIdResponse, TranscendCliFetchConsentManagerResponse, TranscendCliFetchConsentManagerThemeResponse, TranscendCliPurposesResponse, TranscendCliUpdateConsentExperienceResponse, TranscendCliUpdateDataFlowsResponse, TranscendCliUpdateOrCreateCookiesResponse, TranscendClientMutationIdResponse, TranscendConsentManagerConfigGql, TranscendConsentManagerGql, TranscendConsentManagerThemeGql, TranscendConsentPartitionGql, TranscendCookieDomainGql, TranscendCookieGql, TranscendCookieServiceGql, TranscendDataFlowGql, TranscendExperienceGql, TranscendExperiencePurposeGql, TranscendExperienceRegionGql, TranscendMappedDataSiloGql, TranscendOwnerGql, TranscendPreferenceTopicGql, TranscendPreferenceTopicTitle, TranscendPurposeGql, TranscendTeamGql, TranscendTrackerStatsGql, TranscendTrackingPurposeGql, TranscendUpdateCookieInputGql, TranscendUpdateDataFlowInputGql, UPDATE_CODE_PACKAGES, UPDATE_CONSENT_EXPERIENCE, UPDATE_CONSENT_MANAGER_DOMAINS, UPDATE_CONSENT_MANAGER_PARTITION, UPDATE_CONSENT_MANAGER_THEME, UPDATE_CONSENT_MANAGER_TO_LATEST, UPDATE_CONSENT_MANAGER_VERSION, UPDATE_CONSENT_UI_THEME, UPDATE_CONSENT_UI_VARIANT, UPDATE_DATA_FLOWS, UPDATE_DATA_SILOS, UPDATE_DATA_SUBJECT, UPDATE_ENRICHER, UPDATE_IDENTIFIER, UPDATE_LOAD_OPTIONS, UPDATE_OR_CREATE_COOKIES, UPDATE_OR_CREATE_DATA_POINT, UPDATE_POLICIES, UPDATE_PRIVACY_CENTER, UPDATE_PRIVACY_CENTER_FOOTER_LINKS, UPDATE_PROCESSING_PURPOSE_SUB_CATEGORIES, UPDATE_STANDALONE_CUSTOM_FUNCTION, User, UserPreview, UserRole, Vendor, VendorInput, WorkflowConfigMatchInput, WorkflowConfigMatchResolution, WorkflowConfigNode, WorkflowConfigSummary, WorkflowConfigSyncInput, addMessagesToPromptRun, assumeRole, buildConsentChunks, buildCustomFunctionSignPayload, buildTranscendGraphQLClient, buildTranscendGraphQLClientGeneric, buildTriggerConditionFromPurposes, checkIfPendingPreferenceUpdatesAreNoOp, checkIfPendingPreferenceUpdatesCauseConflict, consentWindowHasAny, convertToDataSubjectAllowlist, convertToDataSubjectBlockList, createActionItemCollection, createActionItems, createAgent, createAgentFile, createAgentFunction, createApiKey, createBusinessEntity, createCustomFunctionDataSilo, createDataCategory, createDataFlows, createDataSubject, createMonorepoPackageDefinition, createOrUpdatePreferenceOptionValues, createPreferenceAccessTokens, createProcessingPurpose, createRepository, createSoftwareDevelopmentKit, createSombraGotInstance, createTeam, createTranscendConsentGotInstance, createVendor, decodeJwtPayload, deleteApiKey, deleteDataSilo, deployConsentManager, didCustomFunctionTestPass, diffCustomFunctionCode, fetchActiveSiloDiscoPlugin, fetchAirgapBundleAggregateAnalytics, fetchAirgapBundleTimeseriesAnalytics, fetchAllActionItemCollections, fetchAllActionItems, fetchAllActions, fetchAllAgentFiles, fetchAllAgentFunctions, fetchAllAgents, fetchAllApiKeys, fetchAllAssessments, fetchAllAttributeValues, fetchAllAttributes, fetchAllBusinessEntities, fetchAllCatalogs, fetchAllCodePackages, fetchAllConsentWorkflowTriggers, fetchAllCookies, fetchAllCustomFunctions, fetchAllDataCategories, fetchAllDataFlows, fetchAllDataPoints, fetchAllDataSilos, fetchAllDataSubjects, fetchAllEnrichers, fetchAllIdentifiers, fetchAllLargeLanguageModels, fetchAllMessages, fetchAllPolicies, fetchAllPreferenceOptionValues, fetchAllPreferenceTopics, fetchAllPrivacyCenters, fetchAllProcessingActivities, fetchAllProcessingPurposes, fetchAllPromptThreads, fetchAllPurposes, fetchAllPurposesAndPreferences, fetchAllRepositories, fetchAllRequestAttributeKeys, fetchAllRequestEnrichers, fetchAllRequestIdentifierMetadata, fetchAllRequestIdentifiers, fetchAllSiloDiscoveryResults, fetchAllSoftwareDevelopmentKits, fetchAllSubDataPoints, fetchAllTeams, fetchAllTemplates, fetchAllUsers, fetchAllVendors, fetchAllWorkflowConfigs, fetchAndIndexCatalogs, fetchApiKeys, fetchConsentManager, fetchConsentManagerAnalyticsData, fetchConsentManagerExperiences, fetchConsentManagerId, fetchConsentManagerTheme, fetchConsentPreferences, fetchConsentPreferencesChunked, fetchConsentThemes, fetchConsentVariants, fetchEnrichedDataSilos, fetchIdentifiersAndCreateMissing, fetchParentOrganizationTeams, fetchPartitions, fetchPrivacyCenterId, fetchPrivacyCenterUrl, fetchRequestDataSilo, fetchRequestDataSilos, fetchRequestDataSilosCount, fetchRequestFilesForRequest, findEarliestDayWithData, findLatestDayWithData, formatAttributeValues, formatRegions, getBoundsFromConsentFilter, getComparisonTimeForRecord, getPreferenceIdentifiersFromRow, getPreferenceMetadataFromRow, getPreferenceUpdatesFromRow, getPreferencesForIdentifiers, getUniquePreferenceIdentifierNamesFromRow, getWorkflowConfigDisplayTitle, inferPolicyTypeFromTitle, injectDataSiloIntoDsrTestPayload, isConsentWorkflowTriggerV2Mode, isTransientError, iterateConsentPages, loadReferenceData, loginUser, makeGraphQLRequest, parseAssessmentDisplayLogic, parseAssessmentRiskLogic, parsePurposesFromTriggerCondition, pickConsentChunkMode, resolveDisplayedChildOrganizationIds, resolveEffectiveSombraId, resolveExistingCustomFunction, resolveParentTeamIdsByName, resolvePrimarySombraId, resolveWorkflowConfigByTitle, resolveWorkflowConfigMatch, resolveWorkflowTitleFromId, retryRequestEnricher, runCustomFunctionTest, setResourceAttributes, signCustomFunctionCode, syncAction, syncActionItemCollections, syncActionItems, syncAgentFiles, syncAgentFunctions, syncAgents, syncAttribute, syncBusinessEntities, syncConsentManager, syncConsentManagerExperiences, syncConsentUiThemes, syncConsentUiVariants, syncConsentWorkflowTriggers, syncCookies, syncCustomFunction, syncDataCategories, syncDataFlows, syncDataSiloDependencies, syncDataSubject, syncEnricher, syncIdentifier, syncIntlMessages, syncPartitions, syncPolicies, syncPreferenceOptionValues, syncPreferenceTopics, syncPrivacyCenter, syncPrivacyCenterFooterLinks, syncProcessingActivities, syncProcessingPurposes, syncPurposes, syncRepositories, syncSoftwareDevelopmentKits, syncTeams, syncTemplate, syncVendors, syncWorkflowConfigs, transformPreferenceRecordToCsv, updateActionItem, updateActionItemCollection, updateAgentFiles, updateAgentFunctions, updateAgents, updateBusinessEntities, updateConsentManagerToLatest, updateDataCategories, updateDataFlows, updateIntlMessages, updateOrCreateCookies, updatePolicies, updateProcessingPurposes, updateRepositories, updateSoftwareDevelopmentKits, updateTeam, updateVendors, uploadSiloDiscoveryResults, validateConsentWorkflowTriggerMode, validateSombraVersion, withTransientRetry, workflowConfigInputLabel, workflowConfigMatchKey, workflowRegionListKey };
 //# sourceMappingURL=index.d.mts.map