@gooddata/sdk-backend-tiger 11.41.0-alpha.0 → 11.41.0-alpha.1

package/esm/__version.d.ts

@@ -1,3 +1,3 @@
-export declare const LIB_VERSION = "11.41.0-alpha.0";
+export declare const LIB_VERSION = "11.41.0-alpha.1";
 export declare const LIB_DESCRIPTION = "GoodData Backend SPI implementation for GoodData Cloud and GoodData.CN";
 export declare const LIB_NAME = "@gooddata/sdk-backend-tiger";

package/esm/__version.js

@@ -1,5 +1,5 @@
 // (C) 2021 GoodData Corporation
 // DO NOT CHANGE THIS FILE, IT IS RE-GENERATED ON EVERY BUILD
-export const LIB_VERSION = "11.41.0-alpha.0";
+export const LIB_VERSION = "11.41.0-alpha.1";
 export const LIB_DESCRIPTION = "GoodData Backend SPI implementation for GoodData Cloud and GoodData.CN";
 export const LIB_NAME = "@gooddata/sdk-backend-tiger";

package/esm/backend/features/feature.js

@@ -174,6 +174,8 @@ export function mapFeatures(features) {
         ...loadFeature(features, TigerFeaturesNames.EnableMetricEditorRemoteModule, "enableShellApplication_metricEditor", "BOOLEAN", FeatureFlagsValues.enableShellApplication_metricEditor),
         ...loadFeature(features, TigerFeaturesNames.EnableAnalyticalDesignerRemoteModule, "enableShellApplication_analyticalDesigner", "BOOLEAN", FeatureFlagsValues.enableShellApplication_analyticalDesigner),
         ...loadFeature(features, TigerFeaturesNames.EnableDashboardSidebarResize, "enableDashboardSidebarResize", "BOOLEAN", FeatureFlagsValues.enableDashboardSidebarResize),
+        ...loadFeature(features, TigerFeaturesNames.EnableIpAllowlistsUi, "enableIpAllowlistsUi", "BOOLEAN", FeatureFlagsValues.enableIpAllowlistsUi),
+        ...loadFeature(features, TigerFeaturesNames.EnableLdmModelerRemoteModule, "enableShellApplication_ldmModeler", "BOOLEAN", FeatureFlagsValues.enableShellApplication_ldmModeler),
     };
 }
 function loadFeature(features, feature, name, outputType, possibleValues) {

package/esm/backend/organization/fromBackend/userConvertor.js

@@ -67,6 +67,7 @@ export const convertEntityUserToOrganizationUser = (user) => {
         email: user.attributes?.email,
         fullName: constructFullName(firstName, lastName),
         isOrganizationAdmin: false,
+        isSystemAccount: user.attributes?.systemAccount ?? false,
         assignedUserGroups: [],
         assignedWorkspaces: [],
         assignedDataSources: [],
@@ -78,6 +79,7 @@ export const convertOrganizationUser = (user) => ({
     email: user.email,
     fullName: user.name,
     isOrganizationAdmin: user.organizationAdmin,
+    isSystemAccount: user.systemAccount ?? false,
     assignedUserGroups: user.userGroups.map(convertUserGroupIdentifier),
     assignedWorkspaces: user.workspaces.map((ws) => convertWorkspacePermissionsAssignment(user.id, "user", ws)),
     assignedDataSources: user.dataSources.map((ds) => convertDataSourcePermissionsAssignment(user.id, "user", ds)),

package/esm/backend/organization/index.d.ts

@@ -1,4 +1,4 @@
-import { type IOrganization, type IOrganizationAgentsService, type IOrganizationAutomationService, type IOrganizationExportTemplatesService, type IOrganizationGenAIService, type IOrganizationLlmProvidersService, type IOrganizationNotificationChannelService, type IOrganizationNotificationService, type IOrganizationPermissionService, type IOrganizationSettingsService, type IOrganizationStylingService, type IOrganizationUserService, type IOrganizations, type ISecuritySettingsService } from "@gooddata/sdk-backend-spi";
+import { type IOrganization, type IOrganizationAgentsService, type IOrganizationAutomationService, type IOrganizationExportTemplatesService, type IOrganizationGenAIService, type IOrganizationIpAllowlistService, type IOrganizationLlmProvidersService, type IOrganizationNotificationChannelService, type IOrganizationNotificationService, type IOrganizationPermissionService, type IOrganizationSettingsService, type IOrganizationStylingService, type IOrganizationUserService, type IOrganizations, type ISecuritySettingsService } from "@gooddata/sdk-backend-spi";
 import { type IOrganizationDescriptor, type IOrganizationDescriptorUpdate } from "@gooddata/sdk-model";
 import { type TigerAuthenticatedCallGuard } from "../../types/index.js";
 export declare class TigerOrganization implements IOrganization {
@@ -20,6 +20,7 @@ export declare class TigerOrganization implements IOrganization {
     agents(): IOrganizationAgentsService;
     genAI(): IOrganizationGenAIService;
     exportTemplates(): IOrganizationExportTemplatesService;
+    ipAllowlists(): IOrganizationIpAllowlistService;
 }
 export declare class TigerOrganizations implements IOrganizations {
     private readonly authCall;

package/esm/backend/organization/index.js

@@ -6,6 +6,7 @@ import { OrganizationAgentsService } from "./agents.js";
 import { TigerOrganizationAutomationService } from "./automations/index.js";
 import { OrganizationExportTemplatesService } from "./exportTemplates.js";
 import { TigerOrganizationGenAIService } from "./genAI/index.js";
+import { OrganizationIpAllowlistService } from "./ipAllowlists.js";
 import { OrganizationLlmProvidersService } from "./llmProviders.js";
 import { OrganizationNotificationChannelService } from "./notificationChannels.js";
 import { OrganizationNotificationService } from "./notifications.js";
@@ -138,6 +139,9 @@ export class TigerOrganization {
     exportTemplates() {
         return new OrganizationExportTemplatesService(this.authCall);
     }
+    ipAllowlists() {
+        return new OrganizationIpAllowlistService(this.authCall);
+    }
 }
 export class TigerOrganizations {
     authCall;

package/esm/backend/organization/ipAllowlists.d.ts

@@ -0,0 +1,11 @@
+import { type IOrganizationIpAllowlistService } from "@gooddata/sdk-backend-spi";
+import { type IIpAllowlist, type IIpAllowlistDefinition } from "@gooddata/sdk-model";
+import { type TigerAuthenticatedCallGuard } from "../../types/index.js";
+export declare class OrganizationIpAllowlistService implements IOrganizationIpAllowlistService {
+    readonly authCall: TigerAuthenticatedCallGuard;
+    constructor(authCall: TigerAuthenticatedCallGuard);
+    getAll(): Promise<IIpAllowlist[]>;
+    create(definition: IIpAllowlistDefinition): Promise<IIpAllowlist>;
+    update(definition: IIpAllowlistDefinition): Promise<IIpAllowlist>;
+    delete(id: string): Promise<void>;
+}

package/esm/backend/organization/ipAllowlists.js

@@ -0,0 +1,111 @@
+// (C) 2026 GoodData Corporation
+import { EntitiesApi_CreateEntityIpAllowlistPolicies, EntitiesApi_DeleteEntityIpAllowlistPolicies, EntitiesApi_GetAllEntitiesIpAllowlistPolicies, EntitiesApi_UpdateEntityIpAllowlistPolicies, } from "@gooddata/api-client-tiger/endpoints/entitiesObjects";
+import { UnexpectedError } from "@gooddata/sdk-backend-spi";
+const buildIncludedMaps = (included) => {
+    const usersById = new Map();
+    const userGroupsById = new Map();
+    for (const inc of included ?? []) {
+        if (inc.type === "user") {
+            usersById.set(inc.id, inc);
+        }
+        else if (inc.type === "userGroup") {
+            userGroupsById.set(inc.id, inc);
+        }
+    }
+    return { usersById, userGroupsById };
+};
+const resolveUser = (id, maps) => {
+    const attrs = maps.usersById.get(id)?.attributes;
+    const firstname = attrs?.firstname?.trim();
+    const lastname = attrs?.lastname?.trim();
+    const fullName = [firstname, lastname].filter(Boolean).join(" ") || undefined;
+    return {
+        id,
+        fullName,
+        email: attrs?.email,
+    };
+};
+const resolveUserGroup = (id, maps) => ({
+    id,
+    name: maps.userGroupsById.get(id)?.attributes?.name,
+});
+// Maps a policy resource (from the list or single-entity endpoints) plus the response's
+// resolved `included` users/groups into the SDK model. Shared by getAll/create/update.
+const mapPolicy = (item, maps) => {
+    const userIds = (item.relationships?.users?.data ?? []).map((u) => u.id);
+    const userGroupIds = (item.relationships?.userGroups?.data ?? []).map((g) => g.id);
+    return {
+        id: item.id,
+        allowedSources: item.attributes?.allowedSources ?? [],
+        userIds,
+        userGroupIds,
+        users: userIds.map((id) => resolveUser(id, maps)),
+        userGroups: userGroupIds.map((id) => resolveUserGroup(id, maps)),
+    };
+};
+// Builds the JSON:API request body shared by create/update.
+const buildPolicyDocument = (definition) => ({
+    data: {
+        id: definition.id,
+        type: "ipAllowlistPolicy",
+        attributes: {
+            allowedSources: definition.allowedSources,
+        },
+        relationships: {
+            users: {
+                data: definition.userIds.map((id) => ({ id, type: "user" })),
+            },
+            userGroups: {
+                data: definition.userGroupIds.map((id) => ({ id, type: "userGroup" })),
+            },
+        },
+    },
+});
+export class OrganizationIpAllowlistService {
+    authCall;
+    constructor(authCall) {
+        this.authCall = authCall;
+    }
+    getAll() {
+        return this.authCall(async (client) => {
+            const result = await EntitiesApi_GetAllEntitiesIpAllowlistPolicies(client.axios, client.basePath, 
+            // page size 200 (there should be a limit of 100 so this is sufficiently more)
+            // see IpAllowlistPolicyValidation.kt#L12-L15
+            { include: ["users", "userGroups"], size: 200 });
+            const maps = buildIncludedMaps(result.data?.included);
+            return (result.data?.data ?? []).map((item) => mapPolicy(item, maps));
+        });
+    }
+    create(definition) {
+        return this.authCall(async (client) => {
+            const result = await EntitiesApi_CreateEntityIpAllowlistPolicies(client.axios, client.basePath, {
+                include: ["users", "userGroups"],
+                jsonApiIpAllowlistPolicyInDocument: buildPolicyDocument(definition),
+            });
+            const created = result.data?.data;
+            if (!created) {
+                throw new UnexpectedError("Failed to create IP allowlist policy");
+            }
+            return mapPolicy(created, buildIncludedMaps(result.data?.included));
+        });
+    }
+    update(definition) {
+        return this.authCall(async (client) => {
+            const result = await EntitiesApi_UpdateEntityIpAllowlistPolicies(client.axios, client.basePath, {
+                id: definition.id,
+                include: ["users", "userGroups"],
+                jsonApiIpAllowlistPolicyInDocument: buildPolicyDocument(definition),
+            });
+            const updated = result.data?.data;
+            if (!updated) {
+                throw new UnexpectedError("Failed to update IP allowlist policy");
+            }
+            return mapPolicy(updated, buildIncludedMaps(result.data?.included));
+        });
+    }
+    delete(id) {
+        return this.authCall(async (client) => {
+            await EntitiesApi_DeleteEntityIpAllowlistPolicies(client.axios, client.basePath, { id });
+        });
+    }
+}

package/esm/backend/uiFeatures.d.ts

@@ -174,7 +174,9 @@ export declare enum TigerFeaturesNames {
     EnableRadarChart = "enableRadarChart",
     EnableMetricEditorRemoteModule = "enableShellApplication_metricEditor",
     EnableAnalyticalDesignerRemoteModule = "enableShellApplication_analyticalDesigner",
-    EnableDashboardSidebarResize = "enableDashboardSidebarResize"
+    EnableDashboardSidebarResize = "enableDashboardSidebarResize",
+    EnableIpAllowlistsUi = "enableIpAllowlistsUi",
+    EnableLdmModelerRemoteModule = "enableShellApplication_ldmModeler"
 }
 export type ITigerFeatureFlags = {
     dashboardEditModeDevRollout: (typeof FeatureFlagsValues)["dashboardEditModeDevRollout"][number];
@@ -348,6 +350,8 @@ export type ITigerFeatureFlags = {
     enableShellApplication_metricEditor: (typeof FeatureFlagsValues)["enableShellApplication_metricEditor"][number];
     enableShellApplication_analyticalDesigner: (typeof FeatureFlagsValues)["enableShellApplication_analyticalDesigner"][number];
     enableDashboardSidebarResize: (typeof FeatureFlagsValues)["enableDashboardSidebarResize"][number];
+    enableIpAllowlistsUi: (typeof FeatureFlagsValues)["enableIpAllowlistsUi"][number];
+    enableShellApplication_ldmModeler: (typeof FeatureFlagsValues)["enableShellApplication_ldmModeler"][number];
 };
 export declare const DefaultFeatureFlags: ITigerFeatureFlags;
 export declare const FeatureFlagsValues: {
@@ -523,4 +527,6 @@ export declare const FeatureFlagsValues: {
     enableShellApplication_metricEditor: readonly [true, false];
     enableShellApplication_analyticalDesigner: readonly [true, false];
     enableDashboardSidebarResize: readonly [true, false];
+    enableIpAllowlistsUi: readonly [false, true];
+    enableShellApplication_ldmModeler: readonly [true, false];
 };

package/esm/backend/uiFeatures.js

@@ -179,6 +179,8 @@ var TigerFeaturesNames;
     TigerFeaturesNames["EnableMetricEditorRemoteModule"] = "enableShellApplication_metricEditor";
     TigerFeaturesNames["EnableAnalyticalDesignerRemoteModule"] = "enableShellApplication_analyticalDesigner";
     TigerFeaturesNames["EnableDashboardSidebarResize"] = "enableDashboardSidebarResize";
+    TigerFeaturesNames["EnableIpAllowlistsUi"] = "enableIpAllowlistsUi";
+    TigerFeaturesNames["EnableLdmModelerRemoteModule"] = "enableShellApplication_ldmModeler";
 })(TigerFeaturesNames || (TigerFeaturesNames = {}));
 export const DefaultFeatureFlags = {
     dashboardEditModeDevRollout: true,
@@ -250,7 +252,7 @@ export const DefaultFeatureFlags = {
     enableAIDataSetting: false,
     enableAlertingRollout: false,
     enableDashboardFilterViews: true,
-    enableSystemAccountFiltering: false,
+    enableSystemAccountFiltering: true,
     enableCustomizedDashboardsWithoutPluginOverlay: true,
     enableNewInsightChangedPostMessageEvent: false,
     enableKDVisualizationSwitcher: true,
@@ -352,6 +354,8 @@ export const DefaultFeatureFlags = {
     enableShellApplication_metricEditor: false,
     enableShellApplication_analyticalDesigner: false,
     enableDashboardSidebarResize: false,
+    enableIpAllowlistsUi: false,
+    enableShellApplication_ldmModeler: false,
 };
 export const FeatureFlagsValues = {
     dashboardEditModeDevRollout: [true, false],
@@ -526,4 +530,6 @@ export const FeatureFlagsValues = {
     enableShellApplication_metricEditor: [true, false],
     enableShellApplication_analyticalDesigner: [true, false],
     enableDashboardSidebarResize: [true, false],
+    enableIpAllowlistsUi: [false, true],
+    enableShellApplication_ldmModeler: [true, false],
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gooddata/sdk-backend-tiger",
-  "version": "11.41.0-alpha.0",
+  "version": "11.41.0-alpha.1",
   "description": "GoodData Backend SPI implementation for GoodData Cloud and GoodData.CN",
   "license": "MIT",
   "author": "GoodData",
@@ -33,12 +33,12 @@
     "ts-invariant": "0.10.3",
     "tslib": "2.8.1",
     "uuid": "11.1.0",
-    "@gooddata/api-client-tiger": "11.41.0-alpha.0",
-    "@gooddata/sdk-backend-base": "11.41.0-alpha.0",
-    "@gooddata/sdk-backend-spi": "11.41.0-alpha.0",
-    "@gooddata/sdk-model": "11.41.0-alpha.0",
-    "@gooddata/sdk-code-convertors": "11.41.0-alpha.0",
-    "@gooddata/util": "11.41.0-alpha.0"
+    "@gooddata/api-client-tiger": "11.41.0-alpha.1",
+    "@gooddata/sdk-backend-base": "11.41.0-alpha.1",
+    "@gooddata/sdk-backend-spi": "11.41.0-alpha.1",
+    "@gooddata/sdk-code-convertors": "11.41.0-alpha.1",
+    "@gooddata/sdk-model": "11.41.0-alpha.1",
+    "@gooddata/util": "11.41.0-alpha.1"
   },
   "devDependencies": {
     "@gooddata/fixtures": "3.3.12",
@@ -65,10 +65,10 @@
     "oxlint-tsgolint": "0.15.0",
     "typescript": "5.9.3",
     "vitest": "4.1.8",
-    "@gooddata/catalog-export": "11.41.0-alpha.0",
-    "@gooddata/eslint-config": "11.41.0-alpha.0",
-    "@gooddata/oxlint-config": "11.41.0-alpha.0",
-    "@gooddata/reference-workspace": "11.41.0-alpha.0"
+    "@gooddata/catalog-export": "11.41.0-alpha.1",
+    "@gooddata/eslint-config": "11.41.0-alpha.1",
+    "@gooddata/oxlint-config": "11.41.0-alpha.1",
+    "@gooddata/reference-workspace": "11.41.0-alpha.1"
   },
   "scripts": {
     "_phase:build": "npm run build",