@gooddata/sdk-model 11.40.0-alpha.2 → 11.40.0-alpha.4

package/esm/accessControl/index.d.ts

@@ -163,6 +163,13 @@ export declare const isUserGroupAccessGrantee: (obj: unknown) => obj is IUserGro
  * @public
  */
 export type AccessGranularPermission = "VIEW" | "EDIT" | "SHARE";
+/**
+ * Provenance of a granted permission — granted directly to the grantee,
+ * or inherited from a group or rule.
+ *
+ * @alpha
+ */
+export type PermissionSource = "direct" | "indirect";
 /**
  * Access grantee specification with granular permissions.
  *
@@ -177,6 +184,15 @@ export interface IGranteeGranularity {
      * Permissions granted by inheritance
      */
     inheritedPermissions: AccessGranularPermission[];
+    /**
+     * Optional per-permission provenance, positionally aligned with
+     * {@link IGranteeGranularity.permissions}. When present, entry `i` describes
+     * how `permissions[i]` was granted. Backends that don't track this omit
+     * the field.
+     *
+     * @alpha
+     */
+    permissionSources?: PermissionSource[];
 }
 /**
  * User access grantee specification with granular permissions.

package/esm/accessControl/index.js

@@ -1,4 +1,4 @@
-// (C) 2021-2025 GoodData Corporation
+// (C) 2021-2026 GoodData Corporation
 import { isEmpty } from "lodash-es";
 /**
  * Tests whether the provided object is an instance of {@link IUserAccess}.

package/esm/accessControl/objectPermissions.d.ts

@@ -0,0 +1,23 @@
+import { type AccessGranteeDetail } from "./index.js";
+/**
+ * Catalog object kinds that support per-object access management.
+ *
+ * @alpha
+ */
+export type ObjectPermissionsObjectKind = "attribute" | "fact" | "label";
+/**
+ * Tests whether the provided value is an {@link ObjectPermissionsObjectKind}.
+ *
+ * @param k - value to test
+ * @alpha
+ */
+export declare const isObjectPermissionsObjectKind: (k: unknown) => k is ObjectPermissionsObjectKind;
+/**
+ * Current access state for a single object: a flat list of grants. Grants reuse
+ * the shared {@link AccessGranteeDetail} union.
+ *
+ * @alpha
+ */
+export interface IObjectAccessList {
+    grants: AccessGranteeDetail[];
+}

package/esm/accessControl/objectPermissions.js

@@ -0,0 +1,10 @@
+// (C) 2026 GoodData Corporation
+/**
+ * Tests whether the provided value is an {@link ObjectPermissionsObjectKind}.
+ *
+ * @param k - value to test
+ * @alpha
+ */
+export const isObjectPermissionsObjectKind = (k) => {
+    return k === "attribute" || k === "fact" || k === "label";
+};

package/esm/dataSources/index.d.ts

@@ -1,7 +1,7 @@
 /**
  * @alpha
  */
-export type DataSourceType = "POSTGRESQL" | "REDSHIFT" | "VERTICA" | "SNOWFLAKE" | "ADS" | "BIGQUERY" | "MSSQL" | "PRESTO" | "DREMIO" | "DRILL" | "GREENPLUM" | "AZURESQL" | "SYNAPSESQL" | "DATABRICKS" | "GDSTORAGE" | "CLICKHOUSE" | "CRATEDB" | "MYSQL" | "MARIADB" | "ORACLE" | "PINOT" | "STARROCKS" | "ATHENA" | "SINGLESTORE" | "MOTHERDUCK" | "MONGODB" | "FLEXCONNECT" | "AILAKEHOUSE";
+export type DataSourceType = "POSTGRESQL" | "REDSHIFT" | "VERTICA" | "SNOWFLAKE" | "ADS" | "BIGQUERY" | "MSSQL" | "PRESTO" | "DREMIO" | "DRILL" | "GREENPLUM" | "AZURESQL" | "SYNAPSESQL" | "DATABRICKS" | "GDSTORAGE" | "CLICKHOUSE" | "CRATEDB" | "MYSQL" | "MARIADB" | "ORACLE" | "PINOT" | "DENODO" | "STARROCKS" | "ATHENA" | "SINGLESTORE" | "MOTHERDUCK" | "MONGODB" | "FLEXCONNECT" | "AILAKEHOUSE";
 /**
  * @alpha
  */

package/esm/index.d.ts

@@ -83,7 +83,8 @@ export type { IWorkspaceUserGroup } from "./userGroup/index.js";
 export type { ThemeFontUri, ThemeColor, IThemeColorFamily, IThemeComplementaryPalette, IThemeWidgetTitle, IThemeTypography, IThemeFontsDef, IThemePalette, IThemeKpi, IThemeKpiValue, IThemeChart, IThemeTable, ITheme, IThemeAnalyticalDesigner, IThemeAnalyticalDesignerTitle, IThemeButton, IThemeDashboard, IThemeDashboardContent, IThemeDashboardContentKpi, IThemeDashboardContentWidget, IThemeDashboardEditPanel, IThemeDashboardFilterBar, IThemeDashboardFilterBarButton, IThemeDashboardNavigation, IThemeDashboardNavigationItem, IThemeDashboardNavigationTitle, IThemeDashboardSection, IThemeDashboardSectionDescription, IThemeDashboardSectionTitle, IThemeDashboardTitle, IThemeMetadataObject, IThemeDefinition, IThemeModal, IThemeModalTitle, IThemeTooltip, IThemeImages, IThemeMessage, IThemeMessageVariant, IThemeToastMessage, IThemeToastMessageVariant, IThemeHeader, ImageUri, IThemeAxis, IThemeChartTooltip, IThemeDataLabel, ThemeDashboardDensity, } from "./theme/index.js";
 export type { IWorkspacePermissions, WorkspacePermission } from "./permissions/index.js";
 export { type DataValue, type ForecastDataValue, type IGeoJsonFeature, type IMeasureDescriptor, type IMeasureDescriptorObject, type IMeasureDescriptorItem, type IDimensionItemDescriptor, type IDimensionDescriptor, type IAttributeHeaderFormOf, type IAttributeDescriptorBody, type IAttributeDescriptor, type IMeasureGroupDescriptor, type IResultAttributeHeader, type IResultHeader, type IResultMeasureHeader, type IResultAttributeHeaderItem, type IResultMeasureHeaderItem, type IResultTotalHeader, type IResultTotalHeaderItem, type ITotalDescriptor, type ITotalDescriptorItem, type IResultWarning, type IColorDescriptor, type IColorDescriptorItem, isColorDescriptor, isAttributeDescriptor, isMeasureGroupDescriptor, isTotalDescriptor, isMeasureDescriptor, isResultAttributeHeader, isResultMeasureHeader, isResultTotalHeader, resultHeaderName, attributeDescriptorLocalId, attributeDescriptorName, geoFeatureId, } from "./execution/results/index.js";
-export { type AccessGranteeDetail, type IAccessGrantee, type IUserAccess, type IUserAccessGrantee, type IUserGroupAccess, type IUserGroupAccessGrantee, type IGranularAccessGrantee, type AccessGranularPermission, type IGranteeGranularity, type IAvailableAccessGrantee, type IAvailableUserAccessGrantee, type IAvailableUserGroupAccessGrantee, type IGranularUserAccess, type IGranularUserGroupAccess, type IGranularRulesAccess, type IGranularUserAccessGrantee, type IGranularUserGroupAccessGrantee, type IGranularRulesAccessGrantee, type WorkspaceAccessPermission, type IWorkspaceAccess, type IUserWorkspaceAccessGrantee, type IUserGroupWorkspaceAccessGrantee, isUserAccess, isUserAccessGrantee, isUserGroupAccess, isUserGroupAccessGrantee, isGranularAccess, isAvailableUserGroupAccessGrantee, isAvailableUserAccessGrantee, isGranularAccessGrantee, isGranularUserAccessGrantee, isGranularUserGroupAccessGrantee, isGranularUserAccess, isGranularUserGroupAccess, isGranularRulesAccessGrantee, isUserWorkspaceAccessGrantee, isUserGroupWorkspaceAccessGrantee, } from "./accessControl/index.js";
+export { type AccessGranteeDetail, type IAccessGrantee, type IUserAccess, type IUserAccessGrantee, type IUserGroupAccess, type IUserGroupAccessGrantee, type IGranularAccessGrantee, type AccessGranularPermission, type PermissionSource, type IGranteeGranularity, type IAvailableAccessGrantee, type IAvailableUserAccessGrantee, type IAvailableUserGroupAccessGrantee, type IGranularUserAccess, type IGranularUserGroupAccess, type IGranularRulesAccess, type IGranularUserAccessGrantee, type IGranularUserGroupAccessGrantee, type IGranularRulesAccessGrantee, type WorkspaceAccessPermission, type IWorkspaceAccess, type IUserWorkspaceAccessGrantee, type IUserGroupWorkspaceAccessGrantee, isUserAccess, isUserAccessGrantee, isUserGroupAccess, isUserGroupAccessGrantee, isGranularAccess, isAvailableUserGroupAccessGrantee, isAvailableUserAccessGrantee, isGranularAccessGrantee, isGranularUserAccessGrantee, isGranularUserGroupAccessGrantee, isGranularUserAccess, isGranularUserGroupAccess, isGranularRulesAccessGrantee, isUserWorkspaceAccessGrantee, isUserGroupWorkspaceAccessGrantee, } from "./accessControl/index.js";
+export { type ObjectPermissionsObjectKind, isObjectPermissionsObjectKind, type IObjectAccessList, } from "./accessControl/objectPermissions.js";
 export { type IOrganizationDescriptor, type IOrganizationDescriptorUpdate, type IWorkspacePermissionAssignment, type IAssignedWorkspace, type AssignedWorkspacePermission, type IOrganizationPermissionAssignment, type OrganizationPermissionAssignment, type IOrganizationAssignee, type AssignedDataSourcePermission, type IAssignedDataSource, type IDataSourcePermissionAssignment, AssignedWorkspacePermissionValue, OrganizationPermissionAssignmentValue, AssignedDataSourcePermissionValue, isAssignedWorkspacePermission, } from "./organization/index.js";
 export type { IEntitlementsName, IEntitlementDescriptor } from "./entitlements/index.js";
 export type { DataSourceType, IDataSourceIdentifierDescriptor } from "./dataSources/index.js";

package/esm/index.js

@@ -72,6 +72,7 @@ export { DashboardParameterModeValues, isDashboardParameter, } from "./dashboard
 export { isSeparators, } from "./settings/settings.js";
 export { isColorDescriptor, isAttributeDescriptor, isMeasureGroupDescriptor, isTotalDescriptor, isMeasureDescriptor, isResultAttributeHeader, isResultMeasureHeader, isResultTotalHeader, resultHeaderName, attributeDescriptorLocalId, attributeDescriptorName, geoFeatureId, } from "./execution/results/index.js";
 export { isUserAccess, isUserAccessGrantee, isUserGroupAccess, isUserGroupAccessGrantee, isGranularAccess, isAvailableUserGroupAccessGrantee, isAvailableUserAccessGrantee, isGranularAccessGrantee, isGranularUserAccessGrantee, isGranularUserGroupAccessGrantee, isGranularUserAccess, isGranularUserGroupAccess, isGranularRulesAccessGrantee, isUserWorkspaceAccessGrantee, isUserGroupWorkspaceAccessGrantee, } from "./accessControl/index.js";
+export { isObjectPermissionsObjectKind, } from "./accessControl/objectPermissions.js";
 export { AssignedWorkspacePermissionValue, OrganizationPermissionAssignmentValue, AssignedDataSourcePermissionValue, isAssignedWorkspacePermission, } from "./organization/index.js";
 export { exportDefinitionTitle, exportDefinitionCreated, exportDefinitionUpdated, isExportDefinitionDashboardRequestPayload, isExportDefinitionVisualizationObjectRequestPayload, } from "./exports/index.js";
 export { CSV_DELIMITER_PRESETS, DEFAULT_CSV_DELIMITER, DEFAULT_CSV_DELIMITER_PRESET_ID, getCsvDelimiterValidationError, getCsvDelimiterPreset, getCsvDelimiterValue, getCsvDelimiterState, } from "./exports/csvDelimiter.js";

package/esm/sdk-model.d.ts

@@ -1269,7 +1269,7 @@ export declare type DatasetLoadStatus = "RUNNING" | "OK" | "ERROR" | "CANCELLED"
 /**
  * @alpha
  */
-export declare type DataSourceType = "POSTGRESQL" | "REDSHIFT" | "VERTICA" | "SNOWFLAKE" | "ADS" | "BIGQUERY" | "MSSQL" | "PRESTO" | "DREMIO" | "DRILL" | "GREENPLUM" | "AZURESQL" | "SYNAPSESQL" | "DATABRICKS" | "GDSTORAGE" | "CLICKHOUSE" | "CRATEDB" | "MYSQL" | "MARIADB" | "ORACLE" | "PINOT" | "STARROCKS" | "ATHENA" | "SINGLESTORE" | "MOTHERDUCK" | "MONGODB" | "FLEXCONNECT" | "AILAKEHOUSE";
+export declare type DataSourceType = "POSTGRESQL" | "REDSHIFT" | "VERTICA" | "SNOWFLAKE" | "ADS" | "BIGQUERY" | "MSSQL" | "PRESTO" | "DREMIO" | "DRILL" | "GREENPLUM" | "AZURESQL" | "SYNAPSESQL" | "DATABRICKS" | "GDSTORAGE" | "CLICKHOUSE" | "CRATEDB" | "MYSQL" | "MARIADB" | "ORACLE" | "PINOT" | "DENODO" | "STARROCKS" | "ATHENA" | "SINGLESTORE" | "MOTHERDUCK" | "MONGODB" | "FLEXCONNECT" | "AILAKEHOUSE";
 
 /**
  * Single calculated data value.
@@ -6978,6 +6978,17 @@ export declare interface IFeatureFlags {
      * Enables Metric Editor loading as a remote module in the host application.
      */
     enableShellApplication_metricEditor?: boolean;
+    /**
+     * Per-app sub-flag under enableShellApplication. When true (and
+     * enableShellApplication is also true), Analytical Designer runs as a
+     * pluggable app inside the host. When false, the legacy standalone AD
+     * served at the /analyze hash route is rendered instead.
+     */
+    enableShellApplication_analyticalDesigner?: boolean;
+    /**
+     * Enables Resizable Dashboard sidebar in edit mode.
+     */
+    enableDashboardSidebarResize?: boolean;
 }
 
 /**
@@ -7672,6 +7683,15 @@ export declare interface IGranteeGranularity {
      * Permissions granted by inheritance
      */
     inheritedPermissions: AccessGranularPermission[];
+    /**
+     * Optional per-permission provenance, positionally aligned with
+     * {@link IGranteeGranularity.permissions}. When present, entry `i` describes
+     * how `permissions[i]` was granted. Backends that don't track this omit
+     * the field.
+     *
+     * @alpha
+     */
+    permissionSources?: PermissionSource[];
 }
 
 /**
@@ -9824,6 +9844,16 @@ export declare interface INumberParameterDefinition {
     constraints?: INumberParameterConstraints;
 }
 
+/**
+ * Current access state for a single object: a flat list of grants. Grants reuse
+ * the shared {@link AccessGranteeDetail} union.
+ *
+ * @alpha
+ */
+export declare interface IObjectAccessList {
+    grants: AccessGranteeDetail[];
+}
+
 /**
  * Object certification data.
  *
@@ -12408,6 +12438,14 @@ export declare function isNotificationChannelMetadataObjectDefinition(obj: unkno
  */
 export declare function isNumberParameterDefinition(def: IParameterDefinition): def is INumberParameterDefinition;
 
+/**
+ * Tests whether the provided value is an {@link ObjectPermissionsObjectKind}.
+ *
+ * @param k - value to test
+ * @alpha
+ */
+export declare const isObjectPermissionsObjectKind: (k: unknown) => k is ObjectPermissionsObjectKind;
+
 /**
  * Type guard checking whether object is an Identifier Reference or an URI reference.
  *
@@ -16211,6 +16249,13 @@ export declare type NotificationType = "alertNotification" | "scheduleNotificati
  */
 export declare type ObjectOrigin = "ALL" | "PARENTS" | "NATIVE";
 
+/**
+ * Catalog object kinds that support per-object access management.
+ *
+ * @alpha
+ */
+export declare type ObjectPermissionsObjectKind = "attribute" | "fact" | "label";
+
 /**
  * Metadata object types
  *
@@ -16268,6 +16313,14 @@ export declare const OrganizationPermissionAssignmentValue: {
     readonly BASE_UI_ACCESS: "BASE_UI_ACCESS";
 };
 
+/**
+ * Provenance of a granted permission — granted directly to the grantee,
+ * or inherited from a group or rule.
+ *
+ * @alpha
+ */
+export declare type PermissionSource = "direct" | "indirect";
+
 /**
  * Indicates current platform edition.
  *

package/esm/settings/settings.d.ts

@@ -1018,4 +1018,15 @@ export interface IFeatureFlags {
      * Enables Metric Editor loading as a remote module in the host application.
      */
     enableShellApplication_metricEditor?: boolean;
+    /**
+     * Per-app sub-flag under enableShellApplication. When true (and
+     * enableShellApplication is also true), Analytical Designer runs as a
+     * pluggable app inside the host. When false, the legacy standalone AD
+     * served at the /analyze hash route is rendered instead.
+     */
+    enableShellApplication_analyticalDesigner?: boolean;
+    /**
+     * Enables Resizable Dashboard sidebar in edit mode.
+     */
+    enableDashboardSidebarResize?: boolean;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gooddata/sdk-model",
-  "version": "11.40.0-alpha.2",
+  "version": "11.40.0-alpha.4",
   "description": "GoodData Model definitions used by UI components and Backend SPI",
   "license": "MIT",
   "author": "GoodData",
@@ -52,13 +52,13 @@
     "eslint-plugin-no-barrel-files": "1.2.2",
     "eslint-plugin-sonarjs": "3.0.6",
     "npm-run-all": "^4.1.5",
-    "oxfmt": "0.45.0",
-    "oxlint": "^1.43.0",
-    "oxlint-tsgolint": "0.11.4",
+    "oxfmt": "0.52.0",
+    "oxlint": "1.51.0",
+    "oxlint-tsgolint": "0.15.0",
     "typescript": "5.9.3",
-    "vitest": "4.1.0",
-    "@gooddata/eslint-config": "11.40.0-alpha.2",
-    "@gooddata/oxlint-config": "11.40.0-alpha.2"
+    "vitest": "4.1.8",
+    "@gooddata/eslint-config": "11.40.0-alpha.4",
+    "@gooddata/oxlint-config": "11.40.0-alpha.4"
   },
   "scripts": {
     "_phase:build": "npm run build",