@keboola/api-client 18.0.0 → 19.0.0

package/dist/{backends-BgUzAQul.d.cts → backends-Bofq_Nr0.d.cts}

@@ -4,6 +4,8 @@ declare const AdminRole: {
     readonly ProductionManager: "productionManager";
     readonly Developer: "developer";
     readonly Reviewer: "reviewer";
+    readonly ReadOnly: "readOnly";
+    readonly Guest: "guest";
 };
 type AdminRole = (typeof AdminRole)[keyof typeof AdminRole];
 

package/dist/{backends-BgUzAQul.d.ts → backends-Bofq_Nr0.d.ts}

@@ -4,6 +4,8 @@ declare const AdminRole: {
     readonly ProductionManager: "productionManager";
     readonly Developer: "developer";
     readonly Reviewer: "reviewer";
+    readonly ReadOnly: "readOnly";
+    readonly Guest: "guest";
 };
 type AdminRole = (typeof AdminRole)[keyof typeof AdminRole];
 

package/dist/{chunk-Y5QJJWDQ.js → chunk-552FC4ZV.js}

@@ -4,9 +4,11 @@ var AdminRole = {
   Share: "share",
   ProductionManager: "productionManager",
   Developer: "developer",
-  Reviewer: "reviewer"
+  Reviewer: "reviewer",
+  ReadOnly: "readOnly",
+  Guest: "guest"
 };
 
 export { AdminRole };
-//# sourceMappingURL=chunk-Y5QJJWDQ.js.map
-//# sourceMappingURL=chunk-Y5QJJWDQ.js.map
+//# sourceMappingURL=chunk-552FC4ZV.js.map
+//# sourceMappingURL=chunk-552FC4ZV.js.map

package/dist/chunk-552FC4ZV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/constants/adminRoles.ts"],"names":[],"mappings":";AAAO,IAAM,SAAA,GAAY;AAAA,EACvB,KAAA,EAAO,OAAA;AAAA,EACP,KAAA,EAAO,OAAA;AAAA,EACP,iBAAA,EAAmB,mBAAA;AAAA,EACnB,SAAA,EAAW,WAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAO;AACT","file":"chunk-552FC4ZV.js","sourcesContent":["export const AdminRole = {\n  Admin: 'admin',\n  Share: 'share',\n  ProductionManager: 'productionManager',\n  Developer: 'developer',\n  Reviewer: 'reviewer',\n  ReadOnly: 'readOnly',\n  Guest: 'guest',\n} as const;\n\nexport type AdminRole = (typeof AdminRole)[keyof typeof AdminRole];\n"]}

package/dist/{chunk-NFA5ITNG.cjs → chunk-YXGBD4WP.cjs}

@@ -6,9 +6,11 @@ var AdminRole = {
   Share: "share",
   ProductionManager: "productionManager",
   Developer: "developer",
-  Reviewer: "reviewer"
+  Reviewer: "reviewer",
+  ReadOnly: "readOnly",
+  Guest: "guest"
 };
 
 exports.AdminRole = AdminRole;
-//# sourceMappingURL=chunk-NFA5ITNG.cjs.map
-//# sourceMappingURL=chunk-NFA5ITNG.cjs.map
+//# sourceMappingURL=chunk-YXGBD4WP.cjs.map
+//# sourceMappingURL=chunk-YXGBD4WP.cjs.map

package/dist/chunk-YXGBD4WP.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/constants/adminRoles.ts"],"names":[],"mappings":";;;AAAO,IAAM,SAAA,GAAY;AAAA,EACvB,KAAA,EAAO,OAAA;AAAA,EACP,KAAA,EAAO,OAAA;AAAA,EACP,iBAAA,EAAmB,mBAAA;AAAA,EACnB,SAAA,EAAW,WAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAO;AACT","file":"chunk-YXGBD4WP.cjs","sourcesContent":["export const AdminRole = {\n  Admin: 'admin',\n  Share: 'share',\n  ProductionManager: 'productionManager',\n  Developer: 'developer',\n  Reviewer: 'reviewer',\n  ReadOnly: 'readOnly',\n  Guest: 'guest',\n} as const;\n\nexport type AdminRole = (typeof AdminRole)[keyof typeof AdminRole];\n"]}

package/dist/constants/index.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkNFA5ITNG_cjs = require('../chunk-NFA5ITNG.cjs');
+var chunkYXGBD4WP_cjs = require('../chunk-YXGBD4WP.cjs');
 var chunk3FZHFTLG_cjs = require('../chunk-3FZHFTLG.cjs');
 var chunkTTPJSPZA_cjs = require('../chunk-TTPJSPZA.cjs');
 
@@ -151,7 +151,7 @@ var URLS = {
 
 Object.defineProperty(exports, "AdminRole", {
   enumerable: true,
-  get: function () { return chunkNFA5ITNG_cjs.AdminRole; }
+  get: function () { return chunkYXGBD4WP_cjs.AdminRole; }
 });
 Object.defineProperty(exports, "ProjectFeature", {
   enumerable: true,

package/dist/constants/index.d.cts

@@ -1,4 +1,4 @@
-export { A as AdminRole, B as Backend } from '../backends-BgUzAQul.cjs';
+export { A as AdminRole, B as Backend } from '../backends-Bofq_Nr0.cjs';
 
 declare const ComponentId: {
     readonly WR_DB_MYSQL: "keboola.wr-db-mysql";

package/dist/constants/index.d.ts

@@ -1,4 +1,4 @@
-export { A as AdminRole, B as Backend } from '../backends-BgUzAQul.js';
+export { A as AdminRole, B as Backend } from '../backends-Bofq_Nr0.js';
 
 declare const ComponentId: {
     readonly WR_DB_MYSQL: "keboola.wr-db-mysql";

package/dist/constants/index.js

@@ -1,4 +1,4 @@
-export { AdminRole } from '../chunk-Y5QJJWDQ.js';
+export { AdminRole } from '../chunk-552FC4ZV.js';
 export { ProjectFeature } from '../chunk-GM3AKU5T.js';
 export { ComponentId } from '../chunk-WFBQUWRC.js';
 

package/dist/domain/permissions/index.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkNFA5ITNG_cjs = require('../../chunk-NFA5ITNG.cjs');
+var chunkYXGBD4WP_cjs = require('../../chunk-YXGBD4WP.cjs');
 var chunkGF4XZK5N_cjs = require('../../chunk-GF4XZK5N.cjs');
 
 // src/domain/permissions/errors.ts
@@ -19,10 +19,11 @@ var PermissionDeniedError = class extends Error {
 
 // src/domain/permissions/admin.ts
 var role = (token) => token.admin.role;
-var isAdmin = (token) => role(token) === chunkNFA5ITNG_cjs.AdminRole.Admin;
-var isAdminOrShare = (token) => role(token) === chunkNFA5ITNG_cjs.AdminRole.Admin || role(token) === chunkNFA5ITNG_cjs.AdminRole.Share;
-var isProductionManager = (token) => role(token) === chunkNFA5ITNG_cjs.AdminRole.ProductionManager;
-var isDeveloperOrReviewer = (token) => role(token) === chunkNFA5ITNG_cjs.AdminRole.Developer || role(token) === chunkNFA5ITNG_cjs.AdminRole.Reviewer;
+var isAdmin = (token) => role(token) === chunkYXGBD4WP_cjs.AdminRole.Admin;
+var isAdminOrShare = (token) => role(token) === chunkYXGBD4WP_cjs.AdminRole.Admin || role(token) === chunkYXGBD4WP_cjs.AdminRole.Share;
+var isProductionManager = (token) => role(token) === chunkYXGBD4WP_cjs.AdminRole.ProductionManager;
+var isDeveloperOrReviewer = (token) => role(token) === chunkYXGBD4WP_cjs.AdminRole.Developer || role(token) === chunkYXGBD4WP_cjs.AdminRole.Reviewer;
+var isReadOnlyRole = (token) => role(token) === chunkYXGBD4WP_cjs.AdminRole.ReadOnly;
 var assertCanAdmin = (token) => {
   if (!isAdmin(token)) {
     throw new PermissionDeniedError({
@@ -132,5 +133,6 @@ exports.isAdmin = isAdmin;
 exports.isAdminOrShare = isAdminOrShare;
 exports.isDeveloperOrReviewer = isDeveloperOrReviewer;
 exports.isProductionManager = isProductionManager;
+exports.isReadOnlyRole = isReadOnlyRole;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/domain/permissions/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/domain/permissions/errors.ts","../../../src/domain/permissions/admin.ts","../../../src/domain/permissions/configurations.ts"],"names":["AdminRole"],"mappings":";;;;;;AAgBO,IAAM,qBAAA,GAAN,cAAoC,KAAA,CAAM;AAAA,EAC/B,MAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EAEhB,WAAA,CAAY,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAQ,EAA0D;AAC9F,IAAA,KAAA,CAAM,MAAA,GAAS,sBAAsB,MAAM,CAAA,EAAA,EAAK,MAAM,CAAA,CAAA,CAAA,GAAM,CAAA,mBAAA,EAAsB,MAAM,CAAA,CAAE,CAAA;AAC1F,IAAA,IAAA,CAAK,IAAA,GAAO,uBAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AAAA,EACjB;AACF;;;ACfA,IAAM,IAAA,GAAO,CAAC,KAAA,KAAgC,KAAA,CAAM,KAAA,CAAM,IAAA;AAEnD,IAAM,UAAU,CAAC,KAAA,KAAiC,IAAA,CAAK,KAAK,MAAMA,2BAAA,CAAU;AAE5E,IAAM,cAAA,GAAiB,CAAC,KAAA,KAC7B,IAAA,CAAK,KAAK,CAAA,KAAMA,2BAAA,CAAU,KAAA,IAAS,IAAA,CAAK,KAAK,CAAA,KAAMA,2BAAA,CAAU;AAExD,IAAM,sBAAsB,CAAC,KAAA,KAClC,IAAA,CAAK,KAAK,MAAMA,2BAAA,CAAU;AAErB,IAAM,qBAAA,GAAwB,CAAC,KAAA,KACpC,IAAA,CAAK,KAAK,CAAA,KAAMA,2BAAA,CAAU,SAAA,IAAa,IAAA,CAAK,KAAK,CAAA,KAAMA,2BAAA,CAAU;AAE5D,IAAM,cAAA,GAAiB,CAAC,KAAA,KAA8B;AAC3D,EAAA,IAAI,CAAC,OAAA,CAAQ,KAAK,CAAA,EAAG;AACnB,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,OAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,cAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,qBAAA,GAAwB,CAAC,KAAA,KAA8B;AAClE,EAAA,IAAI,CAAC,cAAA,CAAe,KAAK,CAAA,EAAG;AAC1B,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,gBAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,uBAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,yBAAA,GAA4B,CAAC,KAAA,KAA8B;AACtE,EAAA,IAAI,CAAC,mBAAA,CAAoB,KAAK,CAAA,EAAG;AAC/B,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,mBAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,0BAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,wBAAA,GAA2B,CAAC,KAAA,KAA8B;AACrE,EAAA,IAAI,CAAC,qBAAA,CAAsB,KAAK,CAAA,EAAG;AACjC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,mBAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,8BAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;;;ACJA,IAAM,aAAA,GAAgB,CAAC,KAAA,EAAqB,GAAA,KAC1C,GAAA,CAAI,kBAAkB,qBAAA,CAAsB,KAAK,CAAA,GAAI,mBAAA,CAAoB,KAAK,CAAA;AAEhF,IAAM,gBAAA,GAAmB,CAAC,GAAA,KACxB,GAAA,CAAI,kBACA,gDAAA,GACA,4CAAA;AAEC,IAAM,yBAAyB,CAAC,KAAA,EAAqB,GAAA,KAC1D,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,uBAAuB,CAAC,KAAA,EAAqB,GAAA,KACxD,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,yBAAyB,CAAC,KAAA,EAAqB,GAAA,KAC1D,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,qBAAA,GAAiF,CAC5F,KAAA,KACG,OAAA,CAAQ,KAAK;AAEX,IAAM,kBAAkB,CAAC,KAAA,EAAqB,GAAA,KACnD,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,4BAAA,GAA+B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAChG,EAAA,IAAI,CAAC,sBAAA,CAAuB,KAAA,EAAO,GAAG,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,sBAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,0BAAA,GAA6B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAC9F,EAAA,IAAI,CAAC,oBAAA,CAAqB,KAAA,EAAO,GAAG,CAAA,EAAG;AACrC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,oBAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,4BAAA,GAA+B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAChG,EAAA,IAAI,CAAC,sBAAA,CAAuB,KAAA,EAAO,GAAG,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,uBAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,2BAAA,GAA8B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAC/F,EAAA,IAAI,CAAC,qBAAA,CAAsB,KAAU,CAAA,EAAG;AACtC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,qBAAA;AAAA,MACR,MAAA,EAAQ;AAAA,KACT,CAAA;AAAA,EACH;AACF;AAEO,IAAM,qBAAA,GAAwB,CAAC,KAAA,EAAqB,GAAA,KAAgC;AACzF,EAAA,IAAI,CAAC,eAAA,CAAgB,KAAA,EAAO,GAAG,CAAA,EAAG;AAChC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,eAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF","file":"index.cjs","sourcesContent":["/**\n * @module domain/permissions/errors\n *\n * Stable error contract for permission denials.\n *\n * `PermissionDeniedError` is what every `assertCan*` pair throws on denial. The\n * three public fields are part of the SDK's published contract — consumers\n * (kbc-ui, kai-agent, third-party TS callers) may pattern-match on `action`\n * and surface `reason` in UI, so renames here are breaking changes.\n *\n * PII boundary on `subject`:\n *   `subject` is optional and intended for debugging hints only — admin id,\n *   role name, configuration id, branch id, etc. It MUST NOT carry the full\n *   `StorageToken`, raw tokens, secrets, or any value that could be logged or\n *   surfaced to a user without further redaction.\n */\nexport class PermissionDeniedError extends Error {\n  public readonly action: string;\n  public readonly reason?: string;\n  public readonly subject?: string;\n\n  constructor({ action, reason, subject }: { action: string; reason?: string; subject?: string }) {\n    super(reason ? `Permission denied: ${action} (${reason})` : `Permission denied: ${action}`);\n    this.name = 'PermissionDeniedError';\n    this.action = action;\n    this.reason = reason;\n    this.subject = subject;\n  }\n}\n","/**\n * @module domain/permissions/admin\n *\n * Baseline admin-role predicates. Token-only — depend purely on the admin\n * role string carried in `StorageToken.admin.role`. Each predicate has an\n * `assertCan*` pair that throws `PermissionDeniedError` with a stable\n * kebab-case `action` field documented per pair.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\nimport { AdminRole } from '../../constants/adminRoles';\n\nimport { PermissionDeniedError } from './errors';\n\nconst role = (token: StorageToken): string => token.admin.role;\n\nexport const isAdmin = (token: StorageToken): boolean => role(token) === AdminRole.Admin;\n\nexport const isAdminOrShare = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Admin || role(token) === AdminRole.Share;\n\nexport const isProductionManager = (token: StorageToken): boolean =>\n  role(token) === AdminRole.ProductionManager;\n\nexport const isDeveloperOrReviewer = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Developer || role(token) === AdminRole.Reviewer;\n\nexport const assertCanAdmin = (token: StorageToken): void => {\n  if (!isAdmin(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin',\n      reason: `role '${role(token)}' is not admin`,\n    });\n  }\n};\n\nexport const assertCanAdminOrShare = (token: StorageToken): void => {\n  if (!isAdminOrShare(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin-or-share',\n      reason: `role '${role(token)}' is not admin or share`,\n    });\n  }\n};\n\nexport const assertCanProductionManage = (token: StorageToken): void => {\n  if (!isProductionManager(token)) {\n    throw new PermissionDeniedError({\n      action: 'production-manage',\n      reason: `role '${role(token)}' is not productionManager`,\n    });\n  }\n};\n\nexport const assertCanDevelopOrReview = (token: StorageToken): void => {\n  if (!isDeveloperOrReviewer(token)) {\n    throw new PermissionDeniedError({\n      action: 'develop-or-review',\n      reason: `role '${role(token)}' is not developer or reviewer`,\n    });\n  }\n};\n","/**\n * @module domain/permissions/configurations\n *\n * Predicate pairs guarding the Core SDK configuration workflow methods\n * (create / copy / migrate-from-template / purge / assign-folder). Each\n * predicate composes the baseline admin role predicates with the caller-\n * supplied dev-mode flag from `ctx`.\n *\n * Rule shape:\n *   - In a dev branch (`ctx.isDevModeActive === true`) → caller must be a\n *     developer or reviewer.\n *   - In production (`ctx.isDevModeActive === false`) → caller must be a\n *     production manager.\n *   - `canPurgeConfiguration` is **admin-only**, regardless of branch mode.\n *     Purge is destructive and the situational base rule does not apply —\n *     `token.admin.role` is a single scalar, so requiring both \"admin\" and\n *     \"developer/reviewer/productionManager\" simultaneously would be an\n *     impossible conjunction. The `ctx` parameter is accepted for signature\n *     symmetry with the other configuration predicates and ignored.\n *\n * `ctx` is the trailing object argument convention for composed predicates;\n * extra fields land here as future rules grow (see AGENTS.md).\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\n\nimport { isAdmin, isDeveloperOrReviewer, isProductionManager } from './admin';\nimport { PermissionDeniedError } from './errors';\n\n/**\n * Caller-supplied context for configuration predicates.\n *\n * @property isDevModeActive — `true` when the user is operating inside a\n *   development branch (any storage branch other than the protected default /\n *   production branch); `false` when operating on the default branch in\n *   production.\n *\n *   How the caller determines this:\n *   - The active branch comes from the caller's own routing / app state\n *     (e.g. `/branch/:branchId` in kbc-ui).\n *   - A branch is \"dev mode\" when it is **not** the default branch returned by\n *     `apiClient.storage.devBranches.list()` (where `isDefault === true`).\n *   - kbc-ui exposes this through its `RoutesStore.getCurrentRouteParam('branchId')`\n *     compared against the default branch id; the api-client itself stays\n *     isomorphic and never reads that state directly.\n *\n *   Why it changes the rule:\n *   - In dev branches Keboola allows broader write access — `developer` and\n *     `reviewer` roles may create / copy / migrate configurations because the\n *     branch is sandboxed from production.\n *   - On the default branch only `productionManager` (or `admin`) may perform\n *     the same writes, since changes ship live to production.\n */\nexport type ConfigurationCtx = {\n  isDevModeActive: boolean;\n};\n\nconst meetsBaseRule = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  ctx.isDevModeActive ? isDeveloperOrReviewer(token) : isProductionManager(token);\n\nconst baseDenialReason = (ctx: ConfigurationCtx): string =>\n  ctx.isDevModeActive\n    ? 'dev branch requires developer or reviewer role'\n    : 'production requires productionManager role';\n\nexport const canCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => boolean = (\n  token,\n) => isAdmin(token);\n\nexport const canAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const assertCanCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCreateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'create-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCopyConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'copy-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canMigrateFromTemplate(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'migrate-from-template',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanPurgeConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canPurgeConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'purge-configuration',\n      reason: 'purge requires admin role',\n    });\n  }\n};\n\nexport const assertCanAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canAssignFolder(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'assign-folder',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n"]}
+{"version":3,"sources":["../../../src/domain/permissions/errors.ts","../../../src/domain/permissions/admin.ts","../../../src/domain/permissions/configurations.ts"],"names":["AdminRole"],"mappings":";;;;;;AAgBO,IAAM,qBAAA,GAAN,cAAoC,KAAA,CAAM;AAAA,EAC/B,MAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EAEhB,WAAA,CAAY,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAQ,EAA0D;AAC9F,IAAA,KAAA,CAAM,MAAA,GAAS,sBAAsB,MAAM,CAAA,EAAA,EAAK,MAAM,CAAA,CAAA,CAAA,GAAM,CAAA,mBAAA,EAAsB,MAAM,CAAA,CAAE,CAAA;AAC1F,IAAA,IAAA,CAAK,IAAA,GAAO,uBAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AAAA,EACjB;AACF;;;ACfA,IAAM,IAAA,GAAO,CAAC,KAAA,KAAgC,KAAA,CAAM,KAAA,CAAM,IAAA;AAEnD,IAAM,UAAU,CAAC,KAAA,KAAiC,IAAA,CAAK,KAAK,MAAMA,2BAAA,CAAU;AAE5E,IAAM,cAAA,GAAiB,CAAC,KAAA,KAC7B,IAAA,CAAK,KAAK,CAAA,KAAMA,2BAAA,CAAU,KAAA,IAAS,IAAA,CAAK,KAAK,CAAA,KAAMA,2BAAA,CAAU;AAExD,IAAM,sBAAsB,CAAC,KAAA,KAClC,IAAA,CAAK,KAAK,MAAMA,2BAAA,CAAU;AAErB,IAAM,qBAAA,GAAwB,CAAC,KAAA,KACpC,IAAA,CAAK,KAAK,CAAA,KAAMA,2BAAA,CAAU,SAAA,IAAa,IAAA,CAAK,KAAK,CAAA,KAAMA,2BAAA,CAAU;AAE5D,IAAM,iBAAiB,CAAC,KAAA,KAAiC,IAAA,CAAK,KAAK,MAAMA,2BAAA,CAAU;AAEnF,IAAM,cAAA,GAAiB,CAAC,KAAA,KAA8B;AAC3D,EAAA,IAAI,CAAC,OAAA,CAAQ,KAAK,CAAA,EAAG;AACnB,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,OAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,cAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,qBAAA,GAAwB,CAAC,KAAA,KAA8B;AAClE,EAAA,IAAI,CAAC,cAAA,CAAe,KAAK,CAAA,EAAG;AAC1B,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,gBAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,uBAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,yBAAA,GAA4B,CAAC,KAAA,KAA8B;AACtE,EAAA,IAAI,CAAC,mBAAA,CAAoB,KAAK,CAAA,EAAG;AAC/B,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,mBAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,0BAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,wBAAA,GAA2B,CAAC,KAAA,KAA8B;AACrE,EAAA,IAAI,CAAC,qBAAA,CAAsB,KAAK,CAAA,EAAG;AACjC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,mBAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,8BAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;;;ACNA,IAAM,aAAA,GAAgB,CAAC,KAAA,EAAqB,GAAA,KAC1C,GAAA,CAAI,kBAAkB,qBAAA,CAAsB,KAAK,CAAA,GAAI,mBAAA,CAAoB,KAAK,CAAA;AAEhF,IAAM,gBAAA,GAAmB,CAAC,GAAA,KACxB,GAAA,CAAI,kBACA,gDAAA,GACA,4CAAA;AAEC,IAAM,yBAAyB,CAAC,KAAA,EAAqB,GAAA,KAC1D,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,uBAAuB,CAAC,KAAA,EAAqB,GAAA,KACxD,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,yBAAyB,CAAC,KAAA,EAAqB,GAAA,KAC1D,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,qBAAA,GAAiF,CAC5F,KAAA,KACG,OAAA,CAAQ,KAAK;AAEX,IAAM,kBAAkB,CAAC,KAAA,EAAqB,GAAA,KACnD,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,4BAAA,GAA+B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAChG,EAAA,IAAI,CAAC,sBAAA,CAAuB,KAAA,EAAO,GAAG,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,sBAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,0BAAA,GAA6B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAC9F,EAAA,IAAI,CAAC,oBAAA,CAAqB,KAAA,EAAO,GAAG,CAAA,EAAG;AACrC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,oBAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,4BAAA,GAA+B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAChG,EAAA,IAAI,CAAC,sBAAA,CAAuB,KAAA,EAAO,GAAG,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,uBAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,2BAAA,GAA8B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAC/F,EAAA,IAAI,CAAC,qBAAA,CAAsB,KAAU,CAAA,EAAG;AACtC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,qBAAA;AAAA,MACR,MAAA,EAAQ;AAAA,KACT,CAAA;AAAA,EACH;AACF;AAEO,IAAM,qBAAA,GAAwB,CAAC,KAAA,EAAqB,GAAA,KAAgC;AACzF,EAAA,IAAI,CAAC,eAAA,CAAgB,KAAA,EAAO,GAAG,CAAA,EAAG;AAChC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,eAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF","file":"index.cjs","sourcesContent":["/**\n * @module domain/permissions/errors\n *\n * Stable error contract for permission denials.\n *\n * `PermissionDeniedError` is what every `assertCan*` pair throws on denial. The\n * three public fields are part of the SDK's published contract — consumers\n * (kbc-ui, kai-agent, third-party TS callers) may pattern-match on `action`\n * and surface `reason` in UI, so renames here are breaking changes.\n *\n * PII boundary on `subject`:\n *   `subject` is optional and intended for debugging hints only — admin id,\n *   role name, configuration id, branch id, etc. It MUST NOT carry the full\n *   `StorageToken`, raw tokens, secrets, or any value that could be logged or\n *   surfaced to a user without further redaction.\n */\nexport class PermissionDeniedError extends Error {\n  public readonly action: string;\n  public readonly reason?: string;\n  public readonly subject?: string;\n\n  constructor({ action, reason, subject }: { action: string; reason?: string; subject?: string }) {\n    super(reason ? `Permission denied: ${action} (${reason})` : `Permission denied: ${action}`);\n    this.name = 'PermissionDeniedError';\n    this.action = action;\n    this.reason = reason;\n    this.subject = subject;\n  }\n}\n","/**\n * @module domain/permissions/admin\n *\n * Baseline admin-role predicates. Token-only — depend purely on the admin\n * role string carried in `StorageToken.admin.role`. Each predicate has an\n * `assertCan*` pair that throws `PermissionDeniedError` with a stable\n * kebab-case `action` field documented per pair.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\nimport { AdminRole } from '../../constants/adminRoles';\n\nimport { PermissionDeniedError } from './errors';\n\nconst role = (token: StorageToken): string => token.admin.role;\n\nexport const isAdmin = (token: StorageToken): boolean => role(token) === AdminRole.Admin;\n\nexport const isAdminOrShare = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Admin || role(token) === AdminRole.Share;\n\nexport const isProductionManager = (token: StorageToken): boolean =>\n  role(token) === AdminRole.ProductionManager;\n\nexport const isDeveloperOrReviewer = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Developer || role(token) === AdminRole.Reviewer;\n\nexport const isReadOnlyRole = (token: StorageToken): boolean => role(token) === AdminRole.ReadOnly;\n\nexport const assertCanAdmin = (token: StorageToken): void => {\n  if (!isAdmin(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin',\n      reason: `role '${role(token)}' is not admin`,\n    });\n  }\n};\n\nexport const assertCanAdminOrShare = (token: StorageToken): void => {\n  if (!isAdminOrShare(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin-or-share',\n      reason: `role '${role(token)}' is not admin or share`,\n    });\n  }\n};\n\nexport const assertCanProductionManage = (token: StorageToken): void => {\n  if (!isProductionManager(token)) {\n    throw new PermissionDeniedError({\n      action: 'production-manage',\n      reason: `role '${role(token)}' is not productionManager`,\n    });\n  }\n};\n\nexport const assertCanDevelopOrReview = (token: StorageToken): void => {\n  if (!isDeveloperOrReviewer(token)) {\n    throw new PermissionDeniedError({\n      action: 'develop-or-review',\n      reason: `role '${role(token)}' is not developer or reviewer`,\n    });\n  }\n};\n","/**\n * @module domain/permissions/configurations\n *\n * Predicate pairs guarding the Core SDK configuration workflow methods\n * (create / copy / migrate-from-template / purge / assign-folder). Each\n * predicate composes the baseline admin role predicates with the caller-\n * supplied dev-mode flag from `ctx`.\n *\n * Rule shape:\n *   - In a dev branch (`ctx.isDevModeActive === true`) → caller must be a\n *     developer or reviewer.\n *   - In production (`ctx.isDevModeActive === false`) → caller must be a\n *     production manager.\n *   - `canPurgeConfiguration` is **admin-only**, regardless of branch mode.\n *     Purge is destructive and the situational base rule does not apply —\n *     `token.admin.role` is a single scalar, so requiring both \"admin\" and\n *     \"developer/reviewer/productionManager\" simultaneously would be an\n *     impossible conjunction. The `ctx` parameter is accepted for signature\n *     symmetry with the other configuration predicates and ignored.\n *\n * `ctx` is the trailing object argument convention for composed predicates;\n * extra fields land here as future rules grow (see AGENTS.md).\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\n\nimport { isAdmin, isDeveloperOrReviewer, isProductionManager } from './admin';\nimport { PermissionDeniedError } from './errors';\n\n/**\n * Caller-supplied context for configuration predicates.\n *\n * @property isDevModeActive — `true` when the user is operating inside a\n *   development branch (any storage branch other than the protected default /\n *   production branch); `false` when operating on the default branch in\n *   production.\n *\n *   How the caller determines this:\n *   - The active branch comes from the caller's own routing / app state\n *     (e.g. `/branch/:branchId` in kbc-ui).\n *   - A branch is \"dev mode\" when it is **not** the default branch returned by\n *     `apiClient.storage.devBranches.list()` (where `isDefault === true`).\n *   - kbc-ui exposes this through its `RoutesStore.getCurrentRouteParam('branchId')`\n *     compared against the default branch id; the api-client itself stays\n *     isomorphic and never reads that state directly.\n *\n *   Why it changes the rule:\n *   - In dev branches Keboola allows broader write access — `developer` and\n *     `reviewer` roles may create / copy / migrate configurations because the\n *     branch is sandboxed from production.\n *   - On the default branch only `productionManager` (or `admin`) may perform\n *     the same writes, since changes ship live to production.\n */\nexport type ConfigurationCtx = {\n  isDevModeActive: boolean;\n};\n\nconst meetsBaseRule = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  ctx.isDevModeActive ? isDeveloperOrReviewer(token) : isProductionManager(token);\n\nconst baseDenialReason = (ctx: ConfigurationCtx): string =>\n  ctx.isDevModeActive\n    ? 'dev branch requires developer or reviewer role'\n    : 'production requires productionManager role';\n\nexport const canCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => boolean = (\n  token,\n) => isAdmin(token);\n\nexport const canAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const assertCanCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCreateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'create-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCopyConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'copy-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canMigrateFromTemplate(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'migrate-from-template',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanPurgeConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canPurgeConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'purge-configuration',\n      reason: 'purge requires admin role',\n    });\n  }\n};\n\nexport const assertCanAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canAssignFolder(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'assign-folder',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n"]}

package/dist/domain/permissions/index.d.cts

@@ -1,6 +1,6 @@
-import { S as StorageToken } from '../../types-CMEwVQ78.cjs';
-export { h as hasAdminFeature, a as hasFeature } from '../../project-NJuUPx8-.cjs';
-import '../../backends-BgUzAQul.cjs';
+import { S as StorageToken } from '../../types-ClxrZC77.cjs';
+export { h as hasAdminFeature, a as hasFeature } from '../../project-CX3TEH8A.cjs';
+import '../../backends-Bofq_Nr0.cjs';
 import '../../types-jKnx7Tm_.cjs';
 
 /**
@@ -43,6 +43,7 @@ declare const isAdmin: (token: StorageToken) => boolean;
 declare const isAdminOrShare: (token: StorageToken) => boolean;
 declare const isProductionManager: (token: StorageToken) => boolean;
 declare const isDeveloperOrReviewer: (token: StorageToken) => boolean;
+declare const isReadOnlyRole: (token: StorageToken) => boolean;
 declare const assertCanAdmin: (token: StorageToken) => void;
 declare const assertCanAdminOrShare: (token: StorageToken) => void;
 declare const assertCanProductionManage: (token: StorageToken) => void;
@@ -110,4 +111,4 @@ declare const assertCanMigrateFromTemplate: (token: StorageToken, ctx: Configura
 declare const assertCanPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => void;
 declare const assertCanAssignFolder: (token: StorageToken, ctx: ConfigurationCtx) => void;
 
-export { type ConfigurationCtx, PermissionDeniedError, assertCanAdmin, assertCanAdminOrShare, assertCanAssignFolder, assertCanCopyConfiguration, assertCanCreateConfiguration, assertCanDevelopOrReview, assertCanMigrateFromTemplate, assertCanProductionManage, assertCanPurgeConfiguration, canAssignFolder, canCopyConfiguration, canCreateConfiguration, canMigrateFromTemplate, canPurgeConfiguration, isAdmin, isAdminOrShare, isDeveloperOrReviewer, isProductionManager };
+export { type ConfigurationCtx, PermissionDeniedError, assertCanAdmin, assertCanAdminOrShare, assertCanAssignFolder, assertCanCopyConfiguration, assertCanCreateConfiguration, assertCanDevelopOrReview, assertCanMigrateFromTemplate, assertCanProductionManage, assertCanPurgeConfiguration, canAssignFolder, canCopyConfiguration, canCreateConfiguration, canMigrateFromTemplate, canPurgeConfiguration, isAdmin, isAdminOrShare, isDeveloperOrReviewer, isProductionManager, isReadOnlyRole };

package/dist/domain/permissions/index.d.ts

@@ -1,6 +1,6 @@
-import { S as StorageToken } from '../../types-GmAeMsok.js';
-export { h as hasAdminFeature, a as hasFeature } from '../../project-BxSa1Ci9.js';
-import '../../backends-BgUzAQul.js';
+import { S as StorageToken } from '../../types-o8eTf_G9.js';
+export { h as hasAdminFeature, a as hasFeature } from '../../project-Bj7A_TSe.js';
+import '../../backends-Bofq_Nr0.js';
 import '../../types-jKnx7Tm_.js';
 
 /**
@@ -43,6 +43,7 @@ declare const isAdmin: (token: StorageToken) => boolean;
 declare const isAdminOrShare: (token: StorageToken) => boolean;
 declare const isProductionManager: (token: StorageToken) => boolean;
 declare const isDeveloperOrReviewer: (token: StorageToken) => boolean;
+declare const isReadOnlyRole: (token: StorageToken) => boolean;
 declare const assertCanAdmin: (token: StorageToken) => void;
 declare const assertCanAdminOrShare: (token: StorageToken) => void;
 declare const assertCanProductionManage: (token: StorageToken) => void;
@@ -110,4 +111,4 @@ declare const assertCanMigrateFromTemplate: (token: StorageToken, ctx: Configura
 declare const assertCanPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => void;
 declare const assertCanAssignFolder: (token: StorageToken, ctx: ConfigurationCtx) => void;
 
-export { type ConfigurationCtx, PermissionDeniedError, assertCanAdmin, assertCanAdminOrShare, assertCanAssignFolder, assertCanCopyConfiguration, assertCanCreateConfiguration, assertCanDevelopOrReview, assertCanMigrateFromTemplate, assertCanProductionManage, assertCanPurgeConfiguration, canAssignFolder, canCopyConfiguration, canCreateConfiguration, canMigrateFromTemplate, canPurgeConfiguration, isAdmin, isAdminOrShare, isDeveloperOrReviewer, isProductionManager };
+export { type ConfigurationCtx, PermissionDeniedError, assertCanAdmin, assertCanAdminOrShare, assertCanAssignFolder, assertCanCopyConfiguration, assertCanCreateConfiguration, assertCanDevelopOrReview, assertCanMigrateFromTemplate, assertCanProductionManage, assertCanPurgeConfiguration, canAssignFolder, canCopyConfiguration, canCreateConfiguration, canMigrateFromTemplate, canPurgeConfiguration, isAdmin, isAdminOrShare, isDeveloperOrReviewer, isProductionManager, isReadOnlyRole };

package/dist/domain/permissions/index.js

@@ -1,4 +1,4 @@
-import { AdminRole } from '../../chunk-Y5QJJWDQ.js';
+import { AdminRole } from '../../chunk-552FC4ZV.js';
 export { hasAdminFeature, hasFeature } from '../../chunk-UABYNGBZ.js';
 
 // src/domain/permissions/errors.ts
@@ -21,6 +21,7 @@ var isAdmin = (token) => role(token) === AdminRole.Admin;
 var isAdminOrShare = (token) => role(token) === AdminRole.Admin || role(token) === AdminRole.Share;
 var isProductionManager = (token) => role(token) === AdminRole.ProductionManager;
 var isDeveloperOrReviewer = (token) => role(token) === AdminRole.Developer || role(token) === AdminRole.Reviewer;
+var isReadOnlyRole = (token) => role(token) === AdminRole.ReadOnly;
 var assertCanAdmin = (token) => {
   if (!isAdmin(token)) {
     throw new PermissionDeniedError({
@@ -103,6 +104,6 @@ var assertCanAssignFolder = (token, ctx) => {
   }
 };
 
-export { PermissionDeniedError, assertCanAdmin, assertCanAdminOrShare, assertCanAssignFolder, assertCanCopyConfiguration, assertCanCreateConfiguration, assertCanDevelopOrReview, assertCanMigrateFromTemplate, assertCanProductionManage, assertCanPurgeConfiguration, canAssignFolder, canCopyConfiguration, canCreateConfiguration, canMigrateFromTemplate, canPurgeConfiguration, isAdmin, isAdminOrShare, isDeveloperOrReviewer, isProductionManager };
+export { PermissionDeniedError, assertCanAdmin, assertCanAdminOrShare, assertCanAssignFolder, assertCanCopyConfiguration, assertCanCreateConfiguration, assertCanDevelopOrReview, assertCanMigrateFromTemplate, assertCanProductionManage, assertCanPurgeConfiguration, canAssignFolder, canCopyConfiguration, canCreateConfiguration, canMigrateFromTemplate, canPurgeConfiguration, isAdmin, isAdminOrShare, isDeveloperOrReviewer, isProductionManager, isReadOnlyRole };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/domain/permissions/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/domain/permissions/errors.ts","../../../src/domain/permissions/admin.ts","../../../src/domain/permissions/configurations.ts"],"names":[],"mappings":";;;;AAgBO,IAAM,qBAAA,GAAN,cAAoC,KAAA,CAAM;AAAA,EAC/B,MAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EAEhB,WAAA,CAAY,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAQ,EAA0D;AAC9F,IAAA,KAAA,CAAM,MAAA,GAAS,sBAAsB,MAAM,CAAA,EAAA,EAAK,MAAM,CAAA,CAAA,CAAA,GAAM,CAAA,mBAAA,EAAsB,MAAM,CAAA,CAAE,CAAA;AAC1F,IAAA,IAAA,CAAK,IAAA,GAAO,uBAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AAAA,EACjB;AACF;;;ACfA,IAAM,IAAA,GAAO,CAAC,KAAA,KAAgC,KAAA,CAAM,KAAA,CAAM,IAAA;AAEnD,IAAM,UAAU,CAAC,KAAA,KAAiC,IAAA,CAAK,KAAK,MAAM,SAAA,CAAU;AAE5E,IAAM,cAAA,GAAiB,CAAC,KAAA,KAC7B,IAAA,CAAK,KAAK,CAAA,KAAM,SAAA,CAAU,KAAA,IAAS,IAAA,CAAK,KAAK,CAAA,KAAM,SAAA,CAAU;AAExD,IAAM,sBAAsB,CAAC,KAAA,KAClC,IAAA,CAAK,KAAK,MAAM,SAAA,CAAU;AAErB,IAAM,qBAAA,GAAwB,CAAC,KAAA,KACpC,IAAA,CAAK,KAAK,CAAA,KAAM,SAAA,CAAU,SAAA,IAAa,IAAA,CAAK,KAAK,CAAA,KAAM,SAAA,CAAU;AAE5D,IAAM,cAAA,GAAiB,CAAC,KAAA,KAA8B;AAC3D,EAAA,IAAI,CAAC,OAAA,CAAQ,KAAK,CAAA,EAAG;AACnB,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,OAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,cAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,qBAAA,GAAwB,CAAC,KAAA,KAA8B;AAClE,EAAA,IAAI,CAAC,cAAA,CAAe,KAAK,CAAA,EAAG;AAC1B,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,gBAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,uBAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,yBAAA,GAA4B,CAAC,KAAA,KAA8B;AACtE,EAAA,IAAI,CAAC,mBAAA,CAAoB,KAAK,CAAA,EAAG;AAC/B,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,mBAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,0BAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,wBAAA,GAA2B,CAAC,KAAA,KAA8B;AACrE,EAAA,IAAI,CAAC,qBAAA,CAAsB,KAAK,CAAA,EAAG;AACjC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,mBAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,8BAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;;;ACJA,IAAM,aAAA,GAAgB,CAAC,KAAA,EAAqB,GAAA,KAC1C,GAAA,CAAI,kBAAkB,qBAAA,CAAsB,KAAK,CAAA,GAAI,mBAAA,CAAoB,KAAK,CAAA;AAEhF,IAAM,gBAAA,GAAmB,CAAC,GAAA,KACxB,GAAA,CAAI,kBACA,gDAAA,GACA,4CAAA;AAEC,IAAM,yBAAyB,CAAC,KAAA,EAAqB,GAAA,KAC1D,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,uBAAuB,CAAC,KAAA,EAAqB,GAAA,KACxD,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,yBAAyB,CAAC,KAAA,EAAqB,GAAA,KAC1D,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,qBAAA,GAAiF,CAC5F,KAAA,KACG,OAAA,CAAQ,KAAK;AAEX,IAAM,kBAAkB,CAAC,KAAA,EAAqB,GAAA,KACnD,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,4BAAA,GAA+B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAChG,EAAA,IAAI,CAAC,sBAAA,CAAuB,KAAA,EAAO,GAAG,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,sBAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,0BAAA,GAA6B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAC9F,EAAA,IAAI,CAAC,oBAAA,CAAqB,KAAA,EAAO,GAAG,CAAA,EAAG;AACrC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,oBAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,4BAAA,GAA+B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAChG,EAAA,IAAI,CAAC,sBAAA,CAAuB,KAAA,EAAO,GAAG,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,uBAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,2BAAA,GAA8B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAC/F,EAAA,IAAI,CAAC,qBAAA,CAAsB,KAAU,CAAA,EAAG;AACtC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,qBAAA;AAAA,MACR,MAAA,EAAQ;AAAA,KACT,CAAA;AAAA,EACH;AACF;AAEO,IAAM,qBAAA,GAAwB,CAAC,KAAA,EAAqB,GAAA,KAAgC;AACzF,EAAA,IAAI,CAAC,eAAA,CAAgB,KAAA,EAAO,GAAG,CAAA,EAAG;AAChC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,eAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF","file":"index.js","sourcesContent":["/**\n * @module domain/permissions/errors\n *\n * Stable error contract for permission denials.\n *\n * `PermissionDeniedError` is what every `assertCan*` pair throws on denial. The\n * three public fields are part of the SDK's published contract — consumers\n * (kbc-ui, kai-agent, third-party TS callers) may pattern-match on `action`\n * and surface `reason` in UI, so renames here are breaking changes.\n *\n * PII boundary on `subject`:\n *   `subject` is optional and intended for debugging hints only — admin id,\n *   role name, configuration id, branch id, etc. It MUST NOT carry the full\n *   `StorageToken`, raw tokens, secrets, or any value that could be logged or\n *   surfaced to a user without further redaction.\n */\nexport class PermissionDeniedError extends Error {\n  public readonly action: string;\n  public readonly reason?: string;\n  public readonly subject?: string;\n\n  constructor({ action, reason, subject }: { action: string; reason?: string; subject?: string }) {\n    super(reason ? `Permission denied: ${action} (${reason})` : `Permission denied: ${action}`);\n    this.name = 'PermissionDeniedError';\n    this.action = action;\n    this.reason = reason;\n    this.subject = subject;\n  }\n}\n","/**\n * @module domain/permissions/admin\n *\n * Baseline admin-role predicates. Token-only — depend purely on the admin\n * role string carried in `StorageToken.admin.role`. Each predicate has an\n * `assertCan*` pair that throws `PermissionDeniedError` with a stable\n * kebab-case `action` field documented per pair.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\nimport { AdminRole } from '../../constants/adminRoles';\n\nimport { PermissionDeniedError } from './errors';\n\nconst role = (token: StorageToken): string => token.admin.role;\n\nexport const isAdmin = (token: StorageToken): boolean => role(token) === AdminRole.Admin;\n\nexport const isAdminOrShare = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Admin || role(token) === AdminRole.Share;\n\nexport const isProductionManager = (token: StorageToken): boolean =>\n  role(token) === AdminRole.ProductionManager;\n\nexport const isDeveloperOrReviewer = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Developer || role(token) === AdminRole.Reviewer;\n\nexport const assertCanAdmin = (token: StorageToken): void => {\n  if (!isAdmin(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin',\n      reason: `role '${role(token)}' is not admin`,\n    });\n  }\n};\n\nexport const assertCanAdminOrShare = (token: StorageToken): void => {\n  if (!isAdminOrShare(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin-or-share',\n      reason: `role '${role(token)}' is not admin or share`,\n    });\n  }\n};\n\nexport const assertCanProductionManage = (token: StorageToken): void => {\n  if (!isProductionManager(token)) {\n    throw new PermissionDeniedError({\n      action: 'production-manage',\n      reason: `role '${role(token)}' is not productionManager`,\n    });\n  }\n};\n\nexport const assertCanDevelopOrReview = (token: StorageToken): void => {\n  if (!isDeveloperOrReviewer(token)) {\n    throw new PermissionDeniedError({\n      action: 'develop-or-review',\n      reason: `role '${role(token)}' is not developer or reviewer`,\n    });\n  }\n};\n","/**\n * @module domain/permissions/configurations\n *\n * Predicate pairs guarding the Core SDK configuration workflow methods\n * (create / copy / migrate-from-template / purge / assign-folder). Each\n * predicate composes the baseline admin role predicates with the caller-\n * supplied dev-mode flag from `ctx`.\n *\n * Rule shape:\n *   - In a dev branch (`ctx.isDevModeActive === true`) → caller must be a\n *     developer or reviewer.\n *   - In production (`ctx.isDevModeActive === false`) → caller must be a\n *     production manager.\n *   - `canPurgeConfiguration` is **admin-only**, regardless of branch mode.\n *     Purge is destructive and the situational base rule does not apply —\n *     `token.admin.role` is a single scalar, so requiring both \"admin\" and\n *     \"developer/reviewer/productionManager\" simultaneously would be an\n *     impossible conjunction. The `ctx` parameter is accepted for signature\n *     symmetry with the other configuration predicates and ignored.\n *\n * `ctx` is the trailing object argument convention for composed predicates;\n * extra fields land here as future rules grow (see AGENTS.md).\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\n\nimport { isAdmin, isDeveloperOrReviewer, isProductionManager } from './admin';\nimport { PermissionDeniedError } from './errors';\n\n/**\n * Caller-supplied context for configuration predicates.\n *\n * @property isDevModeActive — `true` when the user is operating inside a\n *   development branch (any storage branch other than the protected default /\n *   production branch); `false` when operating on the default branch in\n *   production.\n *\n *   How the caller determines this:\n *   - The active branch comes from the caller's own routing / app state\n *     (e.g. `/branch/:branchId` in kbc-ui).\n *   - A branch is \"dev mode\" when it is **not** the default branch returned by\n *     `apiClient.storage.devBranches.list()` (where `isDefault === true`).\n *   - kbc-ui exposes this through its `RoutesStore.getCurrentRouteParam('branchId')`\n *     compared against the default branch id; the api-client itself stays\n *     isomorphic and never reads that state directly.\n *\n *   Why it changes the rule:\n *   - In dev branches Keboola allows broader write access — `developer` and\n *     `reviewer` roles may create / copy / migrate configurations because the\n *     branch is sandboxed from production.\n *   - On the default branch only `productionManager` (or `admin`) may perform\n *     the same writes, since changes ship live to production.\n */\nexport type ConfigurationCtx = {\n  isDevModeActive: boolean;\n};\n\nconst meetsBaseRule = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  ctx.isDevModeActive ? isDeveloperOrReviewer(token) : isProductionManager(token);\n\nconst baseDenialReason = (ctx: ConfigurationCtx): string =>\n  ctx.isDevModeActive\n    ? 'dev branch requires developer or reviewer role'\n    : 'production requires productionManager role';\n\nexport const canCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => boolean = (\n  token,\n) => isAdmin(token);\n\nexport const canAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const assertCanCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCreateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'create-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCopyConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'copy-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canMigrateFromTemplate(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'migrate-from-template',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanPurgeConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canPurgeConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'purge-configuration',\n      reason: 'purge requires admin role',\n    });\n  }\n};\n\nexport const assertCanAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canAssignFolder(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'assign-folder',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n"]}
+{"version":3,"sources":["../../../src/domain/permissions/errors.ts","../../../src/domain/permissions/admin.ts","../../../src/domain/permissions/configurations.ts"],"names":[],"mappings":";;;;AAgBO,IAAM,qBAAA,GAAN,cAAoC,KAAA,CAAM;AAAA,EAC/B,MAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EAEhB,WAAA,CAAY,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAQ,EAA0D;AAC9F,IAAA,KAAA,CAAM,MAAA,GAAS,sBAAsB,MAAM,CAAA,EAAA,EAAK,MAAM,CAAA,CAAA,CAAA,GAAM,CAAA,mBAAA,EAAsB,MAAM,CAAA,CAAE,CAAA;AAC1F,IAAA,IAAA,CAAK,IAAA,GAAO,uBAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AAAA,EACjB;AACF;;;ACfA,IAAM,IAAA,GAAO,CAAC,KAAA,KAAgC,KAAA,CAAM,KAAA,CAAM,IAAA;AAEnD,IAAM,UAAU,CAAC,KAAA,KAAiC,IAAA,CAAK,KAAK,MAAM,SAAA,CAAU;AAE5E,IAAM,cAAA,GAAiB,CAAC,KAAA,KAC7B,IAAA,CAAK,KAAK,CAAA,KAAM,SAAA,CAAU,KAAA,IAAS,IAAA,CAAK,KAAK,CAAA,KAAM,SAAA,CAAU;AAExD,IAAM,sBAAsB,CAAC,KAAA,KAClC,IAAA,CAAK,KAAK,MAAM,SAAA,CAAU;AAErB,IAAM,qBAAA,GAAwB,CAAC,KAAA,KACpC,IAAA,CAAK,KAAK,CAAA,KAAM,SAAA,CAAU,SAAA,IAAa,IAAA,CAAK,KAAK,CAAA,KAAM,SAAA,CAAU;AAE5D,IAAM,iBAAiB,CAAC,KAAA,KAAiC,IAAA,CAAK,KAAK,MAAM,SAAA,CAAU;AAEnF,IAAM,cAAA,GAAiB,CAAC,KAAA,KAA8B;AAC3D,EAAA,IAAI,CAAC,OAAA,CAAQ,KAAK,CAAA,EAAG;AACnB,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,OAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,cAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,qBAAA,GAAwB,CAAC,KAAA,KAA8B;AAClE,EAAA,IAAI,CAAC,cAAA,CAAe,KAAK,CAAA,EAAG;AAC1B,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,gBAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,uBAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,yBAAA,GAA4B,CAAC,KAAA,KAA8B;AACtE,EAAA,IAAI,CAAC,mBAAA,CAAoB,KAAK,CAAA,EAAG;AAC/B,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,mBAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,0BAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,wBAAA,GAA2B,CAAC,KAAA,KAA8B;AACrE,EAAA,IAAI,CAAC,qBAAA,CAAsB,KAAK,CAAA,EAAG;AACjC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,mBAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,8BAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;;;ACNA,IAAM,aAAA,GAAgB,CAAC,KAAA,EAAqB,GAAA,KAC1C,GAAA,CAAI,kBAAkB,qBAAA,CAAsB,KAAK,CAAA,GAAI,mBAAA,CAAoB,KAAK,CAAA;AAEhF,IAAM,gBAAA,GAAmB,CAAC,GAAA,KACxB,GAAA,CAAI,kBACA,gDAAA,GACA,4CAAA;AAEC,IAAM,yBAAyB,CAAC,KAAA,EAAqB,GAAA,KAC1D,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,uBAAuB,CAAC,KAAA,EAAqB,GAAA,KACxD,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,yBAAyB,CAAC,KAAA,EAAqB,GAAA,KAC1D,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,qBAAA,GAAiF,CAC5F,KAAA,KACG,OAAA,CAAQ,KAAK;AAEX,IAAM,kBAAkB,CAAC,KAAA,EAAqB,GAAA,KACnD,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,4BAAA,GAA+B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAChG,EAAA,IAAI,CAAC,sBAAA,CAAuB,KAAA,EAAO,GAAG,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,sBAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,0BAAA,GAA6B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAC9F,EAAA,IAAI,CAAC,oBAAA,CAAqB,KAAA,EAAO,GAAG,CAAA,EAAG;AACrC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,oBAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,4BAAA,GAA+B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAChG,EAAA,IAAI,CAAC,sBAAA,CAAuB,KAAA,EAAO,GAAG,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,uBAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,2BAAA,GAA8B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAC/F,EAAA,IAAI,CAAC,qBAAA,CAAsB,KAAU,CAAA,EAAG;AACtC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,qBAAA;AAAA,MACR,MAAA,EAAQ;AAAA,KACT,CAAA;AAAA,EACH;AACF;AAEO,IAAM,qBAAA,GAAwB,CAAC,KAAA,EAAqB,GAAA,KAAgC;AACzF,EAAA,IAAI,CAAC,eAAA,CAAgB,KAAA,EAAO,GAAG,CAAA,EAAG;AAChC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,eAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF","file":"index.js","sourcesContent":["/**\n * @module domain/permissions/errors\n *\n * Stable error contract for permission denials.\n *\n * `PermissionDeniedError` is what every `assertCan*` pair throws on denial. The\n * three public fields are part of the SDK's published contract — consumers\n * (kbc-ui, kai-agent, third-party TS callers) may pattern-match on `action`\n * and surface `reason` in UI, so renames here are breaking changes.\n *\n * PII boundary on `subject`:\n *   `subject` is optional and intended for debugging hints only — admin id,\n *   role name, configuration id, branch id, etc. It MUST NOT carry the full\n *   `StorageToken`, raw tokens, secrets, or any value that could be logged or\n *   surfaced to a user without further redaction.\n */\nexport class PermissionDeniedError extends Error {\n  public readonly action: string;\n  public readonly reason?: string;\n  public readonly subject?: string;\n\n  constructor({ action, reason, subject }: { action: string; reason?: string; subject?: string }) {\n    super(reason ? `Permission denied: ${action} (${reason})` : `Permission denied: ${action}`);\n    this.name = 'PermissionDeniedError';\n    this.action = action;\n    this.reason = reason;\n    this.subject = subject;\n  }\n}\n","/**\n * @module domain/permissions/admin\n *\n * Baseline admin-role predicates. Token-only — depend purely on the admin\n * role string carried in `StorageToken.admin.role`. Each predicate has an\n * `assertCan*` pair that throws `PermissionDeniedError` with a stable\n * kebab-case `action` field documented per pair.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\nimport { AdminRole } from '../../constants/adminRoles';\n\nimport { PermissionDeniedError } from './errors';\n\nconst role = (token: StorageToken): string => token.admin.role;\n\nexport const isAdmin = (token: StorageToken): boolean => role(token) === AdminRole.Admin;\n\nexport const isAdminOrShare = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Admin || role(token) === AdminRole.Share;\n\nexport const isProductionManager = (token: StorageToken): boolean =>\n  role(token) === AdminRole.ProductionManager;\n\nexport const isDeveloperOrReviewer = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Developer || role(token) === AdminRole.Reviewer;\n\nexport const isReadOnlyRole = (token: StorageToken): boolean => role(token) === AdminRole.ReadOnly;\n\nexport const assertCanAdmin = (token: StorageToken): void => {\n  if (!isAdmin(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin',\n      reason: `role '${role(token)}' is not admin`,\n    });\n  }\n};\n\nexport const assertCanAdminOrShare = (token: StorageToken): void => {\n  if (!isAdminOrShare(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin-or-share',\n      reason: `role '${role(token)}' is not admin or share`,\n    });\n  }\n};\n\nexport const assertCanProductionManage = (token: StorageToken): void => {\n  if (!isProductionManager(token)) {\n    throw new PermissionDeniedError({\n      action: 'production-manage',\n      reason: `role '${role(token)}' is not productionManager`,\n    });\n  }\n};\n\nexport const assertCanDevelopOrReview = (token: StorageToken): void => {\n  if (!isDeveloperOrReviewer(token)) {\n    throw new PermissionDeniedError({\n      action: 'develop-or-review',\n      reason: `role '${role(token)}' is not developer or reviewer`,\n    });\n  }\n};\n","/**\n * @module domain/permissions/configurations\n *\n * Predicate pairs guarding the Core SDK configuration workflow methods\n * (create / copy / migrate-from-template / purge / assign-folder). Each\n * predicate composes the baseline admin role predicates with the caller-\n * supplied dev-mode flag from `ctx`.\n *\n * Rule shape:\n *   - In a dev branch (`ctx.isDevModeActive === true`) → caller must be a\n *     developer or reviewer.\n *   - In production (`ctx.isDevModeActive === false`) → caller must be a\n *     production manager.\n *   - `canPurgeConfiguration` is **admin-only**, regardless of branch mode.\n *     Purge is destructive and the situational base rule does not apply —\n *     `token.admin.role` is a single scalar, so requiring both \"admin\" and\n *     \"developer/reviewer/productionManager\" simultaneously would be an\n *     impossible conjunction. The `ctx` parameter is accepted for signature\n *     symmetry with the other configuration predicates and ignored.\n *\n * `ctx` is the trailing object argument convention for composed predicates;\n * extra fields land here as future rules grow (see AGENTS.md).\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\n\nimport { isAdmin, isDeveloperOrReviewer, isProductionManager } from './admin';\nimport { PermissionDeniedError } from './errors';\n\n/**\n * Caller-supplied context for configuration predicates.\n *\n * @property isDevModeActive — `true` when the user is operating inside a\n *   development branch (any storage branch other than the protected default /\n *   production branch); `false` when operating on the default branch in\n *   production.\n *\n *   How the caller determines this:\n *   - The active branch comes from the caller's own routing / app state\n *     (e.g. `/branch/:branchId` in kbc-ui).\n *   - A branch is \"dev mode\" when it is **not** the default branch returned by\n *     `apiClient.storage.devBranches.list()` (where `isDefault === true`).\n *   - kbc-ui exposes this through its `RoutesStore.getCurrentRouteParam('branchId')`\n *     compared against the default branch id; the api-client itself stays\n *     isomorphic and never reads that state directly.\n *\n *   Why it changes the rule:\n *   - In dev branches Keboola allows broader write access — `developer` and\n *     `reviewer` roles may create / copy / migrate configurations because the\n *     branch is sandboxed from production.\n *   - On the default branch only `productionManager` (or `admin`) may perform\n *     the same writes, since changes ship live to production.\n */\nexport type ConfigurationCtx = {\n  isDevModeActive: boolean;\n};\n\nconst meetsBaseRule = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  ctx.isDevModeActive ? isDeveloperOrReviewer(token) : isProductionManager(token);\n\nconst baseDenialReason = (ctx: ConfigurationCtx): string =>\n  ctx.isDevModeActive\n    ? 'dev branch requires developer or reviewer role'\n    : 'production requires productionManager role';\n\nexport const canCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => boolean = (\n  token,\n) => isAdmin(token);\n\nexport const canAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const assertCanCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCreateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'create-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCopyConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'copy-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canMigrateFromTemplate(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'migrate-from-template',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanPurgeConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canPurgeConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'purge-configuration',\n      reason: 'purge requires admin role',\n    });\n  }\n};\n\nexport const assertCanAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canAssignFolder(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'assign-folder',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n"]}

package/dist/encryption/index.d.cts

@@ -1,8 +1,8 @@
 import { C as ClientInitOptions } from '../types-BLJoO6YL.cjs';
 import { EncryptQuery, ScopedSecrets } from './types.cjs';
 import 'qs';
-import '../types-CMEwVQ78.cjs';
-import '../backends-BgUzAQul.cjs';
+import '../types-ClxrZC77.cjs';
+import '../backends-Bofq_Nr0.cjs';
 import '../types-jKnx7Tm_.cjs';
 
 declare const createEncryptionClient: ({ baseUrl, middlewares, }: Omit<ClientInitOptions, "token">) => {

package/dist/encryption/index.d.ts

@@ -1,8 +1,8 @@
 import { C as ClientInitOptions } from '../types-BLJoO6YL.js';
 import { EncryptQuery, ScopedSecrets } from './types.js';
 import 'qs';
-import '../types-GmAeMsok.js';
-import '../backends-BgUzAQul.js';
+import '../types-o8eTf_G9.js';
+import '../backends-Bofq_Nr0.js';
 import '../types-jKnx7Tm_.js';
 
 declare const createEncryptionClient: ({ baseUrl, middlewares, }: Omit<ClientInitOptions, "token">) => {

package/dist/encryption/types.d.cts

@@ -1,5 +1,5 @@
-import { P as ProjectId } from '../types-CMEwVQ78.cjs';
-import '../backends-BgUzAQul.cjs';
+import { P as ProjectId } from '../types-ClxrZC77.cjs';
+import '../backends-Bofq_Nr0.cjs';
 import '../types-jKnx7Tm_.cjs';
 
 type BranchType = 'default' | 'dev';

package/dist/encryption/types.d.ts

@@ -1,5 +1,5 @@
-import { P as ProjectId } from '../types-GmAeMsok.js';
-import '../backends-BgUzAQul.js';
+import { P as ProjectId } from '../types-o8eTf_G9.js';
+import '../backends-Bofq_Nr0.js';
 import '../types-jKnx7Tm_.js';
 
 type BranchType = 'default' | 'dev';

package/dist/index.d.cts

@@ -3,7 +3,7 @@ import { L as LoginInput, O as OidcInput, M as MfaCodeInput, a as MfaWebauthnInp
 import { M as MiddlewareFn, c as BaseClientOptions, A as ApiResponse, H as HttpMethod } from './types-BLJoO6YL.cjs';
 export { a as ApiError } from './types-BLJoO6YL.cjs';
 import { D as DeletedProjectsListQuery, a as DeletedProject, b as DeletedProjectPurgeResult, M as Maintainer, c as MaintainerDetail, C as CreateMaintainerBody, U as UpdateMaintainerBody, d as MaintainerUser, A as AddMaintainerUserBody, e as CreateMaintainerInvitationBody, f as CreateMaintainerOrganizationBody, g as MetadataItem, S as SetMaintainerMetadataBody, O as OrganizationDetail, h as UpdateOrganizationBody, i as AddOrganizationUserBody, j as CreateOrganizationInvitationBody, P as Project, k as CreateOrganizationProjectBody, l as SetOrganizationMetadataBody, G as GetAllFeaturesQuery, F as Feature, m as FeatureProject, n as FeatureAdmin, o as GetProjectPath, p as CreateProjectFeaturePath, q as CreateProjectFeatureBody, R as RemoveProjectFeaturePath, r as User, L as ListProjectUsersPath, s as ListProjectInvitationsPath, t as CreateProjectInvitationPath, u as CreateProjectInvitationBody, v as DeleteProjectInvitationPath, w as AddProjectUserPath, x as AddProjectUserBody, y as RemoveProjectUserPath, z as GetProjectMetadataPath, B as ProjectMetadataItem, E as SetProjectMetadataPath, H as SetProjectMetadataBody, I as GetProjectReviewersPath, J as Reviewer, K as SetProjectReviewersPath, N as SetProjectReviewersBody, Q as UpdateProjectBody, T as MoveProjectBody, V as SetProjectDisabledBody, W as AddUserFeatureBody, X as AddUserFeaturePath, Y as RemoveUserFeaturePath } from './types-YEfQ5pAy.cjs';
-import { S as StorageToken, c as components$8, C as CreateTokenBody, U as UpdateTokenBody, a as ShareTokenBody } from './types-CMEwVQ78.cjs';
+import { S as StorageToken, c as components$8, C as CreateTokenBody, U as UpdateTokenBody, a as ShareTokenBody } from './types-ClxrZC77.cjs';
 import { StorageTableScope as StorageTable } from './domain/storageTable/index.cjs';
 import { M as MetaObject, G as GetMetaObjectsPath, a as MetaStoreListResponse, b as GetMetaObjectRevisionsPath, c as GetMetaObjectPath, d as MetaStoreObjectResponse, C as CreateMetaObjectInput, D as DeleteMetaObjectPath, U as UpdateMetaObjectInput, R as ReplaceMetaObjectInput, e as GetMetaObjectRevisionPath, f as DeleteMetaObjectRevisionPath, g as GetSchemaPath, h as components$7, i as GetVersionedSchemaPath } from './types-BCPmAXOQ.cjs';
 import { L as ListSubscriptionsQuery, c as components$6, G as GetSubscriptionPath, C as CreateSubscriptionBody, D as DeleteSubscriptionPath } from './types-BVldT2vs.cjs';
@@ -24,23 +24,23 @@ import { EncryptQuery, ScopedSecrets } from './encryption/types.cjs';
 import { G as GetDataAppRunsPath, a as GetDataAppRunsQuery, b as GetDataAppRunPath, c as GetDataAppLogsDownloadPath, d as GetDataAppLogsTailPath, e as GetDataAppLogsTailQuery, L as LogEntry, f as GetAppsQuery, g as GetDataAppPath, C as CreateDataAppBody, P as PatchDataAppPath, h as PatchDataAppBody, D as DeleteDataAppPath, i as GetDataAppPasswordPath, R as ResetDataAppPasswordPath, j as GetSandboxPath, k as DeleteSandboxPath } from './utils-DDERw8dM.cjs';
 export { p as parseLogLines } from './utils-DDERw8dM.cjs';
 import { CreateVariableBody, VariableWithHash, DeleteVariablePath, GetVariablesQuery, GetVariablesByBranchId } from './vault/types.cjs';
-import { a as EncryptionCtx } from './types-DsqDUWJn.cjs';
+import { a as EncryptionCtx } from './types-DHCbX2uR.cjs';
 import { TagWithBindings, TagData, CreateMetaObjectMetaDataInput, UpdateMetaObjectMetaDataInput } from './sdk/tag/types.cjs';
 import * as zod_v4_core from 'zod/v4/core';
 import * as zod from 'zod';
 import { z } from 'zod';
 import { ServiceId, ConfigurationPath, BaseComponentConfig, CreateConfigurationInput, UpdateConfigurationInput, CreateTableAsyncBody, TableCreateJob, CreateTableDefinitionBody, JobStatus, Table, TableImportAsyncBody, TableImportJob, TableExportAsyncBody, TableExportJob, BucketListing, CreateBucketListingInput, UpdateBucketListingInput, ShareBucketToProjectsBody, ShareBucketToUsersBody, RegisterBucketBody, RefreshExternalBucketQuery, CreateSnapshotBody, AddTableColumnBody, DeleteTableColumnQuery, CreateTablePrimaryKeyBody, Service, StackComponent, GetBucketsQuery, Bucket, BucketDetail, CreateBucketBody, UpdateBucketBody, CreateScheduledRefreshPath, CreateScheduledRefreshBody, ScheduledTask, Job, UpdateBucketOwnerBody, BucketRegistrationGuideQuery, SaveBucketMetadataBody, GetEventsQuery, StorageEvent, GetTableEventsQuery, TableEvent, CreateEventBody, File as File$1, GetFilesQuery, DeleteFileTagPath, PrepareFileBody, PreparedFile, GetTablesQuery, TableDetail, GetDataPreview, PreviewData, DeleteTableRows, JobUnion, UpdateTableDefinitionInput, UpdateTableBody, CreateAliasTableBody, SetAliasTableFilterBody, Snapshot, SaveMetadataBody, Metadata, DevBranch, CreateDevBranchJobBody, DevBranchPath, BranchMetadata, BranchMetadataEntry, WorkspacePath, Workspace, WorkspacesPath, ResetWorkspacePassword, SetWorkspacePublicInput, GetWorkspaceSaml2LoginPath, WorkspaceSaml2Login, WorkspaceObject, DeleteWorkspaceObjectInput, UnloadWorkspaceInput, WorkspaceInputMappingLoadPreviewInput, MergeRequestDetail, MergeRequestDetailWithActivityLog, CreateMergeRequestParams, UpdateMergeRequestParams, JobOperation, GetJobPath, GetJobsQuery, GetComponentPath, Component, GetComponentsPath, GetComponentsQuery, GetSearchComponentConfigurationsPath, SearchComponentConfigurationsQuery, SearchComponentConfiguration, ConfigType, PartialKey, ComponentConfig, ConfigurationDiffPath, ConfigurationDiff, ConfigurationRowDiffPath, ConfigurationRowDiff, RebaseConfigurationInput, GetConfigurationsPath, CreateConfigurationRowInput, Row, CreateConfigurationRowsInput, CreateConfigurationRowBody, DeleteConfigurationRowInput, DeleteConfigurationRowsInput, CreateConfigurationWorkspaceBody, ConfigurationUseCaseType, ConfigurationVersionPath, ConfigurationVersion, ConfigurationVersionDetailPath, ConfigurationVersionDetail, ListTriggersQuery, CreateTriggerBody, UpdateTriggerBody, GlobalSearchQuery, GlobalSearchResponse, RunIdStats, GetStackInfoQuery, StackInfo } from './storage/types.cjs';
 import { R as RegisteredComponentId } from './registry-BLItWxbK.cjs';
-import { C as ConcurrentOptions, M as MiddlewareFn$1 } from './storageClient-C0Kh5L01.cjs';
-export { a as concurrent } from './storageClient-C0Kh5L01.cjs';
+import { C as ConcurrentOptions, M as MiddlewareFn$1 } from './storageClient-8LhUUGYa.cjs';
+export { a as concurrent } from './storageClient-8LhUUGYa.cjs';
 import { K as KeboolaObjectId } from './keboolaUID-D1DGSbge.cjs';
 export { k as keboolaUID } from './keboolaUID-D1DGSbge.cjs';
-import { B as Backend } from './backends-BgUzAQul.cjs';
+import { B as Backend } from './backends-Bofq_Nr0.cjs';
 export { FetchClientError, ServiceUnavailableError, UserError, isAbortError, isApiError, isFetchClientError } from './storage/index.cjs';
 export { c as createGenericFetchClient } from './createGenericFetchClient-CSHOaFE3.cjs';
 export { i as isManagementClientAuthError } from './authMiddleware-B9RM45AH.cjs';
 export { M as ManagementClientAuthError } from './ManagementClientAuthError-DNUPB6cb.cjs';
-export { c as createStorageSdk } from './storageSdk-BCUgrB3U.cjs';
+export { c as createStorageSdk } from './storageSdk-CXFUSkSB.cjs';
 import 'qs';
 import './encryption/index.cjs';
 import './vault/index.cjs';

package/dist/index.d.ts

@@ -3,7 +3,7 @@ import { L as LoginInput, O as OidcInput, M as MfaCodeInput, a as MfaWebauthnInp
 import { M as MiddlewareFn, c as BaseClientOptions, A as ApiResponse, H as HttpMethod } from './types-BLJoO6YL.js';
 export { a as ApiError } from './types-BLJoO6YL.js';
 import { D as DeletedProjectsListQuery, a as DeletedProject, b as DeletedProjectPurgeResult, M as Maintainer, c as MaintainerDetail, C as CreateMaintainerBody, U as UpdateMaintainerBody, d as MaintainerUser, A as AddMaintainerUserBody, e as CreateMaintainerInvitationBody, f as CreateMaintainerOrganizationBody, g as MetadataItem, S as SetMaintainerMetadataBody, O as OrganizationDetail, h as UpdateOrganizationBody, i as AddOrganizationUserBody, j as CreateOrganizationInvitationBody, P as Project, k as CreateOrganizationProjectBody, l as SetOrganizationMetadataBody, G as GetAllFeaturesQuery, F as Feature, m as FeatureProject, n as FeatureAdmin, o as GetProjectPath, p as CreateProjectFeaturePath, q as CreateProjectFeatureBody, R as RemoveProjectFeaturePath, r as User, L as ListProjectUsersPath, s as ListProjectInvitationsPath, t as CreateProjectInvitationPath, u as CreateProjectInvitationBody, v as DeleteProjectInvitationPath, w as AddProjectUserPath, x as AddProjectUserBody, y as RemoveProjectUserPath, z as GetProjectMetadataPath, B as ProjectMetadataItem, E as SetProjectMetadataPath, H as SetProjectMetadataBody, I as GetProjectReviewersPath, J as Reviewer, K as SetProjectReviewersPath, N as SetProjectReviewersBody, Q as UpdateProjectBody, T as MoveProjectBody, V as SetProjectDisabledBody, W as AddUserFeatureBody, X as AddUserFeaturePath, Y as RemoveUserFeaturePath } from './types-YEfQ5pAy.js';
-import { S as StorageToken, c as components$8, C as CreateTokenBody, U as UpdateTokenBody, a as ShareTokenBody } from './types-GmAeMsok.js';
+import { S as StorageToken, c as components$8, C as CreateTokenBody, U as UpdateTokenBody, a as ShareTokenBody } from './types-o8eTf_G9.js';
 import { StorageTableScope as StorageTable } from './domain/storageTable/index.js';
 import { M as MetaObject, G as GetMetaObjectsPath, a as MetaStoreListResponse, b as GetMetaObjectRevisionsPath, c as GetMetaObjectPath, d as MetaStoreObjectResponse, C as CreateMetaObjectInput, D as DeleteMetaObjectPath, U as UpdateMetaObjectInput, R as ReplaceMetaObjectInput, e as GetMetaObjectRevisionPath, f as DeleteMetaObjectRevisionPath, g as GetSchemaPath, h as components$7, i as GetVersionedSchemaPath } from './types-BowqtZ7v.js';
 import { L as ListSubscriptionsQuery, c as components$6, G as GetSubscriptionPath, C as CreateSubscriptionBody, D as DeleteSubscriptionPath } from './types-CS8MYc2k.js';
@@ -24,23 +24,23 @@ import { EncryptQuery, ScopedSecrets } from './encryption/types.js';
 import { G as GetDataAppRunsPath, a as GetDataAppRunsQuery, b as GetDataAppRunPath, c as GetDataAppLogsDownloadPath, d as GetDataAppLogsTailPath, e as GetDataAppLogsTailQuery, L as LogEntry, f as GetAppsQuery, g as GetDataAppPath, C as CreateDataAppBody, P as PatchDataAppPath, h as PatchDataAppBody, D as DeleteDataAppPath, i as GetDataAppPasswordPath, R as ResetDataAppPasswordPath, j as GetSandboxPath, k as DeleteSandboxPath } from './utils-C7eSJKtG.js';
 export { p as parseLogLines } from './utils-C7eSJKtG.js';
 import { CreateVariableBody, VariableWithHash, DeleteVariablePath, GetVariablesQuery, GetVariablesByBranchId } from './vault/types.js';
-import { a as EncryptionCtx } from './types-D64zThBJ.js';
+import { a as EncryptionCtx } from './types-l_pP5J0H.js';
 import { TagWithBindings, TagData, CreateMetaObjectMetaDataInput, UpdateMetaObjectMetaDataInput } from './sdk/tag/types.js';
 import * as zod_v4_core from 'zod/v4/core';
 import * as zod from 'zod';
 import { z } from 'zod';
 import { ServiceId, ConfigurationPath, BaseComponentConfig, CreateConfigurationInput, UpdateConfigurationInput, CreateTableAsyncBody, TableCreateJob, CreateTableDefinitionBody, JobStatus, Table, TableImportAsyncBody, TableImportJob, TableExportAsyncBody, TableExportJob, BucketListing, CreateBucketListingInput, UpdateBucketListingInput, ShareBucketToProjectsBody, ShareBucketToUsersBody, RegisterBucketBody, RefreshExternalBucketQuery, CreateSnapshotBody, AddTableColumnBody, DeleteTableColumnQuery, CreateTablePrimaryKeyBody, Service, StackComponent, GetBucketsQuery, Bucket, BucketDetail, CreateBucketBody, UpdateBucketBody, CreateScheduledRefreshPath, CreateScheduledRefreshBody, ScheduledTask, Job, UpdateBucketOwnerBody, BucketRegistrationGuideQuery, SaveBucketMetadataBody, GetEventsQuery, StorageEvent, GetTableEventsQuery, TableEvent, CreateEventBody, File as File$1, GetFilesQuery, DeleteFileTagPath, PrepareFileBody, PreparedFile, GetTablesQuery, TableDetail, GetDataPreview, PreviewData, DeleteTableRows, JobUnion, UpdateTableDefinitionInput, UpdateTableBody, CreateAliasTableBody, SetAliasTableFilterBody, Snapshot, SaveMetadataBody, Metadata, DevBranch, CreateDevBranchJobBody, DevBranchPath, BranchMetadata, BranchMetadataEntry, WorkspacePath, Workspace, WorkspacesPath, ResetWorkspacePassword, SetWorkspacePublicInput, GetWorkspaceSaml2LoginPath, WorkspaceSaml2Login, WorkspaceObject, DeleteWorkspaceObjectInput, UnloadWorkspaceInput, WorkspaceInputMappingLoadPreviewInput, MergeRequestDetail, MergeRequestDetailWithActivityLog, CreateMergeRequestParams, UpdateMergeRequestParams, JobOperation, GetJobPath, GetJobsQuery, GetComponentPath, Component, GetComponentsPath, GetComponentsQuery, GetSearchComponentConfigurationsPath, SearchComponentConfigurationsQuery, SearchComponentConfiguration, ConfigType, PartialKey, ComponentConfig, ConfigurationDiffPath, ConfigurationDiff, ConfigurationRowDiffPath, ConfigurationRowDiff, RebaseConfigurationInput, GetConfigurationsPath, CreateConfigurationRowInput, Row, CreateConfigurationRowsInput, CreateConfigurationRowBody, DeleteConfigurationRowInput, DeleteConfigurationRowsInput, CreateConfigurationWorkspaceBody, ConfigurationUseCaseType, ConfigurationVersionPath, ConfigurationVersion, ConfigurationVersionDetailPath, ConfigurationVersionDetail, ListTriggersQuery, CreateTriggerBody, UpdateTriggerBody, GlobalSearchQuery, GlobalSearchResponse, RunIdStats, GetStackInfoQuery, StackInfo } from './storage/types.js';
 import { R as RegisteredComponentId } from './registry-BLItWxbK.js';
-import { C as ConcurrentOptions, M as MiddlewareFn$1 } from './storageClient-Bqd4_-xH.js';
-export { a as concurrent } from './storageClient-Bqd4_-xH.js';
+import { C as ConcurrentOptions, M as MiddlewareFn$1 } from './storageClient-Scemp8F6.js';
+export { a as concurrent } from './storageClient-Scemp8F6.js';
 import { K as KeboolaObjectId } from './keboolaUID-D1DGSbge.js';
 export { k as keboolaUID } from './keboolaUID-D1DGSbge.js';
-import { B as Backend } from './backends-BgUzAQul.js';
+import { B as Backend } from './backends-Bofq_Nr0.js';
 export { FetchClientError, ServiceUnavailableError, UserError, isAbortError, isApiError, isFetchClientError } from './storage/index.js';
 export { c as createGenericFetchClient } from './createGenericFetchClient-D_vU8nco.js';
 export { i as isManagementClientAuthError } from './authMiddleware-CwkfLK36.js';
 export { M as ManagementClientAuthError } from './ManagementClientAuthError-WRHtWJSv.js';
-export { c as createStorageSdk } from './storageSdk-C5Ea9eRR.js';
+export { c as createStorageSdk } from './storageSdk-r-6-GCFM.js';
 import 'qs';
 import './encryption/index.js';
 import './vault/index.js';

package/dist/{project-BxSa1Ci9.d.ts → project-Bj7A_TSe.d.ts}

@@ -1,5 +1,5 @@
-import { S as StorageToken } from './types-GmAeMsok.js';
-import { B as Backend } from './backends-BgUzAQul.js';
+import { S as StorageToken } from './types-o8eTf_G9.js';
+import { B as Backend } from './backends-Bofq_Nr0.js';
 
 type Options = {
     sapiToken: StorageToken;

package/dist/{project-NJuUPx8-.d.cts → project-CX3TEH8A.d.cts}

@@ -1,5 +1,5 @@
-import { S as StorageToken } from './types-CMEwVQ78.cjs';
-import { B as Backend } from './backends-BgUzAQul.cjs';
+import { S as StorageToken } from './types-ClxrZC77.cjs';
+import { B as Backend } from './backends-Bofq_Nr0.cjs';
 
 type Options = {
     sapiToken: StorageToken;

package/dist/sdk/configurations/index.d.cts

@@ -1,14 +1,14 @@
 import { z } from 'zod';
 import { createEncryptionClient } from '../../encryption/index.cjs';
-import { c as createStorageClient } from '../../storageClient-C0Kh5L01.cjs';
+import { c as createStorageClient } from '../../storageClient-8LhUUGYa.cjs';
 import { DevBranch, ConfigurationPath, BaseComponentConfig, CreateConfigurationInput, UpdateConfigurationInput } from '../../storage/types.cjs';
-import { P as Project } from '../../project-NJuUPx8-.cjs';
+import { P as Project } from '../../project-CX3TEH8A.cjs';
 import { R as RegisteredComponentId, r as registry } from '../../registry-BLItWxbK.cjs';
 import '../../types-BLJoO6YL.cjs';
 import 'qs';
 import '../../encryption/types.cjs';
-import '../../types-CMEwVQ78.cjs';
-import '../../backends-BgUzAQul.cjs';
+import '../../types-ClxrZC77.cjs';
+import '../../backends-Bofq_Nr0.cjs';
 import '../../types-jKnx7Tm_.cjs';
 import '../../createGenericFetchClient-CSHOaFE3.cjs';
 import '../../createOpenapiFetchClient-CKNLT4ND.cjs';

package/dist/sdk/configurations/index.d.ts

@@ -1,14 +1,14 @@
 import { z } from 'zod';
 import { createEncryptionClient } from '../../encryption/index.js';
-import { c as createStorageClient } from '../../storageClient-Bqd4_-xH.js';
+import { c as createStorageClient } from '../../storageClient-Scemp8F6.js';
 import { DevBranch, ConfigurationPath, BaseComponentConfig, CreateConfigurationInput, UpdateConfigurationInput } from '../../storage/types.js';
-import { P as Project } from '../../project-BxSa1Ci9.js';
+import { P as Project } from '../../project-Bj7A_TSe.js';
 import { R as RegisteredComponentId, r as registry } from '../../registry-BLItWxbK.js';
 import '../../types-BLJoO6YL.js';
 import 'qs';
 import '../../encryption/types.js';
-import '../../types-GmAeMsok.js';
-import '../../backends-BgUzAQul.js';
+import '../../types-o8eTf_G9.js';
+import '../../backends-Bofq_Nr0.js';
 import '../../types-jKnx7Tm_.js';
 import '../../createGenericFetchClient-D_vU8nco.js';
 import '../../createOpenapiFetchClient-B50N1zkV.js';

package/dist/sdk/storage/index.d.cts

@@ -1,9 +1,9 @@
-export { c as createStorageSdk } from '../../storageSdk-BCUgrB3U.cjs';
+export { c as createStorageSdk } from '../../storageSdk-CXFUSkSB.cjs';
 import '../../storage/types.cjs';
 import '../../types-jKnx7Tm_.cjs';
-import '../../types-CMEwVQ78.cjs';
-import '../../backends-BgUzAQul.cjs';
-import '../../storageClient-C0Kh5L01.cjs';
+import '../../types-ClxrZC77.cjs';
+import '../../backends-Bofq_Nr0.cjs';
+import '../../storageClient-8LhUUGYa.cjs';
 import '../../types-BLJoO6YL.cjs';
 import 'qs';
 import '../../createGenericFetchClient-CSHOaFE3.cjs';

package/dist/sdk/storage/index.d.ts

@@ -1,9 +1,9 @@
-export { c as createStorageSdk } from '../../storageSdk-C5Ea9eRR.js';
+export { c as createStorageSdk } from '../../storageSdk-r-6-GCFM.js';
 import '../../storage/types.js';
 import '../../types-jKnx7Tm_.js';
-import '../../types-GmAeMsok.js';
-import '../../backends-BgUzAQul.js';
-import '../../storageClient-Bqd4_-xH.js';
+import '../../types-o8eTf_G9.js';
+import '../../backends-Bofq_Nr0.js';
+import '../../storageClient-Scemp8F6.js';
 import '../../types-BLJoO6YL.js';
 import 'qs';
 import '../../createGenericFetchClient-D_vU8nco.js';

package/dist/sdk/vault/index.d.cts

@@ -1,12 +1,12 @@
 import { CreateVariableBody, VariableWithHash, AnyVariable } from '../../vault/types.cjs';
-import { V as VaultClient, E as EncryptionClient, a as EncryptionCtx } from '../../types-DsqDUWJn.cjs';
+import { V as VaultClient, E as EncryptionClient, a as EncryptionCtx } from '../../types-DHCbX2uR.cjs';
 import '../../types-jKnx7Tm_.cjs';
 import '../../encryption/index.cjs';
 import '../../types-BLJoO6YL.cjs';
 import 'qs';
 import '../../encryption/types.cjs';
-import '../../types-CMEwVQ78.cjs';
-import '../../backends-BgUzAQul.cjs';
+import '../../types-ClxrZC77.cjs';
+import '../../backends-Bofq_Nr0.cjs';
 import '../../vault/index.cjs';
 
 type Options = {

package/dist/sdk/vault/index.d.ts

@@ -1,12 +1,12 @@
 import { CreateVariableBody, VariableWithHash, AnyVariable } from '../../vault/types.js';
-import { V as VaultClient, E as EncryptionClient, a as EncryptionCtx } from '../../types-D64zThBJ.js';
+import { V as VaultClient, E as EncryptionClient, a as EncryptionCtx } from '../../types-l_pP5J0H.js';
 import '../../types-jKnx7Tm_.js';
 import '../../encryption/index.js';
 import '../../types-BLJoO6YL.js';
 import 'qs';
 import '../../encryption/types.js';
-import '../../types-GmAeMsok.js';
-import '../../backends-BgUzAQul.js';
+import '../../types-o8eTf_G9.js';
+import '../../backends-Bofq_Nr0.js';
 import '../../vault/index.js';
 
 type Options = {

package/dist/storage/index.d.cts

@@ -1,8 +1,8 @@
-export { G as GenericFetchClient, S as StorageOpenApiFetchClient, c as createStorageClient } from '../storageClient-C0Kh5L01.cjs';
+export { G as GenericFetchClient, S as StorageOpenApiFetchClient, c as createStorageClient } from '../storageClient-8LhUUGYa.cjs';
 import { a as ApiError } from '../types-BLJoO6YL.cjs';
 export { M as ManagementClientAuthError } from '../ManagementClientAuthError-DNUPB6cb.cjs';
-import '../types-CMEwVQ78.cjs';
-import '../backends-BgUzAQul.cjs';
+import '../types-ClxrZC77.cjs';
+import '../backends-Bofq_Nr0.cjs';
 import '../types-jKnx7Tm_.cjs';
 import './types.cjs';
 import '../createGenericFetchClient-CSHOaFE3.cjs';

package/dist/storage/index.d.ts

@@ -1,8 +1,8 @@
-export { G as GenericFetchClient, S as StorageOpenApiFetchClient, c as createStorageClient } from '../storageClient-Bqd4_-xH.js';
+export { G as GenericFetchClient, S as StorageOpenApiFetchClient, c as createStorageClient } from '../storageClient-Scemp8F6.js';
 import { a as ApiError } from '../types-BLJoO6YL.js';
 export { M as ManagementClientAuthError } from '../ManagementClientAuthError-WRHtWJSv.js';
-import '../types-GmAeMsok.js';
-import '../backends-BgUzAQul.js';
+import '../types-o8eTf_G9.js';
+import '../backends-Bofq_Nr0.js';
 import '../types-jKnx7Tm_.js';
 import './types.js';
 import '../createGenericFetchClient-D_vU8nco.js';

package/dist/storage/types.d.cts

@@ -1,7 +1,7 @@
 import { c as OpenapiQueryType, b as OpenapiBodyType, a as OpenapiReturnType, d as OpenapiPathType } from '../types-jKnx7Tm_.cjs';
-import { p as paths, c as components } from '../types-CMEwVQ78.cjs';
-export { C as CreateTokenBody, b as CreateTokenResponse, P as ProjectId, a as ShareTokenBody, S as StorageToken, T as TokenListItem, U as UpdateTokenBody } from '../types-CMEwVQ78.cjs';
-export { A as AdminRole, B as Backend } from '../backends-BgUzAQul.cjs';
+import { p as paths, c as components } from '../types-ClxrZC77.cjs';
+export { C as CreateTokenBody, b as CreateTokenResponse, P as ProjectId, a as ShareTokenBody, S as StorageToken, T as TokenListItem, U as UpdateTokenBody } from '../types-ClxrZC77.cjs';
+export { A as AdminRole, B as Backend } from '../backends-Bofq_Nr0.cjs';
 
 type BucketStage = 'in' | 'out';
 type BucketBackend = 'snowflake' | 'redshift' | 'bigquery' | 'teradata';
@@ -334,7 +334,7 @@ type WhereFilters = {
 type DeleteTableRows = {
     changedSince?: string;
     changedUntil?: string;
-    whereFilters?: WhereFilters;
+    whereFilters?: WhereFilters[];
 };
 type GetDataPreview = {
     format?: 'json' | 'rfc';

package/dist/storage/types.d.ts

@@ -1,7 +1,7 @@
 import { c as OpenapiQueryType, b as OpenapiBodyType, a as OpenapiReturnType, d as OpenapiPathType } from '../types-jKnx7Tm_.js';
-import { p as paths, c as components } from '../types-GmAeMsok.js';
-export { C as CreateTokenBody, b as CreateTokenResponse, P as ProjectId, a as ShareTokenBody, S as StorageToken, T as TokenListItem, U as UpdateTokenBody } from '../types-GmAeMsok.js';
-export { A as AdminRole, B as Backend } from '../backends-BgUzAQul.js';
+import { p as paths, c as components } from '../types-o8eTf_G9.js';
+export { C as CreateTokenBody, b as CreateTokenResponse, P as ProjectId, a as ShareTokenBody, S as StorageToken, T as TokenListItem, U as UpdateTokenBody } from '../types-o8eTf_G9.js';
+export { A as AdminRole, B as Backend } from '../backends-Bofq_Nr0.js';
 
 type BucketStage = 'in' | 'out';
 type BucketBackend = 'snowflake' | 'redshift' | 'bigquery' | 'teradata';
@@ -334,7 +334,7 @@ type WhereFilters = {
 type DeleteTableRows = {
     changedSince?: string;
     changedUntil?: string;
-    whereFilters?: WhereFilters;
+    whereFilters?: WhereFilters[];
 };
 type GetDataPreview = {
     format?: 'json' | 'rfc';

package/dist/{storageClient-C0Kh5L01.d.cts → storageClient-8LhUUGYa.d.cts}

@@ -1,4 +1,4 @@
-import { c as components, S as StorageToken, C as CreateTokenBody, U as UpdateTokenBody, a as ShareTokenBody } from './types-CMEwVQ78.cjs';
+import { c as components, S as StorageToken, C as CreateTokenBody, U as UpdateTokenBody, a as ShareTokenBody } from './types-ClxrZC77.cjs';
 import { GetBucketsQuery, Bucket, BucketDetail, CreateBucketBody, UpdateBucketBody, JobStatus, CreateScheduledRefreshPath, CreateScheduledRefreshBody, ScheduledTask, BucketListing, CreateBucketListingInput, Job, UpdateBucketListingInput, ShareBucketToProjectsBody, ShareBucketToUsersBody, UpdateBucketOwnerBody, RefreshExternalBucketQuery, RegisterBucketBody, BucketRegistrationGuideQuery, SaveBucketMetadataBody, GetEventsQuery, StorageEvent, GetTableEventsQuery, TableEvent, CreateEventBody, File, GetFilesQuery, DeleteFileTagPath, PrepareFileBody, PreparedFile, GetTablesQuery, Table, TableDetail, GetDataPreview, PreviewData, DeleteTableRows, JobUnion, TableExportAsyncBody, TableExportJob, CreateTableAsyncBody, TableCreateJob, CreateTableDefinitionBody, TableImportAsyncBody, TableImportJob, UpdateTableDefinitionInput, UpdateTableBody, CreateAliasTableBody, SetAliasTableFilterBody, CreateSnapshotBody, Snapshot, SaveMetadataBody, Metadata, AddTableColumnBody, DeleteTableColumnQuery, CreateTablePrimaryKeyBody, DevBranch, CreateDevBranchJobBody, DevBranchPath, BranchMetadata, BranchMetadataEntry, WorkspacePath, Workspace, WorkspacesPath, ResetWorkspacePassword, SetWorkspacePublicInput, GetWorkspaceSaml2LoginPath, WorkspaceSaml2Login, WorkspaceObject, DeleteWorkspaceObjectInput, UnloadWorkspaceInput, WorkspaceInputMappingLoadPreviewInput, MergeRequestDetail, MergeRequestDetailWithActivityLog, CreateMergeRequestParams, UpdateMergeRequestParams, JobOperation, GetJobPath, GetJobsQuery, GetComponentPath, Component, GetComponentsPath, GetComponentsQuery, GetSearchComponentConfigurationsPath, SearchComponentConfigurationsQuery, SearchComponentConfiguration, CreateConfigurationInput, BaseComponentConfig, ConfigType, PartialKey, UpdateConfigurationInput, ComponentConfig, ConfigurationPath, ConfigurationDiffPath, ConfigurationDiff, ConfigurationRowDiffPath, ConfigurationRowDiff, RebaseConfigurationInput, GetConfigurationsPath, CreateConfigurationRowInput, Row, CreateConfigurationRowsInput, CreateConfigurationRowBody, DeleteConfigurationRowInput, DeleteConfigurationRowsInput, CreateConfigurationWorkspaceBody, ConfigurationUseCaseType, ConfigurationVersionPath, ConfigurationVersion, ConfigurationVersionDetailPath, ConfigurationVersionDetail, ListTriggersQuery, CreateTriggerBody, UpdateTriggerBody, GlobalSearchQuery, GlobalSearchResponse, RunIdStats, GetStackInfoQuery, StackInfo } from './storage/types.cjs';
 import { C as ClientInitOptions, M as MiddlewareFn$1 } from './types-BLJoO6YL.cjs';
 import { c as createGenericFetchClient } from './createGenericFetchClient-CSHOaFE3.cjs';

package/dist/{storageClient-Bqd4_-xH.d.ts → storageClient-Scemp8F6.d.ts}

@@ -1,4 +1,4 @@
-import { c as components, S as StorageToken, C as CreateTokenBody, U as UpdateTokenBody, a as ShareTokenBody } from './types-GmAeMsok.js';
+import { c as components, S as StorageToken, C as CreateTokenBody, U as UpdateTokenBody, a as ShareTokenBody } from './types-o8eTf_G9.js';
 import { GetBucketsQuery, Bucket, BucketDetail, CreateBucketBody, UpdateBucketBody, JobStatus, CreateScheduledRefreshPath, CreateScheduledRefreshBody, ScheduledTask, BucketListing, CreateBucketListingInput, Job, UpdateBucketListingInput, ShareBucketToProjectsBody, ShareBucketToUsersBody, UpdateBucketOwnerBody, RefreshExternalBucketQuery, RegisterBucketBody, BucketRegistrationGuideQuery, SaveBucketMetadataBody, GetEventsQuery, StorageEvent, GetTableEventsQuery, TableEvent, CreateEventBody, File, GetFilesQuery, DeleteFileTagPath, PrepareFileBody, PreparedFile, GetTablesQuery, Table, TableDetail, GetDataPreview, PreviewData, DeleteTableRows, JobUnion, TableExportAsyncBody, TableExportJob, CreateTableAsyncBody, TableCreateJob, CreateTableDefinitionBody, TableImportAsyncBody, TableImportJob, UpdateTableDefinitionInput, UpdateTableBody, CreateAliasTableBody, SetAliasTableFilterBody, CreateSnapshotBody, Snapshot, SaveMetadataBody, Metadata, AddTableColumnBody, DeleteTableColumnQuery, CreateTablePrimaryKeyBody, DevBranch, CreateDevBranchJobBody, DevBranchPath, BranchMetadata, BranchMetadataEntry, WorkspacePath, Workspace, WorkspacesPath, ResetWorkspacePassword, SetWorkspacePublicInput, GetWorkspaceSaml2LoginPath, WorkspaceSaml2Login, WorkspaceObject, DeleteWorkspaceObjectInput, UnloadWorkspaceInput, WorkspaceInputMappingLoadPreviewInput, MergeRequestDetail, MergeRequestDetailWithActivityLog, CreateMergeRequestParams, UpdateMergeRequestParams, JobOperation, GetJobPath, GetJobsQuery, GetComponentPath, Component, GetComponentsPath, GetComponentsQuery, GetSearchComponentConfigurationsPath, SearchComponentConfigurationsQuery, SearchComponentConfiguration, CreateConfigurationInput, BaseComponentConfig, ConfigType, PartialKey, UpdateConfigurationInput, ComponentConfig, ConfigurationPath, ConfigurationDiffPath, ConfigurationDiff, ConfigurationRowDiffPath, ConfigurationRowDiff, RebaseConfigurationInput, GetConfigurationsPath, CreateConfigurationRowInput, Row, CreateConfigurationRowsInput, CreateConfigurationRowBody, DeleteConfigurationRowInput, DeleteConfigurationRowsInput, CreateConfigurationWorkspaceBody, ConfigurationUseCaseType, ConfigurationVersionPath, ConfigurationVersion, ConfigurationVersionDetailPath, ConfigurationVersionDetail, ListTriggersQuery, CreateTriggerBody, UpdateTriggerBody, GlobalSearchQuery, GlobalSearchResponse, RunIdStats, GetStackInfoQuery, StackInfo } from './storage/types.js';
 import { C as ClientInitOptions, M as MiddlewareFn$1 } from './types-BLJoO6YL.js';
 import { c as createGenericFetchClient } from './createGenericFetchClient-D_vU8nco.js';

package/dist/{storageSdk-BCUgrB3U.d.cts → storageSdk-CXFUSkSB.d.cts}

@@ -1,5 +1,5 @@
 import { CreateTableAsyncBody, TableCreateJob, CreateTableDefinitionBody, JobStatus, Table, TableImportAsyncBody, TableImportJob, TableExportAsyncBody, TableExportJob, BucketListing, CreateBucketListingInput, UpdateBucketListingInput, ShareBucketToProjectsBody, ShareBucketToUsersBody, RegisterBucketBody, RefreshExternalBucketQuery, CreateSnapshotBody, AddTableColumnBody, DeleteTableColumnQuery, CreateTablePrimaryKeyBody } from './storage/types.cjs';
-import { c as createStorageClient } from './storageClient-C0Kh5L01.cjs';
+import { c as createStorageClient } from './storageClient-8LhUUGYa.cjs';
 
 type Options = {
     interval?: number;

package/dist/{storageSdk-C5Ea9eRR.d.ts → storageSdk-r-6-GCFM.d.ts}

@@ -1,5 +1,5 @@
 import { CreateTableAsyncBody, TableCreateJob, CreateTableDefinitionBody, JobStatus, Table, TableImportAsyncBody, TableImportJob, TableExportAsyncBody, TableExportJob, BucketListing, CreateBucketListingInput, UpdateBucketListingInput, ShareBucketToProjectsBody, ShareBucketToUsersBody, RegisterBucketBody, RefreshExternalBucketQuery, CreateSnapshotBody, AddTableColumnBody, DeleteTableColumnQuery, CreateTablePrimaryKeyBody } from './storage/types.js';
-import { c as createStorageClient } from './storageClient-Bqd4_-xH.js';
+import { c as createStorageClient } from './storageClient-Scemp8F6.js';
 
 type Options = {
     interval?: number;

package/dist/{types-CMEwVQ78.d.cts → types-ClxrZC77.d.cts}

@@ -1,4 +1,4 @@
-import { B as Backend, A as AdminRole } from './backends-BgUzAQul.cjs';
+import { B as Backend, A as AdminRole } from './backends-Bofq_Nr0.cjs';
 import { a as OpenapiReturnType } from './types-jKnx7Tm_.cjs';
 
 /**

package/dist/{types-DsqDUWJn.d.cts → types-DHCbX2uR.d.cts}

@@ -1,5 +1,5 @@
 import { createEncryptionClient } from './encryption/index.cjs';
-import { P as ProjectId } from './types-CMEwVQ78.cjs';
+import { P as ProjectId } from './types-ClxrZC77.cjs';
 import { createVaultClient } from './vault/index.cjs';
 
 type VaultClient = ReturnType<typeof createVaultClient>;

package/dist/{types-D64zThBJ.d.ts → types-l_pP5J0H.d.ts}

@@ -1,5 +1,5 @@
 import { createEncryptionClient } from './encryption/index.js';
-import { P as ProjectId } from './types-GmAeMsok.js';
+import { P as ProjectId } from './types-o8eTf_G9.js';
 import { createVaultClient } from './vault/index.js';
 
 type VaultClient = ReturnType<typeof createVaultClient>;

package/dist/{types-GmAeMsok.d.ts → types-o8eTf_G9.d.ts}

@@ -1,4 +1,4 @@
-import { B as Backend, A as AdminRole } from './backends-BgUzAQul.js';
+import { B as Backend, A as AdminRole } from './backends-Bofq_Nr0.js';
 import { a as OpenapiReturnType } from './types-jKnx7Tm_.js';
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@keboola/api-client",
-  "version": "18.0.0",
+  "version": "19.0.0",
   "description": "TypeScript SDK for Keboola APIs",
   "license": "MIT",
   "type": "module",
@@ -723,8 +723,8 @@
     "vite": "^8.0.16",
     "vitest": "^4.1.8",
     "yaml": "^2.8.3",
-    "@keboola/oxlint-config": "^6.0.0",
-    "@keboola/tsconfig": "^0.2.0"
+    "@keboola/tsconfig": "^0.2.0",
+    "@keboola/oxlint-config": "^8.0.0"
   },
   "scripts": {
     "gen:types": "openapi-typescript --export-type",

package/dist/chunk-NFA5ITNG.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/constants/adminRoles.ts"],"names":[],"mappings":";;;AAAO,IAAM,SAAA,GAAY;AAAA,EACvB,KAAA,EAAO,OAAA;AAAA,EACP,KAAA,EAAO,OAAA;AAAA,EACP,iBAAA,EAAmB,mBAAA;AAAA,EACnB,SAAA,EAAW,WAAA;AAAA,EACX,QAAA,EAAU;AACZ","file":"chunk-NFA5ITNG.cjs","sourcesContent":["export const AdminRole = {\n  Admin: 'admin',\n  Share: 'share',\n  ProductionManager: 'productionManager',\n  Developer: 'developer',\n  Reviewer: 'reviewer',\n} as const;\n\nexport type AdminRole = (typeof AdminRole)[keyof typeof AdminRole];\n"]}

package/dist/chunk-Y5QJJWDQ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/constants/adminRoles.ts"],"names":[],"mappings":";AAAO,IAAM,SAAA,GAAY;AAAA,EACvB,KAAA,EAAO,OAAA;AAAA,EACP,KAAA,EAAO,OAAA;AAAA,EACP,iBAAA,EAAmB,mBAAA;AAAA,EACnB,SAAA,EAAW,WAAA;AAAA,EACX,QAAA,EAAU;AACZ","file":"chunk-Y5QJJWDQ.js","sourcesContent":["export const AdminRole = {\n  Admin: 'admin',\n  Share: 'share',\n  ProductionManager: 'productionManager',\n  Developer: 'developer',\n  Reviewer: 'reviewer',\n} as const;\n\nexport type AdminRole = (typeof AdminRole)[keyof typeof AdminRole];\n"]}