@keboola/api-client 52.0.0 → 54.0.0

package/AGENTS.md

@@ -253,6 +253,7 @@ Import paths:
 | `@keboola/api-client/sdk/tag`             | Tag SDK (composes multiple clients)                              |
 | `@keboola/api-client/sdk/developerPortal` | Developer Portal SDK (client + its session)                      |
 | `@keboola/api-client/sdk/configurations`  | Core configuration SDK                                           |
+| `@keboola/api-client/sdk/dataAppServer`   | Data app server: Query Service per signed-in user (Node only)    |
 | `@keboola/api-client/domain/permissions`  | Permission primitives                                            |
 
 ### Query Service credentials
@@ -266,6 +267,7 @@ Import paths:
 | `{ type: 'app-user-token', token, storageToken }` | `X-Kbc-App-User-Token` and `X-StorageApi-Token` |
 
 ```ts
+import { AsyncLocalStorage } from 'node:async_hooks';
 import { readFileSync } from 'node:fs';
 
 // Static token
@@ -275,23 +277,49 @@ createQueryServiceClient({ baseUrl, auth: { type: 'sapi-token', token } });
 const storageToken = () => readFileSync(process.env.STORAGE_API_TOKEN_PATH!, 'utf8').trim();
 createQueryServiceClient({ baseUrl, auth: { type: 'sapi-token', token: storageToken } });
 
-// Request-scoped: the signed-in user when there is one, the app otherwise
+// Request-scoped: the signed-in user when there is one, the app otherwise.
+// A middleware runs each request inside `requestUser.run(req.get('X-Kbc-App-User-Token'), next)`.
+const requestUser = new AsyncLocalStorage<string | undefined>();
 createQueryServiceClient({
   baseUrl,
-  auth: () =>
-    userToken()
-      ? { type: 'app-user-token', token: userToken(), storageToken }
-      : { type: 'sapi-token', token: storageToken },
+  auth: () => {
+    const userToken = requestUser.getStore();
+    return userToken
+      ? { type: 'app-user-token', token: userToken, storageToken }
+      : { type: 'sapi-token', token: storageToken };
+  },
 });
 ```
 
 - Every token field is a value or a callback (`TokenSource`, sync or async). A provider (`QueryServiceCredentialProvider`) picks the credential. Both are resolved before every request, retries included.
+- A provider for a client shared between users reads request-scoped state, such as an `AsyncLocalStorage`. A variable shared between requests sends one user's token with another user's submit, poll or results call.
 - A provider or a token callback: every token is checked before each request (empty, spaces, non-ASCII → `ValidationError`, nothing sent), and so is a `bearer` project id. The request carries only that credential's headers; any other credential header is removed.
 - A credential with only string tokens is sent as fixed default headers, as `createAuthHeaders` does; a header that a middleware sets still goes out. Its `app-user-token` tokens are checked when the client is created; `sapi-token` / `bearer` strings are not.
 - Types: `QueryServiceCredential`, `QueryServiceCredentialProvider`, `AppUserTokenAuth`, `TokenSource` from `@keboola/api-client/queryService`. The app user token is a Query Service credential only, and it always travels with the app's Storage token.
 - The app user token works on any workspace; row-level security is a separate matter (`RowLevelSecurityError`).
 - `healthCheck` sends no credential. `middlewares` is optional here (default `[]`).
 
+### Data app server (`sdk/dataAppServer`)
+
+A data app's Node server uses `initializeApp` from `@keboola/api-client/sdk/dataAppServer` instead of wiring the provider above itself.
+
+```ts
+import { initializeApp } from '@keboola/api-client/sdk/dataAppServer';
+
+const kbc = initializeApp();
+app.use(kbc.server.expressMiddleware()); // first: keeps each request's signed-in user
+app.get('/api/sales', async (_req, res) => {
+  res.json(
+    await kbc.workspace?.runQuery('SELECT region, SUM(amount) AS total FROM sales GROUP BY 1'),
+  );
+});
+app.use(kbc.server.expressErrorHandler()); // last: a row-level security refusal answers 403
+```
+
+- Node only: no other entry imports it (`__tests__/buildOutput.test.ts`), so browser bundles stay free of `node:` modules.
+- Query inside a user request: elsewhere (startup, timers) only the app's Storage token goes out, which a governed workspace refuses.
+- Key a server-side cache by `kbc.server.currentUserKey()`, never share one cached result between users.
+
 ## Consumption Hierarchy
 
 When implementing an action that talks to a Keboola API, pick the highest layer that already covers it:
@@ -714,7 +742,6 @@ const getBuckets = async <const I extends readonly BucketInclude[] = []>(
 - **Both casts are required.** The spec's query has `include?: string`, so the tuple goes out as `query as Get…SchemaQuery`. The return needs `as unknown as …With<I>[]`: a type with keys made required or removed does not overlap the spec's all-optional shape, so a single `as` is refused. A detail read that joins `include` itself (`include?.join(',')`, `getBucket`) sends a plain string and needs no query cast. Together with the spec-defect bridge above, these are the sanctioned uses of `as` in this package.
 - **`exclude` reshapes, so it is a patch map.** `WithExcludes<T, Map, E>` takes `ExcludeMap<T>`: each value is a patch over `T` where a key replaces that field's type and `never` removes it. `StackInfoExcludes` maps `componentDetails` to `{ components: StackComponent[] }` and `components` to `{ components: never }`; `undefined` returns `T`. The query is `OpenapiExcludeQueryType<Op, E>`, the method takes the same `const E` generic and the same cast.
 - **Never** a `getXWithY` sibling method, a hand-typed `include?: 'foo'[]` without a map, or a conditional key made required on the base type.
-- **Where a `*.types.test.ts` already asserts on such a method, use an instantiation expression**, never a call (the root rules forbid new type-only tests): `expectTypeOf(storage.getStackInfo<'componentDetails'>).returns.resolves.toEqualTypeOf<…>()`. A call fires a real request, which MSW rejects as an unhandled error.
 
 ### A method that returns a job ends in `Async`
 

package/API-SURFACE.md

@@ -4,7 +4,7 @@
 
 Every namespace and method reachable from a ready `ProjectApi` — one project's api (`createKeboola(...).getProjectApi(id)` / `createLegacyKeboola(...).api`, or `useProjectApi()`). Generated from the TypeScript type checker — see `scripts/gen-surface.mjs`.
 
-26 top-level namespaces, 701 methods. This index lists method **names** only — full signatures live per namespace under [`surface/`](./surface). Open `surface/<namespace>.md` for the one you need.
+26 top-level namespaces, 705 methods. This index lists method **names** only — full signatures live per namespace under [`surface/`](./surface). Open `surface/<namespace>.md` for the one you need.
 
 ## [`api.ai`](./surface/ai.md)
 
@@ -233,6 +233,7 @@ Every namespace and method reachable from a ready `ProjectApi` — one project's
 - `fileStorage.createFileStorageGcs`
 - `fileStorage.createFileStorageS3`
 - `fileStorage.deleteFileStorage`
+- `fileStorage.getFileStorageProjects`
 - `fileStorage.getFileStoragesAbs`
 - `fileStorage.getFileStoragesGcs`
 - `fileStorage.getFileStoragesS3`
@@ -331,6 +332,7 @@ Every namespace and method reachable from a ready `ProjectApi` — one project's
 - `projects.setProjectMetadata`
 - `projects.setProjectReviewers`
 - `projects.updateProject`
+- `search.find`
 - `snowflakePartnerConnect.check`
 - `snowflakePartnerConnect.unlock`
 - `storageBackends.activateStorageBackend`
@@ -465,6 +467,8 @@ Every namespace and method reachable from a ready `ProjectApi` — one project's
 - `semanticLayer.deleteObject`
 - `semanticLayer.findObjectsByName`
 - `semanticLayer.getModel`
+- `semanticLayer.listAllObjects`
+- `semanticLayer.listAllObjectsWithUnreadable`
 - `semanticLayer.listModelChildren`
 - `semanticLayer.listModels`
 - `semanticLayer.listMyPendingScopeElevationRequests`

package/CHANGELOG.md

@@ -1,5 +1,44 @@
 # @keboola/api-client
 
+## 54.0.0
+
+### Major Changes
+
+- `ComponentId.EX_GENERIC_V2_DETAIL` is gone: it named a kbc-ui route, not a component.
+
+### Minor Changes
+
+- `@keboola/api-client/sdk/securityPolicy` reads one policy and its history: `getPolicy(type, uuid)` returns a policy by UUID, and `listRevisions(type, uuid)` returns its revisions, newest first.
+
+- `@keboola/api-client/sdk/securityPolicy` lists, upserts and deletes row- and column-level security policies (`rls-policy`, `cls-policy`, schema 1.2.0) in the metastore, with write validators for both. An upsert finds the policy by the table it governs among the policies the project owns on `main`, and refuses with `SecurityPolicyAmbiguousError` when there are several, `SecurityPolicyUnreadableError` when a policy of the type cannot be read, `SecurityPolicyLegacyError` when the policy to replace was created under an older schema, or `SecurityPolicyNotFoundError` when a `uuid` names none of them; a delete of a policy that is still referenced throws `SecurityPolicyInUseError`. `canWriteSecurityPolicies(token)` in `domain/permissions` tells whether a token may author them.
+
+- Add `management.search.find()` for `GET /manage/search`, which searches projects, organizations, maintainers and users by name, email or exact id, with the `SearchQuery`, `SearchResult` and per-type search item types.
+
+- `createOrganizationCredentialsClient` (`@keboola/api-client/oauth`) lists and disconnects a Keboola organization's GitHub connections with the caller's Manage API token, and describes the form that starts connecting one. The management client's `getManageToken` returns the Manage API token it currently sends. The oauth schema is regenerated from oauth-service.
+
+- `@keboola/api-client/sdk/queryService` exports `cellParser`, which types a Query Service result cell by its column type, in Node and the browser.
+  - `cellParser(type)(cell)` returns a number, boolean, ISO date or timestamp, or the cell string.
+  - A Snowflake `datetime` reads like `timestamp_ntz`: ISO without `Z`.
+  - `sdk/dataAppServer` `runQuery` types its rows with it.
+
+- `StorageBackend` gains an optional `folderId`: the GCP folder id of a BigQuery backend, `null` when it has none
+
+## 53.0.0
+
+### Minor Changes
+
+- `@keboola/api-client/sdk/dataAppServer` sets up a data app's Node server: `initializeApp()` reads what the platform provides, sends each request's signed-in user to Query Service with the app's Storage token, and gives `workspace.runQuery(sql)` (typed records), Express middleware and an error handler that answers a row-level security refusal with 403, and `server.currentUser()` / `currentUserKey()` for per-user caches.
+
+- `sdk.semanticLayer.listAllObjects(objectType)` lists every object of one child type the project can read, across all models, in one request.
+
+- `ComponentId` in `constants` names every component the apps refer to by id: it gains the transformations, the processors, the platform components (`FLOW`, `ORCHESTRATOR`, `STORAGE`, `VARIABLES`, …) and the remaining extractors and writers kbc-ui named in its own constants
+
+- `ProjectFeature.RowLevelSecurity` names the `row-level-security` project feature. In projects with it, a data app's advanced settings turn row-level security on with the RLS policies it should run under.
+
+- `management.fileStorage.getFileStorageProjects` pages through the projects that use a file storage of any provider, cursor-paginated via `page[limit]` / `page[after]`. New types: `FileStorageProjectsQuery`, `FileStorageProjectsPage`, `FileStorageProject`.
+
+- `semanticLayer.listAllObjectsWithUnreadable` lists one child object type across every model, with a ref for each object that does not parse, so a summary can say what it couldn't read (AI-3703)
+
 ## 52.0.0
 
 ### Major Changes

package/README.md

@@ -510,7 +510,7 @@ Tests are co-located `*.test.ts` files run by Vitest. There are two complementar
 
 - **Injected `fetchFn` (`createFetchClient({ fetchFn: vi.fn() })`)** — for pure transport/composition tests where you assert on the `Request` object itself or on middleware ordering, and standing up MSW handlers adds no value. Reference tests: `fetchClient/createFetchClient/createFetchClient.test.ts`, `fetchClient/createFetchClient/middlewareOrdering.test.ts`, `clients/storage/storageTokenMiddleware.test.ts`.
 
-- **`expectTypeOf` type tests** — pin the client's advertised return shapes; enforced by `tsc` (the `type-check` task), not the runtime. Reference: `clients/storage/storageClient.types.test.ts`.
+- **`expectTypeOf` type tests** — only for a computed type rule every generated client depends on, never to restate a return shape; enforced by `tsc` (the `type-check` task), not the runtime. Reference: `fetchClient/types.test.ts`.
 
 Publish-time export-shape validation stays in `build:check` via `attw` — orthogonal to the above.
 

package/dist/{admin-Di-MmGFP.cjs → admin-BZ7knTd0.cjs}

@@ -58,6 +58,8 @@ const assertCanWriteKaiSettings = (token) => {
 		reason: token.isMasterToken ? `role '${token.admin?.role ?? "none"}' may not write Kai settings` : "a limited (non-master) token may not write Kai settings"
 	});
 };
+/** The roles the metastore maps to `project-admin`; an absent `admin` block never matches. */
+const hasMetastoreProjectAdminRole = (token) => token.admin?.role === require_adminRoles.AdminRole.Admin || token.admin?.role === require_adminRoles.AdminRole.ProductionManager || token.admin?.role === require_adminRoles.AdminRole.Share;
 /**
 * Whether this token may write the project's semantic layer in the metastore.
 *
@@ -66,7 +68,15 @@ const assertCanWriteKaiSettings = (token) => {
 * - Every other role, and a limited token (no `admin` block), gets a 403.
 * - Organization-scope promotion is left to the metastore's 403.
 */
-const canWriteSemanticLayer = (token) => token.admin?.role === require_adminRoles.AdminRole.Admin || token.admin?.role === require_adminRoles.AdminRole.ProductionManager || token.admin?.role === require_adminRoles.AdminRole.Share;
+const canWriteSemanticLayer = (token) => hasMetastoreProjectAdminRole(token);
+/**
+* Whether this token may author row- and column-level security policies in the metastore.
+*
+* - Reads `token.admin.role` as the metastore does: `admin`, `productionManager` or `share`.
+* - A limited token has no `admin` block, so it never matches.
+* - `targeted` scope only: `organization` scope and grants are organization-admin, a metastore 403.
+*/
+const canWriteSecurityPolicies = (token) => hasMetastoreProjectAdminRole(token);
 const assertCanAdmin = (token) => {
 	if (!isAdmin(token)) throw new PermissionDeniedError({
 		action: "admin",
@@ -133,6 +143,12 @@ Object.defineProperty(exports, "canWriteKaiSettings", {
 		return canWriteKaiSettings;
 	}
 });
+Object.defineProperty(exports, "canWriteSecurityPolicies", {
+	enumerable: true,
+	get: function() {
+		return canWriteSecurityPolicies;
+	}
+});
 Object.defineProperty(exports, "canWriteSemanticLayer", {
 	enumerable: true,
 	get: function() {
@@ -182,4 +198,4 @@ Object.defineProperty(exports, "isReadOnlyRole", {
 	}
 });
 
-//# sourceMappingURL=admin-Di-MmGFP.cjs.map
+//# sourceMappingURL=admin-BZ7knTd0.cjs.map

package/dist/admin-BZ7knTd0.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-BZ7knTd0.cjs","names":["AdminRole"],"sources":["../src/domain/permissions/errors.ts","../src/domain/permissions/admin.ts"],"sourcesContent":["/**\n * @module domain/permissions/errors\n *\n * - What every `assertCan*` throws; its public fields are SDK contract — renames break consumers.\n * - `subject` is a debugging hint only — never a `StorageToken`, raw token or secret.\n */\nexport class PermissionDeniedError extends Error {\n  public readonly action: string;\n  public readonly reason?: string;\n  public readonly subject?: string;\n\n  constructor({ action, reason, subject }: { action: string; reason?: string; subject?: string }) {\n    super(reason ? `Permission denied: ${action} (${reason})` : `Permission denied: ${action}`);\n    this.name = 'PermissionDeniedError';\n    this.action = action;\n    this.reason = reason;\n    this.subject = subject;\n  }\n}\n","/**\n * @module domain/permissions/admin\n *\n * Admin-role predicates read from `token.admin.role` alone.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\nimport { AdminRole } from '../../constants/adminRoles';\n\nimport { PermissionDeniedError } from './errors';\n\nconst role = (token: StorageToken): AdminRole | null => token.admin.role;\n\nexport const isAdmin = (token: StorageToken): boolean => role(token) === AdminRole.Admin;\n\nexport const isAdminOrShare = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Admin || role(token) === AdminRole.Share;\n\nexport const isProductionManager = (token: StorageToken): boolean =>\n  role(token) === AdminRole.ProductionManager;\n\nexport const isDeveloperOrReviewer = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Developer || role(token) === AdminRole.Reviewer;\n\nexport const isReadOnlyRole = (token: StorageToken): boolean => role(token) === AdminRole.ReadOnly;\n\n/**\n * Whether a role string is a member of `AdminRole` at all.\n *\n * - Failing it means *unrecognized*, not denied — log it loudly.\n */\nexport const isKnownAdminRole = (adminRole: string | null | undefined): boolean =>\n  (Object.values(AdminRole) as string[]).includes(adminRole ?? '');\n\n/**\n * Whether an admin role may write Kai's project-wide settings.\n *\n * - `admin` and `share` only: a shared prompt-injection surface is project administration.\n * - `developer`/`reviewer` are denied: `agent_settings` is keyed by `project_id` alone, so a dev-branch edit hits production.\n * - An allowlist, so new upstream `AdminRole` members are denied by default.\n * - Spend caps use `./organization#canWriteKaiSpendCaps`; don't widen this for them.\n */\nexport const isKaiSettingsWriterRole = (adminRole: string | null | undefined): boolean => {\n  switch (adminRole) {\n    case AdminRole.Admin:\n    case AdminRole.Share:\n      return true;\n    default:\n      return false;\n  }\n};\n\n/**\n * Whether this token may write Kai's project-wide settings.\n *\n * - A limited (non-master) token never may; its `admin` block is absent despite the type.\n */\nexport const canWriteKaiSettings = (token: StorageToken): boolean =>\n  token.isMasterToken && isKaiSettingsWriterRole(token.admin?.role);\n\nexport const assertCanWriteKaiSettings = (token: StorageToken): void => {\n  if (!canWriteKaiSettings(token)) {\n    throw new PermissionDeniedError({\n      action: 'write-kai-settings',\n      reason: token.isMasterToken\n        ? `role '${token.admin?.role ?? 'none'}' may not write Kai settings`\n        : 'a limited (non-master) token may not write Kai settings',\n    });\n  }\n};\n\n/** The roles the metastore maps to `project-admin`; an absent `admin` block never matches. */\nconst hasMetastoreProjectAdminRole = (token: StorageToken): boolean =>\n  token.admin?.role === AdminRole.Admin ||\n  token.admin?.role === AdminRole.ProductionManager ||\n  token.admin?.role === AdminRole.Share;\n\n/**\n * Whether this token may write the project's semantic layer in the metastore.\n *\n * - Mirrors the metastore's role mapping (go-monorepo `services/metastore/internal/authz`):\n *   only a master token with the `admin`, `productionManager` or `share` role gets `project-admin`.\n * - Every other role, and a limited token (no `admin` block), gets a 403.\n * - Organization-scope promotion is left to the metastore's 403.\n */\nexport const canWriteSemanticLayer = (token: StorageToken): boolean =>\n  hasMetastoreProjectAdminRole(token);\n\n/**\n * Whether this token may author row- and column-level security policies in the metastore.\n *\n * - Reads `token.admin.role` as the metastore does: `admin`, `productionManager` or `share`.\n * - A limited token has no `admin` block, so it never matches.\n * - `targeted` scope only: `organization` scope and grants are organization-admin, a metastore 403.\n */\nexport const canWriteSecurityPolicies = (token: StorageToken): boolean =>\n  hasMetastoreProjectAdminRole(token);\n\nexport const assertCanAdmin = (token: StorageToken): void => {\n  if (!isAdmin(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin',\n      reason: `role '${role(token)}' is not admin`,\n    });\n  }\n};\n\nexport const assertCanAdminOrShare = (token: StorageToken): void => {\n  if (!isAdminOrShare(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin-or-share',\n      reason: `role '${role(token)}' is not admin or share`,\n    });\n  }\n};\n\nexport const assertCanProductionManage = (token: StorageToken): void => {\n  if (!isProductionManager(token)) {\n    throw new PermissionDeniedError({\n      action: 'production-manage',\n      reason: `role '${role(token)}' is not productionManager`,\n    });\n  }\n};\n\nexport const assertCanDevelopOrReview = (token: StorageToken): void => {\n  if (!isDeveloperOrReviewer(token)) {\n    throw new PermissionDeniedError({\n      action: 'develop-or-review',\n      reason: `role '${role(token)}' is not developer or reviewer`,\n    });\n  }\n};\n"],"mappings":";;;;;;;;AAMA,IAAa,wBAAb,cAA2C,MAAM;CAC/C;CACA;CACA;CAEA,YAAY,EAAE,QAAQ,QAAQ,WAAkE;EAC9F,MAAM,SAAS,sBAAsB,OAAO,IAAI,OAAO,KAAK,sBAAsB,QAAQ;EAC1F,KAAK,OAAO;EACZ,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,UAAU;CACjB;AACF;;ACRA,MAAM,QAAQ,UAA0C,MAAM,MAAM;AAEpE,MAAa,WAAW,UAAiC,KAAK,KAAK,MAAMA,mBAAAA,UAAU;AAEnF,MAAa,kBAAkB,UAC7B,KAAK,KAAK,MAAMA,mBAAAA,UAAU,SAAS,KAAK,KAAK,MAAMA,mBAAAA,UAAU;AAE/D,MAAa,uBAAuB,UAClC,KAAK,KAAK,MAAMA,mBAAAA,UAAU;AAE5B,MAAa,yBAAyB,UACpC,KAAK,KAAK,MAAMA,mBAAAA,UAAU,aAAa,KAAK,KAAK,MAAMA,mBAAAA,UAAU;AAEnE,MAAa,kBAAkB,UAAiC,KAAK,KAAK,MAAMA,mBAAAA,UAAU;;;;;;AAO1F,MAAa,oBAAoB,cAC9B,OAAO,OAAOA,mBAAAA,SAAS,CAAC,CAAc,SAAS,aAAa,EAAE;;;;;;;;;AAUjE,MAAa,2BAA2B,cAAkD;CACxF,QAAQ,WAAR;EACE,KAAKA,mBAAAA,UAAU;EACf,KAAKA,mBAAAA,UAAU,OACb,OAAO;EACT,SACE,OAAO;CACX;AACF;;;;;;AAOA,MAAa,uBAAuB,UAClC,MAAM,iBAAiB,wBAAwB,MAAM,OAAO,IAAI;AAElE,MAAa,6BAA6B,UAA8B;CACtE,IAAI,CAAC,oBAAoB,KAAK,GAC5B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,MAAM,gBACV,SAAS,MAAM,OAAO,QAAQ,OAAO,gCACrC;CACN,CAAC;AAEL;;AAGA,MAAM,gCAAgC,UACpC,MAAM,OAAO,SAASA,mBAAAA,UAAU,SAChC,MAAM,OAAO,SAASA,mBAAAA,UAAU,qBAChC,MAAM,OAAO,SAASA,mBAAAA,UAAU;;;;;;;;;AAUlC,MAAa,yBAAyB,UACpC,6BAA6B,KAAK;;;;;;;;AASpC,MAAa,4BAA4B,UACvC,6BAA6B,KAAK;AAEpC,MAAa,kBAAkB,UAA8B;CAC3D,IAAI,CAAC,QAAQ,KAAK,GAChB,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,SAAS,KAAK,KAAK,EAAE;CAC/B,CAAC;AAEL;AAEA,MAAa,yBAAyB,UAA8B;CAClE,IAAI,CAAC,eAAe,KAAK,GACvB,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,SAAS,KAAK,KAAK,EAAE;CAC/B,CAAC;AAEL;AAEA,MAAa,6BAA6B,UAA8B;CACtE,IAAI,CAAC,oBAAoB,KAAK,GAC5B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,SAAS,KAAK,KAAK,EAAE;CAC/B,CAAC;AAEL;AAEA,MAAa,4BAA4B,UAA8B;CACrE,IAAI,CAAC,sBAAsB,KAAK,GAC9B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,SAAS,KAAK,KAAK,EAAE;CAC/B,CAAC;AAEL"}

package/dist/{admin-CbMOsfgs.js → admin-xFfHSZHQ.js}

@@ -58,6 +58,8 @@ const assertCanWriteKaiSettings = (token) => {
 		reason: token.isMasterToken ? `role '${token.admin?.role ?? "none"}' may not write Kai settings` : "a limited (non-master) token may not write Kai settings"
 	});
 };
+/** The roles the metastore maps to `project-admin`; an absent `admin` block never matches. */
+const hasMetastoreProjectAdminRole = (token) => token.admin?.role === AdminRole.Admin || token.admin?.role === AdminRole.ProductionManager || token.admin?.role === AdminRole.Share;
 /**
 * Whether this token may write the project's semantic layer in the metastore.
 *
@@ -66,7 +68,15 @@ const assertCanWriteKaiSettings = (token) => {
 * - Every other role, and a limited token (no `admin` block), gets a 403.
 * - Organization-scope promotion is left to the metastore's 403.
 */
-const canWriteSemanticLayer = (token) => token.admin?.role === AdminRole.Admin || token.admin?.role === AdminRole.ProductionManager || token.admin?.role === AdminRole.Share;
+const canWriteSemanticLayer = (token) => hasMetastoreProjectAdminRole(token);
+/**
+* Whether this token may author row- and column-level security policies in the metastore.
+*
+* - Reads `token.admin.role` as the metastore does: `admin`, `productionManager` or `share`.
+* - A limited token has no `admin` block, so it never matches.
+* - `targeted` scope only: `organization` scope and grants are organization-admin, a metastore 403.
+*/
+const canWriteSecurityPolicies = (token) => hasMetastoreProjectAdminRole(token);
 const assertCanAdmin = (token) => {
 	if (!isAdmin(token)) throw new PermissionDeniedError({
 		action: "admin",
@@ -91,6 +101,6 @@ const assertCanDevelopOrReview = (token) => {
 		reason: `role '${role(token)}' is not developer or reviewer`
 	});
 };
-export { assertCanWriteKaiSettings as a, isAdmin as c, isKaiSettingsWriterRole as d, isKnownAdminRole as f, PermissionDeniedError as h, assertCanProductionManage as i, isAdminOrShare as l, isReadOnlyRole as m, assertCanAdminOrShare as n, canWriteKaiSettings as o, isProductionManager as p, assertCanDevelopOrReview as r, canWriteSemanticLayer as s, assertCanAdmin as t, isDeveloperOrReviewer as u };
+export { assertCanWriteKaiSettings as a, canWriteSemanticLayer as c, isDeveloperOrReviewer as d, isKaiSettingsWriterRole as f, PermissionDeniedError as g, isReadOnlyRole as h, assertCanProductionManage as i, isAdmin as l, isProductionManager as m, assertCanAdminOrShare as n, canWriteKaiSettings as o, isKnownAdminRole as p, assertCanDevelopOrReview as r, canWriteSecurityPolicies as s, assertCanAdmin as t, isAdminOrShare as u };
 
-//# sourceMappingURL=admin-CbMOsfgs.js.map
+//# sourceMappingURL=admin-xFfHSZHQ.js.map

package/dist/admin-xFfHSZHQ.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-xFfHSZHQ.js","names":[],"sources":["../src/domain/permissions/errors.ts","../src/domain/permissions/admin.ts"],"sourcesContent":["/**\n * @module domain/permissions/errors\n *\n * - What every `assertCan*` throws; its public fields are SDK contract — renames break consumers.\n * - `subject` is a debugging hint only — never a `StorageToken`, raw token or secret.\n */\nexport class PermissionDeniedError extends Error {\n  public readonly action: string;\n  public readonly reason?: string;\n  public readonly subject?: string;\n\n  constructor({ action, reason, subject }: { action: string; reason?: string; subject?: string }) {\n    super(reason ? `Permission denied: ${action} (${reason})` : `Permission denied: ${action}`);\n    this.name = 'PermissionDeniedError';\n    this.action = action;\n    this.reason = reason;\n    this.subject = subject;\n  }\n}\n","/**\n * @module domain/permissions/admin\n *\n * Admin-role predicates read from `token.admin.role` alone.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\nimport { AdminRole } from '../../constants/adminRoles';\n\nimport { PermissionDeniedError } from './errors';\n\nconst role = (token: StorageToken): AdminRole | null => token.admin.role;\n\nexport const isAdmin = (token: StorageToken): boolean => role(token) === AdminRole.Admin;\n\nexport const isAdminOrShare = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Admin || role(token) === AdminRole.Share;\n\nexport const isProductionManager = (token: StorageToken): boolean =>\n  role(token) === AdminRole.ProductionManager;\n\nexport const isDeveloperOrReviewer = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Developer || role(token) === AdminRole.Reviewer;\n\nexport const isReadOnlyRole = (token: StorageToken): boolean => role(token) === AdminRole.ReadOnly;\n\n/**\n * Whether a role string is a member of `AdminRole` at all.\n *\n * - Failing it means *unrecognized*, not denied — log it loudly.\n */\nexport const isKnownAdminRole = (adminRole: string | null | undefined): boolean =>\n  (Object.values(AdminRole) as string[]).includes(adminRole ?? '');\n\n/**\n * Whether an admin role may write Kai's project-wide settings.\n *\n * - `admin` and `share` only: a shared prompt-injection surface is project administration.\n * - `developer`/`reviewer` are denied: `agent_settings` is keyed by `project_id` alone, so a dev-branch edit hits production.\n * - An allowlist, so new upstream `AdminRole` members are denied by default.\n * - Spend caps use `./organization#canWriteKaiSpendCaps`; don't widen this for them.\n */\nexport const isKaiSettingsWriterRole = (adminRole: string | null | undefined): boolean => {\n  switch (adminRole) {\n    case AdminRole.Admin:\n    case AdminRole.Share:\n      return true;\n    default:\n      return false;\n  }\n};\n\n/**\n * Whether this token may write Kai's project-wide settings.\n *\n * - A limited (non-master) token never may; its `admin` block is absent despite the type.\n */\nexport const canWriteKaiSettings = (token: StorageToken): boolean =>\n  token.isMasterToken && isKaiSettingsWriterRole(token.admin?.role);\n\nexport const assertCanWriteKaiSettings = (token: StorageToken): void => {\n  if (!canWriteKaiSettings(token)) {\n    throw new PermissionDeniedError({\n      action: 'write-kai-settings',\n      reason: token.isMasterToken\n        ? `role '${token.admin?.role ?? 'none'}' may not write Kai settings`\n        : 'a limited (non-master) token may not write Kai settings',\n    });\n  }\n};\n\n/** The roles the metastore maps to `project-admin`; an absent `admin` block never matches. */\nconst hasMetastoreProjectAdminRole = (token: StorageToken): boolean =>\n  token.admin?.role === AdminRole.Admin ||\n  token.admin?.role === AdminRole.ProductionManager ||\n  token.admin?.role === AdminRole.Share;\n\n/**\n * Whether this token may write the project's semantic layer in the metastore.\n *\n * - Mirrors the metastore's role mapping (go-monorepo `services/metastore/internal/authz`):\n *   only a master token with the `admin`, `productionManager` or `share` role gets `project-admin`.\n * - Every other role, and a limited token (no `admin` block), gets a 403.\n * - Organization-scope promotion is left to the metastore's 403.\n */\nexport const canWriteSemanticLayer = (token: StorageToken): boolean =>\n  hasMetastoreProjectAdminRole(token);\n\n/**\n * Whether this token may author row- and column-level security policies in the metastore.\n *\n * - Reads `token.admin.role` as the metastore does: `admin`, `productionManager` or `share`.\n * - A limited token has no `admin` block, so it never matches.\n * - `targeted` scope only: `organization` scope and grants are organization-admin, a metastore 403.\n */\nexport const canWriteSecurityPolicies = (token: StorageToken): boolean =>\n  hasMetastoreProjectAdminRole(token);\n\nexport const assertCanAdmin = (token: StorageToken): void => {\n  if (!isAdmin(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin',\n      reason: `role '${role(token)}' is not admin`,\n    });\n  }\n};\n\nexport const assertCanAdminOrShare = (token: StorageToken): void => {\n  if (!isAdminOrShare(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin-or-share',\n      reason: `role '${role(token)}' is not admin or share`,\n    });\n  }\n};\n\nexport const assertCanProductionManage = (token: StorageToken): void => {\n  if (!isProductionManager(token)) {\n    throw new PermissionDeniedError({\n      action: 'production-manage',\n      reason: `role '${role(token)}' is not productionManager`,\n    });\n  }\n};\n\nexport const assertCanDevelopOrReview = (token: StorageToken): void => {\n  if (!isDeveloperOrReviewer(token)) {\n    throw new PermissionDeniedError({\n      action: 'develop-or-review',\n      reason: `role '${role(token)}' is not developer or reviewer`,\n    });\n  }\n};\n"],"mappings":";;;;;;;;AAMA,IAAa,wBAAb,cAA2C,MAAM;CAC/C;CACA;CACA;CAEA,YAAY,EAAE,QAAQ,QAAQ,WAAkE;EAC9F,MAAM,SAAS,sBAAsB,OAAO,IAAI,OAAO,KAAK,sBAAsB,QAAQ;EAC1F,KAAK,OAAO;EACZ,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,UAAU;CACjB;AACF;;ACRA,MAAM,QAAQ,UAA0C,MAAM,MAAM;AAEpE,MAAa,WAAW,UAAiC,KAAK,KAAK,MAAM,UAAU;AAEnF,MAAa,kBAAkB,UAC7B,KAAK,KAAK,MAAM,UAAU,SAAS,KAAK,KAAK,MAAM,UAAU;AAE/D,MAAa,uBAAuB,UAClC,KAAK,KAAK,MAAM,UAAU;AAE5B,MAAa,yBAAyB,UACpC,KAAK,KAAK,MAAM,UAAU,aAAa,KAAK,KAAK,MAAM,UAAU;AAEnE,MAAa,kBAAkB,UAAiC,KAAK,KAAK,MAAM,UAAU;;;;;;AAO1F,MAAa,oBAAoB,cAC9B,OAAO,OAAO,SAAS,CAAC,CAAc,SAAS,aAAa,EAAE;;;;;;;;;AAUjE,MAAa,2BAA2B,cAAkD;CACxF,QAAQ,WAAR;EACE,KAAK,UAAU;EACf,KAAK,UAAU,OACb,OAAO;EACT,SACE,OAAO;CACX;AACF;;;;;;AAOA,MAAa,uBAAuB,UAClC,MAAM,iBAAiB,wBAAwB,MAAM,OAAO,IAAI;AAElE,MAAa,6BAA6B,UAA8B;CACtE,IAAI,CAAC,oBAAoB,KAAK,GAC5B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,MAAM,gBACV,SAAS,MAAM,OAAO,QAAQ,OAAO,gCACrC;CACN,CAAC;AAEL;;AAGA,MAAM,gCAAgC,UACpC,MAAM,OAAO,SAAS,UAAU,SAChC,MAAM,OAAO,SAAS,UAAU,qBAChC,MAAM,OAAO,SAAS,UAAU;;;;;;;;;AAUlC,MAAa,yBAAyB,UACpC,6BAA6B,KAAK;;;;;;;;AASpC,MAAa,4BAA4B,UACvC,6BAA6B,KAAK;AAEpC,MAAa,kBAAkB,UAA8B;CAC3D,IAAI,CAAC,QAAQ,KAAK,GAChB,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,SAAS,KAAK,KAAK,EAAE;CAC/B,CAAC;AAEL;AAEA,MAAa,yBAAyB,UAA8B;CAClE,IAAI,CAAC,eAAe,KAAK,GACvB,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,SAAS,KAAK,KAAK,EAAE;CAC/B,CAAC;AAEL;AAEA,MAAa,6BAA6B,UAA8B;CACtE,IAAI,CAAC,oBAAoB,KAAK,GAC5B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,SAAS,KAAK,KAAK,EAAE;CAC/B,CAAC;AAEL;AAEA,MAAa,4BAA4B,UAA8B;CACrE,IAAI,CAAC,sBAAsB,KAAK,GAC9B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,SAAS,KAAK,KAAK,EAAE;CAC/B,CAAC;AAEL"}

package/dist/{componentId-DZP1rBix.js → componentId-Cps6WBy1.js}

@@ -122,7 +122,6 @@ const ComponentId = {
 	EX_MONGODB: "keboola.ex-mongodb",
 	EX_SNOWFLAKE_QUERY_HISTORY: "keboola.ex-snowflake-query-history",
 	EX_SNOWFLAKE_PARAMETERS: "keboola.ex-snowflake-parameters",
-	EX_GENERIC_V2_DETAIL: "ex-generic-v2-detail",
 	APAC_EX_GMAIL_ATTACHMENTS: "apac.ex-gmail-attachments",
 	GENEEA_NLP_ANALYSIS_V2: "geneea.nlp-analysis-v2",
 	KDS_APP_CUSTOM_PYTHON: "kds-team.app-custom-python",
@@ -136,4 +135,4 @@ const ComponentId = {
 };
 export { ComponentId as t };
 
-//# sourceMappingURL=componentId-DZP1rBix.js.map
+//# sourceMappingURL=componentId-Cps6WBy1.js.map

package/dist/{componentId-DZP1rBix.js.map → componentId-Cps6WBy1.js.map}

@@ -1 +1 @@
-{"version":3,"file":"componentId-DZP1rBix.js","names":[],"sources":["../src/constants/componentId.ts"],"sourcesContent":["export const ComponentId = {\n  WR_DB_MYSQL: 'keboola.wr-db-mysql',\n  WR_DB_PGSQL: 'keboola.wr-db-pgsql',\n  WR_DB_ORACLE: 'keboola.wr-db-oracle',\n  WR_DB_SNOWFLAKE: 'keboola.wr-db-snowflake',\n  WR_DB_SNOWFLAKE_GCS: 'keboola.wr-db-snowflake-gcs',\n  WR_DB_SNOWFLAKE_GCS_S3: 'keboola.wr-db-snowflake-gcs-s3',\n  WR_SNOWFLAKE_BLOB_STORAGE: 'keboola.wr-snowflake-blob-storage',\n  WR_LOOKER_V2: 'keboola.wr-looker-v2',\n  APP_DATA_GATEWAY: 'keboola.app-data-gateway',\n  WR_SYNAPSE: 'keboola.wr-synapse',\n  WR_REDSHIFT: 'keboola.wr-redshift-v2',\n  WR_DB_MSSQL: 'keboola.wr-db-mssql-v2',\n  WR_DB_HIVE: 'keboola.wr-db-hive',\n  WR_DB_IMPALA: 'keboola.wr-db-impala',\n  WR_PAIRITY: 'kds-team.wr-pairity',\n  WR_EXASOL: 'kds-team.wr-exasol',\n  WR_FIREBOLT: 'kds-team.wr-firebolt',\n  WR_HIVE_CSAS: 'kds-team.wr-hive-csas',\n  WR_THOUGHTSPOT: 'keboola.wr-thoughtspot',\n  WR_SISENSE: 'keboola.wr-sisense',\n  WR_AWS_S3: 'keboola.wr-aws-s3',\n  WR_STORAGE: 'keboola.wr-storage',\n  WR_GOOGLE_BIGQUERY_V2: 'keboola.wr-google-bigquery-v2',\n  SCHEDULER: 'keboola.scheduler',\n\n  // App-specific writers (bespoke credential blocks)\n  APP_SNOWFLAKE_DWH_MANAGER: 'keboola.app-snowflake-dwh-manager',\n  GOODDATA_WRITER: 'keboola.gooddata-writer',\n\n  // DB extractors (ex-db-generic family)\n  EX_DB_MYSQL: 'keboola.ex-db-mysql',\n  EX_DB_PGSQL: 'keboola.ex-db-pgsql',\n  EX_DB_REDSHIFT: 'keboola.ex-db-redshift',\n  EX_DB_FIREBIRD: 'keboola.ex-db-firebird',\n  EX_DB_DB2: 'keboola.ex-db-db2',\n  EX_DB_DB2_BATA: 'keboola.ex-db-db2-bata',\n  EX_DB_MSSQL: 'keboola.ex-db-mssql',\n  EX_DB_MSSQL_CDATA: 'keboola.ex-db-mssql-cdata',\n  EX_DB_ORACLE: 'keboola.ex-db-oracle',\n  EX_DB_SNOWFLAKE: 'keboola.ex-db-snowflake',\n  EX_DB_NETSUITE: 'keboola.ex-db-netsuite',\n  EX_DB_INFORMIX: 'keboola.ex-db-informix',\n  EX_DB_IMPALA: 'keboola.ex-db-impala',\n  EX_DB_HIVE: 'keboola.ex-db-hive',\n  EX_DB_HIVE_CSAS: 'keboola.ex-db-hive-csas',\n  EX_DB_HIVE_CSAS_TEST: 'keboola.ex-db-hive-csas-test',\n  EX_TERADATA: 'keboola.ex-teradata',\n  KDS_EX_NETSUITE: 'kds-team.ex-netsuite',\n  KDS_EX_PROGRESS_DB: 'kds-team.ex-progress-db',\n\n  // Google (OAuth) components\n  EX_GOOGLE_ADS: 'keboola.ex-google-ads',\n  EX_GOOGLE_ANALYTICS_V4: 'keboola.ex-google-analytics-v4',\n  WR_GOOGLE_DRIVE: 'keboola.wr-google-drive',\n  WR_GOOGLE_SHEETS: 'keboola.wr-google-sheets',\n\n  // Meta (OAuth) components\n  EX_FACEBOOK: 'keboola.ex-facebook',\n  EX_FACEBOOK_ADS: 'keboola.ex-facebook-ads',\n  EX_FACEBOOK_ADS_V2: 'keboola.ex-facebook-ads-v2',\n  EX_FACEBOOK_PAGES: 'keboola.ex-facebook-pages',\n  EX_INSTAGRAM: 'keboola.ex-instagram',\n  EX_INSTAGRAM_V2: 'keboola.ex-instagram-v2',\n\n  // Microsoft OneDrive (OAuth) components\n  EX_ONEDRIVE: 'keboola.ex-onedrive',\n  WR_ONEDRIVE: 'keboola.wr-onedrive',\n\n  // File/connection extractors (ex family, no shared credential base)\n  EX_HTTP: 'keboola.ex-http',\n  EX_FTP: 'keboola.ex-ftp',\n  EX_FTP_CSAS: 'keboola.ex-ftp-csas',\n  EX_EMAIL_ATTACHMENTS: 'keboola.ex-email-attachments',\n  EX_AWS_S3: 'keboola.ex-aws-s3',\n  KDS_EX_AZURE_BLOB_STORAGE_V2: 'kds-team.ex-azure-blob-storage-v2',\n  KDS_EX_AZURE_DATA_LAKE_GEN2: 'kds-team.ex-azure-data-lake-gen2',\n  APIFY: 'apify.apify',\n  EX_GENERIC_V2: 'ex-generic-v2',\n  EX_GOOGLE_BIGQUERY_V2: 'keboola.ex-google-bigquery-v2',\n  EX_STORAGE: 'keboola.ex-storage',\n\n  // Data-app family — a git repository lives under `parameters.dataApp.git`\n  DATA_APPS: 'keboola.data-apps',\n  SANDBOXES: 'keboola.sandboxes',\n\n  // dbt transformations — a git repository lives under `parameters.git`\n  DBT_TEST_CORE_KEY_PAIR: 'keboola-test.dbt-core-key-pair',\n  DBT_TEST_REMOTE_SNOWFLAKE: 'keboola-test.dbt-remote-snowflake',\n  DBT_TEST_TRANSFORMATION: 'keboola-test.dbt-transformation',\n  DBT_TRANSFORMATION: 'keboola.dbt-transformation',\n  DBT_TRANSFORMATION_LOCAL_BIGQUERY: 'keboola.dbt-transformation-local-bigquery',\n  DBT_TRANSFORMATION_REMOTE_BIGQUERY: 'keboola.dbt-transformation-remote-bigquery',\n  DBT_TRANSFORMATION_REMOTE_MSSQL: 'keboola.dbt-transformation-remote-mssql',\n  DBT_TRANSFORMATION_REMOTE_POSTGRESQL: 'keboola.dbt-transformation-remote-postgresql',\n  DBT_TRANSFORMATION_REMOTE_REDSHIFT: 'keboola.dbt-transformation-remote-redshift',\n  DBT_TRANSFORMATION_REMOTE_SNOWFLAKE: 'keboola.dbt-transformation-remote-snowflake',\n\n  APP_CONFIGURATION_MIGRATION_TOOL: 'keboola.app-configuration-migration-tool',\n  FLOW_MIGRATION_TOOL: 'keboola.flow-migration-tool',\n\n  // Utility components, called only for their sync actions\n  SSH_KEYGEN_V2: 'keboola.ssh-keygen-v2',\n\n  // Transformations\n  LEGACY_TRANSFORMATION: 'keboola.legacy-transformation',\n  SNOWFLAKE_TRANSFORMATION: 'keboola.snowflake-transformation',\n  PYTHON_TRANSFORMATION_V2: 'keboola.python-transformation-v2',\n  CSAS_PYTHON_TRANSFORMATION_V2: 'keboola.csas-python-transformation-v2',\n  R_TRANSFORMATION_V2: 'keboola.r-transformation-v2',\n  GOOGLE_BIGQUERY_TRANSFORMATION: 'keboola.google-bigquery-transformation',\n  DUCKDB_TRANSFORMATION: 'keboola.duckdb-transformation',\n  ORACLE_TRANSFORMATION: 'keboola.oracle-transformation',\n\n  // Processors\n  PROCESSOR_SPLIT_TABLE: 'keboola.processor-split-table',\n  PROCESSOR_ADD_FILENAME_COLUMN: 'keboola.processor-add-filename-column',\n  PROCESSOR_ADD_ROW_NUMBER_COLUMN: 'keboola.processor-add-row-number-column',\n  PROCESSOR_CREATE_MANIFEST: 'keboola.processor-create-manifest',\n  PROCESSOR_DECOMPRESS: 'keboola.processor-decompress',\n  PROCESSOR_FLATTEN_FOLDERS: 'keboola.processor-flatten-folders',\n  PROCESSOR_MOVE_FILES: 'keboola.processor-move-files',\n  PROCESSOR_SKIP_LINES: 'keboola.processor-skip-lines',\n  KDS_PROCESSOR_CSV2XLS: 'kds-team.processor-csv2xls',\n  KDS_PROCESSOR_CREATE_FILE_MANIFEST: 'kds-team.processor-create-file-manifest',\n  KDS_PROCESSOR_CONVERT_COLUMN_CASE: 'kds-team.processor-convert-column-case',\n\n  // Platform components\n  FLOW: 'keboola.flow',\n  ORCHESTRATOR: 'keboola.orchestrator',\n  STORAGE: 'keboola.storage', // component to get icon and name\n  VARIABLES: 'keboola.variables',\n  SHARED_CODE: 'keboola.shared-code',\n  DATA_APP_CONTROL: 'keboola.data-app-control',\n  MCP_SERVER_TOOL: 'keboola.mcp-server-tool',\n  PROJECT_BACKUP: 'keboola.project-backup',\n  KEBOOLA_AS_CODE: 'keboola.keboola-as-code',\n  APP_MERGE_BRANCH_STORAGE: 'keboola.app-merge-branch-storage',\n  SAPI_MERGED_EXPORT: 'keboola.sapi-merged-export',\n  SLICED_FILES_DOWNLOADER: 'keboola.sliced-files-downloader',\n  CSV_IMPORT: 'keboola.csv-import',\n  EX_SAMPLE_DATA: 'keboola.ex-sample-data',\n\n  // Other components\n  EX_GOOGLE_DRIVE: 'keboola.ex-google-drive',\n  EX_GOOGLE_BIGQUERY_V2_AVRO_FILES: 'keboola.ex-google-bigquery-v2-avro-files',\n  EX_GMAIL: 'keboola.ex-gmail',\n  EX_MONGODB: 'keboola.ex-mongodb',\n  EX_SNOWFLAKE_QUERY_HISTORY: 'keboola.ex-snowflake-query-history',\n  EX_SNOWFLAKE_PARAMETERS: 'keboola.ex-snowflake-parameters',\n  EX_GENERIC_V2_DETAIL: 'ex-generic-v2-detail',\n  APAC_EX_GMAIL_ATTACHMENTS: 'apac.ex-gmail-attachments',\n  GENEEA_NLP_ANALYSIS_V2: 'geneea.nlp-analysis-v2',\n  KDS_APP_CUSTOM_PYTHON: 'kds-team.app-custom-python',\n  KDS_EX_DV360: 'kds-team.ex-dv360',\n  KDS_EX_YOUTUBE_ANALYTICS: 'kds-team.ex-youtube-analytics',\n  KDS_EX_AWS_COST_AND_USAGE_REPORTS: 'kds-team.ex-aws-cost-and-usage-reports',\n  KDS_EX_ZOHO: 'kds-team.ex-zoho',\n  SMETRIC_EX_SIMPRO_API: 'smetric.ex-simpro-api',\n  SMETRIC_EX_VEND_API: 'smetric.ex-vend-api',\n  TDE_EXPORTER: 'tde-exporter',\n} as const;\n\nexport type ComponentId = (typeof ComponentId)[keyof typeof ComponentId];\n"],"mappings":";AAAA,MAAa,cAAc;CACzB,aAAa;CACb,aAAa;CACb,cAAc;CACd,iBAAiB;CACjB,qBAAqB;CACrB,wBAAwB;CACxB,2BAA2B;CAC3B,cAAc;CACd,kBAAkB;CAClB,YAAY;CACZ,aAAa;CACb,aAAa;CACb,YAAY;CACZ,cAAc;CACd,YAAY;CACZ,WAAW;CACX,aAAa;CACb,cAAc;CACd,gBAAgB;CAChB,YAAY;CACZ,WAAW;CACX,YAAY;CACZ,uBAAuB;CACvB,WAAW;CAGX,2BAA2B;CAC3B,iBAAiB;CAGjB,aAAa;CACb,aAAa;CACb,gBAAgB;CAChB,gBAAgB;CAChB,WAAW;CACX,gBAAgB;CAChB,aAAa;CACb,mBAAmB;CACnB,cAAc;CACd,iBAAiB;CACjB,gBAAgB;CAChB,gBAAgB;CAChB,cAAc;CACd,YAAY;CACZ,iBAAiB;CACjB,sBAAsB;CACtB,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CAGpB,eAAe;CACf,wBAAwB;CACxB,iBAAiB;CACjB,kBAAkB;CAGlB,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CACpB,mBAAmB;CACnB,cAAc;CACd,iBAAiB;CAGjB,aAAa;CACb,aAAa;CAGb,SAAS;CACT,QAAQ;CACR,aAAa;CACb,sBAAsB;CACtB,WAAW;CACX,8BAA8B;CAC9B,6BAA6B;CAC7B,OAAO;CACP,eAAe;CACf,uBAAuB;CACvB,YAAY;CAGZ,WAAW;CACX,WAAW;CAGX,wBAAwB;CACxB,2BAA2B;CAC3B,yBAAyB;CACzB,oBAAoB;CACpB,mCAAmC;CACnC,oCAAoC;CACpC,iCAAiC;CACjC,sCAAsC;CACtC,oCAAoC;CACpC,qCAAqC;CAErC,kCAAkC;CAClC,qBAAqB;CAGrB,eAAe;CAGf,uBAAuB;CACvB,0BAA0B;CAC1B,0BAA0B;CAC1B,+BAA+B;CAC/B,qBAAqB;CACrB,gCAAgC;CAChC,uBAAuB;CACvB,uBAAuB;CAGvB,uBAAuB;CACvB,+BAA+B;CAC/B,iCAAiC;CACjC,2BAA2B;CAC3B,sBAAsB;CACtB,2BAA2B;CAC3B,sBAAsB;CACtB,sBAAsB;CACtB,uBAAuB;CACvB,oCAAoC;CACpC,mCAAmC;CAGnC,MAAM;CACN,cAAc;CACd,SAAS;CACT,WAAW;CACX,aAAa;CACb,kBAAkB;CAClB,iBAAiB;CACjB,gBAAgB;CAChB,iBAAiB;CACjB,0BAA0B;CAC1B,oBAAoB;CACpB,yBAAyB;CACzB,YAAY;CACZ,gBAAgB;CAGhB,iBAAiB;CACjB,kCAAkC;CAClC,UAAU;CACV,YAAY;CACZ,4BAA4B;CAC5B,yBAAyB;CACzB,sBAAsB;CACtB,2BAA2B;CAC3B,wBAAwB;CACxB,uBAAuB;CACvB,cAAc;CACd,0BAA0B;CAC1B,mCAAmC;CACnC,aAAa;CACb,uBAAuB;CACvB,qBAAqB;CACrB,cAAc;AAChB"}
+{"version":3,"file":"componentId-Cps6WBy1.js","names":[],"sources":["../src/constants/componentId.ts"],"sourcesContent":["export const ComponentId = {\n  WR_DB_MYSQL: 'keboola.wr-db-mysql',\n  WR_DB_PGSQL: 'keboola.wr-db-pgsql',\n  WR_DB_ORACLE: 'keboola.wr-db-oracle',\n  WR_DB_SNOWFLAKE: 'keboola.wr-db-snowflake',\n  WR_DB_SNOWFLAKE_GCS: 'keboola.wr-db-snowflake-gcs',\n  WR_DB_SNOWFLAKE_GCS_S3: 'keboola.wr-db-snowflake-gcs-s3',\n  WR_SNOWFLAKE_BLOB_STORAGE: 'keboola.wr-snowflake-blob-storage',\n  WR_LOOKER_V2: 'keboola.wr-looker-v2',\n  APP_DATA_GATEWAY: 'keboola.app-data-gateway',\n  WR_SYNAPSE: 'keboola.wr-synapse',\n  WR_REDSHIFT: 'keboola.wr-redshift-v2',\n  WR_DB_MSSQL: 'keboola.wr-db-mssql-v2',\n  WR_DB_HIVE: 'keboola.wr-db-hive',\n  WR_DB_IMPALA: 'keboola.wr-db-impala',\n  WR_PAIRITY: 'kds-team.wr-pairity',\n  WR_EXASOL: 'kds-team.wr-exasol',\n  WR_FIREBOLT: 'kds-team.wr-firebolt',\n  WR_HIVE_CSAS: 'kds-team.wr-hive-csas',\n  WR_THOUGHTSPOT: 'keboola.wr-thoughtspot',\n  WR_SISENSE: 'keboola.wr-sisense',\n  WR_AWS_S3: 'keboola.wr-aws-s3',\n  WR_STORAGE: 'keboola.wr-storage',\n  WR_GOOGLE_BIGQUERY_V2: 'keboola.wr-google-bigquery-v2',\n  SCHEDULER: 'keboola.scheduler',\n\n  // App-specific writers (bespoke credential blocks)\n  APP_SNOWFLAKE_DWH_MANAGER: 'keboola.app-snowflake-dwh-manager',\n  GOODDATA_WRITER: 'keboola.gooddata-writer',\n\n  // DB extractors (ex-db-generic family)\n  EX_DB_MYSQL: 'keboola.ex-db-mysql',\n  EX_DB_PGSQL: 'keboola.ex-db-pgsql',\n  EX_DB_REDSHIFT: 'keboola.ex-db-redshift',\n  EX_DB_FIREBIRD: 'keboola.ex-db-firebird',\n  EX_DB_DB2: 'keboola.ex-db-db2',\n  EX_DB_DB2_BATA: 'keboola.ex-db-db2-bata',\n  EX_DB_MSSQL: 'keboola.ex-db-mssql',\n  EX_DB_MSSQL_CDATA: 'keboola.ex-db-mssql-cdata',\n  EX_DB_ORACLE: 'keboola.ex-db-oracle',\n  EX_DB_SNOWFLAKE: 'keboola.ex-db-snowflake',\n  EX_DB_NETSUITE: 'keboola.ex-db-netsuite',\n  EX_DB_INFORMIX: 'keboola.ex-db-informix',\n  EX_DB_IMPALA: 'keboola.ex-db-impala',\n  EX_DB_HIVE: 'keboola.ex-db-hive',\n  EX_DB_HIVE_CSAS: 'keboola.ex-db-hive-csas',\n  EX_DB_HIVE_CSAS_TEST: 'keboola.ex-db-hive-csas-test',\n  EX_TERADATA: 'keboola.ex-teradata',\n  KDS_EX_NETSUITE: 'kds-team.ex-netsuite',\n  KDS_EX_PROGRESS_DB: 'kds-team.ex-progress-db',\n\n  // Google (OAuth) components\n  EX_GOOGLE_ADS: 'keboola.ex-google-ads',\n  EX_GOOGLE_ANALYTICS_V4: 'keboola.ex-google-analytics-v4',\n  WR_GOOGLE_DRIVE: 'keboola.wr-google-drive',\n  WR_GOOGLE_SHEETS: 'keboola.wr-google-sheets',\n\n  // Meta (OAuth) components\n  EX_FACEBOOK: 'keboola.ex-facebook',\n  EX_FACEBOOK_ADS: 'keboola.ex-facebook-ads',\n  EX_FACEBOOK_ADS_V2: 'keboola.ex-facebook-ads-v2',\n  EX_FACEBOOK_PAGES: 'keboola.ex-facebook-pages',\n  EX_INSTAGRAM: 'keboola.ex-instagram',\n  EX_INSTAGRAM_V2: 'keboola.ex-instagram-v2',\n\n  // Microsoft OneDrive (OAuth) components\n  EX_ONEDRIVE: 'keboola.ex-onedrive',\n  WR_ONEDRIVE: 'keboola.wr-onedrive',\n\n  // File/connection extractors (ex family, no shared credential base)\n  EX_HTTP: 'keboola.ex-http',\n  EX_FTP: 'keboola.ex-ftp',\n  EX_FTP_CSAS: 'keboola.ex-ftp-csas',\n  EX_EMAIL_ATTACHMENTS: 'keboola.ex-email-attachments',\n  EX_AWS_S3: 'keboola.ex-aws-s3',\n  KDS_EX_AZURE_BLOB_STORAGE_V2: 'kds-team.ex-azure-blob-storage-v2',\n  KDS_EX_AZURE_DATA_LAKE_GEN2: 'kds-team.ex-azure-data-lake-gen2',\n  APIFY: 'apify.apify',\n  EX_GENERIC_V2: 'ex-generic-v2',\n  EX_GOOGLE_BIGQUERY_V2: 'keboola.ex-google-bigquery-v2',\n  EX_STORAGE: 'keboola.ex-storage',\n\n  // Data-app family — a git repository lives under `parameters.dataApp.git`\n  DATA_APPS: 'keboola.data-apps',\n  SANDBOXES: 'keboola.sandboxes',\n\n  // dbt transformations — a git repository lives under `parameters.git`\n  DBT_TEST_CORE_KEY_PAIR: 'keboola-test.dbt-core-key-pair',\n  DBT_TEST_REMOTE_SNOWFLAKE: 'keboola-test.dbt-remote-snowflake',\n  DBT_TEST_TRANSFORMATION: 'keboola-test.dbt-transformation',\n  DBT_TRANSFORMATION: 'keboola.dbt-transformation',\n  DBT_TRANSFORMATION_LOCAL_BIGQUERY: 'keboola.dbt-transformation-local-bigquery',\n  DBT_TRANSFORMATION_REMOTE_BIGQUERY: 'keboola.dbt-transformation-remote-bigquery',\n  DBT_TRANSFORMATION_REMOTE_MSSQL: 'keboola.dbt-transformation-remote-mssql',\n  DBT_TRANSFORMATION_REMOTE_POSTGRESQL: 'keboola.dbt-transformation-remote-postgresql',\n  DBT_TRANSFORMATION_REMOTE_REDSHIFT: 'keboola.dbt-transformation-remote-redshift',\n  DBT_TRANSFORMATION_REMOTE_SNOWFLAKE: 'keboola.dbt-transformation-remote-snowflake',\n\n  APP_CONFIGURATION_MIGRATION_TOOL: 'keboola.app-configuration-migration-tool',\n  FLOW_MIGRATION_TOOL: 'keboola.flow-migration-tool',\n\n  // Utility components, called only for their sync actions\n  SSH_KEYGEN_V2: 'keboola.ssh-keygen-v2',\n\n  // Transformations\n  LEGACY_TRANSFORMATION: 'keboola.legacy-transformation',\n  SNOWFLAKE_TRANSFORMATION: 'keboola.snowflake-transformation',\n  PYTHON_TRANSFORMATION_V2: 'keboola.python-transformation-v2',\n  CSAS_PYTHON_TRANSFORMATION_V2: 'keboola.csas-python-transformation-v2',\n  R_TRANSFORMATION_V2: 'keboola.r-transformation-v2',\n  GOOGLE_BIGQUERY_TRANSFORMATION: 'keboola.google-bigquery-transformation',\n  DUCKDB_TRANSFORMATION: 'keboola.duckdb-transformation',\n  ORACLE_TRANSFORMATION: 'keboola.oracle-transformation',\n\n  // Processors\n  PROCESSOR_SPLIT_TABLE: 'keboola.processor-split-table',\n  PROCESSOR_ADD_FILENAME_COLUMN: 'keboola.processor-add-filename-column',\n  PROCESSOR_ADD_ROW_NUMBER_COLUMN: 'keboola.processor-add-row-number-column',\n  PROCESSOR_CREATE_MANIFEST: 'keboola.processor-create-manifest',\n  PROCESSOR_DECOMPRESS: 'keboola.processor-decompress',\n  PROCESSOR_FLATTEN_FOLDERS: 'keboola.processor-flatten-folders',\n  PROCESSOR_MOVE_FILES: 'keboola.processor-move-files',\n  PROCESSOR_SKIP_LINES: 'keboola.processor-skip-lines',\n  KDS_PROCESSOR_CSV2XLS: 'kds-team.processor-csv2xls',\n  KDS_PROCESSOR_CREATE_FILE_MANIFEST: 'kds-team.processor-create-file-manifest',\n  KDS_PROCESSOR_CONVERT_COLUMN_CASE: 'kds-team.processor-convert-column-case',\n\n  // Platform components\n  FLOW: 'keboola.flow',\n  ORCHESTRATOR: 'keboola.orchestrator',\n  STORAGE: 'keboola.storage', // component to get icon and name\n  VARIABLES: 'keboola.variables',\n  SHARED_CODE: 'keboola.shared-code',\n  DATA_APP_CONTROL: 'keboola.data-app-control',\n  MCP_SERVER_TOOL: 'keboola.mcp-server-tool',\n  PROJECT_BACKUP: 'keboola.project-backup',\n  KEBOOLA_AS_CODE: 'keboola.keboola-as-code',\n  APP_MERGE_BRANCH_STORAGE: 'keboola.app-merge-branch-storage',\n  SAPI_MERGED_EXPORT: 'keboola.sapi-merged-export',\n  SLICED_FILES_DOWNLOADER: 'keboola.sliced-files-downloader',\n  CSV_IMPORT: 'keboola.csv-import',\n  EX_SAMPLE_DATA: 'keboola.ex-sample-data',\n\n  // Other components\n  EX_GOOGLE_DRIVE: 'keboola.ex-google-drive',\n  EX_GOOGLE_BIGQUERY_V2_AVRO_FILES: 'keboola.ex-google-bigquery-v2-avro-files',\n  EX_GMAIL: 'keboola.ex-gmail',\n  EX_MONGODB: 'keboola.ex-mongodb',\n  EX_SNOWFLAKE_QUERY_HISTORY: 'keboola.ex-snowflake-query-history',\n  EX_SNOWFLAKE_PARAMETERS: 'keboola.ex-snowflake-parameters',\n  APAC_EX_GMAIL_ATTACHMENTS: 'apac.ex-gmail-attachments',\n  GENEEA_NLP_ANALYSIS_V2: 'geneea.nlp-analysis-v2',\n  KDS_APP_CUSTOM_PYTHON: 'kds-team.app-custom-python',\n  KDS_EX_DV360: 'kds-team.ex-dv360',\n  KDS_EX_YOUTUBE_ANALYTICS: 'kds-team.ex-youtube-analytics',\n  KDS_EX_AWS_COST_AND_USAGE_REPORTS: 'kds-team.ex-aws-cost-and-usage-reports',\n  KDS_EX_ZOHO: 'kds-team.ex-zoho',\n  SMETRIC_EX_SIMPRO_API: 'smetric.ex-simpro-api',\n  SMETRIC_EX_VEND_API: 'smetric.ex-vend-api',\n  TDE_EXPORTER: 'tde-exporter',\n} as const;\n\nexport type ComponentId = (typeof ComponentId)[keyof typeof ComponentId];\n"],"mappings":";AAAA,MAAa,cAAc;CACzB,aAAa;CACb,aAAa;CACb,cAAc;CACd,iBAAiB;CACjB,qBAAqB;CACrB,wBAAwB;CACxB,2BAA2B;CAC3B,cAAc;CACd,kBAAkB;CAClB,YAAY;CACZ,aAAa;CACb,aAAa;CACb,YAAY;CACZ,cAAc;CACd,YAAY;CACZ,WAAW;CACX,aAAa;CACb,cAAc;CACd,gBAAgB;CAChB,YAAY;CACZ,WAAW;CACX,YAAY;CACZ,uBAAuB;CACvB,WAAW;CAGX,2BAA2B;CAC3B,iBAAiB;CAGjB,aAAa;CACb,aAAa;CACb,gBAAgB;CAChB,gBAAgB;CAChB,WAAW;CACX,gBAAgB;CAChB,aAAa;CACb,mBAAmB;CACnB,cAAc;CACd,iBAAiB;CACjB,gBAAgB;CAChB,gBAAgB;CAChB,cAAc;CACd,YAAY;CACZ,iBAAiB;CACjB,sBAAsB;CACtB,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CAGpB,eAAe;CACf,wBAAwB;CACxB,iBAAiB;CACjB,kBAAkB;CAGlB,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CACpB,mBAAmB;CACnB,cAAc;CACd,iBAAiB;CAGjB,aAAa;CACb,aAAa;CAGb,SAAS;CACT,QAAQ;CACR,aAAa;CACb,sBAAsB;CACtB,WAAW;CACX,8BAA8B;CAC9B,6BAA6B;CAC7B,OAAO;CACP,eAAe;CACf,uBAAuB;CACvB,YAAY;CAGZ,WAAW;CACX,WAAW;CAGX,wBAAwB;CACxB,2BAA2B;CAC3B,yBAAyB;CACzB,oBAAoB;CACpB,mCAAmC;CACnC,oCAAoC;CACpC,iCAAiC;CACjC,sCAAsC;CACtC,oCAAoC;CACpC,qCAAqC;CAErC,kCAAkC;CAClC,qBAAqB;CAGrB,eAAe;CAGf,uBAAuB;CACvB,0BAA0B;CAC1B,0BAA0B;CAC1B,+BAA+B;CAC/B,qBAAqB;CACrB,gCAAgC;CAChC,uBAAuB;CACvB,uBAAuB;CAGvB,uBAAuB;CACvB,+BAA+B;CAC/B,iCAAiC;CACjC,2BAA2B;CAC3B,sBAAsB;CACtB,2BAA2B;CAC3B,sBAAsB;CACtB,sBAAsB;CACtB,uBAAuB;CACvB,oCAAoC;CACpC,mCAAmC;CAGnC,MAAM;CACN,cAAc;CACd,SAAS;CACT,WAAW;CACX,aAAa;CACb,kBAAkB;CAClB,iBAAiB;CACjB,gBAAgB;CAChB,iBAAiB;CACjB,0BAA0B;CAC1B,oBAAoB;CACpB,yBAAyB;CACzB,YAAY;CACZ,gBAAgB;CAGhB,iBAAiB;CACjB,kCAAkC;CAClC,UAAU;CACV,YAAY;CACZ,4BAA4B;CAC5B,yBAAyB;CACzB,2BAA2B;CAC3B,wBAAwB;CACxB,uBAAuB;CACvB,cAAc;CACd,0BAA0B;CAC1B,mCAAmC;CACnC,aAAa;CACb,uBAAuB;CACvB,qBAAqB;CACrB,cAAc;AAChB"}

package/dist/{componentId-olp0tltf.cjs → componentId-_tRhEv6W.cjs}

@@ -122,7 +122,6 @@ const ComponentId = {
 	EX_MONGODB: "keboola.ex-mongodb",
 	EX_SNOWFLAKE_QUERY_HISTORY: "keboola.ex-snowflake-query-history",
 	EX_SNOWFLAKE_PARAMETERS: "keboola.ex-snowflake-parameters",
-	EX_GENERIC_V2_DETAIL: "ex-generic-v2-detail",
 	APAC_EX_GMAIL_ATTACHMENTS: "apac.ex-gmail-attachments",
 	GENEEA_NLP_ANALYSIS_V2: "geneea.nlp-analysis-v2",
 	KDS_APP_CUSTOM_PYTHON: "kds-team.app-custom-python",
@@ -141,4 +140,4 @@ Object.defineProperty(exports, "ComponentId", {
 	}
 });
 
-//# sourceMappingURL=componentId-olp0tltf.cjs.map
+//# sourceMappingURL=componentId-_tRhEv6W.cjs.map

package/dist/{componentId-olp0tltf.cjs.map → componentId-_tRhEv6W.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"componentId-olp0tltf.cjs","names":[],"sources":["../src/constants/componentId.ts"],"sourcesContent":["export const ComponentId = {\n  WR_DB_MYSQL: 'keboola.wr-db-mysql',\n  WR_DB_PGSQL: 'keboola.wr-db-pgsql',\n  WR_DB_ORACLE: 'keboola.wr-db-oracle',\n  WR_DB_SNOWFLAKE: 'keboola.wr-db-snowflake',\n  WR_DB_SNOWFLAKE_GCS: 'keboola.wr-db-snowflake-gcs',\n  WR_DB_SNOWFLAKE_GCS_S3: 'keboola.wr-db-snowflake-gcs-s3',\n  WR_SNOWFLAKE_BLOB_STORAGE: 'keboola.wr-snowflake-blob-storage',\n  WR_LOOKER_V2: 'keboola.wr-looker-v2',\n  APP_DATA_GATEWAY: 'keboola.app-data-gateway',\n  WR_SYNAPSE: 'keboola.wr-synapse',\n  WR_REDSHIFT: 'keboola.wr-redshift-v2',\n  WR_DB_MSSQL: 'keboola.wr-db-mssql-v2',\n  WR_DB_HIVE: 'keboola.wr-db-hive',\n  WR_DB_IMPALA: 'keboola.wr-db-impala',\n  WR_PAIRITY: 'kds-team.wr-pairity',\n  WR_EXASOL: 'kds-team.wr-exasol',\n  WR_FIREBOLT: 'kds-team.wr-firebolt',\n  WR_HIVE_CSAS: 'kds-team.wr-hive-csas',\n  WR_THOUGHTSPOT: 'keboola.wr-thoughtspot',\n  WR_SISENSE: 'keboola.wr-sisense',\n  WR_AWS_S3: 'keboola.wr-aws-s3',\n  WR_STORAGE: 'keboola.wr-storage',\n  WR_GOOGLE_BIGQUERY_V2: 'keboola.wr-google-bigquery-v2',\n  SCHEDULER: 'keboola.scheduler',\n\n  // App-specific writers (bespoke credential blocks)\n  APP_SNOWFLAKE_DWH_MANAGER: 'keboola.app-snowflake-dwh-manager',\n  GOODDATA_WRITER: 'keboola.gooddata-writer',\n\n  // DB extractors (ex-db-generic family)\n  EX_DB_MYSQL: 'keboola.ex-db-mysql',\n  EX_DB_PGSQL: 'keboola.ex-db-pgsql',\n  EX_DB_REDSHIFT: 'keboola.ex-db-redshift',\n  EX_DB_FIREBIRD: 'keboola.ex-db-firebird',\n  EX_DB_DB2: 'keboola.ex-db-db2',\n  EX_DB_DB2_BATA: 'keboola.ex-db-db2-bata',\n  EX_DB_MSSQL: 'keboola.ex-db-mssql',\n  EX_DB_MSSQL_CDATA: 'keboola.ex-db-mssql-cdata',\n  EX_DB_ORACLE: 'keboola.ex-db-oracle',\n  EX_DB_SNOWFLAKE: 'keboola.ex-db-snowflake',\n  EX_DB_NETSUITE: 'keboola.ex-db-netsuite',\n  EX_DB_INFORMIX: 'keboola.ex-db-informix',\n  EX_DB_IMPALA: 'keboola.ex-db-impala',\n  EX_DB_HIVE: 'keboola.ex-db-hive',\n  EX_DB_HIVE_CSAS: 'keboola.ex-db-hive-csas',\n  EX_DB_HIVE_CSAS_TEST: 'keboola.ex-db-hive-csas-test',\n  EX_TERADATA: 'keboola.ex-teradata',\n  KDS_EX_NETSUITE: 'kds-team.ex-netsuite',\n  KDS_EX_PROGRESS_DB: 'kds-team.ex-progress-db',\n\n  // Google (OAuth) components\n  EX_GOOGLE_ADS: 'keboola.ex-google-ads',\n  EX_GOOGLE_ANALYTICS_V4: 'keboola.ex-google-analytics-v4',\n  WR_GOOGLE_DRIVE: 'keboola.wr-google-drive',\n  WR_GOOGLE_SHEETS: 'keboola.wr-google-sheets',\n\n  // Meta (OAuth) components\n  EX_FACEBOOK: 'keboola.ex-facebook',\n  EX_FACEBOOK_ADS: 'keboola.ex-facebook-ads',\n  EX_FACEBOOK_ADS_V2: 'keboola.ex-facebook-ads-v2',\n  EX_FACEBOOK_PAGES: 'keboola.ex-facebook-pages',\n  EX_INSTAGRAM: 'keboola.ex-instagram',\n  EX_INSTAGRAM_V2: 'keboola.ex-instagram-v2',\n\n  // Microsoft OneDrive (OAuth) components\n  EX_ONEDRIVE: 'keboola.ex-onedrive',\n  WR_ONEDRIVE: 'keboola.wr-onedrive',\n\n  // File/connection extractors (ex family, no shared credential base)\n  EX_HTTP: 'keboola.ex-http',\n  EX_FTP: 'keboola.ex-ftp',\n  EX_FTP_CSAS: 'keboola.ex-ftp-csas',\n  EX_EMAIL_ATTACHMENTS: 'keboola.ex-email-attachments',\n  EX_AWS_S3: 'keboola.ex-aws-s3',\n  KDS_EX_AZURE_BLOB_STORAGE_V2: 'kds-team.ex-azure-blob-storage-v2',\n  KDS_EX_AZURE_DATA_LAKE_GEN2: 'kds-team.ex-azure-data-lake-gen2',\n  APIFY: 'apify.apify',\n  EX_GENERIC_V2: 'ex-generic-v2',\n  EX_GOOGLE_BIGQUERY_V2: 'keboola.ex-google-bigquery-v2',\n  EX_STORAGE: 'keboola.ex-storage',\n\n  // Data-app family — a git repository lives under `parameters.dataApp.git`\n  DATA_APPS: 'keboola.data-apps',\n  SANDBOXES: 'keboola.sandboxes',\n\n  // dbt transformations — a git repository lives under `parameters.git`\n  DBT_TEST_CORE_KEY_PAIR: 'keboola-test.dbt-core-key-pair',\n  DBT_TEST_REMOTE_SNOWFLAKE: 'keboola-test.dbt-remote-snowflake',\n  DBT_TEST_TRANSFORMATION: 'keboola-test.dbt-transformation',\n  DBT_TRANSFORMATION: 'keboola.dbt-transformation',\n  DBT_TRANSFORMATION_LOCAL_BIGQUERY: 'keboola.dbt-transformation-local-bigquery',\n  DBT_TRANSFORMATION_REMOTE_BIGQUERY: 'keboola.dbt-transformation-remote-bigquery',\n  DBT_TRANSFORMATION_REMOTE_MSSQL: 'keboola.dbt-transformation-remote-mssql',\n  DBT_TRANSFORMATION_REMOTE_POSTGRESQL: 'keboola.dbt-transformation-remote-postgresql',\n  DBT_TRANSFORMATION_REMOTE_REDSHIFT: 'keboola.dbt-transformation-remote-redshift',\n  DBT_TRANSFORMATION_REMOTE_SNOWFLAKE: 'keboola.dbt-transformation-remote-snowflake',\n\n  APP_CONFIGURATION_MIGRATION_TOOL: 'keboola.app-configuration-migration-tool',\n  FLOW_MIGRATION_TOOL: 'keboola.flow-migration-tool',\n\n  // Utility components, called only for their sync actions\n  SSH_KEYGEN_V2: 'keboola.ssh-keygen-v2',\n\n  // Transformations\n  LEGACY_TRANSFORMATION: 'keboola.legacy-transformation',\n  SNOWFLAKE_TRANSFORMATION: 'keboola.snowflake-transformation',\n  PYTHON_TRANSFORMATION_V2: 'keboola.python-transformation-v2',\n  CSAS_PYTHON_TRANSFORMATION_V2: 'keboola.csas-python-transformation-v2',\n  R_TRANSFORMATION_V2: 'keboola.r-transformation-v2',\n  GOOGLE_BIGQUERY_TRANSFORMATION: 'keboola.google-bigquery-transformation',\n  DUCKDB_TRANSFORMATION: 'keboola.duckdb-transformation',\n  ORACLE_TRANSFORMATION: 'keboola.oracle-transformation',\n\n  // Processors\n  PROCESSOR_SPLIT_TABLE: 'keboola.processor-split-table',\n  PROCESSOR_ADD_FILENAME_COLUMN: 'keboola.processor-add-filename-column',\n  PROCESSOR_ADD_ROW_NUMBER_COLUMN: 'keboola.processor-add-row-number-column',\n  PROCESSOR_CREATE_MANIFEST: 'keboola.processor-create-manifest',\n  PROCESSOR_DECOMPRESS: 'keboola.processor-decompress',\n  PROCESSOR_FLATTEN_FOLDERS: 'keboola.processor-flatten-folders',\n  PROCESSOR_MOVE_FILES: 'keboola.processor-move-files',\n  PROCESSOR_SKIP_LINES: 'keboola.processor-skip-lines',\n  KDS_PROCESSOR_CSV2XLS: 'kds-team.processor-csv2xls',\n  KDS_PROCESSOR_CREATE_FILE_MANIFEST: 'kds-team.processor-create-file-manifest',\n  KDS_PROCESSOR_CONVERT_COLUMN_CASE: 'kds-team.processor-convert-column-case',\n\n  // Platform components\n  FLOW: 'keboola.flow',\n  ORCHESTRATOR: 'keboola.orchestrator',\n  STORAGE: 'keboola.storage', // component to get icon and name\n  VARIABLES: 'keboola.variables',\n  SHARED_CODE: 'keboola.shared-code',\n  DATA_APP_CONTROL: 'keboola.data-app-control',\n  MCP_SERVER_TOOL: 'keboola.mcp-server-tool',\n  PROJECT_BACKUP: 'keboola.project-backup',\n  KEBOOLA_AS_CODE: 'keboola.keboola-as-code',\n  APP_MERGE_BRANCH_STORAGE: 'keboola.app-merge-branch-storage',\n  SAPI_MERGED_EXPORT: 'keboola.sapi-merged-export',\n  SLICED_FILES_DOWNLOADER: 'keboola.sliced-files-downloader',\n  CSV_IMPORT: 'keboola.csv-import',\n  EX_SAMPLE_DATA: 'keboola.ex-sample-data',\n\n  // Other components\n  EX_GOOGLE_DRIVE: 'keboola.ex-google-drive',\n  EX_GOOGLE_BIGQUERY_V2_AVRO_FILES: 'keboola.ex-google-bigquery-v2-avro-files',\n  EX_GMAIL: 'keboola.ex-gmail',\n  EX_MONGODB: 'keboola.ex-mongodb',\n  EX_SNOWFLAKE_QUERY_HISTORY: 'keboola.ex-snowflake-query-history',\n  EX_SNOWFLAKE_PARAMETERS: 'keboola.ex-snowflake-parameters',\n  EX_GENERIC_V2_DETAIL: 'ex-generic-v2-detail',\n  APAC_EX_GMAIL_ATTACHMENTS: 'apac.ex-gmail-attachments',\n  GENEEA_NLP_ANALYSIS_V2: 'geneea.nlp-analysis-v2',\n  KDS_APP_CUSTOM_PYTHON: 'kds-team.app-custom-python',\n  KDS_EX_DV360: 'kds-team.ex-dv360',\n  KDS_EX_YOUTUBE_ANALYTICS: 'kds-team.ex-youtube-analytics',\n  KDS_EX_AWS_COST_AND_USAGE_REPORTS: 'kds-team.ex-aws-cost-and-usage-reports',\n  KDS_EX_ZOHO: 'kds-team.ex-zoho',\n  SMETRIC_EX_SIMPRO_API: 'smetric.ex-simpro-api',\n  SMETRIC_EX_VEND_API: 'smetric.ex-vend-api',\n  TDE_EXPORTER: 'tde-exporter',\n} as const;\n\nexport type ComponentId = (typeof ComponentId)[keyof typeof ComponentId];\n"],"mappings":";AAAA,MAAa,cAAc;CACzB,aAAa;CACb,aAAa;CACb,cAAc;CACd,iBAAiB;CACjB,qBAAqB;CACrB,wBAAwB;CACxB,2BAA2B;CAC3B,cAAc;CACd,kBAAkB;CAClB,YAAY;CACZ,aAAa;CACb,aAAa;CACb,YAAY;CACZ,cAAc;CACd,YAAY;CACZ,WAAW;CACX,aAAa;CACb,cAAc;CACd,gBAAgB;CAChB,YAAY;CACZ,WAAW;CACX,YAAY;CACZ,uBAAuB;CACvB,WAAW;CAGX,2BAA2B;CAC3B,iBAAiB;CAGjB,aAAa;CACb,aAAa;CACb,gBAAgB;CAChB,gBAAgB;CAChB,WAAW;CACX,gBAAgB;CAChB,aAAa;CACb,mBAAmB;CACnB,cAAc;CACd,iBAAiB;CACjB,gBAAgB;CAChB,gBAAgB;CAChB,cAAc;CACd,YAAY;CACZ,iBAAiB;CACjB,sBAAsB;CACtB,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CAGpB,eAAe;CACf,wBAAwB;CACxB,iBAAiB;CACjB,kBAAkB;CAGlB,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CACpB,mBAAmB;CACnB,cAAc;CACd,iBAAiB;CAGjB,aAAa;CACb,aAAa;CAGb,SAAS;CACT,QAAQ;CACR,aAAa;CACb,sBAAsB;CACtB,WAAW;CACX,8BAA8B;CAC9B,6BAA6B;CAC7B,OAAO;CACP,eAAe;CACf,uBAAuB;CACvB,YAAY;CAGZ,WAAW;CACX,WAAW;CAGX,wBAAwB;CACxB,2BAA2B;CAC3B,yBAAyB;CACzB,oBAAoB;CACpB,mCAAmC;CACnC,oCAAoC;CACpC,iCAAiC;CACjC,sCAAsC;CACtC,oCAAoC;CACpC,qCAAqC;CAErC,kCAAkC;CAClC,qBAAqB;CAGrB,eAAe;CAGf,uBAAuB;CACvB,0BAA0B;CAC1B,0BAA0B;CAC1B,+BAA+B;CAC/B,qBAAqB;CACrB,gCAAgC;CAChC,uBAAuB;CACvB,uBAAuB;CAGvB,uBAAuB;CACvB,+BAA+B;CAC/B,iCAAiC;CACjC,2BAA2B;CAC3B,sBAAsB;CACtB,2BAA2B;CAC3B,sBAAsB;CACtB,sBAAsB;CACtB,uBAAuB;CACvB,oCAAoC;CACpC,mCAAmC;CAGnC,MAAM;CACN,cAAc;CACd,SAAS;CACT,WAAW;CACX,aAAa;CACb,kBAAkB;CAClB,iBAAiB;CACjB,gBAAgB;CAChB,iBAAiB;CACjB,0BAA0B;CAC1B,oBAAoB;CACpB,yBAAyB;CACzB,YAAY;CACZ,gBAAgB;CAGhB,iBAAiB;CACjB,kCAAkC;CAClC,UAAU;CACV,YAAY;CACZ,4BAA4B;CAC5B,yBAAyB;CACzB,sBAAsB;CACtB,2BAA2B;CAC3B,wBAAwB;CACxB,uBAAuB;CACvB,cAAc;CACd,0BAA0B;CAC1B,mCAAmC;CACnC,aAAa;CACb,uBAAuB;CACvB,qBAAqB;CACrB,cAAc;AAChB"}
+{"version":3,"file":"componentId-_tRhEv6W.cjs","names":[],"sources":["../src/constants/componentId.ts"],"sourcesContent":["export const ComponentId = {\n  WR_DB_MYSQL: 'keboola.wr-db-mysql',\n  WR_DB_PGSQL: 'keboola.wr-db-pgsql',\n  WR_DB_ORACLE: 'keboola.wr-db-oracle',\n  WR_DB_SNOWFLAKE: 'keboola.wr-db-snowflake',\n  WR_DB_SNOWFLAKE_GCS: 'keboola.wr-db-snowflake-gcs',\n  WR_DB_SNOWFLAKE_GCS_S3: 'keboola.wr-db-snowflake-gcs-s3',\n  WR_SNOWFLAKE_BLOB_STORAGE: 'keboola.wr-snowflake-blob-storage',\n  WR_LOOKER_V2: 'keboola.wr-looker-v2',\n  APP_DATA_GATEWAY: 'keboola.app-data-gateway',\n  WR_SYNAPSE: 'keboola.wr-synapse',\n  WR_REDSHIFT: 'keboola.wr-redshift-v2',\n  WR_DB_MSSQL: 'keboola.wr-db-mssql-v2',\n  WR_DB_HIVE: 'keboola.wr-db-hive',\n  WR_DB_IMPALA: 'keboola.wr-db-impala',\n  WR_PAIRITY: 'kds-team.wr-pairity',\n  WR_EXASOL: 'kds-team.wr-exasol',\n  WR_FIREBOLT: 'kds-team.wr-firebolt',\n  WR_HIVE_CSAS: 'kds-team.wr-hive-csas',\n  WR_THOUGHTSPOT: 'keboola.wr-thoughtspot',\n  WR_SISENSE: 'keboola.wr-sisense',\n  WR_AWS_S3: 'keboola.wr-aws-s3',\n  WR_STORAGE: 'keboola.wr-storage',\n  WR_GOOGLE_BIGQUERY_V2: 'keboola.wr-google-bigquery-v2',\n  SCHEDULER: 'keboola.scheduler',\n\n  // App-specific writers (bespoke credential blocks)\n  APP_SNOWFLAKE_DWH_MANAGER: 'keboola.app-snowflake-dwh-manager',\n  GOODDATA_WRITER: 'keboola.gooddata-writer',\n\n  // DB extractors (ex-db-generic family)\n  EX_DB_MYSQL: 'keboola.ex-db-mysql',\n  EX_DB_PGSQL: 'keboola.ex-db-pgsql',\n  EX_DB_REDSHIFT: 'keboola.ex-db-redshift',\n  EX_DB_FIREBIRD: 'keboola.ex-db-firebird',\n  EX_DB_DB2: 'keboola.ex-db-db2',\n  EX_DB_DB2_BATA: 'keboola.ex-db-db2-bata',\n  EX_DB_MSSQL: 'keboola.ex-db-mssql',\n  EX_DB_MSSQL_CDATA: 'keboola.ex-db-mssql-cdata',\n  EX_DB_ORACLE: 'keboola.ex-db-oracle',\n  EX_DB_SNOWFLAKE: 'keboola.ex-db-snowflake',\n  EX_DB_NETSUITE: 'keboola.ex-db-netsuite',\n  EX_DB_INFORMIX: 'keboola.ex-db-informix',\n  EX_DB_IMPALA: 'keboola.ex-db-impala',\n  EX_DB_HIVE: 'keboola.ex-db-hive',\n  EX_DB_HIVE_CSAS: 'keboola.ex-db-hive-csas',\n  EX_DB_HIVE_CSAS_TEST: 'keboola.ex-db-hive-csas-test',\n  EX_TERADATA: 'keboola.ex-teradata',\n  KDS_EX_NETSUITE: 'kds-team.ex-netsuite',\n  KDS_EX_PROGRESS_DB: 'kds-team.ex-progress-db',\n\n  // Google (OAuth) components\n  EX_GOOGLE_ADS: 'keboola.ex-google-ads',\n  EX_GOOGLE_ANALYTICS_V4: 'keboola.ex-google-analytics-v4',\n  WR_GOOGLE_DRIVE: 'keboola.wr-google-drive',\n  WR_GOOGLE_SHEETS: 'keboola.wr-google-sheets',\n\n  // Meta (OAuth) components\n  EX_FACEBOOK: 'keboola.ex-facebook',\n  EX_FACEBOOK_ADS: 'keboola.ex-facebook-ads',\n  EX_FACEBOOK_ADS_V2: 'keboola.ex-facebook-ads-v2',\n  EX_FACEBOOK_PAGES: 'keboola.ex-facebook-pages',\n  EX_INSTAGRAM: 'keboola.ex-instagram',\n  EX_INSTAGRAM_V2: 'keboola.ex-instagram-v2',\n\n  // Microsoft OneDrive (OAuth) components\n  EX_ONEDRIVE: 'keboola.ex-onedrive',\n  WR_ONEDRIVE: 'keboola.wr-onedrive',\n\n  // File/connection extractors (ex family, no shared credential base)\n  EX_HTTP: 'keboola.ex-http',\n  EX_FTP: 'keboola.ex-ftp',\n  EX_FTP_CSAS: 'keboola.ex-ftp-csas',\n  EX_EMAIL_ATTACHMENTS: 'keboola.ex-email-attachments',\n  EX_AWS_S3: 'keboola.ex-aws-s3',\n  KDS_EX_AZURE_BLOB_STORAGE_V2: 'kds-team.ex-azure-blob-storage-v2',\n  KDS_EX_AZURE_DATA_LAKE_GEN2: 'kds-team.ex-azure-data-lake-gen2',\n  APIFY: 'apify.apify',\n  EX_GENERIC_V2: 'ex-generic-v2',\n  EX_GOOGLE_BIGQUERY_V2: 'keboola.ex-google-bigquery-v2',\n  EX_STORAGE: 'keboola.ex-storage',\n\n  // Data-app family — a git repository lives under `parameters.dataApp.git`\n  DATA_APPS: 'keboola.data-apps',\n  SANDBOXES: 'keboola.sandboxes',\n\n  // dbt transformations — a git repository lives under `parameters.git`\n  DBT_TEST_CORE_KEY_PAIR: 'keboola-test.dbt-core-key-pair',\n  DBT_TEST_REMOTE_SNOWFLAKE: 'keboola-test.dbt-remote-snowflake',\n  DBT_TEST_TRANSFORMATION: 'keboola-test.dbt-transformation',\n  DBT_TRANSFORMATION: 'keboola.dbt-transformation',\n  DBT_TRANSFORMATION_LOCAL_BIGQUERY: 'keboola.dbt-transformation-local-bigquery',\n  DBT_TRANSFORMATION_REMOTE_BIGQUERY: 'keboola.dbt-transformation-remote-bigquery',\n  DBT_TRANSFORMATION_REMOTE_MSSQL: 'keboola.dbt-transformation-remote-mssql',\n  DBT_TRANSFORMATION_REMOTE_POSTGRESQL: 'keboola.dbt-transformation-remote-postgresql',\n  DBT_TRANSFORMATION_REMOTE_REDSHIFT: 'keboola.dbt-transformation-remote-redshift',\n  DBT_TRANSFORMATION_REMOTE_SNOWFLAKE: 'keboola.dbt-transformation-remote-snowflake',\n\n  APP_CONFIGURATION_MIGRATION_TOOL: 'keboola.app-configuration-migration-tool',\n  FLOW_MIGRATION_TOOL: 'keboola.flow-migration-tool',\n\n  // Utility components, called only for their sync actions\n  SSH_KEYGEN_V2: 'keboola.ssh-keygen-v2',\n\n  // Transformations\n  LEGACY_TRANSFORMATION: 'keboola.legacy-transformation',\n  SNOWFLAKE_TRANSFORMATION: 'keboola.snowflake-transformation',\n  PYTHON_TRANSFORMATION_V2: 'keboola.python-transformation-v2',\n  CSAS_PYTHON_TRANSFORMATION_V2: 'keboola.csas-python-transformation-v2',\n  R_TRANSFORMATION_V2: 'keboola.r-transformation-v2',\n  GOOGLE_BIGQUERY_TRANSFORMATION: 'keboola.google-bigquery-transformation',\n  DUCKDB_TRANSFORMATION: 'keboola.duckdb-transformation',\n  ORACLE_TRANSFORMATION: 'keboola.oracle-transformation',\n\n  // Processors\n  PROCESSOR_SPLIT_TABLE: 'keboola.processor-split-table',\n  PROCESSOR_ADD_FILENAME_COLUMN: 'keboola.processor-add-filename-column',\n  PROCESSOR_ADD_ROW_NUMBER_COLUMN: 'keboola.processor-add-row-number-column',\n  PROCESSOR_CREATE_MANIFEST: 'keboola.processor-create-manifest',\n  PROCESSOR_DECOMPRESS: 'keboola.processor-decompress',\n  PROCESSOR_FLATTEN_FOLDERS: 'keboola.processor-flatten-folders',\n  PROCESSOR_MOVE_FILES: 'keboola.processor-move-files',\n  PROCESSOR_SKIP_LINES: 'keboola.processor-skip-lines',\n  KDS_PROCESSOR_CSV2XLS: 'kds-team.processor-csv2xls',\n  KDS_PROCESSOR_CREATE_FILE_MANIFEST: 'kds-team.processor-create-file-manifest',\n  KDS_PROCESSOR_CONVERT_COLUMN_CASE: 'kds-team.processor-convert-column-case',\n\n  // Platform components\n  FLOW: 'keboola.flow',\n  ORCHESTRATOR: 'keboola.orchestrator',\n  STORAGE: 'keboola.storage', // component to get icon and name\n  VARIABLES: 'keboola.variables',\n  SHARED_CODE: 'keboola.shared-code',\n  DATA_APP_CONTROL: 'keboola.data-app-control',\n  MCP_SERVER_TOOL: 'keboola.mcp-server-tool',\n  PROJECT_BACKUP: 'keboola.project-backup',\n  KEBOOLA_AS_CODE: 'keboola.keboola-as-code',\n  APP_MERGE_BRANCH_STORAGE: 'keboola.app-merge-branch-storage',\n  SAPI_MERGED_EXPORT: 'keboola.sapi-merged-export',\n  SLICED_FILES_DOWNLOADER: 'keboola.sliced-files-downloader',\n  CSV_IMPORT: 'keboola.csv-import',\n  EX_SAMPLE_DATA: 'keboola.ex-sample-data',\n\n  // Other components\n  EX_GOOGLE_DRIVE: 'keboola.ex-google-drive',\n  EX_GOOGLE_BIGQUERY_V2_AVRO_FILES: 'keboola.ex-google-bigquery-v2-avro-files',\n  EX_GMAIL: 'keboola.ex-gmail',\n  EX_MONGODB: 'keboola.ex-mongodb',\n  EX_SNOWFLAKE_QUERY_HISTORY: 'keboola.ex-snowflake-query-history',\n  EX_SNOWFLAKE_PARAMETERS: 'keboola.ex-snowflake-parameters',\n  APAC_EX_GMAIL_ATTACHMENTS: 'apac.ex-gmail-attachments',\n  GENEEA_NLP_ANALYSIS_V2: 'geneea.nlp-analysis-v2',\n  KDS_APP_CUSTOM_PYTHON: 'kds-team.app-custom-python',\n  KDS_EX_DV360: 'kds-team.ex-dv360',\n  KDS_EX_YOUTUBE_ANALYTICS: 'kds-team.ex-youtube-analytics',\n  KDS_EX_AWS_COST_AND_USAGE_REPORTS: 'kds-team.ex-aws-cost-and-usage-reports',\n  KDS_EX_ZOHO: 'kds-team.ex-zoho',\n  SMETRIC_EX_SIMPRO_API: 'smetric.ex-simpro-api',\n  SMETRIC_EX_VEND_API: 'smetric.ex-vend-api',\n  TDE_EXPORTER: 'tde-exporter',\n} as const;\n\nexport type ComponentId = (typeof ComponentId)[keyof typeof ComponentId];\n"],"mappings":";AAAA,MAAa,cAAc;CACzB,aAAa;CACb,aAAa;CACb,cAAc;CACd,iBAAiB;CACjB,qBAAqB;CACrB,wBAAwB;CACxB,2BAA2B;CAC3B,cAAc;CACd,kBAAkB;CAClB,YAAY;CACZ,aAAa;CACb,aAAa;CACb,YAAY;CACZ,cAAc;CACd,YAAY;CACZ,WAAW;CACX,aAAa;CACb,cAAc;CACd,gBAAgB;CAChB,YAAY;CACZ,WAAW;CACX,YAAY;CACZ,uBAAuB;CACvB,WAAW;CAGX,2BAA2B;CAC3B,iBAAiB;CAGjB,aAAa;CACb,aAAa;CACb,gBAAgB;CAChB,gBAAgB;CAChB,WAAW;CACX,gBAAgB;CAChB,aAAa;CACb,mBAAmB;CACnB,cAAc;CACd,iBAAiB;CACjB,gBAAgB;CAChB,gBAAgB;CAChB,cAAc;CACd,YAAY;CACZ,iBAAiB;CACjB,sBAAsB;CACtB,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CAGpB,eAAe;CACf,wBAAwB;CACxB,iBAAiB;CACjB,kBAAkB;CAGlB,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CACpB,mBAAmB;CACnB,cAAc;CACd,iBAAiB;CAGjB,aAAa;CACb,aAAa;CAGb,SAAS;CACT,QAAQ;CACR,aAAa;CACb,sBAAsB;CACtB,WAAW;CACX,8BAA8B;CAC9B,6BAA6B;CAC7B,OAAO;CACP,eAAe;CACf,uBAAuB;CACvB,YAAY;CAGZ,WAAW;CACX,WAAW;CAGX,wBAAwB;CACxB,2BAA2B;CAC3B,yBAAyB;CACzB,oBAAoB;CACpB,mCAAmC;CACnC,oCAAoC;CACpC,iCAAiC;CACjC,sCAAsC;CACtC,oCAAoC;CACpC,qCAAqC;CAErC,kCAAkC;CAClC,qBAAqB;CAGrB,eAAe;CAGf,uBAAuB;CACvB,0BAA0B;CAC1B,0BAA0B;CAC1B,+BAA+B;CAC/B,qBAAqB;CACrB,gCAAgC;CAChC,uBAAuB;CACvB,uBAAuB;CAGvB,uBAAuB;CACvB,+BAA+B;CAC/B,iCAAiC;CACjC,2BAA2B;CAC3B,sBAAsB;CACtB,2BAA2B;CAC3B,sBAAsB;CACtB,sBAAsB;CACtB,uBAAuB;CACvB,oCAAoC;CACpC,mCAAmC;CAGnC,MAAM;CACN,cAAc;CACd,SAAS;CACT,WAAW;CACX,aAAa;CACb,kBAAkB;CAClB,iBAAiB;CACjB,gBAAgB;CAChB,iBAAiB;CACjB,0BAA0B;CAC1B,oBAAoB;CACpB,yBAAyB;CACzB,YAAY;CACZ,gBAAgB;CAGhB,iBAAiB;CACjB,kCAAkC;CAClC,UAAU;CACV,YAAY;CACZ,4BAA4B;CAC5B,yBAAyB;CACzB,2BAA2B;CAC3B,wBAAwB;CACxB,uBAAuB;CACvB,cAAc;CACd,0BAA0B;CAC1B,mCAAmC;CACnC,aAAa;CACb,uBAAuB;CACvB,qBAAqB;CACrB,cAAc;AAChB"}

package/dist/{configurations-WI8H4zLk.cjs → configurations-BM63ep1s.cjs}

@@ -1,4 +1,4 @@
-const require_admin = require("./admin-Di-MmGFP.cjs");
+const require_admin = require("./admin-BZ7knTd0.cjs");
 // src/domain/permissions/configurations.ts
 const meetsBaseRule = (token, ctx) => ctx.isDevModeActive ? require_admin.isDeveloperOrReviewer(token) : require_admin.isProductionManager(token);
 const baseDenialReason = (ctx) => ctx.isDevModeActive ? "dev branch requires developer or reviewer role" : "production requires productionManager role";
@@ -117,4 +117,4 @@ Object.defineProperty(exports, "canUpdateConfiguration", {
 	}
 });
 
-//# sourceMappingURL=configurations-WI8H4zLk.cjs.map
+//# sourceMappingURL=configurations-BM63ep1s.cjs.map

package/dist/{configurations-WI8H4zLk.cjs.map → configurations-BM63ep1s.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"configurations-WI8H4zLk.cjs","names":["isDeveloperOrReviewer","isProductionManager","isAdmin","PermissionDeniedError"],"sources":["../src/domain/permissions/configurations.ts"],"sourcesContent":["/**\n * @module domain/permissions/configurations\n *\n * - Dev branch → developer or reviewer; production → production manager.\n * - Purge is admin-only in any branch mode; its `ctx` is ignored.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\n\nimport { isAdmin, isDeveloperOrReviewer, isProductionManager } from './admin';\nimport { PermissionDeniedError } from './errors';\n\n/**\n * Caller-supplied context for configuration predicates.\n *\n * @property isDevModeActive — `true` on any branch other than the default (`isDefault`) one.\n */\nexport type ConfigurationCtx = {\n  isDevModeActive: boolean;\n};\n\nconst meetsBaseRule = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  ctx.isDevModeActive ? isDeveloperOrReviewer(token) : isProductionManager(token);\n\nconst baseDenialReason = (ctx: ConfigurationCtx): string =>\n  ctx.isDevModeActive\n    ? 'dev branch requires developer or reviewer role'\n    : 'production requires productionManager role';\n\nexport const canCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => boolean = (\n  token,\n) => isAdmin(token);\n\nexport const canAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const assertCanCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCreateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'create-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canUpdateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'update-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCopyConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'copy-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canMigrateFromTemplate(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'migrate-from-template',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanPurgeConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canPurgeConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'purge-configuration',\n      reason: 'purge requires admin role',\n    });\n  }\n};\n\nexport const assertCanAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canAssignFolder(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'assign-folder',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n"],"mappings":";;AAoBA,MAAM,iBAAiB,OAAqB,QAC1C,IAAI,kBAAkBA,cAAAA,sBAAsB,KAAK,IAAIC,cAAAA,oBAAoB,KAAK;AAEhF,MAAM,oBAAoB,QACxB,IAAI,kBACA,mDACA;AAEN,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,wBAAwB,OAAqB,QACxD,cAAc,OAAO,GAAG;AAE1B,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,yBACX,UACGC,cAAAA,QAAQ,KAAK;AAElB,MAAa,mBAAmB,OAAqB,QACnD,cAAc,OAAO,GAAG;AAE1B,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAIC,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,8BAA8B,OAAqB,QAAgC;CAC9F,IAAI,CAAC,qBAAqB,OAAO,GAAG,GAClC,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,+BAA+B,OAAqB,QAAgC;CAC/F,IAAI,CAAC,sBAAsB,OAAO,GAAG,GACnC,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ;CACV,CAAC;AAEL;AAEA,MAAa,yBAAyB,OAAqB,QAAgC;CACzF,IAAI,CAAC,gBAAgB,OAAO,GAAG,GAC7B,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL"}
+{"version":3,"file":"configurations-BM63ep1s.cjs","names":["isDeveloperOrReviewer","isProductionManager","isAdmin","PermissionDeniedError"],"sources":["../src/domain/permissions/configurations.ts"],"sourcesContent":["/**\n * @module domain/permissions/configurations\n *\n * - Dev branch → developer or reviewer; production → production manager.\n * - Purge is admin-only in any branch mode; its `ctx` is ignored.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\n\nimport { isAdmin, isDeveloperOrReviewer, isProductionManager } from './admin';\nimport { PermissionDeniedError } from './errors';\n\n/**\n * Caller-supplied context for configuration predicates.\n *\n * @property isDevModeActive — `true` on any branch other than the default (`isDefault`) one.\n */\nexport type ConfigurationCtx = {\n  isDevModeActive: boolean;\n};\n\nconst meetsBaseRule = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  ctx.isDevModeActive ? isDeveloperOrReviewer(token) : isProductionManager(token);\n\nconst baseDenialReason = (ctx: ConfigurationCtx): string =>\n  ctx.isDevModeActive\n    ? 'dev branch requires developer or reviewer role'\n    : 'production requires productionManager role';\n\nexport const canCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => boolean = (\n  token,\n) => isAdmin(token);\n\nexport const canAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const assertCanCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCreateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'create-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canUpdateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'update-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCopyConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'copy-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canMigrateFromTemplate(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'migrate-from-template',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanPurgeConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canPurgeConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'purge-configuration',\n      reason: 'purge requires admin role',\n    });\n  }\n};\n\nexport const assertCanAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canAssignFolder(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'assign-folder',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n"],"mappings":";;AAoBA,MAAM,iBAAiB,OAAqB,QAC1C,IAAI,kBAAkBA,cAAAA,sBAAsB,KAAK,IAAIC,cAAAA,oBAAoB,KAAK;AAEhF,MAAM,oBAAoB,QACxB,IAAI,kBACA,mDACA;AAEN,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,wBAAwB,OAAqB,QACxD,cAAc,OAAO,GAAG;AAE1B,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,yBACX,UACGC,cAAAA,QAAQ,KAAK;AAElB,MAAa,mBAAmB,OAAqB,QACnD,cAAc,OAAO,GAAG;AAE1B,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAIC,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,8BAA8B,OAAqB,QAAgC;CAC9F,IAAI,CAAC,qBAAqB,OAAO,GAAG,GAClC,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,+BAA+B,OAAqB,QAAgC;CAC/F,IAAI,CAAC,sBAAsB,OAAO,GAAG,GACnC,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ;CACV,CAAC;AAEL;AAEA,MAAa,yBAAyB,OAAqB,QAAgC;CACzF,IAAI,CAAC,gBAAgB,OAAO,GAAG,GAC7B,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL"}

package/dist/{configurations-Cd6Nsox-.js → configurations-BqvtIQm4.js}

@@ -1,4 +1,4 @@
-import { c as isAdmin, h as PermissionDeniedError, p as isProductionManager, u as isDeveloperOrReviewer } from "./admin-CbMOsfgs.js";
+import { d as isDeveloperOrReviewer, g as PermissionDeniedError, l as isAdmin, m as isProductionManager } from "./admin-xFfHSZHQ.js";
 // src/domain/permissions/configurations.ts
 const meetsBaseRule = (token, ctx) => ctx.isDevModeActive ? isDeveloperOrReviewer(token) : isProductionManager(token);
 const baseDenialReason = (ctx) => ctx.isDevModeActive ? "dev branch requires developer or reviewer role" : "production requires productionManager role";
@@ -46,4 +46,4 @@ const assertCanAssignFolder = (token, ctx) => {
 };
 export { assertCanPurgeConfiguration as a, canCopyConfiguration as c, canPurgeConfiguration as d, canUpdateConfiguration as f, assertCanMigrateFromTemplate as i, canCreateConfiguration as l, assertCanCopyConfiguration as n, assertCanUpdateConfiguration as o, assertCanCreateConfiguration as r, canAssignFolder as s, assertCanAssignFolder as t, canMigrateFromTemplate as u };
 
-//# sourceMappingURL=configurations-Cd6Nsox-.js.map
+//# sourceMappingURL=configurations-BqvtIQm4.js.map

package/dist/{configurations-Cd6Nsox-.js.map → configurations-BqvtIQm4.js.map}

@@ -1 +1 @@
-{"version":3,"file":"configurations-Cd6Nsox-.js","names":[],"sources":["../src/domain/permissions/configurations.ts"],"sourcesContent":["/**\n * @module domain/permissions/configurations\n *\n * - Dev branch → developer or reviewer; production → production manager.\n * - Purge is admin-only in any branch mode; its `ctx` is ignored.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\n\nimport { isAdmin, isDeveloperOrReviewer, isProductionManager } from './admin';\nimport { PermissionDeniedError } from './errors';\n\n/**\n * Caller-supplied context for configuration predicates.\n *\n * @property isDevModeActive — `true` on any branch other than the default (`isDefault`) one.\n */\nexport type ConfigurationCtx = {\n  isDevModeActive: boolean;\n};\n\nconst meetsBaseRule = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  ctx.isDevModeActive ? isDeveloperOrReviewer(token) : isProductionManager(token);\n\nconst baseDenialReason = (ctx: ConfigurationCtx): string =>\n  ctx.isDevModeActive\n    ? 'dev branch requires developer or reviewer role'\n    : 'production requires productionManager role';\n\nexport const canCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => boolean = (\n  token,\n) => isAdmin(token);\n\nexport const canAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const assertCanCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCreateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'create-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canUpdateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'update-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCopyConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'copy-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canMigrateFromTemplate(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'migrate-from-template',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanPurgeConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canPurgeConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'purge-configuration',\n      reason: 'purge requires admin role',\n    });\n  }\n};\n\nexport const assertCanAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canAssignFolder(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'assign-folder',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n"],"mappings":";;AAoBA,MAAM,iBAAiB,OAAqB,QAC1C,IAAI,kBAAkB,sBAAsB,KAAK,IAAI,oBAAoB,KAAK;AAEhF,MAAM,oBAAoB,QACxB,IAAI,kBACA,mDACA;AAEN,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,wBAAwB,OAAqB,QACxD,cAAc,OAAO,GAAG;AAE1B,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,yBACX,UACG,QAAQ,KAAK;AAElB,MAAa,mBAAmB,OAAqB,QACnD,cAAc,OAAO,GAAG;AAE1B,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,8BAA8B,OAAqB,QAAgC;CAC9F,IAAI,CAAC,qBAAqB,OAAO,GAAG,GAClC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,+BAA+B,OAAqB,QAAgC;CAC/F,IAAI,CAAC,sBAAsB,OAAO,GAAG,GACnC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ;CACV,CAAC;AAEL;AAEA,MAAa,yBAAyB,OAAqB,QAAgC;CACzF,IAAI,CAAC,gBAAgB,OAAO,GAAG,GAC7B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL"}
+{"version":3,"file":"configurations-BqvtIQm4.js","names":[],"sources":["../src/domain/permissions/configurations.ts"],"sourcesContent":["/**\n * @module domain/permissions/configurations\n *\n * - Dev branch → developer or reviewer; production → production manager.\n * - Purge is admin-only in any branch mode; its `ctx` is ignored.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\n\nimport { isAdmin, isDeveloperOrReviewer, isProductionManager } from './admin';\nimport { PermissionDeniedError } from './errors';\n\n/**\n * Caller-supplied context for configuration predicates.\n *\n * @property isDevModeActive — `true` on any branch other than the default (`isDefault`) one.\n */\nexport type ConfigurationCtx = {\n  isDevModeActive: boolean;\n};\n\nconst meetsBaseRule = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  ctx.isDevModeActive ? isDeveloperOrReviewer(token) : isProductionManager(token);\n\nconst baseDenialReason = (ctx: ConfigurationCtx): string =>\n  ctx.isDevModeActive\n    ? 'dev branch requires developer or reviewer role'\n    : 'production requires productionManager role';\n\nexport const canCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => boolean = (\n  token,\n) => isAdmin(token);\n\nexport const canAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const assertCanCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCreateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'create-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canUpdateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'update-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCopyConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'copy-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canMigrateFromTemplate(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'migrate-from-template',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanPurgeConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canPurgeConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'purge-configuration',\n      reason: 'purge requires admin role',\n    });\n  }\n};\n\nexport const assertCanAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canAssignFolder(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'assign-folder',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n"],"mappings":";;AAoBA,MAAM,iBAAiB,OAAqB,QAC1C,IAAI,kBAAkB,sBAAsB,KAAK,IAAI,oBAAoB,KAAK;AAEhF,MAAM,oBAAoB,QACxB,IAAI,kBACA,mDACA;AAEN,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,wBAAwB,OAAqB,QACxD,cAAc,OAAO,GAAG;AAE1B,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,yBACX,UACG,QAAQ,KAAK;AAElB,MAAa,mBAAmB,OAAqB,QACnD,cAAc,OAAO,GAAG;AAE1B,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,8BAA8B,OAAqB,QAAgC;CAC9F,IAAI,CAAC,qBAAqB,OAAO,GAAG,GAClC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,+BAA+B,OAAqB,QAAgC;CAC/F,IAAI,CAAC,sBAAsB,OAAO,GAAG,GACnC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ;CACV,CAAC;AAEL;AAEA,MAAa,yBAAyB,OAAqB,QAAgC;CACzF,IAAI,CAAC,gBAAgB,OAAO,GAAG,GAC7B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL"}

package/dist/constants/index.cjs

@@ -1,6 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_constants = require("../constants-d0Do9NSN.cjs");
-const require_componentId = require("../componentId-olp0tltf.cjs");
+const require_serviceIds = require("../serviceIds-Bg1pWiPE.cjs");
+const require_componentId = require("../componentId-_tRhEv6W.cjs");
+const require_constants = require("../constants-Day8CU5i.cjs");
 const require_adminRoles = require("../adminRoles-DnFpO_2W.cjs");
 exports.AdminFeature = require_constants.AdminFeature;
 exports.AdminRole = require_adminRoles.AdminRole;
@@ -11,6 +12,6 @@ exports.ManageErrorCode = require_constants.ManageErrorCode;
 exports.ProjectFeature = require_constants.ProjectFeature;
 exports.Provider = require_constants.Provider;
 exports.STACKS = require_constants.STACKS;
-exports.ServiceId = require_constants.ServiceId;
+exports.ServiceId = require_serviceIds.ServiceId;
 exports.StackFeature = require_constants.StackFeature;
 exports.URLS = require_constants.URLS;

package/dist/constants/index.d.cts

@@ -1,5 +1,5 @@
 import { ai as ManageErrorCode } from "../index-FrsEkDvX.cjs";
-import { a as STACKS, c as ProjectFeature, i as Provider, l as ComponentId, n as Continent, o as AdminFeature, r as KeboolaStack, s as StackFeature, t as URLS, u as ServiceId } from "../index-B5rELADq.cjs";
+import { a as STACKS, c as ProjectFeature, i as Provider, l as ComponentId, n as Continent, o as AdminFeature, r as KeboolaStack, s as StackFeature, t as URLS, u as ServiceId } from "../index-Cd0naVic.cjs";
 import { t as AdminRole } from "../adminRoles-BTKVwEy8.cjs";
 import { t as Backend } from "../backends-BHotIdL0.cjs";
 export { AdminFeature, AdminRole, Backend, ComponentId, Continent, type KeboolaStack, ManageErrorCode, ProjectFeature, Provider, STACKS, ServiceId, StackFeature, URLS };

package/dist/constants/index.d.ts

@@ -1,5 +1,5 @@
 import { ai as ManageErrorCode } from "../index-FrsEkDvX.js";
-import { a as STACKS, c as ProjectFeature, i as Provider, l as ComponentId, n as Continent, o as AdminFeature, r as KeboolaStack, s as StackFeature, t as URLS, u as ServiceId } from "../index-Dhyrg5zd.js";
+import { a as STACKS, c as ProjectFeature, i as Provider, l as ComponentId, n as Continent, o as AdminFeature, r as KeboolaStack, s as StackFeature, t as URLS, u as ServiceId } from "../index-DbStyQKc.js";
 import { t as AdminRole } from "../adminRoles-Cm513r1G.js";
 import { t as Backend } from "../backends-BHotIdL0.js";
 export { AdminFeature, AdminRole, Backend, ComponentId, Continent, type KeboolaStack, ManageErrorCode, ProjectFeature, Provider, STACKS, ServiceId, StackFeature, URLS };

package/dist/constants/index.js

@@ -1,4 +1,5 @@
-import { a as Backend, c as ProjectFeature, i as STACKS, l as ManageErrorCode, n as Continent, o as AdminFeature, r as Provider, s as StackFeature, t as URLS, u as ServiceId } from "../constants-Dqi0ewGv.js";
-import { t as ComponentId } from "../componentId-DZP1rBix.js";
+import { t as ServiceId } from "../serviceIds-RAVtP4nK.js";
+import { t as ComponentId } from "../componentId-Cps6WBy1.js";
+import { a as Backend, c as ProjectFeature, i as STACKS, l as ManageErrorCode, n as Continent, o as AdminFeature, r as Provider, s as StackFeature, t as URLS } from "../constants-DLPkpnGv.js";
 import { t as AdminRole } from "../adminRoles-asa-MhDD.js";
 export { AdminFeature, AdminRole, Backend, ComponentId, Continent, ManageErrorCode, ProjectFeature, Provider, STACKS, ServiceId, StackFeature, URLS };

package/dist/{constants-Dqi0ewGv.js → constants-DLPkpnGv.js}

@@ -1,32 +1,3 @@
-// src/constants/serviceIds.ts
-/**
-* Every service a Keboola stack can announce in its `GET /v2/storage` index.
-*
-* - The values are the `id`s the stack reports; the service-client registry and `createStack`'s
-*   lookups narrow on them. The index itself stays `string` — a stack may announce more.
-* - Callers enumerate them at runtime — a test double announcing every service, for one.
-*/
-const ServiceId = {
-	Vault: "vault",
-	DataScience: "data-science",
-	Encryption: "encryption",
-	Telemetry: "telemetry",
-	Ai: "ai",
-	Editor: "editor",
-	Import: "import",
-	Oauth: "oauth",
-	Query: "query",
-	Queue: "queue",
-	KaiAssistant: "kai-assistant",
-	KaiAgent: "kai-agent",
-	ComponentsMcp: "components-mcp",
-	SyncActions: "sync-actions",
-	Stream: "stream",
-	Notification: "notification",
-	Scheduler: "scheduler",
-	Metastore: "metastore",
-	Billing: "billing"
-};
 // src/constants/manageErrorCodes.ts
 const ManageErrorCode = {
 	ProgrammaticProjectInvalidClaim: "manage.programmaticProjects.invalidClaim",
@@ -77,7 +48,8 @@ const ProjectFeature = {
 	AllowSharedSnowflakeAccess: "allow-shared-snowflake-access",
 	BigqueryDefaultImView: "bigquery-default-im-view",
 	BigqueryPolicyTags: "bigquery-policy-tags",
-	DataAppsDisabled: "data-apps-disabled"
+	DataAppsDisabled: "data-apps-disabled",
+	RowLevelSecurity: "row-level-security"
 };
 // src/constants/stackFeatures.ts
 const StackFeature = {
@@ -295,6 +267,6 @@ const URLS = {
 	CLIENT_MAKE_GET_STARTED: "https://help.make.com/get-started",
 	CLIENT_DEVIN_DESKTOP: "https://docs.devin.ai/desktop/getting-started"
 };
-export { Backend as a, ProjectFeature as c, STACKS as i, ManageErrorCode as l, Continent as n, AdminFeature as o, Provider as r, StackFeature as s, URLS as t, ServiceId as u };
+export { Backend as a, ProjectFeature as c, STACKS as i, ManageErrorCode as l, Continent as n, AdminFeature as o, Provider as r, StackFeature as s, URLS as t };
 
-//# sourceMappingURL=constants-Dqi0ewGv.js.map
+//# sourceMappingURL=constants-DLPkpnGv.js.map