@keboola/api-client 53.0.0 → 54.0.0

package/API-SURFACE.md

@@ -4,7 +4,7 @@
 
 Every namespace and method reachable from a ready `ProjectApi` — one project's api (`createKeboola(...).getProjectApi(id)` / `createLegacyKeboola(...).api`, or `useProjectApi()`). Generated from the TypeScript type checker — see `scripts/gen-surface.mjs`.
 
-26 top-level namespaces, 704 methods. This index lists method **names** only — full signatures live per namespace under [`surface/`](./surface). Open `surface/<namespace>.md` for the one you need.
+26 top-level namespaces, 705 methods. This index lists method **names** only — full signatures live per namespace under [`surface/`](./surface). Open `surface/<namespace>.md` for the one you need.
 
 ## [`api.ai`](./surface/ai.md)
 
@@ -332,6 +332,7 @@ Every namespace and method reachable from a ready `ProjectApi` — one project's
 - `projects.setProjectMetadata`
 - `projects.setProjectReviewers`
 - `projects.updateProject`
+- `search.find`
 - `snowflakePartnerConnect.check`
 - `snowflakePartnerConnect.unlock`
 - `storageBackends.activateStorageBackend`

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # @keboola/api-client
 
+## 54.0.0
+
+### Major Changes
+
+- `ComponentId.EX_GENERIC_V2_DETAIL` is gone: it named a kbc-ui route, not a component.
+
+### Minor Changes
+
+- `@keboola/api-client/sdk/securityPolicy` reads one policy and its history: `getPolicy(type, uuid)` returns a policy by UUID, and `listRevisions(type, uuid)` returns its revisions, newest first.
+
+- `@keboola/api-client/sdk/securityPolicy` lists, upserts and deletes row- and column-level security policies (`rls-policy`, `cls-policy`, schema 1.2.0) in the metastore, with write validators for both. An upsert finds the policy by the table it governs among the policies the project owns on `main`, and refuses with `SecurityPolicyAmbiguousError` when there are several, `SecurityPolicyUnreadableError` when a policy of the type cannot be read, `SecurityPolicyLegacyError` when the policy to replace was created under an older schema, or `SecurityPolicyNotFoundError` when a `uuid` names none of them; a delete of a policy that is still referenced throws `SecurityPolicyInUseError`. `canWriteSecurityPolicies(token)` in `domain/permissions` tells whether a token may author them.
+
+- Add `management.search.find()` for `GET /manage/search`, which searches projects, organizations, maintainers and users by name, email or exact id, with the `SearchQuery`, `SearchResult` and per-type search item types.
+
+- `createOrganizationCredentialsClient` (`@keboola/api-client/oauth`) lists and disconnects a Keboola organization's GitHub connections with the caller's Manage API token, and describes the form that starts connecting one. The management client's `getManageToken` returns the Manage API token it currently sends. The oauth schema is regenerated from oauth-service.
+
+- `@keboola/api-client/sdk/queryService` exports `cellParser`, which types a Query Service result cell by its column type, in Node and the browser.
+  - `cellParser(type)(cell)` returns a number, boolean, ISO date or timestamp, or the cell string.
+  - A Snowflake `datetime` reads like `timestamp_ntz`: ISO without `Z`.
+  - `sdk/dataAppServer` `runQuery` types its rows with it.
+
+- `StorageBackend` gains an optional `folderId`: the GCP folder id of a BigQuery backend, `null` when it has none
+
 ## 53.0.0
 
 ### Minor Changes

package/dist/{admin-Di-MmGFP.cjs → admin-BZ7knTd0.cjs}

@@ -58,6 +58,8 @@ const assertCanWriteKaiSettings = (token) => {
 		reason: token.isMasterToken ? `role '${token.admin?.role ?? "none"}' may not write Kai settings` : "a limited (non-master) token may not write Kai settings"
 	});
 };
+/** The roles the metastore maps to `project-admin`; an absent `admin` block never matches. */
+const hasMetastoreProjectAdminRole = (token) => token.admin?.role === require_adminRoles.AdminRole.Admin || token.admin?.role === require_adminRoles.AdminRole.ProductionManager || token.admin?.role === require_adminRoles.AdminRole.Share;
 /**
 * Whether this token may write the project's semantic layer in the metastore.
 *
@@ -66,7 +68,15 @@ const assertCanWriteKaiSettings = (token) => {
 * - Every other role, and a limited token (no `admin` block), gets a 403.
 * - Organization-scope promotion is left to the metastore's 403.
 */
-const canWriteSemanticLayer = (token) => token.admin?.role === require_adminRoles.AdminRole.Admin || token.admin?.role === require_adminRoles.AdminRole.ProductionManager || token.admin?.role === require_adminRoles.AdminRole.Share;
+const canWriteSemanticLayer = (token) => hasMetastoreProjectAdminRole(token);
+/**
+* Whether this token may author row- and column-level security policies in the metastore.
+*
+* - Reads `token.admin.role` as the metastore does: `admin`, `productionManager` or `share`.
+* - A limited token has no `admin` block, so it never matches.
+* - `targeted` scope only: `organization` scope and grants are organization-admin, a metastore 403.
+*/
+const canWriteSecurityPolicies = (token) => hasMetastoreProjectAdminRole(token);
 const assertCanAdmin = (token) => {
 	if (!isAdmin(token)) throw new PermissionDeniedError({
 		action: "admin",
@@ -133,6 +143,12 @@ Object.defineProperty(exports, "canWriteKaiSettings", {
 		return canWriteKaiSettings;
 	}
 });
+Object.defineProperty(exports, "canWriteSecurityPolicies", {
+	enumerable: true,
+	get: function() {
+		return canWriteSecurityPolicies;
+	}
+});
 Object.defineProperty(exports, "canWriteSemanticLayer", {
 	enumerable: true,
 	get: function() {
@@ -182,4 +198,4 @@ Object.defineProperty(exports, "isReadOnlyRole", {
 	}
 });
 
-//# sourceMappingURL=admin-Di-MmGFP.cjs.map
+//# sourceMappingURL=admin-BZ7knTd0.cjs.map

package/dist/admin-BZ7knTd0.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-BZ7knTd0.cjs","names":["AdminRole"],"sources":["../src/domain/permissions/errors.ts","../src/domain/permissions/admin.ts"],"sourcesContent":["/**\n * @module domain/permissions/errors\n *\n * - What every `assertCan*` throws; its public fields are SDK contract — renames break consumers.\n * - `subject` is a debugging hint only — never a `StorageToken`, raw token or secret.\n */\nexport class PermissionDeniedError extends Error {\n  public readonly action: string;\n  public readonly reason?: string;\n  public readonly subject?: string;\n\n  constructor({ action, reason, subject }: { action: string; reason?: string; subject?: string }) {\n    super(reason ? `Permission denied: ${action} (${reason})` : `Permission denied: ${action}`);\n    this.name = 'PermissionDeniedError';\n    this.action = action;\n    this.reason = reason;\n    this.subject = subject;\n  }\n}\n","/**\n * @module domain/permissions/admin\n *\n * Admin-role predicates read from `token.admin.role` alone.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\nimport { AdminRole } from '../../constants/adminRoles';\n\nimport { PermissionDeniedError } from './errors';\n\nconst role = (token: StorageToken): AdminRole | null => token.admin.role;\n\nexport const isAdmin = (token: StorageToken): boolean => role(token) === AdminRole.Admin;\n\nexport const isAdminOrShare = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Admin || role(token) === AdminRole.Share;\n\nexport const isProductionManager = (token: StorageToken): boolean =>\n  role(token) === AdminRole.ProductionManager;\n\nexport const isDeveloperOrReviewer = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Developer || role(token) === AdminRole.Reviewer;\n\nexport const isReadOnlyRole = (token: StorageToken): boolean => role(token) === AdminRole.ReadOnly;\n\n/**\n * Whether a role string is a member of `AdminRole` at all.\n *\n * - Failing it means *unrecognized*, not denied — log it loudly.\n */\nexport const isKnownAdminRole = (adminRole: string | null | undefined): boolean =>\n  (Object.values(AdminRole) as string[]).includes(adminRole ?? '');\n\n/**\n * Whether an admin role may write Kai's project-wide settings.\n *\n * - `admin` and `share` only: a shared prompt-injection surface is project administration.\n * - `developer`/`reviewer` are denied: `agent_settings` is keyed by `project_id` alone, so a dev-branch edit hits production.\n * - An allowlist, so new upstream `AdminRole` members are denied by default.\n * - Spend caps use `./organization#canWriteKaiSpendCaps`; don't widen this for them.\n */\nexport const isKaiSettingsWriterRole = (adminRole: string | null | undefined): boolean => {\n  switch (adminRole) {\n    case AdminRole.Admin:\n    case AdminRole.Share:\n      return true;\n    default:\n      return false;\n  }\n};\n\n/**\n * Whether this token may write Kai's project-wide settings.\n *\n * - A limited (non-master) token never may; its `admin` block is absent despite the type.\n */\nexport const canWriteKaiSettings = (token: StorageToken): boolean =>\n  token.isMasterToken && isKaiSettingsWriterRole(token.admin?.role);\n\nexport const assertCanWriteKaiSettings = (token: StorageToken): void => {\n  if (!canWriteKaiSettings(token)) {\n    throw new PermissionDeniedError({\n      action: 'write-kai-settings',\n      reason: token.isMasterToken\n        ? `role '${token.admin?.role ?? 'none'}' may not write Kai settings`\n        : 'a limited (non-master) token may not write Kai settings',\n    });\n  }\n};\n\n/** The roles the metastore maps to `project-admin`; an absent `admin` block never matches. */\nconst hasMetastoreProjectAdminRole = (token: StorageToken): boolean =>\n  token.admin?.role === AdminRole.Admin ||\n  token.admin?.role === AdminRole.ProductionManager ||\n  token.admin?.role === AdminRole.Share;\n\n/**\n * Whether this token may write the project's semantic layer in the metastore.\n *\n * - Mirrors the metastore's role mapping (go-monorepo `services/metastore/internal/authz`):\n *   only a master token with the `admin`, `productionManager` or `share` role gets `project-admin`.\n * - Every other role, and a limited token (no `admin` block), gets a 403.\n * - Organization-scope promotion is left to the metastore's 403.\n */\nexport const canWriteSemanticLayer = (token: StorageToken): boolean =>\n  hasMetastoreProjectAdminRole(token);\n\n/**\n * Whether this token may author row- and column-level security policies in the metastore.\n *\n * - Reads `token.admin.role` as the metastore does: `admin`, `productionManager` or `share`.\n * - A limited token has no `admin` block, so it never matches.\n * - `targeted` scope only: `organization` scope and grants are organization-admin, a metastore 403.\n */\nexport const canWriteSecurityPolicies = (token: StorageToken): boolean =>\n  hasMetastoreProjectAdminRole(token);\n\nexport const assertCanAdmin = (token: StorageToken): void => {\n  if (!isAdmin(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin',\n      reason: `role '${role(token)}' is not admin`,\n    });\n  }\n};\n\nexport const assertCanAdminOrShare = (token: StorageToken): void => {\n  if (!isAdminOrShare(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin-or-share',\n      reason: `role '${role(token)}' is not admin or share`,\n    });\n  }\n};\n\nexport const assertCanProductionManage = (token: StorageToken): void => {\n  if (!isProductionManager(token)) {\n    throw new PermissionDeniedError({\n      action: 'production-manage',\n      reason: `role '${role(token)}' is not productionManager`,\n    });\n  }\n};\n\nexport const assertCanDevelopOrReview = (token: StorageToken): void => {\n  if (!isDeveloperOrReviewer(token)) {\n    throw new PermissionDeniedError({\n      action: 'develop-or-review',\n      reason: `role '${role(token)}' is not developer or reviewer`,\n    });\n  }\n};\n"],"mappings":";;;;;;;;AAMA,IAAa,wBAAb,cAA2C,MAAM;CAC/C;CACA;CACA;CAEA,YAAY,EAAE,QAAQ,QAAQ,WAAkE;EAC9F,MAAM,SAAS,sBAAsB,OAAO,IAAI,OAAO,KAAK,sBAAsB,QAAQ;EAC1F,KAAK,OAAO;EACZ,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,UAAU;CACjB;AACF;;ACRA,MAAM,QAAQ,UAA0C,MAAM,MAAM;AAEpE,MAAa,WAAW,UAAiC,KAAK,KAAK,MAAMA,mBAAAA,UAAU;AAEnF,MAAa,kBAAkB,UAC7B,KAAK,KAAK,MAAMA,mBAAAA,UAAU,SAAS,KAAK,KAAK,MAAMA,mBAAAA,UAAU;AAE/D,MAAa,uBAAuB,UAClC,KAAK,KAAK,MAAMA,mBAAAA,UAAU;AAE5B,MAAa,yBAAyB,UACpC,KAAK,KAAK,MAAMA,mBAAAA,UAAU,aAAa,KAAK,KAAK,MAAMA,mBAAAA,UAAU;AAEnE,MAAa,kBAAkB,UAAiC,KAAK,KAAK,MAAMA,mBAAAA,UAAU;;;;;;AAO1F,MAAa,oBAAoB,cAC9B,OAAO,OAAOA,mBAAAA,SAAS,CAAC,CAAc,SAAS,aAAa,EAAE;;;;;;;;;AAUjE,MAAa,2BAA2B,cAAkD;CACxF,QAAQ,WAAR;EACE,KAAKA,mBAAAA,UAAU;EACf,KAAKA,mBAAAA,UAAU,OACb,OAAO;EACT,SACE,OAAO;CACX;AACF;;;;;;AAOA,MAAa,uBAAuB,UAClC,MAAM,iBAAiB,wBAAwB,MAAM,OAAO,IAAI;AAElE,MAAa,6BAA6B,UAA8B;CACtE,IAAI,CAAC,oBAAoB,KAAK,GAC5B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,MAAM,gBACV,SAAS,MAAM,OAAO,QAAQ,OAAO,gCACrC;CACN,CAAC;AAEL;;AAGA,MAAM,gCAAgC,UACpC,MAAM,OAAO,SAASA,mBAAAA,UAAU,SAChC,MAAM,OAAO,SAASA,mBAAAA,UAAU,qBAChC,MAAM,OAAO,SAASA,mBAAAA,UAAU;;;;;;;;;AAUlC,MAAa,yBAAyB,UACpC,6BAA6B,KAAK;;;;;;;;AASpC,MAAa,4BAA4B,UACvC,6BAA6B,KAAK;AAEpC,MAAa,kBAAkB,UAA8B;CAC3D,IAAI,CAAC,QAAQ,KAAK,GAChB,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,SAAS,KAAK,KAAK,EAAE;CAC/B,CAAC;AAEL;AAEA,MAAa,yBAAyB,UAA8B;CAClE,IAAI,CAAC,eAAe,KAAK,GACvB,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,SAAS,KAAK,KAAK,EAAE;CAC/B,CAAC;AAEL;AAEA,MAAa,6BAA6B,UAA8B;CACtE,IAAI,CAAC,oBAAoB,KAAK,GAC5B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,SAAS,KAAK,KAAK,EAAE;CAC/B,CAAC;AAEL;AAEA,MAAa,4BAA4B,UAA8B;CACrE,IAAI,CAAC,sBAAsB,KAAK,GAC9B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,SAAS,KAAK,KAAK,EAAE;CAC/B,CAAC;AAEL"}

package/dist/{admin-CbMOsfgs.js → admin-xFfHSZHQ.js}

@@ -58,6 +58,8 @@ const assertCanWriteKaiSettings = (token) => {
 		reason: token.isMasterToken ? `role '${token.admin?.role ?? "none"}' may not write Kai settings` : "a limited (non-master) token may not write Kai settings"
 	});
 };
+/** The roles the metastore maps to `project-admin`; an absent `admin` block never matches. */
+const hasMetastoreProjectAdminRole = (token) => token.admin?.role === AdminRole.Admin || token.admin?.role === AdminRole.ProductionManager || token.admin?.role === AdminRole.Share;
 /**
 * Whether this token may write the project's semantic layer in the metastore.
 *
@@ -66,7 +68,15 @@ const assertCanWriteKaiSettings = (token) => {
 * - Every other role, and a limited token (no `admin` block), gets a 403.
 * - Organization-scope promotion is left to the metastore's 403.
 */
-const canWriteSemanticLayer = (token) => token.admin?.role === AdminRole.Admin || token.admin?.role === AdminRole.ProductionManager || token.admin?.role === AdminRole.Share;
+const canWriteSemanticLayer = (token) => hasMetastoreProjectAdminRole(token);
+/**
+* Whether this token may author row- and column-level security policies in the metastore.
+*
+* - Reads `token.admin.role` as the metastore does: `admin`, `productionManager` or `share`.
+* - A limited token has no `admin` block, so it never matches.
+* - `targeted` scope only: `organization` scope and grants are organization-admin, a metastore 403.
+*/
+const canWriteSecurityPolicies = (token) => hasMetastoreProjectAdminRole(token);
 const assertCanAdmin = (token) => {
 	if (!isAdmin(token)) throw new PermissionDeniedError({
 		action: "admin",
@@ -91,6 +101,6 @@ const assertCanDevelopOrReview = (token) => {
 		reason: `role '${role(token)}' is not developer or reviewer`
 	});
 };
-export { assertCanWriteKaiSettings as a, isAdmin as c, isKaiSettingsWriterRole as d, isKnownAdminRole as f, PermissionDeniedError as h, assertCanProductionManage as i, isAdminOrShare as l, isReadOnlyRole as m, assertCanAdminOrShare as n, canWriteKaiSettings as o, isProductionManager as p, assertCanDevelopOrReview as r, canWriteSemanticLayer as s, assertCanAdmin as t, isDeveloperOrReviewer as u };
+export { assertCanWriteKaiSettings as a, canWriteSemanticLayer as c, isDeveloperOrReviewer as d, isKaiSettingsWriterRole as f, PermissionDeniedError as g, isReadOnlyRole as h, assertCanProductionManage as i, isAdmin as l, isProductionManager as m, assertCanAdminOrShare as n, canWriteKaiSettings as o, isKnownAdminRole as p, assertCanDevelopOrReview as r, canWriteSecurityPolicies as s, assertCanAdmin as t, isAdminOrShare as u };
 
-//# sourceMappingURL=admin-CbMOsfgs.js.map
+//# sourceMappingURL=admin-xFfHSZHQ.js.map

package/dist/admin-xFfHSZHQ.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-xFfHSZHQ.js","names":[],"sources":["../src/domain/permissions/errors.ts","../src/domain/permissions/admin.ts"],"sourcesContent":["/**\n * @module domain/permissions/errors\n *\n * - What every `assertCan*` throws; its public fields are SDK contract — renames break consumers.\n * - `subject` is a debugging hint only — never a `StorageToken`, raw token or secret.\n */\nexport class PermissionDeniedError extends Error {\n  public readonly action: string;\n  public readonly reason?: string;\n  public readonly subject?: string;\n\n  constructor({ action, reason, subject }: { action: string; reason?: string; subject?: string }) {\n    super(reason ? `Permission denied: ${action} (${reason})` : `Permission denied: ${action}`);\n    this.name = 'PermissionDeniedError';\n    this.action = action;\n    this.reason = reason;\n    this.subject = subject;\n  }\n}\n","/**\n * @module domain/permissions/admin\n *\n * Admin-role predicates read from `token.admin.role` alone.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\nimport { AdminRole } from '../../constants/adminRoles';\n\nimport { PermissionDeniedError } from './errors';\n\nconst role = (token: StorageToken): AdminRole | null => token.admin.role;\n\nexport const isAdmin = (token: StorageToken): boolean => role(token) === AdminRole.Admin;\n\nexport const isAdminOrShare = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Admin || role(token) === AdminRole.Share;\n\nexport const isProductionManager = (token: StorageToken): boolean =>\n  role(token) === AdminRole.ProductionManager;\n\nexport const isDeveloperOrReviewer = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Developer || role(token) === AdminRole.Reviewer;\n\nexport const isReadOnlyRole = (token: StorageToken): boolean => role(token) === AdminRole.ReadOnly;\n\n/**\n * Whether a role string is a member of `AdminRole` at all.\n *\n * - Failing it means *unrecognized*, not denied — log it loudly.\n */\nexport const isKnownAdminRole = (adminRole: string | null | undefined): boolean =>\n  (Object.values(AdminRole) as string[]).includes(adminRole ?? '');\n\n/**\n * Whether an admin role may write Kai's project-wide settings.\n *\n * - `admin` and `share` only: a shared prompt-injection surface is project administration.\n * - `developer`/`reviewer` are denied: `agent_settings` is keyed by `project_id` alone, so a dev-branch edit hits production.\n * - An allowlist, so new upstream `AdminRole` members are denied by default.\n * - Spend caps use `./organization#canWriteKaiSpendCaps`; don't widen this for them.\n */\nexport const isKaiSettingsWriterRole = (adminRole: string | null | undefined): boolean => {\n  switch (adminRole) {\n    case AdminRole.Admin:\n    case AdminRole.Share:\n      return true;\n    default:\n      return false;\n  }\n};\n\n/**\n * Whether this token may write Kai's project-wide settings.\n *\n * - A limited (non-master) token never may; its `admin` block is absent despite the type.\n */\nexport const canWriteKaiSettings = (token: StorageToken): boolean =>\n  token.isMasterToken && isKaiSettingsWriterRole(token.admin?.role);\n\nexport const assertCanWriteKaiSettings = (token: StorageToken): void => {\n  if (!canWriteKaiSettings(token)) {\n    throw new PermissionDeniedError({\n      action: 'write-kai-settings',\n      reason: token.isMasterToken\n        ? `role '${token.admin?.role ?? 'none'}' may not write Kai settings`\n        : 'a limited (non-master) token may not write Kai settings',\n    });\n  }\n};\n\n/** The roles the metastore maps to `project-admin`; an absent `admin` block never matches. */\nconst hasMetastoreProjectAdminRole = (token: StorageToken): boolean =>\n  token.admin?.role === AdminRole.Admin ||\n  token.admin?.role === AdminRole.ProductionManager ||\n  token.admin?.role === AdminRole.Share;\n\n/**\n * Whether this token may write the project's semantic layer in the metastore.\n *\n * - Mirrors the metastore's role mapping (go-monorepo `services/metastore/internal/authz`):\n *   only a master token with the `admin`, `productionManager` or `share` role gets `project-admin`.\n * - Every other role, and a limited token (no `admin` block), gets a 403.\n * - Organization-scope promotion is left to the metastore's 403.\n */\nexport const canWriteSemanticLayer = (token: StorageToken): boolean =>\n  hasMetastoreProjectAdminRole(token);\n\n/**\n * Whether this token may author row- and column-level security policies in the metastore.\n *\n * - Reads `token.admin.role` as the metastore does: `admin`, `productionManager` or `share`.\n * - A limited token has no `admin` block, so it never matches.\n * - `targeted` scope only: `organization` scope and grants are organization-admin, a metastore 403.\n */\nexport const canWriteSecurityPolicies = (token: StorageToken): boolean =>\n  hasMetastoreProjectAdminRole(token);\n\nexport const assertCanAdmin = (token: StorageToken): void => {\n  if (!isAdmin(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin',\n      reason: `role '${role(token)}' is not admin`,\n    });\n  }\n};\n\nexport const assertCanAdminOrShare = (token: StorageToken): void => {\n  if (!isAdminOrShare(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin-or-share',\n      reason: `role '${role(token)}' is not admin or share`,\n    });\n  }\n};\n\nexport const assertCanProductionManage = (token: StorageToken): void => {\n  if (!isProductionManager(token)) {\n    throw new PermissionDeniedError({\n      action: 'production-manage',\n      reason: `role '${role(token)}' is not productionManager`,\n    });\n  }\n};\n\nexport const assertCanDevelopOrReview = (token: StorageToken): void => {\n  if (!isDeveloperOrReviewer(token)) {\n    throw new PermissionDeniedError({\n      action: 'develop-or-review',\n      reason: `role '${role(token)}' is not developer or reviewer`,\n    });\n  }\n};\n"],"mappings":";;;;;;;;AAMA,IAAa,wBAAb,cAA2C,MAAM;CAC/C;CACA;CACA;CAEA,YAAY,EAAE,QAAQ,QAAQ,WAAkE;EAC9F,MAAM,SAAS,sBAAsB,OAAO,IAAI,OAAO,KAAK,sBAAsB,QAAQ;EAC1F,KAAK,OAAO;EACZ,KAAK,SAAS;EACd,KAAK,SAAS;EACd,KAAK,UAAU;CACjB;AACF;;ACRA,MAAM,QAAQ,UAA0C,MAAM,MAAM;AAEpE,MAAa,WAAW,UAAiC,KAAK,KAAK,MAAM,UAAU;AAEnF,MAAa,kBAAkB,UAC7B,KAAK,KAAK,MAAM,UAAU,SAAS,KAAK,KAAK,MAAM,UAAU;AAE/D,MAAa,uBAAuB,UAClC,KAAK,KAAK,MAAM,UAAU;AAE5B,MAAa,yBAAyB,UACpC,KAAK,KAAK,MAAM,UAAU,aAAa,KAAK,KAAK,MAAM,UAAU;AAEnE,MAAa,kBAAkB,UAAiC,KAAK,KAAK,MAAM,UAAU;;;;;;AAO1F,MAAa,oBAAoB,cAC9B,OAAO,OAAO,SAAS,CAAC,CAAc,SAAS,aAAa,EAAE;;;;;;;;;AAUjE,MAAa,2BAA2B,cAAkD;CACxF,QAAQ,WAAR;EACE,KAAK,UAAU;EACf,KAAK,UAAU,OACb,OAAO;EACT,SACE,OAAO;CACX;AACF;;;;;;AAOA,MAAa,uBAAuB,UAClC,MAAM,iBAAiB,wBAAwB,MAAM,OAAO,IAAI;AAElE,MAAa,6BAA6B,UAA8B;CACtE,IAAI,CAAC,oBAAoB,KAAK,GAC5B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,MAAM,gBACV,SAAS,MAAM,OAAO,QAAQ,OAAO,gCACrC;CACN,CAAC;AAEL;;AAGA,MAAM,gCAAgC,UACpC,MAAM,OAAO,SAAS,UAAU,SAChC,MAAM,OAAO,SAAS,UAAU,qBAChC,MAAM,OAAO,SAAS,UAAU;;;;;;;;;AAUlC,MAAa,yBAAyB,UACpC,6BAA6B,KAAK;;;;;;;;AASpC,MAAa,4BAA4B,UACvC,6BAA6B,KAAK;AAEpC,MAAa,kBAAkB,UAA8B;CAC3D,IAAI,CAAC,QAAQ,KAAK,GAChB,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,SAAS,KAAK,KAAK,EAAE;CAC/B,CAAC;AAEL;AAEA,MAAa,yBAAyB,UAA8B;CAClE,IAAI,CAAC,eAAe,KAAK,GACvB,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,SAAS,KAAK,KAAK,EAAE;CAC/B,CAAC;AAEL;AAEA,MAAa,6BAA6B,UAA8B;CACtE,IAAI,CAAC,oBAAoB,KAAK,GAC5B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,SAAS,KAAK,KAAK,EAAE;CAC/B,CAAC;AAEL;AAEA,MAAa,4BAA4B,UAA8B;CACrE,IAAI,CAAC,sBAAsB,KAAK,GAC9B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,SAAS,KAAK,KAAK,EAAE;CAC/B,CAAC;AAEL"}

package/dist/{componentId-DZP1rBix.js → componentId-Cps6WBy1.js}

@@ -122,7 +122,6 @@ const ComponentId = {
 	EX_MONGODB: "keboola.ex-mongodb",
 	EX_SNOWFLAKE_QUERY_HISTORY: "keboola.ex-snowflake-query-history",
 	EX_SNOWFLAKE_PARAMETERS: "keboola.ex-snowflake-parameters",
-	EX_GENERIC_V2_DETAIL: "ex-generic-v2-detail",
 	APAC_EX_GMAIL_ATTACHMENTS: "apac.ex-gmail-attachments",
 	GENEEA_NLP_ANALYSIS_V2: "geneea.nlp-analysis-v2",
 	KDS_APP_CUSTOM_PYTHON: "kds-team.app-custom-python",
@@ -136,4 +135,4 @@ const ComponentId = {
 };
 export { ComponentId as t };
 
-//# sourceMappingURL=componentId-DZP1rBix.js.map
+//# sourceMappingURL=componentId-Cps6WBy1.js.map

package/dist/{componentId-DZP1rBix.js.map → componentId-Cps6WBy1.js.map}

@@ -1 +1 @@
-{"version":3,"file":"componentId-DZP1rBix.js","names":[],"sources":["../src/constants/componentId.ts"],"sourcesContent":["export const ComponentId = {\n  WR_DB_MYSQL: 'keboola.wr-db-mysql',\n  WR_DB_PGSQL: 'keboola.wr-db-pgsql',\n  WR_DB_ORACLE: 'keboola.wr-db-oracle',\n  WR_DB_SNOWFLAKE: 'keboola.wr-db-snowflake',\n  WR_DB_SNOWFLAKE_GCS: 'keboola.wr-db-snowflake-gcs',\n  WR_DB_SNOWFLAKE_GCS_S3: 'keboola.wr-db-snowflake-gcs-s3',\n  WR_SNOWFLAKE_BLOB_STORAGE: 'keboola.wr-snowflake-blob-storage',\n  WR_LOOKER_V2: 'keboola.wr-looker-v2',\n  APP_DATA_GATEWAY: 'keboola.app-data-gateway',\n  WR_SYNAPSE: 'keboola.wr-synapse',\n  WR_REDSHIFT: 'keboola.wr-redshift-v2',\n  WR_DB_MSSQL: 'keboola.wr-db-mssql-v2',\n  WR_DB_HIVE: 'keboola.wr-db-hive',\n  WR_DB_IMPALA: 'keboola.wr-db-impala',\n  WR_PAIRITY: 'kds-team.wr-pairity',\n  WR_EXASOL: 'kds-team.wr-exasol',\n  WR_FIREBOLT: 'kds-team.wr-firebolt',\n  WR_HIVE_CSAS: 'kds-team.wr-hive-csas',\n  WR_THOUGHTSPOT: 'keboola.wr-thoughtspot',\n  WR_SISENSE: 'keboola.wr-sisense',\n  WR_AWS_S3: 'keboola.wr-aws-s3',\n  WR_STORAGE: 'keboola.wr-storage',\n  WR_GOOGLE_BIGQUERY_V2: 'keboola.wr-google-bigquery-v2',\n  SCHEDULER: 'keboola.scheduler',\n\n  // App-specific writers (bespoke credential blocks)\n  APP_SNOWFLAKE_DWH_MANAGER: 'keboola.app-snowflake-dwh-manager',\n  GOODDATA_WRITER: 'keboola.gooddata-writer',\n\n  // DB extractors (ex-db-generic family)\n  EX_DB_MYSQL: 'keboola.ex-db-mysql',\n  EX_DB_PGSQL: 'keboola.ex-db-pgsql',\n  EX_DB_REDSHIFT: 'keboola.ex-db-redshift',\n  EX_DB_FIREBIRD: 'keboola.ex-db-firebird',\n  EX_DB_DB2: 'keboola.ex-db-db2',\n  EX_DB_DB2_BATA: 'keboola.ex-db-db2-bata',\n  EX_DB_MSSQL: 'keboola.ex-db-mssql',\n  EX_DB_MSSQL_CDATA: 'keboola.ex-db-mssql-cdata',\n  EX_DB_ORACLE: 'keboola.ex-db-oracle',\n  EX_DB_SNOWFLAKE: 'keboola.ex-db-snowflake',\n  EX_DB_NETSUITE: 'keboola.ex-db-netsuite',\n  EX_DB_INFORMIX: 'keboola.ex-db-informix',\n  EX_DB_IMPALA: 'keboola.ex-db-impala',\n  EX_DB_HIVE: 'keboola.ex-db-hive',\n  EX_DB_HIVE_CSAS: 'keboola.ex-db-hive-csas',\n  EX_DB_HIVE_CSAS_TEST: 'keboola.ex-db-hive-csas-test',\n  EX_TERADATA: 'keboola.ex-teradata',\n  KDS_EX_NETSUITE: 'kds-team.ex-netsuite',\n  KDS_EX_PROGRESS_DB: 'kds-team.ex-progress-db',\n\n  // Google (OAuth) components\n  EX_GOOGLE_ADS: 'keboola.ex-google-ads',\n  EX_GOOGLE_ANALYTICS_V4: 'keboola.ex-google-analytics-v4',\n  WR_GOOGLE_DRIVE: 'keboola.wr-google-drive',\n  WR_GOOGLE_SHEETS: 'keboola.wr-google-sheets',\n\n  // Meta (OAuth) components\n  EX_FACEBOOK: 'keboola.ex-facebook',\n  EX_FACEBOOK_ADS: 'keboola.ex-facebook-ads',\n  EX_FACEBOOK_ADS_V2: 'keboola.ex-facebook-ads-v2',\n  EX_FACEBOOK_PAGES: 'keboola.ex-facebook-pages',\n  EX_INSTAGRAM: 'keboola.ex-instagram',\n  EX_INSTAGRAM_V2: 'keboola.ex-instagram-v2',\n\n  // Microsoft OneDrive (OAuth) components\n  EX_ONEDRIVE: 'keboola.ex-onedrive',\n  WR_ONEDRIVE: 'keboola.wr-onedrive',\n\n  // File/connection extractors (ex family, no shared credential base)\n  EX_HTTP: 'keboola.ex-http',\n  EX_FTP: 'keboola.ex-ftp',\n  EX_FTP_CSAS: 'keboola.ex-ftp-csas',\n  EX_EMAIL_ATTACHMENTS: 'keboola.ex-email-attachments',\n  EX_AWS_S3: 'keboola.ex-aws-s3',\n  KDS_EX_AZURE_BLOB_STORAGE_V2: 'kds-team.ex-azure-blob-storage-v2',\n  KDS_EX_AZURE_DATA_LAKE_GEN2: 'kds-team.ex-azure-data-lake-gen2',\n  APIFY: 'apify.apify',\n  EX_GENERIC_V2: 'ex-generic-v2',\n  EX_GOOGLE_BIGQUERY_V2: 'keboola.ex-google-bigquery-v2',\n  EX_STORAGE: 'keboola.ex-storage',\n\n  // Data-app family — a git repository lives under `parameters.dataApp.git`\n  DATA_APPS: 'keboola.data-apps',\n  SANDBOXES: 'keboola.sandboxes',\n\n  // dbt transformations — a git repository lives under `parameters.git`\n  DBT_TEST_CORE_KEY_PAIR: 'keboola-test.dbt-core-key-pair',\n  DBT_TEST_REMOTE_SNOWFLAKE: 'keboola-test.dbt-remote-snowflake',\n  DBT_TEST_TRANSFORMATION: 'keboola-test.dbt-transformation',\n  DBT_TRANSFORMATION: 'keboola.dbt-transformation',\n  DBT_TRANSFORMATION_LOCAL_BIGQUERY: 'keboola.dbt-transformation-local-bigquery',\n  DBT_TRANSFORMATION_REMOTE_BIGQUERY: 'keboola.dbt-transformation-remote-bigquery',\n  DBT_TRANSFORMATION_REMOTE_MSSQL: 'keboola.dbt-transformation-remote-mssql',\n  DBT_TRANSFORMATION_REMOTE_POSTGRESQL: 'keboola.dbt-transformation-remote-postgresql',\n  DBT_TRANSFORMATION_REMOTE_REDSHIFT: 'keboola.dbt-transformation-remote-redshift',\n  DBT_TRANSFORMATION_REMOTE_SNOWFLAKE: 'keboola.dbt-transformation-remote-snowflake',\n\n  APP_CONFIGURATION_MIGRATION_TOOL: 'keboola.app-configuration-migration-tool',\n  FLOW_MIGRATION_TOOL: 'keboola.flow-migration-tool',\n\n  // Utility components, called only for their sync actions\n  SSH_KEYGEN_V2: 'keboola.ssh-keygen-v2',\n\n  // Transformations\n  LEGACY_TRANSFORMATION: 'keboola.legacy-transformation',\n  SNOWFLAKE_TRANSFORMATION: 'keboola.snowflake-transformation',\n  PYTHON_TRANSFORMATION_V2: 'keboola.python-transformation-v2',\n  CSAS_PYTHON_TRANSFORMATION_V2: 'keboola.csas-python-transformation-v2',\n  R_TRANSFORMATION_V2: 'keboola.r-transformation-v2',\n  GOOGLE_BIGQUERY_TRANSFORMATION: 'keboola.google-bigquery-transformation',\n  DUCKDB_TRANSFORMATION: 'keboola.duckdb-transformation',\n  ORACLE_TRANSFORMATION: 'keboola.oracle-transformation',\n\n  // Processors\n  PROCESSOR_SPLIT_TABLE: 'keboola.processor-split-table',\n  PROCESSOR_ADD_FILENAME_COLUMN: 'keboola.processor-add-filename-column',\n  PROCESSOR_ADD_ROW_NUMBER_COLUMN: 'keboola.processor-add-row-number-column',\n  PROCESSOR_CREATE_MANIFEST: 'keboola.processor-create-manifest',\n  PROCESSOR_DECOMPRESS: 'keboola.processor-decompress',\n  PROCESSOR_FLATTEN_FOLDERS: 'keboola.processor-flatten-folders',\n  PROCESSOR_MOVE_FILES: 'keboola.processor-move-files',\n  PROCESSOR_SKIP_LINES: 'keboola.processor-skip-lines',\n  KDS_PROCESSOR_CSV2XLS: 'kds-team.processor-csv2xls',\n  KDS_PROCESSOR_CREATE_FILE_MANIFEST: 'kds-team.processor-create-file-manifest',\n  KDS_PROCESSOR_CONVERT_COLUMN_CASE: 'kds-team.processor-convert-column-case',\n\n  // Platform components\n  FLOW: 'keboola.flow',\n  ORCHESTRATOR: 'keboola.orchestrator',\n  STORAGE: 'keboola.storage', // component to get icon and name\n  VARIABLES: 'keboola.variables',\n  SHARED_CODE: 'keboola.shared-code',\n  DATA_APP_CONTROL: 'keboola.data-app-control',\n  MCP_SERVER_TOOL: 'keboola.mcp-server-tool',\n  PROJECT_BACKUP: 'keboola.project-backup',\n  KEBOOLA_AS_CODE: 'keboola.keboola-as-code',\n  APP_MERGE_BRANCH_STORAGE: 'keboola.app-merge-branch-storage',\n  SAPI_MERGED_EXPORT: 'keboola.sapi-merged-export',\n  SLICED_FILES_DOWNLOADER: 'keboola.sliced-files-downloader',\n  CSV_IMPORT: 'keboola.csv-import',\n  EX_SAMPLE_DATA: 'keboola.ex-sample-data',\n\n  // Other components\n  EX_GOOGLE_DRIVE: 'keboola.ex-google-drive',\n  EX_GOOGLE_BIGQUERY_V2_AVRO_FILES: 'keboola.ex-google-bigquery-v2-avro-files',\n  EX_GMAIL: 'keboola.ex-gmail',\n  EX_MONGODB: 'keboola.ex-mongodb',\n  EX_SNOWFLAKE_QUERY_HISTORY: 'keboola.ex-snowflake-query-history',\n  EX_SNOWFLAKE_PARAMETERS: 'keboola.ex-snowflake-parameters',\n  EX_GENERIC_V2_DETAIL: 'ex-generic-v2-detail',\n  APAC_EX_GMAIL_ATTACHMENTS: 'apac.ex-gmail-attachments',\n  GENEEA_NLP_ANALYSIS_V2: 'geneea.nlp-analysis-v2',\n  KDS_APP_CUSTOM_PYTHON: 'kds-team.app-custom-python',\n  KDS_EX_DV360: 'kds-team.ex-dv360',\n  KDS_EX_YOUTUBE_ANALYTICS: 'kds-team.ex-youtube-analytics',\n  KDS_EX_AWS_COST_AND_USAGE_REPORTS: 'kds-team.ex-aws-cost-and-usage-reports',\n  KDS_EX_ZOHO: 'kds-team.ex-zoho',\n  SMETRIC_EX_SIMPRO_API: 'smetric.ex-simpro-api',\n  SMETRIC_EX_VEND_API: 'smetric.ex-vend-api',\n  TDE_EXPORTER: 'tde-exporter',\n} as const;\n\nexport type ComponentId = (typeof ComponentId)[keyof typeof ComponentId];\n"],"mappings":";AAAA,MAAa,cAAc;CACzB,aAAa;CACb,aAAa;CACb,cAAc;CACd,iBAAiB;CACjB,qBAAqB;CACrB,wBAAwB;CACxB,2BAA2B;CAC3B,cAAc;CACd,kBAAkB;CAClB,YAAY;CACZ,aAAa;CACb,aAAa;CACb,YAAY;CACZ,cAAc;CACd,YAAY;CACZ,WAAW;CACX,aAAa;CACb,cAAc;CACd,gBAAgB;CAChB,YAAY;CACZ,WAAW;CACX,YAAY;CACZ,uBAAuB;CACvB,WAAW;CAGX,2BAA2B;CAC3B,iBAAiB;CAGjB,aAAa;CACb,aAAa;CACb,gBAAgB;CAChB,gBAAgB;CAChB,WAAW;CACX,gBAAgB;CAChB,aAAa;CACb,mBAAmB;CACnB,cAAc;CACd,iBAAiB;CACjB,gBAAgB;CAChB,gBAAgB;CAChB,cAAc;CACd,YAAY;CACZ,iBAAiB;CACjB,sBAAsB;CACtB,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CAGpB,eAAe;CACf,wBAAwB;CACxB,iBAAiB;CACjB,kBAAkB;CAGlB,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CACpB,mBAAmB;CACnB,cAAc;CACd,iBAAiB;CAGjB,aAAa;CACb,aAAa;CAGb,SAAS;CACT,QAAQ;CACR,aAAa;CACb,sBAAsB;CACtB,WAAW;CACX,8BAA8B;CAC9B,6BAA6B;CAC7B,OAAO;CACP,eAAe;CACf,uBAAuB;CACvB,YAAY;CAGZ,WAAW;CACX,WAAW;CAGX,wBAAwB;CACxB,2BAA2B;CAC3B,yBAAyB;CACzB,oBAAoB;CACpB,mCAAmC;CACnC,oCAAoC;CACpC,iCAAiC;CACjC,sCAAsC;CACtC,oCAAoC;CACpC,qCAAqC;CAErC,kCAAkC;CAClC,qBAAqB;CAGrB,eAAe;CAGf,uBAAuB;CACvB,0BAA0B;CAC1B,0BAA0B;CAC1B,+BAA+B;CAC/B,qBAAqB;CACrB,gCAAgC;CAChC,uBAAuB;CACvB,uBAAuB;CAGvB,uBAAuB;CACvB,+BAA+B;CAC/B,iCAAiC;CACjC,2BAA2B;CAC3B,sBAAsB;CACtB,2BAA2B;CAC3B,sBAAsB;CACtB,sBAAsB;CACtB,uBAAuB;CACvB,oCAAoC;CACpC,mCAAmC;CAGnC,MAAM;CACN,cAAc;CACd,SAAS;CACT,WAAW;CACX,aAAa;CACb,kBAAkB;CAClB,iBAAiB;CACjB,gBAAgB;CAChB,iBAAiB;CACjB,0BAA0B;CAC1B,oBAAoB;CACpB,yBAAyB;CACzB,YAAY;CACZ,gBAAgB;CAGhB,iBAAiB;CACjB,kCAAkC;CAClC,UAAU;CACV,YAAY;CACZ,4BAA4B;CAC5B,yBAAyB;CACzB,sBAAsB;CACtB,2BAA2B;CAC3B,wBAAwB;CACxB,uBAAuB;CACvB,cAAc;CACd,0BAA0B;CAC1B,mCAAmC;CACnC,aAAa;CACb,uBAAuB;CACvB,qBAAqB;CACrB,cAAc;AAChB"}
+{"version":3,"file":"componentId-Cps6WBy1.js","names":[],"sources":["../src/constants/componentId.ts"],"sourcesContent":["export const ComponentId = {\n  WR_DB_MYSQL: 'keboola.wr-db-mysql',\n  WR_DB_PGSQL: 'keboola.wr-db-pgsql',\n  WR_DB_ORACLE: 'keboola.wr-db-oracle',\n  WR_DB_SNOWFLAKE: 'keboola.wr-db-snowflake',\n  WR_DB_SNOWFLAKE_GCS: 'keboola.wr-db-snowflake-gcs',\n  WR_DB_SNOWFLAKE_GCS_S3: 'keboola.wr-db-snowflake-gcs-s3',\n  WR_SNOWFLAKE_BLOB_STORAGE: 'keboola.wr-snowflake-blob-storage',\n  WR_LOOKER_V2: 'keboola.wr-looker-v2',\n  APP_DATA_GATEWAY: 'keboola.app-data-gateway',\n  WR_SYNAPSE: 'keboola.wr-synapse',\n  WR_REDSHIFT: 'keboola.wr-redshift-v2',\n  WR_DB_MSSQL: 'keboola.wr-db-mssql-v2',\n  WR_DB_HIVE: 'keboola.wr-db-hive',\n  WR_DB_IMPALA: 'keboola.wr-db-impala',\n  WR_PAIRITY: 'kds-team.wr-pairity',\n  WR_EXASOL: 'kds-team.wr-exasol',\n  WR_FIREBOLT: 'kds-team.wr-firebolt',\n  WR_HIVE_CSAS: 'kds-team.wr-hive-csas',\n  WR_THOUGHTSPOT: 'keboola.wr-thoughtspot',\n  WR_SISENSE: 'keboola.wr-sisense',\n  WR_AWS_S3: 'keboola.wr-aws-s3',\n  WR_STORAGE: 'keboola.wr-storage',\n  WR_GOOGLE_BIGQUERY_V2: 'keboola.wr-google-bigquery-v2',\n  SCHEDULER: 'keboola.scheduler',\n\n  // App-specific writers (bespoke credential blocks)\n  APP_SNOWFLAKE_DWH_MANAGER: 'keboola.app-snowflake-dwh-manager',\n  GOODDATA_WRITER: 'keboola.gooddata-writer',\n\n  // DB extractors (ex-db-generic family)\n  EX_DB_MYSQL: 'keboola.ex-db-mysql',\n  EX_DB_PGSQL: 'keboola.ex-db-pgsql',\n  EX_DB_REDSHIFT: 'keboola.ex-db-redshift',\n  EX_DB_FIREBIRD: 'keboola.ex-db-firebird',\n  EX_DB_DB2: 'keboola.ex-db-db2',\n  EX_DB_DB2_BATA: 'keboola.ex-db-db2-bata',\n  EX_DB_MSSQL: 'keboola.ex-db-mssql',\n  EX_DB_MSSQL_CDATA: 'keboola.ex-db-mssql-cdata',\n  EX_DB_ORACLE: 'keboola.ex-db-oracle',\n  EX_DB_SNOWFLAKE: 'keboola.ex-db-snowflake',\n  EX_DB_NETSUITE: 'keboola.ex-db-netsuite',\n  EX_DB_INFORMIX: 'keboola.ex-db-informix',\n  EX_DB_IMPALA: 'keboola.ex-db-impala',\n  EX_DB_HIVE: 'keboola.ex-db-hive',\n  EX_DB_HIVE_CSAS: 'keboola.ex-db-hive-csas',\n  EX_DB_HIVE_CSAS_TEST: 'keboola.ex-db-hive-csas-test',\n  EX_TERADATA: 'keboola.ex-teradata',\n  KDS_EX_NETSUITE: 'kds-team.ex-netsuite',\n  KDS_EX_PROGRESS_DB: 'kds-team.ex-progress-db',\n\n  // Google (OAuth) components\n  EX_GOOGLE_ADS: 'keboola.ex-google-ads',\n  EX_GOOGLE_ANALYTICS_V4: 'keboola.ex-google-analytics-v4',\n  WR_GOOGLE_DRIVE: 'keboola.wr-google-drive',\n  WR_GOOGLE_SHEETS: 'keboola.wr-google-sheets',\n\n  // Meta (OAuth) components\n  EX_FACEBOOK: 'keboola.ex-facebook',\n  EX_FACEBOOK_ADS: 'keboola.ex-facebook-ads',\n  EX_FACEBOOK_ADS_V2: 'keboola.ex-facebook-ads-v2',\n  EX_FACEBOOK_PAGES: 'keboola.ex-facebook-pages',\n  EX_INSTAGRAM: 'keboola.ex-instagram',\n  EX_INSTAGRAM_V2: 'keboola.ex-instagram-v2',\n\n  // Microsoft OneDrive (OAuth) components\n  EX_ONEDRIVE: 'keboola.ex-onedrive',\n  WR_ONEDRIVE: 'keboola.wr-onedrive',\n\n  // File/connection extractors (ex family, no shared credential base)\n  EX_HTTP: 'keboola.ex-http',\n  EX_FTP: 'keboola.ex-ftp',\n  EX_FTP_CSAS: 'keboola.ex-ftp-csas',\n  EX_EMAIL_ATTACHMENTS: 'keboola.ex-email-attachments',\n  EX_AWS_S3: 'keboola.ex-aws-s3',\n  KDS_EX_AZURE_BLOB_STORAGE_V2: 'kds-team.ex-azure-blob-storage-v2',\n  KDS_EX_AZURE_DATA_LAKE_GEN2: 'kds-team.ex-azure-data-lake-gen2',\n  APIFY: 'apify.apify',\n  EX_GENERIC_V2: 'ex-generic-v2',\n  EX_GOOGLE_BIGQUERY_V2: 'keboola.ex-google-bigquery-v2',\n  EX_STORAGE: 'keboola.ex-storage',\n\n  // Data-app family — a git repository lives under `parameters.dataApp.git`\n  DATA_APPS: 'keboola.data-apps',\n  SANDBOXES: 'keboola.sandboxes',\n\n  // dbt transformations — a git repository lives under `parameters.git`\n  DBT_TEST_CORE_KEY_PAIR: 'keboola-test.dbt-core-key-pair',\n  DBT_TEST_REMOTE_SNOWFLAKE: 'keboola-test.dbt-remote-snowflake',\n  DBT_TEST_TRANSFORMATION: 'keboola-test.dbt-transformation',\n  DBT_TRANSFORMATION: 'keboola.dbt-transformation',\n  DBT_TRANSFORMATION_LOCAL_BIGQUERY: 'keboola.dbt-transformation-local-bigquery',\n  DBT_TRANSFORMATION_REMOTE_BIGQUERY: 'keboola.dbt-transformation-remote-bigquery',\n  DBT_TRANSFORMATION_REMOTE_MSSQL: 'keboola.dbt-transformation-remote-mssql',\n  DBT_TRANSFORMATION_REMOTE_POSTGRESQL: 'keboola.dbt-transformation-remote-postgresql',\n  DBT_TRANSFORMATION_REMOTE_REDSHIFT: 'keboola.dbt-transformation-remote-redshift',\n  DBT_TRANSFORMATION_REMOTE_SNOWFLAKE: 'keboola.dbt-transformation-remote-snowflake',\n\n  APP_CONFIGURATION_MIGRATION_TOOL: 'keboola.app-configuration-migration-tool',\n  FLOW_MIGRATION_TOOL: 'keboola.flow-migration-tool',\n\n  // Utility components, called only for their sync actions\n  SSH_KEYGEN_V2: 'keboola.ssh-keygen-v2',\n\n  // Transformations\n  LEGACY_TRANSFORMATION: 'keboola.legacy-transformation',\n  SNOWFLAKE_TRANSFORMATION: 'keboola.snowflake-transformation',\n  PYTHON_TRANSFORMATION_V2: 'keboola.python-transformation-v2',\n  CSAS_PYTHON_TRANSFORMATION_V2: 'keboola.csas-python-transformation-v2',\n  R_TRANSFORMATION_V2: 'keboola.r-transformation-v2',\n  GOOGLE_BIGQUERY_TRANSFORMATION: 'keboola.google-bigquery-transformation',\n  DUCKDB_TRANSFORMATION: 'keboola.duckdb-transformation',\n  ORACLE_TRANSFORMATION: 'keboola.oracle-transformation',\n\n  // Processors\n  PROCESSOR_SPLIT_TABLE: 'keboola.processor-split-table',\n  PROCESSOR_ADD_FILENAME_COLUMN: 'keboola.processor-add-filename-column',\n  PROCESSOR_ADD_ROW_NUMBER_COLUMN: 'keboola.processor-add-row-number-column',\n  PROCESSOR_CREATE_MANIFEST: 'keboola.processor-create-manifest',\n  PROCESSOR_DECOMPRESS: 'keboola.processor-decompress',\n  PROCESSOR_FLATTEN_FOLDERS: 'keboola.processor-flatten-folders',\n  PROCESSOR_MOVE_FILES: 'keboola.processor-move-files',\n  PROCESSOR_SKIP_LINES: 'keboola.processor-skip-lines',\n  KDS_PROCESSOR_CSV2XLS: 'kds-team.processor-csv2xls',\n  KDS_PROCESSOR_CREATE_FILE_MANIFEST: 'kds-team.processor-create-file-manifest',\n  KDS_PROCESSOR_CONVERT_COLUMN_CASE: 'kds-team.processor-convert-column-case',\n\n  // Platform components\n  FLOW: 'keboola.flow',\n  ORCHESTRATOR: 'keboola.orchestrator',\n  STORAGE: 'keboola.storage', // component to get icon and name\n  VARIABLES: 'keboola.variables',\n  SHARED_CODE: 'keboola.shared-code',\n  DATA_APP_CONTROL: 'keboola.data-app-control',\n  MCP_SERVER_TOOL: 'keboola.mcp-server-tool',\n  PROJECT_BACKUP: 'keboola.project-backup',\n  KEBOOLA_AS_CODE: 'keboola.keboola-as-code',\n  APP_MERGE_BRANCH_STORAGE: 'keboola.app-merge-branch-storage',\n  SAPI_MERGED_EXPORT: 'keboola.sapi-merged-export',\n  SLICED_FILES_DOWNLOADER: 'keboola.sliced-files-downloader',\n  CSV_IMPORT: 'keboola.csv-import',\n  EX_SAMPLE_DATA: 'keboola.ex-sample-data',\n\n  // Other components\n  EX_GOOGLE_DRIVE: 'keboola.ex-google-drive',\n  EX_GOOGLE_BIGQUERY_V2_AVRO_FILES: 'keboola.ex-google-bigquery-v2-avro-files',\n  EX_GMAIL: 'keboola.ex-gmail',\n  EX_MONGODB: 'keboola.ex-mongodb',\n  EX_SNOWFLAKE_QUERY_HISTORY: 'keboola.ex-snowflake-query-history',\n  EX_SNOWFLAKE_PARAMETERS: 'keboola.ex-snowflake-parameters',\n  APAC_EX_GMAIL_ATTACHMENTS: 'apac.ex-gmail-attachments',\n  GENEEA_NLP_ANALYSIS_V2: 'geneea.nlp-analysis-v2',\n  KDS_APP_CUSTOM_PYTHON: 'kds-team.app-custom-python',\n  KDS_EX_DV360: 'kds-team.ex-dv360',\n  KDS_EX_YOUTUBE_ANALYTICS: 'kds-team.ex-youtube-analytics',\n  KDS_EX_AWS_COST_AND_USAGE_REPORTS: 'kds-team.ex-aws-cost-and-usage-reports',\n  KDS_EX_ZOHO: 'kds-team.ex-zoho',\n  SMETRIC_EX_SIMPRO_API: 'smetric.ex-simpro-api',\n  SMETRIC_EX_VEND_API: 'smetric.ex-vend-api',\n  TDE_EXPORTER: 'tde-exporter',\n} as const;\n\nexport type ComponentId = (typeof ComponentId)[keyof typeof ComponentId];\n"],"mappings":";AAAA,MAAa,cAAc;CACzB,aAAa;CACb,aAAa;CACb,cAAc;CACd,iBAAiB;CACjB,qBAAqB;CACrB,wBAAwB;CACxB,2BAA2B;CAC3B,cAAc;CACd,kBAAkB;CAClB,YAAY;CACZ,aAAa;CACb,aAAa;CACb,YAAY;CACZ,cAAc;CACd,YAAY;CACZ,WAAW;CACX,aAAa;CACb,cAAc;CACd,gBAAgB;CAChB,YAAY;CACZ,WAAW;CACX,YAAY;CACZ,uBAAuB;CACvB,WAAW;CAGX,2BAA2B;CAC3B,iBAAiB;CAGjB,aAAa;CACb,aAAa;CACb,gBAAgB;CAChB,gBAAgB;CAChB,WAAW;CACX,gBAAgB;CAChB,aAAa;CACb,mBAAmB;CACnB,cAAc;CACd,iBAAiB;CACjB,gBAAgB;CAChB,gBAAgB;CAChB,cAAc;CACd,YAAY;CACZ,iBAAiB;CACjB,sBAAsB;CACtB,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CAGpB,eAAe;CACf,wBAAwB;CACxB,iBAAiB;CACjB,kBAAkB;CAGlB,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CACpB,mBAAmB;CACnB,cAAc;CACd,iBAAiB;CAGjB,aAAa;CACb,aAAa;CAGb,SAAS;CACT,QAAQ;CACR,aAAa;CACb,sBAAsB;CACtB,WAAW;CACX,8BAA8B;CAC9B,6BAA6B;CAC7B,OAAO;CACP,eAAe;CACf,uBAAuB;CACvB,YAAY;CAGZ,WAAW;CACX,WAAW;CAGX,wBAAwB;CACxB,2BAA2B;CAC3B,yBAAyB;CACzB,oBAAoB;CACpB,mCAAmC;CACnC,oCAAoC;CACpC,iCAAiC;CACjC,sCAAsC;CACtC,oCAAoC;CACpC,qCAAqC;CAErC,kCAAkC;CAClC,qBAAqB;CAGrB,eAAe;CAGf,uBAAuB;CACvB,0BAA0B;CAC1B,0BAA0B;CAC1B,+BAA+B;CAC/B,qBAAqB;CACrB,gCAAgC;CAChC,uBAAuB;CACvB,uBAAuB;CAGvB,uBAAuB;CACvB,+BAA+B;CAC/B,iCAAiC;CACjC,2BAA2B;CAC3B,sBAAsB;CACtB,2BAA2B;CAC3B,sBAAsB;CACtB,sBAAsB;CACtB,uBAAuB;CACvB,oCAAoC;CACpC,mCAAmC;CAGnC,MAAM;CACN,cAAc;CACd,SAAS;CACT,WAAW;CACX,aAAa;CACb,kBAAkB;CAClB,iBAAiB;CACjB,gBAAgB;CAChB,iBAAiB;CACjB,0BAA0B;CAC1B,oBAAoB;CACpB,yBAAyB;CACzB,YAAY;CACZ,gBAAgB;CAGhB,iBAAiB;CACjB,kCAAkC;CAClC,UAAU;CACV,YAAY;CACZ,4BAA4B;CAC5B,yBAAyB;CACzB,2BAA2B;CAC3B,wBAAwB;CACxB,uBAAuB;CACvB,cAAc;CACd,0BAA0B;CAC1B,mCAAmC;CACnC,aAAa;CACb,uBAAuB;CACvB,qBAAqB;CACrB,cAAc;AAChB"}

package/dist/{componentId-olp0tltf.cjs → componentId-_tRhEv6W.cjs}

@@ -122,7 +122,6 @@ const ComponentId = {
 	EX_MONGODB: "keboola.ex-mongodb",
 	EX_SNOWFLAKE_QUERY_HISTORY: "keboola.ex-snowflake-query-history",
 	EX_SNOWFLAKE_PARAMETERS: "keboola.ex-snowflake-parameters",
-	EX_GENERIC_V2_DETAIL: "ex-generic-v2-detail",
 	APAC_EX_GMAIL_ATTACHMENTS: "apac.ex-gmail-attachments",
 	GENEEA_NLP_ANALYSIS_V2: "geneea.nlp-analysis-v2",
 	KDS_APP_CUSTOM_PYTHON: "kds-team.app-custom-python",
@@ -141,4 +140,4 @@ Object.defineProperty(exports, "ComponentId", {
 	}
 });
 
-//# sourceMappingURL=componentId-olp0tltf.cjs.map
+//# sourceMappingURL=componentId-_tRhEv6W.cjs.map

package/dist/{componentId-olp0tltf.cjs.map → componentId-_tRhEv6W.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"componentId-olp0tltf.cjs","names":[],"sources":["../src/constants/componentId.ts"],"sourcesContent":["export const ComponentId = {\n  WR_DB_MYSQL: 'keboola.wr-db-mysql',\n  WR_DB_PGSQL: 'keboola.wr-db-pgsql',\n  WR_DB_ORACLE: 'keboola.wr-db-oracle',\n  WR_DB_SNOWFLAKE: 'keboola.wr-db-snowflake',\n  WR_DB_SNOWFLAKE_GCS: 'keboola.wr-db-snowflake-gcs',\n  WR_DB_SNOWFLAKE_GCS_S3: 'keboola.wr-db-snowflake-gcs-s3',\n  WR_SNOWFLAKE_BLOB_STORAGE: 'keboola.wr-snowflake-blob-storage',\n  WR_LOOKER_V2: 'keboola.wr-looker-v2',\n  APP_DATA_GATEWAY: 'keboola.app-data-gateway',\n  WR_SYNAPSE: 'keboola.wr-synapse',\n  WR_REDSHIFT: 'keboola.wr-redshift-v2',\n  WR_DB_MSSQL: 'keboola.wr-db-mssql-v2',\n  WR_DB_HIVE: 'keboola.wr-db-hive',\n  WR_DB_IMPALA: 'keboola.wr-db-impala',\n  WR_PAIRITY: 'kds-team.wr-pairity',\n  WR_EXASOL: 'kds-team.wr-exasol',\n  WR_FIREBOLT: 'kds-team.wr-firebolt',\n  WR_HIVE_CSAS: 'kds-team.wr-hive-csas',\n  WR_THOUGHTSPOT: 'keboola.wr-thoughtspot',\n  WR_SISENSE: 'keboola.wr-sisense',\n  WR_AWS_S3: 'keboola.wr-aws-s3',\n  WR_STORAGE: 'keboola.wr-storage',\n  WR_GOOGLE_BIGQUERY_V2: 'keboola.wr-google-bigquery-v2',\n  SCHEDULER: 'keboola.scheduler',\n\n  // App-specific writers (bespoke credential blocks)\n  APP_SNOWFLAKE_DWH_MANAGER: 'keboola.app-snowflake-dwh-manager',\n  GOODDATA_WRITER: 'keboola.gooddata-writer',\n\n  // DB extractors (ex-db-generic family)\n  EX_DB_MYSQL: 'keboola.ex-db-mysql',\n  EX_DB_PGSQL: 'keboola.ex-db-pgsql',\n  EX_DB_REDSHIFT: 'keboola.ex-db-redshift',\n  EX_DB_FIREBIRD: 'keboola.ex-db-firebird',\n  EX_DB_DB2: 'keboola.ex-db-db2',\n  EX_DB_DB2_BATA: 'keboola.ex-db-db2-bata',\n  EX_DB_MSSQL: 'keboola.ex-db-mssql',\n  EX_DB_MSSQL_CDATA: 'keboola.ex-db-mssql-cdata',\n  EX_DB_ORACLE: 'keboola.ex-db-oracle',\n  EX_DB_SNOWFLAKE: 'keboola.ex-db-snowflake',\n  EX_DB_NETSUITE: 'keboola.ex-db-netsuite',\n  EX_DB_INFORMIX: 'keboola.ex-db-informix',\n  EX_DB_IMPALA: 'keboola.ex-db-impala',\n  EX_DB_HIVE: 'keboola.ex-db-hive',\n  EX_DB_HIVE_CSAS: 'keboola.ex-db-hive-csas',\n  EX_DB_HIVE_CSAS_TEST: 'keboola.ex-db-hive-csas-test',\n  EX_TERADATA: 'keboola.ex-teradata',\n  KDS_EX_NETSUITE: 'kds-team.ex-netsuite',\n  KDS_EX_PROGRESS_DB: 'kds-team.ex-progress-db',\n\n  // Google (OAuth) components\n  EX_GOOGLE_ADS: 'keboola.ex-google-ads',\n  EX_GOOGLE_ANALYTICS_V4: 'keboola.ex-google-analytics-v4',\n  WR_GOOGLE_DRIVE: 'keboola.wr-google-drive',\n  WR_GOOGLE_SHEETS: 'keboola.wr-google-sheets',\n\n  // Meta (OAuth) components\n  EX_FACEBOOK: 'keboola.ex-facebook',\n  EX_FACEBOOK_ADS: 'keboola.ex-facebook-ads',\n  EX_FACEBOOK_ADS_V2: 'keboola.ex-facebook-ads-v2',\n  EX_FACEBOOK_PAGES: 'keboola.ex-facebook-pages',\n  EX_INSTAGRAM: 'keboola.ex-instagram',\n  EX_INSTAGRAM_V2: 'keboola.ex-instagram-v2',\n\n  // Microsoft OneDrive (OAuth) components\n  EX_ONEDRIVE: 'keboola.ex-onedrive',\n  WR_ONEDRIVE: 'keboola.wr-onedrive',\n\n  // File/connection extractors (ex family, no shared credential base)\n  EX_HTTP: 'keboola.ex-http',\n  EX_FTP: 'keboola.ex-ftp',\n  EX_FTP_CSAS: 'keboola.ex-ftp-csas',\n  EX_EMAIL_ATTACHMENTS: 'keboola.ex-email-attachments',\n  EX_AWS_S3: 'keboola.ex-aws-s3',\n  KDS_EX_AZURE_BLOB_STORAGE_V2: 'kds-team.ex-azure-blob-storage-v2',\n  KDS_EX_AZURE_DATA_LAKE_GEN2: 'kds-team.ex-azure-data-lake-gen2',\n  APIFY: 'apify.apify',\n  EX_GENERIC_V2: 'ex-generic-v2',\n  EX_GOOGLE_BIGQUERY_V2: 'keboola.ex-google-bigquery-v2',\n  EX_STORAGE: 'keboola.ex-storage',\n\n  // Data-app family — a git repository lives under `parameters.dataApp.git`\n  DATA_APPS: 'keboola.data-apps',\n  SANDBOXES: 'keboola.sandboxes',\n\n  // dbt transformations — a git repository lives under `parameters.git`\n  DBT_TEST_CORE_KEY_PAIR: 'keboola-test.dbt-core-key-pair',\n  DBT_TEST_REMOTE_SNOWFLAKE: 'keboola-test.dbt-remote-snowflake',\n  DBT_TEST_TRANSFORMATION: 'keboola-test.dbt-transformation',\n  DBT_TRANSFORMATION: 'keboola.dbt-transformation',\n  DBT_TRANSFORMATION_LOCAL_BIGQUERY: 'keboola.dbt-transformation-local-bigquery',\n  DBT_TRANSFORMATION_REMOTE_BIGQUERY: 'keboola.dbt-transformation-remote-bigquery',\n  DBT_TRANSFORMATION_REMOTE_MSSQL: 'keboola.dbt-transformation-remote-mssql',\n  DBT_TRANSFORMATION_REMOTE_POSTGRESQL: 'keboola.dbt-transformation-remote-postgresql',\n  DBT_TRANSFORMATION_REMOTE_REDSHIFT: 'keboola.dbt-transformation-remote-redshift',\n  DBT_TRANSFORMATION_REMOTE_SNOWFLAKE: 'keboola.dbt-transformation-remote-snowflake',\n\n  APP_CONFIGURATION_MIGRATION_TOOL: 'keboola.app-configuration-migration-tool',\n  FLOW_MIGRATION_TOOL: 'keboola.flow-migration-tool',\n\n  // Utility components, called only for their sync actions\n  SSH_KEYGEN_V2: 'keboola.ssh-keygen-v2',\n\n  // Transformations\n  LEGACY_TRANSFORMATION: 'keboola.legacy-transformation',\n  SNOWFLAKE_TRANSFORMATION: 'keboola.snowflake-transformation',\n  PYTHON_TRANSFORMATION_V2: 'keboola.python-transformation-v2',\n  CSAS_PYTHON_TRANSFORMATION_V2: 'keboola.csas-python-transformation-v2',\n  R_TRANSFORMATION_V2: 'keboola.r-transformation-v2',\n  GOOGLE_BIGQUERY_TRANSFORMATION: 'keboola.google-bigquery-transformation',\n  DUCKDB_TRANSFORMATION: 'keboola.duckdb-transformation',\n  ORACLE_TRANSFORMATION: 'keboola.oracle-transformation',\n\n  // Processors\n  PROCESSOR_SPLIT_TABLE: 'keboola.processor-split-table',\n  PROCESSOR_ADD_FILENAME_COLUMN: 'keboola.processor-add-filename-column',\n  PROCESSOR_ADD_ROW_NUMBER_COLUMN: 'keboola.processor-add-row-number-column',\n  PROCESSOR_CREATE_MANIFEST: 'keboola.processor-create-manifest',\n  PROCESSOR_DECOMPRESS: 'keboola.processor-decompress',\n  PROCESSOR_FLATTEN_FOLDERS: 'keboola.processor-flatten-folders',\n  PROCESSOR_MOVE_FILES: 'keboola.processor-move-files',\n  PROCESSOR_SKIP_LINES: 'keboola.processor-skip-lines',\n  KDS_PROCESSOR_CSV2XLS: 'kds-team.processor-csv2xls',\n  KDS_PROCESSOR_CREATE_FILE_MANIFEST: 'kds-team.processor-create-file-manifest',\n  KDS_PROCESSOR_CONVERT_COLUMN_CASE: 'kds-team.processor-convert-column-case',\n\n  // Platform components\n  FLOW: 'keboola.flow',\n  ORCHESTRATOR: 'keboola.orchestrator',\n  STORAGE: 'keboola.storage', // component to get icon and name\n  VARIABLES: 'keboola.variables',\n  SHARED_CODE: 'keboola.shared-code',\n  DATA_APP_CONTROL: 'keboola.data-app-control',\n  MCP_SERVER_TOOL: 'keboola.mcp-server-tool',\n  PROJECT_BACKUP: 'keboola.project-backup',\n  KEBOOLA_AS_CODE: 'keboola.keboola-as-code',\n  APP_MERGE_BRANCH_STORAGE: 'keboola.app-merge-branch-storage',\n  SAPI_MERGED_EXPORT: 'keboola.sapi-merged-export',\n  SLICED_FILES_DOWNLOADER: 'keboola.sliced-files-downloader',\n  CSV_IMPORT: 'keboola.csv-import',\n  EX_SAMPLE_DATA: 'keboola.ex-sample-data',\n\n  // Other components\n  EX_GOOGLE_DRIVE: 'keboola.ex-google-drive',\n  EX_GOOGLE_BIGQUERY_V2_AVRO_FILES: 'keboola.ex-google-bigquery-v2-avro-files',\n  EX_GMAIL: 'keboola.ex-gmail',\n  EX_MONGODB: 'keboola.ex-mongodb',\n  EX_SNOWFLAKE_QUERY_HISTORY: 'keboola.ex-snowflake-query-history',\n  EX_SNOWFLAKE_PARAMETERS: 'keboola.ex-snowflake-parameters',\n  EX_GENERIC_V2_DETAIL: 'ex-generic-v2-detail',\n  APAC_EX_GMAIL_ATTACHMENTS: 'apac.ex-gmail-attachments',\n  GENEEA_NLP_ANALYSIS_V2: 'geneea.nlp-analysis-v2',\n  KDS_APP_CUSTOM_PYTHON: 'kds-team.app-custom-python',\n  KDS_EX_DV360: 'kds-team.ex-dv360',\n  KDS_EX_YOUTUBE_ANALYTICS: 'kds-team.ex-youtube-analytics',\n  KDS_EX_AWS_COST_AND_USAGE_REPORTS: 'kds-team.ex-aws-cost-and-usage-reports',\n  KDS_EX_ZOHO: 'kds-team.ex-zoho',\n  SMETRIC_EX_SIMPRO_API: 'smetric.ex-simpro-api',\n  SMETRIC_EX_VEND_API: 'smetric.ex-vend-api',\n  TDE_EXPORTER: 'tde-exporter',\n} as const;\n\nexport type ComponentId = (typeof ComponentId)[keyof typeof ComponentId];\n"],"mappings":";AAAA,MAAa,cAAc;CACzB,aAAa;CACb,aAAa;CACb,cAAc;CACd,iBAAiB;CACjB,qBAAqB;CACrB,wBAAwB;CACxB,2BAA2B;CAC3B,cAAc;CACd,kBAAkB;CAClB,YAAY;CACZ,aAAa;CACb,aAAa;CACb,YAAY;CACZ,cAAc;CACd,YAAY;CACZ,WAAW;CACX,aAAa;CACb,cAAc;CACd,gBAAgB;CAChB,YAAY;CACZ,WAAW;CACX,YAAY;CACZ,uBAAuB;CACvB,WAAW;CAGX,2BAA2B;CAC3B,iBAAiB;CAGjB,aAAa;CACb,aAAa;CACb,gBAAgB;CAChB,gBAAgB;CAChB,WAAW;CACX,gBAAgB;CAChB,aAAa;CACb,mBAAmB;CACnB,cAAc;CACd,iBAAiB;CACjB,gBAAgB;CAChB,gBAAgB;CAChB,cAAc;CACd,YAAY;CACZ,iBAAiB;CACjB,sBAAsB;CACtB,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CAGpB,eAAe;CACf,wBAAwB;CACxB,iBAAiB;CACjB,kBAAkB;CAGlB,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CACpB,mBAAmB;CACnB,cAAc;CACd,iBAAiB;CAGjB,aAAa;CACb,aAAa;CAGb,SAAS;CACT,QAAQ;CACR,aAAa;CACb,sBAAsB;CACtB,WAAW;CACX,8BAA8B;CAC9B,6BAA6B;CAC7B,OAAO;CACP,eAAe;CACf,uBAAuB;CACvB,YAAY;CAGZ,WAAW;CACX,WAAW;CAGX,wBAAwB;CACxB,2BAA2B;CAC3B,yBAAyB;CACzB,oBAAoB;CACpB,mCAAmC;CACnC,oCAAoC;CACpC,iCAAiC;CACjC,sCAAsC;CACtC,oCAAoC;CACpC,qCAAqC;CAErC,kCAAkC;CAClC,qBAAqB;CAGrB,eAAe;CAGf,uBAAuB;CACvB,0BAA0B;CAC1B,0BAA0B;CAC1B,+BAA+B;CAC/B,qBAAqB;CACrB,gCAAgC;CAChC,uBAAuB;CACvB,uBAAuB;CAGvB,uBAAuB;CACvB,+BAA+B;CAC/B,iCAAiC;CACjC,2BAA2B;CAC3B,sBAAsB;CACtB,2BAA2B;CAC3B,sBAAsB;CACtB,sBAAsB;CACtB,uBAAuB;CACvB,oCAAoC;CACpC,mCAAmC;CAGnC,MAAM;CACN,cAAc;CACd,SAAS;CACT,WAAW;CACX,aAAa;CACb,kBAAkB;CAClB,iBAAiB;CACjB,gBAAgB;CAChB,iBAAiB;CACjB,0BAA0B;CAC1B,oBAAoB;CACpB,yBAAyB;CACzB,YAAY;CACZ,gBAAgB;CAGhB,iBAAiB;CACjB,kCAAkC;CAClC,UAAU;CACV,YAAY;CACZ,4BAA4B;CAC5B,yBAAyB;CACzB,sBAAsB;CACtB,2BAA2B;CAC3B,wBAAwB;CACxB,uBAAuB;CACvB,cAAc;CACd,0BAA0B;CAC1B,mCAAmC;CACnC,aAAa;CACb,uBAAuB;CACvB,qBAAqB;CACrB,cAAc;AAChB"}
+{"version":3,"file":"componentId-_tRhEv6W.cjs","names":[],"sources":["../src/constants/componentId.ts"],"sourcesContent":["export const ComponentId = {\n  WR_DB_MYSQL: 'keboola.wr-db-mysql',\n  WR_DB_PGSQL: 'keboola.wr-db-pgsql',\n  WR_DB_ORACLE: 'keboola.wr-db-oracle',\n  WR_DB_SNOWFLAKE: 'keboola.wr-db-snowflake',\n  WR_DB_SNOWFLAKE_GCS: 'keboola.wr-db-snowflake-gcs',\n  WR_DB_SNOWFLAKE_GCS_S3: 'keboola.wr-db-snowflake-gcs-s3',\n  WR_SNOWFLAKE_BLOB_STORAGE: 'keboola.wr-snowflake-blob-storage',\n  WR_LOOKER_V2: 'keboola.wr-looker-v2',\n  APP_DATA_GATEWAY: 'keboola.app-data-gateway',\n  WR_SYNAPSE: 'keboola.wr-synapse',\n  WR_REDSHIFT: 'keboola.wr-redshift-v2',\n  WR_DB_MSSQL: 'keboola.wr-db-mssql-v2',\n  WR_DB_HIVE: 'keboola.wr-db-hive',\n  WR_DB_IMPALA: 'keboola.wr-db-impala',\n  WR_PAIRITY: 'kds-team.wr-pairity',\n  WR_EXASOL: 'kds-team.wr-exasol',\n  WR_FIREBOLT: 'kds-team.wr-firebolt',\n  WR_HIVE_CSAS: 'kds-team.wr-hive-csas',\n  WR_THOUGHTSPOT: 'keboola.wr-thoughtspot',\n  WR_SISENSE: 'keboola.wr-sisense',\n  WR_AWS_S3: 'keboola.wr-aws-s3',\n  WR_STORAGE: 'keboola.wr-storage',\n  WR_GOOGLE_BIGQUERY_V2: 'keboola.wr-google-bigquery-v2',\n  SCHEDULER: 'keboola.scheduler',\n\n  // App-specific writers (bespoke credential blocks)\n  APP_SNOWFLAKE_DWH_MANAGER: 'keboola.app-snowflake-dwh-manager',\n  GOODDATA_WRITER: 'keboola.gooddata-writer',\n\n  // DB extractors (ex-db-generic family)\n  EX_DB_MYSQL: 'keboola.ex-db-mysql',\n  EX_DB_PGSQL: 'keboola.ex-db-pgsql',\n  EX_DB_REDSHIFT: 'keboola.ex-db-redshift',\n  EX_DB_FIREBIRD: 'keboola.ex-db-firebird',\n  EX_DB_DB2: 'keboola.ex-db-db2',\n  EX_DB_DB2_BATA: 'keboola.ex-db-db2-bata',\n  EX_DB_MSSQL: 'keboola.ex-db-mssql',\n  EX_DB_MSSQL_CDATA: 'keboola.ex-db-mssql-cdata',\n  EX_DB_ORACLE: 'keboola.ex-db-oracle',\n  EX_DB_SNOWFLAKE: 'keboola.ex-db-snowflake',\n  EX_DB_NETSUITE: 'keboola.ex-db-netsuite',\n  EX_DB_INFORMIX: 'keboola.ex-db-informix',\n  EX_DB_IMPALA: 'keboola.ex-db-impala',\n  EX_DB_HIVE: 'keboola.ex-db-hive',\n  EX_DB_HIVE_CSAS: 'keboola.ex-db-hive-csas',\n  EX_DB_HIVE_CSAS_TEST: 'keboola.ex-db-hive-csas-test',\n  EX_TERADATA: 'keboola.ex-teradata',\n  KDS_EX_NETSUITE: 'kds-team.ex-netsuite',\n  KDS_EX_PROGRESS_DB: 'kds-team.ex-progress-db',\n\n  // Google (OAuth) components\n  EX_GOOGLE_ADS: 'keboola.ex-google-ads',\n  EX_GOOGLE_ANALYTICS_V4: 'keboola.ex-google-analytics-v4',\n  WR_GOOGLE_DRIVE: 'keboola.wr-google-drive',\n  WR_GOOGLE_SHEETS: 'keboola.wr-google-sheets',\n\n  // Meta (OAuth) components\n  EX_FACEBOOK: 'keboola.ex-facebook',\n  EX_FACEBOOK_ADS: 'keboola.ex-facebook-ads',\n  EX_FACEBOOK_ADS_V2: 'keboola.ex-facebook-ads-v2',\n  EX_FACEBOOK_PAGES: 'keboola.ex-facebook-pages',\n  EX_INSTAGRAM: 'keboola.ex-instagram',\n  EX_INSTAGRAM_V2: 'keboola.ex-instagram-v2',\n\n  // Microsoft OneDrive (OAuth) components\n  EX_ONEDRIVE: 'keboola.ex-onedrive',\n  WR_ONEDRIVE: 'keboola.wr-onedrive',\n\n  // File/connection extractors (ex family, no shared credential base)\n  EX_HTTP: 'keboola.ex-http',\n  EX_FTP: 'keboola.ex-ftp',\n  EX_FTP_CSAS: 'keboola.ex-ftp-csas',\n  EX_EMAIL_ATTACHMENTS: 'keboola.ex-email-attachments',\n  EX_AWS_S3: 'keboola.ex-aws-s3',\n  KDS_EX_AZURE_BLOB_STORAGE_V2: 'kds-team.ex-azure-blob-storage-v2',\n  KDS_EX_AZURE_DATA_LAKE_GEN2: 'kds-team.ex-azure-data-lake-gen2',\n  APIFY: 'apify.apify',\n  EX_GENERIC_V2: 'ex-generic-v2',\n  EX_GOOGLE_BIGQUERY_V2: 'keboola.ex-google-bigquery-v2',\n  EX_STORAGE: 'keboola.ex-storage',\n\n  // Data-app family — a git repository lives under `parameters.dataApp.git`\n  DATA_APPS: 'keboola.data-apps',\n  SANDBOXES: 'keboola.sandboxes',\n\n  // dbt transformations — a git repository lives under `parameters.git`\n  DBT_TEST_CORE_KEY_PAIR: 'keboola-test.dbt-core-key-pair',\n  DBT_TEST_REMOTE_SNOWFLAKE: 'keboola-test.dbt-remote-snowflake',\n  DBT_TEST_TRANSFORMATION: 'keboola-test.dbt-transformation',\n  DBT_TRANSFORMATION: 'keboola.dbt-transformation',\n  DBT_TRANSFORMATION_LOCAL_BIGQUERY: 'keboola.dbt-transformation-local-bigquery',\n  DBT_TRANSFORMATION_REMOTE_BIGQUERY: 'keboola.dbt-transformation-remote-bigquery',\n  DBT_TRANSFORMATION_REMOTE_MSSQL: 'keboola.dbt-transformation-remote-mssql',\n  DBT_TRANSFORMATION_REMOTE_POSTGRESQL: 'keboola.dbt-transformation-remote-postgresql',\n  DBT_TRANSFORMATION_REMOTE_REDSHIFT: 'keboola.dbt-transformation-remote-redshift',\n  DBT_TRANSFORMATION_REMOTE_SNOWFLAKE: 'keboola.dbt-transformation-remote-snowflake',\n\n  APP_CONFIGURATION_MIGRATION_TOOL: 'keboola.app-configuration-migration-tool',\n  FLOW_MIGRATION_TOOL: 'keboola.flow-migration-tool',\n\n  // Utility components, called only for their sync actions\n  SSH_KEYGEN_V2: 'keboola.ssh-keygen-v2',\n\n  // Transformations\n  LEGACY_TRANSFORMATION: 'keboola.legacy-transformation',\n  SNOWFLAKE_TRANSFORMATION: 'keboola.snowflake-transformation',\n  PYTHON_TRANSFORMATION_V2: 'keboola.python-transformation-v2',\n  CSAS_PYTHON_TRANSFORMATION_V2: 'keboola.csas-python-transformation-v2',\n  R_TRANSFORMATION_V2: 'keboola.r-transformation-v2',\n  GOOGLE_BIGQUERY_TRANSFORMATION: 'keboola.google-bigquery-transformation',\n  DUCKDB_TRANSFORMATION: 'keboola.duckdb-transformation',\n  ORACLE_TRANSFORMATION: 'keboola.oracle-transformation',\n\n  // Processors\n  PROCESSOR_SPLIT_TABLE: 'keboola.processor-split-table',\n  PROCESSOR_ADD_FILENAME_COLUMN: 'keboola.processor-add-filename-column',\n  PROCESSOR_ADD_ROW_NUMBER_COLUMN: 'keboola.processor-add-row-number-column',\n  PROCESSOR_CREATE_MANIFEST: 'keboola.processor-create-manifest',\n  PROCESSOR_DECOMPRESS: 'keboola.processor-decompress',\n  PROCESSOR_FLATTEN_FOLDERS: 'keboola.processor-flatten-folders',\n  PROCESSOR_MOVE_FILES: 'keboola.processor-move-files',\n  PROCESSOR_SKIP_LINES: 'keboola.processor-skip-lines',\n  KDS_PROCESSOR_CSV2XLS: 'kds-team.processor-csv2xls',\n  KDS_PROCESSOR_CREATE_FILE_MANIFEST: 'kds-team.processor-create-file-manifest',\n  KDS_PROCESSOR_CONVERT_COLUMN_CASE: 'kds-team.processor-convert-column-case',\n\n  // Platform components\n  FLOW: 'keboola.flow',\n  ORCHESTRATOR: 'keboola.orchestrator',\n  STORAGE: 'keboola.storage', // component to get icon and name\n  VARIABLES: 'keboola.variables',\n  SHARED_CODE: 'keboola.shared-code',\n  DATA_APP_CONTROL: 'keboola.data-app-control',\n  MCP_SERVER_TOOL: 'keboola.mcp-server-tool',\n  PROJECT_BACKUP: 'keboola.project-backup',\n  KEBOOLA_AS_CODE: 'keboola.keboola-as-code',\n  APP_MERGE_BRANCH_STORAGE: 'keboola.app-merge-branch-storage',\n  SAPI_MERGED_EXPORT: 'keboola.sapi-merged-export',\n  SLICED_FILES_DOWNLOADER: 'keboola.sliced-files-downloader',\n  CSV_IMPORT: 'keboola.csv-import',\n  EX_SAMPLE_DATA: 'keboola.ex-sample-data',\n\n  // Other components\n  EX_GOOGLE_DRIVE: 'keboola.ex-google-drive',\n  EX_GOOGLE_BIGQUERY_V2_AVRO_FILES: 'keboola.ex-google-bigquery-v2-avro-files',\n  EX_GMAIL: 'keboola.ex-gmail',\n  EX_MONGODB: 'keboola.ex-mongodb',\n  EX_SNOWFLAKE_QUERY_HISTORY: 'keboola.ex-snowflake-query-history',\n  EX_SNOWFLAKE_PARAMETERS: 'keboola.ex-snowflake-parameters',\n  APAC_EX_GMAIL_ATTACHMENTS: 'apac.ex-gmail-attachments',\n  GENEEA_NLP_ANALYSIS_V2: 'geneea.nlp-analysis-v2',\n  KDS_APP_CUSTOM_PYTHON: 'kds-team.app-custom-python',\n  KDS_EX_DV360: 'kds-team.ex-dv360',\n  KDS_EX_YOUTUBE_ANALYTICS: 'kds-team.ex-youtube-analytics',\n  KDS_EX_AWS_COST_AND_USAGE_REPORTS: 'kds-team.ex-aws-cost-and-usage-reports',\n  KDS_EX_ZOHO: 'kds-team.ex-zoho',\n  SMETRIC_EX_SIMPRO_API: 'smetric.ex-simpro-api',\n  SMETRIC_EX_VEND_API: 'smetric.ex-vend-api',\n  TDE_EXPORTER: 'tde-exporter',\n} as const;\n\nexport type ComponentId = (typeof ComponentId)[keyof typeof ComponentId];\n"],"mappings":";AAAA,MAAa,cAAc;CACzB,aAAa;CACb,aAAa;CACb,cAAc;CACd,iBAAiB;CACjB,qBAAqB;CACrB,wBAAwB;CACxB,2BAA2B;CAC3B,cAAc;CACd,kBAAkB;CAClB,YAAY;CACZ,aAAa;CACb,aAAa;CACb,YAAY;CACZ,cAAc;CACd,YAAY;CACZ,WAAW;CACX,aAAa;CACb,cAAc;CACd,gBAAgB;CAChB,YAAY;CACZ,WAAW;CACX,YAAY;CACZ,uBAAuB;CACvB,WAAW;CAGX,2BAA2B;CAC3B,iBAAiB;CAGjB,aAAa;CACb,aAAa;CACb,gBAAgB;CAChB,gBAAgB;CAChB,WAAW;CACX,gBAAgB;CAChB,aAAa;CACb,mBAAmB;CACnB,cAAc;CACd,iBAAiB;CACjB,gBAAgB;CAChB,gBAAgB;CAChB,cAAc;CACd,YAAY;CACZ,iBAAiB;CACjB,sBAAsB;CACtB,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CAGpB,eAAe;CACf,wBAAwB;CACxB,iBAAiB;CACjB,kBAAkB;CAGlB,aAAa;CACb,iBAAiB;CACjB,oBAAoB;CACpB,mBAAmB;CACnB,cAAc;CACd,iBAAiB;CAGjB,aAAa;CACb,aAAa;CAGb,SAAS;CACT,QAAQ;CACR,aAAa;CACb,sBAAsB;CACtB,WAAW;CACX,8BAA8B;CAC9B,6BAA6B;CAC7B,OAAO;CACP,eAAe;CACf,uBAAuB;CACvB,YAAY;CAGZ,WAAW;CACX,WAAW;CAGX,wBAAwB;CACxB,2BAA2B;CAC3B,yBAAyB;CACzB,oBAAoB;CACpB,mCAAmC;CACnC,oCAAoC;CACpC,iCAAiC;CACjC,sCAAsC;CACtC,oCAAoC;CACpC,qCAAqC;CAErC,kCAAkC;CAClC,qBAAqB;CAGrB,eAAe;CAGf,uBAAuB;CACvB,0BAA0B;CAC1B,0BAA0B;CAC1B,+BAA+B;CAC/B,qBAAqB;CACrB,gCAAgC;CAChC,uBAAuB;CACvB,uBAAuB;CAGvB,uBAAuB;CACvB,+BAA+B;CAC/B,iCAAiC;CACjC,2BAA2B;CAC3B,sBAAsB;CACtB,2BAA2B;CAC3B,sBAAsB;CACtB,sBAAsB;CACtB,uBAAuB;CACvB,oCAAoC;CACpC,mCAAmC;CAGnC,MAAM;CACN,cAAc;CACd,SAAS;CACT,WAAW;CACX,aAAa;CACb,kBAAkB;CAClB,iBAAiB;CACjB,gBAAgB;CAChB,iBAAiB;CACjB,0BAA0B;CAC1B,oBAAoB;CACpB,yBAAyB;CACzB,YAAY;CACZ,gBAAgB;CAGhB,iBAAiB;CACjB,kCAAkC;CAClC,UAAU;CACV,YAAY;CACZ,4BAA4B;CAC5B,yBAAyB;CACzB,2BAA2B;CAC3B,wBAAwB;CACxB,uBAAuB;CACvB,cAAc;CACd,0BAA0B;CAC1B,mCAAmC;CACnC,aAAa;CACb,uBAAuB;CACvB,qBAAqB;CACrB,cAAc;AAChB"}

package/dist/{configurations-WI8H4zLk.cjs → configurations-BM63ep1s.cjs}

@@ -1,4 +1,4 @@
-const require_admin = require("./admin-Di-MmGFP.cjs");
+const require_admin = require("./admin-BZ7knTd0.cjs");
 // src/domain/permissions/configurations.ts
 const meetsBaseRule = (token, ctx) => ctx.isDevModeActive ? require_admin.isDeveloperOrReviewer(token) : require_admin.isProductionManager(token);
 const baseDenialReason = (ctx) => ctx.isDevModeActive ? "dev branch requires developer or reviewer role" : "production requires productionManager role";
@@ -117,4 +117,4 @@ Object.defineProperty(exports, "canUpdateConfiguration", {
 	}
 });
 
-//# sourceMappingURL=configurations-WI8H4zLk.cjs.map
+//# sourceMappingURL=configurations-BM63ep1s.cjs.map

package/dist/{configurations-WI8H4zLk.cjs.map → configurations-BM63ep1s.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"configurations-WI8H4zLk.cjs","names":["isDeveloperOrReviewer","isProductionManager","isAdmin","PermissionDeniedError"],"sources":["../src/domain/permissions/configurations.ts"],"sourcesContent":["/**\n * @module domain/permissions/configurations\n *\n * - Dev branch → developer or reviewer; production → production manager.\n * - Purge is admin-only in any branch mode; its `ctx` is ignored.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\n\nimport { isAdmin, isDeveloperOrReviewer, isProductionManager } from './admin';\nimport { PermissionDeniedError } from './errors';\n\n/**\n * Caller-supplied context for configuration predicates.\n *\n * @property isDevModeActive — `true` on any branch other than the default (`isDefault`) one.\n */\nexport type ConfigurationCtx = {\n  isDevModeActive: boolean;\n};\n\nconst meetsBaseRule = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  ctx.isDevModeActive ? isDeveloperOrReviewer(token) : isProductionManager(token);\n\nconst baseDenialReason = (ctx: ConfigurationCtx): string =>\n  ctx.isDevModeActive\n    ? 'dev branch requires developer or reviewer role'\n    : 'production requires productionManager role';\n\nexport const canCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => boolean = (\n  token,\n) => isAdmin(token);\n\nexport const canAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const assertCanCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCreateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'create-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canUpdateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'update-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCopyConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'copy-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canMigrateFromTemplate(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'migrate-from-template',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanPurgeConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canPurgeConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'purge-configuration',\n      reason: 'purge requires admin role',\n    });\n  }\n};\n\nexport const assertCanAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canAssignFolder(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'assign-folder',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n"],"mappings":";;AAoBA,MAAM,iBAAiB,OAAqB,QAC1C,IAAI,kBAAkBA,cAAAA,sBAAsB,KAAK,IAAIC,cAAAA,oBAAoB,KAAK;AAEhF,MAAM,oBAAoB,QACxB,IAAI,kBACA,mDACA;AAEN,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,wBAAwB,OAAqB,QACxD,cAAc,OAAO,GAAG;AAE1B,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,yBACX,UACGC,cAAAA,QAAQ,KAAK;AAElB,MAAa,mBAAmB,OAAqB,QACnD,cAAc,OAAO,GAAG;AAE1B,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAIC,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,8BAA8B,OAAqB,QAAgC;CAC9F,IAAI,CAAC,qBAAqB,OAAO,GAAG,GAClC,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,+BAA+B,OAAqB,QAAgC;CAC/F,IAAI,CAAC,sBAAsB,OAAO,GAAG,GACnC,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ;CACV,CAAC;AAEL;AAEA,MAAa,yBAAyB,OAAqB,QAAgC;CACzF,IAAI,CAAC,gBAAgB,OAAO,GAAG,GAC7B,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL"}
+{"version":3,"file":"configurations-BM63ep1s.cjs","names":["isDeveloperOrReviewer","isProductionManager","isAdmin","PermissionDeniedError"],"sources":["../src/domain/permissions/configurations.ts"],"sourcesContent":["/**\n * @module domain/permissions/configurations\n *\n * - Dev branch → developer or reviewer; production → production manager.\n * - Purge is admin-only in any branch mode; its `ctx` is ignored.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\n\nimport { isAdmin, isDeveloperOrReviewer, isProductionManager } from './admin';\nimport { PermissionDeniedError } from './errors';\n\n/**\n * Caller-supplied context for configuration predicates.\n *\n * @property isDevModeActive — `true` on any branch other than the default (`isDefault`) one.\n */\nexport type ConfigurationCtx = {\n  isDevModeActive: boolean;\n};\n\nconst meetsBaseRule = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  ctx.isDevModeActive ? isDeveloperOrReviewer(token) : isProductionManager(token);\n\nconst baseDenialReason = (ctx: ConfigurationCtx): string =>\n  ctx.isDevModeActive\n    ? 'dev branch requires developer or reviewer role'\n    : 'production requires productionManager role';\n\nexport const canCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => boolean = (\n  token,\n) => isAdmin(token);\n\nexport const canAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const assertCanCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCreateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'create-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canUpdateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'update-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCopyConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'copy-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canMigrateFromTemplate(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'migrate-from-template',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanPurgeConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canPurgeConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'purge-configuration',\n      reason: 'purge requires admin role',\n    });\n  }\n};\n\nexport const assertCanAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canAssignFolder(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'assign-folder',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n"],"mappings":";;AAoBA,MAAM,iBAAiB,OAAqB,QAC1C,IAAI,kBAAkBA,cAAAA,sBAAsB,KAAK,IAAIC,cAAAA,oBAAoB,KAAK;AAEhF,MAAM,oBAAoB,QACxB,IAAI,kBACA,mDACA;AAEN,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,wBAAwB,OAAqB,QACxD,cAAc,OAAO,GAAG;AAE1B,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,yBACX,UACGC,cAAAA,QAAQ,KAAK;AAElB,MAAa,mBAAmB,OAAqB,QACnD,cAAc,OAAO,GAAG;AAE1B,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAIC,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,8BAA8B,OAAqB,QAAgC;CAC9F,IAAI,CAAC,qBAAqB,OAAO,GAAG,GAClC,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,+BAA+B,OAAqB,QAAgC;CAC/F,IAAI,CAAC,sBAAsB,OAAO,GAAG,GACnC,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ;CACV,CAAC;AAEL;AAEA,MAAa,yBAAyB,OAAqB,QAAgC;CACzF,IAAI,CAAC,gBAAgB,OAAO,GAAG,GAC7B,MAAM,IAAIA,cAAAA,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL"}

package/dist/{configurations-Cd6Nsox-.js → configurations-BqvtIQm4.js}

@@ -1,4 +1,4 @@
-import { c as isAdmin, h as PermissionDeniedError, p as isProductionManager, u as isDeveloperOrReviewer } from "./admin-CbMOsfgs.js";
+import { d as isDeveloperOrReviewer, g as PermissionDeniedError, l as isAdmin, m as isProductionManager } from "./admin-xFfHSZHQ.js";
 // src/domain/permissions/configurations.ts
 const meetsBaseRule = (token, ctx) => ctx.isDevModeActive ? isDeveloperOrReviewer(token) : isProductionManager(token);
 const baseDenialReason = (ctx) => ctx.isDevModeActive ? "dev branch requires developer or reviewer role" : "production requires productionManager role";
@@ -46,4 +46,4 @@ const assertCanAssignFolder = (token, ctx) => {
 };
 export { assertCanPurgeConfiguration as a, canCopyConfiguration as c, canPurgeConfiguration as d, canUpdateConfiguration as f, assertCanMigrateFromTemplate as i, canCreateConfiguration as l, assertCanCopyConfiguration as n, assertCanUpdateConfiguration as o, assertCanCreateConfiguration as r, canAssignFolder as s, assertCanAssignFolder as t, canMigrateFromTemplate as u };
 
-//# sourceMappingURL=configurations-Cd6Nsox-.js.map
+//# sourceMappingURL=configurations-BqvtIQm4.js.map

package/dist/{configurations-Cd6Nsox-.js.map → configurations-BqvtIQm4.js.map}

@@ -1 +1 @@
-{"version":3,"file":"configurations-Cd6Nsox-.js","names":[],"sources":["../src/domain/permissions/configurations.ts"],"sourcesContent":["/**\n * @module domain/permissions/configurations\n *\n * - Dev branch → developer or reviewer; production → production manager.\n * - Purge is admin-only in any branch mode; its `ctx` is ignored.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\n\nimport { isAdmin, isDeveloperOrReviewer, isProductionManager } from './admin';\nimport { PermissionDeniedError } from './errors';\n\n/**\n * Caller-supplied context for configuration predicates.\n *\n * @property isDevModeActive — `true` on any branch other than the default (`isDefault`) one.\n */\nexport type ConfigurationCtx = {\n  isDevModeActive: boolean;\n};\n\nconst meetsBaseRule = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  ctx.isDevModeActive ? isDeveloperOrReviewer(token) : isProductionManager(token);\n\nconst baseDenialReason = (ctx: ConfigurationCtx): string =>\n  ctx.isDevModeActive\n    ? 'dev branch requires developer or reviewer role'\n    : 'production requires productionManager role';\n\nexport const canCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => boolean = (\n  token,\n) => isAdmin(token);\n\nexport const canAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const assertCanCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCreateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'create-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canUpdateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'update-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCopyConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'copy-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canMigrateFromTemplate(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'migrate-from-template',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanPurgeConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canPurgeConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'purge-configuration',\n      reason: 'purge requires admin role',\n    });\n  }\n};\n\nexport const assertCanAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canAssignFolder(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'assign-folder',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n"],"mappings":";;AAoBA,MAAM,iBAAiB,OAAqB,QAC1C,IAAI,kBAAkB,sBAAsB,KAAK,IAAI,oBAAoB,KAAK;AAEhF,MAAM,oBAAoB,QACxB,IAAI,kBACA,mDACA;AAEN,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,wBAAwB,OAAqB,QACxD,cAAc,OAAO,GAAG;AAE1B,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,yBACX,UACG,QAAQ,KAAK;AAElB,MAAa,mBAAmB,OAAqB,QACnD,cAAc,OAAO,GAAG;AAE1B,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,8BAA8B,OAAqB,QAAgC;CAC9F,IAAI,CAAC,qBAAqB,OAAO,GAAG,GAClC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,+BAA+B,OAAqB,QAAgC;CAC/F,IAAI,CAAC,sBAAsB,OAAO,GAAG,GACnC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ;CACV,CAAC;AAEL;AAEA,MAAa,yBAAyB,OAAqB,QAAgC;CACzF,IAAI,CAAC,gBAAgB,OAAO,GAAG,GAC7B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL"}
+{"version":3,"file":"configurations-BqvtIQm4.js","names":[],"sources":["../src/domain/permissions/configurations.ts"],"sourcesContent":["/**\n * @module domain/permissions/configurations\n *\n * - Dev branch → developer or reviewer; production → production manager.\n * - Purge is admin-only in any branch mode; its `ctx` is ignored.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\n\nimport { isAdmin, isDeveloperOrReviewer, isProductionManager } from './admin';\nimport { PermissionDeniedError } from './errors';\n\n/**\n * Caller-supplied context for configuration predicates.\n *\n * @property isDevModeActive — `true` on any branch other than the default (`isDefault`) one.\n */\nexport type ConfigurationCtx = {\n  isDevModeActive: boolean;\n};\n\nconst meetsBaseRule = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  ctx.isDevModeActive ? isDeveloperOrReviewer(token) : isProductionManager(token);\n\nconst baseDenialReason = (ctx: ConfigurationCtx): string =>\n  ctx.isDevModeActive\n    ? 'dev branch requires developer or reviewer role'\n    : 'production requires productionManager role';\n\nexport const canCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => boolean = (\n  token,\n) => isAdmin(token);\n\nexport const canAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const assertCanCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCreateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'create-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canUpdateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'update-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCopyConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'copy-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canMigrateFromTemplate(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'migrate-from-template',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanPurgeConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canPurgeConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'purge-configuration',\n      reason: 'purge requires admin role',\n    });\n  }\n};\n\nexport const assertCanAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canAssignFolder(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'assign-folder',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n"],"mappings":";;AAoBA,MAAM,iBAAiB,OAAqB,QAC1C,IAAI,kBAAkB,sBAAsB,KAAK,IAAI,oBAAoB,KAAK;AAEhF,MAAM,oBAAoB,QACxB,IAAI,kBACA,mDACA;AAEN,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,wBAAwB,OAAqB,QACxD,cAAc,OAAO,GAAG;AAE1B,MAAa,0BAA0B,OAAqB,QAC1D,cAAc,OAAO,GAAG;AAE1B,MAAa,yBACX,UACG,QAAQ,KAAK;AAElB,MAAa,mBAAmB,OAAqB,QACnD,cAAc,OAAO,GAAG;AAE1B,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,8BAA8B,OAAqB,QAAgC;CAC9F,IAAI,CAAC,qBAAqB,OAAO,GAAG,GAClC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,gCAAgC,OAAqB,QAAgC;CAChG,IAAI,CAAC,uBAAuB,OAAO,GAAG,GACpC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL;AAEA,MAAa,+BAA+B,OAAqB,QAAgC;CAC/F,IAAI,CAAC,sBAAsB,OAAO,GAAG,GACnC,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ;CACV,CAAC;AAEL;AAEA,MAAa,yBAAyB,OAAqB,QAAgC;CACzF,IAAI,CAAC,gBAAgB,OAAO,GAAG,GAC7B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,iBAAiB,GAAG;CAC9B,CAAC;AAEL"}

package/dist/constants/index.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_serviceIds = require("../serviceIds-Bg1pWiPE.cjs");
-const require_componentId = require("../componentId-olp0tltf.cjs");
+const require_componentId = require("../componentId-_tRhEv6W.cjs");
 const require_constants = require("../constants-Day8CU5i.cjs");
 const require_adminRoles = require("../adminRoles-DnFpO_2W.cjs");
 exports.AdminFeature = require_constants.AdminFeature;

package/dist/constants/index.d.cts

@@ -1,5 +1,5 @@
 import { ai as ManageErrorCode } from "../index-FrsEkDvX.cjs";
-import { a as STACKS, c as ProjectFeature, i as Provider, l as ComponentId, n as Continent, o as AdminFeature, r as KeboolaStack, s as StackFeature, t as URLS, u as ServiceId } from "../index-BNwo-zaJ.cjs";
+import { a as STACKS, c as ProjectFeature, i as Provider, l as ComponentId, n as Continent, o as AdminFeature, r as KeboolaStack, s as StackFeature, t as URLS, u as ServiceId } from "../index-Cd0naVic.cjs";
 import { t as AdminRole } from "../adminRoles-BTKVwEy8.cjs";
 import { t as Backend } from "../backends-BHotIdL0.cjs";
 export { AdminFeature, AdminRole, Backend, ComponentId, Continent, type KeboolaStack, ManageErrorCode, ProjectFeature, Provider, STACKS, ServiceId, StackFeature, URLS };

package/dist/constants/index.d.ts

@@ -1,5 +1,5 @@
 import { ai as ManageErrorCode } from "../index-FrsEkDvX.js";
-import { a as STACKS, c as ProjectFeature, i as Provider, l as ComponentId, n as Continent, o as AdminFeature, r as KeboolaStack, s as StackFeature, t as URLS, u as ServiceId } from "../index-CwUurckF.js";
+import { a as STACKS, c as ProjectFeature, i as Provider, l as ComponentId, n as Continent, o as AdminFeature, r as KeboolaStack, s as StackFeature, t as URLS, u as ServiceId } from "../index-DbStyQKc.js";
 import { t as AdminRole } from "../adminRoles-Cm513r1G.js";
 import { t as Backend } from "../backends-BHotIdL0.js";
 export { AdminFeature, AdminRole, Backend, ComponentId, Continent, type KeboolaStack, ManageErrorCode, ProjectFeature, Provider, STACKS, ServiceId, StackFeature, URLS };

package/dist/constants/index.js

@@ -1,5 +1,5 @@
 import { t as ServiceId } from "../serviceIds-RAVtP4nK.js";
-import { t as ComponentId } from "../componentId-DZP1rBix.js";
+import { t as ComponentId } from "../componentId-Cps6WBy1.js";
 import { a as Backend, c as ProjectFeature, i as STACKS, l as ManageErrorCode, n as Continent, o as AdminFeature, r as Provider, s as StackFeature, t as URLS } from "../constants-DLPkpnGv.js";
 import { t as AdminRole } from "../adminRoles-asa-MhDD.js";
 export { AdminFeature, AdminRole, Backend, ComponentId, Continent, ManageErrorCode, ProjectFeature, Provider, STACKS, ServiceId, StackFeature, URLS };

package/dist/domain/permissions/index.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_admin = require("../../admin-Di-MmGFP.cjs");
-const require_project = require("../../project-Onf-IcPW.cjs");
-const require_configurations = require("../../configurations-WI8H4zLk.cjs");
+const require_admin = require("../../admin-BZ7knTd0.cjs");
+const require_project = require("../../project-BQ2oD6IW.cjs");
+const require_configurations = require("../../configurations-BM63ep1s.cjs");
 exports.PermissionDeniedError = require_admin.PermissionDeniedError;
 exports.assertCanAdmin = require_admin.assertCanAdmin;
 exports.assertCanAdminOrShare = require_admin.assertCanAdminOrShare;
@@ -25,6 +25,7 @@ exports.canPurgeConfiguration = require_configurations.canPurgeConfiguration;
 exports.canUpdateConfiguration = require_configurations.canUpdateConfiguration;
 exports.canWriteKaiSettings = require_admin.canWriteKaiSettings;
 exports.canWriteKaiSpendCaps = require_project.canWriteKaiSpendCaps;
+exports.canWriteSecurityPolicies = require_admin.canWriteSecurityPolicies;
 exports.canWriteSemanticLayer = require_admin.canWriteSemanticLayer;
 exports.hasAdminFeature = require_project.hasAdminFeature;
 exports.hasFeature = require_project.hasFeature;

package/dist/domain/permissions/index.d.cts

@@ -51,6 +51,14 @@ declare const assertCanWriteKaiSettings: (token: StorageToken) => void;
  * - Organization-scope promotion is left to the metastore's 403.
  */
 declare const canWriteSemanticLayer: (token: StorageToken) => boolean;
+/**
+ * Whether this token may author row- and column-level security policies in the metastore.
+ *
+ * - Reads `token.admin.role` as the metastore does: `admin`, `productionManager` or `share`.
+ * - A limited token has no `admin` block, so it never matches.
+ * - `targeted` scope only: `organization` scope and grants are organization-admin, a metastore 403.
+ */
+declare const canWriteSecurityPolicies: (token: StorageToken) => boolean;
 declare const assertCanAdmin: (token: StorageToken) => void;
 declare const assertCanAdminOrShare: (token: StorageToken) => void;
 declare const assertCanProductionManage: (token: StorageToken) => void;
@@ -99,5 +107,5 @@ declare const assertCanCopyConfiguration: (token: StorageToken, ctx: Configurati
 declare const assertCanMigrateFromTemplate: (token: StorageToken, ctx: ConfigurationCtx) => void;
 declare const assertCanPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => void;
 declare const assertCanAssignFolder: (token: StorageToken, ctx: ConfigurationCtx) => void;
-export { ConfigurationCtx, PermissionDeniedError, assertCanAdmin, assertCanAdminOrShare, assertCanAdministerOrganization, assertCanAssignFolder, assertCanCopyConfiguration, assertCanCreateConfiguration, assertCanDevelopOrReview, assertCanMigrateFromTemplate, assertCanProductionManage, assertCanPurgeConfiguration, assertCanUpdateConfiguration, assertCanWriteKaiSettings, assertCanWriteKaiSpendCaps, canAssignFolder, canCopyConfiguration, canCreateConfiguration, canListSharingTargets, canMigrateFromTemplate, canPurgeConfiguration, canUpdateConfiguration, canWriteKaiSettings, canWriteKaiSpendCaps, canWriteSemanticLayer, hasAdminFeature, hasFeature, isAdmin, isAdminOrShare, isDeveloperOrReviewer, isKaiSettingsWriterRole, isKnownAdminRole, isOrganizationAdmin, isOrganizationMember, isProductionManager, isReadOnlyRole };
+export { ConfigurationCtx, PermissionDeniedError, assertCanAdmin, assertCanAdminOrShare, assertCanAdministerOrganization, assertCanAssignFolder, assertCanCopyConfiguration, assertCanCreateConfiguration, assertCanDevelopOrReview, assertCanMigrateFromTemplate, assertCanProductionManage, assertCanPurgeConfiguration, assertCanUpdateConfiguration, assertCanWriteKaiSettings, assertCanWriteKaiSpendCaps, canAssignFolder, canCopyConfiguration, canCreateConfiguration, canListSharingTargets, canMigrateFromTemplate, canPurgeConfiguration, canUpdateConfiguration, canWriteKaiSettings, canWriteKaiSpendCaps, canWriteSecurityPolicies, canWriteSemanticLayer, hasAdminFeature, hasFeature, isAdmin, isAdminOrShare, isDeveloperOrReviewer, isKaiSettingsWriterRole, isKnownAdminRole, isOrganizationAdmin, isOrganizationMember, isProductionManager, isReadOnlyRole };
 //# sourceMappingURL=index.d.cts.map

package/dist/domain/permissions/index.d.ts

@@ -51,6 +51,14 @@ declare const assertCanWriteKaiSettings: (token: StorageToken) => void;
  * - Organization-scope promotion is left to the metastore's 403.
  */
 declare const canWriteSemanticLayer: (token: StorageToken) => boolean;
+/**
+ * Whether this token may author row- and column-level security policies in the metastore.
+ *
+ * - Reads `token.admin.role` as the metastore does: `admin`, `productionManager` or `share`.
+ * - A limited token has no `admin` block, so it never matches.
+ * - `targeted` scope only: `organization` scope and grants are organization-admin, a metastore 403.
+ */
+declare const canWriteSecurityPolicies: (token: StorageToken) => boolean;
 declare const assertCanAdmin: (token: StorageToken) => void;
 declare const assertCanAdminOrShare: (token: StorageToken) => void;
 declare const assertCanProductionManage: (token: StorageToken) => void;
@@ -99,5 +107,5 @@ declare const assertCanCopyConfiguration: (token: StorageToken, ctx: Configurati
 declare const assertCanMigrateFromTemplate: (token: StorageToken, ctx: ConfigurationCtx) => void;
 declare const assertCanPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => void;
 declare const assertCanAssignFolder: (token: StorageToken, ctx: ConfigurationCtx) => void;
-export { ConfigurationCtx, PermissionDeniedError, assertCanAdmin, assertCanAdminOrShare, assertCanAdministerOrganization, assertCanAssignFolder, assertCanCopyConfiguration, assertCanCreateConfiguration, assertCanDevelopOrReview, assertCanMigrateFromTemplate, assertCanProductionManage, assertCanPurgeConfiguration, assertCanUpdateConfiguration, assertCanWriteKaiSettings, assertCanWriteKaiSpendCaps, canAssignFolder, canCopyConfiguration, canCreateConfiguration, canListSharingTargets, canMigrateFromTemplate, canPurgeConfiguration, canUpdateConfiguration, canWriteKaiSettings, canWriteKaiSpendCaps, canWriteSemanticLayer, hasAdminFeature, hasFeature, isAdmin, isAdminOrShare, isDeveloperOrReviewer, isKaiSettingsWriterRole, isKnownAdminRole, isOrganizationAdmin, isOrganizationMember, isProductionManager, isReadOnlyRole };
+export { ConfigurationCtx, PermissionDeniedError, assertCanAdmin, assertCanAdminOrShare, assertCanAdministerOrganization, assertCanAssignFolder, assertCanCopyConfiguration, assertCanCreateConfiguration, assertCanDevelopOrReview, assertCanMigrateFromTemplate, assertCanProductionManage, assertCanPurgeConfiguration, assertCanUpdateConfiguration, assertCanWriteKaiSettings, assertCanWriteKaiSpendCaps, canAssignFolder, canCopyConfiguration, canCreateConfiguration, canListSharingTargets, canMigrateFromTemplate, canPurgeConfiguration, canUpdateConfiguration, canWriteKaiSettings, canWriteKaiSpendCaps, canWriteSecurityPolicies, canWriteSemanticLayer, hasAdminFeature, hasFeature, isAdmin, isAdminOrShare, isDeveloperOrReviewer, isKaiSettingsWriterRole, isKnownAdminRole, isOrganizationAdmin, isOrganizationMember, isProductionManager, isReadOnlyRole };
 //# sourceMappingURL=index.d.ts.map

package/dist/domain/permissions/index.js

@@ -1,4 +1,4 @@
-import { a as assertCanWriteKaiSettings, c as isAdmin, d as isKaiSettingsWriterRole, f as isKnownAdminRole, h as PermissionDeniedError, i as assertCanProductionManage, l as isAdminOrShare, m as isReadOnlyRole, n as assertCanAdminOrShare, o as canWriteKaiSettings, p as isProductionManager, r as assertCanDevelopOrReview, s as canWriteSemanticLayer, t as assertCanAdmin, u as isDeveloperOrReviewer } from "../../admin-CbMOsfgs.js";
-import { a as assertCanAdministerOrganization, c as isOrganizationAdmin, i as canListSharingTargets, l as isOrganizationMember, n as hasAdminFeature, o as assertCanWriteKaiSpendCaps, r as hasFeature, s as canWriteKaiSpendCaps } from "../../project-DmuC0bMK.js";
-import { a as assertCanPurgeConfiguration, c as canCopyConfiguration, d as canPurgeConfiguration, f as canUpdateConfiguration, i as assertCanMigrateFromTemplate, l as canCreateConfiguration, n as assertCanCopyConfiguration, o as assertCanUpdateConfiguration, r as assertCanCreateConfiguration, s as canAssignFolder, t as assertCanAssignFolder, u as canMigrateFromTemplate } from "../../configurations-Cd6Nsox-.js";
-export { PermissionDeniedError, assertCanAdmin, assertCanAdminOrShare, assertCanAdministerOrganization, assertCanAssignFolder, assertCanCopyConfiguration, assertCanCreateConfiguration, assertCanDevelopOrReview, assertCanMigrateFromTemplate, assertCanProductionManage, assertCanPurgeConfiguration, assertCanUpdateConfiguration, assertCanWriteKaiSettings, assertCanWriteKaiSpendCaps, canAssignFolder, canCopyConfiguration, canCreateConfiguration, canListSharingTargets, canMigrateFromTemplate, canPurgeConfiguration, canUpdateConfiguration, canWriteKaiSettings, canWriteKaiSpendCaps, canWriteSemanticLayer, hasAdminFeature, hasFeature, isAdmin, isAdminOrShare, isDeveloperOrReviewer, isKaiSettingsWriterRole, isKnownAdminRole, isOrganizationAdmin, isOrganizationMember, isProductionManager, isReadOnlyRole };
+import { a as assertCanWriteKaiSettings, c as canWriteSemanticLayer, d as isDeveloperOrReviewer, f as isKaiSettingsWriterRole, g as PermissionDeniedError, h as isReadOnlyRole, i as assertCanProductionManage, l as isAdmin, m as isProductionManager, n as assertCanAdminOrShare, o as canWriteKaiSettings, p as isKnownAdminRole, r as assertCanDevelopOrReview, s as canWriteSecurityPolicies, t as assertCanAdmin, u as isAdminOrShare } from "../../admin-xFfHSZHQ.js";
+import { a as assertCanAdministerOrganization, c as isOrganizationAdmin, i as canListSharingTargets, l as isOrganizationMember, n as hasAdminFeature, o as assertCanWriteKaiSpendCaps, r as hasFeature, s as canWriteKaiSpendCaps } from "../../project-aAVAOcmx.js";
+import { a as assertCanPurgeConfiguration, c as canCopyConfiguration, d as canPurgeConfiguration, f as canUpdateConfiguration, i as assertCanMigrateFromTemplate, l as canCreateConfiguration, n as assertCanCopyConfiguration, o as assertCanUpdateConfiguration, r as assertCanCreateConfiguration, s as canAssignFolder, t as assertCanAssignFolder, u as canMigrateFromTemplate } from "../../configurations-BqvtIQm4.js";
+export { PermissionDeniedError, assertCanAdmin, assertCanAdminOrShare, assertCanAdministerOrganization, assertCanAssignFolder, assertCanCopyConfiguration, assertCanCreateConfiguration, assertCanDevelopOrReview, assertCanMigrateFromTemplate, assertCanProductionManage, assertCanPurgeConfiguration, assertCanUpdateConfiguration, assertCanWriteKaiSettings, assertCanWriteKaiSpendCaps, canAssignFolder, canCopyConfiguration, canCreateConfiguration, canListSharingTargets, canMigrateFromTemplate, canPurgeConfiguration, canUpdateConfiguration, canWriteKaiSettings, canWriteKaiSpendCaps, canWriteSecurityPolicies, canWriteSemanticLayer, hasAdminFeature, hasFeature, isAdmin, isAdminOrShare, isDeveloperOrReviewer, isKaiSettingsWriterRole, isKnownAdminRole, isOrganizationAdmin, isOrganizationMember, isProductionManager, isReadOnlyRole };

package/dist/encryption/index.d.cts

@@ -1,2 +1,2 @@
-import { t as createEncryptionClient } from "../index-BUKMdbKh.cjs";
+import { t as createEncryptionClient } from "../index-BtvWJBYh.cjs";
 export { createEncryptionClient };

package/dist/encryption/index.d.ts

@@ -1,2 +1,2 @@
-import { t as createEncryptionClient } from "../index-BxgHNJ3Q.js";
+import { t as createEncryptionClient } from "../index-Df30jjpZ.js";
 export { createEncryptionClient };

package/dist/encryption/types.d.cts

@@ -1,2 +1,2 @@
-import { a as EncryptParamsByScope, c as ScopedSecrets, i as EncryptParams, n as BranchType, o as EncryptQuery, r as EncryptBody, s as EncryptionScope } from "../index-BUKMdbKh.cjs";
+import { a as EncryptParamsByScope, c as ScopedSecrets, i as EncryptParams, n as BranchType, o as EncryptQuery, r as EncryptBody, s as EncryptionScope } from "../index-BtvWJBYh.cjs";
 export { BranchType, EncryptBody, EncryptParams, EncryptParamsByScope, EncryptQuery, EncryptionScope, ScopedSecrets };

package/dist/encryption/types.d.ts

@@ -1,2 +1,2 @@
-import { a as EncryptParamsByScope, c as ScopedSecrets, i as EncryptParams, n as BranchType, o as EncryptQuery, r as EncryptBody, s as EncryptionScope } from "../index-BxgHNJ3Q.js";
+import { a as EncryptParamsByScope, c as ScopedSecrets, i as EncryptParams, n as BranchType, o as EncryptQuery, r as EncryptBody, s as EncryptionScope } from "../index-Df30jjpZ.js";
 export { BranchType, EncryptBody, EncryptParams, EncryptParamsByScope, EncryptQuery, EncryptionScope, ScopedSecrets };

package/dist/{index-BL7uXOiY.d.cts → index-B04rWq_0.d.cts}

@@ -1,5 +1,5 @@
 import { pt as WorkspaceSqlConnection, rt as WorkspaceConnection } from "./index-FrsEkDvX.cjs";
-import { Da as Subscriber } from "./index-BUKMdbKh.cjs";
+import { Oa as Subscriber } from "./index-BtvWJBYh.cjs";
 declare const isSqlWorkspaceConnection: (connection: WorkspaceConnection) => connection is WorkspaceSqlConnection;
 /**
  * Encodes subscribers as GCP IAM principals (`user:`/`group:`); `fromBackendSubscribers` decodes.
@@ -7,4 +7,4 @@ declare const isSqlWorkspaceConnection: (connection: WorkspaceConnection) => con
 declare const toBackendSubscribers: (subscribers: Subscriber[]) => string[];
 declare const fromBackendSubscribers: (raw: string[]) => Subscriber[];
 export { toBackendSubscribers as n, isSqlWorkspaceConnection as r, fromBackendSubscribers as t };
-//# sourceMappingURL=index-BL7uXOiY.d.cts.map
+//# sourceMappingURL=index-B04rWq_0.d.cts.map