@owox/backend 0.35.0 → 0.37.0

package/dist/src/data-marts/use-cases/preview-data-mart.service.js

@@ -0,0 +1,295 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var PreviewDataMartService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PreviewDataMartService = exports.PreviewAbortedError = exports.CLIENT_CLOSED_REQUEST_STATUS = exports.PreviewDataMartCommand = exports.DEFAULT_PREVIEW_DEADLINE_MS = exports.PREVIEW_MAX_LIMIT = exports.PREVIEW_DEFAULT_LIMIT = void 0;
+exports.toPreviewCell = toPreviewCell;
+const common_1 = require("@nestjs/common");
+const internal_helpers_1 = require("@owox/internal-helpers");
+const business_violation_exception_1 = require("../../common/exceptions/business-violation.exception");
+const type_resolver_1 = require("../../common/resolver/type-resolver");
+const data_storage_providers_1 = require("../data-storage-types/data-storage-providers");
+const data_mart_schema_utils_1 = require("../data-storage-types/data-mart-schema.utils");
+const filter_config_schema_1 = require("../dto/schemas/filter-config.schema");
+const sort_config_schema_1 = require("../dto/schemas/sort-config.schema");
+const access_decision_1 = require("../services/access-decision");
+const blendable_schema_service_1 = require("../services/blendable-schema.service");
+const data_mart_service_1 = require("../services/data-mart.service");
+const calculated_field_utils_1 = require("../calculated-fields/calculated-field.utils");
+const project_billing_service_1 = require("../services/project-billing/project-billing.service");
+const report_sql_composer_service_1 = require("../services/report-sql-composer.service");
+exports.PREVIEW_DEFAULT_LIMIT = 10;
+exports.PREVIEW_MAX_LIMIT = 1000;
+exports.DEFAULT_PREVIEW_DEADLINE_MS = 150_000;
+class PreviewDataMartCommand {
+    dataMartId;
+    projectId;
+    userId;
+    roles;
+    limit;
+    filters;
+    sort;
+    constructor(dataMartId, projectId, userId, roles, limit, filters, sort = undefined) {
+        this.dataMartId = dataMartId;
+        this.projectId = projectId;
+        this.userId = userId;
+        this.roles = roles;
+        this.limit = limit;
+        this.filters = filters;
+        this.sort = sort;
+    }
+}
+exports.PreviewDataMartCommand = PreviewDataMartCommand;
+const INVALID_DATE_CELL = '[Invalid Date]';
+exports.CLIENT_CLOSED_REQUEST_STATUS = 499;
+class PreviewAbortedError extends common_1.HttpException {
+    constructor() {
+        super('Preview was cancelled', exports.CLIENT_CLOSED_REQUEST_STATUS);
+        this.name = 'PreviewAbortedError';
+    }
+}
+exports.PreviewAbortedError = PreviewAbortedError;
+let PreviewDataMartService = PreviewDataMartService_1 = class PreviewDataMartService {
+    dataMartService;
+    blendableSchemaService;
+    composer;
+    readerResolver;
+    accessDecisionService;
+    errorMapperResolver;
+    projectBillingService;
+    deadlineMs;
+    logger = new common_1.Logger(PreviewDataMartService_1.name);
+    constructor(dataMartService, blendableSchemaService, composer, readerResolver, accessDecisionService, errorMapperResolver, projectBillingService, deadlineMs = exports.DEFAULT_PREVIEW_DEADLINE_MS) {
+        this.dataMartService = dataMartService;
+        this.blendableSchemaService = blendableSchemaService;
+        this.composer = composer;
+        this.readerResolver = readerResolver;
+        this.accessDecisionService = accessDecisionService;
+        this.errorMapperResolver = errorMapperResolver;
+        this.projectBillingService = projectBillingService;
+        this.deadlineMs = deadlineMs;
+    }
+    async run(command, signal) {
+        const limit = this.parseLimit(command.limit);
+        const filters = this.parseFilters(command.filters);
+        const sort = this.parseSort(command.sort);
+        const dataMart = await this.dataMartService.getByIdAndProjectId(command.dataMartId, command.projectId);
+        const canSee = await this.accessDecisionService.canAccess(command.userId, command.roles, access_decision_1.EntityType.DATA_MART, dataMart.id, access_decision_1.Action.SEE, command.projectId);
+        if (!canSee) {
+            throw new common_1.ForbiddenException('You do not have access to this Data Mart');
+        }
+        const accessor = { userId: command.userId, roles: command.roles };
+        const schema = await this.blendableSchemaService.computeBlendableSchema(dataMart.id, dataMart.projectId, accessor);
+        const calculatedNames = new Set((0, calculated_field_utils_1.calculatedFieldsOf)(schema.nativeFields).map(f => f.name));
+        const fields = schema.nativeFields
+            .filter(data_mart_schema_utils_1.isConnected)
+            .map(field => field.name)
+            .filter(name => !calculatedNames.has(name));
+        if (fields.length === 0) {
+            throw new common_1.BadRequestException('This Data Mart has no visible fields in its Output Schema yet. Refresh the schema, then preview again.');
+        }
+        const readPlan = {
+            dataMart,
+            columnConfig: fields,
+            filterConfig: filters,
+            sortConfig: sort,
+            limitConfig: limit + 1,
+        };
+        throwIfAborted(signal);
+        await this.projectBillingService.verifyCanPerformOperations(dataMart.projectId, project_billing_service_1.RunKind.HTTP_DATA_RUN);
+        throwIfAborted(signal);
+        let result;
+        try {
+            result = await this.readRows(dataMart, readPlan, accessor, schema, limit, signal);
+        }
+        catch (error) {
+            if (error instanceof common_1.HttpException || error instanceof business_violation_exception_1.BusinessViolationException) {
+                throw error;
+            }
+            this.logger.warn(`Preview of Data Mart ${dataMart.id} failed: ${(0, internal_helpers_1.castError)(error).message}`);
+            const mapper = await this.errorMapperResolver.resolve(dataMart.storage.type);
+            throw mapper.toStorageReadError(error, { force: true });
+        }
+        const truncated = result.rows.length > limit;
+        const rows = (truncated ? result.rows.slice(0, limit) : result.rows).map(row => row.map(toPreviewCell));
+        return { columns: result.columns, rows, rowCount: rows.length, limit, truncated };
+    }
+    parseLimit(limit) {
+        if (limit === undefined || limit === null)
+            return exports.PREVIEW_DEFAULT_LIMIT;
+        if (!Number.isInteger(limit) || limit < 1 || limit > exports.PREVIEW_MAX_LIMIT) {
+            throw new common_1.BadRequestException(`limit must be an integer between 1 and ${exports.PREVIEW_MAX_LIMIT}`);
+        }
+        return limit;
+    }
+    parseSort(sort) {
+        if (sort === undefined || sort === null)
+            return null;
+        const parsed = sort_config_schema_1.SortConfigSchema.safeParse(sort);
+        if (!parsed.success) {
+            throw new common_1.BadRequestException({ message: 'Invalid sort', details: parsed.error.issues });
+        }
+        return parsed.data?.length ? parsed.data : null;
+    }
+    parseFilters(filters) {
+        if (filters === undefined || filters === null)
+            return null;
+        const parsed = filter_config_schema_1.FilterConfigSchema.safeParse(filters);
+        if (!parsed.success) {
+            throw new common_1.BadRequestException({
+                message: 'Invalid filters',
+                details: parsed.error.issues,
+            });
+        }
+        return parsed.data?.length ? parsed.data : null;
+    }
+    async readRows(dataMart, readPlan, accessor, schema, limit, signal) {
+        const overReadLimit = limit + 1;
+        const workController = new AbortController();
+        let deadlineTimer;
+        let abortListener;
+        const deadline = new Promise((_, reject) => {
+            deadlineTimer = setTimeout(() => {
+                workController.abort();
+                reject(new common_1.GatewayTimeoutException(`The preview query did not finish within ${Math.round(this.deadlineMs / 1000)} seconds. Add a filter or lower the limit, then try again.`));
+            }, this.deadlineMs);
+        });
+        const aborted = new Promise((_, reject) => {
+            if (!signal)
+                return;
+            if (signal.aborted) {
+                workController.abort();
+                reject(new PreviewAbortedError());
+                return;
+            }
+            abortListener = () => {
+                workController.abort();
+                reject(new PreviewAbortedError());
+            };
+            signal.addEventListener('abort', abortListener, { once: true });
+        });
+        const produce = (async () => {
+            let reader;
+            try {
+                if (workController.signal.aborted)
+                    throw new PreviewAbortedError();
+                const composed = await this.composer.compose(readPlan, accessor, undefined, schema);
+                if (workController.signal.aborted)
+                    throw new PreviewAbortedError();
+                reader = await this.readerResolver.resolve(dataMart.storage.type);
+                if (!reader.honorsQueryTimeout) {
+                    this.logger.warn(`Storage ${dataMart.storage.type} does not honor queryTimeoutMs; a preview it runs is not capped warehouse-side.`);
+                }
+                const description = await reader.prepareReportData(readPlan, {
+                    sqlOverride: composed.sql,
+                    sqlOverrideParams: composed.params,
+                    columnFilter: readPlan.columnConfig ?? undefined,
+                    blendedDataHeaders: composed.blendedDataHeaders,
+                    primaryKeyColumns: composed.primaryKeyColumns,
+                    calculatedFields: composed.calculatedFields,
+                    queryTimeoutMs: this.deadlineMs,
+                    signal: workController.signal,
+                });
+                const columns = description.dataHeaders.map(header => ({
+                    name: header.name,
+                    ...(header.alias ? { alias: header.alias } : {}),
+                    ...(header.storageFieldType ? { type: String(header.storageFieldType) } : {}),
+                }));
+                const rows = [];
+                let batchId;
+                do {
+                    if (workController.signal.aborted)
+                        break;
+                    const batch = await reader.readReportDataBatch(batchId, overReadLimit - rows.length);
+                    rows.push(...batch.dataRows);
+                    batchId = batch.nextDataBatchId ?? undefined;
+                    if (batch.dataRows.length === 0)
+                        break;
+                } while (batchId && rows.length < overReadLimit);
+                return { columns, rows };
+            }
+            finally {
+                workController.abort();
+                try {
+                    await reader?.finalize();
+                }
+                catch (finalizeError) {
+                    this.logger.warn(`reader.finalize() failed; ignoring: ${(0, internal_helpers_1.castError)(finalizeError).message}`);
+                }
+            }
+        })();
+        try {
+            return await Promise.race([produce, deadline, aborted]);
+        }
+        finally {
+            if (deadlineTimer)
+                clearTimeout(deadlineTimer);
+            if (signal && abortListener)
+                signal.removeEventListener('abort', abortListener);
+        }
+    }
+};
+exports.PreviewDataMartService = PreviewDataMartService;
+exports.PreviewDataMartService = PreviewDataMartService = PreviewDataMartService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(3, (0, common_1.Inject)(data_storage_providers_1.DATA_STORAGE_REPORT_READER_RESOLVER)),
+    __param(5, (0, common_1.Inject)(data_storage_providers_1.DATA_STORAGE_ERROR_MAPPER_RESOLVER)),
+    __param(7, (0, common_1.Optional)()),
+    __metadata("design:paramtypes", [data_mart_service_1.DataMartService,
+        blendable_schema_service_1.BlendableSchemaService,
+        report_sql_composer_service_1.ReportSqlComposerService,
+        type_resolver_1.TypeResolver,
+        access_decision_1.AccessDecisionService,
+        type_resolver_1.TypeResolver,
+        project_billing_service_1.ProjectBillingService, Number])
+], PreviewDataMartService);
+function throwIfAborted(signal) {
+    if (signal?.aborted)
+        throw new PreviewAbortedError();
+}
+function toPreviewCell(value) {
+    if (value === null || value === undefined)
+        return null;
+    if (typeof value === 'string' || typeof value === 'boolean')
+        return value;
+    if (typeof value === 'number')
+        return Number.isFinite(value) ? value : String(value);
+    if (typeof value === 'bigint')
+        return value.toString();
+    if (value instanceof Date) {
+        return Number.isNaN(value.getTime()) ? INVALID_DATE_CELL : value.toISOString();
+    }
+    if (Buffer.isBuffer(value))
+        return value.toString('base64');
+    if (typeof value === 'object') {
+        const toJSON = value.toJSON;
+        if (typeof toJSON === 'function') {
+            const json = toJSON.call(value);
+            if (json !== value)
+                return toPreviewCell(json);
+        }
+        const keys = Object.keys(value);
+        if (keys.length === 1 && keys[0] === 'value') {
+            return toPreviewCell(value.value);
+        }
+        try {
+            return JSON.stringify(value, (_key, inner) => typeof inner === 'bigint' ? inner.toString() : inner);
+        }
+        catch {
+            return String(value);
+        }
+    }
+    return String(value);
+}
+//# sourceMappingURL=preview-data-mart.service.js.map

package/dist/src/data-marts/use-cases/stream-http-data.service.js

@@ -238,6 +238,7 @@ let StreamHttpDataService = StreamHttpDataService_1 = class StreamHttpDataServic
                     aggregationConfig: report.aggregationConfig ?? undefined,
                     dateTruncConfig: report.dateTruncConfig ?? undefined,
                     uniqueCountConfig: report.uniqueCountConfig ?? undefined,
+                    autoAggregationOptOut: report.autoAggregationOptOut ?? undefined,
                     limitConfig: limit ?? report.limitConfig ?? null,
                 };
                 const collapsed = excelReportRun ? (0, auto_collapse_resolver_1.applyAutoCollapse)(basePlan) : undefined;

package/dist/src/data-marts/use-cases/update-availability.service.js

@@ -41,7 +41,7 @@ let UpdateAvailabilityService = UpdateAvailabilityService_1 = class UpdateAvaila
             throw new common_1.NotFoundException('DataMart not found');
         const canConfigure = await this.accessDecisionService.canAccess(userId, roles, access_decision_1.EntityType.DATA_MART, dataMartId, access_decision_1.Action.CONFIGURE_SHARING, projectId);
         if (!canConfigure)
-            throw new common_1.ForbiddenException('You do not have permission to configure sharing for this Data Mart. You must be the Technical Owner with the Technical User role, or a Project Admin.');
+            throw new common_1.ForbiddenException('You do not have permission to configure sharing for this Data Mart. You must be a Data Owner of this Data Mart with the Data Owner role, or a Project Admin.');
         dm.availableForReporting = availableForReporting;
         dm.availableForMaintenance = availableForMaintenance;
         await this.dataMartRepository.save(dm);
@@ -54,7 +54,7 @@ let UpdateAvailabilityService = UpdateAvailabilityService_1 = class UpdateAvaila
             throw new common_1.NotFoundException('Storage not found');
         const canConfigure = await this.accessDecisionService.canAccess(userId, roles, access_decision_1.EntityType.STORAGE, storageId, access_decision_1.Action.CONFIGURE_SHARING, projectId);
         if (!canConfigure)
-            throw new common_1.ForbiddenException('You do not have permission to configure sharing for this Storage. You must be an owner with the Technical User role, or a Project Admin.');
+            throw new common_1.ForbiddenException('You do not have permission to configure sharing for this Storage. You must be an owner with the Data Owner role, or a Project Admin.');
         storage.availableForUse = availableForUse;
         storage.availableForMaintenance = availableForMaintenance;
         await this.dataStorageRepository.save(storage);

package/dist/src/data-marts/use-cases/update-data-mart-definition.service.d.ts

@@ -21,7 +21,7 @@ export declare class UpdateDataMartDefinitionService {
     private readonly advancedSearchIndexSync?;
     constructor(dataMartService: DataMartService, mapper: DataMartMapper, connectorSecretService: ConnectorSecretService, legacyDataMartsService: LegacyDataMartsService, accessDecisionService: AccessDecisionService, definitionValidatorFacade: DataMartDefinitionValidatorFacade, eventDispatcher: OwoxEventDispatcher, connectorService: ConnectorService, advancedSearchIndexSync?: AdvancedSearchIndexSyncService | undefined);
     run(command: UpdateDataMartDefinitionCommand): Promise<DataMartDto>;
-    private getConnectorCapabilities;
+    private resolveConnectorCapabilities;
     private validateConnectorConfigurationCount;
     private validateCredentialCopyAccess;
     private validateSecretReferences;

package/dist/src/data-marts/use-cases/update-data-mart-definition.service.js

@@ -66,7 +66,7 @@ let UpdateDataMartDefinitionService = class UpdateDataMartDefinitionService {
             this.assertDefinitionTypeChangeAllowed(previousDefinitionType, command.definitionType);
             definitionTypeChanged = true;
         }
-        const connectorCapabilities = this.getConnectorCapabilities(command);
+        const connectorCapabilities = await this.resolveConnectorCapabilities(command);
         this.validateConnectorConfigurationCount(command, connectorCapabilities);
         if (dataMart.storage.type === data_storage_type_enum_1.DataStorageType.LEGACY_GOOGLE_BIGQUERY) {
             if (command.definitionType !== data_mart_definition_type_enum_1.DataMartDefinitionType.SQL) {
@@ -91,11 +91,11 @@ let UpdateDataMartDefinitionService = class UpdateDataMartDefinitionService {
             }
             this.validateSecretReferences(connectorDefinition, previousDefinition, sourceDefinition);
             if (sourceDefinition) {
-                mergedDefinition = await this.connectorSecretService.mergeDefinitionSecretsFromSource(connectorDefinition, sourceDefinition);
-                mergedDefinition = await this.connectorSecretService.mergeDefinitionSecrets(mergedDefinition, previousDefinition);
+                mergedDefinition = await this.connectorSecretService.mergeDefinitionSecretsFromSource(command.projectId, connectorDefinition, sourceDefinition);
+                mergedDefinition = await this.connectorSecretService.mergeDefinitionSecrets(command.projectId, mergedDefinition, previousDefinition);
             }
             else {
-                mergedDefinition = await this.connectorSecretService.mergeDefinitionSecrets(connectorDefinition, previousDefinition);
+                mergedDefinition = await this.connectorSecretService.mergeDefinitionSecrets(command.projectId, connectorDefinition, previousDefinition);
             }
             dataMart.definition = await this.connectorSecretService.extractAndSaveSecrets(dataMart.id, command.projectId, connectorDefinition.connector.source.name, mergedDefinition);
             await this.connectorSecretService.deleteOrphanedSecrets(dataMart.id, dataMart.definition, previousDefinition);
@@ -119,13 +119,15 @@ let UpdateDataMartDefinitionService = class UpdateDataMartDefinitionService {
         await this.advancedSearchIndexSync?.scheduleReindex(search_facade_1.SearchableEntityType.DATA_MART, dataMart.id, command.projectId);
         return this.mapper.toDomainDto(dataMart);
     }
-    getConnectorCapabilities(command) {
+    async resolveConnectorCapabilities(command) {
         if (command.definitionType !== data_mart_definition_type_enum_1.DataMartDefinitionType.CONNECTOR) {
             return undefined;
         }
         const definition = command.definition;
         const source = definition?.connector?.source;
-        return source?.name ? this.connectorService.getConnectorCapabilities(source.name) : undefined;
+        return source?.name
+            ? this.connectorService.resolveConnectorCapabilities(command.projectId, source.name, source.version)
+            : undefined;
     }
     validateConnectorConfigurationCount(command, capabilities) {
         if (!capabilities?.singleConfiguration) {
@@ -144,7 +146,7 @@ let UpdateDataMartDefinitionService = class UpdateDataMartDefinitionService {
         const canCopyCredentials = await this.accessDecisionService.canAccess(command.userId, command.roles, access_decision_1.EntityType.DATA_MART, command.sourceDataMartId, access_decision_1.Action.EDIT, command.projectId);
         if (!canCopyCredentials) {
             throw new common_1.ForbiddenException('You do not have permission to copy connector credentials from the source Data Mart. ' +
-                'Ask its owner to add you as a Technical Owner or to turn on "Shared for maintenance", ' +
+                'Ask its owner to add you as a Data Owner or to turn on "Shared for maintenance", ' +
                 'or enter the credentials manually.');
         }
     }

package/dist/src/data-marts/use-cases/update-data-mart-icon.service.d.ts

@@ -0,0 +1,12 @@
+import { DataMartMapper } from '../mappers/data-mart.mapper';
+import { DataMartDto } from '../dto/domain/data-mart.dto';
+import { DataMartService } from '../services/data-mart.service';
+import { UpdateDataMartIconCommand } from '../dto/domain/update-data-mart-icon.command';
+import { AccessDecisionService } from '../services/access-decision';
+export declare class UpdateDataMartIconService {
+    private readonly dataMartService;
+    private readonly mapper;
+    private readonly accessDecisionService;
+    constructor(dataMartService: DataMartService, mapper: DataMartMapper, accessDecisionService: AccessDecisionService);
+    run(command: UpdateDataMartIconCommand): Promise<DataMartDto>;
+}

package/dist/src/data-marts/use-cases/update-data-mart-icon.service.js

@@ -0,0 +1,46 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateDataMartIconService = void 0;
+const common_1 = require("@nestjs/common");
+const data_mart_mapper_1 = require("../mappers/data-mart.mapper");
+const data_mart_service_1 = require("../services/data-mart.service");
+const access_decision_1 = require("../services/access-decision");
+let UpdateDataMartIconService = class UpdateDataMartIconService {
+    dataMartService;
+    mapper;
+    accessDecisionService;
+    constructor(dataMartService, mapper, accessDecisionService) {
+        this.dataMartService = dataMartService;
+        this.mapper = mapper;
+        this.accessDecisionService = accessDecisionService;
+    }
+    async run(command) {
+        const dataMart = await this.dataMartService.getByIdAndProjectId(command.id, command.projectId);
+        if (command.userId) {
+            const canEdit = await this.accessDecisionService.canAccess(command.userId, command.roles, access_decision_1.EntityType.DATA_MART, command.id, access_decision_1.Action.EDIT, command.projectId);
+            if (!canEdit) {
+                throw new common_1.ForbiddenException('You do not have permission to edit this DataMart');
+            }
+        }
+        dataMart.icon = command.icon;
+        await this.dataMartService.save(dataMart);
+        return this.mapper.toDomainDto(dataMart);
+    }
+};
+exports.UpdateDataMartIconService = UpdateDataMartIconService;
+exports.UpdateDataMartIconService = UpdateDataMartIconService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [data_mart_service_1.DataMartService,
+        data_mart_mapper_1.DataMartMapper,
+        access_decision_1.AccessDecisionService])
+], UpdateDataMartIconService);
+//# sourceMappingURL=update-data-mart-icon.service.js.map

package/dist/src/data-marts/use-cases/update-data-mart-owners.service.js

@@ -51,7 +51,7 @@ let UpdateDataMartOwnersService = UpdateDataMartOwnersService_1 = class UpdateDa
         if (command.userId) {
             const canManage = await this.accessDecisionService.canAccess(command.userId, command.roles, access_decision_1.EntityType.DATA_MART, command.id, access_decision_1.Action.MANAGE_OWNERS, command.projectId);
             if (!canManage) {
-                throw new common_1.ForbiddenException('You do not have permission to manage owners of this Data Mart. You must be the Technical Owner with the Technical User role, or a Project Admin.');
+                throw new common_1.ForbiddenException('You do not have permission to manage owners of this Data Mart. You must be a Data Owner of this Data Mart with the Data Owner role, or a Project Admin.');
             }
         }
         await Promise.all([

package/dist/src/data-marts/use-cases/update-data-mart-schema.service.js

@@ -18,7 +18,9 @@ const data_mart_entity_1 = require("../entities/data-mart.entity");
 const calculated_field_utils_1 = require("../calculated-fields/calculated-field.utils");
 const calculated_field_validator_service_1 = require("../calculated-fields/calculated-field-validator.service");
 const formula_violations_1 = require("../calculated-fields/formula-violations");
+const join_grain_1 = require("../calculated-fields/join-grain");
 const data_storage_credentials_resolver_service_1 = require("../data-storage-types/data-storage-credentials-resolver.service");
+const data_mart_schema_utils_1 = require("../data-storage-types/data-mart-schema.utils");
 const data_mart_schema_field_status_enum_1 = require("../data-storage-types/enums/data-mart-schema-field-status.enum");
 const data_mart_schema_parser_facade_service_1 = require("../data-storage-types/facades/data-mart-schema-parser-facade.service");
 const data_mart_mapper_1 = require("../mappers/data-mart.mapper");
@@ -57,6 +59,7 @@ let UpdateDataMartSchemaService = UpdateDataMartSchemaService_1 = class UpdateDa
         }
         const parsed = await this.schemaParserFacade.validateAndParse(command.schema, dataMart.storage.type);
         const introducesNativeField = applyServerOwnedFieldStatuses(parsed, dataMart.schema);
+        const previousFields = dataMart.schema?.fields ?? [];
         dataMart.schema = parsed;
         if (introducesNativeField) {
             dataMart.schemaActualizedAt = null;
@@ -102,7 +105,11 @@ let UpdateDataMartSchemaService = UpdateDataMartSchemaService_1 = class UpdateDa
         await this.saveAndInvalidate(dataMart);
         await this.searchIndexInvalidation?.scheduleDataMartSchemaChanged(dataMart.id, command.projectId);
         this.logger.debug(`Data mart ${command.id} schema updated`);
-        return { ...this.mapper.toDomainDto(dataMart), warnings };
+        return {
+            ...this.mapper.toDomainDto(dataMart),
+            warnings: (0, join_grain_1.withoutUntouchedJoinAdvisories)(warnings, editedCalculatedFields(previousFields, calculatedFields), (0, data_mart_schema_utils_1.declaredPrimaryKeyFields)(previousFields).sort().join('\n') !==
+                (0, data_mart_schema_utils_1.declaredPrimaryKeyFields)(parsed.fields).sort().join('\n')),
+        };
     }
     async saveAndInvalidate(dataMart) {
         await this.dataMartService.save(dataMart);
@@ -158,4 +165,10 @@ function applyFieldStatuses(fields, persistedFields) {
 function nestedFieldsOf(field) {
     return 'fields' in field && Array.isArray(field.fields) ? field.fields : undefined;
 }
+function editedCalculatedFields(previousFields, calculatedFields) {
+    const previous = new Map((0, calculated_field_utils_1.calculatedFieldsOf)(previousFields).map(field => [field.name, field.calculated.formula]));
+    return new Set(calculatedFields
+        .filter(field => previous.get(field.name) !== field.calculated.formula)
+        .map(field => field.name));
+}
 //# sourceMappingURL=update-data-mart-schema.service.js.map

package/dist/src/data-marts/use-cases/update-data-storage.service.js

@@ -72,14 +72,14 @@ let UpdateDataStorageService = class UpdateDataStorageService {
         if (command.ownerIds !== undefined && command.userId) {
             const canManage = await this.accessDecisionService.canAccess(command.userId, command.roles, access_decision_1.EntityType.STORAGE, command.id, access_decision_1.Action.MANAGE_OWNERS, command.projectId);
             if (!canManage) {
-                throw new common_1.ForbiddenException('You do not have permission to manage owners of this Storage. You must be an owner with the Technical User role, or a Project Admin.');
+                throw new common_1.ForbiddenException('You do not have permission to manage owners of this Storage. You must be an owner with the Data Owner role, or a Project Admin.');
             }
         }
         if ((command.availableForUse !== undefined || command.availableForMaintenance !== undefined) &&
             command.userId) {
             const canConfigure = await this.accessDecisionService.canAccess(command.userId, command.roles, access_decision_1.EntityType.STORAGE, command.id, access_decision_1.Action.CONFIGURE_SHARING, command.projectId);
             if (!canConfigure) {
-                throw new common_1.ForbiddenException('You do not have permission to configure sharing for this Storage. You must be an owner with the Technical User role, or a Project Admin.');
+                throw new common_1.ForbiddenException('You do not have permission to configure sharing for this Storage. You must be an owner with the Data Owner role, or a Project Admin.');
             }
         }
         const dataStorageEntity = await this.dataStorageService.getByProjectIdAndId(command.projectId, command.id);

package/dist/src/data-marts/use-cases/update-report.service.js

@@ -32,6 +32,7 @@ const report_access_service_1 = require("../services/report-access.service");
 const report_data_cache_service_1 = require("../services/report-data-cache.service");
 const output_controls_validator_service_1 = require("../services/output-controls-validator.service");
 const unique_count_sources_1 = require("../dto/schemas/unique-count-sources");
+const auto_aggregation_opt_out_schema_1 = require("../dto/schemas/auto-aggregation-opt-out.schema");
 const advanced_search_index_sync_service_1 = require("../services/advanced-search-index-sync.service");
 const search_facade_1 = require("../../common/search/search.facade");
 let UpdateReportService = class UpdateReportService {
@@ -132,6 +133,11 @@ let UpdateReportService = class UpdateReportService {
         const previousDateTruncConfig = report.dateTruncConfig ?? null;
         const nextDateTruncConfig = command.dateTruncConfig ?? null;
         const dateTruncChanged = JSON.stringify(previousDateTruncConfig) !== JSON.stringify(nextDateTruncConfig);
+        const previousAutoAggregationOptOut = (0, auto_aggregation_opt_out_schema_1.foldEmptyAutoAggregationOptOut)(report.autoAggregationOptOut);
+        const nextAutoAggregationOptOut = (0, auto_aggregation_opt_out_schema_1.selectedAutoAggregationOptOut)(command.autoAggregationOptOut === undefined
+            ? previousAutoAggregationOptOut
+            : command.autoAggregationOptOut, nextColumnConfig);
+        const autoAggregationOptOutChanged = JSON.stringify(previousAutoAggregationOptOut) !== JSON.stringify(nextAutoAggregationOptOut);
         report.title = command.title;
         report.dataDestination = dataDestination;
         report.destinationConfig = command.destinationConfig;
@@ -142,6 +148,7 @@ let UpdateReportService = class UpdateReportService {
         report.aggregationConfig = nextAggregationConfig;
         report.dateTruncConfig = nextDateTruncConfig;
         report.uniqueCountConfig = nextUniqueCountConfig;
+        report.autoAggregationOptOut = nextAutoAggregationOptOut;
         const updatedReport = await this.reportRepository.save(report);
         await this.advancedSearchIndexSync?.scheduleReindex(search_facade_1.SearchableEntityType.REPORT, updatedReport.id, command.projectId);
         if (command.ownerIds !== undefined) {
@@ -158,7 +165,8 @@ let UpdateReportService = class UpdateReportService {
             limitChanged ||
             aggregationChanged ||
             dateTruncChanged ||
-            uniqueCountChanged) {
+            uniqueCountChanged ||
+            autoAggregationOptOutChanged) {
             await this.reportDataCacheService.invalidateByReportId(updatedReport.id);
         }
         const fresh = await this.reportRepository.findOne({

package/dist/src/ee/ee.module.js

@@ -15,15 +15,13 @@ const mcp_resource_module_1 = require("../mcp-resource/mcp-resource.module");
 const project_settings_module_1 = require("../project-settings/project-settings.module");
 const idp_mcp_auth_adapter_1 = require("./mcp/auth/idp-mcp-auth.adapter");
 const mcp_auth_port_1 = require("./mcp/auth/mcp-auth.port");
-const mcp_auth_exception_filter_1 = require("./mcp/auth/mcp-auth.exception-filter");
-const mcp_auth_guard_1 = require("./mcp/auth/mcp-auth.guard");
+const mcp_auth_middleware_1 = require("./mcp/auth/mcp-auth.middleware");
 const mcp_config_1 = require("./mcp/config/mcp.config");
 const mcp_metadata_controller_1 = require("./mcp/controllers/mcp-metadata.controller");
-const mcp_transport_controller_1 = require("./mcp/controllers/mcp-transport.controller");
 const mcp_bus_extras_module_1 = require("./mcp/observability/mcp-bus-extras.module");
 const mcp_call_instrumentation_1 = require("./mcp/observability/mcp-call-instrumentation");
 const mcp_sdk_server_factory_1 = require("./mcp/sdk/mcp-sdk-server.factory");
-const mcp_streamable_http_transport_handler_1 = require("./mcp/sdk/mcp-streamable-http-transport.handler");
+const mcp_http_entry_service_1 = require("./mcp/transport/mcp-http-entry.service");
 const mcp_instructions_service_1 = require("./mcp/instructions/mcp-instructions.service");
 const mcp_tool_providers_1 = require("./mcp/tools/mcp-tool.providers");
 const mcp_tool_registry_1 = require("./mcp/tools/mcp-tool.registry");
@@ -40,7 +38,7 @@ exports.EeModule = EeModule = __decorate([
             project_settings_module_1.ProjectSettingsModule,
             mcp_bus_extras_module_1.McpBusExtrasModule,
         ],
-        controllers: [mcp_metadata_controller_1.McpMetadataController, mcp_transport_controller_1.McpTransportController],
+        controllers: [mcp_metadata_controller_1.McpMetadataController],
         providers: [
             mcp_config_1.McpConfigService,
             idp_mcp_auth_adapter_1.IdpMcpAuthAdapter,
@@ -48,15 +46,14 @@ exports.EeModule = EeModule = __decorate([
                 provide: mcp_auth_port_1.MCP_AUTH_PORT,
                 useExisting: idp_mcp_auth_adapter_1.IdpMcpAuthAdapter,
             },
-            mcp_auth_guard_1.McpAuthGuard,
-            mcp_auth_exception_filter_1.McpAuthExceptionFilter,
+            mcp_auth_middleware_1.McpAuthMiddleware,
             ...mcp_tool_providers_1.MCP_TOOL_PROVIDER_CLASSES,
             mcp_tool_providers_1.MCP_TOOL_DEFINITIONS_PROVIDER,
             mcp_tool_registry_1.McpToolRegistry,
             mcp_call_instrumentation_1.McpCallInstrumentation,
             mcp_sdk_server_factory_1.McpSdkServerFactory,
             mcp_instructions_service_1.McpInstructionsService,
-            mcp_streamable_http_transport_handler_1.McpStreamableHttpTransportHandler,
+            mcp_http_entry_service_1.McpHttpEntryService,
         ],
         exports: [mcp_config_1.McpConfigService],
     })

package/dist/src/ee/mcp/auth/mcp-auth-context.d.ts

@@ -1,6 +1,2 @@
-import type { Request } from 'express';
 import type { McpTokenPayload } from '@owox/idp-protocol';
 export type McpAuthContext = McpTokenPayload;
-export interface McpAuthenticatedRequest extends Request {
-    mcpContext: McpAuthContext;
-}

package/dist/src/ee/mcp/auth/mcp-auth.middleware.d.ts

@@ -0,0 +1,26 @@
+import type { Request, RequestHandler } from 'express';
+import type { AuthInfo } from '@modelcontextprotocol/server';
+import type { McpTokenPayload } from '@owox/idp-protocol';
+import { McpResourceResolverService } from '../../../mcp-resource/mcp-resource-resolver.service';
+import { McpConfigService } from '../config/mcp.config';
+import { type McpAuthPort } from './mcp-auth.port';
+export interface McpAuthenticatedRequest extends Request {
+    auth?: AuthInfo;
+}
+export declare class McpAuthMiddleware {
+    private readonly auth;
+    private readonly resourceResolver;
+    private readonly config;
+    private readonly logger;
+    constructor(auth: McpAuthPort, resourceResolver: McpResourceResolverService, config: McpConfigService);
+    handle: RequestHandler;
+    private verify;
+    private reject;
+    private rejectUnexpected;
+    private extractBearerToken;
+    private getRequestedSessionId;
+    private assertPayload;
+    private getChallengeHeader;
+    private isExpectedAnonymousProbe;
+}
+export declare function toMcpAuthContext(authInfo: AuthInfo | undefined): McpTokenPayload;