Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
keboola
cli
Repository navigation
Code
Issues
34
(34)
Pull requests
10
(10)
Actions
Projects
Security and quality
Insights
More
items
feat(CLI-17): add kbagent rls command group + guided setup skill
- #778
#778
Open
Matovidlo
wants to merge 31 commits into
main
keboola/cli:main
from
martinvasko-cli-17-kbagent-rls-command-group-guided-setup-skill-for-metastore
keboola/cli:martinvasko-cli-17-kbagent-rls-command-group-guided-setup-skill-for-metastore
Copy head branch name to clipboard
Conversation
Commits
31
(31)
Checks
Files changed
Open
feat(CLI-17): add kbagent rls command group + guided setup skill
#778
Matovidlo
wants to merge 31 commits into
main
keboola/cli:main
from
martinvasko-cli-17-kbagent-rls-command-group-guided-setup-skill-for-metastore
keboola/cli:martinvasko-cli-17-kbagent-rls-command-group-guided-setup-skill-for-metastore
Copy head branch name to clipboard
Commits
Commits on Oct 13, 2026
feat(CLI-17): extend MetastoreClient for org/targeted RLS policy scope
Show description for 1418c04
Matovidlo
committed
1418c04
View commit details
Copy full SHA for 1418c04
Browse repository at this point
feat(CLI-17): add RlsService and condition primitive compiler
Show description for d418d85
Matovidlo
committed
d418d85
View commit details
Copy full SHA for d418d85
Browse repository at this point
feat(CLI-17): add kbagent rls command group
Show description for def9c55
Matovidlo
committed
def9c55
View commit details
Copy full SHA for def9c55
Browse repository at this point
feat(CLI-17): expose rls over kbagent serve REST API
Show description for 91248ec
Matovidlo
committed
91248ec
View commit details
Copy full SHA for 91248ec
Browse repository at this point
test(CLI-17): add RLS service/CLI/server/E2E test coverage
Show description for 09cb3cc
Matovidlo
committed
09cb3cc
View commit details
Copy full SHA for 09cb3cc
Browse repository at this point
docs(CLI-17): document the rls command group across all doc surfaces
Show description for fa6cb91
Matovidlo
committed
fa6cb91
View commit details
Copy full SHA for fa6cb91
Browse repository at this point
feat(CLI-17): add kbagent cls command group for column-level security policies
Show description for 6e47912
Matovidlo
and
claude
committed
6e47912
View commit details
Copy full SHA for 6e47912
Browse repository at this point
fix(CLI-17): resolve the default schema version for rls/cls schema and validation
Show description for 60c26ce
Matovidlo
and
claude
committed
60c26ce
View commit details
Copy full SHA for 60c26ce
Browse repository at this point
fix(CLI-17): address Copilot review on rls/cls
Show description for c1c838e
Matovidlo
and
claude
committed
c1c838e
View commit details
Copy full SHA for c1c838e
Browse repository at this point
fix(CLI-17): send target project ids the way the metastore expects, address review
Show description for d074d20
Matovidlo
and
claude
committed
d074d20
View commit details
Copy full SHA for d074d20
Browse repository at this point
fix(CLI-17): keep a policy's scope on partial updates; validate target ids in --dry-run
Show description for e84cb50
Matovidlo
and
claude
committed
e84cb50
View commit details
Copy full SHA for e84cb50
Browse repository at this point
fix(CLI-17): reject conditions with several composition keys or stray keys (Copilot review)
Show description for 1b07305
Matovidlo
and
claude
committed
1b07305
View commit details
Copy full SHA for 1b07305
Browse repository at this point
fix(CLI-17): validate principal fields by value and reject an unresolved version listing (Copilot review)
Show description for 880d05c
Matovidlo
and
claude
committed
880d05c
View commit details
Copy full SHA for 880d05c
Browse repository at this point
fix(CLI-17): setup honours rls.create denial and exit-code classes; update re-sends no grants; non-string op (Copilot review)
Show description for b74f199
Matovidlo
and
claude
committed
b74f199
View commit details
Copy full SHA for b74f199
Browse repository at this point
fix(CLI-17): reject bool/non-integral project ids; keep the failures' error code in the setup envelope (Copilot review)
Show description for 3fc6e1d
Matovidlo
and
claude
committed
3fc6e1d
View commit details
Copy full SHA for 3fc6e1d
Browse repository at this point
fix(CLI-17): make the project-id types covariant so `ty` passes
Show description for ad90552
Matovidlo
and
claude
committed
ad90552
View commit details
Copy full SHA for ad90552
Browse repository at this point
fix(CLI-17): adopt main's metastore scope client, accept integer project ids in REST
Show description for bfb9edb
Matovidlo
and
claude
committed
bfb9edb
View commit details
Copy full SHA for bfb9edb
Browse repository at this point
feat(CLI-17): add MetastoreClient.patch_item for partial updates
Show description for 6c5bf31
Matovidlo
and
claude
committed
6c5bf31
View commit details
Copy full SHA for 6c5bf31
Browse repository at this point
fix(CLI-17): refuse policies that block every query; preview like the enforcement
Show description for f412885
Matovidlo
and
claude
committed
f412885
View commit details
Copy full SHA for f412885
Browse repository at this point
fix(CLI-17): targeted scope by default, backend dialect, PATCH updates, destructive deletes
Show description for 9430ae4
Matovidlo
and
claude
committed
9430ae4
View commit details
Copy full SHA for 9430ae4
Browse repository at this point
docs(CLI-17): correct rls/cls scope, prerequisites and command shape
Show description for 76577f2
Matovidlo
and
claude
committed
76577f2
View commit details
Copy full SHA for 76577f2
Browse repository at this point
test(CLI-17): E2E authors a targeted policy and changes its rules
Show description for a742eba
Matovidlo
and
claude
committed
a742eba
View commit details
Copy full SHA for a742eba
Browse repository at this point
fix(CLI-17): reject organization scope with target projects up front; scalar operands only (Copilot review)
Show description for 418c305
Matovidlo
and
claude
committed
418c305
View commit details
Copy full SHA for 418c305
Browse repository at this point
fix(CLI-17): ASCII-only numeric target project IDs; patch_item tests; unique E2E policy table (Copilot review)
Show description for d653eb4
Matovidlo
and
claude
committed
d653eb4
View commit details
Copy full SHA for d653eb4
Browse repository at this point
refactor(CLI-17): share rls/cls command bodies; one 409 path; reuse existing helpers
Show description for 1ca642f
Matovidlo
and
claude
committed
1ca642f
View commit details
Copy full SHA for 1ca642f
Browse repository at this point
refactor(CLI-17): one exit-code mapping, single-source dialect/scope, drop backend memo
Show description for f4bd60b
Matovidlo
and
claude
committed
f4bd60b
View commit details
Copy full SHA for f4bd60b
Browse repository at this point
feat(CLI-17): author rls-policy / cls-policy schema 1.1.0 (groups, OR, default, $identity)
Show description for a313a3e
Matovidlo
and
claude
committed
a313a3e
View commit details
Copy full SHA for a313a3e
Browse repository at this point
docs(CLI-17): rls/cls 1.1.0 -- policies combine with AND, engine requirement, vNEXT tags (review)
Show description for eb39e60
Matovidlo
and
claude
committed
eb39e60
View commit details
Copy full SHA for eb39e60
Browse repository at this point
docs(CLI-17): regenerate the serve endpoint reference after rebasing on main
Show description for c86f864
Matovidlo
and
claude
committed
c86f864
View commit details
Copy full SHA for c86f864
Browse repository at this point
fix(CLI-17): fit the SKILL.md description and the agent prompt in their size limits after the rebase
Show description for e2a94f7
Matovidlo
and
claude
committed
e2a94f7
View commit details
Copy full SHA for e2a94f7
Browse repository at this point
feat(CLI-17): accept the "*" wildcard selector in rls/cls policies (schema 1.1.0)
Show description for c736212
Matovidlo
and
claude
committed
c736212
View commit details
Copy full SHA for c736212
Browse repository at this point
You can’t perform that action at this time.
