git:20260519.7b28ce1 to git:20260520.ff62120

- description: Inspect embedded dashboard configuration in a Preset workspace through direct Superset API calls. Use only for direct API workflows when a user needs embedded dashboard read paths, feature-flag behavior, allowed domain inspection, or guest-token routing after resolving a workspace hostname. Do not use for MCP-only work.

- Use this skill for embedded dashboard inspection and routing.

-

- ## Workflow

- 1. Use `preset-api` first: load its authentication reference and create the reusable Python client as `client`.

- 2. Use `preset-workspaces` to resolve the workspace hostname as `hostname`.

- 3. Use `preset-superset` to capture workspace version/OpenAPI and current-user roles when permissions matter.

- 4. Load the focused reference for the task:

- - [references/embedded-config-reads.md](references/embedded-config-reads.md) for embedded dashboard configuration reads.

- - [references/embedded-config-mutations.md](references/embedded-config-mutations.md) for embedded dashboard configuration create/update/delete routing.

- - [references/trusted-domains-and-origins.md](references/trusted-domains-and-origins.md) for allowed-domain and origin behavior.

- - [references/guest-tokens.md](references/guest-tokens.md) for guest-token routing to `preset-guest-tokens`.

- - [references/embedded-rls.md](references/embedded-rls.md) for embedded RLS routing to `preset-embedded-rls`.

- 5. Use `preset-guest-tokens` for guest-token creation and `preset-embedded-rls` for embedded RLS review.

- ## Scope

- Default to embedded configuration reads. Do not create, update, or delete embedded dashboard configuration, issue guest tokens, manage trusted domains, or manage embedded access-token keys without explicit confirmation and a separate security-sensitive review.

- Guest-token creation and RLS for embedded users are Phase 5 security-sensitive workflows handled by `preset-guest-tokens` and `preset-embedded-rls`.