feat: v3 app builder for Asset Export (Basic) + migration pointers on all legacy packages (AICHAT-1588)

[Aryamanz29]

Problem

Tenants migrated to v3 native apps no longer carry the legacy Argo template csa-asset-export-basic — so the long-documented path (pyatlan.model.packages.AssetExportBasic + client.workflow.run()) fails there with:

clusterworkflowtemplates.argoproj.io "csa-asset-export-basic" not found

Hit by a customer in production (ZD-127901 / AICHAT-1588, Sev1). There was no pyatlan code path to run Asset Export on the v3 app (csa-uber-asset-export-basic).

What this adds

1. pyatlan.model.apps.CsaUberAssetExportBasic — generated from the app's live UI configmaps via the standard generate_apps pipeline (nothing hand-tuned), mirroring the legacy builder's ergonomics:

from pyatlan.model.apps import CsaUberAssetExportBasic

(CsaUberAssetExportBasic(client)
    .export_via("CLOUD")                                    # DIRECT | EMAIL | CLOUD
    .export_scope("ALL")                                    # + GLOSSARIES_ONLY / PRODUCTS_ONLY / ENRICHED_ONLY
    .qualified_name_prefix_for_assets("default/bigquery/123")
    .gcs(username="project", password="{svc-json}", gcs_bucket="exports")
    .run())

s3()/gcs()/adls() stage the object-store credential exactly like the legacy methods did (bucket in the credential's extra). Generator MANIFEST gains the app so full regens include it.

2. Migration pointers on all legacy packages. Every model.packages class with a typed v3 builder (18 mapped: crawlers, miners, asset-export) now carries _APPS_EQUIVALENT, and the base deprecation warning names it:

Atlan package workflows are deprecated… Use pyatlan.model.apps.CsaUberAssetExportBasic instead.

Packages without an equivalent yet (CSA utilities: asset-import, connection-delete, lineage-builder, …) keep the generic AppClient guidance. The legacy AssetExportBasic docstring additionally shows the replacement snippet inline.

Known v3 gap surfaced during validation (not fixable in pyatlan)

The v3 contract + object-store credential forms have no equivalent of the legacy target_prefix (destination path) — verified exhaustively against the live configmaps: 13 contract properties and S3/GCS/ADLS forms carry bucket + auth only. Customers using object_store(prefix=...) today lose that knob on v3 — flagged to CSA-454 for the uber app.

How it submits — and the server-side fixes this rides on

The builder goes through the standard POST /v1/app typed-inputs route, like every other generated builder. Getting that to work for CSA uber apps required fixing the platform, not pyatlan:

• Live debugging on a test tenant showed /v1/app 500-ing (app validation error: 404 - No manifest available) for every csa-uber entry point: the app's @entrypoint registry only knows its internal DAG-node workflows, so the SDK's input-contract route 404'd on marketplace names and heracles' create flow died. Full RCA + live route differential: atlan-csa-uber-app#171.
• An interim transport that mimicked the UI's POST /package-workflows document was built, validated live (run csa-uber-asset-export-basic-1786352828-dAeCxBpS, native engine), and then removed in favor of the official API once the server-side fix was proven on the test tenant — mimicking an internal wire format would rot silently. It lives in git history if an escape hatch is ever needed.

Merge train — this PR is #3 of 3

🚫 Functionally blocked on the csa-uber release: the /v1/app path only works on tenants running a csa-uber build with the marketplace input contracts. Merging earlier is safe code-wise but the builder returns the pre-fix 500 on unfixed tenants.

1. application-sdk#3090 — input-contract route resolves marketplace (bundle) entry points
2. atlan-csa-uber-app#171 — ships AppInputContract per entry point (validated live: all three contracts 200, were 404)
3. This PR

Testing

• 5 generator-emitted unit tests (defaults, payload, credential staging per store)
• 3 hand-written flow tests (DIRECT / EMAIL / GCS-cloud payload + credential body, secret redaction)
• deprecation-warning guard tests (mapped class names its equivalent; every _APPS_EQUIVALENT pointer resolves)
• full unit suite 6,879 green · ./qa-checks clean (1,003 files)
• Live on a test tenant running the fixed csa-uber build: all five app routes verified (see Dx 238 - Logging hygiene cleanup #171's results table); end-to-end /v1/app create+run in progress — link will be posted here

Closes AICHAT-1588.

🤖 Generated with Claude Code

[linear]

AICHAT-1588