DMD-922 - Add samples and security for llm export

[vojtabiberle]

Release Notes

Add optional table data sampling to kbc llm export command with new flags --with-samples, --without-samples, --sample-limit, and --max-samples.

Plans for customer communication

None.

Impact analysis

This PR extends the kbc llm export command with:

• Table data sampling via Storage API's data-preview endpoint
• New CLI flags for controlling sample behavior
• Security module scaffolding (public repo detection, secret encryption) for future use
• CSV writer for sample output

The security module is implemented but not yet wired into the main export flow - it provides infrastructure for future PRs.

Change type

Feature

Justification

Part of the LLM twin format export feature (PR 6 of 7). Implements sample data export capability per RFC requirements.

Linear issue: DMD-922

Human Review Checklist

• Verify JSON key casing inconsistency is acceptable: samples/index.json uses camelCase (tableId) while samples/{table}/metadata.json uses snake_case (table_id)
• Confirm security module not being integrated into operation.go is expected (scaffolding for future)
• Review sample limit defaults (100 rows per table, max 1000; 50 tables max)

Deployment

Merge & automatic deploy.

Rollback plan

Revert of this PR.

Post release support plan

None.

---

Link to Devin run: https://app.devin.ai/sessions/eecace21ad294aaabf3504f33fff40dc
Requested by: [email protected] (@vojtabiberle)

[linear]

DMD-922 PR 6: Samples + Security

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring