@cspeach/cli 1.1.25 → 1.1.26

package/dist/tools/fiori/deploy/existing-bsp.js

@@ -0,0 +1,67 @@
+// cspeach-cli/src/tools/fiori/deploy/existing-bsp.ts
+/**
+ * fiori_deploy pre-check — does the target BSP already exist, and whose app is it?
+ *
+ * `fiori deploy --yes` would silently overwrite a BSP that holds ANOTHER app
+ * (the tooling's HTTP 412 "different sap app id" handler auto-confirms with
+ * --yes), which could be another team's application. So before either mode
+ * runs, two read-only GETs over the alias's authenticated connection:
+ *
+ *   1. /sap/opu/odata/UI5/ABAP_REPOSITORY_SRV/Repositories('<BSP>') — the same
+ *      OData service the deploy itself uploads through. 404 → a new app;
+ *      200 → it exists; anything else (401/403/500, no answer) → the check
+ *      could not run, and the deploy is refused rather than guessed.
+ *   2. when it exists: /sap/bc/ui5_ui5/sap/<bsp>/manifest.json → sap.app.id.
+ *      If that cannot be read, the app id is UNKNOWN, which is treated like a
+ *      different app (never assumed to be ours).
+ */
+function repositoryPath(bsp) {
+    return `/sap/opu/odata/UI5/ABAP_REPOSITORY_SRV/Repositories('${encodeURIComponent(bsp)}')?$format=json`;
+}
+/** /sap/bc/ui5_ui5/sap/<bsp>/<file>, or /sap/bc/ui5_ui5/<ns>/<name>/<file> for a namespaced BSP. */
+export function bspFilePath(bsp, file) {
+    const lower = bsp.toLowerCase();
+    const ns = /^\/([a-z0-9_]+)\/([a-z0-9_]+)$/.exec(lower);
+    return ns ? `/sap/bc/ui5_ui5/${ns[1]}/${ns[2]}/${file}` : `/sap/bc/ui5_ui5/sap/${lower}/${file}`;
+}
+export async function readExistingBsp(bsp, get) {
+    let repo;
+    try {
+        repo = await get(repositoryPath(bsp));
+    }
+    catch (e) {
+        return { kind: 'unknown', reason: `the ABAP repository service did not answer (${e instanceof Error ? e.message : String(e)})` };
+    }
+    if (repo.status === 404)
+        return { kind: 'new' };
+    if (repo.status !== 200) {
+        return {
+            kind: 'unknown',
+            reason: `the ABAP repository service answered HTTP ${repo.status}` +
+                (repo.status === 401 || repo.status === 403 ? ' (the SAP user may lack authorisation for /UI5/ABAP_REPOSITORY_SRV)' : ''),
+        };
+    }
+    let description;
+    let pkg;
+    try {
+        const d = JSON.parse(repo.body ?? '').d;
+        description = d?.Description || undefined;
+        pkg = d?.Package || undefined;
+    }
+    catch { /* the entry exists; its details are only for the message */ }
+    let appId = null;
+    try {
+        const m = await get(bspFilePath(bsp, 'manifest.json'));
+        if (m.status === 200) {
+            const id = JSON.parse(m.body ?? '')['sap.app']?.id;
+            if (typeof id === 'string' && id.trim() !== '')
+                appId = id.trim();
+        }
+    }
+    catch { /* unknown app id — treated as a different app */ }
+    return { kind: 'existing', appId, ...(description ? { description } : {}), ...(pkg ? { package: pkg } : {}) };
+}
+/** The approval object an overwrite must carry: `<BSP> overwrites app id <id|unknown>`. */
+export function overwriteApprovalObject(bsp, remoteAppId) {
+    return `${bsp} overwrites app id ${remoteAppId ?? 'unknown'}`;
+}