@cspeach/cli 1.1.44 → 1.1.46

package/dist/tools/transport.js

@@ -7,14 +7,21 @@
  *   transportList(user?, status?)                 → Promise<TransportListResult>  line 1048
  *     TransportListResult { filterUser, filterStatus, transports: TransportEntry[] }
  *     TransportEntry { transportNumber, description?, owner?, status?, type?, target? }
- *   transportRelease(transportNumber)             → Promise<TransportResult>      line 2546
- *     Released status string from SAP is 'released' (not a raw 'R' code).
+ *   transportRead(number)                         → Promise<TransportRequestDoc>    (Part 3)
+ *   transportRelease(number)                      → Promise<TransportReleaseResult> (Part 3)
+ *     status 'released' only on SAP's verdict for every step AND a status read back of R/N.
  */
 import { bindGrantTransport, isPlanGrantInScope } from '../approvals/plan-grant.js';
 import { registerTool } from './index.js';
 import { verifyAndSpendApprovalId } from '../approvals/jwt.js';
-import { auditLog } from '@cspeach/sap-client';
+import { auditLog, SapNotFoundError, isModifiable, knownObjectCount, allObjectNames } from '@cspeach/sap-client';
+import { typeCode } from '../approvals/risk-floor.js';
+import { spillToolResult } from './result-spill.js';
+import { notModifiableText } from './release-texts.js';
+import { RELEASE_CHECK_LINE } from '../approvals/op-labels.js';
 import { ERR } from '../errors/codes.js';
+import { presentSafetyConfirmation } from '../repl/safety-confirm.js';
+import { isSafetyConfirmEnabled } from '../repl/safety-mode-state.js';
 import { setCurrentTransport, noteConfirmedTransport } from '../repl/current-transport.js';
 import { enrichTransportList } from './transport-fit.js';
 import { reusedRequestRefusal } from './transport-fit-check.js';
@@ -472,40 +479,259 @@ registerTool({
         }
     },
 });
+// ── sap_transport_read ───────────────────────────────────────────────────────
+//
+// Part 3 (D16) — one transport request as SAP's transport organizer shows it.
+// Read only, no approval.
+/** The 404 text, never SAP's generic "Object not found". */
+function notFoundText(n) {
+    return `Transport request ${n} does not exist.`;
+}
+/** Gate 0 of the release and the whole of the read: SAP's own document, or the refusal envelope. */
+async function readRequest(ctx, asked) {
+    try {
+        return { doc: await ctx.adt.transportRead(asked) };
+    }
+    catch (err) {
+        const body = err instanceof SapNotFoundError
+            ? { error: 'not_found', detail: notFoundText(asked) }
+            : { error: 'transport_read_failed', detail: err instanceof Error ? err.message : String(err) };
+        return { refusal: { content: JSON.stringify(body), is_error: true } };
+    }
+}
+registerTool({
+    name: 'sap_transport_read',
+    description: 'Read one transport request: status, owner, target, its tasks and how many objects it holds. '
+        + 'A task number answers its request with that task. Read only.',
+    isMutating: false,
+    requiresSap: true,
+    requires: 'cts.requests',
+    input_schema: {
+        type: 'object',
+        properties: {
+            transport: { type: 'string', description: 'Transport request or task number (e.g. DEVK900123)' },
+        },
+        required: ['transport'],
+    },
+    handler: async (args, ctx) => {
+        const asked = String(args.transport ?? '').trim().toUpperCase();
+        const read = await readRequest(ctx, asked);
+        if ('refusal' in read)
+            return read.refusal;
+        const { doc } = read;
+        const objectCount = knownObjectCount(doc);
+        const notes = [];
+        if (doc.kind === 'task')
+            notes.push(`${asked} is a task of ${doc.number}.`);
+        if (objectCount === null)
+            notes.push(`CSPeach could not count the objects of ${doc.number}.`);
+        return {
+            content: JSON.stringify({
+                kind: doc.kind,
+                request: doc.number,
+                description: doc.description,
+                owner: doc.owner,
+                type: doc.type,
+                status: doc.status,
+                status_text: doc.statusText,
+                target: doc.target,
+                tasks: doc.tasks.map((t) => ({
+                    number: t.number, owner: t.owner, status: t.status, status_text: t.statusText, objects: t.objectCount,
+                })),
+                object_count: objectCount,
+                can_release: isModifiable(doc.status) && doc.actions.includes('newreleasejobs'),
+                ...(notes.length ? { note: notes.join(' ') } : {}),
+            }),
+        };
+    },
+});
 // ── sap_transport_release ────────────────────────────────────────────────────
 //
-// 1.1.44 hotfix: not available. The request this tool used to send never
-// released anything (SAP routes it to the create-request handler), and the
-// tool then reported "released". Until the proper release ships, the tool
-// refuses before anything else: no approval spent, no card, no SAP request.
-const RELEASE_UNAVAILABLE = 'Releasing a transport is not available in this version of CSPeach. '
-    + 'Release it in SE09 or Eclipse. Nothing was sent to SAP.';
+// Part 3 (D10–D13, D17) — every open task first, then the request, on SAP's
+// own release verdict (sap-client transportRelease). Gates, in order:
+//   0.  read the request: missing, a task number, not modifiable → refused;
+//   0b. the request's objects (its tasks' too) against the inactive list →
+//       refused (SAP would abort with abortrelinacobj; its consistency check
+//       does not see inactive objects);
+//   1.  the approval (op release, type CTS) — spent only after 0/0b passed;
+//   2.  the safety card (Rule 9) when safety mode is on.
+// The envelope carries every step's verdict, SAP's texts and raw reports, what
+// was never sent, the status read back, and that the release is not yet proven
+// live. sap-client writes the audit rows (one per step and one closing row);
+// the tool writes none of its own, except when sap-client threw before any.
+/** Verdicts that mean "SAP would release it if something were ignored" (D11). */
+const IGNORE_VERDICTS = new Set(['relwithignlock', 'relObjigchkatc', 'relwithignwarning']);
+const NOT_YET_PROVEN = "Built from SAP's own release interface and tested against recorded answers; not yet run in a live release. "
+    + 'Ask the user to check the transport in SE09 after the release.';
 registerTool({
     name: 'sap_transport_release',
-    description: 'Releasing a transport is not available in this version of CSPeach. '
-        + 'This tool sends nothing to SAP; tell the user to release the transport in SE09 or Eclipse.',
+    description: 'Release a transport request: every open task first, then the request. The verdict comes from SAP\'s own release '
+        + 'report, step by step, and the request status is read back; an HTTP answer alone is never taken as released. '
+        + 'Stops at the first step SAP does not release; never ignores locks, object-check errors or warnings (release '
+        + 'those in SE09 or Eclipse). Built from SAP\'s own release interface and tested against recorded answers; not '
+        + 'yet run in a live release, so ask the user to check the transport in SE09 afterwards. Cannot be undone. '
+        + 'Requires approval_id from a request_approval change of op `release`, type CTS (one approval per release; '
+        + 'never auto-approved).',
     isMutating: true,
     requiresSap: true,
+    requires: 'cts.requests',
     input_schema: {
         type: 'object',
         properties: {
             transport: {
                 type: 'string',
-                description: 'Transport request number (e.g. DEVK900123)',
+                description: 'Transport request number to release (e.g. DEVK900123); not a task number',
             },
             approval_id: {
                 type: 'string',
-                description: 'JWT from request_approval (not used: release is not available)',
+                description: 'JWT from request_approval (a change of op release, type CTS)',
             },
         },
-        required: ['transport'],
+        required: ['transport', 'approval_id'],
+    },
+    handler: async (args, ctx) => {
+        const asked = String(args.transport ?? '').trim().toUpperCase();
+        // ── Gate 0: SAP's own facts, read fresh (D10, D12) ──────────────────────
+        const read = await readRequest(ctx, asked);
+        if ('refusal' in read)
+            return read.refusal;
+        const { doc } = read;
+        if (doc.kind === 'task') {
+            return {
+                content: JSON.stringify({
+                    error: 'task_number',
+                    message: `${asked} is a task of ${doc.number}. Give the request number; CSPeach releases the tasks first, then the request.`,
+                }),
+                is_error: true,
+            };
+        }
+        if (!isModifiable(doc.status)) {
+            return {
+                content: JSON.stringify({
+                    error: 'not_modifiable',
+                    message: notModifiableText(doc),
+                }),
+                is_error: true,
+            };
+        }
+        // ── Gate 0b: inactive objects of the request (T14) ──────────────────────
+        let warning;
+        let inactiveNames;
+        try {
+            inactiveNames = new Set((await ctx.adt.inactiveObjects()).map((o) => String(o.name ?? '').trim().toUpperCase()));
+        }
+        catch {
+            warning = 'CSPeach could not read the inactive list; SAP aborts a release that holds inactive objects.';
+        }
+        if (inactiveNames) {
+            const blocked = allObjectNames(doc).filter((n) => inactiveNames.has(n));
+            if (blocked.length > 0) {
+                return {
+                    content: JSON.stringify({
+                        error: 'release_blocked_inactive',
+                        objects: blocked,
+                        message: `These objects of ${doc.number} are inactive: ${blocked.join(', ')}. `
+                            + 'Activate them (sap_activate), then ask again. SAP would abort the release.',
+                    }),
+                    is_error: true,
+                };
+            }
+        }
+        // ── Gate 1: Approval (op release, type CTS) ─────────────────────────────
+        const verify = await verifyAndSpendApprovalId(args.approval_id, args.transport, 'release');
+        if (!verify.ok) {
+            return {
+                content: JSON.stringify({ error: ERR.APPROVAL_INVALID, reason: verify.reason }),
+                is_error: true,
+            };
+        }
+        if (typeCode(verify.payload?.type) !== 'CTS') {
+            return {
+                content: JSON.stringify({ error: ERR.APPROVAL_INVALID, reason: 'type_mismatch' }),
+                is_error: true,
+            };
+        }
+        const startedAt = Date.now();
+        // ── Gate 2: Safety confirmation (Rule 9 — a release cannot be undone) ───
+        if (isSafetyConfirmEnabled()) {
+            const openTasks = doc.tasks.filter((t) => isModifiable(t.status)).map((t) => t.number);
+            const objects = knownObjectCount(doc);
+            const c = await presentSafetyConfirmation({
+                rule: 'RULE_9_TRANSPORT_RELEASE',
+                op: 'transport_release',
+                object: { type: 'TRANSPORT', name: doc.number },
+                what_will_happen: `Releases ${openTasks.length} task(s)${openTasks.length ? ` (${openTasks.join(', ')})` : ''} then request ${doc.number} `
+                    + `(${objects === null ? 'an uncounted number of' : objects} objects, target ${doc.target || 'none'}). `
+                    + `Cannot be undone; the request may move to other systems on the route. ${RELEASE_CHECK_LINE}`,
+                rollback_available: false,
+                transport: doc.number,
+                args: { ...args },
+            });
+            if (!c.confirmed) {
+                return {
+                    content: JSON.stringify({ error: 'cancelled_by_user', reason: c.reason }),
+                    is_error: true,
+                };
+            }
+        }
+        // ── Release: tasks, then the request, on SAP's verdict ──────────────────
+        let r;
+        try {
+            r = await ctx.adt.transportRelease(doc.number);
+        }
+        catch (err) {
+            // sap-client threw before its first step (its own read): it wrote no row.
+            await auditLog('transportRelease', 'CTS', doc.number, 'error', Date.now() - startedAt);
+            return {
+                content: JSON.stringify({ error: 'transport_release_failed', detail: err instanceof Error ? err.message : String(err) }),
+                is_error: true,
+            };
+        }
+        const finalStatus = r.finalStatus?.status;
+        // Never `released: true` beside a status that is not R or N.
+        const released = r.status === 'released' && (finalStatus === 'R' || finalStatus === 'N');
+        let note;
+        switch (r.status) {
+            case 'released':
+                // Worded from `released`, never from r.status alone: "Released." only beside released: true.
+                note = released
+                    ? "Released. SAP's answer for each step is in steps[] and sap_answer[]."
+                    : `SAP reported every step released, but the request reads status ${finalStatus || 'unknown'}. Check it in SE09.`;
+                break;
+            case 'stopped': {
+                const last = r.steps[r.steps.length - 1];
+                note = `${r.error ?? ''} Nothing was sent after that step.`.trim();
+                if (last && IGNORE_VERDICTS.has(last.verdict)) {
+                    note += ' CSPeach does not release with anything ignored. Release it in SE09 or Eclipse if that is what you want.';
+                }
+                break;
+            }
+            case 'refused':
+                note = r.refusal ?? 'Nothing was sent.';
+                break;
+            default:
+                note = r.error ?? `The release ended with status ${r.status}.`;
+        }
+        const detail = r.refusal ?? r.error;
+        const stopStep = r.status === 'stopped' ? r.steps[r.steps.length - 1] : undefined;
+        const envelope = {
+            released,
+            status: r.status,
+            // Near the top so a spilled preview (and the audit row read from it) keeps the stopping step.
+            ...(stopStep ? { stopped_at: stopStep.number, stop_verdict: stopStep.verdict } : {}),
+            transport_number: r.transportNumber,
+            final_status: finalStatus,
+            not_sent: r.notSent ?? [],
+            note,
+            ...(detail ? { error_detail: detail } : {}),
+            ...(warning ? { warning } : {}),
+            not_yet_proven: NOT_YET_PROVEN,
+            steps: r.steps.map(({ rawReports: _raw, ...s }) => s),
+            sap_answer: r.steps.map((s) => ({ step: s.number, raw: s.rawReports ?? '' })),
+        };
+        // Pretty-printed with the facts first: a spilled preview keeps the verdict
+        // lines (a one-line JSON would be cut at the preview's line limit).
+        const failed = r.status === 'stopped' || r.status === 'error' || r.status === 'refused';
+        return spillToolResult({ content: JSON.stringify(envelope, null, 2), ...(failed ? { is_error: true } : {}) }, ctx, 'report', { label: `release ${r.transportNumber}` });
     },
-    handler: async (args) => ({
-        content: JSON.stringify({
-            error: 'release_unavailable',
-            transport: args.transport,
-            message: RELEASE_UNAVAILABLE,
-        }),
-        is_error: true,
-    }),
 });

package/dist/tools/write-mode.js

@@ -23,6 +23,8 @@ export const WRITE_TOOLS = new Set([
     'sap_transport_release',
     // Final review I2 — SAP's RAP generator creates the skeleton objects.
     'sap_generate_objects',
+    // Part 3 — a run executes code on the SAP system; advisory mode never runs it.
+    'sap_run',
 ]);
 export function isWriteTool(name) {
     return WRITE_TOOLS.has(name);

package/dist/ui/approval-modal.js

@@ -2,7 +2,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useRef, useState } from 'react';
 import { Box, Text, useInput, useStdout } from 'ink';
 import { riskReasonText, shownRiskReasons } from '../approvals/risk-floor.js';
-import { verbLine, viewAffordance, toSourceLines, affectsLine } from '../approvals/op-labels.js';
+import { verbLine, viewAffordance, toSourceLines, affectsLine, releaseLines } from '../approvals/op-labels.js';
 // BUG-1 (2026-07-05 live smoke): the interactive approval modal mounted
 // DEAD — every keypress ignored — when it appeared after a guarded
 // /abap-plan turn. Root cause is identical to the one AskCard
@@ -39,10 +39,18 @@ export function riskRows(effectiveRisk, width) {
  * decision input too: its "Affects:" text wraps onto up to this many rows.
  */
 export const AFFECTS_MAX_ROWS = 2;
-/** The "Affects: …" rows under the verb line; none when the change names no process. */
+/**
+ * The rows under the verb line: "Affects: …" (none when the change names no
+ * process), then — Part 3 D12 — a release card's fact lines, each wrapping
+ * onto up to AFFECTS_MAX_ROWS rows. Any other change: exactly as before.
+ */
 export function affectsRows(change, width) {
+    const cols = Math.max(1, width - MODAL_CHROME_COLS);
     const line = affectsLine(change);
-    return line ? wrapRows(line, Math.max(1, width - MODAL_CHROME_COLS), AFFECTS_MAX_ROWS) : [];
+    return [
+        ...(line ? wrapRows(line, cols, AFFECTS_MAX_ROWS) : []),
+        ...releaseLines(change).flatMap((l) => wrapRows(l, cols, AFFECTS_MAX_ROWS)),
+    ];
 }
 /**
  * The collapsed card's rendered height at `width` (the live-area budget; the

package/dist/ui/sap-state-store.js

@@ -20,6 +20,7 @@ const DEFAULT_STATE = {
     creditsMode: false, creditsSessionTotal: 0, creditsBalance: null,
     creditsUnitLabel: 'credits', creditsPending: false,
     standalone: false,
+    chatLane: false,
 };
 /**
  * Rate limiter: calls `fn` at most once every `minIntervalMs`. Trailing-only:

package/dist/ui/session-timeline.js

@@ -14,7 +14,7 @@ const MUTATING_TOOLS = new Set([
     'sap_set_source', 'sap_update_method', 'sap_delete_object', 'sap_activate',
     'sap_create_object', 'sap_transport_release', 'sap_message_maintain',
     'sap_number_range_intervals', 'sap_service_binding_publish',
-    'sap_service_binding_unpublish',
+    'sap_service_binding_unpublish', 'sap_run',
 ]);
 export function toTimelineEntry(call) {
     // args shape depends on the tool; extract defensively.

package/dist/ui/widgets/ask-card.js

@@ -178,6 +178,7 @@ export function toCardQuestions(request) {
             options: freeText ? [] : request.choices,
             otherRow: false,
             defaultValue: request.defaultValue,
+            cursorValue: request.cursorValue,
             keys: request.keys,
         }];
 }
@@ -323,7 +324,7 @@ export function AskCard({ request, width, showDescriptions, maxRows, onResolveV1
     // Focus slots: 0..n-1 = questions; n = the Review step (2+ questions,
     // reachable only once every question has an answer).
     const [focus, setFocus] = useState(0);
-    const [cursors, setCursors] = useState(() => questions.map((qq) => Math.max(0, qq.options.findIndex((o) => o.value === qq.defaultValue))));
+    const [cursors, setCursors] = useState(() => questions.map((qq) => Math.max(0, qq.options.findIndex((o) => o.value === (qq.defaultValue ?? qq.cursorValue)))));
     const [ticks, setTicks] = useState(() => questions.map(() => new Set()));
     const [drafts, setDrafts] = useState(() => questions.map(() => ''));
     const [answers, setAnswers] = useState(() => questions.map(() => null));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cspeach/cli",
-  "version": "1.1.44",
+  "version": "1.1.46",
   "description": "CSPeach — AI-assisted ABAP development CLI. Direct SAP access, signed skills, safety gates.",
   "keywords": [
     "abap",
@@ -54,7 +54,7 @@
     "@anthropic-ai/sdk": "^0.90.0",
     "@azure/msal-node": "6.0.1",
     "@cspeach/register-core": "0.4.0",
-    "@cspeach/sap-client": "0.1.28",
+    "@cspeach/sap-client": "0.1.29",
     "@iarna/toml": "^2.2.5",
     "@inkjs/ui": "^2.0.0",
     "@inquirer/prompts": "^7.0.0",
@@ -74,6 +74,7 @@
     "clipboardy": "^5.3.1",
     "cross-spawn": "^7.0.6",
     "diff": "^9.0.0",
+    "docx": "^9.0.2",
     "ejs": "3.1.10",
     "fuse.js": "^7.0.0",
     "ink": "^5.0.0",
@@ -104,7 +105,6 @@
     "@types/turndown": "^5.0.5",
     "@ui5/builder": "4.3.2",
     "@ui5/fs": "4.0.6",
-    "docx": "^9.0.2",
     "husky": "^9.1.7",
     "ink-testing-library": "^4.0.0",
     "pdf-lib": "^1.17.1",