@open-rap/compiler 0.0.0-stage → 0.1.0

package/dist/ir/authorizations.js

@@ -0,0 +1,178 @@
+/**
+ * Authorizations of the application (decision D34): the authorization objects of the sources
+ * (SUSO objects of abapGit) and the roles of `rapt/authorizations.json`, next to the abapGit
+ * sources — the counterpart of the IAM apps, business catalogs and business roles of the ABAP
+ * environment: each role of the identity provider gives authorizations, instances of
+ * authorization objects with field values, that AUTHORITY-CHECK and the access controls read.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import path from "node:path";
+import * as abaplint from "@abaplint/core";
+import { XMLParser } from "fast-xml-parser";
+import { filesOfType } from "../input/project.js";
+/** The file of the roles, relative to the root of the abapGit project. */
+export const AUTHORIZATIONS_FILE = "rapt/authorizations.json";
+const parser = new XMLParser({ ignoreAttributes: true, parseTagValue: false, trimValues: true, isArray: (name) => name === "TACTZ" || name === "TOBJT" });
+/** An authorization object from its abapGit serialization (TOBJ: FIEL1…FIEL0, TACTZ: activities). */
+export function readSusoXml(xml) {
+    const doc = parser.parse(xml);
+    const values = doc["abapGit"]?.["asx:abap"]?.["asx:values"];
+    const tobj = values?.["TOBJ"];
+    const name = typeof tobj?.["OBJCT"] === "string" ? tobj["OBJCT"].toUpperCase() : undefined;
+    if (tobj === undefined || name === undefined) {
+        return undefined;
+    }
+    const fields = ["FIEL1", "FIEL2", "FIEL3", "FIEL4", "FIEL5", "FIEL6", "FIEL7", "FIEL8", "FIEL9", "FIEL0"].map((f) => tobj[f]).filter((f) => typeof f === "string" && f !== "").map((f) => f.toUpperCase());
+    const object = { name, fields };
+    // TACTZ is a table of rows (TACTZ inside TACTZ in the serialization)
+    const activities = (values?.["TACTZ"] ?? [])
+        .flatMap((t) => (Array.isArray(t["TACTZ"]) ? t["TACTZ"] : [t]))
+        .map((row) => row["ACTVT"])
+        .filter((a) => typeof a === "string");
+    if (activities.length > 0) {
+        object.activities = activities;
+    }
+    const text = (values?.["TOBJT"] ?? []).find((t) => typeof t["TTEXT"] === "string")?.["TTEXT"];
+    if (typeof text === "string") {
+        object.description = text;
+    }
+    return object;
+}
+const isValue = (v) => typeof v === "string" || (typeof v === "object" && v !== null && typeof v.from === "string" && typeof v.to === "string");
+/**
+ * The authorization objects of the sources and the roles of rapt/authorizations.json, checked
+ * against each other; undefined when the project has neither.
+ */
+export function loadAuthorizations(project, diagnostics) {
+    const objects = new Map();
+    for (const file of filesOfType(project, "SUSO").filter((f) => f.extension === "xml")) {
+        const object = readSusoXml(file.content);
+        if (object === undefined) {
+            diagnostics.error("AUTH001", "unreadable authorization object", { file: file.path, line: 1 });
+            continue;
+        }
+        objects.set(object.name, object);
+    }
+    const file = path.join(project.root, AUTHORIZATIONS_FILE);
+    if (!existsSync(file)) {
+        return objects.size === 0 ? undefined : { objects: [...objects.values()], roles: [] };
+    }
+    const at = { file: AUTHORIZATIONS_FILE, line: 1 };
+    let json;
+    try {
+        json = JSON.parse(readFileSync(file, "utf8"));
+    }
+    catch (error) {
+        diagnostics.error("AUTH001", `${AUTHORIZATIONS_FILE} is not valid JSON: ${error.message}`, at);
+        return undefined;
+    }
+    const root = json;
+    // objects declared in the file (authorization objects that are not in the sources)
+    for (const [name, value] of Object.entries((root.objects ?? {}))) {
+        const fields = value?.fields;
+        if (!Array.isArray(fields) || !fields.every((f) => typeof f === "string")) {
+            diagnostics.error("AUTH001", `objects.${name}: "fields" must be a list of field names`, at);
+            continue;
+        }
+        if (!objects.has(name.toUpperCase())) {
+            const object = { name: name.toUpperCase(), fields: fields.map((f) => f.toUpperCase()) };
+            const activities = value.activities;
+            if (Array.isArray(activities)) {
+                object.activities = activities.map(String);
+            }
+            objects.set(object.name, object);
+        }
+    }
+    if (typeof root.roles !== "object" || root.roles === null || Array.isArray(root.roles)) {
+        diagnostics.error("AUTH001", `${AUTHORIZATIONS_FILE}: "roles" must be an object (role name → authorizations)`, at);
+        return undefined;
+    }
+    const roles = [];
+    for (const [name, value] of Object.entries(root.roles)) {
+        const definition = value;
+        if (!Array.isArray(definition?.authorizations)) {
+            diagnostics.error("AUTH001", `roles.${name}: "authorizations" must be a list`, at);
+            continue;
+        }
+        const role = { name, authorizations: [] };
+        if (typeof definition.description === "string") {
+            role.description = definition.description;
+        }
+        for (const [i, entry] of definition.authorizations.entries()) {
+            const where = `roles.${name}.authorizations[${i}]`;
+            const authorization = entry;
+            if (typeof authorization?.object !== "string" || typeof authorization.fields !== "object" || authorization.fields === null) {
+                diagnostics.error("AUTH001", `${where}: an authorization has an "object" and "fields"`, at);
+                continue;
+            }
+            const objectName = authorization.object.toUpperCase();
+            const object = objects.get(objectName);
+            if (object === undefined) {
+                diagnostics.warning("AUTH002", `${where}: the authorization object ${objectName} is neither in the sources (SUSO) nor in "objects"; its fields are not checked`, at);
+            }
+            const fields = {};
+            for (const [field, raw] of Object.entries(authorization.fields)) {
+                const values = Array.isArray(raw) ? raw : [raw];
+                if (!values.every(isValue)) {
+                    diagnostics.error("AUTH001", `${where}.fields.${field}: a value is a string ("02", "07*", "*", "{claim:agency}") or a range {"from", "to"}`, at);
+                    continue;
+                }
+                const upper = field.toUpperCase();
+                if (object !== undefined && !object.fields.includes(upper)) {
+                    diagnostics.error("AUTH003", `${where}: ${objectName} has no field ${upper} (fields: ${object.fields.join(", ")})`, at);
+                    continue;
+                }
+                if (upper === "ACTVT" && object?.activities !== undefined) {
+                    const unknown = values.filter((v) => typeof v === "string" && !v.includes("*") && !v.startsWith("{") && !object.activities?.includes(v));
+                    if (unknown.length > 0) {
+                        diagnostics.warning("AUTH004", `${where}: ${objectName} does not permit the activities ${unknown.join(", ")}`, at);
+                    }
+                }
+                fields[upper] = values;
+            }
+            role.authorizations.push({ object: objectName, fields });
+        }
+        roles.push(role);
+    }
+    return { objects: [...objects.values()], roles };
+}
+/**
+ * The AUTHORITY-CHECK statements of the ABAP code: an authorization object of the sources must
+ * have the fields the statement checks (ABP010), and an unknown object is reported (ABP011).
+ */
+export function checkAuthorityChecks(registry, project, authorizations, diagnostics) {
+    const objects = new Map((authorizations?.objects ?? []).map((o) => [o.name, o]));
+    for (const object of registry.getObjects()) {
+        if (!(object instanceof abaplint.ABAPObject)) {
+            continue;
+        }
+        for (const file of object.getABAPFiles()) {
+            const source = project.files.find((f) => f.fileName === file.getFilename());
+            if (source === undefined) {
+                continue;
+            }
+            for (const statement of file.getStatements()) {
+                if (!(statement.get() instanceof abaplint.Statements.AuthorityCheck)) {
+                    continue;
+                }
+                const text = statement.concatTokens();
+                const at = { file: source.path, line: statement.getStart().getRow(), column: statement.getStart().getCol() };
+                const name = /\bOBJECT\s+'([^']+)'/i.exec(text)?.[1]?.toUpperCase();
+                if (name === undefined) {
+                    continue;
+                }
+                const known = objects.get(name);
+                if (known === undefined) {
+                    diagnostics.warning("ABP011", `AUTHORITY-CHECK OBJECT '${name}': the authorization object is neither in the sources (SUSO) nor in ${AUTHORIZATIONS_FILE}; no role grants it, the check fails`, at);
+                    continue;
+                }
+                for (const id of [...text.matchAll(/\bID\s+'([^']+)'/gi)].map((m) => (m[1] ?? "").toUpperCase())) {
+                    if (!known.fields.includes(id)) {
+                        diagnostics.error("ABP010", `AUTHORITY-CHECK OBJECT '${name}': the object has no field ${id} (fields: ${known.fields.join(", ")})`, at);
+                    }
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=authorizations.js.map

package/dist/ir/authorizations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizations.js","sourceRoot":"","sources":["../../src/ir/authorizations.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,WAAW,EAAgB,MAAM,qBAAqB,CAAC;AAEhE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAE9D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;AAE1J,qGAAqG;AACrG,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IACzD,MAAM,MAAM,GAAK,GAAG,CAAC,SAAS,CAAyC,EAAE,CAAC,UAAU,CAAyC,EAAE,CAAC,YAAY,CAAwC,CAAC;IACrL,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAwC,CAAC;IACrE,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACxN,MAAM,MAAM,GAA6B,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1D,qEAAqE;IACrE,MAAM,UAAU,GAAG,CAAE,MAAM,EAAE,CAAC,OAAO,CAA2B,IAAI,EAAE,CAAC;SACpE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAE,CAA6B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAG,CAA6B,CAAC,OAAO,CAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACvI,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAE,GAA+B,CAAC,OAAO,CAAC,CAAC;SACvD,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,CAAC;IACD,MAAM,IAAI,GAAG,CAAE,MAAM,EAAE,CAAC,OAAO,CAAgD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IAC9I,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAU,EAA2B,EAAE,CACtD,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,OAAQ,CAAwB,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAQ,CAAsB,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;AAEzK;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAgB,EAAE,WAAwB;IAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,EAAE,CAAC;QACrF,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,iCAAiC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9F,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC1D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACxF,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAClD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,mBAAmB,uBAAwB,KAAe,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1G,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,IAA8C,CAAC;IAC5D,mFAAmF;IACnF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAC,EAAE,CAAC;QAC5F,MAAM,MAAM,GAAI,KAA8B,EAAE,MAAM,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC1E,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,IAAI,0CAA0C,EAAE,EAAE,CAAC,CAAC;YAC5F,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACrC,MAAM,MAAM,GAA6B,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAG,MAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAChI,MAAM,UAAU,GAAI,KAAkC,CAAC,UAAU,CAAC;YAClE,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvF,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,mBAAmB,0DAA0D,EAAE,EAAE,CAAC,CAAC;QACnH,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAgC,CAAC,EAAE,CAAC;QAClF,MAAM,UAAU,GAAG,KAA4D,CAAC;QAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;YAC/C,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,IAAI,mCAAmC,EAAE,EAAE,CAAC,CAAC;YACnF,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAc,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;QACrD,IAAI,OAAO,UAAU,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC/C,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAK,UAAU,CAAC,cAA4B,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5E,MAAM,KAAK,GAAG,SAAS,IAAI,mBAAmB,CAAC,GAAG,CAAC;YACnD,MAAM,aAAa,GAAG,KAA+C,CAAC;YACtE,IAAI,OAAO,aAAa,EAAE,MAAM,KAAK,QAAQ,IAAI,OAAO,aAAa,CAAC,MAAM,KAAK,QAAQ,IAAI,aAAa,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC3H,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,iDAAiD,EAAE,EAAE,CAAC,CAAC;gBAC5F,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACvC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,KAAK,8BAA8B,UAAU,gFAAgF,EAAE,EAAE,CAAC,CAAC;YACvK,CAAC;YACD,MAAM,MAAM,GAAyC,EAAE,CAAC;YACxD,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,MAAiC,CAAC,EAAE,CAAC;gBAC3F,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3B,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,WAAW,KAAK,sFAAsF,EAAE,EAAE,CAAC,CAAC;oBACjJ,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;gBAClC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC3D,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,KAAK,UAAU,iBAAiB,KAAK,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACxH,SAAS;gBACX,CAAC;gBACD,IAAI,KAAK,KAAK,OAAO,IAAI,MAAM,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;oBACtJ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACvB,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,KAAK,KAAK,UAAU,mCAAmC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;oBACrH,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;YACzB,CAAC;YACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAA4B,EAAE,OAAgB,EAAE,cAA+C,EAAE,WAAwB;IAC5J,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,CAAC,MAAM,YAAY,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7C,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAC5E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;gBAC7C,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,YAAY,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;oBACrE,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC;gBACtC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC7G,MAAM,IAAI,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;gBACpE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,2BAA2B,IAAI,uEAAuE,mBAAmB,sCAAsC,EAAE,EAAE,CAAC,CAAC;oBACnM,SAAS;gBACX,CAAC;gBACD,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACjG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;wBAC/B,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,2BAA2B,IAAI,8BAA8B,EAAE,aAAa,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBAC1I,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/ir/behaviors.d.ts

@@ -0,0 +1,16 @@
+/** BDEF AST → IR behavior, with the checks against the CDS entities and the dictionary. */
+import { type BehaviorModel, type EntityModel, type ProjectMode } from "@open-rap/model";
+import type { BdefAst } from "../bdef/ast.js";
+import type { Diagnostics } from "../diagnostics.js";
+import type { SourceFile } from "../input/project.js";
+import type { Dictionary } from "./dictionary.js";
+/** The actions of a draft BO, provided by the runtime (D54). */
+export declare const DRAFT_ACTIONS: Set<string>;
+export interface BehaviorContext {
+    diagnostics: Diagnostics;
+    dictionary: Dictionary;
+    entity: (name: string) => EntityModel | undefined;
+    /** The mode of the project (D45): some constructions are Open RAP Runtime extensions. */
+    mode?: ProjectMode;
+}
+export declare function buildBehavior(name: string, ast: BdefAst, file: SourceFile, ctx: BehaviorContext): BehaviorModel | undefined;