@open-rap/compiler 0.0.0-stage → 0.1.1

package/dist/gen/vendor.js

@@ -0,0 +1,68 @@
+/**
+ * The packages of this repository embedded in a generated folder (`vendor/`, decision D15): the
+ * application or the launchpad installs them without a private registry.
+ */
+import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
+import { createRequire } from "node:module";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { shortHash } from "@open-rap/model";
+/** The folder of a package of this repository: installed next to the compiler, or in the monorepo. */
+export function packageDir(name, folder, given) {
+    const candidates = [];
+    if (given !== undefined) {
+        candidates.push(path.resolve(given));
+    }
+    try {
+        let dir = path.dirname(createRequire(import.meta.url).resolve(name));
+        while (!existsSync(path.join(dir, "package.json")) && path.dirname(dir) !== dir) {
+            dir = path.dirname(dir);
+        }
+        candidates.push(dir);
+    }
+    catch {
+        // not installed: the monorepo layout
+    }
+    candidates.push(fileURLToPath(new URL(`../../../${folder}/`, import.meta.url)));
+    return candidates.find((dir) => existsSync(path.join(dir, "package.json")) && existsSync(path.join(dir, "dist")));
+}
+function filesBelow(root, dir = root) {
+    const result = [];
+    for (const entry of readdirSync(dir)) {
+        const full = path.join(dir, entry);
+        if (statSync(full).isDirectory()) {
+            result.push(...filesBelow(root, full));
+        }
+        else if (!entry.endsWith(".tsbuildinfo")) {
+            result.push(path.relative(root, full).split(path.sep).join("/"));
+        }
+    }
+    return result;
+}
+/** A package of the repository, as files of `vendor/<folder>/`: its dist and a production package.json. */
+export function vendorPackage(dir, folder, rename) {
+    const manifest = JSON.parse(readFileSync(path.join(dir, "package.json"), "utf8"));
+    const dependencies = {};
+    for (const [name, version] of Object.entries(manifest.dependencies ?? {})) {
+        dependencies[name] = rename[name] ?? version;
+    }
+    const dist = filesBelow(path.join(dir, "dist")).map((file) => ({ path: `vendor/${folder}/dist/${file}`, content: readFileSync(path.join(dir, "dist", file), "utf8") }));
+    // a version that changes with the content: npm install updates the copy after a new rapt build
+    const version = `${manifest.version}-rapt.${shortHash(dist.map((f) => `${f.path}\n${f.content}`).join("\n"))}`;
+    const vendored = { name: manifest.name, version, license: manifest.license ?? "MIT", type: manifest.type ?? "module", dependencies };
+    if (manifest.main !== undefined)
+        vendored.main = manifest.main;
+    if (manifest.types !== undefined)
+        vendored.types = manifest.types;
+    if (manifest.exports !== undefined)
+        vendored.exports = manifest.exports;
+    if (manifest.engines !== undefined)
+        vendored.engines = manifest.engines;
+    const files = [{ path: `vendor/${folder}/package.json`, content: `${JSON.stringify(vendored, null, 2)}\n` }, ...dist];
+    const license = [path.join(dir, "LICENSE"), path.join(dir, "..", "..", "LICENSE")].find((f) => existsSync(f));
+    if (license !== undefined) {
+        files.push({ path: `vendor/${folder}/LICENSE`, content: readFileSync(license, "utf8") });
+    }
+    return files;
+}
+//# sourceMappingURL=vendor.js.map

package/dist/gen/vendor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendor.js","sourceRoot":"","sources":["../../src/gen/vendor.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAe5C,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,MAAc,EAAE,KAAc;IACrE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;YAChF,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,MAAM,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AACpH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,GAAG,GAAG,IAAI;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,MAAc,EAAE,MAA8B;IACvF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAgB,CAAC;IACjG,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1E,YAAY,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC;IAC/C,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,MAAM,SAAS,IAAI,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACxK,+FAA+F;IAC/F,MAAM,OAAO,GAAG,GAAG,QAAQ,CAAC,OAAO,SAAS,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IAC/G,MAAM,QAAQ,GAAgB,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,QAAQ,EAAE,YAAY,EAAE,CAAC;IAClJ,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;QAAE,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC/D,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAClE,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS;QAAE,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACxE,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS;QAAE,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACxE,MAAM,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,MAAM,eAAe,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;IACtH,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9G,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,MAAM,UAAU,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/gen/xml.d.ts

@@ -0,0 +1,9 @@
+/** A minimal XML writer: elements, attributes, text, with escaping and indentation. */
+export interface XmlElement {
+    name: string;
+    attributes?: Record<string, string | number | boolean | undefined>;
+    children?: Array<XmlElement | string | undefined | false>;
+}
+export declare function el(name: string, attributes?: XmlElement["attributes"], ...children: Array<XmlElement | string | undefined | false>): XmlElement;
+export declare function escapeXml(text: string): string;
+export declare function renderXml(root: XmlElement): string;

package/dist/gen/xml.js

@@ -0,0 +1,42 @@
+/** A minimal XML writer: elements, attributes, text, with escaping and indentation. */
+export function el(name, attributes, ...children) {
+    const element = { name, children };
+    if (attributes !== undefined) {
+        element.attributes = attributes;
+    }
+    return element;
+}
+export function escapeXml(text) {
+    return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+export function renderXml(root) {
+    const lines = ['<?xml version="1.0" encoding="utf-8"?>'];
+    const render = (element, indent) => {
+        const attributes = Object.entries(element.attributes ?? {})
+            .filter(([, v]) => v !== undefined)
+            .map(([k, v]) => ` ${k}="${escapeXml(String(v))}"`)
+            .join("");
+        const children = (element.children ?? []).filter((c) => c !== undefined && c !== false);
+        if (children.length === 0) {
+            lines.push(`${indent}<${element.name}${attributes}/>`);
+            return;
+        }
+        if (children.every((c) => typeof c === "string")) {
+            lines.push(`${indent}<${element.name}${attributes}>${children.map((c) => escapeXml(c)).join("")}</${element.name}>`);
+            return;
+        }
+        lines.push(`${indent}<${element.name}${attributes}>`);
+        for (const child of children) {
+            if (typeof child === "string") {
+                lines.push(`${indent}  ${escapeXml(child)}`);
+            }
+            else {
+                render(child, `${indent}  `);
+            }
+        }
+        lines.push(`${indent}</${element.name}>`);
+    };
+    render(root, "");
+    return `${lines.join("\n")}\n`;
+}
+//# sourceMappingURL=xml.js.map

package/dist/gen/xml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xml.js","sourceRoot":"","sources":["../../src/gen/xml.ts"],"names":[],"mappings":"AAAA,uFAAuF;AAQvF,MAAM,UAAU,EAAE,CAAC,IAAY,EAAE,UAAqC,EAAE,GAAG,QAAwD;IACjI,MAAM,OAAO,GAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC/C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC;IAClC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAgB;IACxC,MAAM,KAAK,GAAa,CAAC,wCAAwC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,CAAC,OAAmB,EAAE,MAAc,EAAQ,EAAE;QAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;aACxD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;aAClD,IAAI,CAAC,EAAE,CAAC,CAAC;QACZ,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAA4B,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;QAClH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,OAAO,CAAC,IAAI,GAAG,UAAU,IAAI,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,OAAO,CAAC,IAAI,GAAG,UAAU,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAW,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;YAC/H,OAAO;QACT,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,OAAO,CAAC,IAAI,GAAG,UAAU,GAAG,CAAC,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACjB,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+export { parseBdef, type BdefParseResult } from "./bdef/parser.js";
+export type * from "./bdef/ast.js";
+export { parseCds } from "./cds/adapter.js";
+export { Diagnostics, formatDiagnostic, type Diagnostic, type Severity } from "./diagnostics.js";
+export { loadProject, type Project, type SourceFile } from "./input/project.js";
+export { buildModel, type BuildOptions, type BuildResult } from "./ir/builder.js";
+export { classifyMethodDefinition } from "./ir/handlers.js";
+export { parseSrvd } from "./srvd/parser.js";
+export { COMPILER_VERSION } from "./version.js";
+export { generateApplication, writeFiles, type GeneratedFile } from "./build.js";
+export { generateCsdl } from "./gen/csdl.js";
+export { generateSql, quoteIdentifier, sqlType } from "./gen/sql.js";
+export { generateUi, buildUiLayout, type UiLayout } from "./gen/ui/index.js";
+export { buildLaunchpad, generateLaunchpad, generateLaunchpadUi, type LaunchpadBuildResult, type LaunchpadOptions, type LaunchpadResult } from "./gen/launchpad/index.js";
+export { resolveLaunchpad, type BuiltApp, type LaunchpadResolution, type ResolvedApp } from "./launchpad/config.js";
+export { DEFAULT_LAUNCHPAD_TITLE, findLaunchpad, registerApp, type RegisterOptions, type RegisterResult } from "./launchpad/workspace.js";
+export { DevSession, type DevOptions, type RebuildResult } from "./dev.js";
+export { buildMcpTools, defaultMcpTools, loadMcpConfig, MCP_FILE, type McpConfig } from "./gen/mcp.js";
+export { writeMcpFile, type McpFileResult } from "./authoring/mcp.js";
+export { generateObject, OBJECT_KINDS, type GenerateObjectOptions, type GenerateObjectResult, type ObjectKind } from "./authoring/generate.js";

package/dist/index.js

@@ -0,0 +1,20 @@
+export { parseBdef } from "./bdef/parser.js";
+export { parseCds } from "./cds/adapter.js";
+export { Diagnostics, formatDiagnostic } from "./diagnostics.js";
+export { loadProject } from "./input/project.js";
+export { buildModel } from "./ir/builder.js";
+export { classifyMethodDefinition } from "./ir/handlers.js";
+export { parseSrvd } from "./srvd/parser.js";
+export { COMPILER_VERSION } from "./version.js";
+export { generateApplication, writeFiles } from "./build.js";
+export { generateCsdl } from "./gen/csdl.js";
+export { generateSql, quoteIdentifier, sqlType } from "./gen/sql.js";
+export { generateUi, buildUiLayout } from "./gen/ui/index.js";
+export { buildLaunchpad, generateLaunchpad, generateLaunchpadUi } from "./gen/launchpad/index.js";
+export { resolveLaunchpad } from "./launchpad/config.js";
+export { DEFAULT_LAUNCHPAD_TITLE, findLaunchpad, registerApp } from "./launchpad/workspace.js";
+export { DevSession } from "./dev.js";
+export { buildMcpTools, defaultMcpTools, loadMcpConfig, MCP_FILE } from "./gen/mcp.js";
+export { writeMcpFile } from "./authoring/mcp.js";
+export { generateObject, OBJECT_KINDS } from "./authoring/generate.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAwB,MAAM,kBAAkB,CAAC;AAEnE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAkC,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAiC,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAuC,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAsB,MAAM,YAAY,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAiB,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,mBAAmB,EAA0E,MAAM,0BAA0B,CAAC;AAC1K,OAAO,EAAE,gBAAgB,EAA6D,MAAM,uBAAuB,CAAC;AACpH,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,WAAW,EAA6C,MAAM,0BAA0B,CAAC;AAC1I,OAAO,EAAE,UAAU,EAAuC,MAAM,UAAU,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAkB,MAAM,cAAc,CAAC;AACvG,OAAO,EAAE,YAAY,EAAsB,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,YAAY,EAA0E,MAAM,yBAAyB,CAAC"}

package/dist/input/project.d.ts

@@ -0,0 +1,50 @@
+/** Reads a folder in abapGit format and classifies its files by object. */
+export interface SourceFile {
+    /** Path relative to the project root, with forward slashes (used in diagnostics). */
+    path: string;
+    absolute: string;
+    /** Object name, upper case, namespaces decoded: `/DMO/I_TRAVEL`. */
+    name: string;
+    /** Object type, upper case: TABL, DDLS, BDEF… */
+    type: string;
+    /** Rest of the file name after the type: `asddls`, `xml`, `abap`, `locals_imp.abap`… */
+    extension: string;
+    /** The abapGit file name, as abaplint expects it. */
+    fileName: string;
+    content: string;
+    /**
+     * The file is generated from another one: the abapGit XML of a table written as source
+     * (`.tabl.astabl`). `path` and `absolute` then designate the source.
+     */
+    generatedFrom?: "astabl";
+    /** Lines of the fields in the source, for the diagnostics of a generated file. */
+    fieldLines?: Record<string, number>;
+    /**
+     * A standard object of SAP (I_Currency…) added because the sources name it (D44): not a file of
+     * the project, never written by `rapt abapgit`.
+     */
+    standard?: true;
+}
+/** Folder of the standard objects in the paths of the diagnostics. */
+export declare const STANDARD_FOLDER = "<standard>";
+/** Problems found while reading the project (sources of tables). */
+export interface ProjectIssue {
+    severity: "error" | "warning";
+    code: string;
+    message: string;
+    file: string;
+    line: number;
+    column: number;
+}
+export interface Project {
+    root: string;
+    sourceRoot: string;
+    files: SourceFile[];
+    issues: ProjectIssue[];
+}
+/** abapGit encodes `/` as `#` and some other characters as %xx in file names. */
+export declare function decodeObjectName(encoded: string): string;
+export declare function loadProject(dir: string): Project;
+export declare function filesOfType(project: Project, type: string): SourceFile[];
+/** The main source file of an object: `.asddls`, `.asbdef`, `.srvdsrv`, `.asddlxs` or `.xml`. */
+export declare function mainFile(project: Project, type: string, name: string): SourceFile | undefined;

package/dist/input/project.js

@@ -0,0 +1,128 @@
+/** Reads a folder in abapGit format and classifies its files by object. */
+import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
+import path from "node:path";
+import { parseTableSource, tableSourceToXml } from "../ddic/table-source.js";
+import { standardObjectsFor } from "../standard/index.js";
+/** Folder of the standard objects in the paths of the diagnostics. */
+export const STANDARD_FOLDER = "<standard>";
+const ABAPGIT_FILE = /^([^.]+)\.([a-z0-9]{4})(?:\.(.+))?$/i;
+/** abapGit encodes `/` as `#` and some other characters as %xx in file names. */
+export function decodeObjectName(encoded) {
+    return decodeURIComponent(encoded.replace(/#/g, "/").replace(/%(?![0-9a-f]{2})/gi, "%25")).toUpperCase();
+}
+function startingFolder(root) {
+    const descriptor = path.join(root, ".abapgit.xml");
+    if (!existsSync(descriptor)) {
+        return root;
+    }
+    const xml = readFileSync(descriptor, "utf8");
+    const folder = /<STARTING_FOLDER>([^<]*)<\/STARTING_FOLDER>/.exec(xml)?.[1] ?? "/src/";
+    return path.join(root, folder.replace(/^\/+/, ""));
+}
+function walk(dir, out) {
+    for (const entry of readdirSync(dir)) {
+        if (entry.startsWith(".") || entry === "node_modules") {
+            continue;
+        }
+        const full = path.join(dir, entry);
+        if (statSync(full).isDirectory()) {
+            walk(full, out);
+        }
+        else {
+            out.push(full);
+        }
+    }
+}
+export function loadProject(dir) {
+    const root = path.resolve(dir);
+    if (!existsSync(root) || !statSync(root).isDirectory()) {
+        throw new Error(`${dir} is not a folder`);
+    }
+    const sourceRoot = startingFolder(root);
+    const all = [];
+    if (existsSync(sourceRoot)) {
+        walk(sourceRoot, all);
+    }
+    const files = [];
+    for (const absolute of all.sort()) {
+        const fileName = path.basename(absolute);
+        const match = ABAPGIT_FILE.exec(fileName);
+        if (match === null) {
+            continue;
+        }
+        files.push({
+            path: path.relative(root, absolute).split(path.sep).join("/"),
+            absolute,
+            name: decodeObjectName(match[1] ?? ""),
+            type: (match[2] ?? "").toUpperCase(),
+            extension: (match[3] ?? "").toLowerCase(),
+            fileName,
+            content: readFileSync(absolute, "utf8"),
+        });
+    }
+    const issues = [];
+    return { root, sourceRoot, files: withTableSources(withStandardObjects(root, files), issues), issues };
+}
+/** The standard views of SAP the sources name (I_Currency…) and their tables (D44). */
+function withStandardObjects(root, files) {
+    const standard = standardObjectsFor(files);
+    return [
+        ...files,
+        ...standard.map((object) => {
+            const match = ABAPGIT_FILE.exec(object.fileName);
+            return {
+                path: `${STANDARD_FOLDER}/${object.fileName}`,
+                absolute: path.join(root, STANDARD_FOLDER, object.fileName),
+                name: object.name,
+                type: object.type,
+                extension: (match?.[3] ?? "").toLowerCase(),
+                fileName: object.fileName,
+                content: object.content,
+                standard: true,
+            };
+        }),
+    ];
+}
+/**
+ * Tables written as source (`name.tabl.astabl`) get their abapGit XML (`name.tabl.xml`) here:
+ * the rest of the compiler only reads the XML. The source wins over an XML file present beside it.
+ */
+function withTableSources(files, issues) {
+    const sources = files.filter((f) => f.type === "TABL" && f.extension === "astabl");
+    if (sources.length === 0) {
+        return files;
+    }
+    const generated = new Map();
+    for (const source of sources) {
+        const parsed = parseTableSource(source.content);
+        for (const issue of parsed.issues) {
+            issues.push({ ...issue, code: issue.severity === "error" ? "TABL001" : "TABL002", file: source.path });
+        }
+        if (parsed.table === undefined) {
+            continue;
+        }
+        if (parsed.table.name !== source.name) {
+            issues.push({ severity: "error", code: "TABL001", message: `the file defines ${parsed.table.name}, its name says ${source.name}`, file: source.path, line: 1, column: 1 });
+        }
+        generated.set(source.name, {
+            ...source,
+            extension: "xml",
+            fileName: source.fileName.replace(/\.astabl$/i, ".xml"),
+            content: tableSourceToXml(parsed.table),
+            generatedFrom: "astabl",
+            fieldLines: Object.fromEntries(parsed.table.fields.map((f) => [f.name, f.line])),
+        });
+    }
+    const result = files.filter((f) => !(f.type === "TABL" && f.extension === "xml" && generated.has(f.name)));
+    return [...result, ...generated.values()];
+}
+export function filesOfType(project, type) {
+    return project.files.filter((f) => f.type === type);
+}
+/** The main source file of an object: `.asddls`, `.asbdef`, `.srvdsrv`, `.asddlxs` or `.xml`. */
+export function mainFile(project, type, name) {
+    const candidates = project.files.filter((f) => f.type === type && f.name === name.toUpperCase());
+    const preferred = { DDLS: "asddls", DDLX: "asddlxs", BDEF: "asbdef", SRVD: "srvdsrv", CLAS: "abap", INTF: "abap" }[type];
+    return candidates.find((f) => f.extension === preferred) ?? candidates.find((f) => f.extension === "xml") ?? candidates[0];
+}
+//# sourceMappingURL=project.js.map

package/dist/input/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/input/project.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AA6B1D,sEAAsE;AACtE,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC;AAmB5C,MAAM,YAAY,GAAG,sCAAsC,CAAC;AAE5D,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC3G,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,6CAA6C,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IACvF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,IAAI,CAAC,GAAW,EAAE,GAAa;IACtC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YACtD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,kBAAkB,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7D,QAAQ;YACR,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;YACzC,QAAQ;YACR,OAAO,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;SACxC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;AACzG,CAAC;AAED,uFAAuF;AACvF,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAmB;IAC5D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO;QACL,GAAG,KAAK;QACR,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAc,EAAE;YACrC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjD,OAAO;gBACL,IAAI,EAAE,GAAG,eAAe,IAAI,MAAM,CAAC,QAAQ,EAAE;gBAC7C,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC;gBAC3D,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;gBAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,IAAI;aACf,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,KAAmB,EAAE,MAAsB;IACnE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;IACnF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;IAChD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,oBAAoB,MAAM,CAAC,KAAK,CAAC,IAAI,mBAAmB,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7K,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;YACzB,GAAG,MAAM;YACT,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC;YACvD,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC;YACvC,aAAa,EAAE,QAAQ;YACvB,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;SACjF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3G,OAAO,CAAC,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAgB,EAAE,IAAY;IACxD,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,QAAQ,CAAC,OAAgB,EAAE,IAAY,EAAE,IAAY;IACnE,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACjG,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACzH,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAC7H,CAAC"}

package/dist/ir/access-controls.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The access controls of the exposed entities (decision D35): the roles of the DCL sources
+ * (DCLS objects of abapGit) resolved for each entity set of the service, their conditions
+ * written with the elements of the exposed entity. `inheriting conditions from entity B` takes
+ * the conditions of B, its elements renamed as the projection exposes them. A construct the
+ * application cannot evaluate grants nothing (fail closed) and is reported.
+ */
+import { type AccessControlModel, type AuthorizationsModel, type Model } from "@open-rap/model";
+import type { Diagnostics } from "../diagnostics.js";
+import { type Project } from "../input/project.js";
+export declare function loadAccessControls(project: Project, model: Omit<Model, "accessControls">, authorizations: AuthorizationsModel | undefined, diagnostics: Diagnostics): AccessControlModel[];

package/dist/ir/access-controls.js

@@ -0,0 +1,148 @@
+/**
+ * The access controls of the exposed entities (decision D35): the roles of the DCL sources
+ * (DCLS objects of abapGit) resolved for each entity set of the service, their conditions
+ * written with the elements of the exposed entity. `inheriting conditions from entity B` takes
+ * the conditions of B, its elements renamed as the projection exposes them. A construct the
+ * application cannot evaluate grants nothing (fail closed) and is reported.
+ */
+import { findEntity, projectedFieldName, same } from "@open-rap/model";
+import { parseDcl } from "../dcl/parser.js";
+import { filesOfType } from "../input/project.js";
+export function loadAccessControls(project, model, authorizations, diagnostics) {
+    const grants = [];
+    for (const file of filesOfType(project, "DCLS").filter((f) => f.extension === "asdcls")) {
+        const result = parseDcl(file.content);
+        for (const error of result.errors) {
+            diagnostics.error("DCL001", `access control: ${error.message}`, { file: file.path, line: error.line });
+        }
+        for (const grant of result.role?.grants ?? []) {
+            grants.push({ ...grant, role: result.role?.name ?? file.name, file: file.path });
+        }
+    }
+    if (grants.length === 0) {
+        return [];
+    }
+    const objects = new Map((authorizations?.objects ?? []).map((o) => [o.name, o]));
+    const result = [];
+    for (const set of model.service.entitySets) {
+        const entity = findEntity(model, set.entity);
+        if (entity === undefined) {
+            continue;
+        }
+        const own = grants.filter((g) => same(g.entity, entity.name));
+        for (const grant of own) {
+            const at = { file: grant.file, line: grant.line };
+            const condition = grant.condition === undefined ? { kind: "true" } : resolve(grant.condition, entity, entity, grants, model, objects, diagnostics, at, new Set([entity.name.toUpperCase()]));
+            const existing = result.find((r) => r.role === grant.role && same(r.entity, entity.name));
+            if (existing === undefined) {
+                result.push({ role: grant.role, entity: entity.name, conditions: [condition] });
+            }
+            else {
+                existing.conditions.push(condition);
+            }
+        }
+    }
+    return result;
+}
+/** A condition of a grant on `source`, written with the elements of the exposed entity `target`. */
+function resolve(condition, source, target, grants, model, objects, diagnostics, at, seen) {
+    const element = (name) => {
+        const [associationName, path] = name.split(".");
+        if (path !== undefined) {
+            return pathElement(associationName, path);
+        }
+        const field = source.fields.find((f) => same(f.name, name));
+        if (field === undefined) {
+            diagnostics.warning("DCL003", `access control: ${source.name} has no element ${name}; the condition grants no row`, at);
+            return undefined;
+        }
+        if (source === target) {
+            return field.name;
+        }
+        const projected = projectedFieldName(model, target, field.name);
+        if (projected === undefined) {
+            diagnostics.warning("DCL003", `access control: ${target.name} does not expose ${source.name}.${field.name}, needed by the inherited conditions; they grant no row`, at);
+        }
+        return projected;
+    };
+    /** `_Assoc.Element`: a to-one association of the entity whose target is an entity set of the service. */
+    const pathElement = (associationName, path) => {
+        const association = source.associations.find((a) => same(a.name, associationName));
+        const sourceTarget = association === undefined ? undefined : findEntity(model, association.target);
+        const field = sourceTarget?.fields.find((f) => same(f.name, path));
+        if (association === undefined || sourceTarget === undefined || field === undefined || association.cardinality.max === "*" || association.cardinality.max > 1) {
+            diagnostics.warning("DCL003", `access control: ${source.name} has no to-one association ${associationName} with an element ${path}; the condition grants no row`, at);
+            return undefined;
+        }
+        // in the exposed entity: the association projecting this one, and the element as its target exposes it
+        const exposed = source === target ? association : target.associations.find((a) => same(a.baseAssociation ?? a.name, association.name) || same(a.name, association.name));
+        const exposedTarget = exposed === undefined ? undefined : findEntity(model, exposed.target);
+        const exposedField = exposedTarget === undefined ? undefined : source === target ? field.name : projectedFieldName(model, exposedTarget, field.name);
+        if (exposed === undefined || exposedTarget === undefined || exposedField === undefined || !model.service.entitySets.some((s) => same(s.entity, exposedTarget.name))) {
+            diagnostics.warning("DCL003", `access control: ${target.name} does not expose ${associationName}.${path} through an entity set of the service; the condition grants no row`, at);
+            return undefined;
+        }
+        return `${exposed.name}.${exposedField}`;
+    };
+    const no = { kind: "false" };
+    switch (condition.kind) {
+        case "and":
+        case "or":
+            return { kind: condition.kind, operands: condition.operands.map((o) => resolve(o, source, target, grants, model, objects, diagnostics, at, seen)) };
+        case "not":
+            return { kind: "not", operand: resolve(condition.operand, source, target, grants, model, objects, diagnostics, at, seen) };
+        case "compare": {
+            const name = element(condition.element);
+            return name === undefined ? no : { kind: "compare", element: name, operator: condition.operator, value: condition.value };
+        }
+        case "null": {
+            const name = element(condition.element);
+            return name === undefined ? no : { kind: "null", element: name, negated: condition.negated };
+        }
+        case "user": {
+            const name = element(condition.element);
+            return name === undefined ? no : { kind: "user", element: name, orInitial: condition.orInitial };
+        }
+        case "pfcg": {
+            const names = condition.elements.map(element);
+            if (names.some((n) => n === undefined)) {
+                return no;
+            }
+            const object = objects.get(condition.object);
+            if (object === undefined) {
+                diagnostics.warning("DCL004", `access control: aspect pfcg_auth( ${condition.object} ): the authorization object is neither in the sources (SUSO) nor in rapt/authorizations.json; no role grants it`, at);
+            }
+            else {
+                for (const field of [...condition.fields, ...Object.keys(condition.filters)]) {
+                    if (!object.fields.includes(field)) {
+                        diagnostics.error("DCL004", `access control: aspect pfcg_auth( ${condition.object} ): the object has no field ${field}`, at);
+                    }
+                }
+            }
+            return { kind: "pfcg", elements: names, object: condition.object, fields: condition.fields, filters: condition.filters, orInitial: condition.orInitial };
+        }
+        case "inherit": {
+            const base = findEntity(model, condition.entity);
+            if (base === undefined) {
+                diagnostics.warning("DCL003", `access control: inheriting conditions from entity ${condition.entity}: unknown entity; they grant no row`, at);
+                return no;
+            }
+            if (seen.has(base.name.toUpperCase())) {
+                diagnostics.error("DCL001", `access control: the conditions of ${base.name} inherit from themselves`, at);
+                return no;
+            }
+            const inherited = grants.filter((g) => same(g.entity, base.name));
+            if (inherited.length === 0) {
+                // the base entity has no role: no restriction to inherit (as in ABAP CDS)
+                return { kind: "true" };
+            }
+            const next = new Set([...seen, base.name.toUpperCase()]);
+            const operands = inherited.map((g) => (g.condition === undefined ? { kind: "true" } : resolve(g.condition, base, target, grants, model, objects, diagnostics, { file: g.file, line: g.line }, next)));
+            return operands.length === 1 ? operands[0] : { kind: "or", operands };
+        }
+        case "unsupported":
+            diagnostics.warning("DCL002", `access control: ${condition.text} is not evaluated by the application; this condition grants no row`, at);
+            return no;
+    }
+}
+//# sourceMappingURL=access-controls.js.map

package/dist/ir/access-controls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-controls.js","sourceRoot":"","sources":["../../src/ir/access-controls.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAyG,MAAM,iBAAiB,CAAC;AAC9K,OAAO,EAAE,QAAQ,EAAoC,MAAM,kBAAkB,CAAC;AAE9E,OAAO,EAAE,WAAW,EAAgB,MAAM,qBAAqB,CAAC;AAOhE,MAAM,UAAU,kBAAkB,CAAC,OAAgB,EAAE,KAAoC,EAAE,cAA+C,EAAE,WAAwB;IAClK,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,EAAE,CAAC;QACxF,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,mBAAmB,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,KAAc,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;YACxB,MAAM,EAAE,GAAa,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,MAAM,EAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAc,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3N,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1F,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAClF,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oGAAoG;AACpG,SAAS,OAAO,CACd,SAAuB,EACvB,MAAmB,EACnB,MAAmB,EACnB,MAAqB,EACrB,KAAY,EACZ,OAA0C,EAC1C,WAAwB,EACxB,EAAY,EACZ,IAAiB;IAEjB,MAAM,OAAO,GAAG,CAAC,IAAY,EAAsB,EAAE;QACnD,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,WAAW,CAAC,eAAyB,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,MAAM,CAAC,IAAI,mBAAmB,IAAI,+BAA+B,EAAE,EAAE,CAAC,CAAC;YACxH,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,MAAM,CAAC,IAAI,oBAAoB,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,yDAAyD,EAAE,EAAE,CAAC,CAAC;QAC1K,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,yGAAyG;IACzG,MAAM,WAAW,GAAG,CAAC,eAAuB,EAAE,IAAY,EAAsB,EAAE;QAChF,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;QACnF,MAAM,YAAY,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QACnG,MAAM,KAAK,GAAG,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACnE,IAAI,WAAW,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,WAAW,CAAC,GAAG,KAAK,GAAG,IAAI,WAAW,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;YAC7J,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,MAAM,CAAC,IAAI,8BAA8B,eAAe,oBAAoB,IAAI,+BAA+B,EAAE,EAAE,CAAC,CAAC;YACtK,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,uGAAuG;QACvG,MAAM,OAAO,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QACzK,MAAM,aAAa,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5F,MAAM,YAAY,GAAG,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrJ,IAAI,OAAO,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACpK,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,MAAM,CAAC,IAAI,oBAAoB,eAAe,IAAI,IAAI,oEAAoE,EAAE,EAAE,CAAC,CAAC;YACjL,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC;IAC3C,CAAC,CAAC;IACF,MAAM,EAAE,GAAoB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC9C,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,KAAK,CAAC;QACX,KAAK,IAAI;YACP,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACtJ,KAAK,KAAK;YACR,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;QAC7H,KAAK,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;QAC5H,CAAC;QACD,KAAK,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;QAC/F,CAAC;QACD,KAAK,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC;QACnG,CAAC;QACD,KAAK,MAAM,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;gBACvC,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,qCAAqC,SAAS,CAAC,MAAM,kHAAkH,EAAE,EAAE,CAAC,CAAC;YAC7M,CAAC;iBAAM,CAAC;gBACN,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;oBAC7E,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBACnC,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,qCAAqC,SAAS,CAAC,MAAM,+BAA+B,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC/H,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAiB,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC;QACvK,CAAC;QACD,KAAK,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,qDAAqD,SAAS,CAAC,MAAM,qCAAqC,EAAE,EAAE,CAAC,CAAC;gBAC9I,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACtC,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,qCAAqC,IAAI,CAAC,IAAI,0BAA0B,EAAE,EAAE,CAAC,CAAC;gBAC1G,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAClE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,0EAA0E;gBAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC1B,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,MAAM,EAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3N,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAE,QAAQ,CAAC,CAAC,CAAqB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC7F,CAAC;QACD,KAAK,aAAa;YAChB,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,SAAS,CAAC,IAAI,oEAAoE,EAAE,EAAE,CAAC,CAAC;YACzI,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/ir/authorizations.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Authorizations of the application (decision D34): the authorization objects of the sources
+ * (SUSO objects of abapGit) and the roles of `rapt/authorizations.json`, next to the abapGit
+ * sources — the counterpart of the IAM apps, business catalogs and business roles of the ABAP
+ * environment: each role of the identity provider gives authorizations, instances of
+ * authorization objects with field values, that AUTHORITY-CHECK and the access controls read.
+ */
+import * as abaplint from "@abaplint/core";
+import type { AuthorizationObjectModel, AuthorizationsModel } from "@open-rap/model";
+import type { Diagnostics } from "../diagnostics.js";
+import { type Project } from "../input/project.js";
+/** The file of the roles, relative to the root of the abapGit project. */
+export declare const AUTHORIZATIONS_FILE = "rapt/authorizations.json";
+/** An authorization object from its abapGit serialization (TOBJ: FIEL1…FIEL0, TACTZ: activities). */
+export declare function readSusoXml(xml: string): AuthorizationObjectModel | undefined;
+/**
+ * The authorization objects of the sources and the roles of rapt/authorizations.json, checked
+ * against each other; undefined when the project has neither.
+ */
+export declare function loadAuthorizations(project: Project, diagnostics: Diagnostics): AuthorizationsModel | undefined;
+/**
+ * The AUTHORITY-CHECK statements of the ABAP code: an authorization object of the sources must
+ * have the fields the statement checks (ABP010), and an unknown object is reported (ABP011).
+ */
+export declare function checkAuthorityChecks(registry: abaplint.IRegistry, project: Project, authorizations: AuthorizationsModel | undefined, diagnostics: Diagnostics): void;