@sap/cds-dk 9.3.1 → 9.4.1

package/lib/build/plugins/helm/files/templates/NOTES.txt

@@ -8,7 +8,7 @@ Your services are available at:
   {{- $deployment := (get $root.Values $name) }}
   {{- if $deployment.expose.enabled }}
   {{- $ := merge (dict "name" $name "deployment" $deployment) $root }}
-  {{- $url := include "cap.deploymentHostFull" $ }}
+  {{- $url := tpl (include "cap.deploymentHostFull" $) $ }}
   {{ printf "%s - https://%s" $name $url }}
   {{- end -}}
 {{- end }}

package/lib/build/plugins/helm/index.js

@@ -39,7 +39,7 @@ module.exports = class HelmBuildPlugin extends Plugin {
     const isInternal = chartYaml.dependencies?.find(dep => dep.name === 'web-application')?.repository !== undefined
 
     if (!isInternal) {
-      // copy web appplication helm chart
+      // copy web application helm chart
       await this.copy(join(__dirname, 'files', 'subcharts', 'web-application')).to('charts/web-application')
 
       // copy service instance helm chart

package/lib/build/provider/internalBuildTaskProvider.js

@@ -143,7 +143,7 @@ class InternalBuildTaskProvider extends BuildTaskProvider {
                 sidecarEnv = cds.env.for("cds", sidecarPath)
             }
             if (
-                cds.env.profiles?.includes('with-mtx-sidecar') || // new presets
+                cds.env.profiles?.includes('with-mtx-sidecar') || // new presets // FIXME: BAD hard-coded dependency to profile
                 cds.env.requires["cds.xt.ModelProviderService"]?.external // for compatibility with former mtxs presets
             ) {
                 DEBUG?.("MTX app with sidecar")
@@ -161,7 +161,7 @@ class InternalBuildTaskProvider extends BuildTaskProvider {
             }
 
             if (sidecarEnv?.requires["cds.xt.ModelProviderService"]?._in_sidecar || sidecarEnv?.profiles?.includes('mtx-sidecar')) {
-                throw new BuildError(`MTX sidecar requires profile 'with-mtx-sidecar' in project root configuration.`)
+                throw new BuildError(`MTX sidecar requires profile 'with-mtx-sidecar' in project root configuration.`) // FIXME: BAD hard-coded dependency to profile
             }
             if (cds.env.requires["cds.xt.ModelProviderService"]?._in_sidecar || cds.env.profiles?.includes('mtx-sidecar')) {
                 // cds build is executed in sidecar folder
@@ -222,7 +222,7 @@ class InternalBuildTaskProvider extends BuildTaskProvider {
      */
     static _isMtxs() {
         return cds.env.requires.toggles
-            || cds.env.profiles.includes('with-mtx-sidecar')
+            || cds.env.profiles.includes('with-mtx-sidecar') // FIXME: BAD hard-coded dependency to profile
             || cds.env.requires['cds.xt.ModelProviderService']
             || (typeof cds.env.requires.multitenancy === "object")
     }

package/lib/build/provider/nodejs/index.js

@@ -6,10 +6,13 @@ const EdmxBuildPlugin = require('../edmxBuildPlugin')
 const { BuildError, getWorkspaces, findWorkspaceRoot } = require('../../util')
 const { OUTPUT_MODE, OUTPUT_MODE_FILESYSTEM, ODATA_VERSION_V2, FOLDER_GEN, CONTENT_EDMX, CONTENT_PACKAGELOCK_JSON,
     CONTENT_NPMRC, CONTENT_CDSRC_JSON, CONTENT_ENV, CONTENT_DEFAULT_ENV_JSON, FLAVOR_LOCALIZED_EDMX,
-    OPTION_WS_PACK} = require('../../constants')
+    OPTION_WS_PACK} = require('../../constants');
 const { WARNING } = EdmxBuildPlugin
-const LOG = cds.log('cli|build'), DEBUG = cds.debug('cli|build')
+const LOG = cds.log('cli|build')
+const DEBUG = cds.debug('cli|build')
 const NODE_ENGINE_VERSION = '>=20'
+const { exec } = require('node:child_process')
+const pexec = require('node:util').promisify(exec);
 
 /**
  * @param {T | T[]} x
@@ -84,9 +87,65 @@ class NodejsBuildPlugin extends EdmxBuildPlugin {
                 await this._packWorkspaceDependencies(destRoot)
             }
         }
+
+        await this.#cleanupPackageJson(destRoot)
+
         return this._result
     }
 
+    /**
+     * Removes devDeps that are invalid semver, pointing to workspace or file locations,
+     * and also removes workspace entries. If needed, creates a new package-lock.json in build destination.
+     */
+    async #cleanupPackageJson() {
+        /** @param {string | undefined} version */
+        const valid = version => version && !version.match('^(?:workspace|file):')
+
+        const packageJsonPath = path.join(this.task.dest, 'package.json')
+        try {
+            const packageJson = await cds.utils.read(packageJsonPath)
+
+            DEBUG?.(`Sanitizing the package.json for "${this.task.src}'...`)
+
+            let modified = false
+            // remove the workspace configuration
+            if (packageJson.workspaces) {
+                delete packageJson.workspaces
+                modified = true
+            }
+            // remove the workspace dev dependencies and the cds-plugin-ui5
+            if (packageJson.devDependencies) {
+                packageJson.devDependencies = Object.entries(packageJson.devDependencies)
+                    .reduce((acc, [dep, version]) => {
+                        if (valid(version)) {
+                            acc[dep] = version
+                        }
+                        return acc
+                    }, {})
+                modified = true
+            }
+            // overwrite the package.json if it was modified only
+            if (modified) {
+                await cds.utils.write(packageJsonPath, JSON.stringify(packageJson, null, 2), 'utf-8')
+                // update the package-lock.json if it exists
+                if (cds.utils.exists(path.join(this.task.dest, 'package-lock.json'))) {
+                    DEBUG?.(`Updating the package-lock.json for '${this.task.src}'...`)
+                    // run the npm install --package-lock-only to only update the package-lock.json
+                    // without installing the dependencies to node_modules
+                    try {
+                        await pexec('npm install --package-lock-only', { cwd: this.task.dest })
+                    } catch (e) {
+                        DEBUG?.(`Failed to update the package-lock.json for '${this.task.src}'! Error: ${e.code} - ${e.message}`)
+                    }
+                }
+            }
+        } catch (e) {
+            // ENOENT: package.json not found -> this is okay for monorepos
+            if (e.code !== 'ENOENT') throw e
+        }
+
+    }
+
     async clean() {
         // staging build content is deleted by BuildTaskEngine
         if (cds.env.build.target === '.') {
@@ -186,7 +245,7 @@ class NodejsBuildPlugin extends EdmxBuildPlugin {
     async _packWorkspaceDependencies(dest) {
         const wsRoot = findWorkspaceRoot(cds.root)
         const appPkg = require(path.join(dest, 'package.json'))
-        const allWorkspaces = await getWorkspaces(wsRoot, true, false);
+        const allWorkspaces = await getWorkspaces(wsRoot, true, false)
         let workspaces
         if (this.task.options.workspaces) {
             const relevantWorkspaces = new Set(arrayify(this.task.options.workspaces))

package/lib/deploy/index.js

@@ -1,5 +1,5 @@
 module.exports = {
     options:  /** @type{const} */(['--to', '--for', '--out', '--on', '--tunnel-address', '--vcap-file', '--delta-from']),
-    flags:  /** @type{const} */(['--no-save', '--auto-undeploy', '--dry', '--xdry', '--with-mocks', '--store-credentials', '--no-build', '--model-only', '--script', '--with-auto-schema-evolution']),
+    flags:  /** @type{const} */(['--no-save', '--auto-undeploy', '--dry', '--xdry', '--with-mocks', '--store-credentials', '--no-build', '--model-only', '--script', '--with-auto-schema-evolution', '--resolve-bindings']),
     shortcuts: ['-2', '-4', '-o', '-n']
 }

package/lib/deploy/to-hana/hana.js

@@ -30,7 +30,8 @@ const allowList = [
   '--tunnel-address',
   '--vcap-file',
   '--with-mocks',
-  '--no-build'
+  '--no-build',
+  '--resolve-bindings'
 ]
 
 module.exports = new class HanaDeployer {
@@ -190,7 +191,22 @@ spec:
           serviceName ??= cfServiceInstanceName;
           serviceKeyName ??= cfServiceInstanceKeyName
           if (!vcapEnv.VCAP_SERVICES || serviceName) {
-            vcapEnv.VCAP_SERVICES = this._getVCAPServicesEntry(cfServiceInstanceName, serviceKey);
+            const base = process.env.VCAP_SERVICES ? JSON.parse(process.env.VCAP_SERVICES) : (vcapEnv.VCAP_SERVICES ?? {});
+            const hanas = Array.isArray(base.hana) ? base.hana : [];
+            let hanaTagged = hanas.filter(s => s?.name === cfServiceInstanceName || (Array.isArray(s?.tags) && s.tags.includes('hana')));
+            if (hanaTagged.length === 0) {
+              const entry = { name: cfServiceInstanceName, label: 'hana', tags: ['hana'], credentials: {} };
+              hanas.push(entry);
+              hanaTagged = [entry];
+            }
+            for (const entry of hanaTagged) {
+              entry.name ??= cfServiceInstanceName;
+              entry.tags = Array.from(new Set([...entry.tags || [], 'hana']));
+              entry.credentials = { ...(entry.credentials || {}), ...serviceKey };
+            }
+            base.hana = hanas;
+            vcapEnv.VCAP_SERVICES = base;
+            process.env.VCAP_SERVICES = JSON.stringify(base);
           }
 
           if (!hasVCAPEnv) {
@@ -229,7 +245,6 @@ spec:
     return buildResult;
   }
 
-
   async _getOrCreateCFService(currentModelFolder, serviceName, serviceKeyName, tunnelAddress) {
 
     // get from param
@@ -297,19 +312,6 @@ spec:
     return buildResult[0].result;
   }
 
-  _getVCAPServicesEntry(serviceInstanceName, serviceKey) {
-    return {
-      hana: [
-        {
-          name: serviceInstanceName,
-          tags: ['hana'],
-          credentials: serviceKey
-        }
-      ]
-    };
-  }
-
-
   _injectTunnelAddress(credentials, tunnelAddress) {
     if (!/\w+:\d+/.test(tunnelAddress)) {
       throw `Invalid tunnel address '${tunnelAddress}' - must be in form 'host:port'`;

package/lib/import/odata/v2parser.js

@@ -10,7 +10,7 @@ let versionInfo = require('../../../package.json').version;
 const { warn } = require('../../util/term');
 
 const edmxncdsdatatype = {
-	"Edm.String": "cds.LargeString",
+	"Edm.String": "cds.String",
 	"Edm.Boolean": "cds.Boolean",
 	"Edm.Int16": "cds.Integer",
 	"Edm.Int32": "cds.Integer",
@@ -453,6 +453,10 @@ function _getServiceEntityProperty(
 		if (cdsDataType === undefined) {
 			cdsDataType = edmxncdsdatatype[dataType + "_a"];
 			hasInvalidPrecision = true;
+			// Additional fallback for Edm.Time with precision
+			if (cdsDataType === undefined && dataType === 'Edm.Time') {
+				cdsDataType = edmxncdsdatatype[dataType];
+			}
 		}
 	} else if (displayFormat && displayFormat === "Date") {
 		cdsDataType = edmxncdsdatatype[dataType + "_f"];
@@ -588,7 +592,7 @@ function _getServiceEntityProperty(
 	}
 
 	if (defaultValue !== -1 && defaultValue) {
-		propertyJson = propertyJson + ', \n"default": {\n"val": "' + defaultValue + '"\n}';
+		propertyJson = propertyJson + ', \n"default": {\n"val": ' + JSON.stringify(defaultValue) + '\n}';
 	}
 
 	if (propertyName)

package/lib/import/odata/v4parser.js

@@ -33,7 +33,7 @@ const edmToCdsTypeMapping = {
     'Edm.Int16': 'cds.Integer',
     'Edm.Int32': 'cds.Integer',
     'Edm.Int64': 'cds.Integer64',
-    'Edm.String': 'cds.LargeString',
+    'Edm.String': 'cds.String',
     'Edm.TimeOfDay': 'cds.Time',
 };
 
@@ -261,7 +261,26 @@ function _captureAnnotationInCSN(targetString, annotationObject, csnDefsTargetOb
         annotationObject = { "=": annotationObject.$Path };
     }
 
-    csnDefsTargetObject[targetString] = annotationObject;
+    /**
+     * Annotations need to be flattened in CSN. E.g. 
+     * 
+     * @Core.ContentDisposition : {
+     *  Type    : 'inline',
+     *  Filename: typedImageFileName
+     * }
+     *
+     * is represented as:
+     *
+     * @Core.ContentDisposition.Type : 'inline',
+     * @Core.ContentDisposition.Filename : {'=': 'typedImageFileName'},
+     */
+    if (annotationObject instanceof Object && !(annotationObject instanceof Array) && !(Object.keys(annotationObject).length === 1 && (Object.keys(annotationObject)[0] === '=' || Object.keys(annotationObject)[0] === 'xpr' || Object.keys(annotationObject)[0] === '#'))) {
+        Object.keys(annotationObject).forEach(innerTargetString => {
+            _captureAnnotationInCSN(targetString + '.' + innerTargetString, annotationObject[innerTargetString], csnDefsTargetObject);
+        })
+    } else {
+        csnDefsTargetObject[targetString] = annotationObject;
+    }
 }
 
 function _replaceSpecialCharacters(text) {

package/lib/import/odata.package.json

@@ -1,7 +1,7 @@
 {
   "dependencies": {
-    "@sap-cloud-sdk/connectivity": "^3",
-    "@sap-cloud-sdk/http-client": "^3",
-    "@sap-cloud-sdk/resilience": "^3"
+    "@sap-cloud-sdk/connectivity": "^4",
+    "@sap-cloud-sdk/http-client": "^4",
+    "@sap-cloud-sdk/resilience": "^4"
   }
-}
+}

package/lib/init/constants.js

@@ -5,7 +5,7 @@ module.exports = {
     COMMAND_ADD: 'add',
 
     JAVA_LTS_VERSIONS: [17, 21],
-    MAVEN_ARCHETYPE_VERSION: '4.3.0',
+    MAVEN_ARCHETYPE_VERSION: '4.4.0',
 
     OPTIONS: Object.freeze({
         COMPLETION: 'completion',
@@ -54,6 +54,7 @@ module.exports = {
         CONNECTIVITY: 'connectivity',
         DESTINATION: 'destination',
         HTML5_REPO: 'html5-repo',
+        APP_FRONTEND: 'app-frontend',
         PORTAL: 'portal',
         APPLICATION_LOGGING: 'application-logging',
         AUDIT_LOGGING: 'audit-logging',

package/lib/init/index.js

@@ -233,6 +233,7 @@ module.exports = class CDSGenerator {
         const templates = new Map
         for (let plugin of plugins) {
             // Compat
+            if (plugin === 'appfront') plugin = 'app-front'
             if (plugin === 'helm' && cds.cli.options['internal-unified-runtime-charts']) {
                 plugin = 'helm-unified-runtime'
                 cds.cli.options.add.delete('helm')
@@ -242,6 +243,7 @@ module.exports = class CDSGenerator {
             if (plugin in { 'kibana-logging': 1, 'kibana': 1 }) plugin = 'application-logging'
             if (plugin === 'postgresql') plugin = 'postgres'
             if (plugin === 'gha') plugin = 'github-actions'
+            if (plugin === 'app-front') plugin = 'app-frontend'
 
             if (!templates.has(plugin)) {
                 const template = await this._createTemplate(plugin)

package/lib/init/mvn.js

@@ -21,8 +21,9 @@ module.exports.add = async function (feature, featureOptions={}) {
     }
     params.set(`-Dfeature`, feature)
 
-    const profile = cds.cli.options.for
-    params.set(`-Dprofile`, profile === 'production' ? 'cloud' : profile ?? 'default')
+    const profile = cds.cli.options.for === 'production' ? 'cloud' : cds.cli.options.for ?? 'default'
+    params.set(`-Dprofile`, profile)
+    if (feature === 'mtx' && profile === 'default') params.set('-Dprofile', 'with-mtx')
 
     Object.entries(featureOptions).forEach(([k,v]) => params.set(`-Doptions.${k}`, v))
 

package/lib/init/projectReader.js

@@ -141,6 +141,7 @@ module.exports = new class ProjectReader {
             devDependencies: () => pkgJson().devDependencies,
             has: x => _inProd(x),
             profile: () => cds.cli.options?.for,
+            profileSpecified: () => !!cds.cli.options.for,
             language: () => _isJava() ? 'java' : 'nodejs',
             isJava: () => _isJava(),
             isNodejs: () => !_isJava(),

package/lib/init/registries/mta.js

@@ -10,6 +10,11 @@ const srv4 = isJava ? srvJava4 : srvNode4
 
 const approuter = { in: 'modules', where: { type: 'approuter.nodejs' } }
 
+const appFront = {
+    in: 'resources',
+    where: { type: 'org.cloudfoundry.managed-service', 'parameters.service': 'app-front' }
+}
+
 const xsuaa = {
     in: 'resources',
     where: { type: 'org.cloudfoundry.managed-service', 'parameters.service': 'xsuaa', 'parameters.service-plan': 'application' }
@@ -233,6 +238,7 @@ module.exports = {
     applicationLogging,
     approuterMTXRoute,
     approuterMTXRouteJava,
+    appFront,
     html5RepoHost,
     html5Runtime,
     appDeployer,

package/lib/init/template/ams/files/manifest.yml.hbs

@@ -18,7 +18,7 @@ applications:
     buildpack: nodejs_buildpack
     command: (npm start && echo "This application may now be stopped to free resources." || echo "AMS Policy Deployment unsuccessful.") && sleep infinity
     services:
-      - name: {{appName}}-auth
+      - name: {{appName}}-ias
         parameters:
           credential-type: X509_GENERATED
           app-identifier: ams-policy-deployer

package/lib/init/template/ams/files/mta.yaml.hbs

@@ -29,7 +29,7 @@ modules:
           command: npm start
           memory: 512M
     requires:
-      - name: {{appName}}-auth
+      - name: {{appName}}-ias
         parameters:
           config:
             credential-type: X509_GENERATED

package/lib/init/template/app-frontend/files/app-package.json.hbs

@@ -0,0 +1,20 @@
+{
+  "name": "{{app}}"{{#hasUI5}},
+  "version": "1.0.0",
+  "main": "webapp/index.html",
+  "scripts": {
+    "build": "ui5 build preload --clean-dest --config ui5-deploy.yaml",
+    "build-local": "ui5 build preload --clean-dest",
+    "start": "ui5 serve"
+  },
+  "devDependencies": {
+    "@ui5/cli": "^4",
+    "ui5-task-zipper": "^3"
+  },
+  "ui5": {
+    "dependencies": [
+      "ui5-task-zipper"
+    ]
+  }
+  {{/hasUI5}}
+}

package/lib/init/template/app-frontend/files/index.html.hbs

@@ -0,0 +1,34 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>{{appName}} - {{app}}</title>
+    <style>
+        html, body, body > div, #container, #container-uiarea {
+            height: 100%;
+        }
+    </style>
+    <script
+        id="sap-ui-bootstrap"
+        src="https://sapui5.hana.ondemand.com/1.140.0/resources/sap-ui-core.js"
+        data-sap-ui-theme="sap_horizon"
+        data-sap-ui-resourceroots='{
+            "{{appName}}.{{app}}": "./"
+        }'
+        data-sap-ui-oninit="module:sap/ui/core/ComponentSupport"
+        data-sap-ui-compatVersion="edge"
+        data-sap-ui-async="true"
+        data-sap-ui-frameOptions="trusted"
+    ></script>
+</head>
+<body class="sapUiBody sapUiSizeCompact" id="content">
+    <div
+        data-sap-ui-component
+        data-name="{{appName}}.{{app}}"
+        data-id="container"
+        data-settings='{"id" : "{{appName}}.{{app}}" }'
+        data-handle-validation="true"
+    ></div>
+</body>
+</html>

package/lib/init/template/app-frontend/files/manifest.json

@@ -0,0 +1,13 @@
+{
+  "_version": "1.49.0",
+  "sap.app": {
+    "id": "{{appName}}",
+    "applicationVersion": {
+      "version": "1.0.0"
+    },
+    "type": "application",
+    "title": "{{appTitle}}",
+    "description": "{{appDescription}}",
+    "i18n": "i18n/i18n.properties"
+  }
+}

package/lib/init/template/app-frontend/files/mta.yaml.hbs

@@ -0,0 +1,71 @@
+---
+parameters:
+  deploy_mode: html5-repo
+modules:
+  - name: {{appName}}-srv
+    type: {{language}}
+    path: {{& srvPath}}
+
+  - name: {{appName}}
+    type: approuter.nodejs
+    path: {{& approuterPath}}
+    requires:
+      - name: {{appName}}-html5-runtime
+
+  - name: {{appName}}-app-deployer
+    type: com.sap.application.content
+    path: {{#isNodejs}}gen{{/isNodejs}}{{#isJava}}.{{/isJava}}
+    build-parameters:
+      build-result: {{#isNodejs}}{{& appPath }}{{/isNodejs}}{{#isJava}}resources{{/isJava}}
+      requires:
+      {{#apps}}
+        - name: {{strippedAppName}}{{strippedApp}}
+          artifacts:
+            - {{app}}.zip
+          target-path: {{#isNodejs}}{{& appPath }}{{/isNodejs}}{{#isJava}}resources{{/isJava}}
+      {{/apps}}
+    requires:
+      - name: srv-api
+      {{#hasXsuaa}}
+      - name: {{appName}}-auth
+      {{/hasXsuaa}}
+      {{#hasIas}}
+      - name: {{appName}}-ias
+        parameters:
+          config:
+            credential-type: X509_GENERATED
+            app-identifier: app-deployer
+      {{/hasIas}}
+      - name: {{appName}}-app-front
+        parameters:
+          content-target: true
+    parameters:
+      config:
+        destinations:
+        - name: srv-api
+          url: ~{srv-api/srv-url}
+          forwardAuthToken: true
+        {{#hasUI5}}
+        - name: ui5
+          url: https://ui5.sap.com
+        {{/hasUI5}}
+
+  {{#apps}}
+  - name: {{strippedAppName}}{{strippedApp}}
+    type: html5
+    path: {{& appPath}}{{app}}
+    build-parameters:
+      build-result: dist
+      builder: custom
+      commands:
+        - npm ci
+        - npm run build
+      supported-platforms: []
+  {{/apps}}
+
+resources:
+  - name: {{appName}}-app-front
+    type: org.cloudfoundry.managed-service
+    parameters:
+      service: app-front
+      service-plan: developer

package/lib/init/template/app-frontend/files/package.json.hbs

@@ -0,0 +1,17 @@
+{
+  {{#isNodejs}}
+  "cds": {
+  {{/isNodejs}}
+    "requires": {
+      {{#profile}}
+      "[{{profile}}]": {
+      {{/profile}}
+        "app-front": true
+      {{#profile}}
+      }
+      {{/profile}}
+    }
+  {{#isNodejs}}
+  }
+  {{/isNodejs}}
+}

package/lib/init/template/app-frontend/files/ui5-deploy.yaml.hbs

@@ -0,0 +1,25 @@
+---
+# yaml-language-server: $schema=https://sap.github.io/ui5-tooling/schema/ui5.yaml.json
+specVersion: '3.1'
+metadata:
+  name: {{app}}
+type: application
+resources:
+  configuration:
+    propertiesFileSourceEncoding: UTF-8
+builder:
+  resources:
+    excludes:
+      - "/test/**"
+      - "/localService/**"
+  customTasks:
+    - name: ui5-task-zipper
+      afterTask: generateVersionInfo
+      configuration:
+        archiveName: {{app}}
+        additionalFiles:
+          - xs-app.json
+    {{#isTypescript}}
+    - name: ui5-tooling-transpile-task
+      afterTask: replaceVersion
+    {{/isTypescript}}

package/lib/init/template/app-frontend/files/ui5.yaml.hbs

@@ -0,0 +1,6 @@
+---
+# yaml-language-server: $schema=https://sap.github.io/ui5-tooling/schema/ui5.yaml.json
+specVersion: '3.1'
+metadata:
+  name: {{app}}
+type: application

package/lib/init/template/app-frontend/files/values.yaml.hbs

@@ -0,0 +1,20 @@
+---
+app-front:
+  serviceOfferingName: app-front
+  servicePlanName: developer
+html5-apps-deployer:
+  env:
+    SAP_CLOUD_SERVICE: {{strippedAppName}}.service
+  image:
+    repository: {{appName}}-html5-deployer
+  bindings:
+    app-front:
+      serviceInstanceName: app-front
+{{=<% %>=}}
+  envFrom:
+    - configMapRef:
+        name: "{{ .Release.Name }}-app-front-configmap"
+<%={{ }}=%>
+backendDestinations:
+  srv-api:
+    service: srv

package/lib/init/template/app-frontend/files/xs-app.json.hbs

@@ -0,0 +1,17 @@
+{
+  "welcomeFile": "/index.html",
+  "authenticationMethod": "route",
+  "routes": [
+    {
+      "source": "^/?odata/(.*)$",
+      "target": "/odata/$1",
+      "destination": "srv-api"{{#hasXsuaa}},
+      "authenticationType": "xsuaa"{{/hasXsuaa}},
+      "csrfProtection": false
+    },
+    {
+        "source": ".*",
+        "service": "app-front"
+    }
+  ]
+}