@sap/eslint-plugin-cds 3.1.2 → 4.0.2

package/CHANGELOG.md

@@ -2,9 +2,37 @@
 
 All notable changes to this project will be documented in this file.
 
-This project adheres to [Semantic Versioning](http://semver.org/).
+This project adheres to [Semantic Versioning](https://semver.org/).
 
-The format is based on [Keep a Changelog](http://keepachangelog.com/).
+The format is based on [Keep a Changelog](https://keepachangelog.com/).
+
+## [4.1.0] - 2025-05-27
+
+
+## [4.0.2] - 2025-05-27
+### Added
+- Add new rule sets for JS `js.all` and `js.recommended` to detect bad practice in service implementations.
+- Add rule `no-shared-handler-variables` to detect when state is shared between handlers.
+- Add rule `use-cql-select-template-strings` to mitigate potential for SQL injections.
+- Add rule `no-cross-service-import` to detect when typer artifacts are imported in an unrelated service.
+- Add rule `no-deep-sap-cds-import` to forbid importing from below the facade of `@sap/cds`.
+
+### Changed
+- Bumped peer dependency to `@sap/cds` to 9.
+
+### Removed
+- Removed support for ESLint8
+
+## [3.2.0] - 2025-03-03
+
+### Changed
+- Rules `@sap/cds/sql-null-comparison` and `@sap/cds/no-java-keywords` are moved from the `experimental` rule set to `all`.
+
+### Fixed
+
+- Rules `@sap/cds/sql-null-comparison` will not warn about `!= null`, as it may be supported by future CDS compiler versions.
+- Some rules had `docs` meta property `recommended: true`, but were not part of the recommended rules list.
+- When determining a CDS project's root directory, we now consider package.json's with `@sap/cds` as `devDependency` or `peerDependency`
 
 ## [3.1.2] - 2024-10-31
 

package/LICENSE

@@ -1,38 +1,32 @@
 SAP DEVELOPER LICENSE AGREEMENT
 
-Version 3.1
+Version 3.2 CAP
 
 Please scroll down and read the following Developer License Agreement carefully ("Developer Agreement").  By clicking "I Accept" or by attempting to download, or install, or use the SAP software and other materials that accompany this Developer Agreement ("SAP Materials"), You agree that this Developer Agreement forms a legally binding agreement between You ("You" or "Your") and SAP SE, for and on behalf of itself and its subsidiaries and affiliates (as defined in Section 15 of the German Stock Corporation Act) and You agree to be bound by all of the terms and conditions stated in this Developer Agreement. If You are trying to access or download the SAP Materials on behalf of Your employer or as a consultant or agent of a third party (either "Your Company"), You represent and warrant that You have the authority to act on behalf of and bind Your Company to the terms of this Developer Agreement and everywhere in this Developer Agreement that refers to 'You' or 'Your' shall also include Your Company. If You do not agree to these terms, do not click "I Accept", and do not attempt to access or use the SAP Materials.
 
-1.  LICENSE: SAP grants You a non-exclusive, non-transferable, non-sublicensable, revocable, limited use license to copy, reproduce and distribute the application programming interfaces ("API"), documentation, plug-ins, templates, scripts and sample code ("Tools") on a desktop, laptop, tablet, smart phone, or other appropriate computer device that You own or control (any, a "Computer") to create new applications ("Customer Applications"). You agree that the Customer Applications will not: (a) unreasonably impair, degrade or reduce the performance or security of any SAP software applications, services or related technology ("Software"); (b) enable the bypassing or circumventing of SAP's license restrictions and/or provide users with access to the Software to which such users are not licensed; (c) render or provide, without prior written consent from SAP, any information concerning SAP software license terms, Software, or any other information related to SAP products; or (d) permit mass data extraction from an SAP product to a non-SAP product, including use, modification, saving or other processing of such data in the non-SAP product. In exchange for the right to develop Customer Applications under this Agreement, You covenant not to assert any Intellectual Property Rights in Customer Applications created by You against any SAP product, service, or future SAP development.
+1. LICENSE: SAP grants You a non-exclusive, non-transferable, non-sublicensable, revocable, limited use license to copy and reproduce the application programming interfaces ("API"), documentation, plug-ins, templates, scripts and sample code, libraries, software development kits ("Tools") to create new applications ("Customer Applications") being developed either for (a) testing and only non-productive use (“Customer Test Applications”) or (b) for productive use deployed and operated exclusively on  “SAP Business Technology Platform (BTP)” or any other platform licensed from SAP (“Customer Productive Applications”). Only under this prerequisite SAP will grant You a non-exclusive, non-transferable, revocable, limited use license to copy, reproduce and distribute SAP’s underlying rights in the Customer Productive Application. You agree that any Customer Applications will not: (a) unreasonably impair, degrade or reduce the performance or security of any SAP software applications, services or related technology ("Software"); (b) enable the bypassing or circumventing of SAP's license restrictions and/or provide users with access to the Software to which such users are not licensed; (c) render or provide, without prior written consent from SAP, any information concerning SAP software license terms, Software, or any other information related to SAP products; or (d) permit mass data extraction from an SAP product to a non-SAP product, including use, modification, saving or other processing of such data in the non-SAP product, except and only to the extent that the extraction is solely used for and required for interoperability with an SAP product. In exchange for the right to develop any Customer Applications under this Agreement, You covenant not to assert any Intellectual Property Rights in Customer Applications created by You against any SAP product, service, or future SAP development.
 
-2.  INTELLECTUAL PROPERTY: (a) SAP or its licensors retain all ownership and intellectual property rights in the APIs, Tools and Software. You may not: a) remove or modify any marks or proprietary notices of SAP, b) provide or make the APIs, Tools or Software available to any third party, c) assign this Developer Agreement or give or transfer the APIs, Tools or Software or an interest in them to another individual or entity, d) decompile, disassemble or reverse engineer (except to the extent permitted by applicable law) the APIs Tools or Software, (e) create derivative works of or based on the APIs, Tools or Software, (f) use any SAP name, trademark or logo, or (g) use the APIs or Tools to modify existing Software or other SAP product functionality or to access the Software or other SAP products' source code or metadata.
-(b) Subject to SAP's underlying rights in any part of the APIs, Tools or Software, You retain all ownership and intellectual property rights in Your Customer Applications.
+2. INTELLECTUAL PROPERTY: (a) SAP or its licensors retain all ownership and intellectual property rights in the APIs, Tools and Software. You may not: a) remove or modify any marks or proprietary notices of SAP, b) provide or make the APIs, Tools or Software available to any third party, except in cases APIs and Tools have been made part of the overall Customer Productive Application to function, c) assign this Developer Agreement or give or transfer the APIs, Tools or Software or an interest in them to another individual or entity, d) decompile, disassemble or reverse engineer (except to the extent permitted by applicable law) the APIs Tools or Software, e) create derivative works of or based on the APIs, Tools or Software, subject to Customer Productive Applications, being exclusively deployed and operated on “SAP Business Technology Platform (BTP)” or on any other platform licensed from SAP, f) use any SAP name, trademark or logo, or g) use the APIs or Tools to modify existing Software or other SAP product functionality or to access the Software or other SAP products' source code or metadata. (b) Subject to SAP's underlying rights in any part of the APIs, Tools or Software, You retain all ownership and intellectual property rights in Your Customer Applications.
 
-3. FREE AND OPEN SOURCE COMPONENTS: The SAP Materials may include certain third party free or open source components ("FOSS Components"). You may have additional rights in such FOSS Components that are provided by the third party licensors of those components.
+3. ARTIFICIAL INTELLIGENCE TRAINING: You are expressly prohibited from using the Software, Tools or APIs as well as any Customer Applications or any part thereof for the purpose of training (developing) artificial intelligence models or systems (“AI Training”). Prohibition of AI Training includes, but is not limited to, using the Software, Tools, APIs and/or Customer Applications or part thereof in any training data set, algorithm development, model development or refinement (including language learning models) related to artificial intelligence, as well as text and data mining in accordance with §44b UrhG and Art. 4 of EU Directive 2019/790. For the avoidance of doubt, by accepting this Developer Agreement You agree that Your ownership of Customer Applications shall not create nor encompass any right to use Customer Applications for AI Training and, hence, You will not use Customer Applications or any part of it for AI Training.
 
-4. THIRD PARTY DEPENDENCIES: The SAP Materials may require certain third party software dependencies ("Dependencies") for the use or operation of such SAP Materials. These dependencies may be identified by SAP in Maven POM files, product documentation or by other means. SAP does not grant You any rights in or to such Dependencies under this Developer Agreement. You are solely responsible for the acquisition, installation and use of Dependencies. SAP DOES NOT MAKE ANY REPRESENTATIONS OR WARRANTIES IN RESPECT OF DEPENDENCIES, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY AND OF FITNESS FOR A PARTICULAR PURPOSE. IN PARTICULAR, SAP DOES NOT WARRANT THAT DEPENDENCIES WILL BE AVAILABLE, ERROR FREE, INTEROPERABLE WITH THE SAP MATERIALS, SUITABLE FOR ANY PARTICULAR PURPOSE OR NON-INFRINGING.  YOU ASSUME ALL RISKS ASSOCIATED WITH THE USE OF DEPENDENCIES, INCLUDING WITHOUT LIMITATION RISKS RELATING TO QUALITY, AVAILABILITY, PERFORMANCE, DATA LOSS, UTILITY IN A PRODUCTION ENVIRONMENT, AND NON-INFRINGEMENT. IN NO EVENT WILL SAP BE LIABLE DIRECTLY OR INDIRECTLY IN RESPECT OF ANY USE OF DEPENDENCIES BY YOU.
+4. FREE AND OPEN SOURCE COMPONENTS: The SAP Materials may include certain third party free or open source components ("FOSS Components"). You may have additional rights in such FOSS Components that are provided by the third party licensors of those components.
 
+5. THIRD PARTY DEPENDENCIES: The SAP Materials may require certain third party software dependencies ("Dependencies") for the use or operation of such SAP Materials. These dependencies may be identified by SAP in Maven POM files, product documentation or by other means. SAP does not grant You any rights in or to such Dependencies under this Developer Agreement. You are solely responsible for the acquisition, installation and use of Dependencies. SAP DOES NOT MAKE ANY REPRESENTATIONS OR WARRANTIES IN RESPECT OF DEPENDENCIES, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY AND OF FITNESS FOR A PARTICULAR PURPOSE. IN PARTICULAR, SAP DOES NOT WARRANT THAT DEPENDENCIES WILL BE AVAILABLE, ERROR FREE, INTEROPERABLE WITH THE SAP MATERIALS, SUITABLE FOR ANY PARTICULAR PURPOSE OR NON-INFRINGING.  YOU ASSUME ALL RISKS ASSOCIATED WITH THE USE OF DEPENDENCIES, INCLUDING WITHOUT LIMITATION RISKS RELATING TO QUALITY, AVAILABILITY, PERFORMANCE, DATA LOSS, UTILITY IN A PRODUCTION ENVIRONMENT, AND NON-INFRINGEMENT. IN NO EVENT WILL SAP BE LIABLE DIRECTLY OR INDIRECTLY IN RESPECT OF ANY USE OF DEPENDENCIES BY YOU.
 
-5.  WARRANTY:
-a)  If You are located outside the US or Canada: AS THE API AND TOOLS ARE PROVIDED TO YOU FREE OF CHARGE, SAP DOES NOT GUARANTEE OR WARRANT ANY FEATURES OR QUALITIES OF THE TOOLS OR API OR GIVE ANY UNDERTAKING WITH REGARD TO ANY OTHER QUALITY. NO SUCH WARRANTY OR UNDERTAKING SHALL BE IMPLIED BY YOU FROM ANY DESCRIPTION IN THE API OR TOOLS OR ANY AVAILABLE DOCUMENTATION OR ANY OTHER COMMUNICATION OR ADVERTISEMENT. IN PARTICULAR, SAP DOES NOT WARRANT THAT THE SOFTWARE WILL BE AVAILABLE UNINTERRUPTED, ERROR FREE, OR PERMANENTLY AVAILABLE.  FOR THE TOOLS AND API ALL WARRANTY CLAIMS ARE SUBJECT TO THE LIMITATION OF LIABILITY STIPULATED IN SECTION 4 BELOW.
-b)  If You are located in the US or Canada: THE API AND TOOLS ARE LICENSED TO YOU "AS IS", WITHOUT ANY WARRANTY, ESCROW, TRAINING, MAINTENANCE, OR SERVICE OBLIGATIONS WHATSOEVER ON THE PART OF SAP. SAP MAKES NO EXPRESS OR IMPLIED WARRANTIES OR CONDITIONS OF SALE OF ANY TYPE WHATSOEVER, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY AND OF FITNESS FOR A PARTICULAR PURPOSE. IN PARTICULAR, SAP DOES NOT WARRANT THAT THE SOFTWARE WILL BE AVAILABLE UNINTERRUPTED, ERROR FREE, OR PERMANENTLY AVAILABLE.  YOU ASSUME ALL RISKS ASSOCIATED WITH THE USE OF THE API AND TOOLS, INCLUDING WITHOUT LIMITATION RISKS RELATING TO QUALITY, AVAILABILITY, PERFORMANCE, DATA LOSS, AND UTILITY IN A PRODUCTION ENVIRONMENT.
+6. WARRANTY: a)  If You are located outside the US or Canada: AS THE API AND TOOLS ARE PROVIDED TO YOU FREE OF CHARGE, SAP DOES NOT GUARANTEE OR WARRANT ANY FEATURES OR QUALITIES OF THE TOOLS OR API OR GIVE ANY UNDERTAKING WITH REGARD TO ANY OTHER QUALITY OR TO YOUR CUSTOMERS. NO SUCH WARRANTY OR UNDERTAKING SHALL BE IMPLIED BY YOU FROM ANY DESCRIPTION IN THE API OR TOOLS OR ANY AVAILABLE DOCUMENTATION OR ANY OTHER COMMUNICATION OR ADVERTISEMENT. IN PARTICULAR, SAP DOES NOT WARRANT THAT THE SOFTWARE WILL BE AVAILABLE UNINTERRUPTED, ERROR FREE, OR PERMANENTLY AVAILABLE.  FOR THE TOOLS AND API ALL WARRANTY CLAIMS ARE SUBJECT TO THE LIMITATION OF LIABILITY STIPULATED IN SECTION 4 BELOW. b)  If You are located in the US or Canada: THE API AND TOOLS ARE LICENSED TO YOU "AS IS", WITHOUT ANY WARRANTY, ESCROW, TRAINING, MAINTENANCE, OR SERVICE OBLIGATIONS WHATSOEVER ON THE PART OF SAP. SAP MAKES NO EXPRESS OR IMPLIED WARRANTIES OR CONDITIONS OF SALE OF ANY TYPE WHATSOEVER, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY AND OF FITNESS FOR A PARTICULAR PURPOSE. IN PARTICULAR, SAP DOES NOT WARRANT THAT THE SOFTWARE WILL BE AVAILABLE UNINTERRUPTED, ERROR FREE, OR PERMANENTLY AVAILABLE.  YOU ASSUME ALL RISKS ASSOCIATED WITH THE USE AND DISTRIBUTION (IF ANY) OF THE API AND TOOLS, INCLUDING WITHOUT LIMITATION RISKS RELATING TO QUALITY, AVAILABILITY, PERFORMANCE, DATA LOSS, AND UTILITY IN A PRODUCTION ENVIRONMENT.
 
-6.  LIMITATION OF LIABILITY:
-a)  If You are located outside the US or Canada: IRRESPECTIVE OF THE LEGAL REASONS, SAP SHALL ONLY BE LIABLE FOR DAMAGES UNDER THIS AGREEMENT IF SUCH DAMAGE (I) CAN BE CLAIMED UNDER THE GERMAN PRODUCT LIABILITY ACT OR (II) IS CAUSED BY INTENTIONAL MISCONDUCT OF SAP OR (III) CONSISTS OF PERSONAL INJURY. IN ALL OTHER CASES, NEITHER SAP NOR ITS EMPLOYEES, AGENTS AND SUBCONTRACTORS SHALL BE LIABLE FOR ANY KIND OF DAMAGE OR CLAIMS HEREUNDER.
-b)  If You are located in the US or Canada: IN NO EVENT SHALL SAP BE LIABLE TO YOU, YOUR COMPANY OR TO ANY THIRD PARTY FOR ANY DAMAGES IN AN AMOUNT IN EXCESS OF $100 ARISING IN CONNECTION WITH YOUR USE OF OR INABILITY TO USE THE TOOLS OR API OR IN CONNECTION WITH SAP'S PROVISION OF OR FAILURE TO PROVIDE SERVICES PERTAINING TO THE TOOLS OR API, OR AS A RESULT OF ANY DEFECT IN THE API OR TOOLS. THIS DISCLAIMER OF LIABILITY SHALL APPLY REGARDLESS OF THE FORM OF ACTION THAT MAY BE BROUGHT AGAINST SAP, WHETHER IN CONTRACT OR TORT, INCLUDING WITHOUT LIMITATION ANY ACTION FOR NEGLIGENCE. YOUR SOLE REMEDY IN THE EVENT OF BREACH OF THIS DEVELOPER AGREEMENT BY SAP OR FOR ANY OTHER CLAIM RELATED TO THE API OR TOOLS SHALL BE TERMINATION OF THIS AGREEMENT. NOTWITHSTANDING ANYTHING TO THE CONTRARY HEREIN, UNDER NO CIRCUMSTANCES SHALL SAP AND ITS LICENSORS BE LIABLE TO YOU OR ANY OTHER PERSON OR ENTITY FOR ANY SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR INDIRECT DAMAGES, LOSS OF GOOD WILL OR BUSINESS PROFITS, WORK STOPPAGE, DATA LOSS, COMPUTER FAILURE OR MALFUNCTION, ANY AND ALL OTHER COMMERCIAL DAMAGES OR LOSS, OR EXEMPLARY OR PUNITIVE DAMAGES.
+7.  LIMITATION OF LIABILITY: a)  If You are located outside the US or Canada: IRRESPECTIVE OF THE LEGAL REASONS, SAP SHALL ONLY BE LIABLE FOR DAMAGES UNDER THIS AGREEMENT IF SUCH DAMAGE (I) CAN BE CLAIMED UNDER THE GERMAN PRODUCT LIABILITY ACT OR (II) IS CAUSED BY INTENTIONAL MISCONDUCT OF SAP OR (III) CONSISTS OF PERSONAL INJURY. IN ALL OTHER CASES, NEITHER SAP NOR ITS EMPLOYEES, AGENTS AND SUBCONTRACTORS SHALL BE LIABLE FOR ANY KIND OF DAMAGE OR CLAIMS HEREUNDER.
+b)  If You are located in the US or Canada: IN NO EVENT SHALL SAP BE LIABLE TO YOU, YOUR COMPANY, YOUR CUSTOMERS OR TO ANY THIRD PARTY FOR ANY DAMAGES IN AN AMOUNT IN EXCESS OF $100 ARISING IN CONNECTION WITH YOUR USE OF OR INABILITY TO USE THE TOOLS OR API OR IN CONNECTION WITH SAP'S PROVISION OF OR FAILURE TO PROVIDE SERVICES PERTAINING TO THE TOOLS OR API, OR AS A RESULT OF ANY DEFECT IN THE API OR TOOLS OR ANY THIRD PARTY RIGHTS INFRINGEMENT BY THE APIs, TOOLS OR SOFTWARE. THIS DISCLAIMER OF LIABILITY SHALL APPLY REGARDLESS OF THE FORM OF ACTION THAT MAY BE BROUGHT AGAINST SAP, WHETHER IN CONTRACT OR TORT, INCLUDING WITHOUT LIMITATION ANY ACTION FOR NEGLIGENCE. YOUR SOLE REMEDY IN THE EVENT OF BREACH OF THIS DEVELOPER AGREEMENT BY SAP OR FOR ANY OTHER CLAIM RELATED TO THE API OR TOOLS SHALL BE TERMINATION OF THIS AGREEMENT. NOTWITHSTANDING ANYTHING TO THE CONTRARY HEREIN, UNDER NO CIRCUMSTANCES SHALL SAP AND ITS LICENSORS BE LIABLE TO YOU OR ANY OTHER PERSON IN PARTICULAR COMPANY AND YOUR CUSTOMERS  OR ENTITY FOR ANY SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR INDIRECT DAMAGES, LOSS OF GOOD WILL OR BUSINESS PROFITS, WORK STOPPAGE, DATA LOSS, COMPUTER FAILURE OR MALFUNCTION, ANY AND ALL OTHER COMMERCIAL DAMAGES OR LOSS, OR EXEMPLARY OR PUNITIVE DAMAGES.
 
-7.  INDEMNITY: You will fully indemnify, hold harmless and defend SAP against law suits based on any claim: (a) that any Customer Application created by You infringes or misappropriates any patent, copyright, trademark, trade secrets, or other proprietary rights of a third party, or (b) related to Your alleged violation of the terms of this Developer Agreement.
+8.  INDEMNITY: You will fully indemnify, hold harmless and defend SAP against law suits based on any claim: (a) that any Customer Application created by You infringes or misappropriates any patent, copyright, trademark, trade secrets, or other proprietary rights of a third party, or (b) related to Your alleged violation of the terms of this Developer Agreement
 
-8.  EXPORT: The Tools and API are subject to German, EU and US export control regulations. You confirm that: a) You will not use the Tools or API for, and will not allow the Tools or API to be used for, any purposes prohibited by German, EU and US law, including, without limitation, for the development, design, manufacture or production of nuclear, chemical or biological weapons of mass destruction; b) You are not located in Cuba, Iran, Sudan, Iraq, North Korea, Syria, nor any other country to which the United States has prohibited export or that has been designated by the U.S. Government as a "terrorist supporting" country (any, an "US Embargoed Country"); c) You are not a citizen, national or resident of, and are not under the control of, a US Embargoed Country; d) You will not download or otherwise export or re-export the API or Tools, directly or indirectly, to a US Embargoed Country nor to citizens, nationals or residents of a US Embargoed Country; e) You are not listed on the United States Department of Treasury lists of Specially Designated Nationals, Specially Designated Terrorists, and Specially Designated Narcotic Traffickers, nor listed on the United States Department of Commerce Table of Denial Orders or any other U.S. government list of prohibited or restricted parties and f) You will not download or otherwise export or re-export the API or Tools , directly or indirectly, to persons on the above-mentioned lists.
+9.  EXPORT: The Tools and API are subject to German, EU and US export control regulations. You confirm that: a) You will not use the Tools or API for, and will not allow the Tools or API to be used for, any purposes prohibited by German, EU and US law, including, without limitation, for the development, design, manufacture or production of nuclear, chemical or biological weapons of mass destruction; b) You are not located in and/or will not download or otherwise export or re-export the API or Tools, directly or indirectly, to  Cuba, Iran, North Korea, Syria, Crimea/Sevastopol or the so-called Donetsk People’s Republic (DNR) / Luhansk People’s Republic (LNR)nor any other country to which Germany, the European Union and/or the United States has prohibited export; c)  You are not listed on any applicable sanctioned party lists (e.g., European Union Sanctions List, U.S. Specially Designated National (SDN) lists, U.S. Denied Persons List, BIS Entity List, United Nations Security Council Sanctions); d) You will not download or otherwise export or re-export the API or Tools , directly or indirectly, to persons on the above-mentioned lists.
 
-9.  SUPPORT: Other than what is made available on the SAP Community Website (SCN) by SAP at its sole discretion and by SCN members, SAP does not offer support for the API or Tools which are the subject of this Developer Agreement.
+10.  SUPPORT: Other than what is made available on the SAP Community Website (SCN) by SAP at its sole discretion and by SCN members, SAP does not offer support for the API or Tools which are the subject of this Developer Agreement. In case of Customer Productive Applications developed and made available by You in accordance with this Developer Agreement, You and third parties may request support in line with Your licensing agreement for SAP.
 
-10.  TERM AND TERMINATION: You may terminate this Developer Agreement by destroying all copies of the API and Tools on Your Computer(s). SAP may terminate Your license to use the API and Tools immediately if You fail to comply with any of the terms of this Developer Agreement, or, for SAP's convenience by providing you with ten (10) day's written notice of termination (including email). In case of termination or expiration of this Developer Agreement, You must destroy all copies of the API and Tools immediately.  In the event Your Company or any of the intellectual property you create using the API, Tools or Software are acquired (by merger, purchase of stock, assets or intellectual property or exclusive license), or You become employed, by a direct competitor of SAP, then this Development Agreement and all licenses granted in this Developer Agreement shall immediately terminate upon the date of such acquisition.
+11.  TERM AND TERMINATION: You may terminate this Developer Agreement by destroying all copies of the API and Tools on Your Computer(s). SAP may terminate Your license to use the API and Tools immediately if You fail to comply with any of the terms of this Developer Agreement, or, for SAP's convenience by providing you with ten (10) day's written notice of termination (including email). In case of termination or expiration of this Developer Agreement, You must destroy all copies of the API and Tools immediately.  In the event Your Company or any of the intellectual property you create using the API, Tools or Software are acquired (by merger, purchase of stock, assets or intellectual property or exclusive license), or You become employed, by a direct competitor of SAP, then this Development Agreement and all licenses granted in this Developer Agreement shall immediately terminate upon the date of such acquisition.
 
-11.  LAW/VENUE:
-a)  If You are located outside the US or Canada: This Developer Agreement is governed by and construed in accordance with the laws of the Germany. You and SAP agree to submit to the exclusive jurisdiction of, and venue in, the courts of Karlsruhe in Germany in any dispute arising out of or relating to this Developer Agreement.
-b)  If You are located in the US or Canada: This Developer Agreement shall be governed by and construed under the Commonwealth of Pennsylvania law without reference to its conflicts of law principles. In the event of any conflicts between foreign law, rules, and regulations, and United States of America law, rules, and regulations, United States of America law, rules, and regulations shall prevail and govern. The United Nations Convention on Contracts for the International Sale of Goods shall not apply to this Developer Agreement. The Uniform Computer Information Transactions Act as enacted shall not apply.
-
-12. MISCELLANEOUS: This Developer Agreement is the complete agreement for the API and Tools licensed (including reference to information/documentation contained in a URL). This Developer Agreement supersedes all prior or contemporaneous agreements or representations with regards to the subject matter of this Developer Agreement. If any term of this Developer Agreement is found to be invalid or unenforceable, the surviving provisions shall remain effective. SAP's failure to enforce any right or provisions stipulated in this Developer Agreement will not constitute a waiver of such provision, or any other provision of this Developer Agreement.
+12.  LAW/VENUE: a)  If You are located outside the US or Canada: This Developer Agreement is governed by and construed in accordance with the laws of the Germany. You and SAP agree to submit to the exclusive jurisdiction of, and venue in, the courts of Karlsruhe in Germany in any dispute arising out of or relating to this Developer Agreement. b)  If You are located in the US or Canada: This Developer Agreement shall be governed by and construed under the Commonwealth of Pennsylvania law without reference to its conflicts of law principles. In the event of any conflicts between foreign law, rules, and regulations, and United States of America law, rules, and regulations, United States of America law, rules, and regulations shall prevail and govern. The United Nations Convention on Contracts for the International Sale of Goods shall not apply to this Developer Agreement. The Uniform Computer Information Transactions Act as enacted shall not apply.
 
+13. MISCELLANEOUS: This Developer Agreement is the complete agreement for the API and Tools licensed (including reference to information/documentation contained in a URL). This Developer Agreement supersedes all prior or contemporaneous agreements or representations with regards to the subject matter of this Developer Agreement. If any term of this Developer Agreement is found to be invalid or unenforceable, the surviving provisions shall remain effective. SAP's failure to enforce any right or provisions stipulated in this Developer Agreement will not constitute a waiver of such provision, or any other provision of this Developer Agreement.

package/lib/conf/all.js

@@ -18,4 +18,6 @@ module.exports = {
   '@sap/cds/start-entities-uppercase': 'error',
   '@sap/cds/valid-csv-header': 'error',
   '@sap/cds/extension-restrictions': 'error',
+  '@sap/cds/sql-null-comparison': 'warn',
+  '@sap/cds/no-java-keywords': 'warn',
 }

package/lib/conf/experimental.js

@@ -7,6 +7,5 @@
 // to "all" or even "recommended".
 
 module.exports = {
-  '@sap/cds/sql-null-comparison': 'warn',
-  '@sap/cds/no-java-keywords': 'error',
+  // '@sap/cds/my-rule': 'warn',
 }

package/lib/conf/index.js

@@ -1,30 +1,26 @@
 'use strict'
 
 const path = require('node:path')
-const { FILES, GLOBALS, PLUGIN_NAME } = require('../constants')
+const { FILES, GLOBALS } = require('../constants')
 const { parserPath } = require('../api')
 
+function _createJsConfig (plugin, configName) {
+  return {
+    name: '@sap/cds/js',
+    plugins: {
+      '@sap/cds': plugin
+    },
+    files: ['**/*.js'],
+    rules: require(path.join(__dirname, 'js', configName))
+  }
+}
+
 /**
  * @param {object} plugin Plugin implementation used for new configuration layout.
  * @param {string} configName
- * @param {boolean} [isLegacy]
  */
-function _createConfig (plugin, configName, isLegacy = false) {
+function _createConfig (plugin, configName) {
   const config = require(path.join(__dirname, configName))
-  if (isLegacy) {
-    return {
-      root: true,
-      globals: GLOBALS,
-      plugins: [PLUGIN_NAME],
-      overrides: [
-        {
-          files: FILES,
-          parser: parserPath
-        }
-      ],
-      rules: config
-    }
-  }
   return {
     name: `@sap/cds/${configName}`,
     languageOptions: {
@@ -39,15 +35,14 @@ function _createConfig (plugin, configName, isLegacy = false) {
   }
 }
 
-// Export both eslintrc and flat configs to ensure backwards compatibility (<eslint@v9):
-// https://eslint.org/docs/latest/extend/plugin-migration-flat-config#backwards-compatibility
 module.exports = function (plugin) {
   return {
     all: _createConfig(plugin, 'all'),
     recommended: _createConfig(plugin, 'recommended'),
     experimental: _createConfig(plugin, 'experimental'),
-    // Legacy configs (for backwards compatibility)
-    'all-legacy': _createConfig(plugin, 'all', true),
-    'recommended-legacy': _createConfig(plugin, 'recommended', true)
+    js: {
+      all: _createJsConfig(plugin, 'all'),
+      recommended: _createJsConfig(plugin, 'recommended')
+    }
   }
 }

package/lib/conf/js/all.js

@@ -0,0 +1,8 @@
+'use strict'
+
+module.exports = {
+  '@sap/cds/no-shared-handler-variable': 'error',
+  '@sap/cds/use-cql-select-template-strings': 'error',
+  '@sap/cds/no-cross-service-import': 'warn',
+  '@sap/cds/no-deep-sap-cds-import': 'warn',
+}

package/lib/conf/js/recommended.js

@@ -0,0 +1,8 @@
+'use strict'
+
+module.exports = {
+  '@sap/cds/no-shared-handler-variable': 'error',
+  '@sap/cds/use-cql-select-template-strings': 'error',
+  '@sap/cds/no-cross-service-import': 'warn',
+  '@sap/cds/no-deep-sap-cds-import': 'warn',
+}

package/lib/constants.js

@@ -16,6 +16,12 @@
 
 const RULE_FLAVORS = ['parsed', 'inferred']
 
+const RULE_CATEGORIES = {
+  model: 'Model Validation',
+  javascript: 'JavaScript Validation',
+  environment: 'Environment Validation',
+  csv: 'CSV Validation',
+}
 const DEFAULT_RULE_CATEGORY = 'Model Validation'
 const DEFAULT_RULE_FLAVOR = RULE_FLAVORS[0]
 const DEFAULT_RULE_SEVERITY = 'error'
@@ -46,6 +52,7 @@ const GLOBALS = {
 
 module.exports = {
   RULE_FLAVORS,
+  RULE_CATEGORIES,
   DEFAULT_RULE_CATEGORY,
   DEFAULT_RULE_FLAVOR,
   DEFAULT_RULE_SEVERITY,

package/lib/parser.js

@@ -11,58 +11,65 @@
  * (parserOptions).
  */
 const cds = require('@sap/cds')
-const Cache = require('./utils/Cache')
+const { globalCache } = require('./utils/Cache')
 const LOG = cds.debug('lint:plugin')
 const colors = require('./utils/Colors')
 const { splitDefName } = require('./utils/rules')
 const packageJson = require('../package.json')
 
+const newLineRegEx = /\r\n?|\n/g
+
 module.exports = {
   meta: {
     name: packageJson.name,
     version: packageJson.version
   },
-  parse: function (code, options) {
-    return module.exports.parseForESLint(code, options).ast
+  parse(code, parserOptions) {
+    return module.exports.parseForESLint(code, parserOptions).ast
   },
-  parseForESLint: function (code) {
+  // See https://eslint.org/docs/latest/extend/custom-parsers#parseforeslint-return-object
+  // eslint-disable-next-line no-unused-vars
+  parseForESLint(code, parserOptions) {
     return {
       ast: createProgramAST(code),
       services: {
         getParsedCsn: function () {
+          const compileOptions = {
+            messages: [],
+          }
           let compiledModel
           let reflectedModel
-          const messages = []
           try {
-            compiledModel = cds.parse(code)
+            compiledModel = cds.parse(code, compileOptions)
           } catch {
             // Do nothing
           }
           if (compiledModel) {
             try {
               reflectedModel = cds.linked(compiledModel)
-              if (messages) {
-                reflectedModel.messages = messages
+              if (compileOptions.messages) {
+                reflectedModel.messages = compileOptions.messages
               }
             } catch (err) {
-              LOG && LOG(colors.red + 'ERROR:' + colors.reset, err)
-              LOG && LOG('COMPILED', compiledModel)
-              LOG && LOG('REFLECTED', reflectedModel)
+              LOG?.(colors.red + 'ERROR:' + colors.reset, err)
+              LOG?.('COMPILED', compiledModel)
+              LOG?.('REFLECTED', reflectedModel)
             }
           }
           return reflectedModel
         },
+
         getInferredCsn: function () {
-          const rootPath = Cache.get('rootpath')
-          if (Cache.has('test')) {
-            return Cache.get(`model:${rootPath}`)
+          const rootPath = globalCache.get('rootpath')
+          if (globalCache.has('test')) {
+            return globalCache.get(`model:${rootPath}`)
           }
           let compiledModel
           let reflectedModel
           cds.resolve.cache = {}
 
-          if (!Cache.has(`model:${rootPath}`) && rootPath) {
-            const roots = Cache.get(`roots:${rootPath}`)
+          if (!globalCache.has(`model:${rootPath}`) && rootPath) {
+            const roots = globalCache.get(`roots:${rootPath}`)
             const messages = []
             if (roots) {
               try {
@@ -72,27 +79,28 @@ module.exports = {
                   locations: true,
                   messages
                 })
-                Cache.remove('errRootModel')
+                globalCache.remove('errRootModel')
               } catch (err) {
-                Cache.set('errRootModel', err)
+                // TODO: Only catch Compile Errors?
+                globalCache.set('errRootModel', err)
               }
               if (compiledModel) {
                 reflectedModel = cds.linked(compiledModel)
-                Cache.set(`model:${Cache.get('rootpath')}`, reflectedModel)
+                globalCache.set(`model:${globalCache.get('rootpath')}`, reflectedModel)
                 if (messages) {
                   reflectedModel.messages = messages
                 }
               }
             }
           } else {
-            reflectedModel = Cache.get(`model:${rootPath}`)
+            reflectedModel = globalCache.get(`model:${rootPath}`)
           }
           return reflectedModel
         },
         updateInferredCsn: compileModelFromDict,
         getEnvironment: function () {
-          const options = Cache.get('options')
-          return (options && options[0] && options[0].environment) ? options[0].environment : undefined
+          const options = globalCache.get('options')
+          return options?.[0]?.environment
         },
         getLocation: function (name, obj, model) {
           let loc
@@ -129,11 +137,11 @@ module.exports = {
         },
         getNode: function (obj) {
           let loc
-          if (obj) {
+          if (obj?.name) {
             let name = obj.name
             // TODO: 'action'/'function' not correct for bound action/function
             if (['action', 'entity', 'function', 'service'].includes(obj.kind)) {
-              name = splitDefName(obj).name
+              name = splitDefName(obj, name)?.name
             }
             loc = this.getLocation(name, obj)
           }
@@ -146,27 +154,37 @@ module.exports = {
     }
   },
   createProgramAST,
-  compileModelFromDict
+  compileModelFromDict,
 }
 
 /**
- * Generates dummy AST with just single Program node
+ * Generates dummy AST with just single Program node.
  *
  * @param code Parse file contents
  * @param {object} [loc]
- * @returns AST
+ * @returns ESLint AST
  */
 function createProgramAST (code, loc) {
-  loc = loc || {
-    start: {
-      line: 1,
-      column: 0
-    },
-    end: {
-      line: 1,
-      column: 0
+  if (!loc && code.length) {
+    const newLines = [...code.matchAll(newLineRegEx)]
+    const endColumn = newLines.length ? (code.length - newLines.at(-1).index) : code.length
+    loc = {
+      start: {
+        line: 1,
+        column: 1
+      },
+      end: {
+        line: newLines.length + 1,
+        column: endColumn
+      },
+    }
+  } else if (!loc) {
+    loc = {
+      start: { line: 0, column: 0 },
+      end: { line: 0, column: 0 },
     }
   }
+
   return {
     type: 'Program',
     body: [],

package/lib/rules/assoc2many-ambiguous-key.js

@@ -12,7 +12,7 @@ module.exports = {
         'Ambiguous key with a `TO MANY` relationship since entries could appear multiple times with the same key.',
       category: 'Model Validation',
       recommended: true,
-      url: 'https://cap.cloud.sap/docs/tools/cds-lint/meta/assoc2many-ambiguous-key',
+      url: 'https://cap.cloud.sap/docs/tools/cds-lint/rules/assoc2many-ambiguous-key',
     },
     messages: {
       ambiguous: `Ambiguous key in '{{name}}'. Element '{{column-name}}' leads to multiple entries so that key '{{key-name}}' is not unique.`,

package/lib/rules/auth-no-empty-restrictions.js

@@ -9,7 +9,7 @@ module.exports = {
       description: '`@restrict` and `@requires` must not be empty.',
       category: 'Model Validation',
       recommended: true,
-      url: 'https://cap.cloud.sap/docs/tools/cds-lint/meta/auth-no-empty-restrictions',
+      url: 'https://cap.cloud.sap/docs/tools/cds-lint/rules/auth-no-empty-restrictions',
     },
     messages: {
       missingRestriction: 'No explicit restrictions provided on {{kind}} `{{name}}` at `{{label}}`.',

package/lib/rules/auth-restrict-grant-service.js

@@ -7,7 +7,7 @@ module.exports = {
       description: '`@restrict.grant` on service level and for bound/unbound actions and functions is limited to grant: \'*\'',
       category: 'Model Validation',
       recommended: true,
-      url: 'https://cap.cloud.sap/docs/tools/cds-lint/meta/auth-restrict-grant-service',
+      url: 'https://cap.cloud.sap/docs/tools/cds-lint/rules/auth-restrict-grant-service',
     },
     messages: {
       limitedGrant: `The grant value provided in @restrict is limited to '*' for {{kind}} '{{name}}'`,

package/lib/rules/auth-use-requires.js

@@ -8,7 +8,7 @@ module.exports = {
       category: 'Model Validation',
       recommended: true,
       version: '2.4.1',
-      url: 'https://cap.cloud.sap/docs/tools/cds-lint/meta/auth-use-requires',
+      url: 'https://cap.cloud.sap/docs/tools/cds-lint/rules/auth-use-requires',
     },
     messages: {
       useRequires: 'Use `@requires` instead of `@restrict.to` at {{kind}} `{{name}}`.'

package/lib/rules/auth-valid-restrict-grant.js

@@ -20,7 +20,7 @@ module.exports = {
       description: '`@restrict.grant` must have valid values.',
       category: 'Model Validation',
       recommended: true,
-      url: 'https://cap.cloud.sap/docs/tools/cds-lint/meta/auth-valid-restrict-grant',
+      url: 'https://cap.cloud.sap/docs/tools/cds-lint/rules/auth-valid-restrict-grant',
     },
     messages: {
       invalidType: 'Invalid type for grant value. Must either be string or array of strings.',

package/lib/rules/auth-valid-restrict-keys.js

@@ -13,7 +13,7 @@ module.exports = {
       description: '`@restrict` must not have properties besides `to`, `grant`, and `where`.',
       category: 'Model Validation',
       recommended: true,
-      url: 'https://cap.cloud.sap/docs/tools/cds-lint/meta/auth-valid-restrict-keys',
+      url: 'https://cap.cloud.sap/docs/tools/cds-lint/rules/auth-valid-restrict-keys',
     },
     messages: {
       misspelledProperty: "Misspelled or unknown property '{{invalid}}'. Did you mean '{{candidates}}'?",

package/lib/rules/auth-valid-restrict-to.js

@@ -9,7 +9,7 @@ module.exports = {
       description: '`@restrict.to` must have valid values.',
       category: 'Model Validation',
       recommended: true,
-      url: 'https://cap.cloud.sap/docs/tools/cds-lint/meta/auth-valid-restrict-to',
+      url: 'https://cap.cloud.sap/docs/tools/cds-lint/rules/auth-valid-restrict-to',
     },
     messages: {
       invalidType: 'Invalid type for value of `@restrict.to`. Must either be string or array of strings.',

package/lib/rules/auth-valid-restrict-where.js

@@ -9,7 +9,7 @@ module.exports = {
       description: '`@restrict.where` must have valid values.',
       category: 'Model Validation',
       recommended: true,
-      url: 'https://cap.cloud.sap/docs/tools/cds-lint/meta/auth-valid-restrict-where',
+      url: 'https://cap.cloud.sap/docs/tools/cds-lint/rules/auth-valid-restrict-where',
     },
     severity: 'error',
     messages: {

package/lib/rules/extension-restrictions.js

@@ -10,7 +10,7 @@ const rule = module.exports = {
       description: 'Extensions must not violate restrictions set by the extended SaaS app.',
       category: 'Model Validation',
       recommended: true,
-      url: 'https://cap.cloud.sap/docs/tools/cds-lint/meta/extension-restrictions',
+      url: 'https://cap.cloud.sap/docs/tools/cds-lint/rules/extension-restrictions',
     },
     hasSuggestions: false,
     type: 'problem',

package/lib/rules/index.js

@@ -1,30 +1,26 @@
 'use strict'
 
-const Cache = require('../utils/Cache')
+const { globalCache } = require('../utils/Cache')
 const createRule = require('../utils/createRule')
 
-const rules = {
-  'assoc2many-ambiguous-key': () => createRule(require('./assoc2many-ambiguous-key')),
-  'auth-no-empty-restrictions': () => createRule(require('./auth-no-empty-restrictions')),
-  'auth-use-requires': () => createRule(require('./auth-use-requires')),
-  'auth-restrict-grant-service': () => createRule(require('./auth-restrict-grant-service')),
-  'auth-valid-restrict-grant': () => createRule(require('./auth-valid-restrict-grant')),
-  'auth-valid-restrict-keys': () => createRule(require('./auth-valid-restrict-keys')),
-  'auth-valid-restrict-to': () => createRule(require('./auth-valid-restrict-to')),
-  'auth-valid-restrict-where': () => createRule(require('./auth-valid-restrict-where')),
-  'latest-cds-version': () => createRule(require('./latest-cds-version')),
-  'no-db-keywords': () => createRule(require('./no-db-keywords')),
-  'no-java-keywords': () => createRule(require('./no-java-keywords')),
-  'no-dollar-prefixed-names': () => createRule(require('./no-dollar-prefixed-names')),
-  'no-join-on-draft': () => createRule(require('./no-join-on-draft')),
-  'sql-null-comparison': () => createRule(require('./sql-null-comparison')),
-  'sql-cast-suggestion': () => createRule(require('./sql-cast-suggestion')),
-  'start-elements-lowercase': () => createRule(require('./start-elements-lowercase')),
-  'start-entities-uppercase': () => createRule(require('./start-entities-uppercase')),
-  'valid-csv-header': () => createRule(require('./valid-csv-header')),
-  'extension-restrictions': () => createRule(require('./extension-restrictions'))
-}
+const fs = require('node:fs')
+const path = require('node:path')
 
-Cache.set('rules', rules)
+/**
+ * @param {string} dir - directory to read rules from
+ * @param {(module: NodeJS.Module) => unknown} post - post processing function
+ * @returns {Record<string, () => NodeJS.Module>}
+ */
+const readRulesFromDir = (dir, post) => Object.fromEntries(fs.readdirSync(path.join(__dirname, dir))
+  .filter(entry => entry.endsWith('.js') && !entry.includes('index'))  // only js files
+  .map(file => [path.parse(file).name, require(['.', dir, file].join('/'))])
+  .filter(([,module]) => Object.hasOwn(module, 'create'))  // create() is required to exist on top level by eslint -> good check to find actual rules
+  .map(([file, module]) => [file, () => post(module)]))
+
+const cdsRules = readRulesFromDir('.', createRule)
+const jsRules = readRulesFromDir('js', module => module)
+const rules = {...cdsRules, ...jsRules}
+
+globalCache.set('rules', rules)
 
 module.exports = rules