@siliconst/metaui 1.4.51 → 2.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Silicon Street Dev
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,29 +1,144 @@
-# MetaUI
-
-**MetaUI** is an extensible, metadata-driven UI engine built on top of SAP UI5. Instead of relying on static XML views, it parses standard JSON Schema definitions at runtime to dynamically generate SAP Fiori component trees. This enables server-driven architectures where the UI structure and data bindings are determined entirely by the incoming payload.
-
-## MetaUI vs. Fiori Elements
-It is important to note that MetaUI is **not** an attempt to replace SAP Fiori Elements. Fiori Elements is a robust framework for building UIs driven by static OData CDS annotations. 
-
-MetaUI is designed for highly dynamic use cases where CDS annotations are unavailable, impossible, or too rigid. By relying on universal JSON, MetaUI provides a flexible alternative for scenarios that demand on-the-fly layout generation.
-
-✨ **[Play with the Live Interactive Demo Here!](https://SiliconStreetDev1.github.io/MetaUI/index.html)** ✨
-
----
-
-## 📚 Documentation
-
-All comprehensive documentation regarding JSON Schema properties, `ui.*` orchestrations, plugins, and Fiori integrations has been moved to our Wiki. 
-
-Please refer to the **[MetaUI Documentation Wiki](docs/wiki/Home.md)** for full implementation details, API references, and integration guides.
-
----
-
-## ⚖️ License & Disclaimer
-
-**MIT License**
-
-This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.
-
-> [!WARNING]
-> **Disclaimer**: This software is provided "as is", without warranty of any kind, express or implied. Use of this project is at your own risk. The authors shall not be liable for any damages or issues arising from its usage.
+# MetaUI
+
+**MetaUI** is an extensible, metadata-driven UI engine built on top of SAP UI5. Instead of relying on static XML views, it parses standard JSON Schema definitions at runtime to dynamically generate SAP Fiori component trees. This enables server-driven architectures where the UI structure and data bindings are determined entirely by the incoming payload.
+
+[![CI](https://github.com/SiliconStreetDev1/MetaUI/actions/workflows/ci.yml/badge.svg)](https://github.com/SiliconStreetDev1/MetaUI/actions/workflows/ci.yml)
+[![CodeQL](https://github.com/SiliconStreetDev1/MetaUI/actions/workflows/codeql.yml/badge.svg)](https://github.com/SiliconStreetDev1/MetaUI/actions/workflows/codeql.yml)
+[![Live Demo](https://img.shields.io/badge/demo-live-blue)](https://SiliconStreetDev1.github.io/MetaUI/index.html)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+
+> Verified by unit, integration and property-based tests, mutation testing, an accessibility
+> scan, and architectural gates that are each proven to fail against the divergence they guard.
+> The published package is installed into a real UI5 application and driven in a browser before
+> release — see [`test/consumer/`](test/consumer/). No runtime dependencies.
+
+![MetaUI rendering a Kitchen Sink form from a JSON Schema](docs/images/metaui_preview.png)
+
+## MetaUI vs. Fiori Elements
+
+It is important to note that MetaUI is **not** an attempt to replace SAP Fiori Elements. Fiori Elements is a robust framework for building UIs driven by static OData CDS annotations. 
+
+MetaUI is designed as a complementary tool for highly dynamic use cases where CDS annotations are unavailable, impossible, or too rigid. By relying on universal JSON Schema, MetaUI provides a flexible alternative for scenarios that demand on-the-fly, runtime layout generation.
+
+## Requirements
+
+**MetaUI runs on OpenUI5 and on SAPUI5**, with every widget available on both.
+Verified on OpenUI5 **1.120.50** from the OpenUI5 CDN (`https://sdk.openui5.org/`):
+the form, the layouts, and the `codeEditor` and `fileUploader` widgets all render.
+
+MetaUI eagerly depends on `sap.ui.core`, `sap.m` and `sap.ui.layout` only.
+`sap.ui.unified` (`fileUploader`) and `sap.ui.codeeditor` (`codeEditor`) are
+declared lazy and are loaded on demand, the first time a schema actually asks for
+one of those widgets. Both ship with OpenUI5 as well as SAPUI5, so the lazy
+declaration is about payload size, not availability — there is no SAPUI5-only
+dependency anywhere in the library.
+
+> **Not verified:** lazy library resolution on a Fiori Launchpad resolves through
+> the SAP App Index rather than the AMD loader. That path has not been tested.
+
+### Declare MetaUI as a library, not just a resource root
+
+> **Required, not optional.** UI5 only fetches a library's `library-preload.js`
+> when the library is **named as a library** — in `data-sap-ui-libs`, or in your
+> app's `manifest.json` under `sap.ui5.dependencies.libs`. Pointing
+> `data-sap-ui-resourceroots` at MetaUI without also declaring it makes the AMD
+> loader resolve every module individually, in serialised waves.
+>
+> Measured on OpenUI5 1.120.50 rendering one eight-field form: **2 HTTP requests
+> when declared (`library-preload.js` plus the message bundle), 87 when only the
+> resource root is set.** On localhost the difference is easy to miss; across a
+> real network those 87 resolve in serialised waves and dominate first render.
+
+```html
+<script id="sap-ui-bootstrap"
+        src="https://sdk.openui5.org/resources/sap-ui-core.js"
+        data-sap-ui-theme="sap_horizon"
+        data-sap-ui-libs="sap.m, sap.ui.core, sap.ui.layout, nz.co.siliconst.ui5.metaui"
+        data-sap-ui-resourceroots='{ "nz.co.siliconst.ui5.metaui": "./resources/nz/co/siliconst/ui5/metaui" }'
+        data-sap-ui-async="true">
+</script>
+```
+
+Inside a UI5 Tooling application, the equivalent is a `manifest.json` entry:
+
+```json
+{
+  "sap.ui5": { "dependencies": { "libs": { "nz.co.siliconst.ui5.metaui": {} } } }
+}
+```
+
+MetaUI does not load its own library at runtime to paper over a missing
+declaration: by the time any MetaUI code executes, the loader has already walked
+the module graph that the declaration exists to replace, and loading the whole
+library from a control would also defeat the on-demand plugin loading above.
+
+## Quickstart
+
+**1. Install**
+```bash
+npm install @siliconst/metaui
+```
+
+**2. Add to your XML View**
+```xml
+<mvc:View
+    xmlns:mvc="sap.ui.core.mvc"
+    xmlns:meta="nz.co.siliconst.ui5.metaui.controls">
+
+    <meta:DynamicHost
+        schemaDefinition="{yourModel>/schema}"
+        data="{yourModel>/payload}"
+        submit=".onFormSubmitted" />
+
+</mvc:View>
+```
+
+**3. Define a schema** (or let MetaUI infer one from your data)
+```json
+{
+  "title": "Guest Registration",
+  "type": "object",
+  "properties": {
+    "FullName":   { "type": "string", "maxLength": 100 },
+    "Email":      { "type": "string", "format": "email" },
+    "CheckIn":    { "type": "string", "format": "date" },
+    "VIP":        { "type": "boolean", "ui": { "widget": "switch" } }
+  },
+  "required": ["FullName", "Email"]
+}
+```
+
+That's it. MetaUI handles the `sap.m.Input`, `sap.m.DatePicker`, `sap.m.Switch`, validation, labels, and responsive layout automatically.
+
+## Key Features
+
+- **<!-- DOC_COUNT:pluginMappings -->51 `(type, widget)` plugin mappings** (canonical counts via `npm run metrics`) — Strings, numbers, dates, polymorphic `oneOf`/`anyOf` selectors, dictionary maps, cameras, signatures, code editors, OData/REST value helps, and more
+- **<!-- DOC_COUNT:layouts -->4 layout strategies** — Form, Table, Wizard (step-by-step), Compact
+- **Policy-Based Rules Engine** — Declarative cross-field logic (Show/Hide/Require/Disable) with automatic symmetrical reversals
+- **Tri-Binding Engine** — Feed data as an object, JSON string, or OData context
+- **Full Inference Mode** — Pass raw data with no schema; MetaUI generates the UI automatically
+- **OpenAPI / Swagger support** — Extract schemas directly from API specs
+
+## 📚 Documentation
+
+Full documentation covering schemas, plugins, policies, and integration guides:
+
+- **→ [MetaUI Documentation Wiki](docs/wiki/Home.md)**
+- **→ [Supported Features & Known Limitations](docs/wiki/SupportedFeatures.md)**
+
+## 🔒 Security
+
+MetaUI treats the schema it renders as **untrusted input**. Control properties, binding expressions, URLs and regular expressions supplied by a schema are each validated before they reach a UI5 sink, and a directive that fails validation is refused and logged rather than applied.
+
+Two things need a decision from you before you render schemas your application did not author:
+
+- **Cross-origin data sources are permitted by default.** `ui.dataSource.url` is always scheme-checked (`http:` / `https:` only), but a cross-origin endpoint is allowed with a one-time warning. Call `UrlValidator.setDataSourceOriginPolicy("same-origin")` — or `("allowlist", [...])` — at startup to change that.
+- **A `pattern` that cannot be proven safe still runs once.** Provably ambiguous regular expressions are refused outright; anything else is executed and quarantined for the session only after it overruns its 50 ms budget, so one unbounded evaluation is possible.
+
+The full trust model — what a schema may do, what it is prevented from doing, by which named mechanism, and what residual exposure remains — is in [Supported Features § Security Posture & Trust Model](docs/wiki/SupportedFeatures.md).
+
+## ⚖️ License
+
+MIT — see [LICENSE](LICENSE) for details.
+
+> **Disclaimer**: This software is provided "as is", without warranty of any kind. Use at your own risk.

package/package.json

@@ -1,23 +1,82 @@
-{
-  "name": "@siliconst/metaui",
-  "version": "1.4.51",
-  "description": "Dynamic Metadata UI5 Engine",
-  "author": "SiliconStreetDev1",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/SiliconStreetDev1/MetaUI.git"
-  },
-  "keywords": [
-    "ui5",
-    "metadata",
-    "engine"
-  ],
-  "files": [
-    "src",
-    "test-resources",
-    "ui5.yaml",
-    "README.md"
-  ],
-  "types": "index.d.ts"
-}
+{
+  "name": "@siliconst/metaui",
+  "version": "2.0.0",
+  "description": "Metadata-driven UI engine for SAPUI5 and OpenUI5: renders Fiori control trees at runtime from JSON Schema, OpenAPI or OData metadata",
+  "author": "SiliconStreetDev1",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/SiliconStreetDev1/MetaUI.git"
+  },
+  "homepage": "https://github.com/SiliconStreetDev1/MetaUI#readme",
+  "bugs": {
+    "url": "https://github.com/SiliconStreetDev1/MetaUI/issues"
+  },
+  "keywords": [
+    "ui5",
+    "sapui5",
+    "openui5",
+    "fiori",
+    "metadata",
+    "engine",
+    "json-schema",
+    "openapi",
+    "swagger",
+    "odata",
+    "dynamic-forms",
+    "form-generator",
+    "schema-driven-ui"
+  ],
+  "files": [
+    "src",
+    "ui5.yaml",
+    "README.md"
+  ],
+  "scripts": {
+    "metrics": "node scripts/run-tests.js --metrics-only",
+    "lint": "node scripts/run-tests.js --lint-only",
+    "typecheck": "tsc --noEmit -p .",
+    "build": "ui5 build --clean-dest",
+    "pretest": "npm run build",
+    "test": "node scripts/run-tests.js",
+    "flatten": "move dist\\resources\\nz dist\\nz && rmdir /s /q dist\\resources",
+    "deploy": "npm run build && npm run flatten && fiori deploy --config ui5-deploy.yaml",
+    "publish-prep": "node scripts/publish-prep.js",
+    "stress:fetch": "node scripts/fetch-stress-specs.js",
+    "stress": "node -e \"process.env.TS_NODE_PROJECT='test/swagger_schemas/tsconfig.json';require('./test/swagger_schemas/node-ui5-stub.js');require('ts-node/register');require('./test/swagger_schemas/test_runner.ts')\"",
+    "test:prop": "mocha --config test/node/.mocharc.json",
+    "mutate": "node test/node/run-mutation.js",
+    "api:snapshot": "node .github/scripts/api-surface.js dist --out .github/api-surface.txt",
+    "api:check": "node .github/scripts/api-surface.js dist --check .github/api-surface.txt",
+    "verify:package": "node .github/scripts/verify-package.js dist",
+    "gen:accessors": "node scripts/generate-control-accessors.js",
+    "gen:cheatsheet": "node scripts/generate-ai-cheatsheet.js",
+    "api:tiers": "node .github/scripts/api-surface.js dist --tier-report"
+  },
+  "engines": {
+    "node": ">=22.14.0"
+  },
+  "types": "dist/resources/nz/co/siliconst/ui5/metaui/library.d.ts",
+  "devDependencies": {
+    "@stryker-mutator/core": "10.0.0",
+    "@stryker-mutator/mocha-runner": "10.0.0",
+    "@types/mocha": "10.0.10",
+    "@types/node": "^26.6.5",
+    "@types/openui5": "^1.120.0",
+    "@ui5/cli": "^3.0.0",
+    "axe-core": "4.14.0",
+    "fast-check": "4.10.2",
+    "mocha": "11.7.5",
+    "puppeteer": "^25.15.0",
+    "ts-node": "^10.9.2",
+    "typescript": "^5.3.0"
+  },
+  "dependencies": {
+    "ui5-tooling-transpile": "^3.2.0"
+  },
+  "ui5": {
+    "dependencies": [
+      "ui5-tooling-transpile"
+    ]
+  }
+}

package/src/nz/co/siliconst/ui5/metaui/.library

@@ -1,7 +1,33 @@
-<?xml version="1.0" encoding="UTF-8" ?>
-<library xmlns="http://www.sap.com/sap.ui.library.xsd">
-	<name>nz.co.siliconst.ui5.metaui</name>
-	<vendor>Siliconst</vendor>
-	<version>1.0.0</version>
-	<title>MetaUI Engine</title>
-</library>
+<?xml version="1.0" encoding="UTF-8" ?>
+<library xmlns="http://www.sap.com/sap.ui.library.xsd">
+	<name>nz.co.siliconst.ui5.metaui</name>
+	<vendor>Siliconst</vendor>
+	<version>2.0.0</version>
+	<title>MetaUI Engine</title>
+	<dependencies>
+		<dependency>
+			<libraryName>sap.ui.core</libraryName>
+		</dependency>
+		<dependency>
+			<libraryName>sap.m</libraryName>
+		</dependency>
+		<dependency>
+			<libraryName>sap.ui.layout</libraryName>
+		</dependency>
+		<!--
+			Lazy dependencies. Each of the two below is imported by exactly one plugin module that
+			PluginRegistry.preloadDependencies() requires on demand, never by anything in library.ts's
+			eager import list. They must therefore stay <lazy>true</lazy> here AND stay out of
+			Core.initLibrary's `dependencies` array in library.ts - the two lists are one contract.
+			Both ship with OpenUI5 as well as SAPUI5, so this library has no SAPUI5-only dependency.
+		-->
+		<dependency>
+			<libraryName>sap.ui.unified</libraryName>
+			<lazy>true</lazy>
+		</dependency>
+		<dependency>
+			<libraryName>sap.ui.codeeditor</libraryName>
+			<lazy>true</lazy>
+		</dependency>
+	</dependencies>
+</library>

package/src/nz/co/siliconst/ui5/metaui/constants/MetaUIConstants.ts

@@ -1,101 +1,149 @@
-/**
- * @file MetaUIConstants.ts
- * @description Centralized registry of all core architectural string constants to prevent magic strings.
- */
-
-/**
- * Defines the physical layout rendering mode of a schema node.
- */
-export const RENDER_MODE = {
-    INLINE: "inline",
-    DIALOG: "dialog"
-} as const;
-
-export type RenderModeType = typeof RENDER_MODE[keyof typeof RENDER_MODE];
-
-/**
- * Standard JSON schema and MetaUI extended types.
- */
-export const SCHEMA_TYPE = {
-    OBJECT: "object",
-    ARRAY: "array",
-    STRING: "string",
-    NUMBER: "number",
-    INTEGER: "integer",
-    BOOLEAN: "boolean",
-    DATE: "date"
-} as const;
-
-export type SchemaTypeType = typeof SCHEMA_TYPE[keyof typeof SCHEMA_TYPE];
-
-/**
- * Common widget types injected into schema metadata.
- */
-export const WIDGET_TYPE = {
-    REFERENCE: "reference",
-    DICTIONARY_MAP: "dictionaryMap",
-    TIME: "time",
-    DATETIME: "datetime",
-    SWITCH: "switch",
-    STEP: "step",
-    SELECT: "select",
-    TEXT_AREA: "textArea",
-    CODE_EDITOR: "codeEditor",
-    LINK: "link",
-    PASSWORD: "password",
-    EMAIL: "email",
-    FILE_UPLOADER: "fileUploader",
-    MULTI_SELECT: "multiSelect",
-    MULTI_INPUT: "multiInput",
-    SLIDER: "slider",
-    RATING: "rating",
-    MESSAGE_STRIP: "messageStrip",
-    CAMERA: "camera",
-    SIGNATURE: "signature",
-    LOCATION: "location",
-    SCANNER: "scanner",
-    VOICE_INPUT: "voiceInput",
-    RICH_TEXT: "richText",
-    URL_BUTTON: "urlButton",
-    SUBMIT_BUTTON: "submitButton",
-    ODATA_SELECT: "odataSelect",
-    REMOTE_DROPDOWN: "remoteDropdown",
-    LIVE_SEARCH: "liveSearch",
-    REMOTE_VALUE_HELP: "remoteValueHelp"
-} as const;
-
-/**
- * Layout strategies for the core engine.
- */
-export const LAYOUT_STRATEGY = {
-    FORM: "form",
-    TABLE: "table",
-    WIZARD: "wizard",
-    COMPACT: "compact"
-} as const;
-
-/**
- * Standard UI5 Event names used by the framework.
- */
-export const UI5_EVENT = {
-    SUBMIT: "submit",
-    CHANGE: "change",
-    PRESS: "press",
-    LIVE_CHANGE: "liveChange"
-} as const;
-
-/**
- * Standard UI5 Aggregation names used by the framework.
- */
-export const UI5_AGGREGATION = {
-    TOKENS: "tokens",
-    ITEMS: "items"
-} as const;
-
-/**
- * Prefix strings for OpenAPI schema references.
- */
-export const OPENAPI_PREFIX = {
-    DEFINITIONS: "#/definitions/",
-    COMPONENTS_SCHEMAS: "#/components/schemas/"
-} as const;
+/**
+ * @file MetaUIConstants.ts
+ * @description Centralized registry of all core architectural string constants to prevent magic strings.
+ */
+
+/**
+ * Maximum nesting depth any schema walker follows before it stops and reports.
+ * Cycle guards (`visited` sets, active `$ref` stacks) catch self-reference but not
+ * breadth-induced depth, so every recursive schema traversal compares against this
+ * constant rather than against a literal of its own.
+ *
+ * Set to match {@link MAX_LAYOUT_DEPTH}: a schema nested deeper than the layout tree that
+ * renders it cannot be drawn anyway. It is deliberately well above any individual walker's
+ * former cap, so a legitimate chain of `$ref` definitions - each shallow, but linked one into
+ * the next - is still walked in full.
+ *
+ * This constant previously existed but only one walker (LayoutScorer) used it. Twelve others kept private
+ * caps for the same concept (`8, 8, 8, 8, 8, 10, 10, 10, 10, 10, 16, 16`), so a
+ * producer could emit a property the validator then refused to descend into. Unifying at 30 is
+ * monotone against every one of them: nothing that was walked before is truncated now.
+ *
+ * Enforced by the `[DEPTH_CONSTANT]` gate in `scripts/run-tests.js`, which forbids both a
+ * numeric literal in a `depth` comparison and a `MAX_*_DEPTH` constant declared elsewhere,
+ * and by `[DEPTH_SIGNAL]`, which forbids truncating here without saying what was lost.
+ */
+export const MAX_SCHEMA_DEPTH = 30;
+
+/**
+ * Maximum nesting depth of a hand-authored `uiLayout` presentation tree.
+ *
+ * Tracked separately from {@link MAX_SCHEMA_DEPTH} even though the two values agree today:
+ * `uiLayout` nests structural containers (`Group` > `HorizontalLayout` > `VerticalLayout` > ...)
+ * whose depth is a visual-grouping decision, not a property of the data. They are equal because
+ * the schema cap is derived from this one, not because they are the same limit.
+ */
+export const MAX_LAYOUT_DEPTH = 30;
+
+/**
+ * Maximum recursion depth of `deepClone` over consumer-owned payloads.
+ *
+ * Deliberately distinct from {@link MAX_SCHEMA_DEPTH}, and deliberately far above it:
+ * `deepClone` copies arbitrary user data rather than schema, and truncating a payload the
+ * consumer owns is data loss. It exists only as a stack-overflow backstop.
+ */
+export const MAX_CLONE_DEPTH = 200;
+
+/**
+ * Defines the physical layout rendering mode of a schema node.
+ */
+export const RENDER_MODE = {
+    INLINE: "inline",
+    DIALOG: "dialog"
+} as const;
+
+export type RenderModeType = typeof RENDER_MODE[keyof typeof RENDER_MODE];
+
+/**
+ * Standard JSON schema and MetaUI extended types.
+ */
+export const SCHEMA_TYPE = {
+    OBJECT: "object",
+    ARRAY: "array",
+    STRING: "string",
+    NUMBER: "number",
+    INTEGER: "integer",
+    BOOLEAN: "boolean",
+    DATE: "date"
+} as const;
+
+export type SchemaTypeType = typeof SCHEMA_TYPE[keyof typeof SCHEMA_TYPE];
+
+/**
+ * Common widget types injected into schema metadata.
+ */
+export const WIDGET_TYPE = {
+    REFERENCE: "reference",
+    DICTIONARY_MAP: "dictionaryMap",
+    POLYMORPHIC: "polymorphic",
+    DATE: "date",
+    DATE_PICKER: "datePicker",
+    TIME: "time",
+    DATETIME: "datetime",
+    SWITCH: "switch",
+    STEP: "step",
+    SELECT: "select",
+    TEXT_AREA: "textArea",
+    CODE_EDITOR: "codeEditor",
+    LINK: "link",
+    PASSWORD: "password",
+    EMAIL: "email",
+    FILE_UPLOADER: "fileUploader",
+    MULTI_SELECT: "multiSelect",
+    MULTI_INPUT: "multiInput",
+    SLIDER: "slider",
+    RATING: "rating",
+    MESSAGE_STRIP: "messageStrip",
+    CAMERA: "camera",
+    SIGNATURE: "signature",
+    LOCATION: "location",
+    VOICE_INPUT: "voiceInput",
+    RICH_TEXT: "richText",
+    URL_BUTTON: "urlButton",
+    SUBMIT_BUTTON: "submitButton",
+    CLEAR_BUTTON: "clearButton",
+    ODATA_SELECT: "odataSelect",
+    REMOTE_DROPDOWN: "remoteDropdown",
+    REMOTE_SELECT: "remoteSelect",
+    COMBOBOX: "combobox",
+    LIVE_SEARCH: "liveSearch",
+    REMOTE_VALUE_HELP: "remoteValueHelp",
+    VALUE_HELP: "valueHelp"
+} as const;
+
+/**
+ * Layout strategies for the core engine.
+ */
+export const LAYOUT_STRATEGY = {
+    FORM: "form",
+    TABLE: "table",
+    WIZARD: "wizard",
+    COMPACT: "compact"
+} as const;
+
+/**
+ * Standard UI5 Event names used by the framework.
+ */
+export const UI5_EVENT = {
+    SUBMIT: "submit",
+    CHANGE: "change",
+    PRESS: "press",
+    LIVE_CHANGE: "liveChange"
+} as const;
+
+/**
+ * Standard UI5 Aggregation names used by the framework.
+ */
+export const UI5_AGGREGATION = {
+    TOKENS: "tokens",
+    ITEMS: "items"
+} as const;
+
+/**
+ * Prefix strings for OpenAPI schema references.
+ */
+export const OPENAPI_PREFIX = {
+    DEFINITIONS: "#/definitions/",
+    COMPONENTS_SCHEMAS: "#/components/schemas/",
+    DEFS: "#/$defs/"
+} as const;