@siliconst/metaui 1.4.51 → 2.0.0

package/src/nz/co/siliconst/ui5/metaui/utils/UrlValidator.ts

@@ -0,0 +1,233 @@
+/**
+ * @file UrlValidator.ts
+ * @description Validates URL strings against safe navigation, media, UI-resource and outbound-fetch
+ * policies to prevent XSS via javascript: or data: HTML URIs and to constrain where a schema-supplied
+ * `ui.dataSource.url` is allowed to send requests.
+ */
+
+import { Logger } from "./Logger";
+
+const SAFE_NAVIGATION_PROTOCOLS = new Set(["http:", "https:", "mailto:", "tel:"]);
+const SAFE_FETCH_PROTOCOLS = new Set(["http:", "https:"]);
+const SAP_ICON_URI = /^sap-icon:\/\/[A-Za-z0-9/_-]+$/;
+const SYNTHETIC_ORIGIN = "http://metaui.invalid";
+
+/**
+ * Cross-origin policy applied to schema-supplied `ui.dataSource.url` endpoints.
+ *
+ * - `"any"` (default) permits any `http:`/`https:` endpoint. Scheme validation still applies.
+ * - `"same-origin"` permits only endpoints resolving to the document origin.
+ * - `"allowlist"` permits the document origin plus the explicitly registered origins.
+ *
+ * @namespace nz.co.siliconst.ui5.metaui.utils
+ * @public
+ */
+export type DataSourceOriginMode = "any" | "same-origin" | "allowlist";
+
+/**
+ * Validates URL strings against safe navigation and media protocols to prevent XSS via unsafe URI schemes,
+ * and enforces the outbound-fetch policy for schema-supplied data source endpoints.
+ *
+ * @namespace nz.co.siliconst.ui5.metaui.utils
+ * @public
+ */
+export class UrlValidator {
+    private static dataSourceOriginMode: DataSourceOriginMode = "any";
+    private static dataSourceAllowedOrigins: ReadonlySet<string> = new Set<string>();
+    private static readonly reportedCrossOrigins: Set<string> = new Set<string>();
+
+    /**
+     * Checks whether a URL string uses a safe navigation protocol (http:, https:, mailto:, tel:)
+     * or is a safe relative path (starting with /, ./, ../, or #).
+     *
+     * @param rawUrl The candidate URL string to check.
+     * @returns True if safe to navigate to or render in a Link href.
+     */
+    public static isSafeNavigationUrl(rawUrl: unknown): rawUrl is string {
+        if (typeof rawUrl !== "string") {
+            return false;
+        }
+        const trimmed = rawUrl.trim();
+        if (!trimmed) {
+            return false;
+        }
+        if (
+            (trimmed.startsWith("/") && !trimmed.startsWith("//") && !trimmed.startsWith("/\\")) ||
+            trimmed.startsWith("./") ||
+            trimmed.startsWith("../") ||
+            trimmed.startsWith("#")
+        ) {
+            return true;
+        }
+        try {
+            const parsed = new URL(trimmed);
+            return SAFE_NAVIGATION_PROTOCOLS.has(parsed.protocol.toLowerCase());
+        } catch {
+            // CATCH_EXEMPT: a throw from new URL() is the 'not a parseable URL' answer this
+            // predicate exists to give. Returning false is the result, not a degradation, and the
+            // caller is responsible for reporting the rejected link to the user.
+            return false;
+        }
+    }
+
+    /**
+     * Checks whether a URL or data URI is safe to render as an image source.
+     * Permits safe navigation URLs as well as `data:image/*` base64 URIs.
+     *
+     * @param rawSrc The candidate image source string.
+     * @returns True if safe to assign to an Image src.
+     */
+    public static isSafeImageSource(rawSrc: unknown): rawSrc is string {
+        if (typeof rawSrc !== "string") {
+            return false;
+        }
+        const trimmed = rawSrc.trim();
+        if (!trimmed) {
+            return false;
+        }
+        if (/^data:image\/(png|jpeg|jpg|gif|webp|bmp);base64,/i.test(trimmed)) {
+            return true;
+        }
+        if (
+            (trimmed.startsWith("/") && !trimmed.startsWith("//") && !trimmed.startsWith("/\\")) ||
+            trimmed.startsWith("./") ||
+            trimmed.startsWith("../")
+        ) {
+            return true;
+        }
+        try {
+            const parsed = new URL(trimmed);
+            const proto = parsed.protocol.toLowerCase();
+            return proto === "http:" || proto === "https:";
+        } catch {
+            // CATCH_EXEMPT: a throw from new URL() is the 'not a parseable image source' answer this
+            // predicate exists to give. Returning false is the result, not a degradation, and the
+            // caller is responsible for reporting the rejected source to the user.
+            return false;
+        }
+    }
+
+    /**
+     * Checks whether a value is safe to assign to a UI5 property declared as `sap.ui.core.URI`
+     * (`href`, `src`, `icon`, `logo`, …) from an untrusted schema. Accepts the navigation protocols,
+     * raster `data:image/*` URIs, relative paths, the UI5 icon-font scheme and the empty string.
+     *
+     * @param rawUri The candidate URI string.
+     * @returns True if the value may be written to a `sap.ui.core.URI` property.
+     */
+    public static isSafeUiResourceUri(rawUri: unknown): rawUri is string {
+        if (typeof rawUri !== "string") {
+            return false;
+        }
+        const trimmed = rawUri.trim();
+        if (!trimmed) {
+            return true;
+        }
+        if (SAP_ICON_URI.test(trimmed)) {
+            return true;
+        }
+        return this.isSafeImageSource(trimmed) || this.isSafeNavigationUrl(trimmed);
+    }
+
+    /**
+     * Installs the cross-origin policy applied to every schema-supplied `ui.dataSource.url`.
+     * Applications that render schemas they do not control should narrow this to `"same-origin"`
+     * or to an explicit `"allowlist"`.
+     *
+     * @param mode The policy mode to apply.
+     * @param allowedOrigins Origins (e.g. `"https://api.example.com"`) permitted in `"allowlist"` mode.
+     */
+    public static setDataSourceOriginPolicy(mode: DataSourceOriginMode, allowedOrigins: readonly string[] = []): void {
+        this.dataSourceOriginMode = mode;
+        const normalized = new Set<string>();
+        for (const origin of allowedOrigins) {
+            try {
+                normalized.add(new URL(origin).origin);
+            } catch {
+                Logger.warn(`Ignoring unparseable allowlist origin '${origin}'.`, undefined, "UrlValidator");
+            }
+        }
+        this.dataSourceAllowedOrigins = normalized;
+        this.reportedCrossOrigins.clear();
+    }
+
+    /**
+     * Reads the currently installed data source origin policy.
+     *
+     * @returns {{ mode: DataSourceOriginMode; origins: string[] }} The active mode and allowlisted origins.
+     */
+    public static getDataSourceOriginPolicy(): { mode: DataSourceOriginMode; origins: string[] } {
+        return { mode: this.dataSourceOriginMode, origins: [...this.dataSourceAllowedOrigins] };
+    }
+
+    /**
+     * Checks whether a schema-supplied endpoint may be contacted with `fetch`. The scheme allowlist
+     * (`http:`/`https:` plus document-relative paths) is always enforced; the cross-origin decision
+     * follows the policy installed via {@link UrlValidator.setDataSourceOriginPolicy}.
+     *
+     * @param rawUrl The candidate endpoint URL from `ui.dataSource.url` or `valueHelp.url`.
+     * @returns True if the endpoint may be requested.
+     */
+    public static isSafeDataSourceUrl(rawUrl: unknown): rawUrl is string {
+        if (typeof rawUrl !== "string") {
+            return false;
+        }
+        const trimmed = rawUrl.trim();
+        if (!trimmed || trimmed.startsWith("//") || trimmed.startsWith("\\") || trimmed.startsWith("/\\")) {
+            return false;
+        }
+        const base = this.resolveDocumentOrigin();
+        let parsed: URL;
+        try {
+            parsed = new URL(trimmed, base);
+        } catch {
+            // CATCH_EXEMPT: a throw from new URL() means the candidate is not a resolvable fetch
+            // target, which is exactly what this predicate reports. Returning false denies the
+            // fetch, and the caller surfaces the refusal; nothing is silently degraded here.
+            return false;
+        }
+        if (!SAFE_FETCH_PROTOCOLS.has(parsed.protocol.toLowerCase())) {
+            return false;
+        }
+        if (parsed.origin === base) {
+            return true;
+        }
+        if (this.dataSourceOriginMode === "same-origin") {
+            return false;
+        }
+        if (this.dataSourceOriginMode === "allowlist" && !this.dataSourceAllowedOrigins.has(parsed.origin)) {
+            return false;
+        }
+        this.reportCrossOrigin(parsed.origin);
+        return true;
+    }
+
+    /**
+     * Emits a one-time warning per cross-origin endpoint so that a permissive default policy is still visible.
+     *
+     * @param origin The resolved cross-origin target.
+     */
+    private static reportCrossOrigin(origin: string): void {
+        if (this.reportedCrossOrigins.has(origin)) {
+            return;
+        }
+        this.reportedCrossOrigins.add(origin);
+        Logger.warn(
+            `Schema-supplied data source targets cross-origin '${origin}'. ` +
+            "Call UrlValidator.setDataSourceOriginPolicy('same-origin'|'allowlist', …) when schemas are untrusted.",
+            undefined,
+            "UrlValidator"
+        );
+    }
+
+    /**
+     * Resolves the current document origin, falling back to a synthetic origin outside a browser
+     * so that relative endpoints stay resolvable in headless tooling.
+     *
+     * @returns {string} The origin used as the base for relative data source URLs.
+     */
+    private static resolveDocumentOrigin(): string {
+        const origin = typeof window !== "undefined" && window.location ? window.location.origin : "";
+        return origin && origin !== "null" ? origin : SYNTHETIC_ORIGIN;
+    }
+}

package/ui5.yaml

@@ -1,4 +1,31 @@
-specVersion: "3.0"
-metadata:
-  name: nz.co.siliconst.ui5.metaui
-type: library
+specVersion: "3.0"
+metadata:
+  name: nz.co.siliconst.ui5.metaui
+type: library
+builder:
+  resources:
+    excludes:
+      - "/test/**"
+      - "/test-resources/**"
+  customTasks:
+    - name: ui5-tooling-transpile-task
+      afterTask: replaceVersion
+      configuration:
+        debug: true
+        removeSourceFiles: true
+        excludePatterns:
+          - "test/**"
+          - "test-resources/**"
+        transformModulesToUI5:
+          overridesToOverride: true
+server:
+  customMiddleware:
+    - name: ui5-tooling-transpile-middleware
+      afterMiddleware: compression
+      configuration:
+        debug: true
+        excludePatterns:
+          - "test/**"
+          - "test-resources/**"
+        transformModulesToUI5:
+          overridesToOverride: true

package/src/nz/co/siliconst/ui5/metaui/ai/AIConfig-dbg.js

@@ -1,47 +0,0 @@
-sap.ui.define(["./MockLLMProxy"], function (___MockLLMProxy) {
-  "use strict";
-
-  /**
-   * @file AIConfig.ts
-   * @description Global configuration singleton for AI Inference integrations.
-   */
-  const MockLLMProxy = ___MockLLMProxy["MockLLMProxy"];
-  class AIConfig {
-    static activeProxy = new MockLLMProxy();
-    static endpointUrl = "/api/mock/ai";
-
-    /**
-     * Sets the active proxy instance (e.g. Mock vs Rest).
-     */
-    static setProxy(proxy) {
-      this.activeProxy = proxy;
-    }
-
-    /**
-     * Gets the current active proxy.
-     */
-    static getProxy() {
-      return this.activeProxy;
-    }
-
-    /**
-     * Configures the remote URL for the REST LLM Proxy to hit.
-     */
-    static setEndpointUrl(url) {
-      this.endpointUrl = url;
-    }
-
-    /**
-     * Gets the configured remote URL.
-     */
-    static getEndpointUrl() {
-      return this.endpointUrl;
-    }
-  }
-  var __exports = {
-    __esModule: true
-  };
-  __exports.AIConfig = AIConfig;
-  return __exports;
-});
-//# sourceMappingURL=AIConfig-dbg.js.map

package/src/nz/co/siliconst/ui5/metaui/ai/AIConfig-dbg.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"AIConfig-dbg.js","names":["MockLLMProxy","___MockLLMProxy","AIConfig","activeProxy","endpointUrl","setProxy","proxy","getProxy","setEndpointUrl","url","getEndpointUrl","__exports","__esModule"],"sources":["AIConfig.ts"],"sourcesContent":["/**\n * @file AIConfig.ts\n * @description Global configuration singleton for AI Inference integrations.\n */\nimport { BaseAIGenerator } from \"./BaseAIGenerator\";\nimport { MockLLMProxy } from \"./MockLLMProxy\";\n\nexport class AIConfig {\n    private static activeProxy: BaseAIGenerator = new MockLLMProxy();\n    private static endpointUrl: string = \"/api/mock/ai\";\n\n    /**\n     * Sets the active proxy instance (e.g. Mock vs Rest).\n     */\n    public static setProxy(proxy: BaseAIGenerator): void {\n        this.activeProxy = proxy;\n    }\n\n    /**\n     * Gets the current active proxy.\n     */\n    public static getProxy(): BaseAIGenerator {\n        return this.activeProxy;\n    }\n\n    /**\n     * Configures the remote URL for the REST LLM Proxy to hit.\n     */\n    public static setEndpointUrl(url: string): void {\n        this.endpointUrl = url;\n    }\n\n    /**\n     * Gets the configured remote URL.\n     */\n    public static getEndpointUrl(): string {\n        return this.endpointUrl;\n    }\n}\n"],"mappings":";;;EAAA;AACA;AACA;AACA;EAHA,MAKSA,YAAY,GAAAC,eAAA;EAEd,MAAMC,QAAQ,CAAC;IAClB,OAAeC,WAAW,GAAoB,IAAIH,YAAY,CAAC,CAAC;IAChE,OAAeI,WAAW,GAAW,cAAc;;IAEnD;AACJ;AACA;IACI,OAAcC,QAAQA,CAACC,KAAsB,EAAQ;MACjD,IAAI,CAACH,WAAW,GAAGG,KAAK;IAC5B;;IAEA;AACJ;AACA;IACI,OAAcC,QAAQA,CAAA,EAAoB;MACtC,OAAO,IAAI,CAACJ,WAAW;IAC3B;;IAEA;AACJ;AACA;IACI,OAAcK,cAAcA,CAACC,GAAW,EAAQ;MAC5C,IAAI,CAACL,WAAW,GAAGK,GAAG;IAC1B;;IAEA;AACJ;AACA;IACI,OAAcC,cAAcA,CAAA,EAAW;MACnC,OAAO,IAAI,CAACN,WAAW;IAC3B;EACJ;EAAC,IAAAO,SAAA;IAAAC,UAAA;EAAA;EAAAD,SAAA,CAAAT,QAAA,GAAAA,QAAA;EAAA,OAAAS,SAAA;AAAA","ignoreList":[]}

package/src/nz/co/siliconst/ui5/metaui/ai/AIConfig.d.ts

@@ -1,28 +0,0 @@
-declare module "nz/co/siliconst/ui5/metaui/ai/AIConfig" {
-    /**
-     * @file AIConfig.ts
-     * @description Global configuration singleton for AI Inference integrations.
-     */
-    import { BaseAIGenerator } from "nz/co/siliconst/ui5/metaui/ai/BaseAIGenerator";
-    export class AIConfig {
-        private static activeProxy;
-        private static endpointUrl;
-        /**
-         * Sets the active proxy instance (e.g. Mock vs Rest).
-         */
-        static setProxy(proxy: BaseAIGenerator): void;
-        /**
-         * Gets the current active proxy.
-         */
-        static getProxy(): BaseAIGenerator;
-        /**
-         * Configures the remote URL for the REST LLM Proxy to hit.
-         */
-        static setEndpointUrl(url: string): void;
-        /**
-         * Gets the configured remote URL.
-         */
-        static getEndpointUrl(): string;
-    }
-}
-//# sourceMappingURL=AIConfig.d.ts.map

package/src/nz/co/siliconst/ui5/metaui/ai/AIConfig.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AIConfig.d.ts","sourceRoot":"../../../../../../../..","sources":["src/nz/co/siliconst/ui5/metaui/ai/AIConfig.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,wCAAwC,CAAC;IACxD;;;OAGG;IACH,OAAO,EAAE,eAAe,EAAE,MAAM,+CAA+C,CAAC;IAGhF,MAAa,QAAQ;QACjB,OAAO,CAAC,MAAM,CAAC,WAAW,CAAuC;QACjE,OAAO,CAAC,MAAM,CAAC,WAAW,CAA0B;QAEpD;;WAEG;eACW,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;QAIpD;;WAEG;eACW,QAAQ,IAAI,eAAe;QAIzC;;WAEG;eACW,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;QAI/C;;WAEG;eACW,cAAc,IAAI,MAAM;KAGzC;CAEA"}

package/src/nz/co/siliconst/ui5/metaui/ai/AIConfig.js

@@ -1,2 +0,0 @@
-sap.ui.define(["./MockLLMProxy"],function(t){"use strict";const i=t["MockLLMProxy"];class r{static activeProxy=new i;static endpointUrl="/api/mock/ai";static setProxy(t){this.activeProxy=t}static getProxy(){return this.activeProxy}static setEndpointUrl(t){this.endpointUrl=t}static getEndpointUrl(){return this.endpointUrl}}var e={__esModule:true};e.AIConfig=r;return e});
-//# sourceMappingURL=AIConfig.js.map

package/src/nz/co/siliconst/ui5/metaui/ai/AIConfig.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"AIConfig.js","names":["MockLLMProxy","___MockLLMProxy","AIConfig","static","setProxy","proxy","this","activeProxy","getProxy","setEndpointUrl","url","endpointUrl","getEndpointUrl","__exports","__esModule"],"sources":["AIConfig.ts"],"sourcesContent":["/**\n * @file AIConfig.ts\n * @description Global configuration singleton for AI Inference integrations.\n */\nimport { BaseAIGenerator } from \"./BaseAIGenerator\";\nimport { MockLLMProxy } from \"./MockLLMProxy\";\n\nexport class AIConfig {\n    private static activeProxy: BaseAIGenerator = new MockLLMProxy();\n    private static endpointUrl: string = \"/api/mock/ai\";\n\n    /**\n     * Sets the active proxy instance (e.g. Mock vs Rest).\n     */\n    public static setProxy(proxy: BaseAIGenerator): void {\n        this.activeProxy = proxy;\n    }\n\n    /**\n     * Gets the current active proxy.\n     */\n    public static getProxy(): BaseAIGenerator {\n        return this.activeProxy;\n    }\n\n    /**\n     * Configures the remote URL for the REST LLM Proxy to hit.\n     */\n    public static setEndpointUrl(url: string): void {\n        this.endpointUrl = url;\n    }\n\n    /**\n     * Gets the configured remote URL.\n     */\n    public static getEndpointUrl(): string {\n        return this.endpointUrl;\n    }\n}\n"],"mappings":"0DAAA,MAKSA,EAAYC,EAAA,gBAEd,MAAMC,EACTC,mBAA8C,IAAIH,EAClDG,mBAAqC,eAKrC,eAAcC,CAASC,GACnBC,KAAKC,YAAcF,CACvB,CAKA,eAAcG,GACV,OAAOF,KAAKC,WAChB,CAKA,qBAAcE,CAAeC,GACzBJ,KAAKK,YAAcD,CACvB,CAKA,qBAAcE,GACV,OAAON,KAAKK,WAChB,EACH,IAAAE,EAAA,CAAAC,WAAA,MAAAD,EAAAX,WAAA,OAAAW,CAAA","ignoreList":[]}

package/src/nz/co/siliconst/ui5/metaui/ai/AIConfig.ts

@@ -1,39 +0,0 @@
-/**
- * @file AIConfig.ts
- * @description Global configuration singleton for AI Inference integrations.
- */
-import { BaseAIGenerator } from "./BaseAIGenerator";
-import { MockLLMProxy } from "./MockLLMProxy";
-
-export class AIConfig {
-    private static activeProxy: BaseAIGenerator = new MockLLMProxy();
-    private static endpointUrl: string = "/api/mock/ai";
-
-    /**
-     * Sets the active proxy instance (e.g. Mock vs Rest).
-     */
-    public static setProxy(proxy: BaseAIGenerator): void {
-        this.activeProxy = proxy;
-    }
-
-    /**
-     * Gets the current active proxy.
-     */
-    public static getProxy(): BaseAIGenerator {
-        return this.activeProxy;
-    }
-
-    /**
-     * Configures the remote URL for the REST LLM Proxy to hit.
-     */
-    public static setEndpointUrl(url: string): void {
-        this.endpointUrl = url;
-    }
-
-    /**
-     * Gets the configured remote URL.
-     */
-    public static getEndpointUrl(): string {
-        return this.endpointUrl;
-    }
-}

package/src/nz/co/siliconst/ui5/metaui/ai/BaseAIGenerator-dbg.js

@@ -1,85 +0,0 @@
-sap.ui.define([], function () {
-  "use strict";
-
-  /**
-  * @file BaseAIGenerator.ts
-  * @description Abstract base class defining the contract for AI Schema Generation Proxies.
-  */
-
-  class BaseAIGenerator {
-    /**
-     * Generates a schema dynamically for the provided data payload.
-     * @param data The raw data to infer from.
-     * @param partialSchema The manual overrides provided by the developer.
-     * @returns A promise resolving to the final merged schema.
-     */
-    async generateSchema(data, partialSchema) {
-      // 1. Build a structural skeleton of the data (no real values).
-      const dataSkeleton = this.buildDataSkeleton(data, partialSchema);
-      if (Object.keys(dataSkeleton).length === 0) {
-        // Nothing to infer, the partial schema covered everything.
-        return partialSchema || {
-          type: "object",
-          properties: {}
-        };
-      }
-
-      // 2. Delegate to the subclass to get the schema from the LLM.
-      const llmGeneratedSchema = await this.callLLM(dataSkeleton);
-
-      // 3. Deep merge the partial schema over the LLM schema.
-      return this.deepMergeSchemas(llmGeneratedSchema, partialSchema);
-    }
-
-    /**
-     * Abstract method implemented by proxies to handle network/mock calls.
-     * @param dataSkeleton The structure of unknown fields.
-     */
-
-    /**
-     * Strips actual values and ignores fields already defined in the partial schema.
-     */
-    buildDataSkeleton(data, partialSchema) {
-      const skeleton = {};
-      if (!data || typeof data !== "object") return skeleton;
-      const definedKeys = partialSchema?.properties ? Object.keys(partialSchema.properties) : [];
-      const dataObj = data;
-      for (const key of Object.keys(dataObj)) {
-        if (!definedKeys.includes(key)) {
-          skeleton[key] = `type: ${typeof dataObj[key]}`;
-        }
-      }
-      return skeleton;
-    }
-
-    /**
-     * Merges a manual partial schema over the LLM generated schema.
-     */
-    deepMergeSchemas(base, override) {
-      const outTarget = base || {};
-      const output = Object.assign({}, outTarget);
-      if (override === null || typeof override !== "object") return output;
-      const srcObj = override;
-      Object.keys(srcObj).forEach(key => {
-        if (Array.isArray(srcObj[key])) {
-          output[key] = Array.isArray(outTarget[key]) ? Array.from(new Set([...outTarget[key], ...srcObj[key]])) : [...srcObj[key]];
-        } else if (typeof srcObj[key] === "object" && srcObj[key] !== null) {
-          if (outTarget[key] && typeof outTarget[key] === "object") {
-            output[key] = this.deepMergeSchemas(outTarget[key], srcObj[key]);
-          } else {
-            output[key] = Object.assign({}, srcObj[key]);
-          }
-        } else {
-          output[key] = srcObj[key];
-        }
-      });
-      return output;
-    }
-  }
-  var __exports = {
-    __esModule: true
-  };
-  __exports.BaseAIGenerator = BaseAIGenerator;
-  return __exports;
-});
-//# sourceMappingURL=BaseAIGenerator-dbg.js.map

package/src/nz/co/siliconst/ui5/metaui/ai/BaseAIGenerator-dbg.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseAIGenerator-dbg.js","names":["BaseAIGenerator","generateSchema","data","partialSchema","dataSkeleton","buildDataSkeleton","Object","keys","length","type","properties","llmGeneratedSchema","callLLM","deepMergeSchemas","skeleton","definedKeys","dataObj","key","includes","base","override","outTarget","output","assign","srcObj","forEach","Array","isArray","from","Set","__exports","__esModule"],"sources":["BaseAIGenerator.ts"],"sourcesContent":["/**\n * @file BaseAIGenerator.ts\n * @description Abstract base class defining the contract for AI Schema Generation Proxies.\n */\nimport { ISchema } from \"../interfaces/ISchema\";\n\nexport abstract class BaseAIGenerator {\n\n    /**\n     * Generates a schema dynamically for the provided data payload.\n     * @param data The raw data to infer from.\n     * @param partialSchema The manual overrides provided by the developer.\n     * @returns A promise resolving to the final merged schema.\n     */\n    public async generateSchema(data: object, partialSchema?: ISchema): Promise<ISchema> {\n        // 1. Build a structural skeleton of the data (no real values).\n        const dataSkeleton = this.buildDataSkeleton(data, partialSchema);\n\n        if (Object.keys(dataSkeleton).length === 0) {\n            // Nothing to infer, the partial schema covered everything.\n            return partialSchema || { type: \"object\", properties: {} };\n        }\n\n        // 2. Delegate to the subclass to get the schema from the LLM.\n        const llmGeneratedSchema = await this.callLLM(dataSkeleton);\n\n        // 3. Deep merge the partial schema over the LLM schema.\n        return this.deepMergeSchemas(llmGeneratedSchema, partialSchema) as ISchema;\n    }\n\n    /**\n     * Abstract method implemented by proxies to handle network/mock calls.\n     * @param dataSkeleton The structure of unknown fields.\n     */\n    protected abstract callLLM(dataSkeleton: Record<string, string>): Promise<ISchema>;\n\n    /**\n     * Strips actual values and ignores fields already defined in the partial schema.\n     */\n    private buildDataSkeleton(data: unknown, partialSchema?: ISchema): Record<string, string> {\n        const skeleton: Record<string, string> = {};\n        if (!data || typeof data !== \"object\") return skeleton;\n\n        const definedKeys = partialSchema?.properties ? Object.keys(partialSchema.properties) : [];\n        const dataObj = data as Record<string, unknown>;\n\n        for (const key of Object.keys(dataObj)) {\n            if (!definedKeys.includes(key)) {\n                skeleton[key] = `type: ${typeof dataObj[key]}`;\n            }\n        }\n        return skeleton;\n    }\n\n    /**\n     * Merges a manual partial schema over the LLM generated schema.\n     */\n    private deepMergeSchemas(base: unknown, override?: unknown): unknown {\n        const outTarget = (base || {}) as Record<string, unknown>;\n        const output: Record<string, unknown> = Object.assign({}, outTarget);\n        if (override === null || typeof override !== \"object\") return output;\n        \n        const srcObj = override as Record<string, unknown>;\n\n        Object.keys(srcObj).forEach(key => {\n            if (Array.isArray(srcObj[key])) {\n                output[key] = Array.isArray(outTarget[key]) \n                    ? Array.from(new Set([...(outTarget[key] as unknown[]), ...(srcObj[key] as unknown[])])) \n                    : [...(srcObj[key] as unknown[])];\n            } else if (typeof srcObj[key] === \"object\" && srcObj[key] !== null) {\n                if (outTarget[key] && typeof outTarget[key] === \"object\") {\n                    output[key] = this.deepMergeSchemas(outTarget[key], srcObj[key]);\n                } else {\n                    output[key] = Object.assign({}, srcObj[key]);\n                }\n            } else {\n                output[key] = srcObj[key];\n            }\n        });\n        return output;\n    }\n}\n"],"mappings":";;;EAAC;AACD;AACA;AACA;;EAGO,MAAeA,eAAe,CAAC;IAElC;AACJ;AACA;AACA;AACA;AACA;IACI,MAAaC,cAAcA,CAACC,IAAY,EAAEC,aAAuB,EAAoB;MACjF;MACA,MAAMC,YAAY,GAAG,IAAI,CAACC,iBAAiB,CAACH,IAAI,EAAEC,aAAa,CAAC;MAEhE,IAAIG,MAAM,CAACC,IAAI,CAACH,YAAY,CAAC,CAACI,MAAM,KAAK,CAAC,EAAE;QACxC;QACA,OAAOL,aAAa,IAAI;UAAEM,IAAI,EAAE,QAAQ;UAAEC,UAAU,EAAE,CAAC;QAAE,CAAC;MAC9D;;MAEA;MACA,MAAMC,kBAAkB,GAAG,MAAM,IAAI,CAACC,OAAO,CAACR,YAAY,CAAC;;MAE3D;MACA,OAAO,IAAI,CAACS,gBAAgB,CAACF,kBAAkB,EAAER,aAAa,CAAC;IACnE;;IAEA;AACJ;AACA;AACA;;IAGI;AACJ;AACA;IACYE,iBAAiBA,CAACH,IAAa,EAAEC,aAAuB,EAA0B;MACtF,MAAMW,QAAgC,GAAG,CAAC,CAAC;MAC3C,IAAI,CAACZ,IAAI,IAAI,OAAOA,IAAI,KAAK,QAAQ,EAAE,OAAOY,QAAQ;MAEtD,MAAMC,WAAW,GAAGZ,aAAa,EAAEO,UAAU,GAAGJ,MAAM,CAACC,IAAI,CAACJ,aAAa,CAACO,UAAU,CAAC,GAAG,EAAE;MAC1F,MAAMM,OAAO,GAAGd,IAA+B;MAE/C,KAAK,MAAMe,GAAG,IAAIX,MAAM,CAACC,IAAI,CAACS,OAAO,CAAC,EAAE;QACpC,IAAI,CAACD,WAAW,CAACG,QAAQ,CAACD,GAAG,CAAC,EAAE;UAC5BH,QAAQ,CAACG,GAAG,CAAC,GAAG,SAAS,OAAOD,OAAO,CAACC,GAAG,CAAC,EAAE;QAClD;MACJ;MACA,OAAOH,QAAQ;IACnB;;IAEA;AACJ;AACA;IACYD,gBAAgBA,CAACM,IAAa,EAAEC,QAAkB,EAAW;MACjE,MAAMC,SAAS,GAAIF,IAAI,IAAI,CAAC,CAA6B;MACzD,MAAMG,MAA+B,GAAGhB,MAAM,CAACiB,MAAM,CAAC,CAAC,CAAC,EAAEF,SAAS,CAAC;MACpE,IAAID,QAAQ,KAAK,IAAI,IAAI,OAAOA,QAAQ,KAAK,QAAQ,EAAE,OAAOE,MAAM;MAEpE,MAAME,MAAM,GAAGJ,QAAmC;MAElDd,MAAM,CAACC,IAAI,CAACiB,MAAM,CAAC,CAACC,OAAO,CAACR,GAAG,IAAI;QAC/B,IAAIS,KAAK,CAACC,OAAO,CAACH,MAAM,CAACP,GAAG,CAAC,CAAC,EAAE;UAC5BK,MAAM,CAACL,GAAG,CAAC,GAAGS,KAAK,CAACC,OAAO,CAACN,SAAS,CAACJ,GAAG,CAAC,CAAC,GACrCS,KAAK,CAACE,IAAI,CAAC,IAAIC,GAAG,CAAC,CAAC,GAAIR,SAAS,CAACJ,GAAG,CAAe,EAAE,GAAIO,MAAM,CAACP,GAAG,CAAe,CAAC,CAAC,CAAC,GACtF,CAAC,GAAIO,MAAM,CAACP,GAAG,CAAe,CAAC;QACzC,CAAC,MAAM,IAAI,OAAOO,MAAM,CAACP,GAAG,CAAC,KAAK,QAAQ,IAAIO,MAAM,CAACP,GAAG,CAAC,KAAK,IAAI,EAAE;UAChE,IAAII,SAAS,CAACJ,GAAG,CAAC,IAAI,OAAOI,SAAS,CAACJ,GAAG,CAAC,KAAK,QAAQ,EAAE;YACtDK,MAAM,CAACL,GAAG,CAAC,GAAG,IAAI,CAACJ,gBAAgB,CAACQ,SAAS,CAACJ,GAAG,CAAC,EAAEO,MAAM,CAACP,GAAG,CAAC,CAAC;UACpE,CAAC,MAAM;YACHK,MAAM,CAACL,GAAG,CAAC,GAAGX,MAAM,CAACiB,MAAM,CAAC,CAAC,CAAC,EAAEC,MAAM,CAACP,GAAG,CAAC,CAAC;UAChD;QACJ,CAAC,MAAM;UACHK,MAAM,CAACL,GAAG,CAAC,GAAGO,MAAM,CAACP,GAAG,CAAC;QAC7B;MACJ,CAAC,CAAC;MACF,OAAOK,MAAM;IACjB;EACJ;EAAC,IAAAQ,SAAA;IAAAC,UAAA;EAAA;EAAAD,SAAA,CAAA9B,eAAA,GAAAA,eAAA;EAAA,OAAA8B,SAAA;AAAA","ignoreList":[]}

package/src/nz/co/siliconst/ui5/metaui/ai/BaseAIGenerator.d.ts

@@ -1,30 +0,0 @@
-declare module "nz/co/siliconst/ui5/metaui/ai/BaseAIGenerator" {
-    /**
-    * @file BaseAIGenerator.ts
-    * @description Abstract base class defining the contract for AI Schema Generation Proxies.
-    */
-    import { ISchema } from "nz/co/siliconst/ui5/metaui/interfaces/ISchema";
-    export abstract class BaseAIGenerator {
-        /**
-         * Generates a schema dynamically for the provided data payload.
-         * @param data The raw data to infer from.
-         * @param partialSchema The manual overrides provided by the developer.
-         * @returns A promise resolving to the final merged schema.
-         */
-        generateSchema(data: object, partialSchema?: ISchema): Promise<ISchema>;
-        /**
-         * Abstract method implemented by proxies to handle network/mock calls.
-         * @param dataSkeleton The structure of unknown fields.
-         */
-        protected abstract callLLM(dataSkeleton: Record<string, string>): Promise<ISchema>;
-        /**
-         * Strips actual values and ignores fields already defined in the partial schema.
-         */
-        private buildDataSkeleton;
-        /**
-         * Merges a manual partial schema over the LLM generated schema.
-         */
-        private deepMergeSchemas;
-    }
-}
-//# sourceMappingURL=BaseAIGenerator.d.ts.map

package/src/nz/co/siliconst/ui5/metaui/ai/BaseAIGenerator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseAIGenerator.d.ts","sourceRoot":"../../../../../../../..","sources":["src/nz/co/siliconst/ui5/metaui/ai/BaseAIGenerator.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,+CAA+C,CAAC;IAC9D;;;MAGE;IACH,OAAO,EAAE,OAAO,EAAE,MAAM,+CAA+C,CAAC;IAExE,eAAsB,eAAe;QAEjC;;;;;WAKG;QACU,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAgBpF;;;WAGG;QACH,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;QAElF;;WAEG;QACH,OAAO,CAAC,iBAAiB;QAezB;;WAEG;QACH,OAAO,CAAC,gBAAgB;KAwB3B;CAEA"}

package/src/nz/co/siliconst/ui5/metaui/ai/BaseAIGenerator.js

@@ -1,2 +0,0 @@
-sap.ui.define([],function(){"use strict";class e{async generateSchema(e,t){const r=this.buildDataSkeleton(e,t);if(Object.keys(r).length===0){return t||{type:"object",properties:{}}}const s=await this.callLLM(r);return this.deepMergeSchemas(s,t)}buildDataSkeleton(e,t){const r={};if(!e||typeof e!=="object")return r;const s=t?.properties?Object.keys(t.properties):[];const c=e;for(const e of Object.keys(c)){if(!s.includes(e)){r[e]=`type: ${typeof c[e]}`}}return r}deepMergeSchemas(e,t){const r=e||{};const s=Object.assign({},r);if(t===null||typeof t!=="object")return s;const c=t;Object.keys(c).forEach(e=>{if(Array.isArray(c[e])){s[e]=Array.isArray(r[e])?Array.from(new Set([...r[e],...c[e]])):[...c[e]]}else if(typeof c[e]==="object"&&c[e]!==null){if(r[e]&&typeof r[e]==="object"){s[e]=this.deepMergeSchemas(r[e],c[e])}else{s[e]=Object.assign({},c[e])}}else{s[e]=c[e]}});return s}}var t={__esModule:true};t.BaseAIGenerator=e;return t});
-//# sourceMappingURL=BaseAIGenerator.js.map

package/src/nz/co/siliconst/ui5/metaui/ai/BaseAIGenerator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseAIGenerator.js","names":["BaseAIGenerator","generateSchema","data","partialSchema","dataSkeleton","this","buildDataSkeleton","Object","keys","length","type","properties","llmGeneratedSchema","callLLM","deepMergeSchemas","skeleton","definedKeys","dataObj","key","includes","base","override","outTarget","output","assign","srcObj","forEach","Array","isArray","from","Set","__exports","__esModule"],"sources":["BaseAIGenerator.ts"],"sourcesContent":["/**\n * @file BaseAIGenerator.ts\n * @description Abstract base class defining the contract for AI Schema Generation Proxies.\n */\nimport { ISchema } from \"../interfaces/ISchema\";\n\nexport abstract class BaseAIGenerator {\n\n    /**\n     * Generates a schema dynamically for the provided data payload.\n     * @param data The raw data to infer from.\n     * @param partialSchema The manual overrides provided by the developer.\n     * @returns A promise resolving to the final merged schema.\n     */\n    public async generateSchema(data: object, partialSchema?: ISchema): Promise<ISchema> {\n        // 1. Build a structural skeleton of the data (no real values).\n        const dataSkeleton = this.buildDataSkeleton(data, partialSchema);\n\n        if (Object.keys(dataSkeleton).length === 0) {\n            // Nothing to infer, the partial schema covered everything.\n            return partialSchema || { type: \"object\", properties: {} };\n        }\n\n        // 2. Delegate to the subclass to get the schema from the LLM.\n        const llmGeneratedSchema = await this.callLLM(dataSkeleton);\n\n        // 3. Deep merge the partial schema over the LLM schema.\n        return this.deepMergeSchemas(llmGeneratedSchema, partialSchema) as ISchema;\n    }\n\n    /**\n     * Abstract method implemented by proxies to handle network/mock calls.\n     * @param dataSkeleton The structure of unknown fields.\n     */\n    protected abstract callLLM(dataSkeleton: Record<string, string>): Promise<ISchema>;\n\n    /**\n     * Strips actual values and ignores fields already defined in the partial schema.\n     */\n    private buildDataSkeleton(data: unknown, partialSchema?: ISchema): Record<string, string> {\n        const skeleton: Record<string, string> = {};\n        if (!data || typeof data !== \"object\") return skeleton;\n\n        const definedKeys = partialSchema?.properties ? Object.keys(partialSchema.properties) : [];\n        const dataObj = data as Record<string, unknown>;\n\n        for (const key of Object.keys(dataObj)) {\n            if (!definedKeys.includes(key)) {\n                skeleton[key] = `type: ${typeof dataObj[key]}`;\n            }\n        }\n        return skeleton;\n    }\n\n    /**\n     * Merges a manual partial schema over the LLM generated schema.\n     */\n    private deepMergeSchemas(base: unknown, override?: unknown): unknown {\n        const outTarget = (base || {}) as Record<string, unknown>;\n        const output: Record<string, unknown> = Object.assign({}, outTarget);\n        if (override === null || typeof override !== \"object\") return output;\n        \n        const srcObj = override as Record<string, unknown>;\n\n        Object.keys(srcObj).forEach(key => {\n            if (Array.isArray(srcObj[key])) {\n                output[key] = Array.isArray(outTarget[key]) \n                    ? Array.from(new Set([...(outTarget[key] as unknown[]), ...(srcObj[key] as unknown[])])) \n                    : [...(srcObj[key] as unknown[])];\n            } else if (typeof srcObj[key] === \"object\" && srcObj[key] !== null) {\n                if (outTarget[key] && typeof outTarget[key] === \"object\") {\n                    output[key] = this.deepMergeSchemas(outTarget[key], srcObj[key]);\n                } else {\n                    output[key] = Object.assign({}, srcObj[key]);\n                }\n            } else {\n                output[key] = srcObj[key];\n            }\n        });\n        return output;\n    }\n}\n"],"mappings":"yCAMO,MAAeA,EAQlB,oBAAaC,CAAeC,EAAcC,GAEtC,MAAMC,EAAeC,KAAKC,kBAAkBJ,EAAMC,GAElD,GAAII,OAAOC,KAAKJ,GAAcK,SAAW,EAAG,CAExC,OAAON,GAAiB,CAAEO,KAAM,SAAUC,WAAY,CAAC,EAC3D,CAGA,MAAMC,QAA2BP,KAAKQ,QAAQT,GAG9C,OAAOC,KAAKS,iBAAiBF,EAAoBT,EACrD,CAWQG,kBAAkBJ,EAAeC,GACrC,MAAMY,EAAmC,CAAC,EAC1C,IAAKb,UAAeA,IAAS,SAAU,OAAOa,EAE9C,MAAMC,EAAcb,GAAeQ,WAAaJ,OAAOC,KAAKL,EAAcQ,YAAc,GACxF,MAAMM,EAAUf,EAEhB,IAAK,MAAMgB,KAAOX,OAAOC,KAAKS,GAAU,CACpC,IAAKD,EAAYG,SAASD,GAAM,CAC5BH,EAASG,GAAO,gBAAgBD,EAAQC,IAC5C,CACJ,CACA,OAAOH,CACX,CAKQD,iBAAiBM,EAAeC,GACpC,MAAMC,EAAaF,GAAQ,CAAC,EAC5B,MAAMG,EAAkChB,OAAOiB,OAAO,CAAC,EAAGF,GAC1D,GAAID,IAAa,aAAeA,IAAa,SAAU,OAAOE,EAE9D,MAAME,EAASJ,EAEfd,OAAOC,KAAKiB,GAAQC,QAAQR,IACxB,GAAIS,MAAMC,QAAQH,EAAOP,IAAO,CAC5BK,EAAOL,GAAOS,MAAMC,QAAQN,EAAUJ,IAChCS,MAAME,KAAK,IAAIC,IAAI,IAAKR,EAAUJ,MAAwBO,EAAOP,MACjE,IAAKO,EAAOP,GACtB,MAAO,UAAWO,EAAOP,KAAS,UAAYO,EAAOP,KAAS,KAAM,CAChE,GAAII,EAAUJ,WAAeI,EAAUJ,KAAS,SAAU,CACtDK,EAAOL,GAAOb,KAAKS,iBAAiBQ,EAAUJ,GAAMO,EAAOP,GAC/D,KAAO,CACHK,EAAOL,GAAOX,OAAOiB,OAAO,CAAC,EAAGC,EAAOP,GAC3C,CACJ,KAAO,CACHK,EAAOL,GAAOO,EAAOP,EACzB,IAEJ,OAAOK,CACX,EACH,IAAAQ,EAAA,CAAAC,WAAA,MAAAD,EAAA/B,kBAAA,OAAA+B,CAAA","ignoreList":[]}

package/src/nz/co/siliconst/ui5/metaui/ai/BaseAIGenerator.ts

@@ -1,82 +0,0 @@
-/**
- * @file BaseAIGenerator.ts
- * @description Abstract base class defining the contract for AI Schema Generation Proxies.
- */
-import { ISchema } from "../interfaces/ISchema";
-
-export abstract class BaseAIGenerator {
-
-    /**
-     * Generates a schema dynamically for the provided data payload.
-     * @param data The raw data to infer from.
-     * @param partialSchema The manual overrides provided by the developer.
-     * @returns A promise resolving to the final merged schema.
-     */
-    public async generateSchema(data: object, partialSchema?: ISchema): Promise<ISchema> {
-        // 1. Build a structural skeleton of the data (no real values).
-        const dataSkeleton = this.buildDataSkeleton(data, partialSchema);
-
-        if (Object.keys(dataSkeleton).length === 0) {
-            // Nothing to infer, the partial schema covered everything.
-            return partialSchema || { type: "object", properties: {} };
-        }
-
-        // 2. Delegate to the subclass to get the schema from the LLM.
-        const llmGeneratedSchema = await this.callLLM(dataSkeleton);
-
-        // 3. Deep merge the partial schema over the LLM schema.
-        return this.deepMergeSchemas(llmGeneratedSchema, partialSchema) as ISchema;
-    }
-
-    /**
-     * Abstract method implemented by proxies to handle network/mock calls.
-     * @param dataSkeleton The structure of unknown fields.
-     */
-    protected abstract callLLM(dataSkeleton: Record<string, string>): Promise<ISchema>;
-
-    /**
-     * Strips actual values and ignores fields already defined in the partial schema.
-     */
-    private buildDataSkeleton(data: unknown, partialSchema?: ISchema): Record<string, string> {
-        const skeleton: Record<string, string> = {};
-        if (!data || typeof data !== "object") return skeleton;
-
-        const definedKeys = partialSchema?.properties ? Object.keys(partialSchema.properties) : [];
-        const dataObj = data as Record<string, unknown>;
-
-        for (const key of Object.keys(dataObj)) {
-            if (!definedKeys.includes(key)) {
-                skeleton[key] = `type: ${typeof dataObj[key]}`;
-            }
-        }
-        return skeleton;
-    }
-
-    /**
-     * Merges a manual partial schema over the LLM generated schema.
-     */
-    private deepMergeSchemas(base: unknown, override?: unknown): unknown {
-        const outTarget = (base || {}) as Record<string, unknown>;
-        const output: Record<string, unknown> = Object.assign({}, outTarget);
-        if (override === null || typeof override !== "object") return output;
-        
-        const srcObj = override as Record<string, unknown>;
-
-        Object.keys(srcObj).forEach(key => {
-            if (Array.isArray(srcObj[key])) {
-                output[key] = Array.isArray(outTarget[key]) 
-                    ? Array.from(new Set([...(outTarget[key] as unknown[]), ...(srcObj[key] as unknown[])])) 
-                    : [...(srcObj[key] as unknown[])];
-            } else if (typeof srcObj[key] === "object" && srcObj[key] !== null) {
-                if (outTarget[key] && typeof outTarget[key] === "object") {
-                    output[key] = this.deepMergeSchemas(outTarget[key], srcObj[key]);
-                } else {
-                    output[key] = Object.assign({}, srcObj[key]);
-                }
-            } else {
-                output[key] = srcObj[key];
-            }
-        });
-        return output;
-    }
-}