arc-1 1.1.2 → 1.3.0

package/README.md

@@ -8,7 +8,9 @@ ARC-1 connects AI assistants (Claude, GitHub Copilot, Copilot Studio, and any MC
 [![CodeQL](https://github.com/arc-mcp/arc-1/actions/workflows/github-code-scanning/codeql/badge.svg)](https://github.com/arc-mcp/arc-1/security/code-scanning)
 [![Dependency Review](https://github.com/arc-mcp/arc-1/actions/workflows/dependency-review.yml/badge.svg)](https://github.com/arc-mcp/arc-1/actions/workflows/dependency-review.yml)
 
-**[Full Documentation](https://docs.arc-1-mcp.com/)** | **[Quickstart](https://docs.arc-1-mcp.com/quickstart/)** | **[Tool Reference](https://docs.arc-1-mcp.com/tools/)** | **[Blog Series](https://blog.zeis.de/tags/ai-abap-development-series/)**
+**[Full Documentation](https://docs.arc-1-mcp.com/)** | **[Quickstart](https://docs.arc-1-mcp.com/quickstart/)** | **[Tool Reference](https://docs.arc-1-mcp.com/tools/)** | **[ARC-1 Updates](https://docs.arc-1-mcp.com/newsletter/)** | **[Blog Series](https://blog.zeis.de/tags/ai-abap-development-series/)**
+
+> 📬 **Stay current with ARC-1** — get major releases, upgrade and security notes, practical guides, and occasional questions where your feedback can shape what comes next. **[Join ARC-1 Updates →](https://docs.arc-1-mcp.com/newsletter/)**
 
 > 📖 **New: AI ABAP Development blog series** — long-form posts on AI for ABAP, ARC-1 design, and real-world BTP / Copilot Studio / Joule walkthroughs. **[Read the series →](https://blog.zeis.de/tags/ai-abap-development-series/)**
 
@@ -22,6 +24,7 @@ Built for organizations that need AI-assisted SAP development with guardrails. I
 - **Action deny list** — block specific tool actions with `SAP_DENY_ACTIONS` (for example `SAPWrite.delete`), without exposing low-level operation codes to admins
 - **Package restrictions** — limit AI write operations (create, update, delete) to specific packages with wildcards (`--allowed-packages "Z*,$TMP"`). Read operations are not restricted by package — use SAP's native authorization for read-level access control
 - **Data access control (off by default)** — `SAPRead(type=TABLE_CONTENTS)` and `SAPQuery` are gated behind explicit env vars (`SAP_ALLOW_DATA_PREVIEW=true`, `SAP_ALLOW_FREE_SQL=true`). These capabilities can expose application data or run ad-hoc SQL, so they are intentionally separated from the default development-tooling surface. They can be enabled for governed use cases, but should be reviewed against the [SAP API Policy](docs_page/sap-api-policy-and-architecture.md), your SAP agreement, and internal data-governance rules
+- **Experimental data-source emergency brake** — approved data/SQL deployments can set `SAP_BLOCKED_DATA_SOURCES=USR02,PA0002`. ARC-1 then parses each SQL request and resolves active CDS plus replacement-object lineage before execution, denying direct or transitive exact-name matches and failing closed when lineage is unsupported or cannot be proven. The empty default adds no metadata calls. This denylist is defense in depth, not a production allowlist or replacement for SAP authorization/CDS DCL; see [Authorization & Roles](docs_page/authorization.md#experimental-data-source-blocklist).
 - **Transport safety** — transport reads are available for review, while transport mutations require both `--allow-writes` and `--allow-transport-writes`. Update/delete operations auto-use the lock correction number when no explicit transport is provided
 - **Git workflow safety** — Git operations are disabled by default. Enable explicitly with `--allow-git-writes` / `SAP_ALLOW_GIT_WRITES=true`
 - **API-key profiles** — multi-key HTTP deployments can assign `viewer`, `viewer-data`, `viewer-sql`, `developer`, `developer-data`, `developer-sql`, or `admin` per key
@@ -57,13 +60,13 @@ Deploy ARC-1 as a Cloud Foundry app on SAP BTP with full platform integration:
 
 - **12 intent-based tools** instead of 200+ individual tools — keeps tool selection simple, with the schema payload guarded by CI budgets and a hyperfocused 1-tool mode for tight context windows
 - **Method-level read/edit** — read or update a single class method, not the whole source (up to 20x fewer tokens)
-- **Context-first understanding** — `SAPContext(action="deps")` is the first call for "what does this object do?": it returns the object's Knowledge Transfer Document (`SKTD`/`KTD`) when available plus public API contracts of dependencies in one call (7-30x compression)
+- **Focused source and dependency context** — use targeted `SAPRead` for exact implementation behavior. For business purpose, reviews or test design, start with `SAPContext(action="deps", type=..., name=...)` for available Knowledge Transfer Documents (`SKTD`/`KTD`) and dependency contracts, then compare requirements with source. Without documented requirements, intent is unverified.
 
 ### Built-in Object Caching
 
 - **Server-validated source caching** — every SAP object read is cached in memory (stdio) or SQLite (http-streamable). Repeated reads use `If-None-Match`/ETag conditional GET, so unchanged objects return from cache after SAP confirms `304 Not Modified`.
-- **Dependency graph caching** — `SAPContext` dep resolution keyed by source hash; unchanged objects skip all ADT calls on subsequent runs.
-- **KTD-aware context** — Knowledge Transfer Documents are cached as source entries and composed into `SAPContext(action="deps")` separately from the dependency graph, so cached dependency context can still include revalidated documentation.
+- **Dependency parsing reuse** — unchanged, authorized source can reuse parsed dependencies and contracts in memory. Aggregate dependency graphs are not cached; SAP authorization and source validation still apply.
+- **KTD-aware context** — Knowledge Transfer Documents use the source cache and are revalidated when composed into `SAPContext(action="deps")`.
 - **Live where-used** — `SAPContext(action="usages")` and CDS impact analysis query SAP's current repository index with the caller's identity; no startup repository scan is required.
 - **Active/inactive source views** — `SAPRead` accepts `version="active" | "inactive" | "auto"` and warns when the active source has an unactivated draft.
 - **Write invalidation** — when `SAPWrite` or `SAPActivate` mutates an object, both active and inactive source cache entries are dropped; next read revalidates or fetches fresh source.
@@ -94,7 +97,7 @@ The 12 tools are designed from real LLM interaction feedback:
 | **SAPQuery** | Execute ABAP SQL with table-not-found suggestions and automatic chunking for simple long literal `IN (...)` lists |
 | **SAPTransport** | CTS transport management (list/get/create/release/delete/reassign/release-recursive), transport layer/target lookup, package transport requirement checks, and reverse lookup history (`action="history"`) |
 | **SAPGit** | Git-based ABAP workflows across gCTS and abapGit (list/clone/pull/push/commit/branch/unlink) with backend auto-selection and safety gating (`--allow-git-writes`) |
-| **SAPContext** | Context-first object understanding (`action="deps"`): prepends the object's KTD when available and returns compressed dependency contracts. Also supports reverse dependency lookup (`action="usages"`) and CDS upstream/downstream impact analysis (`action="impact"` for DDLS) |
+| **SAPContext** | Dependency APIs (`action="deps"`): optional KTD plus bounded source-derived contracts, not a complete relationship inventory. Also supports live where-used (`action="usages"`), CDS impact (`action="impact"`), and TABL includes/appends (`action="structure"`) |
 | **SAPLint** | Local ABAP lint (system/release-aware presets, auto-fix, pre-write validation) + ADT PrettyPrint (server-side formatting) |
 | **SAPDiagnose** | Syntax check, ABAP Unit tests, ATC code quality, CDS test-case suggestions, active/inactive object-state comparison, generic ADT quickfix proposals/application deltas, gateway/system message diagnostics, short dumps, profiler traces, and the on-prem authorization trace (`SUAUTHVALTRC`, data-preview gated) |
 | **SAPManage** | Feature probing, cache statistics, package lifecycle/change-package operations, and FLP catalog/group/tile helpers |
@@ -130,6 +133,13 @@ Two ARC-1 capabilities can expose business data or execute ad-hoc SQL. Both are
 | ---------- | ------- | ------- | ----------- |
 | Named table content preview (`SAPRead(type=TABLE_CONTENTS)`) | `SAP_ALLOW_DATA_PREVIEW=true` | `false` (off) | Can expose application-table data; keep off unless the use case is approved. |
 | Freestyle ABAP SQL (`SAPQuery`) | `SAP_ALLOW_FREE_SQL=true` | `false` (off) | Executes ad-hoc ABAP SQL; keep off unless the use case is approved. |
+| Exact source blocklist (experimental) | `SAP_BLOCKED_DATA_SOURCES=USR02,PA0002` | empty (off) | Denies exact direct/transitive table or CDS dependencies; active mode is deliberately fail-closed and slower. |
+
+When either capability is enabled, successful data-preview bodies are limited cumulatively per tool
+call (2 MiB by default), and only two data-result calls per process remain admitted through parsing
+and serialization. `SAPQuery.maxRows` is separately clamped to 10,000, but wide rows can reach the
+byte limit much earlier. See [Configuration](docs_page/configuration-reference.md) before tuning
+`ARC1_MAX_DATAPREVIEW_RESPONSE_BYTES` or `ARC1_MAX_CONCURRENT_DATA_RESULTS`.
 
 With both flags at their defaults, ARC-1's data/sql rows are unreachable. Turning either flag on is a valid operational choice for approved scenarios, but it should be deliberate: check the current SAP API Policy, the customer's SAP agreement, SAP authorizations, and internal data-protection rules before enabling it on a productive system.
 
@@ -139,7 +149,7 @@ ARC-1's strategy is to stay close to documented and discoverable ADT behavior, p
 
 From `1.0` onward ARC-1 follows [semantic versioning](https://semver.org/): patch releases fix bugs, minor releases add backward-compatible capability, and breaking changes to the MCP tool surface, configuration, or auth contract bump the major version.
 
-**Experimental, default-off features are excluded from this guarantee until they are promoted** — they are clearly labeled and their surface may still change in a minor release. Today this covers the [multi-target BTP mode](docs_page/multi-target-setup.md) (ADR-0006 / ADR-0007): a mutation-free, read-only exception to the single-target default.
+**Experimental, default-off features are excluded from this guarantee until they are promoted** — they are clearly labeled and their surface may still change in a minor release. Today this covers the [multi-target BTP mode](docs_page/multi-target-setup.md) (ADR-0006 / ADR-0007) and the [data-source blocklist](docs_page/authorization.md#experimental-data-source-blocklist).
 
 What changed per release: the annotated [Release Notes](https://docs.arc-1-mcp.com/release-notes/) give each release its impact and upgrade action; [CHANGELOG.md](CHANGELOG.md) lists every merged PR.
 

package/bin/start-cf.sh

@@ -0,0 +1,32 @@
+#!/bin/sh
+set -eu
+
+if [ "${OPTIMIZE_MEMORY:-}" != "true" ]; then
+  exec node dist/index.js
+fi
+
+memory_available=${MEMORY_AVAILABLE:-}
+case "$memory_available" in
+  ''|*[!0-9]*)
+    echo "ARC-1 startup refused: OPTIMIZE_MEMORY=true requires MEMORY_AVAILABLE as decimal MiB." >&2
+    exit 1
+    ;;
+esac
+
+# Avoid octal interpretation and arithmetic overflow in POSIX shells. CF values
+# are vastly smaller than this nine-digit upper bound.
+while [ "${memory_available#0}" != "$memory_available" ]; do
+  memory_available=${memory_available#0}
+done
+if [ -z "$memory_available" ] || [ "${#memory_available}" -gt 9 ]; then
+  echo "ARC-1 startup refused: MEMORY_AVAILABLE is outside the supported decimal-MiB range." >&2
+  exit 1
+fi
+
+old_space_mib=$((memory_available / 4 * 3 + memory_available % 4 * 3 / 4))
+if [ "$old_space_mib" -lt 1 ]; then
+  echo "ARC-1 startup refused: MEMORY_AVAILABLE is too small for the 75% old-space policy." >&2
+  exit 1
+fi
+
+exec node "--max-old-space-size=${old_space_mib}" dist/index.js

package/dist/adt/atc-batch.d.ts

@@ -0,0 +1,71 @@
+import { type AtcObjectIdentity, type AtcPollOptions } from './atc.js';
+import type { AdtHttpClient } from './http.js';
+import type { SafetyConfig } from './safety.js';
+export declare function atcDdicObjectUrl(type: string, name: string): string | undefined;
+export declare const ATC_BATCH_TYPES: readonly ["CLAS", "INTF", "PROG", "FUGR", "DDLS", "DCLS", "BDEF", "DDLX", "SRVD", "SRVB", "TABL", "DTEL", "DOMA"];
+export declare const ATC_BATCH_MAX_OBJECTS = 20;
+export declare const ATC_BATCH_NAME_PATTERN = "^(?:/[A-Za-z0-9_]+/)?[A-Za-z0-9_]+$";
+export declare const ATC_BATCH_NAME_MAX_LENGTH = 40;
+export interface AtcBatchObject extends AtcObjectIdentity {
+    type: (typeof ATC_BATCH_TYPES)[number];
+}
+interface AtcObjectCoverage extends AtcObjectIdentity {
+    status: 'reported' | 'notReported';
+    /** Unknown for missing or incomplete evidence; never synthesize a clean result. */
+    findingCount: number | null;
+    worklistId: string | null;
+}
+export declare function runAtcBatch(http: AdtHttpClient, safety: SafetyConfig, objects: readonly AtcBatchObject[], variant?: string, pollOptions?: AtcPollOptions): Promise<{
+    complete: boolean;
+    variant: string | null;
+    variantSource: import("./atc.js").AtcVariantSource;
+    requestedObjectCount: number;
+    uniqueObjectCount: number;
+    reportedObjectCount: number;
+    coverage: AtcObjectCoverage[];
+    findings: {
+        priority: number;
+        checkTitle: string;
+        messageTitle: string;
+        uri: string;
+        line: number;
+        quickfixInfo?: string;
+        hasQuickfix?: boolean;
+        object?: {
+            type: string;
+            name: string;
+        } | undefined;
+        worklistId: string;
+    }[];
+    findingCount: number;
+    verificationAttempted: boolean;
+    incompleteReasons: string[];
+    runs: {
+        worklistId: string;
+        variant: string | null;
+        variantSource: import("./atc.js").AtcVariantSource;
+        maximumVerdicts: number;
+        expectedFindingCount: number | null;
+        findingStatistics: import("./atc.js").AtcFindingStatistics | null;
+        findingCount: number;
+        processedObjectCount: number;
+        objectSetIsComplete: boolean | null;
+        truncated: boolean;
+        complete: boolean;
+        completionEvidence: import("./atc.js").AtcCompletionEvidence | null;
+        incompleteReasons: string[];
+        runStatusCode: number;
+        runStatus: string | null;
+        runInfos: import("./atc.js").AtcRunInfo[];
+        worklist: {
+            id: string;
+            timestamp?: string;
+            usedObjectSet?: string;
+            status?: string;
+        };
+        infos: string[];
+        excludedFindingCount: number;
+    }[];
+}>;
+export {};
+//# sourceMappingURL=atc-batch.d.ts.map

package/dist/adt/atc-batch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atc-batch.d.ts","sourceRoot":"","sources":["../../src/adt/atc-batch.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EAIpB,MAAM,UAAU,CAAC;AAElB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAMhD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAI/E;AAGD,eAAO,MAAM,eAAe,mHAYlB,CAAC;AACX,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,sBAAsB,wCAAwC,CAAC;AAC5E,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAG5C,MAAM,WAAW,cAAe,SAAQ,iBAAiB;IACvD,IAAI,EAAE,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;CACxC;AAED,UAAU,iBAAkB,SAAQ,iBAAiB;IACnD,MAAM,EAAE,UAAU,GAAG,aAAa,CAAC;IACnC,mFAAmF;IACnF,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAsFD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,SAAS,cAAc,EAAE,EAClC,OAAO,CAAC,EAAE,MAAM,EAChB,WAAW,GAAE,cAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+GjC"}

package/dist/adt/atc-batch.js

@@ -0,0 +1,182 @@
+/** Native ATC batches with explicit requested-object coverage and one bounded verification run. */
+import { normalizeObjectType, objectUrlForType } from '../handlers/object-types.js';
+import { getCurrentContext } from '../server/context.js';
+import { logger } from '../server/logger.js';
+import { ATC_SETTLE_QUIET_MS, prepareAtcExecution, runAtcWorklist, } from './atc.js';
+import { AdtApiError, AdtNetworkError } from './errors.js';
+import { canonicalHostRelativeAdtPath } from './path-safety.js';
+// DDIC uses ATC's own R3TR reference: TABL covers both tables and structures,
+// including releases without the /ddic/tables editor. No subtype lookup is needed.
+const ATC_DDIC_BATCH_TYPES = ['TABL', 'DTEL', 'DOMA'];
+export function atcDdicObjectUrl(type, name) {
+    return ATC_DDIC_BATCH_TYPES.some((candidate) => candidate === type)
+        ? `/sap/bc/adt/atc/objects/R3TR/${type}/${encodeURIComponent(name)}`
+        : undefined;
+}
+// Other object-root routes need no parent/group resolution.
+export const ATC_BATCH_TYPES = [
+    'CLAS',
+    'INTF',
+    'PROG',
+    'FUGR',
+    'DDLS',
+    'DCLS',
+    'BDEF',
+    'DDLX',
+    'SRVD',
+    'SRVB',
+    ...ATC_DDIC_BATCH_TYPES,
+];
+export const ATC_BATCH_MAX_OBJECTS = 20;
+export const ATC_BATCH_NAME_PATTERN = '^(?:/[A-Za-z0-9_]+/)?[A-Za-z0-9_]+$';
+export const ATC_BATCH_NAME_MAX_LENGTH = 40;
+const ATC_BATCH_NAME_REGEX = new RegExp(ATC_BATCH_NAME_PATTERN);
+function objectKey(object) {
+    // Explicit aliases distinguish FUGR/F (group) from FUGR/FF (function module).
+    return `${normalizeObjectType(object.type)}:${object.name.replace(/[a-z]/g, (char) => char.toUpperCase())}`;
+}
+function sameObject(requested, reported) {
+    if (objectKey(requested) !== objectKey(reported))
+        return false;
+    const root = objectUrlForType(requested.type, requested.name);
+    const candidates = [
+        requested.uri,
+        root,
+        `/sap/bc/adt/atc/objects/R3TR/${requested.type}/${encodeURIComponent(requested.name)}`,
+    ];
+    if (requested.type === 'TABL') {
+        const structure = objectUrlForType('TABL/DS', requested.name);
+        candidates.push(structure, `${root}/source/main`, `${structure}/source/main`);
+    }
+    else if (!atcDdicObjectUrl(requested.type, requested.name) && requested.type !== 'SRVB')
+        candidates.push(`${root}/source/main`);
+    // ABAP names and percent-hex case are equivalent; SAP emits %2f. Accept only
+    // exact known object roots/source-main, including the literal namespace form.
+    return candidates.some((candidate) => [candidate, candidate.replace(encodeURIComponent(requested.name), requested.name)].some((uri) => uri.toLowerCase() === reported.uri.toLowerCase()));
+}
+function reconcile(objects, runs) {
+    return objects.map((object) => {
+        for (const run of runs) {
+            const rows = run.processedObjects?.filter((row) => sameObject(object, row)) ?? [];
+            if (rows.length === 0)
+                continue;
+            return {
+                ...object,
+                status: 'reported',
+                findingCount: run.complete && rows.length === 1 ? rows[0].findingCount : null,
+                worklistId: run.worklistId,
+            };
+        }
+        return { ...object, status: 'notReported', findingCount: null, worklistId: null };
+    });
+}
+function reviewBatchEvidence(run, selection) {
+    const keys = (run.processedObjects ?? []).map(objectKey);
+    if (new Set(keys).size !== keys.length) {
+        run.complete = false;
+        run.incompleteReasons.push('SAP reported duplicate ATC object identities.');
+    }
+    if (run.findings.some((finding) => !finding.object)) {
+        run.complete = false;
+        run.incompleteReasons.push('Some ATC findings have no valid enclosing object identity.');
+    }
+    if ((run.processedObjects ?? []).some((row) => selection.some((object) => objectKey(object) === objectKey(row) && !sameObject(object, row)))) {
+        run.complete = false;
+        run.incompleteReasons.push('SAP returned an object URI inconsistent with the requested identity.');
+    }
+    // FUNC/INCL and other non-root records may belong to a requested container.
+    // Without parent evidence, preserve them and refuse a verified clean count.
+    const unassignedKeys = new Set((run.processedObjects ?? [])
+        .filter((object) => !ATC_BATCH_TYPES.some((type) => type === normalizeObjectType(object.type)))
+        .map(objectKey));
+    if (unassignedKeys.size > 0) {
+        run.complete = false;
+        run.incompleteReasons.push('SAP reported unassigned sub-object or unsupported object records; their findings are retained.');
+    }
+    // Exclude other supported roots, including previously checked roots repeated
+    // in verification. Unassigned records cannot safely be classified as unrelated.
+    const selectedKeys = new Set(selection.map(objectKey));
+    const selectedFindings = run.findings.filter((finding) => !finding.object || selectedKeys.has(objectKey(finding.object)) || unassignedKeys.has(objectKey(finding.object)));
+    return { ...run, selectedFindings, excludedFindingCount: run.findings.length - selectedFindings.length };
+}
+export async function runAtcBatch(http, safety, objects, variant, pollOptions = {}) {
+    // Validate at the executor boundary too; the public tool applies the same limits before routing.
+    if (objects.length < 1 ||
+        objects.length > ATC_BATCH_MAX_OBJECTS ||
+        objects.some((object) => !ATC_BATCH_TYPES.includes(object.type) ||
+            object.name.length > ATC_BATCH_NAME_MAX_LENGTH ||
+            !ATC_BATCH_NAME_REGEX.test(object.name) ||
+            !canonicalHostRelativeAdtPath(object.uri, '/sap/bc/adt/', { allowRawEncodedSlash: true }) ||
+            object.uri.includes('?')))
+        throw new Error('Invalid ATC batch selection.');
+    const selected = [...new Map(objects.map((object) => [objectKey(object), object])).values()];
+    const execution = await prepareAtcExecution(http, safety, variant, pollOptions);
+    const runs = [
+        reviewBatchEvidence(await runAtcWorklist(http, safety, selected.map((object) => object.uri), execution, true), selected),
+    ];
+    let coverage = reconcile(selected, runs);
+    const missing = selected.filter((_object, index) => coverage[index].status === 'notReported');
+    const incompleteReasons = [];
+    let verificationAttempted = false;
+    if (runs[0].complete && missing.length > 0) {
+        if (!execution.variant || execution.variantSource === 'requestedUnverified') {
+            incompleteReasons.push('Verification was skipped because the effective check variant could not be confirmed.');
+        }
+        else if (pollOptions.signal?.aborted || (pollOptions.now ?? Date.now)() >= execution.requestOptions.deadline) {
+            incompleteReasons.push('Verification was skipped because the request was cancelled or its deadline expired.');
+        }
+        else if (runs[0].completionEvidence === 'legacyWorklistSettled' &&
+            execution.requestOptions.deadline - (pollOptions.now ?? Date.now)() <= ATC_SETTLE_QUIET_MS) {
+            incompleteReasons.push('Verification was skipped because the remaining deadline cannot cover legacy worklist settlement.');
+        }
+        else {
+            verificationAttempted = true;
+            try {
+                runs.push(reviewBatchEvidence(await runAtcWorklist(http, safety, missing.map((object) => object.uri), execution, true), missing));
+            }
+            catch (error) {
+                if (pollOptions.signal?.aborted ||
+                    (error instanceof AdtNetworkError && error.cause?.name === 'AbortError') ||
+                    !(error instanceof AdtApiError || error instanceof AdtNetworkError))
+                    throw error;
+                logger.warn('ATC verification failed; initial findings retained.', {
+                    requestId: getCurrentContext()?.requestId,
+                    worklistId: runs[0].worklistId,
+                    errorClass: error.name,
+                    ...(error instanceof AdtApiError ? { statusCode: error.statusCode } : {}),
+                });
+                incompleteReasons.push('ATC verification could not be completed; initial findings are retained.');
+            }
+            coverage = reconcile(selected, runs);
+        }
+    }
+    for (const run of runs)
+        incompleteReasons.push(...run.incompleteReasons.map((reason) => `${run.worklistId}: ${reason}`));
+    const unreportedCount = coverage.filter((object) => object.status === 'notReported').length;
+    if (unreportedCount > 0)
+        incompleteReasons.push(`SAP did not report ${unreportedCount} requested object(s); their findings are unknown.`);
+    if (coverage.some((object) => object.status === 'reported' && object.findingCount === null)) {
+        incompleteReasons.push('Finding counts remain unknown for objects from an incomplete run.');
+    }
+    const findings = runs.flatMap((run) => run.selectedFindings.map(({ object, ...finding }) => ({
+        ...finding,
+        ...(object ? { object: { type: normalizeObjectType(object.type), name: object.name } } : {}),
+        worklistId: run.worklistId,
+    })));
+    return {
+        complete: incompleteReasons.length === 0 && runs.every((run) => run.complete),
+        variant: execution.variant ?? null,
+        variantSource: execution.variantSource,
+        requestedObjectCount: objects.length,
+        uniqueObjectCount: selected.length,
+        reportedObjectCount: coverage.length - unreportedCount,
+        coverage,
+        findings,
+        findingCount: findings.length,
+        verificationAttempted,
+        incompleteReasons,
+        // Keep separate provenance and statistics; never pretend two worklists were one run.
+        runs: runs.map(({ findings: _findings, processedObjects: _objects, selectedFindings: _selected, ...metadata }) => metadata),
+    };
+}
+//# sourceMappingURL=atc-batch.js.map

package/dist/adt/atc-batch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atc-batch.js","sourceRoot":"","sources":["../../src/adt/atc-batch.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EACL,mBAAmB,EAInB,mBAAmB,EACnB,cAAc,GACf,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE3D,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAGhE,8EAA8E;AAC9E,mFAAmF;AACnF,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAE/D,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAY;IACzD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC;QACjE,CAAC,CAAC,gCAAgC,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE;QACpE,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,GAAG,oBAAoB;CACf,CAAC;AACX,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,qCAAqC,CAAC;AAC5E,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAC5C,MAAM,oBAAoB,GAAG,IAAI,MAAM,CAAC,sBAAsB,CAAC,CAAC;AAahE,SAAS,SAAS,CAAC,MAAyB;IAC1C,8EAA8E;IAC9E,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;AAC9G,CAAC;AAED,SAAS,UAAU,CAAC,SAAyB,EAAE,QAA2B;IACxE,IAAI,SAAS,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG;QACjB,SAAS,CAAC,GAAG;QACb,IAAI;QACJ,gCAAgC,SAAS,CAAC,IAAI,IAAI,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;KACvF,CAAC;IACF,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9D,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,cAAc,EAAE,GAAG,SAAS,cAAc,CAAC,CAAC;IAChF,CAAC;SAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM;QACvF,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IACzC,6EAA6E;IAC7E,8EAA8E;IAC9E,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACnC,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CACrF,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAC1D,CACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,OAAkC,EAAE,IAA6B;IAClF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAClF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,OAAO;gBACL,GAAG,MAAM;gBACT,MAAM,EAAE,UAAU;gBAClB,YAAY,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;gBAC9E,UAAU,EAAE,GAAG,CAAC,UAAU;aAC3B,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAiB,EAAE,SAAoC;IAClF,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACvC,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC;QACrB,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC;QACrB,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAC3F,CAAC;IACD,IACE,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACxC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAC7F,EACD,CAAC;QACD,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC;QACrB,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IACrG,CAAC;IACD,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;SACzB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;SAC9F,GAAG,CAAC,SAAS,CAAC,CAClB,CAAC;IACF,IAAI,cAAc,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC5B,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC;QACrB,GAAG,CAAC,iBAAiB,CAAC,IAAI,CACxB,gGAAgG,CACjG,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,gFAAgF;IAChF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACvD,MAAM,gBAAgB,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAC1C,CAAC,OAAO,EAAE,EAAE,CACV,CAAC,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAClH,CAAC;IACF,OAAO,EAAE,GAAG,GAAG,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC;AAC3G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAmB,EACnB,MAAoB,EACpB,OAAkC,EAClC,OAAgB,EAChB,WAAW,GAAmB,EAAE;IAEhC,iGAAiG;IACjG,IACE,OAAO,CAAC,MAAM,GAAG,CAAC;QAClB,OAAO,CAAC,MAAM,GAAG,qBAAqB;QACtC,OAAO,CAAC,IAAI,CACV,CAAC,MAAM,EAAE,EAAE,CACT,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,yBAAyB;YAC9C,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACvC,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;YACzF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC3B;QAED,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7F,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG;QACX,mBAAmB,CACjB,MAAM,cAAc,CAClB,IAAI,EACJ,MAAM,EACN,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EACpC,SAAS,EACT,IAAI,CACL,EACD,QAAQ,CACT;KACF,CAAC;IACF,IAAI,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC;IAC/F,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,IAAI,qBAAqB,GAAG,KAAK,CAAC;IAClC,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,aAAa,KAAK,qBAAqB,EAAE,CAAC;YAC5E,iBAAiB,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;QACjH,CAAC;aAAM,IAAI,WAAW,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,SAAS,CAAC,cAAc,CAAC,QAAS,EAAE,CAAC;YAChH,iBAAiB,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;QAChH,CAAC;aAAM,IACL,IAAI,CAAC,CAAC,CAAE,CAAC,kBAAkB,KAAK,uBAAuB;YACvD,SAAS,CAAC,cAAc,CAAC,QAAS,GAAG,CAAC,WAAW,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,mBAAmB,EAC3F,CAAC;YACD,iBAAiB,CAAC,IAAI,CACpB,kGAAkG,CACnG,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,qBAAqB,GAAG,IAAI,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CACP,mBAAmB,CACjB,MAAM,cAAc,CAClB,IAAI,EACJ,MAAM,EACN,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EACnC,SAAS,EACT,IAAI,CACL,EACD,OAAO,CACR,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,WAAW,CAAC,MAAM,EAAE,OAAO;oBAC3B,CAAC,KAAK,YAAY,eAAe,IAAI,KAAK,CAAC,KAAK,EAAE,IAAI,KAAK,YAAY,CAAC;oBACxE,CAAC,CAAC,KAAK,YAAY,WAAW,IAAI,KAAK,YAAY,eAAe,CAAC;oBAEnE,MAAM,KAAK,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,qDAAqD,EAAE;oBACjE,SAAS,EAAE,iBAAiB,EAAE,EAAE,SAAS;oBACzC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAE,CAAC,UAAU;oBAC/B,UAAU,EAAE,KAAK,CAAC,IAAI;oBACtB,GAAG,CAAC,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1E,CAAC,CAAC;gBACH,iBAAiB,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;YACpG,CAAC;YACD,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI;QACpB,iBAAiB,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC;IACnG,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,MAAM,CAAC;IAC5F,IAAI,eAAe,GAAG,CAAC;QACrB,iBAAiB,CAAC,IAAI,CAAC,sBAAsB,eAAe,mDAAmD,CAAC,CAAC;IACnH,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5F,iBAAiB,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACpC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACpD,GAAG,OAAO;QACV,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC,CAAC,CACJ,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC7E,OAAO,EAAE,SAAS,CAAC,OAAO,IAAI,IAAI;QAClC,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,oBAAoB,EAAE,OAAO,CAAC,MAAM;QACpC,iBAAiB,EAAE,QAAQ,CAAC,MAAM;QAClC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,GAAG,eAAe;QACtD,QAAQ;QACR,QAAQ;QACR,YAAY,EAAE,QAAQ,CAAC,MAAM;QAC7B,qBAAqB;QACrB,iBAAiB;QACjB,qFAAqF;QACrF,IAAI,EAAE,IAAI,CAAC,GAAG,CACZ,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAC5G;KACF,CAAC;AACJ,CAAC"}

package/dist/adt/atc.d.ts

@@ -9,6 +9,8 @@ export interface AtcFinding {
     messageTitle: string;
     uri: string;
     line: number;
+    /** Enclosing worklist object, present only for batch execution. */
+    object?: AtcObjectIdentity;
     quickfixInfo?: string;
     hasQuickfix?: boolean;
 }
@@ -30,7 +32,16 @@ export interface AtcFindingStatistics {
     total: number;
 }
 export type AtcCompletionEvidence = 'asyncRunCompleted' | 'legacyWorklistSettled';
+export interface AtcObjectIdentity {
+    type: string;
+    name: string;
+    uri: string;
+}
 export interface AtcRunResult {
+    /** Schema-scoped object evidence, included only for batch execution. */
+    processedObjects?: (AtcObjectIdentity & {
+        findingCount: number;
+    })[];
     findings: AtcFinding[];
     worklistId: string;
     /** The variant actually bound at worklist creation; null only when none could be sent. */
@@ -73,10 +84,33 @@ export interface AtcPollOptions {
     sleep?: (ms: number) => Promise<void>;
     signal?: AbortSignal;
 }
+export declare const ATC_RUN_STATUS_MEDIA_TYPE = "application/vnd.sap.atc.run.v1+xml";
+/**
+ * Fallback quiet interval when SAP returns a synchronous run without a status location.
+ *
+ * A live 758 worklist grew from 23 findings/two objects to 73/ten after already reporting
+ * `objectSetIsComplete=true`, so neither that flag nor a few fast count snapshots are terminal
+ * evidence. Modern systems instead expose the terminal run status requested with
+ * `clientWait=false`. Ten seconds spans at least five intervals at the default 2 s backoff cap.
+ * SAP also advances the root worklist timestamp on unchanged GETs, so that proven volatile
+ * attribute is excluded from the comparison.
+ * See docs/research/2026-08-20-atc-completeness-polling.md.
+ */
+export declare const ATC_SETTLE_QUIET_MS = 10000;
 /** List the valid ATC check variants. */
 export declare function listAtcVariants(http: AdtHttpClient, safety: SafetyConfig, filter?: string, options?: AdtRequestOptions): Promise<NamedItem[]>;
 /** Read the system default ATC check variant. */
 export declare function getAtcSystemDefaultVariant(http: AdtHttpClient, safety: SafetyConfig, options?: AdtRequestOptions): Promise<string | undefined>;
 /** Run an ATC worklist and preserve terminal, structural, and informational evidence for CI. */
 export declare function runAtcCheck(http: AdtHttpClient, safety: SafetyConfig, objectUrl: string, variant?: string, pollOptions?: AtcPollOptions): Promise<AtcRunResult>;
+/** One request budget and variant binding shared by the initial and verification worklists. */
+export declare function prepareAtcExecution(http: AdtHttpClient, safety: SafetyConfig, variant: string | undefined, pollOptions: AtcPollOptions): Promise<{
+    variant: string | undefined;
+    variantSource: AtcVariantSource;
+    pollOptions: AtcPollOptions;
+    requestOptions: AdtRequestOptions;
+}>;
+/** Internal shared executor; callers select whether batch object evidence is retained. */
+export declare function runAtcWorklist(http: AdtHttpClient, safety: SafetyConfig, objectUrls: readonly string[], execution: Awaited<ReturnType<typeof prepareAtcExecution>>, includeObjects: boolean): Promise<AtcRunResult>;
+export declare function isAtcRunFailure(status: string): boolean;
 //# sourceMappingURL=atc.d.ts.map

package/dist/adt/atc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"atc.d.ts","sourceRoot":"","sources":["../../src/adt/atc.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAG3E,OAAO,KAAK,EAAE,aAAa,EAAe,MAAM,WAAW,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,EAAiC,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAiB,KAAK,SAAS,EAAyD,MAAM,iBAAiB,CAAC;AAEvH,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,qBAAqB,GAAG,eAAe,GAAG,aAAa,CAAC;AAErG,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,qBAAqB,GAAG,mBAAmB,GAAG,uBAAuB,CAAC;AAElF,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,0FAA0F;IAC1F,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,aAAa,EAAE,gBAAgB,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,sGAAsG;IACtG,iBAAiB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,OAAO,GAAG,IAAI,CAAC;IACpC,+FAA+F;IAC/F,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,kBAAkB,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACjD,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,0FAA0F;IAC1F,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,QAAQ,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AA2BD,yCAAyC;AACzC,wBAAsB,eAAe,CACnC,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,YAAY,EACpB,MAAM,SAAM,EACZ,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,SAAS,EAAE,CAAC,CAStB;AAED,iDAAiD;AACjD,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,YAAY,EACpB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAI7B;AAsDD,gGAAgG;AAChG,wBAAsB,WAAW,CAC/B,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,MAAM,EAChB,WAAW,GAAE,cAAmB,GAC/B,OAAO,CAAC,YAAY,CAAC,CAiOvB"}
+{"version":3,"file":"atc.d.ts","sourceRoot":"","sources":["../../src/adt/atc.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAG3E,OAAO,KAAK,EAAE,aAAa,EAAe,MAAM,WAAW,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,EAAiC,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAiB,KAAK,SAAS,EAAyD,MAAM,iBAAiB,CAAC;AAEvH,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,qBAAqB,GAAG,eAAe,GAAG,aAAa,CAAC;AAErG,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,qBAAqB,GAAG,mBAAmB,GAAG,uBAAuB,CAAC;AAElF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,CAAC,iBAAiB,GAAG;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IACpE,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,0FAA0F;IAC1F,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,aAAa,EAAE,gBAAgB,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,sGAAsG;IACtG,iBAAiB,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,OAAO,GAAG,IAAI,CAAC;IACpC,+FAA+F;IAC/F,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,kBAAkB,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACjD,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,0FAA0F;IAC1F,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,QAAQ,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAMD,eAAO,MAAM,yBAAyB,uCAAuC,CAAC;AAC9E;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAS1C,yCAAyC;AACzC,wBAAsB,eAAe,CACnC,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,YAAY,EACpB,MAAM,SAAM,EACZ,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,SAAS,EAAE,CAAC,CAStB;AAED,iDAAiD;AACjD,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,YAAY,EACpB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAI7B;AAsDD,gGAAgG;AAChG,wBAAsB,WAAW,CAC/B,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,MAAM,EAChB,WAAW,GAAE,cAAmB,GAC/B,OAAO,CAAC,YAAY,CAAC,CAGvB;AAED,+FAA+F;AAC/F,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,WAAW,EAAE,cAAc;aArDP,MAAM,GAAG,SAAS;mBAAiB,gBAAgB;;;GAiExE;AAED,0FAA0F;AAC1F,wBAAsB,cAAc,CAClC,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,YAAY,EACpB,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,EAC1D,cAAc,EAAE,OAAO,GACtB,OAAO,CAAC,YAAY,CAAC,CA4NvB;AA0HD,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAIvD"}

package/dist/adt/atc.js

@@ -7,7 +7,7 @@ const DEFAULT_ATC_TIMEOUT_MS = 300_000;
 const DEFAULT_ATC_POLL_DELAY_MS = 250;
 const DEFAULT_ATC_MAX_POLL_DELAY_MS = 2_000;
 const ATC_RUN_STATUS_PREFIX = '/sap/bc/adt/atc/runs/';
-const ATC_RUN_STATUS_MEDIA_TYPE = 'application/vnd.sap.atc.run.v1+xml';
+export const ATC_RUN_STATUS_MEDIA_TYPE = 'application/vnd.sap.atc.run.v1+xml';
 /**
  * Fallback quiet interval when SAP returns a synchronous run without a status location.
  *
@@ -19,7 +19,7 @@ const ATC_RUN_STATUS_MEDIA_TYPE = 'application/vnd.sap.atc.run.v1+xml';
  * attribute is excluded from the comparison.
  * See docs/research/2026-08-20-atc-completeness-polling.md.
  */
-const ATC_SETTLE_QUIET_MS = 10_000;
+export const ATC_SETTLE_QUIET_MS = 10_000;
 /** Compare the complete wire response except SAP's per-GET root worklist timestamp. */
 function atcWorklistSettleObservation(xml) {
     return xml.replace(/<(?:[A-Za-z_][\w.-]*:)?worklist\b[^>]*>/, (rootStart) => rootStart.replace(/\s+(?:[A-Za-z_][\w.-]*:)?timestamp\s*=\s*(?:"[^"]*"|'[^']*')/, ''));
@@ -82,16 +82,28 @@ async function resolveCheckVariant(http, safety, requestedRaw, requestOptions) {
 }
 /** Run an ATC worklist and preserve terminal, structural, and informational evidence for CI. */
 export async function runAtcCheck(http, safety, objectUrl, variant, pollOptions = {}) {
+    const execution = await prepareAtcExecution(http, safety, variant, pollOptions);
+    return runAtcWorklist(http, safety, [objectUrl], execution, false);
+}
+/** One request budget and variant binding shared by the initial and verification worklists. */
+export async function prepareAtcExecution(http, safety, variant, pollOptions) {
     checkOperation(safety, OperationType.Read, 'RunATCCheck');
     const now = pollOptions.now ?? Date.now;
     const timeoutMs = pollOptions.timeoutMs ?? DEFAULT_ATC_TIMEOUT_MS;
-    const deadline = now() + timeoutMs;
     const requestOptions = {
-        deadline,
+        deadline: now() + timeoutMs,
         fetchTimeoutMs: timeoutMs,
         signal: pollOptions.signal,
     };
-    const { variant: effectiveVariant, variantSource } = await resolveCheckVariant(http, safety, variant, requestOptions);
+    const resolved = await resolveCheckVariant(http, safety, variant, requestOptions);
+    return { ...resolved, pollOptions, requestOptions };
+}
+/** Internal shared executor; callers select whether batch object evidence is retained. */
+export async function runAtcWorklist(http, safety, objectUrls, execution, includeObjects) {
+    checkOperation(safety, OperationType.Read, 'RunATCCheck');
+    const { variant: effectiveVariant, variantSource, pollOptions, requestOptions } = execution;
+    const now = pollOptions.now ?? Date.now;
+    const deadline = requestOptions.deadline;
     const worklistPath = effectiveVariant
         ? `/sap/bc/adt/atc/worklists?checkVariant=${encodeURIComponent(effectiveVariant)}`
         : '/sap/bc/adt/atc/worklists';
@@ -106,7 +118,7 @@ export async function runAtcCheck(http, safety, objectUrl, variant, pollOptions
   <objectSets xmlns:adtcore="http://www.sap.com/adt/core">
     <objectSet kind="inclusive">
       <adtcore:objectReferences>
-        <adtcore:objectReference adtcore:uri="${escapeXmlAttr(objectUrl)}"/>
+        ${objectUrls.map((url) => `<adtcore:objectReference adtcore:uri="${escapeXmlAttr(url)}"/>`).join('\n        ')}
       </adtcore:objectReferences>
     </objectSet>
   </objectSets>
@@ -134,6 +146,7 @@ export async function runAtcCheck(http, safety, objectUrl, variant, pollOptions
     const runInfos = parseAtcRunInfos(runResp.body);
     const findingStatistics = parseAtcFindingStatistics(runInfos);
     const baseContext = {
+        includeObjects,
         worklistId,
         variant: effectiveVariant,
         variantSource,
@@ -353,7 +366,7 @@ function normalizedAtcRunStatus(status) {
 function isAtcRunCompleted(status) {
     return ['completed', 'finished'].includes(normalizedAtcRunStatus(status));
 }
-function isAtcRunFailure(status) {
+export function isAtcRunFailure(status) {
     return ['not created', 'failed', 'cancelled', 'canceled', 'aborted', 'error'].includes(normalizedAtcRunStatus(status));
 }
 function parseAtcRunInfos(xml) {
@@ -404,11 +417,23 @@ function parseAtcFinding(finding) {
         hasQuickfix: quickfixKinds.some((kind) => String(quickfixNode?.[`@_${kind}`] ?? 'false').toLowerCase() === 'true'),
     };
 }
-function parseAtcFindings(root, objectRows) {
-    const objectFindings = objectRows.flatMap((object) => nodeRecords(object.findings).flatMap((container) => nodeRecords(container.finding)));
+function atcObjectIdentity(object) {
+    return {
+        type: String(object['@_type']).trim(),
+        name: String(object['@_name']).trim(),
+        uri: String(object['@_uri']).trim(),
+    };
+}
+function parseAtcFindings(root, objectRows, includeObjects) {
+    const objectFindings = objectRows.flatMap((object) => nodeRecords(object.findings)
+        .flatMap((container) => nodeRecords(container.finding))
+        .map((finding) => ({
+        ...parseAtcFinding(finding),
+        ...(includeObjects && isValidProcessedObject(object) ? { object: atcObjectIdentity(object) } : {}),
+    })));
     // Root-level findings are retained for older/minimal response shapes, but arbitrary nested
     // metadata is never searched as worklist evidence.
-    return [...objectFindings, ...nodeRecords(root.finding)].map(parseAtcFinding);
+    return [...objectFindings, ...nodeRecords(root.finding).map(parseAtcFinding)];
 }
 function parseAtcInfos(root) {
     return nodeRecords(root.infos)
@@ -438,7 +463,7 @@ function parseAtcRunResult(xml, context) {
     const rawObjectValue = objectContainerShapeIsValid ? objectContainers[0].object : undefined;
     const rawObjectRows = nodeValues(rawObjectValue);
     const objectRows = nodeRecords(rawObjectValue);
-    const findings = parseAtcFindings(root, objectRows);
+    const findings = parseAtcFindings(root, objectRows, context.includeObjects === true);
     const validObjectRows = objectRows.filter(isValidProcessedObject);
     const processedObjectCount = validObjectRows.length;
     const malformedObjectCount = rawObjectRows.length - validObjectRows.length;
@@ -472,8 +497,28 @@ function parseAtcRunResult(xml, context) {
     if (invalidPriorityCount > 0) {
         incompleteReasons.push(`${invalidPriorityCount} ATC finding(s) had a missing or malformed priority.`);
     }
+    const malformedBatchFindings = context.includeObjects === true &&
+        objectRows.some((object) => {
+            if (object.findings === undefined || object.findings === '')
+                return false;
+            const containers = nodeRecords(object.findings);
+            return (containers.length !== 1 ||
+                nodeValues(object.findings).length !== 1 ||
+                nodeText(containers[0]) !== '' ||
+                nodeValues(containers[0].finding).length !== nodeRecords(containers[0].finding).length);
+        });
+    if (malformedBatchFindings)
+        incompleteReasons.push('SAP returned malformed ATC finding containers or rows.');
     const infos = parseAtcInfos(root);
     return {
+        ...(context.includeObjects
+            ? {
+                processedObjects: validObjectRows.map((object) => ({
+                    ...atcObjectIdentity(object),
+                    findingCount: nodeRecords(object.findings).flatMap((container) => nodeRecords(container.finding)).length,
+                })),
+            }
+            : {}),
         findings,
         worklistId: context.worklistId,
         variant: context.variant ?? null,
@@ -492,7 +537,8 @@ function parseAtcRunResult(xml, context) {
             objectContainerShapeIsValid &&
             processedObjectCount > 0 &&
             malformedObjectCount === 0 &&
-            invalidPriorityCount === 0,
+            invalidPriorityCount === 0 &&
+            !malformedBatchFindings,
         completionEvidence: context.completionEvidence,
         incompleteReasons,
         runStatusCode: context.runStatusCode,