arc-1 1.5.2 → 1.7.0

package/README.md

@@ -23,7 +23,7 @@ Built for organizations that need AI-assisted SAP development with guardrails. I
 - **Safe by default** — read-only, no free SQL, no table preview, no transport writes, no Git writes. Enable each capability with explicit `SAP_ALLOW_*` flags
 - **Action deny list** — block specific tool actions with `SAP_DENY_ACTIONS` (for example `SAPWrite.delete`), without exposing low-level operation codes to admins
 - **Package restrictions** — limit AI write operations (create, update, delete) to specific packages with wildcards (`--allowed-packages "Z*,$TMP"`). Read operations are not restricted by package — use SAP's native authorization for read-level access control
-- **Data access control (off by default)** — `SAPRead(type=TABLE_CONTENTS)` and `SAPQuery` are gated behind explicit env vars (`SAP_ALLOW_DATA_PREVIEW=true`, `SAP_ALLOW_FREE_SQL=true`). These capabilities can expose application data or run ad-hoc SQL, so they are intentionally separated from the default development-tooling surface. They can be enabled for governed use cases, but should be reviewed against the [SAP API Policy](docs_page/sap-api-policy-and-architecture.md), your SAP agreement, and internal data-governance rules
+- **Data access control (off by default)** — table previews, saved SAPscript texts and SLG1 messages require `SAP_ALLOW_DATA_PREVIEW=true`; freestyle SQL separately requires `SAP_ALLOW_FREE_SQL=true`. Review enabled uses against the [SAP API Policy](docs_page/sap-api-policy-and-architecture.md), your SAP agreement, and internal data-governance rules.
 - **Experimental data-source emergency brake** — approved data/SQL deployments can set `SAP_BLOCKED_DATA_SOURCES=USR02,PA0002`. ARC-1 then parses each SQL request and resolves active CDS plus replacement-object lineage before execution, denying direct or transitive exact-name matches and failing closed when lineage is unsupported or cannot be proven. The empty default adds no metadata calls. This denylist is defense in depth, not a production allowlist or replacement for SAP authorization/CDS DCL; see [Authorization & Roles](docs_page/authorization.md#experimental-data-source-blocklist).
 - **Transport safety** — transport reads are available for review, while transport mutations require both `--allow-writes` and `--allow-transport-writes`. Update/delete operations auto-use the lock correction number when no explicit transport is provided
 - **Git workflow safety** — Git operations are disabled by default. Enable explicitly with `--allow-git-writes` / `SAP_ALLOW_GIT_WRITES=true`
@@ -51,6 +51,9 @@ Deploy ARC-1 as a Cloud Foundry app on SAP BTP with full platform integration:
   destinations marked `arc1.enabled=true` and exposes pinned SID/client plus aggregate endpoints
   ([setup](docs_page/multi-target-setup.md),
   [administration](docs_page/multi-target-administration.md))
+- **Optional target filtering** — for shared multi-system gateways where teams need different target
+  lists. [Assign systems/clients through XSUAA roles](docs_page/multi-target-authorization.md);
+  IAS changes are optional. This filters IAM-assigned targets, not automatically discovered SAP accounts.
 - **Cloud Connector** — reach on-premise systems through the connectivity proxy
 - **Per-user destinations** — user identity forwarded end-to-end via X.509 certificates for on-premise SAP, or exchanged for an ABAP bearer token for BTP ABAP Environment
 - **XSUAA OAuth proxy** — MCP clients authenticate via standard OAuth, ARC-1 handles the BTP token exchange
@@ -89,12 +92,12 @@ The 12 tools are designed from real LLM interaction feedback:
 
 | Tool | What it does |
 |------|-------------|
-| **SAPRead** | Read exact ABAP source, method bodies, grep matches, table data, CDS views, access controls (`DCLS`), metadata extensions (`DDLX`), service bindings (`SRVB`), knowledge-transfer docs (`SKTD` or friendly alias `KTD`), message classes (`MSAG`), revision history (`VERSIONS`/`VERSION_SOURCE`), inactive object state, BOR objects, deployed UI5/Fiori apps (BSP, BSP_DEPLOY), and ABAP Platform 2025 server-driven objects (`DESD`, `EVTB`, `EVTO`, `DTSC`, `CSNM`, `COTA`). For "what does this object do?" use `SAPContext` first, then `SAPRead` for precise source. On-prem metadata reads include authorization fields (`AUTH`), feature toggles (`FEATURE_TOGGLE`), and enhancement implementations (`ENHO`). Structured format for classes returns metadata + decomposed includes as JSON. Optional `grep` regex returns only matching source lines (+context, method-annotated for classes) for token-efficient search. (Deprecated aliases `MESSAGES`/`FTG2` accepted for one minor.) |
+| **SAPRead** | Read exact ABAP source, method bodies, grep matches, table data, CDS views, access controls (`DCLS`), metadata extensions (`DDLX`), service bindings (`SRVB`), knowledge-transfer docs (`SKTD` or friendly alias `KTD`), message classes (`MSAG`), revision history (`VERSIONS`/`VERSION_SOURCE`), inactive object state, BOR objects, deployed UI5/Fiori apps (BSP, BSP_DEPLOY), and ABAP Platform 2025 server-driven objects (`DESD`, `EVTB`, `EVTO`, `DTSC`, `CSNM`, `COTA`). For "what does this object do?" use `SAPContext` first, then `SAPRead` for precise source. Enhancement implementations (`ENHO`) are readable on-prem and on BTP; authorization fields (`AUTH`) and feature toggles (`FEATURE_TOGGLE`) are on-prem only. Structured format for classes returns metadata + decomposed includes as JSON. Optional `grep` regex returns only matching source lines (+context, method-annotated for classes) for token-efficient search. (Deprecated aliases `MESSAGES`/`FTG2` accepted for one minor.) |
 | **SAPSearch** | Object search + full-text source code search across the system |
 | **SAPWrite** | Create/update/delete ABAP source and DDIC metadata with automatic lock/unlock (PROG, CLAS, INTF, FUNC, FUGR, INCL, DDLS, DCLS, DDLX, BDEF, SRVD, SRVB, SKTD/KTD, TABL, DOMA, DTEL, MSAG; availability adapts for BTP). Class updates can target local includes (`definitions`, `implementations`, `macros`, `testclasses`); class-section surgery (`edit_class_definition`, `add_method`, `edit_method_signature`, `delete_method`, `change_method_visibility`) lets an LLM edit a global class signature without re-sending `/source/main`; RAP behavior-pool scaffolding can auto-create `lhc_*` skeletons before injecting signatures/stubs. Batch creation supports terminal activation for interdependent multi-object workflows (e.g., RAP stack or domain+data element in one call) |
 | **SAPActivate** | Activate ABAP objects — single or batch (essential for RAP stacks), with guarded retry for the S/4HANA ED064 batch quirk. Publish/unpublish OData service bindings (SRVB) |
 | **SAPNavigate** | Go-to-definition, find references, code completion |
-| **SAPQuery** | Execute ABAP SQL with table-not-found suggestions and automatic chunking for simple long literal `IN (...)` lists |
+| **SAPQuery** | Read saved SAPscript long texts or execute ABAP SQL; each path requires its own opt-in |
 | **SAPTransport** | CTS transport management (list/get/create/release/delete/reassign/release-recursive), transport layer/target lookup, package transport requirement checks, and reverse lookup history (`action="history"`) |
 | **SAPGit** | Git-based ABAP workflows across gCTS and abapGit (list/clone/pull/push/commit/branch/unlink) with backend auto-selection and safety gating (`--allow-git-writes`) |
 | **SAPContext** | Dependency APIs (`action="deps"`): optional KTD plus bounded source-derived contracts, not a complete relationship inventory. Also supports live where-used (`action="usages"`), CDS impact (`action="impact"`), and TABL includes/appends (`action="structure"`) |
@@ -116,23 +119,26 @@ ARC-1 probes the SAP system at startup and adapts its behavior:
 
 ## ADT API Status and Strategy
 
-ARC-1 is a governed development-tooling proxy around ADT behavior — code checks, build/activate,
-transport management, AI-assisted ABAP authoring, Git workflows — not a bulk data-extraction product.
-It runs with real user identity, respects SAP authorization, and keeps audit and rate controls in place.
+For a custom MCP server such as ARC-1, SAP's
+[Third-Party MCP Access reference architecture](https://architecture.learning.sap.com/docs/ref-arch/137800)
+is the primary design and control baseline we recommend. For a shared service, start with BTP Cloud
+Foundry, XSUAA and strict principal propagation. SAP's API Policy FAQ Q56 allows custom MCP servers
+under conditions; Q32 confirms that Integration Suite is not mandatory.
 
-**Where this stands under SAP's API Policy is covered in full in
-[SAP API Policy & Architecture Alignment](docs_page/sap-api-policy-and-architecture.md)** — what
-[API Policy v.4.2026a](https://help.sap.com/doc/sap-api-policy/latest/en-US/API_Policy_latest.pdf) says
-clause by clause, why the ADT question is more nuanced than "undocumented API", where ARC-1 sits against
-SAP's reference architecture for third-party MCP access, and the specific questions to put to your SAP
-contact. Short version: **usable at your own risk, and worth asking SAP before production.**
+**[SAP API Policy & Architecture Alignment](docs_page/sap-api-policy-and-architecture.md)** explains
+that path, the controls ARC-1 already supports, and the remaining gaps. FAQ Q33 classifies ADT APIs
+as internal and limits them to endorsed development channels; ARC-1's direct TypeScript ADT client
+is not specifically identified as one. Clarify that channel and the intended AI-assisted development
+use with SAP before adoption, including dev/test. BTP hosting and security controls alone do not
+establish full policy adherence. Per-user SAP identity applies to PP; shared Basic modes retain a
+shared SAP identity.
 
 Two ARC-1 capabilities can expose business data or execute ad-hoc SQL. Both are **off by default** and require explicit opt-in env vars, so the operator makes a deliberate decision before they are reachable:
 
 | Capability | Env var | Default | Policy note |
 | ---------- | ------- | ------- | ----------- |
-| Named table content preview (`SAPRead(type=TABLE_CONTENTS)`) | `SAP_ALLOW_DATA_PREVIEW=true` | `false` (off) | Can expose application-table data; keep off unless the use case is approved. |
-| Freestyle ABAP SQL (`SAPQuery`) | `SAP_ALLOW_FREE_SQL=true` | `false` (off) | Executes ad-hoc ABAP SQL; keep off unless the use case is approved. |
+| Table previews (`SAPRead(type=TABLE_CONTENTS/TABLE_QUERY)`), [saved SAPscript texts](docs_page/tools.md#stored-sapscript-long-texts) and [SLG1 messages](docs_page/tools.md#saved-application-logs-actionapplication_log) (`SAPQuery` actions `long_text` / `application_log`) | `SAP_ALLOW_DATA_PREVIEW=true` | `false` (off) | Reads application data; authenticated callers also need `data` scope. |
+| Freestyle ABAP SQL (`SAPQuery(action=sql)`) | `SAP_ALLOW_FREE_SQL=true` | `false` (off) | Executes ad-hoc ABAP SQL; authenticated callers also need `sql` scope. |
 | Exact source blocklist (experimental) | `SAP_BLOCKED_DATA_SOURCES=USR02,PA0002` | empty (off) | Denies exact direct/transitive table or CDS dependencies; active mode is deliberately fail-closed and slower. |
 
 When either capability is enabled, successful data-preview bodies are limited cumulatively per tool
@@ -141,9 +147,13 @@ and serialization. `SAPQuery.maxRows` is separately clamped to 10,000, but wide
 byte limit much earlier. See [Configuration](docs_page/configuration-reference.md) before tuning
 `ARC1_MAX_DATAPREVIEW_RESPONSE_BYTES` or `ARC1_MAX_CONCURRENT_DATA_RESULTS`.
 
-With both flags at their defaults, ARC-1's data/sql rows are unreachable. Turning either flag on is a valid operational choice for approved scenarios, but it should be deliberate: check the current SAP API Policy, the customer's SAP agreement, SAP authorizations, and internal data-protection rules before enabling it on a productive system.
+With both flags at their defaults, ARC-1's data/sql rows are unreachable. FAQ Q33 excludes application-table
+reads, business-data export and backend SQL from ADT's intended development-tooling scope. Keep these
+flags off unless the specific use has a documented allowance or SAP authorization under the applicable
+agreements; internal approval or a technical opt-in alone is insufficient. Use Published business APIs
+for business-data integration.
 
-ARC-1's strategy is to stay close to documented and discoverable ADT behavior, probe system capabilities before exposing tools, keep conservative security defaults (writes off, data preview off, free SQL off, package allowlist `$TMP`), and continuously review SAP's guidance as it evolves. This README is not a compliance decision for any specific customer landscape, but the default posture is intended to support normal governed development use rather than block it.
+ARC-1 combines capability discovery with conservative defaults and centralized authorization. Discovery establishes technical availability, not API-policy permission. Follow the reference architecture and verify both the API-specific allowance and the deployed controls.
 
 ## Versioning & Stability
 

package/bin/arc1-source.js

@@ -0,0 +1,83 @@
+#!/usr/bin/env node
+/** Local source transfer helper. No SAP connection or ARC-1 configuration is loaded. */
+import { createHash } from 'node:crypto';
+import { closeSync, constants, fstatSync, openSync, readSync } from 'node:fs';
+
+const SOURCE_LIMIT = 200_000;
+const ENVELOPE_LIMIT = 300_000;
+
+function readBounded(fd, limit) {
+  const bytes = Buffer.alloc(limit + 1);
+  let size = 0;
+  while (size < bytes.length) {
+    const count = readSync(fd, bytes, size, bytes.length - size, null);
+    if (count === 0) break;
+    size += count;
+  }
+  if (size > limit) throw new Error(`Input exceeds ${limit} bytes; use a smaller source part.`);
+  return bytes.subarray(0, size);
+}
+
+function decode(bytes) {
+  return new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(bytes);
+}
+
+function inspect(source) {
+  if (typeof source !== 'string' || !source || source.includes('\0'))
+    throw new Error('Source must be non-empty UTF-8 text without NUL characters.');
+  if (source.startsWith('\ufeff'))
+    throw new Error('Source starts with a UTF-8 BOM; save the file as UTF-8 without BOM.');
+  const bytes = Buffer.from(source, 'utf8');
+  // JSON can contain lone surrogates; never silently replace them during verification.
+  if (decode(bytes) !== source) throw new Error('Source contains invalid Unicode.');
+  if (bytes.length > SOURCE_LIMIT) throw new Error(`Source exceeds ${SOURCE_LIMIT} bytes.`);
+  return { sourceBytes: bytes.length, sourceSha256: createHash('sha256').update(bytes).digest('hex') };
+}
+
+function readFile(path) {
+  // Non-blocking open lets us refuse FIFOs instead of waiting for a writer on POSIX.
+  const fd = openSync(path, constants.O_RDONLY | (constants.O_NONBLOCK ?? 0));
+  try {
+    const stat = fstatSync(fd);
+    if (!stat.isFile()) throw new Error('Source path must be a regular file.');
+    if (stat.size > SOURCE_LIMIT) throw new Error(`Source exceeds ${SOURCE_LIMIT} bytes.`);
+    const source = decode(readBounded(fd, SOURCE_LIMIT));
+    return { source, ...inspect(source) };
+  } finally {
+    closeSync(fd);
+  }
+}
+
+function verify(envelope) {
+  if (!envelope || typeof envelope !== 'object' || Array.isArray(envelope))
+    throw new Error('Expected a source envelope.');
+  const actual = inspect(envelope.source);
+  if (envelope.sourceBytes !== actual.sourceBytes || envelope.sourceSha256 !== actual.sourceSha256)
+    throw new Error('Source integrity mismatch; refuse SAPWrite.');
+  return { verified: true, ...actual };
+}
+
+function readEnvelope() {
+  const input = decode(readBounded(0, ENVELOPE_LIMIT));
+  try {
+    return JSON.parse(input);
+  } catch {
+    // JSON parser errors can include source excerpts; do not echo them.
+    throw new Error('Invalid source envelope JSON.');
+  }
+}
+
+try {
+  const [command, path, ...extra] = process.argv.slice(2);
+  let result;
+  if (command === 'read' && path && extra.length === 0) result = readFile(path);
+  else if (command === 'verify' && path === undefined) result = verify(readEnvelope());
+  else throw new Error('Usage: arc1-source read FILE | arc1-source verify < envelope.json');
+  const json = JSON.stringify(result);
+  if (Buffer.byteLength(json) + 1 > ENVELOPE_LIMIT)
+    throw new Error(`Encoded envelope exceeds ${ENVELOPE_LIMIT} bytes.`);
+  process.stdout.write(`${json}\n`);
+} catch (error) {
+  process.stderr.write(`arc1-source: ${error instanceof Error ? error.message : 'Source transfer failed'}\n`);
+  process.exitCode = 1;
+}

package/dist/adt/accept-fallback.d.ts

@@ -0,0 +1,4 @@
+/** Text-part PUTs use 406 for application errors too. SADT_RESOURCE identifies
+ * framework negotiation; changing Accept cannot fix a structured application error. */
+export declare function acceptFallback(body: string, accept: string | undefined, method: string, path: string): string | undefined;
+//# sourceMappingURL=accept-fallback.d.ts.map

package/dist/adt/accept-fallback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accept-fallback.d.ts","sourceRoot":"","sources":["../../src/adt/accept-fallback.ts"],"names":[],"mappings":"AAEA;uFACuF;AACvF,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,SAAS,CAyBpB"}

package/dist/adt/accept-fallback.js

@@ -0,0 +1,27 @@
+import { AdtApiError } from './errors.js';
+/** Text-part PUTs use 406 for application errors too. SADT_RESOURCE identifies
+ * framework negotiation; changing Accept cannot fix a structured application error. */
+export function acceptFallback(body, accept, method, path) {
+    if (method === 'PUT' &&
+        /^\/sap\/bc\/adt\/textelements\/(classes|programs|functiongroups)\/[^/]+\/source\/(symbols|selections|headings)$/.test(path)) {
+        const props = AdtApiError.extractProperties(body);
+        const id = props['T100KEY-ID'] ?? props['T100KEY-MSGID'];
+        if (id && id !== 'SADT_RESOURCE')
+            return undefined;
+    }
+    const inferred = body.match(/application\/[\w.+-]+(?:\/[\w.+-]+)?/)?.[0];
+    if (inferred && inferred !== accept)
+        return inferred;
+    // SAP_BASIS 755 accepts v1 binding XML but rejects v2 without listing an accepted type (#991).
+    if (method === 'GET' &&
+        /^\/sap\/bc\/adt\/businessservices\/bindings\/[^/]+$/.test(path) &&
+        accept === 'application/vnd.sap.adt.businessservices.servicebinding.v2+xml') {
+        return 'application/vnd.sap.adt.businessservices.servicebinding.v1+xml';
+    }
+    if (accept && accept !== '*/*' && accept !== 'application/xml')
+        return 'application/xml';
+    if (accept === 'application/xml')
+        return '*/*';
+    return undefined;
+}
+//# sourceMappingURL=accept-fallback.js.map

package/dist/adt/accept-fallback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accept-fallback.js","sourceRoot":"","sources":["../../src/adt/accept-fallback.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;uFACuF;AACvF,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,MAA0B,EAC1B,MAAc,EACd,IAAY;IAEZ,IACE,MAAM,KAAK,KAAK;QAChB,iHAAiH,CAAC,IAAI,CACpH,IAAI,CACL,EACD,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACzD,IAAI,EAAE,IAAI,EAAE,KAAK,eAAe;YAAE,OAAO,SAAS,CAAC;IACrD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IACrD,+FAA+F;IAC/F,IACE,MAAM,KAAK,KAAK;QAChB,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC;QAChE,MAAM,KAAK,gEAAgE,EAC3E,CAAC;QACD,OAAO,gEAAgE,CAAC;IAC1E,CAAC;IACD,IAAI,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,iBAAiB;QAAE,OAAO,iBAAiB,CAAC;IACzF,IAAI,MAAM,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/adt/api-release.d.ts

@@ -0,0 +1,40 @@
+import type { AdtHttpClient } from './http.js';
+import type { ApiReleaseStateInfo } from './types.js';
+/**
+ * Parse API release state XML from /sap/bc/adt/apireleases/{encoded-uri}.
+ *
+ * Returns structured release info with per-contract states (C0–C4),
+ * successor information, and catalog metadata.
+ *
+ * Expected root: element with releasableObject, c0Release–c4Release, apiCatalogData.
+ */
+export declare function parseApiReleaseState(xml: string): ApiReleaseStateInfo;
+export declare function assertApiReleaseStateConfirmed(info: ApiReleaseStateInfo, contract: string, expectedState: string, expectedVisibility?: {
+    useInSAPCloudPlatform: boolean;
+    useInKeyUserApps: boolean;
+}): void;
+/**
+ * Build the PUT body that sets an object's API release contract `state` (RELEASED / NOT_RELEASED).
+ *
+ * The apireleases GET (v10) returns a rich document, but the PUT to `…/apireleases/{uri}/{contract}`
+ * accepts only a NARROW, strictly-ordered subset — live reverse-engineered on a4h 758 + 816: the
+ * standalone contract block (`ars:contract="C1"`) carrying `status` + the successor scaffold, plus
+ * a sibling `apiCatalogData`/`ApiCatalogs` envelope. Response-only nodes (`atom:link`,
+ * `stateTransitions`, `transportObject`, `authValueObject`) are rejected with HTTP 400.
+ *
+ * Omitted visibility uses the contract's native defaults. Explicit selections respect its
+ * ReadOnly flags; other requirements remain native SAP validation (C0–C4 differ).
+ * NOT_RELEASED retains visibility. No fallback invents exposure.
+ */
+export declare const API_RELEASE_VISIBILITIES: readonly ['cloudDevelopment', 'keyUserApps'];
+export type ApiReleaseVisibility = (typeof API_RELEASE_VISIBILITIES)[number][];
+export declare function buildApiReleasePutBody(getXml: string, contract: string, state: string, visibility?: ApiReleaseVisibility): string;
+export declare function setApiReleaseState(http: AdtHttpClient, objectUri: string, opts: {
+    state?: string;
+    contract?: string;
+    transport?: string;
+    visibility?: ApiReleaseVisibility;
+}): Promise<ApiReleaseStateInfo & {
+    changed: boolean;
+}>;
+//# sourceMappingURL=api-release.d.ts.map

package/dist/adt/api-release.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-release.d.ts","sourceRoot":"","sources":["../../src/adt/api-release.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,KAAK,EAAsB,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAG1E;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,CAoDrE;AAED,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,mBAAmB,EACzB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,kBAAkB,CAAC,EAAE;IAAE,qBAAqB,EAAE,OAAO,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAA;CAAE,GACjF,IAAI,CAmBN;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,wBAAwB,YAAI,kBAAkB,EAAE,aAAa,CAAU,CAAC;AACrF,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;AAE/E,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,oBAAoB,GAChC,MAAM,CAuER;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,aAAa,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,oBAAoB,CAAA;CAAE,GACjG,OAAO,CAAC,mBAAmB,GAAG;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAwErD"}

package/dist/adt/api-release.js

@@ -0,0 +1,224 @@
+import { AdtApiError, AdtError } from './errors.js';
+import { parseXml } from './xml-parser.js';
+/**
+ * Parse API release state XML from /sap/bc/adt/apireleases/{encoded-uri}.
+ *
+ * Returns structured release info with per-contract states (C0–C4),
+ * successor information, and catalog metadata.
+ *
+ * Expected root: element with releasableObject, c0Release–c4Release, apiCatalogData.
+ */
+export function parseApiReleaseState(xml) {
+    const parsed = parseXml(xml);
+    // The root element name varies — find the first non-declaration key
+    const rootKey = Object.keys(parsed).find((k) => !k.startsWith('?'));
+    const root = (rootKey ? parsed[rootKey] : parsed);
+    // releasableObject attrs
+    const relObj = (root.releasableObject ?? {});
+    // Parse C0–C4 contract releases
+    const contracts = [];
+    for (const key of ['c0Release', 'c1Release', 'c2Release', 'c3Release', 'c4Release']) {
+        const release = root[key];
+        if (!release)
+            continue;
+        const status = (release.status ?? {});
+        const successorsContainer = release.successors;
+        const successorArr = [];
+        if (successorsContainer) {
+            const succs = Array.isArray(successorsContainer.successor)
+                ? successorsContainer.successor
+                : successorsContainer.successor
+                    ? [successorsContainer.successor]
+                    : [];
+            for (const s of succs) {
+                successorArr.push({
+                    uri: String(s['@_uri'] ?? ''),
+                    type: String(s['@_type'] ?? ''),
+                    name: String(s['@_name'] ?? ''),
+                });
+            }
+        }
+        contracts.push({
+            contract: String(release['@_contract'] ?? key.replace('Release', '').toUpperCase()),
+            state: String(status['@_state'] ?? ''),
+            stateDescription: String(status['@_stateDescription'] ?? ''),
+            useInKeyUserApps: String(release['@_useInKeyUserApps'] ?? 'false') === 'true',
+            useInSAPCloudPlatform: String(release['@_useInSAPCloudPlatform'] ?? 'false') === 'true',
+            successors: successorArr,
+        });
+    }
+    // apiCatalogData attrs
+    const catalog = (root.apiCatalogData ?? {});
+    return {
+        objectUri: String(relObj['@_uri'] ?? ''),
+        objectType: String(relObj['@_type'] ?? ''),
+        objectName: String(relObj['@_name'] ?? ''),
+        contracts,
+        isAnyContractReleased: String(catalog['@_isAnyContractReleased'] ?? 'false') === 'true',
+        isAnyAssignmentPossible: String(catalog['@_isAnyAssignmentPossible'] ?? 'false') === 'true',
+    };
+}
+export function assertApiReleaseStateConfirmed(info, contract, expectedState, expectedVisibility) {
+    const c = contract.toUpperCase();
+    const confirmedContract = info.contracts.find((release) => release.contract.toUpperCase() === c);
+    if (!confirmedContract) {
+        throw new Error(`API release contract ${c} read-back did not include the contract after PUT.`);
+    }
+    if (confirmedContract.state !== expectedState) {
+        throw new Error(`API release contract ${c} read-back state is ${confirmedContract.state || '(missing)'}, expected ${expectedState}.`);
+    }
+    if (expectedState === 'RELEASED' &&
+        expectedVisibility &&
+        (confirmedContract.useInSAPCloudPlatform !== expectedVisibility.useInSAPCloudPlatform ||
+            confirmedContract.useInKeyUserApps !== expectedVisibility.useInKeyUserApps)) {
+        throw new Error(`API release contract ${c} read-back visibility does not match the requested visibility.`);
+    }
+}
+/**
+ * Build the PUT body that sets an object's API release contract `state` (RELEASED / NOT_RELEASED).
+ *
+ * The apireleases GET (v10) returns a rich document, but the PUT to `…/apireleases/{uri}/{contract}`
+ * accepts only a NARROW, strictly-ordered subset — live reverse-engineered on a4h 758 + 816: the
+ * standalone contract block (`ars:contract="C1"`) carrying `status` + the successor scaffold, plus
+ * a sibling `apiCatalogData`/`ApiCatalogs` envelope. Response-only nodes (`atom:link`,
+ * `stateTransitions`, `transportObject`, `authValueObject`) are rejected with HTTP 400.
+ *
+ * Omitted visibility uses the contract's native defaults. Explicit selections respect its
+ * ReadOnly flags; other requirements remain native SAP validation (C0–C4 differ).
+ * NOT_RELEASED retains visibility. No fallback invents exposure.
+ */
+export const API_RELEASE_VISIBILITIES = ['cloudDevelopment', 'keyUserApps'];
+export function buildApiReleasePutBody(getXml, contract, state, visibility) {
+    const c = contract.toUpperCase();
+    const targetState = state.toUpperCase();
+    if (targetState !== 'RELEASED' && targetState !== 'NOT_RELEASED') {
+        throw new Error(`API release state must be RELEASED or NOT_RELEASED, got ${state}.`);
+    }
+    if (visibility !== undefined &&
+        (targetState !== 'RELEASED' ||
+            !Array.isArray(visibility) ||
+            visibility.some((value) => !API_RELEASE_VISIBILITIES.includes(value)) ||
+            new Set(visibility).size !== visibility.length)) {
+        throw new Error('apiVisibility must contain unique cloudDevelopment/keyUserApps selections and requires RELEASED.');
+    }
+    const tag = `c${c.slice(1)}Release`; // 'C1' -> 'c1Release'
+    // The behaviour block lists the *Default visibility flags (self-closing element with "Default" attrs).
+    const behaviour = new RegExp(`<ars:${tag}\\b([^>]*Default[^>]*)/>`).exec(getXml)?.[1] ?? '';
+    const cloudDefault = /useInSAPCloudPlatformDefault="true"/.test(behaviour);
+    const keyUserDefault = /useInKeyUserAppsDefault="true"/.test(behaviour);
+    // The standalone contract block's opening tag (has ars:contract="<C>").
+    const openTagMatch = new RegExp(`<ars:${tag}\\b[^>]*\\bars:contract="${c}"[^>]*>`).exec(getXml);
+    if (!openTagMatch) {
+        // Only the contracts the object type supports appear as settable `ars:contract="Cn"` blocks
+        // (e.g. SRVD supports only C0, classic VIEW only C3) — list them so the caller can retry.
+        const supported = [...new Set([...getXml.matchAll(/ars:contract="(C\d)"/g)].map((m) => m[1]))];
+        const hint = supported.length ? ` This object supports: ${supported.join(', ')}.` : '';
+        throw new Error(`API release contract ${c} is not available for this object.${hint}`);
+    }
+    let openTag = openTagMatch[0];
+    if (targetState === 'RELEASED') {
+        // Set both visibility flags from the contract's own defaults — both-false stays both-false (no
+        // invented exposure); SAP decides whether that's acceptable for this contract.
+        const setAttr = (tagText, attr, value) => {
+            const rendered = `${attr}="${value}"`;
+            return new RegExp(`\\b${attr}="[^"]*"`).test(tagText)
+                ? tagText.replace(new RegExp(`\\b${attr}="[^"]*"`), rendered)
+                : tagText.replace(/>$/, ` ${rendered}>`);
+        };
+        const selected = (selection, attribute, fallback) => {
+            if (visibility === undefined)
+                return fallback;
+            const requested = visibility.includes(selection);
+            const readOnly = new RegExp(`\\b${attribute}ReadOnly="(true|false)"`).exec(behaviour)?.[1];
+            const current = new RegExp(`\\b${attribute}="(true|false)"`).exec(openTagMatch[0])?.[1];
+            const defaultKnown = new RegExp(`\\b${attribute}Default="(?:true|false)"`).test(behaviour);
+            if (readOnly === undefined || current === undefined || !defaultKnown) {
+                throw new Error(`API release contract ${c} has no complete ${selection} visibility metadata.`);
+            }
+            if (readOnly === 'true' && requested !== (current === 'true') && requested !== fallback) {
+                throw new Error(`API release contract ${c} marks ${selection} visibility read-only.`);
+            }
+            return requested;
+        };
+        openTag = setAttr(openTag, 'ars:useInSAPCloudPlatform', selected('cloudDevelopment', 'useInSAPCloudPlatform', cloudDefault));
+        openTag = setAttr(openTag, 'ars:useInKeyUserApps', selected('keyUserApps', 'useInKeyUserApps', keyUserDefault));
+    }
+    const contractBlock = `${openTag}<ars:status ars:state="${targetState}"/>` +
+        '<ars:useConceptAsSuccessor>false</ars:useConceptAsSuccessor><ars:successors/><ars:successorConceptName/>' +
+        `</ars:${tag}>`;
+    return ('<?xml version="1.0" encoding="utf-8"?>' +
+        '<ars:apiRelease xmlns:ars="http://www.sap.com/adt/ars" xmlns:adtcore="http://www.sap.com/adt/core">' +
+        contractBlock +
+        '<ars:apiCatalogData ars:isAnyAssignmentPossible="true" ars:isAnyContractReleased="true"><ars:ApiCatalogs/></ars:apiCatalogData>' +
+        '</ars:apiRelease>');
+}
+export async function setApiReleaseState(http, objectUri, opts) {
+    const state = (opts.state ?? 'RELEASED').toUpperCase();
+    const contract = (opts.contract ?? 'C1').toUpperCase();
+    if (state !== 'RELEASED' && state !== 'NOT_RELEASED') {
+        throw new Error(`apiState must be RELEASED or NOT_RELEASED, got ${opts.state}.`);
+    }
+    const accept = 'application/vnd.sap.adt.apirelease.v10+xml';
+    const encoded = encodeURIComponent(objectUri);
+    const current = await http.get(`/sap/bc/adt/apireleases/${encoded}`, { Accept: accept });
+    const body = buildApiReleasePutBody(current.body, contract, state, opts.visibility);
+    const path = `/sap/bc/adt/apireleases/${encoded}/${contract.toLowerCase()}`;
+    const expectedVisibility = {
+        useInSAPCloudPlatform: /ars:useInSAPCloudPlatform="true"/.test(body),
+        useInKeyUserApps: /ars:useInKeyUserApps="true"/.test(body),
+    };
+    let changed = true;
+    try {
+        await http.put(opts.transport ? `${path}?request=${encodeURIComponent(opts.transport)}` : path, body, accept, {
+            Accept: accept,
+        });
+    }
+    catch (err) {
+        // SAP returns 400 "No changes were made" when the contract is already in the requested state.
+        // Treat that as an idempotent no-op (the desired state already holds — confirmed via read-back
+        // below) rather than surfacing a confusing error for "release something already released".
+        if (err instanceof AdtApiError &&
+            err.statusCode === 400 &&
+            /no changes were made/i.test(`${err.message} ${err.responseBody ?? ''}`)) {
+            changed = false;
+        }
+        else {
+            throw err;
+        }
+    }
+    // The PUT outcome stands: a read-back that cannot confirm it must not look like a refused request.
+    const unconfirmed = `SAP ${changed ? 'accepted' : 'reported no change for'} the ${contract} ${state} request for ${objectUri}, ` +
+        'but the read-back did not confirm it, so the resulting state is unconfirmed. ' +
+        'Read SAPRead(type="API_STATE") for this object before retrying or deleting it.';
+    let confirmed;
+    try {
+        confirmed = parseApiReleaseState((await http.get(`/sap/bc/adt/apireleases/${encoded}`, { Accept: accept })).body);
+    }
+    catch (error) {
+        if (error instanceof AdtError)
+            error.extraHint = error.extraHint ? `${unconfirmed}\n${error.extraHint}` : unconfirmed;
+        else if (error instanceof Error)
+            error.message = `${unconfirmed} ${error.message}`;
+        throw error;
+    }
+    const result = confirmed.contracts.find((release) => release.contract.toUpperCase() === contract);
+    if (!result)
+        throw new Error(`API release contract ${contract} is missing from the read-back. ${unconfirmed}`);
+    // On a real write, assert the full target (state + requested visibility). On an idempotent no-op,
+    // explicit selections still require exact visibility; omission keeps the existing state-only no-op check.
+    try {
+        assertApiReleaseStateConfirmed(confirmed, contract, state, changed || opts.visibility !== undefined ? expectedVisibility : undefined);
+    }
+    catch (error) {
+        // A failed postcondition does not undo SAP's PUT. Expose the actual state so callers
+        // can reconcile an applied release instead of treating this as a rejected mutation.
+        throw new Error(`${error instanceof Error ? error.message : String(error)} ` +
+            `Confirmed SAP result: ${JSON.stringify({ ...confirmed, changed })}.` +
+            (result.state === 'RELEASED'
+                ? ` If the release is unintended, call SAPManage set_api_state with objectUri="${objectUri}", ` +
+                    `contract="${contract}" and apiState="NOT_RELEASED"; verify API_STATE before deleting the object.`
+                : ''));
+    }
+    return { ...confirmed, changed };
+}
+//# sourceMappingURL=api-release.js.map

package/dist/adt/api-release.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-release.js","sourceRoot":"","sources":["../../src/adt/api-release.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGpD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,oEAAoE;IACpE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAA4B,CAAC;IAE7E,yBAAyB;IACzB,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAA4B,CAAC;IAExE,gCAAgC;IAChC,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;QACpF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAwC,CAAC;QACjE,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;QACjE,MAAM,mBAAmB,GAAG,OAAO,CAAC,UAAiD,CAAC;QACtF,MAAM,YAAY,GAAuD,EAAE,CAAC;QAC5E,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC;gBACxD,CAAC,CAAE,mBAAmB,CAAC,SAA4C;gBACnE,CAAC,CAAC,mBAAmB,CAAC,SAAS;oBAC7B,CAAC,CAAC,CAAC,mBAAmB,CAAC,SAAoC,CAAC;oBAC5D,CAAC,CAAC,EAAE,CAAC;YACT,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,YAAY,CAAC,IAAI,CAAC;oBAChB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;oBAC7B,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAC/B,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;iBAChC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,SAAS,CAAC,IAAI,CAAC;YACb,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACnF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACtC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;YAC5D,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,OAAO,CAAC,KAAK,MAAM;YAC7E,qBAAqB,EAAE,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,OAAO,CAAC,KAAK,MAAM;YACvF,UAAU,EAAE,YAAY;SACzB,CAAC,CAAC;IACL,CAAC;IAED,uBAAuB;IACvB,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAA4B,CAAC;IAEvE,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACxC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1C,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1C,SAAS;QACT,qBAAqB,EAAE,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,OAAO,CAAC,KAAK,MAAM;QACvF,uBAAuB,EAAE,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,IAAI,OAAO,CAAC,KAAK,MAAM;KAC5F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,IAAyB,EACzB,QAAgB,EAChB,aAAqB,EACrB,kBAAkF;IAElF,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;IACjG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,oDAAoD,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,iBAAiB,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,wBAAwB,CAAC,uBAAuB,iBAAiB,CAAC,KAAK,IAAI,WAAW,cAAc,aAAa,GAAG,CACrH,CAAC;IACJ,CAAC;IACD,IACE,aAAa,KAAK,UAAU;QAC5B,kBAAkB;QAClB,CAAC,iBAAiB,CAAC,qBAAqB,KAAK,kBAAkB,CAAC,qBAAqB;YACnF,iBAAiB,CAAC,gBAAgB,KAAK,kBAAkB,CAAC,gBAAgB,CAAC,EAC7E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,gEAAgE,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,kBAAkB,EAAE,aAAa,CAAU,CAAC;AAGrF,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,QAAgB,EAChB,KAAa,EACb,UAAiC;IAEjC,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,WAAW,KAAK,UAAU,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,2DAA2D,KAAK,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,IACE,UAAU,KAAK,SAAS;QACxB,CAAC,WAAW,KAAK,UAAU;YACzB,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAC1B,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACrE,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,CAAC,EACjD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAC;IACtH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,sBAAsB;IAC3D,uGAAuG;IACvG,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,QAAQ,GAAG,0BAA0B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5F,MAAM,YAAY,GAAG,qCAAqC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3E,MAAM,cAAc,GAAG,gCAAgC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxE,wEAAwE;IACxE,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,QAAQ,GAAG,4BAA4B,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,4FAA4F;QAC5F,0FAA0F;QAC1F,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;QAC/B,+FAA+F;QAC/F,+EAA+E;QAC/E,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,IAAY,EAAE,KAAc,EAAU,EAAE;YACxE,MAAM,QAAQ,GAAG,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC;YACtC,OAAO,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;gBACnD,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC,EAAE,QAAQ,CAAC;gBAC7D,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,QAAQ,GAAG,CAAC,CAAC;QAC7C,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,SAA6C,EAAE,SAAiB,EAAE,QAAiB,EAAW,EAAE;YAChH,IAAI,UAAU,KAAK,SAAS;gBAAE,OAAO,QAAQ,CAAC;YAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACjD,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,MAAM,SAAS,yBAAyB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3F,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,MAAM,SAAS,iBAAiB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACxF,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,MAAM,SAAS,0BAA0B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3F,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,YAAY,EAAE,CAAC;gBACrE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,oBAAoB,SAAS,uBAAuB,CAAC,CAAC;YACjG,CAAC;YACD,IAAI,QAAQ,KAAK,MAAM,IAAI,SAAS,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;gBACxF,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,UAAU,SAAS,wBAAwB,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,OAAO,GAAG,OAAO,CACf,OAAO,EACP,2BAA2B,EAC3B,QAAQ,CAAC,kBAAkB,EAAE,uBAAuB,EAAE,YAAY,CAAC,CACpE,CAAC;QACF,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,sBAAsB,EAAE,QAAQ,CAAC,aAAa,EAAE,kBAAkB,EAAE,cAAc,CAAC,CAAC,CAAC;IAClH,CAAC;IACD,MAAM,aAAa,GACjB,GAAG,OAAO,0BAA0B,WAAW,KAAK;QACpD,0GAA0G;QAC1G,SAAS,GAAG,GAAG,CAAC;IAClB,OAAO,CACL,wCAAwC;QACxC,qGAAqG;QACrG,aAAa;QACb,iIAAiI;QACjI,mBAAmB,CACpB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAmB,EACnB,SAAiB,EACjB,IAAkG;IAElG,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,MAAM,GAAG,4CAA4C,CAAC;IAC5D,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,2BAA2B,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,2BAA2B,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;IAC5E,MAAM,kBAAkB,GAAG;QACzB,qBAAqB,EAAE,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC;QACpE,gBAAgB,EAAE,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;KAC3D,CAAC;IACF,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,YAAY,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YAC5G,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,8FAA8F;QAC9F,+FAA+F;QAC/F,2FAA2F;QAC3F,IACE,GAAG,YAAY,WAAW;YAC1B,GAAG,CAAC,UAAU,KAAK,GAAG;YACtB,uBAAuB,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC,EACxE,CAAC;YACD,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IACD,mGAAmG;IACnG,MAAM,WAAW,GACf,OAAO,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,wBAAwB,QAAQ,QAAQ,IAAI,KAAK,gBAAgB,SAAS,IAAI;QAC5G,+EAA+E;QAC/E,gFAAgF,CAAC;IACnF,IAAI,SAA8B,CAAC;IACnC,IAAI,CAAC;QACH,SAAS,GAAG,oBAAoB,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,2BAA2B,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACpH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,QAAQ;YAC3B,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,WAAW,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;aACpF,IAAI,KAAK,YAAY,KAAK;YAAE,KAAK,CAAC,OAAO,GAAG,GAAG,WAAW,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnF,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,CAAC;IAClG,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,mCAAmC,WAAW,EAAE,CAAC,CAAC;IAC/G,kGAAkG;IAClG,0GAA0G;IAC1G,IAAI,CAAC;QACH,8BAA8B,CAC5B,SAAS,EACT,QAAQ,EACR,KAAK,EACL,OAAO,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAC1E,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qFAAqF;QACrF,oFAAoF;QACpF,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG;YAC1D,yBAAyB,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,GAAG;YACrE,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU;gBAC1B,CAAC,CAAC,+EAA+E,SAAS,KAAK;oBAC7F,aAAa,QAAQ,6EAA6E;gBACpG,CAAC,CAAC,EAAE,CAAC,CACV,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC"}

package/dist/adt/application-log.d.ts

@@ -0,0 +1,36 @@
+import type { AdtClient } from './client.js';
+export interface ApplicationLogInput {
+    logNumber: string;
+    maxRows?: number;
+    offset?: number;
+}
+export declare function readApplicationLog(client: AdtClient, input: ApplicationLogInput): Promise<{
+    status: 'not_found_or_not_visible';
+    logNumber: string;
+    message: string;
+} | {
+    message?: undefined;
+    status: 'ok';
+    logNumber: string;
+    header: {
+        object: string;
+        subobject: string;
+        externalNumber: string;
+        severity: string;
+        createdAt: string;
+    };
+    offset: number;
+    messages: {
+        number: string;
+        type: string;
+        text: string;
+        timestamp: string;
+        hasLongText: boolean;
+        hasDetails: boolean;
+    }[];
+    more: boolean;
+    nextOffset?: number | undefined;
+    limitReached?: boolean | undefined;
+    snapshotGuaranteed: boolean;
+}>;
+//# sourceMappingURL=application-log.d.ts.map

package/dist/adt/application-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-log.d.ts","sourceRoot":"","sources":["../../src/adt/application-log.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAM7C,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AA8BD,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB;YAoDtE,0BAA0B;;;;;YAqC5B,IAAI;;;QAGV,MAAM;QACN,SAAS;QACT,cAAc;QACd,QAAQ;QACR,SAAS;;;;;;;;;;;;;;;GAoBhB"}