arc-1 1.6.0 → 1.8.0

package/dist/adt/package-browser.js

@@ -0,0 +1,139 @@
+/** Direct native package contents; never used as write-authorization evidence. */
+import { XMLValidator } from 'fast-xml-parser';
+import { getCurrentContext } from '../server/context.js';
+import { DataResponseBudget } from './data-result-context.js';
+import { AdtError } from './errors.js';
+import { throwIfRequestCancelled } from './http-deadline.js';
+import { DIRECT_PACKAGE_NAME, DIRECT_PACKAGE_TYPE } from './package-contents.js';
+import { canonicalHostRelativeAdtPath } from './path-safety.js';
+import { RequestAttemptBudget } from './request-attempt-budget.js';
+import { clampUrlLimit } from './result-limits.js';
+import { checkOperation, OperationType } from './safety.js';
+import { parseXml } from './xml-parser.js';
+const invalid = () => new AdtError('Invalid native package-tree response; no listing was returned.');
+const ambiguous = () => new AdtError('SAP returned no package-tree evidence. The package may be empty, missing or inaccessible. ' +
+    'Verify the exact package name in SAP ADT; this response cannot establish an empty package.');
+function record(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw invalid();
+    return value;
+}
+function rows(value, key) {
+    if (value === '')
+        return [];
+    const container = record(value);
+    if (!Object.hasOwn(container, key))
+        throw invalid();
+    return (Array.isArray(container[key]) ? container[key] : [container[key]]).map(record);
+}
+function scalar(value, allowEmpty = false) {
+    if (typeof value !== 'string' || (!allowEmpty && !value.trim()))
+        throw invalid();
+    return value;
+}
+function parseTree(xml, root) {
+    if (!xml.trim())
+        throw root ? ambiguous() : invalid();
+    if (XMLValidator.validate(xml) !== true || /<!DOCTYPE/i.test(xml))
+        throw invalid();
+    const values = record(record(parseXml(xml).abap).values).DATA;
+    if (!Array.isArray(values) || values.length !== 1)
+        throw invalid();
+    const data = record(values[0]);
+    const objects = rows(data.TREE_CONTENT, 'SEU_ADT_REPOSITORY_OBJ_NODE').map((node) => {
+        const type = scalar(node.OBJECT_TYPE);
+        const name = scalar(node.OBJECT_NAME);
+        const uri = scalar(node.OBJECT_URI, true);
+        if (!DIRECT_PACKAGE_TYPE.test(type) || (!root && type === 'DEVC/K'))
+            throw invalid();
+        if (uri && !canonicalHostRelativeAdtPath(uri, '/sap/bc/adt/', { allowRawEncodedSlash: true }))
+            throw invalid();
+        return { type, name, uri };
+    });
+    // Expansion OBJECT_TYPES contains object IDs too; only root IDs may drive a request.
+    const folders = root
+        ? rows(data.OBJECT_TYPES, 'SEU_ADT_OBJECT_TYPE_INFO').map((node) => {
+            const type = scalar(node.OBJECT_TYPE);
+            const id = scalar(node.NODE_ID);
+            if (!DIRECT_PACKAGE_TYPE.test(type) || !/^\d{6}$/.test(id) || id === '000000')
+                throw invalid();
+            return { type, id };
+        })
+        : [];
+    if (root && !objects.length && !folders.length)
+        throw ambiguous();
+    return { objects, folders };
+}
+export async function getDirectPackageContents(http, safety, packageName, maxResults, objectType) {
+    checkOperation(safety, OperationType.Read, 'GetPackage');
+    if (!DIRECT_PACKAGE_NAME.test(packageName))
+        throw new AdtError('Direct package browsing requires an exact package name (1–30 characters).');
+    if (objectType !== undefined && !DIRECT_PACKAGE_TYPE.test(objectType))
+        throw new AdtError('Use an exact advertised package folder type, for example CLAS/OC.');
+    const request = {
+        deadline: Date.now() + 10_000,
+        signal: getCurrentContext()?.signal,
+        responseBudget: new DataResponseBudget(2 * 1024 * 1024, 'package-browser'),
+        attemptBudget: new RequestAttemptBudget(8),
+        retryTransientErrors: false,
+    };
+    const encoded = encodeURIComponent(packageName.toUpperCase());
+    const path = '/sap/bc/adt/repository/nodestructure' +
+        `?parent_type=DEVC%2FK&parent_name=${encoded}&parent_tech_name=${encoded}&withShortDescriptions=false`;
+    const read = async (ids, root) => {
+        throwIfRequestCancelled(request);
+        const body = '<?xml version="1.0" encoding="UTF-8"?>' +
+            '<asx:abap xmlns:asx="http://www.sap.com/abapxml" version="1.0"><asx:values><DATA>' +
+            ids.map((id) => `<TV_NODEKEY>${id}</TV_NODEKEY>`).join('') +
+            '</DATA></asx:values></asx:abap>';
+        const response = await http.post(path, body, 'application/vnd.sap.as+xml; charset=UTF-8; dataname=null', { Accept: 'application/vnd.sap.as+xml' }, request);
+        throwIfRequestCancelled(request);
+        return parseTree(response.body, root);
+    };
+    const root = await read(['000000'], true);
+    if (objectType && !root.folders.some((folder) => folder.type === objectType)) {
+        throw new AdtError(`Package folder ${objectType} is not advertised. Available types: ${[...new Set(root.folders.map((folder) => folder.type))].join(', ') || 'none'}.`);
+    }
+    const ids = [];
+    for (const folder of root.folders) {
+        if (folder.type === 'DEVC/K' || (objectType && folder.type !== objectType))
+            continue;
+        if (!ids.includes(folder.id) && ids.length < 16)
+            ids.push(folder.id);
+    }
+    const unexpandedTypes = [
+        ...new Set(root.folders
+            .filter((folder) => folder.type !== 'DEVC/K' && !ids.includes(folder.id))
+            .map((folder) => folder.type)),
+    ];
+    const expanded = ids.length ? (await read(ids, false)).objects : [];
+    if (!ids.length && !root.objects.length)
+        throw ambiguous();
+    if (ids.length && !expanded.length)
+        throw invalid();
+    const unique = new Map();
+    for (const object of [...(!objectType || objectType === 'DEVC/K' ? root.objects : []), ...expanded]) {
+        unique.set(JSON.stringify([object.type, object.name, object.uri]), object);
+    }
+    const effectiveLimit = clampUrlLimit(maxResults, 200);
+    const objects = [...unique.values()].slice(0, effectiveLimit);
+    throwIfRequestCancelled(request);
+    const limitReached = objects.length >= effectiveLimit;
+    return {
+        objects,
+        listing: {
+            scope: 'direct',
+            coverage: 'adt-nodestructure',
+            completeness: 'unknown',
+            total: null,
+            returned: objects.length,
+            effectiveLimit,
+            limitReached,
+            possiblyTruncated: limitReached || unexpandedTypes.length > 0,
+            unexpandedTypes,
+            note: 'Direct package contents only; subpackages are not visited. Descriptions are omitted. ' +
+                'This is not a complete inventory or snapshot. Narrow with an advertised objectType; maxResults only caps returned entries.',
+        },
+    };
+}
+//# sourceMappingURL=package-browser.js.map

package/dist/adt/package-browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-browser.js","sourceRoot":"","sources":["../../src/adt/package-browser.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAqB,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAW3C,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,gEAAgE,CAAC,CAAC;AACrG,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,IAAI,QAAQ,CACV,4FAA4F;IAC1F,4FAA4F,CAC/F,CAAC;AAEJ,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IACjF,OAAO,KAAgC,CAAC;AAC1C,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,EAAE,GAAW;IACvC,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IACpD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACzF,CAAC;AACD,SAAS,MAAM,CAAC,KAAc,EAAE,UAAU,GAAG,KAAK;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IACjF,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,SAAS,CAAC,GAAW,EAAE,IAAa;IAC3C,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACtD,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IACnF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;IAC9D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,6BAA6B,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAiB,EAAE;QACjG,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,QAAQ,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QACrF,IAAI,GAAG,IAAI,CAAC,4BAA4B,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QAC/G,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IACH,qFAAqF;IACrF,MAAM,OAAO,GAAG,IAAI;QAClB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAU,EAAE;YACvE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,QAAQ;gBAAE,MAAM,OAAO,EAAE,CAAC;YAC/F,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACtB,CAAC,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,SAAS,EAAE,CAAC;IAClE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAmB,EACnB,MAAoB,EACpB,WAAmB,EACnB,UAAmB,EACnB,UAAmB;IAEnB,cAAc,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC;QACxC,MAAM,IAAI,QAAQ,CAAC,2EAA2E,CAAC,CAAC;IAClG,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC;QACnE,MAAM,IAAI,QAAQ,CAAC,mEAAmE,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAsB;QACjC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;QAC7B,MAAM,EAAE,iBAAiB,EAAE,EAAE,MAAM;QACnC,cAAc,EAAE,IAAI,kBAAkB,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,iBAAiB,CAAC;QAC1E,aAAa,EAAE,IAAI,oBAAoB,CAAC,CAAC,CAAC;QAC1C,oBAAoB,EAAE,KAAK;KAC5B,CAAC;IACF,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9D,MAAM,IAAI,GACR,sCAAsC;QACtC,qCAAqC,OAAO,qBAAqB,OAAO,8BAA8B,CAAC;IACzG,MAAM,IAAI,GAAG,KAAK,EAAE,GAAa,EAAE,IAAa,EAAE,EAAE;QAClD,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,IAAI,GACR,wCAAwC;YACxC,mFAAmF;YACnF,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,iCAAiC,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAC9B,IAAI,EACJ,IAAI,EACJ,0DAA0D,EAC1D,EAAE,MAAM,EAAE,4BAA4B,EAAE,EACxC,OAAO,CACR,CAAC;QACF,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,QAAQ,CAChB,kBAAkB,UAAU,wCAAwC,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CACpJ,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC;YAAE,SAAS;QACrF,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,eAAe,GAAG;QACtB,GAAG,IAAI,GAAG,CACR,IAAI,CAAC,OAAO;aACT,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;aACxE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAChC;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,SAAS,EAAE,CAAC;IAC3D,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,MAAM,OAAO,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,IAAI,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;QACpG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,cAAc,GAAG,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAC9D,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC;IACtD,OAAO;QACL,OAAO;QACP,OAAO,EAAE;YACP,KAAK,EAAE,QAAiB;YACxB,QAAQ,EAAE,mBAA4B;YACtC,YAAY,EAAE,SAAkB;YAChC,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,OAAO,CAAC,MAAM;YACxB,cAAc;YACd,YAAY;YACZ,iBAAiB,EAAE,YAAY,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC;YAC7D,eAAe;YACf,IAAI,EACF,uFAAuF;gBACvF,4HAA4H;SAC/H;KACF,CAAC;AACJ,CAAC"}

package/dist/adt/package-contents.d.ts

@@ -1,4 +1,6 @@
 import type { AdtHttpClient } from './http.js';
+export declare const DIRECT_PACKAGE_NAME: RegExp;
+export declare const DIRECT_PACKAGE_TYPE: RegExp;
 /** Require SAP's advertised filter for getPackageContents' request (no objectType/useSearchProvider).
  *  Slash-typed objectType or useSearchProvider overrides can select classic search, which ignores packageName. */
 export declare function supportsPackageFilteredSearch(xml: string): boolean;

package/dist/adt/package-contents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"package-contents.d.ts","sourceRoot":"","sources":["../../src/adt/package-contents.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAI/C;kHACkH;AAClH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAelE;AAED,wBAAsB,4BAA4B,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAQrF;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS;;;;;kBAQpE,SAAS;;cAEb,YAAY;;EAMzB"}
+{"version":3,"file":"package-contents.d.ts","sourceRoot":"","sources":["../../src/adt/package-contents.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAI/C,eAAO,MAAM,mBAAmB,QAAkD,CAAC;AACnF,eAAO,MAAM,mBAAmB,QAA0C,CAAC;AAE3E;kHACkH;AAClH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAelE;AAED,wBAAsB,4BAA4B,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAQrF;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS;;;;;kBAQpE,SAAS;;cAEb,YAAY;;EAMzB"}

package/dist/adt/package-contents.js

@@ -1,6 +1,8 @@
 import { AdtError } from './errors.js';
 import { clampUrlLimit } from './result-limits.js';
 import { findDeepNodes, parseXml } from './xml-parser.js';
+export const DIRECT_PACKAGE_NAME = /^(?=.{1,30}$)(?:\/[A-Z0-9_]+\/)?[A-Z0-9_$]+$/i;
+export const DIRECT_PACKAGE_TYPE = /^[A-Z0-9_]{1,8}(?:\/[A-Z0-9_]{1,8})?$/;
 /** Require SAP's advertised filter for getPackageContents' request (no objectType/useSearchProvider).
  *  Slash-typed objectType or useSearchProvider overrides can select classic search, which ignores packageName. */
 export function supportsPackageFilteredSearch(xml) {
@@ -27,7 +29,7 @@ export async function requirePackageFilteredSearch(http) {
     const discovery = await http.get('/sap/bc/adt/discovery', { Accept: 'application/atomsvc+xml' });
     if (!supportsPackageFilteredSearch(discovery.body)) {
         throw new AdtError('Package contents are unavailable: this SAP system does not advertise package-filtered ADT search. ' +
-            'Use name/type searches or the native package browser; an unfiltered search could return unrelated objects.');
+            'Use SAPRead type=DEVC with packageScope="direct" for bounded native browsing; an unfiltered search could return unrelated objects.');
     }
 }
 /** ADT quick search provides neither a total nor proof of full package coverage. */

package/dist/adt/package-contents.js.map

@@ -1 +1 @@
-{"version":3,"file":"package-contents.js","sourceRoot":"","sources":["../../src/adt/package-contents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE1D;kHACkH;AAClH,MAAM,UAAU,6BAA6B,CAAC,GAAW;IACvD,MAAM,UAAU,GAAG,iDAAiD,CAAC;IACrE,KAAK,MAAM,SAAS,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;QAClE,KAAK,MAAM,UAAU,IAAI,aAAa,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YAChD,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,UAAU;gBAAE,SAAS;YAC9F,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;gBAC7D,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,uEAAuE;oBAAE,SAAS;gBACxG,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClD,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE,qBAAqB,CAAC,CAAC,QAAQ,KAAK,UAAU;oBAAE,SAAS;gBAC9F,IAAI,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,OAAO,IAAI,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,IAAmB;IACpE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACjG,IAAI,CAAC,6BAA6B,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,QAAQ,CAChB,oGAAoG;YAClG,4GAA4G,CAC/G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,SAA6B;IACpF,MAAM,cAAc,GAAG,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,QAAQ,IAAI,cAAc,CAAC;IAChD,OAAO;QACL,QAAQ;QACR,cAAc;QACd,YAAY;QACZ,iBAAiB,EAAE,YAAY;QAC/B,YAAY,EAAE,SAAkB;QAChC,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,YAAqB;QAC/B,IAAI,EACF,CAAC,YAAY;YACX,CAAC,CAAC,mDAAmD,cAAc,GAAG,IAAI,CAAC,CAAC,CAAC,iEAAiE,CAAC,CAAC,CAAC,kCAAkC,EAAE;YACrL,CAAC,CAAC,EAAE,CAAC,GAAG,0FAA0F;KACvG,CAAC;AACJ,CAAC"}
+{"version":3,"file":"package-contents.js","sourceRoot":"","sources":["../../src/adt/package-contents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE1D,MAAM,CAAC,MAAM,mBAAmB,GAAG,+CAA+C,CAAC;AACnF,MAAM,CAAC,MAAM,mBAAmB,GAAG,uCAAuC,CAAC;AAE3E;kHACkH;AAClH,MAAM,UAAU,6BAA6B,CAAC,GAAW;IACvD,MAAM,UAAU,GAAG,iDAAiD,CAAC;IACrE,KAAK,MAAM,SAAS,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;QAClE,KAAK,MAAM,UAAU,IAAI,aAAa,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YAChD,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,UAAU;gBAAE,SAAS;YAC9F,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;gBAC7D,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,uEAAuE;oBAAE,SAAS;gBACxG,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClD,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE,qBAAqB,CAAC,CAAC,QAAQ,KAAK,UAAU;oBAAE,SAAS;gBAC9F,IAAI,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,OAAO,IAAI,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,IAAmB;IACpE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACjG,IAAI,CAAC,6BAA6B,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,QAAQ,CAChB,oGAAoG;YAClG,oIAAoI,CACvI,CAAC;IACJ,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,SAA6B;IACpF,MAAM,cAAc,GAAG,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,QAAQ,IAAI,cAAc,CAAC;IAChD,OAAO;QACL,QAAQ;QACR,cAAc;QACd,YAAY;QACZ,iBAAiB,EAAE,YAAY;QAC/B,YAAY,EAAE,SAAkB;QAChC,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,YAAqB;QAC/B,IAAI,EACF,CAAC,YAAY;YACX,CAAC,CAAC,mDAAmD,cAAc,GAAG,IAAI,CAAC,CAAC,CAAC,iEAAiE,CAAC,CAAC,CAAC,kCAAkC,EAAE;YACrL,CAAC,CAAC,EAAE,CAAC,GAAG,0FAA0F;KACvG,CAAC;AACJ,CAAC"}

package/dist/adt/pinned-write-policy.d.ts

@@ -0,0 +1,15 @@
+/** Fail-closed local/CTS recording policy for the reviewed pinned PP write surface. */
+import type { LockResult } from './crud.js';
+import type { AdtHttpClient, AdtRequestOptions } from './http.js';
+import { type SafetyConfig } from './safety.js';
+export declare function assertPinnedOwner(type: unknown, name: unknown): asserts type is 'CLAS' | 'INTF';
+export declare function checkPinnedRequest(safety: SafetyConfig, request: string): void;
+/** Caller-selected tasks must be modifiable; lock evidence only proves parent membership. */
+export declare function resolvePinnedRequest(http: AdtHttpClient, safety: SafetyConfig, id: string, options?: AdtRequestOptions): Promise<string>;
+export interface PinnedRecording {
+    local: boolean;
+    request?: string;
+}
+export declare function pinnedRecording(http: AdtHttpClient, safety: SafetyConfig, owner: string, pkg: string, operation: 'I' | '', requested?: string, options?: AdtRequestOptions): Promise<PinnedRecording>;
+export declare function validatePinnedLock(http: AdtHttpClient, safety: SafetyConfig, lock: LockResult, recording: PinnedRecording, options?: AdtRequestOptions): Promise<void>;
+//# sourceMappingURL=pinned-write-policy.d.ts.map

package/dist/adt/pinned-write-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pinned-write-policy.d.ts","sourceRoot":"","sources":["../../src/adt/pinned-write-policy.ts"],"names":[],"mappings":"AAAA,uFAAuF;AAEvF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAA0B,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAKxE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,GAAG,MAAM,CAS/F;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAS9E;AAED,6FAA6F;AAC7F,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,YAAY,EACpB,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,MAAM,CAAC,CAEjB;AA2DD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,GAAG,GAAG,EAAE,EACnB,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,eAAe,CAAC,CAgC1B;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,eAAe,EAC1B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAWf"}

package/dist/adt/pinned-write-policy.js

@@ -0,0 +1,111 @@
+/** Fail-closed local/CTS recording policy for the reviewed pinned PP write surface. */
+import { AdtSafetyError } from './errors.js';
+import { isTransportInWhitelist } from './safety.js';
+import { CTS_CONTENT_TYPE_ORGANIZER, getTransportInfo, parseTransportList } from './transport.js';
+import { parseXml } from './xml-parser.js';
+export function assertPinnedOwner(type, name) {
+    if ((type !== 'CLAS' && type !== 'INTF') ||
+        typeof name !== 'string' ||
+        !/^(?:\/[A-Z0-9_]+\/)?[A-Z][A-Z0-9_]{0,29}$/.test(name) ||
+        name.length > 30) {
+        throw new AdtSafetyError('Pinned writes require one uppercase CLAS or INTF owner (maximum 30 characters).');
+    }
+}
+export function checkPinnedRequest(safety, request) {
+    if (!safety.multiTargetWrite?.enabled ||
+        !safety.multiTargetWrite.allowedTransports.length ||
+        !isTransportInWhitelist({ allowedTransports: [...safety.multiTargetWrite.allowedTransports] }, request) ||
+        !isTransportInWhitelist({ allowedTransports: [...safety.multiTargetWrite.serverAllowedTransports] }, request)) {
+        throw new AdtSafetyError('CTS request is not allowed by both server and destination transport policies.');
+    }
+}
+/** Caller-selected tasks must be modifiable; lock evidence only proves parent membership. */
+export async function resolvePinnedRequest(http, safety, id, options) {
+    return (await inspectPinnedRequest(http, safety, id, options, true)).id;
+}
+async function inspectPinnedRequest(http, safety, id, options, requireModifiableTask) {
+    if (!/^[A-Z0-9]{1,20}$/.test(id))
+        throw new AdtSafetyError('Invalid CTS request/task ID.');
+    const path = `/sap/bc/adt/cts/transportrequests/${id}`;
+    const response = await http.get(path, { Accept: CTS_CONTENT_TYPE_ORGANIZER }, options);
+    if (response.body.length > 1024 * 1024)
+        throw new AdtSafetyError('CTS request evidence exceeds the bounded qualification size.');
+    let matches = parseTransportList(response.body, path).filter((request) => request.id === id || request.tasks.some((task) => task.id === id));
+    if (matches.length === 0) {
+        // A task detail document places its parent request and task as siblings. Use only
+        // the exact task's parent attribute, then independently verify the parent's tree.
+        const root = parseXml(response.body).root;
+        const tasks = root?.task;
+        const selected = (Array.isArray(tasks) ? tasks : tasks ? [tasks] : []).filter((task) => task && typeof task === 'object' && task['@_number'] === id);
+        const parent = selected.length === 1 ? selected[0]['@_parent'] : undefined;
+        if (typeof parent !== 'string' ||
+            !/^[A-Z0-9]{1,20}$/.test(parent) ||
+            parent === id ||
+            (requireModifiableTask && selected[0]['@_status'] !== 'D'))
+            throw new AdtSafetyError('CTS task parent could not be established.');
+        const parentPath = `/sap/bc/adt/cts/transportrequests/${parent}`;
+        const parentResponse = await http.get(parentPath, { Accept: CTS_CONTENT_TYPE_ORGANIZER }, options);
+        if (parentResponse.body.length > 1024 * 1024)
+            throw new AdtSafetyError('CTS request evidence exceeds the bounded qualification size.');
+        matches = parseTransportList(parentResponse.body, parentPath).filter((request) => request.id === parent && request.tasks.some((task) => task.id === id));
+    }
+    if (matches.length !== 1)
+        throw new AdtSafetyError('CTS request/task membership could not be established.');
+    const request = matches[0];
+    if (!/^[A-Z0-9]{1,20}$/.test(request.id) ||
+        request.type !== 'K' ||
+        request.status !== 'D' ||
+        request.tasks.length > 256)
+        throw new AdtSafetyError('A modifiable Workbench request is required.');
+    if (request.id !== id &&
+        request.tasks.filter((task) => task.id === id && (!requireModifiableTask || task.status === 'D')).length !== 1)
+        throw new AdtSafetyError('The selected task must be modifiable.');
+    checkPinnedRequest(safety, request.id);
+    return request;
+}
+export async function pinnedRecording(http, safety, owner, pkg, operation, requested, options) {
+    const info = await getTransportInfo(http, safety, owner, pkg, operation, options);
+    if (info.lockedTransportAmbiguous || (info.lockedTasks.length && !info.lockedTransport))
+        throw new AdtSafetyError('Ambiguous CTS lock holders.');
+    if (info.result !== 'S' || info.devclass !== pkg || info.operation !== operation)
+        throw new AdtSafetyError('SAP did not affirm the requested package/recording context.');
+    if (info.isLocal &&
+        info.deliveryUnit === 'LOCAL' &&
+        !info.recording &&
+        !info.lockedTransport &&
+        info.lockedTasks.length === 0) {
+        if (requested)
+            throw new AdtSafetyError('A local object must not specify a CTS request/task.');
+        return { local: true };
+    }
+    if (info.isLocal || !info.deliveryUnit || info.deliveryUnit === 'LOCAL')
+        throw new AdtSafetyError('Ambiguous local/CTS recording evidence.');
+    const selected = requested ?? info.lockedTransport;
+    if (!selected)
+        throw new AdtSafetyError('This package requires an explicit allowed CTS request. Create/manage requests outside this multi-target write connection.');
+    const request = await inspectPinnedRequest(http, safety, selected, options, true);
+    if (info.lockedTransport && info.lockedTransport !== request.id)
+        throw new AdtSafetyError('The object is recorded in a different CTS request.');
+    // Reuse the authoritative parent tree. A released task is valid historical lock evidence,
+    // but it is never accepted as the caller-selected task for a new save.
+    for (const task of info.lockedTasks)
+        if (request.tasks.filter((entry) => entry.id === task).length !== 1)
+            throw new AdtSafetyError('A locked task does not belong unambiguously to the selected CTS request.');
+    return { local: false, request: request.id };
+}
+export async function validatePinnedLock(http, safety, lock, recording, options) {
+    if (!lock.lockHandle || lock.localityKnown !== true || lock.isLocal !== recording.local)
+        throw new AdtSafetyError('SAP lock does not affirm the preflight recording context.');
+    if (recording.local) {
+        if (lock.corrNr)
+            throw new AdtSafetyError('Local lock unexpectedly carries a CTS request.');
+    }
+    else {
+        if (!recording.request)
+            throw new AdtSafetyError('Missing CTS request.');
+        checkPinnedRequest(safety, recording.request);
+        if (lock.corrNr && (await inspectPinnedRequest(http, safety, lock.corrNr, options, false)).id !== recording.request)
+            throw new AdtSafetyError('Lock and requested CTS recording disagree.');
+    }
+}
+//# sourceMappingURL=pinned-write-policy.js.map

package/dist/adt/pinned-write-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pinned-write-policy.js","sourceRoot":"","sources":["../../src/adt/pinned-write-policy.ts"],"names":[],"mappings":"AAAA,uFAAuF;AAGvF,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,sBAAsB,EAAqB,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAElG,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,MAAM,UAAU,iBAAiB,CAAC,IAAa,EAAE,IAAa;IAC5D,IACE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,CAAC;QACpC,OAAO,IAAI,KAAK,QAAQ;QACxB,CAAC,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC;QACvD,IAAI,CAAC,MAAM,GAAG,EAAE,EAChB,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,iFAAiF,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAoB,EAAE,OAAe;IACtE,IACE,CAAC,MAAM,CAAC,gBAAgB,EAAE,OAAO;QACjC,CAAC,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,MAAM;QACjD,CAAC,sBAAsB,CAAC,EAAE,iBAAiB,EAAE,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC;QACvG,CAAC,sBAAsB,CAAC,EAAE,iBAAiB,EAAE,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,EAAE,EAAE,OAAO,CAAC,EAC7G,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,+EAA+E,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAmB,EACnB,MAAoB,EACpB,EAAU,EACV,OAA2B;IAE3B,OAAO,CAAC,MAAM,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,IAAmB,EACnB,MAAoB,EACpB,EAAU,EACV,OAAsC,EACtC,qBAA8B;IAE9B,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,8BAA8B,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,qCAAqC,EAAE,EAAE,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,EAAE,OAAO,CAAC,CAAC;IACvF,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI;QACpC,MAAM,IAAI,cAAc,CAAC,8DAA8D,CAAC,CAAC;IAC3F,IAAI,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,CAC1D,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAC/E,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,kFAAkF;QAClF,kFAAkF;QAClF,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAA2C,CAAC;QACjF,MAAM,KAAK,GAAG,IAAI,EAAE,IAAI,CAAC;QACzB,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAC3E,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CACtE,CAAC;QACF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;YAChC,MAAM,KAAK,EAAE;YACb,CAAC,qBAAqB,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;YAE1D,MAAM,IAAI,cAAc,CAAC,2CAA2C,CAAC,CAAC;QACxE,MAAM,UAAU,GAAG,qCAAqC,MAAM,EAAE,CAAC;QACjE,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,EAAE,OAAO,CAAC,CAAC;QACnG,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI;YAC1C,MAAM,IAAI,cAAc,CAAC,8DAA8D,CAAC,CAAC;QAC3F,OAAO,GAAG,kBAAkB,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,MAAM,CAClE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CACnF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,uDAAuD,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,IACE,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,IAAI,KAAK,GAAG;QACpB,OAAO,CAAC,MAAM,KAAK,GAAG;QACtB,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;QAE1B,MAAM,IAAI,cAAc,CAAC,6CAA6C,CAAC,CAAC;IAC1E,IACE,OAAO,CAAC,EAAE,KAAK,EAAE;QACjB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,qBAAqB,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;QAE9G,MAAM,IAAI,cAAc,CAAC,uCAAuC,CAAC,CAAC;IACpE,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC;AACjB,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAmB,EACnB,MAAoB,EACpB,KAAa,EACb,GAAW,EACX,SAAmB,EACnB,SAAkB,EAClB,OAA2B;IAE3B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAClF,IAAI,IAAI,CAAC,wBAAwB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;QACrF,MAAM,IAAI,cAAc,CAAC,6BAA6B,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAC9E,MAAM,IAAI,cAAc,CAAC,6DAA6D,CAAC,CAAC;IAC1F,IACE,IAAI,CAAC,OAAO;QACZ,IAAI,CAAC,YAAY,KAAK,OAAO;QAC7B,CAAC,IAAI,CAAC,SAAS;QACf,CAAC,IAAI,CAAC,eAAe;QACrB,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAC7B,CAAC;QACD,IAAI,SAAS;YAAE,MAAM,IAAI,cAAc,CAAC,qDAAqD,CAAC,CAAC;QAC/F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO;QACrE,MAAM,IAAI,cAAc,CAAC,yCAAyC,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,SAAS,IAAI,IAAI,CAAC,eAAe,CAAC;IACnD,IAAI,CAAC,QAAQ;QACX,MAAM,IAAI,cAAc,CACtB,2HAA2H,CAC5H,CAAC;IACJ,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAClF,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,KAAK,OAAO,CAAC,EAAE;QAC7D,MAAM,IAAI,cAAc,CAAC,oDAAoD,CAAC,CAAC;IACjF,0FAA0F;IAC1F,uEAAuE;IACvE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW;QACjC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YACjE,MAAM,IAAI,cAAc,CAAC,0EAA0E,CAAC,CAAC;IACzG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAmB,EACnB,MAAoB,EACpB,IAAgB,EAChB,SAA0B,EAC1B,OAA2B;IAE3B,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK;QACrF,MAAM,IAAI,cAAc,CAAC,2DAA2D,CAAC,CAAC;IACxF,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,gDAAgD,CAAC,CAAC;IAC9F,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,SAAS,CAAC,OAAO;YAAE,MAAM,IAAI,cAAc,CAAC,sBAAsB,CAAC,CAAC;QACzE,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,OAAO;YACjH,MAAM,IAAI,cAAc,CAAC,4CAA4C,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC"}

package/dist/adt/revision-feed.d.ts

@@ -0,0 +1,8 @@
+import type { RevisionListResult } from './types.js';
+/** Fixed local explanation, safe to expose even when SAP diagnostics are hidden. */
+export declare class RevisionHistoryError extends Error {
+    constructor();
+}
+/** Parse source revision history feed from /source/main/versions */
+export declare function parseRevisionFeed(xml: string): RevisionListResult;
+//# sourceMappingURL=revision-feed.d.ts.map

package/dist/adt/revision-feed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revision-feed.d.ts","sourceRoot":"","sources":["../../src/adt/revision-feed.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAgB,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAWnE,oFAAoF;AACpF,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,cAEC;CACF;AA8CD,oEAAoE;AACpE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,CA4CjE"}

package/dist/adt/revision-feed.js

@@ -0,0 +1,108 @@
+import { XMLValidator } from 'fast-xml-parser';
+import { parseXml, toRecordArray } from './xml-parser.js';
+const TRANSPORT_RELS = new Set([
+    'http://www.sap.com/adt/relations/transport/request', // live shape (a4h 758)
+    'http://www.sap.com/adt/relations/transports', // legacy — kept for older releases
+]);
+/** CTS request/task id: 3-char system + K/T/… + 6 alphanumerics, e.g. A4HK906291. */
+const CTS_ID_RE = /^[A-Z0-9]{3}[A-Z][A-Z0-9]{6}$/;
+/** Fixed local explanation, safe to expose even when SAP diagnostics are hidden. */
+export class RevisionHistoryError extends Error {
+    constructor() {
+        super('Invalid or unexpected revision history response; this is not an empty history.');
+    }
+}
+/** Decode a URI component, returning the raw value rather than throwing on a malformed `%` escape. */
+function safeDecode(value) {
+    try {
+        return decodeURIComponent(value);
+    }
+    catch {
+        return value;
+    }
+}
+/**
+ * CTS request id of a revision, from its transport link.
+ *
+ * `adtcore:name` carries the id; `@_title` is the transport DESCRIPTION (only used as a last
+ * resort, for releases that put the id there). The href tail is accepted ONLY when it looks
+ * like a CTS id — ADT also emits hrefs ending in `reference?obj_name=…`, and returning
+ * `"reference"` for every revision would silently break attribution everywhere.
+ * Evidence: docs/plans/2026-08-03-transport-diff.md §1.
+ */
+function revisionTransportId(links) {
+    for (const link of links) {
+        if (!TRANSPORT_RELS.has(String(link['@_rel'] ?? '')))
+            continue;
+        const name = String(link['@_name'] ?? '').trim();
+        if (name)
+            return name;
+        const tail = safeDecode(String(link['@_href'] ?? '')
+            .split('/')
+            .pop()
+            ?.split('?')[0] ?? '')
+            .trim()
+            .toUpperCase();
+        if (CTS_ID_RE.test(tail))
+            return tail;
+        // `@_title`/`@_version` are last resorts for older releases that put the id there; both
+        // go through the shape guard, so a description can never be mistaken for a transport.
+        for (const attr of ['@_title', '@_version']) {
+            const value = String(link[attr] ?? '')
+                .trim()
+                .toUpperCase();
+            if (CTS_ID_RE.test(value))
+                return value;
+        }
+    }
+    return '';
+}
+/** Parse source revision history feed from /source/main/versions */
+export function parseRevisionFeed(xml) {
+    if (!xml.trim())
+        throw new RevisionHistoryError();
+    try {
+        if (XMLValidator.validate(xml) !== true)
+            throw new Error('Invalid revision history XML.');
+        const parsed = parseXml(xml);
+        if (!Object.hasOwn(parsed, 'feed'))
+            throw new Error('Expected a revision Atom feed.');
+        if (parsed.feed !== '' && (!parsed.feed || typeof parsed.feed !== 'object' || Array.isArray(parsed.feed)))
+            throw new Error('Unexpected revision feed content.');
+        const feed = (parsed.feed ?? {});
+        const title = String(feed.title ?? '');
+        const match = title.match(/^Version List of (\S+) \(([A-Z]+)\)/);
+        const object = {
+            name: String(match?.[1] ?? ''),
+            type: String(match?.[2] ?? ''),
+        };
+        const revisions = [];
+        const rawEntries = feed.entry === undefined ? [] : Array.isArray(feed.entry) ? feed.entry : [feed.entry];
+        if (rawEntries.some((entry) => !entry || typeof entry !== 'object' || Array.isArray(entry)))
+            throw new Error('Unexpected revision entry.');
+        const entries = toRecordArray(feed.entry);
+        for (const entry of entries) {
+            const authorNode = toRecordArray(entry.author)[0] ?? {};
+            const contentNode = toRecordArray(entry.content)[0] ?? {};
+            if (!contentNode['@_src'])
+                throw new Error('Revision entry is missing its content reference.');
+            const links = toRecordArray(entry.link);
+            const transport = revisionTransportId(links);
+            const versionTitle = String(entry.title ?? '');
+            revisions.push({
+                id: String(entry.id ?? ''),
+                author: String(authorNode.name ?? ''),
+                timestamp: String(entry.updated ?? ''),
+                ...(versionTitle ? { versionTitle } : {}),
+                ...(transport ? { transport } : {}),
+                uri: String(contentNode['@_src'] ?? ''),
+            });
+        }
+        const next = toRecordArray(feed.link).find((link) => link['@_rel'] === 'next');
+        return { object, revisions, ...(next ? { historyComplete: false } : {}) };
+    }
+    catch {
+        throw new RevisionHistoryError();
+    }
+}
+//# sourceMappingURL=revision-feed.js.map

package/dist/adt/revision-feed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revision-feed.js","sourceRoot":"","sources":["../../src/adt/revision-feed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE1D,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,oDAAoD,EAAE,uBAAuB;IAC7E,6CAA6C,EAAE,mCAAmC;CACnF,CAAC,CAAC;AAEH,qFAAqF;AACrF,MAAM,SAAS,GAAG,+BAA+B,CAAC;AAElD,oFAAoF;AACpF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C;QACE,KAAK,CAAC,gFAAgF,CAAC,CAAC;IAC1F,CAAC;CACF;AAED,sGAAsG;AACtG,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,KAAgC;IAC3D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAAE,SAAS;QAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,IAAI,GAAG,UAAU,CACrB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;aACzB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,EAAE;YACN,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CACxB;aACE,IAAI,EAAE;aACN,WAAW,EAAE,CAAC;QACjB,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,wFAAwF;QACxF,sFAAsF;QACtF,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,WAAW,CAAU,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;iBACnC,IAAI,EAAE;iBACN,WAAW,EAAE,CAAC;YACjB,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,oBAAoB,EAAE,CAAC;IAElD,IAAI,CAAC;QACH,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACtF,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvG,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SAC/B,CAAC;QAEF,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACzF,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACxD,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1D,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAC/F,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAE/C,SAAS,CAAC,IAAI,CAAC;gBACb,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;gBAC1B,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;gBACtC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;aACxC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,CAAC;QAC/E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAoB,EAAE,CAAC;IACnC,CAAC;AACH,CAAC"}

package/dist/adt/safety.d.ts

@@ -42,7 +42,16 @@ export declare const OperationType: {
     readonly Transport: 'X';
 };
 export type OperationTypeCode = (typeof OperationType)[keyof typeof OperationType];
+export interface MultiTargetWritePolicy {
+    readonly target: string;
+    readonly enabled: boolean;
+    readonly allowedPackages: readonly string[];
+    readonly allowedTransports: readonly string[];
+    readonly serverAllowedTransports: readonly string[];
+}
 export interface SafetyConfig {
+    /** Present on every multi-target runtime, including read-only routes. */
+    multiTargetWrite?: MultiTargetWritePolicy;
     allowWrites: boolean;
     allowDataPreview: boolean;
     allowFreeSQL: boolean;
@@ -104,6 +113,8 @@ export declare function isPackageAllowed(config: SafetyConfig, pkg: string): boo
  * Reads are never package-gated; this function is only called on write paths.
  */
 export declare function checkPackage(config: SafetyConfig, pkg: string, resolver?: PackageHierarchyResolver | null): Promise<void>;
+/** Check if a transport is in the whitelist. */
+export declare function isTransportInWhitelist(config: Pick<SafetyConfig, 'allowedTransports'>, transport: string): boolean;
 /**
  * Check transport operation. Writes require `allowWrites && allowTransportWrites`.
  * Reads are always allowed at this layer (scope check enforces user gating upstream).

package/dist/adt/safety.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../src/adt/safety.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAEvE,yFAAyF;AACzF,eAAO,MAAM,cAAc,QAAQ,CAAC;AAEpC;;;GAGG;AACH,eAAO,MAAM,aAAa;aACxB,IAAI,EAAE,GAAG;aACT,MAAM,EAAE,GAAG;aACX,KAAK,EAAE,GAAG;aACV,OAAO,EAAE,GAAG;aACZ,MAAM,EAAE,GAAG;aACX,MAAM,EAAE,GAAG;aACX,MAAM,EAAE,GAAG;aACX,QAAQ,EAAE,GAAG;aACb,IAAI,EAAE,GAAG;aACT,IAAI,EAAE,GAAG;aACT,YAAY,EAAE,GAAG;aACjB,QAAQ,EAAE,GAAG;aACb,SAAS,EAAE,GAAG;CACN,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,OAAO,aAAa,CAAC,CAAC;AAcnF,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,mFAAmF;IACnF,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,2FAA2F;IAC3F,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,YAAY,CAYlD;AAED,0CAA0C;AAC1C,wBAAgB,wBAAwB,IAAI,YAAY,CAYvD;AAED,kEAAkE;AAClE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,iBAAiB,GAAG,OAAO,CAgBvF;AAED,2DAA2D;AAC3D,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAMhG;AAYD;;;;;;;;GAQG;AACH,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,QAAQ,GAAG,iBAAiB,CAAC;AAE5E;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,oBAAoB,CA6B5F;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAE3E;AAeD;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,MAAM,EACX,QAAQ,CAAC,EAAE,wBAAwB,GAAG,IAAI,GACzC,OAAO,CAAC,IAAI,CAAC,CA2Cf;AAqBD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAsB9G;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,UAAO,GAAG,IAAI,CAYtF;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,CA8B3F;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,YAAY,EAC1B,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,GACnC,YAAY,CA4Ed;AAED,8DAA8D;AAC9D,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAa3D"}
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../src/adt/safety.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAEvE,yFAAyF;AACzF,eAAO,MAAM,cAAc,QAAQ,CAAC;AAEpC;;;GAGG;AACH,eAAO,MAAM,aAAa;aACxB,IAAI,EAAE,GAAG;aACT,MAAM,EAAE,GAAG;aACX,KAAK,EAAE,GAAG;aACV,OAAO,EAAE,GAAG;aACZ,MAAM,EAAE,GAAG;aACX,MAAM,EAAE,GAAG;aACX,MAAM,EAAE,GAAG;aACX,QAAQ,EAAE,GAAG;aACb,IAAI,EAAE,GAAG;aACT,IAAI,EAAE,GAAG;aACT,YAAY,EAAE,GAAG;aACjB,QAAQ,EAAE,GAAG;aACb,SAAS,EAAE,GAAG;CACN,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,OAAO,aAAa,CAAC,CAAC;AAcnF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,mFAAmF;IACnF,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,2FAA2F;IAC3F,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,YAAY,CAYlD;AAED,0CAA0C;AAC1C,wBAAgB,wBAAwB,IAAI,YAAY,CAYvD;AAED,kEAAkE;AAClE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,iBAAiB,GAAG,OAAO,CAgBvF;AAED,2DAA2D;AAC3D,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAMhG;AAYD;;;;;;;;GAQG;AACH,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,QAAQ,GAAG,iBAAiB,CAAC;AAE5E;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAuC5F;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAE3E;AAeD;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,MAAM,EACX,QAAQ,CAAC,EAAE,wBAAwB,GAAG,IAAI,GACzC,OAAO,CAAC,IAAI,CAAC,CAsDf;AAED,gDAAgD;AAChD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAgBlH;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAsB9G;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,UAAO,GAAG,IAAI,CAYtF;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,CA+B3F;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,YAAY,EAC1B,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,GACnC,YAAY,CA6Ed;AAED,8DAA8D;AAC9D,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAa3D"}

package/dist/adt/safety.js

@@ -85,7 +85,7 @@ export function unrestrictedSafetyConfig() {
 /** Check if an operation type is allowed by the safety config. */
 export function isOperationAllowed(config, op) {
     // Mutating ops (Create/Update/Delete/Activate/Workflow/Transport) require allowWrites
-    if (MUTATING_OPS.includes(op) && !config.allowWrites)
+    if (MUTATING_OPS.includes(op) && (!config.allowWrites || config.multiTargetWrite?.enabled === false))
         return false;
     // Transport mutation has an additional gate
     if (op === OperationType.Transport && !config.allowTransportWrites)
@@ -126,6 +126,13 @@ function explainOperationBlock(config, op) {
  * is reported as 'needs-hierarchy'.
  */
 export function decidePackageAllowed(config, pkg) {
+    if (config.multiTargetWrite) {
+        const global = decidePackageAllowed({ ...config, multiTargetWrite: undefined }, pkg);
+        const destination = decidePackageAllowed({ ...config, multiTargetWrite: undefined, allowedPackages: [...config.multiTargetWrite.allowedPackages] }, pkg);
+        if (!config.multiTargetWrite.allowedPackages.length || global === 'denied' || destination === 'denied')
+            return 'denied';
+        return global === 'needs-hierarchy' || destination === 'needs-hierarchy' ? 'needs-hierarchy' : 'allowed';
+    }
     if (listDeniesAll(config.allowedPackages))
         return 'denied';
     if (config.allowedPackages.length === 0)
@@ -190,6 +197,13 @@ function extractSubtreeRoots(config) {
  * Reads are never package-gated; this function is only called on write paths.
  */
 export async function checkPackage(config, pkg, resolver) {
+    if (config.multiTargetWrite) {
+        if (!config.multiTargetWrite.allowedPackages.length)
+            throw new AdtSafetyError('Destination package restriction is missing.');
+        await checkPackage({ ...config, multiTargetWrite: undefined }, pkg, resolver);
+        await checkPackage({ ...config, multiTargetWrite: undefined, allowedPackages: [...config.multiTargetWrite.allowedPackages] }, pkg, resolver);
+        return;
+    }
     const decision = decidePackageAllowed(config, pkg);
     if (decision === 'allowed')
         return;
@@ -228,7 +242,7 @@ export async function checkPackage(config, pkg, resolver) {
     throw new AdtSafetyError(`Operations on package '${pkg}' are blocked by safety configuration (allowed: ${displayAllowList(config.allowedPackages)})`);
 }
 /** Check if a transport is in the whitelist. */
-function isTransportInWhitelist(config, transport) {
+export function isTransportInWhitelist(config, transport) {
     if (listDeniesAll(config.allowedTransports))
         return false;
     if (config.allowedTransports.length === 0)
@@ -305,6 +319,7 @@ export function deriveUserSafety(serverConfig, scopes) {
     if (expanded.has('sql'))
         expanded.add('data');
     const effective = {
+        multiTargetWrite: serverConfig.multiTargetWrite,
         ...serverConfig,
         allowedPackages: [...serverConfig.allowedPackages],
         allowedTransports: [...serverConfig.allowedTransports],
@@ -406,6 +421,7 @@ export function deriveUserSafetyFromProfile(serverConfig, profileSafety) {
         return narrowed.length > 0 ? narrowed : [DENY_ALL_LIST_ENTRY];
     };
     const effective = {
+        multiTargetWrite: serverConfig.multiTargetWrite,
         allowWrites: and(serverConfig.allowWrites, profileSafety.allowWrites),
         allowDataPreview: and(serverConfig.allowDataPreview, profileSafety.allowDataPreview),
         allowFreeSQL: and(serverConfig.allowFreeSQL, profileSafety.allowFreeSQL),