catalyst-relay 0.5.13 → 0.6.0

package/dist/index.js

@@ -30,6 +30,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  BehaviorImplementationType: () => BehaviorImplementationType,
   ExternalReferencesError: () => ExternalReferencesError,
   activateLogging: () => activateLogging,
   buildSQLQuery: () => buildSQLQuery,
@@ -537,6 +538,12 @@ var SsoAuth = class {
   }
 };
 
+// src/core/auth/saml/browser.ts
+var import_node_child_process = require("child_process");
+var import_node_fs = require("fs");
+var import_node_os = require("os");
+var import_node_path2 = require("path");
+
 // src/core/auth/saml/types.ts
 var DEFAULT_FORM_SELECTORS = {
   username: "#j_username",
@@ -551,9 +558,16 @@ var DEFAULT_PROVIDER_CONFIG = {
 // src/core/auth/saml/browser.ts
 var TIMEOUTS = {
   PAGE_LOAD: 6e4,
-  FORM_SELECTOR: 1e4
+  FORM_SELECTOR: 15e3,
+  NETWORK_IDLE: 3e4,
+  /** Quiet period with no in-flight requests that counts as "idle". */
+  IDLE_QUIET: 600
 };
+var isBun = typeof globalThis.Bun !== "undefined";
 async function performBrowserLogin(options) {
+  return isBun ? performBrowserLoginViaCdp(options) : performBrowserLoginViaPlaywright(options);
+}
+async function performBrowserLoginViaPlaywright(options) {
   const { baseUrl, credentials, headless = true } = options;
   const config = options.providerConfig ?? DEFAULT_PROVIDER_CONFIG;
   let playwright;
@@ -611,6 +625,222 @@ async function performBrowserLogin(options) {
     await browser.close();
   }
 }
+var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+async function resolveChromiumPath() {
+  const override = process.env["CATALYST_CHROMIUM_PATH"];
+  if (override) return [override, null];
+  try {
+    const playwright = await import("playwright");
+    const path = playwright.chromium.executablePath();
+    if (!path) {
+      return [null, new Error("Could not resolve the Chromium executable path from Playwright.")];
+    }
+    return [path, null];
+  } catch {
+    return [
+      null,
+      new Error(
+        "Playwright is required for SAML authentication but is not installed. Install it with: npm install playwright"
+      )
+    ];
+  }
+}
+async function connectCdp(wsUrl) {
+  const WebSocketCtor = globalThis.WebSocket;
+  if (!WebSocketCtor) {
+    throw new Error("Native WebSocket is not available in this runtime.");
+  }
+  const ws = new WebSocketCtor(wsUrl);
+  let nextId = 0;
+  const pending = /* @__PURE__ */ new Map();
+  const eventHandlers = [];
+  ws.onmessage = (event) => {
+    const msg = JSON.parse(String(event.data));
+    if (typeof msg.id === "number" && pending.has(msg.id)) {
+      const { resolve, reject } = pending.get(msg.id);
+      pending.delete(msg.id);
+      if (msg.error) reject(new Error(msg.error.message));
+      else resolve(msg.result ?? {});
+    } else if (msg.method) {
+      for (const handler of eventHandlers) {
+        handler({
+          method: msg.method,
+          params: msg.params ?? {},
+          ...msg.sessionId !== void 0 ? { sessionId: msg.sessionId } : {}
+        });
+      }
+    }
+  };
+  await new Promise((resolve, reject) => {
+    ws.onopen = () => resolve();
+    ws.onerror = () => reject(new Error("Failed to connect to the browser CDP endpoint."));
+  });
+  return {
+    send(method, params = {}, sessionId) {
+      return new Promise((resolve, reject) => {
+        const id = ++nextId;
+        pending.set(id, { resolve, reject });
+        ws.send(JSON.stringify({ id, method, params, ...sessionId ? { sessionId } : {} }));
+      });
+    },
+    on(handler) {
+      eventHandlers.push(handler);
+    },
+    close() {
+      ws.close();
+    }
+  };
+}
+async function performBrowserLoginViaCdp(options) {
+  const { baseUrl, credentials, headless = true } = options;
+  const config = options.providerConfig ?? DEFAULT_PROVIDER_CONFIG;
+  const [exePath, pathError] = await resolveChromiumPath();
+  if (pathError) return err(pathError);
+  const userDataDir = (0, import_node_fs.mkdtempSync)((0, import_node_path2.join)((0, import_node_os.tmpdir)(), "catalyst-saml-"));
+  const args = [
+    ...headless ? ["--headless=new"] : [],
+    "--remote-debugging-port=0",
+    "--no-first-run",
+    "--no-default-browser-check",
+    `--user-data-dir=${userDataDir}`,
+    ...config.ignoreHttpsErrors ? ["--ignore-certificate-errors"] : []
+  ];
+  const proc = (0, import_node_child_process.spawn)(exePath, args, { stdio: ["ignore", "pipe", "pipe"] });
+  let client = null;
+  const cleanup = () => {
+    try {
+      client?.close();
+    } catch {
+    }
+    try {
+      proc.kill();
+    } catch {
+    }
+    try {
+      (0, import_node_fs.rmSync)(userDataDir, { recursive: true, force: true });
+    } catch {
+    }
+  };
+  try {
+    const browserWsUrl = await new Promise((resolve, reject) => {
+      let buffer = "";
+      const timer = setTimeout(
+        () => reject(new Error("Failed to launch browser: timed out waiting for the CDP endpoint.")),
+        TIMEOUTS.PAGE_LOAD
+      );
+      proc.stderr?.on("data", (chunk) => {
+        buffer += String(chunk);
+        const match = buffer.match(/DevTools listening on (ws:\/\/\S+)/);
+        if (match) {
+          clearTimeout(timer);
+          resolve(match[1]);
+        }
+      });
+      proc.on("error", (e) => {
+        clearTimeout(timer);
+        reject(new Error(`Failed to launch browser: ${e instanceof Error ? e.message : String(e)}`));
+      });
+      proc.on("exit", (code) => {
+        clearTimeout(timer);
+        reject(new Error(`Failed to launch browser: process exited early (code ${code}).`));
+      });
+    });
+    client = await connectCdp(browserWsUrl);
+    const { targetId } = await client.send("Target.createTarget", { url: "about:blank" });
+    const { sessionId } = await client.send("Target.attachToTarget", {
+      targetId,
+      flatten: true
+    });
+    let inflight = 0;
+    let lastNetworkChange = Date.now();
+    client.on((msg) => {
+      if (msg.sessionId !== sessionId) return;
+      if (msg.method === "Network.requestWillBeSent") {
+        inflight += 1;
+        lastNetworkChange = Date.now();
+      } else if (msg.method === "Network.loadingFinished" || msg.method === "Network.loadingFailed") {
+        inflight = Math.max(0, inflight - 1);
+        lastNetworkChange = Date.now();
+      }
+    });
+    await client.send("Page.enable", {}, sessionId);
+    await client.send("Network.enable", {}, sessionId);
+    await client.send("Runtime.enable", {}, sessionId);
+    const loginUrl = `${baseUrl}/sap/bc/adt/compatibility/graph`;
+    const navResult = await client.send("Page.navigate", { url: loginUrl }, sessionId);
+    if (navResult.errorText) {
+      return err(new Error("Failed to load login page. Please check if the server is online."));
+    }
+    const usernameSel = config.formSelectors.username;
+    const formFound = await waitForSelector(client, sessionId, usernameSel, TIMEOUTS.FORM_SELECTOR);
+    if (!formFound) {
+      return err(new Error("Login form not found. The page may have changed or loaded incorrectly."));
+    }
+    const fillExpr = `(() => {
+            const u = document.querySelector(${JSON.stringify(config.formSelectors.username)});
+            const p = document.querySelector(${JSON.stringify(config.formSelectors.password)});
+            const s = document.querySelector(${JSON.stringify(config.formSelectors.submit)});
+            if (!u || !p || !s) return false;
+            const set = (el, val) => {
+                el.value = val;
+                el.dispatchEvent(new Event('input', { bubbles: true }));
+                el.dispatchEvent(new Event('change', { bubbles: true }));
+            };
+            set(u, ${JSON.stringify(credentials.username)});
+            set(p, ${JSON.stringify(credentials.password)});
+            s.click();
+            return true;
+        })()`;
+    const fillResult = await client.send(
+      "Runtime.evaluate",
+      { expression: fillExpr, returnByValue: true },
+      sessionId
+    );
+    if (fillResult.result?.value !== true) {
+      return err(new Error("Login form not found. The page may have changed or loaded incorrectly."));
+    }
+    const idleStart = Date.now();
+    while (Date.now() - idleStart < TIMEOUTS.NETWORK_IDLE) {
+      if (inflight === 0 && Date.now() - lastNetworkChange > TIMEOUTS.IDLE_QUIET) break;
+      await sleep(100);
+    }
+    const { cookies } = await client.send("Network.getAllCookies", {}, sessionId);
+    return ok(cookies.map(toPlaywrightCookie));
+  } catch (e) {
+    return err(
+      new Error(`SAML browser login failed: ${e instanceof Error ? e.message : String(e)}`)
+    );
+  } finally {
+    cleanup();
+  }
+}
+async function waitForSelector(client, sessionId, selector, timeoutMs) {
+  const start = Date.now();
+  const expression = `!!document.querySelector(${JSON.stringify(selector)})`;
+  while (Date.now() - start < timeoutMs) {
+    const res = await client.send(
+      "Runtime.evaluate",
+      { expression, returnByValue: true },
+      sessionId
+    );
+    if (res.result?.value === true) return true;
+    await sleep(200);
+  }
+  return false;
+}
+function toPlaywrightCookie(c) {
+  const sameSite = c.sameSite === "Strict" || c.sameSite === "Lax" || c.sameSite === "None" ? c.sameSite : "Lax";
+  return {
+    name: c.name,
+    value: c.value,
+    domain: c.domain,
+    path: c.path,
+    expires: typeof c.expires === "number" ? c.expires : -1,
+    httpOnly: Boolean(c.httpOnly),
+    secure: Boolean(c.secure),
+    sameSite
+  };
+}
 
 // src/core/auth/saml/cookies.ts
 function toAuthCookies(playwrightCookies) {
@@ -815,6 +1045,16 @@ function extractError(xml) {
   const message = messageElement?.textContent;
   return message || "No message found";
 }
+function extractTagText(xml, tagName) {
+  if (!xml) return null;
+  const [doc, parseErr] = safeParseXml(xml);
+  if (parseErr) return null;
+  const elements = doc.getElementsByTagName(tagName);
+  if (elements.length === 0) return null;
+  const text = elements[0]?.textContent;
+  if (!text || text.trim().length === 0) return null;
+  return text.trim();
+}
 function escapeXml(str) {
   if (!str) {
     return "";
@@ -1235,6 +1475,24 @@ var OBJECT_CONFIG_MAP = {
     type: "PROG/I",
     label: "ABAP Include" /* INCLUDE */,
     extension: "asinc"
+  },
+  "srvd": {
+    endpoint: "ddic/srvd/sources",
+    nameSpace: 'xmlns:srvd="http://www.sap.com/adt/ddic/srvdsources"',
+    rootName: "srvd:srvdSource",
+    type: "SRVD/SRV",
+    label: "Service Definition" /* SERVICE_DEFINITION */,
+    extension: "srvd",
+    rootAttributes: { "srvd:srvdSourceType": "S" }
+  },
+  "asbdef": {
+    endpoint: "bo/behaviordefinitions",
+    nameSpace: 'xmlns:blue="http://www.sap.com/wbobj/blue"',
+    rootName: "blue:blueSource",
+    type: "BDEF/BDO",
+    label: "Behavior Definition" /* BEHAVIOR_DEFINITION */,
+    extension: "asbdef",
+    requiresImplementationType: true
   }
 };
 function getConfigByExtension(extension) {
@@ -1547,11 +1805,44 @@ async function multiDeleteObjects(client, objects, transport) {
   return ok(results);
 }
 
+// src/types/requests.ts
+var import_zod2 = require("zod");
+var BehaviorImplementationType = /* @__PURE__ */ ((BehaviorImplementationType2) => {
+  BehaviorImplementationType2["Managed"] = "Managed";
+  return BehaviorImplementationType2;
+})(BehaviorImplementationType || {});
+var objectRefSchema = import_zod2.z.object({
+  name: import_zod2.z.string().min(1),
+  extension: import_zod2.z.string().min(1)
+});
+var objectContentSchema = objectRefSchema.extend({
+  content: import_zod2.z.string(),
+  description: import_zod2.z.string().optional(),
+  implementationType: import_zod2.z.nativeEnum(BehaviorImplementationType).optional()
+});
+var treeQuerySchema = import_zod2.z.object({
+  package: import_zod2.z.string().min(1).optional(),
+  path: import_zod2.z.string().optional(),
+  owner: import_zod2.z.string().min(1).optional()
+});
+var previewQuerySchema = import_zod2.z.object({
+  objectName: import_zod2.z.string().min(1),
+  objectType: import_zod2.z.enum(["table", "view"]),
+  sqlQuery: import_zod2.z.string().min(1),
+  limit: import_zod2.z.number().positive().max(5e4).optional()
+});
+
 // src/core/adt/craud/create.ts
 async function createObject(client, object, packageName, transport, username) {
   const [config, configErr] = requireConfig(object.extension);
   if (configErr) return err(configErr);
   const description = object.description ?? "";
+  const extraAttrs = config.rootAttributes ? Object.entries(config.rootAttributes).map(([key, value]) => `
+    ${key}="${escapeXml(value)}"`).join("") : "";
+  const implementationType = object.implementationType ?? "Managed" /* Managed */;
+  const adtTemplate = config.requiresImplementationType ? `    <adtcore:adtTemplate>
+        <adtcore:adtProperty adtcore:key="implementation_type">${implementationType}</adtcore:adtProperty>
+    </adtcore:adtTemplate>` : "";
   const body = `<?xml version="1.0" encoding="UTF-8"?>
 <${config.rootName} ${config.nameSpace}
     xmlns:adtcore="http://www.sap.com/adt/core"
@@ -1559,8 +1850,8 @@ async function createObject(client, object, packageName, transport, username) {
     adtcore:language="EN"
     adtcore:name="${object.name.toUpperCase()}"
     adtcore:type="${config.type}"
-    adtcore:responsible="${username.toUpperCase()}">
-
+    adtcore:responsible="${username.toUpperCase()}"${extraAttrs}>
+${adtTemplate}
     <adtcore:packageRef adtcore:name="${packageName}"/>
 
 </${config.rootName}>`;
@@ -1621,14 +1912,26 @@ async function activateObjects(client, objects) {
   if (objects.length === 0) {
     return ok([]);
   }
+  const references = [];
   for (const obj of objects) {
     const config = getConfigByExtension(obj.extension);
     if (!config) return err(new Error(`Unsupported extension: ${obj.extension}`));
+    references.push({
+      uri: `/sap/bc/adt/${config.endpoint}/${obj.name.toLowerCase()}`,
+      type: config.type,
+      name: obj.name,
+      extension: obj.extension
+    });
   }
-  const objectRefs = objects.map((obj) => {
-    const config = getConfigByExtension(obj.extension);
-    return `<adtcore:objectReference adtcore:uri="/sap/bc/adt/${config.endpoint}/${obj.name.toLowerCase()}" adtcore:type="${config.type}" adtcore:name="${obj.name}"/>`;
-  }).join("\n    ");
+  return activateByReferences(client, references);
+}
+async function activateByReferences(client, references) {
+  if (references.length === 0) {
+    return ok([]);
+  }
+  const objectRefs = references.map(
+    (ref) => `<adtcore:objectReference adtcore:uri="${ref.uri}" adtcore:type="${ref.type}" adtcore:name="${ref.name}"/>`
+  ).join("\n    ");
   const body = `<?xml version="1.0" encoding="UTF-8"?>
 <adtcore:objectReferences xmlns:adtcore="http://www.sap.com/adt/core">
     ${objectRefs}
@@ -1692,7 +1995,7 @@ async function activateObjects(client, objects) {
   if (!resultsRes.ok) {
     return err(new Error(`Failed to fetch activation results: ${extractError(resultsText)}`));
   }
-  const [results, parseErr] = extractActivationErrors(objects, resultsText);
+  const [results, parseErr] = extractActivationErrors(references, resultsText);
   if (parseErr) return err(parseErr);
   return ok(results);
 }
@@ -2381,16 +2684,64 @@ function parseDataPreview(xml, maxRows, isTable) {
   const namespace = "http://www.sap.com/adt/dataPreview";
   const metadataElements = doc.getElementsByTagNameNS(namespace, "metadata");
   const columns = [];
+  const SAP_TYPE_MAP = {
+    "8": "integer",
+    // Int8
+    "I": "integer",
+    // Integer
+    "P": "decimal",
+    // Packed decimal
+    "F": "float",
+    // Floating point
+    "D": "date",
+    // Date (YYYYMMDD)
+    "T": "time",
+    // Time (HHMMSS)
+    "S": "timestamp",
+    // Timestamp
+    "C": "string",
+    // Character
+    "N": "string",
+    // Numeric character string
+    "V": "string",
+    // Variable-length character
+    "X": "binary"
+    // Raw binary/hex
+  };
   for (let i = 0; i < metadataElements.length; i++) {
     const meta = metadataElements[i];
     if (!meta) continue;
     const nameAttr = isTable ? "name" : "camelCaseName";
     const name = meta.getAttributeNS(namespace, nameAttr) || meta.getAttribute("name");
-    const dataType = meta.getAttributeNS(namespace, "colType") || meta.getAttribute("colType");
+    const colType = meta.getAttributeNS(namespace, "colType") || meta.getAttribute("colType");
+    const rawType = meta.getAttributeNS(namespace, "type") || meta.getAttribute("type");
+    const isKeyFigure = meta.getAttributeNS(namespace, "isKeyFigure") === "true";
+    let dataType;
+    if (colType && colType.trim() !== "") {
+      dataType = colType;
+    } else if (isKeyFigure) {
+      dataType = "decimal";
+    } else if (rawType && SAP_TYPE_MAP[rawType]) {
+      dataType = SAP_TYPE_MAP[rawType];
+    } else {
+      dataType = "string";
+    }
+    const allAttrs = {};
+    for (let j = 0; j < meta.attributes.length; j++) {
+      const attr = meta.attributes[j];
+      if (!attr) {
+        continue;
+      }
+      allAttrs[attr.name] = attr.value;
+    }
     if (!name || !dataType) continue;
     columns.push({ name, dataType });
   }
   const dataSetElements = doc.getElementsByTagNameNS(namespace, "dataSet");
+  for (let i = 0; i < dataSetElements.length; i++) {
+    const dataSet = dataSetElements[i];
+    if (!dataSet) continue;
+  }
   if (columns.length === 0 && dataSetElements.length > 0) {
     for (let i = 0; i < dataSetElements.length; i++) {
       const dataSet = dataSetElements[i];
@@ -2473,7 +2824,7 @@ async function previewData(client, query) {
 
 // src/core/adt/data_extraction/freestyle.ts
 var DEFAULT_ROW_LIMIT = 100;
-async function freestyleQuery(client, sqlQuery, limit = DEFAULT_ROW_LIMIT) {
+async function freestyleQuery(client, sqlQuery, limit = DEFAULT_ROW_LIMIT, timeout) {
   debug(`Freestyle query: ${sqlQuery}`);
   const [response, requestErr] = await client.request({
     method: "POST",
@@ -2483,16 +2834,21 @@ async function freestyleQuery(client, sqlQuery, limit = DEFAULT_ROW_LIMIT) {
     },
     headers: {
       "Accept": "application/xml, application/vnd.sap.adt.datapreview.table.v1+xml",
-      "Content-Type": "text/plain"
+      "Content-Type": "text/plain",
+      // Override stateful base header: each preview request is independent; stateless
+      // lets SAP route to any work process and recycle it after the request, preventing
+      // GENERATE_SUBPOOL_DIR_FULL (36-pool limit per work process).
+      "X-sap-adt-sessiontype": "stateless"
     },
-    body: sqlQuery
+    body: sqlQuery,
+    ...timeout !== void 0 && { timeout }
   });
   if (requestErr) return err(requestErr);
   if (!response.ok) {
     const text2 = await response.text();
     debug(`Freestyle query error response: ${text2.substring(0, 500)}`);
     const errorMsg = extractError(text2);
-    return err(new Error(`Freestyle query failed: ${errorMsg}`));
+    return err(new Error(`Freestyle query failed: ${errorMsg}`, { cause: text2 }));
   }
   const text = await response.text();
   const [dataFrame, parseErr] = parseDataPreview(text, limit, true);
@@ -2753,7 +3109,16 @@ function parseTransportTasks(doc) {
         position: el.getAttribute("tm:position") || ""
       });
     }
-    tasks.push({ taskId, objects });
+    const owner = taskEl.getAttribute("tm:owner");
+    const description = taskEl.getAttribute("tm:desc");
+    const status = taskEl.getAttribute("tm:status");
+    tasks.push({
+      taskId,
+      ...owner ? { owner } : {},
+      ...description ? { description } : {},
+      ...status ? { status } : {},
+      objects
+    });
   }
   return tasks;
 }
@@ -2991,6 +3356,203 @@ async function gitDiff(client, object) {
   });
 }
 
+// src/core/adt/businessservices/validate.ts
+var SEVERITY_OK = "OK";
+async function validateServiceBinding(client, options) {
+  const bindingType = options.bindingType ?? "ODATA";
+  const bindingVersion = options.bindingVersion ?? "V4";
+  const [response, requestErr] = await client.request({
+    method: "POST",
+    path: "/sap/bc/adt/businessservices/bindings/validation",
+    params: {
+      objname: options.bindingName.toUpperCase(),
+      description: options.description ?? "",
+      serviceBindingVersion: `${bindingType}\\${bindingVersion}`,
+      serviceDefinition: options.serviceDefinition.toUpperCase(),
+      package: options.packageName.toUpperCase()
+    }
+  });
+  const [text, checkErr] = await checkResponse(
+    response,
+    requestErr,
+    `Failed to validate service binding ${options.bindingName}`
+  );
+  if (checkErr) return err(checkErr);
+  const severity = extractTagText(text, "SEVERITY");
+  if (severity && severity !== SEVERITY_OK) {
+    const shortText = extractTagText(text, "SHORT_TEXT") ?? "";
+    return err(new Error(`Service binding validation failed (${severity}): ${shortText}`));
+  }
+  return ok(void 0);
+}
+
+// src/core/adt/businessservices/create.ts
+var SERVICE_BINDING_TYPE_CODE = "SRVB/SVB";
+var BINDING_CATEGORY = "1";
+var CONTENT_VERSION = "0001";
+async function createServiceBindingObject(client, options, username) {
+  const bindingType = options.bindingType ?? "ODATA";
+  const bindingVersion = options.bindingVersion ?? "V4";
+  const description = options.description ?? "";
+  const bindingName = options.bindingName.toUpperCase();
+  const serviceDefinition = options.serviceDefinition.toUpperCase();
+  const packageName = options.packageName.toUpperCase();
+  const body = `<?xml version="1.0" encoding="UTF-8"?>
+<srvb:serviceBinding xmlns:srvb="http://www.sap.com/adt/ddic/ServiceBindings" xmlns:adtcore="http://www.sap.com/adt/core" adtcore:description="${escapeXml(description)}" adtcore:language="EN" adtcore:name="${bindingName}" adtcore:type="${SERVICE_BINDING_TYPE_CODE}" adtcore:masterLanguage="EN" adtcore:responsible="${username.toUpperCase()}">
+  <adtcore:packageRef adtcore:name="${packageName}"/>
+  <srvb:services srvb:name="${serviceDefinition}">
+    <srvb:content srvb:version="${CONTENT_VERSION}">
+      <srvb:serviceDefinition adtcore:name="${serviceDefinition}"/>
+    </srvb:content>
+  </srvb:services>
+  <srvb:binding srvb:category="${BINDING_CATEGORY}" srvb:type="${bindingType}" srvb:version="${bindingVersion}">
+    <srvb:implementation adtcore:name=""/>
+  </srvb:binding>
+</srvb:serviceBinding>`;
+  const params = {};
+  if (options.transport) {
+    params["corrNr"] = options.transport;
+  }
+  const [response, requestErr] = await client.request({
+    method: "POST",
+    path: "/sap/bc/adt/businessservices/bindings",
+    params,
+    headers: { "Content-Type": "application/*" },
+    body
+  });
+  const [, checkErr] = await checkResponse(
+    response,
+    requestErr,
+    `Failed to create service binding ${options.bindingName}`
+  );
+  if (checkErr) return err(checkErr);
+  return ok(void 0);
+}
+
+// src/core/adt/businessservices/activate.ts
+var SERVICE_BINDING_TYPE_CODE2 = "SRVB/SVB";
+async function activateServiceBinding(client, bindingName) {
+  return activateByReferences(client, [{
+    uri: `/sap/bc/adt/businessservices/bindings/${bindingName.toLowerCase()}`,
+    type: SERVICE_BINDING_TYPE_CODE2,
+    name: bindingName.toUpperCase(),
+    extension: ""
+  }]);
+}
+
+// src/core/adt/businessservices/helpers.ts
+var BINDINGS_BASE_PATH = "/sap/bc/adt/businessservices/bindings";
+var LOCK_ACCEPT_HEADER = "application/*,application/vnd.sap.as+xml;charset=UTF-8;dataname=com.sap.adt.lock.result";
+var PUBLISH_JOBS_PATH = "/sap/bc/adt/businessservices/odatav4/publishjobs";
+var UNPUBLISH_JOBS_PATH = "/sap/bc/adt/businessservices/odatav4/unpublishjobs";
+var SEVERITY_OK2 = "OK";
+function bindingPath(bindingName) {
+  return `${BINDINGS_BASE_PATH}/${bindingName.toLowerCase()}`;
+}
+async function lockServiceBinding(client, bindingName) {
+  const [response, requestErr] = await client.request({
+    method: "POST",
+    path: bindingPath(bindingName),
+    params: {
+      "_action": "LOCK",
+      "accessMode": "MODIFY"
+    },
+    headers: { "Accept": LOCK_ACCEPT_HEADER }
+  });
+  const [text, checkErr] = await checkResponse(
+    response,
+    requestErr,
+    `Failed to lock service binding ${bindingName}`
+  );
+  if (checkErr) return err(checkErr);
+  const [lockHandle, extractErr] = extractLockHandle(text);
+  if (extractErr) return err(new Error(`Failed to extract lock handle: ${extractErr.message}`));
+  return ok(lockHandle);
+}
+async function unlockServiceBinding(client, bindingName, lockHandle) {
+  const [response, requestErr] = await client.request({
+    method: "POST",
+    path: bindingPath(bindingName),
+    params: {
+      "_action": "UNLOCK",
+      "lockHandle": lockHandle
+    }
+  });
+  const [, checkErr] = await checkResponse(
+    response,
+    requestErr,
+    `Failed to unlock service binding ${bindingName}`
+  );
+  if (checkErr) return err(checkErr);
+  return ok(void 0);
+}
+async function submitServiceBindingJob(client, bindingName, action) {
+  const path = action === "publish" ? PUBLISH_JOBS_PATH : UNPUBLISH_JOBS_PATH;
+  const body = `<?xml version="1.0" encoding="UTF-8"?>
+<adtcore:objectReferences xmlns:adtcore="http://www.sap.com/adt/core">
+  <adtcore:objectReference adtcore:type="SCGR" adtcore:name="${bindingName.toUpperCase()}"/>
+</adtcore:objectReferences>`;
+  const [response, requestErr] = await client.request({
+    method: "POST",
+    path,
+    headers: { "Content-Type": "application/xml" },
+    body
+  });
+  const [text, checkErr] = await checkResponse(
+    response,
+    requestErr,
+    `Failed to ${action} service binding ${bindingName}`
+  );
+  if (checkErr) return err(checkErr);
+  const severity = extractTagText(text, "SEVERITY");
+  if (severity && severity !== SEVERITY_OK2) {
+    const shortText = extractTagText(text, "SHORT_TEXT") ?? "";
+    return err(new Error(`Service binding ${action} failed (${severity}): ${shortText}`));
+  }
+  return ok(extractTagText(text, "SHORT_TEXT") ?? "");
+}
+
+// src/core/adt/businessservices/publish.ts
+async function publishServiceBinding(client, bindingName) {
+  return runBindingJob(client, bindingName, "publish");
+}
+async function runBindingJob(client, bindingName, action) {
+  const [lockHandle, lockErr] = await lockServiceBinding(client, bindingName);
+  if (lockErr) return err(lockErr);
+  debug(`Service binding lock acquired for ${action}: handle=${lockHandle}`);
+  const [message, jobErr] = await submitServiceBindingJob(client, bindingName, action);
+  const [, unlockErr] = await unlockServiceBinding(client, bindingName, lockHandle);
+  if (jobErr) return err(jobErr);
+  if (unlockErr) return err(unlockErr);
+  return ok(message);
+}
+
+// src/core/adt/businessservices/delete.ts
+async function deleteServiceBinding(client, bindingName, transport) {
+  const [lockHandle, lockErr] = await lockServiceBinding(client, bindingName);
+  if (lockErr) return err(lockErr);
+  const [, unpublishErr] = await submitServiceBindingJob(client, bindingName, "unpublish");
+  if (unpublishErr) debug(`Unpublish before delete skipped: ${unpublishErr.message}`);
+  const params = { lockHandle };
+  if (transport) params["corrNr"] = transport;
+  const [response, requestErr] = await client.request({
+    method: "DELETE",
+    path: bindingPath(bindingName),
+    params,
+    headers: { "Accept": "text/plain" }
+  });
+  const [, checkErr] = await checkResponse(
+    response,
+    requestErr,
+    `Failed to delete service binding ${bindingName}`
+  );
+  if (checkErr) {
+    await unlockServiceBinding(client, bindingName, lockHandle);
+    return err(checkErr);
+  }
+  return ok(void 0);
+}
+
 // src/client/methods/craud/read.ts
 async function read(state, requestor, objects) {
   if (!state.session) return err(new Error("Not logged in"));
@@ -3147,6 +3709,12 @@ async function countRows2(state, requestor, objectName, objectType, parameters =
   return countRows(requestor, objectName, objectType, parameters);
 }
 
+// src/client/methods/preview/freestyleQuery.ts
+async function freestyleQuery2(state, requestor, sqlQuery, limit, timeout) {
+  if (!state.session) return err(new Error("Not logged in"));
+  return freestyleQuery(requestor, sqlQuery, limit, timeout);
+}
+
 // src/client/methods/search/search.ts
 async function search(state, requestor, query, options) {
   if (!state.session) return err(new Error("Not logged in"));
@@ -3201,6 +3769,41 @@ function getObjectConfig() {
   return Object.values(OBJECT_CONFIG_MAP);
 }
 
+// src/client/methods/businessservices/createServiceBinding.ts
+async function createServiceBinding(state, requestor, options) {
+  if (!state.session) return err(new Error("Not logged in"));
+  const [, validateErr] = await validateServiceBinding(requestor, options);
+  if (validateErr) return err(validateErr);
+  const [, createErr] = await createServiceBindingObject(requestor, options, state.session.username);
+  if (createErr) return err(createErr);
+  const [activation, activateErr] = await activateServiceBinding(requestor, options.bindingName);
+  if (activateErr) return err(activateErr);
+  if (activation.some((result2) => result2.status === "error")) {
+    return err(new Error(`Service binding ${options.bindingName} failed activation`));
+  }
+  const result = {
+    name: options.bindingName.toUpperCase(),
+    serviceDefinition: options.serviceDefinition.toUpperCase(),
+    created: true,
+    activation,
+    published: false
+  };
+  if (options.publish === false) {
+    return ok(result);
+  }
+  const [publishMessage, publishErr] = await publishServiceBinding(requestor, options.bindingName);
+  if (publishErr) return err(publishErr);
+  result.published = true;
+  if (publishMessage) result.publishMessage = publishMessage;
+  return ok(result);
+}
+
+// src/client/methods/businessservices/deleteServiceBinding.ts
+async function deleteServiceBinding2(state, requestor, bindingName, transport) {
+  if (!state.session) return err(new Error("Not logged in"));
+  return deleteServiceBinding(requestor, bindingName, transport);
+}
+
 // src/client/methods/internal/cookies.ts
 function storeCookies(cookies, response) {
   const setCookieHeader = response.headers.get("set-cookie");
@@ -3330,7 +3933,7 @@ function buildUrl2(baseUrl, path, params) {
 // src/client/methods/internal/request.ts
 async function executeRequest(deps, options, selfRequest) {
   const { state, ssoCerts, getCookieHeader, storeCookies: storeCookies2 } = deps;
-  const { method, path, params, headers: customHeaders, body } = options;
+  const { method, path, params, headers: customHeaders, body, timeout: requestTimeout } = options;
   const { config } = state;
   debug(`Request ${method} ${path} - CSRF token in state: ${state.csrfToken?.substring(0, 20) || "null"}...`);
   const headers = buildRequestHeaders(
@@ -3357,7 +3960,7 @@ async function executeRequest(deps, options, selfRequest) {
       cert: ssoCerts?.cert,
       key: ssoCerts?.key,
       rejectUnauthorized: !config.insecure,
-      timeout: config.timeout ?? DEFAULT_TIMEOUT
+      timeout: requestTimeout ?? config.timeout ?? DEFAULT_TIMEOUT
     });
     storeCookies2(response);
     if (response.status === 403) {
@@ -3380,7 +3983,7 @@ async function executeRequest(deps, options, selfRequest) {
           cert: ssoCerts?.cert,
           key: ssoCerts?.key,
           rejectUnauthorized: !config.insecure,
-          timeout: config.timeout ?? DEFAULT_TIMEOUT
+          timeout: requestTimeout ?? config.timeout ?? DEFAULT_TIMEOUT
         });
         storeCookies2(retryResponse);
         return ok(retryResponse);
@@ -3551,6 +4154,9 @@ var ADTClientImpl = class {
   async countRows(objectName, objectType, parameters = []) {
     return countRows2(this.state, this.requestor, objectName, objectType, parameters);
   }
+  async freestyleQuery(sqlQuery, limit, timeout) {
+    return freestyleQuery2(this.state, this.requestor, sqlQuery, limit, timeout);
+  }
   // --- Search ---
   async search(query, options) {
     return search(this.state, this.requestor, query, options);
@@ -3575,6 +4181,13 @@ var ADTClientImpl = class {
   async gitDiff(objects) {
     return gitDiff2(this.state, this.requestor, objects);
   }
+  // --- Business Services ---
+  async createServiceBinding(options) {
+    return createServiceBinding(this.state, this.requestor, options);
+  }
+  async deleteServiceBinding(bindingName, transport) {
+    return deleteServiceBinding2(this.state, this.requestor, bindingName, transport);
+  }
   // --- Configuration ---
   getObjectConfig() {
     return getObjectConfig();
@@ -3592,6 +4205,7 @@ function createClient(config) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  BehaviorImplementationType,
   ExternalReferencesError,
   activateLogging,
   buildSQLQuery,