cds-caching 2.0.1 → 2.1.0

package/README.md

@@ -25,6 +25,7 @@ Please also read the introduction blog post: [Boosting performance in SAP Cloud
 | [Programmatic API](docs/programmatic-api.md) | Full API reference for cache operations |
 | [Protocol Support](docs/protocols.md) | Caching across OData, REST, GraphQL, HCQL, and MCP |
 | [Key Management](docs/key-management.md) | Key templates, context awareness, custom keys |
+| [Security](docs/security.md) | Authorization, cache key isolation, production checklist |
 | [Metrics Guide](docs/metrics-guide.md) | Statistics, monitoring, and performance tracking |
 | [OpenTelemetry Integration](docs/telemetry.md) | Distributed tracing and metrics export |
 | [OData API](docs/odata-api.md) | REST endpoints for management and monitoring |
@@ -33,6 +34,7 @@ Please also read the introduction blog post: [Boosting performance in SAP Cloud
 | [Deployment Guide](docs/deployment-guide.md) | SAP BTP deployment for Redis, PostgreSQL, HANA, CDS |
 | [Migration Guide](docs/migration-guide.md) | **Upgrading to 2.0** and earlier releases |
 | [Example Application](docs/example-app.md) | Sample app with caching patterns |
+| [Federation Integration](docs/federation.md) | Using cds-caching with [cds-data](https://github.com/mikezaschka/cds-data) |
 
 ## Getting Started
 
@@ -259,12 +261,14 @@ See **[Feature Activation](docs/feature-activation.md)** for reuse vs own activa
 | BTP with HTML5 repo | `cds add caching-metrics` + `metrics.enabled` — no `metrics.reuse.dashboard` |
 | API only, no UI | `metrics.reuse.api` or `using … index.cds` + `metrics.enabled` |
 
-Restrict access with a fully-qualified annotate — do **not** repeat the `using` import:
+The API requires an authenticated user by default. Restrict it to an administrative role with a fully-qualified annotate — do **not** repeat the `using` import:
 
 ```cds
-annotate plugin.cds_caching.CachingApiService with @requires: 'authenticated-user';
+annotate plugin.cds_caching.CachingApiService with @requires: 'CacheAdmin';
 ```
 
+See the [Security Guide](docs/security.md) for the production checklist, including cache key isolation for user-filtered data.
+
 ## Multi-Tenancy (MTX)
 
 cds-caching supports SAP BTP multi-tenant applications using `@sap/cds-mtxs`. When multitenancy is detected, the plugin automatically:
@@ -436,6 +440,10 @@ To add the monitoring dashboard, use `metrics.reuse.dashboard` for local reuse,
 | [Programmatic API](docs/programmatic-api.md) | JavaScript methods for cache operations |
 | [OData API](docs/odata-api.md) | REST endpoints for monitoring and management |
 
+## Related Projects
+
+[cds-data](https://github.com/mikezaschka/cds-data) provides composable CAP plugins for federation, replication, and materialization. Use `cds-caching` as the optional peer for `cache.strategy: 'response'` on `@federation.delegate` / `@federation.replicate` views — see [Federation Integration](docs/federation.md).
+
 ## Contributing
 
 Contributions are welcome! Please submit pull requests to the [repository](https://github.com/mikezaschka/cds-caching).

package/app/dashboard/resources/Eventing-preload-0.js

@@ -102,7 +102,7 @@ sap.ui.predefine("sap/base/util/merge", ["./_merge"],function(e){"use strict";va
  * (c) Copyright 2025 SAP SE or an SAP affiliate company.
  * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
  */
-sap.ui.predefine("sap/ui/Global", ["sap/ui/VersionInfo","sap/base/Log","sap/base/assert","sap/base/util/ObjectPath"],function(e,a,r,t){"use strict";if(globalThis.OpenAjax&&globalThis.OpenAjax.hub){OpenAjax.hub.registerLibrary("sap","http://www.sap.com/","0.1",{})}var n;let s={version:"1.136.0",buildinfo:{lastchange:"",buildtime:"20260710-1901"}};s=Object.assign(sap.ui,s);var o=sap.ui.loader._.getSyncCallBehavior();sap.ui.getVersionInfo=function(r){if(r&&r.async){a.info("Do not use deprecated function 'sap.ui.getVersionInfo'. Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead")}else{a.warning("Do not use deprecated function 'sap.ui.getVersionInfo' synchronously! Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead","Deprecation",null,function(){return{type:"sap.ui.getVersionInfo",name:"Global"}})}return e._load(r)};sap.ui.namespace=function(e){r(false,"sap.ui.namespace is long time deprecated and shouldn't be used");return t.create(e)};sap.ui.lazyRequire=function(e,s,i){r(typeof e==="string"&&e,"lazyRequire: sClassName must be a non-empty string");r(!s||typeof s==="string","lazyRequire: sMethods must be empty or a string");if(o===2){a.error("[nosync] lazy stub creation ignored for '"+e+"'");return}var u=e.replace(/\//gi,"."),l=u.lastIndexOf("."),c=u.substr(0,l),p=u.substr(l+1),f=t.create(c),y=f[p],d=(s||"new").split(" "),b=d.indexOf("new");i=i||u;if(!y){if(b>=0){y=function(){if(o){if(o===1){a.error("[nosync] lazy stub for constructor '"+u+"' called")}}else{a.debug("lazy stub for constructor '"+u+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function","lazyRequire: oRealClass must be a function after loading");if(t._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"'has not been replaced by module '"+i+"'")}var s=Object.create(t.prototype);if(!(this instanceof y)){n=n||sap.ui.require("sap/ui/base/Object");if(n&&s instanceof n){a.error("Constructor "+e+' has been called without "new" operator!',null,null,function(){try{throw new Error}catch(e){return e}})}}var l=t.apply(s,arguments);if(l&&(typeof l==="function"||typeof l==="object")){s=l}return s};y._sapUiLazyLoader=true;d.splice(b,1)}else{y={}}f[p]=y}d.forEach(function(e){if(!y[e]){y[e]=function(){if(o){if(o===1){a.error("[no-sync] lazy stub for method '"+u+"."+e+"' called")}}else{a.debug("lazy stub for method '"+u+"."+e+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function"||typeof t==="object","lazyRequire: oRealClass must be a function or object after loading");r(typeof t[e]==="function","lazyRequire: method must be a function");if(t[e]._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"."+e+"' has not been replaced by loaded module '"+i+"'")}return t[e].apply(t,arguments)};y[e]._sapUiLazyLoader=true}})};sap.ui.lazyRequire._isStub=function(e){r(typeof e==="string"&&e,"lazyRequire._isStub: sClassName must be a non-empty string");var a=e.lastIndexOf("."),n=e.slice(0,a),s=e.slice(a+1),o=t.get(n||"");return!!(o&&typeof o[s]==="function"&&o[s]._sapUiLazyLoader)};sap.ui.resource=function(e,a){r(typeof e==="string","sLibraryName must be a string");r(typeof a==="string","sResourcePath must be a string");return sap.ui.require.toUrl((String(e).replace(/\./g,"/")+"/"+a).replace(/^\/*/,""))};sap.ui.localResources=function(e){r(e,"sNamespace must not be empty");var a={};a[e.replace(/\./g,"/")]="./"+e.replace(/\./g,"/");sap.ui.loader.config({paths:a})};return s});
+sap.ui.predefine("sap/ui/Global", ["sap/ui/VersionInfo","sap/base/Log","sap/base/assert","sap/base/util/ObjectPath"],function(e,a,r,t){"use strict";if(globalThis.OpenAjax&&globalThis.OpenAjax.hub){OpenAjax.hub.registerLibrary("sap","http://www.sap.com/","0.1",{})}var n;let s={version:"1.136.0",buildinfo:{lastchange:"",buildtime:"20260816-1454"}};s=Object.assign(sap.ui,s);var o=sap.ui.loader._.getSyncCallBehavior();sap.ui.getVersionInfo=function(r){if(r&&r.async){a.info("Do not use deprecated function 'sap.ui.getVersionInfo'. Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead")}else{a.warning("Do not use deprecated function 'sap.ui.getVersionInfo' synchronously! Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead","Deprecation",null,function(){return{type:"sap.ui.getVersionInfo",name:"Global"}})}return e._load(r)};sap.ui.namespace=function(e){r(false,"sap.ui.namespace is long time deprecated and shouldn't be used");return t.create(e)};sap.ui.lazyRequire=function(e,s,i){r(typeof e==="string"&&e,"lazyRequire: sClassName must be a non-empty string");r(!s||typeof s==="string","lazyRequire: sMethods must be empty or a string");if(o===2){a.error("[nosync] lazy stub creation ignored for '"+e+"'");return}var u=e.replace(/\//gi,"."),l=u.lastIndexOf("."),c=u.substr(0,l),p=u.substr(l+1),f=t.create(c),y=f[p],d=(s||"new").split(" "),b=d.indexOf("new");i=i||u;if(!y){if(b>=0){y=function(){if(o){if(o===1){a.error("[nosync] lazy stub for constructor '"+u+"' called")}}else{a.debug("lazy stub for constructor '"+u+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function","lazyRequire: oRealClass must be a function after loading");if(t._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"'has not been replaced by module '"+i+"'")}var s=Object.create(t.prototype);if(!(this instanceof y)){n=n||sap.ui.require("sap/ui/base/Object");if(n&&s instanceof n){a.error("Constructor "+e+' has been called without "new" operator!',null,null,function(){try{throw new Error}catch(e){return e}})}}var l=t.apply(s,arguments);if(l&&(typeof l==="function"||typeof l==="object")){s=l}return s};y._sapUiLazyLoader=true;d.splice(b,1)}else{y={}}f[p]=y}d.forEach(function(e){if(!y[e]){y[e]=function(){if(o){if(o===1){a.error("[no-sync] lazy stub for method '"+u+"."+e+"' called")}}else{a.debug("lazy stub for method '"+u+"."+e+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function"||typeof t==="object","lazyRequire: oRealClass must be a function or object after loading");r(typeof t[e]==="function","lazyRequire: method must be a function");if(t[e]._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"."+e+"' has not been replaced by loaded module '"+i+"'")}return t[e].apply(t,arguments)};y[e]._sapUiLazyLoader=true}})};sap.ui.lazyRequire._isStub=function(e){r(typeof e==="string"&&e,"lazyRequire._isStub: sClassName must be a non-empty string");var a=e.lastIndexOf("."),n=e.slice(0,a),s=e.slice(a+1),o=t.get(n||"");return!!(o&&typeof o[s]==="function"&&o[s]._sapUiLazyLoader)};sap.ui.resource=function(e,a){r(typeof e==="string","sLibraryName must be a string");r(typeof a==="string","sResourcePath must be a string");return sap.ui.require.toUrl((String(e).replace(/\./g,"/")+"/"+a).replace(/^\/*/,""))};sap.ui.localResources=function(e){r(e,"sNamespace must not be empty");var a={};a[e.replace(/\./g,"/")]="./"+e.replace(/\./g,"/");sap.ui.loader.config({paths:a})};return s});
 /*!
  * OpenUI5
  * (c) Copyright 2025 SAP SE or an SAP affiliate company.

package/app/dashboard/resources/Library-preload.js

@@ -76,7 +76,7 @@ sap.ui.predefine("sap/base/util/resolveReference", ["sap/base/util/ObjectPath"],
  * (c) Copyright 2025 SAP SE or an SAP affiliate company.
  * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
  */
-sap.ui.predefine("sap/ui/Global", ["sap/ui/VersionInfo","sap/base/Log","sap/base/assert","sap/base/util/ObjectPath"],function(e,a,r,t){"use strict";if(globalThis.OpenAjax&&globalThis.OpenAjax.hub){OpenAjax.hub.registerLibrary("sap","http://www.sap.com/","0.1",{})}var n;let s={version:"1.136.0",buildinfo:{lastchange:"",buildtime:"20260710-1901"}};s=Object.assign(sap.ui,s);var o=sap.ui.loader._.getSyncCallBehavior();sap.ui.getVersionInfo=function(r){if(r&&r.async){a.info("Do not use deprecated function 'sap.ui.getVersionInfo'. Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead")}else{a.warning("Do not use deprecated function 'sap.ui.getVersionInfo' synchronously! Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead","Deprecation",null,function(){return{type:"sap.ui.getVersionInfo",name:"Global"}})}return e._load(r)};sap.ui.namespace=function(e){r(false,"sap.ui.namespace is long time deprecated and shouldn't be used");return t.create(e)};sap.ui.lazyRequire=function(e,s,i){r(typeof e==="string"&&e,"lazyRequire: sClassName must be a non-empty string");r(!s||typeof s==="string","lazyRequire: sMethods must be empty or a string");if(o===2){a.error("[nosync] lazy stub creation ignored for '"+e+"'");return}var u=e.replace(/\//gi,"."),l=u.lastIndexOf("."),c=u.substr(0,l),p=u.substr(l+1),f=t.create(c),y=f[p],d=(s||"new").split(" "),b=d.indexOf("new");i=i||u;if(!y){if(b>=0){y=function(){if(o){if(o===1){a.error("[nosync] lazy stub for constructor '"+u+"' called")}}else{a.debug("lazy stub for constructor '"+u+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function","lazyRequire: oRealClass must be a function after loading");if(t._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"'has not been replaced by module '"+i+"'")}var s=Object.create(t.prototype);if(!(this instanceof y)){n=n||sap.ui.require("sap/ui/base/Object");if(n&&s instanceof n){a.error("Constructor "+e+' has been called without "new" operator!',null,null,function(){try{throw new Error}catch(e){return e}})}}var l=t.apply(s,arguments);if(l&&(typeof l==="function"||typeof l==="object")){s=l}return s};y._sapUiLazyLoader=true;d.splice(b,1)}else{y={}}f[p]=y}d.forEach(function(e){if(!y[e]){y[e]=function(){if(o){if(o===1){a.error("[no-sync] lazy stub for method '"+u+"."+e+"' called")}}else{a.debug("lazy stub for method '"+u+"."+e+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function"||typeof t==="object","lazyRequire: oRealClass must be a function or object after loading");r(typeof t[e]==="function","lazyRequire: method must be a function");if(t[e]._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"."+e+"' has not been replaced by loaded module '"+i+"'")}return t[e].apply(t,arguments)};y[e]._sapUiLazyLoader=true}})};sap.ui.lazyRequire._isStub=function(e){r(typeof e==="string"&&e,"lazyRequire._isStub: sClassName must be a non-empty string");var a=e.lastIndexOf("."),n=e.slice(0,a),s=e.slice(a+1),o=t.get(n||"");return!!(o&&typeof o[s]==="function"&&o[s]._sapUiLazyLoader)};sap.ui.resource=function(e,a){r(typeof e==="string","sLibraryName must be a string");r(typeof a==="string","sResourcePath must be a string");return sap.ui.require.toUrl((String(e).replace(/\./g,"/")+"/"+a).replace(/^\/*/,""))};sap.ui.localResources=function(e){r(e,"sNamespace must not be empty");var a={};a[e.replace(/\./g,"/")]="./"+e.replace(/\./g,"/");sap.ui.loader.config({paths:a})};return s});
+sap.ui.predefine("sap/ui/Global", ["sap/ui/VersionInfo","sap/base/Log","sap/base/assert","sap/base/util/ObjectPath"],function(e,a,r,t){"use strict";if(globalThis.OpenAjax&&globalThis.OpenAjax.hub){OpenAjax.hub.registerLibrary("sap","http://www.sap.com/","0.1",{})}var n;let s={version:"1.136.0",buildinfo:{lastchange:"",buildtime:"20260816-1454"}};s=Object.assign(sap.ui,s);var o=sap.ui.loader._.getSyncCallBehavior();sap.ui.getVersionInfo=function(r){if(r&&r.async){a.info("Do not use deprecated function 'sap.ui.getVersionInfo'. Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead")}else{a.warning("Do not use deprecated function 'sap.ui.getVersionInfo' synchronously! Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead","Deprecation",null,function(){return{type:"sap.ui.getVersionInfo",name:"Global"}})}return e._load(r)};sap.ui.namespace=function(e){r(false,"sap.ui.namespace is long time deprecated and shouldn't be used");return t.create(e)};sap.ui.lazyRequire=function(e,s,i){r(typeof e==="string"&&e,"lazyRequire: sClassName must be a non-empty string");r(!s||typeof s==="string","lazyRequire: sMethods must be empty or a string");if(o===2){a.error("[nosync] lazy stub creation ignored for '"+e+"'");return}var u=e.replace(/\//gi,"."),l=u.lastIndexOf("."),c=u.substr(0,l),p=u.substr(l+1),f=t.create(c),y=f[p],d=(s||"new").split(" "),b=d.indexOf("new");i=i||u;if(!y){if(b>=0){y=function(){if(o){if(o===1){a.error("[nosync] lazy stub for constructor '"+u+"' called")}}else{a.debug("lazy stub for constructor '"+u+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function","lazyRequire: oRealClass must be a function after loading");if(t._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"'has not been replaced by module '"+i+"'")}var s=Object.create(t.prototype);if(!(this instanceof y)){n=n||sap.ui.require("sap/ui/base/Object");if(n&&s instanceof n){a.error("Constructor "+e+' has been called without "new" operator!',null,null,function(){try{throw new Error}catch(e){return e}})}}var l=t.apply(s,arguments);if(l&&(typeof l==="function"||typeof l==="object")){s=l}return s};y._sapUiLazyLoader=true;d.splice(b,1)}else{y={}}f[p]=y}d.forEach(function(e){if(!y[e]){y[e]=function(){if(o){if(o===1){a.error("[no-sync] lazy stub for method '"+u+"."+e+"' called")}}else{a.debug("lazy stub for method '"+u+"."+e+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function"||typeof t==="object","lazyRequire: oRealClass must be a function or object after loading");r(typeof t[e]==="function","lazyRequire: method must be a function");if(t[e]._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"."+e+"' has not been replaced by loaded module '"+i+"'")}return t[e].apply(t,arguments)};y[e]._sapUiLazyLoader=true}})};sap.ui.lazyRequire._isStub=function(e){r(typeof e==="string"&&e,"lazyRequire._isStub: sClassName must be a non-empty string");var a=e.lastIndexOf("."),n=e.slice(0,a),s=e.slice(a+1),o=t.get(n||"");return!!(o&&typeof o[s]==="function"&&o[s]._sapUiLazyLoader)};sap.ui.resource=function(e,a){r(typeof e==="string","sLibraryName must be a string");r(typeof a==="string","sResourcePath must be a string");return sap.ui.require.toUrl((String(e).replace(/\./g,"/")+"/"+a).replace(/^\/*/,""))};sap.ui.localResources=function(e){r(e,"sNamespace must not be empty");var a={};a[e.replace(/\./g,"/")]="./"+e.replace(/\./g,"/");sap.ui.loader.config({paths:a})};return s});
 /*!
  * OpenUI5
  * (c) Copyright 2025 SAP SE or an SAP affiliate company.

package/app/dashboard/resources/sap/ui/Global-dbg.js

@@ -61,7 +61,7 @@ sap.ui.define([
 		 */
 		version: "1.136.0",
 		// buildinfo.lastchange is deprecated and is therefore defaulted to empty string
-		buildinfo : { lastchange : "", buildtime : "20260710-1901" }
+		buildinfo : { lastchange : "", buildtime : "20260816-1454" }
 	};
 
 	/**

package/app/dashboard/resources/sap/ui/Global.js

@@ -3,5 +3,5 @@
  * (c) Copyright 2025 SAP SE or an SAP affiliate company.
  * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
  */
-sap.ui.define(["sap/ui/VersionInfo","sap/base/Log","sap/base/assert","sap/base/util/ObjectPath"],function(e,a,r,t){"use strict";if(globalThis.OpenAjax&&globalThis.OpenAjax.hub){OpenAjax.hub.registerLibrary("sap","http://www.sap.com/","0.1",{})}var n;let s={version:"1.136.0",buildinfo:{lastchange:"",buildtime:"20260710-1901"}};s=Object.assign(sap.ui,s);var o=sap.ui.loader._.getSyncCallBehavior();sap.ui.getVersionInfo=function(r){if(r&&r.async){a.info("Do not use deprecated function 'sap.ui.getVersionInfo'. Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead")}else{a.warning("Do not use deprecated function 'sap.ui.getVersionInfo' synchronously! Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead","Deprecation",null,function(){return{type:"sap.ui.getVersionInfo",name:"Global"}})}return e._load(r)};sap.ui.namespace=function(e){r(false,"sap.ui.namespace is long time deprecated and shouldn't be used");return t.create(e)};sap.ui.lazyRequire=function(e,s,i){r(typeof e==="string"&&e,"lazyRequire: sClassName must be a non-empty string");r(!s||typeof s==="string","lazyRequire: sMethods must be empty or a string");if(o===2){a.error("[nosync] lazy stub creation ignored for '"+e+"'");return}var u=e.replace(/\//gi,"."),l=u.lastIndexOf("."),c=u.substr(0,l),p=u.substr(l+1),f=t.create(c),y=f[p],d=(s||"new").split(" "),b=d.indexOf("new");i=i||u;if(!y){if(b>=0){y=function(){if(o){if(o===1){a.error("[nosync] lazy stub for constructor '"+u+"' called")}}else{a.debug("lazy stub for constructor '"+u+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function","lazyRequire: oRealClass must be a function after loading");if(t._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"'has not been replaced by module '"+i+"'")}var s=Object.create(t.prototype);if(!(this instanceof y)){n=n||sap.ui.require("sap/ui/base/Object");if(n&&s instanceof n){a.error("Constructor "+e+' has been called without "new" operator!',null,null,function(){try{throw new Error}catch(e){return e}})}}var l=t.apply(s,arguments);if(l&&(typeof l==="function"||typeof l==="object")){s=l}return s};y._sapUiLazyLoader=true;d.splice(b,1)}else{y={}}f[p]=y}d.forEach(function(e){if(!y[e]){y[e]=function(){if(o){if(o===1){a.error("[no-sync] lazy stub for method '"+u+"."+e+"' called")}}else{a.debug("lazy stub for method '"+u+"."+e+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function"||typeof t==="object","lazyRequire: oRealClass must be a function or object after loading");r(typeof t[e]==="function","lazyRequire: method must be a function");if(t[e]._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"."+e+"' has not been replaced by loaded module '"+i+"'")}return t[e].apply(t,arguments)};y[e]._sapUiLazyLoader=true}})};sap.ui.lazyRequire._isStub=function(e){r(typeof e==="string"&&e,"lazyRequire._isStub: sClassName must be a non-empty string");var a=e.lastIndexOf("."),n=e.slice(0,a),s=e.slice(a+1),o=t.get(n||"");return!!(o&&typeof o[s]==="function"&&o[s]._sapUiLazyLoader)};sap.ui.resource=function(e,a){r(typeof e==="string","sLibraryName must be a string");r(typeof a==="string","sResourcePath must be a string");return sap.ui.require.toUrl((String(e).replace(/\./g,"/")+"/"+a).replace(/^\/*/,""))};sap.ui.localResources=function(e){r(e,"sNamespace must not be empty");var a={};a[e.replace(/\./g,"/")]="./"+e.replace(/\./g,"/");sap.ui.loader.config({paths:a})};return s});
+sap.ui.define(["sap/ui/VersionInfo","sap/base/Log","sap/base/assert","sap/base/util/ObjectPath"],function(e,a,r,t){"use strict";if(globalThis.OpenAjax&&globalThis.OpenAjax.hub){OpenAjax.hub.registerLibrary("sap","http://www.sap.com/","0.1",{})}var n;let s={version:"1.136.0",buildinfo:{lastchange:"",buildtime:"20260816-1454"}};s=Object.assign(sap.ui,s);var o=sap.ui.loader._.getSyncCallBehavior();sap.ui.getVersionInfo=function(r){if(r&&r.async){a.info("Do not use deprecated function 'sap.ui.getVersionInfo'. Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead")}else{a.warning("Do not use deprecated function 'sap.ui.getVersionInfo' synchronously! Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead","Deprecation",null,function(){return{type:"sap.ui.getVersionInfo",name:"Global"}})}return e._load(r)};sap.ui.namespace=function(e){r(false,"sap.ui.namespace is long time deprecated and shouldn't be used");return t.create(e)};sap.ui.lazyRequire=function(e,s,i){r(typeof e==="string"&&e,"lazyRequire: sClassName must be a non-empty string");r(!s||typeof s==="string","lazyRequire: sMethods must be empty or a string");if(o===2){a.error("[nosync] lazy stub creation ignored for '"+e+"'");return}var u=e.replace(/\//gi,"."),l=u.lastIndexOf("."),c=u.substr(0,l),p=u.substr(l+1),f=t.create(c),y=f[p],d=(s||"new").split(" "),b=d.indexOf("new");i=i||u;if(!y){if(b>=0){y=function(){if(o){if(o===1){a.error("[nosync] lazy stub for constructor '"+u+"' called")}}else{a.debug("lazy stub for constructor '"+u+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function","lazyRequire: oRealClass must be a function after loading");if(t._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"'has not been replaced by module '"+i+"'")}var s=Object.create(t.prototype);if(!(this instanceof y)){n=n||sap.ui.require("sap/ui/base/Object");if(n&&s instanceof n){a.error("Constructor "+e+' has been called without "new" operator!',null,null,function(){try{throw new Error}catch(e){return e}})}}var l=t.apply(s,arguments);if(l&&(typeof l==="function"||typeof l==="object")){s=l}return s};y._sapUiLazyLoader=true;d.splice(b,1)}else{y={}}f[p]=y}d.forEach(function(e){if(!y[e]){y[e]=function(){if(o){if(o===1){a.error("[no-sync] lazy stub for method '"+u+"."+e+"' called")}}else{a.debug("lazy stub for method '"+u+"."+e+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function"||typeof t==="object","lazyRequire: oRealClass must be a function or object after loading");r(typeof t[e]==="function","lazyRequire: method must be a function");if(t[e]._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"."+e+"' has not been replaced by loaded module '"+i+"'")}return t[e].apply(t,arguments)};y[e]._sapUiLazyLoader=true}})};sap.ui.lazyRequire._isStub=function(e){r(typeof e==="string"&&e,"lazyRequire._isStub: sClassName must be a non-empty string");var a=e.lastIndexOf("."),n=e.slice(0,a),s=e.slice(a+1),o=t.get(n||"");return!!(o&&typeof o[s]==="function"&&o[s]._sapUiLazyLoader)};sap.ui.resource=function(e,a){r(typeof e==="string","sLibraryName must be a string");r(typeof a==="string","sResourcePath must be a string");return sap.ui.require.toUrl((String(e).replace(/\./g,"/")+"/"+a).replace(/^\/*/,""))};sap.ui.localResources=function(e){r(e,"sNamespace must not be empty");var a={};a[e.replace(/\./g,"/")]="./"+e.replace(/\./g,"/");sap.ui.loader.config({paths:a})};return s});
 //# sourceMappingURL=Global.js.map

package/app/dashboard/resources/sap/ui/test/starter/runTest.js

@@ -351,7 +351,7 @@ sap.ui.predefine("sap/base/util/uid", [],function(){"use strict";var e=0;var n=f
  * (c) Copyright 2025 SAP SE or an SAP affiliate company.
  * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
  */
-sap.ui.predefine("sap/ui/Global", ["sap/ui/VersionInfo","sap/base/Log","sap/base/assert","sap/base/util/ObjectPath"],function(e,a,r,t){"use strict";if(globalThis.OpenAjax&&globalThis.OpenAjax.hub){OpenAjax.hub.registerLibrary("sap","http://www.sap.com/","0.1",{})}var n;let s={version:"1.136.0",buildinfo:{lastchange:"",buildtime:"20260710-1901"}};s=Object.assign(sap.ui,s);var o=sap.ui.loader._.getSyncCallBehavior();sap.ui.getVersionInfo=function(r){if(r&&r.async){a.info("Do not use deprecated function 'sap.ui.getVersionInfo'. Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead")}else{a.warning("Do not use deprecated function 'sap.ui.getVersionInfo' synchronously! Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead","Deprecation",null,function(){return{type:"sap.ui.getVersionInfo",name:"Global"}})}return e._load(r)};sap.ui.namespace=function(e){r(false,"sap.ui.namespace is long time deprecated and shouldn't be used");return t.create(e)};sap.ui.lazyRequire=function(e,s,i){r(typeof e==="string"&&e,"lazyRequire: sClassName must be a non-empty string");r(!s||typeof s==="string","lazyRequire: sMethods must be empty or a string");if(o===2){a.error("[nosync] lazy stub creation ignored for '"+e+"'");return}var u=e.replace(/\//gi,"."),l=u.lastIndexOf("."),c=u.substr(0,l),p=u.substr(l+1),f=t.create(c),y=f[p],d=(s||"new").split(" "),b=d.indexOf("new");i=i||u;if(!y){if(b>=0){y=function(){if(o){if(o===1){a.error("[nosync] lazy stub for constructor '"+u+"' called")}}else{a.debug("lazy stub for constructor '"+u+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function","lazyRequire: oRealClass must be a function after loading");if(t._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"'has not been replaced by module '"+i+"'")}var s=Object.create(t.prototype);if(!(this instanceof y)){n=n||sap.ui.require("sap/ui/base/Object");if(n&&s instanceof n){a.error("Constructor "+e+' has been called without "new" operator!',null,null,function(){try{throw new Error}catch(e){return e}})}}var l=t.apply(s,arguments);if(l&&(typeof l==="function"||typeof l==="object")){s=l}return s};y._sapUiLazyLoader=true;d.splice(b,1)}else{y={}}f[p]=y}d.forEach(function(e){if(!y[e]){y[e]=function(){if(o){if(o===1){a.error("[no-sync] lazy stub for method '"+u+"."+e+"' called")}}else{a.debug("lazy stub for method '"+u+"."+e+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function"||typeof t==="object","lazyRequire: oRealClass must be a function or object after loading");r(typeof t[e]==="function","lazyRequire: method must be a function");if(t[e]._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"."+e+"' has not been replaced by loaded module '"+i+"'")}return t[e].apply(t,arguments)};y[e]._sapUiLazyLoader=true}})};sap.ui.lazyRequire._isStub=function(e){r(typeof e==="string"&&e,"lazyRequire._isStub: sClassName must be a non-empty string");var a=e.lastIndexOf("."),n=e.slice(0,a),s=e.slice(a+1),o=t.get(n||"");return!!(o&&typeof o[s]==="function"&&o[s]._sapUiLazyLoader)};sap.ui.resource=function(e,a){r(typeof e==="string","sLibraryName must be a string");r(typeof a==="string","sResourcePath must be a string");return sap.ui.require.toUrl((String(e).replace(/\./g,"/")+"/"+a).replace(/^\/*/,""))};sap.ui.localResources=function(e){r(e,"sNamespace must not be empty");var a={};a[e.replace(/\./g,"/")]="./"+e.replace(/\./g,"/");sap.ui.loader.config({paths:a})};return s});
+sap.ui.predefine("sap/ui/Global", ["sap/ui/VersionInfo","sap/base/Log","sap/base/assert","sap/base/util/ObjectPath"],function(e,a,r,t){"use strict";if(globalThis.OpenAjax&&globalThis.OpenAjax.hub){OpenAjax.hub.registerLibrary("sap","http://www.sap.com/","0.1",{})}var n;let s={version:"1.136.0",buildinfo:{lastchange:"",buildtime:"20260816-1454"}};s=Object.assign(sap.ui,s);var o=sap.ui.loader._.getSyncCallBehavior();sap.ui.getVersionInfo=function(r){if(r&&r.async){a.info("Do not use deprecated function 'sap.ui.getVersionInfo'. Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead")}else{a.warning("Do not use deprecated function 'sap.ui.getVersionInfo' synchronously! Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead","Deprecation",null,function(){return{type:"sap.ui.getVersionInfo",name:"Global"}})}return e._load(r)};sap.ui.namespace=function(e){r(false,"sap.ui.namespace is long time deprecated and shouldn't be used");return t.create(e)};sap.ui.lazyRequire=function(e,s,i){r(typeof e==="string"&&e,"lazyRequire: sClassName must be a non-empty string");r(!s||typeof s==="string","lazyRequire: sMethods must be empty or a string");if(o===2){a.error("[nosync] lazy stub creation ignored for '"+e+"'");return}var u=e.replace(/\//gi,"."),l=u.lastIndexOf("."),c=u.substr(0,l),p=u.substr(l+1),f=t.create(c),y=f[p],d=(s||"new").split(" "),b=d.indexOf("new");i=i||u;if(!y){if(b>=0){y=function(){if(o){if(o===1){a.error("[nosync] lazy stub for constructor '"+u+"' called")}}else{a.debug("lazy stub for constructor '"+u+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function","lazyRequire: oRealClass must be a function after loading");if(t._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"'has not been replaced by module '"+i+"'")}var s=Object.create(t.prototype);if(!(this instanceof y)){n=n||sap.ui.require("sap/ui/base/Object");if(n&&s instanceof n){a.error("Constructor "+e+' has been called without "new" operator!',null,null,function(){try{throw new Error}catch(e){return e}})}}var l=t.apply(s,arguments);if(l&&(typeof l==="function"||typeof l==="object")){s=l}return s};y._sapUiLazyLoader=true;d.splice(b,1)}else{y={}}f[p]=y}d.forEach(function(e){if(!y[e]){y[e]=function(){if(o){if(o===1){a.error("[no-sync] lazy stub for method '"+u+"."+e+"' called")}}else{a.debug("lazy stub for method '"+u+"."+e+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function"||typeof t==="object","lazyRequire: oRealClass must be a function or object after loading");r(typeof t[e]==="function","lazyRequire: method must be a function");if(t[e]._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"."+e+"' has not been replaced by loaded module '"+i+"'")}return t[e].apply(t,arguments)};y[e]._sapUiLazyLoader=true}})};sap.ui.lazyRequire._isStub=function(e){r(typeof e==="string"&&e,"lazyRequire._isStub: sClassName must be a non-empty string");var a=e.lastIndexOf("."),n=e.slice(0,a),s=e.slice(a+1),o=t.get(n||"");return!!(o&&typeof o[s]==="function"&&o[s]._sapUiLazyLoader)};sap.ui.resource=function(e,a){r(typeof e==="string","sLibraryName must be a string");r(typeof a==="string","sResourcePath must be a string");return sap.ui.require.toUrl((String(e).replace(/\./g,"/")+"/"+a).replace(/^\/*/,""))};sap.ui.localResources=function(e){r(e,"sNamespace must not be empty");var a={};a[e.replace(/\./g,"/")]="./"+e.replace(/\./g,"/");sap.ui.loader.config({paths:a})};return s});
 /*!
  * OpenUI5
  * (c) Copyright 2025 SAP SE or an SAP affiliate company.

package/app/dashboard/resources/sap-ui-core-nojQuery.js

@@ -344,7 +344,7 @@ sap.ui.predefine("sap/base/util/uid", [],function(){"use strict";var e=0;var n=f
  * (c) Copyright 2025 SAP SE or an SAP affiliate company.
  * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
  */
-sap.ui.predefine("sap/ui/Global", ["sap/ui/VersionInfo","sap/base/Log","sap/base/assert","sap/base/util/ObjectPath"],function(e,a,r,t){"use strict";if(globalThis.OpenAjax&&globalThis.OpenAjax.hub){OpenAjax.hub.registerLibrary("sap","http://www.sap.com/","0.1",{})}var n;let s={version:"1.136.0",buildinfo:{lastchange:"",buildtime:"20260710-1901"}};s=Object.assign(sap.ui,s);var o=sap.ui.loader._.getSyncCallBehavior();sap.ui.getVersionInfo=function(r){if(r&&r.async){a.info("Do not use deprecated function 'sap.ui.getVersionInfo'. Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead")}else{a.warning("Do not use deprecated function 'sap.ui.getVersionInfo' synchronously! Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead","Deprecation",null,function(){return{type:"sap.ui.getVersionInfo",name:"Global"}})}return e._load(r)};sap.ui.namespace=function(e){r(false,"sap.ui.namespace is long time deprecated and shouldn't be used");return t.create(e)};sap.ui.lazyRequire=function(e,s,i){r(typeof e==="string"&&e,"lazyRequire: sClassName must be a non-empty string");r(!s||typeof s==="string","lazyRequire: sMethods must be empty or a string");if(o===2){a.error("[nosync] lazy stub creation ignored for '"+e+"'");return}var u=e.replace(/\//gi,"."),l=u.lastIndexOf("."),c=u.substr(0,l),p=u.substr(l+1),f=t.create(c),y=f[p],d=(s||"new").split(" "),b=d.indexOf("new");i=i||u;if(!y){if(b>=0){y=function(){if(o){if(o===1){a.error("[nosync] lazy stub for constructor '"+u+"' called")}}else{a.debug("lazy stub for constructor '"+u+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function","lazyRequire: oRealClass must be a function after loading");if(t._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"'has not been replaced by module '"+i+"'")}var s=Object.create(t.prototype);if(!(this instanceof y)){n=n||sap.ui.require("sap/ui/base/Object");if(n&&s instanceof n){a.error("Constructor "+e+' has been called without "new" operator!',null,null,function(){try{throw new Error}catch(e){return e}})}}var l=t.apply(s,arguments);if(l&&(typeof l==="function"||typeof l==="object")){s=l}return s};y._sapUiLazyLoader=true;d.splice(b,1)}else{y={}}f[p]=y}d.forEach(function(e){if(!y[e]){y[e]=function(){if(o){if(o===1){a.error("[no-sync] lazy stub for method '"+u+"."+e+"' called")}}else{a.debug("lazy stub for method '"+u+"."+e+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function"||typeof t==="object","lazyRequire: oRealClass must be a function or object after loading");r(typeof t[e]==="function","lazyRequire: method must be a function");if(t[e]._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"."+e+"' has not been replaced by loaded module '"+i+"'")}return t[e].apply(t,arguments)};y[e]._sapUiLazyLoader=true}})};sap.ui.lazyRequire._isStub=function(e){r(typeof e==="string"&&e,"lazyRequire._isStub: sClassName must be a non-empty string");var a=e.lastIndexOf("."),n=e.slice(0,a),s=e.slice(a+1),o=t.get(n||"");return!!(o&&typeof o[s]==="function"&&o[s]._sapUiLazyLoader)};sap.ui.resource=function(e,a){r(typeof e==="string","sLibraryName must be a string");r(typeof a==="string","sResourcePath must be a string");return sap.ui.require.toUrl((String(e).replace(/\./g,"/")+"/"+a).replace(/^\/*/,""))};sap.ui.localResources=function(e){r(e,"sNamespace must not be empty");var a={};a[e.replace(/\./g,"/")]="./"+e.replace(/\./g,"/");sap.ui.loader.config({paths:a})};return s});
+sap.ui.predefine("sap/ui/Global", ["sap/ui/VersionInfo","sap/base/Log","sap/base/assert","sap/base/util/ObjectPath"],function(e,a,r,t){"use strict";if(globalThis.OpenAjax&&globalThis.OpenAjax.hub){OpenAjax.hub.registerLibrary("sap","http://www.sap.com/","0.1",{})}var n;let s={version:"1.136.0",buildinfo:{lastchange:"",buildtime:"20260816-1454"}};s=Object.assign(sap.ui,s);var o=sap.ui.loader._.getSyncCallBehavior();sap.ui.getVersionInfo=function(r){if(r&&r.async){a.info("Do not use deprecated function 'sap.ui.getVersionInfo'. Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead")}else{a.warning("Do not use deprecated function 'sap.ui.getVersionInfo' synchronously! Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead","Deprecation",null,function(){return{type:"sap.ui.getVersionInfo",name:"Global"}})}return e._load(r)};sap.ui.namespace=function(e){r(false,"sap.ui.namespace is long time deprecated and shouldn't be used");return t.create(e)};sap.ui.lazyRequire=function(e,s,i){r(typeof e==="string"&&e,"lazyRequire: sClassName must be a non-empty string");r(!s||typeof s==="string","lazyRequire: sMethods must be empty or a string");if(o===2){a.error("[nosync] lazy stub creation ignored for '"+e+"'");return}var u=e.replace(/\//gi,"."),l=u.lastIndexOf("."),c=u.substr(0,l),p=u.substr(l+1),f=t.create(c),y=f[p],d=(s||"new").split(" "),b=d.indexOf("new");i=i||u;if(!y){if(b>=0){y=function(){if(o){if(o===1){a.error("[nosync] lazy stub for constructor '"+u+"' called")}}else{a.debug("lazy stub for constructor '"+u+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function","lazyRequire: oRealClass must be a function after loading");if(t._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"'has not been replaced by module '"+i+"'")}var s=Object.create(t.prototype);if(!(this instanceof y)){n=n||sap.ui.require("sap/ui/base/Object");if(n&&s instanceof n){a.error("Constructor "+e+' has been called without "new" operator!',null,null,function(){try{throw new Error}catch(e){return e}})}}var l=t.apply(s,arguments);if(l&&(typeof l==="function"||typeof l==="object")){s=l}return s};y._sapUiLazyLoader=true;d.splice(b,1)}else{y={}}f[p]=y}d.forEach(function(e){if(!y[e]){y[e]=function(){if(o){if(o===1){a.error("[no-sync] lazy stub for method '"+u+"."+e+"' called")}}else{a.debug("lazy stub for method '"+u+"."+e+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function"||typeof t==="object","lazyRequire: oRealClass must be a function or object after loading");r(typeof t[e]==="function","lazyRequire: method must be a function");if(t[e]._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"."+e+"' has not been replaced by loaded module '"+i+"'")}return t[e].apply(t,arguments)};y[e]._sapUiLazyLoader=true}})};sap.ui.lazyRequire._isStub=function(e){r(typeof e==="string"&&e,"lazyRequire._isStub: sClassName must be a non-empty string");var a=e.lastIndexOf("."),n=e.slice(0,a),s=e.slice(a+1),o=t.get(n||"");return!!(o&&typeof o[s]==="function"&&o[s]._sapUiLazyLoader)};sap.ui.resource=function(e,a){r(typeof e==="string","sLibraryName must be a string");r(typeof a==="string","sResourcePath must be a string");return sap.ui.require.toUrl((String(e).replace(/\./g,"/")+"/"+a).replace(/^\/*/,""))};sap.ui.localResources=function(e){r(e,"sNamespace must not be empty");var a={};a[e.replace(/\./g,"/")]="./"+e.replace(/\./g,"/");sap.ui.loader.config({paths:a})};return s});
 /*!
  * OpenUI5
  * (c) Copyright 2025 SAP SE or an SAP affiliate company.

package/app/dashboard/resources/sap-ui-core.js

@@ -344,7 +344,7 @@ sap.ui.predefine("sap/base/util/uid", [],function(){"use strict";var e=0;var n=f
  * (c) Copyright 2025 SAP SE or an SAP affiliate company.
  * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
  */
-sap.ui.predefine("sap/ui/Global", ["sap/ui/VersionInfo","sap/base/Log","sap/base/assert","sap/base/util/ObjectPath"],function(e,a,r,t){"use strict";if(globalThis.OpenAjax&&globalThis.OpenAjax.hub){OpenAjax.hub.registerLibrary("sap","http://www.sap.com/","0.1",{})}var n;let s={version:"1.136.0",buildinfo:{lastchange:"",buildtime:"20260710-1901"}};s=Object.assign(sap.ui,s);var o=sap.ui.loader._.getSyncCallBehavior();sap.ui.getVersionInfo=function(r){if(r&&r.async){a.info("Do not use deprecated function 'sap.ui.getVersionInfo'. Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead")}else{a.warning("Do not use deprecated function 'sap.ui.getVersionInfo' synchronously! Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead","Deprecation",null,function(){return{type:"sap.ui.getVersionInfo",name:"Global"}})}return e._load(r)};sap.ui.namespace=function(e){r(false,"sap.ui.namespace is long time deprecated and shouldn't be used");return t.create(e)};sap.ui.lazyRequire=function(e,s,i){r(typeof e==="string"&&e,"lazyRequire: sClassName must be a non-empty string");r(!s||typeof s==="string","lazyRequire: sMethods must be empty or a string");if(o===2){a.error("[nosync] lazy stub creation ignored for '"+e+"'");return}var u=e.replace(/\//gi,"."),l=u.lastIndexOf("."),c=u.substr(0,l),p=u.substr(l+1),f=t.create(c),y=f[p],d=(s||"new").split(" "),b=d.indexOf("new");i=i||u;if(!y){if(b>=0){y=function(){if(o){if(o===1){a.error("[nosync] lazy stub for constructor '"+u+"' called")}}else{a.debug("lazy stub for constructor '"+u+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function","lazyRequire: oRealClass must be a function after loading");if(t._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"'has not been replaced by module '"+i+"'")}var s=Object.create(t.prototype);if(!(this instanceof y)){n=n||sap.ui.require("sap/ui/base/Object");if(n&&s instanceof n){a.error("Constructor "+e+' has been called without "new" operator!',null,null,function(){try{throw new Error}catch(e){return e}})}}var l=t.apply(s,arguments);if(l&&(typeof l==="function"||typeof l==="object")){s=l}return s};y._sapUiLazyLoader=true;d.splice(b,1)}else{y={}}f[p]=y}d.forEach(function(e){if(!y[e]){y[e]=function(){if(o){if(o===1){a.error("[no-sync] lazy stub for method '"+u+"."+e+"' called")}}else{a.debug("lazy stub for method '"+u+"."+e+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function"||typeof t==="object","lazyRequire: oRealClass must be a function or object after loading");r(typeof t[e]==="function","lazyRequire: method must be a function");if(t[e]._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"."+e+"' has not been replaced by loaded module '"+i+"'")}return t[e].apply(t,arguments)};y[e]._sapUiLazyLoader=true}})};sap.ui.lazyRequire._isStub=function(e){r(typeof e==="string"&&e,"lazyRequire._isStub: sClassName must be a non-empty string");var a=e.lastIndexOf("."),n=e.slice(0,a),s=e.slice(a+1),o=t.get(n||"");return!!(o&&typeof o[s]==="function"&&o[s]._sapUiLazyLoader)};sap.ui.resource=function(e,a){r(typeof e==="string","sLibraryName must be a string");r(typeof a==="string","sResourcePath must be a string");return sap.ui.require.toUrl((String(e).replace(/\./g,"/")+"/"+a).replace(/^\/*/,""))};sap.ui.localResources=function(e){r(e,"sNamespace must not be empty");var a={};a[e.replace(/\./g,"/")]="./"+e.replace(/\./g,"/");sap.ui.loader.config({paths:a})};return s});
+sap.ui.predefine("sap/ui/Global", ["sap/ui/VersionInfo","sap/base/Log","sap/base/assert","sap/base/util/ObjectPath"],function(e,a,r,t){"use strict";if(globalThis.OpenAjax&&globalThis.OpenAjax.hub){OpenAjax.hub.registerLibrary("sap","http://www.sap.com/","0.1",{})}var n;let s={version:"1.136.0",buildinfo:{lastchange:"",buildtime:"20260816-1454"}};s=Object.assign(sap.ui,s);var o=sap.ui.loader._.getSyncCallBehavior();sap.ui.getVersionInfo=function(r){if(r&&r.async){a.info("Do not use deprecated function 'sap.ui.getVersionInfo'. Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead")}else{a.warning("Do not use deprecated function 'sap.ui.getVersionInfo' synchronously! Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead","Deprecation",null,function(){return{type:"sap.ui.getVersionInfo",name:"Global"}})}return e._load(r)};sap.ui.namespace=function(e){r(false,"sap.ui.namespace is long time deprecated and shouldn't be used");return t.create(e)};sap.ui.lazyRequire=function(e,s,i){r(typeof e==="string"&&e,"lazyRequire: sClassName must be a non-empty string");r(!s||typeof s==="string","lazyRequire: sMethods must be empty or a string");if(o===2){a.error("[nosync] lazy stub creation ignored for '"+e+"'");return}var u=e.replace(/\//gi,"."),l=u.lastIndexOf("."),c=u.substr(0,l),p=u.substr(l+1),f=t.create(c),y=f[p],d=(s||"new").split(" "),b=d.indexOf("new");i=i||u;if(!y){if(b>=0){y=function(){if(o){if(o===1){a.error("[nosync] lazy stub for constructor '"+u+"' called")}}else{a.debug("lazy stub for constructor '"+u+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function","lazyRequire: oRealClass must be a function after loading");if(t._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"'has not been replaced by module '"+i+"'")}var s=Object.create(t.prototype);if(!(this instanceof y)){n=n||sap.ui.require("sap/ui/base/Object");if(n&&s instanceof n){a.error("Constructor "+e+' has been called without "new" operator!',null,null,function(){try{throw new Error}catch(e){return e}})}}var l=t.apply(s,arguments);if(l&&(typeof l==="function"||typeof l==="object")){s=l}return s};y._sapUiLazyLoader=true;d.splice(b,1)}else{y={}}f[p]=y}d.forEach(function(e){if(!y[e]){y[e]=function(){if(o){if(o===1){a.error("[no-sync] lazy stub for method '"+u+"."+e+"' called")}}else{a.debug("lazy stub for method '"+u+"."+e+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function"||typeof t==="object","lazyRequire: oRealClass must be a function or object after loading");r(typeof t[e]==="function","lazyRequire: method must be a function");if(t[e]._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"."+e+"' has not been replaced by loaded module '"+i+"'")}return t[e].apply(t,arguments)};y[e]._sapUiLazyLoader=true}})};sap.ui.lazyRequire._isStub=function(e){r(typeof e==="string"&&e,"lazyRequire._isStub: sClassName must be a non-empty string");var a=e.lastIndexOf("."),n=e.slice(0,a),s=e.slice(a+1),o=t.get(n||"");return!!(o&&typeof o[s]==="function"&&o[s]._sapUiLazyLoader)};sap.ui.resource=function(e,a){r(typeof e==="string","sLibraryName must be a string");r(typeof a==="string","sResourcePath must be a string");return sap.ui.require.toUrl((String(e).replace(/\./g,"/")+"/"+a).replace(/^\/*/,""))};sap.ui.localResources=function(e){r(e,"sNamespace must not be empty");var a={};a[e.replace(/\./g,"/")]="./"+e.replace(/\./g,"/");sap.ui.loader.config({paths:a})};return s});
 /*!
  * OpenUI5
  * (c) Copyright 2025 SAP SE or an SAP affiliate company.

package/app/dashboard/resources/sap-ui-custom.js

@@ -1657,7 +1657,7 @@ sap.ui.predefine("sap/tnt/library", ["./IllustratedMessageType","sap/ui/base/Dat
  * (c) Copyright 2025 SAP SE or an SAP affiliate company.
  * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
  */
-sap.ui.predefine("sap/ui/Global", ["sap/ui/VersionInfo","sap/base/Log","sap/base/assert","sap/base/util/ObjectPath"],function(e,a,r,t){"use strict";if(globalThis.OpenAjax&&globalThis.OpenAjax.hub){OpenAjax.hub.registerLibrary("sap","http://www.sap.com/","0.1",{})}var n;let s={version:"1.136.0",buildinfo:{lastchange:"",buildtime:"20260710-1901"}};s=Object.assign(sap.ui,s);var o=sap.ui.loader._.getSyncCallBehavior();sap.ui.getVersionInfo=function(r){if(r&&r.async){a.info("Do not use deprecated function 'sap.ui.getVersionInfo'. Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead")}else{a.warning("Do not use deprecated function 'sap.ui.getVersionInfo' synchronously! Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead","Deprecation",null,function(){return{type:"sap.ui.getVersionInfo",name:"Global"}})}return e._load(r)};sap.ui.namespace=function(e){r(false,"sap.ui.namespace is long time deprecated and shouldn't be used");return t.create(e)};sap.ui.lazyRequire=function(e,s,i){r(typeof e==="string"&&e,"lazyRequire: sClassName must be a non-empty string");r(!s||typeof s==="string","lazyRequire: sMethods must be empty or a string");if(o===2){a.error("[nosync] lazy stub creation ignored for '"+e+"'");return}var u=e.replace(/\//gi,"."),l=u.lastIndexOf("."),c=u.substr(0,l),p=u.substr(l+1),f=t.create(c),y=f[p],d=(s||"new").split(" "),b=d.indexOf("new");i=i||u;if(!y){if(b>=0){y=function(){if(o){if(o===1){a.error("[nosync] lazy stub for constructor '"+u+"' called")}}else{a.debug("lazy stub for constructor '"+u+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function","lazyRequire: oRealClass must be a function after loading");if(t._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"'has not been replaced by module '"+i+"'")}var s=Object.create(t.prototype);if(!(this instanceof y)){n=n||sap.ui.require("sap/ui/base/Object");if(n&&s instanceof n){a.error("Constructor "+e+' has been called without "new" operator!',null,null,function(){try{throw new Error}catch(e){return e}})}}var l=t.apply(s,arguments);if(l&&(typeof l==="function"||typeof l==="object")){s=l}return s};y._sapUiLazyLoader=true;d.splice(b,1)}else{y={}}f[p]=y}d.forEach(function(e){if(!y[e]){y[e]=function(){if(o){if(o===1){a.error("[no-sync] lazy stub for method '"+u+"."+e+"' called")}}else{a.debug("lazy stub for method '"+u+"."+e+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function"||typeof t==="object","lazyRequire: oRealClass must be a function or object after loading");r(typeof t[e]==="function","lazyRequire: method must be a function");if(t[e]._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"."+e+"' has not been replaced by loaded module '"+i+"'")}return t[e].apply(t,arguments)};y[e]._sapUiLazyLoader=true}})};sap.ui.lazyRequire._isStub=function(e){r(typeof e==="string"&&e,"lazyRequire._isStub: sClassName must be a non-empty string");var a=e.lastIndexOf("."),n=e.slice(0,a),s=e.slice(a+1),o=t.get(n||"");return!!(o&&typeof o[s]==="function"&&o[s]._sapUiLazyLoader)};sap.ui.resource=function(e,a){r(typeof e==="string","sLibraryName must be a string");r(typeof a==="string","sResourcePath must be a string");return sap.ui.require.toUrl((String(e).replace(/\./g,"/")+"/"+a).replace(/^\/*/,""))};sap.ui.localResources=function(e){r(e,"sNamespace must not be empty");var a={};a[e.replace(/\./g,"/")]="./"+e.replace(/\./g,"/");sap.ui.loader.config({paths:a})};return s});
+sap.ui.predefine("sap/ui/Global", ["sap/ui/VersionInfo","sap/base/Log","sap/base/assert","sap/base/util/ObjectPath"],function(e,a,r,t){"use strict";if(globalThis.OpenAjax&&globalThis.OpenAjax.hub){OpenAjax.hub.registerLibrary("sap","http://www.sap.com/","0.1",{})}var n;let s={version:"1.136.0",buildinfo:{lastchange:"",buildtime:"20260816-1454"}};s=Object.assign(sap.ui,s);var o=sap.ui.loader._.getSyncCallBehavior();sap.ui.getVersionInfo=function(r){if(r&&r.async){a.info("Do not use deprecated function 'sap.ui.getVersionInfo'. Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead")}else{a.warning("Do not use deprecated function 'sap.ui.getVersionInfo' synchronously! Use"+" 'sap/ui/VersionInfo' module's asynchronous .load function instead","Deprecation",null,function(){return{type:"sap.ui.getVersionInfo",name:"Global"}})}return e._load(r)};sap.ui.namespace=function(e){r(false,"sap.ui.namespace is long time deprecated and shouldn't be used");return t.create(e)};sap.ui.lazyRequire=function(e,s,i){r(typeof e==="string"&&e,"lazyRequire: sClassName must be a non-empty string");r(!s||typeof s==="string","lazyRequire: sMethods must be empty or a string");if(o===2){a.error("[nosync] lazy stub creation ignored for '"+e+"'");return}var u=e.replace(/\//gi,"."),l=u.lastIndexOf("."),c=u.substr(0,l),p=u.substr(l+1),f=t.create(c),y=f[p],d=(s||"new").split(" "),b=d.indexOf("new");i=i||u;if(!y){if(b>=0){y=function(){if(o){if(o===1){a.error("[nosync] lazy stub for constructor '"+u+"' called")}}else{a.debug("lazy stub for constructor '"+u+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function","lazyRequire: oRealClass must be a function after loading");if(t._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"'has not been replaced by module '"+i+"'")}var s=Object.create(t.prototype);if(!(this instanceof y)){n=n||sap.ui.require("sap/ui/base/Object");if(n&&s instanceof n){a.error("Constructor "+e+' has been called without "new" operator!',null,null,function(){try{throw new Error}catch(e){return e}})}}var l=t.apply(s,arguments);if(l&&(typeof l==="function"||typeof l==="object")){s=l}return s};y._sapUiLazyLoader=true;d.splice(b,1)}else{y={}}f[p]=y}d.forEach(function(e){if(!y[e]){y[e]=function(){if(o){if(o===1){a.error("[no-sync] lazy stub for method '"+u+"."+e+"' called")}}else{a.debug("lazy stub for method '"+u+"."+e+"' called.")}sap.ui.requireSync(i.replace(/\./g,"/"));var t=f[p];r(typeof t==="function"||typeof t==="object","lazyRequire: oRealClass must be a function or object after loading");r(typeof t[e]==="function","lazyRequire: method must be a function");if(t[e]._sapUiLazyLoader){throw new Error("lazyRequire: stub '"+u+"."+e+"' has not been replaced by loaded module '"+i+"'")}return t[e].apply(t,arguments)};y[e]._sapUiLazyLoader=true}})};sap.ui.lazyRequire._isStub=function(e){r(typeof e==="string"&&e,"lazyRequire._isStub: sClassName must be a non-empty string");var a=e.lastIndexOf("."),n=e.slice(0,a),s=e.slice(a+1),o=t.get(n||"");return!!(o&&typeof o[s]==="function"&&o[s]._sapUiLazyLoader)};sap.ui.resource=function(e,a){r(typeof e==="string","sLibraryName must be a string");r(typeof a==="string","sResourcePath must be a string");return sap.ui.require.toUrl((String(e).replace(/\./g,"/")+"/"+a).replace(/^\/*/,""))};sap.ui.localResources=function(e){r(e,"sNamespace must not be empty");var a={};a[e.replace(/\./g,"/")]="./"+e.replace(/\./g,"/");sap.ui.loader.config({paths:a})};return s});
 /*!
  * OpenUI5
  * (c) Copyright 2025 SAP SE or an SAP affiliate company.

package/cds-plugin.js

@@ -2,11 +2,25 @@ const cds = require('@sap/cds')
 const { fs, path } = cds.utils;
 const CachingService = require('./lib/CachingService')
 const { scanCachingAnnotations } = require('./lib/util')
-const { getCachingRequiresEntries } = require('./lib/config-normalizer')
+const { getCachingRequiresEntries, detectMisplacedKeyManagement } = require('./lib/config-normalizer')
 const { resolvePluginRoots } = require('./lib/plugin-roots')
 
 const LOG = cds.log("cds-caching");
 
+/**
+ * Parsed project package.json, or an empty object when unreadable.
+ * @returns {object}
+ */
+function readProjectPackage() {
+    try {
+        const pkgPath = path.join(cds.root, 'package.json')
+        if (!fs.existsSync(pkgPath)) return {}
+        return JSON.parse(fs.readFileSync(pkgPath, 'utf8'))
+    } catch {
+        return {}
+    }
+}
+
 // Auto-register plugin entity models based on service configuration.
 // See docs/feature-activation.md for reuse vs project-owned activation.
 const cachingEntries = getCachingRequiresEntries(cds.env.requires ?? {})
@@ -22,6 +36,9 @@ for (const root of pluginRoots) {
 }
 for (const message of warnings) LOG.warn(message)
 
+const misplacedKeyManagement = detectMisplacedKeyManagement(cds.env, readProjectPackage())
+if (misplacedKeyManagement) LOG.warn(misplacedKeyManagement)
+
 cds.on('served', scanCachingAnnotations)
 
 if (reuseDashboard) {
@@ -35,7 +52,16 @@ if (reuseDashboard) {
         );
     }
     cds.once('bootstrap', (app) => {
-        app.use('/caching-dashboard', require('express').static(dashboardPath));
+        // Run CAP's middlewares first so cds.context.user is populated, then gate
+        // the static assets on it.
+        const { requireAuthenticatedUser, capRequestMiddlewares } = require('./lib/dashboard-guard');
+
+        app.use(
+            '/caching-dashboard',
+            ...capRequestMiddlewares(),
+            requireAuthenticatedUser,
+            require('express').static(dashboardPath)
+        );
         (app._app_links ??= []).push('/caching-dashboard');
         LOG.info("Serving cds-caching dashboard at /caching-dashboard");
     });
@@ -56,7 +82,6 @@ cds.build?.register?.('cds-caching', class CachingBuildPlugin extends cds.build.
     clean() { }
 
     static hasTask() {
-        cds.log('cds-caching').info('hasTask', cds.env.requires);
         const requires = cds.env.requires || {};
         const dbKind = requires.db?.kind || '';
         const isHanaDB = dbKind === 'hana' || dbKind === 'sql';

package/index.cds

@@ -2,13 +2,26 @@ using from './db/statistics';
 
 context plugin.cds_caching {
 
-    @impl: 'cds-caching/srv/caching-api-service'
+    /**
+     * Management API for cache entries and metrics.
+     *
+     * Guarded with `authenticated-user` by default, because these operations can
+     * read and flush cache contents. Override in your own model to require a
+     * dedicated role instead:
+     *
+     *   annotate plugin.cds_caching.CachingApiService with @requires: 'CacheAdmin';
+     */
+    @impl    : 'cds-caching/srv/caching-api-service'
+    @requires: 'authenticated-user'
     service CachingApiService {
 
+        // Writes go through the bound actions below, never through CRUD, so that
+        // config rows (metricsEnabled, config) cannot be tampered with directly.
+        @readonly
         entity Caches     as projection on plugin.cds_caching.Caches
             actions {
 
-                function getEntries()                                          returns array of {
+                function getEntries(top : Integer, skip : Integer)             returns array of {
                     entryKey  : String;
                     value     : String;
                     timestamp : DateTime;

package/lib/CachingService.js

@@ -23,6 +23,9 @@ class CachingService extends cds.Service {
             credentials: {},
             namespace: null,
             throwOnErrors: false,
+            // When enabled, read-through HTTP responses carry the full cache key in
+            // `x-sap-cap-cache-key`. Useful for debugging, unsafe in production.
+            debugHeaders: false,
             // When enabled, basic cache operations (`get`, `set`, `delete`, ...)
             // will be executed in a dedicated cache transaction (`cache.tx()`),
             // isolating them from the caller's request transaction (e.g. concurrent BEFORE handlers).

package/lib/config-normalizer.js

@@ -109,6 +109,7 @@ function getStatisticsHandlerOptions(metrics) {
     if (metrics.persistenceInterval != null) opts.persistenceInterval = metrics.persistenceInterval
     if (metrics.maxLatencies != null) opts.maxLatencies = metrics.maxLatencies
     if (metrics.maxKeyMetrics != null) opts.maxKeyMetrics = metrics.maxKeyMetrics
+    if (metrics.maxMetricFieldLength != null) opts.maxMetricFieldLength = metrics.maxMetricFieldLength
     if (metrics.enabled === true) opts.metricsEnabled = true
     if (metrics.keyMetricsEnabled === true) opts.keyMetricsEnabled = true
     return opts
@@ -122,10 +123,37 @@ function isMetricsConfigured(normalized) {
     return normalized.metrics != null
 }
 
+/**
+ * Detect a `keyManagement` block placed outside `cds.requires.<cache>`.
+ *
+ * Releases up to 2.0.2 documented this as a top-level `"cds-caching"` key, which
+ * the runtime never read — so keys silently stayed context-free even though the
+ * project looked configured for user-aware caching. Warn loudly instead.
+ *
+ * @param {object} [env={}] - cds.env
+ * @param {object} [projectPackage={}] - Parsed project package.json
+ * @returns {string|null} Warning message, or null when nothing is misplaced
+ */
+function detectMisplacedKeyManagement(env = {}, projectPackage = {}) {
+    const misplaced =
+        env['cds-caching']?.keyManagement ??
+        projectPackage['cds-caching']?.keyManagement
+
+    if (!misplaced) return null
+
+    return warnOnce(
+        'misplaced-keyManagement',
+        'cds-caching: a "cds-caching.keyManagement" block was found outside "cds.requires", where it is ignored. ' +
+        'Cache keys are therefore NOT user/tenant/locale aware. Move it into the individual cache config, e.g. ' +
+        '{"cds":{"requires":{"caching":{"keyManagement":{"isUserAware":true}}}}}. See docs/key-management.md.'
+    )
+}
+
 module.exports = {
     normalizeCachingConfig,
     getCachingRequiresEntries,
     getStatisticsHandlerOptions,
     isMetricsConfigured,
+    detectMisplacedKeyManagement,
     resetDeprecationWarnings,
 }

package/lib/dashboard-guard.js

@@ -0,0 +1,32 @@
+const cds = require('@sap/cds')
+
+/**
+ * Express guard requiring an authenticated user.
+ *
+ * The dashboard is served as static files outside CAP's service adapters, so it
+ * inherits no authorization from the model. Restricting `CachingApiService` alone
+ * would leave this route open.
+ *
+ * @param {object} req - Express request
+ * @param {object} res - Express response
+ * @param {Function} next - Downstream handler
+ */
+function requireAuthenticatedUser(req, res, next) {
+    const user = cds.context?.user
+    if (user?.is?.('authenticated-user')) return next()
+
+    res.status(401).set('WWW-Authenticate', 'Basic realm="cds-caching"').end()
+}
+
+/**
+ * CAP's own request middlewares (context, trace, auth, model), flattened and
+ * compacted so they can be spread into an `app.use()` call. These populate
+ * `cds.context.user`, which the guard above depends on.
+ *
+ * @returns {Function[]}
+ */
+function capRequestMiddlewares() {
+    return (cds.middlewares?.before ?? []).flat().filter(Boolean)
+}
+
+module.exports = { requireAuthenticatedUser, capRequestMiddlewares }

package/lib/operations/CapOperations.js

@@ -1,5 +1,6 @@
 const TagResolver = require('../support/TagResolver');
 const telemetry = require('../support/Telemetry');
+const { redactHeaders } = require('../support/metricsSanitizer');
 /**
  * Manages CAP-specific cache operations
  */
@@ -19,6 +20,16 @@ class CapOperations {
         this.log = log || console;
     }
 
+    /**
+     * Whether the full cache key may be echoed back in the `x-sap-cap-cache-key`
+     * response header. Off unless opted in, because the key is enough to target a
+     * specific cached entry from outside.
+     * @returns {boolean}
+     */
+    debugHeadersEnabled() {
+        return this.runtimeConfigManager?.options?.debugHeaders === true;
+    }
+
     /**
      * Safely execute cache operations with error handling
      * @param {Function} operation - The cache operation to execute
@@ -140,7 +151,7 @@ class CapOperations {
                 subject: request.subject,
                 query: request.query,
                 event: request.event,
-                headers: request.headers,
+                headers: redactHeaders(request.headers),
             }),
             cacheOptions: JSON.stringify(requestOptions)
         };
@@ -283,7 +294,9 @@ class CapOperations {
                     req.cacheOptions = req.event ? this.extractFunctionCacheOptions(req, arguments[2]) : this.extractEntityCacheOptions(req, arguments[2]);
 
                     req.cacheKey = this.keyManager.createKey(req, {}, req.cacheOptions.key);
-                    req.res?.setHeader('x-sap-cap-cache-key', req.cacheKey);
+                    if (this.debugHeadersEnabled()) {
+                        req.res?.setHeader('x-sap-cap-cache-key', req.cacheKey);
+                    }
 
                     // Track cache operation timing
                     const startTime = process.hrtime();

package/lib/support/CacheStatisticsHandler.js

@@ -4,6 +4,7 @@ const StatisticsPersistenceManager = require('./StatisticsPersistenceManager');
 const telemetry = require('./Telemetry');
 const { query } = require('@sap/cds/lib/env/defaults');
 const { isPluginModelAvailable } = require('../util');
+const { truncateMetadataFields, MAX_FIELD_LENGTH } = require('./metricsSanitizer');
 
 /**
  * Class to handle all things caching statistics.
@@ -17,6 +18,7 @@ class CacheStatisticsHandler {
             persistenceInterval: 10 * 1000, // 10 seconds 
             maxLatencies: 2000,
             maxKeyMetrics: 1000, // Track top accessed keys
+            maxMetricFieldLength: MAX_FIELD_LENGTH, // Cap per free-text KeyMetrics field
             keyMetricsEnabled: false,
             metricsEnabled: false, // Main metrics enabled flag
             ...options
@@ -418,6 +420,10 @@ class CacheStatisticsHandler {
             return;
         }
 
+        // Single choke point for every operation path, so no caller can persist
+        // an unbounded serialized request into KeyMetrics.
+        metadata = truncateMetadataFields(metadata, this.options.maxMetricFieldLength);
+
         if (!this.stats.current.keyAccess.has(key)) {
             this.log.debug(`Creating new key stats for: ${key}`);
             this.stats.current.keyAccess.set(key, {

package/lib/support/StatisticsPersistenceManager.js

@@ -37,13 +37,14 @@ class StatisticsPersistenceManager {
         }
 
         try {
-            const existingHourly = await SELECT.one.from("plugin_cds_caching_Metrics")
+            const { Metrics } = cds.entities('plugin.cds_caching');
+            const existingHourly = await SELECT.one.from(Metrics)
                 .where({ ID: hourlyId, cache: this.cacheName });
 
             if (!existingHourly) {
-                await this._createHourlyStats(stats, hourlyId, hourlyTimestamp);
+                await this._createHourlyStats(Metrics, stats, hourlyId, hourlyTimestamp);
             } else {
-                await this._updateHourlyStats(stats, hourlyId, existingHourly);
+                await this._updateHourlyStats(Metrics, stats, hourlyId, existingHourly);
             }
         } catch (error) {
             this.log.error(`Failed to persist hourly stats for cache ${this.cacheName}:`, error);
@@ -66,9 +67,10 @@ class StatisticsPersistenceManager {
 
         this.log.debug(`Persisting ${keyAccess.size} key access records for cache ${this.cacheName}`);
 
+        const { KeyMetrics } = cds.entities('plugin.cds_caching');
         for (const [key, keyStats] of keyAccess) {
             try {
-                await this._persistKeyMetric(key, keyStats);
+                await this._persistKeyMetric(KeyMetrics, key, keyStats);
             } catch (error) {
                 this.log.error(`Failed to persist key metric for key ${key}:`, error);
             }
@@ -101,8 +103,8 @@ class StatisticsPersistenceManager {
      * Create new hourly stats record
      * @private
      */
-    async _createHourlyStats(stats, hourlyId, hourlyTimestamp) {
-        await INSERT.into('plugin_cds_caching_Metrics').entries([{
+    async _createHourlyStats(Metrics, stats, hourlyId, hourlyTimestamp) {
+        await INSERT.into(Metrics).entries([{
             ID: hourlyId,
             cache: this.cacheName,
             timestamp: hourlyTimestamp,
@@ -153,10 +155,10 @@ class StatisticsPersistenceManager {
      * Update existing hourly stats record
      * @private
      */
-    async _updateHourlyStats(stats, hourlyId, existingHourly) {
+    async _updateHourlyStats(Metrics, stats, hourlyId, existingHourly) {
         const updatedStats = this._calculateUpdatedStats(stats, existingHourly);
 
-        await UPDATE('plugin_cds_caching_Metrics')
+        await UPDATE(Metrics)
             .set(updatedStats)
             .where({ ID: hourlyId, cache: this.cacheName });
         this.log.debug(`Updated existing hourly stats for cache ${this.cacheName}`);
@@ -169,19 +171,19 @@ class StatisticsPersistenceManager {
     _calculateUpdatedStats(stats, existingHourly) {
         const updatedStats = {
             // Read-through metrics
-            hits: existingHourly.hits + stats.hits,
-            misses: existingHourly.misses + stats.misses,
-            errors: existingHourly.errors + stats.errors,
-            totalRequests: existingHourly.totalRequests + stats.totalRequests,
+            hits: (Number(existingHourly.hits) || 0) + stats.hits,
+            misses: (Number(existingHourly.misses) || 0) + stats.misses,
+            errors: (Number(existingHourly.errors) || 0) + stats.errors,
+            totalRequests: (Number(existingHourly.totalRequests) || 0) + stats.totalRequests,
 
             // Native function metrics
-            nativeSets: existingHourly.nativeSets + stats.nativeSets,
-            nativeGets: existingHourly.nativeGets + stats.nativeGets,
-            nativeDeletes: existingHourly.nativeDeletes + stats.nativeDeletes,
-            nativeClears: existingHourly.nativeClears + stats.nativeClears,
-            nativeDeleteByTags: existingHourly.nativeDeleteByTags + stats.nativeDeleteByTags,
-            nativeErrors: existingHourly.nativeErrors + stats.nativeErrors,
-            totalNativeOperations: existingHourly.totalNativeOperations + stats.totalNativeOperations,
+            nativeSets: (Number(existingHourly.nativeSets) || 0) + stats.nativeSets,
+            nativeGets: (Number(existingHourly.nativeGets) || 0) + stats.nativeGets,
+            nativeDeletes: (Number(existingHourly.nativeDeletes) || 0) + stats.nativeDeletes,
+            nativeClears: (Number(existingHourly.nativeClears) || 0) + stats.nativeClears,
+            nativeDeleteByTags: (Number(existingHourly.nativeDeleteByTags) || 0) + stats.nativeDeleteByTags,
+            nativeErrors: (Number(existingHourly.nativeErrors) || 0) + stats.nativeErrors,
+            totalNativeOperations: (Number(existingHourly.totalNativeOperations) || 0) + stats.totalNativeOperations,
 
             // Common metrics
             memoryUsage: stats.memoryUsage,
@@ -194,7 +196,7 @@ class StatisticsPersistenceManager {
 
         // Weighted average for hit latency
         if (updatedStats.hits > 0) {
-            const existingHitLatencySum = existingHourly.avgHitLatency * existingHourly.hits;
+            const existingHitLatencySum = (Number(existingHourly.avgHitLatency) || 0) * (Number(existingHourly.hits) || 0);
             const newHitLatencySum = stats.avgHitLatency * stats.hits;
             updatedStats.avgHitLatency = (existingHitLatencySum + newHitLatencySum) / updatedStats.hits;
         } else {
@@ -203,7 +205,7 @@ class StatisticsPersistenceManager {
 
         // Weighted average for miss latency
         if (updatedStats.misses > 0) {
-            const existingMissLatencySum = existingHourly.avgMissLatency * existingHourly.misses;
+            const existingMissLatencySum = (Number(existingHourly.avgMissLatency) || 0) * (Number(existingHourly.misses) || 0);
             const newMissLatencySum = stats.avgMissLatency * stats.misses;
             updatedStats.avgMissLatency = (existingMissLatencySum + newMissLatencySum) / updatedStats.misses;
         } else {
@@ -211,12 +213,12 @@ class StatisticsPersistenceManager {
         }
 
         // Weighted average for read-through latency (combined hits and misses)
-        const existingCount = (existingHourly.hits || 0) + (existingHourly.misses || 0);
+        const existingCount = (Number(existingHourly.hits) || 0) + (Number(existingHourly.misses) || 0);
         const newCount = (stats.hits || 0) + (stats.misses || 0);
         const totalCount = existingCount + newCount;
         if (totalCount > 0) {
             updatedStats.avgReadThroughLatency =
-                ((existingHourly.avgReadThroughLatency || 0) * existingCount +
+                ((Number(existingHourly.avgReadThroughLatency) || 0) * existingCount +
                  (stats.avgReadThroughLatency || 0) * newCount) / totalCount;
         } else {
             updatedStats.avgReadThroughLatency = 0;
@@ -242,10 +244,10 @@ class StatisticsPersistenceManager {
         }
 
         // Update percentiles (use max/min of existing and current, with min using mergeMin)
-        updatedStats.maxHitLatency = Math.max(existingHourly.maxHitLatency || 0, stats.maxHitLatency || 0);
-        updatedStats.maxMissLatency = Math.max(existingHourly.maxMissLatency || 0, stats.maxMissLatency || 0);
-        updatedStats.minHitLatency = mergeMin(existingHourly.minHitLatency, stats.minHitLatency);
-        updatedStats.minMissLatency = mergeMin(existingHourly.minMissLatency, stats.minMissLatency);
+        updatedStats.maxHitLatency = Math.max(Number(existingHourly.maxHitLatency) || 0, stats.maxHitLatency || 0);
+        updatedStats.maxMissLatency = Math.max(Number(existingHourly.maxMissLatency) || 0, stats.maxMissLatency || 0);
+        updatedStats.minHitLatency = mergeMin(Number(existingHourly.minHitLatency) || 0, stats.minHitLatency);
+        updatedStats.minMissLatency = mergeMin(Number(existingHourly.minMissLatency) || 0, stats.minMissLatency);
 
         return updatedStats;
     }
@@ -254,16 +256,16 @@ class StatisticsPersistenceManager {
      * Persist a single key metric
      * @private
      */
-    async _persistKeyMetric(key, keyStats) {
+    async _persistKeyMetric(KeyMetrics, key, keyStats) {
         const keyId = `key:${this.cacheName}:${key}`;
 
-        const existingKey = await SELECT.one.from("plugin_cds_caching_KeyMetrics")
+        const existingKey = await SELECT.one.from(KeyMetrics)
             .where({ ID: keyId, cache: this.cacheName, keyName: key });
 
         if (!existingKey) {
-            await this._createKeyMetric(key, keyStats, keyId);
+            await this._createKeyMetric(KeyMetrics, key, keyStats, keyId);
         } else {
-            await this._updateKeyMetric(key, keyStats, keyId, existingKey);
+            await this._updateKeyMetric(KeyMetrics, key, keyStats, keyId, existingKey);
         }
     }
 
@@ -271,9 +273,9 @@ class StatisticsPersistenceManager {
      * Create new key metric record
      * @private
      */
-    async _createKeyMetric(key, keyStats, keyId) {
+    async _createKeyMetric(KeyMetrics, key, keyStats, keyId) {
 
-        await INSERT.into('plugin_cds_caching_KeyMetrics').entries([{
+        await INSERT.into(KeyMetrics).entries([{
             ID: keyId,
             cache: this.cacheName,
             keyName: key,
@@ -339,41 +341,41 @@ class StatisticsPersistenceManager {
      * Update existing key metric record
      * @private
      */
-    async _updateKeyMetric(key, keyStats, keyId, existingKey) {
-        const totalHits = existingKey.hits + keyStats.hits;
-        const totalMisses = existingKey.misses + keyStats.misses;
+    async _updateKeyMetric(KeyMetrics, key, keyStats, keyId, existingKey) {
+        const totalHits = (Number(existingKey.hits) || 0) + keyStats.hits;
+        const totalMisses = (Number(existingKey.misses) || 0) + keyStats.misses;
 
         const updatedKeyStats = {
             hits: totalHits,
             misses: totalMisses,
-            errors: (existingKey.errors || 0) + (keyStats.errors || 0),
+            errors: (Number(existingKey.errors) || 0) + (keyStats.errors || 0),
             totalRequests: totalHits + totalMisses,
             lastAccess: new Date(keyStats.lastAccess).toISOString(),
 
             // Native function metrics
-            nativeHits: (existingKey.nativeHits || 0) + (keyStats.nativeHits || 0),
-            nativeMisses: (existingKey.nativeMisses || 0) + (keyStats.nativeMisses || 0),
-            nativeSets: (existingKey.nativeSets || 0) + (keyStats.nativeSets || 0),
-            nativeDeletes: (existingKey.nativeDeletes || 0) + (keyStats.nativeDeletes || 0),
-            nativeClears: (existingKey.nativeClears || 0) + (keyStats.nativeClears || 0),
-            nativeDeleteByTags: (existingKey.nativeDeleteByTags || 0) + (keyStats.nativeDeleteByTags || 0),
-            nativeErrors: (existingKey.nativeErrors || 0) + (keyStats.nativeErrors || 0),
-            totalNativeOperations: (existingKey.totalNativeOperations || 0) + (keyStats.totalNativeOperations || 0),
+            nativeHits: (Number(existingKey.nativeHits) || 0) + (keyStats.nativeHits || 0),
+            nativeMisses: (Number(existingKey.nativeMisses) || 0) + (keyStats.nativeMisses || 0),
+            nativeSets: (Number(existingKey.nativeSets) || 0) + (keyStats.nativeSets || 0),
+            nativeDeletes: (Number(existingKey.nativeDeletes) || 0) + (keyStats.nativeDeletes || 0),
+            nativeClears: (Number(existingKey.nativeClears) || 0) + (keyStats.nativeClears || 0),
+            nativeDeleteByTags: (Number(existingKey.nativeDeleteByTags) || 0) + (keyStats.nativeDeleteByTags || 0),
+            nativeErrors: (Number(existingKey.nativeErrors) || 0) + (keyStats.nativeErrors || 0),
+            totalNativeOperations: (Number(existingKey.totalNativeOperations) || 0) + (keyStats.totalNativeOperations || 0),
 
             // Weighted average for hit latency
             avgHitLatency: totalHits > 0
-                ? ((existingKey.avgHitLatency * existingKey.hits) + (keyStats.avgHitLatency * keyStats.hits)) / totalHits
+                ? (((Number(existingKey.avgHitLatency) || 0) * (Number(existingKey.hits) || 0)) + (keyStats.avgHitLatency * keyStats.hits)) / totalHits
                 : 0,
             // Weighted average for miss latency
             avgMissLatency: totalMisses > 0
-                ? ((existingKey.avgMissLatency * existingKey.misses) + (keyStats.avgMissLatency * keyStats.misses)) / totalMisses
+                ? (((Number(existingKey.avgMissLatency) || 0) * (Number(existingKey.misses) || 0)) + (keyStats.avgMissLatency * keyStats.misses)) / totalMisses
                 : 0,
 
             // Update percentiles (use max/min of existing and current, with min using mergeMin)
-            minHitLatency: mergeMin(existingKey.minHitLatency, keyStats.minHitLatency),
-            maxHitLatency: Math.max(existingKey.maxHitLatency || 0, keyStats.maxHitLatency || 0),
-            minMissLatency: mergeMin(existingKey.minMissLatency, keyStats.minMissLatency),
-            maxMissLatency: Math.max(existingKey.maxMissLatency || 0, keyStats.maxMissLatency || 0)
+            minHitLatency: mergeMin(Number(existingKey.minHitLatency) || 0, keyStats.minHitLatency),
+            maxHitLatency: Math.max(Number(existingKey.maxHitLatency) || 0, keyStats.maxHitLatency || 0),
+            minMissLatency: mergeMin(Number(existingKey.minMissLatency) || 0, keyStats.minMissLatency),
+            maxMissLatency: Math.max(Number(existingKey.maxMissLatency) || 0, keyStats.maxMissLatency || 0)
         };
 
         // Update context information if new data is available
@@ -385,7 +387,7 @@ class StatisticsPersistenceManager {
         if (keyStats.user) updatedKeyStats.user = keyStats.user;
         if (keyStats.locale) updatedKeyStats.locale = keyStats.locale;
         if (keyStats.cacheOptions) updatedKeyStats.cacheOptions = keyStats.cacheOptions;    
-        await UPDATE('plugin_cds_caching_KeyMetrics')
+        await UPDATE(KeyMetrics)
             .set(updatedKeyStats)
             .where({ ID: keyId, cache: this.cacheName, keyName: key });
     }

package/lib/support/metricsSanitizer.js

@@ -0,0 +1,84 @@
+/**
+ * Sanitizing helpers for data that gets persisted into the KeyMetrics entity.
+ *
+ * KeyMetrics rows are long-lived and readable through the management API, so
+ * credentials must never reach them and single fields must not grow unbounded.
+ */
+
+/** Header names whose values are credentials or session material. */
+const SENSITIVE_HEADERS = new Set([
+    'authorization',
+    'proxy-authorization',
+    'cookie',
+    'set-cookie',
+    'x-api-key',
+    'apikey',
+    'x-csrf-token',
+    'x-xsrf-token',
+    'sap-passport',
+]);
+
+const REDACTED = '[redacted]';
+
+/** Default cap for free-text metric fields (metadata, query, subject, context). */
+const MAX_FIELD_LENGTH = 8192;
+
+/** Fields that carry serialized request/query detail and can grow without bound. */
+const TRUNCATED_FIELDS = ['metadata', 'query', 'subject', 'context', 'cacheOptions'];
+
+/**
+ * Copy headers with credential-bearing values replaced.
+ * @param {object} headers - Raw header map (case-insensitive keys)
+ * @returns {object|undefined} Redacted copy, or undefined if there was nothing to copy
+ */
+function redactHeaders(headers) {
+    if (!headers || typeof headers !== 'object') return undefined;
+
+    const safe = {};
+    for (const [name, value] of Object.entries(headers)) {
+        safe[name] = SENSITIVE_HEADERS.has(name.toLowerCase()) ? REDACTED : value;
+    }
+    return safe;
+}
+
+/**
+ * Truncate a single field to `max` characters, marking where it was cut.
+ * @param {any} value - Field value; non-strings are returned unchanged
+ * @param {number} [max=MAX_FIELD_LENGTH] - Maximum length to keep
+ * @returns {any}
+ */
+function truncateField(value, max = MAX_FIELD_LENGTH) {
+    if (typeof value !== 'string' || value.length <= max) return value;
+    return `${value.slice(0, max)}…[truncated ${value.length - max} chars]`;
+}
+
+/**
+ * Bound the free-text fields of a key-metrics metadata object.
+ * Returns the input unchanged when nothing needs truncating, so the common
+ * path allocates nothing.
+ * @param {object} metadata - Metadata as assembled by the operation layers
+ * @param {number} [max=MAX_FIELD_LENGTH] - Maximum length per field
+ * @returns {object}
+ */
+function truncateMetadataFields(metadata, max = MAX_FIELD_LENGTH) {
+    if (!metadata || typeof metadata !== 'object') return metadata;
+
+    let copy = null;
+    for (const field of TRUNCATED_FIELDS) {
+        const value = metadata[field];
+        if (typeof value === 'string' && value.length > max) {
+            copy ??= { ...metadata };
+            copy[field] = truncateField(value, max);
+        }
+    }
+    return copy ?? metadata;
+}
+
+module.exports = {
+    SENSITIVE_HEADERS,
+    REDACTED,
+    MAX_FIELD_LENGTH,
+    redactHeaders,
+    truncateField,
+    truncateMetadataFields,
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cds-caching",
-  "version": "2.0.1",
+  "version": "2.1.0",
   "description": "A caching plugin for SAP CAP applications",
   "repository": {
     "type": "git",

package/srv/caching-api-service.js

@@ -4,6 +4,13 @@ const { isPluginModelAvailable } = require('../lib/util')
 
 const DEFAULT_TENANT = '_default';
 
+/** Upper bound for `getEntries`, regardless of the requested `top`. */
+const MAX_ENTRIES_PER_PAGE = 1000;
+const DEFAULT_ENTRIES_PER_PAGE = 100;
+
+/** Upper bound for a single `setEntry` value, in bytes. */
+const MAX_ENTRY_VALUE_BYTES = 1024 * 1024;
+
 class CachingApiService extends cds.ApplicationService {
     log = cds.log('cds-caching');
 
@@ -20,8 +27,8 @@ class CachingApiService extends cds.ApplicationService {
         // Handle setMetricsEnabled action
         this.on('setMetricsEnabled', async (req) => {
             const { enabled } = req.data
-            const cache = req.params[0].name;
-            const cacheService = await cds.connect.to(cache);
+            const cacheService = await this._connectToCache(req);
+            const cache = this._cacheName(req);
             try {
                 await cacheService.setMetricsEnabled(enabled)
                 req.info(`Metrics ${enabled ? 'enabled' : 'disabled'} for cache ${cache}`);
@@ -35,8 +42,8 @@ class CachingApiService extends cds.ApplicationService {
         // Handle setKeyMetricsEnabled action
         this.on('setKeyMetricsEnabled', async (req) => {
             const { enabled } = req.data
-            const cache = req.params[0].name;
-            const cacheService = await cds.connect.to(cache);
+            const cacheService = await this._connectToCache(req);
+            const cache = this._cacheName(req);
             try {
                 await cacheService.setKeyMetricsEnabled(enabled)
                 req.info(`Key metrics ${enabled ? 'enabled' : 'disabled'} for cache ${cache}`);
@@ -49,17 +56,27 @@ class CachingApiService extends cds.ApplicationService {
 
         // Handle getCacheEntries function
         this.on('getEntries', async (req) => {
-            const cache = req.params[0].name;
+            const cacheService = await this._connectToCache(req);
+            const { top, skip } = req.data;
+
+            // Bounded on purpose: an unbounded iteration would pull the whole
+            // cache into memory and can be used to exhaust the server.
+            const requested = Number.isInteger(top) && top > 0 ? top : DEFAULT_ENTRIES_PER_PAGE;
+            const limit = Math.min(requested, MAX_ENTRIES_PER_PAGE);
+            const offset = Number.isInteger(skip) && skip > 0 ? skip : 0;
+
             try {
-                const cacheService = await cds.connect.to(cache);
                 const entries = [];
+                let seen = 0;
                 for await (const [key, value] of cacheService.iterator()) {
+                    if (seen++ < offset) continue;
                     entries.push({
                         entryKey: key,
                         value: JSON.stringify(value.value),
                         timestamp: value.timestamp,
                         tags: value.tags,
                     });
+                    if (entries.length >= limit) break;
                 }
                 return entries;
             } catch (error) {
@@ -71,8 +88,7 @@ class CachingApiService extends cds.ApplicationService {
         // Handle getCacheEntry function
         this.on('getEntry', async (req) => {
             const { key } = req.data;
-            const cache = req.params[0].name;
-            const cacheService = await cds.connect.to(cache);
+            const cacheService = await this._connectToCache(req);
             const value = await cacheService.get(key);
             return {
                 value: value,
@@ -82,8 +98,13 @@ class CachingApiService extends cds.ApplicationService {
         // Handle setCacheEntry action
         this.on('setEntry', async (req) => {
             const { key, value, ttl } = req.data;
-            const cache = req.params[0].name;
-            const cacheService = await cds.connect.to(cache);
+            const cacheService = await this._connectToCache(req);
+
+            const size = Buffer.byteLength(String(value ?? ''), 'utf8');
+            if (size > MAX_ENTRY_VALUE_BYTES) {
+                return req.reject(400, `Value exceeds the maximum of ${MAX_ENTRY_VALUE_BYTES} bytes (got ${size})`);
+            }
+
             await cacheService.set(key, value, { ttl: ttl });
             req.info(`Cache entry set successfully: ${key}`);
             return true;
@@ -92,8 +113,7 @@ class CachingApiService extends cds.ApplicationService {
         // Handle deleteCacheEntry action
         this.on('deleteEntry', async (req) => {
             const { key } = req.data;
-            const cache = req.params[0].name;
-            const cacheService = await cds.connect.to(cache);
+            const cacheService = await this._connectToCache(req);
             await cacheService.delete(key);
             req.info(`Cache entry deleted successfully: ${key}`);
             return true;
@@ -101,8 +121,8 @@ class CachingApiService extends cds.ApplicationService {
 
         // Handle clearCache action
         this.on('clear', async (req) => {
-            const cache = req.params[0].name;
-            const cacheService = await cds.connect.to(cache);
+            const cacheService = await this._connectToCache(req);
+            const cache = this._cacheName(req);
             await cacheService.clear();
             req.info(`Cache cleared successfully: ${cache}`);
             return true;
@@ -110,8 +130,8 @@ class CachingApiService extends cds.ApplicationService {
 
         // Handle clearKeyMetrics action
         this.on('clearKeyMetrics', async (req) => {
-            const cache = req.params[0].name;
-            const cacheService = await cds.connect.to(cache);
+            const cacheService = await this._connectToCache(req);
+            const cache = this._cacheName(req);
             await cacheService.clearKeyMetrics();
             req.info(`Key metrics cleared successfully: ${cache}`);
             return true;
@@ -119,8 +139,8 @@ class CachingApiService extends cds.ApplicationService {
 
         // Handle clearMetrics action
         this.on('clearMetrics', async (req) => {
-            const cache = req.params[0].name;
-            const cacheService = await cds.connect.to(cache);
+            const cacheService = await this._connectToCache(req);
+            const cache = this._cacheName(req);
             await cacheService.clearMetrics();
             req.info(`Metrics cleared successfully: ${cache}`);
             return true;
@@ -129,6 +149,46 @@ class CachingApiService extends cds.ApplicationService {
         await super.init()
     }
 
+    /**
+     * Names of all configured cds-caching services. Used as an allow-list so a
+     * caller cannot coerce `cds.connect.to()` into connecting to an unrelated
+     * business service by passing its name as the cache key.
+     * @returns {Set<string>}
+     */
+    _allowedCaches() {
+        return new Set(
+            Object.entries(cds.env.requires || {})
+                .filter(([, config]) => config?.impl === 'cds-caching')
+                .map(([name]) => name)
+        );
+    }
+
+    /**
+     * Name of the cache addressed by the request key.
+     * @param {object} req - Inbound request carrying the Caches key
+     * @returns {string|undefined}
+     */
+    _cacheName(req) {
+        const param = req.params?.[0];
+        return typeof param === 'string' ? param : param?.name;
+    }
+
+    /**
+     * Resolve the cache addressed by the request key and connect to it.
+     * Rejects with 404 for anything that is not a configured cache.
+     * @param {object} req - Inbound request carrying the Caches key
+     * @returns {Promise<object>} The connected CachingService
+     */
+    async _connectToCache(req) {
+        const name = this._cacheName(req);
+
+        if (!name || !this._allowedCaches().has(name)) {
+            return req.reject(404, `Unknown cache: ${name}`);
+        }
+
+        return cds.connect.to(name);
+    }
+
     /**
      * Ensure cache entries exist in the current tenant's DB.
      * Called lazily in MTX mode on first dashboard access.